# Flog Txt Version 1
# Analyzer Version: 3.2.2
# Analyzer Build Date: Jun 3 2020 08:38:37
# Log Creation Date: 14.06.2020 16:13:13.005
Process:
id = "1"
image_name = "ransomware.exe"
filename = "c:\\users\\fd1hvy\\desktop\\ransomware.exe"
page_root = "0x588a8000"
os_pid = "0x11b8"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "analysis_target"
parent_id = "0"
os_parent_pid = "0x560"
cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe\" "
cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
os_username = "NQDPDE\\FD1HVy"
bitness = "32"
os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 1
os_tid = 0x11d0
[0118.120] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
[0119.083] RoInitialize () returned 0x1
[0119.084] RoUninitialize () returned 0x0
[0124.176] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc151
[0124.177] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc198
[0125.566] GetCurrentProcess () returned 0xffffffff
[0125.567] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x53ebb4 | out: TokenHandle=0x53ebb4*=0x2b8) returned 1
[0125.594] GetCurrentProcess () returned 0xffffffff
[0125.595] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x53ec14, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x53ec14*=0x2c0) returned 1
[0126.685] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe.config", nBufferLength=0x105, lpBuffer=0x53e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe.config", lpFilePart=0x0) returned 0x2d
[0126.692] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x53e1b0 | out: phkResult=0x53e1b0*=0x0) returned 0x2
[0126.693] RegCloseKey (hKey=0x80000002) returned 0x0
[0127.415] GetCurrentProcess () returned 0xffffffff
[0127.415] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x53e7f0 | out: TokenHandle=0x53e7f0*=0xe4) returned 1
[0127.422] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x53e27c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e
[0127.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x53e7e8 | out: lpFileInformation=0x53e7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
[0127.426] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x53e248, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43
[0127.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x53e7f0 | out: lpFileInformation=0x53e7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
[0127.427] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x53e1e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43
[0127.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e728) returned 1
[0127.429] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
[0127.429] GetFileType (hFile=0x2d0) returned 0x1
[0127.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e724) returned 1
[0127.429] GetFileType (hFile=0x2d0) returned 0x1
[0127.547] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x53e774 | out: phkResult=0x53e774*=0x0) returned 0x2
[0127.547] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x53e774 | out: phkResult=0x53e774*=0x0) returned 0x2
[0127.550] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0x53e7e4 | out: lpFileSizeHigh=0x53e7e4*=0x0) returned 0x8c8f
[0127.550] ReadFile (in: hFile=0x2d0, lpBuffer=0x2299a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e7a0, lpOverlapped=0x0 | out: lpBuffer=0x2299a60*, lpNumberOfBytesRead=0x53e7a0*=0x1000, lpOverlapped=0x0) returned 1
[0127.567] ReadFile (in: hFile=0x2d0, lpBuffer=0x2299a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e64c, lpOverlapped=0x0 | out: lpBuffer=0x2299a60*, lpNumberOfBytesRead=0x53e64c*=0x1000, lpOverlapped=0x0) returned 1
[0127.570] ReadFile (in: hFile=0x2d0, lpBuffer=0x2299a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e500, lpOverlapped=0x0 | out: lpBuffer=0x2299a60*, lpNumberOfBytesRead=0x53e500*=0x1000, lpOverlapped=0x0) returned 1
[0127.570] ReadFile (in: hFile=0x2d0, lpBuffer=0x2299a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e500, lpOverlapped=0x0 | out: lpBuffer=0x2299a60*, lpNumberOfBytesRead=0x53e500*=0x1000, lpOverlapped=0x0) returned 1
[0127.571] ReadFile (in: hFile=0x2d0, lpBuffer=0x2299a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e500, lpOverlapped=0x0 | out: lpBuffer=0x2299a60*, lpNumberOfBytesRead=0x53e500*=0x1000, lpOverlapped=0x0) returned 1
[0127.571] ReadFile (in: hFile=0x2d0, lpBuffer=0x2299a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e438, lpOverlapped=0x0 | out: lpBuffer=0x2299a60*, lpNumberOfBytesRead=0x53e438*=0x1000, lpOverlapped=0x0) returned 1
[0127.578] ReadFile (in: hFile=0x2d0, lpBuffer=0x2299a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e5bc, lpOverlapped=0x0 | out: lpBuffer=0x2299a60*, lpNumberOfBytesRead=0x53e5bc*=0x1000, lpOverlapped=0x0) returned 1
[0127.580] ReadFile (in: hFile=0x2d0, lpBuffer=0x2299a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2299a60*, lpNumberOfBytesRead=0x53e4c8*=0x1000, lpOverlapped=0x0) returned 1
[0127.581] ReadFile (in: hFile=0x2d0, lpBuffer=0x2299a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2299a60*, lpNumberOfBytesRead=0x53e4c8*=0xc8f, lpOverlapped=0x0) returned 1
[0127.581] ReadFile (in: hFile=0x2d0, lpBuffer=0x2299a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e58c, lpOverlapped=0x0 | out: lpBuffer=0x2299a60*, lpNumberOfBytesRead=0x53e58c*=0x0, lpOverlapped=0x0) returned 1
[0127.581] CloseHandle (hObject=0x2d0) returned 1
[0127.583] GetCurrentProcess () returned 0xffffffff
[0127.583] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x53e938 | out: TokenHandle=0x53e938*=0x2d0) returned 1
[0127.584] GetCurrentProcess () returned 0xffffffff
[0127.584] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x53e938 | out: TokenHandle=0x53e938*=0x2d8) returned 1
[0127.585] GetCurrentProcess () returned 0xffffffff
[0127.585] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x53e7f0 | out: TokenHandle=0x53e7f0*=0x2dc) returned 1
[0127.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\ransomware.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x53e7e8 | out: lpFileInformation=0x53e7e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0127.585] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe.config", nBufferLength=0x105, lpBuffer=0x53e248, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe.config", lpFilePart=0x0) returned 0x2d
[0127.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\ransomware.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x53e7f0 | out: lpFileInformation=0x53e7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0127.586] GetCurrentProcess () returned 0xffffffff
[0127.586] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x53e938 | out: TokenHandle=0x53e938*=0x2e0) returned 1
[0127.586] GetCurrentProcess () returned 0xffffffff
[0127.587] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x53e938 | out: TokenHandle=0x53e938*=0x2e4) returned 1
[0127.758] GetCurrentProcess () returned 0xffffffff
[0127.758] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x53e798 | out: TokenHandle=0x53e798*=0x2e8) returned 1
[0127.764] GetCurrentProcess () returned 0xffffffff
[0127.765] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x53e7a8 | out: TokenHandle=0x53e7a8*=0x2ec) returned 1
[0128.128] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0
[0128.248] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6fd40000
[0129.291] GetModuleHandleW (lpModuleName="user32.dll") returned 0x750c0000
[0129.292] GetProcAddress (hModule=0x750c0000, lpProcName="DefWindowProcW") returned 0x743c0140
[0129.293] GetStockObject (i=5) returned 0x900015
[0129.296] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0129.300] CoTaskMemAlloc (cb=0x5a) returned 0x8862f8
[0129.300] RegisterClassW (lpWndClass=0x53ea28) returned 0xc197
[0129.301] CoTaskMemFree (pv=0x8862f8)
[0129.301] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0129.301] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x50062
[0129.302] SetWindowLongW (hWnd=0x50062, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0129.303] GetWindowLongW (hWnd=0x50062, nIndex=-4) returned 1950089536
[0129.304] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x53e248 | out: phkResult=0x53e248*=0x2f4) returned 0x0
[0129.305] RegQueryValueExW (in: hKey=0x2f4, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x53e268, lpData=0x0, lpcbData=0x53e264*=0x0 | out: lpType=0x53e268*=0x0, lpData=0x0, lpcbData=0x53e264*=0x0) returned 0x2
[0129.305] RegQueryValueExW (in: hKey=0x2f4, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x53e268, lpData=0x0, lpcbData=0x53e264*=0x0 | out: lpType=0x53e268*=0x0, lpData=0x0, lpcbData=0x53e264*=0x0) returned 0x2
[0129.305] RegCloseKey (hKey=0x2f4) returned 0x0
[0129.306] SetWindowLongW (hWnd=0x50062, nIndex=-4, dwNewLong=79627750) returned 1950089536
[0129.306] GetWindowLongW (hWnd=0x50062, nIndex=-4) returned 79627750
[0129.306] GetWindowLongW (hWnd=0x50062, nIndex=-16) returned 113311744
[0129.308] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc19a
[0129.434] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc19b
[0129.435] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x50062, Msg=0x81, wParam=0x0, lParam=0x53e598) returned 0x1
[0129.435] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x50062, Msg=0x83, wParam=0x0, lParam=0x53e584) returned 0x0
[0129.792] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x50062, Msg=0x1, wParam=0x0, lParam=0x53e598) returned 0x0
[0129.793] GetClientRect (in: hWnd=0x50062, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0129.793] GetWindowRect (in: hWnd=0x50062, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0129.796] GetParent (hWnd=0x50062) returned 0x0
[0131.699] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x53e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77
[0131.709] IsAppThemed () returned 0x1
[0131.710] CoTaskMemAlloc (cb=0xf0) returned 0x879320
[0131.710] CreateActCtxA (pActCtx=0x53ef00) returned 0x89a934
[0131.979] CoTaskMemFree (pv=0x879320)
[0132.347] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0132.392] AdjustWindowRectEx (in: lpRect=0x53ea8c, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53ea8c) returned 1
[0132.690] EtwEventRegister (in: ProviderId=0x22b7940, EnableCallback=0x4bf060e, CallbackContext=0x0, RegHandle=0x22b791c | out: RegHandle=0x22b791c) returned 0x0
[0132.704] GetSystemDefaultLCID () returned 0x409
[0132.704] GetStockObject (i=17) returned 0xa01c1
[0132.707] GetObjectW (in: h=0xa01c1, c=92, pv=0x53e598 | out: pv=0x53e598) returned 92
[0132.709] GetDC (hWnd=0x0) returned 0x10105d6
[0132.933] GdiplusStartup (in: token=0x807d10, input=0x53db50, output=0x53dba0 | out: token=0x807d10, output=0x53dba0) returned 0x0
[0132.942] CoTaskMemAlloc (cb=0x5c) returned 0x886638
[0132.943] GdipCreateFontFromLogfontW (hdc=0x10105d6, logfont=0x886638, font=0x53e660) returned 0x0
[0133.753] CoTaskMemFree (pv=0x886638)
[0133.754] CoTaskMemAlloc (cb=0x5c) returned 0x885fb8
[0133.754] CoTaskMemFree (pv=0x885fb8)
[0133.754] CoTaskMemAlloc (cb=0x5c) returned 0x8863c8
[0133.755] CoTaskMemFree (pv=0x8863c8)
[0133.755] GdipGetFontUnit (font=0x4a41f08, unit=0x53e628) returned 0x0
[0133.755] GdipGetFontSize (font=0x4a41f08, size=0x53e62c) returned 0x0
[0133.755] GdipGetFontStyle (font=0x4a41f08, style=0x53e624) returned 0x0
[0133.756] GdipGetFamily (font=0x4a41f08, family=0x53e620) returned 0x0
[0133.756] GdipGetFontSize (font=0x4a41f08, size=0x22b81c8) returned 0x0
[0133.756] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0133.757] GetDC (hWnd=0x0) returned 0x60100ce
[0133.757] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e63c) returned 0x0
[0133.764] GdipGetDpiY (graphics=0x5d8f260, dpi=0x22b82a4) returned 0x0
[0133.764] GdipGetFontHeight (font=0x4a41f08, graphics=0x5d8f260, height=0x53e634) returned 0x0
[0133.764] GdipGetEmHeight (family=0x4a482c8, style=0, EmHeight=0x53e63c) returned 0x0
[0133.764] GdipGetLineSpacing (family=0x4a482c8, style=0, LineSpacing=0x53e63c) returned 0x0
[0133.765] GdipDeleteGraphics (graphics=0x5d8f260) returned 0x0
[0133.765] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0133.765] GdipCreateFont (fontFamily=0x4a482c8, emSize=0x41040000, style=0, unit=0x3, font=0x22b82c0) returned 0x0
[0133.765] GdipGetFontSize (font=0x4a4ef48, size=0x22b82c4) returned 0x0
[0133.766] GdipDeleteFont (font=0x4a41f08) returned 0x0
[0133.766] GetDC (hWnd=0x0) returned 0x60100ce
[0133.766] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e6b0) returned 0x0
[0133.766] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d8f260, height=0x53e6a8) returned 0x0
[0133.766] GdipDeleteGraphics (graphics=0x5d8f260) returned 0x0
[0133.766] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0133.770] GetSystemMetrics (nIndex=5) returned 1
[0133.770] GetSystemMetrics (nIndex=6) returned 1
[0133.771] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0133.772] AdjustWindowRectEx (in: lpRect=0x53e7d8, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e7d8) returned 1
[0133.774] GetDC (hWnd=0x0) returned 0x60100ce
[0133.774] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e6b0) returned 0x0
[0133.775] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d8f260, height=0x53e6a8) returned 0x0
[0133.775] GdipDeleteGraphics (graphics=0x5d8f260) returned 0x0
[0133.775] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0133.775] GetSystemMetrics (nIndex=5) returned 1
[0133.775] GetSystemMetrics (nIndex=6) returned 1
[0133.776] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0133.776] AdjustWindowRectEx (in: lpRect=0x53e7d8, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e7d8) returned 1
[0133.778] GetDC (hWnd=0x0) returned 0x60100ce
[0133.779] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e6b0) returned 0x0
[0133.779] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d8f260, height=0x53e6a8) returned 0x0
[0133.779] GdipDeleteGraphics (graphics=0x5d8f260) returned 0x0
[0133.779] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0133.779] GetSystemMetrics (nIndex=5) returned 1
[0133.779] GetSystemMetrics (nIndex=6) returned 1
[0133.780] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0133.780] AdjustWindowRectEx (in: lpRect=0x53e7d8, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e7d8) returned 1
[0133.783] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0133.783] AdjustWindowRectEx (in: lpRect=0x53e7d8, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e7d8) returned 1
[0133.835] GetDC (hWnd=0x0) returned 0x60100ce
[0133.835] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e6b0) returned 0x0
[0133.836] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d8f260, height=0x53e6a8) returned 0x0
[0133.836] GdipDeleteGraphics (graphics=0x5d8f260) returned 0x0
[0133.836] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0133.836] GetSystemMetrics (nIndex=5) returned 1
[0133.836] GetSystemMetrics (nIndex=6) returned 1
[0133.836] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0133.837] AdjustWindowRectEx (in: lpRect=0x53e7d8, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e7d8) returned 1
[0133.839] GetDC (hWnd=0x0) returned 0x60100ce
[0133.839] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e6b0) returned 0x0
[0133.839] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d8f260, height=0x53e6a8) returned 0x0
[0133.840] GdipDeleteGraphics (graphics=0x5d8f260) returned 0x0
[0133.840] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0133.840] GetSystemMetrics (nIndex=5) returned 1
[0133.840] GetSystemMetrics (nIndex=6) returned 1
[0133.840] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0133.840] AdjustWindowRectEx (in: lpRect=0x53e7d8, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e7d8) returned 1
[0133.842] GetDC (hWnd=0x0) returned 0x60100ce
[0133.843] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e6b0) returned 0x0
[0133.843] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d8f260, height=0x53e6a8) returned 0x0
[0133.843] GdipDeleteGraphics (graphics=0x5d8f260) returned 0x0
[0133.843] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0133.843] GetSystemMetrics (nIndex=5) returned 1
[0133.843] GetSystemMetrics (nIndex=6) returned 1
[0133.844] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0133.844] AdjustWindowRectEx (in: lpRect=0x53e7d8, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e7d8) returned 1
[0133.848] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0133.849] AdjustWindowRectEx (in: lpRect=0x53e7dc, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e7dc) returned 1
[0133.852] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0133.852] AdjustWindowRectEx (in: lpRect=0x53e7dc, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e7dc) returned 1
[0133.855] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0133.855] AdjustWindowRectEx (in: lpRect=0x53e7dc, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e7dc) returned 1
[0133.859] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0133.859] AdjustWindowRectEx (in: lpRect=0x53e7e0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e7e0) returned 1
[0133.861] GetDC (hWnd=0x0) returned 0x60100ce
[0133.862] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e6b0) returned 0x0
[0133.862] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d8f260, height=0x53e6a8) returned 0x0
[0133.862] GdipDeleteGraphics (graphics=0x5d8f260) returned 0x0
[0133.862] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0133.862] GetSystemMetrics (nIndex=5) returned 1
[0133.862] GetSystemMetrics (nIndex=6) returned 1
[0133.863] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0133.863] AdjustWindowRectEx (in: lpRect=0x53e7d8, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e7d8) returned 1
[0134.013] GetSystemMetrics (nIndex=5) returned 1
[0134.013] GetSystemMetrics (nIndex=6) returned 1
[0134.014] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.014] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e73c) returned 1
[0134.018] GetSystemMetrics (nIndex=5) returned 1
[0134.018] GetSystemMetrics (nIndex=6) returned 1
[0134.019] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.019] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e73c) returned 1
[0134.022] GetSystemMetrics (nIndex=5) returned 1
[0134.022] GetSystemMetrics (nIndex=6) returned 1
[0134.022] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.023] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e73c) returned 1
[0134.028] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x53e7b8) returned 0x0
[0134.028] GdipCreateFont (fontFamily=0x4a482c8, emSize=0x41040000, style=1, unit=0x3, font=0x22b9800) returned 0x0
[0134.028] GdipGetFontSize (font=0x4a41f08, size=0x22b9804) returned 0x0
[0134.038] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.038] AdjustWindowRectEx (in: lpRect=0x53e768, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e768) returned 1
[0134.113] GetUserObjectInformationA (in: hObj=0x13c, nIndex=1, pvInfo=0x22b9f5c, nLength=0xc, lpnLengthNeeded=0x53e644 | out: pvInfo=0x22b9f5c, lpnLengthNeeded=0x53e644) returned 1
[0134.116] SetConsoleCtrlHandler (HandlerRoutine=0x4bf0636, Add=1) returned 1
[0134.117] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0134.118] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0134.120] GetClassInfoW (in: hInstance=0x170000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x22b9fc0 | out: lpWndClass=0x22b9fc0) returned 0
[0134.122] CoTaskMemAlloc (cb=0x58) returned 0x8802a0
[0134.122] RegisterClassW (lpWndClass=0x53e594) returned 0xc19d
[0134.122] CoTaskMemFree (pv=0x8802a0)
[0134.123] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x901f8
[0134.131] NtdllDefWindowProc_W (hWnd=0x901f8, Msg=0x83, wParam=0x0, lParam=0x53e0bc) returned 0x0
[0134.132] NtdllDefWindowProc_W (hWnd=0x901f8, Msg=0x1, wParam=0x0, lParam=0x53e0d0) returned 0x0
[0134.132] NtdllDefWindowProc_W (hWnd=0x901f8, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
[0134.132] NtdllDefWindowProc_W (hWnd=0x901f8, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
[0134.138] GetSysColor (nIndex=10) returned 0xb4b4b4
[0134.138] GetSysColor (nIndex=2) returned 0xd1b499
[0134.138] GetSysColor (nIndex=9) returned 0x0
[0134.138] GetSysColor (nIndex=12) returned 0xababab
[0134.138] GetSysColor (nIndex=15) returned 0xf0f0f0
[0134.138] GetSysColor (nIndex=20) returned 0xffffff
[0134.138] GetSysColor (nIndex=16) returned 0xa0a0a0
[0134.138] GetSysColor (nIndex=15) returned 0xf0f0f0
[0134.139] GetSysColor (nIndex=16) returned 0xa0a0a0
[0134.139] GetSysColor (nIndex=21) returned 0x696969
[0134.139] GetSysColor (nIndex=22) returned 0xe3e3e3
[0134.139] GetSysColor (nIndex=20) returned 0xffffff
[0134.139] GetSysColor (nIndex=18) returned 0x0
[0134.139] GetSysColor (nIndex=1) returned 0x0
[0134.139] GetSysColor (nIndex=27) returned 0xead1b9
[0134.139] GetSysColor (nIndex=28) returned 0xf2e4d7
[0134.139] GetSysColor (nIndex=17) returned 0x6d6d6d
[0134.139] GetSysColor (nIndex=13) returned 0xd77800
[0134.139] GetSysColor (nIndex=14) returned 0xffffff
[0134.139] GetSysColor (nIndex=26) returned 0xcc6600
[0134.139] GetSysColor (nIndex=11) returned 0xfcf7f4
[0134.139] GetSysColor (nIndex=3) returned 0xdbcdbf
[0134.139] GetSysColor (nIndex=19) returned 0x0
[0134.139] GetSysColor (nIndex=24) returned 0xe1ffff
[0134.139] GetSysColor (nIndex=23) returned 0x0
[0134.139] GetSysColor (nIndex=4) returned 0xf0f0f0
[0134.139] GetSysColor (nIndex=30) returned 0xf0f0f0
[0134.140] GetSysColor (nIndex=29) returned 0xd77800
[0134.140] GetSysColor (nIndex=7) returned 0x0
[0134.140] GetSysColor (nIndex=0) returned 0xc8c8c8
[0134.140] GetSysColor (nIndex=5) returned 0xffffff
[0134.140] GetSysColor (nIndex=6) returned 0x646464
[0134.140] GetSysColor (nIndex=8) returned 0x0
[0134.140] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.140] AdjustWindowRectEx (in: lpRect=0x53e768, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e768) returned 1
[0134.145] GetSystemMetrics (nIndex=5) returned 1
[0134.145] GetSystemMetrics (nIndex=6) returned 1
[0134.145] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.145] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e73c) returned 1
[0134.148] GetSystemMetrics (nIndex=5) returned 1
[0134.148] GetSystemMetrics (nIndex=6) returned 1
[0134.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.148] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e73c) returned 1
[0134.151] GetSystemMetrics (nIndex=5) returned 1
[0134.151] GetSystemMetrics (nIndex=6) returned 1
[0134.151] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.151] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e73c) returned 1
[0134.154] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.155] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e73c) returned 1
[0134.155] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.155] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e73c) returned 1
[0134.158] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x53e7b8) returned 0x0
[0134.158] GdipCreateFont (fontFamily=0x4a482c8, emSize=0x41400000, style=1, unit=0x3, font=0x22ba5b0) returned 0x0
[0134.158] GdipGetFontSize (font=0x5d8abd0, size=0x22ba5b4) returned 0x0
[0134.158] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.158] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e73c) returned 1
[0134.159] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.159] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e73c) returned 1
[0134.161] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x53e7b8) returned 0x0
[0134.200] GdipCreateFont (fontFamily=0x4a482c8, emSize=0x411c0000, style=0, unit=0x3, font=0x22ba760) returned 0x0
[0134.200] GdipGetFontSize (font=0x5d8abf8, size=0x22ba764) returned 0x0
[0134.201] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.201] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e73c) returned 1
[0134.201] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0134.201] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e73c) returned 1
[0134.205] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe.config", nBufferLength=0x105, lpBuffer=0x53e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe.config", lpFilePart=0x0) returned 0x2d
[0134.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e52c) returned 1
[0134.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\ransomware.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x53e5a8 | out: lpFileInformation=0x53e5a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0134.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e528) returned 1
[0134.848] GdipLoadImageFromStream (stream=0x4840030, image=0x53e200) returned 0x0
[0135.532] GdipImageForceValidation (image=0x5d8f260) returned 0x0
[0135.534] GdipGetImageType (image=0x5d8f260, type=0x53e1fc) returned 0x0
[0135.535] GdipGetImageRawFormat (image=0x5d8f260, format=0x53e170*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
[0135.540] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.540] AdjustWindowRectEx (in: lpRect=0x53e768, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e768) returned 1
[0135.540] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.541] AdjustWindowRectEx (in: lpRect=0x53e768, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e768) returned 1
[0135.544] GetSystemMetrics (nIndex=5) returned 1
[0135.544] GetSystemMetrics (nIndex=6) returned 1
[0135.544] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.544] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e73c) returned 1
[0135.544] GetSystemMetrics (nIndex=5) returned 1
[0135.545] GetSystemMetrics (nIndex=6) returned 1
[0135.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.545] AdjustWindowRectEx (in: lpRect=0x53e6d4, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e6d4) returned 1
[0135.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.545] AdjustWindowRectEx (in: lpRect=0x53e6d4, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e6d4) returned 1
[0135.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.547] AdjustWindowRectEx (in: lpRect=0x53e73c, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e73c) returned 1
[0135.552] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.552] AdjustWindowRectEx (in: lpRect=0x53e79c, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e79c) returned 1
[0135.552] GetSystemMetrics (nIndex=59) returned 1460
[0135.552] GetSystemMetrics (nIndex=60) returned 920
[0135.552] GetSystemMetrics (nIndex=34) returned 136
[0135.552] GetSystemMetrics (nIndex=35) returned 39
[0135.553] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.553] AdjustWindowRectEx (in: lpRect=0x53e69c, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e69c) returned 1
[0135.553] GetCurrentThreadId () returned 0x11d0
[0135.553] GetCurrentThreadId () returned 0x11d0
[0135.554] GetCurrentThreadId () returned 0x11d0
[0135.554] GetCurrentThreadId () returned 0x11d0
[0135.640] GetCurrentThreadId () returned 0x11d0
[0135.640] GetCurrentThreadId () returned 0x11d0
[0135.641] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.642] AdjustWindowRectEx (in: lpRect=0x53e594, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e594) returned 1
[0135.649] GdipGetFamilyName (in: family=0x4a482c8, name=0x53e480, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0
[0135.652] CreateCompatibleDC (hdc=0x0) returned 0x600101a2
[0135.653] GetCurrentObject (hdc=0x600101a2, type=0x1) returned 0xb00017
[0135.653] GetCurrentObject (hdc=0x600101a2, type=0x2) returned 0x900010
[0135.653] GetCurrentObject (hdc=0x600101a2, type=0x7) returned 0x85000f
[0135.653] GetCurrentObject (hdc=0x600101a2, type=0x6) returned 0x8a01c2
[0135.654] SaveDC (hdc=0x600101a2) returned 1
[0135.654] GetDeviceCaps (hdc=0x600101a2, index=90) returned 96
[0135.655] CoTaskMemAlloc (cb=0x5c) returned 0x886708
[0135.655] CreateFontIndirectW (lplf=0x886708) returned 0x200a0513
[0135.655] CoTaskMemFree (pv=0x886708)
[0135.656] GetObjectW (in: h=0x200a0513, c=92, pv=0x53e444 | out: pv=0x53e444) returned 92
[0135.656] GetCurrentObject (hdc=0x600101a2, type=0x6) returned 0x8a01c2
[0135.657] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e3ac | out: pv=0x53e3ac) returned 92
[0135.657] SelectObject (hdc=0x600101a2, h=0x200a0513) returned 0x8a01c2
[0135.657] GetMapMode (hdc=0x600101a2) returned 1
[0135.657] GetTextMetricsW (in: hdc=0x600101a2, lptm=0x53e474 | out: lptm=0x53e474) returned 1
[0135.659] DrawTextExW (in: hdc=0x600101a2, lpchText="If you want decrypt your files \r\nyou must have decryption code", cchText=62, lprc=0x53e580, format=0x2400, lpdtp=0x22d0a1c | out: lpchText="If you want decrypt your files \r\nyou must have decryption code", lprc=0x53e580) returned 32
[0135.813] GetCurrentThreadId () returned 0x11d0
[0135.813] GetCurrentThreadId () returned 0x11d0
[0135.814] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.814] AdjustWindowRectEx (in: lpRect=0x53e594, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e594) returned 1
[0135.814] GdipGetFamilyName (in: family=0x4a482c8, name=0x53e480, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0
[0135.814] GetDeviceCaps (hdc=0x600101a2, index=90) returned 96
[0135.815] CoTaskMemAlloc (cb=0x5c) returned 0x886430
[0135.815] CreateFontIndirectW (lplf=0x886430) returned 0x9e0a04fe
[0135.815] CoTaskMemFree (pv=0x886430)
[0135.815] GetObjectW (in: h=0x9e0a04fe, c=92, pv=0x53e444 | out: pv=0x53e444) returned 92
[0135.829] SelectObject (hdc=0x600101a2, h=0x9e0a04fe) returned 0x200a0513
[0135.829] GetMapMode (hdc=0x600101a2) returned 1
[0135.829] GetTextMetricsW (in: hdc=0x600101a2, lptm=0x53e474 | out: lptm=0x53e474) returned 1
[0135.830] DrawTextExW (in: hdc=0x600101a2, lpchText="Oops! Your have been encrypted!", cchText=31, lprc=0x53e580, format=0x2400, lpdtp=0x22d0d14 | out: lpchText="Oops! Your have been encrypted!", lprc=0x53e580) returned 20
[0135.931] GetCurrentThreadId () returned 0x11d0
[0135.931] GetCurrentThreadId () returned 0x11d0
[0135.931] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.932] AdjustWindowRectEx (in: lpRect=0x53e594, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e594) returned 1
[0135.932] GdipGetFamilyName (in: family=0x4a482c8, name=0x53e480, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0
[0135.932] GetDeviceCaps (hdc=0x600101a2, index=90) returned 96
[0135.932] CoTaskMemAlloc (cb=0x5c) returned 0x886088
[0135.932] CreateFontIndirectW (lplf=0x886088) returned 0x730a066d
[0135.932] CoTaskMemFree (pv=0x886088)
[0135.932] GetObjectW (in: h=0x730a066d, c=92, pv=0x53e444 | out: pv=0x53e444) returned 92
[0135.932] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x9e0a04fe
[0135.932] GetMapMode (hdc=0x600101a2) returned 1
[0135.932] GetTextMetricsW (in: hdc=0x600101a2, lptm=0x53e474 | out: lptm=0x53e474) returned 1
[0135.933] DrawTextExW (in: hdc=0x600101a2, lpchText="Path", cchText=4, lprc=0x53e580, format=0x2400, lpdtp=0x22d1040 | out: lpchText="Path", lprc=0x53e580) returned 13
[0135.966] GetCurrentThreadId () returned 0x11d0
[0135.966] GetCurrentThreadId () returned 0x11d0
[0135.966] GetCurrentThreadId () returned 0x11d0
[0135.966] GetCurrentThreadId () returned 0x11d0
[0135.966] GetCurrentThreadId () returned 0x11d0
[0135.966] GetCurrentThreadId () returned 0x11d0
[0135.966] GetCurrentThreadId () returned 0x11d0
[0135.966] GetCurrentThreadId () returned 0x11d0
[0135.966] GetCurrentThreadId () returned 0x11d0
[0135.966] GetCurrentThreadId () returned 0x11d0
[0135.966] GetCurrentThreadId () returned 0x11d0
[0135.967] GetCurrentThreadId () returned 0x11d0
[0135.967] GetCurrentThreadId () returned 0x11d0
[0135.967] GetCurrentThreadId () returned 0x11d0
[0135.967] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.967] AdjustWindowRectEx (in: lpRect=0x53e6b0, dwStyle=0x2830000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e6b0) returned 1
[0135.967] AdjustWindowRectEx (in: lpRect=0x53e77c, dwStyle=0x2830000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e77c) returned 1
[0135.968] GetSystemMetrics (nIndex=59) returned 1460
[0135.968] GetSystemMetrics (nIndex=60) returned 920
[0135.968] GetSystemMetrics (nIndex=34) returned 136
[0135.968] GetSystemMetrics (nIndex=35) returned 39
[0135.968] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0135.968] AdjustWindowRectEx (in: lpRect=0x53e5b4, dwStyle=0x2830000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e5b4) returned 1
[0135.968] AdjustWindowRectEx (in: lpRect=0x53e67c, dwStyle=0x2830000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e67c) returned 1
[0135.970] CreateCompatibleDC (hdc=0x0) returned 0x2e010542
[0135.971] GetDC (hWnd=0x0) returned 0x60100ce
[0135.971] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e5c4) returned 0x0
[0135.972] CoTaskMemAlloc (cb=0x5c) returned 0x886500
[0135.972] GdipGetLogFontW (font=0x4a4ef48, graphics=0x5d920e8, logfontW=0x886500) returned 0x0
[0136.021] CoTaskMemFree (pv=0x886500)
[0136.021] CoTaskMemAlloc (cb=0x5c) returned 0x886430
[0136.021] CoTaskMemFree (pv=0x886430)
[0136.021] CoTaskMemAlloc (cb=0x5c) returned 0x886500
[0136.022] CoTaskMemFree (pv=0x886500)
[0136.022] GdipDeleteGraphics (graphics=0x5d920e8) returned 0x0
[0136.022] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0136.022] CoTaskMemAlloc (cb=0x5c) returned 0x886568
[0136.022] CreateFontIndirectW (lplf=0x886568) returned 0x510a0519
[0136.022] CoTaskMemFree (pv=0x886568)
[0136.023] SelectObject (hdc=0x2e010542, h=0x510a0519) returned 0x8a01c2
[0136.023] GetTextMetricsW (in: hdc=0x2e010542, lptm=0x53e6d0 | out: lptm=0x53e6d0) returned 1
[0136.023] GetTextExtentPoint32W (in: hdc=0x2e010542, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x22d1e70 | out: psizl=0x22d1e70) returned 1
[0136.025] SelectObject (hdc=0x2e010542, h=0x8a01c2) returned 0x510a0519
[0136.025] DeleteDC (hdc=0x2e010542) returned 1
[0136.026] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.026] AdjustWindowRectEx (in: lpRect=0x53e438, dwStyle=0x2c00000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x53e438) returned 1
[0136.026] AdjustWindowRectEx (in: lpRect=0x53e65c, dwStyle=0x2c00000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x53e65c) returned 1
[0136.027] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.027] AdjustWindowRectEx (in: lpRect=0x53e3b0, dwStyle=0x2c00000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x53e3b0) returned 1
[0136.027] AdjustWindowRectEx (in: lpRect=0x53e494, dwStyle=0x2c00000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x53e494) returned 1
[0136.028] GetSystemMetrics (nIndex=34) returned 136
[0136.028] GetSystemMetrics (nIndex=35) returned 39
[0136.028] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.028] AdjustWindowRectEx (in: lpRect=0x53e654, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e654) returned 1
[0136.028] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.028] AdjustWindowRectEx (in: lpRect=0x53e4b8, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e4b8) returned 1
[0136.029] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.029] AdjustWindowRectEx (in: lpRect=0x53e654, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e654) returned 1
[0136.029] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.029] AdjustWindowRectEx (in: lpRect=0x53e4b8, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e4b8) returned 1
[0136.029] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.029] AdjustWindowRectEx (in: lpRect=0x53e654, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e654) returned 1
[0136.030] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.030] AdjustWindowRectEx (in: lpRect=0x53e4b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e4b8) returned 1
[0136.030] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.030] AdjustWindowRectEx (in: lpRect=0x53e310, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e310) returned 1
[0136.030] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.030] AdjustWindowRectEx (in: lpRect=0x53e654, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e654) returned 1
[0136.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.031] AdjustWindowRectEx (in: lpRect=0x53e4b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e4b8) returned 1
[0136.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.031] AdjustWindowRectEx (in: lpRect=0x53e310, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e310) returned 1
[0136.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.031] AdjustWindowRectEx (in: lpRect=0x53e654, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e654) returned 1
[0136.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.032] AdjustWindowRectEx (in: lpRect=0x53e4b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e4b8) returned 1
[0136.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.032] AdjustWindowRectEx (in: lpRect=0x53e310, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e310) returned 1
[0136.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.032] AdjustWindowRectEx (in: lpRect=0x53e654, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e654) returned 1
[0136.033] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.033] AdjustWindowRectEx (in: lpRect=0x53e4b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e4b8) returned 1
[0136.033] GetSystemMetrics (nIndex=5) returned 1
[0136.033] GetSystemMetrics (nIndex=6) returned 1
[0136.033] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.033] AdjustWindowRectEx (in: lpRect=0x53e654, dwStyle=0x460100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e654) returned 1
[0136.033] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.033] AdjustWindowRectEx (in: lpRect=0x53e4b8, dwStyle=0x460100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e4b8) returned 1
[0136.033] GetSystemMetrics (nIndex=5) returned 1
[0136.033] GetSystemMetrics (nIndex=6) returned 1
[0136.034] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.034] AdjustWindowRectEx (in: lpRect=0x53e654, dwStyle=0x460100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e654) returned 1
[0136.034] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.034] AdjustWindowRectEx (in: lpRect=0x53e4b8, dwStyle=0x460100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e4b8) returned 1
[0136.035] GetSystemMetrics (nIndex=5) returned 1
[0136.035] GetSystemMetrics (nIndex=6) returned 1
[0136.035] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.035] AdjustWindowRectEx (in: lpRect=0x53e654, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e654) returned 1
[0136.035] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.035] AdjustWindowRectEx (in: lpRect=0x53e4b8, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e4b8) returned 1
[0136.036] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.036] AdjustWindowRectEx (in: lpRect=0x53e654, dwStyle=0x460100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e654) returned 1
[0136.036] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.036] AdjustWindowRectEx (in: lpRect=0x53e4b8, dwStyle=0x460100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e4b8) returned 1
[0136.036] GetSystemMetrics (nIndex=5) returned 1
[0136.036] GetSystemMetrics (nIndex=6) returned 1
[0136.036] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.036] AdjustWindowRectEx (in: lpRect=0x53e654, dwStyle=0x460100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e654) returned 1
[0136.036] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.037] AdjustWindowRectEx (in: lpRect=0x53e4b8, dwStyle=0x460100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e4b8) returned 1
[0136.037] GetSystemMetrics (nIndex=5) returned 1
[0136.037] GetSystemMetrics (nIndex=6) returned 1
[0136.037] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.037] AdjustWindowRectEx (in: lpRect=0x53e654, dwStyle=0x460100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e654) returned 1
[0136.037] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
[0136.037] AdjustWindowRectEx (in: lpRect=0x53e4b8, dwStyle=0x460100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e4b8) returned 1
[0136.037] GetSystemMetrics (nIndex=5) returned 1
[0136.037] GetSystemMetrics (nIndex=6) returned 1
[0136.051] GetCurrentActCtx (in: lphActCtx=0x53ef74 | out: lphActCtx=0x53ef74*=0x0) returned 1
[0136.051] ActivateActCtx (in: hActCtx=0x89a934, lpCookie=0x53ef84 | out: hActCtx=0x89a934, lpCookie=0x53ef84) returned 1
[0136.051] GetCurrentActCtx (in: lphActCtx=0x53ed94 | out: lphActCtx=0x53ed94*=0x89a934) returned 1
[0136.051] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0
[0136.054] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6f520000
[0137.248] AdjustWindowRectEx (in: lpRect=0x53ecf4, dwStyle=0x2c00000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x53ecf4) returned 1
[0137.248] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0137.248] CreateWindowExW (dwExStyle=0x10001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Cobra_Locker", dwStyle=0x2c00000, X=-2147483648, Y=-2147483648, nWidth=587, nHeight=360, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x70036
[0137.249] SetWindowLongW (hWnd=0x70036, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0137.250] GetWindowLongW (hWnd=0x70036, nIndex=-4) returned 1950089536
[0137.250] SetWindowLongW (hWnd=0x70036, nIndex=-4, dwNewLong=79628598) returned 1950089536
[0137.250] GetWindowLongW (hWnd=0x70036, nIndex=-4) returned 79628598
[0137.250] GetWindowLongW (hWnd=0x70036, nIndex=-16) returned 113246208
[0137.250] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x81, wParam=0x0, lParam=0x53e7b8) returned 0x1
[0137.251] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x83, wParam=0x0, lParam=0x53e7a4) returned 0x0
[0137.252] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1, wParam=0x0, lParam=0x53e7b8) returned 0x0
[0137.252] GetClientRect (in: hWnd=0x70036, lpRect=0x53e470 | out: lpRect=0x53e470) returned 1
[0137.252] GetWindowRect (in: hWnd=0x70036, lpRect=0x53e470 | out: lpRect=0x53e470) returned 1
[0137.253] SetWindowTextW (hWnd=0x70036, lpString="Cobra_Locker") returned 1
[0137.253] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xc, wParam=0x0, lParam=0x22b7628) returned 0x1
[0137.255] GetStartupInfoW (in: lpStartupInfo=0x22d2520 | out: lpStartupInfo=0x22d2520*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0137.258] GetParent (hWnd=0x70036) returned 0x0
[0137.258] GetStockObject (i=5) returned 0x900015
[0137.259] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0137.259] CoTaskMemAlloc (cb=0x5a) returned 0x8860f0
[0137.259] RegisterClassW (lpWndClass=0x53ec70) returned 0xc19e
[0137.260] CoTaskMemFree (pv=0x8860f0)
[0137.260] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0137.260] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x602b6
[0137.260] SetWindowLongW (hWnd=0x602b6, nIndex=-4, dwNewLong=1950089536) returned 79628638
[0137.261] GetWindowLongW (hWnd=0x602b6, nIndex=-4) returned 1950089536
[0137.261] SetWindowLongW (hWnd=0x602b6, nIndex=-4, dwNewLong=79628678) returned 1950089536
[0137.261] GetWindowLongW (hWnd=0x602b6, nIndex=-4) returned 79628678
[0137.261] GetWindowLongW (hWnd=0x602b6, nIndex=-16) returned 79691776
[0137.261] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x24, wParam=0x0, lParam=0x53e7ec) returned 0x0
[0137.261] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x81, wParam=0x0, lParam=0x53e7e0) returned 0x1
[0137.262] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x83, wParam=0x0, lParam=0x53e7cc) returned 0x0
[0137.263] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x1, wParam=0x0, lParam=0x53e7e0) returned 0x0
[0137.264] SetWindowLongW (hWnd=0x70036, nIndex=-8, dwNewLong=393910) returned 0
[0137.266] SendMessageW (hWnd=0x70036, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0137.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0137.266] SendMessageW (hWnd=0x70036, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0137.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0137.267] GetSystemMenu (hWnd=0x70036, bRevert=0) returned 0x0
[0137.267] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53eda4 | out: lpwndpl=0x53eda4) returned 1
[0137.267] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0137.267] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0137.267] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x1) returned 1
[0137.267] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0137.267] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0137.267] GetClientRect (in: hWnd=0x70036, lpRect=0x53ede8 | out: lpRect=0x53ede8) returned 1
[0137.267] GetClientRect (in: hWnd=0x70036, lpRect=0x53ed48 | out: lpRect=0x53ed48) returned 1
[0137.267] GetWindowRect (in: hWnd=0x70036, lpRect=0x53ed48 | out: lpRect=0x53ed48) returned 1
[0137.267] SetWindowLongW (hWnd=0x70036, nIndex=-8, dwNewLong=393910) returned 393910
[0137.271] GetSystemMetrics (nIndex=11) returned 32
[0137.271] GetSystemMetrics (nIndex=12) returned 32
[0137.271] GetDC (hWnd=0x0) returned 0x60100ce
[0137.271] GetDeviceCaps (hdc=0x60100ce, index=12) returned 32
[0137.271] GetDeviceCaps (hdc=0x60100ce, index=14) returned 1
[0137.271] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0137.272] CreateIconFromResourceEx (presbits=0x22d524c, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x190123
[0137.273] SendMessageW (hWnd=0x602b6, Msg=0x80, wParam=0x1, lParam=0x190123) returned 0x0
[0137.273] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x80, wParam=0x1, lParam=0x190123) returned 0x0
[0137.276] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0137.276] GetWindowLongW (hWnd=0x70036, nIndex=-16) returned 113246208
[0137.276] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0137.276] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0137.276] GetSystemMetrics (nIndex=42) returned 0
[0137.277] GetWindowTextW (in: hWnd=0x70036, lpString=0x53ecdc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0137.277] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53ecdc) returned 0xc
[0137.277] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0137.277] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0137.277] GetSystemMetrics (nIndex=42) returned 0
[0137.277] GetWindowTextW (in: hWnd=0x70036, lpString=0x53ecdc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0137.277] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53ecdc) returned 0xc
[0137.277] GetWindowLongW (hWnd=0x70036, nIndex=-16) returned 113246208
[0137.277] GetWindowLongW (hWnd=0x70036, nIndex=-20) returned 65793
[0137.277] SetWindowLongW (hWnd=0x70036, nIndex=-16, dwNewLong=46137344) returned 113246208
[0137.278] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x7c, wParam=0xfffffff0, lParam=0x53ed44) returned 0x0
[0137.278] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x7d, wParam=0xfffffff0, lParam=0x53ed44) returned 0x0
[0137.280] SetWindowLongW (hWnd=0x70036, nIndex=-20, dwNewLong=65537) returned 65793
[0137.281] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x7c, wParam=0xffffffec, lParam=0x53ed44) returned 0x0
[0137.281] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x7d, wParam=0xffffffec, lParam=0x53ed44) returned 0x0
[0137.281] SetWindowPos (hWnd=0x70036, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0137.282] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53ed5c) returned 0x0
[0137.282] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x83, wParam=0x1, lParam=0x53ed34) returned 0x0
[0137.284] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53ea88 | out: lpwndpl=0x53ea88) returned 1
[0137.284] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x47, wParam=0x0, lParam=0x53ed5c) returned 0x0
[0137.284] GetClientRect (in: hWnd=0x70036, lpRect=0x53ea38 | out: lpRect=0x53ea38) returned 1
[0137.284] GetWindowRect (in: hWnd=0x70036, lpRect=0x53ea38 | out: lpRect=0x53ea38) returned 1
[0137.285] RedrawWindow (hWnd=0x70036, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0137.285] GetSystemMenu (hWnd=0x70036, bRevert=0) returned 0x0
[0137.285] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53ed94 | out: lpwndpl=0x53ed94) returned 1
[0137.286] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0137.286] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0137.286] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x1) returned 1
[0137.286] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0137.286] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0137.286] ShowWindow (hWnd=0x70036, nCmdShow=5) returned 0
[0137.286] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0137.286] GetCurrentActCtx (in: lphActCtx=0x53e9c0 | out: lphActCtx=0x53e9c0*=0x89a934) returned 1
[0137.286] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0137.287] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x22d651c | out: lpWndClass=0x22d651c) returned 1
[0137.288] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0137.288] CoTaskMemAlloc (cb=0x52) returned 0x8800c0
[0137.288] RegisterClassW (lpWndClass=0x53e874) returned 0xc1a0
[0137.289] CoTaskMemFree (pv=0x8800c0)
[0137.289] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0137.289] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName="All your important files were encrypted on this PC.\r\nAll files with .Cobra extension are encrypted.\r\nEncryption was produced using unique private key generated for this computer.\r\n\r\nTo decrypt your files, you need to obtain private key.\r\n\r\nTo retrieve the private key you need to contact us by email \r\nCobra_Locker@protonmail.com send us an email and wait for further \r\ninstructions.\r\n\r\nE-mail address to contact us:\r\nCobra_Locker@protonmail.com\r\n\r\n", dwStyle=0x56210044, X=-1, Y=151, nWidth=280, nHeight=184, hWndParent=0x70036, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x902ba
[0137.289] SetWindowLongW (hWnd=0x902ba, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0137.290] GetWindowLongW (hWnd=0x902ba, nIndex=-4) returned 1868026976
[0137.290] SetWindowLongW (hWnd=0x902ba, nIndex=-4, dwNewLong=79628758) returned 1868026976
[0137.290] GetWindowLongW (hWnd=0x902ba, nIndex=-4) returned 79628758
[0137.290] GetWindowLongW (hWnd=0x902ba, nIndex=-16) returned 1176567876
[0137.290] GetWindowLongW (hWnd=0x902ba, nIndex=-12) returned 0
[0137.290] SetWindowLongW (hWnd=0x902ba, nIndex=-12, dwNewLong=590522) returned 0
[0137.290] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0x81, wParam=0x0, lParam=0x53e3e0) returned 0x1
[0137.294] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0x83, wParam=0x0, lParam=0x53e3cc) returned 0x0
[0137.297] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0x1, wParam=0x0, lParam=0x53e3e0) returned 0x1
[0137.991] GetWindow (hWnd=0x902ba, uCmd=0x3) returned 0x0
[0137.991] GetClientRect (in: hWnd=0x902ba, lpRect=0x53e0a0 | out: lpRect=0x53e0a0) returned 1
[0137.991] GetWindowRect (in: hWnd=0x902ba, lpRect=0x53e0a0 | out: lpRect=0x53e0a0) returned 1
[0137.991] GetParent (hWnd=0x902ba) returned 0x70036
[0137.991] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e0a0, cPoints=0x2 | out: lpPoints=0x53e0a0) returned -7077974
[0137.991] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0137.991] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0137.991] GetSystemMetrics (nIndex=42) returned 0
[0137.991] GetWindowTextW (in: hWnd=0x70036, lpString=0x53df38, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0137.991] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53df38) returned 0xc
[0137.992] SendMessageW (hWnd=0x902ba, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0137.992] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0137.994] SetWindowTextW (hWnd=0x902ba, lpString="All your important files were encrypted on this PC.\r\nAll files with .Cobra extension are encrypted.\r\nEncryption was produced using unique private key generated for this computer.\r\n\r\nTo decrypt your files, you need to obtain private key.\r\n\r\nTo retrieve the private key you need to contact us by email \r\nCobra_Locker@protonmail.com send us an email and wait for further \r\ninstructions.\r\n\r\nE-mail address to contact us:\r\nCobra_Locker@protonmail.com\r\n\r\n") returned 1
[0137.994] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0xc, wParam=0x0, lParam=0x22cff44) returned 0x1
[0137.995] GetSystemMetrics (nIndex=5) returned 1
[0137.995] GetSystemMetrics (nIndex=6) returned 1
[0137.995] SendMessageW (hWnd=0x902ba, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0137.995] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0137.995] SendMessageW (hWnd=0x902ba, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0137.996] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0137.996] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0x5, wParam=0x0, lParam=0xb40103) returned 0x1
[0137.997] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0x3, wParam=0x0, lParam=0x990001) returned 0x0
[0137.997] GetClientRect (in: hWnd=0x902ba, lpRect=0x53e0f8 | out: lpRect=0x53e0f8) returned 1
[0137.997] GetWindowRect (in: hWnd=0x902ba, lpRect=0x53e0f8 | out: lpRect=0x53e0f8) returned 1
[0137.997] GetParent (hWnd=0x902ba) returned 0x70036
[0137.997] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e0f8, cPoints=0x2 | out: lpPoints=0x53e0f8) returned -7077974
[0137.997] SendMessageW (hWnd=0x902ba, Msg=0x2210, wParam=0x2ba0001, lParam=0x902ba) returned 0x0
[0137.997] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0x2210, wParam=0x2ba0001, lParam=0x902ba) returned 0x0
[0137.998] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0137.998] GetParent (hWnd=0x902ba) returned 0x70036
[0137.998] GetCurrentActCtx (in: lphActCtx=0x53e9e4 | out: lphActCtx=0x53e9e4*=0x89a934) returned 1
[0137.998] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0137.999] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0137.999] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=512, Y=9, nWidth=51, nHeight=60, hWndParent=0x70036, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x70030
[0137.999] SetWindowLongW (hWnd=0x70030, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0137.999] GetWindowLongW (hWnd=0x70030, nIndex=-4) returned 1950089536
[0138.000] SetWindowLongW (hWnd=0x70030, nIndex=-4, dwNewLong=79628798) returned 1950089536
[0138.000] GetWindowLongW (hWnd=0x70030, nIndex=-4) returned 79628798
[0138.000] GetWindowLongW (hWnd=0x70030, nIndex=-16) returned 1174405120
[0138.000] GetWindowLongW (hWnd=0x70030, nIndex=-12) returned 0
[0138.000] SetWindowLongW (hWnd=0x70030, nIndex=-12, dwNewLong=458800) returned 0
[0138.000] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x81, wParam=0x0, lParam=0x53e408) returned 0x1
[0138.000] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x83, wParam=0x0, lParam=0x53e3f4) returned 0x0
[0138.001] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x1, wParam=0x0, lParam=0x53e408) returned 0x0
[0138.001] GetWindow (hWnd=0x70030, uCmd=0x3) returned 0x902ba
[0138.001] GetClientRect (in: hWnd=0x70030, lpRect=0x53e0f0 | out: lpRect=0x53e0f0) returned 1
[0138.001] GetWindowRect (in: hWnd=0x70030, lpRect=0x53e0f0 | out: lpRect=0x53e0f0) returned 1
[0138.001] GetParent (hWnd=0x70030) returned 0x70036
[0138.001] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e0f0, cPoints=0x2 | out: lpPoints=0x53e0f0) returned -7077974
[0138.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x5, wParam=0x0, lParam=0x3c0033) returned 0x0
[0138.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x3, wParam=0x0, lParam=0x90200) returned 0x0
[0138.002] GetClientRect (in: hWnd=0x70030, lpRect=0x53e148 | out: lpRect=0x53e148) returned 1
[0138.002] GetWindowRect (in: hWnd=0x70030, lpRect=0x53e148 | out: lpRect=0x53e148) returned 1
[0138.002] GetParent (hWnd=0x70030) returned 0x70036
[0138.002] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e148, cPoints=0x2 | out: lpPoints=0x53e148) returned -7077974
[0138.002] SendMessageW (hWnd=0x70030, Msg=0x2210, wParam=0x300001, lParam=0x70030) returned 0x0
[0138.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x2210, wParam=0x300001, lParam=0x70030) returned 0x0
[0138.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0138.002] GetParent (hWnd=0x70030) returned 0x70036
[0138.002] GetCurrentActCtx (in: lphActCtx=0x53e9e4 | out: lphActCtx=0x53e9e4*=0x89a934) returned 1
[0138.003] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0138.003] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x22d6a7c | out: lpWndClass=0x22d6a7c) returned 1
[0138.004] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0138.004] CoTaskMemAlloc (cb=0x56) returned 0x87fd60
[0138.004] RegisterClassW (lpWndClass=0x53e898) returned 0xc1a1
[0138.004] CoTaskMemFree (pv=0x87fd60)
[0138.005] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0138.005] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="If you want decrypt your files \r\nyou must have decryption code", dwStyle=0x5600000d, X=149, Y=55, nWidth=194, nHeight=32, hWndParent=0x70036, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x6002e
[0138.005] SetWindowLongW (hWnd=0x6002e, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0138.005] GetWindowLongW (hWnd=0x6002e, nIndex=-4) returned 1868147648
[0138.005] SetWindowLongW (hWnd=0x6002e, nIndex=-4, dwNewLong=79628878) returned 1868147648
[0138.005] GetWindowLongW (hWnd=0x6002e, nIndex=-4) returned 79628878
[0138.005] GetWindowLongW (hWnd=0x6002e, nIndex=-16) returned 1174405133
[0138.005] GetWindowLongW (hWnd=0x6002e, nIndex=-12) returned 0
[0138.005] SetWindowLongW (hWnd=0x6002e, nIndex=-12, dwNewLong=393262) returned 0
[0138.006] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0x81, wParam=0x0, lParam=0x53e408) returned 0x1
[0138.006] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0x83, wParam=0x0, lParam=0x53e3f4) returned 0x0
[0138.006] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0x1, wParam=0x0, lParam=0x53e408) returned 0x0
[0138.007] GetWindow (hWnd=0x6002e, uCmd=0x3) returned 0x70030
[0138.007] GetClientRect (in: hWnd=0x6002e, lpRect=0x53e0b4 | out: lpRect=0x53e0b4) returned 1
[0138.007] GetWindowRect (in: hWnd=0x6002e, lpRect=0x53e0b4 | out: lpRect=0x53e0b4) returned 1
[0138.007] GetParent (hWnd=0x6002e) returned 0x70036
[0138.007] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e0b4, cPoints=0x2 | out: lpPoints=0x53e0b4) returned -7077974
[0138.007] SetWindowTextW (hWnd=0x6002e, lpString="If you want decrypt your files \r\nyou must have decryption code") returned 1
[0138.007] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0xc, wParam=0x0, lParam=0x22b7500) returned 0x1
[0138.008] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0x5, wParam=0x0, lParam=0x2000c2) returned 0x0
[0138.008] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0x3, wParam=0x0, lParam=0x370095) returned 0x0
[0138.008] GetClientRect (in: hWnd=0x6002e, lpRect=0x53e10c | out: lpRect=0x53e10c) returned 1
[0138.008] GetWindowRect (in: hWnd=0x6002e, lpRect=0x53e10c | out: lpRect=0x53e10c) returned 1
[0138.008] GetParent (hWnd=0x6002e) returned 0x70036
[0138.008] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e10c, cPoints=0x2 | out: lpPoints=0x53e10c) returned -7077974
[0138.008] SendMessageW (hWnd=0x6002e, Msg=0x2210, wParam=0x2e0001, lParam=0x6002e) returned 0x0
[0138.008] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0x2210, wParam=0x2e0001, lParam=0x6002e) returned 0x0
[0138.008] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0138.009] GetParent (hWnd=0x6002e) returned 0x70036
[0138.009] GetCurrentActCtx (in: lphActCtx=0x53e9e4 | out: lphActCtx=0x53e9e4*=0x89a934) returned 1
[0138.009] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0138.009] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0138.009] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Oops! Your have been encrypted!", dwStyle=0x5600000d, X=105, Y=9, nWidth=276, nHeight=20, hWndParent=0x70036, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x202c2
[0138.009] SetWindowLongW (hWnd=0x202c2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0138.010] GetWindowLongW (hWnd=0x202c2, nIndex=-4) returned 1868147648
[0138.010] SetWindowLongW (hWnd=0x202c2, nIndex=-4, dwNewLong=79628918) returned 1868147648
[0138.010] GetWindowLongW (hWnd=0x202c2, nIndex=-4) returned 79628918
[0138.010] GetWindowLongW (hWnd=0x202c2, nIndex=-16) returned 1174405133
[0138.010] GetWindowLongW (hWnd=0x202c2, nIndex=-12) returned 0
[0138.010] SetWindowLongW (hWnd=0x202c2, nIndex=-12, dwNewLong=131778) returned 0
[0138.010] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0x81, wParam=0x0, lParam=0x53e408) returned 0x1
[0138.011] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0x83, wParam=0x0, lParam=0x53e3f4) returned 0x0
[0138.011] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0x1, wParam=0x0, lParam=0x53e408) returned 0x0
[0138.011] GetWindow (hWnd=0x202c2, uCmd=0x3) returned 0x6002e
[0138.011] GetClientRect (in: hWnd=0x202c2, lpRect=0x53e0b4 | out: lpRect=0x53e0b4) returned 1
[0138.011] GetWindowRect (in: hWnd=0x202c2, lpRect=0x53e0b4 | out: lpRect=0x53e0b4) returned 1
[0138.011] GetParent (hWnd=0x202c2) returned 0x70036
[0138.011] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e0b4, cPoints=0x2 | out: lpPoints=0x53e0b4) returned -7077974
[0138.012] SetWindowTextW (hWnd=0x202c2, lpString="Oops! Your have been encrypted!") returned 1
[0138.012] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0xc, wParam=0x0, lParam=0x22b7498) returned 0x1
[0138.012] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0x5, wParam=0x0, lParam=0x140114) returned 0x0
[0138.012] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0x3, wParam=0x0, lParam=0x90069) returned 0x0
[0138.012] GetClientRect (in: hWnd=0x202c2, lpRect=0x53e10c | out: lpRect=0x53e10c) returned 1
[0138.012] GetWindowRect (in: hWnd=0x202c2, lpRect=0x53e10c | out: lpRect=0x53e10c) returned 1
[0138.012] GetParent (hWnd=0x202c2) returned 0x70036
[0138.012] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e10c, cPoints=0x2 | out: lpPoints=0x53e10c) returned -7077974
[0138.012] SendMessageW (hWnd=0x202c2, Msg=0x2210, wParam=0x2c20001, lParam=0x202c2) returned 0x0
[0138.012] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0x2210, wParam=0x2c20001, lParam=0x202c2) returned 0x0
[0138.013] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0138.013] GetParent (hWnd=0x202c2) returned 0x70036
[0138.013] GetCurrentActCtx (in: lphActCtx=0x53e9e4 | out: lphActCtx=0x53e9e4*=0x89a934) returned 1
[0138.013] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0138.013] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0138.013] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Path", dwStyle=0x5600000d, X=448, Y=132, nWidth=29, nHeight=13, hWndParent=0x70036, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x8005c
[0138.014] SetWindowLongW (hWnd=0x8005c, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0138.014] GetWindowLongW (hWnd=0x8005c, nIndex=-4) returned 1868147648
[0138.014] SetWindowLongW (hWnd=0x8005c, nIndex=-4, dwNewLong=79628958) returned 1868147648
[0138.014] GetWindowLongW (hWnd=0x8005c, nIndex=-4) returned 79628958
[0138.014] GetWindowLongW (hWnd=0x8005c, nIndex=-16) returned 1174405133
[0138.014] GetWindowLongW (hWnd=0x8005c, nIndex=-12) returned 0
[0138.014] SetWindowLongW (hWnd=0x8005c, nIndex=-12, dwNewLong=524380) returned 0
[0138.014] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0x81, wParam=0x0, lParam=0x53e408) returned 0x1
[0138.015] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0x83, wParam=0x0, lParam=0x53e3f4) returned 0x0
[0138.015] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0x1, wParam=0x0, lParam=0x53e408) returned 0x0
[0138.016] GetWindow (hWnd=0x8005c, uCmd=0x3) returned 0x202c2
[0138.016] GetClientRect (in: hWnd=0x8005c, lpRect=0x53e0b4 | out: lpRect=0x53e0b4) returned 1
[0138.016] GetWindowRect (in: hWnd=0x8005c, lpRect=0x53e0b4 | out: lpRect=0x53e0b4) returned 1
[0138.016] GetParent (hWnd=0x8005c) returned 0x70036
[0138.016] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e0b4, cPoints=0x2 | out: lpPoints=0x53e0b4) returned -7077974
[0138.016] SetWindowTextW (hWnd=0x8005c, lpString="Path") returned 1
[0138.016] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0xc, wParam=0x0, lParam=0x22b7464) returned 0x1
[0138.017] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0x5, wParam=0x0, lParam=0xd001d) returned 0x0
[0138.017] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0x3, wParam=0x0, lParam=0x8401c0) returned 0x0
[0138.017] GetClientRect (in: hWnd=0x8005c, lpRect=0x53e10c | out: lpRect=0x53e10c) returned 1
[0138.017] GetWindowRect (in: hWnd=0x8005c, lpRect=0x53e10c | out: lpRect=0x53e10c) returned 1
[0138.017] GetParent (hWnd=0x8005c) returned 0x70036
[0138.017] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e10c, cPoints=0x2 | out: lpPoints=0x53e10c) returned -7077974
[0138.017] SendMessageW (hWnd=0x8005c, Msg=0x2210, wParam=0x5c0001, lParam=0x8005c) returned 0x0
[0138.017] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0x2210, wParam=0x5c0001, lParam=0x8005c) returned 0x0
[0138.017] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0138.018] GetParent (hWnd=0x8005c) returned 0x70036
[0138.018] GetCurrentActCtx (in: lphActCtx=0x53e9c0 | out: lphActCtx=0x53e9c0*=0x89a934) returned 1
[0138.018] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0138.018] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0138.018] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=483, Y=129, nWidth=100, nHeight=20, hWndParent=0x70036, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x502b2
[0138.019] SetWindowLongW (hWnd=0x502b2, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0138.019] GetWindowLongW (hWnd=0x502b2, nIndex=-4) returned 1868026976
[0138.020] SetWindowLongW (hWnd=0x502b2, nIndex=-4, dwNewLong=79628998) returned 1868026976
[0138.020] GetWindowLongW (hWnd=0x502b2, nIndex=-4) returned 79628998
[0138.020] GetWindowLongW (hWnd=0x502b2, nIndex=-16) returned 1174470848
[0138.020] GetWindowLongW (hWnd=0x502b2, nIndex=-12) returned 0
[0138.020] SetWindowLongW (hWnd=0x502b2, nIndex=-12, dwNewLong=328370) returned 0
[0138.020] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0x81, wParam=0x0, lParam=0x53e3e0) returned 0x1
[0138.021] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0x83, wParam=0x0, lParam=0x53e3cc) returned 0x0
[0138.022] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0x1, wParam=0x0, lParam=0x53e3e0) returned 0x1
[0138.023] SendMessageW (hWnd=0x502b2, Msg=0x2055, wParam=0x502b2, lParam=0x3) returned 0x2
[0138.023] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0138.023] GetWindow (hWnd=0x502b2, uCmd=0x3) returned 0x8005c
[0138.023] GetClientRect (in: hWnd=0x502b2, lpRect=0x53e0a0 | out: lpRect=0x53e0a0) returned 1
[0138.023] GetWindowRect (in: hWnd=0x502b2, lpRect=0x53e0a0 | out: lpRect=0x53e0a0) returned 1
[0138.023] GetParent (hWnd=0x502b2) returned 0x70036
[0138.023] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e0a0, cPoints=0x2 | out: lpPoints=0x53e0a0) returned -7077974
[0138.023] SendMessageW (hWnd=0x502b2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0138.023] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0138.023] SendMessageW (hWnd=0x502b2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0138.023] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0138.024] GetSystemMetrics (nIndex=5) returned 1
[0138.024] GetSystemMetrics (nIndex=6) returned 1
[0138.024] SendMessageW (hWnd=0x502b2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0138.024] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0138.024] SendMessageW (hWnd=0x502b2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0138.024] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0138.024] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0x5, wParam=0x0, lParam=0x100060) returned 0x0
[0138.025] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0x3, wParam=0x0, lParam=0x8301e5) returned 0x0
[0138.025] GetClientRect (in: hWnd=0x502b2, lpRect=0x53e0f8 | out: lpRect=0x53e0f8) returned 1
[0138.025] GetWindowRect (in: hWnd=0x502b2, lpRect=0x53e0f8 | out: lpRect=0x53e0f8) returned 1
[0138.025] GetParent (hWnd=0x502b2) returned 0x70036
[0138.025] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e0f8, cPoints=0x2 | out: lpPoints=0x53e0f8) returned -7077974
[0138.025] SendMessageW (hWnd=0x502b2, Msg=0x2210, wParam=0x2b20001, lParam=0x502b2) returned 0x0
[0138.025] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0x2210, wParam=0x2b20001, lParam=0x502b2) returned 0x0
[0138.025] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0138.025] GetParent (hWnd=0x502b2) returned 0x70036
[0138.025] GetCurrentActCtx (in: lphActCtx=0x53e9e4 | out: lphActCtx=0x53e9e4*=0x89a934) returned 1
[0138.026] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0138.026] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x22d7048 | out: lpWndClass=0x22d7048) returned 1
[0138.027] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0138.027] CoTaskMemAlloc (cb=0x56) returned 0x880300
[0138.027] RegisterClassW (lpWndClass=0x53e898) returned 0xc1a2
[0138.027] CoTaskMemFree (pv=0x880300)
[0138.028] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0138.028] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Decrypt", dwStyle=0x5601000b, X=410, Y=283, nWidth=153, nHeight=40, hWndParent=0x70036, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x202c6
[0138.028] SetWindowLongW (hWnd=0x202c6, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0138.028] GetWindowLongW (hWnd=0x202c6, nIndex=-4) returned 1868032000
[0138.030] SetWindowLongW (hWnd=0x202c6, nIndex=-4, dwNewLong=79627446) returned 1868032000
[0138.030] GetWindowLongW (hWnd=0x202c6, nIndex=-4) returned 79627446
[0138.030] GetWindowLongW (hWnd=0x202c6, nIndex=-16) returned 1174470667
[0138.030] GetWindowLongW (hWnd=0x202c6, nIndex=-12) returned 0
[0138.030] SetWindowLongW (hWnd=0x202c6, nIndex=-12, dwNewLong=131782) returned 0
[0138.030] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x81, wParam=0x0, lParam=0x53e408) returned 0x1
[0138.031] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x83, wParam=0x0, lParam=0x53e3f4) returned 0x0
[0138.032] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1, wParam=0x0, lParam=0x53e408) returned 0x0
[0138.033] SendMessageW (hWnd=0x202c6, Msg=0x2055, wParam=0x202c6, lParam=0x3) returned 0x2
[0138.033] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0138.033] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0138.033] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0138.033] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0138.033] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0138.033] RedrawWindow (hWnd=0x902ba, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0138.033] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0138.033] RedrawWindow (hWnd=0x70030, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0138.034] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0138.034] RedrawWindow (hWnd=0x6002e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0138.034] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0138.034] RedrawWindow (hWnd=0x202c2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0138.034] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0138.034] RedrawWindow (hWnd=0x8005c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0138.034] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0138.034] RedrawWindow (hWnd=0x502b2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0138.034] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0138.034] RedrawWindow (hWnd=0x202c6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0138.035] RedrawWindow (hWnd=0x70036, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0138.035] GetWindow (hWnd=0x202c6, uCmd=0x3) returned 0x502b2
[0138.035] GetClientRect (in: hWnd=0x202c6, lpRect=0x53e0a8 | out: lpRect=0x53e0a8) returned 1
[0138.035] GetWindowRect (in: hWnd=0x202c6, lpRect=0x53e0a8 | out: lpRect=0x53e0a8) returned 1
[0138.035] GetParent (hWnd=0x202c6) returned 0x70036
[0138.035] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e0a8, cPoints=0x2 | out: lpPoints=0x53e0a8) returned -7077974
[0138.035] SetWindowTextW (hWnd=0x202c6, lpString="Decrypt") returned 1
[0138.035] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc, wParam=0x0, lParam=0x22b73cc) returned 0x1
[0138.036] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x5, wParam=0x0, lParam=0x280099) returned 0x0
[0138.036] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x3, wParam=0x0, lParam=0x11b019a) returned 0x0
[0138.036] GetClientRect (in: hWnd=0x202c6, lpRect=0x53e100 | out: lpRect=0x53e100) returned 1
[0138.036] GetWindowRect (in: hWnd=0x202c6, lpRect=0x53e100 | out: lpRect=0x53e100) returned 1
[0138.036] GetParent (hWnd=0x202c6) returned 0x70036
[0138.036] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70036, lpPoints=0x53e100, cPoints=0x2 | out: lpPoints=0x53e100) returned -7077974
[0138.036] SendMessageW (hWnd=0x202c6, Msg=0x2210, wParam=0x2c60001, lParam=0x202c6) returned 0x0
[0138.036] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2210, wParam=0x2c60001, lParam=0x202c6) returned 0x0
[0138.036] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0138.036] GetParent (hWnd=0x202c6) returned 0x70036
[0138.037] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0138.037] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0138.037] GetSystemMetrics (nIndex=42) returned 0
[0138.037] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e980, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0138.037] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e980) returned 0xc
[0145.504] CoTaskMemAlloc (cb=0x20c) returned 0x8c1450
[0145.504] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x8c1450 | out: pszPath="C:\\Users\\FD1HVy\\Desktop") returned 0x0
[0145.510] CoTaskMemFree (pv=0x8c1450)
[0145.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0145.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0145.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0145.682] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x105, lpBuffer=0x53e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf
[0145.682] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0145.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e86c) returned 1
[0145.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x53e8e8 | out: lpFileInformation=0x53e8e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcfba0473, ftLastAccessTime.dwHighDateTime=0x1d64266, ftLastWriteTime.dwLowDateTime=0xcfba0473, ftLastWriteTime.dwHighDateTime=0x1d64266, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
[0145.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e868) returned 1
[0145.682] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0145.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e860) returned 1
[0145.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x53e8dc | out: lpFileInformation=0x53e8dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcfba0473, ftLastAccessTime.dwHighDateTime=0x1d64266, ftLastWriteTime.dwLowDateTime=0xcfba0473, ftLastWriteTime.dwHighDateTime=0x1d64266, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
[0145.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e85c) returned 1
[0145.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8c8) returned 1
[0145.685] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf
[0145.686] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x53e5f0 | out: lpFindFileData=0x53e5f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcfba0473, ftLastAccessTime.dwHighDateTime=0x1d64266, ftLastWriteTime.dwLowDateTime=0xcfba0473, ftLastWriteTime.dwHighDateTime=0x1d64266, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x881230
[0145.688] FindNextFileW (in: hFindFile=0x881230, lpFindFileData=0x53e5fc | out: lpFindFileData=0x53e5fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0145.688] FindClose (in: hFindFile=0x881230 | out: hFindFile=0x881230) returned 1
[0145.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e884) returned 1
[0145.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0145.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e934) returned 1
[0145.689] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0145.689] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x53e65c | out: lpFindFileData=0x53e65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcfba0473, ftLastAccessTime.dwHighDateTime=0x1d64266, ftLastWriteTime.dwLowDateTime=0xcfba0473, ftLastWriteTime.dwHighDateTime=0x1d64266, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x880d30
[0145.690] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcfba0473, ftLastAccessTime.dwHighDateTime=0x1d64266, ftLastWriteTime.dwLowDateTime=0xcfba0473, ftLastWriteTime.dwHighDateTime=0x1d64266, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0145.690] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf384900, ftCreationTime.dwHighDateTime=0x1d5e63e, ftLastAccessTime.dwLowDateTime=0xd8598a40, ftLastAccessTime.dwHighDateTime=0x1d5ede8, ftLastWriteTime.dwLowDateTime=0xd8598a40, ftLastWriteTime.dwHighDateTime=0x1d5ede8, nFileSizeHigh=0x0, nFileSizeLow=0x5358, dwReserved0=0x0, dwReserved1=0x0, cFileName="-pOUvA49q9yDM-0.mp4", cAlternateFileName="-POUVA~1.MP4")) returned 1
[0145.691] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35454580, ftCreationTime.dwHighDateTime=0x1d5e116, ftLastAccessTime.dwLowDateTime=0x54341ef0, ftLastAccessTime.dwHighDateTime=0x1d5e78b, ftLastWriteTime.dwLowDateTime=0x54341ef0, ftLastWriteTime.dwHighDateTime=0x1d5e78b, nFileSizeHigh=0x0, nFileSizeLow=0xdc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="34aMTfpLUW1K.gif", cAlternateFileName="34AMTF~1.GIF")) returned 1
[0145.691] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9674760, ftCreationTime.dwHighDateTime=0x1d5e4b3, ftLastAccessTime.dwLowDateTime=0x1e03250, ftLastAccessTime.dwHighDateTime=0x1d5f0d8, ftLastWriteTime.dwLowDateTime=0x1e03250, ftLastWriteTime.dwHighDateTime=0x1d5f0d8, nFileSizeHigh=0x0, nFileSizeLow=0x13b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="5lmH1kaD1rJ.doc", cAlternateFileName="5LMH1K~1.DOC")) returned 1
[0145.691] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eeddab0, ftCreationTime.dwHighDateTime=0x1d5e548, ftLastAccessTime.dwLowDateTime=0x5cd7a490, ftLastAccessTime.dwHighDateTime=0x1d5e43a, ftLastWriteTime.dwLowDateTime=0x5cd7a490, ftLastWriteTime.dwHighDateTime=0x1d5e43a, nFileSizeHigh=0x0, nFileSizeLow=0x32d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NSrnaP_Poci.gif", cAlternateFileName="8NSRNA~1.GIF")) returned 1
[0145.691] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x274f2a40, ftCreationTime.dwHighDateTime=0x1d5ef1c, ftLastAccessTime.dwLowDateTime=0x23254cb0, ftLastAccessTime.dwHighDateTime=0x1d5e837, ftLastWriteTime.dwLowDateTime=0x23254cb0, ftLastWriteTime.dwHighDateTime=0x1d5e837, nFileSizeHigh=0x0, nFileSizeLow=0x91e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="8oM0fBFRw.png", cAlternateFileName="8OM0FB~1.PNG")) returned 1
[0145.691] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x967204e0, ftCreationTime.dwHighDateTime=0x1d5e712, ftLastAccessTime.dwLowDateTime=0xc0fb8350, ftLastAccessTime.dwHighDateTime=0x1d5e9c7, ftLastWriteTime.dwLowDateTime=0xc0fb8350, ftLastWriteTime.dwHighDateTime=0x1d5e9c7, nFileSizeHigh=0x0, nFileSizeLow=0x8a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="boER.bmp", cAlternateFileName="")) returned 1
[0145.692] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46fa5050, ftCreationTime.dwHighDateTime=0x1d5ecf5, ftLastAccessTime.dwLowDateTime=0xaf454550, ftLastAccessTime.dwHighDateTime=0x1d5e130, ftLastWriteTime.dwLowDateTime=0xaf454550, ftLastWriteTime.dwHighDateTime=0x1d5e130, nFileSizeHigh=0x0, nFileSizeLow=0x16748, dwReserved0=0x0, dwReserved1=0x0, cFileName="bUMP5sioT8bBpe5Z.bmp", cAlternateFileName="BUMP5S~1.BMP")) returned 1
[0145.692] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e6d400, ftCreationTime.dwHighDateTime=0x1d5ef36, ftLastAccessTime.dwLowDateTime=0xd31ba00, ftLastAccessTime.dwHighDateTime=0x1d5ef81, ftLastWriteTime.dwLowDateTime=0xd31ba00, ftLastWriteTime.dwHighDateTime=0x1d5ef81, nFileSizeHigh=0x0, nFileSizeLow=0x11626, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRbwNZnNUjgINU SHVp.flv", cAlternateFileName="CYRBWN~1.FLV")) returned 1
[0145.692] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0145.692] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe29320, ftCreationTime.dwHighDateTime=0x1d5e8ef, ftLastAccessTime.dwLowDateTime=0xce9a9bb0, ftLastAccessTime.dwHighDateTime=0x1d5e8f8, ftLastWriteTime.dwLowDateTime=0xce9a9bb0, ftLastWriteTime.dwHighDateTime=0x1d5e8f8, nFileSizeHigh=0x0, nFileSizeLow=0x1189d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dqdSV4kY9.pptx", cAlternateFileName="DQDSV4~1.PPT")) returned 1
[0145.692] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda55ba0, ftCreationTime.dwHighDateTime=0x1d5eca1, ftLastAccessTime.dwLowDateTime=0xed1202c0, ftLastAccessTime.dwHighDateTime=0x1d5e0e9, ftLastWriteTime.dwLowDateTime=0xed1202c0, ftLastWriteTime.dwHighDateTime=0x1d5e0e9, nFileSizeHigh=0x0, nFileSizeLow=0x15ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EOfkT_rHDDLu4.wav", cAlternateFileName="EOFKT_~1.WAV")) returned 1
[0145.692] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2f51fd0, ftCreationTime.dwHighDateTime=0x1d5e5c3, ftLastAccessTime.dwLowDateTime=0x4eb04790, ftLastAccessTime.dwHighDateTime=0x1d5ef08, ftLastWriteTime.dwLowDateTime=0x4eb04790, ftLastWriteTime.dwHighDateTime=0x1d5ef08, nFileSizeHigh=0x0, nFileSizeLow=0xa8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="G1JIgLVEFPxfFron.doc", cAlternateFileName="G1JIGL~1.DOC")) returned 1
[0145.692] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bfd0, ftCreationTime.dwHighDateTime=0x1d5ece7, ftLastAccessTime.dwLowDateTime=0x1c321a20, ftLastAccessTime.dwHighDateTime=0x1d5e89e, ftLastWriteTime.dwLowDateTime=0x1c321a20, ftLastWriteTime.dwHighDateTime=0x1d5e89e, nFileSizeHigh=0x0, nFileSizeLow=0x247f, dwReserved0=0x0, dwReserved1=0x0, cFileName="G9ab7E_UM.png", cAlternateFileName="G9AB7E~1.PNG")) returned 1
[0145.693] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba6e660, ftCreationTime.dwHighDateTime=0x1d5e125, ftLastAccessTime.dwLowDateTime=0x867b59a0, ftLastAccessTime.dwHighDateTime=0x1d5e9de, ftLastWriteTime.dwLowDateTime=0x867b59a0, ftLastWriteTime.dwHighDateTime=0x1d5e9de, nFileSizeHigh=0x0, nFileSizeLow=0x1303b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GNHCb.mkv", cAlternateFileName="")) returned 1
[0145.693] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29f24d50, ftCreationTime.dwHighDateTime=0x1d5ec28, ftLastAccessTime.dwLowDateTime=0x39635120, ftLastAccessTime.dwHighDateTime=0x1d5ecba, ftLastWriteTime.dwLowDateTime=0x39635120, ftLastWriteTime.dwHighDateTime=0x1d5ecba, nFileSizeHigh=0x0, nFileSizeLow=0x15636, dwReserved0=0x0, dwReserved1=0x0, cFileName="HP5W0_xtTy4_IV.jpg", cAlternateFileName="HP5W0_~1.JPG")) returned 1
[0145.693] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c37cb20, ftCreationTime.dwHighDateTime=0x1d5e55e, ftLastAccessTime.dwLowDateTime=0x7e2ca90, ftLastAccessTime.dwHighDateTime=0x1d5e832, ftLastWriteTime.dwLowDateTime=0x7e2ca90, ftLastWriteTime.dwHighDateTime=0x1d5e832, nFileSizeHigh=0x0, nFileSizeLow=0x126e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IIi7TDDxZ8.wav", cAlternateFileName="III7TD~1.WAV")) returned 1
[0145.693] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e9e5030, ftCreationTime.dwHighDateTime=0x1d5e7bc, ftLastAccessTime.dwLowDateTime=0xdcd2bd80, ftLastAccessTime.dwHighDateTime=0x1d5e8de, ftLastWriteTime.dwLowDateTime=0xdcd2bd80, ftLastWriteTime.dwHighDateTime=0x1d5e8de, nFileSizeHigh=0x0, nFileSizeLow=0x8a2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="IUcs1x8V.swf", cAlternateFileName="")) returned 1
[0145.693] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d06e20, ftCreationTime.dwHighDateTime=0x1d5e983, ftLastAccessTime.dwLowDateTime=0x20ece5c0, ftLastAccessTime.dwHighDateTime=0x1d5e4fe, ftLastWriteTime.dwLowDateTime=0x20ece5c0, ftLastWriteTime.dwHighDateTime=0x1d5e4fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="kWAJNH0.wav", cAlternateFileName="")) returned 1
[0145.693] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2446cdf0, ftCreationTime.dwHighDateTime=0x1d5e434, ftLastAccessTime.dwLowDateTime=0x62a75be0, ftLastAccessTime.dwHighDateTime=0x1d5eeee, ftLastWriteTime.dwLowDateTime=0x62a75be0, ftLastWriteTime.dwHighDateTime=0x1d5eeee, nFileSizeHigh=0x0, nFileSizeLow=0x120c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="lgm4cLHmP1c_TDDe-f J.avi", cAlternateFileName="LGM4CL~1.AVI")) returned 1
[0145.693] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb14f8e0, ftCreationTime.dwHighDateTime=0x1d5ea20, ftLastAccessTime.dwLowDateTime=0xb4b9dd40, ftLastAccessTime.dwHighDateTime=0x1d5e5a2, ftLastWriteTime.dwLowDateTime=0xb4b9dd40, ftLastWriteTime.dwHighDateTime=0x1d5e5a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="meQB ruo9", cAlternateFileName="MEQBRU~1")) returned 1
[0145.694] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d80b250, ftCreationTime.dwHighDateTime=0x1d5e28c, ftLastAccessTime.dwLowDateTime=0x5bf11740, ftLastAccessTime.dwHighDateTime=0x1d5e29c, ftLastWriteTime.dwLowDateTime=0x5bf11740, ftLastWriteTime.dwHighDateTime=0x1d5e29c, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="mUsss9M.m4a", cAlternateFileName="")) returned 1
[0145.694] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454ccf80, ftCreationTime.dwHighDateTime=0x1d5e151, ftLastAccessTime.dwLowDateTime=0x44a295b0, ftLastAccessTime.dwHighDateTime=0x1d5e8b8, ftLastWriteTime.dwLowDateTime=0x44a295b0, ftLastWriteTime.dwHighDateTime=0x1d5e8b8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="q KD9Zan-WxpTnH.avi", cAlternateFileName="QKD9ZA~1.AVI")) returned 1
[0145.694] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe75c010, ftCreationTime.dwHighDateTime=0x1d5ec56, ftLastAccessTime.dwLowDateTime=0x5aee2110, ftLastAccessTime.dwHighDateTime=0x1d5f090, ftLastWriteTime.dwLowDateTime=0x5aee2110, ftLastWriteTime.dwHighDateTime=0x1d5f090, nFileSizeHigh=0x0, nFileSizeLow=0x17170, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q0E9HxM mfXEN.gif", cAlternateFileName="Q0E9HX~1.GIF")) returned 1
[0145.694] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1bc1880, ftCreationTime.dwHighDateTime=0x1d64266, ftLastAccessTime.dwLowDateTime=0xb1bc1880, ftLastAccessTime.dwHighDateTime=0x1d64266, ftLastWriteTime.dwLowDateTime=0x753bed00, ftLastWriteTime.dwHighDateTime=0x1d64265, nFileSizeHigh=0x0, nFileSizeLow=0x34e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ransomware.exe", cAlternateFileName="RANSOM~1.EXE")) returned 1
[0145.694] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eab840, ftCreationTime.dwHighDateTime=0x1d5e137, ftLastAccessTime.dwLowDateTime=0xd4152130, ftLastAccessTime.dwHighDateTime=0x1d5ec24, ftLastWriteTime.dwLowDateTime=0xd4152130, ftLastWriteTime.dwHighDateTime=0x1d5ec24, nFileSizeHigh=0x0, nFileSizeLow=0x8650, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rc9xx3N1tVL.mp4", cAlternateFileName="RC9XX3~1.MP4")) returned 1
[0145.694] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec895660, ftCreationTime.dwHighDateTime=0x1d5e9df, ftLastAccessTime.dwLowDateTime=0x9329bf10, ftLastAccessTime.dwHighDateTime=0x1d5e22d, ftLastWriteTime.dwLowDateTime=0x9329bf10, ftLastWriteTime.dwHighDateTime=0x1d5e22d, nFileSizeHigh=0x0, nFileSizeLow=0x4438, dwReserved0=0x0, dwReserved1=0x0, cFileName="RxCbV1dW n1.ods", cAlternateFileName="RXCBV1~1.ODS")) returned 1
[0145.694] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba45000, ftCreationTime.dwHighDateTime=0x1d5e5cd, ftLastAccessTime.dwLowDateTime=0xb1ad1840, ftLastAccessTime.dwHighDateTime=0x1d5e7ac, ftLastWriteTime.dwLowDateTime=0xb1ad1840, ftLastWriteTime.dwHighDateTime=0x1d5e7ac, nFileSizeHigh=0x0, nFileSizeLow=0x8d2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEqlC1062iBdUxIV.swf", cAlternateFileName="TEQLC1~1.SWF")) returned 1
[0145.695] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5882bd00, ftCreationTime.dwHighDateTime=0x1d5e203, ftLastAccessTime.dwLowDateTime=0x4173fc30, ftLastAccessTime.dwHighDateTime=0x1d5ef75, ftLastWriteTime.dwLowDateTime=0x4173fc30, ftLastWriteTime.dwHighDateTime=0x1d5ef75, nFileSizeHigh=0x0, nFileSizeLow=0xa91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="uRuc_VqX.xls", cAlternateFileName="")) returned 1
[0145.695] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9228f710, ftCreationTime.dwHighDateTime=0x1d5e963, ftLastAccessTime.dwLowDateTime=0x1a100c20, ftLastAccessTime.dwHighDateTime=0x1d5ebcd, ftLastWriteTime.dwLowDateTime=0x1a100c20, ftLastWriteTime.dwHighDateTime=0x1d5ebcd, nFileSizeHigh=0x0, nFileSizeLow=0x2fb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFKSJpABZ5edEXJ0ua4.swf", cAlternateFileName="WFKSJP~1.SWF")) returned 1
[0145.695] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4c5f090, ftCreationTime.dwHighDateTime=0x1d5e874, ftLastAccessTime.dwLowDateTime=0x1c835a10, ftLastAccessTime.dwHighDateTime=0x1d5e930, ftLastWriteTime.dwLowDateTime=0x1c835a10, ftLastWriteTime.dwHighDateTime=0x1d5e930, nFileSizeHigh=0x0, nFileSizeLow=0x584, dwReserved0=0x0, dwReserved1=0x0, cFileName="XGa3eM6 Wl5oZtbmS1.mp3", cAlternateFileName="XGA3EM~1.MP3")) returned 1
[0145.695] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf7e0610, ftCreationTime.dwHighDateTime=0x1d5e2f9, ftLastAccessTime.dwLowDateTime=0xe1f5b070, ftLastAccessTime.dwHighDateTime=0x1d5e5a4, ftLastWriteTime.dwLowDateTime=0xe1f5b070, ftLastWriteTime.dwHighDateTime=0x1d5e5a4, nFileSizeHigh=0x0, nFileSizeLow=0x9675, dwReserved0=0x0, dwReserved1=0x0, cFileName="XUCQdzqABMsz.mp3", cAlternateFileName="XUCQDZ~1.MP3")) returned 1
[0145.695] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34181b70, ftCreationTime.dwHighDateTime=0x1d5f051, ftLastAccessTime.dwLowDateTime=0x3405ee20, ftLastAccessTime.dwHighDateTime=0x1d5e7ad, ftLastWriteTime.dwLowDateTime=0x3405ee20, ftLastWriteTime.dwHighDateTime=0x1d5e7ad, nFileSizeHigh=0x0, nFileSizeLow=0xf1a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="XYzrHbP6toJ-.xls", cAlternateFileName="XYZRHB~1.XLS")) returned 1
[0145.695] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6625e360, ftCreationTime.dwHighDateTime=0x1d5e2fd, ftLastAccessTime.dwLowDateTime=0x9bfd69b0, ftLastAccessTime.dwHighDateTime=0x1d5e3f0, ftLastWriteTime.dwLowDateTime=0x9bfd69b0, ftLastWriteTime.dwHighDateTime=0x1d5e3f0, nFileSizeHigh=0x0, nFileSizeLow=0x8707, dwReserved0=0x0, dwReserved1=0x0, cFileName="YvpwsGmg-3cg2.m4a", cAlternateFileName="YVPWSG~1.M4A")) returned 1
[0145.695] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74a9690, ftCreationTime.dwHighDateTime=0x1d5e94d, ftLastAccessTime.dwLowDateTime=0xfad56490, ftLastAccessTime.dwHighDateTime=0x1d5e0e1, ftLastWriteTime.dwLowDateTime=0xfad56490, ftLastWriteTime.dwHighDateTime=0x1d5e0e1, nFileSizeHigh=0x0, nFileSizeLow=0xbef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zfKQiQmRsdtZI6T.bmp", cAlternateFileName="ZFKQIQ~1.BMP")) returned 1
[0145.696] FindNextFileW (in: hFindFile=0x880d30, lpFindFileData=0x53e668 | out: lpFindFileData=0x53e668*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0145.696] FindClose (in: hFindFile=0x880d30 | out: hFindFile=0x880d30) returned 1
[0145.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e8f0) returned 1
[0145.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e8fc) returned 1
[0145.700] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", lpFilePart=0x0) returned 0x2b
[0145.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0145.700] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\-pouva49q9ydm-0.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3f4
[0145.700] GetFileType (hFile=0x3f4) returned 0x1
[0145.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0145.700] GetFileType (hFile=0x3f4) returned 0x1
[0145.700] ReadFile (in: hFile=0x3f4, lpBuffer=0x22dc940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22dc940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0145.710] ReadFile (in: hFile=0x3f4, lpBuffer=0x22dc940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22dc940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0145.711] ReadFile (in: hFile=0x3f4, lpBuffer=0x22dc940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22dc940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0145.712] ReadFile (in: hFile=0x3f4, lpBuffer=0x22dc940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22dc940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0145.713] ReadFile (in: hFile=0x3f4, lpBuffer=0x22dc940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22dc940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0145.714] ReadFile (in: hFile=0x3f4, lpBuffer=0x22dc940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22dc940*, lpNumberOfBytesRead=0x53e8bc*=0x358, lpOverlapped=0x0) returned 1
[0145.715] ReadFile (in: hFile=0x3f4, lpBuffer=0x22dc940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22dc940*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0145.716] CloseHandle (hObject=0x3f4) returned 1
[0146.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", lpFilePart=0x0) returned 0x2b
[0146.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", lpFilePart=0x0) returned 0x2b
[0146.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0146.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", lpFilePart=0x0) returned 0x2b
[0146.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0146.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\-pouva49q9ydm-0.mp4"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf384900, ftCreationTime.dwHighDateTime=0x1d5e63e, ftLastAccessTime.dwLowDateTime=0xd8598a40, ftLastAccessTime.dwHighDateTime=0x1d5ede8, ftLastWriteTime.dwLowDateTime=0xd8598a40, ftLastWriteTime.dwHighDateTime=0x1d5ede8, nFileSizeHigh=0x0, nFileSizeLow=0x5358)) returned 1
[0146.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0146.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0146.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0146.867] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf384900, ftCreationTime.dwHighDateTime=0x1d5e63e, ftLastAccessTime.dwLowDateTime=0xd8598a40, ftLastAccessTime.dwHighDateTime=0x1d5ede8, ftLastWriteTime.dwLowDateTime=0xd8598a40, ftLastWriteTime.dwHighDateTime=0x1d5ede8, nFileSizeHigh=0x0, nFileSizeLow=0x5358, dwReserved0=0x0, dwReserved1=0x0, cFileName="-pOUvA49q9yDM-0.mp4", cAlternateFileName="-POUVA~1.MP4")) returned 0x8c7458
[0146.868] FindNextFileW (in: hFindFile=0x8c7458, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0146.868] FindClose (in: hFindFile=0x8c7458 | out: hFindFile=0x8c7458) returned 1
[0146.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0146.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0146.869] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", lpFilePart=0x0) returned 0x2b
[0146.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", lpFilePart=0x0) returned 0x2b
[0146.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0146.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\-pouva49q9ydm-0.mp4"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf384900, ftCreationTime.dwHighDateTime=0x1d5e63e, ftLastAccessTime.dwLowDateTime=0xd8598a40, ftLastAccessTime.dwHighDateTime=0x1d5ede8, ftLastWriteTime.dwLowDateTime=0xd8598a40, ftLastWriteTime.dwHighDateTime=0x1d5ede8, nFileSizeHigh=0x0, nFileSizeLow=0x5358)) returned 1
[0146.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0146.871] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4", lpFilePart=0x0) returned 0x2b
[0146.871] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\-pouva49q9ydm-0.mp4")) returned 1
[0146.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra", lpFilePart=0x0) returned 0x31
[0146.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra", lpFilePart=0x0) returned 0x31
[0146.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0146.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra", lpFilePart=0x0) returned 0x31
[0146.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0146.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\-pouva49q9ydm-0.mp4.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0146.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0146.886] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra", lpFilePart=0x0) returned 0x31
[0146.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0146.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\-pouva49q9ydm-0.mp4.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0146.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0146.886] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra", lpFilePart=0x0) returned 0x31
[0146.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0146.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\-pOUvA49q9yDM-0.mp4.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\-pouva49q9ydm-0.mp4.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0146.887] GetFileType (hFile=0x260) returned 0x1
[0146.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0146.887] GetFileType (hFile=0x260) returned 0x1
[0146.887] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0146.891] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.892] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.893] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.893] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.893] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.894] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.894] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.895] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.912] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.912] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.913] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.913] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.914] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0146.914] WriteFile (in: hFile=0x260, lpBuffer=0x2352eac*, nNumberOfBytesToWrite=0x1c5, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x2352eac*, lpNumberOfBytesWritten=0x53e8c0*=0x1c5, lpOverlapped=0x0) returned 1
[0146.914] CloseHandle (hObject=0x260) returned 1
[0146.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", lpFilePart=0x0) returned 0x28
[0146.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0146.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\34amtfpluw1k.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0146.959] GetFileType (hFile=0x260) returned 0x1
[0146.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0146.959] GetFileType (hFile=0x260) returned 0x1
[0146.959] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.961] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.963] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.964] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.965] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.967] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.968] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.970] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.970] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.972] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.973] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.974] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.975] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0146.977] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0xc57, lpOverlapped=0x0) returned 1
[0146.977] ReadFile (in: hFile=0x260, lpBuffer=0x235405b, nNumberOfBytesToRead=0x3a9, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235405b*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0146.978] ReadFile (in: hFile=0x260, lpBuffer=0x2354c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2354c78*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0146.980] CloseHandle (hObject=0x260) returned 1
[0147.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", lpFilePart=0x0) returned 0x28
[0147.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", lpFilePart=0x0) returned 0x28
[0147.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0147.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", lpFilePart=0x0) returned 0x28
[0147.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0147.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\34amtfpluw1k.gif"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35454580, ftCreationTime.dwHighDateTime=0x1d5e116, ftLastAccessTime.dwLowDateTime=0x54341ef0, ftLastAccessTime.dwHighDateTime=0x1d5e78b, ftLastWriteTime.dwLowDateTime=0x54341ef0, ftLastWriteTime.dwHighDateTime=0x1d5e78b, nFileSizeHigh=0x0, nFileSizeLow=0xdc57)) returned 1
[0147.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0147.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0147.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0147.060] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35454580, ftCreationTime.dwHighDateTime=0x1d5e116, ftLastAccessTime.dwLowDateTime=0x54341ef0, ftLastAccessTime.dwHighDateTime=0x1d5e78b, ftLastWriteTime.dwLowDateTime=0x54341ef0, ftLastWriteTime.dwHighDateTime=0x1d5e78b, nFileSizeHigh=0x0, nFileSizeLow=0xdc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="34aMTfpLUW1K.gif", cAlternateFileName="34AMTF~1.GIF")) returned 0x8c70d8
[0147.061] FindNextFileW (in: hFindFile=0x8c70d8, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0147.061] FindClose (in: hFindFile=0x8c70d8 | out: hFindFile=0x8c70d8) returned 1
[0147.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0147.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0147.061] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", lpFilePart=0x0) returned 0x28
[0147.061] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", lpFilePart=0x0) returned 0x28
[0147.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0147.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\34amtfpluw1k.gif"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35454580, ftCreationTime.dwHighDateTime=0x1d5e116, ftLastAccessTime.dwLowDateTime=0x54341ef0, ftLastAccessTime.dwHighDateTime=0x1d5e78b, ftLastWriteTime.dwLowDateTime=0x54341ef0, ftLastWriteTime.dwHighDateTime=0x1d5e78b, nFileSizeHigh=0x0, nFileSizeLow=0xdc57)) returned 1
[0147.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0147.061] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif", lpFilePart=0x0) returned 0x28
[0147.062] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\34amtfpluw1k.gif")) returned 1
[0147.161] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra", lpFilePart=0x0) returned 0x2e
[0147.161] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra", lpFilePart=0x0) returned 0x2e
[0147.161] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0147.161] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra", lpFilePart=0x0) returned 0x2e
[0147.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0147.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\34amtfpluw1k.gif.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0147.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0147.161] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra", lpFilePart=0x0) returned 0x2e
[0147.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0147.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\34amtfpluw1k.gif.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0147.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0147.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra", lpFilePart=0x0) returned 0x2e
[0147.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0147.162] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\34aMTfpLUW1K.gif.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\34amtfpluw1k.gif.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0147.208] GetFileType (hFile=0x260) returned 0x1
[0147.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0147.208] GetFileType (hFile=0x260) returned 0x1
[0147.208] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0147.213] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.214] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.214] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.215] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.215] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.215] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.216] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.216] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.216] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.217] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.217] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.217] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.217] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.218] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.218] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.218] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.218] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.219] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.219] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.219] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.220] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.220] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.220] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.220] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.221] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.221] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.221] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.221] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.222] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.222] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.222] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.222] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.223] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.274] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.274] WriteFile (in: hFile=0x260, lpBuffer=0x23ce7f4*, nNumberOfBytesToWrite=0xbb1, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x23ce7f4*, lpNumberOfBytesWritten=0x53e8c0*=0xbb1, lpOverlapped=0x0) returned 1
[0147.274] CloseHandle (hObject=0x260) returned 1
[0147.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", lpFilePart=0x0) returned 0x27
[0147.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0147.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\5lmh1kad1rj.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0147.337] GetFileType (hFile=0x260) returned 0x1
[0147.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0147.337] GetFileType (hFile=0x260) returned 0x1
[0147.337] ReadFile (in: hFile=0x260, lpBuffer=0x23d05b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d05b8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0147.343] ReadFile (in: hFile=0x260, lpBuffer=0x23d05b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d05b8*, lpNumberOfBytesRead=0x53e8bc*=0x3b1, lpOverlapped=0x0) returned 1
[0147.343] ReadFile (in: hFile=0x260, lpBuffer=0x23d05b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d05b8*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0147.344] CloseHandle (hObject=0x260) returned 1
[0147.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", lpFilePart=0x0) returned 0x27
[0147.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", lpFilePart=0x0) returned 0x27
[0147.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0147.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", lpFilePart=0x0) returned 0x27
[0147.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0147.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\5lmh1kad1rj.doc"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9674760, ftCreationTime.dwHighDateTime=0x1d5e4b3, ftLastAccessTime.dwLowDateTime=0x1e03250, ftLastAccessTime.dwHighDateTime=0x1d5f0d8, ftLastWriteTime.dwLowDateTime=0x1e03250, ftLastWriteTime.dwHighDateTime=0x1d5f0d8, nFileSizeHigh=0x0, nFileSizeLow=0x13b1)) returned 1
[0147.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0147.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0147.351] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0147.351] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9674760, ftCreationTime.dwHighDateTime=0x1d5e4b3, ftLastAccessTime.dwLowDateTime=0x1e03250, ftLastAccessTime.dwHighDateTime=0x1d5f0d8, ftLastWriteTime.dwLowDateTime=0x1e03250, ftLastWriteTime.dwHighDateTime=0x1d5f0d8, nFileSizeHigh=0x0, nFileSizeLow=0x13b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="5lmH1kaD1rJ.doc", cAlternateFileName="5LMH1K~1.DOC")) returned 0x8c70d8
[0147.351] FindNextFileW (in: hFindFile=0x8c70d8, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0147.352] FindClose (in: hFindFile=0x8c70d8 | out: hFindFile=0x8c70d8) returned 1
[0147.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0147.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0147.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", lpFilePart=0x0) returned 0x27
[0147.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", lpFilePart=0x0) returned 0x27
[0147.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0147.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\5lmh1kad1rj.doc"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9674760, ftCreationTime.dwHighDateTime=0x1d5e4b3, ftLastAccessTime.dwLowDateTime=0x1e03250, ftLastAccessTime.dwHighDateTime=0x1d5f0d8, ftLastWriteTime.dwLowDateTime=0x1e03250, ftLastWriteTime.dwHighDateTime=0x1d5f0d8, nFileSizeHigh=0x0, nFileSizeLow=0x13b1)) returned 1
[0147.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0147.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc", lpFilePart=0x0) returned 0x27
[0147.352] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\5lmh1kad1rj.doc")) returned 1
[0147.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra", lpFilePart=0x0) returned 0x2d
[0147.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra", lpFilePart=0x0) returned 0x2d
[0147.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0147.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra", lpFilePart=0x0) returned 0x2d
[0147.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0147.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\5lmh1kad1rj.doc.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0147.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0147.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra", lpFilePart=0x0) returned 0x2d
[0147.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0147.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\5lmh1kad1rj.doc.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0147.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0147.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra", lpFilePart=0x0) returned 0x2d
[0147.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0147.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5lmH1kaD1rJ.doc.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\5lmh1kad1rj.doc.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0147.490] GetFileType (hFile=0x260) returned 0x1
[0147.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0147.490] GetFileType (hFile=0x260) returned 0x1
[0147.490] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0147.491] WriteFile (in: hFile=0x260, lpBuffer=0x23fca48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fca48*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.493] WriteFile (in: hFile=0x260, lpBuffer=0x23fca48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fca48*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.493] WriteFile (in: hFile=0x260, lpBuffer=0x23fca48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fca48*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.493] WriteFile (in: hFile=0x260, lpBuffer=0x23fca48*, nNumberOfBytesToWrite=0x19d, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x23fca48*, lpNumberOfBytesWritten=0x53e8c0*=0x19d, lpOverlapped=0x0) returned 1
[0147.493] CloseHandle (hObject=0x260) returned 1
[0147.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", lpFilePart=0x0) returned 0x28
[0147.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0147.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\8nsrnap_poci.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0147.543] GetFileType (hFile=0x260) returned 0x1
[0147.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0147.543] GetFileType (hFile=0x260) returned 0x1
[0147.543] ReadFile (in: hFile=0x260, lpBuffer=0x23fe814, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23fe814*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0147.546] ReadFile (in: hFile=0x260, lpBuffer=0x23fe814, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23fe814*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0147.547] ReadFile (in: hFile=0x260, lpBuffer=0x23fe814, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23fe814*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0147.548] ReadFile (in: hFile=0x260, lpBuffer=0x23fe814, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23fe814*, lpNumberOfBytesRead=0x53e8bc*=0x2d7, lpOverlapped=0x0) returned 1
[0147.548] ReadFile (in: hFile=0x260, lpBuffer=0x23fe814, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23fe814*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0147.549] CloseHandle (hObject=0x260) returned 1
[0147.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", lpFilePart=0x0) returned 0x28
[0147.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", lpFilePart=0x0) returned 0x28
[0147.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0147.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", lpFilePart=0x0) returned 0x28
[0147.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0147.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\8nsrnap_poci.gif"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eeddab0, ftCreationTime.dwHighDateTime=0x1d5e548, ftLastAccessTime.dwLowDateTime=0x5cd7a490, ftLastAccessTime.dwHighDateTime=0x1d5e43a, ftLastWriteTime.dwLowDateTime=0x5cd7a490, ftLastWriteTime.dwHighDateTime=0x1d5e43a, nFileSizeHigh=0x0, nFileSizeLow=0x32d7)) returned 1
[0147.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0147.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0147.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0147.557] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eeddab0, ftCreationTime.dwHighDateTime=0x1d5e548, ftLastAccessTime.dwLowDateTime=0x5cd7a490, ftLastAccessTime.dwHighDateTime=0x1d5e43a, ftLastWriteTime.dwLowDateTime=0x5cd7a490, ftLastWriteTime.dwHighDateTime=0x1d5e43a, nFileSizeHigh=0x0, nFileSizeLow=0x32d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NSrnaP_Poci.gif", cAlternateFileName="8NSRNA~1.GIF")) returned 0x8c74d8
[0147.558] FindNextFileW (in: hFindFile=0x8c74d8, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0147.699] FindClose (in: hFindFile=0x8c74d8 | out: hFindFile=0x8c74d8) returned 1
[0147.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0147.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0147.699] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", lpFilePart=0x0) returned 0x28
[0147.699] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", lpFilePart=0x0) returned 0x28
[0147.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0147.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\8nsrnap_poci.gif"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eeddab0, ftCreationTime.dwHighDateTime=0x1d5e548, ftLastAccessTime.dwLowDateTime=0x5cd7a490, ftLastAccessTime.dwHighDateTime=0x1d5e43a, ftLastWriteTime.dwLowDateTime=0x5cd7a490, ftLastWriteTime.dwHighDateTime=0x1d5e43a, nFileSizeHigh=0x0, nFileSizeLow=0x32d7)) returned 1
[0147.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0147.700] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif", lpFilePart=0x0) returned 0x28
[0147.700] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\8nsrnap_poci.gif")) returned 1
[0147.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra", lpFilePart=0x0) returned 0x2e
[0147.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra", lpFilePart=0x0) returned 0x2e
[0147.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0147.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra", lpFilePart=0x0) returned 0x2e
[0147.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0147.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\8nsrnap_poci.gif.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0147.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0147.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra", lpFilePart=0x0) returned 0x2e
[0147.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0147.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\8nsrnap_poci.gif.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0147.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0147.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra", lpFilePart=0x0) returned 0x2e
[0147.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0147.794] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\8NSrnaP_Poci.gif.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\8nsrnap_poci.gif.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0147.888] GetFileType (hFile=0x260) returned 0x1
[0147.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0147.889] GetFileType (hFile=0x260) returned 0x1
[0147.889] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0147.890] WriteFile (in: hFile=0x260, lpBuffer=0x2469378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2469378*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.892] WriteFile (in: hFile=0x260, lpBuffer=0x2469378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2469378*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.892] WriteFile (in: hFile=0x260, lpBuffer=0x2469378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2469378*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.892] WriteFile (in: hFile=0x260, lpBuffer=0x2469378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2469378*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.893] WriteFile (in: hFile=0x260, lpBuffer=0x2469378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2469378*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.893] WriteFile (in: hFile=0x260, lpBuffer=0x2469378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2469378*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.893] WriteFile (in: hFile=0x260, lpBuffer=0x2469378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2469378*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.893] WriteFile (in: hFile=0x260, lpBuffer=0x2469378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2469378*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0147.894] WriteFile (in: hFile=0x260, lpBuffer=0x2469378*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x2469378*, lpNumberOfBytesWritten=0x53e8c0*=0x91, lpOverlapped=0x0) returned 1
[0147.894] CloseHandle (hObject=0x260) returned 1
[0147.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", lpFilePart=0x0) returned 0x25
[0147.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0147.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png" (normalized: "c:\\users\\fd1hvy\\desktop\\8om0fbfrw.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0147.939] GetFileType (hFile=0x260) returned 0x1
[0147.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0147.939] GetFileType (hFile=0x260) returned 0x1
[0147.939] ReadFile (in: hFile=0x260, lpBuffer=0x246b134, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x246b134*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0147.942] ReadFile (in: hFile=0x260, lpBuffer=0x246b134, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x246b134*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0147.942] ReadFile (in: hFile=0x260, lpBuffer=0x246b134, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x246b134*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0147.944] ReadFile (in: hFile=0x260, lpBuffer=0x246b134, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x246b134*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0147.944] ReadFile (in: hFile=0x260, lpBuffer=0x246b134, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x246b134*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.047] ReadFile (in: hFile=0x260, lpBuffer=0x22cc6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22cc6c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.047] ReadFile (in: hFile=0x260, lpBuffer=0x22cc6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22cc6c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.048] ReadFile (in: hFile=0x260, lpBuffer=0x22cc6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22cc6c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.048] ReadFile (in: hFile=0x260, lpBuffer=0x22cc6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22cc6c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.049] ReadFile (in: hFile=0x260, lpBuffer=0x22cc6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22cc6c8*, lpNumberOfBytesRead=0x53e8bc*=0x1e2, lpOverlapped=0x0) returned 1
[0148.049] ReadFile (in: hFile=0x260, lpBuffer=0x22cc6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22cc6c8*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0148.050] CloseHandle (hObject=0x260) returned 1
[0148.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", lpFilePart=0x0) returned 0x25
[0148.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", lpFilePart=0x0) returned 0x25
[0148.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", lpFilePart=0x0) returned 0x25
[0148.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0148.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png" (normalized: "c:\\users\\fd1hvy\\desktop\\8om0fbfrw.png"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x274f2a40, ftCreationTime.dwHighDateTime=0x1d5ef1c, ftLastAccessTime.dwLowDateTime=0x23254cb0, ftLastAccessTime.dwHighDateTime=0x1d5e837, ftLastWriteTime.dwLowDateTime=0x23254cb0, ftLastWriteTime.dwHighDateTime=0x1d5e837, nFileSizeHigh=0x0, nFileSizeLow=0x91e2)) returned 1
[0148.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0148.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0148.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.114] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x274f2a40, ftCreationTime.dwHighDateTime=0x1d5ef1c, ftLastAccessTime.dwLowDateTime=0x23254cb0, ftLastAccessTime.dwHighDateTime=0x1d5e837, ftLastWriteTime.dwLowDateTime=0x23254cb0, ftLastWriteTime.dwHighDateTime=0x1d5e837, nFileSizeHigh=0x0, nFileSizeLow=0x91e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="8oM0fBFRw.png", cAlternateFileName="8OM0FB~1.PNG")) returned 0x8c7058
[0148.114] FindNextFileW (in: hFindFile=0x8c7058, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0148.115] FindClose (in: hFindFile=0x8c7058 | out: hFindFile=0x8c7058) returned 1
[0148.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0148.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0148.116] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", lpFilePart=0x0) returned 0x25
[0148.116] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", lpFilePart=0x0) returned 0x25
[0148.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0148.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png" (normalized: "c:\\users\\fd1hvy\\desktop\\8om0fbfrw.png"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x274f2a40, ftCreationTime.dwHighDateTime=0x1d5ef1c, ftLastAccessTime.dwLowDateTime=0x23254cb0, ftLastAccessTime.dwHighDateTime=0x1d5e837, ftLastWriteTime.dwLowDateTime=0x23254cb0, ftLastWriteTime.dwHighDateTime=0x1d5e837, nFileSizeHigh=0x0, nFileSizeLow=0x91e2)) returned 1
[0148.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0148.116] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png", lpFilePart=0x0) returned 0x25
[0148.116] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png" (normalized: "c:\\users\\fd1hvy\\desktop\\8om0fbfrw.png")) returned 1
[0148.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra", lpFilePart=0x0) returned 0x2b
[0148.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra", lpFilePart=0x0) returned 0x2b
[0148.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra", lpFilePart=0x0) returned 0x2b
[0148.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0148.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\8om0fbfrw.png.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0148.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0148.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra", lpFilePart=0x0) returned 0x2b
[0148.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0148.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\8om0fbfrw.png.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0148.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0148.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra", lpFilePart=0x0) returned 0x2b
[0148.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0148.167] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\8oM0fBFRw.png.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\8om0fbfrw.png.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0148.167] GetFileType (hFile=0x260) returned 0x1
[0148.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0148.167] GetFileType (hFile=0x260) returned 0x1
[0148.167] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0148.170] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.171] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.171] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.171] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.172] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.172] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.172] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.173] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.173] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.173] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.174] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.174] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.174] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.175] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.175] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.175] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.176] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.176] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.176] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.177] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.177] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.177] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.178] WriteFile (in: hFile=0x260, lpBuffer=0x23594b8*, nNumberOfBytesToWrite=0xff1, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x23594b8*, lpNumberOfBytesWritten=0x53e8c0*=0xff1, lpOverlapped=0x0) returned 1
[0148.178] CloseHandle (hObject=0x260) returned 1
[0148.228] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", lpFilePart=0x0) returned 0x20
[0148.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0148.228] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\boer.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0148.228] GetFileType (hFile=0x260) returned 0x1
[0148.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0148.228] GetFileType (hFile=0x260) returned 0x1
[0148.228] ReadFile (in: hFile=0x260, lpBuffer=0x235b264, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235b264*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.229] ReadFile (in: hFile=0x260, lpBuffer=0x235b264, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235b264*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.230] ReadFile (in: hFile=0x260, lpBuffer=0x235b264, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235b264*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.230] ReadFile (in: hFile=0x260, lpBuffer=0x235b264, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235b264*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.231] ReadFile (in: hFile=0x260, lpBuffer=0x235b264, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235b264*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.231] ReadFile (in: hFile=0x260, lpBuffer=0x235b264, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235b264*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.231] ReadFile (in: hFile=0x260, lpBuffer=0x235b264, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235b264*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.231] ReadFile (in: hFile=0x260, lpBuffer=0x235b264, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235b264*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.232] ReadFile (in: hFile=0x260, lpBuffer=0x235b264, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235b264*, lpNumberOfBytesRead=0x53e8bc*=0xa8f, lpOverlapped=0x0) returned 1
[0148.232] ReadFile (in: hFile=0x260, lpBuffer=0x235a87f, nNumberOfBytesToRead=0x171, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235a87f*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0148.232] ReadFile (in: hFile=0x260, lpBuffer=0x235b264, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235b264*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0148.232] CloseHandle (hObject=0x260) returned 1
[0148.243] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", lpFilePart=0x0) returned 0x20
[0148.243] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", lpFilePart=0x0) returned 0x20
[0148.243] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.243] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", lpFilePart=0x0) returned 0x20
[0148.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0148.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\boer.bmp"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x967204e0, ftCreationTime.dwHighDateTime=0x1d5e712, ftLastAccessTime.dwLowDateTime=0xc0fb8350, ftLastAccessTime.dwHighDateTime=0x1d5e9c7, ftLastWriteTime.dwLowDateTime=0xc0fb8350, ftLastWriteTime.dwHighDateTime=0x1d5e9c7, nFileSizeHigh=0x0, nFileSizeLow=0x8a8f)) returned 1
[0148.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0148.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0148.243] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.244] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x967204e0, ftCreationTime.dwHighDateTime=0x1d5e712, ftLastAccessTime.dwLowDateTime=0xc0fb8350, ftLastAccessTime.dwHighDateTime=0x1d5e9c7, ftLastWriteTime.dwLowDateTime=0xc0fb8350, ftLastWriteTime.dwHighDateTime=0x1d5e9c7, nFileSizeHigh=0x0, nFileSizeLow=0x8a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="boER.bmp", cAlternateFileName="")) returned 0x8c7558
[0148.244] FindNextFileW (in: hFindFile=0x8c7558, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0148.245] FindClose (in: hFindFile=0x8c7558 | out: hFindFile=0x8c7558) returned 1
[0148.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0148.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0148.245] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", lpFilePart=0x0) returned 0x20
[0148.245] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", lpFilePart=0x0) returned 0x20
[0148.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0148.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\boer.bmp"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x967204e0, ftCreationTime.dwHighDateTime=0x1d5e712, ftLastAccessTime.dwLowDateTime=0xc0fb8350, ftLastAccessTime.dwHighDateTime=0x1d5e9c7, ftLastWriteTime.dwLowDateTime=0xc0fb8350, ftLastWriteTime.dwHighDateTime=0x1d5e9c7, nFileSizeHigh=0x0, nFileSizeLow=0x8a8f)) returned 1
[0148.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0148.245] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\boER.bmp", lpFilePart=0x0) returned 0x20
[0148.245] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\boer.bmp")) returned 1
[0148.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra", lpFilePart=0x0) returned 0x26
[0148.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra", lpFilePart=0x0) returned 0x26
[0148.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra", lpFilePart=0x0) returned 0x26
[0148.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0148.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\boer.bmp.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0148.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0148.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra", lpFilePart=0x0) returned 0x26
[0148.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0148.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\boer.bmp.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0148.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0148.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra", lpFilePart=0x0) returned 0x26
[0148.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0148.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\boER.bmp.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\boer.bmp.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0148.292] GetFileType (hFile=0x260) returned 0x1
[0148.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0148.292] GetFileType (hFile=0x260) returned 0x1
[0148.292] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0148.295] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.296] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.296] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.296] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.296] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.297] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.297] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.297] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.297] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.297] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.298] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.298] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.298] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.298] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.299] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.299] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.299] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.299] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.300] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.300] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.300] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.300] WriteFile (in: hFile=0x260, lpBuffer=0x23fd244*, nNumberOfBytesToWrite=0xcd1, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x23fd244*, lpNumberOfBytesWritten=0x53e8c0*=0xcd1, lpOverlapped=0x0) returned 1
[0148.300] CloseHandle (hObject=0x260) returned 1
[0148.304] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", lpFilePart=0x0) returned 0x2c
[0148.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0148.304] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\bump5siot8bbpe5z.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0148.304] GetFileType (hFile=0x260) returned 0x1
[0148.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0148.304] GetFileType (hFile=0x260) returned 0x1
[0148.304] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.353] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.353] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.353] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.354] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.354] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.354] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.355] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.355] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.355] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.356] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.356] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.356] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.356] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.357] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.357] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.357] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.358] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.359] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.360] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.361] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.362] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.363] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x748, lpOverlapped=0x0) returned 1
[0148.363] ReadFile (in: hFile=0x260, lpBuffer=0x23fe6f4, nNumberOfBytesToRead=0xb8, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23fe6f4*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0148.363] ReadFile (in: hFile=0x260, lpBuffer=0x23ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23ff020*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0148.366] CloseHandle (hObject=0x260) returned 1
[0148.467] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", lpFilePart=0x0) returned 0x2c
[0148.467] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", lpFilePart=0x0) returned 0x2c
[0148.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", lpFilePart=0x0) returned 0x2c
[0148.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0148.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\bump5siot8bbpe5z.bmp"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46fa5050, ftCreationTime.dwHighDateTime=0x1d5ecf5, ftLastAccessTime.dwLowDateTime=0xaf454550, ftLastAccessTime.dwHighDateTime=0x1d5e130, ftLastWriteTime.dwLowDateTime=0xaf454550, ftLastWriteTime.dwHighDateTime=0x1d5e130, nFileSizeHigh=0x0, nFileSizeLow=0x16748)) returned 1
[0148.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0148.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0148.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.468] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46fa5050, ftCreationTime.dwHighDateTime=0x1d5ecf5, ftLastAccessTime.dwLowDateTime=0xaf454550, ftLastAccessTime.dwHighDateTime=0x1d5e130, ftLastWriteTime.dwLowDateTime=0xaf454550, ftLastWriteTime.dwHighDateTime=0x1d5e130, nFileSizeHigh=0x0, nFileSizeLow=0x16748, dwReserved0=0x0, dwReserved1=0x0, cFileName="bUMP5sioT8bBpe5Z.bmp", cAlternateFileName="BUMP5S~1.BMP")) returned 0x8c6f58
[0148.469] FindNextFileW (in: hFindFile=0x8c6f58, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0148.470] FindClose (in: hFindFile=0x8c6f58 | out: hFindFile=0x8c6f58) returned 1
[0148.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0148.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0148.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", lpFilePart=0x0) returned 0x2c
[0148.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", lpFilePart=0x0) returned 0x2c
[0148.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0148.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\bump5siot8bbpe5z.bmp"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46fa5050, ftCreationTime.dwHighDateTime=0x1d5ecf5, ftLastAccessTime.dwLowDateTime=0xaf454550, ftLastAccessTime.dwHighDateTime=0x1d5e130, ftLastWriteTime.dwLowDateTime=0xaf454550, ftLastWriteTime.dwHighDateTime=0x1d5e130, nFileSizeHigh=0x0, nFileSizeLow=0x16748)) returned 1
[0148.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0148.472] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp", lpFilePart=0x0) returned 0x2c
[0148.472] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\bump5siot8bbpe5z.bmp")) returned 1
[0148.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra", lpFilePart=0x0) returned 0x32
[0148.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra", lpFilePart=0x0) returned 0x32
[0148.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra", lpFilePart=0x0) returned 0x32
[0148.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0148.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\bump5siot8bbpe5z.bmp.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0148.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0148.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra", lpFilePart=0x0) returned 0x32
[0148.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0148.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\bump5siot8bbpe5z.bmp.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0148.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0148.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra", lpFilePart=0x0) returned 0x32
[0148.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0148.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\bUMP5sioT8bBpe5Z.bmp.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\bump5siot8bbpe5z.bmp.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0148.541] GetFileType (hFile=0x260) returned 0x1
[0148.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0148.541] GetFileType (hFile=0x260) returned 0x1
[0148.541] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0148.542] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.544] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.544] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.544] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.545] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.545] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.546] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.546] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.546] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.547] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.547] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.547] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.548] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.548] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.548] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.549] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.549] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.550] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.550] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.550] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.551] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.551] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.552] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.552] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.552] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.553] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.553] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.553] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.554] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.554] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.554] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.554] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.554] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.554] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.555] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.555] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.555] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.555] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.555] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.556] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.556] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.556] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.556] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.556] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.557] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.557] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.557] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.557] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.557] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.558] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.558] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.558] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.558] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.559] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.559] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.559] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.559] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b20*, nNumberOfBytesToWrite=0xa3d, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x22b8b20*, lpNumberOfBytesWritten=0x53e8c0*=0xa3d, lpOverlapped=0x0) returned 1
[0148.560] CloseHandle (hObject=0x260) returned 1
[0148.568] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", lpFilePart=0x0) returned 0x30
[0148.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0148.568] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\cyrbwnznnujginu shvp.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0148.568] GetFileType (hFile=0x260) returned 0x1
[0148.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0148.568] GetFileType (hFile=0x260) returned 0x1
[0148.568] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.569] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.570] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.570] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.570] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.691] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.691] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.691] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.691] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.692] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.692] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.692] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.692] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.692] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.692] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.693] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.693] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.693] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x626, lpOverlapped=0x0) returned 1
[0148.693] ReadFile (in: hFile=0x260, lpBuffer=0x22b9ebe, nNumberOfBytesToRead=0x1da, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9ebe*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0148.693] ReadFile (in: hFile=0x260, lpBuffer=0x22ba90c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba90c*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0148.693] CloseHandle (hObject=0x260) returned 1
[0148.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", lpFilePart=0x0) returned 0x30
[0148.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", lpFilePart=0x0) returned 0x30
[0148.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", lpFilePart=0x0) returned 0x30
[0148.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0148.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\cyrbwnznnujginu shvp.flv"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e6d400, ftCreationTime.dwHighDateTime=0x1d5ef36, ftLastAccessTime.dwLowDateTime=0xd31ba00, ftLastAccessTime.dwHighDateTime=0x1d5ef81, ftLastWriteTime.dwLowDateTime=0xd31ba00, ftLastWriteTime.dwHighDateTime=0x1d5ef81, nFileSizeHigh=0x0, nFileSizeLow=0x11626)) returned 1
[0148.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0148.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0148.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.711] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e6d400, ftCreationTime.dwHighDateTime=0x1d5ef36, ftLastAccessTime.dwLowDateTime=0xd31ba00, ftLastAccessTime.dwHighDateTime=0x1d5ef81, ftLastWriteTime.dwLowDateTime=0xd31ba00, ftLastWriteTime.dwHighDateTime=0x1d5ef81, nFileSizeHigh=0x0, nFileSizeLow=0x11626, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRbwNZnNUjgINU SHVp.flv", cAlternateFileName="CYRBWN~1.FLV")) returned 0x8c7318
[0148.712] FindNextFileW (in: hFindFile=0x8c7318, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0148.713] FindClose (in: hFindFile=0x8c7318 | out: hFindFile=0x8c7318) returned 1
[0148.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0148.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0148.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", lpFilePart=0x0) returned 0x30
[0148.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", lpFilePart=0x0) returned 0x30
[0148.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0148.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\cyrbwnznnujginu shvp.flv"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e6d400, ftCreationTime.dwHighDateTime=0x1d5ef36, ftLastAccessTime.dwLowDateTime=0xd31ba00, ftLastAccessTime.dwHighDateTime=0x1d5ef81, ftLastWriteTime.dwLowDateTime=0xd31ba00, ftLastWriteTime.dwHighDateTime=0x1d5ef81, nFileSizeHigh=0x0, nFileSizeLow=0x11626)) returned 1
[0148.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0148.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv", lpFilePart=0x0) returned 0x30
[0148.713] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\cyrbwnznnujginu shvp.flv")) returned 1
[0148.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra", lpFilePart=0x0) returned 0x36
[0148.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra", lpFilePart=0x0) returned 0x36
[0148.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra", lpFilePart=0x0) returned 0x36
[0148.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0148.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\cyrbwnznnujginu shvp.flv.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0148.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0148.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra", lpFilePart=0x0) returned 0x36
[0148.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0148.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\cyrbwnznnujginu shvp.flv.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0148.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0148.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra", lpFilePart=0x0) returned 0x36
[0148.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0148.777] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CYRbwNZnNUjgINU SHVp.flv.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\cyrbwnznnujginu shvp.flv.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0148.778] GetFileType (hFile=0x260) returned 0x1
[0148.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0148.778] GetFileType (hFile=0x260) returned 0x1
[0148.778] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0148.782] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.783] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.783] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.784] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.784] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.784] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.784] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.784] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.784] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.784] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.785] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.785] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.785] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.785] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.785] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.785] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.786] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.786] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.786] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.786] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.786] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.786] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.786] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.787] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.787] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.787] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.787] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.787] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.787] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.788] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.788] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.788] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.788] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.788] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.788] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.788] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.789] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.789] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.789] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.789] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.789] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.946] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.946] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0148.946] WriteFile (in: hFile=0x260, lpBuffer=0x23536d8*, nNumberOfBytesToWrite=0xd31, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x23536d8*, lpNumberOfBytesWritten=0x53e8c0*=0xd31, lpOverlapped=0x0) returned 1
[0148.947] CloseHandle (hObject=0x260) returned 1
[0148.951] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23
[0148.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0148.951] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\desktop\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0148.951] GetFileType (hFile=0x260) returned 0x1
[0148.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0148.952] GetFileType (hFile=0x260) returned 0x1
[0148.952] ReadFile (in: hFile=0x260, lpBuffer=0x235548c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235548c*, lpNumberOfBytesRead=0x53e8bc*=0x11a, lpOverlapped=0x0) returned 1
[0148.964] ReadFile (in: hFile=0x260, lpBuffer=0x235548c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235548c*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0148.964] CloseHandle (hObject=0x260) returned 1
[0148.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23
[0148.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23
[0148.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23
[0148.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0148.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
[0148.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0148.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0148.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.967] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0x8c7558
[0148.967] FindNextFileW (in: hFindFile=0x8c7558, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0148.967] FindClose (in: hFindFile=0x8c7558 | out: hFindFile=0x8c7558) returned 1
[0148.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0148.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0148.968] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23
[0148.968] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23
[0148.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0148.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
[0148.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0148.968] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23
[0148.968] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\desktop\\desktop.ini")) returned 1
[0148.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra", lpFilePart=0x0) returned 0x29
[0148.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra", lpFilePart=0x0) returned 0x29
[0148.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0148.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra", lpFilePart=0x0) returned 0x29
[0148.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0148.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\desktop.ini.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0148.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0148.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra", lpFilePart=0x0) returned 0x29
[0148.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0148.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\desktop.ini.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0148.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0148.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra", lpFilePart=0x0) returned 0x29
[0148.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0148.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\desktop.ini.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0148.970] GetFileType (hFile=0x260) returned 0x1
[0148.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0148.970] GetFileType (hFile=0x260) returned 0x1
[0148.970] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0148.970] WriteFile (in: hFile=0x260, lpBuffer=0x235a288*, nNumberOfBytesToWrite=0x185, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x235a288*, lpNumberOfBytesWritten=0x53e8c0*=0x185, lpOverlapped=0x0) returned 1
[0148.971] CloseHandle (hObject=0x260) returned 1
[0148.974] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", lpFilePart=0x0) returned 0x26
[0148.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0148.974] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\dqdsv4ky9.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0148.974] GetFileType (hFile=0x260) returned 0x1
[0148.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0148.974] GetFileType (hFile=0x260) returned 0x1
[0148.974] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.975] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.975] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.975] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.976] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.976] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.976] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.976] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.976] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.976] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.977] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.977] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.977] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.977] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.977] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.978] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.978] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0148.978] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x89d, lpOverlapped=0x0) returned 1
[0148.978] ReadFile (in: hFile=0x260, lpBuffer=0x235b475, nNumberOfBytesToRead=0x363, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235b475*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0148.978] ReadFile (in: hFile=0x260, lpBuffer=0x235c04c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c04c*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0148.981] CloseHandle (hObject=0x260) returned 1
[0149.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", lpFilePart=0x0) returned 0x26
[0149.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", lpFilePart=0x0) returned 0x26
[0149.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0149.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", lpFilePart=0x0) returned 0x26
[0149.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0149.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\dqdsv4ky9.pptx"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe29320, ftCreationTime.dwHighDateTime=0x1d5e8ef, ftLastAccessTime.dwLowDateTime=0xce9a9bb0, ftLastAccessTime.dwHighDateTime=0x1d5e8f8, ftLastWriteTime.dwLowDateTime=0xce9a9bb0, ftLastWriteTime.dwHighDateTime=0x1d5e8f8, nFileSizeHigh=0x0, nFileSizeLow=0x1189d)) returned 1
[0149.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0149.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0149.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0149.060] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe29320, ftCreationTime.dwHighDateTime=0x1d5e8ef, ftLastAccessTime.dwLowDateTime=0xce9a9bb0, ftLastAccessTime.dwHighDateTime=0x1d5e8f8, ftLastWriteTime.dwLowDateTime=0xce9a9bb0, ftLastWriteTime.dwHighDateTime=0x1d5e8f8, nFileSizeHigh=0x0, nFileSizeLow=0x1189d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dqdSV4kY9.pptx", cAlternateFileName="DQDSV4~1.PPT")) returned 0x8c72d8
[0149.060] FindNextFileW (in: hFindFile=0x8c72d8, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0149.062] FindClose (in: hFindFile=0x8c72d8 | out: hFindFile=0x8c72d8) returned 1
[0149.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0149.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0149.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", lpFilePart=0x0) returned 0x26
[0149.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", lpFilePart=0x0) returned 0x26
[0149.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0149.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\dqdsv4ky9.pptx"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe29320, ftCreationTime.dwHighDateTime=0x1d5e8ef, ftLastAccessTime.dwLowDateTime=0xce9a9bb0, ftLastAccessTime.dwHighDateTime=0x1d5e8f8, ftLastWriteTime.dwLowDateTime=0xce9a9bb0, ftLastWriteTime.dwHighDateTime=0x1d5e8f8, nFileSizeHigh=0x0, nFileSizeLow=0x1189d)) returned 1
[0149.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0149.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx", lpFilePart=0x0) returned 0x26
[0149.062] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\dqdsv4ky9.pptx")) returned 1
[0149.147] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra", lpFilePart=0x0) returned 0x2c
[0149.147] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra", lpFilePart=0x0) returned 0x2c
[0149.147] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0149.147] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra", lpFilePart=0x0) returned 0x2c
[0149.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0149.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\dqdsv4ky9.pptx.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0149.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0149.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra", lpFilePart=0x0) returned 0x2c
[0149.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0149.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\dqdsv4ky9.pptx.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0149.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0149.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra", lpFilePart=0x0) returned 0x2c
[0149.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0149.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\dqdSV4kY9.pptx.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\dqdsv4ky9.pptx.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0149.149] GetFileType (hFile=0x260) returned 0x1
[0149.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0149.149] GetFileType (hFile=0x260) returned 0x1
[0149.149] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0149.149] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.151] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.151] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.152] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.152] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.153] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.153] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.154] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.154] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.155] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.155] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.156] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.156] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.156] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.157] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.157] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.158] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.158] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.159] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.159] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.160] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.160] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.160] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.161] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.161] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.162] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.162] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.163] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.163] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.163] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.163] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.163] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.164] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.164] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.164] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.165] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.165] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.165] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.165] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.166] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.166] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.166] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.166] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.167] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.167] WriteFile (in: hFile=0x260, lpBuffer=0x22b8ee0*, nNumberOfBytesToWrite=0x3fd, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x22b8ee0*, lpNumberOfBytesWritten=0x53e8c0*=0x3fd, lpOverlapped=0x0) returned 1
[0149.167] CloseHandle (hObject=0x260) returned 1
[0149.176] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", lpFilePart=0x0) returned 0x29
[0149.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0149.176] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\eofkt_rhddlu4.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0149.176] GetFileType (hFile=0x260) returned 0x1
[0149.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0149.176] GetFileType (hFile=0x260) returned 0x1
[0149.176] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.177] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.177] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.177] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.178] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.178] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.178] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.178] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.178] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.179] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.179] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.179] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.179] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.179] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.180] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.180] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.282] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.283] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.283] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.283] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.283] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.283] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0xac8, lpOverlapped=0x0) returned 1
[0149.284] ReadFile (in: hFile=0x260, lpBuffer=0x22ba300, nNumberOfBytesToRead=0x138, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba300*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0149.284] ReadFile (in: hFile=0x260, lpBuffer=0x22bacac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22bacac*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0149.284] CloseHandle (hObject=0x260) returned 1
[0149.299] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", lpFilePart=0x0) returned 0x29
[0149.299] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", lpFilePart=0x0) returned 0x29
[0149.299] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0149.300] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", lpFilePart=0x0) returned 0x29
[0149.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0149.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\eofkt_rhddlu4.wav"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda55ba0, ftCreationTime.dwHighDateTime=0x1d5eca1, ftLastAccessTime.dwLowDateTime=0xed1202c0, ftLastAccessTime.dwHighDateTime=0x1d5e0e9, ftLastWriteTime.dwLowDateTime=0xed1202c0, ftLastWriteTime.dwHighDateTime=0x1d5e0e9, nFileSizeHigh=0x0, nFileSizeLow=0x15ac8)) returned 1
[0149.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0149.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0149.300] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0149.300] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda55ba0, ftCreationTime.dwHighDateTime=0x1d5eca1, ftLastAccessTime.dwLowDateTime=0xed1202c0, ftLastAccessTime.dwHighDateTime=0x1d5e0e9, ftLastWriteTime.dwLowDateTime=0xed1202c0, ftLastWriteTime.dwHighDateTime=0x1d5e0e9, nFileSizeHigh=0x0, nFileSizeLow=0x15ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EOfkT_rHDDLu4.wav", cAlternateFileName="EOFKT_~1.WAV")) returned 0x8c6f58
[0149.300] FindNextFileW (in: hFindFile=0x8c6f58, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0149.302] FindClose (in: hFindFile=0x8c6f58 | out: hFindFile=0x8c6f58) returned 1
[0149.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0149.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0149.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", lpFilePart=0x0) returned 0x29
[0149.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", lpFilePart=0x0) returned 0x29
[0149.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0149.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\eofkt_rhddlu4.wav"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda55ba0, ftCreationTime.dwHighDateTime=0x1d5eca1, ftLastAccessTime.dwLowDateTime=0xed1202c0, ftLastAccessTime.dwHighDateTime=0x1d5e0e9, ftLastWriteTime.dwLowDateTime=0xed1202c0, ftLastWriteTime.dwHighDateTime=0x1d5e0e9, nFileSizeHigh=0x0, nFileSizeLow=0x15ac8)) returned 1
[0149.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0149.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav", lpFilePart=0x0) returned 0x29
[0149.302] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\eofkt_rhddlu4.wav")) returned 1
[0149.372] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra", lpFilePart=0x0) returned 0x2f
[0149.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra", lpFilePart=0x0) returned 0x2f
[0149.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0149.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra", lpFilePart=0x0) returned 0x2f
[0149.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0149.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\eofkt_rhddlu4.wav.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0149.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0149.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra", lpFilePart=0x0) returned 0x2f
[0149.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0149.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\eofkt_rhddlu4.wav.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0149.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0149.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra", lpFilePart=0x0) returned 0x2f
[0149.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0149.374] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\EOfkT_rHDDLu4.wav.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\eofkt_rhddlu4.wav.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0149.374] GetFileType (hFile=0x260) returned 0x1
[0149.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0149.374] GetFileType (hFile=0x260) returned 0x1
[0149.374] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0149.470] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.484] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.485] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.485] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.485] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.486] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.486] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.487] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.487] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.488] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.488] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.488] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.489] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.489] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.491] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.491] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.491] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.492] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.492] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.493] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.493] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.494] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.494] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.494] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.495] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.495] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.496] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.496] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.496] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.497] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.497] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.497] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.497] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.497] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.498] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.498] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.498] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.498] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.499] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.501] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.501] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.501] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.501] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.502] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.502] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.502] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.502] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.503] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.503] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.503] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.503] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.504] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.504] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.504] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.504] WriteFile (in: hFile=0x260, lpBuffer=0x22b76b8*, nNumberOfBytesToWrite=0xb65, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x22b76b8*, lpNumberOfBytesWritten=0x53e8c0*=0xb65, lpOverlapped=0x0) returned 1
[0149.505] CloseHandle (hObject=0x260) returned 1
[0149.512] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", lpFilePart=0x0) returned 0x2c
[0149.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0149.512] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\g1jiglvefpxffron.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0149.512] GetFileType (hFile=0x260) returned 0x1
[0149.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0149.513] GetFileType (hFile=0x260) returned 0x1
[0149.513] ReadFile (in: hFile=0x260, lpBuffer=0x22b9494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9494*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.514] ReadFile (in: hFile=0x260, lpBuffer=0x22b9494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9494*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.514] ReadFile (in: hFile=0x260, lpBuffer=0x22b9494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9494*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.514] ReadFile (in: hFile=0x260, lpBuffer=0x22b9494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9494*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.515] ReadFile (in: hFile=0x260, lpBuffer=0x22b9494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9494*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.515] ReadFile (in: hFile=0x260, lpBuffer=0x22b9494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9494*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.515] ReadFile (in: hFile=0x260, lpBuffer=0x22b9494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9494*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.516] ReadFile (in: hFile=0x260, lpBuffer=0x22b9494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9494*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.516] ReadFile (in: hFile=0x260, lpBuffer=0x22b9494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9494*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.516] ReadFile (in: hFile=0x260, lpBuffer=0x22b9494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9494*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.516] ReadFile (in: hFile=0x260, lpBuffer=0x22b9494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9494*, lpNumberOfBytesRead=0x53e8bc*=0x8dd, lpOverlapped=0x0) returned 1
[0149.517] ReadFile (in: hFile=0x260, lpBuffer=0x22b88fd, nNumberOfBytesToRead=0x323, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b88fd*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0149.517] ReadFile (in: hFile=0x260, lpBuffer=0x22b9494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9494*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0149.517] CloseHandle (hObject=0x260) returned 1
[0149.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", lpFilePart=0x0) returned 0x2c
[0149.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", lpFilePart=0x0) returned 0x2c
[0149.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0149.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", lpFilePart=0x0) returned 0x2c
[0149.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0149.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\g1jiglvefpxffron.doc"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2f51fd0, ftCreationTime.dwHighDateTime=0x1d5e5c3, ftLastAccessTime.dwLowDateTime=0x4eb04790, ftLastAccessTime.dwHighDateTime=0x1d5ef08, ftLastWriteTime.dwLowDateTime=0x4eb04790, ftLastWriteTime.dwHighDateTime=0x1d5ef08, nFileSizeHigh=0x0, nFileSizeLow=0xa8dd)) returned 1
[0149.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0149.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0149.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0149.669] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2f51fd0, ftCreationTime.dwHighDateTime=0x1d5e5c3, ftLastAccessTime.dwLowDateTime=0x4eb04790, ftLastAccessTime.dwHighDateTime=0x1d5ef08, ftLastWriteTime.dwLowDateTime=0x4eb04790, ftLastWriteTime.dwHighDateTime=0x1d5ef08, nFileSizeHigh=0x0, nFileSizeLow=0xa8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="G1JIgLVEFPxfFron.doc", cAlternateFileName="G1JIGL~1.DOC")) returned 0x8c7358
[0149.669] FindNextFileW (in: hFindFile=0x8c7358, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0149.671] FindClose (in: hFindFile=0x8c7358 | out: hFindFile=0x8c7358) returned 1
[0149.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0149.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0149.671] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", lpFilePart=0x0) returned 0x2c
[0149.671] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", lpFilePart=0x0) returned 0x2c
[0149.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0149.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\g1jiglvefpxffron.doc"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2f51fd0, ftCreationTime.dwHighDateTime=0x1d5e5c3, ftLastAccessTime.dwLowDateTime=0x4eb04790, ftLastAccessTime.dwHighDateTime=0x1d5ef08, ftLastWriteTime.dwLowDateTime=0x4eb04790, ftLastWriteTime.dwHighDateTime=0x1d5ef08, nFileSizeHigh=0x0, nFileSizeLow=0xa8dd)) returned 1
[0149.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0149.671] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc", lpFilePart=0x0) returned 0x2c
[0149.671] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\g1jiglvefpxffron.doc")) returned 1
[0149.775] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra", lpFilePart=0x0) returned 0x32
[0149.775] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra", lpFilePart=0x0) returned 0x32
[0149.775] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0149.775] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra", lpFilePart=0x0) returned 0x32
[0149.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0149.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\g1jiglvefpxffron.doc.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0149.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0149.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra", lpFilePart=0x0) returned 0x32
[0149.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0149.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\g1jiglvefpxffron.doc.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0149.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0149.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra", lpFilePart=0x0) returned 0x32
[0149.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0149.776] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\G1JIgLVEFPxfFron.doc.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\g1jiglvefpxffron.doc.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0149.776] GetFileType (hFile=0x260) returned 0x1
[0149.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0149.776] GetFileType (hFile=0x260) returned 0x1
[0149.776] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0149.777] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.778] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.778] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.778] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.778] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.778] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.778] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.779] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.779] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.779] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.779] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.779] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.779] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.780] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.780] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.780] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.780] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.780] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.780] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.781] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.781] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.781] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.785] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.785] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.785] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.785] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.786] WriteFile (in: hFile=0x260, lpBuffer=0x237da44*, nNumberOfBytesToWrite=0x911, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x237da44*, lpNumberOfBytesWritten=0x53e8c0*=0x911, lpOverlapped=0x0) returned 1
[0149.786] CloseHandle (hObject=0x260) returned 1
[0149.789] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", lpFilePart=0x0) returned 0x25
[0149.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0149.789] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png" (normalized: "c:\\users\\fd1hvy\\desktop\\g9ab7e_um.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0149.789] GetFileType (hFile=0x260) returned 0x1
[0149.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0149.789] GetFileType (hFile=0x260) returned 0x1
[0149.789] ReadFile (in: hFile=0x260, lpBuffer=0x237f800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x237f800*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.790] ReadFile (in: hFile=0x260, lpBuffer=0x237f800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x237f800*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.790] ReadFile (in: hFile=0x260, lpBuffer=0x237f800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x237f800*, lpNumberOfBytesRead=0x53e8bc*=0x47f, lpOverlapped=0x0) returned 1
[0149.790] ReadFile (in: hFile=0x260, lpBuffer=0x237ec0b, nNumberOfBytesToRead=0x381, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x237ec0b*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0149.790] ReadFile (in: hFile=0x260, lpBuffer=0x237f800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x237f800*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0149.791] CloseHandle (hObject=0x260) returned 1
[0149.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", lpFilePart=0x0) returned 0x25
[0149.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", lpFilePart=0x0) returned 0x25
[0149.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0149.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", lpFilePart=0x0) returned 0x25
[0149.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0149.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png" (normalized: "c:\\users\\fd1hvy\\desktop\\g9ab7e_um.png"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bfd0, ftCreationTime.dwHighDateTime=0x1d5ece7, ftLastAccessTime.dwLowDateTime=0x1c321a20, ftLastAccessTime.dwHighDateTime=0x1d5e89e, ftLastWriteTime.dwLowDateTime=0x1c321a20, ftLastWriteTime.dwHighDateTime=0x1d5e89e, nFileSizeHigh=0x0, nFileSizeLow=0x247f)) returned 1
[0149.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0149.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0149.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0149.794] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bfd0, ftCreationTime.dwHighDateTime=0x1d5ece7, ftLastAccessTime.dwLowDateTime=0x1c321a20, ftLastAccessTime.dwHighDateTime=0x1d5e89e, ftLastWriteTime.dwLowDateTime=0x1c321a20, ftLastWriteTime.dwHighDateTime=0x1d5e89e, nFileSizeHigh=0x0, nFileSizeLow=0x247f, dwReserved0=0x0, dwReserved1=0x0, cFileName="G9ab7E_UM.png", cAlternateFileName="G9AB7E~1.PNG")) returned 0x8c73d8
[0149.795] FindNextFileW (in: hFindFile=0x8c73d8, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0149.795] FindClose (in: hFindFile=0x8c73d8 | out: hFindFile=0x8c73d8) returned 1
[0149.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0149.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0149.795] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", lpFilePart=0x0) returned 0x25
[0149.795] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", lpFilePart=0x0) returned 0x25
[0149.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0149.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png" (normalized: "c:\\users\\fd1hvy\\desktop\\g9ab7e_um.png"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bfd0, ftCreationTime.dwHighDateTime=0x1d5ece7, ftLastAccessTime.dwLowDateTime=0x1c321a20, ftLastAccessTime.dwHighDateTime=0x1d5e89e, ftLastWriteTime.dwLowDateTime=0x1c321a20, ftLastWriteTime.dwHighDateTime=0x1d5e89e, nFileSizeHigh=0x0, nFileSizeLow=0x247f)) returned 1
[0149.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0149.795] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png", lpFilePart=0x0) returned 0x25
[0149.795] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png" (normalized: "c:\\users\\fd1hvy\\desktop\\g9ab7e_um.png")) returned 1
[0149.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra", lpFilePart=0x0) returned 0x2b
[0149.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra", lpFilePart=0x0) returned 0x2b
[0149.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0149.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra", lpFilePart=0x0) returned 0x2b
[0149.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0149.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\g9ab7e_um.png.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0149.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0149.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra", lpFilePart=0x0) returned 0x2b
[0149.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0149.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\g9ab7e_um.png.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0149.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0149.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra", lpFilePart=0x0) returned 0x2b
[0149.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0149.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\G9ab7E_UM.png.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\g9ab7e_um.png.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0149.814] GetFileType (hFile=0x260) returned 0x1
[0149.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0149.814] GetFileType (hFile=0x260) returned 0x1
[0149.814] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0149.815] WriteFile (in: hFile=0x260, lpBuffer=0x23cf404*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23cf404*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.816] WriteFile (in: hFile=0x260, lpBuffer=0x23cf404*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23cf404*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.816] WriteFile (in: hFile=0x260, lpBuffer=0x23cf404*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23cf404*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.816] WriteFile (in: hFile=0x260, lpBuffer=0x23cf404*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23cf404*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.816] WriteFile (in: hFile=0x260, lpBuffer=0x23cf404*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x23cf404*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0149.816] WriteFile (in: hFile=0x260, lpBuffer=0x23cf404*, nNumberOfBytesToWrite=0xc65, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x23cf404*, lpNumberOfBytesWritten=0x53e8c0*=0xc65, lpOverlapped=0x0) returned 1
[0149.817] CloseHandle (hObject=0x260) returned 1
[0149.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", lpFilePart=0x0) returned 0x21
[0149.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0149.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\gnhcb.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0149.819] GetFileType (hFile=0x260) returned 0x1
[0149.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0149.819] GetFileType (hFile=0x260) returned 0x1
[0149.819] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.820] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.820] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.821] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.821] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.821] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.821] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.821] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.821] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.822] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.822] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.822] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.822] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.822] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.822] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.823] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.823] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.907] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.908] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0149.908] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x3b, lpOverlapped=0x0) returned 1
[0149.908] ReadFile (in: hFile=0x260, lpBuffer=0x23d11b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x23d11b0*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0149.908] CloseHandle (hObject=0x260) returned 1
[0150.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", lpFilePart=0x0) returned 0x21
[0150.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", lpFilePart=0x0) returned 0x21
[0150.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0150.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", lpFilePart=0x0) returned 0x21
[0150.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0150.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\gnhcb.mkv"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba6e660, ftCreationTime.dwHighDateTime=0x1d5e125, ftLastAccessTime.dwLowDateTime=0x867b59a0, ftLastAccessTime.dwHighDateTime=0x1d5e9de, ftLastWriteTime.dwLowDateTime=0x867b59a0, ftLastWriteTime.dwHighDateTime=0x1d5e9de, nFileSizeHigh=0x0, nFileSizeLow=0x1303b)) returned 1
[0150.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0150.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0150.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0150.132] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba6e660, ftCreationTime.dwHighDateTime=0x1d5e125, ftLastAccessTime.dwLowDateTime=0x867b59a0, ftLastAccessTime.dwHighDateTime=0x1d5e9de, ftLastWriteTime.dwLowDateTime=0x867b59a0, ftLastWriteTime.dwHighDateTime=0x1d5e9de, nFileSizeHigh=0x0, nFileSizeLow=0x1303b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GNHCb.mkv", cAlternateFileName="")) returned 0x8c73d8
[0150.132] FindNextFileW (in: hFindFile=0x8c73d8, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0150.134] FindClose (in: hFindFile=0x8c73d8 | out: hFindFile=0x8c73d8) returned 1
[0150.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0150.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0150.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", lpFilePart=0x0) returned 0x21
[0150.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", lpFilePart=0x0) returned 0x21
[0150.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0150.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\gnhcb.mkv"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba6e660, ftCreationTime.dwHighDateTime=0x1d5e125, ftLastAccessTime.dwLowDateTime=0x867b59a0, ftLastAccessTime.dwHighDateTime=0x1d5e9de, ftLastWriteTime.dwLowDateTime=0x867b59a0, ftLastWriteTime.dwHighDateTime=0x1d5e9de, nFileSizeHigh=0x0, nFileSizeLow=0x1303b)) returned 1
[0150.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0150.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv", lpFilePart=0x0) returned 0x21
[0150.134] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\gnhcb.mkv")) returned 1
[0150.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra", lpFilePart=0x0) returned 0x27
[0150.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra", lpFilePart=0x0) returned 0x27
[0150.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0150.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra", lpFilePart=0x0) returned 0x27
[0150.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0150.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\gnhcb.mkv.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0150.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0150.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra", lpFilePart=0x0) returned 0x27
[0150.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0150.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\gnhcb.mkv.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0150.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0150.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra", lpFilePart=0x0) returned 0x27
[0150.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0150.262] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNHCb.mkv.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\gnhcb.mkv.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0150.316] GetFileType (hFile=0x260) returned 0x1
[0150.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0150.316] GetFileType (hFile=0x260) returned 0x1
[0150.316] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0150.343] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.344] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.345] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.345] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.345] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.345] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.345] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.346] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.346] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.346] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.346] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.346] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.347] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.347] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.347] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.347] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.348] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.348] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.348] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.348] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.348] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.349] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.349] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.349] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.349] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.349] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.350] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.350] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.350] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.350] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.350] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.351] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.351] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.351] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.351] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.352] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.352] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.352] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.352] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.352] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.353] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.353] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.353] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.353] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.354] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.354] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.354] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.354] WriteFile (in: hFile=0x260, lpBuffer=0x247966c*, nNumberOfBytesToWrite=0xf11, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x247966c*, lpNumberOfBytesWritten=0x53e8c0*=0xf11, lpOverlapped=0x0) returned 1
[0150.354] CloseHandle (hObject=0x260) returned 1
[0150.424] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", lpFilePart=0x0) returned 0x2a
[0150.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0150.424] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\hp5w0_xtty4_iv.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0150.424] GetFileType (hFile=0x260) returned 0x1
[0150.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0150.424] GetFileType (hFile=0x260) returned 0x1
[0150.424] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.425] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.425] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.425] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.426] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.426] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.426] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.426] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.426] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.428] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.428] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.431] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.432] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.433] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.435] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.435] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.437] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.438] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.439] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.440] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.441] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.443] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x636, lpOverlapped=0x0) returned 1
[0150.443] ReadFile (in: hFile=0x260, lpBuffer=0x247aa02, nNumberOfBytesToRead=0x1ca, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247aa02*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0150.443] ReadFile (in: hFile=0x260, lpBuffer=0x247b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x247b440*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0150.447] CloseHandle (hObject=0x260) returned 1
[0150.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", lpFilePart=0x0) returned 0x2a
[0150.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", lpFilePart=0x0) returned 0x2a
[0150.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0150.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", lpFilePart=0x0) returned 0x2a
[0150.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0150.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\hp5w0_xtty4_iv.jpg"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29f24d50, ftCreationTime.dwHighDateTime=0x1d5ec28, ftLastAccessTime.dwLowDateTime=0x39635120, ftLastAccessTime.dwHighDateTime=0x1d5ecba, ftLastWriteTime.dwLowDateTime=0x39635120, ftLastWriteTime.dwHighDateTime=0x1d5ecba, nFileSizeHigh=0x0, nFileSizeLow=0x15636)) returned 1
[0150.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0150.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0150.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0150.558] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29f24d50, ftCreationTime.dwHighDateTime=0x1d5ec28, ftLastAccessTime.dwLowDateTime=0x39635120, ftLastAccessTime.dwHighDateTime=0x1d5ecba, ftLastWriteTime.dwLowDateTime=0x39635120, ftLastWriteTime.dwHighDateTime=0x1d5ecba, nFileSizeHigh=0x0, nFileSizeLow=0x15636, dwReserved0=0x0, dwReserved1=0x0, cFileName="HP5W0_xtTy4_IV.jpg", cAlternateFileName="HP5W0_~1.JPG")) returned 0x8c70d8
[0150.558] FindNextFileW (in: hFindFile=0x8c70d8, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0150.560] FindClose (in: hFindFile=0x8c70d8 | out: hFindFile=0x8c70d8) returned 1
[0150.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0150.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0150.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", lpFilePart=0x0) returned 0x2a
[0150.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", lpFilePart=0x0) returned 0x2a
[0150.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0150.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\hp5w0_xtty4_iv.jpg"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29f24d50, ftCreationTime.dwHighDateTime=0x1d5ec28, ftLastAccessTime.dwLowDateTime=0x39635120, ftLastAccessTime.dwHighDateTime=0x1d5ecba, ftLastWriteTime.dwLowDateTime=0x39635120, ftLastWriteTime.dwHighDateTime=0x1d5ecba, nFileSizeHigh=0x0, nFileSizeLow=0x15636)) returned 1
[0150.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0150.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg", lpFilePart=0x0) returned 0x2a
[0150.560] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\hp5w0_xtty4_iv.jpg")) returned 1
[0150.743] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra", lpFilePart=0x0) returned 0x30
[0150.743] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra", lpFilePart=0x0) returned 0x30
[0150.744] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0150.744] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra", lpFilePart=0x0) returned 0x30
[0150.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0150.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\hp5w0_xtty4_iv.jpg.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0150.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0150.744] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra", lpFilePart=0x0) returned 0x30
[0150.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0150.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\hp5w0_xtty4_iv.jpg.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0150.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0150.744] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra", lpFilePart=0x0) returned 0x30
[0150.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0150.744] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\HP5W0_xtTy4_IV.jpg.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\hp5w0_xtty4_iv.jpg.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0150.818] GetFileType (hFile=0x260) returned 0x1
[0150.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0150.818] GetFileType (hFile=0x260) returned 0x1
[0150.818] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0150.819] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.820] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.825] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.829] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.834] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.834] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.835] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.835] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.836] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.836] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.836] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.837] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.837] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.838] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.838] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.839] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.839] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.840] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.840] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.840] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.841] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.841] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.842] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.842] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.842] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.843] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.843] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.844] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.844] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.844] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.844] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.844] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.845] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.845] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.845] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.845] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.846] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.846] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.846] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.846] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.846] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.847] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.847] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.847] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.847] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.848] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.848] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.848] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.848] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.849] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.849] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.849] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.849] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0150.849] WriteFile (in: hFile=0x260, lpBuffer=0x22b8b14*, nNumberOfBytesToWrite=0xedd, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x22b8b14*, lpNumberOfBytesWritten=0x53e8c0*=0xedd, lpOverlapped=0x0) returned 1
[0150.850] CloseHandle (hObject=0x260) returned 1
[0150.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", lpFilePart=0x0) returned 0x26
[0150.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0150.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\iii7tddxz8.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0150.971] GetFileType (hFile=0x260) returned 0x1
[0150.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0150.971] GetFileType (hFile=0x260) returned 0x1
[0150.971] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.972] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.972] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.972] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.972] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.972] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.973] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.973] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.973] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.973] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.973] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.974] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.974] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.974] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.974] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.974] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.975] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.975] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0150.975] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x6e0, lpOverlapped=0x0) returned 1
[0150.975] ReadFile (in: hFile=0x260, lpBuffer=0x22b9f44, nNumberOfBytesToRead=0x120, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9f44*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0150.975] ReadFile (in: hFile=0x260, lpBuffer=0x22ba8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba8d8*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0150.976] CloseHandle (hObject=0x260) returned 1
[0150.994] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", lpFilePart=0x0) returned 0x26
[0150.994] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", lpFilePart=0x0) returned 0x26
[0150.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0150.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", lpFilePart=0x0) returned 0x26
[0150.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0150.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\iii7tddxz8.wav"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c37cb20, ftCreationTime.dwHighDateTime=0x1d5e55e, ftLastAccessTime.dwLowDateTime=0x7e2ca90, ftLastAccessTime.dwHighDateTime=0x1d5e832, ftLastWriteTime.dwLowDateTime=0x7e2ca90, ftLastWriteTime.dwHighDateTime=0x1d5e832, nFileSizeHigh=0x0, nFileSizeLow=0x126e0)) returned 1
[0150.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0150.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0150.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0150.995] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c37cb20, ftCreationTime.dwHighDateTime=0x1d5e55e, ftLastAccessTime.dwLowDateTime=0x7e2ca90, ftLastAccessTime.dwHighDateTime=0x1d5e832, ftLastWriteTime.dwLowDateTime=0x7e2ca90, ftLastWriteTime.dwHighDateTime=0x1d5e832, nFileSizeHigh=0x0, nFileSizeLow=0x126e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IIi7TDDxZ8.wav", cAlternateFileName="III7TD~1.WAV")) returned 0x8c7058
[0150.996] FindNextFileW (in: hFindFile=0x8c7058, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0150.997] FindClose (in: hFindFile=0x8c7058 | out: hFindFile=0x8c7058) returned 1
[0150.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0150.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0150.997] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", lpFilePart=0x0) returned 0x26
[0150.997] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", lpFilePart=0x0) returned 0x26
[0150.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0150.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\iii7tddxz8.wav"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c37cb20, ftCreationTime.dwHighDateTime=0x1d5e55e, ftLastAccessTime.dwLowDateTime=0x7e2ca90, ftLastAccessTime.dwHighDateTime=0x1d5e832, ftLastWriteTime.dwLowDateTime=0x7e2ca90, ftLastWriteTime.dwHighDateTime=0x1d5e832, nFileSizeHigh=0x0, nFileSizeLow=0x126e0)) returned 1
[0150.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0150.997] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav", lpFilePart=0x0) returned 0x26
[0150.997] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\iii7tddxz8.wav")) returned 1
[0151.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra", lpFilePart=0x0) returned 0x2c
[0151.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra", lpFilePart=0x0) returned 0x2c
[0151.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0151.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra", lpFilePart=0x0) returned 0x2c
[0151.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0151.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\iii7tddxz8.wav.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0151.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0151.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra", lpFilePart=0x0) returned 0x2c
[0151.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0151.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\iii7tddxz8.wav.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0151.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0151.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra", lpFilePart=0x0) returned 0x2c
[0151.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0151.058] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\IIi7TDDxZ8.wav.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\iii7tddxz8.wav.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0151.059] GetFileType (hFile=0x260) returned 0x1
[0151.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0151.059] GetFileType (hFile=0x260) returned 0x1
[0151.059] SetFilePointer (in: hFile=0x260, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0151.067] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.068] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.069] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.069] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.069] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.069] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.070] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.070] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.070] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.070] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.071] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.072] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.072] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.072] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.072] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.073] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.073] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.073] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.165] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.165] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.166] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.166] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.166] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.166] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.167] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.167] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.167] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.167] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.167] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.167] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.168] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.168] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.168] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.168] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.168] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.169] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.169] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.169] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.169] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.169] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.170] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.170] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.170] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.170] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.170] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.170] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.171] WriteFile (in: hFile=0x260, lpBuffer=0x235ab84*, nNumberOfBytesToWrite=0x7fd, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x235ab84*, lpNumberOfBytesWritten=0x53e8c0*=0x7fd, lpOverlapped=0x0) returned 1
[0151.171] CloseHandle (hObject=0x260) returned 1
[0151.176] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", lpFilePart=0x0) returned 0x24
[0151.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0151.176] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\iucs1x8v.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x260
[0151.176] GetFileType (hFile=0x260) returned 0x1
[0151.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0151.176] GetFileType (hFile=0x260) returned 0x1
[0151.177] ReadFile (in: hFile=0x260, lpBuffer=0x235c940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.178] ReadFile (in: hFile=0x260, lpBuffer=0x235c940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.178] ReadFile (in: hFile=0x260, lpBuffer=0x235c940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.178] ReadFile (in: hFile=0x260, lpBuffer=0x235c940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.178] ReadFile (in: hFile=0x260, lpBuffer=0x235c940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.178] ReadFile (in: hFile=0x260, lpBuffer=0x235c940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.179] ReadFile (in: hFile=0x260, lpBuffer=0x235c940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.179] ReadFile (in: hFile=0x260, lpBuffer=0x235c940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c940*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.179] ReadFile (in: hFile=0x260, lpBuffer=0x235c940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c940*, lpNumberOfBytesRead=0x53e8bc*=0xa2e, lpOverlapped=0x0) returned 1
[0151.179] ReadFile (in: hFile=0x260, lpBuffer=0x235befa, nNumberOfBytesToRead=0x1d2, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235befa*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0151.179] ReadFile (in: hFile=0x260, lpBuffer=0x235c940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x235c940*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0151.180] CloseHandle (hObject=0x260) returned 1
[0151.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", lpFilePart=0x0) returned 0x24
[0151.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", lpFilePart=0x0) returned 0x24
[0151.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0151.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", lpFilePart=0x0) returned 0x24
[0151.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0151.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\iucs1x8v.swf"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e9e5030, ftCreationTime.dwHighDateTime=0x1d5e7bc, ftLastAccessTime.dwLowDateTime=0xdcd2bd80, ftLastAccessTime.dwHighDateTime=0x1d5e8de, ftLastWriteTime.dwLowDateTime=0xdcd2bd80, ftLastWriteTime.dwHighDateTime=0x1d5e8de, nFileSizeHigh=0x0, nFileSizeLow=0x8a2e)) returned 1
[0151.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0151.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0151.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0151.385] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e9e5030, ftCreationTime.dwHighDateTime=0x1d5e7bc, ftLastAccessTime.dwLowDateTime=0xdcd2bd80, ftLastAccessTime.dwHighDateTime=0x1d5e8de, ftLastWriteTime.dwLowDateTime=0xdcd2bd80, ftLastWriteTime.dwHighDateTime=0x1d5e8de, nFileSizeHigh=0x0, nFileSizeLow=0x8a2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="IUcs1x8V.swf", cAlternateFileName="")) returned 0x8c7358
[0151.386] FindNextFileW (in: hFindFile=0x8c7358, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0151.386] FindClose (in: hFindFile=0x8c7358 | out: hFindFile=0x8c7358) returned 1
[0151.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0151.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0151.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", lpFilePart=0x0) returned 0x24
[0151.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", lpFilePart=0x0) returned 0x24
[0151.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0151.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\iucs1x8v.swf"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e9e5030, ftCreationTime.dwHighDateTime=0x1d5e7bc, ftLastAccessTime.dwLowDateTime=0xdcd2bd80, ftLastAccessTime.dwHighDateTime=0x1d5e8de, ftLastWriteTime.dwLowDateTime=0xdcd2bd80, ftLastWriteTime.dwHighDateTime=0x1d5e8de, nFileSizeHigh=0x0, nFileSizeLow=0x8a2e)) returned 1
[0151.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0151.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf", lpFilePart=0x0) returned 0x24
[0151.387] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\iucs1x8v.swf")) returned 1
[0151.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra", lpFilePart=0x0) returned 0x2a
[0151.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra", lpFilePart=0x0) returned 0x2a
[0151.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0151.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra", lpFilePart=0x0) returned 0x2a
[0151.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0151.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\iucs1x8v.swf.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0151.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0151.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra", lpFilePart=0x0) returned 0x2a
[0151.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0151.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\iucs1x8v.swf.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0151.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0151.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra", lpFilePart=0x0) returned 0x2a
[0151.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0151.389] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\IUcs1x8V.swf.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\iucs1x8v.swf.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0
[0151.390] GetFileType (hFile=0x2e0) returned 0x1
[0151.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0151.390] GetFileType (hFile=0x2e0) returned 0x1
[0151.390] SetFilePointer (in: hFile=0x2e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0151.391] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.392] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.392] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.393] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.393] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.394] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.394] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.395] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.395] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.395] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.396] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.396] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.396] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.397] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.397] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.397] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.398] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.398] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.398] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.399] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.400] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.400] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8950*, nNumberOfBytesToWrite=0xc31, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x22b8950*, lpNumberOfBytesWritten=0x53e8c0*=0xc31, lpOverlapped=0x0) returned 1
[0151.400] CloseHandle (hObject=0x2e0) returned 1
[0151.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", lpFilePart=0x0) returned 0x23
[0151.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0151.404] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\kwajnh0.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0
[0151.404] GetFileType (hFile=0x2e0) returned 0x1
[0151.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0151.404] GetFileType (hFile=0x2e0) returned 0x1
[0151.404] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.406] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.406] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.407] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.408] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.409] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.409] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.410] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.411] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.411] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.412] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.413] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.413] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.414] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.415] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.416] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.416] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.417] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.417] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0xf80, lpOverlapped=0x0) returned 1
[0151.417] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b9e10, nNumberOfBytesToRead=0x80, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9e10*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0151.418] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba704*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0151.418] CloseHandle (hObject=0x2e0) returned 1
[0151.500] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", lpFilePart=0x0) returned 0x23
[0151.500] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", lpFilePart=0x0) returned 0x23
[0151.500] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0151.500] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", lpFilePart=0x0) returned 0x23
[0151.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0151.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\kwajnh0.wav"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d06e20, ftCreationTime.dwHighDateTime=0x1d5e983, ftLastAccessTime.dwLowDateTime=0x20ece5c0, ftLastAccessTime.dwHighDateTime=0x1d5e4fe, ftLastWriteTime.dwLowDateTime=0x20ece5c0, ftLastWriteTime.dwHighDateTime=0x1d5e4fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f80)) returned 1
[0151.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0151.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0151.501] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0151.501] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d06e20, ftCreationTime.dwHighDateTime=0x1d5e983, ftLastAccessTime.dwLowDateTime=0x20ece5c0, ftLastAccessTime.dwHighDateTime=0x1d5e4fe, ftLastWriteTime.dwLowDateTime=0x20ece5c0, ftLastWriteTime.dwHighDateTime=0x1d5e4fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="kWAJNH0.wav", cAlternateFileName="")) returned 0x8c70d8
[0151.501] FindNextFileW (in: hFindFile=0x8c70d8, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0151.502] FindClose (in: hFindFile=0x8c70d8 | out: hFindFile=0x8c70d8) returned 1
[0151.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0151.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0151.502] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", lpFilePart=0x0) returned 0x23
[0151.503] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", lpFilePart=0x0) returned 0x23
[0151.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0151.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\kwajnh0.wav"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d06e20, ftCreationTime.dwHighDateTime=0x1d5e983, ftLastAccessTime.dwLowDateTime=0x20ece5c0, ftLastAccessTime.dwHighDateTime=0x1d5e4fe, ftLastWriteTime.dwLowDateTime=0x20ece5c0, ftLastWriteTime.dwHighDateTime=0x1d5e4fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f80)) returned 1
[0151.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0151.503] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav", lpFilePart=0x0) returned 0x23
[0151.503] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\kwajnh0.wav")) returned 1
[0151.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra", lpFilePart=0x0) returned 0x29
[0151.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra", lpFilePart=0x0) returned 0x29
[0151.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0151.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra", lpFilePart=0x0) returned 0x29
[0151.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0151.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\kwajnh0.wav.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0151.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0151.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra", lpFilePart=0x0) returned 0x29
[0151.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0151.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\kwajnh0.wav.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0151.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0151.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra", lpFilePart=0x0) returned 0x29
[0151.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0151.547] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kWAJNH0.wav.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\kwajnh0.wav.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0
[0151.547] GetFileType (hFile=0x2e0) returned 0x1
[0151.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0151.547] GetFileType (hFile=0x2e0) returned 0x1
[0151.547] SetFilePointer (in: hFile=0x2e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0151.548] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.550] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.550] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.550] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.550] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.550] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.551] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.551] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.551] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.551] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.551] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.552] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.552] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.552] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.552] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.552] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.552] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.553] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.553] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.553] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.553] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.554] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.554] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.554] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.554] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.554] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.555] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.555] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.558] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.558] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.558] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.559] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.559] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.559] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.559] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.559] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.559] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.560] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.560] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.560] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.560] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.560] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.560] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.561] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.561] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.561] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.561] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.561] WriteFile (in: hFile=0x2e0, lpBuffer=0x2362fdc*, nNumberOfBytesToWrite=0xd91, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x2362fdc*, lpNumberOfBytesWritten=0x53e8c0*=0xd91, lpOverlapped=0x0) returned 1
[0151.561] CloseHandle (hObject=0x2e0) returned 1
[0151.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", lpFilePart=0x0) returned 0x30
[0151.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0151.569] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\lgm4clhmp1c_tdde-f j.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0
[0151.569] GetFileType (hFile=0x2e0) returned 0x1
[0151.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0151.570] GetFileType (hFile=0x2e0) returned 0x1
[0151.570] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.571] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.572] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.572] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.573] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.728] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.729] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.730] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.730] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.731] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.731] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.732] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.732] ReadFile (in: hFile=0x2e0, lpBuffer=0x2364dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x2364dc8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.736] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b6414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b6414*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.737] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b6414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b6414*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.737] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b6414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b6414*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.738] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b6414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b6414*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.739] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b6414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b6414*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0151.739] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b6414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b6414*, lpNumberOfBytesRead=0x53e8bc*=0xc7, lpOverlapped=0x0) returned 1
[0151.739] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b6414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b6414*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0151.740] CloseHandle (hObject=0x2e0) returned 1
[0151.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", lpFilePart=0x0) returned 0x30
[0151.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", lpFilePart=0x0) returned 0x30
[0151.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0151.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", lpFilePart=0x0) returned 0x30
[0151.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0151.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\lgm4clhmp1c_tdde-f j.avi"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2446cdf0, ftCreationTime.dwHighDateTime=0x1d5e434, ftLastAccessTime.dwLowDateTime=0x62a75be0, ftLastAccessTime.dwHighDateTime=0x1d5eeee, ftLastWriteTime.dwLowDateTime=0x62a75be0, ftLastWriteTime.dwHighDateTime=0x1d5eeee, nFileSizeHigh=0x0, nFileSizeLow=0x120c7)) returned 1
[0151.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0151.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0151.812] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0151.812] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2446cdf0, ftCreationTime.dwHighDateTime=0x1d5e434, ftLastAccessTime.dwLowDateTime=0x62a75be0, ftLastAccessTime.dwHighDateTime=0x1d5eeee, ftLastWriteTime.dwLowDateTime=0x62a75be0, ftLastWriteTime.dwHighDateTime=0x1d5eeee, nFileSizeHigh=0x0, nFileSizeLow=0x120c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="lgm4cLHmP1c_TDDe-f J.avi", cAlternateFileName="LGM4CL~1.AVI")) returned 0x8c73d8
[0151.813] FindNextFileW (in: hFindFile=0x8c73d8, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0151.814] FindClose (in: hFindFile=0x8c73d8 | out: hFindFile=0x8c73d8) returned 1
[0151.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0151.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0151.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", lpFilePart=0x0) returned 0x30
[0151.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", lpFilePart=0x0) returned 0x30
[0151.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0151.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\lgm4clhmp1c_tdde-f j.avi"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2446cdf0, ftCreationTime.dwHighDateTime=0x1d5e434, ftLastAccessTime.dwLowDateTime=0x62a75be0, ftLastAccessTime.dwHighDateTime=0x1d5eeee, ftLastWriteTime.dwLowDateTime=0x62a75be0, ftLastWriteTime.dwHighDateTime=0x1d5eeee, nFileSizeHigh=0x0, nFileSizeLow=0x120c7)) returned 1
[0151.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0151.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi", lpFilePart=0x0) returned 0x30
[0151.815] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\lgm4clhmp1c_tdde-f j.avi")) returned 1
[0151.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra", lpFilePart=0x0) returned 0x36
[0151.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra", lpFilePart=0x0) returned 0x36
[0151.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0151.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra", lpFilePart=0x0) returned 0x36
[0151.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0151.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\lgm4clhmp1c_tdde-f j.avi.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0151.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0151.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra", lpFilePart=0x0) returned 0x36
[0151.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0151.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\lgm4clhmp1c_tdde-f j.avi.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0151.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0151.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra", lpFilePart=0x0) returned 0x36
[0151.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0151.856] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\lgm4cLHmP1c_TDDe-f J.avi.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\lgm4clhmp1c_tdde-f j.avi.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0
[0151.857] GetFileType (hFile=0x2e0) returned 0x1
[0151.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0151.857] GetFileType (hFile=0x2e0) returned 0x1
[0151.857] SetFilePointer (in: hFile=0x2e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0151.857] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.859] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.860] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.860] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.861] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.861] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.862] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.862] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.862] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.863] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.863] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.864] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.864] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.865] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.865] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.865] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.866] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.866] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.867] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.867] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.868] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.868] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.869] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.869] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.870] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.870] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.870] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.870] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.871] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.871] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.871] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.871] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.872] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.872] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.872] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.872] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.872] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.873] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.873] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.873] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.873] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.874] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.874] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.874] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.874] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0151.874] WriteFile (in: hFile=0x2e0, lpBuffer=0x22b8b68*, nNumberOfBytesToWrite=0x81d, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x22b8b68*, lpNumberOfBytesWritten=0x53e8c0*=0x81d, lpOverlapped=0x0) returned 1
[0151.875] CloseHandle (hObject=0x2e0) returned 1
[0151.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", lpFilePart=0x0) returned 0x23
[0151.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0151.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\musss9m.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0
[0151.880] GetFileType (hFile=0x2e0) returned 0x1
[0151.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0151.881] GetFileType (hFile=0x2e0) returned 0x1
[0151.881] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba91c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba91c*, lpNumberOfBytesRead=0x53e8bc*=0xcfe, lpOverlapped=0x0) returned 1
[0151.882] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b9da6, nNumberOfBytesToRead=0x302, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b9da6*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0151.882] ReadFile (in: hFile=0x2e0, lpBuffer=0x22ba91c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22ba91c*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0151.882] CloseHandle (hObject=0x2e0) returned 1
[0151.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", lpFilePart=0x0) returned 0x23
[0151.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", lpFilePart=0x0) returned 0x23
[0151.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0151.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", lpFilePart=0x0) returned 0x23
[0151.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0151.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\musss9m.m4a"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d80b250, ftCreationTime.dwHighDateTime=0x1d5e28c, ftLastAccessTime.dwLowDateTime=0x5bf11740, ftLastAccessTime.dwHighDateTime=0x1d5e29c, ftLastWriteTime.dwLowDateTime=0x5bf11740, ftLastWriteTime.dwHighDateTime=0x1d5e29c, nFileSizeHigh=0x0, nFileSizeLow=0xcfe)) returned 1
[0151.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0151.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0151.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0151.944] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d80b250, ftCreationTime.dwHighDateTime=0x1d5e28c, ftLastAccessTime.dwLowDateTime=0x5bf11740, ftLastAccessTime.dwHighDateTime=0x1d5e29c, ftLastWriteTime.dwLowDateTime=0x5bf11740, ftLastWriteTime.dwHighDateTime=0x1d5e29c, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="mUsss9M.m4a", cAlternateFileName="")) returned 0x8c7398
[0151.945] FindNextFileW (in: hFindFile=0x8c7398, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0151.945] FindClose (in: hFindFile=0x8c7398 | out: hFindFile=0x8c7398) returned 1
[0151.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0151.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0151.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", lpFilePart=0x0) returned 0x23
[0151.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", lpFilePart=0x0) returned 0x23
[0151.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0151.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\musss9m.m4a"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d80b250, ftCreationTime.dwHighDateTime=0x1d5e28c, ftLastAccessTime.dwLowDateTime=0x5bf11740, ftLastAccessTime.dwHighDateTime=0x1d5e29c, ftLastWriteTime.dwLowDateTime=0x5bf11740, ftLastWriteTime.dwHighDateTime=0x1d5e29c, nFileSizeHigh=0x0, nFileSizeLow=0xcfe)) returned 1
[0151.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0151.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a", lpFilePart=0x0) returned 0x23
[0151.945] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\musss9m.m4a")) returned 1
[0152.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra", lpFilePart=0x0) returned 0x29
[0152.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra", lpFilePart=0x0) returned 0x29
[0152.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0152.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra", lpFilePart=0x0) returned 0x29
[0152.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0152.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\musss9m.m4a.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0152.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0152.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra", lpFilePart=0x0) returned 0x29
[0152.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0152.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\musss9m.m4a.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0152.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0152.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra", lpFilePart=0x0) returned 0x29
[0152.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0152.004] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mUsss9M.m4a.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\musss9m.m4a.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0
[0152.004] GetFileType (hFile=0x2e0) returned 0x1
[0152.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0152.004] GetFileType (hFile=0x2e0) returned 0x1
[0152.004] SetFilePointer (in: hFile=0x2e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0152.005] WriteFile (in: hFile=0x2e0, lpBuffer=0x22d85b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22d85b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.006] WriteFile (in: hFile=0x2e0, lpBuffer=0x22d85b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x22d85b8*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.006] WriteFile (in: hFile=0x2e0, lpBuffer=0x22d85b8*, nNumberOfBytesToWrite=0xc5, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x22d85b8*, lpNumberOfBytesWritten=0x53e8c0*=0xc5, lpOverlapped=0x0) returned 1
[0152.006] CloseHandle (hObject=0x2e0) returned 1
[0152.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", lpFilePart=0x0) returned 0x2b
[0152.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0152.014] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\q kd9zan-wxptnh.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0
[0152.014] GetFileType (hFile=0x2e0) returned 0x1
[0152.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0152.014] GetFileType (hFile=0x2e0) returned 0x1
[0152.014] ReadFile (in: hFile=0x2e0, lpBuffer=0x22da38c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22da38c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.015] ReadFile (in: hFile=0x2e0, lpBuffer=0x22da38c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22da38c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.015] ReadFile (in: hFile=0x2e0, lpBuffer=0x22da38c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22da38c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.015] ReadFile (in: hFile=0x2e0, lpBuffer=0x22da38c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22da38c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.016] ReadFile (in: hFile=0x2e0, lpBuffer=0x22da38c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22da38c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.016] ReadFile (in: hFile=0x2e0, lpBuffer=0x22da38c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22da38c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.016] ReadFile (in: hFile=0x2e0, lpBuffer=0x22da38c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22da38c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.016] ReadFile (in: hFile=0x2e0, lpBuffer=0x22da38c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22da38c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.016] ReadFile (in: hFile=0x2e0, lpBuffer=0x22da38c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22da38c*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.017] ReadFile (in: hFile=0x2e0, lpBuffer=0x22da38c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22da38c*, lpNumberOfBytesRead=0x53e8bc*=0xac0, lpOverlapped=0x0) returned 1
[0152.017] ReadFile (in: hFile=0x2e0, lpBuffer=0x22d99d8, nNumberOfBytesToRead=0x140, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22d99d8*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0152.017] ReadFile (in: hFile=0x2e0, lpBuffer=0x22da38c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22da38c*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0152.017] CloseHandle (hObject=0x2e0) returned 1
[0152.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", lpFilePart=0x0) returned 0x2b
[0152.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", lpFilePart=0x0) returned 0x2b
[0152.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0152.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", lpFilePart=0x0) returned 0x2b
[0152.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0152.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\q kd9zan-wxptnh.avi"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454ccf80, ftCreationTime.dwHighDateTime=0x1d5e151, ftLastAccessTime.dwLowDateTime=0x44a295b0, ftLastAccessTime.dwHighDateTime=0x1d5e8b8, ftLastWriteTime.dwLowDateTime=0x44a295b0, ftLastWriteTime.dwHighDateTime=0x1d5e8b8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0)) returned 1
[0152.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0152.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0152.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0152.025] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454ccf80, ftCreationTime.dwHighDateTime=0x1d5e151, ftLastAccessTime.dwLowDateTime=0x44a295b0, ftLastAccessTime.dwHighDateTime=0x1d5e8b8, ftLastWriteTime.dwLowDateTime=0x44a295b0, ftLastWriteTime.dwHighDateTime=0x1d5e8b8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="q KD9Zan-WxpTnH.avi", cAlternateFileName="QKD9ZA~1.AVI")) returned 0x8c7118
[0152.025] FindNextFileW (in: hFindFile=0x8c7118, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0152.027] FindClose (in: hFindFile=0x8c7118 | out: hFindFile=0x8c7118) returned 1
[0152.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0152.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0152.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", lpFilePart=0x0) returned 0x2b
[0152.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", lpFilePart=0x0) returned 0x2b
[0152.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0152.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\q kd9zan-wxptnh.avi"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454ccf80, ftCreationTime.dwHighDateTime=0x1d5e151, ftLastAccessTime.dwLowDateTime=0x44a295b0, ftLastAccessTime.dwHighDateTime=0x1d5e8b8, ftLastWriteTime.dwLowDateTime=0x44a295b0, ftLastWriteTime.dwHighDateTime=0x1d5e8b8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0)) returned 1
[0152.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0152.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi", lpFilePart=0x0) returned 0x2b
[0152.027] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\q kd9zan-wxptnh.avi")) returned 1
[0152.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra", lpFilePart=0x0) returned 0x31
[0152.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra", lpFilePart=0x0) returned 0x31
[0152.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0152.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra", lpFilePart=0x0) returned 0x31
[0152.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0152.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\q kd9zan-wxptnh.avi.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0152.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0152.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra", lpFilePart=0x0) returned 0x31
[0152.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0152.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\q kd9zan-wxptnh.avi.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0152.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0152.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra", lpFilePart=0x0) returned 0x31
[0152.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0152.074] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\q KD9Zan-WxpTnH.avi.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\q kd9zan-wxptnh.avi.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0
[0152.074] GetFileType (hFile=0x2e0) returned 0x1
[0152.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0152.074] GetFileType (hFile=0x2e0) returned 0x1
[0152.074] SetFilePointer (in: hFile=0x2e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0152.075] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.076] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.076] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.077] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.077] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.077] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.077] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.078] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.078] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.078] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.078] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.079] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.079] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.079] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.079] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.079] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.080] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.080] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.080] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.080] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.081] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.081] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.081] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.081] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.082] WriteFile (in: hFile=0x2e0, lpBuffer=0x238c9fc*, nNumberOfBytesToWrite=0x625, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x238c9fc*, lpNumberOfBytesWritten=0x53e8c0*=0x625, lpOverlapped=0x0) returned 1
[0152.082] CloseHandle (hObject=0x2e0) returned 1
[0152.228] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", lpFilePart=0x0) returned 0x29
[0152.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0152.228] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\q0e9hxm mfxen.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0
[0152.229] GetFileType (hFile=0x2e0) returned 0x1
[0152.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0152.229] GetFileType (hFile=0x2e0) returned 0x1
[0152.229] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.230] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.230] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.231] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.231] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.232] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.232] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.232] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.232] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.233] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.233] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.233] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.233] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.233] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.234] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.234] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.234] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.234] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.234] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.235] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.235] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.235] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.235] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.236] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x170, lpOverlapped=0x0) returned 1
[0152.236] ReadFile (in: hFile=0x2e0, lpBuffer=0x238e7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x238e7c8*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0152.238] CloseHandle (hObject=0x2e0) returned 1
[0152.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", lpFilePart=0x0) returned 0x29
[0152.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", lpFilePart=0x0) returned 0x29
[0152.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0152.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", lpFilePart=0x0) returned 0x29
[0152.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0152.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\q0e9hxm mfxen.gif"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe75c010, ftCreationTime.dwHighDateTime=0x1d5ec56, ftLastAccessTime.dwLowDateTime=0x5aee2110, ftLastAccessTime.dwHighDateTime=0x1d5f090, ftLastWriteTime.dwLowDateTime=0x5aee2110, ftLastWriteTime.dwHighDateTime=0x1d5f090, nFileSizeHigh=0x0, nFileSizeLow=0x17170)) returned 1
[0152.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0152.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0152.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0152.392] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe75c010, ftCreationTime.dwHighDateTime=0x1d5ec56, ftLastAccessTime.dwLowDateTime=0x5aee2110, ftLastAccessTime.dwHighDateTime=0x1d5f090, ftLastWriteTime.dwLowDateTime=0x5aee2110, ftLastWriteTime.dwHighDateTime=0x1d5f090, nFileSizeHigh=0x0, nFileSizeLow=0x17170, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q0E9HxM mfXEN.gif", cAlternateFileName="Q0E9HX~1.GIF")) returned 0x8c7698
[0152.393] FindNextFileW (in: hFindFile=0x8c7698, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0152.394] FindClose (in: hFindFile=0x8c7698 | out: hFindFile=0x8c7698) returned 1
[0152.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0152.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0152.395] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", lpFilePart=0x0) returned 0x29
[0152.395] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", lpFilePart=0x0) returned 0x29
[0152.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0152.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\q0e9hxm mfxen.gif"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe75c010, ftCreationTime.dwHighDateTime=0x1d5ec56, ftLastAccessTime.dwLowDateTime=0x5aee2110, ftLastAccessTime.dwHighDateTime=0x1d5f090, ftLastWriteTime.dwLowDateTime=0x5aee2110, ftLastWriteTime.dwHighDateTime=0x1d5f090, nFileSizeHigh=0x0, nFileSizeLow=0x17170)) returned 1
[0152.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0152.395] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif", lpFilePart=0x0) returned 0x29
[0152.395] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\q0e9hxm mfxen.gif")) returned 1
[0152.494] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra", lpFilePart=0x0) returned 0x2f
[0152.494] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra", lpFilePart=0x0) returned 0x2f
[0152.494] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0152.494] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra", lpFilePart=0x0) returned 0x2f
[0152.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e864) returned 1
[0152.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\q0e9hxm mfxen.gif.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8e0 | out: lpFileInformation=0x53e8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0152.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e860) returned 1
[0152.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra", lpFilePart=0x0) returned 0x2f
[0152.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0152.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\q0e9hxm mfxen.gif.cobra"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0152.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0152.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra", nBufferLength=0x105, lpBuffer=0x53e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra", lpFilePart=0x0) returned 0x2f
[0152.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e808) returned 1
[0152.495] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q0E9HxM mfXEN.gif.Cobra" (normalized: "c:\\users\\fd1hvy\\desktop\\q0e9hxm mfxen.gif.cobra"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0
[0152.495] GetFileType (hFile=0x2e0) returned 0x1
[0152.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e804) returned 1
[0152.495] GetFileType (hFile=0x2e0) returned 0x1
[0152.495] SetFilePointer (in: hFile=0x2e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x53e7dc*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x53e7dc*=0) returned 0x0
[0152.503] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.504] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.504] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.505] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.505] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.505] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.505] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.505] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.505] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.506] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.506] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.506] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.506] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.506] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.506] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.507] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.507] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.507] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.507] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.507] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.507] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.508] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.508] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.508] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.508] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.508] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.508] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.509] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.509] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.509] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.509] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.509] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.509] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.510] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.510] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.510] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.510] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.510] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.510] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.511] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.511] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.511] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.511] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.511] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.512] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.512] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.512] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.512] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.512] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.513] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.513] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.513] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.513] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.513] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.513] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.514] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.514] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.514] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x53e8d8, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8d8*=0x1000, lpOverlapped=0x0) returned 1
[0152.514] WriteFile (in: hFile=0x2e0, lpBuffer=0x2458e1c*, nNumberOfBytesToWrite=0x37d, lpNumberOfBytesWritten=0x53e8c0, lpOverlapped=0x0 | out: lpBuffer=0x2458e1c*, lpNumberOfBytesWritten=0x53e8c0*=0x37d, lpOverlapped=0x0) returned 1
[0152.514] CloseHandle (hObject=0x2e0) returned 1
[0152.759] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", nBufferLength=0x105, lpBuffer=0x53e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", lpFilePart=0x0) returned 0x26
[0152.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e814) returned 1
[0152.759] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\ransomware.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e0
[0152.759] GetFileType (hFile=0x2e0) returned 0x1
[0152.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e810) returned 1
[0152.759] GetFileType (hFile=0x2e0) returned 0x1
[0152.760] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.761] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.761] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.761] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.761] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.762] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.762] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.762] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.762] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.763] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.763] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.763] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.764] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.764] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.764] ReadFile (in: hFile=0x2e0, lpBuffer=0x245abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245abe0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.768] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.768] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.769] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.769] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.770] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.770] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.771] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.771] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.772] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.773] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.773] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.774] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.821] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.821] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.822] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.822] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.822] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.823] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.823] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.824] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.824] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.825] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.825] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.825] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.826] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.826] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.826] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.827] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.827] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.828] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.828] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.828] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.829] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.829] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.829] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.830] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.830] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x1000, lpOverlapped=0x0) returned 1
[0152.830] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0xe00, lpOverlapped=0x0) returned 1
[0152.831] ReadFile (in: hFile=0x2e0, lpBuffer=0x245a16c, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x245a16c*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0152.831] ReadFile (in: hFile=0x2e0, lpBuffer=0x22b65f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x53e8bc, lpOverlapped=0x0 | out: lpBuffer=0x22b65f0*, lpNumberOfBytesRead=0x53e8bc*=0x0, lpOverlapped=0x0) returned 1
[0152.988] CloseHandle (hObject=0x2e0) returned 1
[0153.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", lpFilePart=0x0) returned 0x26
[0153.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", nBufferLength=0x105, lpBuffer=0x53e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", lpFilePart=0x0) returned 0x26
[0153.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0153.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", nBufferLength=0x105, lpBuffer=0x53e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", lpFilePart=0x0) returned 0x26
[0153.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e858) returned 1
[0153.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\ransomware.exe"), fInfoLevelId=0x0, lpFileInformation=0x53e8d4 | out: lpFileInformation=0x53e8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1bc1880, ftCreationTime.dwHighDateTime=0x1d64266, ftLastAccessTime.dwLowDateTime=0xb1bc1880, ftLastAccessTime.dwHighDateTime=0x1d64266, ftLastWriteTime.dwLowDateTime=0x753bed00, ftLastWriteTime.dwHighDateTime=0x1d64265, nFileSizeHigh=0x0, nFileSizeLow=0x34e00)) returned 1
[0153.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e854) returned 1
[0153.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e8b4) returned 1
[0153.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x53e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
[0153.152] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", lpFindFileData=0x53e5dc | out: lpFindFileData=0x53e5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1bc1880, ftCreationTime.dwHighDateTime=0x1d64266, ftLastAccessTime.dwLowDateTime=0xb1bc1880, ftLastAccessTime.dwHighDateTime=0x1d64266, ftLastWriteTime.dwLowDateTime=0x753bed00, ftLastWriteTime.dwHighDateTime=0x1d64265, nFileSizeHigh=0x0, nFileSizeLow=0x34e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ransomware.exe", cAlternateFileName="RANSOM~1.EXE")) returned 0x8c7558
[0153.152] FindNextFileW (in: hFindFile=0x8c7558, lpFindFileData=0x53e5e8 | out: lpFindFileData=0x53e5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0153.152] FindClose (in: hFindFile=0x8c7558 | out: hFindFile=0x8c7558) returned 1
[0153.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e870) returned 1
[0153.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e87c) returned 1
[0153.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", nBufferLength=0x105, lpBuffer=0x53e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", lpFilePart=0x0) returned 0x26
[0153.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", nBufferLength=0x105, lpBuffer=0x53e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", lpFilePart=0x0) returned 0x26
[0153.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e894) returned 1
[0153.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\ransomware.exe"), fInfoLevelId=0x0, lpFileInformation=0x53e910 | out: lpFileInformation=0x53e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1bc1880, ftCreationTime.dwHighDateTime=0x1d64266, ftLastAccessTime.dwLowDateTime=0xb1bc1880, ftLastAccessTime.dwHighDateTime=0x1d64266, ftLastWriteTime.dwLowDateTime=0x753bed00, ftLastWriteTime.dwHighDateTime=0x1d64265, nFileSizeHigh=0x0, nFileSizeLow=0x34e00)) returned 1
[0153.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e890) returned 1
[0153.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", nBufferLength=0x105, lpBuffer=0x53e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", lpFilePart=0x0) returned 0x26
[0153.158] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\ransomware.exe")) returned 0
[0153.285] GetUserObjectInformationA (in: hObj=0x13c, nIndex=1, pvInfo=0x22d9f4c, nLength=0xc, lpnLengthNeeded=0x53ea94 | out: pvInfo=0x22d9f4c, lpnLengthNeeded=0x53ea94) returned 1
[0153.428] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0153.428] AdjustWindowRectEx (in: lpRect=0x53e934, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e934) returned 1
[0153.428] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0153.428] AdjustWindowRectEx (in: lpRect=0x53e930, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e930) returned 1
[0153.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0153.429] AdjustWindowRectEx (in: lpRect=0x53e92c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e92c) returned 1
[0153.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0153.429] AdjustWindowRectEx (in: lpRect=0x53e92c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e92c) returned 1
[0153.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0153.430] AdjustWindowRectEx (in: lpRect=0x53e92c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e92c) returned 1
[0153.430] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0153.430] AdjustWindowRectEx (in: lpRect=0x53e92c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e92c) returned 1
[0153.430] GetDC (hWnd=0x0) returned 0xf0105ee
[0153.430] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e804) returned 0x0
[0153.431] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d920e8, height=0x53e7fc) returned 0x0
[0153.431] GdipDeleteGraphics (graphics=0x5d920e8) returned 0x0
[0153.431] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0153.432] GetSystemMetrics (nIndex=5) returned 1
[0153.432] GetSystemMetrics (nIndex=6) returned 1
[0153.432] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0153.432] AdjustWindowRectEx (in: lpRect=0x53e92c, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e92c) returned 1
[0153.433] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0153.433] AdjustWindowRectEx (in: lpRect=0x53e900, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e900) returned 1
[0154.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x53e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorlib.dll", lpFilePart=0x0) returned 0x3a
[0154.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e868) returned 1
[0154.688] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorlib.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorlib.dll"), fInfoLevelId=0x0, lpFileInformation=0x53e8e4 | out: lpFileInformation=0x53e8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7954f49e, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7954f49e, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7957570c, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x55aaa8)) returned 1
[0154.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e864) returned 1
[0154.691] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorlib.dll", lpdwHandle=0x53e958 | out: lpdwHandle=0x53e958) returned 0x82c
[0155.318] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorlib.dll", dwHandle=0x0, dwLen=0x82c, lpData=0x22e968c | out: lpData=0x22e968c) returned 1
[0155.321] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e92c, puLen=0x53e928 | out: lplpBuffer=0x53e92c*=0x22e9a9c, puLen=0x53e928) returned 1
[0155.323] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22e9744, puLen=0x53e8a8) returned 1
[0155.323] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22e9798, puLen=0x53e8a8) returned 1
[0155.324] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22e9818, puLen=0x53e8a8) returned 1
[0155.324] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22e9880, puLen=0x53e8a8) returned 1
[0155.324] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22e98c0, puLen=0x53e8a8) returned 1
[0155.324] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22e9948, puLen=0x53e8a8) returned 1
[0155.324] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22e9984, puLen=0x53e8a8) returned 1
[0155.324] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22e99dc, puLen=0x53e8a8) returned 1
[0155.324] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22e9a0c, puLen=0x53e8a8) returned 1
[0155.324] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.324] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22e9a48, puLen=0x53e8a8) returned 1
[0155.324] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.324] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e8a0, puLen=0x53e89c | out: lplpBuffer=0x53e8a0*=0x22e9a9c, puLen=0x53e89c) returned 1
[0155.324] VerLanguageNameW (in: wLang=0x409, szLang=0x53e630, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
[0155.373] VerQueryValueW (in: pBlock=0x22e968c, lpSubBlock="\\", lplpBuffer=0x53e8b0, puLen=0x53e8ac | out: lplpBuffer=0x53e8b0*=0x22e96b4, puLen=0x53e8ac) returned 1
[0155.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", nBufferLength=0x105, lpBuffer=0x53e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", lpFilePart=0x0) returned 0x26
[0155.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e868) returned 1
[0155.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\ransomware.exe"), fInfoLevelId=0x0, lpFileInformation=0x53e8e4 | out: lpFileInformation=0x53e8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1bc1880, ftCreationTime.dwHighDateTime=0x1d64266, ftLastAccessTime.dwLowDateTime=0xb1bc1880, ftLastAccessTime.dwHighDateTime=0x1d64266, ftLastWriteTime.dwLowDateTime=0x753bed00, ftLastWriteTime.dwHighDateTime=0x1d64265, nFileSizeHigh=0x0, nFileSizeLow=0x34e00)) returned 1
[0155.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e864) returned 1
[0155.377] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", lpdwHandle=0x53e958 | out: lpdwHandle=0x53e958) returned 0x634
[0155.377] GetFileVersionInfoW (in: lptstrFilename="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwHandle=0x0, dwLen=0x634, lpData=0x22eb918 | out: lpData=0x22eb918) returned 1
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e92c, puLen=0x53e928 | out: lplpBuffer=0x53e92c*=0x22eb9b4, puLen=0x53e928) returned 1
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22eba2c, puLen=0x53e8a8) returned 1
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22eba5c, puLen=0x53e8a8) returned 1
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22eba94, puLen=0x53e8a8) returned 1
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ebac4, puLen=0x53e8a8) returned 1
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ebb08, puLen=0x53e8a8) returned 1
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ebb80, puLen=0x53e8a8) returned 1
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ebbbc, puLen=0x53e8a8) returned 1
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ebbe8, puLen=0x53e8a8) returned 1
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22eba0a, puLen=0x53e8a8) returned 1
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ebb50, puLen=0x53e8a8) returned 1
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e8a0, puLen=0x53e89c | out: lplpBuffer=0x53e8a0*=0x22eb9b4, puLen=0x53e89c) returned 1
[0155.378] VerLanguageNameW (in: wLang=0x0, szLang=0x53e630, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10
[0155.378] VerQueryValueW (in: pBlock=0x22eb918, lpSubBlock="\\", lplpBuffer=0x53e8b0, puLen=0x53e8ac | out: lplpBuffer=0x53e8b0*=0x22eb940, puLen=0x53e8ac) returned 1
[0155.379] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll", nBufferLength=0x105, lpBuffer=0x53e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll", lpFilePart=0x0) returned 0x7a
[0155.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e868) returned 1
[0155.379] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualbasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.visualbasic.dll"), fInfoLevelId=0x0, lpFileInformation=0x53e8e4 | out: lpFileInformation=0x53e8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fc05ce, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x93fc05ce, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x93fc05ce, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9c4e0)) returned 1
[0155.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e864) returned 1
[0155.380] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll", lpdwHandle=0x53e958 | out: lpdwHandle=0x53e958) returned 0x834
[0155.383] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll", dwHandle=0x0, dwLen=0x834, lpData=0x22edaa8 | out: lpData=0x22edaa8) returned 1
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e92c, puLen=0x53e928 | out: lplpBuffer=0x53e92c*=0x22edebc, puLen=0x53e928) returned 1
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22edb60, puLen=0x53e8a8) returned 1
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22edbb4, puLen=0x53e8a8) returned 1
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22edc10, puLen=0x53e8a8) returned 1
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22edc70, puLen=0x53e8a8) returned 1
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22edcc8, puLen=0x53e8a8) returned 1
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22edd50, puLen=0x53e8a8) returned 1
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22edda4, puLen=0x53e8a8) returned 1
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22eddfc, puLen=0x53e8a8) returned 1
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ede2c, puLen=0x53e8a8) returned 1
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ede68, puLen=0x53e8a8) returned 1
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.384] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e8a0, puLen=0x53e89c | out: lplpBuffer=0x53e8a0*=0x22edebc, puLen=0x53e89c) returned 1
[0155.384] VerLanguageNameW (in: wLang=0x409, szLang=0x53e630, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
[0155.385] VerQueryValueW (in: pBlock=0x22edaa8, lpSubBlock="\\", lplpBuffer=0x53e8b0, puLen=0x53e8ac | out: lplpBuffer=0x53e8b0*=0x22edad0, puLen=0x53e8ac) returned 1
[0155.386] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x53e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77
[0155.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e868) returned 1
[0155.386] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.windows.forms\\v4.0_4.0.0.0__b77a5c561934e089\\system.windows.forms.dll"), fInfoLevelId=0x0, lpFileInformation=0x53e8e4 | out: lpFileInformation=0x53e8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79490901, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79490901, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x794b6b79, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x4f12d8)) returned 1
[0155.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e864) returned 1
[0155.386] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpdwHandle=0x53e958 | out: lpdwHandle=0x53e958) returned 0x80c
[0155.390] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", dwHandle=0x0, dwLen=0x80c, lpData=0x22f01d0 | out: lpData=0x22f01d0) returned 1
[0155.390] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e92c, puLen=0x53e928 | out: lplpBuffer=0x53e92c*=0x22f05d0, puLen=0x53e928) returned 1
[0155.390] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f0288, puLen=0x53e8a8) returned 1
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f02dc, puLen=0x53e8a8) returned 1
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f031c, puLen=0x53e8a8) returned 1
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f0384, puLen=0x53e8a8) returned 1
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f03dc, puLen=0x53e8a8) returned 1
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f0464, puLen=0x53e8a8) returned 1
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f04b8, puLen=0x53e8a8) returned 1
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f0510, puLen=0x53e8a8) returned 1
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f0540, puLen=0x53e8a8) returned 1
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f057c, puLen=0x53e8a8) returned 1
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e8a0, puLen=0x53e89c | out: lplpBuffer=0x53e8a0*=0x22f05d0, puLen=0x53e89c) returned 1
[0155.391] VerLanguageNameW (in: wLang=0x409, szLang=0x53e630, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
[0155.391] VerQueryValueW (in: pBlock=0x22f01d0, lpSubBlock="\\", lplpBuffer=0x53e8b0, puLen=0x53e8ac | out: lplpBuffer=0x53e8b0*=0x22f01f8, puLen=0x53e8ac) returned 1
[0155.392] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System\\v4.0_4.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x53e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System\\v4.0_4.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x5b
[0155.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e868) returned 1
[0155.392] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System\\v4.0_4.0.0.0__b77a5c561934e089\\System.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system\\v4.0_4.0.0.0__b77a5c561934e089\\system.dll"), fInfoLevelId=0x0, lpFileInformation=0x53e8e4 | out: lpFileInformation=0x53e8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7960e088, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7960e088, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7963430c, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x35ce88)) returned 1
[0155.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e864) returned 1
[0155.392] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System\\v4.0_4.0.0.0__b77a5c561934e089\\System.dll", lpdwHandle=0x53e958 | out: lpdwHandle=0x53e958) returned 0x79c
[0155.511] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System\\v4.0_4.0.0.0__b77a5c561934e089\\System.dll", dwHandle=0x0, dwLen=0x79c, lpData=0x22f6890 | out: lpData=0x22f6890) returned 1
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e92c, puLen=0x53e928 | out: lplpBuffer=0x53e92c*=0x22f6c58, puLen=0x53e928) returned 1
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f6948, puLen=0x53e8a8) returned 1
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f699c, puLen=0x53e8a8) returned 1
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f69dc, puLen=0x53e8a8) returned 1
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f6a44, puLen=0x53e8a8) returned 1
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f6a80, puLen=0x53e8a8) returned 1
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f6b08, puLen=0x53e8a8) returned 1
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f6b40, puLen=0x53e8a8) returned 1
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f6b98, puLen=0x53e8a8) returned 1
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f6bc8, puLen=0x53e8a8) returned 1
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f6c04, puLen=0x53e8a8) returned 1
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.512] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e8a0, puLen=0x53e89c | out: lplpBuffer=0x53e8a0*=0x22f6c58, puLen=0x53e89c) returned 1
[0155.513] VerLanguageNameW (in: wLang=0x409, szLang=0x53e630, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
[0155.513] VerQueryValueW (in: pBlock=0x22f6890, lpSubBlock="\\", lplpBuffer=0x53e8b0, puLen=0x53e8ac | out: lplpBuffer=0x53e8b0*=0x22f68b8, puLen=0x53e8ac) returned 1
[0155.514] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll", nBufferLength=0x105, lpBuffer=0x53e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll", lpFilePart=0x0) returned 0x6b
[0155.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e868) returned 1
[0155.514] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.drawing.dll"), fInfoLevelId=0x0, lpFileInformation=0x53e8e4 | out: lpFileInformation=0x53e8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f019ce, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x93f019ce, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x93f019ce, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x926b0)) returned 1
[0155.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e864) returned 1
[0155.514] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll", lpdwHandle=0x53e958 | out: lpdwHandle=0x53e958) returned 0x7cc
[0155.575] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll", dwHandle=0x0, dwLen=0x7cc, lpData=0x22f8e4c | out: lpData=0x22f8e4c) returned 1
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e92c, puLen=0x53e928 | out: lplpBuffer=0x53e92c*=0x22f922c, puLen=0x53e928) returned 1
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f8f04, puLen=0x53e8a8) returned 1
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f8f58, puLen=0x53e8a8) returned 1
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f8f98, puLen=0x53e8a8) returned 1
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f8ff8, puLen=0x53e8a8) returned 1
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f9044, puLen=0x53e8a8) returned 1
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f90cc, puLen=0x53e8a8) returned 1
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f9114, puLen=0x53e8a8) returned 1
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f916c, puLen=0x53e8a8) returned 1
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f919c, puLen=0x53e8a8) returned 1
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22f91d8, puLen=0x53e8a8) returned 1
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e8a0, puLen=0x53e89c | out: lplpBuffer=0x53e8a0*=0x22f922c, puLen=0x53e89c) returned 1
[0155.576] VerLanguageNameW (in: wLang=0x409, szLang=0x53e630, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
[0155.576] VerQueryValueW (in: pBlock=0x22f8e4c, lpSubBlock="\\", lplpBuffer=0x53e8b0, puLen=0x53e8ac | out: lplpBuffer=0x53e8b0*=0x22f8e74, puLen=0x53e8ac) returned 1
[0155.577] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll", nBufferLength=0x105, lpBuffer=0x53e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll", lpFilePart=0x0) returned 0x77
[0155.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e868) returned 1
[0155.578] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.configuration.dll"), fInfoLevelId=0x0, lpFileInformation=0x53e8e4 | out: lpFileInformation=0x53e8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917f6420, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x917f6420, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x917f6420, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x634d8)) returned 1
[0155.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e864) returned 1
[0155.578] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll", lpdwHandle=0x53e958 | out: lpdwHandle=0x53e958) returned 0x824
[0155.630] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll", dwHandle=0x0, dwLen=0x824, lpData=0x22fb768 | out: lpData=0x22fb768) returned 1
[0155.631] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e92c, puLen=0x53e928 | out: lplpBuffer=0x53e92c*=0x22fbb74, puLen=0x53e928) returned 1
[0155.631] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22fb820, puLen=0x53e8a8) returned 1
[0155.631] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22fb874, puLen=0x53e8a8) returned 1
[0155.632] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22fb8c8, puLen=0x53e8a8) returned 1
[0155.632] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22fb928, puLen=0x53e8a8) returned 1
[0155.632] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22fb980, puLen=0x53e8a8) returned 1
[0155.632] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22fba08, puLen=0x53e8a8) returned 1
[0155.632] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22fba5c, puLen=0x53e8a8) returned 1
[0155.632] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22fbab4, puLen=0x53e8a8) returned 1
[0155.632] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22fbae4, puLen=0x53e8a8) returned 1
[0155.632] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.632] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22fbb20, puLen=0x53e8a8) returned 1
[0155.632] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.632] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e8a0, puLen=0x53e89c | out: lplpBuffer=0x53e8a0*=0x22fbb74, puLen=0x53e89c) returned 1
[0155.632] VerLanguageNameW (in: wLang=0x409, szLang=0x53e630, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
[0155.632] VerQueryValueW (in: pBlock=0x22fb768, lpSubBlock="\\", lplpBuffer=0x53e8b0, puLen=0x53e8ac | out: lplpBuffer=0x53e8b0*=0x22fb790, puLen=0x53e8ac) returned 1
[0155.633] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll", nBufferLength=0x105, lpBuffer=0x53e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll", lpFilePart=0x0) returned 0x65
[0155.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e868) returned 1
[0155.634] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.core\\v4.0_4.0.0.0__b77a5c561934e089\\system.core.dll"), fInfoLevelId=0x0, lpFileInformation=0x53e8e4 | out: lpFileInformation=0x53e8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7676a078, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7676a078, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7676a078, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x1514a0)) returned 1
[0155.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e864) returned 1
[0155.634] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll", lpdwHandle=0x53e958 | out: lpdwHandle=0x53e958) returned 0x7bc
[0155.710] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll", dwHandle=0x0, dwLen=0x7bc, lpData=0x22ff978 | out: lpData=0x22ff978) returned 1
[0155.710] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e92c, puLen=0x53e928 | out: lplpBuffer=0x53e92c*=0x22ffd50, puLen=0x53e928) returned 1
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ffa30, puLen=0x53e8a8) returned 1
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ffa84, puLen=0x53e8a8) returned 1
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ffac4, puLen=0x53e8a8) returned 1
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ffb2c, puLen=0x53e8a8) returned 1
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ffb70, puLen=0x53e8a8) returned 1
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ffbf8, puLen=0x53e8a8) returned 1
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ffc38, puLen=0x53e8a8) returned 1
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ffc90, puLen=0x53e8a8) returned 1
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ffcc0, puLen=0x53e8a8) returned 1
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x22ffcfc, puLen=0x53e8a8) returned 1
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e8a0, puLen=0x53e89c | out: lplpBuffer=0x53e8a0*=0x22ffd50, puLen=0x53e89c) returned 1
[0155.711] VerLanguageNameW (in: wLang=0x409, szLang=0x53e630, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
[0155.711] VerQueryValueW (in: pBlock=0x22ff978, lpSubBlock="\\", lplpBuffer=0x53e8b0, puLen=0x53e8ac | out: lplpBuffer=0x53e8b0*=0x22ff9a0, puLen=0x53e8ac) returned 1
[0155.713] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll", nBufferLength=0x105, lpBuffer=0x53e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll", lpFilePart=0x0) returned 0x63
[0155.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e868) returned 1
[0155.713] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.xml\\v4.0_4.0.0.0__b77a5c561934e089\\system.xml.dll"), fInfoLevelId=0x0, lpFileInformation=0x53e8e4 | out: lpFileInformation=0x53e8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765ec96e, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x765ec96e, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x76612aa8, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x28b098)) returned 1
[0155.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e864) returned 1
[0155.713] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll", lpdwHandle=0x53e958 | out: lpdwHandle=0x53e958) returned 0x7bc
[0155.861] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll", dwHandle=0x0, dwLen=0x7bc, lpData=0x2301fc4 | out: lpData=0x2301fc4) returned 1
[0155.862] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e92c, puLen=0x53e928 | out: lplpBuffer=0x53e92c*=0x230239c, puLen=0x53e928) returned 1
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x230207c, puLen=0x53e8a8) returned 1
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x23020d0, puLen=0x53e8a8) returned 1
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2302110, puLen=0x53e8a8) returned 1
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2302178, puLen=0x53e8a8) returned 1
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x23021bc, puLen=0x53e8a8) returned 1
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2302244, puLen=0x53e8a8) returned 1
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2302284, puLen=0x53e8a8) returned 1
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x23022dc, puLen=0x53e8a8) returned 1
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x230230c, puLen=0x53e8a8) returned 1
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2302348, puLen=0x53e8a8) returned 1
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e8a0, puLen=0x53e89c | out: lplpBuffer=0x53e8a0*=0x230239c, puLen=0x53e89c) returned 1
[0155.863] VerLanguageNameW (in: wLang=0x409, szLang=0x53e630, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
[0155.863] VerQueryValueW (in: pBlock=0x2301fc4, lpSubBlock="\\", lplpBuffer=0x53e8b0, puLen=0x53e8ac | out: lplpBuffer=0x53e8b0*=0x2301fec, puLen=0x53e8ac) returned 1
[0155.864] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Runtime.Remoting\\v4.0_4.0.0.0__b77a5c561934e089\\System.Runtime.Remoting.dll", nBufferLength=0x105, lpBuffer=0x53e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Runtime.Remoting\\v4.0_4.0.0.0__b77a5c561934e089\\System.Runtime.Remoting.dll", lpFilePart=0x0) returned 0x7d
[0155.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x53e868) returned 1
[0155.865] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Runtime.Remoting\\v4.0_4.0.0.0__b77a5c561934e089\\System.Runtime.Remoting.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.runtime.remoting\\v4.0_4.0.0.0__b77a5c561934e089\\system.runtime.remoting.dll"), fInfoLevelId=0x0, lpFileInformation=0x53e8e4 | out: lpFileInformation=0x53e8e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918b5024, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x918b5024, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x918b5024, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x54af0)) returned 1
[0155.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x53e864) returned 1
[0155.865] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Runtime.Remoting\\v4.0_4.0.0.0__b77a5c561934e089\\System.Runtime.Remoting.dll", lpdwHandle=0x53e958 | out: lpdwHandle=0x53e958) returned 0x86c
[0155.968] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Runtime.Remoting\\v4.0_4.0.0.0__b77a5c561934e089\\System.Runtime.Remoting.dll", dwHandle=0x0, dwLen=0x86c, lpData=0x23087ac | out: lpData=0x23087ac) returned 1
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e92c, puLen=0x53e928 | out: lplpBuffer=0x53e92c*=0x2308bdc, puLen=0x53e928) returned 1
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2308864, puLen=0x53e8a8) returned 1
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x23088b8, puLen=0x53e8a8) returned 1
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2308928, puLen=0x53e8a8) returned 1
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2308988, puLen=0x53e8a8) returned 1
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x23089e4, puLen=0x53e8a8) returned 1
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2308a6c, puLen=0x53e8a8) returned 1
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2308ac4, puLen=0x53e8a8) returned 1
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2308b1c, puLen=0x53e8a8) returned 1
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2308b4c, puLen=0x53e8a8) returned 1
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x2308b88, puLen=0x53e8a8) returned 1
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x53e8ac, puLen=0x53e8a8 | out: lplpBuffer=0x53e8ac*=0x0, puLen=0x53e8a8) returned 0
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x53e8a0, puLen=0x53e89c | out: lplpBuffer=0x53e8a0*=0x2308bdc, puLen=0x53e89c) returned 1
[0155.969] VerLanguageNameW (in: wLang=0x409, szLang=0x53e630, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
[0155.969] VerQueryValueW (in: pBlock=0x23087ac, lpSubBlock="\\", lplpBuffer=0x53e8b0, puLen=0x53e8ac | out: lplpBuffer=0x53e8b0*=0x23087d4, puLen=0x53e8ac) returned 1
[0155.970] GetCurrentActCtx (in: lphActCtx=0x53e8d8 | out: lphActCtx=0x53e8d8*=0x89a934) returned 1
[0155.972] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0155.973] GetCurrentActCtx (in: lphActCtx=0x53e860 | out: lphActCtx=0x53e860*=0x89a934) returned 1
[0155.973] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0155.974] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0155.974] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x4013e
[0155.975] SetWindowLongW (hWnd=0x4013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0155.975] GetWindowLongW (hWnd=0x4013e, nIndex=-4) returned 1950089536
[0155.975] SetWindowLongW (hWnd=0x4013e, nIndex=-4, dwNewLong=79641318) returned 1950089536
[0155.975] GetWindowLongW (hWnd=0x4013e, nIndex=-4) returned 79641318
[0155.975] GetWindowLongW (hWnd=0x4013e, nIndex=-16) returned 113311744
[0155.975] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x4013e, Msg=0x24, wParam=0x0, lParam=0x53e28c) returned 0x0
[0155.976] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x4013e, Msg=0x81, wParam=0x0, lParam=0x53e280) returned 0x1
[0155.977] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x4013e, Msg=0x83, wParam=0x0, lParam=0x53e26c) returned 0x0
[0155.978] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x4013e, Msg=0x1, wParam=0x0, lParam=0x53e280) returned 0x0
[0155.978] GetClientRect (in: hWnd=0x4013e, lpRect=0x53df4c | out: lpRect=0x53df4c) returned 1
[0155.978] GetWindowRect (in: hWnd=0x4013e, lpRect=0x53df4c | out: lpRect=0x53df4c) returned 1
[0155.978] SetWindowTextW (hWnd=0x4013e, lpString="WindowsFormsParkingWindow") returned 1
[0155.978] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x4013e, Msg=0xc, wParam=0x0, lParam=0x230d4d0) returned 0x1
[0155.979] GetParent (hWnd=0x4013e) returned 0x0
[0155.979] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0155.994] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=0, Y=0, nWidth=100, nHeight=23, hWndParent=0x4013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x102c8
[0155.995] SetWindowLongW (hWnd=0x102c8, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0155.995] GetWindowLongW (hWnd=0x102c8, nIndex=-4) returned 1868147648
[0155.995] SetWindowLongW (hWnd=0x102c8, nIndex=-4, dwNewLong=79641798) returned 1868147648
[0155.995] GetWindowLongW (hWnd=0x102c8, nIndex=-4) returned 79641798
[0155.995] GetWindowLongW (hWnd=0x102c8, nIndex=-16) returned 1174405133
[0155.995] GetWindowLongW (hWnd=0x102c8, nIndex=-12) returned 0
[0155.995] SetWindowLongW (hWnd=0x102c8, nIndex=-12, dwNewLong=66248) returned 0
[0155.995] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x81, wParam=0x0, lParam=0x53e2f8) returned 0x1
[0155.996] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x83, wParam=0x0, lParam=0x53e2e4) returned 0x0
[0155.996] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x1, wParam=0x0, lParam=0x53e2f8) returned 0x0
[0155.997] GetClientRect (in: hWnd=0x102c8, lpRect=0x53dfa4 | out: lpRect=0x53dfa4) returned 1
[0155.997] GetWindowRect (in: hWnd=0x102c8, lpRect=0x53dfa4 | out: lpRect=0x53dfa4) returned 1
[0155.997] GetParent (hWnd=0x102c8) returned 0x4013e
[0155.997] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x4013e, lpPoints=0x53dfa4, cPoints=0x2 | out: lpPoints=0x53dfa4) returned -1966088
[0155.997] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x5, wParam=0x0, lParam=0x170064) returned 0x0
[0155.997] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
[0155.997] GetClientRect (in: hWnd=0x102c8, lpRect=0x53dffc | out: lpRect=0x53dffc) returned 1
[0155.997] GetWindowRect (in: hWnd=0x102c8, lpRect=0x53dffc | out: lpRect=0x53dffc) returned 1
[0155.998] GetParent (hWnd=0x102c8) returned 0x4013e
[0155.998] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x4013e, lpPoints=0x53dffc, cPoints=0x2 | out: lpPoints=0x53dffc) returned -1966088
[0155.998] SendMessageW (hWnd=0x102c8, Msg=0x2210, wParam=0x2c80001, lParam=0x102c8) returned 0x0
[0155.998] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x2210, wParam=0x2c80001, lParam=0x102c8) returned 0x0
[0155.998] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0155.998] GetParent (hWnd=0x102c8) returned 0x4013e
[0155.998] GdipCreateFromHWND (hwnd=0x102c8, graphics=0x53e95c) returned 0x0
[0156.023] GdipMeasureString (graphics=0x5d920e8, string="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nAccess to the path 'C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe' is denied.", length=273, font=0x4a4ef48, layoutRect=0x53e924, stringFormat=0x0, boundingBox=0x53e914, codepointsFitted=0x53e910, linesFilled=0x53e90c) returned 0x0
[0156.390] GdipDeleteGraphics (graphics=0x5d920e8) returned 0x0
[0156.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.392] GetCursorPos (in: lpPoint=0x230d94c | out: lpPoint=0x230d94c*(x=526, y=657)) returned 1
[0156.393] GetSystemMetrics (nIndex=80) returned 1
[0156.394] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e708 | out: lpmi=0x53e708) returned 1
[0156.395] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xbe0107b0
[0156.396] GetDeviceCaps (hdc=0xbe0107b0, index=12) returned 32
[0156.396] GetDeviceCaps (hdc=0xbe0107b0, index=14) returned 1
[0156.396] DeleteDC (hdc=0xbe0107b0) returned 1
[0156.397] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e758 | out: lpmi=0x53e758) returned 1
[0156.397] AdjustWindowRectEx (in: lpRect=0x53e8f0, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e8f0) returned 1
[0156.397] GetSystemMetrics (nIndex=59) returned 1460
[0156.397] GetSystemMetrics (nIndex=60) returned 920
[0156.397] GetSystemMetrics (nIndex=34) returned 136
[0156.397] GetSystemMetrics (nIndex=35) returned 39
[0156.398] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.398] GetCursorPos (in: lpPoint=0x230dc2c | out: lpPoint=0x230dc2c*(x=526, y=657)) returned 1
[0156.398] MonitorFromPoint (pt=0x20f, dwFlags=0x294) returned 0x10001
[0156.398] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e60c | out: lpmi=0x53e60c) returned 1
[0156.398] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xbf0107b0
[0156.398] GetDeviceCaps (hdc=0xbf0107b0, index=12) returned 32
[0156.399] GetDeviceCaps (hdc=0xbf0107b0, index=14) returned 1
[0156.399] DeleteDC (hdc=0xbf0107b0) returned 1
[0156.399] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e65c | out: lpmi=0x53e65c) returned 1
[0156.399] AdjustWindowRectEx (in: lpRect=0x53e7f0, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7f0) returned 1
[0156.403] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.404] AdjustWindowRectEx (in: lpRect=0x53e8bc, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e8bc) returned 1
[0156.409] LoadIconW (hInstance=0x0, lpIconName=0x7f01) returned 0x1002d
[0156.412] GetIconInfo (in: hIcon=0x1002d, piconinfo=0x230dfa0 | out: piconinfo=0x230dfa0) returned 1
[0156.463] GetObjectW (in: h=0xa505079a, c=24, pv=0x230dfbc | out: pv=0x230dfbc) returned 24
[0156.464] GdipCreateBitmapFromHBITMAP (hbm=0xa505079a, hpal=0x0, bitmap=0x53e848) returned 0x0
[0156.465] GdipGetImageWidth (image=0x5d920e8, width=0x53e868) returned 0x0
[0156.466] GdipGetImageHeight (image=0x5d920e8, height=0x53e860) returned 0x0
[0156.466] GdipGetImagePixelFormat (image=0x5d920e8, format=0x53e858) returned 0x0
[0156.466] GdipBitmapLockBits (bitmap=0x5d920e8, rect=0x53e81c, flags=0x1, format=0x22009, lockedBitmapData=0x230e090) returned 0x0
[0156.468] GdipCreateBitmapFromScan0 (width=32, height=32, stride=0, format=0x26200a, scan0=0x0, bitmap=0x53e858) returned 0x0
[0156.469] GdipBitmapLockBits (bitmap=0x5d92418, rect=0x53e81c, flags=0x2, format=0x26200a, lockedBitmapData=0x230e0c8) returned 0x0
[0156.470] RtlMoveMemory (in: Destination=0x5d9c8f0, Source=0x5da0ef0, Length=0x80 | out: Destination=0x5d9c8f0)
[0156.470] RtlMoveMemory (in: Destination=0x5d9c970, Source=0x5da0e70, Length=0x80 | out: Destination=0x5d9c970)
[0156.470] RtlMoveMemory (in: Destination=0x5d9c9f0, Source=0x5da0df0, Length=0x80 | out: Destination=0x5d9c9f0)
[0156.470] RtlMoveMemory (in: Destination=0x5d9ca70, Source=0x5da0d70, Length=0x80 | out: Destination=0x5d9ca70)
[0156.471] RtlMoveMemory (in: Destination=0x5d9caf0, Source=0x5da0cf0, Length=0x80 | out: Destination=0x5d9caf0)
[0156.471] RtlMoveMemory (in: Destination=0x5d9cb70, Source=0x5da0c70, Length=0x80 | out: Destination=0x5d9cb70)
[0156.471] RtlMoveMemory (in: Destination=0x5d9cbf0, Source=0x5da0bf0, Length=0x80 | out: Destination=0x5d9cbf0)
[0156.471] RtlMoveMemory (in: Destination=0x5d9cc70, Source=0x5da0b70, Length=0x80 | out: Destination=0x5d9cc70)
[0156.471] RtlMoveMemory (in: Destination=0x5d9ccf0, Source=0x5da0af0, Length=0x80 | out: Destination=0x5d9ccf0)
[0156.471] RtlMoveMemory (in: Destination=0x5d9cd70, Source=0x5da0a70, Length=0x80 | out: Destination=0x5d9cd70)
[0156.471] RtlMoveMemory (in: Destination=0x5d9cdf0, Source=0x5da09f0, Length=0x80 | out: Destination=0x5d9cdf0)
[0156.471] RtlMoveMemory (in: Destination=0x5d9ce70, Source=0x5da0970, Length=0x80 | out: Destination=0x5d9ce70)
[0156.471] RtlMoveMemory (in: Destination=0x5d9cef0, Source=0x5da08f0, Length=0x80 | out: Destination=0x5d9cef0)
[0156.471] RtlMoveMemory (in: Destination=0x5d9cf70, Source=0x5da0870, Length=0x80 | out: Destination=0x5d9cf70)
[0156.471] RtlMoveMemory (in: Destination=0x5d9cff0, Source=0x5da07f0, Length=0x80 | out: Destination=0x5d9cff0)
[0156.471] RtlMoveMemory (in: Destination=0x5d9d070, Source=0x5da0770, Length=0x80 | out: Destination=0x5d9d070)
[0156.471] RtlMoveMemory (in: Destination=0x5d9d0f0, Source=0x5da06f0, Length=0x80 | out: Destination=0x5d9d0f0)
[0156.471] RtlMoveMemory (in: Destination=0x5d9d170, Source=0x5da0670, Length=0x80 | out: Destination=0x5d9d170)
[0156.471] RtlMoveMemory (in: Destination=0x5d9d1f0, Source=0x5da05f0, Length=0x80 | out: Destination=0x5d9d1f0)
[0156.471] RtlMoveMemory (in: Destination=0x5d9d270, Source=0x5da0570, Length=0x80 | out: Destination=0x5d9d270)
[0156.471] RtlMoveMemory (in: Destination=0x5d9d2f0, Source=0x5da04f0, Length=0x80 | out: Destination=0x5d9d2f0)
[0156.472] RtlMoveMemory (in: Destination=0x5d9d370, Source=0x5da0470, Length=0x80 | out: Destination=0x5d9d370)
[0156.472] RtlMoveMemory (in: Destination=0x5d9d3f0, Source=0x5da03f0, Length=0x80 | out: Destination=0x5d9d3f0)
[0156.472] RtlMoveMemory (in: Destination=0x5d9d470, Source=0x5da0370, Length=0x80 | out: Destination=0x5d9d470)
[0156.472] RtlMoveMemory (in: Destination=0x5d9d4f0, Source=0x5da02f0, Length=0x80 | out: Destination=0x5d9d4f0)
[0156.472] RtlMoveMemory (in: Destination=0x5d9d570, Source=0x5da0270, Length=0x80 | out: Destination=0x5d9d570)
[0156.472] RtlMoveMemory (in: Destination=0x5d9d5f0, Source=0x5da01f0, Length=0x80 | out: Destination=0x5d9d5f0)
[0156.472] RtlMoveMemory (in: Destination=0x5d9d670, Source=0x5da0170, Length=0x80 | out: Destination=0x5d9d670)
[0156.472] RtlMoveMemory (in: Destination=0x5d9d6f0, Source=0x5da00f0, Length=0x80 | out: Destination=0x5d9d6f0)
[0156.472] RtlMoveMemory (in: Destination=0x5d9d770, Source=0x5da0070, Length=0x80 | out: Destination=0x5d9d770)
[0156.472] RtlMoveMemory (in: Destination=0x5d9d7f0, Source=0x5d9fff0, Length=0x80 | out: Destination=0x5d9d7f0)
[0156.472] RtlMoveMemory (in: Destination=0x5d9d870, Source=0x5d9ff70, Length=0x80 | out: Destination=0x5d9d870)
[0156.472] GdipBitmapUnlockBits (bitmap=0x5d920e8, lockedBitmapData=0x230e090) returned 0x0
[0156.472] GdipBitmapUnlockBits (bitmap=0x5d92418, lockedBitmapData=0x230e0c8) returned 0x0
[0156.473] GdipDisposeImage (image=0x5d920e8) returned 0x0
[0156.473] DeleteObject (ho=0xa505079a) returned 1
[0156.473] DeleteObject (ho=0xc00507b0) returned 1
[0156.473] GetCurrentThreadId () returned 0x11d0
[0156.473] GetCurrentThreadId () returned 0x11d0
[0156.475] SetWindowPos (hWnd=0x102c8, hWndInsertAfter=0x0, X=64, Y=8, cx=354, cy=81, uFlags=0x14) returned 1
[0156.475] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x46, wParam=0x0, lParam=0x53e83c) returned 0x0
[0156.475] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x83, wParam=0x1, lParam=0x53e814) returned 0x0
[0156.477] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x47, wParam=0x0, lParam=0x53e83c) returned 0x0
[0156.477] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x3, wParam=0x0, lParam=0x80040) returned 0x0
[0156.477] GetClientRect (in: hWnd=0x102c8, lpRect=0x53ddcc | out: lpRect=0x53ddcc) returned 1
[0156.477] GetWindowRect (in: hWnd=0x102c8, lpRect=0x53ddcc | out: lpRect=0x53ddcc) returned 1
[0156.477] GetParent (hWnd=0x102c8) returned 0x4013e
[0156.477] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x4013e, lpPoints=0x53ddcc, cPoints=0x2 | out: lpPoints=0x53ddcc) returned -1966088
[0156.477] InvalidateRect (hWnd=0x102c8, lpRect=0x0, bErase=1) returned 1
[0156.478] GetWindowTextLengthW (hWnd=0x102c8) returned 0
[0156.478] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0156.478] GetSystemMetrics (nIndex=42) returned 0
[0156.478] GetWindowTextW (in: hWnd=0x102c8, lpString=0x53dc5c, nMaxCount=1 | out: lpString="") returned 0
[0156.478] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xd, wParam=0x1, lParam=0x53dc5c) returned 0x0
[0156.478] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x5, wParam=0x0, lParam=0x510162) returned 0x0
[0156.478] GetClientRect (in: hWnd=0x102c8, lpRect=0x53e4fc | out: lpRect=0x53e4fc) returned 1
[0156.478] GetWindowRect (in: hWnd=0x102c8, lpRect=0x53e4fc | out: lpRect=0x53e4fc) returned 1
[0156.478] GetParent (hWnd=0x102c8) returned 0x4013e
[0156.478] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x4013e, lpPoints=0x53e4fc, cPoints=0x2 | out: lpPoints=0x53e4fc) returned -1966088
[0156.480] GetWindowTextLengthW (hWnd=0x102c8) returned 0
[0156.480] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0156.480] GetSystemMetrics (nIndex=42) returned 0
[0156.480] GetWindowTextW (in: hWnd=0x102c8, lpString=0x53e894, nMaxCount=1 | out: lpString="") returned 0
[0156.480] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xd, wParam=0x1, lParam=0x53e894) returned 0x0
[0156.480] GetWindowTextLengthW (hWnd=0x102c8) returned 0
[0156.480] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0156.480] GetSystemMetrics (nIndex=42) returned 0
[0156.480] GetWindowTextW (in: hWnd=0x102c8, lpString=0x53e890, nMaxCount=1 | out: lpString="") returned 0
[0156.480] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xd, wParam=0x1, lParam=0x53e890) returned 0x0
[0156.480] SetWindowTextW (hWnd=0x102c8, lpString="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nAccess to the path 'C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe' is denied.") returned 1
[0156.480] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xc, wParam=0x0, lParam=0x22dcd70) returned 0x1
[0156.480] InvalidateRect (hWnd=0x102c8, lpRect=0x0, bErase=1) returned 1
[0156.481] GetCurrentThreadId () returned 0x11d0
[0156.481] GetWindowThreadProcessId (in: hWnd=0x102c8, lpdwProcessId=0x53e91c | out: lpdwProcessId=0x53e91c) returned 0x11d0
[0156.485] GdipCreateBitmapFromStream (stream=0x4840010, bitmap=0x53e958) returned 0x0
[0156.581] GdipImageForceValidation (image=0x5d920e8) returned 0x0
[0156.584] GdipGetImageRawFormat (image=0x5d920e8, format=0x53e8cc*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
[0156.585] GdipGetImageHeight (image=0x5d920e8, height=0x53e93c) returned 0x0
[0156.585] GdipGetImageWidth (image=0x5d920e8, width=0x53e93c) returned 0x0
[0156.585] GdipGetImageWidth (image=0x5d920e8, width=0x53e928) returned 0x0
[0156.586] GdipGetImageHeight (image=0x5d920e8, height=0x53e928) returned 0x0
[0156.586] GdipGetImageWidth (image=0x5d920e8, width=0x53e918) returned 0x0
[0156.586] GdipGetImageHeight (image=0x5d920e8, height=0x53e918) returned 0x0
[0156.587] GdipBitmapGetPixel (bitmap=0x5d920e8, x=0, y=15, color=0x53e928) returned 0x0
[0156.587] GdipGetImageRawFormat (image=0x5d920e8, format=0x53e858*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
[0156.587] GdipGetImageWidth (image=0x5d920e8, width=0x53e858) returned 0x0
[0156.587] GdipGetImageHeight (image=0x5d920e8, height=0x53e858) returned 0x0
[0156.588] GdipCreateBitmapFromScan0 (width=16, height=16, stride=0, format=0x26200a, scan0=0x0, bitmap=0x53e85c) returned 0x0
[0156.588] GdipGetImagePixelFormat (image=0x5d9b198, format=0x53e858) returned 0x0
[0156.588] GdipGetImageGraphicsContext (image=0x5d9b198, graphics=0x53e864) returned 0x0
[0156.589] GdipGraphicsClear (graphics=0x5d94758, color=0xffffff) returned 0x0
[0156.589] GdipCreateImageAttributes (imageattr=0x53e868) returned 0x0
[0156.589] GdipSetImageAttributesColorKeys (imageattr=0x5d93f80, type=0x0, enableFlag=1, colorLow=0xffc0c0c0, colorHigh=0xffc0c0c0) returned 0x0
[0156.589] GdipDrawImageRectRectI (graphics=0x5d94758, image=0x5d920e8, dstx=0, dsty=0, dstwidth=16, dstheight=16, srcx=0, srcy=0, srcwidth=16, srcheight=16, srcUnit=0x2, imageAttributes=0x5d93f80, callback=0x0, callbackData=0x0) returned 0x0
[0156.591] GdipDisposeImageAttributes (imageattr=0x5d93f80) returned 0x0
[0156.591] GdipDeleteGraphics (graphics=0x5d94758) returned 0x0
[0156.591] GdipDisposeImage (image=0x5d920e8) returned 0x0
[0156.592] GdipCreateBitmapFromStream (stream=0x484fff0, bitmap=0x53e958) returned 0x0
[0156.593] GdipImageForceValidation (image=0x5d920e8) returned 0x0
[0156.595] GdipGetImageRawFormat (image=0x5d920e8, format=0x53e8cc*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
[0156.595] GdipGetImageHeight (image=0x5d920e8, height=0x53e93c) returned 0x0
[0156.595] GdipGetImageWidth (image=0x5d920e8, width=0x53e93c) returned 0x0
[0156.595] GdipGetImageWidth (image=0x5d920e8, width=0x53e928) returned 0x0
[0156.595] GdipGetImageHeight (image=0x5d920e8, height=0x53e928) returned 0x0
[0156.595] GdipGetImageWidth (image=0x5d920e8, width=0x53e918) returned 0x0
[0156.595] GdipGetImageHeight (image=0x5d920e8, height=0x53e918) returned 0x0
[0156.595] GdipBitmapGetPixel (bitmap=0x5d920e8, x=0, y=15, color=0x53e928) returned 0x0
[0156.595] GdipGetImageRawFormat (image=0x5d920e8, format=0x53e858*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
[0156.595] GdipGetImageWidth (image=0x5d920e8, width=0x53e858) returned 0x0
[0156.596] GdipGetImageHeight (image=0x5d920e8, height=0x53e858) returned 0x0
[0156.596] GdipCreateBitmapFromScan0 (width=16, height=16, stride=0, format=0x26200a, scan0=0x0, bitmap=0x53e85c) returned 0x0
[0156.596] GdipGetImagePixelFormat (image=0x5d946e8, format=0x53e858) returned 0x0
[0156.596] GdipGetImageGraphicsContext (image=0x5d946e8, graphics=0x53e864) returned 0x0
[0156.596] GdipGraphicsClear (graphics=0x5da0378, color=0xffffff) returned 0x0
[0156.596] GdipCreateImageAttributes (imageattr=0x53e868) returned 0x0
[0156.596] GdipSetImageAttributesColorKeys (imageattr=0x5d93f80, type=0x0, enableFlag=1, colorLow=0xffc0c0c0, colorHigh=0xffc0c0c0) returned 0x0
[0156.596] GdipDrawImageRectRectI (graphics=0x5da0378, image=0x5d920e8, dstx=0, dsty=0, dstwidth=16, dstheight=16, srcx=0, srcy=0, srcwidth=16, srcheight=16, srcUnit=0x2, imageAttributes=0x5d93f80, callback=0x0, callbackData=0x0) returned 0x0
[0156.596] GdipDisposeImageAttributes (imageattr=0x5d93f80) returned 0x0
[0156.596] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0156.596] GdipDisposeImage (image=0x5d920e8) returned 0x0
[0156.597] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.597] AdjustWindowRectEx (in: lpRect=0x53e8d4, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e8d4) returned 1
[0156.598] GetCurrentThreadId () returned 0x11d0
[0156.598] GetCurrentThreadId () returned 0x11d0
[0156.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.598] AdjustWindowRectEx (in: lpRect=0x53e8d4, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e8d4) returned 1
[0156.598] GetCurrentThreadId () returned 0x11d0
[0156.599] GetCurrentThreadId () returned 0x11d0
[0156.599] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.599] AdjustWindowRectEx (in: lpRect=0x53e8d4, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e8d4) returned 1
[0156.599] GetCurrentThreadId () returned 0x11d0
[0156.599] GetCurrentThreadId () returned 0x11d0
[0156.599] GetSystemMetrics (nIndex=5) returned 1
[0156.599] GetSystemMetrics (nIndex=6) returned 1
[0156.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.600] AdjustWindowRectEx (in: lpRect=0x53e828, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e828) returned 1
[0156.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.600] AdjustWindowRectEx (in: lpRect=0x53e828, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e828) returned 1
[0156.707] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.707] AdjustWindowRectEx (in: lpRect=0x53e8a8, dwStyle=0x563008c4, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e8a8) returned 1
[0156.707] GetCurrentThreadId () returned 0x11d0
[0156.707] GetCurrentThreadId () returned 0x11d0
[0156.710] GetProcessWindowStation () returned 0x13c
[0156.710] GetCurrentActCtx (in: lphActCtx=0x53e99c | out: lphActCtx=0x53e99c*=0x89a934) returned 1
[0156.710] GetProcessWindowStation () returned 0x13c
[0156.711] OleInitialize (pvReserved=0x0) returned 0x0
[0156.712] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x53e91c | out: lplpMessageFilter=0x53e91c*=0x0) returned 0x0
[0156.717] GetCurrentThreadId () returned 0x11d0
[0156.724] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3a6e, lParam=0x0) returned 1
[0156.725] IsWindowVisible (hWnd=0x602b6) returned 0
[0156.725] IsWindowVisible (hWnd=0x70036) returned 0
[0156.725] IsWindowVisible (hWnd=0x901f8) returned 0
[0156.725] IsWindowVisible (hWnd=0x302bc) returned 0
[0156.725] GetActiveWindow () returned 0x0
[0156.725] GetCurrentActCtx (in: lphActCtx=0x53e88c | out: lphActCtx=0x53e88c*=0x89a934) returned 1
[0156.726] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.726] AdjustWindowRectEx (in: lpRect=0x53e7ec, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7ec) returned 1
[0156.726] GetCursorPos (in: lpPoint=0x230f5f4 | out: lpPoint=0x230f5f4*(x=526, y=657)) returned 1
[0156.726] MonitorFromPoint (pt=0x20e, dwFlags=0x291) returned 0x10001
[0156.726] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6d0 | out: lpmi=0x53e6d0) returned 1
[0156.727] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xc20107b0
[0156.727] GetDeviceCaps (hdc=0xc20107b0, index=12) returned 32
[0156.727] GetDeviceCaps (hdc=0xc20107b0, index=14) returned 1
[0156.727] DeleteDC (hdc=0xc20107b0) returned 1
[0156.727] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0156.728] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0156.728] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Microsoft .NET Framework", dwStyle=0x2c80000, X=493, Y=341, nWidth=454, nHeight=177, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x102cc
[0156.728] SetWindowLongW (hWnd=0x102cc, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0156.729] GetWindowLongW (hWnd=0x102cc, nIndex=-4) returned 1950089536
[0156.729] SetWindowLongW (hWnd=0x102cc, nIndex=-4, dwNewLong=79642038) returned 1950089536
[0156.729] GetWindowLongW (hWnd=0x102cc, nIndex=-4) returned 79642038
[0156.729] GetWindowLongW (hWnd=0x102cc, nIndex=-16) returned 113770496
[0156.729] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x81, wParam=0x0, lParam=0x53e2b0) returned 0x1
[0156.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x83, wParam=0x0, lParam=0x53e29c) returned 0x0
[0156.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x1, wParam=0x0, lParam=0x53e2b0) returned 0x0
[0156.732] GetClientRect (in: hWnd=0x102cc, lpRect=0x53df68 | out: lpRect=0x53df68) returned 1
[0156.732] GetWindowRect (in: hWnd=0x102cc, lpRect=0x53df68 | out: lpRect=0x53df68) returned 1
[0156.732] SetWindowTextW (hWnd=0x102cc, lpString="Microsoft .NET Framework") returned 1
[0156.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xc, wParam=0x0, lParam=0x230d820) returned 0x1
[0156.734] GetStartupInfoW (in: lpStartupInfo=0x230f930 | out: lpStartupInfo=0x230f930*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0156.737] GetParent (hWnd=0x102cc) returned 0x0
[0156.737] SetWindowLongW (hWnd=0x102cc, nIndex=-8, dwNewLong=0) returned 0
[0156.738] SendMessageW (hWnd=0x102cc, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0156.738] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0156.738] SendMessageW (hWnd=0x102cc, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0156.738] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0156.738] GetSystemMenu (hWnd=0x102cc, bRevert=0) returned 0x701d9
[0156.741] GetWindowPlacement (in: hWnd=0x102cc, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0156.741] EnableMenuItem (hMenu=0x701d9, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0156.741] EnableMenuItem (hMenu=0x701d9, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0156.741] EnableMenuItem (hMenu=0x701d9, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0156.741] EnableMenuItem (hMenu=0x701d9, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0156.741] EnableMenuItem (hMenu=0x701d9, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0156.742] GetClientRect (in: hWnd=0x102cc, lpRect=0x53e8e0 | out: lpRect=0x53e8e0) returned 1
[0156.742] GetClientRect (in: hWnd=0x102cc, lpRect=0x53e840 | out: lpRect=0x53e840) returned 1
[0156.742] GetWindowRect (in: hWnd=0x102cc, lpRect=0x53e840 | out: lpRect=0x53e840) returned 1
[0156.742] SetWindowPos (hWnd=0x102cc, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0156.742] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x46, wParam=0x0, lParam=0x53e85c) returned 0x0
[0156.743] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x46, wParam=0x0, lParam=0x53e85c) returned 0x0
[0156.744] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0
[0156.744] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0
[0156.744] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0
[0156.744] NtdllDefWindowProc_W (hWnd=0x901f8, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0
[0156.744] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
[0156.745] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0156.745] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0156.745] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0156.844] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0156.852] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0156.853] GetParent (hWnd=0x102cc) returned 0x0
[0156.853] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0156.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0156.853] GetWindowPlacement (in: hWnd=0x102cc, lpwndpl=0x53e588 | out: lpwndpl=0x53e588) returned 1
[0156.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x47, wParam=0x0, lParam=0x53e85c) returned 0x0
[0156.853] GetClientRect (in: hWnd=0x102cc, lpRect=0x53e538 | out: lpRect=0x53e538) returned 1
[0156.853] GetWindowRect (in: hWnd=0x102cc, lpRect=0x53e538 | out: lpRect=0x53e538) returned 1
[0156.854] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0156.854] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0156.854] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0156.855] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.856] GetWindowLongW (hWnd=0x102cc, nIndex=-16) returned 113770496
[0156.856] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0156.856] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0156.856] GetSystemMetrics (nIndex=42) returned 0
[0156.856] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53e7bc, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0156.856] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53e7bc) returned 0x18
[0156.856] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0156.856] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0156.856] GetSystemMetrics (nIndex=42) returned 0
[0156.856] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53e7bc, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0156.856] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53e7bc) returned 0x18
[0156.856] GetCursorPos (in: lpPoint=0x230fc90 | out: lpPoint=0x230fc90*(x=526, y=657)) returned 1
[0156.856] MonitorFromPoint (pt=0x20f, dwFlags=0x28e) returned 0x10001
[0156.857] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e710 | out: lpmi=0x53e710) returned 1
[0156.857] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xcc0107b0
[0156.857] GetDeviceCaps (hdc=0xcc0107b0, index=12) returned 32
[0156.857] GetDeviceCaps (hdc=0xcc0107b0, index=14) returned 1
[0156.857] DeleteDC (hdc=0xcc0107b0) returned 1
[0156.857] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e760 | out: lpmi=0x53e760) returned 1
[0156.857] GetWindowLongW (hWnd=0x102cc, nIndex=-16) returned 113770496
[0156.857] GetWindowLongW (hWnd=0x102cc, nIndex=-20) returned 327945
[0156.857] SetWindowLongW (hWnd=0x102cc, nIndex=-16, dwNewLong=46661632) returned 113770496
[0156.857] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e83c) returned 0x0
[0156.858] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e83c) returned 0x0
[0156.858] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0156.859] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0156.859] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0156.859] SetWindowLongW (hWnd=0x102cc, nIndex=-20, dwNewLong=327681) returned 327945
[0156.859] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7c, wParam=0xffffffec, lParam=0x53e83c) returned 0x0
[0156.860] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7d, wParam=0xffffffec, lParam=0x53e83c) returned 0x0
[0156.860] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0156.860] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0156.861] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0156.861] SetWindowPos (hWnd=0x102cc, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0156.861] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x46, wParam=0x0, lParam=0x53e854) returned 0x0
[0156.861] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x83, wParam=0x1, lParam=0x53e82c) returned 0x0
[0156.863] GetWindowPlacement (in: hWnd=0x102cc, lpwndpl=0x53e580 | out: lpwndpl=0x53e580) returned 1
[0156.863] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x47, wParam=0x0, lParam=0x53e854) returned 0x0
[0156.863] GetClientRect (in: hWnd=0x102cc, lpRect=0x53e530 | out: lpRect=0x53e530) returned 1
[0156.863] GetWindowRect (in: hWnd=0x102cc, lpRect=0x53e530 | out: lpRect=0x53e530) returned 1
[0156.864] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0156.864] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0156.864] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0156.865] RedrawWindow (hWnd=0x102cc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0156.865] GetSystemMenu (hWnd=0x102cc, bRevert=0) returned 0x701d9
[0156.865] GetWindowPlacement (in: hWnd=0x102cc, lpwndpl=0x53e88c | out: lpwndpl=0x53e88c) returned 1
[0156.865] EnableMenuItem (hMenu=0x701d9, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0156.865] EnableMenuItem (hMenu=0x701d9, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0156.865] EnableMenuItem (hMenu=0x701d9, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0156.865] EnableMenuItem (hMenu=0x701d9, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0156.865] EnableMenuItem (hMenu=0x701d9, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0156.865] GetWindowLongW (hWnd=0x102cc, nIndex=-8) returned 0
[0156.865] IsWindowEnabled (hWnd=0x102cc) returned 1
[0156.865] ShowWindow (hWnd=0x102cc, nCmdShow=5) returned 0
[0156.865] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0156.865] GetCurrentActCtx (in: lphActCtx=0x53e40c | out: lphActCtx=0x53e40c*=0x89a934) returned 1
[0156.866] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.866] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0156.866] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=0, Y=0, nWidth=64, nHeight=64, hWndParent=0x102cc, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x102d2
[0156.867] SetWindowLongW (hWnd=0x102d2, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0156.867] GetWindowLongW (hWnd=0x102d2, nIndex=-4) returned 1950089536
[0156.867] SetWindowLongW (hWnd=0x102d2, nIndex=-4, dwNewLong=79641878) returned 1950089536
[0156.868] GetWindowLongW (hWnd=0x102d2, nIndex=-4) returned 79641878
[0156.868] GetWindowLongW (hWnd=0x102d2, nIndex=-16) returned 1174405120
[0156.868] GetWindowLongW (hWnd=0x102d2, nIndex=-12) returned 0
[0156.868] SetWindowLongW (hWnd=0x102d2, nIndex=-12, dwNewLong=66258) returned 0
[0156.868] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0x81, wParam=0x0, lParam=0x53de30) returned 0x1
[0156.868] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0x83, wParam=0x0, lParam=0x53de1c) returned 0x0
[0156.869] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0x1, wParam=0x0, lParam=0x53de30) returned 0x0
[0156.869] GetWindow (hWnd=0x102d2, uCmd=0x3) returned 0x0
[0156.869] GetClientRect (in: hWnd=0x102d2, lpRect=0x53db18 | out: lpRect=0x53db18) returned 1
[0156.869] GetWindowRect (in: hWnd=0x102d2, lpRect=0x53db18 | out: lpRect=0x53db18) returned 1
[0156.869] GetParent (hWnd=0x102d2) returned 0x102cc
[0156.869] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53db18, cPoints=0x2 | out: lpPoints=0x53db18) returned -24314357
[0156.869] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0x5, wParam=0x0, lParam=0x400040) returned 0x0
[0156.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
[0156.870] GetClientRect (in: hWnd=0x102d2, lpRect=0x53db70 | out: lpRect=0x53db70) returned 1
[0156.870] GetWindowRect (in: hWnd=0x102d2, lpRect=0x53db70 | out: lpRect=0x53db70) returned 1
[0156.870] GetParent (hWnd=0x102d2) returned 0x102cc
[0156.870] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53db70, cPoints=0x2 | out: lpPoints=0x53db70) returned -24314357
[0156.870] SendMessageW (hWnd=0x102d2, Msg=0x2210, wParam=0x2d20001, lParam=0x102d2) returned 0x0
[0156.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0x2210, wParam=0x2d20001, lParam=0x102d2) returned 0x0
[0156.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0156.870] GetParent (hWnd=0x102d2) returned 0x102cc
[0156.870] GetParent (hWnd=0x102c8) returned 0x4013e
[0156.871] SetParent (hWndChild=0x102c8, hWndNewParent=0x102cc) returned 0x4013e
[0156.871] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0156.872] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x46, wParam=0x0, lParam=0x53e3e4) returned 0x0
[0156.873] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0156.873] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x47, wParam=0x0, lParam=0x53e3e4) returned 0x0
[0156.873] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x3, wParam=0x0, lParam=0x80040) returned 0x0
[0156.873] GetClientRect (in: hWnd=0x102c8, lpRect=0x53d974 | out: lpRect=0x53d974) returned 1
[0156.873] GetWindowRect (in: hWnd=0x102c8, lpRect=0x53d974 | out: lpRect=0x53d974) returned 1
[0156.873] GetParent (hWnd=0x102c8) returned 0x102cc
[0156.873] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53d974, cPoints=0x2 | out: lpPoints=0x53d974) returned -24314357
[0156.873] GetClientRect (in: hWnd=0x102c8, lpRect=0x53e0a4 | out: lpRect=0x53e0a4) returned 1
[0156.873] GetWindowRect (in: hWnd=0x102c8, lpRect=0x53e0a4 | out: lpRect=0x53e0a4) returned 1
[0156.874] GetParent (hWnd=0x102c8) returned 0x102cc
[0156.874] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53e0a4, cPoints=0x2 | out: lpPoints=0x53e0a4) returned -24314357
[0156.874] GetParent (hWnd=0x102c8) returned 0x102cc
[0156.874] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0156.874] GetWindow (hWnd=0x102c8, uCmd=0x3) returned 0x0
[0156.874] SetWindowPos (hWnd=0x102c8, hWndInsertAfter=0x102d2, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0156.874] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x46, wParam=0x0, lParam=0x53e39c) returned 0x0
[0156.876] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0156.876] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x47, wParam=0x0, lParam=0x53e39c) returned 0x0
[0156.876] GetClientRect (in: hWnd=0x102c8, lpRect=0x53e05c | out: lpRect=0x53e05c) returned 1
[0156.876] GetWindowRect (in: hWnd=0x102c8, lpRect=0x53e05c | out: lpRect=0x53e05c) returned 1
[0156.876] GetParent (hWnd=0x102c8) returned 0x102cc
[0156.876] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53e05c, cPoints=0x2 | out: lpPoints=0x53e05c) returned -24314357
[0156.876] GetParent (hWnd=0x102c8) returned 0x102cc
[0156.876] GetWindow (hWnd=0x102c8, uCmd=0x3) returned 0x102d2
[0156.876] GetWindowThreadProcessId (in: hWnd=0x102c8, lpdwProcessId=0x53e470 | out: lpdwProcessId=0x53e470) returned 0x11d0
[0156.876] GetCurrentActCtx (in: lphActCtx=0x53e40c | out: lphActCtx=0x53e40c*=0x89a934) returned 1
[0156.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.877] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0156.877] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="&Details", dwStyle=0x5601000b, X=8, Y=107, nWidth=100, nHeight=23, hWndParent=0x102cc, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x102d4
[0156.878] SetWindowLongW (hWnd=0x102d4, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0156.878] GetWindowLongW (hWnd=0x102d4, nIndex=-4) returned 1868032000
[0156.878] SetWindowLongW (hWnd=0x102d4, nIndex=-4, dwNewLong=79641838) returned 1868032000
[0156.878] GetWindowLongW (hWnd=0x102d4, nIndex=-4) returned 79641838
[0156.878] GetWindowLongW (hWnd=0x102d4, nIndex=-16) returned 1174470667
[0156.879] GetWindowLongW (hWnd=0x102d4, nIndex=-12) returned 0
[0156.879] SetWindowLongW (hWnd=0x102d4, nIndex=-12, dwNewLong=66260) returned 0
[0156.879] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x81, wParam=0x0, lParam=0x53de30) returned 0x1
[0156.879] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x83, wParam=0x0, lParam=0x53de1c) returned 0x0
[0156.880] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x1, wParam=0x0, lParam=0x53de30) returned 0x0
[0156.881] SendMessageW (hWnd=0x102d4, Msg=0x2055, wParam=0x102d4, lParam=0x3) returned 0x2
[0156.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0156.881] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0156.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0156.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0156.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0156.881] RedrawWindow (hWnd=0x102d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0156.881] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0156.881] RedrawWindow (hWnd=0x102c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0156.882] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0156.882] RedrawWindow (hWnd=0x102d4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0156.882] RedrawWindow (hWnd=0x102cc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0156.882] GetWindow (hWnd=0x102d4, uCmd=0x3) returned 0x102c8
[0156.882] GetClientRect (in: hWnd=0x102d4, lpRect=0x53dad0 | out: lpRect=0x53dad0) returned 1
[0156.882] GetWindowRect (in: hWnd=0x102d4, lpRect=0x53dad0 | out: lpRect=0x53dad0) returned 1
[0156.882] GetParent (hWnd=0x102d4) returned 0x102cc
[0156.882] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53dad0, cPoints=0x2 | out: lpPoints=0x53dad0) returned -24314357
[0156.883] SetWindowTextW (hWnd=0x102d4, lpString="&Details") returned 1
[0156.883] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0xc, wParam=0x0, lParam=0x230e4d4) returned 0x1
[0156.884] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x5, wParam=0x0, lParam=0x170064) returned 0x0
[0156.884] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x3, wParam=0x0, lParam=0x6b0008) returned 0x0
[0156.884] GetClientRect (in: hWnd=0x102d4, lpRect=0x53db28 | out: lpRect=0x53db28) returned 1
[0156.884] GetWindowRect (in: hWnd=0x102d4, lpRect=0x53db28 | out: lpRect=0x53db28) returned 1
[0156.884] GetParent (hWnd=0x102d4) returned 0x102cc
[0156.884] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53db28, cPoints=0x2 | out: lpPoints=0x53db28) returned -24314357
[0156.884] SendMessageW (hWnd=0x102d4, Msg=0x2210, wParam=0x2d40001, lParam=0x102d4) returned 0x0
[0156.884] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x2210, wParam=0x2d40001, lParam=0x102d4) returned 0x0
[0156.885] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0156.885] GetParent (hWnd=0x102d4) returned 0x102cc
[0156.885] GetCurrentActCtx (in: lphActCtx=0x53e40c | out: lphActCtx=0x53e40c*=0x89a934) returned 1
[0156.885] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.886] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0156.886] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="&Continue", dwStyle=0x5601000b, X=225, Y=107, nWidth=100, nHeight=23, hWndParent=0x102cc, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x102d6
[0156.887] SetWindowLongW (hWnd=0x102d6, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0156.887] GetWindowLongW (hWnd=0x102d6, nIndex=-4) returned 1868032000
[0156.887] SetWindowLongW (hWnd=0x102d6, nIndex=-4, dwNewLong=79641918) returned 1868032000
[0156.887] GetWindowLongW (hWnd=0x102d6, nIndex=-4) returned 79641918
[0156.887] GetWindowLongW (hWnd=0x102d6, nIndex=-16) returned 1174470667
[0156.887] GetWindowLongW (hWnd=0x102d6, nIndex=-12) returned 0
[0156.887] SetWindowLongW (hWnd=0x102d6, nIndex=-12, dwNewLong=66262) returned 0
[0156.887] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x81, wParam=0x0, lParam=0x53de30) returned 0x1
[0156.888] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x83, wParam=0x0, lParam=0x53de1c) returned 0x0
[0156.888] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x1, wParam=0x0, lParam=0x53de30) returned 0x0
[0156.889] SendMessageW (hWnd=0x102d6, Msg=0x2055, wParam=0x102d6, lParam=0x3) returned 0x2
[0156.889] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0156.889] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0156.890] GetWindow (hWnd=0x102d6, uCmd=0x3) returned 0x102d4
[0156.890] GetClientRect (in: hWnd=0x102d6, lpRect=0x53dad0 | out: lpRect=0x53dad0) returned 1
[0156.890] GetWindowRect (in: hWnd=0x102d6, lpRect=0x53dad0 | out: lpRect=0x53dad0) returned 1
[0156.890] GetParent (hWnd=0x102d6) returned 0x102cc
[0156.890] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53dad0, cPoints=0x2 | out: lpPoints=0x53dad0) returned -24314357
[0156.890] SetWindowTextW (hWnd=0x102d6, lpString="&Continue") returned 1
[0156.890] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0xc, wParam=0x0, lParam=0x230e3e8) returned 0x1
[0156.891] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x5, wParam=0x0, lParam=0x170064) returned 0x0
[0156.891] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x3, wParam=0x0, lParam=0x6b00e1) returned 0x0
[0156.891] GetClientRect (in: hWnd=0x102d6, lpRect=0x53db28 | out: lpRect=0x53db28) returned 1
[0156.891] GetWindowRect (in: hWnd=0x102d6, lpRect=0x53db28 | out: lpRect=0x53db28) returned 1
[0156.891] GetParent (hWnd=0x102d6) returned 0x102cc
[0156.891] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53db28, cPoints=0x2 | out: lpPoints=0x53db28) returned -24314357
[0156.891] SendMessageW (hWnd=0x102d6, Msg=0x2210, wParam=0x2d60001, lParam=0x102d6) returned 0x0
[0156.891] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x2210, wParam=0x2d60001, lParam=0x102d6) returned 0x0
[0156.891] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0156.891] GetParent (hWnd=0x102d6) returned 0x102cc
[0156.891] GetCurrentActCtx (in: lphActCtx=0x53e40c | out: lphActCtx=0x53e40c*=0x89a934) returned 1
[0156.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.892] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0156.892] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="&Quit", dwStyle=0x5601000b, X=330, Y=107, nWidth=100, nHeight=23, hWndParent=0x102cc, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x102d8
[0156.893] SetWindowLongW (hWnd=0x102d8, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0156.893] GetWindowLongW (hWnd=0x102d8, nIndex=-4) returned 1868032000
[0156.894] SetWindowLongW (hWnd=0x102d8, nIndex=-4, dwNewLong=79641478) returned 1868032000
[0156.894] GetWindowLongW (hWnd=0x102d8, nIndex=-4) returned 79641478
[0156.894] GetWindowLongW (hWnd=0x102d8, nIndex=-16) returned 1174470667
[0156.894] GetWindowLongW (hWnd=0x102d8, nIndex=-12) returned 0
[0156.894] SetWindowLongW (hWnd=0x102d8, nIndex=-12, dwNewLong=66264) returned 0
[0156.894] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0x81, wParam=0x0, lParam=0x53de30) returned 0x1
[0156.895] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0x83, wParam=0x0, lParam=0x53de1c) returned 0x0
[0156.895] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0x1, wParam=0x0, lParam=0x53de30) returned 0x0
[0156.896] SendMessageW (hWnd=0x102d8, Msg=0x2055, wParam=0x102d8, lParam=0x3) returned 0x2
[0156.896] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0156.896] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0156.896] GetWindow (hWnd=0x102d8, uCmd=0x3) returned 0x102d6
[0156.896] GetClientRect (in: hWnd=0x102d8, lpRect=0x53dad0 | out: lpRect=0x53dad0) returned 1
[0156.896] GetWindowRect (in: hWnd=0x102d8, lpRect=0x53dad0 | out: lpRect=0x53dad0) returned 1
[0156.896] GetParent (hWnd=0x102d8) returned 0x102cc
[0156.896] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53dad0, cPoints=0x2 | out: lpPoints=0x53dad0) returned -24314357
[0156.897] SetWindowTextW (hWnd=0x102d8, lpString="&Quit") returned 1
[0156.897] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0xc, wParam=0x0, lParam=0x230e43c) returned 0x1
[0156.897] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0x5, wParam=0x0, lParam=0x170064) returned 0x0
[0156.897] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0x3, wParam=0x0, lParam=0x6b014a) returned 0x0
[0156.897] GetClientRect (in: hWnd=0x102d8, lpRect=0x53db28 | out: lpRect=0x53db28) returned 1
[0156.897] GetWindowRect (in: hWnd=0x102d8, lpRect=0x53db28 | out: lpRect=0x53db28) returned 1
[0156.897] GetParent (hWnd=0x102d8) returned 0x102cc
[0156.897] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53db28, cPoints=0x2 | out: lpPoints=0x53db28) returned -24314357
[0156.898] SendMessageW (hWnd=0x102d8, Msg=0x2210, wParam=0x2d80001, lParam=0x102d8) returned 0x0
[0156.898] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0x2210, wParam=0x2d80001, lParam=0x102d8) returned 0x0
[0156.898] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0156.898] GetParent (hWnd=0x102d8) returned 0x102cc
[0156.898] GetCurrentActCtx (in: lphActCtx=0x53e3e8 | out: lphActCtx=0x53e3e8*=0x89a934) returned 1
[0156.898] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0156.899] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0156.899] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName="See the end of this message for details on invoking \r\njust-in-time (JIT) debugging instead of this dialog box.\r\n\r\n************** Exception Text **************\r\nSystem.UnauthorizedAccessException: Access to the path 'C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe' is denied.\r\n at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)\r\n at System.IO.File.InternalDelete(String path, Boolean checkHost)\r\n at System.IO.File.Delete(String path)\r\n at Microsoft.VisualBasic.FileIO.FileSystem.DeleteFileInternal(String file, UIOptionInternal showUI, RecycleOption recycle, UICancelOption onUserCancel)\r\n at Microsoft.VisualBasic.MyServices.FileSystemProxy.DeleteFile(String file)\r\n at Cobra_Locker.Form1_Load(Object sender, EventArgs e)\r\n at System.EventHandler.Invoke(Object sender, EventArgs e)\r\n at System.Windows.Forms.Form.OnLoad(EventArgs e)\r\n at System.Windows.Forms.Form.OnCreateControl()\r\n at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)\r\n at System.Windows.Forms.Control.CreateControl()\r\n at System.Windows.Forms.Control.WmShowWindow(Message& m)\r\n at System.Windows.Forms.Control.WndProc(Message& m)\r\n at System.Windows.Forms.ScrollableControl.WndProc(Message& m)\r\n at System.Windows.Forms.Form.WmShowWindow(Message& m)\r\n at System.Windows.Forms.Form.WndProc(Message& m)\r\n at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)\r\n at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)\r\n at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)\r\n\r\n\r\n************** Loaded Assemblies **************\r\nmscorlib\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2102.0 built by: NET47REL1LAST\r\n CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll\r\n----------------------------------------\r\nRansomware\r\n Assembly Version: 1.0.0.0\r\n Win32 Version: 1.0.0.0\r\n CodeBase: file:///C:/Users/FD1HVy/Desktop/Ransomware.exe\r\n----------------------------------------\r\nMicrosoft.VisualBasic\r\n Assembly Version: 10.0.0.0\r\n Win32 Version: 14.7.2046.0 built by: NET47REL1\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/Microsoft.VisualBasic/v4.0_10.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll\r\n----------------------------------------\r\nSystem.Windows.Forms\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2104.0 built by: NET47REL1LAST\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll\r\n----------------------------------------\r\nSystem\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2103.2 built by: NET47REL1LAST\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll\r\n----------------------------------------\r\nSystem.Drawing\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2046.0 built by: NET47REL1\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll\r\n----------------------------------------\r\nSystem.Configuration\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2046.0 built by: NET47REL1\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll\r\n----------------------------------------\r\nSystem.Core\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2102.0 built by: NET47REL1LAST\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Core/v4.0_4.0.0.0__b77a5c561934e089/System.Core.dll\r\n----------------------------------------\r\nSystem.Xml\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2102.0 built by: NET47REL1LAST\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll\r\n----------------------------------------\r\nSystem.Runtime.Remoting\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2046.0 built by: NET47REL1\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Runtime.Remoting/v4.0_4.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll\r\n----------------------------------------\r\n\r\n************** JIT Debugging **************\r\nTo enable just-in-time (JIT) debugging, the .config file for this\r\napplication or computer (machine.config) must have the\r\njitDebugging value set in the system.windows.forms section.\r\nThe application must also be compiled with debugging\r\nenabled.\r\n\r\nFor example:\r\n\r\n\r\n \r\n\r\n\r\nWhen JIT debugging is enabled, any unhandled exception\r\nwill be sent to the JIT debugger registered on the computer\r\nrather than be handled by this dialog box.\r\n\r\n\r\n", dwStyle=0x563008c4, X=8, Y=138, nWidth=422, nHeight=154, hWndParent=0x102cc, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x102da
[0156.899] SetWindowLongW (hWnd=0x102da, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0156.900] GetWindowLongW (hWnd=0x102da, nIndex=-4) returned 1868026976
[0156.900] SetWindowLongW (hWnd=0x102da, nIndex=-4, dwNewLong=79641958) returned 1868026976
[0156.900] GetWindowLongW (hWnd=0x102da, nIndex=-4) returned 79641958
[0156.900] GetWindowLongW (hWnd=0x102da, nIndex=-16) returned 1177553092
[0156.900] GetWindowLongW (hWnd=0x102da, nIndex=-12) returned 0
[0156.900] SetWindowLongW (hWnd=0x102da, nIndex=-12, dwNewLong=66266) returned 0
[0156.900] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0x81, wParam=0x0, lParam=0x53de08) returned 0x1
[0156.902] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0x83, wParam=0x0, lParam=0x53ddf4) returned 0x0
[0156.903] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0x1, wParam=0x0, lParam=0x53de08) returned 0x1
[0156.969] GetWindow (hWnd=0x102da, uCmd=0x3) returned 0x102d8
[0156.969] GetClientRect (in: hWnd=0x102da, lpRect=0x53dac8 | out: lpRect=0x53dac8) returned 1
[0156.969] GetWindowRect (in: hWnd=0x102da, lpRect=0x53dac8 | out: lpRect=0x53dac8) returned 1
[0156.969] GetParent (hWnd=0x102da) returned 0x102cc
[0156.969] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53dac8, cPoints=0x2 | out: lpPoints=0x53dac8) returned -24314357
[0156.969] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0156.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0156.969] GetSystemMetrics (nIndex=42) returned 0
[0156.969] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53d948, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0156.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53d948) returned 0x18
[0156.970] SendMessageW (hWnd=0x102da, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0156.970] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0156.975] SetWindowTextW (hWnd=0x102da, lpString="See the end of this message for details on invoking \r\njust-in-time (JIT) debugging instead of this dialog box.\r\n\r\n************** Exception Text **************\r\nSystem.UnauthorizedAccessException: Access to the path 'C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe' is denied.\r\n at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)\r\n at System.IO.File.InternalDelete(String path, Boolean checkHost)\r\n at System.IO.File.Delete(String path)\r\n at Microsoft.VisualBasic.FileIO.FileSystem.DeleteFileInternal(String file, UIOptionInternal showUI, RecycleOption recycle, UICancelOption onUserCancel)\r\n at Microsoft.VisualBasic.MyServices.FileSystemProxy.DeleteFile(String file)\r\n at Cobra_Locker.Form1_Load(Object sender, EventArgs e)\r\n at System.EventHandler.Invoke(Object sender, EventArgs e)\r\n at System.Windows.Forms.Form.OnLoad(EventArgs e)\r\n at System.Windows.Forms.Form.OnCreateControl()\r\n at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)\r\n at System.Windows.Forms.Control.CreateControl()\r\n at System.Windows.Forms.Control.WmShowWindow(Message& m)\r\n at System.Windows.Forms.Control.WndProc(Message& m)\r\n at System.Windows.Forms.ScrollableControl.WndProc(Message& m)\r\n at System.Windows.Forms.Form.WmShowWindow(Message& m)\r\n at System.Windows.Forms.Form.WndProc(Message& m)\r\n at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)\r\n at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)\r\n at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)\r\n\r\n\r\n************** Loaded Assemblies **************\r\nmscorlib\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2102.0 built by: NET47REL1LAST\r\n CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll\r\n----------------------------------------\r\nRansomware\r\n Assembly Version: 1.0.0.0\r\n Win32 Version: 1.0.0.0\r\n CodeBase: file:///C:/Users/FD1HVy/Desktop/Ransomware.exe\r\n----------------------------------------\r\nMicrosoft.VisualBasic\r\n Assembly Version: 10.0.0.0\r\n Win32 Version: 14.7.2046.0 built by: NET47REL1\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/Microsoft.VisualBasic/v4.0_10.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll\r\n----------------------------------------\r\nSystem.Windows.Forms\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2104.0 built by: NET47REL1LAST\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll\r\n----------------------------------------\r\nSystem\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2103.2 built by: NET47REL1LAST\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll\r\n----------------------------------------\r\nSystem.Drawing\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2046.0 built by: NET47REL1\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll\r\n----------------------------------------\r\nSystem.Configuration\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2046.0 built by: NET47REL1\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll\r\n----------------------------------------\r\nSystem.Core\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2102.0 built by: NET47REL1LAST\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Core/v4.0_4.0.0.0__b77a5c561934e089/System.Core.dll\r\n----------------------------------------\r\nSystem.Xml\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2102.0 built by: NET47REL1LAST\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll\r\n----------------------------------------\r\nSystem.Runtime.Remoting\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2046.0 built by: NET47REL1\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Runtime.Remoting/v4.0_4.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll\r\n----------------------------------------\r\n\r\n************** JIT Debugging **************\r\nTo enable just-in-time (JIT) debugging, the .config file for this\r\napplication or computer (machine.config) must have the\r\njitDebugging value set in the system.windows.forms section.\r\nThe application must also be compiled with debugging\r\nenabled.\r\n\r\nFor example:\r\n\r\n\r\n \r\n\r\n\r\nWhen JIT debugging is enabled, any unhandled exception\r\nwill be sent to the JIT debugger registered on the computer\r\nrather than be handled by this dialog box.\r\n\r\n\r\n") returned 1
[0156.975] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0xc, wParam=0x0, lParam=0x230ad6c) returned 0x1
[0156.978] GetSystemMetrics (nIndex=5) returned 1
[0156.978] GetSystemMetrics (nIndex=6) returned 1
[0156.978] SendMessageW (hWnd=0x102da, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0156.978] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0156.979] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0x5, wParam=0x0, lParam=0x850191) returned 0x1
[0156.980] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0x3, wParam=0x0, lParam=0x8c000a) returned 0x0
[0156.980] GetClientRect (in: hWnd=0x102da, lpRect=0x53db20 | out: lpRect=0x53db20) returned 1
[0156.980] GetWindowRect (in: hWnd=0x102da, lpRect=0x53db20 | out: lpRect=0x53db20) returned 1
[0156.980] GetParent (hWnd=0x102da) returned 0x102cc
[0156.980] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x53db20, cPoints=0x2 | out: lpPoints=0x53db20) returned -24314357
[0156.980] SendMessageW (hWnd=0x102da, Msg=0x2210, wParam=0x2da0001, lParam=0x102da) returned 0x0
[0156.980] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0x2210, wParam=0x2da0001, lParam=0x102da) returned 0x0
[0156.980] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0156.981] GetParent (hWnd=0x102da) returned 0x102cc
[0156.981] GetWindowLongW (hWnd=0x102cc, nIndex=-8) returned 0
[0156.981] GetCursorPos (in: lpPoint=0x23105b0 | out: lpPoint=0x23105b0*(x=526, y=657)) returned 1
[0156.981] MonitorFromPoint (pt=0x2d2, dwFlags=0x167) returned 0x10001
[0156.981] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e320 | out: lpmi=0x53e320) returned 1
[0156.981] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xd30107b0
[0156.981] GetDeviceCaps (hdc=0xd30107b0, index=12) returned 32
[0156.981] GetDeviceCaps (hdc=0xd30107b0, index=14) returned 1
[0156.982] DeleteDC (hdc=0xd30107b0) returned 1
[0156.982] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e370 | out: lpmi=0x53e370) returned 1
[0156.983] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x53e420 | out: lpdwProcessId=0x53e420) returned 0x11d0
[0156.983] GetCurrentThreadId () returned 0x11d0
[0156.985] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc1a3
[0156.985] PostMessageW (hWnd=0x102cc, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0156.985] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0156.986] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0156.986] GetSystemMetrics (nIndex=42) returned 0
[0156.986] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53e378, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0156.986] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53e378) returned 0x18
[0156.986] GdipImageGetFrameDimensionsCount (image=0x5d92418, count=0x53e374) returned 0x0
[0156.987] GdipImageGetFrameDimensionsList (image=0x5d92418, dimensionIDs=0x8cc958*(Data1=0x34838adb, Data2=0xd40c, Data3=0xd711, Data4=([0]=0x80, [1]=0xd, [2]=0xc5, [3]=0x65, [4]=0x29, [5]=0x7a, [6]=0x81, [7]=0x7a)), count=0x1) returned 0x0
[0156.991] LocalFree (hMem=0x8cc958) returned 0x0
[0156.993] GdipImageGetFrameDimensionsCount (image=0x5d9b198, count=0x53e368) returned 0x0
[0156.993] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x8cc8c8
[0156.993] GdipImageGetFrameDimensionsList (image=0x5d9b198, dimensionIDs=0x8cc8c8*(Data1=0x550c0254, Data2=0x726e, Data3=0x7365, Data4=([0]=0x74, [1]=0x72, [2]=0x69, [3]=0x63, [4]=0x74, [5]=0x65, [6]=0x64, [7]=0x1)), count=0x1) returned 0x0
[0156.993] LocalFree (hMem=0x8cc8c8) returned 0x0
[0156.994] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e4b8, fWinIni=0x0 | out: pvParam=0x53e4b8) returned 1
[0156.995] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x46, wParam=0x0, lParam=0x53e834) returned 0x0
[0157.012] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0157.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0157.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0157.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0157.015] GetWindowPlacement (in: hWnd=0x102cc, lpwndpl=0x53e57c | out: lpwndpl=0x53e57c) returned 1
[0157.015] GetClientRect (in: hWnd=0x102cc, lpRect=0x53e528 | out: lpRect=0x53e528) returned 1
[0157.015] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0157.015] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0157.015] GetSystemMetrics (nIndex=42) returned 0
[0157.015] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53e3cc, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0157.015] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53e3cc) returned 0x18
[0157.015] GetClientRect (in: hWnd=0x102cc, lpRect=0x53e430 | out: lpRect=0x53e430) returned 1
[0157.019] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x4bf3d8e, dwData=0x0) returned 1
[0157.022] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e090 | out: lpmi=0x53e090) returned 1
[0157.022] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xdd0107b0
[0157.022] GetDeviceCaps (hdc=0xdd0107b0, index=12) returned 32
[0157.022] GetDeviceCaps (hdc=0xdd0107b0, index=14) returned 1
[0157.022] DeleteDC (hdc=0xdd0107b0) returned 1
[0157.022] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017
[0157.023] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010
[0157.023] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x540507a6
[0157.023] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2
[0157.023] SaveDC (hdc=0x60100ce) returned 1
[0157.023] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0
[0157.024] CreateSolidBrush (color=0xf0f0f0) returned 0x6510078d
[0157.024] FillRect (hDC=0x60100ce, lprc=0x53e2d0, hbr=0x6510078d) returned 1
[0157.025] DeleteObject (ho=0x6510078d) returned 1
[0157.025] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1
[0157.026] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0157.118] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0157.118] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0157.118] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0157.118] GetStockObject (i=5) returned 0x900015
[0157.118] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0157.118] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0157.118] GetStockObject (i=5) returned 0x900015
[0157.119] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0157.119] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0157.119] GetStockObject (i=5) returned 0x900015
[0157.119] GetWindowPlacement (in: hWnd=0x102cc, lpwndpl=0x53e560 | out: lpwndpl=0x53e560) returned 1
[0157.119] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x47, wParam=0x0, lParam=0x53e834) returned 0x0
[0157.119] GetClientRect (in: hWnd=0x102cc, lpRect=0x53e510 | out: lpRect=0x53e510) returned 1
[0157.119] GetWindowRect (in: hWnd=0x102cc, lpRect=0x53e510 | out: lpRect=0x53e510) returned 1
[0157.121] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0157.121] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0157.121] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0157.122] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x5, wParam=0x0, lParam=0x8a01b6) returned 0x0
[0157.122] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x3, wParam=0x0, lParam=0x17401f5) returned 0x0
[0157.122] GetClientRect (in: hWnd=0x102cc, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0157.122] GetWindowRect (in: hWnd=0x102cc, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0157.122] InvalidateRect (hWnd=0x102d6, lpRect=0x0, bErase=0) returned 1
[0157.122] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1
[0157.122] GetFocus () returned 0x102cc
[0157.123] GetFocus () returned 0x102cc
[0157.123] SetFocus (hWnd=0x102d4) returned 0x102cc
[0157.123] GetFocus () returned 0x102d4
[0157.124] IsChild (hWndParent=0x102cc, hWnd=0x102d4) returned 1
[0157.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x8, wParam=0x102d4, lParam=0x0) returned 0x0
[0157.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0157.127] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0157.129] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0157.129] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x7, wParam=0x102cc, lParam=0x0) returned 0x0
[0157.132] GetStockObject (i=5) returned 0x900015
[0157.133] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8
[0157.133] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0xd, wParam=0x9, lParam=0x8d3eb0) returned 0x8
[0157.135] GetDlgItem (hDlg=0x102cc, nIDDlgItem=66260) returned 0x102d4
[0157.135] SendMessageW (hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x53e1f4) returned 0x0
[0157.135] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x53e1f4) returned 0x0
[0157.135] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1
[0157.143] GetFocus () returned 0x102d4
[0157.144] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0157.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0157.145] IsWindowUnicode (hWnd=0x70036) returned 1
[0157.145] GetMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e920) returned 1
[0157.146] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0157.147] TranslateMessage (lpMsg=0x53e920) returned 0
[0157.148] DispatchMessageW (lpMsg=0x53e920) returned 0x0
[0157.148] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0157.148] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0157.148] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0157.149] IsWindowUnicode (hWnd=0x602b6) returned 1
[0157.149] GetMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e920) returned 1
[0157.149] TranslateMessage (lpMsg=0x53e920) returned 0
[0157.149] DispatchMessageW (lpMsg=0x53e920) returned 0x0
[0157.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0157.149] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0157.150] IsWindowUnicode (hWnd=0x102cc) returned 1
[0157.150] GetMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e920) returned 1
[0157.150] TranslateMessage (lpMsg=0x53e920) returned 0
[0157.150] DispatchMessageW (lpMsg=0x53e920) returned 0x0
[0157.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0157.150] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0157.150] IsWindowUnicode (hWnd=0x102cc) returned 1
[0157.150] GetMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e920) returned 1
[0157.150] TranslateMessage (lpMsg=0x53e920) returned 0
[0157.150] DispatchMessageW (lpMsg=0x53e920) returned 0x0
[0157.157] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0157.158] IsWindowUnicode (hWnd=0x102cc) returned 1
[0157.158] GetMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e920) returned 1
[0157.158] TranslateMessage (lpMsg=0x53e920) returned 0
[0157.158] DispatchMessageW (lpMsg=0x53e920) returned 0x0
[0157.158] BeginPaint (in: hWnd=0x102cc, lpPaint=0x53e390 | out: lpPaint=0x53e390) returned 0xf0105ee
[0157.160] GdipCreateHalftonePalette () returned 0x250807ae
[0157.160] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0157.160] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0157.160] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0157.160] GetSystemMetrics (nIndex=42) returned 0
[0157.160] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53e304, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0157.160] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53e304) returned 0x18
[0157.161] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0157.161] EndPaint (hWnd=0x102cc, lpPaint=0x53e38c) returned 1
[0157.161] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0157.161] IsWindowUnicode (hWnd=0x102d2) returned 1
[0157.161] GetMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e920) returned 1
[0157.161] TranslateMessage (lpMsg=0x53e920) returned 0
[0157.161] DispatchMessageW (lpMsg=0x53e920) returned 0x0
[0157.161] BeginPaint (in: hWnd=0x102d2, lpPaint=0x53e3b0 | out: lpPaint=0x53e3b0) returned 0x8b010786
[0157.162] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0157.163] CreateCompatibleDC (hdc=0x8b010786) returned 0x680107b5
[0157.163] GetObjectType (h=0x8b010786) returned 0x3
[0157.163] CreateCompatibleBitmap (hdc=0x8b010786, cx=1, cy=1) returned 0x50050671
[0157.164] GetDIBits (in: hdc=0x8b010786, hbm=0x50050671, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x53dea0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x53dea0) returned 1
[0157.164] GetDIBits (in: hdc=0x8b010786, hbm=0x50050671, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x53dea0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x53dea0) returned 1
[0157.164] DeleteObject (ho=0x50050671) returned 1
[0157.164] CreateDIBSection (in: hdc=0x8b010786, lpbmi=0x53def0, usage=0x0, ppvBits=0x53e3e4, hSection=0x0, offset=0x0 | out: ppvBits=0x53e3e4) returned 0x1a0507b9
[0157.165] SelectObject (hdc=0x680107b5, h=0x1a0507b9) returned 0x85000f
[0157.165] GdipCreateFromHDC (hdc=0x680107b5, graphics=0x53e3c8) returned 0x0
[0157.165] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0157.166] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0
[0157.166] GdipCreateMatrix (matrix=0x53e410) returned 0x0
[0157.166] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0157.243] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e428) returned 0x0
[0157.243] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x8d0ab0
[0157.244] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x8d0ab0) returned 0x0
[0157.244] LocalFree (hMem=0x8d0ab0) returned 0x0
[0157.244] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0157.245] GdipCreateRegion (region=0x53e410) returned 0x0
[0157.245] GdipGetClip (graphics=0x5da0378, region=0x5d92c30) returned 0x0
[0157.245] GdipIsInfiniteRegion (region=0x5d92c30, graphics=0x5da0378, result=0x53e41c) returned 0x0
[0157.245] GdipSaveGraphics (graphics=0x5da0378, state=0x53e448) returned 0x0
[0157.245] GetWindowTextLengthW (hWnd=0x102d2) returned 0
[0157.245] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0157.245] GetSystemMetrics (nIndex=42) returned 0
[0157.246] GetWindowTextW (in: hWnd=0x102d2, lpString=0x53e360, nMaxCount=1 | out: lpString="") returned 0
[0157.246] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0xd, wParam=0x1, lParam=0x53e360) returned 0x0
[0157.247] GetClientRect (in: hWnd=0x102d2, lpRect=0x53e410 | out: lpRect=0x53e410) returned 1
[0157.247] GdipCreateRegion (region=0x53e264) returned 0x0
[0157.247] GdipGetClip (graphics=0x5da0378, region=0x5d92e60) returned 0x0
[0157.247] GdipCreateMatrix (matrix=0x53e264) returned 0x0
[0157.247] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0157.248] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e27c) returned 0x0
[0157.248] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x8d0c70
[0157.248] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x8d0c70) returned 0x0
[0157.322] LocalFree (hMem=0x8d0c70) returned 0x0
[0157.323] GdipCombineRegionRegion (region=0x5d92e60, region2=0x5d92c30, combineMode=0x1) returned 0x0
[0157.323] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x8d0e30
[0157.323] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x8d0e30) returned 0x0
[0157.323] LocalFree (hMem=0x8d0e30) returned 0x0
[0157.323] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0157.323] GdipIsInfiniteRegion (region=0x5d92e60, graphics=0x5da0378, result=0x53e2a4) returned 0x0
[0157.323] GdipIsInfiniteRegion (region=0x5d92e60, graphics=0x5da0378, result=0x53e294) returned 0x0
[0157.324] GdipGetRegionHRgn (region=0x5d92e60, graphics=0x5da0378, hRgn=0x53e294) returned 0x0
[0157.326] GdipDeleteRegion (region=0x5d92e60) returned 0x0
[0157.326] GdipGetDC (graphics=0x5da0378, hdc=0x53e2ac) returned 0x0
[0157.326] GetCurrentObject (hdc=0x680107b5, type=0x1) returned 0xb00017
[0157.326] GetCurrentObject (hdc=0x680107b5, type=0x2) returned 0x900010
[0157.326] GetCurrentObject (hdc=0x680107b5, type=0x7) returned 0x1a0507b9
[0157.326] GetCurrentObject (hdc=0x680107b5, type=0x6) returned 0x8a01c2
[0157.326] SaveDC (hdc=0x680107b5) returned 1
[0157.326] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c040798
[0157.327] GetClipRgn (hdc=0x680107b5, hrgn=0x7c040798) returned 0
[0157.327] SelectClipRgn (hdc=0x680107b5, hrgn=0x7d04051e) returned 2
[0157.327] DeleteObject (ho=0x7c040798) returned 1
[0157.327] DeleteObject (ho=0x7d04051e) returned 1
[0157.327] OffsetViewportOrgEx (in: hdc=0x680107b5, x=0, y=0, lppt=0x2312cf0 | out: lppt=0x2312cf0) returned 1
[0157.328] GetNearestColor (hdc=0x680107b5, color=0xf0f0f0) returned 0xf0f0f0
[0157.329] CreateSolidBrush (color=0xf0f0f0) returned 0x6610078d
[0157.329] FillRect (hDC=0x680107b5, lprc=0x53e2b0, hbr=0x6610078d) returned 1
[0157.329] DeleteObject (ho=0x6610078d) returned 1
[0157.329] RestoreDC (hdc=0x680107b5, nSavedDC=-1) returned 1
[0157.329] GdipReleaseDC (graphics=0x5da0378, hdc=0x680107b5) returned 0x0
[0157.329] GdipRestoreGraphics (graphics=0x5da0378, state=0xfdad0dbd) returned 0x0
[0157.329] GdipDeleteRegion (region=0x5d92c30) returned 0x0
[0157.330] GetWindowTextLengthW (hWnd=0x102d2) returned 0
[0157.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0157.330] GetSystemMetrics (nIndex=42) returned 0
[0157.330] GetWindowTextW (in: hWnd=0x102d2, lpString=0x53e360, nMaxCount=1 | out: lpString="") returned 0
[0157.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0xd, wParam=0x1, lParam=0x53e360) returned 0x0
[0157.330] GdipGetImageWidth (image=0x5d92418, width=0x53e2f8) returned 0x0
[0157.330] GdipGetImageHeight (image=0x5d92418, height=0x53e2f8) returned 0x0
[0157.331] GdipGetImageWidth (image=0x5d92418, width=0x53e2e4) returned 0x0
[0157.331] GdipGetImageHeight (image=0x5d92418, height=0x53e2e4) returned 0x0
[0157.331] GdipDrawImageRectI (graphics=0x5da0378, image=0x5d92418, x=16, y=16, width=32, height=32) returned 0x0
[0157.331] GdipGetDC (graphics=0x5da0378, hdc=0x53e408) returned 0x0
[0157.332] BitBlt (hdc=0x8b010786, x=0, y=0, cx=64, cy=64, hdcSrc=0x680107b5, x1=0, y1=0, rop=0xcc0020) returned 1
[0157.332] GdipReleaseDC (graphics=0x5da0378, hdc=0x680107b5) returned 0x0
[0157.332] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0157.332] SelectObject (hdc=0x680107b5, h=0x85000f) returned 0x1a0507b9
[0157.333] DeleteDC (hdc=0x680107b5) returned 1
[0157.333] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0157.333] EndPaint (hWnd=0x102d2, lpPaint=0x53e3ac) returned 1
[0157.333] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0157.333] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x84, wParam=0x0, lParam=0x1e602f7) returned 0x1
[0157.334] IsWindowUnicode (hWnd=0x102d6) returned 1
[0157.334] GetMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e920) returned 1
[0157.334] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x84, wParam=0x0, lParam=0x1e602f7) returned 0x1
[0157.334] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
[0157.335] SetCursor (hCursor=0x10003) returned 0x10007
[0157.335] TranslateMessage (lpMsg=0x53e920) returned 0
[0157.335] DispatchMessageW (lpMsg=0x53e920) returned 0x0
[0157.418] _TrackMouseEvent (in: lpEventTrack=0x2312dd8 | out: lpEventTrack=0x2312dd8) returned 1
[0157.418] SendMessageW (hWnd=0x102d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0157.418] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0157.418] InvalidateRect (hWnd=0x102d6, lpRect=0x0, bErase=0) returned 1
[0157.419] GetKeyState (nVirtKey=2) returned 0
[0157.419] GetKeyState (nVirtKey=4) returned 0
[0157.419] GetKeyState (nVirtKey=5) returned 0
[0157.419] GetKeyState (nVirtKey=6) returned 0
[0157.419] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0157.419] IsWindowUnicode (hWnd=0x102c8) returned 1
[0157.419] GetMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e920) returned 1
[0157.419] TranslateMessage (lpMsg=0x53e920) returned 0
[0157.419] DispatchMessageW (lpMsg=0x53e920) returned 0x0
[0157.419] BeginPaint (in: hWnd=0x102c8, lpPaint=0x53e374 | out: lpPaint=0x53e374) returned 0xf0105ee
[0157.420] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0157.420] CreateCompatibleDC (hdc=0xf0105ee) returned 0x6a0107b5
[0157.420] GetObjectType (h=0xf0105ee) returned 0x3
[0157.420] CreateCompatibleBitmap (hdc=0xf0105ee, cx=1, cy=1) returned 0xf0507bb
[0157.420] GetDIBits (in: hdc=0xf0105ee, hbm=0xf0507bb, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x53de24, usage=0x0 | out: lpvBits=0x0, lpbmi=0x53de24) returned 1
[0157.420] GetDIBits (in: hdc=0xf0105ee, hbm=0xf0507bb, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x53de24, usage=0x0 | out: lpvBits=0x0, lpbmi=0x53de24) returned 1
[0157.423] DeleteObject (ho=0xf0507bb) returned 1
[0157.423] CreateDIBSection (in: hdc=0xf0105ee, lpbmi=0x53de74, usage=0x0, ppvBits=0x53e368, hSection=0x0, offset=0x0 | out: ppvBits=0x53e368) returned 0x290507b8
[0157.423] SelectObject (hdc=0x6a0107b5, h=0x290507b8) returned 0x85000f
[0157.423] GdipCreateFromHDC (hdc=0x6a0107b5, graphics=0x53e34c) returned 0x0
[0157.424] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0157.424] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=354, height=81, combineMode=0x0) returned 0x0
[0157.424] GdipCreateMatrix (matrix=0x53e3d4) returned 0x0
[0157.425] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0157.425] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e3ec) returned 0x0
[0157.425] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x8d0d18
[0157.425] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x8d0d18) returned 0x0
[0157.426] LocalFree (hMem=0x8d0d18) returned 0x0
[0157.426] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0157.426] GdipCreateRegion (region=0x53e3d4) returned 0x0
[0157.426] GdipGetClip (graphics=0x5da0378, region=0x5d93ef0) returned 0x0
[0157.426] GdipIsInfiniteRegion (region=0x5d93ef0, graphics=0x5da0378, result=0x53e3e0) returned 0x0
[0157.426] GdipSaveGraphics (graphics=0x5da0378, state=0x53e40c) returned 0x0
[0157.426] GetWindowTextLengthW (hWnd=0x102c8) returned 273
[0157.426] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x111
[0157.426] GetSystemMetrics (nIndex=42) returned 0
[0157.426] CoTaskMemAlloc (cb=0x228) returned 0x8d9b20
[0157.426] GetWindowTextW (in: hWnd=0x102c8, lpString=0x8d9b20, nMaxCount=274 | out: lpString="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nAccess to the path 'C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe' is denied.") returned 273
[0157.426] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xd, wParam=0x112, lParam=0x8d9b20) returned 0x111
[0157.427] CoTaskMemFree (pv=0x8d9b20)
[0157.427] GetClientRect (in: hWnd=0x102c8, lpRect=0x53e3d4 | out: lpRect=0x53e3d4) returned 1
[0157.427] GdipCreateRegion (region=0x53e228) returned 0x0
[0157.427] GdipGetClip (graphics=0x5da0378, region=0x5d92e60) returned 0x0
[0157.427] GdipCreateMatrix (matrix=0x53e228) returned 0x0
[0157.427] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93f80) returned 0x0
[0157.427] GdipIsMatrixIdentity (matrix=0x5d93f80, result=0x53e240) returned 0x0
[0157.427] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x8d0c38
[0157.427] GdipGetMatrixElements (matrix=0x5d93f80, matrixOut=0x8d0c38) returned 0x0
[0157.427] LocalFree (hMem=0x8d0c38) returned 0x0
[0157.427] GdipCombineRegionRegion (region=0x5d92e60, region2=0x5d93ef0, combineMode=0x1) returned 0x0
[0157.427] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x8d1060
[0157.427] GdipGetMatrixElements (matrix=0x5d93f80, matrixOut=0x8d1060) returned 0x0
[0157.427] LocalFree (hMem=0x8d1060) returned 0x0
[0157.428] GdipDeleteMatrix (matrix=0x5d93f80) returned 0x0
[0157.428] GdipIsInfiniteRegion (region=0x5d92e60, graphics=0x5da0378, result=0x53e268) returned 0x0
[0157.428] GdipIsInfiniteRegion (region=0x5d92e60, graphics=0x5da0378, result=0x53e258) returned 0x0
[0157.428] GdipGetRegionHRgn (region=0x5d92e60, graphics=0x5da0378, hRgn=0x53e258) returned 0x0
[0157.428] GdipDeleteRegion (region=0x5d92e60) returned 0x0
[0157.428] GdipGetDC (graphics=0x5da0378, hdc=0x53e270) returned 0x0
[0157.428] GetCurrentObject (hdc=0x6a0107b5, type=0x1) returned 0xb00017
[0157.428] GetCurrentObject (hdc=0x6a0107b5, type=0x2) returned 0x900010
[0157.428] GetCurrentObject (hdc=0x6a0107b5, type=0x7) returned 0x290507b8
[0157.428] GetCurrentObject (hdc=0x6a0107b5, type=0x6) returned 0x8a01c2
[0157.428] SaveDC (hdc=0x6a0107b5) returned 1
[0157.428] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e04051e
[0157.428] GetClipRgn (hdc=0x6a0107b5, hrgn=0x7e04051e) returned 0
[0157.428] SelectClipRgn (hdc=0x6a0107b5, hrgn=0x7d040798) returned 2
[0157.429] DeleteObject (ho=0x7e04051e) returned 1
[0157.429] DeleteObject (ho=0x7d040798) returned 1
[0157.429] OffsetViewportOrgEx (in: hdc=0x6a0107b5, x=0, y=0, lppt=0x2314838 | out: lppt=0x2314838) returned 1
[0157.429] GetNearestColor (hdc=0x6a0107b5, color=0xf0f0f0) returned 0xf0f0f0
[0157.429] CreateSolidBrush (color=0xf0f0f0) returned 0x6710078d
[0157.429] FillRect (hDC=0x6a0107b5, lprc=0x53e274, hbr=0x6710078d) returned 1
[0157.430] DeleteObject (ho=0x6710078d) returned 1
[0157.430] RestoreDC (hdc=0x6a0107b5, nSavedDC=-1) returned 1
[0157.430] GdipReleaseDC (graphics=0x5da0378, hdc=0x6a0107b5) returned 0x0
[0157.431] GdipRestoreGraphics (graphics=0x5da0378, state=0xfdab0dbd) returned 0x0
[0157.431] GdipDeleteRegion (region=0x5d93ef0) returned 0x0
[0157.431] GetWindowTextLengthW (hWnd=0x102c8) returned 273
[0157.431] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x111
[0157.431] GetSystemMetrics (nIndex=42) returned 0
[0157.431] CoTaskMemAlloc (cb=0x228) returned 0x8caa40
[0157.431] GetWindowTextW (in: hWnd=0x102c8, lpString=0x8caa40, nMaxCount=274 | out: lpString="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nAccess to the path 'C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe' is denied.") returned 273
[0157.431] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xd, wParam=0x112, lParam=0x8caa40) returned 0x111
[0157.431] CoTaskMemFree (pv=0x8caa40)
[0157.431] GdipGetDC (graphics=0x5da0378, hdc=0x53e290) returned 0x0
[0157.431] GetCurrentObject (hdc=0x6a0107b5, type=0x1) returned 0xb00017
[0157.431] GetCurrentObject (hdc=0x6a0107b5, type=0x2) returned 0x900010
[0157.431] GetCurrentObject (hdc=0x6a0107b5, type=0x7) returned 0x290507b8
[0157.431] GetCurrentObject (hdc=0x6a0107b5, type=0x6) returned 0x8a01c2
[0157.431] SaveDC (hdc=0x6a0107b5) returned 1
[0157.432] GetNearestColor (hdc=0x6a0107b5, color=0x0) returned 0x0
[0157.432] RestoreDC (hdc=0x6a0107b5, nSavedDC=-1) returned 1
[0157.432] GdipReleaseDC (graphics=0x5da0378, hdc=0x6a0107b5) returned 0x0
[0157.432] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0157.432] AdjustWindowRectEx (in: lpRect=0x53e1b0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e1b0) returned 1
[0157.433] DrawTextExW (in: hdc=0x600101a2, lpchText="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nAccess to the path 'C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe' is denied.", cchText=273, lprc=0x53e19c, format=0x102400, lpdtp=0x2315124 | out: lpchText="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nAccess to the path 'C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe' is denied.", lprc=0x53e19c) returned 39
[0157.433] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e230) returned 0x0
[0157.434] GdipGetDC (graphics=0x5da0378, hdc=0x53e21c) returned 0x0
[0157.434] GetCurrentObject (hdc=0x6a0107b5, type=0x1) returned 0xb00017
[0157.434] GetCurrentObject (hdc=0x6a0107b5, type=0x2) returned 0x900010
[0157.434] GetCurrentObject (hdc=0x6a0107b5, type=0x7) returned 0x290507b8
[0157.434] GetCurrentObject (hdc=0x6a0107b5, type=0x6) returned 0x8a01c2
[0157.434] SaveDC (hdc=0x6a0107b5) returned 1
[0157.435] GetTextAlign (hdc=0x6a0107b5) returned 0x0
[0157.435] GetTextColor (hdc=0x6a0107b5) returned 0x0
[0157.435] GetCurrentObject (hdc=0x6a0107b5, type=0x6) returned 0x8a01c2
[0157.435] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53df64 | out: pv=0x53df64) returned 92
[0157.435] SelectObject (hdc=0x6a0107b5, h=0x730a066d) returned 0x8a01c2
[0157.435] GetBkMode (hdc=0x6a0107b5) returned 2
[0157.436] SetBkMode (hdc=0x6a0107b5, mode=1) returned 2
[0157.436] DrawTextExW (in: hdc=0x6a0107b5, lpchText="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nAccess to the path 'C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe' is denied.", cchText=273, lprc=0x53e1b0, format=0x102010, lpdtp=0x2315348 | out: lpchText="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nAccess to the path 'C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe' is denied.", lprc=0x53e1b0) returned 78
[0157.449] RestoreDC (hdc=0x6a0107b5, nSavedDC=-1) returned 1
[0157.450] GdipReleaseDC (graphics=0x5da0378, hdc=0x6a0107b5) returned 0x0
[0157.450] GdipGetDC (graphics=0x5da0378, hdc=0x53e3cc) returned 0x0
[0157.450] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=354, cy=81, hdcSrc=0x6a0107b5, x1=0, y1=0, rop=0xcc0020) returned 1
[0157.450] GdipReleaseDC (graphics=0x5da0378, hdc=0x6a0107b5) returned 0x0
[0157.450] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0157.450] SelectObject (hdc=0x6a0107b5, h=0x85000f) returned 0x290507b8
[0157.450] DeleteDC (hdc=0x6a0107b5) returned 1
[0157.450] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0157.450] DeleteObject (ho=0x290507b8) returned 1
[0157.451] EndPaint (hWnd=0x102c8, lpPaint=0x53e370) returned 1
[0157.451] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0157.451] IsWindowUnicode (hWnd=0x102d4) returned 1
[0157.452] GetMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e920) returned 1
[0157.452] TranslateMessage (lpMsg=0x53e920) returned 0
[0157.452] DispatchMessageW (lpMsg=0x53e920) returned 0x0
[0157.452] BeginPaint (in: hWnd=0x102d4, lpPaint=0x53e368 | out: lpPaint=0x53e368) returned 0x8b010786
[0157.452] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0157.452] CreateCompatibleDC (hdc=0x8b010786) returned 0x120107bb
[0157.452] DeleteObject (ho=0x1a0507b9) returned 1
[0157.452] GetObjectType (h=0x8b010786) returned 0x3
[0157.452] CreateCompatibleBitmap (hdc=0x8b010786, cx=1, cy=1) returned 0x52050671
[0157.453] GetDIBits (in: hdc=0x8b010786, hbm=0x52050671, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x53de58, usage=0x0 | out: lpvBits=0x0, lpbmi=0x53de58) returned 1
[0157.453] GetDIBits (in: hdc=0x8b010786, hbm=0x52050671, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x53de58, usage=0x0 | out: lpvBits=0x0, lpbmi=0x53de58) returned 1
[0157.453] DeleteObject (ho=0x52050671) returned 1
[0157.453] CreateDIBSection (in: hdc=0x8b010786, lpbmi=0x53dea8, usage=0x0, ppvBits=0x53e39c, hSection=0x0, offset=0x0 | out: ppvBits=0x53e39c) returned 0x1b0507b9
[0157.453] SelectObject (hdc=0x120107bb, h=0x1b0507b9) returned 0x85000f
[0157.453] GdipCreateFromHDC (hdc=0x120107bb, graphics=0x53e380) returned 0x0
[0157.453] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0157.453] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=100, height=23, combineMode=0x0) returned 0x0
[0157.453] GdipCreateMatrix (matrix=0x53e3c8) returned 0x0
[0157.454] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0157.454] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e3e0) returned 0x0
[0157.454] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x8d0c00) returned 0x0
[0157.454] LocalFree (hMem=0x8d0c00) returned 0x0
[0157.454] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0157.454] GdipCreateRegion (region=0x53e3c8) returned 0x0
[0157.454] GdipGetClip (graphics=0x5da0378, region=0x5d92c30) returned 0x0
[0157.454] GdipIsInfiniteRegion (region=0x5d92c30, graphics=0x5da0378, result=0x53e3d4) returned 0x0
[0157.454] GdipSaveGraphics (graphics=0x5da0378, state=0x53e400) returned 0x0
[0157.454] GdipRestoreGraphics (graphics=0x5da0378, state=0xfda90dbd) returned 0x0
[0157.454] GdipDeleteRegion (region=0x5d92c30) returned 0x0
[0157.455] SystemParametersInfoW (in: uiAction=0x42, uiParam=0xc, pvParam=0x53e284, fWinIni=0x0 | out: pvParam=0x53e284) returned 1
[0157.456] GdipGetDC (graphics=0x5da0378, hdc=0x53e1ec) returned 0x0
[0157.456] GetCurrentObject (hdc=0x120107bb, type=0x1) returned 0xb00017
[0157.456] GetCurrentObject (hdc=0x120107bb, type=0x2) returned 0x900010
[0157.456] GetCurrentObject (hdc=0x120107bb, type=0x7) returned 0x1b0507b9
[0157.456] GetCurrentObject (hdc=0x120107bb, type=0x6) returned 0x8a01c2
[0157.456] SaveDC (hdc=0x120107bb) returned 1
[0157.456] GetNearestColor (hdc=0x120107bb, color=0xf0f0f0) returned 0xf0f0f0
[0157.456] GetNearestColor (hdc=0x120107bb, color=0xa0a0a0) returned 0xa0a0a0
[0157.457] GetNearestColor (hdc=0x120107bb, color=0x696969) returned 0x696969
[0157.457] GetNearestColor (hdc=0x120107bb, color=0xa0a0a0) returned 0xa0a0a0
[0157.457] GetNearestColor (hdc=0x120107bb, color=0x0) returned 0x0
[0157.457] GetNearestColor (hdc=0x120107bb, color=0xffffff) returned 0xffffff
[0157.457] GetNearestColor (hdc=0x120107bb, color=0xe5e5e5) returned 0xe5e5e5
[0157.457] GetNearestColor (hdc=0x120107bb, color=0xd7d7d7) returned 0xd7d7d7
[0157.457] GetNearestColor (hdc=0x120107bb, color=0x0) returned 0x0
[0157.457] RestoreDC (hdc=0x120107bb, nSavedDC=-1) returned 1
[0157.457] GdipReleaseDC (graphics=0x5da0378, hdc=0x120107bb) returned 0x0
[0157.459] IsAppThemed () returned 0x1
[0157.460] GetThemeAppProperties () returned 0x3
[0157.460] OpenThemeData () returned 0x10005
[0157.460] GdipGetImageWidth (image=0x5d9b198, width=0x53e280) returned 0x0
[0157.460] GdipGetImageHeight (image=0x5d9b198, height=0x53e280) returned 0x0
[0157.460] IsAppThemed () returned 0x1
[0157.460] GetThemeAppProperties () returned 0x3
[0157.460] GetThemeAppProperties () returned 0x3
[0157.461] DrawTextExW (in: hdc=0x600101a2, lpchText="&Details", cchText=8, lprc=0x53e0a8, format=0x102415, lpdtp=0x2316d90 | out: lpchText="&Details", lprc=0x53e0a8) returned 13
[0157.606] IsAppThemed () returned 0x1
[0157.607] GetThemeAppProperties () returned 0x3
[0157.607] GetThemeAppProperties () returned 0x3
[0157.607] IsAppThemed () returned 0x1
[0157.607] GetThemeAppProperties () returned 0x3
[0157.607] GetThemeAppProperties () returned 0x3
[0157.607] GetFocus () returned 0x102d4
[0157.611] IsAppThemed () returned 0x1
[0157.611] GetThemeAppProperties () returned 0x3
[0157.611] GetThemeAppProperties () returned 0x3
[0157.611] IsAppThemed () returned 0x1
[0157.611] GetThemeAppProperties () returned 0x3
[0157.611] GetThemeAppProperties () returned 0x3
[0157.612] IsThemePartDefined () returned 0x1
[0157.612] IsAppThemed () returned 0x1
[0157.612] GetThemeAppProperties () returned 0x3
[0157.612] GetThemeAppProperties () returned 0x3
[0157.612] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0157.613] IsAppThemed () returned 0x1
[0157.613] GetThemeAppProperties () returned 0x3
[0157.613] GetThemeAppProperties () returned 0x3
[0157.613] IsAppThemed () returned 0x1
[0157.613] GetThemeAppProperties () returned 0x3
[0157.613] GetThemeAppProperties () returned 0x3
[0157.613] IsThemePartDefined () returned 0x1
[0157.613] GdipCreateRegion (region=0x53e0f0) returned 0x0
[0157.613] GdipGetClip (graphics=0x5da0378, region=0x5d92c30) returned 0x0
[0157.613] GdipCreateMatrix (matrix=0x53e0f0) returned 0x0
[0157.614] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0157.614] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e108) returned 0x0
[0157.614] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x8d0ab0
[0157.614] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x8d0ab0) returned 0x0
[0157.614] LocalFree (hMem=0x8d0ab0) returned 0x0
[0157.614] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x8d0ed8
[0157.614] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x8d0ed8) returned 0x0
[0157.614] LocalFree (hMem=0x8d0ed8) returned 0x0
[0157.614] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0157.614] GdipIsInfiniteRegion (region=0x5d92c30, graphics=0x5da0378, result=0x53e130) returned 0x0
[0157.615] GdipIsInfiniteRegion (region=0x5d92c30, graphics=0x5da0378, result=0x53e120) returned 0x0
[0157.615] GdipGetRegionHRgn (region=0x5d92c30, graphics=0x5da0378, hRgn=0x53e120) returned 0x0
[0157.615] GdipDeleteRegion (region=0x5d92c30) returned 0x0
[0157.615] GdipGetDC (graphics=0x5da0378, hdc=0x53e138) returned 0x0
[0157.615] GetCurrentObject (hdc=0x120107bb, type=0x1) returned 0xb00017
[0157.615] GetCurrentObject (hdc=0x120107bb, type=0x2) returned 0x900010
[0157.615] GetCurrentObject (hdc=0x120107bb, type=0x7) returned 0x1b0507b9
[0157.615] GetCurrentObject (hdc=0x120107bb, type=0x6) returned 0x8a01c2
[0157.615] SaveDC (hdc=0x120107bb) returned 1
[0157.615] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e040798
[0157.616] GetClipRgn (hdc=0x120107bb, hrgn=0x7e040798) returned 0
[0157.616] SelectClipRgn (hdc=0x120107bb, hrgn=0x8204051e) returned 2
[0157.616] DeleteObject (ho=0x7e040798) returned 1
[0157.616] DeleteObject (ho=0x8204051e) returned 1
[0157.616] OffsetViewportOrgEx (in: hdc=0x120107bb, x=0, y=0, lppt=0x231746c | out: lppt=0x231746c) returned 1
[0157.617] DrawThemeParentBackground () returned 0x0
[0157.617] GetWindowPlacement (in: hWnd=0x102cc, lpwndpl=0x53ddfc | out: lpwndpl=0x53ddfc) returned 1
[0157.617] GetClientRect (in: hWnd=0x102cc, lpRect=0x53dda8 | out: lpRect=0x53dda8) returned 1
[0157.617] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0157.617] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0157.617] GetSystemMetrics (nIndex=42) returned 0
[0157.617] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53dc4c, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0157.618] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53dc4c) returned 0x18
[0157.618] GetClientRect (in: hWnd=0x102cc, lpRect=0x53dcb0 | out: lpRect=0x53dcb0) returned 1
[0157.618] GetCurrentObject (hdc=0x120107bb, type=0x1) returned 0xb00017
[0157.618] GetCurrentObject (hdc=0x120107bb, type=0x2) returned 0x900010
[0157.618] GetCurrentObject (hdc=0x120107bb, type=0x7) returned 0x1b0507b9
[0157.618] GetCurrentObject (hdc=0x120107bb, type=0x6) returned 0x8a01c2
[0157.618] SaveDC (hdc=0x120107bb) returned 2
[0157.618] GetNearestColor (hdc=0x120107bb, color=0xf0f0f0) returned 0xf0f0f0
[0157.618] CreateSolidBrush (color=0xf0f0f0) returned 0x6810078d
[0157.619] FillRect (hDC=0x120107bb, lprc=0x53db50, hbr=0x6810078d) returned 1
[0157.619] DeleteObject (ho=0x6810078d) returned 1
[0157.619] RestoreDC (hdc=0x120107bb, nSavedDC=-1) returned 1
[0157.619] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0157.619] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0157.619] GetSystemMetrics (nIndex=42) returned 0
[0157.619] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53dbec, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0157.619] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53dbec) returned 0x18
[0157.620] GetClientRect (in: hWnd=0x102cc, lpRect=0x53dc50 | out: lpRect=0x53dc50) returned 1
[0157.620] GetCurrentObject (hdc=0x120107bb, type=0x1) returned 0xb00017
[0157.620] GetCurrentObject (hdc=0x120107bb, type=0x2) returned 0x900010
[0157.620] GetCurrentObject (hdc=0x120107bb, type=0x7) returned 0x1b0507b9
[0157.620] GetCurrentObject (hdc=0x120107bb, type=0x6) returned 0x8a01c2
[0157.620] SaveDC (hdc=0x120107bb) returned 2
[0157.620] GetNearestColor (hdc=0x120107bb, color=0xf0f0f0) returned 0xf0f0f0
[0157.620] CreateSolidBrush (color=0xf0f0f0) returned 0x6910078d
[0157.620] FillRect (hDC=0x120107bb, lprc=0x53daf0, hbr=0x6910078d) returned 1
[0157.620] DeleteObject (ho=0x6910078d) returned 1
[0157.621] RestoreDC (hdc=0x120107bb, nSavedDC=-1) returned 1
[0157.621] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0157.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0157.621] GetSystemMetrics (nIndex=42) returned 0
[0157.621] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53dbec, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0157.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53dbec) returned 0x18
[0157.621] RestoreDC (hdc=0x120107bb, nSavedDC=-1) returned 1
[0157.622] GdipReleaseDC (graphics=0x5da0378, hdc=0x120107bb) returned 0x0
[0157.622] IsAppThemed () returned 0x1
[0157.622] GetThemeAppProperties () returned 0x3
[0157.622] GetThemeAppProperties () returned 0x3
[0157.622] IsAppThemed () returned 0x1
[0157.622] GetThemeAppProperties () returned 0x3
[0157.622] GetThemeAppProperties () returned 0x3
[0157.622] IsThemePartDefined () returned 0x1
[0157.622] GdipCreateRegion (region=0x53e074) returned 0x0
[0157.623] GdipGetClip (graphics=0x5da0378, region=0x5d92c30) returned 0x0
[0157.623] GdipCreateMatrix (matrix=0x53e074) returned 0x0
[0157.623] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0157.623] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e08c) returned 0x0
[0157.623] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x8d0c00
[0157.623] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x8d0c00) returned 0x0
[0157.623] LocalFree (hMem=0x8d0c00) returned 0x0
[0157.623] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x8d0e30
[0157.623] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x8d0e30) returned 0x0
[0157.623] LocalFree (hMem=0x8d0e30) returned 0x0
[0157.623] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0157.623] GdipIsInfiniteRegion (region=0x5d92c30, graphics=0x5da0378, result=0x53e0b4) returned 0x0
[0157.623] GdipIsInfiniteRegion (region=0x5d92c30, graphics=0x5da0378, result=0x53e0a4) returned 0x0
[0157.624] GdipGetRegionHRgn (region=0x5d92c30, graphics=0x5da0378, hRgn=0x53e0a4) returned 0x0
[0157.624] GdipDeleteRegion (region=0x5d92c30) returned 0x0
[0157.624] GdipGetDC (graphics=0x5da0378, hdc=0x53e0bc) returned 0x0
[0157.624] GetCurrentObject (hdc=0x120107bb, type=0x1) returned 0xb00017
[0157.624] GetCurrentObject (hdc=0x120107bb, type=0x2) returned 0x900010
[0157.624] GetCurrentObject (hdc=0x120107bb, type=0x7) returned 0x1b0507b9
[0157.624] GetCurrentObject (hdc=0x120107bb, type=0x6) returned 0x8a01c2
[0157.624] SaveDC (hdc=0x120107bb) returned 1
[0157.624] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8304051e
[0157.624] GetClipRgn (hdc=0x120107bb, hrgn=0x8304051e) returned 0
[0157.624] SelectClipRgn (hdc=0x120107bb, hrgn=0x80040798) returned 2
[0157.624] DeleteObject (ho=0x8304051e) returned 1
[0157.624] DeleteObject (ho=0x80040798) returned 1
[0157.624] OffsetViewportOrgEx (in: hdc=0x120107bb, x=0, y=0, lppt=0x2317df0 | out: lppt=0x2317df0) returned 1
[0157.624] IsAppThemed () returned 0x1
[0157.624] GetThemeAppProperties () returned 0x3
[0157.624] GetThemeAppProperties () returned 0x3
[0157.625] DrawThemeBackground () returned 0x0
[0157.625] RestoreDC (hdc=0x120107bb, nSavedDC=-1) returned 1
[0157.625] GdipReleaseDC (graphics=0x5da0378, hdc=0x120107bb) returned 0x0
[0157.625] GdipCreateRegion (region=0x53e078) returned 0x0
[0157.625] GdipGetClip (graphics=0x5da0378, region=0x5d92c30) returned 0x0
[0157.625] GdipCreateMatrix (matrix=0x53e078) returned 0x0
[0157.625] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0157.625] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e090) returned 0x0
[0157.625] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x8d0d88
[0157.625] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x8d0d88) returned 0x0
[0157.625] LocalFree (hMem=0x8d0d88) returned 0x0
[0157.626] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x8d1108
[0157.626] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x8d1108) returned 0x0
[0157.626] LocalFree (hMem=0x8d1108) returned 0x0
[0157.626] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0157.626] GdipIsInfiniteRegion (region=0x5d92c30, graphics=0x5da0378, result=0x53e0b8) returned 0x0
[0157.626] GdipIsInfiniteRegion (region=0x5d92c30, graphics=0x5da0378, result=0x53e0a8) returned 0x0
[0157.626] GdipGetRegionHRgn (region=0x5d92c30, graphics=0x5da0378, hRgn=0x53e0a8) returned 0x0
[0157.626] GdipDeleteRegion (region=0x5d92c30) returned 0x0
[0157.626] GdipGetDC (graphics=0x5da0378, hdc=0x53e0c0) returned 0x0
[0157.626] GetCurrentObject (hdc=0x120107bb, type=0x1) returned 0xb00017
[0157.626] GetCurrentObject (hdc=0x120107bb, type=0x2) returned 0x900010
[0157.626] GetCurrentObject (hdc=0x120107bb, type=0x7) returned 0x1b0507b9
[0157.626] GetCurrentObject (hdc=0x120107bb, type=0x6) returned 0x8a01c2
[0157.626] SaveDC (hdc=0x120107bb) returned 1
[0157.626] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x81040798
[0157.626] GetClipRgn (hdc=0x120107bb, hrgn=0x81040798) returned 0
[0157.627] SelectClipRgn (hdc=0x120107bb, hrgn=0x8404051e) returned 2
[0157.627] DeleteObject (ho=0x81040798) returned 1
[0157.627] DeleteObject (ho=0x8404051e) returned 1
[0157.627] OffsetViewportOrgEx (in: hdc=0x120107bb, x=0, y=0, lppt=0x23180c4 | out: lppt=0x23180c4) returned 1
[0157.627] IsAppThemed () returned 0x1
[0157.628] GetThemeAppProperties () returned 0x3
[0157.628] GetThemeAppProperties () returned 0x3
[0157.628] GetThemeBackgroundContentRect () returned 0x0
[0157.628] RestoreDC (hdc=0x120107bb, nSavedDC=-1) returned 1
[0157.628] GdipReleaseDC (graphics=0x5da0378, hdc=0x120107bb) returned 0x0
[0157.630] GdipCreateRegion (region=0x53e254) returned 0x0
[0157.631] GdipGetClip (graphics=0x5da0378, region=0x5d92c30) returned 0x0
[0157.631] GdipCloneRegion (region=0x5d92c30, cloneRegion=0x53e268) returned 0x0
[0157.632] GdipCombineRegionRectI (region=0x5d92e60, rect=0x53e250, combineMode=0x1) returned 0x0
[0157.632] GdipCombineRegionRectI (region=0x5d92e60, rect=0x53e250, combineMode=0x1) returned 0x0
[0157.633] GdipSetClipRegion (graphics=0x5da0378, region=0x5d92e60, combineMode=0x0) returned 0x0
[0157.633] GdipGetImageWidth (image=0x5d9b198, width=0x53e26c) returned 0x0
[0157.633] GdipGetImageHeight (image=0x5d9b198, height=0x53e260) returned 0x0
[0157.633] GdipDrawImageRectI (graphics=0x5da0378, image=0x5d9b198, x=4, y=4, width=16, height=16) returned 0x0
[0157.633] GdipSetClipRegion (graphics=0x5da0378, region=0x5d92c30, combineMode=0x0) returned 0x0
[0157.634] IsAppThemed () returned 0x1
[0157.634] GetThemeAppProperties () returned 0x3
[0157.634] GetThemeAppProperties () returned 0x3
[0157.634] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e1f4) returned 0x0
[0157.634] GdipGetDC (graphics=0x5da0378, hdc=0x53e1e0) returned 0x0
[0157.634] GetCurrentObject (hdc=0x120107bb, type=0x1) returned 0xb00017
[0157.634] GetCurrentObject (hdc=0x120107bb, type=0x2) returned 0x900010
[0157.634] GetCurrentObject (hdc=0x120107bb, type=0x7) returned 0x1b0507b9
[0157.634] GetCurrentObject (hdc=0x120107bb, type=0x6) returned 0x8a01c2
[0157.634] SaveDC (hdc=0x120107bb) returned 1
[0157.634] GetTextAlign (hdc=0x120107bb) returned 0x0
[0157.634] GetTextColor (hdc=0x120107bb) returned 0x0
[0157.634] GetCurrentObject (hdc=0x120107bb, type=0x6) returned 0x8a01c2
[0157.635] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53df28 | out: pv=0x53df28) returned 92
[0157.635] SelectObject (hdc=0x120107bb, h=0x730a066d) returned 0x8a01c2
[0157.635] GetBkMode (hdc=0x120107bb) returned 2
[0157.635] SetBkMode (hdc=0x120107bb, mode=1) returned 2
[0157.635] DrawTextExW (in: hdc=0x120107bb, lpchText="&Details", cchText=8, lprc=0x53e010, format=0x102415, lpdtp=0x2318484 | out: lpchText="&Details", lprc=0x53e010) returned 13
[0157.635] DrawTextExW (in: hdc=0x120107bb, lpchText="&Details", cchText=8, lprc=0x53e174, format=0x102015, lpdtp=0x2318484 | out: lpchText="&Details", lprc=0x53e174) returned 13
[0157.636] RestoreDC (hdc=0x120107bb, nSavedDC=-1) returned 1
[0157.636] GdipReleaseDC (graphics=0x5da0378, hdc=0x120107bb) returned 0x0
[0157.636] GetFocus () returned 0x102d4
[0157.636] IsAppThemed () returned 0x1
[0157.636] GetThemeAppProperties () returned 0x3
[0157.636] GetThemeAppProperties () returned 0x3
[0157.636] GdipGetDC (graphics=0x5da0378, hdc=0x53e3c0) returned 0x0
[0157.636] BitBlt (hdc=0x8b010786, x=0, y=0, cx=100, cy=23, hdcSrc=0x120107bb, x1=0, y1=0, rop=0xcc0020) returned 1
[0157.637] GdipReleaseDC (graphics=0x5da0378, hdc=0x120107bb) returned 0x0
[0157.637] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0157.637] SelectObject (hdc=0x120107bb, h=0x85000f) returned 0x1b0507b9
[0157.637] DeleteDC (hdc=0x120107bb) returned 1
[0157.637] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0157.637] EndPaint (hWnd=0x102d4, lpPaint=0x53e364) returned 1
[0157.637] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0159.829] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1
[0159.832] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0159.832] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0159.833] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0159.851] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x46, wParam=0x0, lParam=0x53e7f4) returned 0x0
[0159.851] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x84, wParam=0x0, lParam=0x1e602f7) returned 0x1
[0159.851] IsWindowUnicode (hWnd=0x102d6) returned 1
[0159.851] GetMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e920) returned 1
[0159.852] TranslateMessage (lpMsg=0x53e920) returned 0
[0159.852] DispatchMessageW (lpMsg=0x53e920) returned 0x0
[0159.852] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0159.852] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x84, wParam=0x0, lParam=0x1e602f7) returned 0x1
[0159.852] IsWindowUnicode (hWnd=0x102d6) returned 1
[0159.852] GetMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e920) returned 1
[0159.853] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x84, wParam=0x0, lParam=0x1e602f7) returned 0x1
[0159.853] GetDlgItem (hDlg=0x102cc, nIDDlgItem=0) returned 0x0
[0159.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x210, wParam=0x201, lParam=0x720102) returned 0x0
[0159.853] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x21, wParam=0x102cc, lParam=0x2010001) returned 0x1
[0159.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x21, wParam=0x102cc, lParam=0x2010001) returned 0x1
[0159.853] SetCursor (hCursor=0x10003) returned 0x10003
[0159.853] TranslateMessage (lpMsg=0x53e920) returned 0
[0159.853] DispatchMessageW (lpMsg=0x53e920) returned 0x0
[0159.855] GetKeyState (nVirtKey=1) returned -127
[0159.855] GetKeyState (nVirtKey=2) returned 0
[0159.855] GetKeyState (nVirtKey=4) returned 0
[0159.855] GetKeyState (nVirtKey=5) returned 0
[0159.855] GetKeyState (nVirtKey=6) returned 0
[0159.855] IsWindowVisible (hWnd=0x102d6) returned 1
[0159.855] IsWindowEnabled (hWnd=0x102d6) returned 1
[0159.855] SetFocus (hWnd=0x102d6) returned 0x102d4
[0159.856] GetFocus () returned 0x102d6
[0159.856] IsChild (hWndParent=0x102cc, hWnd=0x102d6) returned 1
[0159.856] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x8, wParam=0x102d6, lParam=0x0) returned 0x0
[0159.856] GetCapture () returned 0x0
[0159.856] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1
[0159.857] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0159.858] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0159.860] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0159.861] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1
[0159.861] InvalidateRect (hWnd=0x102d6, lpRect=0x0, bErase=0) returned 1
[0159.861] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x7, wParam=0x102d4, lParam=0x0) returned 0x0
[0159.861] GetStockObject (i=5) returned 0x900015
[0159.861] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9
[0159.861] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0xd, wParam=0xa, lParam=0x8dd6b8) returned 0x9
[0159.862] GetDlgItem (hDlg=0x102cc, nIDDlgItem=66262) returned 0x102d6
[0159.862] SendMessageW (hWnd=0x102d6, Msg=0x202b, wParam=0x102d6, lParam=0x53def4) returned 0x0
[0159.862] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x202b, wParam=0x102d6, lParam=0x53def4) returned 0x0
[0159.862] InvalidateRect (hWnd=0x102d6, lpRect=0x0, bErase=0) returned 1
[0159.863] GetFocus () returned 0x102d6
[0159.863] GetFocus () returned 0x102d6
[0159.864] GetFocus () returned 0x102d6
[0159.864] GetKeyState (nVirtKey=1) returned -127
[0159.864] GetKeyState (nVirtKey=2) returned 0
[0159.864] GetKeyState (nVirtKey=4) returned 0
[0159.864] GetKeyState (nVirtKey=5) returned 0
[0159.864] GetKeyState (nVirtKey=6) returned 0
[0159.864] GetCapture () returned 0x0
[0159.864] SetCapture (hWnd=0x102d6) returned 0x0
[0159.864] GetKeyState (nVirtKey=1) returned -127
[0159.864] GetKeyState (nVirtKey=2) returned 0
[0159.864] GetKeyState (nVirtKey=4) returned 0
[0159.864] GetKeyState (nVirtKey=5) returned 0
[0159.864] GetKeyState (nVirtKey=6) returned 0
[0159.864] NotifyWinEvent (event=0x800a, hwnd=0x102d6, idObject=-4, idChild=0)
[0159.865] InvalidateRect (hWnd=0x102d6, lpRect=0x53e548, bErase=0) returned 1
[0159.865] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0159.865] IsWindowUnicode (hWnd=0x102d6) returned 1
[0159.865] GetMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e920) returned 1
[0159.865] TranslateMessage (lpMsg=0x53e920) returned 0
[0159.865] DispatchMessageW (lpMsg=0x53e920) returned 0x0
[0159.865] MapWindowPoints (in: hWndFrom=0x102d6, hWndTo=0x0, lpPoints=0x2318674, cPoints=0x1 | out: lpPoints=0x2318674) returned 31392470
[0159.869] NotifyWinEvent (event=0x800a, hwnd=0x102d6, idObject=-4, idChild=0)
[0159.869] InvalidateRect (hWnd=0x102d6, lpRect=0x53e4e8, bErase=0) returned 1
[0159.870] UpdateWindow (hWnd=0x102d6) returned 1
[0159.870] BeginPaint (in: hWnd=0x102d6, lpPaint=0x53e000 | out: lpPaint=0x53e000) returned 0xf0105ee
[0159.870] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0159.870] CreateCompatibleDC (hdc=0xf0105ee) returned 0x2901065e
[0159.870] SelectObject (hdc=0x2901065e, h=0x1b0507b9) returned 0x85000f
[0159.870] GdipCreateFromHDC (hdc=0x2901065e, graphics=0x53e018) returned 0x0
[0159.870] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0159.870] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=100, height=23, combineMode=0x0) returned 0x0
[0159.870] GdipCreateMatrix (matrix=0x53e060) returned 0x0
[0159.871] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0159.871] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e078) returned 0x0
[0159.871] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ecf0
[0159.871] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ecf0) returned 0x0
[0159.871] LocalFree (hMem=0x89ecf0) returned 0x0
[0159.871] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0159.871] GdipCreateRegion (region=0x53e060) returned 0x0
[0159.871] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0159.871] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e06c) returned 0x0
[0159.871] GdipSaveGraphics (graphics=0x5da0378, state=0x53e098) returned 0x0
[0159.871] GdipRestoreGraphics (graphics=0x5da0378, state=0xfda70dbd) returned 0x0
[0159.871] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0159.873] GdipGetDC (graphics=0x5da0378, hdc=0x53de78) returned 0x0
[0159.873] GetCurrentObject (hdc=0x2901065e, type=0x1) returned 0xb00017
[0159.873] GetCurrentObject (hdc=0x2901065e, type=0x2) returned 0x900010
[0159.873] GetCurrentObject (hdc=0x2901065e, type=0x7) returned 0x1b0507b9
[0159.873] GetCurrentObject (hdc=0x2901065e, type=0x6) returned 0x8a01c2
[0159.873] SaveDC (hdc=0x2901065e) returned 1
[0159.873] GetNearestColor (hdc=0x2901065e, color=0xf0f0f0) returned 0xf0f0f0
[0159.873] GetNearestColor (hdc=0x2901065e, color=0xa0a0a0) returned 0xa0a0a0
[0159.873] GetNearestColor (hdc=0x2901065e, color=0x696969) returned 0x696969
[0159.873] GetNearestColor (hdc=0x2901065e, color=0xa0a0a0) returned 0xa0a0a0
[0159.873] GetNearestColor (hdc=0x2901065e, color=0x0) returned 0x0
[0159.873] GetNearestColor (hdc=0x2901065e, color=0xffffff) returned 0xffffff
[0159.873] GetNearestColor (hdc=0x2901065e, color=0xe5e5e5) returned 0xe5e5e5
[0159.873] GetNearestColor (hdc=0x2901065e, color=0xd7d7d7) returned 0xd7d7d7
[0159.874] GetNearestColor (hdc=0x2901065e, color=0x0) returned 0x0
[0159.874] RestoreDC (hdc=0x2901065e, nSavedDC=-1) returned 1
[0159.874] GdipReleaseDC (graphics=0x5da0378, hdc=0x2901065e) returned 0x0
[0159.874] IsAppThemed () returned 0x1
[0159.874] GetThemeAppProperties () returned 0x3
[0159.874] GetThemeAppProperties () returned 0x3
[0159.874] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53dee4, fWinIni=0x0 | out: pvParam=0x53dee4) returned 1
[0159.874] SendMessageW (hWnd=0x102cc, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0159.874] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0159.874] IsAppThemed () returned 0x1
[0159.874] GetThemeAppProperties () returned 0x3
[0159.874] GetThemeAppProperties () returned 0x3
[0159.874] DrawTextExW (in: hdc=0x600101a2, lpchText="&Continue", cchText=9, lprc=0x53dd34, format=0x102415, lpdtp=0x2318dd8 | out: lpchText="&Continue", lprc=0x53dd34) returned 13
[0159.875] IsAppThemed () returned 0x1
[0159.875] GetThemeAppProperties () returned 0x3
[0159.875] GetThemeAppProperties () returned 0x3
[0159.875] IsAppThemed () returned 0x1
[0159.875] GetThemeAppProperties () returned 0x3
[0159.875] GetThemeAppProperties () returned 0x3
[0159.875] IsAppThemed () returned 0x1
[0159.875] GetThemeAppProperties () returned 0x3
[0159.875] GetThemeAppProperties () returned 0x3
[0159.875] IsAppThemed () returned 0x1
[0159.875] GetThemeAppProperties () returned 0x3
[0159.875] GetThemeAppProperties () returned 0x3
[0159.875] IsThemePartDefined () returned 0x1
[0159.875] IsAppThemed () returned 0x1
[0159.875] GetThemeAppProperties () returned 0x3
[0159.875] GetThemeAppProperties () returned 0x3
[0159.875] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0159.875] IsAppThemed () returned 0x1
[0159.875] GetThemeAppProperties () returned 0x3
[0159.875] GetThemeAppProperties () returned 0x3
[0159.876] IsAppThemed () returned 0x1
[0159.876] GetThemeAppProperties () returned 0x3
[0159.876] GetThemeAppProperties () returned 0x3
[0159.876] IsThemePartDefined () returned 0x1
[0159.876] GdipCreateRegion (region=0x53dd7c) returned 0x0
[0159.876] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0159.876] GdipCreateMatrix (matrix=0x53dd7c) returned 0x0
[0159.876] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0159.876] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53dd94) returned 0x0
[0159.876] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb68
[0159.876] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eb68) returned 0x0
[0159.876] LocalFree (hMem=0x89eb68) returned 0x0
[0159.876] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eeb0
[0159.876] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eeb0) returned 0x0
[0159.876] LocalFree (hMem=0x89eeb0) returned 0x0
[0159.876] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0159.876] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53ddbc) returned 0x0
[0159.876] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53ddac) returned 0x0
[0159.877] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53ddac) returned 0x0
[0159.877] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0159.877] GdipGetDC (graphics=0x5da0378, hdc=0x53ddc4) returned 0x0
[0159.877] GetCurrentObject (hdc=0x2901065e, type=0x1) returned 0xb00017
[0159.877] GetCurrentObject (hdc=0x2901065e, type=0x2) returned 0x900010
[0159.877] GetCurrentObject (hdc=0x2901065e, type=0x7) returned 0x1b0507b9
[0159.885] GetCurrentObject (hdc=0x2901065e, type=0x6) returned 0x8a01c2
[0159.885] SaveDC (hdc=0x2901065e) returned 1
[0159.885] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8504051e
[0159.885] GetClipRgn (hdc=0x2901065e, hrgn=0x8504051e) returned 0
[0159.885] SelectClipRgn (hdc=0x2901065e, hrgn=0x85040798) returned 2
[0159.885] DeleteObject (ho=0x8504051e) returned 1
[0159.885] DeleteObject (ho=0x85040798) returned 1
[0159.885] OffsetViewportOrgEx (in: hdc=0x2901065e, x=0, y=0, lppt=0x231d33c | out: lppt=0x231d33c) returned 1
[0159.885] DrawThemeParentBackground () returned 0x0
[0159.885] GetWindowPlacement (in: hWnd=0x102cc, lpwndpl=0x53da8c | out: lpwndpl=0x53da8c) returned 1
[0159.886] GetClientRect (in: hWnd=0x102cc, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0159.886] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0159.886] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0159.886] GetSystemMetrics (nIndex=42) returned 0
[0159.886] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53d8dc, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0159.886] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53d8dc) returned 0x18
[0159.886] GetClientRect (in: hWnd=0x102cc, lpRect=0x53d940 | out: lpRect=0x53d940) returned 1
[0159.886] GetCurrentObject (hdc=0x2901065e, type=0x1) returned 0xb00017
[0159.886] GetCurrentObject (hdc=0x2901065e, type=0x2) returned 0x900010
[0159.886] GetCurrentObject (hdc=0x2901065e, type=0x7) returned 0x1b0507b9
[0159.886] GetCurrentObject (hdc=0x2901065e, type=0x6) returned 0x8a01c2
[0159.886] SaveDC (hdc=0x2901065e) returned 2
[0159.886] GetNearestColor (hdc=0x2901065e, color=0xf0f0f0) returned 0xf0f0f0
[0159.886] CreateSolidBrush (color=0xf0f0f0) returned 0x6a10078d
[0159.886] FillRect (hDC=0x2901065e, lprc=0x53d7e0, hbr=0x6a10078d) returned 1
[0159.886] DeleteObject (ho=0x6a10078d) returned 1
[0159.887] RestoreDC (hdc=0x2901065e, nSavedDC=-1) returned 1
[0159.887] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0159.887] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0159.887] GetSystemMetrics (nIndex=42) returned 0
[0159.887] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53d87c, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0159.887] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53d87c) returned 0x18
[0159.887] GetClientRect (in: hWnd=0x102cc, lpRect=0x53d8e0 | out: lpRect=0x53d8e0) returned 1
[0159.887] GetCurrentObject (hdc=0x2901065e, type=0x1) returned 0xb00017
[0159.887] GetCurrentObject (hdc=0x2901065e, type=0x2) returned 0x900010
[0159.887] GetCurrentObject (hdc=0x2901065e, type=0x7) returned 0x1b0507b9
[0159.887] GetCurrentObject (hdc=0x2901065e, type=0x6) returned 0x8a01c2
[0159.887] SaveDC (hdc=0x2901065e) returned 2
[0159.887] GetNearestColor (hdc=0x2901065e, color=0xf0f0f0) returned 0xf0f0f0
[0159.887] CreateSolidBrush (color=0xf0f0f0) returned 0x6b10078d
[0159.887] FillRect (hDC=0x2901065e, lprc=0x53d780, hbr=0x6b10078d) returned 1
[0159.888] DeleteObject (ho=0x6b10078d) returned 1
[0159.888] RestoreDC (hdc=0x2901065e, nSavedDC=-1) returned 1
[0159.888] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0159.888] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0159.888] GetSystemMetrics (nIndex=42) returned 0
[0159.888] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53d87c, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0159.888] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53d87c) returned 0x18
[0159.888] RestoreDC (hdc=0x2901065e, nSavedDC=-1) returned 1
[0159.888] GdipReleaseDC (graphics=0x5da0378, hdc=0x2901065e) returned 0x0
[0159.888] IsAppThemed () returned 0x1
[0159.888] GetThemeAppProperties () returned 0x3
[0159.888] GetThemeAppProperties () returned 0x3
[0159.888] IsAppThemed () returned 0x1
[0159.888] GetThemeAppProperties () returned 0x3
[0159.889] GetThemeAppProperties () returned 0x3
[0159.889] IsThemePartDefined () returned 0x1
[0159.889] GdipCreateRegion (region=0x53dd00) returned 0x0
[0159.889] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0159.889] GdipCreateMatrix (matrix=0x53dd00) returned 0x0
[0159.889] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0159.889] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd18) returned 0x0
[0159.889] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e9a8
[0159.889] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89e9a8) returned 0x0
[0159.889] LocalFree (hMem=0x89e9a8) returned 0x0
[0159.889] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0159.889] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0159.889] LocalFree (hMem=0x89eac0) returned 0x0
[0159.889] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0159.889] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd40) returned 0x0
[0159.889] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd30) returned 0x0
[0159.889] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dd30) returned 0x0
[0159.889] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0159.890] GdipGetDC (graphics=0x5da0378, hdc=0x53dd48) returned 0x0
[0159.890] GetCurrentObject (hdc=0x2901065e, type=0x1) returned 0xb00017
[0159.890] GetCurrentObject (hdc=0x2901065e, type=0x2) returned 0x900010
[0159.890] GetCurrentObject (hdc=0x2901065e, type=0x7) returned 0x1b0507b9
[0159.890] GetCurrentObject (hdc=0x2901065e, type=0x6) returned 0x8a01c2
[0159.890] SaveDC (hdc=0x2901065e) returned 1
[0159.890] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x86040798
[0159.890] GetClipRgn (hdc=0x2901065e, hrgn=0x86040798) returned 0
[0159.890] SelectClipRgn (hdc=0x2901065e, hrgn=0x8704051e) returned 2
[0159.890] DeleteObject (ho=0x86040798) returned 1
[0159.890] DeleteObject (ho=0x8704051e) returned 1
[0159.890] OffsetViewportOrgEx (in: hdc=0x2901065e, x=0, y=0, lppt=0x231dcc0 | out: lppt=0x231dcc0) returned 1
[0159.891] IsAppThemed () returned 0x1
[0159.891] GetThemeAppProperties () returned 0x3
[0159.891] GetThemeAppProperties () returned 0x3
[0159.891] DrawThemeBackground () returned 0x0
[0159.891] RestoreDC (hdc=0x2901065e, nSavedDC=-1) returned 1
[0159.891] GdipReleaseDC (graphics=0x5da0378, hdc=0x2901065e) returned 0x0
[0159.891] GdipCreateRegion (region=0x53dd04) returned 0x0
[0159.891] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0159.891] GdipCreateMatrix (matrix=0x53dd04) returned 0x0
[0159.891] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0159.891] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53dd1c) returned 0x0
[0159.891] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef58
[0159.891] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ef58) returned 0x0
[0159.891] LocalFree (hMem=0x89ef58) returned 0x0
[0159.891] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb68
[0159.891] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eb68) returned 0x0
[0159.891] LocalFree (hMem=0x89eb68) returned 0x0
[0159.892] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0159.892] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd44) returned 0x0
[0159.892] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd34) returned 0x0
[0159.892] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dd34) returned 0x0
[0159.892] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0159.892] GdipGetDC (graphics=0x5da0378, hdc=0x53dd4c) returned 0x0
[0159.892] GetCurrentObject (hdc=0x2901065e, type=0x1) returned 0xb00017
[0159.892] GetCurrentObject (hdc=0x2901065e, type=0x2) returned 0x900010
[0159.892] GetCurrentObject (hdc=0x2901065e, type=0x7) returned 0x1b0507b9
[0159.892] GetCurrentObject (hdc=0x2901065e, type=0x6) returned 0x8a01c2
[0159.892] SaveDC (hdc=0x2901065e) returned 1
[0159.892] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8804051e
[0159.892] GetClipRgn (hdc=0x2901065e, hrgn=0x8804051e) returned 0
[0159.892] SelectClipRgn (hdc=0x2901065e, hrgn=0x87040798) returned 2
[0159.892] DeleteObject (ho=0x8804051e) returned 1
[0159.892] DeleteObject (ho=0x87040798) returned 1
[0159.896] OffsetViewportOrgEx (in: hdc=0x2901065e, x=0, y=0, lppt=0x231df94 | out: lppt=0x231df94) returned 1
[0159.896] IsAppThemed () returned 0x1
[0159.896] GetThemeAppProperties () returned 0x3
[0159.896] GetThemeAppProperties () returned 0x3
[0159.896] GetThemeBackgroundContentRect () returned 0x0
[0159.896] RestoreDC (hdc=0x2901065e, nSavedDC=-1) returned 1
[0159.896] GdipReleaseDC (graphics=0x5da0378, hdc=0x2901065e) returned 0x0
[0159.896] IsAppThemed () returned 0x1
[0159.896] GetThemeAppProperties () returned 0x3
[0159.896] GetThemeAppProperties () returned 0x3
[0159.896] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53de80) returned 0x0
[0159.896] GdipGetDC (graphics=0x5da0378, hdc=0x53de6c) returned 0x0
[0159.896] GetCurrentObject (hdc=0x2901065e, type=0x1) returned 0xb00017
[0159.896] GetCurrentObject (hdc=0x2901065e, type=0x2) returned 0x900010
[0159.897] GetCurrentObject (hdc=0x2901065e, type=0x7) returned 0x1b0507b9
[0159.897] GetCurrentObject (hdc=0x2901065e, type=0x6) returned 0x8a01c2
[0159.897] SaveDC (hdc=0x2901065e) returned 1
[0159.897] GetTextAlign (hdc=0x2901065e) returned 0x0
[0159.897] GetTextColor (hdc=0x2901065e) returned 0x0
[0159.897] GetCurrentObject (hdc=0x2901065e, type=0x6) returned 0x8a01c2
[0159.897] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dbb4 | out: pv=0x53dbb4) returned 92
[0159.897] SelectObject (hdc=0x2901065e, h=0x730a066d) returned 0x8a01c2
[0159.897] GetBkMode (hdc=0x2901065e) returned 2
[0159.897] SetBkMode (hdc=0x2901065e, mode=1) returned 2
[0159.897] DrawTextExW (in: hdc=0x2901065e, lpchText="&Continue", cchText=9, lprc=0x53dc9c, format=0x102415, lpdtp=0x231e334 | out: lpchText="&Continue", lprc=0x53dc9c) returned 13
[0159.898] DrawTextExW (in: hdc=0x2901065e, lpchText="&Continue", cchText=9, lprc=0x53de00, format=0x102015, lpdtp=0x231e334 | out: lpchText="&Continue", lprc=0x53de00) returned 13
[0159.898] RestoreDC (hdc=0x2901065e, nSavedDC=-1) returned 1
[0159.898] GdipReleaseDC (graphics=0x5da0378, hdc=0x2901065e) returned 0x0
[0159.898] GetFocus () returned 0x102d6
[0159.898] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53df38, fWinIni=0x0 | out: pvParam=0x53df38) returned 1
[0159.898] SendMessageW (hWnd=0x102cc, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0159.898] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0159.898] IsAppThemed () returned 0x1
[0159.899] GetThemeAppProperties () returned 0x3
[0159.899] GetThemeAppProperties () returned 0x3
[0159.899] GdipGetDC (graphics=0x5da0378, hdc=0x53e058) returned 0x0
[0159.899] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=100, cy=23, hdcSrc=0x2901065e, x1=0, y1=0, rop=0xcc0020) returned 1
[0159.899] GdipReleaseDC (graphics=0x5da0378, hdc=0x2901065e) returned 0x0
[0159.899] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0159.899] SelectObject (hdc=0x2901065e, h=0x85000f) returned 0x1b0507b9
[0159.899] DeleteDC (hdc=0x2901065e) returned 1
[0159.899] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0159.899] EndPaint (hWnd=0x102d6, lpPaint=0x53dffc) returned 1
[0159.899] MapWindowPoints (in: hWndFrom=0x102d6, hWndTo=0x0, lpPoints=0x231e430, cPoints=0x1 | out: lpPoints=0x231e430) returned 31392470
[0159.900] WindowFromPoint (Point=0x2f7) returned 0x102d6
[0159.900] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x84, wParam=0x0, lParam=0x1e602f7) returned 0x1
[0159.900] NotifyWinEvent (event=0x800a, hwnd=0x102d6, idObject=-4, idChild=0)
[0159.900] NotifyWinEvent (event=0x800c, hwnd=0x102d6, idObject=-4, idChild=0)
[0159.901] GetCapture () returned 0x102d6
[0159.904] ReleaseCapture () returned 1
[0159.904] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0159.904] PeekMessageW (in: lpMsg=0x53e920, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e920) returned 1
[0159.904] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x84, wParam=0x0, lParam=0x1e602f7) returned 0x1
[0159.908] GetWindowLongW (hWnd=0x102cc, nIndex=-8) returned 0
[0159.910] IsWindow (hWnd=0x0) returned 0
[0159.910] IsWindow (hWnd=0x0) returned 0
[0159.910] IsWindow (hWnd=0x0) returned 0
[0159.910] GetFocus () returned 0x102d6
[0159.910] IsChild (hWndParent=0x102cc, hWnd=0x102d6) returned 1
[0159.910] ShowWindow (hWnd=0x102cc, nCmdShow=0) returned 1
[0159.910] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0159.910] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x46, wParam=0x0, lParam=0x53e8c4) returned 0x0
[0159.912] GetWindowPlacement (in: hWnd=0x102cc, lpwndpl=0x53e5f0 | out: lpwndpl=0x53e5f0) returned 1
[0159.912] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x47, wParam=0x0, lParam=0x53e8c4) returned 0x0
[0159.912] GetClientRect (in: hWnd=0x102cc, lpRect=0x53e5a0 | out: lpRect=0x53e5a0) returned 1
[0159.912] GetWindowRect (in: hWnd=0x102cc, lpRect=0x53e5a0 | out: lpRect=0x53e5a0) returned 1
[0159.914] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0159.914] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0159.914] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0159.922] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
[0159.923] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0159.923] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0159.923] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0159.927] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x1c, wParam=0x0, lParam=0x1060) returned 0x0
[0159.927] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x1c, wParam=0x0, lParam=0x1060) returned 0x0
[0159.927] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1c, wParam=0x0, lParam=0x1060) returned 0x0
[0159.927] NtdllDefWindowProc_W (hWnd=0x901f8, Msg=0x1c, wParam=0x0, lParam=0x1060) returned 0x0
[0159.927] GetFocus () returned 0x0
[0159.927] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0
[0159.927] GetCapture () returned 0x0
[0159.927] InvalidateRect (hWnd=0x102d6, lpRect=0x0, bErase=0) returned 1
[0159.928] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0159.929] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0159.929] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0159.930] GetWindowLongW (hWnd=0x102cc, nIndex=-20) returned 327945
[0159.930] DestroyWindow (hWnd=0x102cc) returned 1
[0159.931] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0159.952] GetWindowTextLengthW (hWnd=0x102cc) returned 24
[0159.952] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18
[0159.952] GetSystemMetrics (nIndex=42) returned 0
[0159.952] GetWindowTextW (in: hWnd=0x102cc, lpString=0x53e4a8, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24
[0159.952] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0xd, wParam=0x19, lParam=0x53e4a8) returned 0x18
[0159.952] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0159.953] GetWindowTextLengthW (hWnd=0x102d2) returned 0
[0159.953] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0159.953] GetSystemMetrics (nIndex=42) returned 0
[0159.953] GetWindowTextW (in: hWnd=0x102d2, lpString=0x53e4dc, nMaxCount=1 | out: lpString="") returned 0
[0159.953] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0xd, wParam=0x1, lParam=0x53e4dc) returned 0x0
[0159.953] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0159.953] GetWindowThreadProcessId (in: hWnd=0x4013e, lpdwProcessId=0x53e56c | out: lpdwProcessId=0x53e56c) returned 0x11d0
[0159.957] GetWindow (hWnd=0x4013e, uCmd=0x5) returned 0x0
[0159.957] GetWindowLongW (hWnd=0x4013e, nIndex=-20) returned 65792
[0159.957] DestroyWindow (hWnd=0x4013e) returned 1
[0159.957] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x4013e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0159.957] GetWindowTextLengthW (hWnd=0x4013e) returned 25
[0159.957] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x4013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0159.957] GetSystemMetrics (nIndex=42) returned 0
[0159.957] GetWindowTextW (in: hWnd=0x4013e, lpString=0x53e028, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0159.958] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x4013e, Msg=0xd, wParam=0x1a, lParam=0x53e028) returned 0x19
[0159.958] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x4013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0160.013] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x4013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0160.014] GetWindowTextLengthW (hWnd=0x102c8) returned 273
[0160.014] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x111
[0160.014] GetSystemMetrics (nIndex=42) returned 0
[0160.014] CoTaskMemAlloc (cb=0x228) returned 0x8df460
[0160.015] GetWindowTextW (in: hWnd=0x102c8, lpString=0x8df460, nMaxCount=274 | out: lpString="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nAccess to the path 'C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe' is denied.") returned 273
[0160.015] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0xd, wParam=0x112, lParam=0x8df460) returned 0x111
[0160.015] CoTaskMemFree (pv=0x8df460)
[0160.015] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0160.015] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0160.015] InvalidateRect (hWnd=0x102d6, lpRect=0x0, bErase=0) returned 1
[0160.015] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0160.015] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0160.015] SendMessageW (hWnd=0x102da, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0160.015] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0160.016] SendMessageW (hWnd=0x102da, Msg=0xb0, wParam=0x22dafe0, lParam=0x53e598) returned 0x0
[0160.016] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0xb0, wParam=0x22dafe0, lParam=0x53e598) returned 0x0
[0160.016] GetWindowTextLengthW (hWnd=0x102da) returned 4832
[0160.016] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12e0
[0160.016] GetSystemMetrics (nIndex=42) returned 0
[0160.016] CoTaskMemAlloc (cb=0x25c6) returned 0x8e3140
[0160.016] GetWindowTextW (in: hWnd=0x102da, lpString=0x8e3140, nMaxCount=4833 | out: lpString="See the end of this message for details on invoking \r\njust-in-time (JIT) debugging instead of this dialog box.\r\n\r\n************** Exception Text **************\r\nSystem.UnauthorizedAccessException: Access to the path 'C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe' is denied.\r\n at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)\r\n at System.IO.File.InternalDelete(String path, Boolean checkHost)\r\n at System.IO.File.Delete(String path)\r\n at Microsoft.VisualBasic.FileIO.FileSystem.DeleteFileInternal(String file, UIOptionInternal showUI, RecycleOption recycle, UICancelOption onUserCancel)\r\n at Microsoft.VisualBasic.MyServices.FileSystemProxy.DeleteFile(String file)\r\n at Cobra_Locker.Form1_Load(Object sender, EventArgs e)\r\n at System.EventHandler.Invoke(Object sender, EventArgs e)\r\n at System.Windows.Forms.Form.OnLoad(EventArgs e)\r\n at System.Windows.Forms.Form.OnCreateControl()\r\n at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)\r\n at System.Windows.Forms.Control.CreateControl()\r\n at System.Windows.Forms.Control.WmShowWindow(Message& m)\r\n at System.Windows.Forms.Control.WndProc(Message& m)\r\n at System.Windows.Forms.ScrollableControl.WndProc(Message& m)\r\n at System.Windows.Forms.Form.WmShowWindow(Message& m)\r\n at System.Windows.Forms.Form.WndProc(Message& m)\r\n at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)\r\n at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)\r\n at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)\r\n\r\n\r\n************** Loaded Assemblies **************\r\nmscorlib\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2102.0 built by: NET47REL1LAST\r\n CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll\r\n----------------------------------------\r\nRansomware\r\n Assembly Version: 1.0.0.0\r\n Win32 Version: 1.0.0.0\r\n CodeBase: file:///C:/Users/FD1HVy/Desktop/Ransomware.exe\r\n----------------------------------------\r\nMicrosoft.VisualBasic\r\n Assembly Version: 10.0.0.0\r\n Win32 Version: 14.7.2046.0 built by: NET47REL1\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/Microsoft.VisualBasic/v4.0_10.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll\r\n----------------------------------------\r\nSystem.Windows.Forms\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2104.0 built by: NET47REL1LAST\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll\r\n----------------------------------------\r\nSystem\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2103.2 built by: NET47REL1LAST\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll\r\n----------------------------------------\r\nSystem.Drawing\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2046.0 built by: NET47REL1\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll\r\n----------------------------------------\r\nSystem.Configuration\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2046.0 built by: NET47REL1\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll\r\n----------------------------------------\r\nSystem.Core\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2102.0 built by: NET47REL1LAST\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Core/v4.0_4.0.0.0__b77a5c561934e089/System.Core.dll\r\n----------------------------------------\r\nSystem.Xml\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2102.0 built by: NET47REL1LAST\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll\r\n----------------------------------------\r\nSystem.Runtime.Remoting\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.7.2046.0 built by: NET47REL1\r\n CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Runtime.Remoting/v4.0_4.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll\r\n----------------------------------------\r\n\r\n************** JIT Debugging **************\r\nTo enable just-in-time (JIT) debugging, the .config file for this\r\napplication or computer (machine.config) must have the\r\njitDebugging value set in the system.windows.forms section.\r\nThe application must also be compiled with debugging\r\nenabled.\r\n\r\nFor example:\r\n\r\n\r\n \r\n\r\n\r\nWhen JIT debugging is enabled, any unhandled exception\r\nwill be sent to the JIT debugger registered on the computer\r\nrather than be handled by this dialog box.\r\n\r\n\r\n") returned 4832
[0160.016] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0xd, wParam=0x12e1, lParam=0x8e3140) returned 0x12e0
[0160.017] CoTaskMemFree (pv=0x8e3140)
[0160.017] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0160.017] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0160.028] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x102c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0160.030] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d4, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0160.031] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0160.113] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x102d8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0160.114] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x102da, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0160.115] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x102cc, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0160.118] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53ee0c) returned 0x0
[0160.118] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53ee0c) returned 0x0
[0160.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53ee0c) returned 0x0
[0160.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53ee0c) returned 0x0
[0160.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1c, wParam=0x1, lParam=0x1060) returned 0x0
[0160.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x1c, wParam=0x1, lParam=0x1060) returned 0x0
[0160.141] NtdllDefWindowProc_W (hWnd=0x901f8, Msg=0x1c, wParam=0x1, lParam=0x1060) returned 0x0
[0160.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1
[0160.187] GetParent (hWnd=0x70036) returned 0x0
[0160.187] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0160.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0160.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0160.189] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53eb54 | out: lpwndpl=0x53eb54) returned 1
[0160.189] GetClientRect (in: hWnd=0x70036, lpRect=0x53eb00 | out: lpRect=0x53eb00) returned 1
[0160.189] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.189] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.190] GetSystemMetrics (nIndex=42) returned 0
[0160.190] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e9bc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.190] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e9bc) returned 0xc
[0160.190] GetClientRect (in: hWnd=0x70036, lpRect=0x53ea08 | out: lpRect=0x53ea08) returned 1
[0160.190] GetCurrentObject (hdc=0x8b010786, type=0x1) returned 0xb00017
[0160.190] GetCurrentObject (hdc=0x8b010786, type=0x2) returned 0x900010
[0160.190] GetCurrentObject (hdc=0x8b010786, type=0x7) returned 0x5a0507bb
[0160.190] GetCurrentObject (hdc=0x8b010786, type=0x6) returned 0x8a01c2
[0160.190] SaveDC (hdc=0x8b010786) returned 1
[0160.190] GetNearestColor (hdc=0x8b010786, color=0xff) returned 0xff
[0160.190] CreateSolidBrush (color=0xff) returned 0x6c10078d
[0160.190] FillRect (hDC=0x8b010786, lprc=0x53e8a8, hbr=0x6c10078d) returned 1
[0160.191] DeleteObject (ho=0x6c10078d) returned 1
[0160.191] RestoreDC (hdc=0x8b010786, nSavedDC=-1) returned 1
[0160.191] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0160.191] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0160.192] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0160.194] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e51c | out: lpwndpl=0x53e51c) returned 1
[0160.194] GetClientRect (in: hWnd=0x70036, lpRect=0x53e4c8 | out: lpRect=0x53e4c8) returned 1
[0160.194] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.194] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.194] GetSystemMetrics (nIndex=42) returned 0
[0160.194] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e384, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.194] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e384) returned 0xc
[0160.194] GetClientRect (in: hWnd=0x70036, lpRect=0x53e3d0 | out: lpRect=0x53e3d0) returned 1
[0160.194] GetCurrentObject (hdc=0xf0105ee, type=0x1) returned 0xb00017
[0160.194] GetCurrentObject (hdc=0xf0105ee, type=0x2) returned 0x900010
[0160.194] GetCurrentObject (hdc=0xf0105ee, type=0x7) returned 0x5a0507bb
[0160.194] GetCurrentObject (hdc=0xf0105ee, type=0x6) returned 0x8a01c2
[0160.194] SaveDC (hdc=0xf0105ee) returned 1
[0160.194] GetNearestColor (hdc=0xf0105ee, color=0xff) returned 0xff
[0160.194] CreateSolidBrush (color=0xff) returned 0x6d10078d
[0160.195] FillRect (hDC=0xf0105ee, lprc=0x53e270, hbr=0x6d10078d) returned 1
[0160.195] DeleteObject (ho=0x6d10078d) returned 1
[0160.195] RestoreDC (hdc=0xf0105ee, nSavedDC=-1) returned 1
[0160.195] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.195] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.195] GetSystemMetrics (nIndex=42) returned 0
[0160.195] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e324, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.195] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e324) returned 0xc
[0160.195] GetClientRect (in: hWnd=0x70036, lpRect=0x53e370 | out: lpRect=0x53e370) returned 1
[0160.195] GetCurrentObject (hdc=0xf0105ee, type=0x1) returned 0xb00017
[0160.195] GetCurrentObject (hdc=0xf0105ee, type=0x2) returned 0x900010
[0160.195] GetCurrentObject (hdc=0xf0105ee, type=0x7) returned 0x5a0507bb
[0160.195] GetCurrentObject (hdc=0xf0105ee, type=0x6) returned 0x8a01c2
[0160.195] SaveDC (hdc=0xf0105ee) returned 1
[0160.196] GetNearestColor (hdc=0xf0105ee, color=0xff) returned 0xff
[0160.196] CreateSolidBrush (color=0xff) returned 0x6e10078d
[0160.196] FillRect (hDC=0xf0105ee, lprc=0x53e210, hbr=0x6e10078d) returned 1
[0160.196] DeleteObject (ho=0x6e10078d) returned 1
[0160.196] RestoreDC (hdc=0xf0105ee, nSavedDC=-1) returned 1
[0160.196] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.196] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.196] GetSystemMetrics (nIndex=42) returned 0
[0160.196] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e324, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.196] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e324) returned 0xc
[0160.200] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0160.200] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0160.200] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0160.200] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0160.201] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0160.201] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0160.201] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0160.202] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0160.202] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0160.202] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0160.202] GetSysColorBrush (nIndex=5) returned 0x100079
[0160.204] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e51c | out: lpwndpl=0x53e51c) returned 1
[0160.204] GetClientRect (in: hWnd=0x70036, lpRect=0x53e4c8 | out: lpRect=0x53e4c8) returned 1
[0160.204] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.204] GetSystemMetrics (nIndex=42) returned 0
[0160.204] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e384, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e384) returned 0xc
[0160.204] GetClientRect (in: hWnd=0x70036, lpRect=0x53e3d0 | out: lpRect=0x53e3d0) returned 1
[0160.204] GetCurrentObject (hdc=0x690107b1, type=0x1) returned 0xb00017
[0160.204] GetCurrentObject (hdc=0x690107b1, type=0x2) returned 0x900010
[0160.204] GetCurrentObject (hdc=0x690107b1, type=0x7) returned 0x7b0507a3
[0160.204] GetCurrentObject (hdc=0x690107b1, type=0x6) returned 0x8a01c2
[0160.205] SaveDC (hdc=0x690107b1) returned 1
[0160.205] GetNearestColor (hdc=0x690107b1, color=0xff) returned 0xff
[0160.205] CreateSolidBrush (color=0xff) returned 0x6f10078d
[0160.205] FillRect (hDC=0x690107b1, lprc=0x53e270, hbr=0x6f10078d) returned 1
[0160.205] DeleteObject (ho=0x6f10078d) returned 1
[0160.205] RestoreDC (hdc=0x690107b1, nSavedDC=-1) returned 1
[0160.217] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.217] GetSystemMetrics (nIndex=42) returned 0
[0160.217] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e324, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e324) returned 0xc
[0160.217] GetClientRect (in: hWnd=0x70036, lpRect=0x53e370 | out: lpRect=0x53e370) returned 1
[0160.217] GetCurrentObject (hdc=0x690107b1, type=0x1) returned 0xb00017
[0160.217] GetCurrentObject (hdc=0x690107b1, type=0x2) returned 0x900010
[0160.217] GetCurrentObject (hdc=0x690107b1, type=0x7) returned 0x7b0507a3
[0160.217] GetCurrentObject (hdc=0x690107b1, type=0x6) returned 0x8a01c2
[0160.217] SaveDC (hdc=0x690107b1) returned 1
[0160.217] GetNearestColor (hdc=0x690107b1, color=0xff) returned 0xff
[0160.218] CreateSolidBrush (color=0xff) returned 0x7010078d
[0160.218] FillRect (hDC=0x690107b1, lprc=0x53e210, hbr=0x7010078d) returned 1
[0160.218] DeleteObject (ho=0x7010078d) returned 1
[0160.218] RestoreDC (hdc=0x690107b1, nSavedDC=-1) returned 1
[0160.218] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.218] GetSystemMetrics (nIndex=42) returned 0
[0160.218] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e324, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e324) returned 0xc
[0160.220] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0160.220] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0160.220] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0160.220] GetStockObject (i=5) returned 0x900015
[0160.221] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53eb38 | out: lpwndpl=0x53eb38) returned 1
[0160.227] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x47, wParam=0x0, lParam=0x53ee0c) returned 0x0
[0160.227] GetClientRect (in: hWnd=0x70036, lpRect=0x53eae8 | out: lpRect=0x53eae8) returned 1
[0160.227] GetWindowRect (in: hWnd=0x70036, lpRect=0x53eae8 | out: lpRect=0x53eae8) returned 1
[0160.229] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x47, wParam=0x0, lParam=0x53ee0c) returned 0x0
[0160.230] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x5, wParam=0x0, lParam=0x141023b) returned 0x0
[0160.230] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x3, wParam=0x0, lParam=0x6d0056) returned 0x0
[0160.230] GetClientRect (in: hWnd=0x70036, lpRect=0x53eb18 | out: lpRect=0x53eb18) returned 1
[0160.230] GetWindowRect (in: hWnd=0x70036, lpRect=0x53eb18 | out: lpRect=0x53eb18) returned 1
[0160.230] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.230] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.230] GetSystemMetrics (nIndex=42) returned 0
[0160.230] GetWindowTextW (in: hWnd=0x70036, lpString=0x53ecec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.230] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53ecec) returned 0xc
[0160.230] GdipImageGetFrameDimensionsCount (image=0x5d8f260, count=0x53ecd0) returned 0x0
[0160.230] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x8db2d0
[0160.230] GdipImageGetFrameDimensionsList (image=0x5d8f260, dimensionIDs=0x8db2d0*(Data1=0x102d6, Data2=0xe9f0, Data3=0x88, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0
[0160.231] LocalFree (hMem=0x8db2d0) returned 0x0
[0160.231] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.231] IsWindowUnicode (hWnd=0x102dc) returned 1
[0160.231] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.231] TranslateMessage (lpMsg=0x53eef8) returned 0
[0160.231] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0160.231] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.231] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a1025b) returned 0x1
[0160.232] IsWindowUnicode (hWnd=0x202c6) returned 1
[0160.232] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.232] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a1025b) returned 0x1
[0160.232] SetCursor (hCursor=0x10003) returned 0x10003
[0160.232] TranslateMessage (lpMsg=0x53eef8) returned 0
[0160.232] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0160.232] _TrackMouseEvent (in: lpEventTrack=0x23276fc | out: lpEventTrack=0x23276fc) returned 1
[0160.232] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0160.232] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0160.232] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0160.232] GetKeyState (nVirtKey=1) returned 0
[0160.232] GetKeyState (nVirtKey=2) returned 0
[0160.232] GetKeyState (nVirtKey=4) returned 0
[0160.232] GetKeyState (nVirtKey=5) returned 0
[0160.232] GetKeyState (nVirtKey=6) returned 0
[0160.233] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.233] IsWindowUnicode (hWnd=0x70036) returned 1
[0160.233] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.233] TranslateMessage (lpMsg=0x53eef8) returned 0
[0160.233] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0160.233] BeginPaint (in: hWnd=0x70036, lpPaint=0x53e968 | out: lpPaint=0x53e968) returned 0xf0105ee
[0160.233] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0160.233] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.233] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.233] GetSystemMetrics (nIndex=42) returned 0
[0160.233] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e8f4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.234] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e8f4) returned 0xc
[0160.234] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0160.234] EndPaint (hWnd=0x70036, lpPaint=0x53e964) returned 1
[0160.234] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.234] IsWindowUnicode (hWnd=0x902ba) returned 1
[0160.234] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.234] TranslateMessage (lpMsg=0x53eef8) returned 0
[0160.234] DispatchMessageW (lpMsg=0x53eef8) returned 0x1
[0160.234] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902ba, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0160.236] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0160.236] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0160.236] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0160.236] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0160.243] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.243] IsWindowUnicode (hWnd=0x70030) returned 1
[0160.243] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.243] TranslateMessage (lpMsg=0x53eef8) returned 0
[0160.243] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0160.243] BeginPaint (in: hWnd=0x70030, lpPaint=0x53e988 | out: lpPaint=0x53e988) returned 0x8b010786
[0160.243] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0160.244] CreateCompatibleDC (hdc=0x8b010786) returned 0x3401078e
[0160.244] SelectObject (hdc=0x3401078e, h=0x1b0507b9) returned 0x85000f
[0160.244] GdipCreateFromHDC (hdc=0x3401078e, graphics=0x53e9a0) returned 0x0
[0160.244] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0160.244] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=51, height=60, combineMode=0x0) returned 0x0
[0160.244] GdipCreateMatrix (matrix=0x53e9e8) returned 0x0
[0160.244] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0160.244] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53ea00) returned 0x0
[0160.244] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef58
[0160.244] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ef58) returned 0x0
[0160.244] LocalFree (hMem=0x89ef58) returned 0x0
[0160.245] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0160.245] GdipCreateRegion (region=0x53e9e8) returned 0x0
[0160.245] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0160.245] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e9f4) returned 0x0
[0160.245] GdipSaveGraphics (graphics=0x5da0378, state=0x53ea20) returned 0x0
[0160.245] GetWindowTextLengthW (hWnd=0x70030) returned 0
[0160.245] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0160.245] GetSystemMetrics (nIndex=42) returned 0
[0160.245] GetWindowTextW (in: hWnd=0x70030, lpString=0x53e938, nMaxCount=1 | out: lpString="") returned 0
[0160.245] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0xd, wParam=0x1, lParam=0x53e938) returned 0x0
[0160.245] GetClientRect (in: hWnd=0x70030, lpRect=0x53e9e8 | out: lpRect=0x53e9e8) returned 1
[0160.245] GdipCreateRegion (region=0x53e83c) returned 0x0
[0160.245] GdipGetClip (graphics=0x5da0378, region=0x5d9d988) returned 0x0
[0160.245] GdipCreateMatrix (matrix=0x53e83c) returned 0x0
[0160.245] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0160.245] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e854) returned 0x0
[0160.245] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10
[0160.245] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec10) returned 0x0
[0160.246] LocalFree (hMem=0x89ec10) returned 0x0
[0160.246] GdipCombineRegionRegion (region=0x5d9d988, region2=0x5d9d8f8, combineMode=0x1) returned 0x0
[0160.246] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed60
[0160.246] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ed60) returned 0x0
[0160.246] LocalFree (hMem=0x89ed60) returned 0x0
[0160.246] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0160.246] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e87c) returned 0x0
[0160.246] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e86c) returned 0x0
[0160.246] GdipGetRegionHRgn (region=0x5d9d988, graphics=0x5da0378, hRgn=0x53e86c) returned 0x0
[0160.246] GdipDeleteRegion (region=0x5d9d988) returned 0x0
[0160.246] GdipGetDC (graphics=0x5da0378, hdc=0x53e884) returned 0x0
[0160.246] GetCurrentObject (hdc=0x3401078e, type=0x1) returned 0xb00017
[0160.246] GetCurrentObject (hdc=0x3401078e, type=0x2) returned 0x900010
[0160.246] GetCurrentObject (hdc=0x3401078e, type=0x7) returned 0x1b0507b9
[0160.246] GetCurrentObject (hdc=0x3401078e, type=0x6) returned 0x8a01c2
[0160.246] SaveDC (hdc=0x3401078e) returned 1
[0160.246] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x840407a1
[0160.247] GetClipRgn (hdc=0x3401078e, hrgn=0x840407a1) returned 0
[0160.247] SelectClipRgn (hdc=0x3401078e, hrgn=0x8b040798) returned 2
[0160.247] DeleteObject (ho=0x840407a1) returned 1
[0160.247] DeleteObject (ho=0x8b040798) returned 1
[0160.247] OffsetViewportOrgEx (in: hdc=0x3401078e, x=0, y=0, lppt=0x2327ba0 | out: lppt=0x2327ba0) returned 1
[0160.247] GetNearestColor (hdc=0x3401078e, color=0xff) returned 0xff
[0160.247] CreateSolidBrush (color=0xff) returned 0x7110078d
[0160.247] FillRect (hDC=0x3401078e, lprc=0x53e888, hbr=0x7110078d) returned 1
[0160.247] DeleteObject (ho=0x7110078d) returned 1
[0160.247] RestoreDC (hdc=0x3401078e, nSavedDC=-1) returned 1
[0160.247] GdipReleaseDC (graphics=0x5da0378, hdc=0x3401078e) returned 0x0
[0160.248] GdipRestoreGraphics (graphics=0x5da0378, state=0xfda50dbd) returned 0x0
[0160.248] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0160.248] GetWindowTextLengthW (hWnd=0x70030) returned 0
[0160.248] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0160.248] GetSystemMetrics (nIndex=42) returned 0
[0160.248] GetWindowTextW (in: hWnd=0x70030, lpString=0x53e938, nMaxCount=1 | out: lpString="") returned 0
[0160.248] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0xd, wParam=0x1, lParam=0x53e938) returned 0x0
[0160.248] GdipGetImageWidth (image=0x5d8f260, width=0x53e8bc) returned 0x0
[0160.248] GdipGetImageHeight (image=0x5d8f260, height=0x53e8bc) returned 0x0
[0160.248] GdipDrawImageRectI (graphics=0x5da0378, image=0x5d8f260, x=0, y=0, width=48, height=48) returned 0x0
[0160.249] GdipGetDC (graphics=0x5da0378, hdc=0x53e9e0) returned 0x0
[0160.249] BitBlt (hdc=0x8b010786, x=0, y=0, cx=51, cy=60, hdcSrc=0x3401078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0160.249] GdipReleaseDC (graphics=0x5da0378, hdc=0x3401078e) returned 0x0
[0160.249] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0160.249] SelectObject (hdc=0x3401078e, h=0x85000f) returned 0x1b0507b9
[0160.249] DeleteDC (hdc=0x3401078e) returned 1
[0160.249] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0160.250] EndPaint (hWnd=0x70030, lpPaint=0x53e984) returned 1
[0160.250] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.250] IsWindowUnicode (hWnd=0x6002e) returned 1
[0160.250] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.250] TranslateMessage (lpMsg=0x53eef8) returned 0
[0160.250] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0160.250] BeginPaint (in: hWnd=0x6002e, lpPaint=0x53e94c | out: lpPaint=0x53e94c) returned 0xf0105ee
[0160.250] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0160.250] CreateCompatibleDC (hdc=0xf0105ee) returned 0x3601078e
[0160.250] DeleteObject (ho=0x1b0507b9) returned 1
[0160.251] GetObjectType (h=0xf0105ee) returned 0x3
[0160.251] CreateCompatibleBitmap (hdc=0xf0105ee, cx=1, cy=1) returned 0x54050671
[0160.251] GetDIBits (in: hdc=0xf0105ee, hbm=0x54050671, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x53e43c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x53e43c) returned 1
[0160.251] GetDIBits (in: hdc=0xf0105ee, hbm=0x54050671, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x53e43c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x53e43c) returned 1
[0160.251] DeleteObject (ho=0x54050671) returned 1
[0160.251] CreateDIBSection (in: hdc=0xf0105ee, lpbmi=0x53e48c, usage=0x0, ppvBits=0x53e980, hSection=0x0, offset=0x0 | out: ppvBits=0x53e980) returned 0x1c0507b9
[0160.251] SelectObject (hdc=0x3601078e, h=0x1c0507b9) returned 0x85000f
[0160.252] GdipCreateFromHDC (hdc=0x3601078e, graphics=0x53e964) returned 0x0
[0160.252] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0160.252] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=194, height=32, combineMode=0x0) returned 0x0
[0160.252] GdipCreateMatrix (matrix=0x53e9ac) returned 0x0
[0160.252] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0160.252] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e9c4) returned 0x0
[0160.252] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0160.252] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0160.252] LocalFree (hMem=0x89ee08) returned 0x0
[0160.252] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0160.252] GdipCreateRegion (region=0x53e9ac) returned 0x0
[0160.252] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0160.253] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e9b8) returned 0x0
[0160.253] GdipSaveGraphics (graphics=0x5da0378, state=0x53e9e4) returned 0x0
[0160.253] GetWindowTextLengthW (hWnd=0x6002e) returned 62
[0160.253] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3e
[0160.253] GetSystemMetrics (nIndex=42) returned 0
[0160.253] GetWindowTextW (in: hWnd=0x6002e, lpString=0x53e880, nMaxCount=63 | out: lpString="If you want decrypt your files \r\nyou must have decryption code") returned 62
[0160.253] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0xd, wParam=0x3f, lParam=0x53e880) returned 0x3e
[0160.253] GetClientRect (in: hWnd=0x6002e, lpRect=0x53e9ac | out: lpRect=0x53e9ac) returned 1
[0160.253] GdipCreateRegion (region=0x53e800) returned 0x0
[0160.253] GdipGetClip (graphics=0x5da0378, region=0x5d9d988) returned 0x0
[0160.253] GdipCreateMatrix (matrix=0x53e800) returned 0x0
[0160.253] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0160.253] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e818) returned 0x0
[0160.253] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f000
[0160.253] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89f000) returned 0x0
[0160.253] LocalFree (hMem=0x89f000) returned 0x0
[0160.253] GdipCombineRegionRegion (region=0x5d9d988, region2=0x5d9d8f8, combineMode=0x1) returned 0x0
[0160.253] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e9e0
[0160.254] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89e9e0) returned 0x0
[0160.254] LocalFree (hMem=0x89e9e0) returned 0x0
[0160.254] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0160.254] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e840) returned 0x0
[0160.254] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e830) returned 0x0
[0160.254] GdipGetRegionHRgn (region=0x5d9d988, graphics=0x5da0378, hRgn=0x53e830) returned 0x0
[0160.254] GdipDeleteRegion (region=0x5d9d988) returned 0x0
[0160.261] GdipGetDC (graphics=0x5da0378, hdc=0x53e848) returned 0x0
[0160.261] GetCurrentObject (hdc=0x3601078e, type=0x1) returned 0xb00017
[0160.261] GetCurrentObject (hdc=0x3601078e, type=0x2) returned 0x900010
[0160.261] GetCurrentObject (hdc=0x3601078e, type=0x7) returned 0x1c0507b9
[0160.261] GetCurrentObject (hdc=0x3601078e, type=0x6) returned 0x8a01c2
[0160.261] SaveDC (hdc=0x3601078e) returned 1
[0160.261] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8c040798
[0160.261] GetClipRgn (hdc=0x3601078e, hrgn=0x8c040798) returned 0
[0160.261] SelectClipRgn (hdc=0x3601078e, hrgn=0x850407a1) returned 2
[0160.262] DeleteObject (ho=0x8c040798) returned 1
[0160.262] DeleteObject (ho=0x850407a1) returned 1
[0160.262] OffsetViewportOrgEx (in: hdc=0x3601078e, x=0, y=0, lppt=0x23291a8 | out: lppt=0x23291a8) returned 1
[0160.262] GetNearestColor (hdc=0x3601078e, color=0xff) returned 0xff
[0160.262] CreateSolidBrush (color=0xff) returned 0x7210078d
[0160.262] FillRect (hDC=0x3601078e, lprc=0x53e84c, hbr=0x7210078d) returned 1
[0160.262] DeleteObject (ho=0x7210078d) returned 1
[0160.262] RestoreDC (hdc=0x3601078e, nSavedDC=-1) returned 1
[0160.263] GdipReleaseDC (graphics=0x5da0378, hdc=0x3601078e) returned 0x0
[0160.263] GdipRestoreGraphics (graphics=0x5da0378, state=0xfda30dbd) returned 0x0
[0160.263] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0160.263] GetWindowTextLengthW (hWnd=0x6002e) returned 62
[0160.263] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3e
[0160.263] GetSystemMetrics (nIndex=42) returned 0
[0160.263] GetWindowTextW (in: hWnd=0x6002e, lpString=0x53e880, nMaxCount=63 | out: lpString="If you want decrypt your files \r\nyou must have decryption code") returned 62
[0160.263] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x6002e, Msg=0xd, wParam=0x3f, lParam=0x53e880) returned 0x3e
[0160.263] GdipGetDC (graphics=0x5da0378, hdc=0x53e868) returned 0x0
[0160.263] GetCurrentObject (hdc=0x3601078e, type=0x1) returned 0xb00017
[0160.263] GetCurrentObject (hdc=0x3601078e, type=0x2) returned 0x900010
[0160.263] GetCurrentObject (hdc=0x3601078e, type=0x7) returned 0x1c0507b9
[0160.263] GetCurrentObject (hdc=0x3601078e, type=0x6) returned 0x8a01c2
[0160.263] SaveDC (hdc=0x3601078e) returned 1
[0160.263] GetNearestColor (hdc=0x3601078e, color=0x0) returned 0x0
[0160.263] RestoreDC (hdc=0x3601078e, nSavedDC=-1) returned 1
[0160.264] GdipReleaseDC (graphics=0x5da0378, hdc=0x3601078e) returned 0x0
[0160.264] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0160.264] AdjustWindowRectEx (in: lpRect=0x53e788, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e788) returned 1
[0160.264] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e808) returned 0x0
[0160.264] GdipGetDC (graphics=0x5da0378, hdc=0x53e7f4) returned 0x0
[0160.264] GetCurrentObject (hdc=0x3601078e, type=0x1) returned 0xb00017
[0160.265] GetCurrentObject (hdc=0x3601078e, type=0x2) returned 0x900010
[0160.265] GetCurrentObject (hdc=0x3601078e, type=0x7) returned 0x1c0507b9
[0160.265] GetCurrentObject (hdc=0x3601078e, type=0x6) returned 0x8a01c2
[0160.265] SaveDC (hdc=0x3601078e) returned 1
[0160.265] GetTextAlign (hdc=0x3601078e) returned 0x0
[0160.265] GetTextColor (hdc=0x3601078e) returned 0x0
[0160.265] GetCurrentObject (hdc=0x3601078e, type=0x6) returned 0x8a01c2
[0160.265] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e53c | out: pv=0x53e53c) returned 92
[0160.265] SelectObject (hdc=0x3601078e, h=0x200a0513) returned 0x8a01c2
[0160.265] GetBkMode (hdc=0x3601078e) returned 2
[0160.265] SetBkMode (hdc=0x3601078e, mode=1) returned 2
[0160.265] DrawTextExW (in: hdc=0x3601078e, lpchText="If you want decrypt your files \r\nyou must have decryption code", cchText=62, lprc=0x53e788, format=0x100000, lpdtp=0x232978c | out: lpchText="If you want decrypt your files \r\nyou must have decryption code", lprc=0x53e788) returned 32
[0160.273] RestoreDC (hdc=0x3601078e, nSavedDC=-1) returned 1
[0160.273] GdipReleaseDC (graphics=0x5da0378, hdc=0x3601078e) returned 0x0
[0160.273] GdipGetDC (graphics=0x5da0378, hdc=0x53e9a4) returned 0x0
[0160.273] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=194, cy=32, hdcSrc=0x3601078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0160.273] GdipReleaseDC (graphics=0x5da0378, hdc=0x3601078e) returned 0x0
[0160.273] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0160.273] SelectObject (hdc=0x3601078e, h=0x85000f) returned 0x1c0507b9
[0160.273] DeleteDC (hdc=0x3601078e) returned 1
[0160.273] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0160.273] EndPaint (hWnd=0x6002e, lpPaint=0x53e948) returned 1
[0160.274] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.274] IsWindowUnicode (hWnd=0x202c2) returned 1
[0160.274] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.274] TranslateMessage (lpMsg=0x53eef8) returned 0
[0160.274] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0160.274] BeginPaint (in: hWnd=0x202c2, lpPaint=0x53e94c | out: lpPaint=0x53e94c) returned 0xf0105ee
[0160.274] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0160.274] CreateCompatibleDC (hdc=0xf0105ee) returned 0x3801078e
[0160.274] DeleteObject (ho=0x1c0507b9) returned 1
[0160.275] GetObjectType (h=0xf0105ee) returned 0x3
[0160.275] CreateCompatibleBitmap (hdc=0xf0105ee, cx=1, cy=1) returned 0x56050671
[0160.275] GetDIBits (in: hdc=0xf0105ee, hbm=0x56050671, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x53e43c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x53e43c) returned 1
[0160.275] GetDIBits (in: hdc=0xf0105ee, hbm=0x56050671, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x53e43c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x53e43c) returned 1
[0160.275] DeleteObject (ho=0x56050671) returned 1
[0160.275] CreateDIBSection (in: hdc=0xf0105ee, lpbmi=0x53e48c, usage=0x0, ppvBits=0x53e980, hSection=0x0, offset=0x0 | out: ppvBits=0x53e980) returned 0x1d0507b9
[0160.275] SelectObject (hdc=0x3801078e, h=0x1d0507b9) returned 0x85000f
[0160.276] GdipCreateFromHDC (hdc=0x3801078e, graphics=0x53e964) returned 0x0
[0160.276] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0160.276] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=276, height=20, combineMode=0x0) returned 0x0
[0160.276] GdipCreateMatrix (matrix=0x53e9ac) returned 0x0
[0160.276] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0160.276] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e9c4) returned 0x0
[0160.276] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e9a8
[0160.276] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89e9a8) returned 0x0
[0160.276] LocalFree (hMem=0x89e9a8) returned 0x0
[0160.276] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0160.276] GdipCreateRegion (region=0x53e9ac) returned 0x0
[0160.276] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0160.277] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e9b8) returned 0x0
[0160.277] GdipSaveGraphics (graphics=0x5da0378, state=0x53e9e4) returned 0x0
[0160.277] GetWindowTextLengthW (hWnd=0x202c2) returned 31
[0160.277] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1f
[0160.277] GetSystemMetrics (nIndex=42) returned 0
[0160.277] GetWindowTextW (in: hWnd=0x202c2, lpString=0x53e8c0, nMaxCount=32 | out: lpString="Oops! Your have been encrypted!") returned 31
[0160.277] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0xd, wParam=0x20, lParam=0x53e8c0) returned 0x1f
[0160.277] GetClientRect (in: hWnd=0x202c2, lpRect=0x53e9ac | out: lpRect=0x53e9ac) returned 1
[0160.277] GdipCreateRegion (region=0x53e800) returned 0x0
[0160.277] GdipGetClip (graphics=0x5da0378, region=0x5d9d988) returned 0x0
[0160.277] GdipCreateMatrix (matrix=0x53e800) returned 0x0
[0160.277] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0160.277] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e818) returned 0x0
[0160.277] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0160.277] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0160.277] LocalFree (hMem=0x89eac0) returned 0x0
[0160.277] GdipCombineRegionRegion (region=0x5d9d988, region2=0x5d9d8f8, combineMode=0x1) returned 0x0
[0160.278] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0160.278] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0160.278] LocalFree (hMem=0x89ee08) returned 0x0
[0160.278] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0160.278] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e840) returned 0x0
[0160.278] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e830) returned 0x0
[0160.278] GdipGetRegionHRgn (region=0x5d9d988, graphics=0x5da0378, hRgn=0x53e830) returned 0x0
[0160.278] GdipDeleteRegion (region=0x5d9d988) returned 0x0
[0160.278] GdipGetDC (graphics=0x5da0378, hdc=0x53e848) returned 0x0
[0160.278] GetCurrentObject (hdc=0x3801078e, type=0x1) returned 0xb00017
[0160.278] GetCurrentObject (hdc=0x3801078e, type=0x2) returned 0x900010
[0160.278] GetCurrentObject (hdc=0x3801078e, type=0x7) returned 0x1d0507b9
[0160.278] GetCurrentObject (hdc=0x3801078e, type=0x6) returned 0x8a01c2
[0160.278] SaveDC (hdc=0x3801078e) returned 1
[0160.278] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x860407a1
[0160.278] GetClipRgn (hdc=0x3801078e, hrgn=0x860407a1) returned 0
[0160.278] SelectClipRgn (hdc=0x3801078e, hrgn=0x8e040798) returned 2
[0160.279] DeleteObject (ho=0x860407a1) returned 1
[0160.279] DeleteObject (ho=0x8e040798) returned 1
[0160.279] OffsetViewportOrgEx (in: hdc=0x3801078e, x=0, y=0, lppt=0x232ac68 | out: lppt=0x232ac68) returned 1
[0160.279] GetNearestColor (hdc=0x3801078e, color=0xff) returned 0xff
[0160.279] CreateSolidBrush (color=0xff) returned 0x7310078d
[0160.279] FillRect (hDC=0x3801078e, lprc=0x53e84c, hbr=0x7310078d) returned 1
[0160.279] DeleteObject (ho=0x7310078d) returned 1
[0160.279] RestoreDC (hdc=0x3801078e, nSavedDC=-1) returned 1
[0160.280] GdipReleaseDC (graphics=0x5da0378, hdc=0x3801078e) returned 0x0
[0160.280] GdipRestoreGraphics (graphics=0x5da0378, state=0xfda10dbd) returned 0x0
[0160.280] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0160.280] GetWindowTextLengthW (hWnd=0x202c2) returned 31
[0160.280] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1f
[0160.280] GetSystemMetrics (nIndex=42) returned 0
[0160.280] GetWindowTextW (in: hWnd=0x202c2, lpString=0x53e8c0, nMaxCount=32 | out: lpString="Oops! Your have been encrypted!") returned 31
[0160.280] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202c2, Msg=0xd, wParam=0x20, lParam=0x53e8c0) returned 0x1f
[0160.280] GdipGetDC (graphics=0x5da0378, hdc=0x53e868) returned 0x0
[0160.280] GetCurrentObject (hdc=0x3801078e, type=0x1) returned 0xb00017
[0160.280] GetCurrentObject (hdc=0x3801078e, type=0x2) returned 0x900010
[0160.280] GetCurrentObject (hdc=0x3801078e, type=0x7) returned 0x1d0507b9
[0160.280] GetCurrentObject (hdc=0x3801078e, type=0x6) returned 0x8a01c2
[0160.280] SaveDC (hdc=0x3801078e) returned 1
[0160.280] GetNearestColor (hdc=0x3801078e, color=0x0) returned 0x0
[0160.280] RestoreDC (hdc=0x3801078e, nSavedDC=-1) returned 1
[0160.280] GdipReleaseDC (graphics=0x5da0378, hdc=0x3801078e) returned 0x0
[0160.283] AdjustWindowRectEx (in: lpRect=0x53e788, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e788) returned 1
[0160.283] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e808) returned 0x0
[0160.283] GdipGetDC (graphics=0x5da0378, hdc=0x53e7f4) returned 0x0
[0160.283] GetCurrentObject (hdc=0x3801078e, type=0x1) returned 0xb00017
[0160.283] GetCurrentObject (hdc=0x3801078e, type=0x2) returned 0x900010
[0160.284] GetCurrentObject (hdc=0x3801078e, type=0x7) returned 0x1d0507b9
[0160.284] GetCurrentObject (hdc=0x3801078e, type=0x6) returned 0x8a01c2
[0160.284] SaveDC (hdc=0x3801078e) returned 1
[0160.284] GetTextAlign (hdc=0x3801078e) returned 0x0
[0160.284] GetTextColor (hdc=0x3801078e) returned 0x0
[0160.284] GetCurrentObject (hdc=0x3801078e, type=0x6) returned 0x8a01c2
[0160.291] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e53c | out: pv=0x53e53c) returned 92
[0160.291] SelectObject (hdc=0x3801078e, h=0x9e0a04fe) returned 0x8a01c2
[0160.292] GetBkMode (hdc=0x3801078e) returned 2
[0160.292] SetBkMode (hdc=0x3801078e, mode=1) returned 2
[0160.292] DrawTextExW (in: hdc=0x3801078e, lpchText="Oops! Your have been encrypted!", cchText=31, lprc=0x53e788, format=0x100000, lpdtp=0x232b18c | out: lpchText="Oops! Your have been encrypted!", lprc=0x53e788) returned 20
[0160.322] RestoreDC (hdc=0x3801078e, nSavedDC=-1) returned 1
[0160.322] GdipReleaseDC (graphics=0x5da0378, hdc=0x3801078e) returned 0x0
[0160.322] GdipGetDC (graphics=0x5da0378, hdc=0x53e9a4) returned 0x0
[0160.322] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=276, cy=20, hdcSrc=0x3801078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0160.322] GdipReleaseDC (graphics=0x5da0378, hdc=0x3801078e) returned 0x0
[0160.322] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0160.322] SelectObject (hdc=0x3801078e, h=0x85000f) returned 0x1d0507b9
[0160.322] DeleteDC (hdc=0x3801078e) returned 1
[0160.322] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0160.322] EndPaint (hWnd=0x202c2, lpPaint=0x53e948) returned 1
[0160.323] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.323] IsWindowUnicode (hWnd=0x8005c) returned 1
[0160.323] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.323] TranslateMessage (lpMsg=0x53eef8) returned 0
[0160.323] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0160.323] BeginPaint (in: hWnd=0x8005c, lpPaint=0x53e94c | out: lpPaint=0x53e94c) returned 0xf0105ee
[0160.323] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0160.324] CreateCompatibleDC (hdc=0xf0105ee) returned 0x3a01078e
[0160.324] SelectObject (hdc=0x3a01078e, h=0x1d0507b9) returned 0x85000f
[0160.324] GdipCreateFromHDC (hdc=0x3a01078e, graphics=0x53e964) returned 0x0
[0160.324] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0160.324] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=29, height=13, combineMode=0x0) returned 0x0
[0160.324] GdipCreateMatrix (matrix=0x53e9ac) returned 0x0
[0160.324] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0160.324] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e9c4) returned 0x0
[0160.324] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ebd8) returned 0x0
[0160.324] LocalFree (hMem=0x89ebd8) returned 0x0
[0160.324] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0160.325] GdipCreateRegion (region=0x53e9ac) returned 0x0
[0160.325] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0160.325] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e9b8) returned 0x0
[0160.325] GdipSaveGraphics (graphics=0x5da0378, state=0x53e9e4) returned 0x0
[0160.325] GetWindowTextLengthW (hWnd=0x8005c) returned 4
[0160.325] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4
[0160.325] GetSystemMetrics (nIndex=42) returned 0
[0160.325] GetWindowTextW (in: hWnd=0x8005c, lpString=0x53e8f4, nMaxCount=5 | out: lpString="Path") returned 4
[0160.325] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0xd, wParam=0x5, lParam=0x53e8f4) returned 0x4
[0160.325] GetClientRect (in: hWnd=0x8005c, lpRect=0x53e9ac | out: lpRect=0x53e9ac) returned 1
[0160.325] GdipCreateRegion (region=0x53e800) returned 0x0
[0160.325] GdipGetClip (graphics=0x5da0378, region=0x5d9d988) returned 0x0
[0160.325] GdipCreateMatrix (matrix=0x53e800) returned 0x0
[0160.325] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0160.325] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e818) returned 0x0
[0160.325] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ebd8
[0160.326] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ebd8) returned 0x0
[0160.326] LocalFree (hMem=0x89ebd8) returned 0x0
[0160.326] GdipCombineRegionRegion (region=0x5d9d988, region2=0x5d9d8f8, combineMode=0x1) returned 0x0
[0160.326] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec48
[0160.326] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec48) returned 0x0
[0160.326] LocalFree (hMem=0x89ec48) returned 0x0
[0160.326] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0160.326] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e840) returned 0x0
[0160.326] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e830) returned 0x0
[0160.326] GdipGetRegionHRgn (region=0x5d9d988, graphics=0x5da0378, hRgn=0x53e830) returned 0x0
[0160.326] GdipDeleteRegion (region=0x5d9d988) returned 0x0
[0160.326] GdipGetDC (graphics=0x5da0378, hdc=0x53e848) returned 0x0
[0160.326] GetCurrentObject (hdc=0x3a01078e, type=0x1) returned 0xb00017
[0160.326] GetCurrentObject (hdc=0x3a01078e, type=0x2) returned 0x900010
[0160.326] GetCurrentObject (hdc=0x3a01078e, type=0x7) returned 0x1d0507b9
[0160.326] GetCurrentObject (hdc=0x3a01078e, type=0x6) returned 0x8a01c2
[0160.327] SaveDC (hdc=0x3a01078e) returned 1
[0160.327] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8f040798
[0160.327] GetClipRgn (hdc=0x3a01078e, hrgn=0x8f040798) returned 0
[0160.327] SelectClipRgn (hdc=0x3a01078e, hrgn=0x880407a1) returned 2
[0160.327] DeleteObject (ho=0x8f040798) returned 1
[0160.327] DeleteObject (ho=0x880407a1) returned 1
[0160.327] OffsetViewportOrgEx (in: hdc=0x3a01078e, x=0, y=0, lppt=0x232b59c | out: lppt=0x232b59c) returned 1
[0160.327] GetNearestColor (hdc=0x3a01078e, color=0xff) returned 0xff
[0160.327] CreateSolidBrush (color=0xff) returned 0x7410078d
[0160.327] FillRect (hDC=0x3a01078e, lprc=0x53e84c, hbr=0x7410078d) returned 1
[0160.327] DeleteObject (ho=0x7410078d) returned 1
[0160.327] RestoreDC (hdc=0x3a01078e, nSavedDC=-1) returned 1
[0160.327] GdipReleaseDC (graphics=0x5da0378, hdc=0x3a01078e) returned 0x0
[0160.327] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd9f0dbd) returned 0x0
[0160.328] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0160.328] GetWindowTextLengthW (hWnd=0x8005c) returned 4
[0160.328] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4
[0160.328] GetSystemMetrics (nIndex=42) returned 0
[0160.328] GetWindowTextW (in: hWnd=0x8005c, lpString=0x53e8f4, nMaxCount=5 | out: lpString="Path") returned 4
[0160.328] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x8005c, Msg=0xd, wParam=0x5, lParam=0x53e8f4) returned 0x4
[0160.328] GdipGetDC (graphics=0x5da0378, hdc=0x53e868) returned 0x0
[0160.328] GetCurrentObject (hdc=0x3a01078e, type=0x1) returned 0xb00017
[0160.328] GetCurrentObject (hdc=0x3a01078e, type=0x2) returned 0x900010
[0160.328] GetCurrentObject (hdc=0x3a01078e, type=0x7) returned 0x1d0507b9
[0160.328] GetCurrentObject (hdc=0x3a01078e, type=0x6) returned 0x8a01c2
[0160.328] SaveDC (hdc=0x3a01078e) returned 1
[0160.328] GetNearestColor (hdc=0x3a01078e, color=0x0) returned 0x0
[0160.328] RestoreDC (hdc=0x3a01078e, nSavedDC=-1) returned 1
[0160.328] GdipReleaseDC (graphics=0x5da0378, hdc=0x3a01078e) returned 0x0
[0160.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0160.329] AdjustWindowRectEx (in: lpRect=0x53e788, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e788) returned 1
[0160.329] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e808) returned 0x0
[0160.329] GdipGetDC (graphics=0x5da0378, hdc=0x53e7f4) returned 0x0
[0160.329] GetCurrentObject (hdc=0x3a01078e, type=0x1) returned 0xb00017
[0160.329] GetCurrentObject (hdc=0x3a01078e, type=0x2) returned 0x900010
[0160.330] GetCurrentObject (hdc=0x3a01078e, type=0x7) returned 0x1d0507b9
[0160.330] GetCurrentObject (hdc=0x3a01078e, type=0x6) returned 0x8a01c2
[0160.330] SaveDC (hdc=0x3a01078e) returned 1
[0160.330] GetTextAlign (hdc=0x3a01078e) returned 0x0
[0160.330] GetTextColor (hdc=0x3a01078e) returned 0x0
[0160.330] GetCurrentObject (hdc=0x3a01078e, type=0x6) returned 0x8a01c2
[0160.336] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e53c | out: pv=0x53e53c) returned 92
[0160.336] SelectObject (hdc=0x3a01078e, h=0x730a066d) returned 0x8a01c2
[0160.336] GetBkMode (hdc=0x3a01078e) returned 2
[0160.336] SetBkMode (hdc=0x3a01078e, mode=1) returned 2
[0160.336] DrawTextExW (in: hdc=0x3a01078e, lpchText="Path", cchText=4, lprc=0x53e788, format=0x100000, lpdtp=0x232ba24 | out: lpchText="Path", lprc=0x53e788) returned 13
[0160.337] RestoreDC (hdc=0x3a01078e, nSavedDC=-1) returned 1
[0160.337] GdipReleaseDC (graphics=0x5da0378, hdc=0x3a01078e) returned 0x0
[0160.337] GdipGetDC (graphics=0x5da0378, hdc=0x53e9a4) returned 0x0
[0160.337] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=29, cy=13, hdcSrc=0x3a01078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0160.337] GdipReleaseDC (graphics=0x5da0378, hdc=0x3a01078e) returned 0x0
[0160.337] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0160.337] SelectObject (hdc=0x3a01078e, h=0x85000f) returned 0x1d0507b9
[0160.337] DeleteDC (hdc=0x3a01078e) returned 1
[0160.337] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0160.337] EndPaint (hWnd=0x8005c, lpPaint=0x53e948) returned 1
[0160.338] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.338] IsWindowUnicode (hWnd=0x502b2) returned 1
[0160.338] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.338] TranslateMessage (lpMsg=0x53eef8) returned 0
[0160.338] DispatchMessageW (lpMsg=0x53eef8) returned 0x1
[0160.338] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502b2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0160.339] SetTextColor (hdc=0x6a0107b1, color=0x0) returned 0x0
[0160.339] SetBkColor (hdc=0x6a0107b1, color=0xffffff) returned 0xffffff
[0160.339] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.340] IsWindowUnicode (hWnd=0x202c6) returned 1
[0160.340] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.340] TranslateMessage (lpMsg=0x53eef8) returned 0
[0160.340] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0160.340] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0160.340] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0160.340] CreateCompatibleDC (hdc=0xf0105ee) returned 0x3d01078e
[0160.340] SelectObject (hdc=0x3d01078e, h=0x1d0507b9) returned 0x85000f
[0160.340] GdipCreateFromHDC (hdc=0x3d01078e, graphics=0x53e958) returned 0x0
[0160.340] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0160.340] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0160.340] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0160.340] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0160.341] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e9b8) returned 0x0
[0160.341] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb68
[0160.341] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eb68) returned 0x0
[0160.341] LocalFree (hMem=0x89eb68) returned 0x0
[0160.341] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0160.341] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0160.341] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0160.341] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e9ac) returned 0x0
[0160.341] GdipSaveGraphics (graphics=0x5da0378, state=0x53e9d8) returned 0x0
[0160.341] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd9d0dbd) returned 0x0
[0160.341] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0160.346] GdipGetDC (graphics=0x5da0378, hdc=0x53e7b8) returned 0x0
[0160.346] GetCurrentObject (hdc=0x3d01078e, type=0x1) returned 0xb00017
[0160.346] GetCurrentObject (hdc=0x3d01078e, type=0x2) returned 0x900010
[0160.346] GetCurrentObject (hdc=0x3d01078e, type=0x7) returned 0x1d0507b9
[0160.346] GetCurrentObject (hdc=0x3d01078e, type=0x6) returned 0x8a01c2
[0160.347] SaveDC (hdc=0x3d01078e) returned 1
[0160.347] GetNearestColor (hdc=0x3d01078e, color=0xff) returned 0xff
[0160.347] GetNearestColor (hdc=0x3d01078e, color=0x55) returned 0x55
[0160.347] GetNearestColor (hdc=0x3d01078e, color=0x0) returned 0x0
[0160.347] GetNearestColor (hdc=0x3d01078e, color=0x55) returned 0x55
[0160.347] GetNearestColor (hdc=0x3d01078e, color=0x0) returned 0x0
[0160.347] GetNearestColor (hdc=0x3d01078e, color=0x8080ff) returned 0x8080ff
[0160.347] GetNearestColor (hdc=0x3d01078e, color=0x7373e5) returned 0x7373e5
[0160.347] GetNearestColor (hdc=0x3d01078e, color=0xe5) returned 0xe5
[0160.347] GetNearestColor (hdc=0x3d01078e, color=0x0) returned 0x0
[0160.347] RestoreDC (hdc=0x3d01078e, nSavedDC=-1) returned 1
[0160.347] GdipReleaseDC (graphics=0x5da0378, hdc=0x3d01078e) returned 0x0
[0160.347] IsAppThemed () returned 0x1
[0160.348] GetThemeAppProperties () returned 0x3
[0160.348] GetThemeAppProperties () returned 0x3
[0160.348] IsAppThemed () returned 0x1
[0160.348] GetThemeAppProperties () returned 0x3
[0160.348] GetThemeAppProperties () returned 0x3
[0160.348] GdipGetFamilyName (in: family=0x4a482c8, name=0x53e574, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0
[0160.348] GetDeviceCaps (hdc=0x600101a2, index=90) returned 96
[0160.348] CoTaskMemAlloc (cb=0x5c) returned 0x8860f0
[0160.348] CreateFontIndirectW (lplf=0x8860f0) returned 0x450a0799
[0160.348] CoTaskMemFree (pv=0x8860f0)
[0160.348] GetObjectW (in: h=0x450a0799, c=92, pv=0x53e538 | out: pv=0x53e538) returned 92
[0160.348] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0160.349] GetMapMode (hdc=0x600101a2) returned 1
[0160.349] GetTextMetricsW (in: hdc=0x600101a2, lptm=0x53e568 | out: lptm=0x53e568) returned 1
[0160.349] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x232c2fc | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0160.411] IsAppThemed () returned 0x1
[0160.411] GetThemeAppProperties () returned 0x3
[0160.411] GetThemeAppProperties () returned 0x3
[0160.411] IsAppThemed () returned 0x1
[0160.412] GetThemeAppProperties () returned 0x3
[0160.412] GetThemeAppProperties () returned 0x3
[0160.412] IsAppThemed () returned 0x1
[0160.412] GetThemeAppProperties () returned 0x3
[0160.412] GetThemeAppProperties () returned 0x3
[0160.412] IsAppThemed () returned 0x1
[0160.412] GetThemeAppProperties () returned 0x3
[0160.412] GetThemeAppProperties () returned 0x3
[0160.412] IsThemePartDefined () returned 0x1
[0160.412] IsAppThemed () returned 0x1
[0160.412] GetThemeAppProperties () returned 0x3
[0160.412] GetThemeAppProperties () returned 0x3
[0160.412] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0160.412] IsAppThemed () returned 0x1
[0160.412] GetThemeAppProperties () returned 0x3
[0160.412] GetThemeAppProperties () returned 0x3
[0160.412] IsAppThemed () returned 0x1
[0160.412] GetThemeAppProperties () returned 0x3
[0160.412] GetThemeAppProperties () returned 0x3
[0160.412] IsThemePartDefined () returned 0x1
[0160.413] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0160.413] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0160.413] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0160.413] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0160.413] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e6d4) returned 0x0
[0160.413] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed60
[0160.413] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ed60) returned 0x0
[0160.413] LocalFree (hMem=0x89ed60) returned 0x0
[0160.413] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e9e0
[0160.413] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89e9e0) returned 0x0
[0160.413] LocalFree (hMem=0x89e9e0) returned 0x0
[0160.413] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0160.413] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6fc) returned 0x0
[0160.413] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6ec) returned 0x0
[0160.414] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e6ec) returned 0x0
[0160.414] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0160.414] GdipGetDC (graphics=0x5da0378, hdc=0x53e704) returned 0x0
[0160.414] GetCurrentObject (hdc=0x3d01078e, type=0x1) returned 0xb00017
[0160.414] GetCurrentObject (hdc=0x3d01078e, type=0x2) returned 0x900010
[0160.414] GetCurrentObject (hdc=0x3d01078e, type=0x7) returned 0x1d0507b9
[0160.414] GetCurrentObject (hdc=0x3d01078e, type=0x6) returned 0x8a01c2
[0160.414] SaveDC (hdc=0x3d01078e) returned 1
[0160.414] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8a0407a1
[0160.414] GetClipRgn (hdc=0x3d01078e, hrgn=0x8a0407a1) returned 0
[0160.414] SelectClipRgn (hdc=0x3d01078e, hrgn=0x93040798) returned 2
[0160.414] DeleteObject (ho=0x8a0407a1) returned 1
[0160.414] DeleteObject (ho=0x93040798) returned 1
[0160.414] OffsetViewportOrgEx (in: hdc=0x3d01078e, x=0, y=0, lppt=0x2330874 | out: lppt=0x2330874) returned 1
[0160.414] DrawThemeParentBackground () returned 0x0
[0160.415] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0160.415] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0160.415] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.415] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.415] GetSystemMetrics (nIndex=42) returned 0
[0160.415] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.415] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0160.415] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0160.415] GetCurrentObject (hdc=0x3d01078e, type=0x1) returned 0xb00017
[0160.415] GetCurrentObject (hdc=0x3d01078e, type=0x2) returned 0x900010
[0160.415] GetCurrentObject (hdc=0x3d01078e, type=0x7) returned 0x1d0507b9
[0160.415] GetCurrentObject (hdc=0x3d01078e, type=0x6) returned 0x8a01c2
[0160.415] SaveDC (hdc=0x3d01078e) returned 2
[0160.416] GetNearestColor (hdc=0x3d01078e, color=0xff) returned 0xff
[0160.416] CreateSolidBrush (color=0xff) returned 0x7510078d
[0160.416] FillRect (hDC=0x3d01078e, lprc=0x53e120, hbr=0x7510078d) returned 1
[0160.416] DeleteObject (ho=0x7510078d) returned 1
[0160.416] RestoreDC (hdc=0x3d01078e, nSavedDC=-1) returned 1
[0160.416] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.416] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.416] GetSystemMetrics (nIndex=42) returned 0
[0160.416] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.417] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0160.417] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0160.417] GetCurrentObject (hdc=0x3d01078e, type=0x1) returned 0xb00017
[0160.417] GetCurrentObject (hdc=0x3d01078e, type=0x2) returned 0x900010
[0160.417] GetCurrentObject (hdc=0x3d01078e, type=0x7) returned 0x1d0507b9
[0160.417] GetCurrentObject (hdc=0x3d01078e, type=0x6) returned 0x8a01c2
[0160.417] SaveDC (hdc=0x3d01078e) returned 2
[0160.417] GetNearestColor (hdc=0x3d01078e, color=0xff) returned 0xff
[0160.417] CreateSolidBrush (color=0xff) returned 0x7610078d
[0160.417] FillRect (hDC=0x3d01078e, lprc=0x53e0c0, hbr=0x7610078d) returned 1
[0160.417] DeleteObject (ho=0x7610078d) returned 1
[0160.417] RestoreDC (hdc=0x3d01078e, nSavedDC=-1) returned 1
[0160.418] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.418] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.418] GetSystemMetrics (nIndex=42) returned 0
[0160.418] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.418] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0160.418] RestoreDC (hdc=0x3d01078e, nSavedDC=-1) returned 1
[0160.418] GdipReleaseDC (graphics=0x5da0378, hdc=0x3d01078e) returned 0x0
[0160.418] IsAppThemed () returned 0x1
[0160.418] GetThemeAppProperties () returned 0x3
[0160.418] GetThemeAppProperties () returned 0x3
[0160.418] IsAppThemed () returned 0x1
[0160.418] GetThemeAppProperties () returned 0x3
[0160.418] GetThemeAppProperties () returned 0x3
[0160.418] IsThemePartDefined () returned 0x1
[0160.419] GdipCreateRegion (region=0x53e640) returned 0x0
[0160.419] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0160.419] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0160.419] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0160.419] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e658) returned 0x0
[0160.419] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e9e0
[0160.419] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89e9e0) returned 0x0
[0160.419] LocalFree (hMem=0x89e9e0) returned 0x0
[0160.419] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0160.419] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0160.419] LocalFree (hMem=0x89ec80) returned 0x0
[0160.419] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0160.419] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e680) returned 0x0
[0160.419] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e670) returned 0x0
[0160.420] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e670) returned 0x0
[0160.420] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0160.420] GdipGetDC (graphics=0x5da0378, hdc=0x53e688) returned 0x0
[0160.420] GetCurrentObject (hdc=0x3d01078e, type=0x1) returned 0xb00017
[0160.420] GetCurrentObject (hdc=0x3d01078e, type=0x2) returned 0x900010
[0160.420] GetCurrentObject (hdc=0x3d01078e, type=0x7) returned 0x1d0507b9
[0160.420] GetCurrentObject (hdc=0x3d01078e, type=0x6) returned 0x8a01c2
[0160.420] SaveDC (hdc=0x3d01078e) returned 1
[0160.420] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x94040798
[0160.420] GetClipRgn (hdc=0x3d01078e, hrgn=0x94040798) returned 0
[0160.420] SelectClipRgn (hdc=0x3d01078e, hrgn=0x8c0407a1) returned 2
[0160.420] DeleteObject (ho=0x94040798) returned 1
[0160.420] DeleteObject (ho=0x8c0407a1) returned 1
[0160.420] OffsetViewportOrgEx (in: hdc=0x3d01078e, x=0, y=0, lppt=0x23310d8 | out: lppt=0x23310d8) returned 1
[0160.420] IsAppThemed () returned 0x1
[0160.444] GetThemeAppProperties () returned 0x3
[0160.444] GetThemeAppProperties () returned 0x3
[0160.444] DrawThemeBackground () returned 0x0
[0160.444] RestoreDC (hdc=0x3d01078e, nSavedDC=-1) returned 1
[0160.444] GdipReleaseDC (graphics=0x5da0378, hdc=0x3d01078e) returned 0x0
[0160.444] GdipCreateRegion (region=0x53e644) returned 0x0
[0160.444] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0160.444] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0160.444] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0160.445] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e65c) returned 0x0
[0160.445] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f038
[0160.445] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89f038) returned 0x0
[0160.445] LocalFree (hMem=0x89f038) returned 0x0
[0160.445] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89edd0
[0160.445] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89edd0) returned 0x0
[0160.445] LocalFree (hMem=0x89edd0) returned 0x0
[0160.445] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0160.445] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e684) returned 0x0
[0160.445] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e674) returned 0x0
[0160.445] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e674) returned 0x0
[0160.445] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0160.445] GdipGetDC (graphics=0x5da0378, hdc=0x53e68c) returned 0x0
[0160.445] GetCurrentObject (hdc=0x3d01078e, type=0x1) returned 0xb00017
[0160.445] GetCurrentObject (hdc=0x3d01078e, type=0x2) returned 0x900010
[0160.445] GetCurrentObject (hdc=0x3d01078e, type=0x7) returned 0x1d0507b9
[0160.445] GetCurrentObject (hdc=0x3d01078e, type=0x6) returned 0x8a01c2
[0160.446] SaveDC (hdc=0x3d01078e) returned 1
[0160.446] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8d0407a1
[0160.446] GetClipRgn (hdc=0x3d01078e, hrgn=0x8d0407a1) returned 0
[0160.446] SelectClipRgn (hdc=0x3d01078e, hrgn=0x95040798) returned 2
[0160.446] DeleteObject (ho=0x8d0407a1) returned 1
[0160.446] DeleteObject (ho=0x95040798) returned 1
[0160.446] OffsetViewportOrgEx (in: hdc=0x3d01078e, x=0, y=0, lppt=0x23313ac | out: lppt=0x23313ac) returned 1
[0160.446] IsAppThemed () returned 0x1
[0160.446] GetThemeAppProperties () returned 0x3
[0160.446] GetThemeAppProperties () returned 0x3
[0160.446] GetThemeBackgroundContentRect () returned 0x0
[0160.446] RestoreDC (hdc=0x3d01078e, nSavedDC=-1) returned 1
[0160.446] GdipReleaseDC (graphics=0x5da0378, hdc=0x3d01078e) returned 0x0
[0160.446] IsAppThemed () returned 0x1
[0160.446] GetThemeAppProperties () returned 0x3
[0160.447] GetThemeAppProperties () returned 0x3
[0160.447] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e7c0) returned 0x0
[0160.447] GdipGetDC (graphics=0x5da0378, hdc=0x53e7ac) returned 0x0
[0160.447] GetCurrentObject (hdc=0x3d01078e, type=0x1) returned 0xb00017
[0160.447] GetCurrentObject (hdc=0x3d01078e, type=0x2) returned 0x900010
[0160.447] GetCurrentObject (hdc=0x3d01078e, type=0x7) returned 0x1d0507b9
[0160.447] GetCurrentObject (hdc=0x3d01078e, type=0x6) returned 0x8a01c2
[0160.447] SaveDC (hdc=0x3d01078e) returned 1
[0160.447] GetTextAlign (hdc=0x3d01078e) returned 0x0
[0160.447] GetTextColor (hdc=0x3d01078e) returned 0x0
[0160.447] GetCurrentObject (hdc=0x3d01078e, type=0x6) returned 0x8a01c2
[0160.447] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0160.447] SelectObject (hdc=0x3d01078e, h=0x450a0799) returned 0x8a01c2
[0160.448] GetBkMode (hdc=0x3d01078e) returned 2
[0160.448] SetBkMode (hdc=0x3d01078e, mode=1) returned 2
[0160.448] DrawTextExW (in: hdc=0x3d01078e, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x233174c | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0160.448] DrawTextExW (in: hdc=0x3d01078e, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x233174c | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0160.452] RestoreDC (hdc=0x3d01078e, nSavedDC=-1) returned 1
[0160.452] GdipReleaseDC (graphics=0x5da0378, hdc=0x3d01078e) returned 0x0
[0160.452] GetFocus () returned 0x70036
[0160.452] IsAppThemed () returned 0x1
[0160.452] GetThemeAppProperties () returned 0x3
[0160.452] GetThemeAppProperties () returned 0x3
[0160.452] GdipGetDC (graphics=0x5da0378, hdc=0x53e998) returned 0x0
[0160.452] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x3d01078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0160.453] GdipReleaseDC (graphics=0x5da0378, hdc=0x3d01078e) returned 0x0
[0160.453] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0160.453] SelectObject (hdc=0x3d01078e, h=0x85000f) returned 0x1d0507b9
[0160.453] DeleteDC (hdc=0x3d01078e) returned 1
[0160.453] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0160.453] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0160.453] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.453] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a1025b) returned 0x1
[0160.454] IsWindowUnicode (hWnd=0x202c6) returned 1
[0160.454] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.454] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a1025b) returned 0x1
[0160.454] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0160.454] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x1340205) returned 0x0
[0160.454] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0160.454] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0160.454] SetCursor (hCursor=0x10003) returned 0x10003
[0160.454] TranslateMessage (lpMsg=0x53eef8) returned 0
[0160.454] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0160.455] GetKeyState (nVirtKey=1) returned -127
[0160.455] GetKeyState (nVirtKey=2) returned 0
[0160.455] GetKeyState (nVirtKey=4) returned 0
[0160.455] GetKeyState (nVirtKey=5) returned 0
[0160.455] GetKeyState (nVirtKey=6) returned 0
[0160.455] IsWindowVisible (hWnd=0x202c6) returned 1
[0160.455] IsWindowEnabled (hWnd=0x202c6) returned 1
[0160.455] SetFocus (hWnd=0x202c6) returned 0x70036
[0160.455] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0160.455] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0160.456] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0160.457] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0160.457] GetStockObject (i=5) returned 0x900015
[0160.457] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0160.457] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8db0a8) returned 0x7
[0160.457] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0160.458] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e4cc) returned 0x0
[0160.458] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e4cc) returned 0x0
[0160.458] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0160.458] GetFocus () returned 0x202c6
[0160.458] GetFocus () returned 0x202c6
[0160.458] GetFocus () returned 0x202c6
[0160.458] GetKeyState (nVirtKey=1) returned -127
[0160.458] GetKeyState (nVirtKey=2) returned 0
[0160.458] GetKeyState (nVirtKey=4) returned 0
[0160.458] GetKeyState (nVirtKey=5) returned 0
[0160.458] GetKeyState (nVirtKey=6) returned 0
[0160.458] GetCapture () returned 0x0
[0160.458] SetCapture (hWnd=0x202c6) returned 0x0
[0160.458] GetKeyState (nVirtKey=1) returned -127
[0160.458] GetKeyState (nVirtKey=2) returned 0
[0160.459] GetKeyState (nVirtKey=4) returned 0
[0160.459] GetKeyState (nVirtKey=5) returned 0
[0160.459] GetKeyState (nVirtKey=6) returned 0
[0160.459] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0160.459] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0160.459] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.459] IsWindowUnicode (hWnd=0x202c6) returned 1
[0160.459] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0160.459] TranslateMessage (lpMsg=0x53eef8) returned 0
[0160.459] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0160.459] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2331958, cPoints=0x1 | out: lpPoints=0x2331958) returned 25690608
[0160.459] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0160.459] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0160.459] UpdateWindow (hWnd=0x202c6) returned 1
[0160.459] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0160.460] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0160.460] CreateCompatibleDC (hdc=0xf0105ee) returned 0x3e01078e
[0160.460] SelectObject (hdc=0x3e01078e, h=0x1d0507b9) returned 0x85000f
[0160.460] GdipCreateFromHDC (hdc=0x3e01078e, graphics=0x53e5f0) returned 0x0
[0160.460] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0160.460] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0160.460] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0160.460] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0160.460] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e650) returned 0x0
[0160.461] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89f000) returned 0x0
[0160.461] LocalFree (hMem=0x89f000) returned 0x0
[0160.461] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0160.461] GdipCreateRegion (region=0x53e638) returned 0x0
[0160.461] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0160.461] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e644) returned 0x0
[0160.461] GdipSaveGraphics (graphics=0x5da0378, state=0x53e670) returned 0x0
[0160.461] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd9b0dbd) returned 0x0
[0160.461] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0160.461] GdipGetDC (graphics=0x5da0378, hdc=0x53e450) returned 0x0
[0160.461] GetCurrentObject (hdc=0x3e01078e, type=0x1) returned 0xb00017
[0160.461] GetCurrentObject (hdc=0x3e01078e, type=0x2) returned 0x900010
[0160.461] GetCurrentObject (hdc=0x3e01078e, type=0x7) returned 0x1d0507b9
[0160.461] GetCurrentObject (hdc=0x3e01078e, type=0x6) returned 0x8a01c2
[0160.461] SaveDC (hdc=0x3e01078e) returned 1
[0160.461] GetNearestColor (hdc=0x3e01078e, color=0xff) returned 0xff
[0160.461] GetNearestColor (hdc=0x3e01078e, color=0x55) returned 0x55
[0160.461] GetNearestColor (hdc=0x3e01078e, color=0x0) returned 0x0
[0160.462] GetNearestColor (hdc=0x3e01078e, color=0x55) returned 0x55
[0160.462] GetNearestColor (hdc=0x3e01078e, color=0x0) returned 0x0
[0160.462] GetNearestColor (hdc=0x3e01078e, color=0x8080ff) returned 0x8080ff
[0160.462] GetNearestColor (hdc=0x3e01078e, color=0x7373e5) returned 0x7373e5
[0160.462] GetNearestColor (hdc=0x3e01078e, color=0xe5) returned 0xe5
[0160.462] GetNearestColor (hdc=0x3e01078e, color=0x0) returned 0x0
[0160.462] RestoreDC (hdc=0x3e01078e, nSavedDC=-1) returned 1
[0160.462] GdipReleaseDC (graphics=0x5da0378, hdc=0x3e01078e) returned 0x0
[0160.462] IsAppThemed () returned 0x1
[0160.462] GetThemeAppProperties () returned 0x3
[0160.462] GetThemeAppProperties () returned 0x3
[0160.462] IsAppThemed () returned 0x1
[0160.462] GetThemeAppProperties () returned 0x3
[0160.462] GetThemeAppProperties () returned 0x3
[0160.462] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x2332074 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0160.463] IsAppThemed () returned 0x1
[0160.463] GetThemeAppProperties () returned 0x3
[0160.463] GetThemeAppProperties () returned 0x3
[0160.463] IsAppThemed () returned 0x1
[0160.463] GetThemeAppProperties () returned 0x3
[0160.463] GetThemeAppProperties () returned 0x3
[0160.463] IsAppThemed () returned 0x1
[0160.463] GetThemeAppProperties () returned 0x3
[0160.463] GetThemeAppProperties () returned 0x3
[0160.463] IsAppThemed () returned 0x1
[0160.463] GetThemeAppProperties () returned 0x3
[0160.463] GetThemeAppProperties () returned 0x3
[0160.463] IsThemePartDefined () returned 0x1
[0160.463] IsAppThemed () returned 0x1
[0160.463] GetThemeAppProperties () returned 0x3
[0160.463] GetThemeAppProperties () returned 0x3
[0160.463] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0160.463] IsAppThemed () returned 0x1
[0160.464] GetThemeAppProperties () returned 0x3
[0160.464] GetThemeAppProperties () returned 0x3
[0160.464] IsAppThemed () returned 0x1
[0160.464] GetThemeAppProperties () returned 0x3
[0160.464] GetThemeAppProperties () returned 0x3
[0160.464] IsThemePartDefined () returned 0x1
[0160.464] GdipCreateRegion (region=0x53e354) returned 0x0
[0160.464] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0160.464] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0160.464] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0160.464] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e36c) returned 0x0
[0160.464] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89edd0) returned 0x0
[0160.464] LocalFree (hMem=0x89edd0) returned 0x0
[0160.464] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ed60) returned 0x0
[0160.464] LocalFree (hMem=0x89ed60) returned 0x0
[0160.464] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0160.464] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e394) returned 0x0
[0160.464] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e384) returned 0x0
[0160.464] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e384) returned 0x0
[0160.465] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0160.465] GdipGetDC (graphics=0x5da0378, hdc=0x53e39c) returned 0x0
[0160.465] GetCurrentObject (hdc=0x3e01078e, type=0x1) returned 0xb00017
[0160.465] GetCurrentObject (hdc=0x3e01078e, type=0x2) returned 0x900010
[0160.465] GetCurrentObject (hdc=0x3e01078e, type=0x7) returned 0x1d0507b9
[0160.465] GetCurrentObject (hdc=0x3e01078e, type=0x6) returned 0x8a01c2
[0160.465] SaveDC (hdc=0x3e01078e) returned 1
[0160.465] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x96040798
[0160.465] GetClipRgn (hdc=0x3e01078e, hrgn=0x96040798) returned 0
[0160.465] SelectClipRgn (hdc=0x3e01078e, hrgn=0x910407a1) returned 2
[0160.465] DeleteObject (ho=0x96040798) returned 1
[0160.465] DeleteObject (ho=0x910407a1) returned 1
[0160.465] OffsetViewportOrgEx (in: hdc=0x3e01078e, x=0, y=0, lppt=0x2332724 | out: lppt=0x2332724) returned 1
[0160.465] DrawThemeParentBackground () returned 0x0
[0160.466] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0160.466] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0160.466] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.466] GetSystemMetrics (nIndex=42) returned 0
[0160.466] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0160.466] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0160.466] GetCurrentObject (hdc=0x3e01078e, type=0x1) returned 0xb00017
[0160.466] GetCurrentObject (hdc=0x3e01078e, type=0x2) returned 0x900010
[0160.466] GetCurrentObject (hdc=0x3e01078e, type=0x7) returned 0x1d0507b9
[0160.466] GetCurrentObject (hdc=0x3e01078e, type=0x6) returned 0x8a01c2
[0160.466] SaveDC (hdc=0x3e01078e) returned 2
[0160.466] GetNearestColor (hdc=0x3e01078e, color=0xff) returned 0xff
[0160.466] CreateSolidBrush (color=0xff) returned 0x7710078d
[0160.466] FillRect (hDC=0x3e01078e, lprc=0x53ddb8, hbr=0x7710078d) returned 1
[0160.466] DeleteObject (ho=0x7710078d) returned 1
[0160.467] RestoreDC (hdc=0x3e01078e, nSavedDC=-1) returned 1
[0160.467] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.467] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.467] GetSystemMetrics (nIndex=42) returned 0
[0160.467] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.467] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0160.467] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0160.467] GetCurrentObject (hdc=0x3e01078e, type=0x1) returned 0xb00017
[0160.467] GetCurrentObject (hdc=0x3e01078e, type=0x2) returned 0x900010
[0160.467] GetCurrentObject (hdc=0x3e01078e, type=0x7) returned 0x1d0507b9
[0160.467] GetCurrentObject (hdc=0x3e01078e, type=0x6) returned 0x8a01c2
[0160.467] SaveDC (hdc=0x3e01078e) returned 2
[0160.467] GetNearestColor (hdc=0x3e01078e, color=0xff) returned 0xff
[0160.467] CreateSolidBrush (color=0xff) returned 0x7810078d
[0160.467] FillRect (hDC=0x3e01078e, lprc=0x53dd58, hbr=0x7810078d) returned 1
[0160.467] DeleteObject (ho=0x7810078d) returned 1
[0160.467] RestoreDC (hdc=0x3e01078e, nSavedDC=-1) returned 1
[0160.468] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0160.468] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0160.468] GetSystemMetrics (nIndex=42) returned 0
[0160.468] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0160.468] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0160.468] RestoreDC (hdc=0x3e01078e, nSavedDC=-1) returned 1
[0160.468] GdipReleaseDC (graphics=0x5da0378, hdc=0x3e01078e) returned 0x0
[0160.468] IsAppThemed () returned 0x1
[0160.468] GetThemeAppProperties () returned 0x3
[0160.468] GetThemeAppProperties () returned 0x3
[0160.468] IsAppThemed () returned 0x1
[0160.468] GetThemeAppProperties () returned 0x3
[0160.468] GetThemeAppProperties () returned 0x3
[0160.468] IsThemePartDefined () returned 0x1
[0160.468] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0160.469] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0160.469] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0160.469] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0160.469] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f0) returned 0x0
[0160.469] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ed28) returned 0x0
[0160.469] LocalFree (hMem=0x89ed28) returned 0x0
[0160.469] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89efc8) returned 0x0
[0160.469] LocalFree (hMem=0x89efc8) returned 0x0
[0160.469] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0160.469] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e318) returned 0x0
[0160.469] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e308) returned 0x0
[0160.469] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e308) returned 0x0
[0160.469] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0160.469] GdipGetDC (graphics=0x5da0378, hdc=0x53e320) returned 0x0
[0160.469] GetCurrentObject (hdc=0x3e01078e, type=0x1) returned 0xb00017
[0160.470] GetCurrentObject (hdc=0x3e01078e, type=0x2) returned 0x900010
[0160.470] GetCurrentObject (hdc=0x3e01078e, type=0x7) returned 0x1d0507b9
[0160.470] GetCurrentObject (hdc=0x3e01078e, type=0x6) returned 0x8a01c2
[0160.470] SaveDC (hdc=0x3e01078e) returned 1
[0160.470] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x920407a1
[0160.470] GetClipRgn (hdc=0x3e01078e, hrgn=0x920407a1) returned 0
[0160.470] SelectClipRgn (hdc=0x3e01078e, hrgn=0x98040798) returned 2
[0160.470] DeleteObject (ho=0x920407a1) returned 1
[0160.470] DeleteObject (ho=0x98040798) returned 1
[0160.470] OffsetViewportOrgEx (in: hdc=0x3e01078e, x=0, y=0, lppt=0x2332f88 | out: lppt=0x2332f88) returned 1
[0160.470] IsAppThemed () returned 0x1
[0160.470] GetThemeAppProperties () returned 0x3
[0160.470] GetThemeAppProperties () returned 0x3
[0160.470] DrawThemeBackground () returned 0x0
[0160.471] RestoreDC (hdc=0x3e01078e, nSavedDC=-1) returned 1
[0160.471] GdipReleaseDC (graphics=0x5da0378, hdc=0x3e01078e) returned 0x0
[0160.471] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0160.471] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0160.471] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0160.471] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0160.471] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e2f4) returned 0x0
[0160.471] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eb68) returned 0x0
[0160.471] LocalFree (hMem=0x89eb68) returned 0x0
[0160.471] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89efc8) returned 0x0
[0160.471] LocalFree (hMem=0x89efc8) returned 0x0
[0160.471] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0160.472] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e31c) returned 0x0
[0160.472] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e30c) returned 0x0
[0160.472] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e30c) returned 0x0
[0160.472] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0160.472] GdipGetDC (graphics=0x5da0378, hdc=0x53e324) returned 0x0
[0160.472] GetCurrentObject (hdc=0x3e01078e, type=0x1) returned 0xb00017
[0160.472] GetCurrentObject (hdc=0x3e01078e, type=0x2) returned 0x900010
[0160.472] GetCurrentObject (hdc=0x3e01078e, type=0x7) returned 0x1d0507b9
[0160.472] GetCurrentObject (hdc=0x3e01078e, type=0x6) returned 0x8a01c2
[0160.472] SaveDC (hdc=0x3e01078e) returned 1
[0160.472] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x99040798
[0160.472] GetClipRgn (hdc=0x3e01078e, hrgn=0x99040798) returned 0
[0160.472] SelectClipRgn (hdc=0x3e01078e, hrgn=0x930407a1) returned 2
[0160.473] DeleteObject (ho=0x99040798) returned 1
[0160.473] DeleteObject (ho=0x930407a1) returned 1
[0160.473] OffsetViewportOrgEx (in: hdc=0x3e01078e, x=0, y=0, lppt=0x233325c | out: lppt=0x233325c) returned 1
[0160.473] IsAppThemed () returned 0x1
[0160.473] GetThemeAppProperties () returned 0x3
[0160.473] GetThemeAppProperties () returned 0x3
[0160.473] GetThemeBackgroundContentRect () returned 0x0
[0160.473] RestoreDC (hdc=0x3e01078e, nSavedDC=-1) returned 1
[0160.473] GdipReleaseDC (graphics=0x5da0378, hdc=0x3e01078e) returned 0x0
[0160.473] IsAppThemed () returned 0x1
[0160.473] GetThemeAppProperties () returned 0x3
[0160.473] GetThemeAppProperties () returned 0x3
[0160.473] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e458) returned 0x0
[0160.473] GdipGetDC (graphics=0x5da0378, hdc=0x53e444) returned 0x0
[0160.473] GetCurrentObject (hdc=0x3e01078e, type=0x1) returned 0xb00017
[0160.474] GetCurrentObject (hdc=0x3e01078e, type=0x2) returned 0x900010
[0160.474] GetCurrentObject (hdc=0x3e01078e, type=0x7) returned 0x1d0507b9
[0160.474] GetCurrentObject (hdc=0x3e01078e, type=0x6) returned 0x8a01c2
[0160.474] SaveDC (hdc=0x3e01078e) returned 1
[0160.474] GetTextAlign (hdc=0x3e01078e) returned 0x0
[0160.474] GetTextColor (hdc=0x3e01078e) returned 0x0
[0160.474] GetCurrentObject (hdc=0x3e01078e, type=0x6) returned 0x8a01c2
[0160.474] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0160.474] SelectObject (hdc=0x3e01078e, h=0x450a0799) returned 0x8a01c2
[0160.474] GetBkMode (hdc=0x3e01078e) returned 2
[0160.474] SetBkMode (hdc=0x3e01078e, mode=1) returned 2
[0160.475] DrawTextExW (in: hdc=0x3e01078e, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x23335fc | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0160.475] DrawTextExW (in: hdc=0x3e01078e, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x23335fc | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0160.475] RestoreDC (hdc=0x3e01078e, nSavedDC=-1) returned 1
[0160.475] GdipReleaseDC (graphics=0x5da0378, hdc=0x3e01078e) returned 0x0
[0160.475] GetFocus () returned 0x202c6
[0160.476] IsAppThemed () returned 0x1
[0160.476] GetThemeAppProperties () returned 0x3
[0160.476] GetThemeAppProperties () returned 0x3
[0160.476] GdipGetDC (graphics=0x5da0378, hdc=0x53e630) returned 0x0
[0160.476] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x3e01078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0160.476] GdipReleaseDC (graphics=0x5da0378, hdc=0x3e01078e) returned 0x0
[0160.476] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0160.476] SelectObject (hdc=0x3e01078e, h=0x85000f) returned 0x1d0507b9
[0160.476] DeleteDC (hdc=0x3e01078e) returned 1
[0160.476] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0160.476] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0160.477] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23336f8, cPoints=0x1 | out: lpPoints=0x23336f8) returned 25690608
[0160.477] WindowFromPoint (Point=0x25b) returned 0x202c6
[0160.477] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a1025b) returned 0x1
[0160.477] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0160.477] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0160.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0160.700] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0160.726] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0160.726] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0160.727] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0160.727] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0160.727] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0160.727] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e888) returned 0x0
[0160.728] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5da0378, height=0x53e880) returned 0x0
[0160.728] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0160.728] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0160.728] GetSystemMetrics (nIndex=5) returned 1
[0160.728] GetSystemMetrics (nIndex=6) returned 1
[0160.728] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0160.728] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0160.729] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0160.729] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0161.417] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.418] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0161.420] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0161.422] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.422] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0161.423] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.423] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0161.426] GetSystemMetrics (nIndex=5) returned 1
[0161.426] GetSystemMetrics (nIndex=6) returned 1
[0161.426] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.426] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0161.427] GetSystemMetrics (nIndex=5) returned 1
[0161.427] GetSystemMetrics (nIndex=6) returned 1
[0161.427] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.427] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0161.428] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0161.428] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0161.430] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0161.430] GetSystemMetrics (nIndex=59) returned 1460
[0161.430] GetSystemMetrics (nIndex=60) returned 920
[0161.430] GetSystemMetrics (nIndex=34) returned 136
[0161.430] GetSystemMetrics (nIndex=35) returned 39
[0161.430] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.430] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0161.432] GetCurrentThreadId () returned 0x11d0
[0161.432] GetCurrentThreadId () returned 0x11d0
[0161.432] GetCurrentThreadId () returned 0x11d0
[0161.432] GetCurrentThreadId () returned 0x11d0
[0161.432] GetCurrentThreadId () returned 0x11d0
[0161.432] GetCurrentThreadId () returned 0x11d0
[0161.432] GetCurrentThreadId () returned 0x11d0
[0161.432] GetCurrentThreadId () returned 0x11d0
[0161.433] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.433] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0161.433] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0161.608] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0161.609] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.609] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0161.609] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.609] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0161.610] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x202da
[0161.610] SetWindowLongW (hWnd=0x202da, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0161.611] GetWindowLongW (hWnd=0x202da, nIndex=-4) returned 1950089536
[0161.611] SetWindowLongW (hWnd=0x202da, nIndex=-4, dwNewLong=79642078) returned 1950089536
[0161.611] GetWindowLongW (hWnd=0x202da, nIndex=-4) returned 79642078
[0161.611] GetWindowLongW (hWnd=0x202da, nIndex=-16) returned 113311744
[0161.612] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202da, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0161.615] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202da, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0161.616] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202da, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0161.619] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202da, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0161.620] GetClientRect (in: hWnd=0x202da, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0161.620] GetWindowRect (in: hWnd=0x202da, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0161.620] SetWindowTextW (hWnd=0x202da, lpString="WindowsFormsParkingWindow") returned 1
[0161.620] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202da, Msg=0xc, wParam=0x0, lParam=0x231e98c) returned 0x1
[0161.621] GetParent (hWnd=0x202da) returned 0x0
[0161.621] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0161.621] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x202da, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x202d8
[0161.622] SetWindowLongW (hWnd=0x202d8, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0161.622] GetWindowLongW (hWnd=0x202d8, nIndex=-4) returned 1868147648
[0161.623] SetWindowLongW (hWnd=0x202d8, nIndex=-4, dwNewLong=79641638) returned 1868147648
[0161.623] GetWindowLongW (hWnd=0x202d8, nIndex=-4) returned 79641638
[0161.623] GetWindowLongW (hWnd=0x202d8, nIndex=-16) returned 1174405133
[0161.623] GetWindowLongW (hWnd=0x202d8, nIndex=-12) returned 0
[0161.623] SetWindowLongW (hWnd=0x202d8, nIndex=-12, dwNewLong=131800) returned 0
[0161.623] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0161.624] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0161.624] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0161.625] GetClientRect (in: hWnd=0x202d8, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0161.625] GetWindowRect (in: hWnd=0x202d8, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0161.625] GetParent (hWnd=0x202d8) returned 0x202da
[0161.625] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202da, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0161.625] SetWindowTextW (hWnd=0x202d8, lpString="Enter password: ") returned 1
[0161.625] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0xc, wParam=0x0, lParam=0x2333718) returned 0x1
[0161.626] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0161.626] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0161.626] GetClientRect (in: hWnd=0x202d8, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0161.626] GetWindowRect (in: hWnd=0x202d8, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0161.627] GetParent (hWnd=0x202d8) returned 0x202da
[0161.627] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202da, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0161.628] SendMessageW (hWnd=0x202d8, Msg=0x2210, wParam=0x2d80001, lParam=0x202d8) returned 0x0
[0161.628] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x2210, wParam=0x2d80001, lParam=0x202d8) returned 0x0
[0161.628] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0161.628] GetParent (hWnd=0x202d8) returned 0x202da
[0161.628] GdipCreateFromHWND (hwnd=0x202d8, graphics=0x53e994) returned 0x0
[0161.629] GdipMeasureString (graphics=0x5da0378, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0161.630] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0161.630] GetProcessWindowStation () returned 0x13c
[0161.630] GetCapture () returned 0x202c6
[0161.630] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0161.630] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0161.631] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0161.631] ReleaseCapture () returned 1
[0161.631] GetActiveWindow () returned 0x70036
[0161.631] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0161.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.632] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0161.632] GetCursorPos (in: lpPoint=0x23552a4 | out: lpPoint=0x23552a4*(x=603, y=417)) returned 1
[0161.632] MonitorFromPoint (pt=0x25b, dwFlags=0x1a1) returned 0x10001
[0161.632] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0161.632] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1b0107a2
[0161.633] GetDeviceCaps (hdc=0x1b0107a2, index=12) returned 32
[0161.633] GetDeviceCaps (hdc=0x1b0107a2, index=14) returned 1
[0161.633] DeleteDC (hdc=0x1b0107a2) returned 1
[0161.633] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0161.633] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0161.633] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x202d6
[0161.634] SetWindowLongW (hWnd=0x202d6, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0161.634] GetWindowLongW (hWnd=0x202d6, nIndex=-4) returned 1950089536
[0161.635] SetWindowLongW (hWnd=0x202d6, nIndex=-4, dwNewLong=79641518) returned 1950089536
[0161.635] GetWindowLongW (hWnd=0x202d6, nIndex=-4) returned 79641518
[0161.635] GetWindowLongW (hWnd=0x202d6, nIndex=-16) returned 113770496
[0161.635] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0161.639] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0161.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0161.640] GetClientRect (in: hWnd=0x202d6, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0161.640] GetWindowRect (in: hWnd=0x202d6, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0161.640] SetWindowTextW (hWnd=0x202d6, lpString="Ransomware") returned 1
[0161.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xc, wParam=0x0, lParam=0x233386c) returned 0x1
[0161.641] GetStartupInfoW (in: lpStartupInfo=0x23555e0 | out: lpStartupInfo=0x23555e0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0161.641] GetParent (hWnd=0x202d6) returned 0x0
[0161.641] SetWindowLongW (hWnd=0x202d6, nIndex=-8, dwNewLong=0) returned 0
[0161.642] SendMessageW (hWnd=0x202d6, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0161.642] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0161.642] SendMessageW (hWnd=0x202d6, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0161.642] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0161.642] GetSystemMenu (hWnd=0x202d6, bRevert=0) returned 0x80299
[0161.643] GetWindowPlacement (in: hWnd=0x202d6, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0161.643] EnableMenuItem (hMenu=0x80299, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0161.643] EnableMenuItem (hMenu=0x80299, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0161.643] EnableMenuItem (hMenu=0x80299, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0161.643] EnableMenuItem (hMenu=0x80299, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0161.643] EnableMenuItem (hMenu=0x80299, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0161.643] GetClientRect (in: hWnd=0x202d6, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0161.644] GetClientRect (in: hWnd=0x202d6, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0161.644] GetWindowRect (in: hWnd=0x202d6, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0161.644] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.644] GetWindowLongW (hWnd=0x202d6, nIndex=-16) returned 113770496
[0161.644] GetWindowTextLengthW (hWnd=0x202d6) returned 10
[0161.644] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0161.644] GetSystemMetrics (nIndex=42) returned 0
[0161.644] GetWindowTextW (in: hWnd=0x202d6, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0161.644] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0161.645] GetWindowTextLengthW (hWnd=0x202d6) returned 10
[0161.645] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0161.645] GetSystemMetrics (nIndex=42) returned 0
[0161.645] GetWindowTextW (in: hWnd=0x202d6, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0161.645] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0161.645] GetCursorPos (in: lpPoint=0x2355754 | out: lpPoint=0x2355754*(x=603, y=417)) returned 1
[0161.645] MonitorFromPoint (pt=0x25e, dwFlags=0x1a1) returned 0x10001
[0161.645] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0161.645] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x290107a2
[0161.645] GetDeviceCaps (hdc=0x290107a2, index=12) returned 32
[0161.645] GetDeviceCaps (hdc=0x290107a2, index=14) returned 1
[0161.645] DeleteDC (hdc=0x290107a2) returned 1
[0161.646] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0161.646] GetWindowLongW (hWnd=0x202d6, nIndex=-16) returned 113770496
[0161.646] GetWindowLongW (hWnd=0x202d6, nIndex=-20) returned 327937
[0161.646] SetWindowLongW (hWnd=0x202d6, nIndex=-16, dwNewLong=46661632) returned 113770496
[0161.646] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0161.646] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0161.647] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0161.647] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0161.648] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0161.648] SetWindowLongW (hWnd=0x202d6, nIndex=-20, dwNewLong=327681) returned 327937
[0161.648] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0161.648] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0161.649] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0161.649] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0161.650] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0161.650] SetWindowPos (hWnd=0x202d6, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0161.650] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0161.650] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0161.651] GetWindowPlacement (in: hWnd=0x202d6, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0161.651] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0161.651] GetClientRect (in: hWnd=0x202d6, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0161.651] GetWindowRect (in: hWnd=0x202d6, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0161.652] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0161.652] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0161.652] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0161.653] RedrawWindow (hWnd=0x202d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0161.653] GetSystemMenu (hWnd=0x202d6, bRevert=0) returned 0x80299
[0161.653] GetWindowPlacement (in: hWnd=0x202d6, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0161.653] EnableMenuItem (hMenu=0x80299, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0161.653] EnableMenuItem (hMenu=0x80299, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0161.653] EnableMenuItem (hMenu=0x80299, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0161.653] EnableMenuItem (hMenu=0x80299, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0161.653] EnableMenuItem (hMenu=0x80299, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0161.653] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0161.653] GetWindowLongW (hWnd=0x202d6, nIndex=-8) returned 0
[0161.653] SetWindowLongW (hWnd=0x202d6, nIndex=-8, dwNewLong=458806) returned 0
[0161.653] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0161.654] GetProcessWindowStation () returned 0x13c
[0161.654] GetCurrentThreadId () returned 0x11d0
[0161.654] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3e06, lParam=0x0) returned 1
[0161.654] IsWindowVisible (hWnd=0x202d6) returned 0
[0161.654] IsWindowVisible (hWnd=0x70036) returned 1
[0161.654] IsWindowEnabled (hWnd=0x70036) returned 1
[0161.654] IsWindowVisible (hWnd=0x602b6) returned 0
[0161.654] IsWindowVisible (hWnd=0x901f8) returned 0
[0161.654] IsWindowVisible (hWnd=0x202d4) returned 0
[0161.655] GetActiveWindow () returned 0x70036
[0161.655] GetFocus () returned 0x202c6
[0161.655] IsWindow (hWnd=0x70036) returned 1
[0161.828] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0161.828] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0161.830] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0161.830] GetWindowLongW (hWnd=0x202d6, nIndex=-8) returned 458806
[0161.830] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0161.830] GetCurrentThreadId () returned 0x11d0
[0161.830] GetWindowLongW (hWnd=0x202d6, nIndex=-8) returned 458806
[0161.830] IsWindowEnabled (hWnd=0x70036) returned 0
[0161.830] IsWindowEnabled (hWnd=0x202d6) returned 1
[0161.830] ShowWindow (hWnd=0x202d6, nCmdShow=5) returned 0
[0161.830] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0161.830] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0161.831] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.831] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0161.832] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x202d6, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x202c8
[0161.832] SetWindowLongW (hWnd=0x202c8, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0161.832] GetWindowLongW (hWnd=0x202c8, nIndex=-4) returned 1868026976
[0161.833] SetWindowLongW (hWnd=0x202c8, nIndex=-4, dwNewLong=79641598) returned 1868026976
[0161.833] GetWindowLongW (hWnd=0x202c8, nIndex=-4) returned 79641598
[0161.833] GetWindowLongW (hWnd=0x202c8, nIndex=-16) returned 1174470848
[0161.833] GetWindowLongW (hWnd=0x202c8, nIndex=-12) returned 0
[0161.833] SetWindowLongW (hWnd=0x202c8, nIndex=-12, dwNewLong=131784) returned 0
[0161.833] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0161.835] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0161.835] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0161.836] SendMessageW (hWnd=0x202c8, Msg=0x2055, wParam=0x202c8, lParam=0x3) returned 0x2
[0161.837] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0161.837] GetWindow (hWnd=0x202c8, uCmd=0x3) returned 0x0
[0161.837] GetClientRect (in: hWnd=0x202c8, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0161.837] GetWindowRect (in: hWnd=0x202c8, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0161.837] GetParent (hWnd=0x202c8) returned 0x202d6
[0161.837] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202d6, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0161.837] SendMessageW (hWnd=0x202c8, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0161.837] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0161.837] SendMessageW (hWnd=0x202c8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0161.837] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0161.837] GetSystemMetrics (nIndex=5) returned 1
[0161.838] GetSystemMetrics (nIndex=6) returned 1
[0161.838] SendMessageW (hWnd=0x202c8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0161.838] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0161.838] SendMessageW (hWnd=0x202c8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0161.838] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0161.838] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0161.839] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0161.839] GetClientRect (in: hWnd=0x202c8, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0161.839] GetWindowRect (in: hWnd=0x202c8, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0161.839] GetParent (hWnd=0x202c8) returned 0x202d6
[0161.839] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202d6, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0161.839] SendMessageW (hWnd=0x202c8, Msg=0x2210, wParam=0x2c80001, lParam=0x202c8) returned 0x0
[0161.839] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x2210, wParam=0x2c80001, lParam=0x202c8) returned 0x0
[0161.839] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0161.839] GetParent (hWnd=0x202c8) returned 0x202d6
[0161.840] GetParent (hWnd=0x202d8) returned 0x202da
[0161.840] SetParent (hWndChild=0x202d8, hWndNewParent=0x202d6) returned 0x202da
[0161.840] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0161.840] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0161.841] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0161.841] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0161.841] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0161.841] GetClientRect (in: hWnd=0x202d8, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0161.841] GetWindowRect (in: hWnd=0x202d8, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0161.841] GetParent (hWnd=0x202d8) returned 0x202d6
[0161.841] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202d6, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0161.841] GetClientRect (in: hWnd=0x202d8, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0161.841] GetWindowRect (in: hWnd=0x202d8, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0161.841] GetParent (hWnd=0x202d8) returned 0x202d6
[0161.841] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202d6, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0161.841] GetParent (hWnd=0x202d8) returned 0x202d6
[0161.842] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0161.842] GetWindow (hWnd=0x202d8, uCmd=0x3) returned 0x0
[0161.842] SetWindowPos (hWnd=0x202d8, hWndInsertAfter=0x202c8, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0161.842] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0161.843] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0161.843] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0161.843] GetClientRect (in: hWnd=0x202d8, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0161.843] GetWindowRect (in: hWnd=0x202d8, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0161.843] GetParent (hWnd=0x202d8) returned 0x202d6
[0161.843] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202d6, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0161.843] GetParent (hWnd=0x202d8) returned 0x202d6
[0161.843] GetWindow (hWnd=0x202d8, uCmd=0x3) returned 0x202c8
[0161.843] GetWindowThreadProcessId (in: hWnd=0x202d8, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0161.843] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0161.844] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.844] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0161.844] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x202d6, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x202d2
[0161.845] SetWindowLongW (hWnd=0x202d2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0161.845] GetWindowLongW (hWnd=0x202d2, nIndex=-4) returned 1868032000
[0161.845] SetWindowLongW (hWnd=0x202d2, nIndex=-4, dwNewLong=79641238) returned 1868032000
[0161.845] GetWindowLongW (hWnd=0x202d2, nIndex=-4) returned 79641238
[0161.846] GetWindowLongW (hWnd=0x202d2, nIndex=-16) returned 1174470667
[0161.846] GetWindowLongW (hWnd=0x202d2, nIndex=-12) returned 0
[0161.846] SetWindowLongW (hWnd=0x202d2, nIndex=-12, dwNewLong=131794) returned 0
[0161.846] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0161.847] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0161.848] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0161.849] SendMessageW (hWnd=0x202d2, Msg=0x2055, wParam=0x202d2, lParam=0x3) returned 0x2
[0161.849] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0161.849] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0161.849] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0161.849] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0161.849] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0161.849] RedrawWindow (hWnd=0x202c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0161.849] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0161.849] RedrawWindow (hWnd=0x202d8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0161.849] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0161.850] RedrawWindow (hWnd=0x202d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0161.850] RedrawWindow (hWnd=0x202d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0161.850] GetWindow (hWnd=0x202d2, uCmd=0x3) returned 0x202d8
[0161.850] GetClientRect (in: hWnd=0x202d2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0161.850] GetWindowRect (in: hWnd=0x202d2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0161.850] GetParent (hWnd=0x202d2) returned 0x202d6
[0161.850] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202d6, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0161.850] SetWindowTextW (hWnd=0x202d2, lpString="OK") returned 1
[0161.850] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0xc, wParam=0x0, lParam=0x2339958) returned 0x1
[0161.851] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0161.851] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0161.851] GetClientRect (in: hWnd=0x202d2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0161.851] GetWindowRect (in: hWnd=0x202d2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0161.851] GetParent (hWnd=0x202d2) returned 0x202d6
[0161.851] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202d6, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0161.851] SendMessageW (hWnd=0x202d2, Msg=0x2210, wParam=0x2d20001, lParam=0x202d2) returned 0x0
[0161.851] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x2210, wParam=0x2d20001, lParam=0x202d2) returned 0x0
[0161.852] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0161.852] GetParent (hWnd=0x202d2) returned 0x202d6
[0161.852] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0161.852] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0161.853] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0161.853] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x202d6, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x5013e
[0161.853] SetWindowLongW (hWnd=0x5013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0161.854] GetWindowLongW (hWnd=0x5013e, nIndex=-4) returned 1868032000
[0161.854] SetWindowLongW (hWnd=0x5013e, nIndex=-4, dwNewLong=79641718) returned 1868032000
[0161.854] GetWindowLongW (hWnd=0x5013e, nIndex=-4) returned 79641718
[0161.854] GetWindowLongW (hWnd=0x5013e, nIndex=-16) returned 1174470667
[0161.854] GetWindowLongW (hWnd=0x5013e, nIndex=-12) returned 0
[0161.854] SetWindowLongW (hWnd=0x5013e, nIndex=-12, dwNewLong=327998) returned 0
[0161.854] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0161.855] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0161.855] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0161.856] SendMessageW (hWnd=0x5013e, Msg=0x2055, wParam=0x5013e, lParam=0x3) returned 0x2
[0161.856] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0161.856] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0161.856] GetWindow (hWnd=0x5013e, uCmd=0x3) returned 0x202d2
[0161.856] GetClientRect (in: hWnd=0x5013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0161.857] GetWindowRect (in: hWnd=0x5013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0161.857] GetParent (hWnd=0x5013e) returned 0x202d6
[0161.857] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202d6, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0161.857] SetWindowTextW (hWnd=0x5013e, lpString="Cancel") returned 1
[0161.857] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0xc, wParam=0x0, lParam=0x2342580) returned 0x1
[0161.857] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0161.858] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0161.858] GetClientRect (in: hWnd=0x5013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0161.858] GetWindowRect (in: hWnd=0x5013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0161.858] GetParent (hWnd=0x5013e) returned 0x202d6
[0161.858] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202d6, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0161.858] SendMessageW (hWnd=0x5013e, Msg=0x2210, wParam=0x13e0001, lParam=0x5013e) returned 0x0
[0161.858] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0x2210, wParam=0x13e0001, lParam=0x5013e) returned 0x0
[0161.858] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0161.858] GetParent (hWnd=0x5013e) returned 0x202d6
[0161.859] GetDC (hWnd=0x0) returned 0x10105d6
[0161.859] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e320) returned 0x0
[0161.859] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5da0378, height=0x53e318) returned 0x0
[0161.860] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0161.860] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0161.860] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0161.860] GdipMeasureString (graphics=0x5da0378, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0161.860] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0161.860] GetWindowLongW (hWnd=0x202d6, nIndex=-8) returned 458806
[0161.861] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0161.861] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0161.861] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x9001079e
[0161.947] GetDeviceCaps (hdc=0x9001079e, index=12) returned 32
[0161.947] GetDeviceCaps (hdc=0x9001079e, index=14) returned 1
[0161.947] DeleteDC (hdc=0x9001079e) returned 1
[0161.948] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0161.948] GetWindowThreadProcessId (in: hWnd=0x202d6, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0161.948] GetCurrentThreadId () returned 0x11d0
[0161.948] PostMessageW (hWnd=0x202d6, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0161.948] GetWindowTextLengthW (hWnd=0x202d6) returned 10
[0161.948] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0161.948] GetSystemMetrics (nIndex=42) returned 0
[0161.948] GetWindowTextW (in: hWnd=0x202d6, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0161.948] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0161.948] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0161.949] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0161.949] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0161.949] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0161.958] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x202d6) returned 0x1
[0161.960] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0161.961] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0161.961] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0161.961] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0161.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0161.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0161.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0161.965] GetFocus () returned 0x202c6
[0161.965] IsChild (hWndParent=0x202d6, hWnd=0x202c6) returned 0
[0161.965] GetFocus () returned 0x202c6
[0161.966] SetFocus (hWnd=0x202c8) returned 0x202c6
[0161.966] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x202c8, lParam=0x0) returned 0x0
[0161.966] GetCapture () returned 0x0
[0161.966] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0162.010] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0162.310] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0162.326] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0162.326] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0162.327] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0162.327] GetParent (hWnd=0x202d6) returned 0x0
[0162.327] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0162.332] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0162.332] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0162.332] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0162.333] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0162.334] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0162.334] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0162.334] GetSysColorBrush (nIndex=5) returned 0x100079
[0162.336] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0162.336] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0162.337] SendMessageW (hWnd=0x202c8, Msg=0x2111, wParam=0x10002c8, lParam=0x202c8) returned 0x0
[0162.337] SendMessageW (hWnd=0x202c8, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0162.337] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0162.337] GetKeyState (nVirtKey=1) returned 1
[0162.338] GetKeyState (nVirtKey=2) returned 0
[0162.338] GetKeyState (nVirtKey=4) returned 0
[0162.338] GetKeyState (nVirtKey=5) returned 0
[0162.338] GetKeyState (nVirtKey=6) returned 0
[0162.338] GetWindowTextLengthW (hWnd=0x202c8) returned 0
[0162.338] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0162.338] SendMessageW (hWnd=0x202c8, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0162.338] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0162.338] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0162.339] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0162.340] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0162.342] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0162.342] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0162.342] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0162.343] GetWindowPlacement (in: hWnd=0x202d6, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0162.343] GetClientRect (in: hWnd=0x202d6, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0162.343] GetWindowTextLengthW (hWnd=0x202d6) returned 10
[0162.343] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0162.343] GetSystemMetrics (nIndex=42) returned 0
[0162.343] GetWindowTextW (in: hWnd=0x202d6, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0162.343] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0162.343] GetClientRect (in: hWnd=0x202d6, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0162.343] GetCurrentObject (hdc=0xf0105ee, type=0x1) returned 0xb00017
[0162.343] GetCurrentObject (hdc=0xf0105ee, type=0x2) returned 0x900010
[0162.343] GetCurrentObject (hdc=0xf0105ee, type=0x7) returned 0xfffffffff20507b0
[0162.344] GetCurrentObject (hdc=0xf0105ee, type=0x6) returned 0x8a01c2
[0162.344] SaveDC (hdc=0xf0105ee) returned 1
[0162.344] GetNearestColor (hdc=0xf0105ee, color=0xf0f0f0) returned 0xf0f0f0
[0162.344] CreateSolidBrush (color=0xf0f0f0) returned 0x7910078d
[0162.344] FillRect (hDC=0xf0105ee, lprc=0x53e250, hbr=0x7910078d) returned 1
[0162.344] DeleteObject (ho=0x7910078d) returned 1
[0162.344] RestoreDC (hdc=0xf0105ee, nSavedDC=-1) returned 1
[0162.345] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0162.345] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0162.345] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0162.346] GetWindowPlacement (in: hWnd=0x202d6, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0162.347] GetClientRect (in: hWnd=0x202d6, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0162.347] GetWindowTextLengthW (hWnd=0x202d6) returned 10
[0162.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0162.347] GetSystemMetrics (nIndex=42) returned 0
[0162.347] GetWindowTextW (in: hWnd=0x202d6, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0162.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0162.347] GetClientRect (in: hWnd=0x202d6, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0162.347] GetCurrentObject (hdc=0x7c0107a3, type=0x1) returned 0xb00017
[0162.347] GetCurrentObject (hdc=0x7c0107a3, type=0x2) returned 0x900010
[0162.347] GetCurrentObject (hdc=0x7c0107a3, type=0x7) returned 0x6b0507b1
[0162.347] GetCurrentObject (hdc=0x7c0107a3, type=0x6) returned 0x8a01c2
[0162.347] SaveDC (hdc=0x7c0107a3) returned 1
[0162.347] GetNearestColor (hdc=0x7c0107a3, color=0xf0f0f0) returned 0xf0f0f0
[0162.347] CreateSolidBrush (color=0xf0f0f0) returned 0x7a10078d
[0162.347] FillRect (hDC=0x7c0107a3, lprc=0x53dc18, hbr=0x7a10078d) returned 1
[0162.348] DeleteObject (ho=0x7a10078d) returned 1
[0162.348] RestoreDC (hdc=0x7c0107a3, nSavedDC=-1) returned 1
[0162.348] GetWindowTextLengthW (hWnd=0x202d6) returned 10
[0162.348] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0162.348] GetSystemMetrics (nIndex=42) returned 0
[0162.348] GetWindowTextW (in: hWnd=0x202d6, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0162.348] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0162.348] GetClientRect (in: hWnd=0x202d6, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0162.348] GetCurrentObject (hdc=0x7c0107a3, type=0x1) returned 0xb00017
[0162.348] GetCurrentObject (hdc=0x7c0107a3, type=0x2) returned 0x900010
[0162.348] GetCurrentObject (hdc=0x7c0107a3, type=0x7) returned 0x6b0507b1
[0162.348] GetCurrentObject (hdc=0x7c0107a3, type=0x6) returned 0x8a01c2
[0162.348] SaveDC (hdc=0x7c0107a3) returned 1
[0162.349] GetNearestColor (hdc=0x7c0107a3, color=0xf0f0f0) returned 0xf0f0f0
[0162.349] CreateSolidBrush (color=0xf0f0f0) returned 0x7b10078d
[0162.349] FillRect (hDC=0x7c0107a3, lprc=0x53dbb8, hbr=0x7b10078d) returned 1
[0162.349] DeleteObject (ho=0x7b10078d) returned 1
[0162.349] RestoreDC (hdc=0x7c0107a3, nSavedDC=-1) returned 1
[0162.349] GetWindowTextLengthW (hWnd=0x202d6) returned 10
[0162.349] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0162.349] GetSystemMetrics (nIndex=42) returned 0
[0162.349] GetWindowTextW (in: hWnd=0x202d6, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0162.349] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0162.350] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0162.350] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0162.351] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0162.351] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0162.351] GetStockObject (i=5) returned 0x900015
[0162.351] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0162.351] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0162.351] GetStockObject (i=5) returned 0x900015
[0162.352] GetWindowPlacement (in: hWnd=0x202d6, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0162.352] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0162.352] GetClientRect (in: hWnd=0x202d6, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0162.352] GetWindowRect (in: hWnd=0x202d6, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0162.354] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0162.354] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0162.354] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0162.355] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0162.355] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0162.355] GetClientRect (in: hWnd=0x202d6, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0162.355] GetWindowRect (in: hWnd=0x202d6, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0162.355] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.355] IsWindowUnicode (hWnd=0x202d6) returned 1
[0162.355] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.355] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.355] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.355] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0162.355] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.356] IsWindowUnicode (hWnd=0x202d6) returned 1
[0162.356] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.356] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.356] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.356] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.356] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x84, wParam=0x0, lParam=0x1970363) returned 0x1
[0162.357] IsWindowUnicode (hWnd=0x202d2) returned 1
[0162.357] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.357] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.357] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.357] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.357] IsWindowUnicode (hWnd=0x202c6) returned 1
[0162.357] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.357] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.357] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.357] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0162.357] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0162.357] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.358] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x84, wParam=0x0, lParam=0x1970363) returned 0x1
[0162.358] IsWindowUnicode (hWnd=0x202d2) returned 1
[0162.358] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.358] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x84, wParam=0x0, lParam=0x1970363) returned 0x1
[0162.358] SetCursor (hCursor=0x10003) returned 0x10003
[0162.358] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.358] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.358] _TrackMouseEvent (in: lpEventTrack=0x2356d38 | out: lpEventTrack=0x2356d38) returned 1
[0162.358] SendMessageW (hWnd=0x202d2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0162.358] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0162.358] InvalidateRect (hWnd=0x202d2, lpRect=0x0, bErase=0) returned 1
[0162.358] GetKeyState (nVirtKey=1) returned 1
[0162.359] GetKeyState (nVirtKey=2) returned 0
[0162.359] GetKeyState (nVirtKey=4) returned 0
[0162.359] GetKeyState (nVirtKey=5) returned 0
[0162.359] GetKeyState (nVirtKey=6) returned 0
[0162.359] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.359] IsWindowUnicode (hWnd=0x202d6) returned 1
[0162.359] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.359] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.359] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.359] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.445] IsWindowUnicode (hWnd=0x202d6) returned 1
[0162.445] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.445] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.446] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.446] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.446] IsWindowUnicode (hWnd=0x102dc) returned 1
[0162.446] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.446] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.446] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.446] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.446] IsWindowUnicode (hWnd=0x102dc) returned 1
[0162.446] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.446] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.446] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.449] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.449] IsWindowUnicode (hWnd=0x102dc) returned 1
[0162.449] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.449] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.449] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.449] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.451] IsWindowUnicode (hWnd=0x202d6) returned 1
[0162.451] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.451] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.451] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.451] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.451] IsWindowUnicode (hWnd=0x102dc) returned 1
[0162.451] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.451] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.451] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.451] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.451] IsWindowUnicode (hWnd=0x102dc) returned 1
[0162.451] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.452] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.452] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.452] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.452] IsWindowUnicode (hWnd=0x102dc) returned 1
[0162.452] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.452] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.452] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.453] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.453] IsWindowUnicode (hWnd=0x102dc) returned 1
[0162.453] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.453] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.453] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.453] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.453] IsWindowUnicode (hWnd=0x102dc) returned 1
[0162.453] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.454] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.454] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.455] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.456] IsWindowUnicode (hWnd=0x102dc) returned 1
[0162.456] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.456] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.456] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.456] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.456] IsWindowUnicode (hWnd=0x102dc) returned 1
[0162.456] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.456] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.456] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.457] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.457] IsWindowUnicode (hWnd=0x102dc) returned 1
[0162.457] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.457] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.457] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.457] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.457] IsWindowUnicode (hWnd=0x102dc) returned 1
[0162.458] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.458] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.458] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.458] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.458] IsWindowUnicode (hWnd=0x202d6) returned 1
[0162.458] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.458] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.458] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.459] BeginPaint (in: hWnd=0x202d6, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0xf0105ee
[0162.459] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0162.459] GetWindowTextLengthW (hWnd=0x202d6) returned 10
[0162.459] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0162.459] GetSystemMetrics (nIndex=42) returned 0
[0162.459] GetWindowTextW (in: hWnd=0x202d6, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0162.459] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0162.459] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0162.459] EndPaint (hWnd=0x202d6, lpPaint=0x53e30c) returned 1
[0162.460] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.460] IsWindowUnicode (hWnd=0x202c8) returned 1
[0162.460] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.460] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.460] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0162.460] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0162.460] SetTextColor (hdc=0x7d0107a3, color=0x0) returned 0x0
[0162.460] SetBkColor (hdc=0x7d0107a3, color=0xffffff) returned 0xffffff
[0162.462] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.462] IsWindowUnicode (hWnd=0x202d8) returned 1
[0162.462] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.462] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.463] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.463] BeginPaint (in: hWnd=0x202d8, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0xf0105ee
[0162.463] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0162.463] CreateCompatibleDC (hdc=0xf0105ee) returned 0x280107aa
[0162.463] DeleteObject (ho=0x1d0507b9) returned 1
[0162.463] GetObjectType (h=0xf0105ee) returned 0x3
[0162.463] CreateCompatibleBitmap (hdc=0xf0105ee, cx=1, cy=1) returned 0x58050671
[0162.464] GetDIBits (in: hdc=0xf0105ee, hbm=0x58050671, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x53dde4, usage=0x0 | out: lpvBits=0x0, lpbmi=0x53dde4) returned 1
[0162.464] GetDIBits (in: hdc=0xf0105ee, hbm=0x58050671, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x53dde4, usage=0x0 | out: lpvBits=0x0, lpbmi=0x53dde4) returned 1
[0162.464] DeleteObject (ho=0x58050671) returned 1
[0162.464] CreateDIBSection (in: hdc=0xf0105ee, lpbmi=0x53de34, usage=0x0, ppvBits=0x53e328, hSection=0x0, offset=0x0 | out: ppvBits=0x53e328) returned 0x1e0507b9
[0162.464] SelectObject (hdc=0x280107aa, h=0x1e0507b9) returned 0x85000f
[0162.464] GdipCreateFromHDC (hdc=0x280107aa, graphics=0x53e30c) returned 0x0
[0162.465] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0162.465] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0162.465] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0162.465] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0162.465] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0162.465] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89edd0
[0162.465] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89edd0) returned 0x0
[0162.465] LocalFree (hMem=0x89edd0) returned 0x0
[0162.465] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0162.465] GdipCreateRegion (region=0x53e354) returned 0x0
[0162.465] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0162.465] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e360) returned 0x0
[0162.466] GdipSaveGraphics (graphics=0x5da0378, state=0x53e38c) returned 0x0
[0162.466] GetWindowTextLengthW (hWnd=0x202d8) returned 16
[0162.466] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0162.466] GetSystemMetrics (nIndex=42) returned 0
[0162.466] GetWindowTextW (in: hWnd=0x202d8, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0162.466] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0162.466] GetClientRect (in: hWnd=0x202d8, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0162.466] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0162.466] GdipGetClip (graphics=0x5da0378, region=0x5d9d988) returned 0x0
[0162.466] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0162.466] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0162.466] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e1c0) returned 0x0
[0162.466] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10
[0162.466] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec10) returned 0x0
[0162.466] LocalFree (hMem=0x89ec10) returned 0x0
[0162.466] GdipCombineRegionRegion (region=0x5d9d988, region2=0x5d9d8f8, combineMode=0x1) returned 0x0
[0162.467] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0162.467] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee40) returned 0x0
[0162.467] LocalFree (hMem=0x89ee40) returned 0x0
[0162.467] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0162.467] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e1e8) returned 0x0
[0162.467] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e1d8) returned 0x0
[0162.467] GdipGetRegionHRgn (region=0x5d9d988, graphics=0x5da0378, hRgn=0x53e1d8) returned 0x0
[0162.467] GdipDeleteRegion (region=0x5d9d988) returned 0x0
[0162.467] GdipGetDC (graphics=0x5da0378, hdc=0x53e1f0) returned 0x0
[0162.467] GetCurrentObject (hdc=0x280107aa, type=0x1) returned 0xb00017
[0162.467] GetCurrentObject (hdc=0x280107aa, type=0x2) returned 0x900010
[0162.467] GetCurrentObject (hdc=0x280107aa, type=0x7) returned 0x1e0507b9
[0162.467] GetCurrentObject (hdc=0x280107aa, type=0x6) returned 0x8a01c2
[0162.468] SaveDC (hdc=0x280107aa) returned 1
[0162.468] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9004051e
[0162.468] GetClipRgn (hdc=0x280107aa, hrgn=0x9004051e) returned 0
[0162.468] SelectClipRgn (hdc=0x280107aa, hrgn=0x970407a1) returned 2
[0162.468] DeleteObject (ho=0x9004051e) returned 1
[0162.468] DeleteObject (ho=0x970407a1) returned 1
[0162.468] OffsetViewportOrgEx (in: hdc=0x280107aa, x=0, y=0, lppt=0x2358270 | out: lppt=0x2358270) returned 1
[0162.468] GetNearestColor (hdc=0x280107aa, color=0xf0f0f0) returned 0xf0f0f0
[0162.468] CreateSolidBrush (color=0xf0f0f0) returned 0x7c10078d
[0162.468] FillRect (hDC=0x280107aa, lprc=0x53e1f4, hbr=0x7c10078d) returned 1
[0162.470] DeleteObject (ho=0x7c10078d) returned 1
[0162.470] RestoreDC (hdc=0x280107aa, nSavedDC=-1) returned 1
[0162.470] GdipReleaseDC (graphics=0x5da0378, hdc=0x280107aa) returned 0x0
[0162.470] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd950dbd) returned 0x0
[0162.470] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0162.470] GetWindowTextLengthW (hWnd=0x202d8) returned 16
[0162.470] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0162.470] GetSystemMetrics (nIndex=42) returned 0
[0162.470] GetWindowTextW (in: hWnd=0x202d8, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0162.470] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0162.470] GdipGetDC (graphics=0x5da0378, hdc=0x53e210) returned 0x0
[0162.470] GetCurrentObject (hdc=0x280107aa, type=0x1) returned 0xb00017
[0162.470] GetCurrentObject (hdc=0x280107aa, type=0x2) returned 0x900010
[0162.470] GetCurrentObject (hdc=0x280107aa, type=0x7) returned 0x1e0507b9
[0162.497] GetCurrentObject (hdc=0x280107aa, type=0x6) returned 0x8a01c2
[0162.497] SaveDC (hdc=0x280107aa) returned 1
[0162.498] GetNearestColor (hdc=0x280107aa, color=0x0) returned 0x0
[0162.498] RestoreDC (hdc=0x280107aa, nSavedDC=-1) returned 1
[0162.498] GdipReleaseDC (graphics=0x5da0378, hdc=0x280107aa) returned 0x0
[0162.498] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0162.499] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0162.499] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0162.499] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2358578 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0162.500] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e1b0) returned 0x0
[0162.500] GdipGetDC (graphics=0x5da0378, hdc=0x53e19c) returned 0x0
[0162.500] GetCurrentObject (hdc=0x280107aa, type=0x1) returned 0xb00017
[0162.500] GetCurrentObject (hdc=0x280107aa, type=0x2) returned 0x900010
[0162.500] GetCurrentObject (hdc=0x280107aa, type=0x7) returned 0x1e0507b9
[0162.500] GetCurrentObject (hdc=0x280107aa, type=0x6) returned 0x8a01c2
[0162.500] SaveDC (hdc=0x280107aa) returned 1
[0162.500] GetTextAlign (hdc=0x280107aa) returned 0x0
[0162.500] GetTextColor (hdc=0x280107aa) returned 0x0
[0162.500] GetCurrentObject (hdc=0x280107aa, type=0x6) returned 0x8a01c2
[0162.501] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0162.501] SelectObject (hdc=0x280107aa, h=0x730a066d) returned 0x8a01c2
[0162.501] GetBkMode (hdc=0x280107aa) returned 2
[0162.501] SetBkMode (hdc=0x280107aa, mode=1) returned 2
[0162.501] DrawTextExW (in: hdc=0x280107aa, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x235879c | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0162.501] RestoreDC (hdc=0x280107aa, nSavedDC=-1) returned 1
[0162.502] GdipReleaseDC (graphics=0x5da0378, hdc=0x280107aa) returned 0x0
[0162.502] GdipGetDC (graphics=0x5da0378, hdc=0x53e34c) returned 0x0
[0162.502] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=250, cy=70, hdcSrc=0x280107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0162.502] GdipReleaseDC (graphics=0x5da0378, hdc=0x280107aa) returned 0x0
[0162.502] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0162.502] SelectObject (hdc=0x280107aa, h=0x85000f) returned 0x1e0507b9
[0162.502] DeleteDC (hdc=0x280107aa) returned 1
[0162.502] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0162.502] EndPaint (hWnd=0x202d8, lpPaint=0x53e2f0) returned 1
[0162.503] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.503] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x84, wParam=0x0, lParam=0x1970363) returned 0x1
[0162.503] IsWindowUnicode (hWnd=0x202d2) returned 1
[0162.503] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.503] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x84, wParam=0x0, lParam=0x1970363) returned 0x1
[0162.503] GetDlgItem (hDlg=0x202d6, nIDDlgItem=0) returned 0x0
[0162.503] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x210, wParam=0x201, lParam=0x1a0144) returned 0x0
[0162.503] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x21, wParam=0x202d6, lParam=0x2010001) returned 0x1
[0162.503] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x21, wParam=0x202d6, lParam=0x2010001) returned 0x1
[0162.504] SetCursor (hCursor=0x10003) returned 0x10003
[0162.504] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.504] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.504] GetKeyState (nVirtKey=1) returned -128
[0162.504] GetKeyState (nVirtKey=2) returned 0
[0162.504] GetKeyState (nVirtKey=4) returned 0
[0162.504] GetKeyState (nVirtKey=5) returned 0
[0162.504] GetKeyState (nVirtKey=6) returned 0
[0162.504] IsWindowVisible (hWnd=0x202d2) returned 1
[0162.504] IsWindowEnabled (hWnd=0x202d2) returned 1
[0162.504] SetFocus (hWnd=0x202d2) returned 0x202c8
[0162.505] GetFocus () returned 0x202d2
[0162.505] IsChild (hWndParent=0x202d6, hWnd=0x202d2) returned 1
[0162.505] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x8, wParam=0x202d2, lParam=0x0) returned 0x1
[0162.505] SendMessageW (hWnd=0x202c8, Msg=0x2111, wParam=0x20002c8, lParam=0x202c8) returned 0x0
[0162.506] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0162.507] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0162.508] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0162.508] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0162.509] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0162.509] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0162.511] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0162.511] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x7, wParam=0x202c8, lParam=0x0) returned 0x0
[0162.511] GetStockObject (i=5) returned 0x900015
[0162.511] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0162.511] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0xd, wParam=0x3, lParam=0x89e7c8) returned 0x2
[0162.512] GetDlgItem (hDlg=0x202d6, nIDDlgItem=131794) returned 0x202d2
[0162.512] SendMessageW (hWnd=0x202d2, Msg=0x202b, wParam=0x202d2, lParam=0x53de74) returned 0x0
[0162.512] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x202b, wParam=0x202d2, lParam=0x53de74) returned 0x0
[0162.512] InvalidateRect (hWnd=0x202d2, lpRect=0x0, bErase=0) returned 1
[0162.513] GetFocus () returned 0x202d2
[0162.513] GetFocus () returned 0x202d2
[0162.514] GetFocus () returned 0x202d2
[0162.514] GetKeyState (nVirtKey=1) returned -128
[0162.514] GetKeyState (nVirtKey=2) returned 0
[0162.514] GetKeyState (nVirtKey=4) returned 0
[0162.514] GetKeyState (nVirtKey=5) returned 0
[0162.514] GetKeyState (nVirtKey=6) returned 0
[0162.514] GetCapture () returned 0x0
[0162.514] SetCapture (hWnd=0x202d2) returned 0x0
[0162.514] GetKeyState (nVirtKey=1) returned -128
[0162.514] GetKeyState (nVirtKey=2) returned 0
[0162.514] GetKeyState (nVirtKey=4) returned 0
[0162.514] GetKeyState (nVirtKey=5) returned 0
[0162.514] GetKeyState (nVirtKey=6) returned 0
[0162.514] NotifyWinEvent (event=0x800a, hwnd=0x202d2, idObject=-4, idChild=0)
[0162.514] InvalidateRect (hWnd=0x202d2, lpRect=0x53e4c8, bErase=0) returned 1
[0162.514] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.514] IsWindowUnicode (hWnd=0x202d2) returned 1
[0162.514] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.515] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0162.515] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0162.515] MapWindowPoints (in: hWndFrom=0x202d2, hWndTo=0x0, lpPoints=0x2358878, cPoints=0x1 | out: lpPoints=0x2358878) returned 25756481
[0162.515] NotifyWinEvent (event=0x800a, hwnd=0x202d2, idObject=-4, idChild=0)
[0162.515] InvalidateRect (hWnd=0x202d2, lpRect=0x53e468, bErase=0) returned 1
[0162.515] UpdateWindow (hWnd=0x202d2) returned 1
[0162.515] BeginPaint (in: hWnd=0x202d2, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0xf0105ee
[0162.515] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0162.516] CreateCompatibleDC (hdc=0xf0105ee) returned 0x2a0107aa
[0162.516] SelectObject (hdc=0x2a0107aa, h=0x1e0507b9) returned 0x85000f
[0162.516] GdipCreateFromHDC (hdc=0x2a0107aa, graphics=0x53df98) returned 0x0
[0162.516] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0162.516] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0162.516] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0162.516] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0162.516] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dff8) returned 0x0
[0162.516] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0162.516] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0162.516] LocalFree (hMem=0x89eac0) returned 0x0
[0162.516] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0162.517] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0162.517] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0162.517] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dfec) returned 0x0
[0162.517] GdipSaveGraphics (graphics=0x5da0378, state=0x53e018) returned 0x0
[0162.517] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd930dbd) returned 0x0
[0162.517] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0162.517] GdipGetDC (graphics=0x5da0378, hdc=0x53ddf8) returned 0x0
[0162.517] GetCurrentObject (hdc=0x2a0107aa, type=0x1) returned 0xb00017
[0162.517] GetCurrentObject (hdc=0x2a0107aa, type=0x2) returned 0x900010
[0162.517] GetCurrentObject (hdc=0x2a0107aa, type=0x7) returned 0x1e0507b9
[0162.520] GetCurrentObject (hdc=0x2a0107aa, type=0x6) returned 0x8a01c2
[0162.520] SaveDC (hdc=0x2a0107aa) returned 1
[0162.520] GetNearestColor (hdc=0x2a0107aa, color=0xf0f0f0) returned 0xf0f0f0
[0162.520] GetNearestColor (hdc=0x2a0107aa, color=0xa0a0a0) returned 0xa0a0a0
[0162.520] GetNearestColor (hdc=0x2a0107aa, color=0x696969) returned 0x696969
[0162.520] GetNearestColor (hdc=0x2a0107aa, color=0xa0a0a0) returned 0xa0a0a0
[0162.521] GetNearestColor (hdc=0x2a0107aa, color=0x0) returned 0x0
[0162.521] GetNearestColor (hdc=0x2a0107aa, color=0xffffff) returned 0xffffff
[0162.521] GetNearestColor (hdc=0x2a0107aa, color=0xe5e5e5) returned 0xe5e5e5
[0162.521] GetNearestColor (hdc=0x2a0107aa, color=0xd7d7d7) returned 0xd7d7d7
[0162.521] GetNearestColor (hdc=0x2a0107aa, color=0x0) returned 0x0
[0162.521] RestoreDC (hdc=0x2a0107aa, nSavedDC=-1) returned 1
[0162.521] GdipReleaseDC (graphics=0x5da0378, hdc=0x2a0107aa) returned 0x0
[0162.521] IsAppThemed () returned 0x1
[0162.521] GetThemeAppProperties () returned 0x3
[0162.521] GetThemeAppProperties () returned 0x3
[0162.521] IsAppThemed () returned 0x1
[0162.521] GetThemeAppProperties () returned 0x3
[0162.521] GetThemeAppProperties () returned 0x3
[0162.522] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x2358ff8 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0162.522] IsAppThemed () returned 0x1
[0162.522] GetThemeAppProperties () returned 0x3
[0162.522] GetThemeAppProperties () returned 0x3
[0162.522] IsAppThemed () returned 0x1
[0162.522] GetThemeAppProperties () returned 0x3
[0162.522] GetThemeAppProperties () returned 0x3
[0162.522] IsAppThemed () returned 0x1
[0162.522] GetThemeAppProperties () returned 0x3
[0162.522] GetThemeAppProperties () returned 0x3
[0162.522] IsAppThemed () returned 0x1
[0162.523] GetThemeAppProperties () returned 0x3
[0162.523] GetThemeAppProperties () returned 0x3
[0162.523] IsThemePartDefined () returned 0x1
[0162.523] IsAppThemed () returned 0x1
[0162.523] GetThemeAppProperties () returned 0x3
[0162.523] GetThemeAppProperties () returned 0x3
[0162.523] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0162.523] IsAppThemed () returned 0x1
[0162.523] GetThemeAppProperties () returned 0x3
[0162.523] GetThemeAppProperties () returned 0x3
[0162.523] IsAppThemed () returned 0x1
[0162.523] GetThemeAppProperties () returned 0x3
[0162.523] GetThemeAppProperties () returned 0x3
[0162.523] IsThemePartDefined () returned 0x1
[0162.523] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0162.523] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0162.523] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0162.523] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0162.523] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53dd14) returned 0x0
[0162.524] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0162.524] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0162.524] LocalFree (hMem=0x89eac0) returned 0x0
[0162.524] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0162.524] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0162.524] LocalFree (hMem=0x89eac0) returned 0x0
[0162.524] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0162.524] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd3c) returned 0x0
[0162.524] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd2c) returned 0x0
[0162.524] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dd2c) returned 0x0
[0162.524] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0162.524] GdipGetDC (graphics=0x5da0378, hdc=0x53dd44) returned 0x0
[0162.524] GetCurrentObject (hdc=0x2a0107aa, type=0x1) returned 0xb00017
[0162.524] GetCurrentObject (hdc=0x2a0107aa, type=0x2) returned 0x900010
[0162.524] GetCurrentObject (hdc=0x2a0107aa, type=0x7) returned 0x1e0507b9
[0162.524] GetCurrentObject (hdc=0x2a0107aa, type=0x6) returned 0x8a01c2
[0162.524] SaveDC (hdc=0x2a0107aa) returned 1
[0162.525] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x980407a1
[0162.525] GetClipRgn (hdc=0x2a0107aa, hrgn=0x980407a1) returned 0
[0162.525] SelectClipRgn (hdc=0x2a0107aa, hrgn=0x9404051e) returned 2
[0162.525] DeleteObject (ho=0x980407a1) returned 1
[0162.525] DeleteObject (ho=0x9404051e) returned 1
[0162.525] OffsetViewportOrgEx (in: hdc=0x2a0107aa, x=0, y=0, lppt=0x23596a8 | out: lppt=0x23596a8) returned 1
[0162.525] DrawThemeParentBackground () returned 0x0
[0162.525] GetWindowPlacement (in: hWnd=0x202d6, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0162.525] GetClientRect (in: hWnd=0x202d6, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0162.525] GetWindowTextLengthW (hWnd=0x202d6) returned 10
[0162.525] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0162.525] GetSystemMetrics (nIndex=42) returned 0
[0162.525] GetWindowTextW (in: hWnd=0x202d6, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0162.525] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0162.526] GetClientRect (in: hWnd=0x202d6, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0162.526] GetCurrentObject (hdc=0x2a0107aa, type=0x1) returned 0xb00017
[0162.526] GetCurrentObject (hdc=0x2a0107aa, type=0x2) returned 0x900010
[0162.526] GetCurrentObject (hdc=0x2a0107aa, type=0x7) returned 0x1e0507b9
[0162.526] GetCurrentObject (hdc=0x2a0107aa, type=0x6) returned 0x8a01c2
[0162.526] SaveDC (hdc=0x2a0107aa) returned 2
[0162.526] GetNearestColor (hdc=0x2a0107aa, color=0xf0f0f0) returned 0xf0f0f0
[0162.526] CreateSolidBrush (color=0xf0f0f0) returned 0x7d10078d
[0162.526] FillRect (hDC=0x2a0107aa, lprc=0x53d760, hbr=0x7d10078d) returned 1
[0162.526] DeleteObject (ho=0x7d10078d) returned 1
[0162.526] RestoreDC (hdc=0x2a0107aa, nSavedDC=-1) returned 1
[0162.526] GetWindowTextLengthW (hWnd=0x202d6) returned 10
[0162.526] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0162.527] GetSystemMetrics (nIndex=42) returned 0
[0162.527] GetWindowTextW (in: hWnd=0x202d6, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0162.527] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0162.527] GetClientRect (in: hWnd=0x202d6, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0162.527] GetCurrentObject (hdc=0x2a0107aa, type=0x1) returned 0xb00017
[0162.527] GetCurrentObject (hdc=0x2a0107aa, type=0x2) returned 0x900010
[0162.527] GetCurrentObject (hdc=0x2a0107aa, type=0x7) returned 0x1e0507b9
[0162.527] GetCurrentObject (hdc=0x2a0107aa, type=0x6) returned 0x8a01c2
[0162.527] SaveDC (hdc=0x2a0107aa) returned 2
[0162.527] GetNearestColor (hdc=0x2a0107aa, color=0xf0f0f0) returned 0xf0f0f0
[0162.527] CreateSolidBrush (color=0xf0f0f0) returned 0x7e10078d
[0162.527] FillRect (hDC=0x2a0107aa, lprc=0x53d700, hbr=0x7e10078d) returned 1
[0162.527] DeleteObject (ho=0x7e10078d) returned 1
[0162.527] RestoreDC (hdc=0x2a0107aa, nSavedDC=-1) returned 1
[0162.527] GetWindowTextLengthW (hWnd=0x202d6) returned 10
[0162.527] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0162.528] GetSystemMetrics (nIndex=42) returned 0
[0162.528] GetWindowTextW (in: hWnd=0x202d6, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0162.528] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0162.528] RestoreDC (hdc=0x2a0107aa, nSavedDC=-1) returned 1
[0162.528] GdipReleaseDC (graphics=0x5da0378, hdc=0x2a0107aa) returned 0x0
[0162.528] IsAppThemed () returned 0x1
[0162.528] GetThemeAppProperties () returned 0x3
[0162.528] GetThemeAppProperties () returned 0x3
[0162.528] IsAppThemed () returned 0x1
[0162.528] GetThemeAppProperties () returned 0x3
[0162.529] GetThemeAppProperties () returned 0x3
[0162.529] IsThemePartDefined () returned 0x1
[0162.529] GdipCreateRegion (region=0x53dc80) returned 0x0
[0162.529] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0162.529] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0162.529] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0162.529] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc98) returned 0x0
[0162.529] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0162.529] LocalFree (hMem=0x89eac0) returned 0x0
[0162.529] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0162.529] LocalFree (hMem=0x89eac0) returned 0x0
[0162.529] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0162.529] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcc0) returned 0x0
[0162.529] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcb0) returned 0x0
[0162.529] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dcb0) returned 0x0
[0162.529] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0162.529] GdipGetDC (graphics=0x5da0378, hdc=0x53dcc8) returned 0x0
[0162.530] GetCurrentObject (hdc=0x2a0107aa, type=0x1) returned 0xb00017
[0162.530] GetCurrentObject (hdc=0x2a0107aa, type=0x2) returned 0x900010
[0162.530] GetCurrentObject (hdc=0x2a0107aa, type=0x7) returned 0x1e0507b9
[0162.530] GetCurrentObject (hdc=0x2a0107aa, type=0x6) returned 0x8a01c2
[0162.530] SaveDC (hdc=0x2a0107aa) returned 1
[0162.530] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9504051e
[0162.530] GetClipRgn (hdc=0x2a0107aa, hrgn=0x9504051e) returned 0
[0162.530] SelectClipRgn (hdc=0x2a0107aa, hrgn=0x9a0407a1) returned 2
[0162.530] DeleteObject (ho=0x9504051e) returned 1
[0162.530] DeleteObject (ho=0x9a0407a1) returned 1
[0162.530] OffsetViewportOrgEx (in: hdc=0x2a0107aa, x=0, y=0, lppt=0x235ddf4 | out: lppt=0x235ddf4) returned 1
[0162.530] IsAppThemed () returned 0x1
[0162.530] GetThemeAppProperties () returned 0x3
[0162.530] GetThemeAppProperties () returned 0x3
[0162.530] DrawThemeBackground () returned 0x0
[0162.530] RestoreDC (hdc=0x2a0107aa, nSavedDC=-1) returned 1
[0162.531] GdipReleaseDC (graphics=0x5da0378, hdc=0x2a0107aa) returned 0x0
[0162.531] GdipCreateRegion (region=0x53dc84) returned 0x0
[0162.531] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0162.531] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0162.531] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0162.531] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53dc9c) returned 0x0
[0162.531] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89edd0) returned 0x0
[0162.531] LocalFree (hMem=0x89edd0) returned 0x0
[0162.531] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0162.531] LocalFree (hMem=0x89eac0) returned 0x0
[0162.531] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0162.531] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcc4) returned 0x0
[0162.531] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcb4) returned 0x0
[0162.531] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dcb4) returned 0x0
[0162.531] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0162.531] GdipGetDC (graphics=0x5da0378, hdc=0x53dccc) returned 0x0
[0162.531] GetCurrentObject (hdc=0x2a0107aa, type=0x1) returned 0xb00017
[0162.531] GetCurrentObject (hdc=0x2a0107aa, type=0x2) returned 0x900010
[0162.531] GetCurrentObject (hdc=0x2a0107aa, type=0x7) returned 0x1e0507b9
[0162.532] GetCurrentObject (hdc=0x2a0107aa, type=0x6) returned 0x8a01c2
[0162.532] SaveDC (hdc=0x2a0107aa) returned 1
[0162.532] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9b0407a1
[0162.532] GetClipRgn (hdc=0x2a0107aa, hrgn=0x9b0407a1) returned 0
[0162.532] SelectClipRgn (hdc=0x2a0107aa, hrgn=0x9604051e) returned 2
[0162.532] DeleteObject (ho=0x9b0407a1) returned 1
[0162.532] DeleteObject (ho=0x9604051e) returned 1
[0162.532] OffsetViewportOrgEx (in: hdc=0x2a0107aa, x=0, y=0, lppt=0x235e0c8 | out: lppt=0x235e0c8) returned 1
[0162.532] IsAppThemed () returned 0x1
[0162.532] GetThemeAppProperties () returned 0x3
[0162.532] GetThemeAppProperties () returned 0x3
[0162.532] GetThemeBackgroundContentRect () returned 0x0
[0162.532] RestoreDC (hdc=0x2a0107aa, nSavedDC=-1) returned 1
[0162.532] GdipReleaseDC (graphics=0x5da0378, hdc=0x2a0107aa) returned 0x0
[0162.532] IsAppThemed () returned 0x1
[0162.533] GetThemeAppProperties () returned 0x3
[0162.533] GetThemeAppProperties () returned 0x3
[0162.533] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53de00) returned 0x0
[0162.533] GdipGetDC (graphics=0x5da0378, hdc=0x53ddec) returned 0x0
[0162.533] GetCurrentObject (hdc=0x2a0107aa, type=0x1) returned 0xb00017
[0162.533] GetCurrentObject (hdc=0x2a0107aa, type=0x2) returned 0x900010
[0162.533] GetCurrentObject (hdc=0x2a0107aa, type=0x7) returned 0x1e0507b9
[0162.533] GetCurrentObject (hdc=0x2a0107aa, type=0x6) returned 0x8a01c2
[0162.533] SaveDC (hdc=0x2a0107aa) returned 1
[0162.533] GetTextAlign (hdc=0x2a0107aa) returned 0x0
[0162.533] GetTextColor (hdc=0x2a0107aa) returned 0x0
[0162.534] GetCurrentObject (hdc=0x2a0107aa, type=0x6) returned 0x8a01c2
[0162.534] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0162.534] SelectObject (hdc=0x2a0107aa, h=0x730a066d) returned 0x8a01c2
[0162.534] GetBkMode (hdc=0x2a0107aa) returned 2
[0162.534] SetBkMode (hdc=0x2a0107aa, mode=1) returned 2
[0162.534] DrawTextExW (in: hdc=0x2a0107aa, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x235e468 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0162.534] DrawTextExW (in: hdc=0x2a0107aa, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x235e468 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0162.537] RestoreDC (hdc=0x2a0107aa, nSavedDC=-1) returned 1
[0162.537] GdipReleaseDC (graphics=0x5da0378, hdc=0x2a0107aa) returned 0x0
[0162.537] GetFocus () returned 0x202d2
[0162.537] IsAppThemed () returned 0x1
[0162.537] GetThemeAppProperties () returned 0x3
[0162.537] GetThemeAppProperties () returned 0x3
[0162.537] GdipGetDC (graphics=0x5da0378, hdc=0x53dfd8) returned 0x0
[0162.537] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x2a0107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0162.538] GdipReleaseDC (graphics=0x5da0378, hdc=0x2a0107aa) returned 0x0
[0162.538] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0162.538] SelectObject (hdc=0x2a0107aa, h=0x85000f) returned 0x1e0507b9
[0162.538] DeleteDC (hdc=0x2a0107aa) returned 1
[0162.538] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0162.538] EndPaint (hWnd=0x202d2, lpPaint=0x53df7c) returned 1
[0162.538] MapWindowPoints (in: hWndFrom=0x202d2, hWndTo=0x0, lpPoints=0x235e564, cPoints=0x1 | out: lpPoints=0x235e564) returned 25756481
[0162.538] WindowFromPoint (Point=0x363) returned 0x202d2
[0162.538] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x84, wParam=0x0, lParam=0x1970363) returned 0x1
[0162.539] NotifyWinEvent (event=0x800a, hwnd=0x202d2, idObject=-4, idChild=0)
[0162.539] NotifyWinEvent (event=0x800c, hwnd=0x202d2, idObject=-4, idChild=0)
[0162.542] GetWindowTextLengthW (hWnd=0x202c8) returned 0
[0162.543] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0162.543] GetSystemMetrics (nIndex=42) returned 0
[0162.543] GetWindowTextW (in: hWnd=0x202c8, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0162.543] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0162.543] SendMessageW (hWnd=0x202d6, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0162.543] GetCapture () returned 0x202d2
[0162.543] ReleaseCapture () returned 1
[0162.543] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0162.544] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0162.544] IsWindow (hWnd=0x70036) returned 1
[0162.544] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0162.545] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0162.545] IsWindow (hWnd=0x70036) returned 1
[0162.545] SetActiveWindow (hWnd=0x70036) returned 0x202d6
[0162.545] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0162.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0162.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0162.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0162.553] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0162.553] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0162.553] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0162.553] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x202d6) returned 0x1
[0162.557] GetFocus () returned 0x202d2
[0162.557] SetFocus (hWnd=0x202c6) returned 0x202d2
[0162.558] GetFocus () returned 0x202c6
[0162.558] IsChild (hWndParent=0x202d6, hWnd=0x202c6) returned 0
[0162.558] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0162.558] GetCapture () returned 0x0
[0162.558] InvalidateRect (hWnd=0x202d2, lpRect=0x0, bErase=0) returned 1
[0162.559] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0162.560] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0162.563] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0162.563] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0162.563] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0162.563] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0162.564] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0162.564] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x202d2, lParam=0x0) returned 0x0
[0162.573] GetStockObject (i=5) returned 0x900015
[0162.573] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0162.573] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8db5a0) returned 0x7
[0162.573] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0162.573] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0162.573] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0162.574] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0162.577] IsWindow (hWnd=0x202c6) returned 1
[0162.577] SetFocus (hWnd=0x202c6) returned 0x202c6
[0162.577] GetWindowLongW (hWnd=0x202d6, nIndex=-8) returned 458806
[0162.577] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0162.577] GetCurrentThreadId () returned 0x11d0
[0162.577] IsWindow (hWnd=0x70036) returned 1
[0162.577] IsWindow (hWnd=0x70036) returned 1
[0162.577] IsWindowVisible (hWnd=0x70036) returned 1
[0162.577] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0162.577] GetFocus () returned 0x202c6
[0162.577] IsChild (hWndParent=0x202d6, hWnd=0x202c6) returned 0
[0162.577] ShowWindow (hWnd=0x202d6, nCmdShow=0) returned 1
[0162.577] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0162.578] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0162.580] GetWindowPlacement (in: hWnd=0x202d6, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0162.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0162.580] GetClientRect (in: hWnd=0x202d6, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0162.580] GetWindowRect (in: hWnd=0x202d6, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0162.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0162.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0162.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0162.582] GetWindowLongW (hWnd=0x202d6, nIndex=-20) returned 327937
[0162.582] DestroyWindow (hWnd=0x202d6) returned 1
[0162.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0162.618] GetWindowTextLengthW (hWnd=0x202d6) returned 10
[0162.618] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0162.618] GetSystemMetrics (nIndex=42) returned 0
[0162.618] GetWindowTextW (in: hWnd=0x202d6, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0162.619] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0162.619] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0162.619] SendMessageW (hWnd=0x202c8, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0162.619] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0162.619] SendMessageW (hWnd=0x202c8, Msg=0xb0, wParam=0x23341b0, lParam=0x53e518) returned 0x0
[0162.619] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xb0, wParam=0x23341b0, lParam=0x53e518) returned 0x0
[0162.619] GetWindowTextLengthW (hWnd=0x202c8) returned 0
[0162.619] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0162.619] GetSystemMetrics (nIndex=42) returned 0
[0162.620] GetWindowTextW (in: hWnd=0x202c8, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0162.620] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0162.620] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0162.620] GetWindowThreadProcessId (in: hWnd=0x202da, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0162.620] GetWindow (hWnd=0x202da, uCmd=0x5) returned 0x0
[0162.620] GetWindowLongW (hWnd=0x202da, nIndex=-20) returned 65792
[0162.620] DestroyWindow (hWnd=0x202da) returned 1
[0162.620] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202da, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0162.621] GetWindowTextLengthW (hWnd=0x202da) returned 25
[0162.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0162.621] GetSystemMetrics (nIndex=42) returned 0
[0162.621] GetWindowTextW (in: hWnd=0x202da, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0162.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202da, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0162.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202da, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0162.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202da, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0162.623] GetWindowTextLengthW (hWnd=0x202d8) returned 16
[0162.623] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0162.623] GetSystemMetrics (nIndex=42) returned 0
[0162.623] GetWindowTextW (in: hWnd=0x202d8, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0162.623] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0162.623] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0162.624] InvalidateRect (hWnd=0x202d2, lpRect=0x0, bErase=0) returned 1
[0162.624] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0162.624] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0162.624] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x202c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0162.626] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x202d8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0162.628] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0162.630] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0162.631] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0162.805] GetProcessWindowStation () returned 0x13c
[0162.806] GetActiveWindow () returned 0x70036
[0162.806] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0162.806] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0162.806] GetCurrentThreadId () returned 0x11d0
[0162.807] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3abe, lParam=0x0) returned 1
[0162.807] IsWindowVisible (hWnd=0x70036) returned 1
[0162.807] IsWindowEnabled (hWnd=0x70036) returned 1
[0162.807] IsWindowVisible (hWnd=0x602b6) returned 0
[0162.807] IsWindowVisible (hWnd=0x901f8) returned 0
[0162.807] IsWindowVisible (hWnd=0x202d0) returned 0
[0162.807] IsWindowVisible (hWnd=0x202d4) returned 0
[0162.807] GetActiveWindow () returned 0x70036
[0162.808] GetFocus () returned 0x202c6
[0162.808] IsWindow (hWnd=0x70036) returned 1
[0162.808] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0162.808] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0162.809] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0162.811] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0162.844] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0162.866] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x302d6) returned 0x1
[0162.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0162.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0162.873] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x6013e, lParam=0x0) returned 0x0
[0162.873] GetCapture () returned 0x0
[0162.873] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0162.874] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0162.885] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0162.885] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0162.889] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x8b010786
[0162.889] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0162.889] CreateCompatibleDC (hdc=0x8b010786) returned 0xf90107b0
[0162.889] SelectObject (hdc=0xf90107b0, h=0x1e0507b9) returned 0x85000f
[0162.889] GdipCreateFromHDC (hdc=0xf90107b0, graphics=0x53e108) returned 0x0
[0162.890] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0162.890] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0162.890] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0162.890] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0162.890] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e168) returned 0x0
[0162.890] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89edd0
[0162.890] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89edd0) returned 0x0
[0162.890] LocalFree (hMem=0x89edd0) returned 0x0
[0162.890] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0162.890] GdipCreateRegion (region=0x53e150) returned 0x0
[0162.890] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0162.890] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e15c) returned 0x0
[0162.890] GdipSaveGraphics (graphics=0x5da0378, state=0x53e188) returned 0x0
[0162.890] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd910dbd) returned 0x0
[0162.890] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0162.891] GdipGetDC (graphics=0x5da0378, hdc=0x53df74) returned 0x0
[0162.891] GetCurrentObject (hdc=0xf90107b0, type=0x1) returned 0xb00017
[0162.891] GetCurrentObject (hdc=0xf90107b0, type=0x2) returned 0x900010
[0162.891] GetCurrentObject (hdc=0xf90107b0, type=0x7) returned 0x1e0507b9
[0162.891] GetCurrentObject (hdc=0xf90107b0, type=0x6) returned 0x8a01c2
[0162.891] SaveDC (hdc=0xf90107b0) returned 1
[0162.891] GetNearestColor (hdc=0xf90107b0, color=0xff) returned 0xff
[0162.891] GetNearestColor (hdc=0xf90107b0, color=0x55) returned 0x55
[0162.891] GetNearestColor (hdc=0xf90107b0, color=0x0) returned 0x0
[0162.891] GetNearestColor (hdc=0xf90107b0, color=0x55) returned 0x55
[0162.892] GetNearestColor (hdc=0xf90107b0, color=0x0) returned 0x0
[0162.892] GetNearestColor (hdc=0xf90107b0, color=0x8080ff) returned 0x8080ff
[0162.892] GetNearestColor (hdc=0xf90107b0, color=0x7373e5) returned 0x7373e5
[0162.892] GetNearestColor (hdc=0xf90107b0, color=0xe5) returned 0xe5
[0162.892] GetNearestColor (hdc=0xf90107b0, color=0x0) returned 0x0
[0162.892] RestoreDC (hdc=0xf90107b0, nSavedDC=-1) returned 1
[0162.892] GdipReleaseDC (graphics=0x5da0378, hdc=0xf90107b0) returned 0x0
[0162.892] IsAppThemed () returned 0x1
[0162.892] GetThemeAppProperties () returned 0x3
[0162.892] GetThemeAppProperties () returned 0x3
[0162.892] IsAppThemed () returned 0x1
[0162.894] GetThemeAppProperties () returned 0x3
[0162.894] GetThemeAppProperties () returned 0x3
[0162.894] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0162.894] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x235f880 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0162.894] IsAppThemed () returned 0x1
[0162.894] GetThemeAppProperties () returned 0x3
[0162.894] GetThemeAppProperties () returned 0x3
[0162.894] IsAppThemed () returned 0x1
[0162.895] GetThemeAppProperties () returned 0x3
[0162.895] GetThemeAppProperties () returned 0x3
[0162.895] GetFocus () returned 0x6013e
[0162.895] IsAppThemed () returned 0x1
[0162.895] GetThemeAppProperties () returned 0x3
[0162.895] GetThemeAppProperties () returned 0x3
[0162.895] IsAppThemed () returned 0x1
[0162.895] GetThemeAppProperties () returned 0x3
[0162.895] GetThemeAppProperties () returned 0x3
[0162.895] IsThemePartDefined () returned 0x1
[0162.895] IsAppThemed () returned 0x1
[0162.895] GetThemeAppProperties () returned 0x3
[0162.895] GetThemeAppProperties () returned 0x3
[0162.895] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0162.895] IsAppThemed () returned 0x1
[0162.895] GetThemeAppProperties () returned 0x3
[0162.896] GetThemeAppProperties () returned 0x3
[0162.896] IsAppThemed () returned 0x1
[0162.896] GetThemeAppProperties () returned 0x3
[0162.896] GetThemeAppProperties () returned 0x3
[0162.896] IsThemePartDefined () returned 0x1
[0162.896] GdipCreateRegion (region=0x53de78) returned 0x0
[0162.896] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0162.896] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0162.896] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0162.896] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53de90) returned 0x0
[0162.896] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10
[0162.896] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec10) returned 0x0
[0162.896] LocalFree (hMem=0x89ec10) returned 0x0
[0162.896] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89edd0
[0162.896] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89edd0) returned 0x0
[0162.896] LocalFree (hMem=0x89edd0) returned 0x0
[0162.896] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0162.896] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53deb8) returned 0x0
[0162.897] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dea8) returned 0x0
[0162.897] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dea8) returned 0x0
[0162.897] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0162.897] GdipGetDC (graphics=0x5da0378, hdc=0x53dec0) returned 0x0
[0162.897] GetCurrentObject (hdc=0xf90107b0, type=0x1) returned 0xb00017
[0162.897] GetCurrentObject (hdc=0xf90107b0, type=0x2) returned 0x900010
[0162.897] GetCurrentObject (hdc=0xf90107b0, type=0x7) returned 0x1e0507b9
[0162.897] GetCurrentObject (hdc=0xf90107b0, type=0x6) returned 0x8a01c2
[0162.897] SaveDC (hdc=0xf90107b0) returned 1
[0162.897] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9704051e
[0162.897] GetClipRgn (hdc=0xf90107b0, hrgn=0x9704051e) returned 0
[0162.897] SelectClipRgn (hdc=0xf90107b0, hrgn=0xa10407a1) returned 2
[0162.897] DeleteObject (ho=0x9704051e) returned 1
[0162.897] DeleteObject (ho=0xa10407a1) returned 1
[0162.897] OffsetViewportOrgEx (in: hdc=0xf90107b0, x=0, y=0, lppt=0x235ff30 | out: lppt=0x235ff30) returned 1
[0162.898] DrawThemeParentBackground () returned 0x0
[0162.898] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0162.898] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0162.898] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0162.898] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0162.898] GetSystemMetrics (nIndex=42) returned 0
[0162.898] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0162.898] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0162.898] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0162.898] GetCurrentObject (hdc=0xf90107b0, type=0x1) returned 0xb00017
[0162.898] GetCurrentObject (hdc=0xf90107b0, type=0x2) returned 0x900010
[0162.898] GetCurrentObject (hdc=0xf90107b0, type=0x7) returned 0x1e0507b9
[0162.898] GetCurrentObject (hdc=0xf90107b0, type=0x6) returned 0x8a01c2
[0162.898] SaveDC (hdc=0xf90107b0) returned 2
[0162.899] GetNearestColor (hdc=0xf90107b0, color=0xff) returned 0xff
[0162.899] CreateSolidBrush (color=0xff) returned 0x7f10078d
[0162.899] FillRect (hDC=0xf90107b0, lprc=0x53d8d8, hbr=0x7f10078d) returned 1
[0162.899] DeleteObject (ho=0x7f10078d) returned 1
[0162.899] RestoreDC (hdc=0xf90107b0, nSavedDC=-1) returned 1
[0162.899] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0162.899] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0162.899] GetSystemMetrics (nIndex=42) returned 0
[0162.899] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0162.899] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0162.899] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0162.899] GetCurrentObject (hdc=0xf90107b0, type=0x1) returned 0xb00017
[0162.899] GetCurrentObject (hdc=0xf90107b0, type=0x2) returned 0x900010
[0162.899] GetCurrentObject (hdc=0xf90107b0, type=0x7) returned 0x1e0507b9
[0162.900] GetCurrentObject (hdc=0xf90107b0, type=0x6) returned 0x8a01c2
[0162.900] SaveDC (hdc=0xf90107b0) returned 2
[0162.900] GetNearestColor (hdc=0xf90107b0, color=0xff) returned 0xff
[0162.900] CreateSolidBrush (color=0xff) returned 0x8010078d
[0162.900] FillRect (hDC=0xf90107b0, lprc=0x53d878, hbr=0x8010078d) returned 1
[0162.900] DeleteObject (ho=0x8010078d) returned 1
[0162.900] RestoreDC (hdc=0xf90107b0, nSavedDC=-1) returned 1
[0162.900] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0162.900] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0162.900] GetSystemMetrics (nIndex=42) returned 0
[0162.900] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0162.900] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0162.901] RestoreDC (hdc=0xf90107b0, nSavedDC=-1) returned 1
[0162.901] GdipReleaseDC (graphics=0x5da0378, hdc=0xf90107b0) returned 0x0
[0162.901] IsAppThemed () returned 0x1
[0162.901] GetThemeAppProperties () returned 0x3
[0162.901] GetThemeAppProperties () returned 0x3
[0162.901] IsAppThemed () returned 0x1
[0162.901] GetThemeAppProperties () returned 0x3
[0162.901] GetThemeAppProperties () returned 0x3
[0162.901] IsThemePartDefined () returned 0x1
[0162.901] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0162.901] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0162.901] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0162.901] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0162.901] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de14) returned 0x0
[0162.901] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0162.901] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0162.902] LocalFree (hMem=0x89ee08) returned 0x0
[0162.902] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0162.902] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0162.902] LocalFree (hMem=0x89eac0) returned 0x0
[0162.902] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0162.902] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de3c) returned 0x0
[0162.902] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de2c) returned 0x0
[0162.902] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53de2c) returned 0x0
[0162.902] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0162.902] GdipGetDC (graphics=0x5da0378, hdc=0x53de44) returned 0x0
[0162.902] GetCurrentObject (hdc=0xf90107b0, type=0x1) returned 0xb00017
[0162.902] GetCurrentObject (hdc=0xf90107b0, type=0x2) returned 0x900010
[0162.902] GetCurrentObject (hdc=0xf90107b0, type=0x7) returned 0x1e0507b9
[0162.902] GetCurrentObject (hdc=0xf90107b0, type=0x6) returned 0x8a01c2
[0162.902] SaveDC (hdc=0xf90107b0) returned 1
[0162.902] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa20407a1
[0162.903] GetClipRgn (hdc=0xf90107b0, hrgn=0xa20407a1) returned 0
[0162.903] SelectClipRgn (hdc=0xf90107b0, hrgn=0x9904051e) returned 2
[0162.903] DeleteObject (ho=0xa20407a1) returned 1
[0162.903] DeleteObject (ho=0x9904051e) returned 1
[0162.903] OffsetViewportOrgEx (in: hdc=0xf90107b0, x=0, y=0, lppt=0x2360794 | out: lppt=0x2360794) returned 1
[0162.903] IsAppThemed () returned 0x1
[0162.903] GetThemeAppProperties () returned 0x3
[0162.903] GetThemeAppProperties () returned 0x3
[0162.903] DrawThemeBackground () returned 0x0
[0162.903] RestoreDC (hdc=0xf90107b0, nSavedDC=-1) returned 1
[0162.903] GdipReleaseDC (graphics=0x5da0378, hdc=0xf90107b0) returned 0x0
[0162.903] GdipCreateRegion (region=0x53de00) returned 0x0
[0162.903] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0162.903] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0162.903] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0162.904] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53de18) returned 0x0
[0162.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0162.904] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0162.904] LocalFree (hMem=0x89eac0) returned 0x0
[0162.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0162.904] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0162.904] LocalFree (hMem=0x89eac0) returned 0x0
[0162.904] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0162.904] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de40) returned 0x0
[0162.904] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de30) returned 0x0
[0162.904] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53de30) returned 0x0
[0162.904] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0162.904] GdipGetDC (graphics=0x5da0378, hdc=0x53de48) returned 0x0
[0162.904] GetCurrentObject (hdc=0xf90107b0, type=0x1) returned 0xb00017
[0162.904] GetCurrentObject (hdc=0xf90107b0, type=0x2) returned 0x900010
[0162.904] GetCurrentObject (hdc=0xf90107b0, type=0x7) returned 0x1e0507b9
[0162.904] GetCurrentObject (hdc=0xf90107b0, type=0x6) returned 0x8a01c2
[0162.904] SaveDC (hdc=0xf90107b0) returned 1
[0162.905] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9a04051e
[0162.905] GetClipRgn (hdc=0xf90107b0, hrgn=0x9a04051e) returned 0
[0162.905] SelectClipRgn (hdc=0xf90107b0, hrgn=0xa30407a1) returned 2
[0162.905] DeleteObject (ho=0x9a04051e) returned 1
[0162.905] DeleteObject (ho=0xa30407a1) returned 1
[0162.905] OffsetViewportOrgEx (in: hdc=0xf90107b0, x=0, y=0, lppt=0x2360a68 | out: lppt=0x2360a68) returned 1
[0162.905] IsAppThemed () returned 0x1
[0162.905] GetThemeAppProperties () returned 0x3
[0162.905] GetThemeAppProperties () returned 0x3
[0162.905] GetThemeBackgroundContentRect () returned 0x0
[0162.905] RestoreDC (hdc=0xf90107b0, nSavedDC=-1) returned 1
[0162.905] GdipReleaseDC (graphics=0x5da0378, hdc=0xf90107b0) returned 0x0
[0162.905] IsAppThemed () returned 0x1
[0162.905] GetThemeAppProperties () returned 0x3
[0162.905] GetThemeAppProperties () returned 0x3
[0162.905] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53df7c) returned 0x0
[0162.905] GdipGetDC (graphics=0x5da0378, hdc=0x53df68) returned 0x0
[0162.906] GetCurrentObject (hdc=0xf90107b0, type=0x1) returned 0xb00017
[0162.906] GetCurrentObject (hdc=0xf90107b0, type=0x2) returned 0x900010
[0162.906] GetCurrentObject (hdc=0xf90107b0, type=0x7) returned 0x1e0507b9
[0162.906] GetCurrentObject (hdc=0xf90107b0, type=0x6) returned 0x8a01c2
[0162.906] SaveDC (hdc=0xf90107b0) returned 1
[0162.906] GetTextAlign (hdc=0xf90107b0) returned 0x0
[0162.906] GetTextColor (hdc=0xf90107b0) returned 0x0
[0162.906] GetCurrentObject (hdc=0xf90107b0, type=0x6) returned 0x8a01c2
[0162.906] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0162.906] SelectObject (hdc=0xf90107b0, h=0x450a0799) returned 0x8a01c2
[0162.906] GetBkMode (hdc=0xf90107b0) returned 2
[0162.906] SetBkMode (hdc=0xf90107b0, mode=1) returned 2
[0162.907] DrawTextExW (in: hdc=0xf90107b0, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2360e08 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0162.907] DrawTextExW (in: hdc=0xf90107b0, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2360e08 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0162.907] RestoreDC (hdc=0xf90107b0, nSavedDC=-1) returned 1
[0162.907] GdipReleaseDC (graphics=0x5da0378, hdc=0xf90107b0) returned 0x0
[0162.907] GetFocus () returned 0x6013e
[0162.908] IsAppThemed () returned 0x1
[0162.908] GetThemeAppProperties () returned 0x3
[0162.908] GetThemeAppProperties () returned 0x3
[0162.908] GdipGetDC (graphics=0x5da0378, hdc=0x53e148) returned 0x0
[0162.908] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xf90107b0, x1=0, y1=0, rop=0xcc0020) returned 1
[0162.927] GdipReleaseDC (graphics=0x5da0378, hdc=0xf90107b0) returned 0x0
[0162.927] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0162.927] SelectObject (hdc=0xf90107b0, h=0x85000f) returned 0x1e0507b9
[0162.927] DeleteDC (hdc=0xf90107b0) returned 1
[0162.927] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0162.928] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0163.229] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0163.229] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0163.229] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x302d6) returned 0x1
[0163.233] GetFocus () returned 0x302d6
[0163.233] GetAncestor (hwnd=0x302d6, gaFlags=0x1) returned 0x10010
[0163.233] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0163.234] SetFocus (hWnd=0x202c6) returned 0x0
[0163.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0163.239] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0163.239] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0163.239] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0163.240] GetFocus () returned 0x70036
[0163.240] SetFocus (hWnd=0x202c6) returned 0x0
[0163.246] IsWindow (hWnd=0x70036) returned 1
[0163.246] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0163.247] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0163.247] IsWindow (hWnd=0x70036) returned 1
[0163.247] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0163.247] IsWindow (hWnd=0x202c6) returned 1
[0163.247] SetFocus (hWnd=0x202c6) returned 0x70036
[0163.247] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0163.248] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0163.250] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0163.252] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0163.267] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0163.410] GetStockObject (i=5) returned 0x900015
[0163.410] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0163.410] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8db5d0) returned 0x7
[0163.410] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0163.410] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0163.410] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0163.410] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0163.412] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0163.412] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0163.412] GetFocus () returned 0x202c6
[0163.412] GetCapture () returned 0x0
[0163.412] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.413] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c0231) returned 0x1
[0163.413] IsWindowUnicode (hWnd=0x202c6) returned 1
[0163.413] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.413] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.413] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.413] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.413] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c0231) returned 0x1
[0163.414] IsWindowUnicode (hWnd=0x202c6) returned 1
[0163.414] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.414] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c0231) returned 0x1
[0163.414] SetCursor (hCursor=0x10003) returned 0x10003
[0163.414] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.414] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.414] _TrackMouseEvent (in: lpEventTrack=0x23276fc | out: lpEventTrack=0x23276fc) returned 1
[0163.414] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0163.414] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0163.414] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0163.414] GetKeyState (nVirtKey=1) returned 1
[0163.414] GetKeyState (nVirtKey=2) returned 0
[0163.414] GetKeyState (nVirtKey=4) returned 0
[0163.414] GetKeyState (nVirtKey=5) returned 0
[0163.415] GetKeyState (nVirtKey=6) returned 0
[0163.415] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.415] IsWindowUnicode (hWnd=0x202c6) returned 1
[0163.415] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.415] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.415] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.415] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.416] IsWindowUnicode (hWnd=0x202c6) returned 1
[0163.416] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.416] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.416] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.416] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0163.417] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0163.417] CreateCompatibleDC (hdc=0x10105d6) returned 0x530107aa
[0163.417] SelectObject (hdc=0x530107aa, h=0x1e0507b9) returned 0x85000f
[0163.417] GdipCreateFromHDC (hdc=0x530107aa, graphics=0x53e958) returned 0x0
[0163.417] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0163.417] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0163.417] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0163.417] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0163.417] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e9b8) returned 0x0
[0163.417] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0163.418] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0163.418] LocalFree (hMem=0x89ec80) returned 0x0
[0163.418] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0163.418] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0163.418] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.418] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e9ac) returned 0x0
[0163.418] GdipSaveGraphics (graphics=0x5da0378, state=0x53e9d8) returned 0x0
[0163.418] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd8f0dbd) returned 0x0
[0163.418] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.418] GdipGetDC (graphics=0x5da0378, hdc=0x53e7b8) returned 0x0
[0163.418] GetCurrentObject (hdc=0x530107aa, type=0x1) returned 0xb00017
[0163.418] GetCurrentObject (hdc=0x530107aa, type=0x2) returned 0x900010
[0163.418] GetCurrentObject (hdc=0x530107aa, type=0x7) returned 0x1e0507b9
[0163.418] GetCurrentObject (hdc=0x530107aa, type=0x6) returned 0x8a01c2
[0163.418] SaveDC (hdc=0x530107aa) returned 1
[0163.419] GetNearestColor (hdc=0x530107aa, color=0xff) returned 0xff
[0163.419] GetNearestColor (hdc=0x530107aa, color=0x55) returned 0x55
[0163.419] GetNearestColor (hdc=0x530107aa, color=0x0) returned 0x0
[0163.419] GetNearestColor (hdc=0x530107aa, color=0x55) returned 0x55
[0163.419] GetNearestColor (hdc=0x530107aa, color=0x0) returned 0x0
[0163.419] GetNearestColor (hdc=0x530107aa, color=0x8080ff) returned 0x8080ff
[0163.419] GetNearestColor (hdc=0x530107aa, color=0x7373e5) returned 0x7373e5
[0163.419] GetNearestColor (hdc=0x530107aa, color=0xe5) returned 0xe5
[0163.419] GetNearestColor (hdc=0x530107aa, color=0x0) returned 0x0
[0163.419] RestoreDC (hdc=0x530107aa, nSavedDC=-1) returned 1
[0163.419] GdipReleaseDC (graphics=0x5da0378, hdc=0x530107aa) returned 0x0
[0163.419] IsAppThemed () returned 0x1
[0163.420] GetThemeAppProperties () returned 0x3
[0163.420] GetThemeAppProperties () returned 0x3
[0163.420] IsAppThemed () returned 0x1
[0163.420] GetThemeAppProperties () returned 0x3
[0163.420] GetThemeAppProperties () returned 0x3
[0163.420] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x23616a4 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0163.420] IsAppThemed () returned 0x1
[0163.420] GetThemeAppProperties () returned 0x3
[0163.420] GetThemeAppProperties () returned 0x3
[0163.420] IsAppThemed () returned 0x1
[0163.420] GetThemeAppProperties () returned 0x3
[0163.420] GetThemeAppProperties () returned 0x3
[0163.421] IsAppThemed () returned 0x1
[0163.421] GetThemeAppProperties () returned 0x3
[0163.421] GetThemeAppProperties () returned 0x3
[0163.421] IsAppThemed () returned 0x1
[0163.421] GetThemeAppProperties () returned 0x3
[0163.421] GetThemeAppProperties () returned 0x3
[0163.421] IsThemePartDefined () returned 0x1
[0163.421] IsAppThemed () returned 0x1
[0163.421] GetThemeAppProperties () returned 0x3
[0163.421] GetThemeAppProperties () returned 0x3
[0163.421] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0163.421] IsAppThemed () returned 0x1
[0163.421] GetThemeAppProperties () returned 0x3
[0163.421] GetThemeAppProperties () returned 0x3
[0163.421] IsAppThemed () returned 0x1
[0163.421] GetThemeAppProperties () returned 0x3
[0163.421] GetThemeAppProperties () returned 0x3
[0163.421] IsThemePartDefined () returned 0x1
[0163.421] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0163.421] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.421] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0163.421] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0163.422] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e6d4) returned 0x0
[0163.422] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0163.422] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0163.422] LocalFree (hMem=0x89eac0) returned 0x0
[0163.422] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0163.422] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0163.422] LocalFree (hMem=0x89eac0) returned 0x0
[0163.422] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0163.422] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6fc) returned 0x0
[0163.422] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6ec) returned 0x0
[0163.422] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e6ec) returned 0x0
[0163.422] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.422] GdipGetDC (graphics=0x5da0378, hdc=0x53e704) returned 0x0
[0163.422] GetCurrentObject (hdc=0x530107aa, type=0x1) returned 0xb00017
[0163.423] GetCurrentObject (hdc=0x530107aa, type=0x2) returned 0x900010
[0163.423] GetCurrentObject (hdc=0x530107aa, type=0x7) returned 0x1e0507b9
[0163.423] GetCurrentObject (hdc=0x530107aa, type=0x6) returned 0x8a01c2
[0163.423] SaveDC (hdc=0x530107aa) returned 1
[0163.423] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e04053e
[0163.423] GetClipRgn (hdc=0x530107aa, hrgn=0x5e04053e) returned 0
[0163.423] SelectClipRgn (hdc=0x530107aa, hrgn=0xb10407a1) returned 2
[0163.423] DeleteObject (ho=0x5e04053e) returned 1
[0163.423] DeleteObject (ho=0xb10407a1) returned 1
[0163.423] OffsetViewportOrgEx (in: hdc=0x530107aa, x=0, y=0, lppt=0x2361d54 | out: lppt=0x2361d54) returned 1
[0163.423] DrawThemeParentBackground () returned 0x0
[0163.423] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0163.423] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0163.424] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0163.428] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0163.428] GetSystemMetrics (nIndex=42) returned 0
[0163.428] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0163.428] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0163.428] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0163.428] GetCurrentObject (hdc=0x530107aa, type=0x1) returned 0xb00017
[0163.428] GetCurrentObject (hdc=0x530107aa, type=0x2) returned 0x900010
[0163.428] GetCurrentObject (hdc=0x530107aa, type=0x7) returned 0x1e0507b9
[0163.428] GetCurrentObject (hdc=0x530107aa, type=0x6) returned 0x8a01c2
[0163.428] SaveDC (hdc=0x530107aa) returned 2
[0163.428] GetNearestColor (hdc=0x530107aa, color=0xff) returned 0xff
[0163.428] CreateSolidBrush (color=0xff) returned 0x8210078d
[0163.428] FillRect (hDC=0x530107aa, lprc=0x53e120, hbr=0x8210078d) returned 1
[0163.429] DeleteObject (ho=0x8210078d) returned 1
[0163.429] RestoreDC (hdc=0x530107aa, nSavedDC=-1) returned 1
[0163.429] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0163.429] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0163.429] GetSystemMetrics (nIndex=42) returned 0
[0163.429] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0163.429] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0163.429] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0163.429] GetCurrentObject (hdc=0x530107aa, type=0x1) returned 0xb00017
[0163.429] GetCurrentObject (hdc=0x530107aa, type=0x2) returned 0x900010
[0163.429] GetCurrentObject (hdc=0x530107aa, type=0x7) returned 0x1e0507b9
[0163.429] GetCurrentObject (hdc=0x530107aa, type=0x6) returned 0x8a01c2
[0163.429] SaveDC (hdc=0x530107aa) returned 2
[0163.429] GetNearestColor (hdc=0x530107aa, color=0xff) returned 0xff
[0163.429] CreateSolidBrush (color=0xff) returned 0x8310078d
[0163.429] FillRect (hDC=0x530107aa, lprc=0x53e0c0, hbr=0x8310078d) returned 1
[0163.430] DeleteObject (ho=0x8310078d) returned 1
[0163.430] RestoreDC (hdc=0x530107aa, nSavedDC=-1) returned 1
[0163.430] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0163.430] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0163.430] GetSystemMetrics (nIndex=42) returned 0
[0163.430] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0163.430] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0163.430] RestoreDC (hdc=0x530107aa, nSavedDC=-1) returned 1
[0163.430] GdipReleaseDC (graphics=0x5da0378, hdc=0x530107aa) returned 0x0
[0163.430] IsAppThemed () returned 0x1
[0163.430] GetThemeAppProperties () returned 0x3
[0163.430] GetThemeAppProperties () returned 0x3
[0163.430] IsAppThemed () returned 0x1
[0163.431] GetThemeAppProperties () returned 0x3
[0163.431] GetThemeAppProperties () returned 0x3
[0163.431] IsThemePartDefined () returned 0x1
[0163.431] GdipCreateRegion (region=0x53e640) returned 0x0
[0163.431] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.431] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0163.431] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0163.431] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e658) returned 0x0
[0163.431] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0163.431] LocalFree (hMem=0x89eac0) returned 0x0
[0163.431] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0163.431] LocalFree (hMem=0x89eac0) returned 0x0
[0163.431] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0163.431] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e680) returned 0x0
[0163.431] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e670) returned 0x0
[0163.431] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e670) returned 0x0
[0163.431] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.431] GdipGetDC (graphics=0x5da0378, hdc=0x53e688) returned 0x0
[0163.431] GetCurrentObject (hdc=0x530107aa, type=0x1) returned 0xb00017
[0163.432] GetCurrentObject (hdc=0x530107aa, type=0x2) returned 0x900010
[0163.432] GetCurrentObject (hdc=0x530107aa, type=0x7) returned 0x1e0507b9
[0163.432] GetCurrentObject (hdc=0x530107aa, type=0x6) returned 0x8a01c2
[0163.432] SaveDC (hdc=0x530107aa) returned 1
[0163.432] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb20407a1
[0163.432] GetClipRgn (hdc=0x530107aa, hrgn=0xb20407a1) returned 0
[0163.432] SelectClipRgn (hdc=0x530107aa, hrgn=0x6004053e) returned 2
[0163.432] DeleteObject (ho=0xb20407a1) returned 1
[0163.432] DeleteObject (ho=0x6004053e) returned 1
[0163.432] OffsetViewportOrgEx (in: hdc=0x530107aa, x=0, y=0, lppt=0x23625b8 | out: lppt=0x23625b8) returned 1
[0163.432] IsAppThemed () returned 0x1
[0163.432] GetThemeAppProperties () returned 0x3
[0163.432] GetThemeAppProperties () returned 0x3
[0163.432] DrawThemeBackground () returned 0x0
[0163.432] RestoreDC (hdc=0x530107aa, nSavedDC=-1) returned 1
[0163.433] GdipReleaseDC (graphics=0x5da0378, hdc=0x530107aa) returned 0x0
[0163.433] GdipCreateRegion (region=0x53e644) returned 0x0
[0163.433] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.433] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0163.433] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0163.433] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e65c) returned 0x0
[0163.433] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0163.433] LocalFree (hMem=0x89eac0) returned 0x0
[0163.433] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0163.433] LocalFree (hMem=0x89eac0) returned 0x0
[0163.433] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0163.433] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e684) returned 0x0
[0163.433] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e674) returned 0x0
[0163.433] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e674) returned 0x0
[0163.433] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.433] GdipGetDC (graphics=0x5da0378, hdc=0x53e68c) returned 0x0
[0163.433] GetCurrentObject (hdc=0x530107aa, type=0x1) returned 0xb00017
[0163.433] GetCurrentObject (hdc=0x530107aa, type=0x2) returned 0x900010
[0163.433] GetCurrentObject (hdc=0x530107aa, type=0x7) returned 0x1e0507b9
[0163.434] GetCurrentObject (hdc=0x530107aa, type=0x6) returned 0x8a01c2
[0163.434] SaveDC (hdc=0x530107aa) returned 1
[0163.434] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6104053e
[0163.434] GetClipRgn (hdc=0x530107aa, hrgn=0x6104053e) returned 0
[0163.434] SelectClipRgn (hdc=0x530107aa, hrgn=0xb30407a1) returned 2
[0163.434] DeleteObject (ho=0x6104053e) returned 1
[0163.434] DeleteObject (ho=0xb30407a1) returned 1
[0163.434] OffsetViewportOrgEx (in: hdc=0x530107aa, x=0, y=0, lppt=0x236288c | out: lppt=0x236288c) returned 1
[0163.434] IsAppThemed () returned 0x1
[0163.434] GetThemeAppProperties () returned 0x3
[0163.434] GetThemeAppProperties () returned 0x3
[0163.434] GetThemeBackgroundContentRect () returned 0x0
[0163.434] RestoreDC (hdc=0x530107aa, nSavedDC=-1) returned 1
[0163.434] GdipReleaseDC (graphics=0x5da0378, hdc=0x530107aa) returned 0x0
[0163.434] IsAppThemed () returned 0x1
[0163.434] GetThemeAppProperties () returned 0x3
[0163.434] GetThemeAppProperties () returned 0x3
[0163.434] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e7c0) returned 0x0
[0163.434] GdipGetDC (graphics=0x5da0378, hdc=0x53e7ac) returned 0x0
[0163.435] GetCurrentObject (hdc=0x530107aa, type=0x1) returned 0xb00017
[0163.435] GetCurrentObject (hdc=0x530107aa, type=0x2) returned 0x900010
[0163.435] GetCurrentObject (hdc=0x530107aa, type=0x7) returned 0x1e0507b9
[0163.435] GetCurrentObject (hdc=0x530107aa, type=0x6) returned 0x8a01c2
[0163.435] SaveDC (hdc=0x530107aa) returned 1
[0163.435] GetTextAlign (hdc=0x530107aa) returned 0x0
[0163.435] GetTextColor (hdc=0x530107aa) returned 0x0
[0163.435] GetCurrentObject (hdc=0x530107aa, type=0x6) returned 0x8a01c2
[0163.435] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0163.435] SelectObject (hdc=0x530107aa, h=0x450a0799) returned 0x8a01c2
[0163.435] GetBkMode (hdc=0x530107aa) returned 2
[0163.435] SetBkMode (hdc=0x530107aa, mode=1) returned 2
[0163.435] DrawTextExW (in: hdc=0x530107aa, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2362c2c | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0163.436] DrawTextExW (in: hdc=0x530107aa, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2362c2c | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0163.436] RestoreDC (hdc=0x530107aa, nSavedDC=-1) returned 1
[0163.436] GdipReleaseDC (graphics=0x5da0378, hdc=0x530107aa) returned 0x0
[0163.436] GetFocus () returned 0x202c6
[0163.436] IsAppThemed () returned 0x1
[0163.436] GetThemeAppProperties () returned 0x3
[0163.436] GetThemeAppProperties () returned 0x3
[0163.436] GdipGetDC (graphics=0x5da0378, hdc=0x53e998) returned 0x0
[0163.436] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x530107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0163.437] GdipReleaseDC (graphics=0x5da0378, hdc=0x530107aa) returned 0x0
[0163.437] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0163.437] SelectObject (hdc=0x530107aa, h=0x85000f) returned 0x1e0507b9
[0163.437] DeleteDC (hdc=0x530107aa) returned 1
[0163.437] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0163.437] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0163.438] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.438] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.447] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.447] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.447] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.447] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.447] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.448] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.448] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.448] WaitMessage () returned 1
[0163.513] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.513] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.513] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.513] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.514] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.515] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.515] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.515] WaitMessage () returned 1
[0163.516] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.516] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.516] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.516] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.516] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.517] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.517] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.517] WaitMessage () returned 1
[0163.518] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.518] IsWindowUnicode (hWnd=0x202c6) returned 1
[0163.518] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.518] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.518] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.518] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.518] IsWindowUnicode (hWnd=0x202c6) returned 1
[0163.518] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.518] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.518] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.518] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x140041) returned 0x0
[0163.518] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.518] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.519] WaitMessage () returned 1
[0163.519] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.519] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.519] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.520] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.520] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.521] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.521] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.521] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.521] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.521] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.522] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.522] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.522] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.522] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.522] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.522] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.522] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.522] WaitMessage () returned 1
[0163.523] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.523] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.523] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.523] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.523] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.524] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.525] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.525] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.525] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.525] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.525] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.525] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.525] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.525] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.525] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.525] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.526] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.526] WaitMessage () returned 1
[0163.527] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.527] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.527] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.527] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.527] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.528] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.529] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.529] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.529] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.529] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.529] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.529] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.529] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.529] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.529] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.529] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.530] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.530] WaitMessage () returned 1
[0163.530] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.530] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.530] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.530] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.530] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.532] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.532] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.532] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.532] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.532] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.533] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.533] IsWindowUnicode (hWnd=0x102dc) returned 1
[0163.533] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.533] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.533] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.533] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.534] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0163.534] WaitMessage () returned 1
[0163.575] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c0231) returned 0x1
[0163.575] IsWindowUnicode (hWnd=0x202c6) returned 1
[0163.575] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c0231) returned 0x1
[0163.575] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0163.575] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12f01db) returned 0x0
[0163.576] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0163.576] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0163.576] SetCursor (hCursor=0x10003) returned 0x10003
[0163.576] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.576] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.576] GetKeyState (nVirtKey=1) returned -128
[0163.576] GetKeyState (nVirtKey=2) returned 0
[0163.576] GetKeyState (nVirtKey=4) returned 0
[0163.576] GetKeyState (nVirtKey=5) returned 0
[0163.576] GetKeyState (nVirtKey=6) returned 0
[0163.576] IsWindowVisible (hWnd=0x202c6) returned 1
[0163.576] IsWindowEnabled (hWnd=0x202c6) returned 1
[0163.576] SetFocus (hWnd=0x202c6) returned 0x202c6
[0163.576] GetFocus () returned 0x202c6
[0163.576] GetFocus () returned 0x202c6
[0163.577] GetFocus () returned 0x202c6
[0163.577] GetKeyState (nVirtKey=1) returned -128
[0163.577] GetKeyState (nVirtKey=2) returned 0
[0163.577] GetKeyState (nVirtKey=4) returned 0
[0163.577] GetKeyState (nVirtKey=5) returned 0
[0163.577] GetKeyState (nVirtKey=6) returned 0
[0163.577] GetCapture () returned 0x0
[0163.577] SetCapture (hWnd=0x202c6) returned 0x0
[0163.577] GetKeyState (nVirtKey=1) returned -128
[0163.577] GetKeyState (nVirtKey=2) returned 0
[0163.577] GetKeyState (nVirtKey=4) returned 0
[0163.577] GetKeyState (nVirtKey=5) returned 0
[0163.577] GetKeyState (nVirtKey=6) returned 0
[0163.577] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0163.577] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0163.577] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.577] IsWindowUnicode (hWnd=0x202c6) returned 1
[0163.577] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0163.578] TranslateMessage (lpMsg=0x53eef8) returned 0
[0163.578] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0163.578] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2362eac, cPoints=0x1 | out: lpPoints=0x2362eac) returned 25690608
[0163.578] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0163.578] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0163.578] UpdateWindow (hWnd=0x202c6) returned 1
[0163.578] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x10105d6
[0163.578] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0163.578] CreateCompatibleDC (hdc=0x10105d6) returned 0x90107be
[0163.578] SelectObject (hdc=0x90107be, h=0x1e0507b9) returned 0x85000f
[0163.578] GdipCreateFromHDC (hdc=0x90107be, graphics=0x53e5f0) returned 0x0
[0163.579] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0163.579] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0163.579] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0163.579] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0163.579] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e650) returned 0x0
[0163.579] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0163.579] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0163.579] LocalFree (hMem=0x89ee40) returned 0x0
[0163.579] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0163.579] GdipCreateRegion (region=0x53e638) returned 0x0
[0163.579] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.579] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e644) returned 0x0
[0163.579] GdipSaveGraphics (graphics=0x5da0378, state=0x53e670) returned 0x0
[0163.579] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd8d0dbd) returned 0x0
[0163.579] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.579] GdipGetDC (graphics=0x5da0378, hdc=0x53e450) returned 0x0
[0163.580] GetCurrentObject (hdc=0x90107be, type=0x1) returned 0xb00017
[0163.580] GetCurrentObject (hdc=0x90107be, type=0x2) returned 0x900010
[0163.580] GetCurrentObject (hdc=0x90107be, type=0x7) returned 0x1e0507b9
[0163.580] GetCurrentObject (hdc=0x90107be, type=0x6) returned 0x8a01c2
[0163.580] SaveDC (hdc=0x90107be) returned 1
[0163.580] GetNearestColor (hdc=0x90107be, color=0xff) returned 0xff
[0163.580] GetNearestColor (hdc=0x90107be, color=0x55) returned 0x55
[0163.580] GetNearestColor (hdc=0x90107be, color=0x0) returned 0x0
[0163.580] GetNearestColor (hdc=0x90107be, color=0x55) returned 0x55
[0163.580] GetNearestColor (hdc=0x90107be, color=0x0) returned 0x0
[0163.580] GetNearestColor (hdc=0x90107be, color=0x8080ff) returned 0x8080ff
[0163.580] GetNearestColor (hdc=0x90107be, color=0x7373e5) returned 0x7373e5
[0163.580] GetNearestColor (hdc=0x90107be, color=0xe5) returned 0xe5
[0163.581] GetNearestColor (hdc=0x90107be, color=0x0) returned 0x0
[0163.581] RestoreDC (hdc=0x90107be, nSavedDC=-1) returned 1
[0163.581] GdipReleaseDC (graphics=0x5da0378, hdc=0x90107be) returned 0x0
[0163.581] IsAppThemed () returned 0x1
[0163.581] GetThemeAppProperties () returned 0x3
[0163.581] GetThemeAppProperties () returned 0x3
[0163.581] IsAppThemed () returned 0x1
[0163.581] GetThemeAppProperties () returned 0x3
[0163.581] GetThemeAppProperties () returned 0x3
[0163.581] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x23635c8 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0163.581] IsAppThemed () returned 0x1
[0163.581] GetThemeAppProperties () returned 0x3
[0163.581] GetThemeAppProperties () returned 0x3
[0163.582] IsAppThemed () returned 0x1
[0163.582] GetThemeAppProperties () returned 0x3
[0163.582] GetThemeAppProperties () returned 0x3
[0163.582] IsAppThemed () returned 0x1
[0163.582] GetThemeAppProperties () returned 0x3
[0163.582] GetThemeAppProperties () returned 0x3
[0163.582] IsAppThemed () returned 0x1
[0163.582] GetThemeAppProperties () returned 0x3
[0163.582] GetThemeAppProperties () returned 0x3
[0163.582] IsThemePartDefined () returned 0x1
[0163.582] IsAppThemed () returned 0x1
[0163.582] GetThemeAppProperties () returned 0x3
[0163.582] GetThemeAppProperties () returned 0x3
[0163.582] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0163.582] IsAppThemed () returned 0x1
[0163.582] GetThemeAppProperties () returned 0x3
[0163.582] GetThemeAppProperties () returned 0x3
[0163.582] IsAppThemed () returned 0x1
[0163.582] GetThemeAppProperties () returned 0x3
[0163.582] GetThemeAppProperties () returned 0x3
[0163.582] IsThemePartDefined () returned 0x1
[0163.582] GdipCreateRegion (region=0x53e354) returned 0x0
[0163.582] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.583] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0163.583] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0163.583] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e36c) returned 0x0
[0163.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0163.583] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0163.583] LocalFree (hMem=0x89ee08) returned 0x0
[0163.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0163.583] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0163.583] LocalFree (hMem=0x89ee08) returned 0x0
[0163.583] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0163.583] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e394) returned 0x0
[0163.583] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e384) returned 0x0
[0163.583] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e384) returned 0x0
[0163.583] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.583] GdipGetDC (graphics=0x5da0378, hdc=0x53e39c) returned 0x0
[0163.583] GetCurrentObject (hdc=0x90107be, type=0x1) returned 0xb00017
[0163.583] GetCurrentObject (hdc=0x90107be, type=0x2) returned 0x900010
[0163.584] GetCurrentObject (hdc=0x90107be, type=0x7) returned 0x1e0507b9
[0163.584] GetCurrentObject (hdc=0x90107be, type=0x6) returned 0x8a01c2
[0163.595] SaveDC (hdc=0x90107be) returned 1
[0163.596] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb40407a1
[0163.596] GetClipRgn (hdc=0x90107be, hrgn=0xb40407a1) returned 0
[0163.596] SelectClipRgn (hdc=0x90107be, hrgn=0x6504053e) returned 2
[0163.596] DeleteObject (ho=0xb40407a1) returned 1
[0163.597] DeleteObject (ho=0x6504053e) returned 1
[0163.597] OffsetViewportOrgEx (in: hdc=0x90107be, x=0, y=0, lppt=0x2363c78 | out: lppt=0x2363c78) returned 1
[0163.597] DrawThemeParentBackground () returned 0x0
[0163.597] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0163.598] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0163.598] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0163.598] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0163.598] GetSystemMetrics (nIndex=42) returned 0
[0163.598] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0163.598] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0163.598] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0163.598] GetCurrentObject (hdc=0x90107be, type=0x1) returned 0xb00017
[0163.598] GetCurrentObject (hdc=0x90107be, type=0x2) returned 0x900010
[0163.598] GetCurrentObject (hdc=0x90107be, type=0x7) returned 0x1e0507b9
[0163.598] GetCurrentObject (hdc=0x90107be, type=0x6) returned 0x8a01c2
[0163.599] SaveDC (hdc=0x90107be) returned 2
[0163.599] GetNearestColor (hdc=0x90107be, color=0xff) returned 0xff
[0163.599] CreateSolidBrush (color=0xff) returned 0x8410078d
[0163.599] FillRect (hDC=0x90107be, lprc=0x53ddb8, hbr=0x8410078d) returned 1
[0163.599] DeleteObject (ho=0x8410078d) returned 1
[0163.599] RestoreDC (hdc=0x90107be, nSavedDC=-1) returned 1
[0163.599] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0163.599] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0163.599] GetSystemMetrics (nIndex=42) returned 0
[0163.599] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0163.600] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0163.600] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0163.600] GetCurrentObject (hdc=0x90107be, type=0x1) returned 0xb00017
[0163.600] GetCurrentObject (hdc=0x90107be, type=0x2) returned 0x900010
[0163.600] GetCurrentObject (hdc=0x90107be, type=0x7) returned 0x1e0507b9
[0163.600] GetCurrentObject (hdc=0x90107be, type=0x6) returned 0x8a01c2
[0163.600] SaveDC (hdc=0x90107be) returned 2
[0163.600] GetNearestColor (hdc=0x90107be, color=0xff) returned 0xff
[0163.600] CreateSolidBrush (color=0xff) returned 0x8510078d
[0163.600] FillRect (hDC=0x90107be, lprc=0x53dd58, hbr=0x8510078d) returned 1
[0163.600] DeleteObject (ho=0x8510078d) returned 1
[0163.600] RestoreDC (hdc=0x90107be, nSavedDC=-1) returned 1
[0163.600] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0163.600] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0163.600] GetSystemMetrics (nIndex=42) returned 0
[0163.601] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0163.601] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0163.601] RestoreDC (hdc=0x90107be, nSavedDC=-1) returned 1
[0163.601] GdipReleaseDC (graphics=0x5da0378, hdc=0x90107be) returned 0x0
[0163.601] IsAppThemed () returned 0x1
[0163.601] GetThemeAppProperties () returned 0x3
[0163.601] GetThemeAppProperties () returned 0x3
[0163.601] IsAppThemed () returned 0x1
[0163.602] GetThemeAppProperties () returned 0x3
[0163.602] GetThemeAppProperties () returned 0x3
[0163.602] IsThemePartDefined () returned 0x1
[0163.602] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0163.602] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.602] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0163.602] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0163.602] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f0) returned 0x0
[0163.602] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0163.602] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0163.602] LocalFree (hMem=0x89ea88) returned 0x0
[0163.602] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0163.602] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0163.602] LocalFree (hMem=0x89ea88) returned 0x0
[0163.602] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0163.603] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e318) returned 0x0
[0163.603] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e308) returned 0x0
[0163.603] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e308) returned 0x0
[0163.603] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.603] GdipGetDC (graphics=0x5da0378, hdc=0x53e320) returned 0x0
[0163.603] GetCurrentObject (hdc=0x90107be, type=0x1) returned 0xb00017
[0163.603] GetCurrentObject (hdc=0x90107be, type=0x2) returned 0x900010
[0163.603] GetCurrentObject (hdc=0x90107be, type=0x7) returned 0x1e0507b9
[0163.603] GetCurrentObject (hdc=0x90107be, type=0x6) returned 0x8a01c2
[0163.603] SaveDC (hdc=0x90107be) returned 1
[0163.603] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6604053e
[0163.604] GetClipRgn (hdc=0x90107be, hrgn=0x6604053e) returned 0
[0163.604] SelectClipRgn (hdc=0x90107be, hrgn=0xb60407a1) returned 2
[0163.604] DeleteObject (ho=0x6604053e) returned 1
[0163.604] DeleteObject (ho=0xb60407a1) returned 1
[0163.604] OffsetViewportOrgEx (in: hdc=0x90107be, x=0, y=0, lppt=0x23644dc | out: lppt=0x23644dc) returned 1
[0163.604] IsAppThemed () returned 0x1
[0163.604] GetThemeAppProperties () returned 0x3
[0163.604] GetThemeAppProperties () returned 0x3
[0163.604] DrawThemeBackground () returned 0x0
[0163.604] RestoreDC (hdc=0x90107be, nSavedDC=-1) returned 1
[0163.605] GdipReleaseDC (graphics=0x5da0378, hdc=0x90107be) returned 0x0
[0163.605] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0163.605] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.605] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0163.605] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0163.605] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e2f4) returned 0x0
[0163.605] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0163.605] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0163.605] LocalFree (hMem=0x89ec80) returned 0x0
[0163.605] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0163.605] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0163.605] LocalFree (hMem=0x89ee08) returned 0x0
[0163.605] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0163.605] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e31c) returned 0x0
[0163.606] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e30c) returned 0x0
[0163.606] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e30c) returned 0x0
[0163.606] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.606] GdipGetDC (graphics=0x5da0378, hdc=0x53e324) returned 0x0
[0163.606] GetCurrentObject (hdc=0x90107be, type=0x1) returned 0xb00017
[0163.606] GetCurrentObject (hdc=0x90107be, type=0x2) returned 0x900010
[0163.606] GetCurrentObject (hdc=0x90107be, type=0x7) returned 0x1e0507b9
[0163.606] GetCurrentObject (hdc=0x90107be, type=0x6) returned 0x8a01c2
[0163.606] SaveDC (hdc=0x90107be) returned 1
[0163.606] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb70407a1
[0163.606] GetClipRgn (hdc=0x90107be, hrgn=0xb70407a1) returned 0
[0163.607] SelectClipRgn (hdc=0x90107be, hrgn=0x6704053e) returned 2
[0163.607] DeleteObject (ho=0xb70407a1) returned 1
[0163.607] DeleteObject (ho=0x6704053e) returned 1
[0163.607] OffsetViewportOrgEx (in: hdc=0x90107be, x=0, y=0, lppt=0x23647b0 | out: lppt=0x23647b0) returned 1
[0163.607] IsAppThemed () returned 0x1
[0163.607] GetThemeAppProperties () returned 0x3
[0163.607] GetThemeAppProperties () returned 0x3
[0163.607] GetThemeBackgroundContentRect () returned 0x0
[0163.607] RestoreDC (hdc=0x90107be, nSavedDC=-1) returned 1
[0163.607] GdipReleaseDC (graphics=0x5da0378, hdc=0x90107be) returned 0x0
[0163.607] IsAppThemed () returned 0x1
[0163.607] GetThemeAppProperties () returned 0x3
[0163.607] GetThemeAppProperties () returned 0x3
[0163.607] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e458) returned 0x0
[0163.608] GdipGetDC (graphics=0x5da0378, hdc=0x53e444) returned 0x0
[0163.608] GetCurrentObject (hdc=0x90107be, type=0x1) returned 0xb00017
[0163.608] GetCurrentObject (hdc=0x90107be, type=0x2) returned 0x900010
[0163.608] GetCurrentObject (hdc=0x90107be, type=0x7) returned 0x1e0507b9
[0163.608] GetCurrentObject (hdc=0x90107be, type=0x6) returned 0x8a01c2
[0163.608] SaveDC (hdc=0x90107be) returned 1
[0163.608] GetTextAlign (hdc=0x90107be) returned 0x0
[0163.608] GetTextColor (hdc=0x90107be) returned 0x0
[0163.608] GetCurrentObject (hdc=0x90107be, type=0x6) returned 0x8a01c2
[0163.608] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0163.609] SelectObject (hdc=0x90107be, h=0x450a0799) returned 0x8a01c2
[0163.609] GetBkMode (hdc=0x90107be) returned 2
[0163.609] SetBkMode (hdc=0x90107be, mode=1) returned 2
[0163.609] DrawTextExW (in: hdc=0x90107be, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x2364b50 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0163.609] DrawTextExW (in: hdc=0x90107be, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x2364b50 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0163.610] RestoreDC (hdc=0x90107be, nSavedDC=-1) returned 1
[0163.610] GdipReleaseDC (graphics=0x5da0378, hdc=0x90107be) returned 0x0
[0163.610] GetFocus () returned 0x202c6
[0163.610] IsAppThemed () returned 0x1
[0163.610] GetThemeAppProperties () returned 0x3
[0163.610] GetThemeAppProperties () returned 0x3
[0163.610] GdipGetDC (graphics=0x5da0378, hdc=0x53e630) returned 0x0
[0163.610] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x90107be, x1=0, y1=0, rop=0xcc0020) returned 1
[0163.611] GdipReleaseDC (graphics=0x5da0378, hdc=0x90107be) returned 0x0
[0163.612] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0163.612] SelectObject (hdc=0x90107be, h=0x85000f) returned 0x1e0507b9
[0163.612] DeleteDC (hdc=0x90107be) returned 1
[0163.612] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0163.612] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0163.613] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2364c4c, cPoints=0x1 | out: lpPoints=0x2364c4c) returned 25690608
[0163.613] WindowFromPoint (Point=0x231) returned 0x202c6
[0163.613] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c0231) returned 0x1
[0163.613] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0163.613] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0163.614] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.615] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0163.617] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.617] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0163.617] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.617] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0163.617] GetDC (hWnd=0x0) returned 0xf0105ee
[0163.617] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e888) returned 0x0
[0163.618] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5da0378, height=0x53e880) returned 0x0
[0163.618] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0163.618] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0163.618] GetSystemMetrics (nIndex=5) returned 1
[0163.618] GetSystemMetrics (nIndex=6) returned 1
[0163.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.619] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0163.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.619] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0163.693] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.694] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0163.694] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.694] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0163.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.695] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0163.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.695] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0163.699] GetSystemMetrics (nIndex=5) returned 1
[0163.699] GetSystemMetrics (nIndex=6) returned 1
[0163.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.700] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0163.700] GetSystemMetrics (nIndex=5) returned 1
[0163.700] GetSystemMetrics (nIndex=6) returned 1
[0163.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.700] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0163.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.701] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0163.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.701] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0163.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.702] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0163.702] GetSystemMetrics (nIndex=59) returned 1460
[0163.702] GetSystemMetrics (nIndex=60) returned 920
[0163.702] GetSystemMetrics (nIndex=34) returned 136
[0163.702] GetSystemMetrics (nIndex=35) returned 39
[0163.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.702] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0163.702] GetCurrentThreadId () returned 0x11d0
[0163.702] GetCurrentThreadId () returned 0x11d0
[0163.702] GetCurrentThreadId () returned 0x11d0
[0163.702] GetCurrentThreadId () returned 0x11d0
[0163.702] GetCurrentThreadId () returned 0x11d0
[0163.702] GetCurrentThreadId () returned 0x11d0
[0163.702] GetCurrentThreadId () returned 0x11d0
[0163.702] GetCurrentThreadId () returned 0x11d0
[0163.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.703] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0163.703] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0163.703] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0163.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.703] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0163.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.704] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0163.704] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x402d6
[0163.706] SetWindowLongW (hWnd=0x402d6, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0163.706] GetWindowLongW (hWnd=0x402d6, nIndex=-4) returned 1950089536
[0163.706] SetWindowLongW (hWnd=0x402d6, nIndex=-4, dwNewLong=79641358) returned 1950089536
[0163.706] GetWindowLongW (hWnd=0x402d6, nIndex=-4) returned 79641358
[0163.706] GetWindowLongW (hWnd=0x402d6, nIndex=-16) returned 113311744
[0163.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x402d6, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0163.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x402d6, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0163.708] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x402d6, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0163.708] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x402d6, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0163.708] GetClientRect (in: hWnd=0x402d6, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0163.708] GetWindowRect (in: hWnd=0x402d6, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0163.709] SetWindowTextW (hWnd=0x402d6, lpString="WindowsFormsParkingWindow") returned 1
[0163.709] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x402d6, Msg=0xc, wParam=0x0, lParam=0x235e954) returned 0x1
[0163.710] GetParent (hWnd=0x402d6) returned 0x0
[0163.710] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0163.710] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x402d6, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x402d2
[0163.711] SetWindowLongW (hWnd=0x402d2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0163.711] GetWindowLongW (hWnd=0x402d2, nIndex=-4) returned 1868147648
[0163.711] SetWindowLongW (hWnd=0x402d2, nIndex=-4, dwNewLong=79641398) returned 1868147648
[0163.711] GetWindowLongW (hWnd=0x402d2, nIndex=-4) returned 79641398
[0163.711] GetWindowLongW (hWnd=0x402d2, nIndex=-16) returned 1174405133
[0163.711] GetWindowLongW (hWnd=0x402d2, nIndex=-12) returned 0
[0163.711] SetWindowLongW (hWnd=0x402d2, nIndex=-12, dwNewLong=262866) returned 0
[0163.711] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0163.712] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0163.712] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0163.713] GetClientRect (in: hWnd=0x402d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0163.713] GetWindowRect (in: hWnd=0x402d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0163.713] GetParent (hWnd=0x402d2) returned 0x402d6
[0163.713] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x402d6, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0163.713] SetWindowTextW (hWnd=0x402d2, lpString="Enter password: ") returned 1
[0163.713] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0xc, wParam=0x0, lParam=0x2333718) returned 0x1
[0163.714] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0163.714] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0163.714] GetClientRect (in: hWnd=0x402d2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0163.714] GetWindowRect (in: hWnd=0x402d2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0163.714] GetParent (hWnd=0x402d2) returned 0x402d6
[0163.714] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x402d6, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0163.714] SendMessageW (hWnd=0x402d2, Msg=0x2210, wParam=0x2d20001, lParam=0x402d2) returned 0x0
[0163.714] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x2210, wParam=0x2d20001, lParam=0x402d2) returned 0x0
[0163.715] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0163.715] GetParent (hWnd=0x402d2) returned 0x402d6
[0163.715] GdipCreateFromHWND (hwnd=0x402d2, graphics=0x53e994) returned 0x0
[0163.715] GdipMeasureString (graphics=0x5da0378, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0163.716] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0163.716] GetProcessWindowStation () returned 0x13c
[0163.716] GetCapture () returned 0x202c6
[0163.716] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0163.716] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0163.716] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0163.716] ReleaseCapture () returned 1
[0163.716] GetActiveWindow () returned 0x70036
[0163.716] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0163.717] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.717] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0163.717] GetCursorPos (in: lpPoint=0x23758d0 | out: lpPoint=0x23758d0*(x=561, y=412)) returned 1
[0163.717] MonitorFromPoint (pt=0x231, dwFlags=0x19c) returned 0x10001
[0163.717] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0163.718] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xd0107be
[0163.718] GetDeviceCaps (hdc=0xd0107be, index=12) returned 32
[0163.718] GetDeviceCaps (hdc=0xd0107be, index=14) returned 1
[0163.718] DeleteDC (hdc=0xd0107be) returned 1
[0163.718] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0163.719] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0163.719] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x7013e
[0163.719] SetWindowLongW (hWnd=0x7013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0163.720] GetWindowLongW (hWnd=0x7013e, nIndex=-4) returned 1950089536
[0163.720] SetWindowLongW (hWnd=0x7013e, nIndex=-4, dwNewLong=79641438) returned 1950089536
[0163.720] GetWindowLongW (hWnd=0x7013e, nIndex=-4) returned 79641438
[0163.720] GetWindowLongW (hWnd=0x7013e, nIndex=-16) returned 113770496
[0163.720] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0163.722] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0163.722] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0163.723] GetClientRect (in: hWnd=0x7013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0163.723] GetWindowRect (in: hWnd=0x7013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0163.723] SetWindowTextW (hWnd=0x7013e, lpString="Ransomware") returned 1
[0163.723] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xc, wParam=0x0, lParam=0x2364d14) returned 0x1
[0163.724] GetStartupInfoW (in: lpStartupInfo=0x2375c0c | out: lpStartupInfo=0x2375c0c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0163.726] GetParent (hWnd=0x7013e) returned 0x0
[0163.726] SetWindowLongW (hWnd=0x7013e, nIndex=-8, dwNewLong=0) returned 0
[0163.727] SendMessageW (hWnd=0x7013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0163.727] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0163.727] SendMessageW (hWnd=0x7013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0163.727] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0163.727] GetSystemMenu (hWnd=0x7013e, bRevert=0) returned 0xd0291
[0163.728] GetWindowPlacement (in: hWnd=0x7013e, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0163.728] EnableMenuItem (hMenu=0xd0291, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0163.728] EnableMenuItem (hMenu=0xd0291, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0163.728] EnableMenuItem (hMenu=0xd0291, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0163.728] EnableMenuItem (hMenu=0xd0291, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0163.728] EnableMenuItem (hMenu=0xd0291, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0163.728] GetClientRect (in: hWnd=0x7013e, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0163.728] GetClientRect (in: hWnd=0x7013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0163.728] GetWindowRect (in: hWnd=0x7013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0163.729] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.729] GetWindowLongW (hWnd=0x7013e, nIndex=-16) returned 113770496
[0163.729] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.729] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.729] GetSystemMetrics (nIndex=42) returned 0
[0163.729] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.729] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0163.730] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.730] GetSystemMetrics (nIndex=42) returned 0
[0163.730] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0163.730] GetCursorPos (in: lpPoint=0x2375d80 | out: lpPoint=0x2375d80*(x=561, y=412)) returned 1
[0163.730] MonitorFromPoint (pt=0x234, dwFlags=0x19e) returned 0x10001
[0163.730] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0163.730] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x110107be
[0163.730] GetDeviceCaps (hdc=0x110107be, index=12) returned 32
[0163.731] GetDeviceCaps (hdc=0x110107be, index=14) returned 1
[0163.731] DeleteDC (hdc=0x110107be) returned 1
[0163.731] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0163.731] GetWindowLongW (hWnd=0x7013e, nIndex=-16) returned 113770496
[0163.731] GetWindowLongW (hWnd=0x7013e, nIndex=-20) returned 327937
[0163.731] SetWindowLongW (hWnd=0x7013e, nIndex=-16, dwNewLong=46661632) returned 113770496
[0163.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0163.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0163.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0163.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0163.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0163.733] SetWindowLongW (hWnd=0x7013e, nIndex=-20, dwNewLong=327681) returned 327937
[0163.733] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0163.733] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0163.734] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0163.734] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0163.734] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0163.734] SetWindowPos (hWnd=0x7013e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0163.735] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0163.735] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0163.735] GetWindowPlacement (in: hWnd=0x7013e, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0163.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0163.736] GetClientRect (in: hWnd=0x7013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0163.736] GetWindowRect (in: hWnd=0x7013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0163.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0163.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0163.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0163.737] RedrawWindow (hWnd=0x7013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0163.737] GetSystemMenu (hWnd=0x7013e, bRevert=0) returned 0xd0291
[0163.737] GetWindowPlacement (in: hWnd=0x7013e, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0163.737] EnableMenuItem (hMenu=0xd0291, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0163.737] EnableMenuItem (hMenu=0xd0291, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0163.737] EnableMenuItem (hMenu=0xd0291, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0163.738] EnableMenuItem (hMenu=0xd0291, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0163.738] EnableMenuItem (hMenu=0xd0291, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0163.738] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0163.738] GetWindowLongW (hWnd=0x7013e, nIndex=-8) returned 0
[0163.738] SetWindowLongW (hWnd=0x7013e, nIndex=-8, dwNewLong=458806) returned 0
[0163.739] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0163.739] GetProcessWindowStation () returned 0x13c
[0163.739] GetCurrentThreadId () returned 0x11d0
[0163.740] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3c4e, lParam=0x0) returned 1
[0163.740] IsWindowVisible (hWnd=0x7013e) returned 0
[0163.740] IsWindowVisible (hWnd=0x70036) returned 1
[0163.740] IsWindowEnabled (hWnd=0x70036) returned 1
[0163.740] IsWindowVisible (hWnd=0x602b6) returned 0
[0163.740] IsWindowVisible (hWnd=0x901f8) returned 0
[0163.740] IsWindowVisible (hWnd=0x202d0) returned 0
[0163.740] IsWindowVisible (hWnd=0x202d4) returned 0
[0163.740] GetActiveWindow () returned 0x70036
[0163.740] GetFocus () returned 0x202c6
[0163.740] IsWindow (hWnd=0x70036) returned 1
[0163.740] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0163.741] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0163.741] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0163.742] GetWindowLongW (hWnd=0x7013e, nIndex=-8) returned 458806
[0163.742] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0163.742] GetCurrentThreadId () returned 0x11d0
[0163.742] GetWindowLongW (hWnd=0x7013e, nIndex=-8) returned 458806
[0163.742] IsWindowEnabled (hWnd=0x70036) returned 0
[0163.742] IsWindowEnabled (hWnd=0x7013e) returned 1
[0163.742] ShowWindow (hWnd=0x7013e, nCmdShow=5) returned 0
[0163.742] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0163.742] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0163.743] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.743] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0163.743] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x7013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x302d8
[0163.744] SetWindowLongW (hWnd=0x302d8, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0163.745] GetWindowLongW (hWnd=0x302d8, nIndex=-4) returned 1868026976
[0163.745] SetWindowLongW (hWnd=0x302d8, nIndex=-4, dwNewLong=79641558) returned 1868026976
[0163.745] GetWindowLongW (hWnd=0x302d8, nIndex=-4) returned 79641558
[0163.745] GetWindowLongW (hWnd=0x302d8, nIndex=-16) returned 1174470848
[0163.745] GetWindowLongW (hWnd=0x302d8, nIndex=-12) returned 0
[0163.745] SetWindowLongW (hWnd=0x302d8, nIndex=-12, dwNewLong=197336) returned 0
[0163.745] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0163.746] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0163.747] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0163.748] SendMessageW (hWnd=0x302d8, Msg=0x2055, wParam=0x302d8, lParam=0x3) returned 0x2
[0163.748] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0163.748] GetWindow (hWnd=0x302d8, uCmd=0x3) returned 0x0
[0163.748] GetClientRect (in: hWnd=0x302d8, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0163.748] GetWindowRect (in: hWnd=0x302d8, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0163.748] GetParent (hWnd=0x302d8) returned 0x7013e
[0163.748] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7013e, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0163.748] SendMessageW (hWnd=0x302d8, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0163.748] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0163.749] SendMessageW (hWnd=0x302d8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0163.749] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0163.749] GetSystemMetrics (nIndex=5) returned 1
[0163.749] GetSystemMetrics (nIndex=6) returned 1
[0163.749] SendMessageW (hWnd=0x302d8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0163.749] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0163.749] SendMessageW (hWnd=0x302d8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0163.749] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0163.750] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0163.750] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0163.750] GetClientRect (in: hWnd=0x302d8, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0163.750] GetWindowRect (in: hWnd=0x302d8, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0163.750] GetParent (hWnd=0x302d8) returned 0x7013e
[0163.750] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7013e, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0163.750] SendMessageW (hWnd=0x302d8, Msg=0x2210, wParam=0x2d80001, lParam=0x302d8) returned 0x0
[0163.750] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x2210, wParam=0x2d80001, lParam=0x302d8) returned 0x0
[0163.750] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0163.751] GetParent (hWnd=0x302d8) returned 0x7013e
[0163.751] GetParent (hWnd=0x402d2) returned 0x402d6
[0163.751] SetParent (hWndChild=0x402d2, hWndNewParent=0x7013e) returned 0x402d6
[0163.751] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0163.752] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0163.753] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0163.753] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0163.753] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0163.753] GetClientRect (in: hWnd=0x402d2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0163.753] GetWindowRect (in: hWnd=0x402d2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0163.753] GetParent (hWnd=0x402d2) returned 0x7013e
[0163.753] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7013e, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0163.753] GetClientRect (in: hWnd=0x402d2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0163.753] GetWindowRect (in: hWnd=0x402d2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0163.753] GetParent (hWnd=0x402d2) returned 0x7013e
[0163.753] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7013e, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0163.753] GetParent (hWnd=0x402d2) returned 0x7013e
[0163.753] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0163.754] GetWindow (hWnd=0x402d2, uCmd=0x3) returned 0x0
[0163.754] SetWindowPos (hWnd=0x402d2, hWndInsertAfter=0x302d8, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0163.754] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0163.754] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0163.755] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0163.755] GetClientRect (in: hWnd=0x402d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0163.755] GetWindowRect (in: hWnd=0x402d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0163.755] GetParent (hWnd=0x402d2) returned 0x7013e
[0163.755] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0163.755] GetParent (hWnd=0x402d2) returned 0x7013e
[0163.755] GetWindow (hWnd=0x402d2, uCmd=0x3) returned 0x302d8
[0163.755] GetWindowThreadProcessId (in: hWnd=0x402d2, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0163.755] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0163.756] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.756] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0163.756] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x7013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x302c8
[0163.757] SetWindowLongW (hWnd=0x302c8, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0163.757] GetWindowLongW (hWnd=0x302c8, nIndex=-4) returned 1868032000
[0163.758] SetWindowLongW (hWnd=0x302c8, nIndex=-4, dwNewLong=79641758) returned 1868032000
[0163.758] GetWindowLongW (hWnd=0x302c8, nIndex=-4) returned 79641758
[0163.758] GetWindowLongW (hWnd=0x302c8, nIndex=-16) returned 1174470667
[0163.758] GetWindowLongW (hWnd=0x302c8, nIndex=-12) returned 0
[0163.758] SetWindowLongW (hWnd=0x302c8, nIndex=-12, dwNewLong=197320) returned 0
[0163.758] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0163.759] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0163.759] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0163.760] SendMessageW (hWnd=0x302c8, Msg=0x2055, wParam=0x302c8, lParam=0x3) returned 0x2
[0163.760] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0163.760] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0163.760] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0163.760] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0163.760] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0163.760] RedrawWindow (hWnd=0x302d8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0163.760] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0163.761] RedrawWindow (hWnd=0x402d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0163.761] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0163.761] RedrawWindow (hWnd=0x302c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0163.761] RedrawWindow (hWnd=0x7013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0163.761] GetWindow (hWnd=0x302c8, uCmd=0x3) returned 0x402d2
[0163.761] GetClientRect (in: hWnd=0x302c8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0163.761] GetWindowRect (in: hWnd=0x302c8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0163.761] GetParent (hWnd=0x302c8) returned 0x7013e
[0163.761] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0163.762] SetWindowTextW (hWnd=0x302c8, lpString="OK") returned 1
[0163.762] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0xc, wParam=0x0, lParam=0x23691d4) returned 0x1
[0163.762] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0163.762] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0163.762] GetClientRect (in: hWnd=0x302c8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0163.762] GetWindowRect (in: hWnd=0x302c8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0163.763] GetParent (hWnd=0x302c8) returned 0x7013e
[0163.763] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0163.763] SendMessageW (hWnd=0x302c8, Msg=0x2210, wParam=0x2c80001, lParam=0x302c8) returned 0x0
[0163.763] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x2210, wParam=0x2c80001, lParam=0x302c8) returned 0x0
[0163.763] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0163.763] GetParent (hWnd=0x302c8) returned 0x7013e
[0163.763] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0163.764] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.764] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0163.764] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x7013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x302da
[0163.765] SetWindowLongW (hWnd=0x302da, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0163.765] GetWindowLongW (hWnd=0x302da, nIndex=-4) returned 1868032000
[0163.765] SetWindowLongW (hWnd=0x302da, nIndex=-4, dwNewLong=79643862) returned 1868032000
[0163.765] GetWindowLongW (hWnd=0x302da, nIndex=-4) returned 79643862
[0163.765] GetWindowLongW (hWnd=0x302da, nIndex=-16) returned 1174470667
[0163.765] GetWindowLongW (hWnd=0x302da, nIndex=-12) returned 0
[0163.766] SetWindowLongW (hWnd=0x302da, nIndex=-12, dwNewLong=197338) returned 0
[0163.766] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0163.767] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0163.768] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0163.769] SendMessageW (hWnd=0x302da, Msg=0x2055, wParam=0x302da, lParam=0x3) returned 0x2
[0163.769] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0163.769] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0163.769] GetWindow (hWnd=0x302da, uCmd=0x3) returned 0x302c8
[0163.769] GetClientRect (in: hWnd=0x302da, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0163.769] GetWindowRect (in: hWnd=0x302da, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0163.769] GetParent (hWnd=0x302da) returned 0x7013e
[0163.769] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0163.770] SetWindowTextW (hWnd=0x302da, lpString="Cancel") returned 1
[0163.770] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0xc, wParam=0x0, lParam=0x236ca94) returned 0x1
[0163.770] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0163.770] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0163.770] GetClientRect (in: hWnd=0x302da, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0163.770] GetWindowRect (in: hWnd=0x302da, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0163.770] GetParent (hWnd=0x302da) returned 0x7013e
[0163.770] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0163.771] SendMessageW (hWnd=0x302da, Msg=0x2210, wParam=0x2da0001, lParam=0x302da) returned 0x0
[0163.771] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0x2210, wParam=0x2da0001, lParam=0x302da) returned 0x0
[0163.771] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0163.771] GetParent (hWnd=0x302da) returned 0x7013e
[0163.771] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0163.771] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e320) returned 0x0
[0163.772] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5da0378, height=0x53e318) returned 0x0
[0163.772] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0163.772] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0163.772] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0163.772] GdipMeasureString (graphics=0x5da0378, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0163.772] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0163.773] GetWindowLongW (hWnd=0x7013e, nIndex=-8) returned 458806
[0163.773] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0163.773] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0163.773] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x180107be
[0163.773] GetDeviceCaps (hdc=0x180107be, index=12) returned 32
[0163.773] GetDeviceCaps (hdc=0x180107be, index=14) returned 1
[0163.773] DeleteDC (hdc=0x180107be) returned 1
[0163.774] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0163.774] GetWindowThreadProcessId (in: hWnd=0x7013e, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0163.774] GetCurrentThreadId () returned 0x11d0
[0163.774] PostMessageW (hWnd=0x7013e, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0163.774] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.774] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.774] GetSystemMetrics (nIndex=42) returned 0
[0163.774] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.774] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0163.774] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0163.774] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0163.775] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0163.775] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0163.787] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x7013e) returned 0x1
[0163.789] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0163.790] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0163.790] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0163.790] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0163.793] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0163.793] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0163.793] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0163.794] GetFocus () returned 0x202c6
[0163.794] IsChild (hWndParent=0x7013e, hWnd=0x202c6) returned 0
[0163.794] GetFocus () returned 0x202c6
[0163.794] SetFocus (hWnd=0x302d8) returned 0x202c6
[0163.796] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x302d8, lParam=0x0) returned 0x0
[0163.796] GetCapture () returned 0x0
[0163.796] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0163.797] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0163.798] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0163.805] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0163.805] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0163.805] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0163.805] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0163.806] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0163.806] GetParent (hWnd=0x7013e) returned 0x0
[0163.806] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0163.806] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0163.807] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0163.807] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0163.807] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0163.807] GetSysColorBrush (nIndex=5) returned 0x100079
[0163.809] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0163.809] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0163.810] SendMessageW (hWnd=0x302d8, Msg=0x2111, wParam=0x10002d8, lParam=0x302d8) returned 0x0
[0163.810] SendMessageW (hWnd=0x302d8, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0163.811] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0163.811] GetKeyState (nVirtKey=1) returned 0
[0163.811] GetKeyState (nVirtKey=2) returned 0
[0163.811] GetKeyState (nVirtKey=4) returned 0
[0163.811] GetKeyState (nVirtKey=5) returned 0
[0163.811] GetKeyState (nVirtKey=6) returned 0
[0163.811] GetWindowTextLengthW (hWnd=0x302d8) returned 0
[0163.811] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0163.811] SendMessageW (hWnd=0x302d8, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0163.811] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0163.811] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0163.811] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0163.816] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0163.818] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0163.818] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0163.818] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0163.819] GetWindowPlacement (in: hWnd=0x7013e, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0163.819] GetClientRect (in: hWnd=0x7013e, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0163.819] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.819] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.819] GetSystemMetrics (nIndex=42) returned 0
[0163.819] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.819] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0163.819] GetClientRect (in: hWnd=0x7013e, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0163.819] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017
[0163.819] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010
[0163.819] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400507bc
[0163.819] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2
[0163.819] SaveDC (hdc=0x60100ce) returned 1
[0163.820] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0
[0163.820] CreateSolidBrush (color=0xf0f0f0) returned 0x8610078d
[0163.820] FillRect (hDC=0x60100ce, lprc=0x53e250, hbr=0x8610078d) returned 1
[0163.820] DeleteObject (ho=0x8610078d) returned 1
[0163.820] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1
[0163.820] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0163.820] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0163.820] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0163.821] GetWindowPlacement (in: hWnd=0x7013e, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0163.821] GetClientRect (in: hWnd=0x7013e, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0163.821] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.821] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.821] GetSystemMetrics (nIndex=42) returned 0
[0163.821] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.821] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0163.821] GetClientRect (in: hWnd=0x7013e, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0163.822] GetCurrentObject (hdc=0x6e0107b1, type=0x1) returned 0xb00017
[0163.822] GetCurrentObject (hdc=0x6e0107b1, type=0x2) returned 0x900010
[0163.822] GetCurrentObject (hdc=0x6e0107b1, type=0x7) returned 0x7e0507a3
[0163.822] GetCurrentObject (hdc=0x6e0107b1, type=0x6) returned 0x8a01c2
[0163.822] SaveDC (hdc=0x6e0107b1) returned 1
[0163.822] GetNearestColor (hdc=0x6e0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0163.822] CreateSolidBrush (color=0xf0f0f0) returned 0x8710078d
[0163.822] FillRect (hDC=0x6e0107b1, lprc=0x53dc18, hbr=0x8710078d) returned 1
[0163.822] DeleteObject (ho=0x8710078d) returned 1
[0163.822] RestoreDC (hdc=0x6e0107b1, nSavedDC=-1) returned 1
[0163.822] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.822] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.822] GetSystemMetrics (nIndex=42) returned 0
[0163.822] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.822] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0163.822] GetClientRect (in: hWnd=0x7013e, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0163.823] GetCurrentObject (hdc=0x6e0107b1, type=0x1) returned 0xb00017
[0163.823] GetCurrentObject (hdc=0x6e0107b1, type=0x2) returned 0x900010
[0163.823] GetCurrentObject (hdc=0x6e0107b1, type=0x7) returned 0x7e0507a3
[0163.823] GetCurrentObject (hdc=0x6e0107b1, type=0x6) returned 0x8a01c2
[0163.823] SaveDC (hdc=0x6e0107b1) returned 1
[0163.823] GetNearestColor (hdc=0x6e0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0163.823] CreateSolidBrush (color=0xf0f0f0) returned 0x8810078d
[0163.823] FillRect (hDC=0x6e0107b1, lprc=0x53dbb8, hbr=0x8810078d) returned 1
[0163.823] DeleteObject (ho=0x8810078d) returned 1
[0163.823] RestoreDC (hdc=0x6e0107b1, nSavedDC=-1) returned 1
[0163.823] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.823] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.823] GetSystemMetrics (nIndex=42) returned 0
[0163.823] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.823] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0163.824] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0163.824] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0163.824] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0163.825] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0163.825] GetStockObject (i=5) returned 0x900015
[0163.825] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0163.825] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0163.825] GetStockObject (i=5) returned 0x900015
[0163.825] GetWindowPlacement (in: hWnd=0x7013e, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0163.825] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0163.825] GetClientRect (in: hWnd=0x7013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0163.825] GetWindowRect (in: hWnd=0x7013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0163.827] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0163.827] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0163.827] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0163.828] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0163.828] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0163.828] GetClientRect (in: hWnd=0x7013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0163.828] GetWindowRect (in: hWnd=0x7013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0163.828] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.828] IsWindowUnicode (hWnd=0x7013e) returned 1
[0163.828] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.828] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.828] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.828] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0163.828] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.828] IsWindowUnicode (hWnd=0x7013e) returned 1
[0163.828] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.829] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.829] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.829] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.829] MapWindowPoints (in: hWndFrom=0x402d2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0163.840] IsWindowUnicode (hWnd=0x402d2) returned 1
[0163.840] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.840] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.840] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.840] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.840] IsWindowUnicode (hWnd=0x202c6) returned 1
[0163.840] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.840] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.840] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.840] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0163.840] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0163.840] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.840] MapWindowPoints (in: hWndFrom=0x402d2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0163.841] IsWindowUnicode (hWnd=0x402d2) returned 1
[0163.841] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.841] MapWindowPoints (in: hWndFrom=0x402d2, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0163.841] SetCursor (hCursor=0x10003) returned 0x10003
[0163.841] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.841] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.841] _TrackMouseEvent (in: lpEventTrack=0x23772fc | out: lpEventTrack=0x23772fc) returned 1
[0163.841] SendMessageW (hWnd=0x402d2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0163.841] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0163.865] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x200, wParam=0x0, lParam=0x150008) returned 0x0
[0163.865] GetKeyState (nVirtKey=1) returned 0
[0163.865] GetKeyState (nVirtKey=2) returned 0
[0163.865] GetKeyState (nVirtKey=4) returned 0
[0163.865] GetKeyState (nVirtKey=5) returned 0
[0163.865] GetKeyState (nVirtKey=6) returned 0
[0163.865] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.866] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x84, wParam=0x0, lParam=0x1920354) returned 0x1
[0163.866] IsWindowUnicode (hWnd=0x302c8) returned 1
[0163.866] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.866] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.866] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.866] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.866] IsWindowUnicode (hWnd=0x402d2) returned 1
[0163.866] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.866] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.866] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.867] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0163.867] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.867] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x84, wParam=0x0, lParam=0x1920354) returned 0x1
[0163.867] IsWindowUnicode (hWnd=0x302c8) returned 1
[0163.867] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.867] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x84, wParam=0x0, lParam=0x1920354) returned 0x1
[0163.867] SetCursor (hCursor=0x10003) returned 0x10003
[0163.867] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.867] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.868] _TrackMouseEvent (in: lpEventTrack=0x2377330 | out: lpEventTrack=0x2377330) returned 1
[0163.868] SendMessageW (hWnd=0x302c8, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0163.868] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0163.868] InvalidateRect (hWnd=0x302c8, lpRect=0x0, bErase=0) returned 1
[0163.868] GetKeyState (nVirtKey=1) returned 0
[0163.868] GetKeyState (nVirtKey=2) returned 0
[0163.868] GetKeyState (nVirtKey=4) returned 0
[0163.868] GetKeyState (nVirtKey=5) returned 0
[0163.868] GetKeyState (nVirtKey=6) returned 0
[0163.868] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.869] IsWindowUnicode (hWnd=0x7013e) returned 1
[0163.869] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.869] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.869] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.869] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.870] IsWindowUnicode (hWnd=0x7013e) returned 1
[0163.870] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.870] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.870] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.870] BeginPaint (in: hWnd=0x7013e, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0xf0105ee
[0163.870] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0163.871] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.871] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.871] GetSystemMetrics (nIndex=42) returned 0
[0163.871] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.871] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0163.871] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0163.871] EndPaint (hWnd=0x7013e, lpPaint=0x53e30c) returned 1
[0163.871] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.871] IsWindowUnicode (hWnd=0x302d8) returned 1
[0163.871] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.871] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.871] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0163.872] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0163.872] SetTextColor (hdc=0x6f0107b1, color=0x0) returned 0x0
[0163.872] SetBkColor (hdc=0x6f0107b1, color=0xffffff) returned 0xffffff
[0163.873] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.873] IsWindowUnicode (hWnd=0x402d2) returned 1
[0163.874] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.874] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.874] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.874] BeginPaint (in: hWnd=0x402d2, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x10105d6
[0163.874] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0163.874] CreateCompatibleDC (hdc=0x10105d6) returned 0x200107c1
[0163.874] SelectObject (hdc=0x200107c1, h=0x1e0507b9) returned 0x85000f
[0163.874] GdipCreateFromHDC (hdc=0x200107c1, graphics=0x53e30c) returned 0x0
[0163.874] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0163.874] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0163.874] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0163.875] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0163.875] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0163.875] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0163.875] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0163.875] LocalFree (hMem=0x89ea88) returned 0x0
[0163.875] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0163.875] GdipCreateRegion (region=0x53e354) returned 0x0
[0163.875] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.875] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e360) returned 0x0
[0163.875] GdipSaveGraphics (graphics=0x5da0378, state=0x53e38c) returned 0x0
[0163.875] GetWindowTextLengthW (hWnd=0x402d2) returned 16
[0163.875] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0163.875] GetSystemMetrics (nIndex=42) returned 0
[0163.875] GetWindowTextW (in: hWnd=0x402d2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0163.875] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0163.875] GetClientRect (in: hWnd=0x402d2, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0163.876] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0163.876] GdipGetClip (graphics=0x5da0378, region=0x5d9d988) returned 0x0
[0163.876] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0163.876] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0163.876] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e1c0) returned 0x0
[0163.876] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0163.876] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0163.876] LocalFree (hMem=0x89ea88) returned 0x0
[0163.876] GdipCombineRegionRegion (region=0x5d9d988, region2=0x5d9d8f8, combineMode=0x1) returned 0x0
[0163.876] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0163.876] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0163.877] LocalFree (hMem=0x89ee08) returned 0x0
[0163.886] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0163.886] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e1e8) returned 0x0
[0163.886] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e1d8) returned 0x0
[0163.886] GdipGetRegionHRgn (region=0x5d9d988, graphics=0x5da0378, hRgn=0x53e1d8) returned 0x0
[0163.886] GdipDeleteRegion (region=0x5d9d988) returned 0x0
[0163.886] GdipGetDC (graphics=0x5da0378, hdc=0x53e1f0) returned 0x0
[0163.886] GetCurrentObject (hdc=0x200107c1, type=0x1) returned 0xb00017
[0163.886] GetCurrentObject (hdc=0x200107c1, type=0x2) returned 0x900010
[0163.886] GetCurrentObject (hdc=0x200107c1, type=0x7) returned 0x1e0507b9
[0163.886] GetCurrentObject (hdc=0x200107c1, type=0x6) returned 0x8a01c2
[0163.886] SaveDC (hdc=0x200107c1) returned 1
[0163.886] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a04053e
[0163.887] GetClipRgn (hdc=0x200107c1, hrgn=0x6a04053e) returned 0
[0163.887] SelectClipRgn (hdc=0x200107c1, hrgn=0xbd0407a1) returned 2
[0163.887] DeleteObject (ho=0x6a04053e) returned 1
[0163.887] DeleteObject (ho=0xbd0407a1) returned 1
[0163.887] OffsetViewportOrgEx (in: hdc=0x200107c1, x=0, y=0, lppt=0x2377838 | out: lppt=0x2377838) returned 1
[0163.887] GetNearestColor (hdc=0x200107c1, color=0xf0f0f0) returned 0xf0f0f0
[0163.887] CreateSolidBrush (color=0xf0f0f0) returned 0x8910078d
[0163.887] FillRect (hDC=0x200107c1, lprc=0x53e1f4, hbr=0x8910078d) returned 1
[0163.887] DeleteObject (ho=0x8910078d) returned 1
[0163.887] RestoreDC (hdc=0x200107c1, nSavedDC=-1) returned 1
[0163.887] GdipReleaseDC (graphics=0x5da0378, hdc=0x200107c1) returned 0x0
[0163.888] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd870dbd) returned 0x0
[0163.888] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.888] GetWindowTextLengthW (hWnd=0x402d2) returned 16
[0163.888] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0163.888] GetSystemMetrics (nIndex=42) returned 0
[0163.888] GetWindowTextW (in: hWnd=0x402d2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0163.888] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0163.888] GdipGetDC (graphics=0x5da0378, hdc=0x53e210) returned 0x0
[0163.888] GetCurrentObject (hdc=0x200107c1, type=0x1) returned 0xb00017
[0163.888] GetCurrentObject (hdc=0x200107c1, type=0x2) returned 0x900010
[0163.888] GetCurrentObject (hdc=0x200107c1, type=0x7) returned 0x1e0507b9
[0163.888] GetCurrentObject (hdc=0x200107c1, type=0x6) returned 0x8a01c2
[0163.888] SaveDC (hdc=0x200107c1) returned 1
[0163.888] GetNearestColor (hdc=0x200107c1, color=0x0) returned 0x0
[0163.888] RestoreDC (hdc=0x200107c1, nSavedDC=-1) returned 1
[0163.889] GdipReleaseDC (graphics=0x5da0378, hdc=0x200107c1) returned 0x0
[0163.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0163.889] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0163.889] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0163.889] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2377b40 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0163.890] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e1b0) returned 0x0
[0163.890] GdipGetDC (graphics=0x5da0378, hdc=0x53e19c) returned 0x0
[0163.890] GetCurrentObject (hdc=0x200107c1, type=0x1) returned 0xb00017
[0163.890] GetCurrentObject (hdc=0x200107c1, type=0x2) returned 0x900010
[0163.890] GetCurrentObject (hdc=0x200107c1, type=0x7) returned 0x1e0507b9
[0163.890] GetCurrentObject (hdc=0x200107c1, type=0x6) returned 0x8a01c2
[0163.890] SaveDC (hdc=0x200107c1) returned 1
[0163.890] GetTextAlign (hdc=0x200107c1) returned 0x0
[0163.890] GetTextColor (hdc=0x200107c1) returned 0x0
[0163.890] GetCurrentObject (hdc=0x200107c1, type=0x6) returned 0x8a01c2
[0163.890] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0163.890] SelectObject (hdc=0x200107c1, h=0x730a066d) returned 0x8a01c2
[0163.891] GetBkMode (hdc=0x200107c1) returned 2
[0163.891] SetBkMode (hdc=0x200107c1, mode=1) returned 2
[0163.891] DrawTextExW (in: hdc=0x200107c1, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x2377d64 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0163.891] RestoreDC (hdc=0x200107c1, nSavedDC=-1) returned 1
[0163.891] GdipReleaseDC (graphics=0x5da0378, hdc=0x200107c1) returned 0x0
[0163.891] GdipGetDC (graphics=0x5da0378, hdc=0x53e34c) returned 0x0
[0163.891] BitBlt (hdc=0x10105d6, x=0, y=0, cx=250, cy=70, hdcSrc=0x200107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0163.892] GdipReleaseDC (graphics=0x5da0378, hdc=0x200107c1) returned 0x0
[0163.892] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0163.892] SelectObject (hdc=0x200107c1, h=0x85000f) returned 0x1e0507b9
[0163.892] DeleteDC (hdc=0x200107c1) returned 1
[0163.892] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0163.892] EndPaint (hWnd=0x402d2, lpPaint=0x53e2f0) returned 1
[0163.892] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.892] IsWindowUnicode (hWnd=0x302c8) returned 1
[0163.892] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.893] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.893] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.893] BeginPaint (in: hWnd=0x302c8, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0163.893] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0163.893] CreateCompatibleDC (hdc=0x8b010786) returned 0x220107c1
[0163.893] SelectObject (hdc=0x220107c1, h=0x1e0507b9) returned 0x85000f
[0163.893] GdipCreateFromHDC (hdc=0x220107c1, graphics=0x53e300) returned 0x0
[0163.893] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0163.894] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0163.894] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0163.894] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0163.894] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e360) returned 0x0
[0163.894] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0163.894] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0163.894] LocalFree (hMem=0x89ee08) returned 0x0
[0163.894] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0163.894] GdipCreateRegion (region=0x53e348) returned 0x0
[0163.894] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.894] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e354) returned 0x0
[0163.894] GdipSaveGraphics (graphics=0x5da0378, state=0x53e380) returned 0x0
[0163.894] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd850dbd) returned 0x0
[0163.894] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.895] GdipGetDC (graphics=0x5da0378, hdc=0x53e160) returned 0x0
[0163.895] GetCurrentObject (hdc=0x220107c1, type=0x1) returned 0xb00017
[0163.895] GetCurrentObject (hdc=0x220107c1, type=0x2) returned 0x900010
[0163.895] GetCurrentObject (hdc=0x220107c1, type=0x7) returned 0x1e0507b9
[0163.895] GetCurrentObject (hdc=0x220107c1, type=0x6) returned 0x8a01c2
[0163.895] SaveDC (hdc=0x220107c1) returned 1
[0163.895] GetNearestColor (hdc=0x220107c1, color=0xf0f0f0) returned 0xf0f0f0
[0163.895] GetNearestColor (hdc=0x220107c1, color=0xa0a0a0) returned 0xa0a0a0
[0163.895] GetNearestColor (hdc=0x220107c1, color=0x696969) returned 0x696969
[0163.895] GetNearestColor (hdc=0x220107c1, color=0xa0a0a0) returned 0xa0a0a0
[0163.895] GetNearestColor (hdc=0x220107c1, color=0x0) returned 0x0
[0163.895] GetNearestColor (hdc=0x220107c1, color=0xffffff) returned 0xffffff
[0163.896] GetNearestColor (hdc=0x220107c1, color=0xe5e5e5) returned 0xe5e5e5
[0163.896] GetNearestColor (hdc=0x220107c1, color=0xd7d7d7) returned 0xd7d7d7
[0163.896] GetNearestColor (hdc=0x220107c1, color=0x0) returned 0x0
[0163.896] RestoreDC (hdc=0x220107c1, nSavedDC=-1) returned 1
[0163.896] GdipReleaseDC (graphics=0x5da0378, hdc=0x220107c1) returned 0x0
[0163.896] IsAppThemed () returned 0x1
[0163.896] GetThemeAppProperties () returned 0x3
[0163.896] GetThemeAppProperties () returned 0x3
[0163.896] IsAppThemed () returned 0x1
[0163.896] GetThemeAppProperties () returned 0x3
[0163.896] GetThemeAppProperties () returned 0x3
[0163.896] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x23784d0 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0163.897] IsAppThemed () returned 0x1
[0163.897] GetThemeAppProperties () returned 0x3
[0163.897] GetThemeAppProperties () returned 0x3
[0163.897] IsAppThemed () returned 0x1
[0163.897] GetThemeAppProperties () returned 0x3
[0163.897] GetThemeAppProperties () returned 0x3
[0163.897] IsAppThemed () returned 0x1
[0163.897] GetThemeAppProperties () returned 0x3
[0163.897] GetThemeAppProperties () returned 0x3
[0163.897] IsAppThemed () returned 0x1
[0163.897] GetThemeAppProperties () returned 0x3
[0163.897] GetThemeAppProperties () returned 0x3
[0163.897] IsThemePartDefined () returned 0x1
[0163.897] IsAppThemed () returned 0x1
[0163.897] GetThemeAppProperties () returned 0x3
[0163.897] GetThemeAppProperties () returned 0x3
[0163.898] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0163.898] IsAppThemed () returned 0x1
[0163.898] GetThemeAppProperties () returned 0x3
[0163.898] GetThemeAppProperties () returned 0x3
[0163.898] IsAppThemed () returned 0x1
[0163.898] GetThemeAppProperties () returned 0x3
[0163.898] GetThemeAppProperties () returned 0x3
[0163.898] IsThemePartDefined () returned 0x1
[0163.898] GdipCreateRegion (region=0x53e064) returned 0x0
[0163.898] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.898] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0163.898] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0163.898] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e07c) returned 0x0
[0163.898] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0163.898] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0163.898] LocalFree (hMem=0x89ee08) returned 0x0
[0163.898] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0163.898] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0163.899] LocalFree (hMem=0x89ee08) returned 0x0
[0163.899] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0163.899] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0a4) returned 0x0
[0163.899] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e094) returned 0x0
[0163.899] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e094) returned 0x0
[0163.899] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.899] GdipGetDC (graphics=0x5da0378, hdc=0x53e0ac) returned 0x0
[0163.899] GetCurrentObject (hdc=0x220107c1, type=0x1) returned 0xb00017
[0163.899] GetCurrentObject (hdc=0x220107c1, type=0x2) returned 0x900010
[0163.899] GetCurrentObject (hdc=0x220107c1, type=0x7) returned 0x1e0507b9
[0163.899] GetCurrentObject (hdc=0x220107c1, type=0x6) returned 0x8a01c2
[0163.899] SaveDC (hdc=0x220107c1) returned 1
[0163.899] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbe0407a1
[0163.899] GetClipRgn (hdc=0x220107c1, hrgn=0xbe0407a1) returned 0
[0163.900] SelectClipRgn (hdc=0x220107c1, hrgn=0x6e04053e) returned 2
[0163.900] DeleteObject (ho=0xbe0407a1) returned 1
[0163.900] DeleteObject (ho=0x6e04053e) returned 1
[0163.900] OffsetViewportOrgEx (in: hdc=0x220107c1, x=0, y=0, lppt=0x2378b80 | out: lppt=0x2378b80) returned 1
[0163.900] DrawThemeParentBackground () returned 0x0
[0163.900] GetWindowPlacement (in: hWnd=0x7013e, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0163.900] GetClientRect (in: hWnd=0x7013e, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0163.900] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.900] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.900] GetSystemMetrics (nIndex=42) returned 0
[0163.900] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.900] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0163.900] GetClientRect (in: hWnd=0x7013e, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0163.900] GetCurrentObject (hdc=0x220107c1, type=0x1) returned 0xb00017
[0163.900] GetCurrentObject (hdc=0x220107c1, type=0x2) returned 0x900010
[0163.901] GetCurrentObject (hdc=0x220107c1, type=0x7) returned 0x1e0507b9
[0163.901] GetCurrentObject (hdc=0x220107c1, type=0x6) returned 0x8a01c2
[0163.901] SaveDC (hdc=0x220107c1) returned 2
[0163.901] GetNearestColor (hdc=0x220107c1, color=0xf0f0f0) returned 0xf0f0f0
[0163.901] CreateSolidBrush (color=0xf0f0f0) returned 0x8a10078d
[0163.901] FillRect (hDC=0x220107c1, lprc=0x53dac8, hbr=0x8a10078d) returned 1
[0163.901] DeleteObject (ho=0x8a10078d) returned 1
[0163.901] RestoreDC (hdc=0x220107c1, nSavedDC=-1) returned 1
[0163.901] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.901] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.901] GetSystemMetrics (nIndex=42) returned 0
[0163.901] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.901] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0163.901] GetClientRect (in: hWnd=0x7013e, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0163.902] GetCurrentObject (hdc=0x220107c1, type=0x1) returned 0xb00017
[0163.902] GetCurrentObject (hdc=0x220107c1, type=0x2) returned 0x900010
[0163.902] GetCurrentObject (hdc=0x220107c1, type=0x7) returned 0x1e0507b9
[0163.902] GetCurrentObject (hdc=0x220107c1, type=0x6) returned 0x8a01c2
[0163.902] SaveDC (hdc=0x220107c1) returned 2
[0163.902] GetNearestColor (hdc=0x220107c1, color=0xf0f0f0) returned 0xf0f0f0
[0163.902] CreateSolidBrush (color=0xf0f0f0) returned 0x8b10078d
[0163.902] FillRect (hDC=0x220107c1, lprc=0x53da68, hbr=0x8b10078d) returned 1
[0163.902] DeleteObject (ho=0x8b10078d) returned 1
[0163.902] RestoreDC (hdc=0x220107c1, nSavedDC=-1) returned 1
[0163.902] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.902] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.902] GetSystemMetrics (nIndex=42) returned 0
[0163.903] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.903] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0163.903] RestoreDC (hdc=0x220107c1, nSavedDC=-1) returned 1
[0163.903] GdipReleaseDC (graphics=0x5da0378, hdc=0x220107c1) returned 0x0
[0163.903] IsAppThemed () returned 0x1
[0163.903] GetThemeAppProperties () returned 0x3
[0163.903] GetThemeAppProperties () returned 0x3
[0163.903] IsAppThemed () returned 0x1
[0163.903] GetThemeAppProperties () returned 0x3
[0163.903] GetThemeAppProperties () returned 0x3
[0163.903] IsThemePartDefined () returned 0x1
[0163.903] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0163.903] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.903] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0163.903] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0163.904] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e000) returned 0x0
[0163.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0163.904] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0163.904] LocalFree (hMem=0x89ee08) returned 0x0
[0163.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0163.904] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0163.904] LocalFree (hMem=0x89ee08) returned 0x0
[0163.904] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0163.904] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e028) returned 0x0
[0163.904] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e018) returned 0x0
[0163.904] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e018) returned 0x0
[0163.904] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.904] GdipGetDC (graphics=0x5da0378, hdc=0x53e030) returned 0x0
[0163.904] GetCurrentObject (hdc=0x220107c1, type=0x1) returned 0xb00017
[0163.904] GetCurrentObject (hdc=0x220107c1, type=0x2) returned 0x900010
[0163.904] GetCurrentObject (hdc=0x220107c1, type=0x7) returned 0x1e0507b9
[0163.904] GetCurrentObject (hdc=0x220107c1, type=0x6) returned 0x8a01c2
[0163.904] SaveDC (hdc=0x220107c1) returned 1
[0163.905] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f04053e
[0163.905] GetClipRgn (hdc=0x220107c1, hrgn=0x6f04053e) returned 0
[0163.905] SelectClipRgn (hdc=0x220107c1, hrgn=0xc00407a1) returned 2
[0163.905] DeleteObject (ho=0x6f04053e) returned 1
[0163.905] DeleteObject (ho=0xc00407a1) returned 1
[0163.905] OffsetViewportOrgEx (in: hdc=0x220107c1, x=0, y=0, lppt=0x2379408 | out: lppt=0x2379408) returned 1
[0163.905] IsAppThemed () returned 0x1
[0163.905] GetThemeAppProperties () returned 0x3
[0163.905] GetThemeAppProperties () returned 0x3
[0163.905] DrawThemeBackground () returned 0x0
[0163.905] RestoreDC (hdc=0x220107c1, nSavedDC=-1) returned 1
[0163.905] GdipReleaseDC (graphics=0x5da0378, hdc=0x220107c1) returned 0x0
[0163.905] GdipCreateRegion (region=0x53dfec) returned 0x0
[0163.905] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.905] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0163.905] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0163.905] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e004) returned 0x0
[0163.906] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0163.906] LocalFree (hMem=0x89ee08) returned 0x0
[0163.906] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0163.906] LocalFree (hMem=0x89ea88) returned 0x0
[0163.906] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0163.906] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e02c) returned 0x0
[0163.906] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e01c) returned 0x0
[0163.906] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e01c) returned 0x0
[0163.907] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.907] GdipGetDC (graphics=0x5da0378, hdc=0x53e034) returned 0x0
[0163.907] GetCurrentObject (hdc=0x220107c1, type=0x1) returned 0xb00017
[0163.907] GetCurrentObject (hdc=0x220107c1, type=0x2) returned 0x900010
[0163.907] GetCurrentObject (hdc=0x220107c1, type=0x7) returned 0x1e0507b9
[0163.907] GetCurrentObject (hdc=0x220107c1, type=0x6) returned 0x8a01c2
[0163.907] SaveDC (hdc=0x220107c1) returned 1
[0163.907] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc10407a1
[0163.907] GetClipRgn (hdc=0x220107c1, hrgn=0xc10407a1) returned 0
[0163.907] SelectClipRgn (hdc=0x220107c1, hrgn=0x7004053e) returned 2
[0163.907] DeleteObject (ho=0xc10407a1) returned 1
[0163.907] DeleteObject (ho=0x7004053e) returned 1
[0163.907] OffsetViewportOrgEx (in: hdc=0x220107c1, x=0, y=0, lppt=0x23796dc | out: lppt=0x23796dc) returned 1
[0163.907] IsAppThemed () returned 0x1
[0163.908] GetThemeAppProperties () returned 0x3
[0163.908] GetThemeAppProperties () returned 0x3
[0163.908] GetThemeBackgroundContentRect () returned 0x0
[0163.908] RestoreDC (hdc=0x220107c1, nSavedDC=-1) returned 1
[0163.908] GdipReleaseDC (graphics=0x5da0378, hdc=0x220107c1) returned 0x0
[0163.908] IsAppThemed () returned 0x1
[0163.913] GetThemeAppProperties () returned 0x3
[0163.913] GetThemeAppProperties () returned 0x3
[0163.913] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e168) returned 0x0
[0163.913] GdipGetDC (graphics=0x5da0378, hdc=0x53e154) returned 0x0
[0163.913] GetCurrentObject (hdc=0x220107c1, type=0x1) returned 0xb00017
[0163.913] GetCurrentObject (hdc=0x220107c1, type=0x2) returned 0x900010
[0163.913] GetCurrentObject (hdc=0x220107c1, type=0x7) returned 0x1e0507b9
[0163.913] GetCurrentObject (hdc=0x220107c1, type=0x6) returned 0x8a01c2
[0163.913] SaveDC (hdc=0x220107c1) returned 1
[0163.913] GetTextAlign (hdc=0x220107c1) returned 0x0
[0163.913] GetTextColor (hdc=0x220107c1) returned 0x0
[0163.913] GetCurrentObject (hdc=0x220107c1, type=0x6) returned 0x8a01c2
[0163.913] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0163.914] SelectObject (hdc=0x220107c1, h=0x730a066d) returned 0x8a01c2
[0163.914] GetBkMode (hdc=0x220107c1) returned 2
[0163.914] SetBkMode (hdc=0x220107c1, mode=1) returned 2
[0163.914] DrawTextExW (in: hdc=0x220107c1, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x2379a7c | out: lpchText="OK", lprc=0x53df84) returned 13
[0163.914] DrawTextExW (in: hdc=0x220107c1, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x2379a7c | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0163.914] RestoreDC (hdc=0x220107c1, nSavedDC=-1) returned 1
[0163.915] GdipReleaseDC (graphics=0x5da0378, hdc=0x220107c1) returned 0x0
[0163.915] GetFocus () returned 0x302d8
[0163.915] IsAppThemed () returned 0x1
[0163.915] GetThemeAppProperties () returned 0x3
[0163.915] GetThemeAppProperties () returned 0x3
[0163.915] GdipGetDC (graphics=0x5da0378, hdc=0x53e340) returned 0x0
[0163.915] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x220107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0163.915] GdipReleaseDC (graphics=0x5da0378, hdc=0x220107c1) returned 0x0
[0163.915] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0163.915] SelectObject (hdc=0x220107c1, h=0x85000f) returned 0x1e0507b9
[0163.915] DeleteDC (hdc=0x220107c1) returned 1
[0163.915] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0163.915] EndPaint (hWnd=0x302c8, lpPaint=0x53e2e4) returned 1
[0163.916] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.916] IsWindowUnicode (hWnd=0x302da) returned 1
[0163.916] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.916] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.916] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.916] BeginPaint (in: hWnd=0x302da, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0163.916] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0163.916] CreateCompatibleDC (hdc=0xf0105ee) returned 0x240107c1
[0163.916] SelectObject (hdc=0x240107c1, h=0x1e0507b9) returned 0x85000f
[0163.917] GdipCreateFromHDC (hdc=0x240107c1, graphics=0x53e300) returned 0x0
[0163.917] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0163.917] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0163.917] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0163.917] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0163.917] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e360) returned 0x0
[0163.917] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0163.917] LocalFree (hMem=0x89eee8) returned 0x0
[0163.917] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0163.917] GdipCreateRegion (region=0x53e348) returned 0x0
[0163.917] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.917] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e354) returned 0x0
[0163.917] GdipSaveGraphics (graphics=0x5da0378, state=0x53e380) returned 0x0
[0163.917] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd830dbd) returned 0x0
[0163.917] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.917] GdipGetDC (graphics=0x5da0378, hdc=0x53e16c) returned 0x0
[0163.918] GetCurrentObject (hdc=0x240107c1, type=0x1) returned 0xb00017
[0163.918] GetCurrentObject (hdc=0x240107c1, type=0x2) returned 0x900010
[0163.918] GetCurrentObject (hdc=0x240107c1, type=0x7) returned 0x1e0507b9
[0163.918] GetCurrentObject (hdc=0x240107c1, type=0x6) returned 0x8a01c2
[0163.918] SaveDC (hdc=0x240107c1) returned 1
[0163.918] GetNearestColor (hdc=0x240107c1, color=0xf0f0f0) returned 0xf0f0f0
[0163.918] GetNearestColor (hdc=0x240107c1, color=0xa0a0a0) returned 0xa0a0a0
[0163.918] GetNearestColor (hdc=0x240107c1, color=0x696969) returned 0x696969
[0163.918] GetNearestColor (hdc=0x240107c1, color=0xa0a0a0) returned 0xa0a0a0
[0163.918] GetNearestColor (hdc=0x240107c1, color=0x0) returned 0x0
[0163.918] GetNearestColor (hdc=0x240107c1, color=0xffffff) returned 0xffffff
[0163.918] GetNearestColor (hdc=0x240107c1, color=0xe5e5e5) returned 0xe5e5e5
[0163.919] GetNearestColor (hdc=0x240107c1, color=0xd7d7d7) returned 0xd7d7d7
[0163.919] GetNearestColor (hdc=0x240107c1, color=0x0) returned 0x0
[0163.919] RestoreDC (hdc=0x240107c1, nSavedDC=-1) returned 1
[0163.919] GdipReleaseDC (graphics=0x5da0378, hdc=0x240107c1) returned 0x0
[0163.919] IsAppThemed () returned 0x1
[0163.919] GetThemeAppProperties () returned 0x3
[0163.919] GetThemeAppProperties () returned 0x3
[0163.919] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0163.919] SendMessageW (hWnd=0x7013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0163.919] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0163.919] IsAppThemed () returned 0x1
[0163.919] GetThemeAppProperties () returned 0x3
[0163.919] GetThemeAppProperties () returned 0x3
[0163.919] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x237a28c | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0163.920] IsAppThemed () returned 0x1
[0163.920] GetThemeAppProperties () returned 0x3
[0163.920] GetThemeAppProperties () returned 0x3
[0163.920] IsAppThemed () returned 0x1
[0163.920] GetThemeAppProperties () returned 0x3
[0163.920] GetThemeAppProperties () returned 0x3
[0163.920] GetFocus () returned 0x302d8
[0163.920] IsAppThemed () returned 0x1
[0163.920] GetThemeAppProperties () returned 0x3
[0163.920] GetThemeAppProperties () returned 0x3
[0163.920] IsAppThemed () returned 0x1
[0163.920] GetThemeAppProperties () returned 0x3
[0163.920] GetThemeAppProperties () returned 0x3
[0163.920] IsThemePartDefined () returned 0x1
[0163.920] IsAppThemed () returned 0x1
[0163.920] GetThemeAppProperties () returned 0x3
[0163.921] GetThemeAppProperties () returned 0x3
[0163.921] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0163.921] IsAppThemed () returned 0x1
[0163.921] GetThemeAppProperties () returned 0x3
[0163.921] GetThemeAppProperties () returned 0x3
[0163.921] IsAppThemed () returned 0x1
[0163.921] GetThemeAppProperties () returned 0x3
[0163.921] GetThemeAppProperties () returned 0x3
[0163.921] IsThemePartDefined () returned 0x1
[0163.921] GdipCreateRegion (region=0x53e070) returned 0x0
[0163.921] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.921] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0163.921] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0163.921] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e088) returned 0x0
[0163.921] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0163.921] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0163.921] LocalFree (hMem=0x89ea88) returned 0x0
[0163.921] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0163.921] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0163.922] LocalFree (hMem=0x89ea88) returned 0x0
[0163.922] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0163.922] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0b0) returned 0x0
[0163.922] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0a0) returned 0x0
[0163.922] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e0a0) returned 0x0
[0163.922] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.922] GdipGetDC (graphics=0x5da0378, hdc=0x53e0b8) returned 0x0
[0163.922] GetCurrentObject (hdc=0x240107c1, type=0x1) returned 0xb00017
[0163.922] GetCurrentObject (hdc=0x240107c1, type=0x2) returned 0x900010
[0163.922] GetCurrentObject (hdc=0x240107c1, type=0x7) returned 0x1e0507b9
[0163.922] GetCurrentObject (hdc=0x240107c1, type=0x6) returned 0x8a01c2
[0163.922] SaveDC (hdc=0x240107c1) returned 1
[0163.922] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7104053e
[0163.922] GetClipRgn (hdc=0x240107c1, hrgn=0x7104053e) returned 0
[0163.922] SelectClipRgn (hdc=0x240107c1, hrgn=0xc50407a1) returned 2
[0163.923] DeleteObject (ho=0x7104053e) returned 1
[0163.923] DeleteObject (ho=0xc50407a1) returned 1
[0163.923] OffsetViewportOrgEx (in: hdc=0x240107c1, x=0, y=0, lppt=0x237a93c | out: lppt=0x237a93c) returned 1
[0163.923] DrawThemeParentBackground () returned 0x0
[0163.923] GetWindowPlacement (in: hWnd=0x7013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0163.923] GetClientRect (in: hWnd=0x7013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0163.923] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.923] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.923] GetSystemMetrics (nIndex=42) returned 0
[0163.923] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.923] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0163.923] GetClientRect (in: hWnd=0x7013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0163.923] GetCurrentObject (hdc=0x240107c1, type=0x1) returned 0xb00017
[0163.923] GetCurrentObject (hdc=0x240107c1, type=0x2) returned 0x900010
[0163.924] GetCurrentObject (hdc=0x240107c1, type=0x7) returned 0x1e0507b9
[0163.928] GetCurrentObject (hdc=0x240107c1, type=0x6) returned 0x8a01c2
[0163.928] SaveDC (hdc=0x240107c1) returned 2
[0163.928] GetNearestColor (hdc=0x240107c1, color=0xf0f0f0) returned 0xf0f0f0
[0163.928] CreateSolidBrush (color=0xf0f0f0) returned 0x8c10078d
[0163.928] FillRect (hDC=0x240107c1, lprc=0x53dad0, hbr=0x8c10078d) returned 1
[0163.928] DeleteObject (ho=0x8c10078d) returned 1
[0163.928] RestoreDC (hdc=0x240107c1, nSavedDC=-1) returned 1
[0163.929] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.929] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.929] GetSystemMetrics (nIndex=42) returned 0
[0163.929] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.929] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0163.929] GetClientRect (in: hWnd=0x7013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0163.929] GetCurrentObject (hdc=0x240107c1, type=0x1) returned 0xb00017
[0163.929] GetCurrentObject (hdc=0x240107c1, type=0x2) returned 0x900010
[0163.929] GetCurrentObject (hdc=0x240107c1, type=0x7) returned 0x1e0507b9
[0163.929] GetCurrentObject (hdc=0x240107c1, type=0x6) returned 0x8a01c2
[0163.929] SaveDC (hdc=0x240107c1) returned 2
[0163.929] GetNearestColor (hdc=0x240107c1, color=0xf0f0f0) returned 0xf0f0f0
[0163.929] CreateSolidBrush (color=0xf0f0f0) returned 0x8d10078d
[0163.929] FillRect (hDC=0x240107c1, lprc=0x53da70, hbr=0x8d10078d) returned 1
[0163.930] DeleteObject (ho=0x8d10078d) returned 1
[0163.930] RestoreDC (hdc=0x240107c1, nSavedDC=-1) returned 1
[0163.930] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0163.930] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0163.930] GetSystemMetrics (nIndex=42) returned 0
[0163.930] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0163.930] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0163.958] RestoreDC (hdc=0x240107c1, nSavedDC=-1) returned 1
[0163.958] GdipReleaseDC (graphics=0x5da0378, hdc=0x240107c1) returned 0x0
[0163.958] IsAppThemed () returned 0x1
[0163.958] GetThemeAppProperties () returned 0x3
[0163.959] GetThemeAppProperties () returned 0x3
[0163.959] IsAppThemed () returned 0x1
[0163.959] GetThemeAppProperties () returned 0x3
[0163.959] GetThemeAppProperties () returned 0x3
[0163.959] IsThemePartDefined () returned 0x1
[0163.959] GdipCreateRegion (region=0x53dff4) returned 0x0
[0163.959] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.959] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0163.959] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0163.959] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e00c) returned 0x0
[0163.959] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0163.959] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0163.959] LocalFree (hMem=0x89ea88) returned 0x0
[0163.960] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0163.960] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0163.960] LocalFree (hMem=0x89ee08) returned 0x0
[0163.960] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0163.960] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e034) returned 0x0
[0163.960] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e024) returned 0x0
[0163.960] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e024) returned 0x0
[0163.960] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.960] GdipGetDC (graphics=0x5da0378, hdc=0x53e03c) returned 0x0
[0163.960] GetCurrentObject (hdc=0x240107c1, type=0x1) returned 0xb00017
[0163.960] GetCurrentObject (hdc=0x240107c1, type=0x2) returned 0x900010
[0163.960] GetCurrentObject (hdc=0x240107c1, type=0x7) returned 0x1e0507b9
[0163.960] GetCurrentObject (hdc=0x240107c1, type=0x6) returned 0x8a01c2
[0163.960] SaveDC (hdc=0x240107c1) returned 1
[0163.961] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc60407a1
[0163.961] GetClipRgn (hdc=0x240107c1, hrgn=0xc60407a1) returned 0
[0163.961] SelectClipRgn (hdc=0x240107c1, hrgn=0x7304053e) returned 2
[0163.961] DeleteObject (ho=0xc60407a1) returned 1
[0163.961] DeleteObject (ho=0x7304053e) returned 1
[0163.961] OffsetViewportOrgEx (in: hdc=0x240107c1, x=0, y=0, lppt=0x237b1c4 | out: lppt=0x237b1c4) returned 1
[0163.961] IsAppThemed () returned 0x1
[0163.961] GetThemeAppProperties () returned 0x3
[0163.961] GetThemeAppProperties () returned 0x3
[0163.961] DrawThemeBackground () returned 0x0
[0163.962] RestoreDC (hdc=0x240107c1, nSavedDC=-1) returned 1
[0163.962] GdipReleaseDC (graphics=0x5da0378, hdc=0x240107c1) returned 0x0
[0163.962] GdipCreateRegion (region=0x53dff8) returned 0x0
[0163.962] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.962] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0163.962] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0163.962] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e010) returned 0x0
[0163.962] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0163.962] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee40) returned 0x0
[0163.962] LocalFree (hMem=0x89ee40) returned 0x0
[0163.962] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0163.962] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0163.963] LocalFree (hMem=0x89ee08) returned 0x0
[0163.963] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0163.963] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e038) returned 0x0
[0163.963] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e028) returned 0x0
[0163.963] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e028) returned 0x0
[0163.963] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.963] GdipGetDC (graphics=0x5da0378, hdc=0x53e040) returned 0x0
[0163.963] GetCurrentObject (hdc=0x240107c1, type=0x1) returned 0xb00017
[0163.963] GetCurrentObject (hdc=0x240107c1, type=0x2) returned 0x900010
[0163.963] GetCurrentObject (hdc=0x240107c1, type=0x7) returned 0x1e0507b9
[0163.963] GetCurrentObject (hdc=0x240107c1, type=0x6) returned 0x8a01c2
[0163.963] SaveDC (hdc=0x240107c1) returned 1
[0163.963] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7404053e
[0163.963] GetClipRgn (hdc=0x240107c1, hrgn=0x7404053e) returned 0
[0163.963] SelectClipRgn (hdc=0x240107c1, hrgn=0xc70407a1) returned 2
[0163.964] DeleteObject (ho=0x7404053e) returned 1
[0163.964] DeleteObject (ho=0xc70407a1) returned 1
[0163.964] OffsetViewportOrgEx (in: hdc=0x240107c1, x=0, y=0, lppt=0x237b498 | out: lppt=0x237b498) returned 1
[0163.964] IsAppThemed () returned 0x1
[0163.964] GetThemeAppProperties () returned 0x3
[0163.964] GetThemeAppProperties () returned 0x3
[0163.964] GetThemeBackgroundContentRect () returned 0x0
[0163.964] RestoreDC (hdc=0x240107c1, nSavedDC=-1) returned 1
[0163.964] GdipReleaseDC (graphics=0x5da0378, hdc=0x240107c1) returned 0x0
[0163.964] IsAppThemed () returned 0x1
[0163.964] GetThemeAppProperties () returned 0x3
[0163.964] GetThemeAppProperties () returned 0x3
[0163.964] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e174) returned 0x0
[0163.964] GdipGetDC (graphics=0x5da0378, hdc=0x53e160) returned 0x0
[0163.965] GetCurrentObject (hdc=0x240107c1, type=0x1) returned 0xb00017
[0163.965] GetCurrentObject (hdc=0x240107c1, type=0x2) returned 0x900010
[0163.965] GetCurrentObject (hdc=0x240107c1, type=0x7) returned 0x1e0507b9
[0163.965] GetCurrentObject (hdc=0x240107c1, type=0x6) returned 0x8a01c2
[0163.965] SaveDC (hdc=0x240107c1) returned 1
[0163.965] GetTextAlign (hdc=0x240107c1) returned 0x0
[0163.965] GetTextColor (hdc=0x240107c1) returned 0x0
[0163.965] GetCurrentObject (hdc=0x240107c1, type=0x6) returned 0x8a01c2
[0163.965] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0163.965] SelectObject (hdc=0x240107c1, h=0x730a066d) returned 0x8a01c2
[0163.965] GetBkMode (hdc=0x240107c1) returned 2
[0163.966] SetBkMode (hdc=0x240107c1, mode=1) returned 2
[0163.966] DrawTextExW (in: hdc=0x240107c1, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x237b838 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0163.966] DrawTextExW (in: hdc=0x240107c1, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x237b838 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0163.967] RestoreDC (hdc=0x240107c1, nSavedDC=-1) returned 1
[0163.967] GdipReleaseDC (graphics=0x5da0378, hdc=0x240107c1) returned 0x0
[0163.967] GetFocus () returned 0x302d8
[0163.967] IsAppThemed () returned 0x1
[0163.967] GetThemeAppProperties () returned 0x3
[0163.967] GetThemeAppProperties () returned 0x3
[0163.967] GdipGetDC (graphics=0x5da0378, hdc=0x53e340) returned 0x0
[0163.967] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x240107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0163.967] GdipReleaseDC (graphics=0x5da0378, hdc=0x240107c1) returned 0x0
[0163.967] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0163.967] SelectObject (hdc=0x240107c1, h=0x85000f) returned 0x1e0507b9
[0163.967] DeleteDC (hdc=0x240107c1) returned 1
[0163.968] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0163.968] EndPaint (hWnd=0x302da, lpPaint=0x53e2e4) returned 1
[0163.968] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.968] IsWindowUnicode (hWnd=0x202c6) returned 1
[0163.968] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0163.968] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0163.969] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0163.969] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0163.969] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0163.969] CreateCompatibleDC (hdc=0x60100ce) returned 0x260107c1
[0163.969] SelectObject (hdc=0x260107c1, h=0x1e0507b9) returned 0x85000f
[0163.969] GdipCreateFromHDC (hdc=0x260107c1, graphics=0x53e300) returned 0x0
[0163.969] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0163.970] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0163.970] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0163.970] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0163.970] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e360) returned 0x0
[0163.970] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0163.970] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0163.970] LocalFree (hMem=0x89ee08) returned 0x0
[0163.970] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0163.970] GdipCreateRegion (region=0x53e348) returned 0x0
[0163.970] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.970] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e354) returned 0x0
[0163.970] GdipSaveGraphics (graphics=0x5da0378, state=0x53e380) returned 0x0
[0163.970] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd810dbd) returned 0x0
[0163.970] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.970] GdipGetDC (graphics=0x5da0378, hdc=0x53e16c) returned 0x0
[0163.975] GetCurrentObject (hdc=0x260107c1, type=0x1) returned 0xb00017
[0163.975] GetCurrentObject (hdc=0x260107c1, type=0x2) returned 0x900010
[0163.975] GetCurrentObject (hdc=0x260107c1, type=0x7) returned 0x1e0507b9
[0163.975] GetCurrentObject (hdc=0x260107c1, type=0x6) returned 0x8a01c2
[0163.975] SaveDC (hdc=0x260107c1) returned 1
[0163.975] GetNearestColor (hdc=0x260107c1, color=0xff) returned 0xff
[0163.975] GetNearestColor (hdc=0x260107c1, color=0x55) returned 0x55
[0163.975] GetNearestColor (hdc=0x260107c1, color=0x0) returned 0x0
[0163.975] GetNearestColor (hdc=0x260107c1, color=0x55) returned 0x55
[0163.975] GetNearestColor (hdc=0x260107c1, color=0x0) returned 0x0
[0163.975] GetNearestColor (hdc=0x260107c1, color=0x8080ff) returned 0x8080ff
[0163.976] GetNearestColor (hdc=0x260107c1, color=0x7373e5) returned 0x7373e5
[0163.976] GetNearestColor (hdc=0x260107c1, color=0xe5) returned 0xe5
[0163.976] GetNearestColor (hdc=0x260107c1, color=0x0) returned 0x0
[0163.976] RestoreDC (hdc=0x260107c1, nSavedDC=-1) returned 1
[0163.976] GdipReleaseDC (graphics=0x5da0378, hdc=0x260107c1) returned 0x0
[0163.976] IsAppThemed () returned 0x1
[0163.976] GetThemeAppProperties () returned 0x3
[0163.976] GetThemeAppProperties () returned 0x3
[0163.976] IsAppThemed () returned 0x1
[0163.977] GetThemeAppProperties () returned 0x3
[0163.977] GetThemeAppProperties () returned 0x3
[0163.977] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0163.977] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x237c01c | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0163.977] IsAppThemed () returned 0x1
[0163.978] GetThemeAppProperties () returned 0x3
[0163.978] GetThemeAppProperties () returned 0x3
[0163.978] IsAppThemed () returned 0x1
[0163.978] GetThemeAppProperties () returned 0x3
[0163.978] GetThemeAppProperties () returned 0x3
[0163.978] GetFocus () returned 0x302d8
[0163.978] IsAppThemed () returned 0x1
[0163.978] GetThemeAppProperties () returned 0x3
[0163.978] GetThemeAppProperties () returned 0x3
[0163.978] IsAppThemed () returned 0x1
[0163.978] GetThemeAppProperties () returned 0x3
[0163.978] GetThemeAppProperties () returned 0x3
[0163.978] IsThemePartDefined () returned 0x1
[0163.978] IsAppThemed () returned 0x1
[0163.978] GetThemeAppProperties () returned 0x3
[0163.979] GetThemeAppProperties () returned 0x3
[0163.979] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0163.979] IsAppThemed () returned 0x1
[0163.979] GetThemeAppProperties () returned 0x3
[0163.979] GetThemeAppProperties () returned 0x3
[0163.979] IsAppThemed () returned 0x1
[0163.979] GetThemeAppProperties () returned 0x3
[0163.979] GetThemeAppProperties () returned 0x3
[0163.979] IsThemePartDefined () returned 0x1
[0163.979] GdipCreateRegion (region=0x53e070) returned 0x0
[0163.979] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0163.979] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0163.979] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0163.979] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e088) returned 0x0
[0163.979] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0163.979] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0163.979] LocalFree (hMem=0x89ea88) returned 0x0
[0163.979] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0163.979] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0163.980] LocalFree (hMem=0x89ea88) returned 0x0
[0163.980] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0163.980] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0b0) returned 0x0
[0163.980] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0a0) returned 0x0
[0163.980] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e0a0) returned 0x0
[0163.980] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0163.980] GdipGetDC (graphics=0x5da0378, hdc=0x53e0b8) returned 0x0
[0163.980] GetCurrentObject (hdc=0x260107c1, type=0x1) returned 0xb00017
[0163.980] GetCurrentObject (hdc=0x260107c1, type=0x2) returned 0x900010
[0163.980] GetCurrentObject (hdc=0x260107c1, type=0x7) returned 0x1e0507b9
[0163.980] GetCurrentObject (hdc=0x260107c1, type=0x6) returned 0x8a01c2
[0163.980] SaveDC (hdc=0x260107c1) returned 1
[0163.980] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc80407a1
[0163.980] GetClipRgn (hdc=0x260107c1, hrgn=0xc80407a1) returned 0
[0163.980] SelectClipRgn (hdc=0x260107c1, hrgn=0x7804053e) returned 2
[0163.981] DeleteObject (ho=0xc80407a1) returned 1
[0163.981] DeleteObject (ho=0x7804053e) returned 1
[0163.981] OffsetViewportOrgEx (in: hdc=0x260107c1, x=0, y=0, lppt=0x237c6cc | out: lppt=0x237c6cc) returned 1
[0163.981] DrawThemeParentBackground () returned 0x0
[0163.981] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0163.981] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0163.981] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0163.981] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0163.981] GetSystemMetrics (nIndex=42) returned 0
[0163.981] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0163.981] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0163.982] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0163.982] GetCurrentObject (hdc=0x260107c1, type=0x1) returned 0xb00017
[0163.982] GetCurrentObject (hdc=0x260107c1, type=0x2) returned 0x900010
[0163.982] GetCurrentObject (hdc=0x260107c1, type=0x7) returned 0x1e0507b9
[0163.982] GetCurrentObject (hdc=0x260107c1, type=0x6) returned 0x8a01c2
[0163.982] SaveDC (hdc=0x260107c1) returned 2
[0163.982] GetNearestColor (hdc=0x260107c1, color=0xff) returned 0xff
[0163.982] CreateSolidBrush (color=0xff) returned 0x8e10078d
[0163.982] FillRect (hDC=0x260107c1, lprc=0x53dad0, hbr=0x8e10078d) returned 1
[0163.982] DeleteObject (ho=0x8e10078d) returned 1
[0163.982] RestoreDC (hdc=0x260107c1, nSavedDC=-1) returned 1
[0163.982] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0163.982] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0163.982] GetSystemMetrics (nIndex=42) returned 0
[0163.982] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0163.983] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0163.983] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0163.983] GetCurrentObject (hdc=0x260107c1, type=0x1) returned 0xb00017
[0163.983] GetCurrentObject (hdc=0x260107c1, type=0x2) returned 0x900010
[0163.983] GetCurrentObject (hdc=0x260107c1, type=0x7) returned 0x1e0507b9
[0163.983] GetCurrentObject (hdc=0x260107c1, type=0x6) returned 0x8a01c2
[0163.983] SaveDC (hdc=0x260107c1) returned 2
[0163.983] GetNearestColor (hdc=0x260107c1, color=0xff) returned 0xff
[0163.983] CreateSolidBrush (color=0xff) returned 0x8f10078d
[0163.983] FillRect (hDC=0x260107c1, lprc=0x53da70, hbr=0x8f10078d) returned 1
[0163.983] DeleteObject (ho=0x8f10078d) returned 1
[0163.983] RestoreDC (hdc=0x260107c1, nSavedDC=-1) returned 1
[0163.984] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0163.984] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0163.984] GetSystemMetrics (nIndex=42) returned 0
[0163.984] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0163.984] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0164.034] RestoreDC (hdc=0x260107c1, nSavedDC=-1) returned 1
[0164.034] GdipReleaseDC (graphics=0x5da0378, hdc=0x260107c1) returned 0x0
[0164.034] IsAppThemed () returned 0x1
[0164.034] GetThemeAppProperties () returned 0x3
[0164.034] GetThemeAppProperties () returned 0x3
[0164.034] IsAppThemed () returned 0x1
[0164.034] GetThemeAppProperties () returned 0x3
[0164.034] GetThemeAppProperties () returned 0x3
[0164.034] IsThemePartDefined () returned 0x1
[0164.034] GdipCreateRegion (region=0x53dff4) returned 0x0
[0164.034] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0164.034] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0164.035] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0164.035] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e00c) returned 0x0
[0164.035] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0164.035] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0164.035] LocalFree (hMem=0x89ee08) returned 0x0
[0164.035] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0164.035] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0164.035] LocalFree (hMem=0x89ee08) returned 0x0
[0164.035] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0164.035] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e034) returned 0x0
[0164.035] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e024) returned 0x0
[0164.035] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e024) returned 0x0
[0164.035] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0164.035] GdipGetDC (graphics=0x5da0378, hdc=0x53e03c) returned 0x0
[0164.035] GetCurrentObject (hdc=0x260107c1, type=0x1) returned 0xb00017
[0164.035] GetCurrentObject (hdc=0x260107c1, type=0x2) returned 0x900010
[0164.036] GetCurrentObject (hdc=0x260107c1, type=0x7) returned 0x1e0507b9
[0164.036] GetCurrentObject (hdc=0x260107c1, type=0x6) returned 0x8a01c2
[0164.036] SaveDC (hdc=0x260107c1) returned 1
[0164.036] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7904053e
[0164.036] GetClipRgn (hdc=0x260107c1, hrgn=0x7904053e) returned 0
[0164.047] SelectClipRgn (hdc=0x260107c1, hrgn=0xca0407a1) returned 2
[0164.048] DeleteObject (ho=0x7904053e) returned 1
[0164.048] DeleteObject (ho=0xca0407a1) returned 1
[0164.048] OffsetViewportOrgEx (in: hdc=0x260107c1, x=0, y=0, lppt=0x237cf30 | out: lppt=0x237cf30) returned 1
[0164.048] IsAppThemed () returned 0x1
[0164.048] GetThemeAppProperties () returned 0x3
[0164.048] GetThemeAppProperties () returned 0x3
[0164.048] DrawThemeBackground () returned 0x0
[0164.048] RestoreDC (hdc=0x260107c1, nSavedDC=-1) returned 1
[0164.048] GdipReleaseDC (graphics=0x5da0378, hdc=0x260107c1) returned 0x0
[0164.048] GdipCreateRegion (region=0x53dff8) returned 0x0
[0164.048] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0164.048] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0164.048] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0164.049] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e010) returned 0x0
[0164.056] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0164.056] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0164.056] LocalFree (hMem=0x89ea88) returned 0x0
[0164.056] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0164.056] LocalFree (hMem=0x89ea88) returned 0x0
[0164.056] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0164.056] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e038) returned 0x0
[0164.056] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e028) returned 0x0
[0164.056] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e028) returned 0x0
[0164.056] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0164.056] GdipGetDC (graphics=0x5da0378, hdc=0x53e040) returned 0x0
[0164.056] GetCurrentObject (hdc=0x260107c1, type=0x1) returned 0xb00017
[0164.056] GetCurrentObject (hdc=0x260107c1, type=0x2) returned 0x900010
[0164.056] GetCurrentObject (hdc=0x260107c1, type=0x7) returned 0x1e0507b9
[0164.057] GetCurrentObject (hdc=0x260107c1, type=0x6) returned 0x8a01c2
[0164.057] SaveDC (hdc=0x260107c1) returned 1
[0164.057] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcb0407a1
[0164.057] GetClipRgn (hdc=0x260107c1, hrgn=0xcb0407a1) returned 0
[0164.057] SelectClipRgn (hdc=0x260107c1, hrgn=0x7a04053e) returned 2
[0164.057] DeleteObject (ho=0xcb0407a1) returned 1
[0164.057] DeleteObject (ho=0x7a04053e) returned 1
[0164.057] OffsetViewportOrgEx (in: hdc=0x260107c1, x=0, y=0, lppt=0x237d204 | out: lppt=0x237d204) returned 1
[0164.057] IsAppThemed () returned 0x1
[0164.057] GetThemeAppProperties () returned 0x3
[0164.057] GetThemeAppProperties () returned 0x3
[0164.057] GetThemeBackgroundContentRect () returned 0x0
[0164.057] RestoreDC (hdc=0x260107c1, nSavedDC=-1) returned 1
[0164.057] GdipReleaseDC (graphics=0x5da0378, hdc=0x260107c1) returned 0x0
[0164.057] IsAppThemed () returned 0x1
[0164.058] GetThemeAppProperties () returned 0x3
[0164.058] GetThemeAppProperties () returned 0x3
[0164.058] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e174) returned 0x0
[0164.058] GdipGetDC (graphics=0x5da0378, hdc=0x53e160) returned 0x0
[0164.058] GetCurrentObject (hdc=0x260107c1, type=0x1) returned 0xb00017
[0164.058] GetCurrentObject (hdc=0x260107c1, type=0x2) returned 0x900010
[0164.058] GetCurrentObject (hdc=0x260107c1, type=0x7) returned 0x1e0507b9
[0164.058] GetCurrentObject (hdc=0x260107c1, type=0x6) returned 0x8a01c2
[0164.058] SaveDC (hdc=0x260107c1) returned 1
[0164.058] GetTextAlign (hdc=0x260107c1) returned 0x0
[0164.058] GetTextColor (hdc=0x260107c1) returned 0x0
[0164.058] GetCurrentObject (hdc=0x260107c1, type=0x6) returned 0x8a01c2
[0164.058] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0164.058] SelectObject (hdc=0x260107c1, h=0x450a0799) returned 0x8a01c2
[0164.058] GetBkMode (hdc=0x260107c1) returned 2
[0164.059] SetBkMode (hdc=0x260107c1, mode=1) returned 2
[0164.059] DrawTextExW (in: hdc=0x260107c1, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x237d5a4 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0164.059] DrawTextExW (in: hdc=0x260107c1, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x237d5a4 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0164.059] RestoreDC (hdc=0x260107c1, nSavedDC=-1) returned 1
[0164.059] GdipReleaseDC (graphics=0x5da0378, hdc=0x260107c1) returned 0x0
[0164.059] GetFocus () returned 0x302d8
[0164.086] IsAppThemed () returned 0x1
[0164.086] GetThemeAppProperties () returned 0x3
[0164.086] GetThemeAppProperties () returned 0x3
[0164.086] GdipGetDC (graphics=0x5da0378, hdc=0x53e340) returned 0x0
[0164.087] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x260107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0164.087] GdipReleaseDC (graphics=0x5da0378, hdc=0x260107c1) returned 0x0
[0164.087] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0164.087] SelectObject (hdc=0x260107c1, h=0x85000f) returned 0x1e0507b9
[0164.087] DeleteDC (hdc=0x260107c1) returned 1
[0164.087] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0164.087] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0164.087] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0164.088] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0164.088] IsWindowUnicode (hWnd=0x102dc) returned 1
[0164.088] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0164.089] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0164.089] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0164.089] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0164.090] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0164.090] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0164.092] IsWindowUnicode (hWnd=0x102dc) returned 1
[0164.092] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0164.092] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0164.092] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0164.093] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0164.093] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x84, wParam=0x0, lParam=0x1920354) returned 0x1
[0164.093] IsWindowUnicode (hWnd=0x302c8) returned 1
[0164.093] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0164.093] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x84, wParam=0x0, lParam=0x1920354) returned 0x1
[0164.093] GetDlgItem (hDlg=0x7013e, nIDDlgItem=0) returned 0x0
[0164.093] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x210, wParam=0x201, lParam=0x150135) returned 0x0
[0164.093] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x21, wParam=0x7013e, lParam=0x2010001) returned 0x1
[0164.093] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x21, wParam=0x7013e, lParam=0x2010001) returned 0x1
[0164.094] SetCursor (hCursor=0x10003) returned 0x10003
[0164.094] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0164.094] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0164.094] GetKeyState (nVirtKey=1) returned -127
[0164.094] GetKeyState (nVirtKey=2) returned 0
[0164.094] GetKeyState (nVirtKey=4) returned 0
[0164.094] GetKeyState (nVirtKey=5) returned 0
[0164.094] GetKeyState (nVirtKey=6) returned 0
[0164.094] IsWindowVisible (hWnd=0x302c8) returned 1
[0164.094] IsWindowEnabled (hWnd=0x302c8) returned 1
[0164.094] SetFocus (hWnd=0x302c8) returned 0x302d8
[0164.095] GetFocus () returned 0x302c8
[0164.095] IsChild (hWndParent=0x7013e, hWnd=0x302c8) returned 1
[0164.103] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x8, wParam=0x302c8, lParam=0x0) returned 0x1
[0164.104] SendMessageW (hWnd=0x302d8, Msg=0x2111, wParam=0x20002d8, lParam=0x302d8) returned 0x0
[0164.105] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0164.107] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0164.108] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0164.108] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0164.108] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0164.108] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0164.110] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0164.110] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x7, wParam=0x302d8, lParam=0x0) returned 0x0
[0164.111] GetStockObject (i=5) returned 0x900015
[0164.111] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0164.111] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0xd, wParam=0x3, lParam=0x89e788) returned 0x2
[0164.111] GetDlgItem (hDlg=0x7013e, nIDDlgItem=197320) returned 0x302c8
[0164.111] SendMessageW (hWnd=0x302c8, Msg=0x202b, wParam=0x302c8, lParam=0x53de74) returned 0x0
[0164.111] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x202b, wParam=0x302c8, lParam=0x53de74) returned 0x0
[0164.117] InvalidateRect (hWnd=0x302c8, lpRect=0x0, bErase=0) returned 1
[0164.120] GetFocus () returned 0x302c8
[0164.120] GetFocus () returned 0x302c8
[0164.120] GetFocus () returned 0x302c8
[0164.120] GetKeyState (nVirtKey=1) returned -127
[0164.120] GetKeyState (nVirtKey=2) returned 0
[0164.120] GetKeyState (nVirtKey=4) returned 0
[0164.120] GetKeyState (nVirtKey=5) returned 0
[0164.120] GetKeyState (nVirtKey=6) returned 0
[0164.120] GetCapture () returned 0x0
[0164.120] SetCapture (hWnd=0x302c8) returned 0x0
[0164.120] GetKeyState (nVirtKey=1) returned -127
[0164.120] GetKeyState (nVirtKey=2) returned 0
[0164.120] GetKeyState (nVirtKey=4) returned 0
[0164.120] GetKeyState (nVirtKey=5) returned 0
[0164.120] GetKeyState (nVirtKey=6) returned 0
[0164.120] NotifyWinEvent (event=0x800a, hwnd=0x302c8, idObject=-4, idChild=0)
[0164.120] InvalidateRect (hWnd=0x302c8, lpRect=0x53e4c8, bErase=0) returned 1
[0164.120] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0164.121] IsWindowUnicode (hWnd=0x302c8) returned 1
[0164.121] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0164.121] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0164.121] DispatchMessageW (lpMsg=0x53e8a0)
[0164.121] MapWindowPoints (in: hWndFrom=0x302c8, hWndTo=0x0, lpPoints=0x237d740, cPoints=0x1 | out: lpPoints=0x237d740) returned 25756481
[0164.121] NotifyWinEvent (event=0x800a, hwnd=0x302c8, idObject=-4, idChild=0)
[0164.121] InvalidateRect (hWnd=0x302c8, lpRect=0x53e468, bErase=0) returned 1
[0164.121] UpdateWindow (hWnd=0x302c8) returned 1
[0164.121] BeginPaint (in: hWnd=0x302c8, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x60100ce
[0164.121] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0164.121] CreateCompatibleDC (hdc=0x60100ce) returned 0x100107cb
[0164.121] SelectObject (hdc=0x100107cb, h=0x1e0507b9) returned 0x85000f
[0164.122] GdipCreateFromHDC (hdc=0x100107cb, graphics=0x53df98) returned 0x0
[0164.122] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0164.122] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0164.122] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0164.122] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0164.122] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dff8) returned 0x0
[0164.122] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0164.122] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0164.122] LocalFree (hMem=0x89eee8) returned 0x0
[0164.122] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0164.122] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0164.122] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0164.122] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dfec) returned 0x0
[0164.123] GdipSaveGraphics (graphics=0x5da0378, state=0x53e018) returned 0x0
[0164.123] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd7f0dbd) returned 0x0
[0164.123] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0164.123] GdipGetDC (graphics=0x5da0378, hdc=0x53ddf8) returned 0x0
[0164.123] GetCurrentObject (hdc=0x100107cb, type=0x1) returned 0xb00017
[0164.123] GetCurrentObject (hdc=0x100107cb, type=0x2) returned 0x900010
[0164.123] GetCurrentObject (hdc=0x100107cb, type=0x7) returned 0x1e0507b9
[0164.123] GetCurrentObject (hdc=0x100107cb, type=0x6) returned 0x8a01c2
[0164.123] SaveDC (hdc=0x100107cb) returned 1
[0164.123] GetNearestColor (hdc=0x100107cb, color=0xf0f0f0) returned 0xf0f0f0
[0164.123] GetNearestColor (hdc=0x100107cb, color=0xa0a0a0) returned 0xa0a0a0
[0164.123] GetNearestColor (hdc=0x100107cb, color=0x696969) returned 0x696969
[0164.123] GetNearestColor (hdc=0x100107cb, color=0xa0a0a0) returned 0xa0a0a0
[0164.123] GetNearestColor (hdc=0x100107cb, color=0x0) returned 0x0
[0164.124] GetNearestColor (hdc=0x100107cb, color=0xffffff) returned 0xffffff
[0164.124] GetNearestColor (hdc=0x100107cb, color=0xe5e5e5) returned 0xe5e5e5
[0164.124] GetNearestColor (hdc=0x100107cb, color=0xd7d7d7) returned 0xd7d7d7
[0164.124] GetNearestColor (hdc=0x100107cb, color=0x0) returned 0x0
[0164.124] RestoreDC (hdc=0x100107cb, nSavedDC=-1) returned 1
[0164.124] GdipReleaseDC (graphics=0x5da0378, hdc=0x100107cb) returned 0x0
[0164.124] IsAppThemed () returned 0x1
[0164.124] GetThemeAppProperties () returned 0x3
[0164.124] GetThemeAppProperties () returned 0x3
[0164.124] IsAppThemed () returned 0x1
[0164.124] GetThemeAppProperties () returned 0x3
[0164.124] GetThemeAppProperties () returned 0x3
[0164.124] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0164.124] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x237deb4 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0164.125] IsAppThemed () returned 0x1
[0164.125] GetThemeAppProperties () returned 0x3
[0164.125] GetThemeAppProperties () returned 0x3
[0164.125] IsAppThemed () returned 0x1
[0164.125] GetThemeAppProperties () returned 0x3
[0164.125] GetThemeAppProperties () returned 0x3
[0164.125] IsAppThemed () returned 0x1
[0164.125] GetThemeAppProperties () returned 0x3
[0164.125] GetThemeAppProperties () returned 0x3
[0164.125] IsAppThemed () returned 0x1
[0164.125] GetThemeAppProperties () returned 0x3
[0164.125] GetThemeAppProperties () returned 0x3
[0164.125] IsThemePartDefined () returned 0x1
[0164.126] IsAppThemed () returned 0x1
[0164.126] GetThemeAppProperties () returned 0x3
[0164.126] GetThemeAppProperties () returned 0x3
[0164.126] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0164.126] IsAppThemed () returned 0x1
[0164.126] GetThemeAppProperties () returned 0x3
[0164.126] GetThemeAppProperties () returned 0x3
[0164.126] IsAppThemed () returned 0x1
[0164.126] GetThemeAppProperties () returned 0x3
[0164.126] GetThemeAppProperties () returned 0x3
[0164.126] IsThemePartDefined () returned 0x1
[0164.126] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0164.126] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0164.126] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0164.126] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0164.126] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53dd14) returned 0x0
[0164.126] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0164.126] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0164.127] LocalFree (hMem=0x89ea88) returned 0x0
[0164.127] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0164.127] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0164.129] LocalFree (hMem=0x89ea88) returned 0x0
[0164.129] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0164.129] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd3c) returned 0x0
[0164.129] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd2c) returned 0x0
[0164.130] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dd2c) returned 0x0
[0164.130] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0164.130] GdipGetDC (graphics=0x5da0378, hdc=0x53dd44) returned 0x0
[0164.130] GetCurrentObject (hdc=0x100107cb, type=0x1) returned 0xb00017
[0164.130] GetCurrentObject (hdc=0x100107cb, type=0x2) returned 0x900010
[0164.130] GetCurrentObject (hdc=0x100107cb, type=0x7) returned 0x1e0507b9
[0164.130] GetCurrentObject (hdc=0x100107cb, type=0x6) returned 0x8a01c2
[0164.130] SaveDC (hdc=0x100107cb) returned 1
[0164.130] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b04053e
[0164.130] GetClipRgn (hdc=0x100107cb, hrgn=0x7b04053e) returned 0
[0164.130] SelectClipRgn (hdc=0x100107cb, hrgn=0xcf0407a1) returned 2
[0164.130] DeleteObject (ho=0x7b04053e) returned 1
[0164.130] DeleteObject (ho=0xcf0407a1) returned 1
[0164.130] OffsetViewportOrgEx (in: hdc=0x100107cb, x=0, y=0, lppt=0x237e564 | out: lppt=0x237e564) returned 1
[0164.130] DrawThemeParentBackground () returned 0x0
[0164.131] GetWindowPlacement (in: hWnd=0x7013e, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0164.131] GetClientRect (in: hWnd=0x7013e, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0164.131] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0164.131] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0164.131] GetSystemMetrics (nIndex=42) returned 0
[0164.131] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0164.131] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0164.131] GetClientRect (in: hWnd=0x7013e, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0164.131] GetCurrentObject (hdc=0x100107cb, type=0x1) returned 0xb00017
[0164.131] GetCurrentObject (hdc=0x100107cb, type=0x2) returned 0x900010
[0164.131] GetCurrentObject (hdc=0x100107cb, type=0x7) returned 0x1e0507b9
[0164.131] GetCurrentObject (hdc=0x100107cb, type=0x6) returned 0x8a01c2
[0164.131] SaveDC (hdc=0x100107cb) returned 2
[0164.132] GetNearestColor (hdc=0x100107cb, color=0xf0f0f0) returned 0xf0f0f0
[0164.132] CreateSolidBrush (color=0xf0f0f0) returned 0x9010078d
[0164.132] FillRect (hDC=0x100107cb, lprc=0x53d760, hbr=0x9010078d) returned 1
[0164.132] DeleteObject (ho=0x9010078d) returned 1
[0164.132] RestoreDC (hdc=0x100107cb, nSavedDC=-1) returned 1
[0164.132] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0164.132] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0164.132] GetSystemMetrics (nIndex=42) returned 0
[0164.132] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0164.132] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0164.132] GetClientRect (in: hWnd=0x7013e, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0164.132] GetCurrentObject (hdc=0x100107cb, type=0x1) returned 0xb00017
[0164.132] GetCurrentObject (hdc=0x100107cb, type=0x2) returned 0x900010
[0164.132] GetCurrentObject (hdc=0x100107cb, type=0x7) returned 0x1e0507b9
[0164.132] GetCurrentObject (hdc=0x100107cb, type=0x6) returned 0x8a01c2
[0164.133] SaveDC (hdc=0x100107cb) returned 2
[0164.133] GetNearestColor (hdc=0x100107cb, color=0xf0f0f0) returned 0xf0f0f0
[0164.133] CreateSolidBrush (color=0xf0f0f0) returned 0x9110078d
[0164.133] FillRect (hDC=0x100107cb, lprc=0x53d700, hbr=0x9110078d) returned 1
[0164.133] DeleteObject (ho=0x9110078d) returned 1
[0164.133] RestoreDC (hdc=0x100107cb, nSavedDC=-1) returned 1
[0164.133] GetWindowTextLengthW (hWnd=0x7013e) returned 10
[0164.133] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0164.133] GetSystemMetrics (nIndex=42) returned 0
[0164.133] GetWindowTextW (in: hWnd=0x7013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0164.133] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0164.133] RestoreDC (hdc=0x100107cb, nSavedDC=-1) returned 1
[0164.133] GdipReleaseDC (graphics=0x5da0378, hdc=0x100107cb) returned 0x0
[0164.134] IsAppThemed () returned 0x1
[0164.134] GetThemeAppProperties () returned 0x3
[0164.134] GetThemeAppProperties () returned 0x3
[0164.134] IsAppThemed () returned 0x1
[0164.134] GetThemeAppProperties () returned 0x3
[0164.134] GetThemeAppProperties () returned 0x3
[0164.134] IsThemePartDefined () returned 0x1
[0164.134] GdipCreateRegion (region=0x53dc80) returned 0x0
[0164.134] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0164.134] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0164.134] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0164.134] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc98) returned 0x0
[0164.134] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0164.134] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0164.134] LocalFree (hMem=0x89ea88) returned 0x0
[0164.134] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0164.134] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0164.134] LocalFree (hMem=0x89eee8) returned 0x0
[0164.135] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0164.135] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcc0) returned 0x0
[0164.135] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcb0) returned 0x0
[0164.135] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dcb0) returned 0x0
[0164.135] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0164.135] GdipGetDC (graphics=0x5da0378, hdc=0x53dcc8) returned 0x0
[0164.135] GetCurrentObject (hdc=0x100107cb, type=0x1) returned 0xb00017
[0164.135] GetCurrentObject (hdc=0x100107cb, type=0x2) returned 0x900010
[0164.135] GetCurrentObject (hdc=0x100107cb, type=0x7) returned 0x1e0507b9
[0164.135] GetCurrentObject (hdc=0x100107cb, type=0x6) returned 0x8a01c2
[0164.135] SaveDC (hdc=0x100107cb) returned 1
[0164.135] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd00407a1
[0164.135] GetClipRgn (hdc=0x100107cb, hrgn=0xd00407a1) returned 0
[0164.135] SelectClipRgn (hdc=0x100107cb, hrgn=0x7d04053e) returned 2
[0164.135] DeleteObject (ho=0xd00407a1) returned 1
[0164.136] DeleteObject (ho=0x7d04053e) returned 1
[0164.136] OffsetViewportOrgEx (in: hdc=0x100107cb, x=0, y=0, lppt=0x237edec | out: lppt=0x237edec) returned 1
[0164.136] IsAppThemed () returned 0x1
[0164.136] GetThemeAppProperties () returned 0x3
[0164.136] GetThemeAppProperties () returned 0x3
[0164.136] DrawThemeBackground () returned 0x0
[0164.136] RestoreDC (hdc=0x100107cb, nSavedDC=-1) returned 1
[0164.136] GdipReleaseDC (graphics=0x5da0378, hdc=0x100107cb) returned 0x0
[0164.136] GdipCreateRegion (region=0x53dc84) returned 0x0
[0164.136] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0164.136] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0164.136] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0164.136] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53dc9c) returned 0x0
[0164.136] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0164.136] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0164.136] LocalFree (hMem=0x89ee08) returned 0x0
[0164.136] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0164.137] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0164.137] LocalFree (hMem=0x89ee08) returned 0x0
[0164.137] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0164.137] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcc4) returned 0x0
[0164.137] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcb4) returned 0x0
[0164.137] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dcb4) returned 0x0
[0164.137] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0164.137] GdipGetDC (graphics=0x5da0378, hdc=0x53dccc) returned 0x0
[0164.137] GetCurrentObject (hdc=0x100107cb, type=0x1) returned 0xb00017
[0164.137] GetCurrentObject (hdc=0x100107cb, type=0x2) returned 0x900010
[0164.137] GetCurrentObject (hdc=0x100107cb, type=0x7) returned 0x1e0507b9
[0164.137] GetCurrentObject (hdc=0x100107cb, type=0x6) returned 0x8a01c2
[0164.137] SaveDC (hdc=0x100107cb) returned 1
[0164.137] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e04053e
[0164.137] GetClipRgn (hdc=0x100107cb, hrgn=0x7e04053e) returned 0
[0164.137] SelectClipRgn (hdc=0x100107cb, hrgn=0xd10407a1) returned 2
[0164.138] DeleteObject (ho=0x7e04053e) returned 1
[0164.138] DeleteObject (ho=0xd10407a1) returned 1
[0164.138] OffsetViewportOrgEx (in: hdc=0x100107cb, x=0, y=0, lppt=0x237f0c0 | out: lppt=0x237f0c0) returned 1
[0164.138] IsAppThemed () returned 0x1
[0164.138] GetThemeAppProperties () returned 0x3
[0164.138] GetThemeAppProperties () returned 0x3
[0164.138] GetThemeBackgroundContentRect () returned 0x0
[0164.138] RestoreDC (hdc=0x100107cb, nSavedDC=-1) returned 1
[0164.138] GdipReleaseDC (graphics=0x5da0378, hdc=0x100107cb) returned 0x0
[0164.138] IsAppThemed () returned 0x1
[0164.138] GetThemeAppProperties () returned 0x3
[0164.138] GetThemeAppProperties () returned 0x3
[0164.138] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53de00) returned 0x0
[0164.138] GdipGetDC (graphics=0x5da0378, hdc=0x53ddec) returned 0x0
[0164.138] GetCurrentObject (hdc=0x100107cb, type=0x1) returned 0xb00017
[0164.138] GetCurrentObject (hdc=0x100107cb, type=0x2) returned 0x900010
[0164.138] GetCurrentObject (hdc=0x100107cb, type=0x7) returned 0x1e0507b9
[0164.139] GetCurrentObject (hdc=0x100107cb, type=0x6) returned 0x8a01c2
[0164.139] SaveDC (hdc=0x100107cb) returned 1
[0164.139] GetTextAlign (hdc=0x100107cb) returned 0x0
[0164.139] GetTextColor (hdc=0x100107cb) returned 0x0
[0164.139] GetCurrentObject (hdc=0x100107cb, type=0x6) returned 0x8a01c2
[0164.139] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0164.139] SelectObject (hdc=0x100107cb, h=0x730a066d) returned 0x8a01c2
[0164.139] GetBkMode (hdc=0x100107cb) returned 2
[0164.139] SetBkMode (hdc=0x100107cb, mode=1) returned 2
[0164.139] DrawTextExW (in: hdc=0x100107cb, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x237f460 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0164.140] DrawTextExW (in: hdc=0x100107cb, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x237f460 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0164.140] RestoreDC (hdc=0x100107cb, nSavedDC=-1) returned 1
[0164.140] GdipReleaseDC (graphics=0x5da0378, hdc=0x100107cb) returned 0x0
[0164.140] GetFocus () returned 0x302c8
[0164.140] IsAppThemed () returned 0x1
[0164.140] GetThemeAppProperties () returned 0x3
[0164.140] GetThemeAppProperties () returned 0x3
[0164.140] GdipGetDC (graphics=0x5da0378, hdc=0x53dfd8) returned 0x0
[0164.140] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x100107cb, x1=0, y1=0, rop=0xcc0020) returned 1
[0164.141] GdipReleaseDC (graphics=0x5da0378, hdc=0x100107cb) returned 0x0
[0164.141] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0164.141] SelectObject (hdc=0x100107cb, h=0x85000f) returned 0x1e0507b9
[0164.141] DeleteDC (hdc=0x100107cb) returned 1
[0164.141] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0164.141] EndPaint (hWnd=0x302c8, lpPaint=0x53df7c) returned 1
[0164.141] MapWindowPoints (in: hWndFrom=0x302c8, hWndTo=0x0, lpPoints=0x237f55c, cPoints=0x1 | out: lpPoints=0x237f55c) returned 25756481
[0164.141] WindowFromPoint (Point=0x354)
[0164.141] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x84, wParam=0x0, lParam=0x1920354) returned 0x1
[0164.142] NotifyWinEvent (event=0x800a, hwnd=0x302c8, idObject=-4, idChild=0)
[0164.142] NotifyWinEvent (event=0x800c, hwnd=0x302c8, idObject=-4, idChild=0)
[0164.157] GetWindowTextLengthW (hWnd=0x302d8)
[0164.157] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0164.157] GetSystemMetrics (nIndex=42) returned 0
[0164.157] GetWindowTextW (hWnd=0x302d8, lpString=0x53e3e4, nMaxCount=1)
[0164.157] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0164.157] SendMessageW (hWnd=0x7013e, Msg=0x10, wParam=0x0, lParam=0x0)
[0164.158] GetCapture () returned 0x302c8
[0164.158] ReleaseCapture ()
[0164.158] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0164.162] PeekMessageW (lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0)
[0164.162] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x84, wParam=0x0, lParam=0x1920354) returned 0x1
[0164.162] IsWindow (hWnd=0x70036) returned 1
[0164.162] EnableWindow (hWnd=0x70036, bEnable=1)
[0164.163] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0164.163] IsWindow (hWnd=0x70036) returned 1
[0164.163] SetActiveWindow (hWnd=0x70036)
[0164.164] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x86, wParam=0x0, lParam=0x70036)
[0164.166] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0164.166] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0164.167] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0164.170] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0164.170] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0164.170] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0164.170] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x7013e) returned 0x1
[0164.173] GetFocus () returned 0x302c8
[0164.173] SetFocus (hWnd=0x202c6)
[0164.180] GetFocus () returned 0x202c6
[0164.181] IsChild (hWndParent=0x7013e, hWnd=0x202c6) returned 0
[0164.181] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0164.181] GetCapture () returned 0x0
[0164.181] InvalidateRect (hWnd=0x302c8, lpRect=0x0, bErase=0) returned 1
[0164.182] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0164.183] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f)
[0164.184] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0164.184] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0164.185] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0164.186] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x302c8, lParam=0x0)
[0164.186] GetStockObject (i=5) returned 0x900015
[0164.186] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0164.186] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0164.186] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0164.191] IsWindowVisible (hWnd=0x70036) returned 1
[0164.191] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0164.191] GetFocus () returned 0x202c6
[0164.191] IsChild (hWndParent=0x7013e, hWnd=0x202c6) returned 0
[0164.192] ShowWindow (hWnd=0x7013e, nCmdShow=0)
[0164.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0164.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0164.195] GetWindowPlacement (in: hWnd=0x7013e, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0164.195] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0164.195] GetClientRect (in: hWnd=0x7013e, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0164.195] GetWindowRect (in: hWnd=0x7013e, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0164.196] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0164.196] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0164.196] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0164.199] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0164.200] GetWindowTextLengthW (hWnd=0x7013e)
[0164.200] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0164.200] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0164.201] SendMessageW (hWnd=0x302d8, Msg=0xb8, wParam=0x0, lParam=0x0)
[0164.201] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0164.201] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0164.201] GetWindowThreadProcessId (in: hWnd=0x402d6, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0164.201] GetWindow (hWnd=0x402d6, uCmd=0x5) returned 0x0
[0164.201] GetWindowLongW (hWnd=0x402d6, nIndex=-20) returned 65792
[0164.201] DestroyWindow (hWnd=0x402d6)
[0164.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x402d6, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0164.201] GetWindowTextLengthW (hWnd=0x402d6)
[0164.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x402d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0164.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x402d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0164.202] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x402d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0164.203] GetWindowTextLengthW (hWnd=0x402d2)
[0164.203] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0164.203] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0164.203] InvalidateRect (hWnd=0x302c8, lpRect=0x0, bErase=0) returned 1
[0164.204] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0164.204] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0164.204] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x302d8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0164.217] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x402d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0164.218] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0164.219] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302da, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0164.221] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x7013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0164.223] GetProcessWindowStation () returned 0x13c
[0164.223] GetActiveWindow () returned 0x70036
[0164.224] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0164.224] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0164.224] GetCurrentThreadId () returned 0x11d0
[0164.224] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf44ae, lParam=0x0) returned 1
[0164.224] IsWindowVisible (hWnd=0x70036) returned 1
[0164.224] IsWindowEnabled (hWnd=0x70036) returned 1
[0164.224] IsWindowVisible (hWnd=0x602b6) returned 0
[0164.224] IsWindowVisible (hWnd=0x901f8) returned 0
[0164.224] IsWindowVisible (hWnd=0x202d0) returned 0
[0164.224] IsWindowVisible (hWnd=0x202d4) returned 0
[0164.224] GetActiveWindow () returned 0x70036
[0164.225] GetFocus () returned 0x202c6
[0164.225] IsWindow (hWnd=0x70036) returned 1
[0164.225] EnableWindow (hWnd=0x70036, bEnable=0)
[0164.225] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0164.225] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0164.225] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0164.227] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0164.241] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x8013e) returned 0x1
[0164.244] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0164.244] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0164.246] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x402da, lParam=0x0) returned 0x0
[0164.247] GetCapture () returned 0x0
[0164.247] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0164.248] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0164.250] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0164.250] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0164.263] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x60100ce
[0164.263] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0164.263] CreateCompatibleDC (hdc=0x60100ce) returned 0x430107c1
[0164.263] SelectObject (hdc=0x430107c1, h=0x1e0507b9) returned 0x85000f
[0164.263] GdipCreateFromHDC (hdc=0x430107c1, graphics=0x53e108) returned 0x0
[0164.264] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0164.264] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0164.264] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0164.264] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0164.264] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e168) returned 0x0
[0164.264] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0164.264] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0164.264] LocalFree (hMem=0x89eee8) returned 0x0
[0164.264] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0164.264] GdipCreateRegion (region=0x53e150) returned 0x0
[0164.264] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0164.264] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e15c) returned 0x0
[0164.264] GdipSaveGraphics (graphics=0x5da0378, state=0x53e188) returned 0x0
[0164.264] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd7d0dbd) returned 0x0
[0164.264] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0164.264] GdipGetDC (graphics=0x5da0378, hdc=0x53df74) returned 0x0
[0164.264] GetCurrentObject (hdc=0x430107c1, type=0x1) returned 0xb00017
[0164.264] GetCurrentObject (hdc=0x430107c1, type=0x2) returned 0x900010
[0164.265] GetCurrentObject (hdc=0x430107c1, type=0x7) returned 0x1e0507b9
[0164.265] GetCurrentObject (hdc=0x430107c1, type=0x6) returned 0x8a01c2
[0164.265] SaveDC (hdc=0x430107c1) returned 1
[0164.265] GetNearestColor (hdc=0x430107c1, color=0xff) returned 0xff
[0164.265] GetNearestColor (hdc=0x430107c1, color=0x55) returned 0x55
[0164.265] GetNearestColor (hdc=0x430107c1, color=0x0) returned 0x0
[0164.265] GetNearestColor (hdc=0x430107c1, color=0x55) returned 0x55
[0164.265] GetNearestColor (hdc=0x430107c1, color=0x0) returned 0x0
[0164.265] GetNearestColor (hdc=0x430107c1, color=0x8080ff) returned 0x8080ff
[0164.265] GetNearestColor (hdc=0x430107c1, color=0x7373e5) returned 0x7373e5
[0164.265] GetNearestColor (hdc=0x430107c1, color=0xe5) returned 0xe5
[0164.265] GetNearestColor (hdc=0x430107c1, color=0x0) returned 0x0
[0164.265] RestoreDC (hdc=0x430107c1, nSavedDC=-1) returned 1
[0164.265] GdipReleaseDC (graphics=0x5da0378, hdc=0x430107c1) returned 0x0
[0164.265] IsAppThemed () returned 0x1
[0164.265] GetThemeAppProperties () returned 0x3
[0164.265] GetThemeAppProperties () returned 0x3
[0164.266] IsAppThemed () returned 0x1
[0164.266] GetThemeAppProperties () returned 0x3
[0164.266] GetThemeAppProperties () returned 0x3
[0164.266] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0164.266] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2380854 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0164.266] IsAppThemed () returned 0x1
[0164.266] GetThemeAppProperties () returned 0x3
[0164.266] GetThemeAppProperties () returned 0x3
[0164.266] IsAppThemed () returned 0x1
[0164.266] GetThemeAppProperties () returned 0x3
[0164.266] GetThemeAppProperties () returned 0x3
[0164.266] GetFocus () returned 0x402da
[0164.266] IsAppThemed () returned 0x1
[0164.267] GetThemeAppProperties () returned 0x3
[0164.267] GetThemeAppProperties () returned 0x3
[0164.267] IsAppThemed () returned 0x1
[0164.267] GetThemeAppProperties () returned 0x3
[0164.267] GetThemeAppProperties () returned 0x3
[0164.267] IsThemePartDefined () returned 0x1
[0164.267] IsAppThemed () returned 0x1
[0164.267] GetThemeAppProperties () returned 0x3
[0164.267] GetThemeAppProperties () returned 0x3
[0164.267] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0164.267] IsAppThemed () returned 0x1
[0164.267] GetThemeAppProperties () returned 0x3
[0164.267] GetThemeAppProperties () returned 0x3
[0164.267] IsAppThemed () returned 0x1
[0164.267] GetThemeAppProperties () returned 0x3
[0164.267] GetThemeAppProperties () returned 0x3
[0164.267] IsThemePartDefined () returned 0x1
[0164.267] GdipCreateRegion (region=0x53de78) returned 0x0
[0164.267] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0164.267] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0164.267] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0164.267] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53de90) returned 0x0
[0164.267] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0164.267] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eee8) returned 0x0
[0164.267] LocalFree (hMem=0x89eee8) returned 0x0
[0164.267] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0164.267] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0164.268] LocalFree (hMem=0x89ee08) returned 0x0
[0164.268] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0164.268] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53deb8) returned 0x0
[0164.268] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dea8) returned 0x0
[0164.268] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dea8) returned 0x0
[0164.268] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0164.268] GdipGetDC (graphics=0x5da0378, hdc=0x53dec0) returned 0x0
[0164.268] GetCurrentObject (hdc=0x430107c1, type=0x1) returned 0xb00017
[0164.268] GetCurrentObject (hdc=0x430107c1, type=0x2) returned 0x900010
[0164.268] GetCurrentObject (hdc=0x430107c1, type=0x7) returned 0x1e0507b9
[0164.268] GetCurrentObject (hdc=0x430107c1, type=0x6) returned 0x8a01c2
[0164.268] SaveDC (hdc=0x430107c1) returned 1
[0164.268] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd20407a1
[0164.268] GetClipRgn (hdc=0x430107c1, hrgn=0xd20407a1) returned 0
[0164.275] SelectClipRgn (hdc=0x430107c1, hrgn=0x8404053e) returned 2
[0164.275] DeleteObject (ho=0xd20407a1) returned 1
[0164.275] DeleteObject (ho=0x8404053e) returned 1
[0164.275] OffsetViewportOrgEx (in: hdc=0x430107c1, x=0, y=0, lppt=0x2384dc4 | out: lppt=0x2384dc4) returned 1
[0164.275] DrawThemeParentBackground () returned 0x0
[0164.276] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0164.276] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0164.276] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0164.276] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0164.276] GetSystemMetrics (nIndex=42) returned 0
[0164.276] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0164.276] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0164.276] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0164.276] GetCurrentObject (hdc=0x430107c1, type=0x1) returned 0xb00017
[0164.276] GetCurrentObject (hdc=0x430107c1, type=0x2) returned 0x900010
[0164.276] GetCurrentObject (hdc=0x430107c1, type=0x7) returned 0x1e0507b9
[0164.276] GetCurrentObject (hdc=0x430107c1, type=0x6) returned 0x8a01c2
[0164.276] SaveDC (hdc=0x430107c1) returned 2
[0164.276] GetNearestColor (hdc=0x430107c1, color=0xff) returned 0xff
[0164.277] CreateSolidBrush (color=0xff) returned 0x9210078d
[0164.277] FillRect (hDC=0x430107c1, lprc=0x53d8d8, hbr=0x9210078d) returned 1
[0164.277] DeleteObject (ho=0x9210078d) returned 1
[0164.277] RestoreDC (hdc=0x430107c1, nSavedDC=-1) returned 1
[0164.277] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0164.277] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0164.277] GetSystemMetrics (nIndex=42) returned 0
[0164.277] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0164.277] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0164.277] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0164.277] GetCurrentObject (hdc=0x430107c1, type=0x1) returned 0xb00017
[0164.277] GetCurrentObject (hdc=0x430107c1, type=0x2) returned 0x900010
[0164.277] GetCurrentObject (hdc=0x430107c1, type=0x7) returned 0x1e0507b9
[0164.277] GetCurrentObject (hdc=0x430107c1, type=0x6) returned 0x8a01c2
[0164.277] SaveDC (hdc=0x430107c1) returned 2
[0164.277] GetNearestColor (hdc=0x430107c1, color=0xff) returned 0xff
[0164.277] CreateSolidBrush (color=0xff) returned 0x9310078d
[0164.277] FillRect (hDC=0x430107c1, lprc=0x53d878, hbr=0x9310078d) returned 1
[0164.277] DeleteObject (ho=0x9310078d) returned 1
[0164.278] RestoreDC (hdc=0x430107c1, nSavedDC=-1) returned 1
[0164.278] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0164.278] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0164.278] GetSystemMetrics (nIndex=42) returned 0
[0164.278] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0164.278] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0164.278] RestoreDC (hdc=0x430107c1, nSavedDC=-1) returned 1
[0164.278] GdipReleaseDC (graphics=0x5da0378, hdc=0x430107c1) returned 0x0
[0164.278] IsAppThemed () returned 0x1
[0164.278] GetThemeAppProperties () returned 0x3
[0164.278] GetThemeAppProperties () returned 0x3
[0164.278] IsAppThemed () returned 0x1
[0164.279] GetThemeAppProperties () returned 0x3
[0164.279] GetThemeAppProperties () returned 0x3
[0164.279] IsThemePartDefined () returned 0x1
[0164.279] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0164.279] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0164.279] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0164.279] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0164.279] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de14) returned 0x0
[0164.279] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0164.279] LocalFree (hMem=0x89ee08) returned 0x0
[0164.279] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0164.279] LocalFree (hMem=0x89ee08) returned 0x0
[0164.279] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0164.280] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de3c) returned 0x0
[0164.280] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de2c) returned 0x0
[0164.280] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53de2c) returned 0x0
[0164.280] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0164.280] GdipGetDC (graphics=0x5da0378, hdc=0x53de44) returned 0x0
[0164.280] GetCurrentObject (hdc=0x430107c1, type=0x1) returned 0xb00017
[0164.280] GetCurrentObject (hdc=0x430107c1, type=0x2) returned 0x900010
[0164.280] GetCurrentObject (hdc=0x430107c1, type=0x7) returned 0x1e0507b9
[0164.280] GetCurrentObject (hdc=0x430107c1, type=0x6) returned 0x8a01c2
[0164.280] SaveDC (hdc=0x430107c1) returned 1
[0164.280] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8504053e
[0164.280] GetClipRgn (hdc=0x430107c1, hrgn=0x8504053e) returned 0
[0164.280] SelectClipRgn (hdc=0x430107c1, hrgn=0xd40407a1) returned 2
[0164.280] DeleteObject (ho=0x8504053e) returned 1
[0164.280] DeleteObject (ho=0xd40407a1) returned 1
[0164.280] OffsetViewportOrgEx (in: hdc=0x430107c1, x=0, y=0, lppt=0x2385628 | out: lppt=0x2385628) returned 1
[0164.280] IsAppThemed () returned 0x1
[0164.280] GetThemeAppProperties () returned 0x3
[0164.280] GetThemeAppProperties () returned 0x3
[0164.280] DrawThemeBackground () returned 0x0
[0164.280] RestoreDC (hdc=0x430107c1, nSavedDC=-1) returned 1
[0164.281] GdipReleaseDC (graphics=0x5da0378, hdc=0x430107c1) returned 0x0
[0164.281] GdipCreateRegion (region=0x53de00) returned 0x0
[0164.281] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0164.281] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0164.281] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0164.281] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53de18) returned 0x0
[0164.281] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0164.281] LocalFree (hMem=0x89ea88) returned 0x0
[0164.281] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0164.281] LocalFree (hMem=0x89ee08) returned 0x0
[0164.281] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0164.281] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de40) returned 0x0
[0164.281] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de30) returned 0x0
[0164.281] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53de30) returned 0x0
[0164.281] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0164.281] GdipGetDC (graphics=0x5da0378, hdc=0x53de48) returned 0x0
[0164.281] GetCurrentObject (hdc=0x430107c1, type=0x1) returned 0xb00017
[0164.281] GetCurrentObject (hdc=0x430107c1, type=0x2) returned 0x900010
[0164.281] GetCurrentObject (hdc=0x430107c1, type=0x7) returned 0x1e0507b9
[0164.281] GetCurrentObject (hdc=0x430107c1, type=0x6) returned 0x8a01c2
[0164.281] SaveDC (hdc=0x430107c1) returned 1
[0164.281] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd50407a1
[0164.281] GetClipRgn (hdc=0x430107c1, hrgn=0xd50407a1) returned 0
[0164.281] SelectClipRgn (hdc=0x430107c1, hrgn=0x8604053e) returned 2
[0164.282] DeleteObject (ho=0xd50407a1) returned 1
[0164.282] DeleteObject (ho=0x8604053e) returned 1
[0164.282] OffsetViewportOrgEx (in: hdc=0x430107c1, x=0, y=0, lppt=0x23858fc | out: lppt=0x23858fc) returned 1
[0164.282] IsAppThemed () returned 0x1
[0164.282] GetThemeAppProperties () returned 0x3
[0164.282] GetThemeAppProperties () returned 0x3
[0164.282] GetThemeBackgroundContentRect () returned 0x0
[0164.282] RestoreDC (hdc=0x430107c1, nSavedDC=-1) returned 1
[0164.282] GdipReleaseDC (graphics=0x5da0378, hdc=0x430107c1) returned 0x0
[0164.282] IsAppThemed () returned 0x1
[0164.282] GetThemeAppProperties () returned 0x3
[0164.282] GetThemeAppProperties () returned 0x3
[0164.282] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53df7c) returned 0x0
[0164.282] GdipGetDC (graphics=0x5da0378, hdc=0x53df68) returned 0x0
[0164.282] GetCurrentObject (hdc=0x430107c1, type=0x1) returned 0xb00017
[0164.282] GetCurrentObject (hdc=0x430107c1, type=0x2) returned 0x900010
[0164.282] GetCurrentObject (hdc=0x430107c1, type=0x7) returned 0x1e0507b9
[0164.282] GetCurrentObject (hdc=0x430107c1, type=0x6) returned 0x8a01c2
[0164.282] SaveDC (hdc=0x430107c1) returned 1
[0164.282] GetTextAlign (hdc=0x430107c1) returned 0x0
[0164.282] GetTextColor (hdc=0x430107c1) returned 0x0
[0164.282] GetCurrentObject (hdc=0x430107c1, type=0x6) returned 0x8a01c2
[0164.283] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0164.283] SelectObject (hdc=0x430107c1, h=0x450a0799) returned 0x8a01c2
[0164.283] GetBkMode (hdc=0x430107c1) returned 2
[0164.283] SetBkMode (hdc=0x430107c1, mode=1) returned 2
[0164.283] DrawTextExW (in: hdc=0x430107c1, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2385c9c | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0164.315] DrawTextExW (in: hdc=0x430107c1, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2385c9c | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0164.315] RestoreDC (hdc=0x430107c1, nSavedDC=-1) returned 1
[0164.315] GdipReleaseDC (graphics=0x5da0378, hdc=0x430107c1) returned 0x0
[0164.315] GetFocus () returned 0x402da
[0164.316] IsAppThemed () returned 0x1
[0164.316] GetThemeAppProperties () returned 0x3
[0164.316] GetThemeAppProperties () returned 0x3
[0164.316] GdipGetDC (graphics=0x5da0378, hdc=0x53e148) returned 0x0
[0164.316] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x430107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0164.316] GdipReleaseDC (graphics=0x5da0378, hdc=0x430107c1) returned 0x0
[0164.316] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0164.316] SelectObject (hdc=0x430107c1, h=0x85000f) returned 0x1e0507b9
[0164.316] DeleteDC (hdc=0x430107c1) returned 1
[0164.316] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0164.316] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0166.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x20, wParam=0x70036, lParam=0x200fffe) returned 0x0
[0167.725] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e57c) returned 0x0
[0167.725] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e57c) returned 0x0
[0167.729] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e2a8 | out: lpwndpl=0x53e2a8) returned 1
[0167.729] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x47, wParam=0x0, lParam=0x53e57c) returned 0x0
[0167.729] GetClientRect (in: hWnd=0x70036, lpRect=0x53e258 | out: lpRect=0x53e258) returned 1
[0167.729] GetWindowRect (in: hWnd=0x70036, lpRect=0x53e258 | out: lpRect=0x53e258) returned 1
[0167.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x47, wParam=0x0, lParam=0x53e57c) returned 0x0
[0167.747] NtdllDefWindowProc_W (hWnd=0x901f8, Msg=0x1c, wParam=0x0, lParam=0x1060) returned 0x0
[0167.747] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1c, wParam=0x0, lParam=0x1060) returned 0x0
[0167.747] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x1c, wParam=0x0, lParam=0x1060) returned 0x0
[0167.748] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x20, wParam=0x70036, lParam=0x200fffe) returned 0x0
[0169.538] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e57c) returned 0x0
[0169.538] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e57c) returned 0x0
[0169.544] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e2a8 | out: lpwndpl=0x53e2a8) returned 1
[0169.544] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x47, wParam=0x0, lParam=0x53e57c) returned 0x0
[0169.544] GetClientRect (in: hWnd=0x70036, lpRect=0x53e258 | out: lpRect=0x53e258) returned 1
[0169.544] GetWindowRect (in: hWnd=0x70036, lpRect=0x53e258 | out: lpRect=0x53e258) returned 1
[0169.545] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x47, wParam=0x0, lParam=0x53e57c) returned 0x0
[0169.546] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1c, wParam=0x1, lParam=0x1060) returned 0x0
[0169.546] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x1c, wParam=0x1, lParam=0x1060) returned 0x0
[0169.546] NtdllDefWindowProc_W (hWnd=0x901f8, Msg=0x1c, wParam=0x1, lParam=0x1060) returned 0x0
[0169.568] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x20, wParam=0x70036, lParam=0x200fffe) returned 0x0
[0169.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x20, wParam=0x70036, lParam=0x200fffe) returned 0x0
[0169.874] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0169.874] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0169.874] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x8013e) returned 0x1
[0169.891] GetFocus () returned 0x8013e
[0169.891] GetAncestor (hwnd=0x8013e, gaFlags=0x1) returned 0x10010
[0169.891] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0169.891] SetFocus (hWnd=0x202c6) returned 0x0
[0169.895] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0169.897] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0169.897] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0169.898] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0169.898] GetFocus () returned 0x70036
[0169.898] SetFocus (hWnd=0x202c6) returned 0x0
[0169.905] IsWindow (hWnd=0x70036) returned 1
[0169.905] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0169.906] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0169.906] IsWindow (hWnd=0x70036) returned 1
[0169.907] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0169.907] IsWindow (hWnd=0x202c6) returned 1
[0169.907] SetFocus (hWnd=0x202c6) returned 0x70036
[0169.907] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0169.908] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0169.920] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0169.922] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0169.922] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0169.922] GetStockObject (i=5) returned 0x900015
[0169.922] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0169.922] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8db6a8) returned 0x7
[0169.922] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0169.923] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0169.923] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0169.923] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0169.925] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0169.925] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0169.925] GetFocus () returned 0x202c6
[0169.927] GetCapture () returned 0x0
[0169.927] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0169.928] IsWindowUnicode (hWnd=0x202c6) returned 1
[0169.928] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0169.928] TranslateMessage (lpMsg=0x53eef8) returned 0
[0169.928] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0169.928] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0169.929] IsWindowUnicode (hWnd=0x202c6) returned 1
[0169.929] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0169.930] TranslateMessage (lpMsg=0x53eef8) returned 0
[0169.930] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0169.930] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0169.930] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0169.930] CreateCompatibleDC (hdc=0xf0105ee) returned 0x920107b1
[0169.931] SelectObject (hdc=0x920107b1, h=0x1e0507b9) returned 0x85000f
[0169.931] GdipCreateFromHDC (hdc=0x920107b1, graphics=0x53e958) returned 0x0
[0169.932] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0169.932] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0169.932] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0169.932] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0169.932] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e9b8) returned 0x0
[0169.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0169.933] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0169.933] LocalFree (hMem=0x89ec80) returned 0x0
[0169.933] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0169.933] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0169.933] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0169.933] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e9ac) returned 0x0
[0169.933] GdipSaveGraphics (graphics=0x5da0378, state=0x53e9d8) returned 0x0
[0169.934] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd7b0dbd) returned 0x0
[0169.934] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0169.934] GdipGetDC (graphics=0x5da0378, hdc=0x53e7c4) returned 0x0
[0169.934] GetCurrentObject (hdc=0x920107b1, type=0x1) returned 0xb00017
[0169.934] GetCurrentObject (hdc=0x920107b1, type=0x2) returned 0x900010
[0169.935] GetCurrentObject (hdc=0x920107b1, type=0x7) returned 0x1e0507b9
[0169.935] GetCurrentObject (hdc=0x920107b1, type=0x6) returned 0x8a01c2
[0169.935] SaveDC (hdc=0x920107b1) returned 1
[0169.935] GetNearestColor (hdc=0x920107b1, color=0xff) returned 0xff
[0169.935] GetNearestColor (hdc=0x920107b1, color=0x55) returned 0x55
[0169.935] GetNearestColor (hdc=0x920107b1, color=0x0) returned 0x0
[0169.935] GetNearestColor (hdc=0x920107b1, color=0x55) returned 0x55
[0169.935] GetNearestColor (hdc=0x920107b1, color=0x0) returned 0x0
[0169.936] GetNearestColor (hdc=0x920107b1, color=0x8080ff) returned 0x8080ff
[0169.936] GetNearestColor (hdc=0x920107b1, color=0x7373e5) returned 0x7373e5
[0169.936] GetNearestColor (hdc=0x920107b1, color=0xe5) returned 0xe5
[0169.936] GetNearestColor (hdc=0x920107b1, color=0x0) returned 0x0
[0169.936] RestoreDC (hdc=0x920107b1, nSavedDC=-1) returned 1
[0169.936] GdipReleaseDC (graphics=0x5da0378, hdc=0x920107b1) returned 0x0
[0169.936] IsAppThemed () returned 0x1
[0169.936] GetThemeAppProperties () returned 0x3
[0169.936] GetThemeAppProperties () returned 0x3
[0169.937] IsAppThemed () returned 0x1
[0169.937] GetThemeAppProperties () returned 0x3
[0169.937] GetThemeAppProperties () returned 0x3
[0169.937] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x23864f8 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0169.938] IsAppThemed () returned 0x1
[0169.938] GetThemeAppProperties () returned 0x3
[0169.938] GetThemeAppProperties () returned 0x3
[0169.938] IsAppThemed () returned 0x1
[0169.938] GetThemeAppProperties () returned 0x3
[0169.938] GetThemeAppProperties () returned 0x3
[0169.938] GetFocus () returned 0x202c6
[0169.938] IsAppThemed () returned 0x1
[0169.938] GetThemeAppProperties () returned 0x3
[0169.938] GetThemeAppProperties () returned 0x3
[0169.938] IsAppThemed () returned 0x1
[0169.938] GetThemeAppProperties () returned 0x3
[0169.938] GetThemeAppProperties () returned 0x3
[0169.938] IsThemePartDefined () returned 0x1
[0169.939] IsAppThemed () returned 0x1
[0169.939] GetThemeAppProperties () returned 0x3
[0169.939] GetThemeAppProperties () returned 0x3
[0169.939] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0169.939] IsAppThemed () returned 0x1
[0169.939] GetThemeAppProperties () returned 0x3
[0169.939] GetThemeAppProperties () returned 0x3
[0169.939] IsAppThemed () returned 0x1
[0169.939] GetThemeAppProperties () returned 0x3
[0169.939] GetThemeAppProperties () returned 0x3
[0169.939] IsThemePartDefined () returned 0x1
[0169.939] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0169.939] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0169.940] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0169.940] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0169.940] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e6e0) returned 0x0
[0169.940] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0169.940] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0169.940] LocalFree (hMem=0x89ea88) returned 0x0
[0169.940] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0169.940] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0169.940] LocalFree (hMem=0x89ea88) returned 0x0
[0169.940] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0169.944] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e708) returned 0x0
[0169.944] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6f8) returned 0x0
[0169.944] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e6f8) returned 0x0
[0169.944] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0169.944] GdipGetDC (graphics=0x5da0378, hdc=0x53e710) returned 0x0
[0169.945] GetCurrentObject (hdc=0x920107b1, type=0x1) returned 0xb00017
[0169.945] GetCurrentObject (hdc=0x920107b1, type=0x2) returned 0x900010
[0169.945] GetCurrentObject (hdc=0x920107b1, type=0x7) returned 0x1e0507b9
[0169.945] GetCurrentObject (hdc=0x920107b1, type=0x6) returned 0x8a01c2
[0169.945] SaveDC (hdc=0x920107b1) returned 1
[0169.945] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe20407a1
[0169.945] GetClipRgn (hdc=0x920107b1, hrgn=0xe20407a1) returned 0
[0169.945] SelectClipRgn (hdc=0x920107b1, hrgn=0xaf040798) returned 2
[0169.945] DeleteObject (ho=0xe20407a1) returned 1
[0169.945] DeleteObject (ho=0xaf040798) returned 1
[0169.945] OffsetViewportOrgEx (in: hdc=0x920107b1, x=0, y=0, lppt=0x2386ba8 | out: lppt=0x2386ba8) returned 1
[0169.945] DrawThemeParentBackground () returned 0x0
[0169.946] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0169.946] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0169.946] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0169.946] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0169.946] GetSystemMetrics (nIndex=42) returned 0
[0169.946] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0169.946] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0169.946] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0169.946] GetCurrentObject (hdc=0x920107b1, type=0x1) returned 0xb00017
[0169.946] GetCurrentObject (hdc=0x920107b1, type=0x2) returned 0x900010
[0169.947] GetCurrentObject (hdc=0x920107b1, type=0x7) returned 0x1e0507b9
[0169.947] GetCurrentObject (hdc=0x920107b1, type=0x6) returned 0x8a01c2
[0169.947] SaveDC (hdc=0x920107b1) returned 2
[0169.947] GetNearestColor (hdc=0x920107b1, color=0xff) returned 0xff
[0169.947] CreateSolidBrush (color=0xff) returned 0x9510078d
[0169.947] FillRect (hDC=0x920107b1, lprc=0x53e128, hbr=0x9510078d) returned 1
[0169.947] DeleteObject (ho=0x9510078d) returned 1
[0169.947] RestoreDC (hdc=0x920107b1, nSavedDC=-1) returned 1
[0169.948] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0169.948] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0169.948] GetSystemMetrics (nIndex=42) returned 0
[0169.948] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0169.948] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0169.948] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0169.948] GetCurrentObject (hdc=0x920107b1, type=0x1) returned 0xb00017
[0169.948] GetCurrentObject (hdc=0x920107b1, type=0x2) returned 0x900010
[0169.948] GetCurrentObject (hdc=0x920107b1, type=0x7) returned 0x1e0507b9
[0169.948] GetCurrentObject (hdc=0x920107b1, type=0x6) returned 0x8a01c2
[0169.948] SaveDC (hdc=0x920107b1) returned 2
[0169.948] GetNearestColor (hdc=0x920107b1, color=0xff) returned 0xff
[0169.949] CreateSolidBrush (color=0xff) returned 0x9610078d
[0169.949] FillRect (hDC=0x920107b1, lprc=0x53e0c8, hbr=0x9610078d) returned 1
[0169.949] DeleteObject (ho=0x9610078d) returned 1
[0169.949] RestoreDC (hdc=0x920107b1, nSavedDC=-1) returned 1
[0169.949] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0169.949] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0169.949] GetSystemMetrics (nIndex=42) returned 0
[0169.949] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0169.949] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0169.949] RestoreDC (hdc=0x920107b1, nSavedDC=-1) returned 1
[0169.950] GdipReleaseDC (graphics=0x5da0378, hdc=0x920107b1) returned 0x0
[0169.950] IsAppThemed () returned 0x1
[0169.950] GetThemeAppProperties () returned 0x3
[0169.950] GetThemeAppProperties () returned 0x3
[0169.950] IsAppThemed () returned 0x1
[0169.950] GetThemeAppProperties () returned 0x3
[0169.950] GetThemeAppProperties () returned 0x3
[0169.950] IsThemePartDefined () returned 0x1
[0169.950] GdipCreateRegion (region=0x53e64c) returned 0x0
[0169.950] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0169.950] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0169.950] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0169.950] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e664) returned 0x0
[0169.950] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0169.951] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0169.951] LocalFree (hMem=0x89ea88) returned 0x0
[0169.951] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0169.951] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0169.951] LocalFree (hMem=0x89ec80) returned 0x0
[0169.951] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0169.951] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e68c) returned 0x0
[0169.951] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e67c) returned 0x0
[0169.951] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e67c) returned 0x0
[0169.951] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0169.951] GdipGetDC (graphics=0x5da0378, hdc=0x53e694) returned 0x0
[0169.951] GetCurrentObject (hdc=0x920107b1, type=0x1) returned 0xb00017
[0169.952] GetCurrentObject (hdc=0x920107b1, type=0x2) returned 0x900010
[0169.952] GetCurrentObject (hdc=0x920107b1, type=0x7) returned 0x1e0507b9
[0169.952] GetCurrentObject (hdc=0x920107b1, type=0x6) returned 0x8a01c2
[0169.952] SaveDC (hdc=0x920107b1) returned 1
[0169.952] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb0040798
[0169.952] GetClipRgn (hdc=0x920107b1, hrgn=0xb0040798) returned 0
[0169.952] SelectClipRgn (hdc=0x920107b1, hrgn=0xe40407a1) returned 2
[0169.952] DeleteObject (ho=0xb0040798) returned 1
[0169.952] DeleteObject (ho=0xe40407a1) returned 1
[0169.952] OffsetViewportOrgEx (in: hdc=0x920107b1, x=0, y=0, lppt=0x238740c | out: lppt=0x238740c) returned 1
[0169.953] IsAppThemed () returned 0x1
[0169.953] GetThemeAppProperties () returned 0x3
[0169.953] GetThemeAppProperties () returned 0x3
[0169.953] DrawThemeBackground () returned 0x0
[0169.953] RestoreDC (hdc=0x920107b1, nSavedDC=-1) returned 1
[0169.953] GdipReleaseDC (graphics=0x5da0378, hdc=0x920107b1) returned 0x0
[0169.953] GdipCreateRegion (region=0x53e650) returned 0x0
[0169.953] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0169.953] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0169.953] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0169.954] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e668) returned 0x0
[0169.954] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0169.954] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0169.954] LocalFree (hMem=0x89ec80) returned 0x0
[0169.954] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0169.954] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0169.954] LocalFree (hMem=0x89ea88) returned 0x0
[0169.954] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0169.954] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e690) returned 0x0
[0169.954] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e680) returned 0x0
[0169.954] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e680) returned 0x0
[0169.955] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0169.955] GdipGetDC (graphics=0x5da0378, hdc=0x53e698) returned 0x0
[0169.955] GetCurrentObject (hdc=0x920107b1, type=0x1) returned 0xb00017
[0169.955] GetCurrentObject (hdc=0x920107b1, type=0x2) returned 0x900010
[0169.955] GetCurrentObject (hdc=0x920107b1, type=0x7) returned 0x1e0507b9
[0169.955] GetCurrentObject (hdc=0x920107b1, type=0x6) returned 0x8a01c2
[0169.955] SaveDC (hdc=0x920107b1) returned 1
[0169.955] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe50407a1
[0169.956] GetClipRgn (hdc=0x920107b1, hrgn=0xe50407a1) returned 0
[0169.956] SelectClipRgn (hdc=0x920107b1, hrgn=0xb1040798) returned 2
[0169.956] DeleteObject (ho=0xe50407a1) returned 1
[0169.966] DeleteObject (ho=0xb1040798) returned 1
[0169.966] OffsetViewportOrgEx (in: hdc=0x920107b1, x=0, y=0, lppt=0x23876e0 | out: lppt=0x23876e0) returned 1
[0169.967] IsAppThemed () returned 0x1
[0169.967] GetThemeAppProperties () returned 0x3
[0169.967] GetThemeAppProperties () returned 0x3
[0169.967] GetThemeBackgroundContentRect () returned 0x0
[0169.967] RestoreDC (hdc=0x920107b1, nSavedDC=-1) returned 1
[0169.967] GdipReleaseDC (graphics=0x5da0378, hdc=0x920107b1) returned 0x0
[0169.967] IsAppThemed () returned 0x1
[0169.967] GetThemeAppProperties () returned 0x3
[0169.967] GetThemeAppProperties () returned 0x3
[0169.967] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e7cc) returned 0x0
[0169.967] GdipGetDC (graphics=0x5da0378, hdc=0x53e7b8) returned 0x0
[0169.967] GetCurrentObject (hdc=0x920107b1, type=0x1) returned 0xb00017
[0169.967] GetCurrentObject (hdc=0x920107b1, type=0x2) returned 0x900010
[0169.967] GetCurrentObject (hdc=0x920107b1, type=0x7) returned 0x1e0507b9
[0169.968] GetCurrentObject (hdc=0x920107b1, type=0x6) returned 0x8a01c2
[0169.968] SaveDC (hdc=0x920107b1) returned 1
[0169.968] GetTextAlign (hdc=0x920107b1) returned 0x0
[0169.968] GetTextColor (hdc=0x920107b1) returned 0x0
[0169.968] GetCurrentObject (hdc=0x920107b1, type=0x6) returned 0x8a01c2
[0169.968] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0169.968] SelectObject (hdc=0x920107b1, h=0x450a0799) returned 0x8a01c2
[0169.968] GetBkMode (hdc=0x920107b1) returned 2
[0169.968] SetBkMode (hdc=0x920107b1, mode=1) returned 2
[0169.968] DrawTextExW (in: hdc=0x920107b1, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2387a80 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0169.969] DrawTextExW (in: hdc=0x920107b1, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2387a80 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0169.969] RestoreDC (hdc=0x920107b1, nSavedDC=-1) returned 1
[0169.969] GdipReleaseDC (graphics=0x5da0378, hdc=0x920107b1) returned 0x0
[0169.969] GetFocus () returned 0x202c6
[0169.969] IsAppThemed () returned 0x1
[0169.969] GetThemeAppProperties () returned 0x3
[0169.969] GetThemeAppProperties () returned 0x3
[0169.970] GdipGetDC (graphics=0x5da0378, hdc=0x53e998) returned 0x0
[0169.970] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x920107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0169.970] GdipReleaseDC (graphics=0x5da0378, hdc=0x920107b1) returned 0x0
[0169.970] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0169.970] SelectObject (hdc=0x920107b1, h=0x85000f) returned 0x1e0507b9
[0169.970] DeleteDC (hdc=0x920107b1) returned 1
[0169.970] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0169.970] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0169.971] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0169.971] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0169.971] WaitMessage () returned 1
[0169.971] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0169.971] IsWindowUnicode (hWnd=0x102dc) returned 1
[0169.971] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0169.971] TranslateMessage (lpMsg=0x53eef8) returned 0
[0169.971] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0169.972] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0169.972] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0169.972] WaitMessage () returned 1
[0170.019] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.020] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.021] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.021] DispatchMessageA (lpMsg=0x53eef8) returned 0x0
[0170.021] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.021] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.021] WaitMessage () returned 1
[0170.076] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.076] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.076] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.077] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.077] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.078] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.078] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.078] WaitMessage () returned 1
[0170.079] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.079] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.079] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.079] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.079] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.080] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.080] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.081] WaitMessage () returned 1
[0170.082] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.082] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.082] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.082] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.082] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.083] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.084] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.084] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.084] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.084] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.084] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.084] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.084] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.084] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.084] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.084] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.085] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.085] WaitMessage () returned 1
[0170.085] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.085] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.085] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.086] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.086] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.087] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.087] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.087] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.087] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.088] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.088] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.088] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.088] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.088] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.088] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.088] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.089] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.089] WaitMessage () returned 1
[0170.089] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.089] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.089] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.089] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.089] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.091] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.091] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.091] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.091] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.091] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.091] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.091] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.091] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.091] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.091] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.092] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.092] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.092] WaitMessage () returned 1
[0170.093] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.093] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.093] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.094] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.094] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.096] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.096] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.096] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.096] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.096] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.096] IsWindowUnicode (hWnd=0x102dc) returned 1
[0170.096] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.096] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.096] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.096] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.100] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.101] WaitMessage () returned 1
[0170.222] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.222] IsWindowUnicode (hWnd=0x202d0) returned 1
[0170.222] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.223] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.223] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0170.223] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.223] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.223] WaitMessage () returned 1
[0170.566] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.566] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0170.566] TranslateMessage (lpMsg=0x53eef8) returned 0
[0170.566] DispatchMessageA (lpMsg=0x53eef8) returned 0x7f30
[0170.566] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.567] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0170.567] WaitMessage () returned 1
[0171.506] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.507] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940259) returned 0x1
[0171.508] IsWindowUnicode (hWnd=0x202c6) returned 1
[0171.508] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.508] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940259) returned 0x1
[0171.508] SetCursor (hCursor=0x10003) returned 0x10003
[0171.508] TranslateMessage (lpMsg=0x53eef8) returned 0
[0171.508] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0171.508] _TrackMouseEvent (in: lpEventTrack=0x23276fc | out: lpEventTrack=0x23276fc) returned 1
[0171.509] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0171.509] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0171.509] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0171.509] GetKeyState (nVirtKey=1) returned 1
[0171.509] GetKeyState (nVirtKey=2) returned 0
[0171.509] GetKeyState (nVirtKey=4) returned 0
[0171.509] GetKeyState (nVirtKey=5) returned 0
[0171.509] GetKeyState (nVirtKey=6) returned 0
[0171.509] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.509] IsWindowUnicode (hWnd=0x202c6) returned 1
[0171.509] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.510] TranslateMessage (lpMsg=0x53eef8) returned 0
[0171.510] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0171.510] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0171.510] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0171.510] CreateCompatibleDC (hdc=0xf0105ee) returned 0x780107a2
[0171.510] SelectObject (hdc=0x780107a2, h=0x1e0507b9) returned 0x85000f
[0171.511] GdipCreateFromHDC (hdc=0x780107a2, graphics=0x53e958) returned 0x0
[0171.511] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0171.511] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0171.511] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0171.511] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0171.511] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e9b8) returned 0x0
[0171.512] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0171.512] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0171.512] LocalFree (hMem=0x89ee08) returned 0x0
[0171.512] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0171.512] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0171.512] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0171.512] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e9ac) returned 0x0
[0171.512] GdipSaveGraphics (graphics=0x5da0378, state=0x53e9d8) returned 0x0
[0171.512] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd790dbd) returned 0x0
[0171.512] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0171.513] GdipGetDC (graphics=0x5da0378, hdc=0x53e7b8) returned 0x0
[0171.513] GetCurrentObject (hdc=0x780107a2, type=0x1) returned 0xb00017
[0171.513] GetCurrentObject (hdc=0x780107a2, type=0x2) returned 0x900010
[0171.513] GetCurrentObject (hdc=0x780107a2, type=0x7) returned 0x1e0507b9
[0171.513] GetCurrentObject (hdc=0x780107a2, type=0x6) returned 0x8a01c2
[0171.513] SaveDC (hdc=0x780107a2) returned 1
[0171.513] GetNearestColor (hdc=0x780107a2, color=0xff) returned 0xff
[0171.513] GetNearestColor (hdc=0x780107a2, color=0x55) returned 0x55
[0171.513] GetNearestColor (hdc=0x780107a2, color=0x0) returned 0x0
[0171.513] GetNearestColor (hdc=0x780107a2, color=0x55) returned 0x55
[0171.514] GetNearestColor (hdc=0x780107a2, color=0x0) returned 0x0
[0171.514] GetNearestColor (hdc=0x780107a2, color=0x8080ff) returned 0x8080ff
[0171.514] GetNearestColor (hdc=0x780107a2, color=0x7373e5) returned 0x7373e5
[0171.514] GetNearestColor (hdc=0x780107a2, color=0xe5) returned 0xe5
[0171.514] GetNearestColor (hdc=0x780107a2, color=0x0) returned 0x0
[0171.514] RestoreDC (hdc=0x780107a2, nSavedDC=-1) returned 1
[0171.514] GdipReleaseDC (graphics=0x5da0378, hdc=0x780107a2) returned 0x0
[0171.514] IsAppThemed () returned 0x1
[0171.514] GetThemeAppProperties () returned 0x3
[0171.514] GetThemeAppProperties () returned 0x3
[0171.515] IsAppThemed () returned 0x1
[0171.515] GetThemeAppProperties () returned 0x3
[0171.515] GetThemeAppProperties () returned 0x3
[0171.515] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x2388414 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0171.515] IsAppThemed () returned 0x1
[0171.516] GetThemeAppProperties () returned 0x3
[0171.516] GetThemeAppProperties () returned 0x3
[0171.516] IsAppThemed () returned 0x1
[0171.516] GetThemeAppProperties () returned 0x3
[0171.516] GetThemeAppProperties () returned 0x3
[0171.516] IsAppThemed () returned 0x1
[0171.516] GetThemeAppProperties () returned 0x3
[0171.516] GetThemeAppProperties () returned 0x3
[0171.516] IsAppThemed () returned 0x1
[0171.516] GetThemeAppProperties () returned 0x3
[0171.516] GetThemeAppProperties () returned 0x3
[0171.516] IsThemePartDefined () returned 0x1
[0171.516] IsAppThemed () returned 0x1
[0171.516] GetThemeAppProperties () returned 0x3
[0171.516] GetThemeAppProperties () returned 0x3
[0171.516] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0171.516] IsAppThemed () returned 0x1
[0171.517] GetThemeAppProperties () returned 0x3
[0171.517] GetThemeAppProperties () returned 0x3
[0171.517] IsAppThemed () returned 0x1
[0171.517] GetThemeAppProperties () returned 0x3
[0171.517] GetThemeAppProperties () returned 0x3
[0171.517] IsThemePartDefined () returned 0x1
[0171.517] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0171.517] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0171.517] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0171.517] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0171.517] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e6d4) returned 0x0
[0171.517] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0171.517] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0171.517] LocalFree (hMem=0x89ee08) returned 0x0
[0171.517] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0171.518] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0171.518] LocalFree (hMem=0x89ea88) returned 0x0
[0171.518] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0171.518] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6fc) returned 0x0
[0171.518] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6ec) returned 0x0
[0171.518] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e6ec) returned 0x0
[0171.518] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0171.518] GdipGetDC (graphics=0x5da0378, hdc=0x53e704) returned 0x0
[0171.518] GetCurrentObject (hdc=0x780107a2, type=0x1) returned 0xb00017
[0171.518] GetCurrentObject (hdc=0x780107a2, type=0x2) returned 0x900010
[0171.518] GetCurrentObject (hdc=0x780107a2, type=0x7) returned 0x1e0507b9
[0171.518] GetCurrentObject (hdc=0x780107a2, type=0x6) returned 0x8a01c2
[0171.518] SaveDC (hdc=0x780107a2) returned 1
[0171.518] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb2040798
[0171.519] GetClipRgn (hdc=0x780107a2, hrgn=0xb2040798) returned 0
[0171.519] SelectClipRgn (hdc=0x780107a2, hrgn=0xe90407a1) returned 2
[0171.519] DeleteObject (ho=0xb2040798) returned 1
[0171.519] DeleteObject (ho=0xe90407a1) returned 1
[0171.519] OffsetViewportOrgEx (in: hdc=0x780107a2, x=0, y=0, lppt=0x2388ac4 | out: lppt=0x2388ac4) returned 1
[0171.519] DrawThemeParentBackground () returned 0x0
[0171.519] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0171.519] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0171.519] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0171.520] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0171.520] GetSystemMetrics (nIndex=42) returned 0
[0171.520] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0171.520] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0171.520] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0171.520] GetCurrentObject (hdc=0x780107a2, type=0x1) returned 0xb00017
[0171.520] GetCurrentObject (hdc=0x780107a2, type=0x2) returned 0x900010
[0171.520] GetCurrentObject (hdc=0x780107a2, type=0x7) returned 0x1e0507b9
[0171.520] GetCurrentObject (hdc=0x780107a2, type=0x6) returned 0x8a01c2
[0171.520] SaveDC (hdc=0x780107a2) returned 2
[0171.520] GetNearestColor (hdc=0x780107a2, color=0xff) returned 0xff
[0171.520] CreateSolidBrush (color=0xff) returned 0x9710078d
[0171.520] FillRect (hDC=0x780107a2, lprc=0x53e120, hbr=0x9710078d) returned 1
[0171.521] DeleteObject (ho=0x9710078d) returned 1
[0171.521] RestoreDC (hdc=0x780107a2, nSavedDC=-1) returned 1
[0171.521] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0171.521] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0171.521] GetSystemMetrics (nIndex=42) returned 0
[0171.521] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0171.521] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0171.521] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0171.521] GetCurrentObject (hdc=0x780107a2, type=0x1) returned 0xb00017
[0171.521] GetCurrentObject (hdc=0x780107a2, type=0x2) returned 0x900010
[0171.521] GetCurrentObject (hdc=0x780107a2, type=0x7) returned 0x1e0507b9
[0171.521] GetCurrentObject (hdc=0x780107a2, type=0x6) returned 0x8a01c2
[0171.521] SaveDC (hdc=0x780107a2) returned 2
[0171.521] GetNearestColor (hdc=0x780107a2, color=0xff) returned 0xff
[0171.521] CreateSolidBrush (color=0xff) returned 0x9810078d
[0171.522] FillRect (hDC=0x780107a2, lprc=0x53e0c0, hbr=0x9810078d) returned 1
[0171.522] DeleteObject (ho=0x9810078d) returned 1
[0171.522] RestoreDC (hdc=0x780107a2, nSavedDC=-1) returned 1
[0171.522] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0171.522] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0171.522] GetSystemMetrics (nIndex=42) returned 0
[0171.522] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0171.522] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0171.522] RestoreDC (hdc=0x780107a2, nSavedDC=-1) returned 1
[0171.522] GdipReleaseDC (graphics=0x5da0378, hdc=0x780107a2) returned 0x0
[0171.522] IsAppThemed () returned 0x1
[0171.523] GetThemeAppProperties () returned 0x3
[0171.523] GetThemeAppProperties () returned 0x3
[0171.523] IsAppThemed () returned 0x1
[0171.523] GetThemeAppProperties () returned 0x3
[0171.523] GetThemeAppProperties () returned 0x3
[0171.523] IsThemePartDefined () returned 0x1
[0171.523] GdipCreateRegion (region=0x53e640) returned 0x0
[0171.523] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0171.523] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0171.523] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0171.523] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e658) returned 0x0
[0171.523] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0171.523] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0171.523] LocalFree (hMem=0x89eee8) returned 0x0
[0171.523] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0171.523] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0171.523] LocalFree (hMem=0x89ea88) returned 0x0
[0171.523] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0171.524] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e680) returned 0x0
[0171.524] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e670) returned 0x0
[0171.524] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e670) returned 0x0
[0171.524] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0171.524] GdipGetDC (graphics=0x5da0378, hdc=0x53e688) returned 0x0
[0171.524] GetCurrentObject (hdc=0x780107a2, type=0x1) returned 0xb00017
[0171.524] GetCurrentObject (hdc=0x780107a2, type=0x2) returned 0x900010
[0171.524] GetCurrentObject (hdc=0x780107a2, type=0x7) returned 0x1e0507b9
[0171.524] GetCurrentObject (hdc=0x780107a2, type=0x6) returned 0x8a01c2
[0171.524] SaveDC (hdc=0x780107a2) returned 1
[0171.524] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xea0407a1
[0171.524] GetClipRgn (hdc=0x780107a2, hrgn=0xea0407a1) returned 0
[0171.524] SelectClipRgn (hdc=0x780107a2, hrgn=0xb4040798) returned 2
[0171.524] DeleteObject (ho=0xea0407a1) returned 1
[0171.524] DeleteObject (ho=0xb4040798) returned 1
[0171.525] OffsetViewportOrgEx (in: hdc=0x780107a2, x=0, y=0, lppt=0x2389328 | out: lppt=0x2389328) returned 1
[0171.525] IsAppThemed () returned 0x1
[0171.525] GetThemeAppProperties () returned 0x3
[0171.525] GetThemeAppProperties () returned 0x3
[0171.525] DrawThemeBackground () returned 0x0
[0171.525] RestoreDC (hdc=0x780107a2, nSavedDC=-1) returned 1
[0171.525] GdipReleaseDC (graphics=0x5da0378, hdc=0x780107a2) returned 0x0
[0171.525] GdipCreateRegion (region=0x53e644) returned 0x0
[0171.525] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0171.525] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0171.525] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0171.525] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e65c) returned 0x0
[0171.525] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0171.525] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0171.526] LocalFree (hMem=0x89ea88) returned 0x0
[0171.526] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0171.526] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0171.526] LocalFree (hMem=0x89ea88) returned 0x0
[0171.526] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0171.526] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e684) returned 0x0
[0171.526] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e674) returned 0x0
[0171.526] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e674) returned 0x0
[0171.526] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0171.526] GdipGetDC (graphics=0x5da0378, hdc=0x53e68c) returned 0x0
[0171.526] GetCurrentObject (hdc=0x780107a2, type=0x1) returned 0xb00017
[0171.526] GetCurrentObject (hdc=0x780107a2, type=0x2) returned 0x900010
[0171.526] GetCurrentObject (hdc=0x780107a2, type=0x7) returned 0x1e0507b9
[0171.526] GetCurrentObject (hdc=0x780107a2, type=0x6) returned 0x8a01c2
[0171.526] SaveDC (hdc=0x780107a2) returned 1
[0171.526] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb5040798
[0171.526] GetClipRgn (hdc=0x780107a2, hrgn=0xb5040798) returned 0
[0171.527] SelectClipRgn (hdc=0x780107a2, hrgn=0xeb0407a1) returned 2
[0171.527] DeleteObject (ho=0xb5040798) returned 1
[0171.527] DeleteObject (ho=0xeb0407a1) returned 1
[0171.527] OffsetViewportOrgEx (in: hdc=0x780107a2, x=0, y=0, lppt=0x23895fc | out: lppt=0x23895fc) returned 1
[0171.527] IsAppThemed () returned 0x1
[0171.527] GetThemeAppProperties () returned 0x3
[0171.527] GetThemeAppProperties () returned 0x3
[0171.527] GetThemeBackgroundContentRect () returned 0x0
[0171.527] RestoreDC (hdc=0x780107a2, nSavedDC=-1) returned 1
[0171.527] GdipReleaseDC (graphics=0x5da0378, hdc=0x780107a2) returned 0x0
[0171.527] IsAppThemed () returned 0x1
[0171.527] GetThemeAppProperties () returned 0x3
[0171.527] GetThemeAppProperties () returned 0x3
[0171.527] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e7c0) returned 0x0
[0171.527] GdipGetDC (graphics=0x5da0378, hdc=0x53e7ac) returned 0x0
[0171.527] GetCurrentObject (hdc=0x780107a2, type=0x1) returned 0xb00017
[0171.528] GetCurrentObject (hdc=0x780107a2, type=0x2) returned 0x900010
[0171.528] GetCurrentObject (hdc=0x780107a2, type=0x7) returned 0x1e0507b9
[0171.528] GetCurrentObject (hdc=0x780107a2, type=0x6) returned 0x8a01c2
[0171.528] SaveDC (hdc=0x780107a2) returned 1
[0171.528] GetTextAlign (hdc=0x780107a2) returned 0x0
[0171.528] GetTextColor (hdc=0x780107a2) returned 0x0
[0171.528] GetCurrentObject (hdc=0x780107a2, type=0x6) returned 0x8a01c2
[0171.528] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0171.528] SelectObject (hdc=0x780107a2, h=0x450a0799) returned 0x8a01c2
[0171.528] GetBkMode (hdc=0x780107a2) returned 2
[0171.528] SetBkMode (hdc=0x780107a2, mode=1) returned 2
[0171.529] DrawTextExW (in: hdc=0x780107a2, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x238999c | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0171.529] DrawTextExW (in: hdc=0x780107a2, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x238999c | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0171.529] RestoreDC (hdc=0x780107a2, nSavedDC=-1) returned 1
[0171.529] GdipReleaseDC (graphics=0x5da0378, hdc=0x780107a2) returned 0x0
[0171.529] GetFocus () returned 0x202c6
[0171.529] IsAppThemed () returned 0x1
[0171.530] GetThemeAppProperties () returned 0x3
[0171.530] GetThemeAppProperties () returned 0x3
[0171.530] GdipGetDC (graphics=0x5da0378, hdc=0x53e998) returned 0x0
[0171.530] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x780107a2, x1=0, y1=0, rop=0xcc0020) returned 1
[0171.530] GdipReleaseDC (graphics=0x5da0378, hdc=0x780107a2) returned 0x0
[0171.530] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0171.530] SelectObject (hdc=0x780107a2, h=0x85000f) returned 0x1e0507b9
[0171.531] DeleteDC (hdc=0x780107a2) returned 1
[0171.531] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0171.531] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0171.531] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0171.531] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0171.531] WaitMessage () returned 1
[0171.572] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.573] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.573] TranslateMessage (lpMsg=0x53eef8) returned 0
[0171.573] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0171.573] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0171.573] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0171.573] WaitMessage () returned 1
[0171.612] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.613] IsWindowUnicode (hWnd=0x202c6) returned 1
[0171.613] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.613] TranslateMessage (lpMsg=0x53eef8) returned 0
[0171.613] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0171.613] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.613] IsWindowUnicode (hWnd=0x202c6) returned 1
[0171.613] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.613] TranslateMessage (lpMsg=0x53eef8) returned 0
[0171.613] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0171.613] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xc0069) returned 0x0
[0171.613] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0171.613] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0171.613] WaitMessage () returned 1
[0171.722] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.722] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940259) returned 0x1
[0171.722] IsWindowUnicode (hWnd=0x202c6) returned 1
[0171.722] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.723] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940259) returned 0x1
[0171.723] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0171.723] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x1270203) returned 0x0
[0171.723] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0171.723] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0171.723] SetCursor (hCursor=0x10003) returned 0x10003
[0171.723] TranslateMessage (lpMsg=0x53eef8) returned 0
[0171.723] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0171.723] GetKeyState (nVirtKey=1) returned -128
[0171.724] GetKeyState (nVirtKey=2) returned 0
[0171.724] GetKeyState (nVirtKey=4) returned 0
[0171.724] GetKeyState (nVirtKey=5) returned 0
[0171.724] GetKeyState (nVirtKey=6) returned 0
[0171.724] IsWindowVisible (hWnd=0x202c6) returned 1
[0171.724] IsWindowEnabled (hWnd=0x202c6) returned 1
[0171.724] SetFocus (hWnd=0x202c6) returned 0x202c6
[0171.724] GetFocus () returned 0x202c6
[0171.724] GetFocus () returned 0x202c6
[0171.724] GetFocus () returned 0x202c6
[0171.724] GetKeyState (nVirtKey=1) returned -128
[0171.724] GetKeyState (nVirtKey=2) returned 0
[0171.724] GetKeyState (nVirtKey=4) returned 0
[0171.724] GetKeyState (nVirtKey=5) returned 0
[0171.724] GetKeyState (nVirtKey=6) returned 0
[0171.724] GetCapture () returned 0x0
[0171.724] SetCapture (hWnd=0x202c6) returned 0x0
[0171.724] GetKeyState (nVirtKey=1) returned -128
[0171.725] GetKeyState (nVirtKey=2) returned 0
[0171.725] GetKeyState (nVirtKey=4) returned 0
[0171.725] GetKeyState (nVirtKey=5) returned 0
[0171.725] GetKeyState (nVirtKey=6) returned 0
[0171.725] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0171.725] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0171.725] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.725] IsWindowUnicode (hWnd=0x202c6) returned 1
[0171.725] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0171.725] TranslateMessage (lpMsg=0x53eef8) returned 0
[0171.725] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0171.725] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2389b44, cPoints=0x1 | out: lpPoints=0x2389b44) returned 25690608
[0171.725] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0171.725] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0171.726] UpdateWindow (hWnd=0x202c6) returned 1
[0171.726] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0171.726] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0171.726] CreateCompatibleDC (hdc=0xf0105ee) returned 0xa40107aa
[0171.726] SelectObject (hdc=0xa40107aa, h=0x1e0507b9) returned 0x85000f
[0171.726] GdipCreateFromHDC (hdc=0xa40107aa, graphics=0x53e5f0) returned 0x0
[0171.726] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0171.726] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0171.726] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0171.726] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0171.726] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e650) returned 0x0
[0171.727] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0171.727] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0171.727] LocalFree (hMem=0x89ec80) returned 0x0
[0171.727] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0171.727] GdipCreateRegion (region=0x53e638) returned 0x0
[0171.727] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0171.727] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e644) returned 0x0
[0171.727] GdipSaveGraphics (graphics=0x5da0378, state=0x53e670) returned 0x0
[0171.727] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd770dbd) returned 0x0
[0171.727] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0171.727] GdipGetDC (graphics=0x5da0378, hdc=0x53e450) returned 0x0
[0171.727] GetCurrentObject (hdc=0xa40107aa, type=0x1) returned 0xb00017
[0171.727] GetCurrentObject (hdc=0xa40107aa, type=0x2) returned 0x900010
[0171.727] GetCurrentObject (hdc=0xa40107aa, type=0x7) returned 0x1e0507b9
[0171.727] GetCurrentObject (hdc=0xa40107aa, type=0x6) returned 0x8a01c2
[0171.728] SaveDC (hdc=0xa40107aa) returned 1
[0171.728] GetNearestColor (hdc=0xa40107aa, color=0xff) returned 0xff
[0171.728] GetNearestColor (hdc=0xa40107aa, color=0x55) returned 0x55
[0171.728] GetNearestColor (hdc=0xa40107aa, color=0x0) returned 0x0
[0171.728] GetNearestColor (hdc=0xa40107aa, color=0x55) returned 0x55
[0171.728] GetNearestColor (hdc=0xa40107aa, color=0x0) returned 0x0
[0171.728] GetNearestColor (hdc=0xa40107aa, color=0x8080ff) returned 0x8080ff
[0171.728] GetNearestColor (hdc=0xa40107aa, color=0x7373e5) returned 0x7373e5
[0171.728] GetNearestColor (hdc=0xa40107aa, color=0xe5) returned 0xe5
[0171.728] GetNearestColor (hdc=0xa40107aa, color=0x0) returned 0x0
[0171.728] RestoreDC (hdc=0xa40107aa, nSavedDC=-1) returned 1
[0171.729] GdipReleaseDC (graphics=0x5da0378, hdc=0xa40107aa) returned 0x0
[0171.729] IsAppThemed () returned 0x1
[0171.729] GetThemeAppProperties () returned 0x3
[0171.729] GetThemeAppProperties () returned 0x3
[0171.729] IsAppThemed () returned 0x1
[0171.729] GetThemeAppProperties () returned 0x3
[0171.729] GetThemeAppProperties () returned 0x3
[0171.729] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x238a260 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0171.729] IsAppThemed () returned 0x1
[0171.730] GetThemeAppProperties () returned 0x3
[0171.730] GetThemeAppProperties () returned 0x3
[0171.730] IsAppThemed () returned 0x1
[0171.730] GetThemeAppProperties () returned 0x3
[0171.730] GetThemeAppProperties () returned 0x3
[0171.730] IsAppThemed () returned 0x1
[0171.730] GetThemeAppProperties () returned 0x3
[0171.730] GetThemeAppProperties () returned 0x3
[0171.730] IsAppThemed () returned 0x1
[0171.730] GetThemeAppProperties () returned 0x3
[0171.730] GetThemeAppProperties () returned 0x3
[0171.730] IsThemePartDefined () returned 0x1
[0171.730] IsAppThemed () returned 0x1
[0171.730] GetThemeAppProperties () returned 0x3
[0171.730] GetThemeAppProperties () returned 0x3
[0171.730] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0171.731] IsAppThemed () returned 0x1
[0171.740] GetThemeAppProperties () returned 0x3
[0171.741] GetThemeAppProperties () returned 0x3
[0171.741] IsAppThemed () returned 0x1
[0171.741] GetThemeAppProperties () returned 0x3
[0171.741] GetThemeAppProperties () returned 0x3
[0171.741] IsThemePartDefined () returned 0x1
[0171.741] GdipCreateRegion (region=0x53e354) returned 0x0
[0171.741] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0171.741] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0171.741] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0171.741] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e36c) returned 0x0
[0171.741] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0171.741] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee40) returned 0x0
[0171.742] LocalFree (hMem=0x89ee40) returned 0x0
[0171.742] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0171.742] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0171.742] LocalFree (hMem=0x89ee08) returned 0x0
[0171.742] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0171.742] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e394) returned 0x0
[0171.742] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e384) returned 0x0
[0171.742] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e384) returned 0x0
[0171.742] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0171.742] GdipGetDC (graphics=0x5da0378, hdc=0x53e39c) returned 0x0
[0171.742] GetCurrentObject (hdc=0xa40107aa, type=0x1) returned 0xb00017
[0171.743] GetCurrentObject (hdc=0xa40107aa, type=0x2) returned 0x900010
[0171.743] GetCurrentObject (hdc=0xa40107aa, type=0x7) returned 0x1e0507b9
[0171.743] GetCurrentObject (hdc=0xa40107aa, type=0x6) returned 0x8a01c2
[0171.743] SaveDC (hdc=0xa40107aa) returned 1
[0171.743] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xec0407a1
[0171.743] GetClipRgn (hdc=0xa40107aa, hrgn=0xec0407a1) returned 0
[0171.743] SelectClipRgn (hdc=0xa40107aa, hrgn=0xb9040798) returned 2
[0171.743] DeleteObject (ho=0xec0407a1) returned 1
[0171.743] DeleteObject (ho=0xb9040798) returned 1
[0171.743] OffsetViewportOrgEx (in: hdc=0xa40107aa, x=0, y=0, lppt=0x238a910 | out: lppt=0x238a910) returned 1
[0171.744] DrawThemeParentBackground () returned 0x0
[0171.744] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0171.744] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0171.744] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0171.744] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0171.744] GetSystemMetrics (nIndex=42) returned 0
[0171.744] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0171.744] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0171.744] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0171.744] GetCurrentObject (hdc=0xa40107aa, type=0x1) returned 0xb00017
[0171.745] GetCurrentObject (hdc=0xa40107aa, type=0x2) returned 0x900010
[0171.745] GetCurrentObject (hdc=0xa40107aa, type=0x7) returned 0x1e0507b9
[0171.745] GetCurrentObject (hdc=0xa40107aa, type=0x6) returned 0x8a01c2
[0171.745] SaveDC (hdc=0xa40107aa) returned 2
[0171.745] GetNearestColor (hdc=0xa40107aa, color=0xff) returned 0xff
[0171.745] CreateSolidBrush (color=0xff) returned 0x9910078d
[0171.745] FillRect (hDC=0xa40107aa, lprc=0x53ddb8, hbr=0x9910078d) returned 1
[0171.745] DeleteObject (ho=0x9910078d) returned 1
[0171.745] RestoreDC (hdc=0xa40107aa, nSavedDC=-1) returned 1
[0171.745] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0171.746] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0171.746] GetSystemMetrics (nIndex=42) returned 0
[0171.746] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0171.746] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0171.746] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0171.746] GetCurrentObject (hdc=0xa40107aa, type=0x1) returned 0xb00017
[0171.746] GetCurrentObject (hdc=0xa40107aa, type=0x2) returned 0x900010
[0171.746] GetCurrentObject (hdc=0xa40107aa, type=0x7) returned 0x1e0507b9
[0171.746] GetCurrentObject (hdc=0xa40107aa, type=0x6) returned 0x8a01c2
[0171.746] SaveDC (hdc=0xa40107aa) returned 2
[0171.746] GetNearestColor (hdc=0xa40107aa, color=0xff) returned 0xff
[0171.746] CreateSolidBrush (color=0xff) returned 0x9a10078d
[0171.747] FillRect (hDC=0xa40107aa, lprc=0x53dd58, hbr=0x9a10078d) returned 1
[0171.747] DeleteObject (ho=0x9a10078d) returned 1
[0171.747] RestoreDC (hdc=0xa40107aa, nSavedDC=-1) returned 1
[0171.747] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0171.747] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0171.747] GetSystemMetrics (nIndex=42) returned 0
[0171.747] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0171.747] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0171.747] RestoreDC (hdc=0xa40107aa, nSavedDC=-1) returned 1
[0171.747] GdipReleaseDC (graphics=0x5da0378, hdc=0xa40107aa) returned 0x0
[0171.748] IsAppThemed () returned 0x1
[0171.748] GetThemeAppProperties () returned 0x3
[0171.748] GetThemeAppProperties () returned 0x3
[0171.748] IsAppThemed () returned 0x1
[0171.748] GetThemeAppProperties () returned 0x3
[0171.748] GetThemeAppProperties () returned 0x3
[0171.748] IsThemePartDefined () returned 0x1
[0171.748] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0171.748] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0171.748] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0171.748] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0171.748] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f0) returned 0x0
[0171.748] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0171.749] LocalFree (hMem=0x89ee08) returned 0x0
[0171.749] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0171.749] LocalFree (hMem=0x89ea88) returned 0x0
[0171.749] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0171.749] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e318) returned 0x0
[0171.749] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e308) returned 0x0
[0171.749] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e308) returned 0x0
[0171.749] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0171.749] GdipGetDC (graphics=0x5da0378, hdc=0x53e320) returned 0x0
[0171.749] GetCurrentObject (hdc=0xa40107aa, type=0x1) returned 0xb00017
[0171.749] GetCurrentObject (hdc=0xa40107aa, type=0x2) returned 0x900010
[0171.749] GetCurrentObject (hdc=0xa40107aa, type=0x7) returned 0x1e0507b9
[0171.749] GetCurrentObject (hdc=0xa40107aa, type=0x6) returned 0x8a01c2
[0171.749] SaveDC (hdc=0xa40107aa) returned 1
[0171.750] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xba040798
[0171.750] GetClipRgn (hdc=0xa40107aa, hrgn=0xba040798) returned 0
[0171.750] SelectClipRgn (hdc=0xa40107aa, hrgn=0xee0407a1) returned 2
[0171.750] DeleteObject (ho=0xba040798) returned 1
[0171.750] DeleteObject (ho=0xee0407a1) returned 1
[0171.750] OffsetViewportOrgEx (in: hdc=0xa40107aa, x=0, y=0, lppt=0x238b174 | out: lppt=0x238b174) returned 1
[0171.750] IsAppThemed () returned 0x1
[0171.750] GetThemeAppProperties () returned 0x3
[0171.750] GetThemeAppProperties () returned 0x3
[0171.750] DrawThemeBackground () returned 0x0
[0171.750] RestoreDC (hdc=0xa40107aa, nSavedDC=-1) returned 1
[0171.750] GdipReleaseDC (graphics=0x5da0378, hdc=0xa40107aa) returned 0x0
[0171.750] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0171.751] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0171.751] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0171.751] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0171.751] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e2f4) returned 0x0
[0171.751] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0171.751] LocalFree (hMem=0x89ea88) returned 0x0
[0171.751] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0171.751] LocalFree (hMem=0x89ec80) returned 0x0
[0171.751] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0171.751] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e31c) returned 0x0
[0171.751] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e30c) returned 0x0
[0171.751] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e30c) returned 0x0
[0171.751] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0171.751] GdipGetDC (graphics=0x5da0378, hdc=0x53e324) returned 0x0
[0171.752] GetCurrentObject (hdc=0xa40107aa, type=0x1) returned 0xb00017
[0171.752] GetCurrentObject (hdc=0xa40107aa, type=0x2) returned 0x900010
[0171.752] GetCurrentObject (hdc=0xa40107aa, type=0x7) returned 0x1e0507b9
[0171.752] GetCurrentObject (hdc=0xa40107aa, type=0x6) returned 0x8a01c2
[0171.752] SaveDC (hdc=0xa40107aa) returned 1
[0171.752] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xef0407a1
[0171.752] GetClipRgn (hdc=0xa40107aa, hrgn=0xef0407a1) returned 0
[0171.752] SelectClipRgn (hdc=0xa40107aa, hrgn=0xbb040798) returned 2
[0171.752] DeleteObject (ho=0xef0407a1) returned 1
[0171.752] DeleteObject (ho=0xbb040798) returned 1
[0171.752] OffsetViewportOrgEx (in: hdc=0xa40107aa, x=0, y=0, lppt=0x238b448 | out: lppt=0x238b448) returned 1
[0171.752] IsAppThemed () returned 0x1
[0171.753] GetThemeAppProperties () returned 0x3
[0171.753] GetThemeAppProperties () returned 0x3
[0171.753] GetThemeBackgroundContentRect () returned 0x0
[0171.753] RestoreDC (hdc=0xa40107aa, nSavedDC=-1) returned 1
[0171.753] GdipReleaseDC (graphics=0x5da0378, hdc=0xa40107aa) returned 0x0
[0171.753] IsAppThemed () returned 0x1
[0171.753] GetThemeAppProperties () returned 0x3
[0171.753] GetThemeAppProperties () returned 0x3
[0171.753] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e458) returned 0x0
[0171.753] GdipGetDC (graphics=0x5da0378, hdc=0x53e444) returned 0x0
[0171.753] GetCurrentObject (hdc=0xa40107aa, type=0x1) returned 0xb00017
[0171.753] GetCurrentObject (hdc=0xa40107aa, type=0x2) returned 0x900010
[0171.753] GetCurrentObject (hdc=0xa40107aa, type=0x7) returned 0x1e0507b9
[0171.753] GetCurrentObject (hdc=0xa40107aa, type=0x6) returned 0x8a01c2
[0171.754] SaveDC (hdc=0xa40107aa) returned 1
[0171.754] GetTextAlign (hdc=0xa40107aa) returned 0x0
[0171.754] GetTextColor (hdc=0xa40107aa) returned 0x0
[0171.754] GetCurrentObject (hdc=0xa40107aa, type=0x6) returned 0x8a01c2
[0171.754] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0171.754] SelectObject (hdc=0xa40107aa, h=0x450a0799) returned 0x8a01c2
[0171.754] GetBkMode (hdc=0xa40107aa) returned 2
[0171.754] SetBkMode (hdc=0xa40107aa, mode=1) returned 2
[0171.754] DrawTextExW (in: hdc=0xa40107aa, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x238b7e8 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0171.755] DrawTextExW (in: hdc=0xa40107aa, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x238b7e8 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0171.755] RestoreDC (hdc=0xa40107aa, nSavedDC=-1) returned 1
[0171.755] GdipReleaseDC (graphics=0x5da0378, hdc=0xa40107aa) returned 0x0
[0171.755] GetFocus () returned 0x202c6
[0171.755] IsAppThemed () returned 0x1
[0171.755] GetThemeAppProperties () returned 0x3
[0171.755] GetThemeAppProperties () returned 0x3
[0171.755] GdipGetDC (graphics=0x5da0378, hdc=0x53e630) returned 0x0
[0171.755] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xa40107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0171.756] GdipReleaseDC (graphics=0x5da0378, hdc=0xa40107aa) returned 0x0
[0171.756] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0171.756] SelectObject (hdc=0xa40107aa, h=0x85000f) returned 0x1e0507b9
[0171.756] DeleteDC (hdc=0xa40107aa) returned 1
[0171.756] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0171.756] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0171.757] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x238b8e4, cPoints=0x1 | out: lpPoints=0x238b8e4) returned 25690608
[0171.757] WindowFromPoint (Point=0x259) returned 0x202c6
[0171.757] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940259) returned 0x1
[0171.757] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0171.757] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0171.762] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0171.764] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0171.767] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0171.767] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0171.767] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0171.768] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0171.768] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0171.768] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e888) returned 0x0
[0171.946] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5da0378, height=0x53e880) returned 0x0
[0171.946] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0171.946] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0171.946] GetSystemMetrics (nIndex=5) returned 1
[0171.946] GetSystemMetrics (nIndex=6) returned 1
[0171.947] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0171.947] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0171.947] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0171.947] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0172.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.053] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0172.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.054] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0172.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.054] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0172.055] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.055] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0172.055] GetSystemMetrics (nIndex=5) returned 1
[0172.055] GetSystemMetrics (nIndex=6) returned 1
[0172.055] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.055] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0172.055] GetSystemMetrics (nIndex=5) returned 1
[0172.055] GetSystemMetrics (nIndex=6) returned 1
[0172.056] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.056] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0172.056] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.056] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0172.057] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.057] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0172.057] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.057] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0172.057] GetSystemMetrics (nIndex=59) returned 1460
[0172.057] GetSystemMetrics (nIndex=60) returned 920
[0172.057] GetSystemMetrics (nIndex=34) returned 136
[0172.057] GetSystemMetrics (nIndex=35) returned 39
[0172.058] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.058] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0172.058] GetCurrentThreadId () returned 0x11d0
[0172.058] GetCurrentThreadId () returned 0x11d0
[0172.058] GetCurrentThreadId () returned 0x11d0
[0172.058] GetCurrentThreadId () returned 0x11d0
[0172.058] GetCurrentThreadId () returned 0x11d0
[0172.058] GetCurrentThreadId () returned 0x11d0
[0172.058] GetCurrentThreadId () returned 0x11d0
[0172.058] GetCurrentThreadId () returned 0x11d0
[0172.058] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.059] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0172.059] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0172.059] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0172.059] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.059] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0172.060] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.060] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0172.060] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x9013e
[0172.061] SetWindowLongW (hWnd=0x9013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0172.062] GetWindowLongW (hWnd=0x9013e, nIndex=-4) returned 1950089536
[0172.062] SetWindowLongW (hWnd=0x9013e, nIndex=-4, dwNewLong=79644342) returned 1950089536
[0172.062] GetWindowLongW (hWnd=0x9013e, nIndex=-4) returned 79644342
[0172.062] GetWindowLongW (hWnd=0x9013e, nIndex=-16) returned 113311744
[0172.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x9013e, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0172.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x9013e, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0172.066] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x9013e, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0172.067] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x9013e, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0172.067] GetClientRect (in: hWnd=0x9013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0172.067] GetWindowRect (in: hWnd=0x9013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0172.067] SetWindowTextW (hWnd=0x9013e, lpString="WindowsFormsParkingWindow") returned 1
[0172.067] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x9013e, Msg=0xc, wParam=0x0, lParam=0x237f94c) returned 0x1
[0172.068] GetParent (hWnd=0x9013e) returned 0x0
[0172.069] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0172.069] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x9013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x502c8
[0172.069] SetWindowLongW (hWnd=0x502c8, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0172.069] GetWindowLongW (hWnd=0x502c8, nIndex=-4) returned 1868147648
[0172.070] SetWindowLongW (hWnd=0x502c8, nIndex=-4, dwNewLong=79643582) returned 1868147648
[0172.070] GetWindowLongW (hWnd=0x502c8, nIndex=-4) returned 79643582
[0172.070] GetWindowLongW (hWnd=0x502c8, nIndex=-16) returned 1174405133
[0172.070] GetWindowLongW (hWnd=0x502c8, nIndex=-12) returned 0
[0172.070] SetWindowLongW (hWnd=0x502c8, nIndex=-12, dwNewLong=328392) returned 0
[0172.070] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0172.071] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0172.071] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0172.072] GetClientRect (in: hWnd=0x502c8, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0172.072] GetWindowRect (in: hWnd=0x502c8, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0172.072] GetParent (hWnd=0x502c8) returned 0x9013e
[0172.072] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x9013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0172.072] SetWindowTextW (hWnd=0x502c8, lpString="Enter password: ") returned 1
[0172.072] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0xc, wParam=0x0, lParam=0x2333718) returned 0x1
[0172.073] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0172.073] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0172.073] GetClientRect (in: hWnd=0x502c8, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0172.073] GetWindowRect (in: hWnd=0x502c8, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0172.073] GetParent (hWnd=0x502c8) returned 0x9013e
[0172.073] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x9013e, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0172.073] SendMessageW (hWnd=0x502c8, Msg=0x2210, wParam=0x2c80001, lParam=0x502c8) returned 0x0
[0172.073] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x2210, wParam=0x2c80001, lParam=0x502c8) returned 0x0
[0172.073] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0172.074] GetParent (hWnd=0x502c8) returned 0x9013e
[0172.074] GdipCreateFromHWND (hwnd=0x502c8, graphics=0x53e994) returned 0x0
[0172.074] GdipMeasureString (graphics=0x5da0378, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0172.075] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0172.075] GetProcessWindowStation () returned 0x13c
[0172.075] GetCapture () returned 0x202c6
[0172.075] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0172.075] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0172.075] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0172.075] ReleaseCapture () returned 1
[0172.076] GetActiveWindow () returned 0x70036
[0172.076] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0172.076] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.076] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0172.076] GetCursorPos (in: lpPoint=0x23a0440 | out: lpPoint=0x23a0440*(x=601, y=404)) returned 1
[0172.076] MonitorFromPoint (pt=0x259, dwFlags=0x194) returned 0x10001
[0172.077] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0172.077] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xa80107aa
[0172.077] GetDeviceCaps (hdc=0xa80107aa, index=12) returned 32
[0172.077] GetDeviceCaps (hdc=0xa80107aa, index=14) returned 1
[0172.077] DeleteDC (hdc=0xa80107aa) returned 1
[0172.077] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0172.078] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0172.078] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x502da
[0172.078] SetWindowLongW (hWnd=0x502da, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0172.079] GetWindowLongW (hWnd=0x502da, nIndex=-4) returned 1950089536
[0172.079] SetWindowLongW (hWnd=0x502da, nIndex=-4, dwNewLong=79644222) returned 1950089536
[0172.079] GetWindowLongW (hWnd=0x502da, nIndex=-4) returned 79644222
[0172.079] GetWindowLongW (hWnd=0x502da, nIndex=-16) returned 113770496
[0172.079] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0172.080] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0172.082] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0172.082] GetClientRect (in: hWnd=0x502da, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0172.082] GetWindowRect (in: hWnd=0x502da, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0172.082] SetWindowTextW (hWnd=0x502da, lpString="Ransomware") returned 1
[0172.082] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xc, wParam=0x0, lParam=0x238b9ac) returned 0x1
[0172.084] GetStartupInfoW (in: lpStartupInfo=0x23a077c | out: lpStartupInfo=0x23a077c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0172.086] GetParent (hWnd=0x502da) returned 0x0
[0172.086] SetWindowLongW (hWnd=0x502da, nIndex=-8, dwNewLong=0) returned 0
[0172.087] SendMessageW (hWnd=0x502da, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0172.087] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0172.087] SendMessageW (hWnd=0x502da, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0172.087] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0172.087] GetSystemMenu (hWnd=0x502da, bRevert=0) returned 0xdb0241
[0172.088] GetWindowPlacement (in: hWnd=0x502da, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0172.088] EnableMenuItem (hMenu=0xdb0241, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0172.088] EnableMenuItem (hMenu=0xdb0241, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0172.088] EnableMenuItem (hMenu=0xdb0241, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0172.088] EnableMenuItem (hMenu=0xdb0241, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0172.089] EnableMenuItem (hMenu=0xdb0241, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0172.089] GetClientRect (in: hWnd=0x502da, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0172.089] GetClientRect (in: hWnd=0x502da, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0172.089] GetWindowRect (in: hWnd=0x502da, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0172.089] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.089] GetWindowLongW (hWnd=0x502da, nIndex=-16) returned 113770496
[0172.089] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.089] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.090] GetSystemMetrics (nIndex=42) returned 0
[0172.090] GetWindowTextW (in: hWnd=0x502da, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.090] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0172.090] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.090] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.090] GetSystemMetrics (nIndex=42) returned 0
[0172.090] GetWindowTextW (in: hWnd=0x502da, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.090] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0172.090] GetCursorPos (in: lpPoint=0x23a08f0 | out: lpPoint=0x23a08f0*(x=601, y=404)) returned 1
[0172.090] MonitorFromPoint (pt=0x259, dwFlags=0x194) returned 0x10001
[0172.090] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0172.090] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xac0107aa
[0172.090] GetDeviceCaps (hdc=0xac0107aa, index=12) returned 32
[0172.091] GetDeviceCaps (hdc=0xac0107aa, index=14) returned 1
[0172.091] DeleteDC (hdc=0xac0107aa) returned 1
[0172.091] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0172.091] GetWindowLongW (hWnd=0x502da, nIndex=-16) returned 113770496
[0172.091] GetWindowLongW (hWnd=0x502da, nIndex=-20) returned 327937
[0172.091] SetWindowLongW (hWnd=0x502da, nIndex=-16, dwNewLong=46661632) returned 113770496
[0172.091] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0172.091] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0172.092] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0172.092] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0172.093] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0172.093] SetWindowLongW (hWnd=0x502da, nIndex=-20, dwNewLong=327681) returned 327937
[0172.093] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0172.093] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0172.094] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0172.094] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0172.094] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0172.095] SetWindowPos (hWnd=0x502da, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0172.095] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0172.095] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0172.096] GetWindowPlacement (in: hWnd=0x502da, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0172.096] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0172.096] GetClientRect (in: hWnd=0x502da, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0172.096] GetWindowRect (in: hWnd=0x502da, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0172.096] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0172.097] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0172.098] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0172.098] RedrawWindow (hWnd=0x502da, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0172.098] GetSystemMenu (hWnd=0x502da, bRevert=0) returned 0xdb0241
[0172.098] GetWindowPlacement (in: hWnd=0x502da, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0172.098] EnableMenuItem (hMenu=0xdb0241, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0172.098] EnableMenuItem (hMenu=0xdb0241, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0172.098] EnableMenuItem (hMenu=0xdb0241, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0172.098] EnableMenuItem (hMenu=0xdb0241, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0172.098] EnableMenuItem (hMenu=0xdb0241, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0172.098] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0172.098] GetWindowLongW (hWnd=0x502da, nIndex=-8) returned 0
[0172.098] SetWindowLongW (hWnd=0x502da, nIndex=-8, dwNewLong=458806) returned 0
[0172.100] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0172.100] GetProcessWindowStation () returned 0x13c
[0172.100] GetCurrentThreadId () returned 0x11d0
[0172.101] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4846, lParam=0x0) returned 1
[0172.101] IsWindowVisible (hWnd=0x502da) returned 0
[0172.101] IsWindowVisible (hWnd=0x70036) returned 1
[0172.101] IsWindowEnabled (hWnd=0x70036) returned 1
[0172.101] IsWindowVisible (hWnd=0x602b6) returned 0
[0172.101] IsWindowVisible (hWnd=0x901f8) returned 0
[0172.101] IsWindowVisible (hWnd=0x202d0) returned 0
[0172.101] IsWindowVisible (hWnd=0x202d4) returned 0
[0172.101] GetActiveWindow () returned 0x70036
[0172.101] GetFocus () returned 0x202c6
[0172.101] IsWindow (hWnd=0x70036) returned 1
[0172.101] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0172.101] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0172.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0172.103] GetWindowLongW (hWnd=0x502da, nIndex=-8) returned 458806
[0172.103] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0172.103] GetCurrentThreadId () returned 0x11d0
[0172.103] GetWindowLongW (hWnd=0x502da, nIndex=-8) returned 458806
[0172.103] IsWindowEnabled (hWnd=0x70036) returned 0
[0172.103] IsWindowEnabled (hWnd=0x502da) returned 1
[0172.103] ShowWindow (hWnd=0x502da, nCmdShow=5) returned 0
[0172.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0172.103] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0172.104] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.104] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0172.104] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x502da, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x502d2
[0172.105] SetWindowLongW (hWnd=0x502d2, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0172.105] GetWindowLongW (hWnd=0x502d2, nIndex=-4) returned 1868026976
[0172.106] SetWindowLongW (hWnd=0x502d2, nIndex=-4, dwNewLong=79644262) returned 1868026976
[0172.106] GetWindowLongW (hWnd=0x502d2, nIndex=-4) returned 79644262
[0172.106] GetWindowLongW (hWnd=0x502d2, nIndex=-16) returned 1174470848
[0172.106] GetWindowLongW (hWnd=0x502d2, nIndex=-12) returned 0
[0172.106] SetWindowLongW (hWnd=0x502d2, nIndex=-12, dwNewLong=328402) returned 0
[0172.106] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0172.107] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0172.108] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0172.111] SendMessageW (hWnd=0x502d2, Msg=0x2055, wParam=0x502d2, lParam=0x3) returned 0x2
[0172.111] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0172.111] GetWindow (hWnd=0x502d2, uCmd=0x3) returned 0x0
[0172.111] GetClientRect (in: hWnd=0x502d2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0172.111] GetWindowRect (in: hWnd=0x502d2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0172.111] GetParent (hWnd=0x502d2) returned 0x502da
[0172.111] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502da, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0172.111] SendMessageW (hWnd=0x502d2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0172.111] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0172.111] SendMessageW (hWnd=0x502d2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0172.111] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0172.112] GetSystemMetrics (nIndex=5) returned 1
[0172.112] GetSystemMetrics (nIndex=6) returned 1
[0172.112] SendMessageW (hWnd=0x502d2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0172.112] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0172.112] SendMessageW (hWnd=0x502d2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0172.112] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0172.113] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0172.113] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0172.113] GetClientRect (in: hWnd=0x502d2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0172.113] GetWindowRect (in: hWnd=0x502d2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0172.113] GetParent (hWnd=0x502d2) returned 0x502da
[0172.113] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502da, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0172.113] SendMessageW (hWnd=0x502d2, Msg=0x2210, wParam=0x2d20001, lParam=0x502d2) returned 0x0
[0172.113] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x2210, wParam=0x2d20001, lParam=0x502d2) returned 0x0
[0172.113] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0172.114] GetParent (hWnd=0x502d2) returned 0x502da
[0172.114] GetParent (hWnd=0x502c8) returned 0x9013e
[0172.114] SetParent (hWndChild=0x502c8, hWndNewParent=0x502da) returned 0x9013e
[0172.114] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0172.115] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0172.116] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0172.117] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0172.117] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0172.117] GetClientRect (in: hWnd=0x502c8, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0172.117] GetWindowRect (in: hWnd=0x502c8, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0172.117] GetParent (hWnd=0x502c8) returned 0x502da
[0172.117] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502da, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0172.117] GetClientRect (in: hWnd=0x502c8, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0172.117] GetWindowRect (in: hWnd=0x502c8, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0172.117] GetParent (hWnd=0x502c8) returned 0x502da
[0172.117] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502da, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0172.117] GetParent (hWnd=0x502c8) returned 0x502da
[0172.117] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0172.117] GetWindow (hWnd=0x502c8, uCmd=0x3) returned 0x0
[0172.118] SetWindowPos (hWnd=0x502c8, hWndInsertAfter=0x502d2, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0172.118] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0172.118] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0172.118] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0172.118] GetClientRect (in: hWnd=0x502c8, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0172.119] GetWindowRect (in: hWnd=0x502c8, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0172.119] GetParent (hWnd=0x502c8) returned 0x502da
[0172.119] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502da, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0172.119] GetParent (hWnd=0x502c8) returned 0x502da
[0172.119] GetWindow (hWnd=0x502c8, uCmd=0x3) returned 0x502d2
[0172.119] GetWindowThreadProcessId (in: hWnd=0x502c8, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0172.119] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0172.119] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.120] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0172.120] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x502da, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x402d8
[0172.121] SetWindowLongW (hWnd=0x402d8, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0172.121] GetWindowLongW (hWnd=0x402d8, nIndex=-4) returned 1868032000
[0172.121] SetWindowLongW (hWnd=0x402d8, nIndex=-4, dwNewLong=79644382) returned 1868032000
[0172.121] GetWindowLongW (hWnd=0x402d8, nIndex=-4) returned 79644382
[0172.121] GetWindowLongW (hWnd=0x402d8, nIndex=-16) returned 1174470667
[0172.121] GetWindowLongW (hWnd=0x402d8, nIndex=-12) returned 0
[0172.121] SetWindowLongW (hWnd=0x402d8, nIndex=-12, dwNewLong=262872) returned 0
[0172.121] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0172.122] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0172.122] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0172.123] SendMessageW (hWnd=0x402d8, Msg=0x2055, wParam=0x402d8, lParam=0x3) returned 0x2
[0172.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0172.124] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0172.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0172.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0172.124] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0172.124] RedrawWindow (hWnd=0x502d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0172.124] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0172.124] RedrawWindow (hWnd=0x502c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0172.124] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0172.124] RedrawWindow (hWnd=0x402d8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0172.125] RedrawWindow (hWnd=0x502da, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0172.125] GetWindow (hWnd=0x402d8, uCmd=0x3) returned 0x502c8
[0172.125] GetClientRect (in: hWnd=0x402d8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0172.125] GetWindowRect (in: hWnd=0x402d8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0172.125] GetParent (hWnd=0x402d8) returned 0x502da
[0172.125] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502da, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0172.125] SetWindowTextW (hWnd=0x402d8, lpString="OK") returned 1
[0172.125] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0xc, wParam=0x0, lParam=0x2393d5c) returned 0x1
[0172.126] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0172.126] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0172.126] GetClientRect (in: hWnd=0x402d8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0172.126] GetWindowRect (in: hWnd=0x402d8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0172.126] GetParent (hWnd=0x402d8) returned 0x502da
[0172.126] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502da, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0172.126] SendMessageW (hWnd=0x402d8, Msg=0x2210, wParam=0x2d80001, lParam=0x402d8) returned 0x0
[0172.126] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x2210, wParam=0x2d80001, lParam=0x402d8) returned 0x0
[0172.126] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0172.127] GetParent (hWnd=0x402d8) returned 0x502da
[0172.127] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0172.127] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.128] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0172.129] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x502da, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x502d6
[0172.130] SetWindowLongW (hWnd=0x502d6, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0172.130] GetWindowLongW (hWnd=0x502d6, nIndex=-4) returned 1868032000
[0172.130] SetWindowLongW (hWnd=0x502d6, nIndex=-4, dwNewLong=79644062) returned 1868032000
[0172.130] GetWindowLongW (hWnd=0x502d6, nIndex=-4) returned 79644062
[0172.130] GetWindowLongW (hWnd=0x502d6, nIndex=-16) returned 1174470667
[0172.130] GetWindowLongW (hWnd=0x502d6, nIndex=-12) returned 0
[0172.130] SetWindowLongW (hWnd=0x502d6, nIndex=-12, dwNewLong=328406) returned 0
[0172.131] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0172.131] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0172.132] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0172.133] SendMessageW (hWnd=0x502d6, Msg=0x2055, wParam=0x502d6, lParam=0x3) returned 0x2
[0172.133] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0172.133] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0172.133] GetWindow (hWnd=0x502d6, uCmd=0x3) returned 0x402d8
[0172.133] GetClientRect (in: hWnd=0x502d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0172.133] GetWindowRect (in: hWnd=0x502d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0172.133] GetParent (hWnd=0x502d6) returned 0x502da
[0172.133] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502da, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0172.133] SetWindowTextW (hWnd=0x502d6, lpString="Cancel") returned 1
[0172.133] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0xc, wParam=0x0, lParam=0x239b4d8) returned 0x1
[0172.134] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0172.134] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0172.134] GetClientRect (in: hWnd=0x502d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0172.134] GetWindowRect (in: hWnd=0x502d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0172.134] GetParent (hWnd=0x502d6) returned 0x502da
[0172.134] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502da, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0172.134] SendMessageW (hWnd=0x502d6, Msg=0x2210, wParam=0x2d60001, lParam=0x502d6) returned 0x0
[0172.134] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0x2210, wParam=0x2d60001, lParam=0x502d6) returned 0x0
[0172.134] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0172.135] GetParent (hWnd=0x502d6) returned 0x502da
[0172.135] GetDC (hWnd=0x0) returned 0x60100ce
[0172.135] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e320) returned 0x0
[0172.135] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5da0378, height=0x53e318) returned 0x0
[0172.135] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0172.136] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0172.136] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0172.137] GdipMeasureString (graphics=0x5da0378, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0172.137] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0172.138] GetWindowLongW (hWnd=0x502da, nIndex=-8) returned 458806
[0172.138] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0172.138] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0172.138] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xb30107aa
[0172.138] GetDeviceCaps (hdc=0xb30107aa, index=12) returned 32
[0172.138] GetDeviceCaps (hdc=0xb30107aa, index=14) returned 1
[0172.138] DeleteDC (hdc=0xb30107aa) returned 1
[0172.138] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0172.138] GetWindowThreadProcessId (in: hWnd=0x502da, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0172.138] GetCurrentThreadId () returned 0x11d0
[0172.139] PostMessageW (hWnd=0x502da, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0172.139] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.139] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.139] GetSystemMetrics (nIndex=42) returned 0
[0172.139] GetWindowTextW (in: hWnd=0x502da, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.139] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0172.139] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0172.139] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0172.140] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0172.140] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0172.154] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x502da) returned 0x1
[0172.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0172.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0172.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0172.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0172.168] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0172.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0172.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0172.170] GetFocus () returned 0x202c6
[0172.170] IsChild (hWndParent=0x502da, hWnd=0x202c6) returned 0
[0172.170] GetFocus () returned 0x202c6
[0172.170] SetFocus (hWnd=0x502d2) returned 0x202c6
[0172.172] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x502d2, lParam=0x0) returned 0x0
[0172.172] GetCapture () returned 0x0
[0172.172] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0172.173] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0172.175] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0172.177] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0172.177] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0172.177] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0172.177] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0172.178] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0172.178] GetParent (hWnd=0x502da) returned 0x0
[0172.178] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0172.179] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0172.179] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0172.180] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0172.180] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0172.180] GetSysColorBrush (nIndex=5) returned 0x100079
[0172.181] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0172.181] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0172.182] SendMessageW (hWnd=0x502d2, Msg=0x2111, wParam=0x10002d2, lParam=0x502d2) returned 0x0
[0172.183] SendMessageW (hWnd=0x502d2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0172.183] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0172.183] GetKeyState (nVirtKey=1) returned 0
[0172.183] GetKeyState (nVirtKey=2) returned 0
[0172.183] GetKeyState (nVirtKey=4) returned 0
[0172.183] GetKeyState (nVirtKey=5) returned 0
[0172.183] GetKeyState (nVirtKey=6) returned 0
[0172.183] GetWindowTextLengthW (hWnd=0x502d2) returned 0
[0172.183] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0172.183] SendMessageW (hWnd=0x502d2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0172.183] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0172.183] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0172.183] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0172.189] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0172.202] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0172.202] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0172.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0172.203] GetWindowPlacement (in: hWnd=0x502da, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0172.203] GetClientRect (in: hWnd=0x502da, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0172.203] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.203] GetSystemMetrics (nIndex=42) returned 0
[0172.203] GetWindowTextW (in: hWnd=0x502da, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0172.204] GetClientRect (in: hWnd=0x502da, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0172.204] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0172.204] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0172.204] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x790507a2
[0172.204] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0172.204] SaveDC (hdc=0x10105d6) returned 1
[0172.204] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0172.204] CreateSolidBrush (color=0xf0f0f0) returned 0x9b10078d
[0172.204] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0x9b10078d) returned 1
[0172.204] DeleteObject (ho=0x9b10078d) returned 1
[0172.204] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0172.205] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0172.205] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0172.205] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0172.209] GetWindowPlacement (in: hWnd=0x502da, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0172.209] GetClientRect (in: hWnd=0x502da, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0172.209] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.209] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.209] GetSystemMetrics (nIndex=42) returned 0
[0172.209] GetWindowTextW (in: hWnd=0x502da, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.209] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0172.210] GetClientRect (in: hWnd=0x502da, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0172.210] GetCurrentObject (hdc=0xc90107aa, type=0x1) returned 0xb00017
[0172.210] GetCurrentObject (hdc=0xc90107aa, type=0x2) returned 0x900010
[0172.210] GetCurrentObject (hdc=0xc90107aa, type=0x7) returned 0x1a0507ce
[0172.210] GetCurrentObject (hdc=0xc90107aa, type=0x6) returned 0x8a01c2
[0172.210] SaveDC (hdc=0xc90107aa) returned 1
[0172.210] GetNearestColor (hdc=0xc90107aa, color=0xf0f0f0) returned 0xf0f0f0
[0172.210] CreateSolidBrush (color=0xf0f0f0) returned 0x9c10078d
[0172.210] FillRect (hDC=0xc90107aa, lprc=0x53dc18, hbr=0x9c10078d) returned 1
[0172.210] DeleteObject (ho=0x9c10078d) returned 1
[0172.210] RestoreDC (hdc=0xc90107aa, nSavedDC=-1) returned 1
[0172.211] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.211] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.211] GetSystemMetrics (nIndex=42) returned 0
[0172.211] GetWindowTextW (in: hWnd=0x502da, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.211] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0172.211] GetClientRect (in: hWnd=0x502da, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0172.211] GetCurrentObject (hdc=0xc90107aa, type=0x1) returned 0xb00017
[0172.211] GetCurrentObject (hdc=0xc90107aa, type=0x2) returned 0x900010
[0172.211] GetCurrentObject (hdc=0xc90107aa, type=0x7) returned 0x1a0507ce
[0172.211] GetCurrentObject (hdc=0xc90107aa, type=0x6) returned 0x8a01c2
[0172.211] SaveDC (hdc=0xc90107aa) returned 1
[0172.212] GetNearestColor (hdc=0xc90107aa, color=0xf0f0f0) returned 0xf0f0f0
[0172.212] CreateSolidBrush (color=0xf0f0f0) returned 0x9d10078d
[0172.212] FillRect (hDC=0xc90107aa, lprc=0x53dbb8, hbr=0x9d10078d) returned 1
[0172.212] DeleteObject (ho=0x9d10078d) returned 1
[0172.212] RestoreDC (hdc=0xc90107aa, nSavedDC=-1) returned 1
[0172.212] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.212] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.212] GetSystemMetrics (nIndex=42) returned 0
[0172.212] GetWindowTextW (in: hWnd=0x502da, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.212] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0172.213] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0172.213] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0172.214] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0172.214] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0172.214] GetStockObject (i=5) returned 0x900015
[0172.214] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0172.215] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0172.215] GetStockObject (i=5) returned 0x900015
[0172.215] GetWindowPlacement (in: hWnd=0x502da, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0172.215] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0172.215] GetClientRect (in: hWnd=0x502da, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0172.215] GetWindowRect (in: hWnd=0x502da, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0172.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0172.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0172.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0172.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0172.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0172.218] GetClientRect (in: hWnd=0x502da, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0172.218] GetWindowRect (in: hWnd=0x502da, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0172.218] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.218] IsWindowUnicode (hWnd=0x502da) returned 1
[0172.218] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.218] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.218] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0172.219] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.219] IsWindowUnicode (hWnd=0x502da) returned 1
[0172.219] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.219] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.219] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.219] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.220] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x84, wParam=0x0, lParam=0x194034f) returned 0x1
[0172.220] IsWindowUnicode (hWnd=0x402d8) returned 1
[0172.220] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.220] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.220] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.220] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.220] IsWindowUnicode (hWnd=0x202c6) returned 1
[0172.220] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.220] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.221] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.221] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0172.221] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0172.221] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.221] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x84, wParam=0x0, lParam=0x194034f) returned 0x1
[0172.221] IsWindowUnicode (hWnd=0x402d8) returned 1
[0172.221] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.221] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x84, wParam=0x0, lParam=0x194034f) returned 0x1
[0172.221] SetCursor (hCursor=0x10003) returned 0x10003
[0172.253] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.253] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.253] _TrackMouseEvent (in: lpEventTrack=0x23a1e6c | out: lpEventTrack=0x23a1e6c) returned 1
[0172.254] SendMessageW (hWnd=0x402d8, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0172.254] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0172.254] InvalidateRect (hWnd=0x402d8, lpRect=0x0, bErase=0) returned 1
[0172.254] GetKeyState (nVirtKey=1) returned 0
[0172.254] GetKeyState (nVirtKey=2) returned 0
[0172.254] GetKeyState (nVirtKey=4) returned 0
[0172.254] GetKeyState (nVirtKey=5) returned 0
[0172.254] GetKeyState (nVirtKey=6) returned 0
[0172.254] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.255] IsWindowUnicode (hWnd=0x502da) returned 1
[0172.255] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.255] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.255] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.255] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.256] IsWindowUnicode (hWnd=0x502da) returned 1
[0172.256] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.257] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.257] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.257] BeginPaint (in: hWnd=0x502da, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x8b010786
[0172.257] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0172.257] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.257] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.257] GetSystemMetrics (nIndex=42) returned 0
[0172.257] GetWindowTextW (in: hWnd=0x502da, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.257] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0172.257] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0172.257] EndPaint (hWnd=0x502da, lpPaint=0x53e30c) returned 1
[0172.258] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.258] IsWindowUnicode (hWnd=0x502d2) returned 1
[0172.258] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.258] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.258] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0172.258] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0172.259] SetTextColor (hdc=0xca0107aa, color=0x0) returned 0x0
[0172.259] SetBkColor (hdc=0xca0107aa, color=0xffffff) returned 0xffffff
[0172.260] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.260] IsWindowUnicode (hWnd=0x502c8) returned 1
[0172.260] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.260] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.260] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.260] BeginPaint (in: hWnd=0x502c8, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0xf0105ee
[0172.260] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0172.260] CreateCompatibleDC (hdc=0xf0105ee) returned 0xa10107b1
[0172.260] SelectObject (hdc=0xa10107b1, h=0x1e0507b9) returned 0x85000f
[0172.260] GdipCreateFromHDC (hdc=0xa10107b1, graphics=0x53e30c) returned 0x0
[0172.261] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0172.261] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0172.261] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0172.261] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0172.261] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0172.261] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.261] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0172.261] LocalFree (hMem=0x89ea88) returned 0x0
[0172.261] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0172.261] GdipCreateRegion (region=0x53e354) returned 0x0
[0172.261] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.261] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e360) returned 0x0
[0172.261] GdipSaveGraphics (graphics=0x5da0378, state=0x53e38c) returned 0x0
[0172.261] GetWindowTextLengthW (hWnd=0x502c8) returned 16
[0172.262] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0172.262] GetSystemMetrics (nIndex=42) returned 0
[0172.262] GetWindowTextW (in: hWnd=0x502c8, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0172.262] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0172.262] GetClientRect (in: hWnd=0x502c8, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0172.262] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0172.262] GdipGetClip (graphics=0x5da0378, region=0x5d9d988) returned 0x0
[0172.262] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0172.262] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0172.262] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e1c0) returned 0x0
[0172.262] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.262] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0172.262] LocalFree (hMem=0x89ea88) returned 0x0
[0172.262] GdipCombineRegionRegion (region=0x5d9d988, region2=0x5d9d8f8, combineMode=0x1) returned 0x0
[0172.262] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.262] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0172.262] LocalFree (hMem=0x89ea88) returned 0x0
[0172.263] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0172.263] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e1e8) returned 0x0
[0172.263] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e1d8) returned 0x0
[0172.263] GdipGetRegionHRgn (region=0x5d9d988, graphics=0x5da0378, hRgn=0x53e1d8) returned 0x0
[0172.263] GdipDeleteRegion (region=0x5d9d988) returned 0x0
[0172.263] GdipGetDC (graphics=0x5da0378, hdc=0x53e1f0) returned 0x0
[0172.263] GetCurrentObject (hdc=0xa10107b1, type=0x1) returned 0xb00017
[0172.263] GetCurrentObject (hdc=0xa10107b1, type=0x2) returned 0x900010
[0172.263] GetCurrentObject (hdc=0xa10107b1, type=0x7) returned 0x1e0507b9
[0172.263] GetCurrentObject (hdc=0xa10107b1, type=0x6) returned 0x8a01c2
[0172.263] SaveDC (hdc=0xa10107b1) returned 1
[0172.263] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa304051e
[0172.263] GetClipRgn (hdc=0xa10107b1, hrgn=0xa304051e) returned 0
[0172.263] SelectClipRgn (hdc=0xa10107b1, hrgn=0xc0040798) returned 2
[0172.264] DeleteObject (ho=0xa304051e) returned 1
[0172.264] DeleteObject (ho=0xc0040798) returned 1
[0172.264] OffsetViewportOrgEx (in: hdc=0xa10107b1, x=0, y=0, lppt=0x23a2374 | out: lppt=0x23a2374) returned 1
[0172.264] GetNearestColor (hdc=0xa10107b1, color=0xf0f0f0) returned 0xf0f0f0
[0172.264] CreateSolidBrush (color=0xf0f0f0) returned 0x9e10078d
[0172.264] FillRect (hDC=0xa10107b1, lprc=0x53e1f4, hbr=0x9e10078d) returned 1
[0172.264] DeleteObject (ho=0x9e10078d) returned 1
[0172.264] RestoreDC (hdc=0xa10107b1, nSavedDC=-1) returned 1
[0172.264] GdipReleaseDC (graphics=0x5da0378, hdc=0xa10107b1) returned 0x0
[0172.264] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd710dbd) returned 0x0
[0172.264] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.264] GetWindowTextLengthW (hWnd=0x502c8) returned 16
[0172.264] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0172.264] GetSystemMetrics (nIndex=42) returned 0
[0172.265] GetWindowTextW (in: hWnd=0x502c8, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0172.265] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0172.265] GdipGetDC (graphics=0x5da0378, hdc=0x53e210) returned 0x0
[0172.265] GetCurrentObject (hdc=0xa10107b1, type=0x1) returned 0xb00017
[0172.265] GetCurrentObject (hdc=0xa10107b1, type=0x2) returned 0x900010
[0172.265] GetCurrentObject (hdc=0xa10107b1, type=0x7) returned 0x1e0507b9
[0172.265] GetCurrentObject (hdc=0xa10107b1, type=0x6) returned 0x8a01c2
[0172.265] SaveDC (hdc=0xa10107b1) returned 1
[0172.265] GetNearestColor (hdc=0xa10107b1, color=0x0) returned 0x0
[0172.265] RestoreDC (hdc=0xa10107b1, nSavedDC=-1) returned 1
[0172.265] GdipReleaseDC (graphics=0x5da0378, hdc=0xa10107b1) returned 0x0
[0172.266] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0172.266] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0172.266] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0172.266] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x23a267c | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0172.267] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e1b0) returned 0x0
[0172.267] GdipGetDC (graphics=0x5da0378, hdc=0x53e19c) returned 0x0
[0172.267] GetCurrentObject (hdc=0xa10107b1, type=0x1) returned 0xb00017
[0172.267] GetCurrentObject (hdc=0xa10107b1, type=0x2) returned 0x900010
[0172.267] GetCurrentObject (hdc=0xa10107b1, type=0x7) returned 0x1e0507b9
[0172.267] GetCurrentObject (hdc=0xa10107b1, type=0x6) returned 0x8a01c2
[0172.267] SaveDC (hdc=0xa10107b1) returned 1
[0172.267] GetTextAlign (hdc=0xa10107b1) returned 0x0
[0172.267] GetTextColor (hdc=0xa10107b1) returned 0x0
[0172.267] GetCurrentObject (hdc=0xa10107b1, type=0x6) returned 0x8a01c2
[0172.267] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0172.267] SelectObject (hdc=0xa10107b1, h=0x730a066d) returned 0x8a01c2
[0172.267] GetBkMode (hdc=0xa10107b1) returned 2
[0172.267] SetBkMode (hdc=0xa10107b1, mode=1) returned 2
[0172.268] DrawTextExW (in: hdc=0xa10107b1, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x23a28a0 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0172.268] RestoreDC (hdc=0xa10107b1, nSavedDC=-1) returned 1
[0172.268] GdipReleaseDC (graphics=0x5da0378, hdc=0xa10107b1) returned 0x0
[0172.268] GdipGetDC (graphics=0x5da0378, hdc=0x53e34c) returned 0x0
[0172.268] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=250, cy=70, hdcSrc=0xa10107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0172.272] GdipReleaseDC (graphics=0x5da0378, hdc=0xa10107b1) returned 0x0
[0172.272] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0172.273] SelectObject (hdc=0xa10107b1, h=0x85000f) returned 0x1e0507b9
[0172.273] DeleteDC (hdc=0xa10107b1) returned 1
[0172.273] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0172.273] EndPaint (hWnd=0x502c8, lpPaint=0x53e2f0) returned 1
[0172.273] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.273] IsWindowUnicode (hWnd=0x402d8) returned 1
[0172.273] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.273] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.273] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.273] BeginPaint (in: hWnd=0x402d8, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0172.273] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0172.274] CreateCompatibleDC (hdc=0x60100ce) returned 0xa30107b1
[0172.274] SelectObject (hdc=0xa30107b1, h=0x1e0507b9) returned 0x85000f
[0172.274] GdipCreateFromHDC (hdc=0xa30107b1, graphics=0x53e300) returned 0x0
[0172.274] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0172.274] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0172.274] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0172.274] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0172.274] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e360) returned 0x0
[0172.274] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.274] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0172.274] LocalFree (hMem=0x89ea88) returned 0x0
[0172.274] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0172.274] GdipCreateRegion (region=0x53e348) returned 0x0
[0172.275] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.275] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e354) returned 0x0
[0172.275] GdipSaveGraphics (graphics=0x5da0378, state=0x53e380) returned 0x0
[0172.275] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd6f0dbd) returned 0x0
[0172.275] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.275] GdipGetDC (graphics=0x5da0378, hdc=0x53e160) returned 0x0
[0172.275] GetCurrentObject (hdc=0xa30107b1, type=0x1) returned 0xb00017
[0172.275] GetCurrentObject (hdc=0xa30107b1, type=0x2) returned 0x900010
[0172.276] GetCurrentObject (hdc=0xa30107b1, type=0x7) returned 0x1e0507b9
[0172.276] GetCurrentObject (hdc=0xa30107b1, type=0x6) returned 0x8a01c2
[0172.276] SaveDC (hdc=0xa30107b1) returned 1
[0172.276] GetNearestColor (hdc=0xa30107b1, color=0xf0f0f0) returned 0xf0f0f0
[0172.276] GetNearestColor (hdc=0xa30107b1, color=0xa0a0a0) returned 0xa0a0a0
[0172.276] GetNearestColor (hdc=0xa30107b1, color=0x696969) returned 0x696969
[0172.276] GetNearestColor (hdc=0xa30107b1, color=0xa0a0a0) returned 0xa0a0a0
[0172.276] GetNearestColor (hdc=0xa30107b1, color=0x0) returned 0x0
[0172.276] GetNearestColor (hdc=0xa30107b1, color=0xffffff) returned 0xffffff
[0172.276] GetNearestColor (hdc=0xa30107b1, color=0xe5e5e5) returned 0xe5e5e5
[0172.276] GetNearestColor (hdc=0xa30107b1, color=0xd7d7d7) returned 0xd7d7d7
[0172.277] GetNearestColor (hdc=0xa30107b1, color=0x0) returned 0x0
[0172.277] RestoreDC (hdc=0xa30107b1, nSavedDC=-1) returned 1
[0172.277] GdipReleaseDC (graphics=0x5da0378, hdc=0xa30107b1) returned 0x0
[0172.277] IsAppThemed () returned 0x1
[0172.277] GetThemeAppProperties () returned 0x3
[0172.277] GetThemeAppProperties () returned 0x3
[0172.277] IsAppThemed () returned 0x1
[0172.277] GetThemeAppProperties () returned 0x3
[0172.277] GetThemeAppProperties () returned 0x3
[0172.277] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x23a300c | out: lpchText="OK", lprc=0x53e01c) returned 13
[0172.277] IsAppThemed () returned 0x1
[0172.277] GetThemeAppProperties () returned 0x3
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] IsAppThemed () returned 0x1
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] IsAppThemed () returned 0x1
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] IsAppThemed () returned 0x1
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] IsThemePartDefined () returned 0x1
[0172.278] IsAppThemed () returned 0x1
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0172.278] IsAppThemed () returned 0x1
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] IsAppThemed () returned 0x1
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] GetThemeAppProperties () returned 0x3
[0172.278] IsThemePartDefined () returned 0x1
[0172.279] GdipCreateRegion (region=0x53e064) returned 0x0
[0172.279] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.279] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0172.279] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0172.279] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e07c) returned 0x0
[0172.279] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.279] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0172.279] LocalFree (hMem=0x89ea88) returned 0x0
[0172.279] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.279] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0172.279] LocalFree (hMem=0x89ea88) returned 0x0
[0172.279] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0172.279] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0a4) returned 0x0
[0172.279] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e094) returned 0x0
[0172.279] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e094) returned 0x0
[0172.280] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.280] GdipGetDC (graphics=0x5da0378, hdc=0x53e0ac) returned 0x0
[0172.280] GetCurrentObject (hdc=0xa30107b1, type=0x1) returned 0xb00017
[0172.280] GetCurrentObject (hdc=0xa30107b1, type=0x2) returned 0x900010
[0172.280] GetCurrentObject (hdc=0xa30107b1, type=0x7) returned 0x1e0507b9
[0172.280] GetCurrentObject (hdc=0xa30107b1, type=0x6) returned 0x8a01c2
[0172.280] SaveDC (hdc=0xa30107b1) returned 1
[0172.280] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc1040798
[0172.280] GetClipRgn (hdc=0xa30107b1, hrgn=0xc1040798) returned 0
[0172.280] SelectClipRgn (hdc=0xa30107b1, hrgn=0xa704051e) returned 2
[0172.280] DeleteObject (ho=0xc1040798) returned 1
[0172.280] DeleteObject (ho=0xa704051e) returned 1
[0172.280] OffsetViewportOrgEx (in: hdc=0xa30107b1, x=0, y=0, lppt=0x23a36bc | out: lppt=0x23a36bc) returned 1
[0172.280] DrawThemeParentBackground () returned 0x0
[0172.281] GetWindowPlacement (in: hWnd=0x502da, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0172.281] GetClientRect (in: hWnd=0x502da, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0172.281] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.281] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.281] GetSystemMetrics (nIndex=42) returned 0
[0172.281] GetWindowTextW (in: hWnd=0x502da, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.281] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0172.281] GetClientRect (in: hWnd=0x502da, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0172.281] GetCurrentObject (hdc=0xa30107b1, type=0x1) returned 0xb00017
[0172.281] GetCurrentObject (hdc=0xa30107b1, type=0x2) returned 0x900010
[0172.281] GetCurrentObject (hdc=0xa30107b1, type=0x7) returned 0x1e0507b9
[0172.281] GetCurrentObject (hdc=0xa30107b1, type=0x6) returned 0x8a01c2
[0172.281] SaveDC (hdc=0xa30107b1) returned 2
[0172.281] GetNearestColor (hdc=0xa30107b1, color=0xf0f0f0) returned 0xf0f0f0
[0172.281] CreateSolidBrush (color=0xf0f0f0) returned 0x9f10078d
[0172.282] FillRect (hDC=0xa30107b1, lprc=0x53dac8, hbr=0x9f10078d) returned 1
[0172.282] DeleteObject (ho=0x9f10078d) returned 1
[0172.282] RestoreDC (hdc=0xa30107b1, nSavedDC=-1) returned 1
[0172.282] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.282] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.282] GetSystemMetrics (nIndex=42) returned 0
[0172.282] GetWindowTextW (in: hWnd=0x502da, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.282] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0172.282] GetClientRect (in: hWnd=0x502da, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0172.282] GetCurrentObject (hdc=0xa30107b1, type=0x1) returned 0xb00017
[0172.282] GetCurrentObject (hdc=0xa30107b1, type=0x2) returned 0x900010
[0172.282] GetCurrentObject (hdc=0xa30107b1, type=0x7) returned 0x1e0507b9
[0172.282] GetCurrentObject (hdc=0xa30107b1, type=0x6) returned 0x8a01c2
[0172.282] SaveDC (hdc=0xa30107b1) returned 2
[0172.282] GetNearestColor (hdc=0xa30107b1, color=0xf0f0f0) returned 0xf0f0f0
[0172.283] CreateSolidBrush (color=0xf0f0f0) returned 0xa010078d
[0172.283] FillRect (hDC=0xa30107b1, lprc=0x53da68, hbr=0xa010078d) returned 1
[0172.283] DeleteObject (ho=0xa010078d) returned 1
[0172.283] RestoreDC (hdc=0xa30107b1, nSavedDC=-1) returned 1
[0172.283] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.283] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.283] GetSystemMetrics (nIndex=42) returned 0
[0172.283] GetWindowTextW (in: hWnd=0x502da, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.283] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0172.283] RestoreDC (hdc=0xa30107b1, nSavedDC=-1) returned 1
[0172.283] GdipReleaseDC (graphics=0x5da0378, hdc=0xa30107b1) returned 0x0
[0172.283] IsAppThemed () returned 0x1
[0172.283] GetThemeAppProperties () returned 0x3
[0172.283] GetThemeAppProperties () returned 0x3
[0172.284] IsAppThemed () returned 0x1
[0172.284] GetThemeAppProperties () returned 0x3
[0172.284] GetThemeAppProperties () returned 0x3
[0172.284] IsThemePartDefined () returned 0x1
[0172.284] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0172.284] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.284] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0172.284] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0172.284] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e000) returned 0x0
[0172.288] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0172.288] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0172.288] LocalFree (hMem=0x89ee08) returned 0x0
[0172.288] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0172.288] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0172.289] LocalFree (hMem=0x89ee08) returned 0x0
[0172.289] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0172.289] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e028) returned 0x0
[0172.289] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e018) returned 0x0
[0172.289] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e018) returned 0x0
[0172.289] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.289] GdipGetDC (graphics=0x5da0378, hdc=0x53e030) returned 0x0
[0172.289] GetCurrentObject (hdc=0xa30107b1, type=0x1) returned 0xb00017
[0172.289] GetCurrentObject (hdc=0xa30107b1, type=0x2) returned 0x900010
[0172.289] GetCurrentObject (hdc=0xa30107b1, type=0x7) returned 0x1e0507b9
[0172.289] GetCurrentObject (hdc=0xa30107b1, type=0x6) returned 0x8a01c2
[0172.289] SaveDC (hdc=0xa30107b1) returned 1
[0172.289] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa804051e
[0172.289] GetClipRgn (hdc=0xa30107b1, hrgn=0xa804051e) returned 0
[0172.289] SelectClipRgn (hdc=0xa30107b1, hrgn=0xc3040798) returned 2
[0172.289] DeleteObject (ho=0xa804051e) returned 1
[0172.289] DeleteObject (ho=0xc3040798) returned 1
[0172.289] OffsetViewportOrgEx (in: hdc=0xa30107b1, x=0, y=0, lppt=0x23a3f44 | out: lppt=0x23a3f44) returned 1
[0172.290] IsAppThemed () returned 0x1
[0172.290] GetThemeAppProperties () returned 0x3
[0172.290] GetThemeAppProperties () returned 0x3
[0172.290] DrawThemeBackground () returned 0x0
[0172.290] RestoreDC (hdc=0xa30107b1, nSavedDC=-1) returned 1
[0172.290] GdipReleaseDC (graphics=0x5da0378, hdc=0xa30107b1) returned 0x0
[0172.290] GdipCreateRegion (region=0x53dfec) returned 0x0
[0172.290] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.290] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0172.290] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0172.290] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e004) returned 0x0
[0172.290] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0172.290] LocalFree (hMem=0x89ee08) returned 0x0
[0172.290] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0172.290] LocalFree (hMem=0x89ee08) returned 0x0
[0172.290] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0172.291] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e02c) returned 0x0
[0172.291] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e01c) returned 0x0
[0172.291] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e01c) returned 0x0
[0172.291] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.291] GdipGetDC (graphics=0x5da0378, hdc=0x53e034) returned 0x0
[0172.291] GetCurrentObject (hdc=0xa30107b1, type=0x1) returned 0xb00017
[0172.291] GetCurrentObject (hdc=0xa30107b1, type=0x2) returned 0x900010
[0172.291] GetCurrentObject (hdc=0xa30107b1, type=0x7) returned 0x1e0507b9
[0172.291] GetCurrentObject (hdc=0xa30107b1, type=0x6) returned 0x8a01c2
[0172.291] SaveDC (hdc=0xa30107b1) returned 1
[0172.291] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc4040798
[0172.291] GetClipRgn (hdc=0xa30107b1, hrgn=0xc4040798) returned 0
[0172.291] SelectClipRgn (hdc=0xa30107b1, hrgn=0xa904051e) returned 2
[0172.291] DeleteObject (ho=0xc4040798) returned 1
[0172.291] DeleteObject (ho=0xa904051e) returned 1
[0172.291] OffsetViewportOrgEx (in: hdc=0xa30107b1, x=0, y=0, lppt=0x23a4218 | out: lppt=0x23a4218) returned 1
[0172.291] IsAppThemed () returned 0x1
[0172.292] GetThemeAppProperties () returned 0x3
[0172.292] GetThemeAppProperties () returned 0x3
[0172.292] GetThemeBackgroundContentRect () returned 0x0
[0172.292] RestoreDC (hdc=0xa30107b1, nSavedDC=-1) returned 1
[0172.292] GdipReleaseDC (graphics=0x5da0378, hdc=0xa30107b1) returned 0x0
[0172.292] IsAppThemed () returned 0x1
[0172.292] GetThemeAppProperties () returned 0x3
[0172.292] GetThemeAppProperties () returned 0x3
[0172.292] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e168) returned 0x0
[0172.292] GdipGetDC (graphics=0x5da0378, hdc=0x53e154) returned 0x0
[0172.292] GetCurrentObject (hdc=0xa30107b1, type=0x1) returned 0xb00017
[0172.292] GetCurrentObject (hdc=0xa30107b1, type=0x2) returned 0x900010
[0172.292] GetCurrentObject (hdc=0xa30107b1, type=0x7) returned 0x1e0507b9
[0172.292] GetCurrentObject (hdc=0xa30107b1, type=0x6) returned 0x8a01c2
[0172.292] SaveDC (hdc=0xa30107b1) returned 1
[0172.292] GetTextAlign (hdc=0xa30107b1) returned 0x0
[0172.292] GetTextColor (hdc=0xa30107b1) returned 0x0
[0172.292] GetCurrentObject (hdc=0xa30107b1, type=0x6) returned 0x8a01c2
[0172.293] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0172.293] SelectObject (hdc=0xa30107b1, h=0x730a066d) returned 0x8a01c2
[0172.293] GetBkMode (hdc=0xa30107b1) returned 2
[0172.293] SetBkMode (hdc=0xa30107b1, mode=1) returned 2
[0172.293] DrawTextExW (in: hdc=0xa30107b1, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x23a45b8 | out: lpchText="OK", lprc=0x53df84) returned 13
[0172.293] DrawTextExW (in: hdc=0xa30107b1, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x23a45b8 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0172.293] RestoreDC (hdc=0xa30107b1, nSavedDC=-1) returned 1
[0172.294] GdipReleaseDC (graphics=0x5da0378, hdc=0xa30107b1) returned 0x0
[0172.294] GetFocus () returned 0x502d2
[0172.294] IsAppThemed () returned 0x1
[0172.294] GetThemeAppProperties () returned 0x3
[0172.294] GetThemeAppProperties () returned 0x3
[0172.294] GdipGetDC (graphics=0x5da0378, hdc=0x53e340) returned 0x0
[0172.294] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0xa30107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0172.294] GdipReleaseDC (graphics=0x5da0378, hdc=0xa30107b1) returned 0x0
[0172.294] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0172.294] SelectObject (hdc=0xa30107b1, h=0x85000f) returned 0x1e0507b9
[0172.294] DeleteDC (hdc=0xa30107b1) returned 1
[0172.294] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0172.294] EndPaint (hWnd=0x402d8, lpPaint=0x53e2e4) returned 1
[0172.295] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.295] IsWindowUnicode (hWnd=0x502d6) returned 1
[0172.295] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.295] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.295] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.295] BeginPaint (in: hWnd=0x502d6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0172.295] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0172.295] CreateCompatibleDC (hdc=0x8b010786) returned 0xa50107b1
[0172.295] SelectObject (hdc=0xa50107b1, h=0x1e0507b9) returned 0x85000f
[0172.295] GdipCreateFromHDC (hdc=0xa50107b1, graphics=0x53e300) returned 0x0
[0172.296] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0172.296] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0172.296] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0172.296] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0172.296] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e360) returned 0x0
[0172.296] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0172.296] LocalFree (hMem=0x89ee08) returned 0x0
[0172.296] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0172.296] GdipCreateRegion (region=0x53e348) returned 0x0
[0172.296] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.296] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e354) returned 0x0
[0172.296] GdipSaveGraphics (graphics=0x5da0378, state=0x53e380) returned 0x0
[0172.296] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd6d0dbd) returned 0x0
[0172.296] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.296] GdipGetDC (graphics=0x5da0378, hdc=0x53e16c) returned 0x0
[0172.296] GetCurrentObject (hdc=0xa50107b1, type=0x1) returned 0xb00017
[0172.296] GetCurrentObject (hdc=0xa50107b1, type=0x2) returned 0x900010
[0172.296] GetCurrentObject (hdc=0xa50107b1, type=0x7) returned 0x1e0507b9
[0172.296] GetCurrentObject (hdc=0xa50107b1, type=0x6) returned 0x8a01c2
[0172.297] SaveDC (hdc=0xa50107b1) returned 1
[0172.297] GetNearestColor (hdc=0xa50107b1, color=0xf0f0f0) returned 0xf0f0f0
[0172.297] GetNearestColor (hdc=0xa50107b1, color=0xa0a0a0) returned 0xa0a0a0
[0172.297] GetNearestColor (hdc=0xa50107b1, color=0x696969) returned 0x696969
[0172.297] GetNearestColor (hdc=0xa50107b1, color=0xa0a0a0) returned 0xa0a0a0
[0172.297] GetNearestColor (hdc=0xa50107b1, color=0x0) returned 0x0
[0172.297] GetNearestColor (hdc=0xa50107b1, color=0xffffff) returned 0xffffff
[0172.297] GetNearestColor (hdc=0xa50107b1, color=0xe5e5e5) returned 0xe5e5e5
[0172.297] GetNearestColor (hdc=0xa50107b1, color=0xd7d7d7) returned 0xd7d7d7
[0172.297] GetNearestColor (hdc=0xa50107b1, color=0x0) returned 0x0
[0172.297] RestoreDC (hdc=0xa50107b1, nSavedDC=-1) returned 1
[0172.297] GdipReleaseDC (graphics=0x5da0378, hdc=0xa50107b1) returned 0x0
[0172.298] IsAppThemed () returned 0x1
[0172.298] GetThemeAppProperties () returned 0x3
[0172.298] GetThemeAppProperties () returned 0x3
[0172.298] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0172.298] SendMessageW (hWnd=0x502da, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0172.298] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0172.298] IsAppThemed () returned 0x1
[0172.298] GetThemeAppProperties () returned 0x3
[0172.298] GetThemeAppProperties () returned 0x3
[0172.298] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x23a4dc8 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0172.298] IsAppThemed () returned 0x1
[0172.298] GetThemeAppProperties () returned 0x3
[0172.298] GetThemeAppProperties () returned 0x3
[0172.299] IsAppThemed () returned 0x1
[0172.299] GetThemeAppProperties () returned 0x3
[0172.299] GetThemeAppProperties () returned 0x3
[0172.299] GetFocus () returned 0x502d2
[0172.299] IsAppThemed () returned 0x1
[0172.299] GetThemeAppProperties () returned 0x3
[0172.299] GetThemeAppProperties () returned 0x3
[0172.299] IsAppThemed () returned 0x1
[0172.299] GetThemeAppProperties () returned 0x3
[0172.299] GetThemeAppProperties () returned 0x3
[0172.299] IsThemePartDefined () returned 0x1
[0172.299] IsAppThemed () returned 0x1
[0172.299] GetThemeAppProperties () returned 0x3
[0172.299] GetThemeAppProperties () returned 0x3
[0172.299] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0172.299] IsAppThemed () returned 0x1
[0172.299] GetThemeAppProperties () returned 0x3
[0172.299] GetThemeAppProperties () returned 0x3
[0172.299] IsAppThemed () returned 0x1
[0172.299] GetThemeAppProperties () returned 0x3
[0172.299] GetThemeAppProperties () returned 0x3
[0172.300] IsThemePartDefined () returned 0x1
[0172.300] GdipCreateRegion (region=0x53e070) returned 0x0
[0172.304] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.304] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0172.304] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0172.304] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e088) returned 0x0
[0172.304] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0172.304] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0172.304] LocalFree (hMem=0x89ee08) returned 0x0
[0172.304] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.304] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0172.304] LocalFree (hMem=0x89ea88) returned 0x0
[0172.304] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0172.304] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0b0) returned 0x0
[0172.304] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0a0) returned 0x0
[0172.305] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e0a0) returned 0x0
[0172.305] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.305] GdipGetDC (graphics=0x5da0378, hdc=0x53e0b8) returned 0x0
[0172.305] GetCurrentObject (hdc=0xa50107b1, type=0x1) returned 0xb00017
[0172.305] GetCurrentObject (hdc=0xa50107b1, type=0x2) returned 0x900010
[0172.305] GetCurrentObject (hdc=0xa50107b1, type=0x7) returned 0x1e0507b9
[0172.305] GetCurrentObject (hdc=0xa50107b1, type=0x6) returned 0x8a01c2
[0172.305] SaveDC (hdc=0xa50107b1) returned 1
[0172.305] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaa04051e
[0172.305] GetClipRgn (hdc=0xa50107b1, hrgn=0xaa04051e) returned 0
[0172.305] SelectClipRgn (hdc=0xa50107b1, hrgn=0xc8040798) returned 2
[0172.305] DeleteObject (ho=0xaa04051e) returned 1
[0172.305] DeleteObject (ho=0xc8040798) returned 1
[0172.305] OffsetViewportOrgEx (in: hdc=0xa50107b1, x=0, y=0, lppt=0x23a5478 | out: lppt=0x23a5478) returned 1
[0172.305] DrawThemeParentBackground () returned 0x0
[0172.306] GetWindowPlacement (in: hWnd=0x502da, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0172.306] GetClientRect (in: hWnd=0x502da, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0172.306] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.306] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.306] GetSystemMetrics (nIndex=42) returned 0
[0172.306] GetWindowTextW (in: hWnd=0x502da, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.306] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0172.306] GetClientRect (in: hWnd=0x502da, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0172.306] GetCurrentObject (hdc=0xa50107b1, type=0x1) returned 0xb00017
[0172.306] GetCurrentObject (hdc=0xa50107b1, type=0x2) returned 0x900010
[0172.306] GetCurrentObject (hdc=0xa50107b1, type=0x7) returned 0x1e0507b9
[0172.306] GetCurrentObject (hdc=0xa50107b1, type=0x6) returned 0x8a01c2
[0172.306] SaveDC (hdc=0xa50107b1) returned 2
[0172.306] GetNearestColor (hdc=0xa50107b1, color=0xf0f0f0) returned 0xf0f0f0
[0172.307] CreateSolidBrush (color=0xf0f0f0) returned 0xa110078d
[0172.307] FillRect (hDC=0xa50107b1, lprc=0x53dad0, hbr=0xa110078d) returned 1
[0172.307] DeleteObject (ho=0xa110078d) returned 1
[0172.307] RestoreDC (hdc=0xa50107b1, nSavedDC=-1) returned 1
[0172.307] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.307] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.307] GetSystemMetrics (nIndex=42) returned 0
[0172.307] GetWindowTextW (in: hWnd=0x502da, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.307] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0172.307] GetClientRect (in: hWnd=0x502da, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0172.307] GetCurrentObject (hdc=0xa50107b1, type=0x1) returned 0xb00017
[0172.307] GetCurrentObject (hdc=0xa50107b1, type=0x2) returned 0x900010
[0172.307] GetCurrentObject (hdc=0xa50107b1, type=0x7) returned 0x1e0507b9
[0172.307] GetCurrentObject (hdc=0xa50107b1, type=0x6) returned 0x8a01c2
[0172.307] SaveDC (hdc=0xa50107b1) returned 2
[0172.308] GetNearestColor (hdc=0xa50107b1, color=0xf0f0f0) returned 0xf0f0f0
[0172.308] CreateSolidBrush (color=0xf0f0f0) returned 0xa210078d
[0172.308] FillRect (hDC=0xa50107b1, lprc=0x53da70, hbr=0xa210078d) returned 1
[0172.308] DeleteObject (ho=0xa210078d) returned 1
[0172.308] RestoreDC (hdc=0xa50107b1, nSavedDC=-1) returned 1
[0172.308] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.308] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.308] GetSystemMetrics (nIndex=42) returned 0
[0172.308] GetWindowTextW (in: hWnd=0x502da, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.308] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0172.308] RestoreDC (hdc=0xa50107b1, nSavedDC=-1) returned 1
[0172.308] GdipReleaseDC (graphics=0x5da0378, hdc=0xa50107b1) returned 0x0
[0172.308] IsAppThemed () returned 0x1
[0172.309] GetThemeAppProperties () returned 0x3
[0172.309] GetThemeAppProperties () returned 0x3
[0172.309] IsAppThemed () returned 0x1
[0172.309] GetThemeAppProperties () returned 0x3
[0172.309] GetThemeAppProperties () returned 0x3
[0172.309] IsThemePartDefined () returned 0x1
[0172.309] GdipCreateRegion (region=0x53dff4) returned 0x0
[0172.309] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.309] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0172.309] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0172.309] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e00c) returned 0x0
[0172.309] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0172.309] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0172.309] LocalFree (hMem=0x89eee8) returned 0x0
[0172.309] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.309] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0172.309] LocalFree (hMem=0x89ea88) returned 0x0
[0172.309] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0172.310] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e034) returned 0x0
[0172.310] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e024) returned 0x0
[0172.310] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e024) returned 0x0
[0172.310] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.310] GdipGetDC (graphics=0x5da0378, hdc=0x53e03c) returned 0x0
[0172.310] GetCurrentObject (hdc=0xa50107b1, type=0x1) returned 0xb00017
[0172.310] GetCurrentObject (hdc=0xa50107b1, type=0x2) returned 0x900010
[0172.310] GetCurrentObject (hdc=0xa50107b1, type=0x7) returned 0x1e0507b9
[0172.310] GetCurrentObject (hdc=0xa50107b1, type=0x6) returned 0x8a01c2
[0172.310] SaveDC (hdc=0xa50107b1) returned 1
[0172.310] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc9040798
[0172.310] GetClipRgn (hdc=0xa50107b1, hrgn=0xc9040798) returned 0
[0172.310] SelectClipRgn (hdc=0xa50107b1, hrgn=0xac04051e) returned 2
[0172.310] DeleteObject (ho=0xc9040798) returned 1
[0172.310] DeleteObject (ho=0xac04051e) returned 1
[0172.310] OffsetViewportOrgEx (in: hdc=0xa50107b1, x=0, y=0, lppt=0x23a5d00 | out: lppt=0x23a5d00) returned 1
[0172.311] IsAppThemed () returned 0x1
[0172.311] GetThemeAppProperties () returned 0x3
[0172.311] GetThemeAppProperties () returned 0x3
[0172.311] DrawThemeBackground () returned 0x0
[0172.311] RestoreDC (hdc=0xa50107b1, nSavedDC=-1) returned 1
[0172.311] GdipReleaseDC (graphics=0x5da0378, hdc=0xa50107b1) returned 0x0
[0172.311] GdipCreateRegion (region=0x53dff8) returned 0x0
[0172.311] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.311] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0172.311] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0172.311] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e010) returned 0x0
[0172.311] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.311] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0172.311] LocalFree (hMem=0x89ea88) returned 0x0
[0172.311] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.311] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0172.312] LocalFree (hMem=0x89ea88) returned 0x0
[0172.312] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0172.312] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e038) returned 0x0
[0172.312] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e028) returned 0x0
[0172.312] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e028) returned 0x0
[0172.312] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.312] GdipGetDC (graphics=0x5da0378, hdc=0x53e040) returned 0x0
[0172.312] GetCurrentObject (hdc=0xa50107b1, type=0x1) returned 0xb00017
[0172.312] GetCurrentObject (hdc=0xa50107b1, type=0x2) returned 0x900010
[0172.312] GetCurrentObject (hdc=0xa50107b1, type=0x7) returned 0x1e0507b9
[0172.312] GetCurrentObject (hdc=0xa50107b1, type=0x6) returned 0x8a01c2
[0172.312] SaveDC (hdc=0xa50107b1) returned 1
[0172.312] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xad04051e
[0172.312] GetClipRgn (hdc=0xa50107b1, hrgn=0xad04051e) returned 0
[0172.312] SelectClipRgn (hdc=0xa50107b1, hrgn=0xca040798) returned 2
[0172.313] DeleteObject (ho=0xad04051e) returned 1
[0172.313] DeleteObject (ho=0xca040798) returned 1
[0172.313] OffsetViewportOrgEx (in: hdc=0xa50107b1, x=0, y=0, lppt=0x23a5fd4 | out: lppt=0x23a5fd4) returned 1
[0172.313] IsAppThemed () returned 0x1
[0172.313] GetThemeAppProperties () returned 0x3
[0172.313] GetThemeAppProperties () returned 0x3
[0172.313] GetThemeBackgroundContentRect () returned 0x0
[0172.313] RestoreDC (hdc=0xa50107b1, nSavedDC=-1) returned 1
[0172.313] GdipReleaseDC (graphics=0x5da0378, hdc=0xa50107b1) returned 0x0
[0172.313] IsAppThemed () returned 0x1
[0172.313] GetThemeAppProperties () returned 0x3
[0172.313] GetThemeAppProperties () returned 0x3
[0172.313] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e174) returned 0x0
[0172.313] GdipGetDC (graphics=0x5da0378, hdc=0x53e160) returned 0x0
[0172.313] GetCurrentObject (hdc=0xa50107b1, type=0x1) returned 0xb00017
[0172.313] GetCurrentObject (hdc=0xa50107b1, type=0x2) returned 0x900010
[0172.313] GetCurrentObject (hdc=0xa50107b1, type=0x7) returned 0x1e0507b9
[0172.313] GetCurrentObject (hdc=0xa50107b1, type=0x6) returned 0x8a01c2
[0172.314] SaveDC (hdc=0xa50107b1) returned 1
[0172.314] GetTextAlign (hdc=0xa50107b1) returned 0x0
[0172.314] GetTextColor (hdc=0xa50107b1) returned 0x0
[0172.314] GetCurrentObject (hdc=0xa50107b1, type=0x6) returned 0x8a01c2
[0172.314] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0172.314] SelectObject (hdc=0xa50107b1, h=0x730a066d) returned 0x8a01c2
[0172.314] GetBkMode (hdc=0xa50107b1) returned 2
[0172.314] SetBkMode (hdc=0xa50107b1, mode=1) returned 2
[0172.314] DrawTextExW (in: hdc=0xa50107b1, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x23a6374 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0172.315] DrawTextExW (in: hdc=0xa50107b1, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x23a6374 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0172.315] RestoreDC (hdc=0xa50107b1, nSavedDC=-1) returned 1
[0172.315] GdipReleaseDC (graphics=0x5da0378, hdc=0xa50107b1) returned 0x0
[0172.315] GetFocus () returned 0x502d2
[0172.315] IsAppThemed () returned 0x1
[0172.315] GetThemeAppProperties () returned 0x3
[0172.315] GetThemeAppProperties () returned 0x3
[0172.319] GdipGetDC (graphics=0x5da0378, hdc=0x53e340) returned 0x0
[0172.319] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0xa50107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0172.320] GdipReleaseDC (graphics=0x5da0378, hdc=0xa50107b1) returned 0x0
[0172.320] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0172.320] SelectObject (hdc=0xa50107b1, h=0x85000f) returned 0x1e0507b9
[0172.320] DeleteDC (hdc=0xa50107b1) returned 1
[0172.320] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0172.320] EndPaint (hWnd=0x502d6, lpPaint=0x53e2e4) returned 1
[0172.320] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.320] IsWindowUnicode (hWnd=0x202c6) returned 1
[0172.320] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.321] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.321] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.321] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0172.321] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0172.321] CreateCompatibleDC (hdc=0x10105d6) returned 0xa70107b1
[0172.321] SelectObject (hdc=0xa70107b1, h=0x1e0507b9) returned 0x85000f
[0172.321] GdipCreateFromHDC (hdc=0xa70107b1, graphics=0x53e300) returned 0x0
[0172.321] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0172.321] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0172.321] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0172.321] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0172.322] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e360) returned 0x0
[0172.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0172.322] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0172.322] LocalFree (hMem=0x89ee08) returned 0x0
[0172.322] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0172.322] GdipCreateRegion (region=0x53e348) returned 0x0
[0172.322] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.322] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e354) returned 0x0
[0172.322] GdipSaveGraphics (graphics=0x5da0378, state=0x53e380) returned 0x0
[0172.322] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd6b0dbd) returned 0x0
[0172.322] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.322] GdipGetDC (graphics=0x5da0378, hdc=0x53e16c) returned 0x0
[0172.322] GetCurrentObject (hdc=0xa70107b1, type=0x1) returned 0xb00017
[0172.322] GetCurrentObject (hdc=0xa70107b1, type=0x2) returned 0x900010
[0172.322] GetCurrentObject (hdc=0xa70107b1, type=0x7) returned 0x1e0507b9
[0172.322] GetCurrentObject (hdc=0xa70107b1, type=0x6) returned 0x8a01c2
[0172.323] SaveDC (hdc=0xa70107b1) returned 1
[0172.323] GetNearestColor (hdc=0xa70107b1, color=0xff) returned 0xff
[0172.323] GetNearestColor (hdc=0xa70107b1, color=0x55) returned 0x55
[0172.323] GetNearestColor (hdc=0xa70107b1, color=0x0) returned 0x0
[0172.323] GetNearestColor (hdc=0xa70107b1, color=0x55) returned 0x55
[0172.323] GetNearestColor (hdc=0xa70107b1, color=0x0) returned 0x0
[0172.323] GetNearestColor (hdc=0xa70107b1, color=0x8080ff) returned 0x8080ff
[0172.323] GetNearestColor (hdc=0xa70107b1, color=0x7373e5) returned 0x7373e5
[0172.323] GetNearestColor (hdc=0xa70107b1, color=0xe5) returned 0xe5
[0172.323] GetNearestColor (hdc=0xa70107b1, color=0x0) returned 0x0
[0172.323] RestoreDC (hdc=0xa70107b1, nSavedDC=-1) returned 1
[0172.323] GdipReleaseDC (graphics=0x5da0378, hdc=0xa70107b1) returned 0x0
[0172.324] IsAppThemed () returned 0x1
[0172.324] GetThemeAppProperties () returned 0x3
[0172.324] GetThemeAppProperties () returned 0x3
[0172.324] IsAppThemed () returned 0x1
[0172.324] GetThemeAppProperties () returned 0x3
[0172.324] GetThemeAppProperties () returned 0x3
[0172.324] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0172.324] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x23a6b58 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0172.324] IsAppThemed () returned 0x1
[0172.325] GetThemeAppProperties () returned 0x3
[0172.325] GetThemeAppProperties () returned 0x3
[0172.325] IsAppThemed () returned 0x1
[0172.325] GetThemeAppProperties () returned 0x3
[0172.325] GetThemeAppProperties () returned 0x3
[0172.325] GetFocus () returned 0x502d2
[0172.325] IsAppThemed () returned 0x1
[0172.325] GetThemeAppProperties () returned 0x3
[0172.325] GetThemeAppProperties () returned 0x3
[0172.325] IsAppThemed () returned 0x1
[0172.325] GetThemeAppProperties () returned 0x3
[0172.325] GetThemeAppProperties () returned 0x3
[0172.325] IsThemePartDefined () returned 0x1
[0172.325] IsAppThemed () returned 0x1
[0172.325] GetThemeAppProperties () returned 0x3
[0172.325] GetThemeAppProperties () returned 0x3
[0172.325] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0172.325] IsAppThemed () returned 0x1
[0172.325] GetThemeAppProperties () returned 0x3
[0172.325] GetThemeAppProperties () returned 0x3
[0172.325] IsAppThemed () returned 0x1
[0172.326] GetThemeAppProperties () returned 0x3
[0172.326] GetThemeAppProperties () returned 0x3
[0172.326] IsThemePartDefined () returned 0x1
[0172.326] GdipCreateRegion (region=0x53e070) returned 0x0
[0172.326] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.326] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0172.326] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0172.326] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e088) returned 0x0
[0172.326] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0172.326] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee40) returned 0x0
[0172.326] LocalFree (hMem=0x89ee40) returned 0x0
[0172.326] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0172.326] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0172.326] LocalFree (hMem=0x89ee08) returned 0x0
[0172.326] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0172.326] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0b0) returned 0x0
[0172.326] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0a0) returned 0x0
[0172.326] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e0a0) returned 0x0
[0172.327] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.327] GdipGetDC (graphics=0x5da0378, hdc=0x53e0b8) returned 0x0
[0172.327] GetCurrentObject (hdc=0xa70107b1, type=0x1) returned 0xb00017
[0172.327] GetCurrentObject (hdc=0xa70107b1, type=0x2) returned 0x900010
[0172.327] GetCurrentObject (hdc=0xa70107b1, type=0x7) returned 0x1e0507b9
[0172.327] GetCurrentObject (hdc=0xa70107b1, type=0x6) returned 0x8a01c2
[0172.327] SaveDC (hdc=0xa70107b1) returned 1
[0172.327] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcb040798
[0172.327] GetClipRgn (hdc=0xa70107b1, hrgn=0xcb040798) returned 0
[0172.327] SelectClipRgn (hdc=0xa70107b1, hrgn=0xb104051e) returned 2
[0172.327] DeleteObject (ho=0xcb040798) returned 1
[0172.327] DeleteObject (ho=0xb104051e) returned 1
[0172.327] OffsetViewportOrgEx (in: hdc=0xa70107b1, x=0, y=0, lppt=0x23a7208 | out: lppt=0x23a7208) returned 1
[0172.327] DrawThemeParentBackground () returned 0x0
[0172.328] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0172.328] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0172.328] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0172.328] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0172.328] GetSystemMetrics (nIndex=42) returned 0
[0172.328] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0172.328] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0172.328] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0172.328] GetCurrentObject (hdc=0xa70107b1, type=0x1) returned 0xb00017
[0172.328] GetCurrentObject (hdc=0xa70107b1, type=0x2) returned 0x900010
[0172.328] GetCurrentObject (hdc=0xa70107b1, type=0x7) returned 0x1e0507b9
[0172.328] GetCurrentObject (hdc=0xa70107b1, type=0x6) returned 0x8a01c2
[0172.328] SaveDC (hdc=0xa70107b1) returned 2
[0172.328] GetNearestColor (hdc=0xa70107b1, color=0xff) returned 0xff
[0172.328] CreateSolidBrush (color=0xff) returned 0xa310078d
[0172.329] FillRect (hDC=0xa70107b1, lprc=0x53dad0, hbr=0xa310078d) returned 1
[0172.329] DeleteObject (ho=0xa310078d) returned 1
[0172.329] RestoreDC (hdc=0xa70107b1, nSavedDC=-1) returned 1
[0172.329] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0172.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0172.329] GetSystemMetrics (nIndex=42) returned 0
[0172.329] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0172.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0172.329] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0172.329] GetCurrentObject (hdc=0xa70107b1, type=0x1) returned 0xb00017
[0172.329] GetCurrentObject (hdc=0xa70107b1, type=0x2) returned 0x900010
[0172.329] GetCurrentObject (hdc=0xa70107b1, type=0x7) returned 0x1e0507b9
[0172.329] GetCurrentObject (hdc=0xa70107b1, type=0x6) returned 0x8a01c2
[0172.329] SaveDC (hdc=0xa70107b1) returned 2
[0172.329] GetNearestColor (hdc=0xa70107b1, color=0xff) returned 0xff
[0172.330] CreateSolidBrush (color=0xff) returned 0xa410078d
[0172.330] FillRect (hDC=0xa70107b1, lprc=0x53da70, hbr=0xa410078d) returned 1
[0172.330] DeleteObject (ho=0xa410078d) returned 1
[0172.330] RestoreDC (hdc=0xa70107b1, nSavedDC=-1) returned 1
[0172.330] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0172.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0172.330] GetSystemMetrics (nIndex=42) returned 0
[0172.330] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0172.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0172.330] RestoreDC (hdc=0xa70107b1, nSavedDC=-1) returned 1
[0172.330] GdipReleaseDC (graphics=0x5da0378, hdc=0xa70107b1) returned 0x0
[0172.330] IsAppThemed () returned 0x1
[0172.330] GetThemeAppProperties () returned 0x3
[0172.331] GetThemeAppProperties () returned 0x3
[0172.331] IsAppThemed () returned 0x1
[0172.331] GetThemeAppProperties () returned 0x3
[0172.331] GetThemeAppProperties () returned 0x3
[0172.331] IsThemePartDefined () returned 0x1
[0172.331] GdipCreateRegion (region=0x53dff4) returned 0x0
[0172.331] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.331] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0172.331] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0172.331] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e00c) returned 0x0
[0172.332] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0172.332] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0172.332] LocalFree (hMem=0x89ee08) returned 0x0
[0172.332] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.332] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0172.332] LocalFree (hMem=0x89ea88) returned 0x0
[0172.332] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0172.332] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e034) returned 0x0
[0172.332] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e024) returned 0x0
[0172.332] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e024) returned 0x0
[0172.332] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.332] GdipGetDC (graphics=0x5da0378, hdc=0x53e03c) returned 0x0
[0172.332] GetCurrentObject (hdc=0xa70107b1, type=0x1) returned 0xb00017
[0172.332] GetCurrentObject (hdc=0xa70107b1, type=0x2) returned 0x900010
[0172.332] GetCurrentObject (hdc=0xa70107b1, type=0x7) returned 0x1e0507b9
[0172.332] GetCurrentObject (hdc=0xa70107b1, type=0x6) returned 0x8a01c2
[0172.332] SaveDC (hdc=0xa70107b1) returned 1
[0172.333] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb204051e
[0172.333] GetClipRgn (hdc=0xa70107b1, hrgn=0xb204051e) returned 0
[0172.333] SelectClipRgn (hdc=0xa70107b1, hrgn=0xcd040798) returned 2
[0172.333] DeleteObject (ho=0xb204051e) returned 1
[0172.333] DeleteObject (ho=0xcd040798) returned 1
[0172.333] OffsetViewportOrgEx (in: hdc=0xa70107b1, x=0, y=0, lppt=0x23a7a6c | out: lppt=0x23a7a6c) returned 1
[0172.333] IsAppThemed () returned 0x1
[0172.333] GetThemeAppProperties () returned 0x3
[0172.333] GetThemeAppProperties () returned 0x3
[0172.333] DrawThemeBackground () returned 0x0
[0172.333] RestoreDC (hdc=0xa70107b1, nSavedDC=-1) returned 1
[0172.333] GdipReleaseDC (graphics=0x5da0378, hdc=0xa70107b1) returned 0x0
[0172.333] GdipCreateRegion (region=0x53dff8) returned 0x0
[0172.333] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.333] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0172.334] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0172.334] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e010) returned 0x0
[0172.334] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.334] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0172.334] LocalFree (hMem=0x89ea88) returned 0x0
[0172.334] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0172.334] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0172.334] LocalFree (hMem=0x89ee08) returned 0x0
[0172.334] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0172.334] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e038) returned 0x0
[0172.334] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e028) returned 0x0
[0172.334] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e028) returned 0x0
[0172.334] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.334] GdipGetDC (graphics=0x5da0378, hdc=0x53e040) returned 0x0
[0172.334] GetCurrentObject (hdc=0xa70107b1, type=0x1) returned 0xb00017
[0172.334] GetCurrentObject (hdc=0xa70107b1, type=0x2) returned 0x900010
[0172.334] GetCurrentObject (hdc=0xa70107b1, type=0x7) returned 0x1e0507b9
[0172.334] GetCurrentObject (hdc=0xa70107b1, type=0x6) returned 0x8a01c2
[0172.334] SaveDC (hdc=0xa70107b1) returned 1
[0172.335] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xce040798
[0172.335] GetClipRgn (hdc=0xa70107b1, hrgn=0xce040798) returned 0
[0172.335] SelectClipRgn (hdc=0xa70107b1, hrgn=0xb304051e) returned 2
[0172.335] DeleteObject (ho=0xce040798) returned 1
[0172.335] DeleteObject (ho=0xb304051e) returned 1
[0172.335] OffsetViewportOrgEx (in: hdc=0xa70107b1, x=0, y=0, lppt=0x23a7d40 | out: lppt=0x23a7d40) returned 1
[0172.335] IsAppThemed () returned 0x1
[0172.335] GetThemeAppProperties () returned 0x3
[0172.335] GetThemeAppProperties () returned 0x3
[0172.335] GetThemeBackgroundContentRect () returned 0x0
[0172.335] RestoreDC (hdc=0xa70107b1, nSavedDC=-1) returned 1
[0172.335] GdipReleaseDC (graphics=0x5da0378, hdc=0xa70107b1) returned 0x0
[0172.335] IsAppThemed () returned 0x1
[0172.335] GetThemeAppProperties () returned 0x3
[0172.335] GetThemeAppProperties () returned 0x3
[0172.335] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e174) returned 0x0
[0172.335] GdipGetDC (graphics=0x5da0378, hdc=0x53e160) returned 0x0
[0172.335] GetCurrentObject (hdc=0xa70107b1, type=0x1) returned 0xb00017
[0172.335] GetCurrentObject (hdc=0xa70107b1, type=0x2) returned 0x900010
[0172.336] GetCurrentObject (hdc=0xa70107b1, type=0x7) returned 0x1e0507b9
[0172.336] GetCurrentObject (hdc=0xa70107b1, type=0x6) returned 0x8a01c2
[0172.336] SaveDC (hdc=0xa70107b1) returned 1
[0172.336] GetTextAlign (hdc=0xa70107b1) returned 0x0
[0172.336] GetTextColor (hdc=0xa70107b1) returned 0x0
[0172.336] GetCurrentObject (hdc=0xa70107b1, type=0x6) returned 0x8a01c2
[0172.336] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0172.336] SelectObject (hdc=0xa70107b1, h=0x450a0799) returned 0x8a01c2
[0172.336] GetBkMode (hdc=0xa70107b1) returned 2
[0172.336] SetBkMode (hdc=0xa70107b1, mode=1) returned 2
[0172.336] DrawTextExW (in: hdc=0xa70107b1, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x23a80e0 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0172.337] DrawTextExW (in: hdc=0xa70107b1, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x23a80e0 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0172.337] RestoreDC (hdc=0xa70107b1, nSavedDC=-1) returned 1
[0172.337] GdipReleaseDC (graphics=0x5da0378, hdc=0xa70107b1) returned 0x0
[0172.337] GetFocus () returned 0x502d2
[0172.337] IsAppThemed () returned 0x1
[0172.337] GetThemeAppProperties () returned 0x3
[0172.337] GetThemeAppProperties () returned 0x3
[0172.337] GdipGetDC (graphics=0x5da0378, hdc=0x53e340) returned 0x0
[0172.337] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xa70107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0172.337] GdipReleaseDC (graphics=0x5da0378, hdc=0xa70107b1) returned 0x0
[0172.337] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0172.338] SelectObject (hdc=0xa70107b1, h=0x85000f) returned 0x1e0507b9
[0172.338] DeleteDC (hdc=0xa70107b1) returned 1
[0172.338] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0172.338] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0172.338] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0172.338] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0172.338] WaitMessage () returned 1
[0172.343] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.343] IsWindowUnicode (hWnd=0x102dc) returned 1
[0172.343] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.343] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.343] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.344] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0172.344] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0172.344] WaitMessage () returned 1
[0172.380] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.380] IsWindowUnicode (hWnd=0x402d8) returned 1
[0172.380] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.380] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.380] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.380] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.381] IsWindowUnicode (hWnd=0x402d8) returned 1
[0172.381] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.381] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.381] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.381] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x2a1, wParam=0x0, lParam=0xb000e) returned 0x0
[0172.381] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0172.381] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0172.381] WaitMessage () returned 1
[0172.386] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.386] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x84, wParam=0x0, lParam=0x194034f) returned 0x1
[0172.386] IsWindowUnicode (hWnd=0x402d8) returned 1
[0172.386] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.386] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x84, wParam=0x0, lParam=0x194034f) returned 0x1
[0172.386] GetDlgItem (hDlg=0x502da, nIDDlgItem=0) returned 0x0
[0172.386] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x210, wParam=0x201, lParam=0x170130) returned 0x0
[0172.386] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x21, wParam=0x502da, lParam=0x2010001) returned 0x1
[0172.386] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x21, wParam=0x502da, lParam=0x2010001) returned 0x1
[0172.387] SetCursor (hCursor=0x10003) returned 0x10003
[0172.387] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.387] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.387] GetKeyState (nVirtKey=1) returned -127
[0172.387] GetKeyState (nVirtKey=2) returned 0
[0172.387] GetKeyState (nVirtKey=4) returned 0
[0172.387] GetKeyState (nVirtKey=5) returned 0
[0172.387] GetKeyState (nVirtKey=6) returned 0
[0172.387] IsWindowVisible (hWnd=0x402d8) returned 1
[0172.387] IsWindowEnabled (hWnd=0x402d8) returned 1
[0172.387] SetFocus (hWnd=0x402d8) returned 0x502d2
[0172.388] GetFocus () returned 0x402d8
[0172.388] IsChild (hWndParent=0x502da, hWnd=0x402d8) returned 1
[0172.388] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x8, wParam=0x402d8, lParam=0x0) returned 0x1
[0172.388] SendMessageW (hWnd=0x502d2, Msg=0x2111, wParam=0x20002d2, lParam=0x502d2) returned 0x0
[0172.389] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0172.391] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0172.392] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0172.392] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0172.392] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0172.392] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0172.400] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0172.401] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x7, wParam=0x502d2, lParam=0x0) returned 0x0
[0172.401] GetStockObject (i=5) returned 0x900015
[0172.401] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0172.401] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0xd, wParam=0x3, lParam=0x89e648) returned 0x2
[0172.401] GetDlgItem (hDlg=0x502da, nIDDlgItem=262872) returned 0x402d8
[0172.401] SendMessageW (hWnd=0x402d8, Msg=0x202b, wParam=0x402d8, lParam=0x53de74) returned 0x0
[0172.401] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x202b, wParam=0x402d8, lParam=0x53de74) returned 0x0
[0172.401] InvalidateRect (hWnd=0x402d8, lpRect=0x0, bErase=0) returned 1
[0172.403] GetFocus () returned 0x402d8
[0172.403] GetFocus () returned 0x402d8
[0172.403] GetFocus () returned 0x402d8
[0172.403] GetKeyState (nVirtKey=1) returned -127
[0172.403] GetKeyState (nVirtKey=2) returned 0
[0172.403] GetKeyState (nVirtKey=4) returned 0
[0172.403] GetKeyState (nVirtKey=5) returned 0
[0172.403] GetKeyState (nVirtKey=6) returned 0
[0172.403] GetCapture () returned 0x0
[0172.403] SetCapture (hWnd=0x402d8) returned 0x0
[0172.403] GetKeyState (nVirtKey=1) returned -127
[0172.403] GetKeyState (nVirtKey=2) returned 0
[0172.403] GetKeyState (nVirtKey=4) returned 0
[0172.403] GetKeyState (nVirtKey=5) returned 0
[0172.404] GetKeyState (nVirtKey=6) returned 0
[0172.404] NotifyWinEvent (event=0x800a, hwnd=0x402d8, idObject=-4, idChild=0)
[0172.404] InvalidateRect (hWnd=0x402d8, lpRect=0x53e4c8, bErase=0) returned 1
[0172.404] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.404] IsWindowUnicode (hWnd=0x402d8) returned 1
[0172.404] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.404] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0172.404] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0172.404] MapWindowPoints (in: hWndFrom=0x402d8, hWndTo=0x0, lpPoints=0x23a82e8, cPoints=0x1 | out: lpPoints=0x23a82e8) returned 25756481
[0172.404] NotifyWinEvent (event=0x800a, hwnd=0x402d8, idObject=-4, idChild=0)
[0172.404] InvalidateRect (hWnd=0x402d8, lpRect=0x53e468, bErase=0) returned 1
[0172.404] UpdateWindow (hWnd=0x402d8) returned 1
[0172.404] BeginPaint (in: hWnd=0x402d8, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x60100ce
[0172.405] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0172.405] CreateCompatibleDC (hdc=0x60100ce) returned 0xaa0107b1
[0172.405] SelectObject (hdc=0xaa0107b1, h=0x1e0507b9) returned 0x85000f
[0172.405] GdipCreateFromHDC (hdc=0xaa0107b1, graphics=0x53df98) returned 0x0
[0172.405] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0172.405] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0172.405] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0172.405] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0172.405] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dff8) returned 0x0
[0172.405] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0172.405] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0172.406] LocalFree (hMem=0x89eee8) returned 0x0
[0172.406] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0172.406] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0172.406] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.406] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dfec) returned 0x0
[0172.406] GdipSaveGraphics (graphics=0x5da0378, state=0x53e018) returned 0x0
[0172.406] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd690dbd) returned 0x0
[0172.406] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.406] GdipGetDC (graphics=0x5da0378, hdc=0x53ddf8) returned 0x0
[0172.406] GetCurrentObject (hdc=0xaa0107b1, type=0x1) returned 0xb00017
[0172.406] GetCurrentObject (hdc=0xaa0107b1, type=0x2) returned 0x900010
[0172.406] GetCurrentObject (hdc=0xaa0107b1, type=0x7) returned 0x1e0507b9
[0172.406] GetCurrentObject (hdc=0xaa0107b1, type=0x6) returned 0x8a01c2
[0172.406] SaveDC (hdc=0xaa0107b1) returned 1
[0172.406] GetNearestColor (hdc=0xaa0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0172.406] GetNearestColor (hdc=0xaa0107b1, color=0xa0a0a0) returned 0xa0a0a0
[0172.407] GetNearestColor (hdc=0xaa0107b1, color=0x696969) returned 0x696969
[0172.407] GetNearestColor (hdc=0xaa0107b1, color=0xa0a0a0) returned 0xa0a0a0
[0172.407] GetNearestColor (hdc=0xaa0107b1, color=0x0) returned 0x0
[0172.407] GetNearestColor (hdc=0xaa0107b1, color=0xffffff) returned 0xffffff
[0172.407] GetNearestColor (hdc=0xaa0107b1, color=0xe5e5e5) returned 0xe5e5e5
[0172.407] GetNearestColor (hdc=0xaa0107b1, color=0xd7d7d7) returned 0xd7d7d7
[0172.407] GetNearestColor (hdc=0xaa0107b1, color=0x0) returned 0x0
[0172.407] RestoreDC (hdc=0xaa0107b1, nSavedDC=-1) returned 1
[0172.407] GdipReleaseDC (graphics=0x5da0378, hdc=0xaa0107b1) returned 0x0
[0172.407] IsAppThemed () returned 0x1
[0172.407] GetThemeAppProperties () returned 0x3
[0172.407] GetThemeAppProperties () returned 0x3
[0172.407] IsAppThemed () returned 0x1
[0172.408] GetThemeAppProperties () returned 0x3
[0172.408] GetThemeAppProperties () returned 0x3
[0172.408] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0172.408] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x23a8a5c | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0172.408] IsAppThemed () returned 0x1
[0172.408] GetThemeAppProperties () returned 0x3
[0172.408] GetThemeAppProperties () returned 0x3
[0172.408] IsAppThemed () returned 0x1
[0172.408] GetThemeAppProperties () returned 0x3
[0172.408] GetThemeAppProperties () returned 0x3
[0172.408] IsAppThemed () returned 0x1
[0172.408] GetThemeAppProperties () returned 0x3
[0172.409] GetThemeAppProperties () returned 0x3
[0172.409] IsAppThemed () returned 0x1
[0172.409] GetThemeAppProperties () returned 0x3
[0172.409] GetThemeAppProperties () returned 0x3
[0172.409] IsThemePartDefined () returned 0x1
[0172.409] IsAppThemed () returned 0x1
[0172.409] GetThemeAppProperties () returned 0x3
[0172.409] GetThemeAppProperties () returned 0x3
[0172.409] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0172.409] IsAppThemed () returned 0x1
[0172.409] GetThemeAppProperties () returned 0x3
[0172.409] GetThemeAppProperties () returned 0x3
[0172.409] IsAppThemed () returned 0x1
[0172.409] GetThemeAppProperties () returned 0x3
[0172.410] GetThemeAppProperties () returned 0x3
[0172.410] IsThemePartDefined () returned 0x1
[0172.410] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0172.410] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.410] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0172.410] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0172.410] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53dd14) returned 0x0
[0172.410] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0172.410] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0172.410] LocalFree (hMem=0x89ee08) returned 0x0
[0172.410] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0172.410] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0172.410] LocalFree (hMem=0x89ee08) returned 0x0
[0172.410] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0172.410] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd3c) returned 0x0
[0172.410] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd2c) returned 0x0
[0172.410] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dd2c) returned 0x0
[0172.410] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.411] GdipGetDC (graphics=0x5da0378, hdc=0x53dd44) returned 0x0
[0172.411] GetCurrentObject (hdc=0xaa0107b1, type=0x1) returned 0xb00017
[0172.411] GetCurrentObject (hdc=0xaa0107b1, type=0x2) returned 0x900010
[0172.411] GetCurrentObject (hdc=0xaa0107b1, type=0x7) returned 0x1e0507b9
[0172.411] GetCurrentObject (hdc=0xaa0107b1, type=0x6) returned 0x8a01c2
[0172.411] SaveDC (hdc=0xaa0107b1) returned 1
[0172.411] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb404051e
[0172.411] GetClipRgn (hdc=0xaa0107b1, hrgn=0xb404051e) returned 0
[0172.411] SelectClipRgn (hdc=0xaa0107b1, hrgn=0xd2040798) returned 2
[0172.411] DeleteObject (ho=0xb404051e) returned 1
[0172.411] DeleteObject (ho=0xd2040798) returned 1
[0172.411] OffsetViewportOrgEx (in: hdc=0xaa0107b1, x=0, y=0, lppt=0x23a910c | out: lppt=0x23a910c) returned 1
[0172.411] DrawThemeParentBackground () returned 0x0
[0172.412] GetWindowPlacement (in: hWnd=0x502da, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0172.412] GetClientRect (in: hWnd=0x502da, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0172.412] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.412] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.412] GetSystemMetrics (nIndex=42) returned 0
[0172.412] GetWindowTextW (in: hWnd=0x502da, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.412] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0172.412] GetClientRect (in: hWnd=0x502da, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0172.412] GetCurrentObject (hdc=0xaa0107b1, type=0x1) returned 0xb00017
[0172.412] GetCurrentObject (hdc=0xaa0107b1, type=0x2) returned 0x900010
[0172.412] GetCurrentObject (hdc=0xaa0107b1, type=0x7) returned 0x1e0507b9
[0172.412] GetCurrentObject (hdc=0xaa0107b1, type=0x6) returned 0x8a01c2
[0172.412] SaveDC (hdc=0xaa0107b1) returned 2
[0172.412] GetNearestColor (hdc=0xaa0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0172.412] CreateSolidBrush (color=0xf0f0f0) returned 0xa510078d
[0172.412] FillRect (hDC=0xaa0107b1, lprc=0x53d760, hbr=0xa510078d) returned 1
[0172.413] DeleteObject (ho=0xa510078d) returned 1
[0172.413] RestoreDC (hdc=0xaa0107b1, nSavedDC=-1) returned 1
[0172.413] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.413] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.413] GetSystemMetrics (nIndex=42) returned 0
[0172.413] GetWindowTextW (in: hWnd=0x502da, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.413] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0172.413] GetClientRect (in: hWnd=0x502da, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0172.413] GetCurrentObject (hdc=0xaa0107b1, type=0x1) returned 0xb00017
[0172.413] GetCurrentObject (hdc=0xaa0107b1, type=0x2) returned 0x900010
[0172.413] GetCurrentObject (hdc=0xaa0107b1, type=0x7) returned 0x1e0507b9
[0172.413] GetCurrentObject (hdc=0xaa0107b1, type=0x6) returned 0x8a01c2
[0172.413] SaveDC (hdc=0xaa0107b1) returned 2
[0172.413] GetNearestColor (hdc=0xaa0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0172.413] CreateSolidBrush (color=0xf0f0f0) returned 0xa610078d
[0172.414] FillRect (hDC=0xaa0107b1, lprc=0x53d700, hbr=0xa610078d) returned 1
[0172.414] DeleteObject (ho=0xa610078d) returned 1
[0172.414] RestoreDC (hdc=0xaa0107b1, nSavedDC=-1) returned 1
[0172.414] GetWindowTextLengthW (hWnd=0x502da) returned 10
[0172.414] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.414] GetSystemMetrics (nIndex=42) returned 0
[0172.414] GetWindowTextW (in: hWnd=0x502da, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0172.414] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0172.414] RestoreDC (hdc=0xaa0107b1, nSavedDC=-1) returned 1
[0172.414] GdipReleaseDC (graphics=0x5da0378, hdc=0xaa0107b1) returned 0x0
[0172.414] IsAppThemed () returned 0x1
[0172.414] GetThemeAppProperties () returned 0x3
[0172.414] GetThemeAppProperties () returned 0x3
[0172.414] IsAppThemed () returned 0x1
[0172.415] GetThemeAppProperties () returned 0x3
[0172.415] GetThemeAppProperties () returned 0x3
[0172.415] IsThemePartDefined () returned 0x1
[0172.415] GdipCreateRegion (region=0x53dc80) returned 0x0
[0172.415] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.415] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0172.415] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0172.415] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc98) returned 0x0
[0172.415] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0172.415] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0172.415] LocalFree (hMem=0x89eee8) returned 0x0
[0172.415] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.415] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0172.415] LocalFree (hMem=0x89ea88) returned 0x0
[0172.415] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0172.415] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcc0) returned 0x0
[0172.415] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcb0) returned 0x0
[0172.416] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dcb0) returned 0x0
[0172.416] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.416] GdipGetDC (graphics=0x5da0378, hdc=0x53dcc8) returned 0x0
[0172.416] GetCurrentObject (hdc=0xaa0107b1, type=0x1) returned 0xb00017
[0172.416] GetCurrentObject (hdc=0xaa0107b1, type=0x2) returned 0x900010
[0172.416] GetCurrentObject (hdc=0xaa0107b1, type=0x7) returned 0x1e0507b9
[0172.416] GetCurrentObject (hdc=0xaa0107b1, type=0x6) returned 0x8a01c2
[0172.416] SaveDC (hdc=0xaa0107b1) returned 1
[0172.416] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd3040798
[0172.416] GetClipRgn (hdc=0xaa0107b1, hrgn=0xd3040798) returned 0
[0172.416] SelectClipRgn (hdc=0xaa0107b1, hrgn=0xb604051e) returned 2
[0172.416] DeleteObject (ho=0xd3040798) returned 1
[0172.416] DeleteObject (ho=0xb604051e) returned 1
[0172.416] OffsetViewportOrgEx (in: hdc=0xaa0107b1, x=0, y=0, lppt=0x23a9994 | out: lppt=0x23a9994) returned 1
[0172.416] IsAppThemed () returned 0x1
[0172.417] GetThemeAppProperties () returned 0x3
[0172.417] GetThemeAppProperties () returned 0x3
[0172.417] DrawThemeBackground () returned 0x0
[0172.417] RestoreDC (hdc=0xaa0107b1, nSavedDC=-1) returned 1
[0172.417] GdipReleaseDC (graphics=0x5da0378, hdc=0xaa0107b1) returned 0x0
[0172.417] GdipCreateRegion (region=0x53dc84) returned 0x0
[0172.417] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.417] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0172.417] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0172.417] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53dc9c) returned 0x0
[0172.417] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.417] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0172.417] LocalFree (hMem=0x89ea88) returned 0x0
[0172.417] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0172.417] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0172.417] LocalFree (hMem=0x89ea88) returned 0x0
[0172.417] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0172.417] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcc4) returned 0x0
[0172.418] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcb4) returned 0x0
[0172.418] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dcb4) returned 0x0
[0172.418] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.418] GdipGetDC (graphics=0x5da0378, hdc=0x53dccc) returned 0x0
[0172.418] GetCurrentObject (hdc=0xaa0107b1, type=0x1) returned 0xb00017
[0172.418] GetCurrentObject (hdc=0xaa0107b1, type=0x2) returned 0x900010
[0172.418] GetCurrentObject (hdc=0xaa0107b1, type=0x7) returned 0x1e0507b9
[0172.418] GetCurrentObject (hdc=0xaa0107b1, type=0x6) returned 0x8a01c2
[0172.418] SaveDC (hdc=0xaa0107b1) returned 1
[0172.418] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb704051e
[0172.418] GetClipRgn (hdc=0xaa0107b1, hrgn=0xb704051e) returned 0
[0172.418] SelectClipRgn (hdc=0xaa0107b1, hrgn=0xd4040798) returned 2
[0172.418] DeleteObject (ho=0xb704051e) returned 1
[0172.418] DeleteObject (ho=0xd4040798) returned 1
[0172.418] OffsetViewportOrgEx (in: hdc=0xaa0107b1, x=0, y=0, lppt=0x23a9c68 | out: lppt=0x23a9c68) returned 1
[0172.419] IsAppThemed () returned 0x1
[0172.419] GetThemeAppProperties () returned 0x3
[0172.419] GetThemeAppProperties () returned 0x3
[0172.419] GetThemeBackgroundContentRect () returned 0x0
[0172.419] RestoreDC (hdc=0xaa0107b1, nSavedDC=-1) returned 1
[0172.419] GdipReleaseDC (graphics=0x5da0378, hdc=0xaa0107b1) returned 0x0
[0172.419] IsAppThemed () returned 0x1
[0172.419] GetThemeAppProperties () returned 0x3
[0172.419] GetThemeAppProperties () returned 0x3
[0172.419] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53de00) returned 0x0
[0172.419] GdipGetDC (graphics=0x5da0378, hdc=0x53ddec) returned 0x0
[0172.419] GetCurrentObject (hdc=0xaa0107b1, type=0x1) returned 0xb00017
[0172.419] GetCurrentObject (hdc=0xaa0107b1, type=0x2) returned 0x900010
[0172.419] GetCurrentObject (hdc=0xaa0107b1, type=0x7) returned 0x1e0507b9
[0172.419] GetCurrentObject (hdc=0xaa0107b1, type=0x6) returned 0x8a01c2
[0172.419] SaveDC (hdc=0xaa0107b1) returned 1
[0172.420] GetTextAlign (hdc=0xaa0107b1) returned 0x0
[0172.420] GetTextColor (hdc=0xaa0107b1) returned 0x0
[0172.420] GetCurrentObject (hdc=0xaa0107b1, type=0x6) returned 0x8a01c2
[0172.420] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0172.420] SelectObject (hdc=0xaa0107b1, h=0x730a066d) returned 0x8a01c2
[0172.420] GetBkMode (hdc=0xaa0107b1) returned 2
[0172.420] SetBkMode (hdc=0xaa0107b1, mode=1) returned 2
[0172.420] DrawTextExW (in: hdc=0xaa0107b1, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x23aa008 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0172.420] DrawTextExW (in: hdc=0xaa0107b1, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x23aa008 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0172.421] RestoreDC (hdc=0xaa0107b1, nSavedDC=-1) returned 1
[0172.421] GdipReleaseDC (graphics=0x5da0378, hdc=0xaa0107b1) returned 0x0
[0172.421] GetFocus () returned 0x402d8
[0172.421] IsAppThemed () returned 0x1
[0172.421] GetThemeAppProperties () returned 0x3
[0172.421] GetThemeAppProperties () returned 0x3
[0172.421] GdipGetDC (graphics=0x5da0378, hdc=0x53dfd8) returned 0x0
[0172.421] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0xaa0107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0172.421] GdipReleaseDC (graphics=0x5da0378, hdc=0xaa0107b1) returned 0x0
[0172.421] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0172.422] SelectObject (hdc=0xaa0107b1, h=0x85000f) returned 0x1e0507b9
[0172.422] DeleteDC (hdc=0xaa0107b1) returned 1
[0172.422] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0172.422] EndPaint (hWnd=0x402d8, lpPaint=0x53df7c) returned 1
[0172.422] MapWindowPoints (in: hWndFrom=0x402d8, hWndTo=0x0, lpPoints=0x23aa104, cPoints=0x1 | out: lpPoints=0x23aa104) returned 25756481
[0172.422] WindowFromPoint (Point=0x34f) returned 0x402d8
[0172.422] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x84, wParam=0x0, lParam=0x194034f) returned 0x1
[0172.422] NotifyWinEvent (event=0x800a, hwnd=0x402d8, idObject=-4, idChild=0)
[0172.422] NotifyWinEvent (event=0x800c, hwnd=0x402d8, idObject=-4, idChild=0)
[0172.422] GetWindowTextLengthW (hWnd=0x502d2) returned 0
[0172.422] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0172.422] GetSystemMetrics (nIndex=42) returned 0
[0172.422] GetWindowTextW (in: hWnd=0x502d2, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0172.423] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0172.423] SendMessageW (hWnd=0x502da, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0172.423] GetCapture () returned 0x402d8
[0172.423] ReleaseCapture () returned 1
[0172.423] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0172.423] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0172.424] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x84, wParam=0x0, lParam=0x194034f) returned 0x1
[0172.424] IsWindow (hWnd=0x70036) returned 1
[0172.424] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0172.429] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0172.429] IsWindow (hWnd=0x70036) returned 1
[0172.429] SetActiveWindow (hWnd=0x70036)
[0172.430] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x86, wParam=0x0, lParam=0x70036)
[0172.432] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0172.432] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0172.433] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0172.437] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0172.437] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0172.437] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0172.437] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x502da) returned 0x1
[0172.446] GetFocus () returned 0x402d8
[0172.447] SetFocus (hWnd=0x202c6)
[0172.447] GetFocus () returned 0x202c6
[0172.447] IsChild (hWndParent=0x502da, hWnd=0x202c6) returned 0
[0172.447] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0172.447] GetCapture () returned 0x0
[0172.447] InvalidateRect (hWnd=0x402d8, lpRect=0x0, bErase=0) returned 1
[0172.448] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0172.450] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f)
[0172.452] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0172.452] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0172.453] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0172.453] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x402d8, lParam=0x0)
[0172.453] GetStockObject (i=5) returned 0x900015
[0172.454] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0172.454] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0172.454] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0172.456] IsWindowVisible (hWnd=0x70036) returned 1
[0172.456] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0172.464] GetFocus () returned 0x202c6
[0172.464] IsChild (hWndParent=0x502da, hWnd=0x202c6) returned 0
[0172.464] ShowWindow (hWnd=0x502da, nCmdShow=0)
[0172.464] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0172.464] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0172.467] GetWindowPlacement (in: hWnd=0x502da, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0172.467] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0172.467] GetClientRect (in: hWnd=0x502da, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0172.467] GetWindowRect (in: hWnd=0x502da, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0172.468] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0172.468] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0172.469] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0172.470] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0172.470] GetWindowTextLengthW (hWnd=0x502da)
[0172.470] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0172.470] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0172.471] SendMessageW (hWnd=0x502d2, Msg=0xb8, wParam=0x0, lParam=0x0)
[0172.471] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0172.471] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0172.471] GetWindowThreadProcessId (in: hWnd=0x9013e, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0172.471] GetWindow (hWnd=0x9013e, uCmd=0x5) returned 0x0
[0172.471] GetWindowLongW (hWnd=0x9013e, nIndex=-20) returned 65792
[0172.471] DestroyWindow (hWnd=0x9013e)
[0172.471] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x9013e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0172.471] GetWindowTextLengthW (hWnd=0x9013e)
[0172.471] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x9013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0172.472] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x9013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0172.472] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x9013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0172.473] GetWindowTextLengthW (hWnd=0x502c8)
[0172.473] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0172.474] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0172.474] InvalidateRect (hWnd=0x402d8, lpRect=0x0, bErase=0) returned 1
[0172.474] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0172.474] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0172.475] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x502d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0172.476] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x502c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0172.477] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x402d8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0172.479] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x502d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0172.480] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502da, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0172.481] GetProcessWindowStation () returned 0x13c
[0172.481] GetActiveWindow () returned 0x70036
[0172.482] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0172.482] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0172.482] GetCurrentThreadId () returned 0x11d0
[0172.482] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf43e6, lParam=0x0) returned 1
[0172.482] IsWindowVisible (hWnd=0x70036) returned 1
[0172.482] IsWindowEnabled (hWnd=0x70036) returned 1
[0172.482] IsWindowVisible (hWnd=0x602b6) returned 0
[0172.483] IsWindowVisible (hWnd=0x901f8) returned 0
[0172.483] IsWindowVisible (hWnd=0x202d0) returned 0
[0172.483] IsWindowVisible (hWnd=0x202d4) returned 0
[0172.483] GetActiveWindow () returned 0x70036
[0172.483] GetFocus () returned 0x202c6
[0172.483] IsWindow (hWnd=0x70036) returned 1
[0172.483] EnableWindow (hWnd=0x70036, bEnable=0)
[0172.483] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0172.484] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0172.484] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0172.486] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0172.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x602da) returned 0x1
[0172.513] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0172.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0172.517] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x602d6, lParam=0x0) returned 0x0
[0172.517] GetCapture () returned 0x0
[0172.517] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0172.518] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0172.525] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0172.525] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0172.528] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x8b010786
[0172.529] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0172.529] CreateCompatibleDC (hdc=0x8b010786) returned 0xbc0107b1
[0172.529] SelectObject (hdc=0xbc0107b1, h=0x1e0507b9) returned 0x85000f
[0172.529] GdipCreateFromHDC (hdc=0xbc0107b1, graphics=0x53e108) returned 0x0
[0172.529] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0172.529] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0172.529] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0172.529] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0172.529] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e168) returned 0x0
[0172.530] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0172.530] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0172.530] LocalFree (hMem=0x89eee8) returned 0x0
[0172.530] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0172.530] GdipCreateRegion (region=0x53e150) returned 0x0
[0172.530] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.530] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e15c) returned 0x0
[0172.530] GdipSaveGraphics (graphics=0x5da0378, state=0x53e188) returned 0x0
[0172.530] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd670dbd) returned 0x0
[0172.530] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.530] GdipGetDC (graphics=0x5da0378, hdc=0x53df74) returned 0x0
[0172.530] GetCurrentObject (hdc=0xbc0107b1, type=0x1) returned 0xb00017
[0172.530] GetCurrentObject (hdc=0xbc0107b1, type=0x2) returned 0x900010
[0172.530] GetCurrentObject (hdc=0xbc0107b1, type=0x7) returned 0x1e0507b9
[0172.530] GetCurrentObject (hdc=0xbc0107b1, type=0x6) returned 0x8a01c2
[0172.531] SaveDC (hdc=0xbc0107b1) returned 1
[0172.531] GetNearestColor (hdc=0xbc0107b1, color=0xff) returned 0xff
[0172.531] GetNearestColor (hdc=0xbc0107b1, color=0x55) returned 0x55
[0172.531] GetNearestColor (hdc=0xbc0107b1, color=0x0) returned 0x0
[0172.531] GetNearestColor (hdc=0xbc0107b1, color=0x55) returned 0x55
[0172.531] GetNearestColor (hdc=0xbc0107b1, color=0x0) returned 0x0
[0172.531] GetNearestColor (hdc=0xbc0107b1, color=0x8080ff) returned 0x8080ff
[0172.531] GetNearestColor (hdc=0xbc0107b1, color=0x7373e5) returned 0x7373e5
[0172.531] GetNearestColor (hdc=0xbc0107b1, color=0xe5) returned 0xe5
[0172.531] GetNearestColor (hdc=0xbc0107b1, color=0x0) returned 0x0
[0172.531] RestoreDC (hdc=0xbc0107b1, nSavedDC=-1) returned 1
[0172.531] GdipReleaseDC (graphics=0x5da0378, hdc=0xbc0107b1) returned 0x0
[0172.531] IsAppThemed () returned 0x1
[0172.532] GetThemeAppProperties () returned 0x3
[0172.532] GetThemeAppProperties () returned 0x3
[0172.532] IsAppThemed () returned 0x1
[0172.532] GetThemeAppProperties () returned 0x3
[0172.532] GetThemeAppProperties () returned 0x3
[0172.532] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0172.532] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x23af2ec | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0172.532] IsAppThemed () returned 0x1
[0172.532] GetThemeAppProperties () returned 0x3
[0172.532] GetThemeAppProperties () returned 0x3
[0172.532] IsAppThemed () returned 0x1
[0172.532] GetThemeAppProperties () returned 0x3
[0172.532] GetThemeAppProperties () returned 0x3
[0172.533] GetFocus () returned 0x602d6
[0172.533] IsAppThemed () returned 0x1
[0172.533] GetThemeAppProperties () returned 0x3
[0172.533] GetThemeAppProperties () returned 0x3
[0172.533] IsAppThemed () returned 0x1
[0172.533] GetThemeAppProperties () returned 0x3
[0172.533] GetThemeAppProperties () returned 0x3
[0172.533] IsThemePartDefined () returned 0x1
[0172.533] IsAppThemed () returned 0x1
[0172.533] GetThemeAppProperties () returned 0x3
[0172.533] GetThemeAppProperties () returned 0x3
[0172.533] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0172.533] IsAppThemed () returned 0x1
[0172.533] GetThemeAppProperties () returned 0x3
[0172.533] GetThemeAppProperties () returned 0x3
[0172.533] IsAppThemed () returned 0x1
[0172.533] GetThemeAppProperties () returned 0x3
[0172.533] GetThemeAppProperties () returned 0x3
[0172.533] IsThemePartDefined () returned 0x1
[0172.533] GdipCreateRegion (region=0x53de78) returned 0x0
[0172.533] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.534] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0172.534] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0172.534] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53de90) returned 0x0
[0172.534] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0172.534] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eee8) returned 0x0
[0172.534] LocalFree (hMem=0x89eee8) returned 0x0
[0172.534] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0172.534] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0172.538] LocalFree (hMem=0x89ee08) returned 0x0
[0172.538] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0172.539] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53deb8) returned 0x0
[0172.539] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dea8) returned 0x0
[0172.539] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dea8) returned 0x0
[0172.539] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.539] GdipGetDC (graphics=0x5da0378, hdc=0x53dec0) returned 0x0
[0172.539] GetCurrentObject (hdc=0xbc0107b1, type=0x1) returned 0xb00017
[0172.539] GetCurrentObject (hdc=0xbc0107b1, type=0x2) returned 0x900010
[0172.539] GetCurrentObject (hdc=0xbc0107b1, type=0x7) returned 0x1e0507b9
[0172.539] GetCurrentObject (hdc=0xbc0107b1, type=0x6) returned 0x8a01c2
[0172.539] SaveDC (hdc=0xbc0107b1) returned 1
[0172.539] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd5040798
[0172.539] GetClipRgn (hdc=0xbc0107b1, hrgn=0xd5040798) returned 0
[0172.539] SelectClipRgn (hdc=0xbc0107b1, hrgn=0xbd04051e) returned 2
[0172.540] DeleteObject (ho=0xd5040798) returned 1
[0172.540] DeleteObject (ho=0xbd04051e) returned 1
[0172.540] OffsetViewportOrgEx (in: hdc=0xbc0107b1, x=0, y=0, lppt=0x23af99c | out: lppt=0x23af99c) returned 1
[0172.540] DrawThemeParentBackground () returned 0x0
[0172.540] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0172.540] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0172.540] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0172.540] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0172.540] GetSystemMetrics (nIndex=42) returned 0
[0172.540] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0172.540] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0172.540] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0172.540] GetCurrentObject (hdc=0xbc0107b1, type=0x1) returned 0xb00017
[0172.540] GetCurrentObject (hdc=0xbc0107b1, type=0x2) returned 0x900010
[0172.540] GetCurrentObject (hdc=0xbc0107b1, type=0x7) returned 0x1e0507b9
[0172.541] GetCurrentObject (hdc=0xbc0107b1, type=0x6) returned 0x8a01c2
[0172.541] SaveDC (hdc=0xbc0107b1) returned 2
[0172.541] GetNearestColor (hdc=0xbc0107b1, color=0xff) returned 0xff
[0172.541] CreateSolidBrush (color=0xff) returned 0xa710078d
[0172.541] FillRect (hDC=0xbc0107b1, lprc=0x53d8d8, hbr=0xa710078d) returned 1
[0172.541] DeleteObject (ho=0xa710078d) returned 1
[0172.541] RestoreDC (hdc=0xbc0107b1, nSavedDC=-1) returned 1
[0172.541] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0172.541] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0172.541] GetSystemMetrics (nIndex=42) returned 0
[0172.541] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0172.541] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0172.541] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0172.541] GetCurrentObject (hdc=0xbc0107b1, type=0x1) returned 0xb00017
[0172.541] GetCurrentObject (hdc=0xbc0107b1, type=0x2) returned 0x900010
[0172.542] GetCurrentObject (hdc=0xbc0107b1, type=0x7) returned 0x1e0507b9
[0172.542] GetCurrentObject (hdc=0xbc0107b1, type=0x6) returned 0x8a01c2
[0172.542] SaveDC (hdc=0xbc0107b1) returned 2
[0172.542] GetNearestColor (hdc=0xbc0107b1, color=0xff) returned 0xff
[0172.542] CreateSolidBrush (color=0xff) returned 0xa810078d
[0172.542] FillRect (hDC=0xbc0107b1, lprc=0x53d878, hbr=0xa810078d) returned 1
[0172.542] DeleteObject (ho=0xa810078d) returned 1
[0172.542] RestoreDC (hdc=0xbc0107b1, nSavedDC=-1) returned 1
[0172.542] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0172.542] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0172.542] GetSystemMetrics (nIndex=42) returned 0
[0172.542] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0172.542] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0172.543] RestoreDC (hdc=0xbc0107b1, nSavedDC=-1) returned 1
[0172.543] GdipReleaseDC (graphics=0x5da0378, hdc=0xbc0107b1) returned 0x0
[0172.543] IsAppThemed () returned 0x1
[0172.543] GetThemeAppProperties () returned 0x3
[0172.543] GetThemeAppProperties () returned 0x3
[0172.543] IsAppThemed () returned 0x1
[0172.543] GetThemeAppProperties () returned 0x3
[0172.543] GetThemeAppProperties () returned 0x3
[0172.543] IsThemePartDefined () returned 0x1
[0172.543] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0172.543] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.543] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0172.543] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0172.543] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de14) returned 0x0
[0172.543] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0172.543] LocalFree (hMem=0x89eee8) returned 0x0
[0172.544] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0172.544] LocalFree (hMem=0x89eee8) returned 0x0
[0172.544] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0172.544] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de3c) returned 0x0
[0172.544] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de2c) returned 0x0
[0172.544] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53de2c) returned 0x0
[0172.544] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.544] GdipGetDC (graphics=0x5da0378, hdc=0x53de44) returned 0x0
[0172.544] GetCurrentObject (hdc=0xbc0107b1, type=0x1) returned 0xb00017
[0172.544] GetCurrentObject (hdc=0xbc0107b1, type=0x2) returned 0x900010
[0172.544] GetCurrentObject (hdc=0xbc0107b1, type=0x7) returned 0x1e0507b9
[0172.544] GetCurrentObject (hdc=0xbc0107b1, type=0x6) returned 0x8a01c2
[0172.544] SaveDC (hdc=0xbc0107b1) returned 1
[0172.544] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbe04051e
[0172.544] GetClipRgn (hdc=0xbc0107b1, hrgn=0xbe04051e) returned 0
[0172.544] SelectClipRgn (hdc=0xbc0107b1, hrgn=0xd7040798) returned 2
[0172.544] DeleteObject (ho=0xbe04051e) returned 1
[0172.544] DeleteObject (ho=0xd7040798) returned 1
[0172.545] OffsetViewportOrgEx (in: hdc=0xbc0107b1, x=0, y=0, lppt=0x23b0200 | out: lppt=0x23b0200) returned 1
[0172.545] IsAppThemed () returned 0x1
[0172.545] GetThemeAppProperties () returned 0x3
[0172.545] GetThemeAppProperties () returned 0x3
[0172.545] DrawThemeBackground () returned 0x0
[0172.545] RestoreDC (hdc=0xbc0107b1, nSavedDC=-1) returned 1
[0172.545] GdipReleaseDC (graphics=0x5da0378, hdc=0xbc0107b1) returned 0x0
[0172.545] GdipCreateRegion (region=0x53de00) returned 0x0
[0172.545] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0172.545] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0172.545] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0172.545] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53de18) returned 0x0
[0172.545] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0172.545] LocalFree (hMem=0x89ee08) returned 0x0
[0172.545] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0172.545] LocalFree (hMem=0x89ee08) returned 0x0
[0172.545] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0172.546] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de40) returned 0x0
[0172.546] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de30) returned 0x0
[0172.546] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53de30) returned 0x0
[0172.546] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0172.546] GdipGetDC (graphics=0x5da0378, hdc=0x53de48) returned 0x0
[0172.546] GetCurrentObject (hdc=0xbc0107b1, type=0x1) returned 0xb00017
[0172.546] GetCurrentObject (hdc=0xbc0107b1, type=0x2) returned 0x900010
[0172.546] GetCurrentObject (hdc=0xbc0107b1, type=0x7) returned 0x1e0507b9
[0172.546] GetCurrentObject (hdc=0xbc0107b1, type=0x6) returned 0x8a01c2
[0172.546] SaveDC (hdc=0xbc0107b1) returned 1
[0172.546] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd8040798
[0172.546] GetClipRgn (hdc=0xbc0107b1, hrgn=0xd8040798) returned 0
[0172.546] SelectClipRgn (hdc=0xbc0107b1, hrgn=0xbf04051e) returned 2
[0172.546] DeleteObject (ho=0xd8040798) returned 1
[0172.546] DeleteObject (ho=0xbf04051e) returned 1
[0172.546] OffsetViewportOrgEx (in: hdc=0xbc0107b1, x=0, y=0, lppt=0x23b04d4 | out: lppt=0x23b04d4) returned 1
[0172.547] IsAppThemed () returned 0x1
[0172.547] GetThemeAppProperties () returned 0x3
[0172.547] GetThemeAppProperties () returned 0x3
[0172.547] GetThemeBackgroundContentRect () returned 0x0
[0172.547] RestoreDC (hdc=0xbc0107b1, nSavedDC=-1) returned 1
[0172.547] GdipReleaseDC (graphics=0x5da0378, hdc=0xbc0107b1) returned 0x0
[0172.547] IsAppThemed () returned 0x1
[0172.547] GetThemeAppProperties () returned 0x3
[0172.547] GetThemeAppProperties () returned 0x3
[0172.547] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53df7c) returned 0x0
[0172.547] GdipGetDC (graphics=0x5da0378, hdc=0x53df68) returned 0x0
[0172.547] GetCurrentObject (hdc=0xbc0107b1, type=0x1) returned 0xb00017
[0172.547] GetCurrentObject (hdc=0xbc0107b1, type=0x2) returned 0x900010
[0172.547] GetCurrentObject (hdc=0xbc0107b1, type=0x7) returned 0x1e0507b9
[0172.547] GetCurrentObject (hdc=0xbc0107b1, type=0x6) returned 0x8a01c2
[0172.547] SaveDC (hdc=0xbc0107b1) returned 1
[0172.547] GetTextAlign (hdc=0xbc0107b1) returned 0x0
[0172.547] GetTextColor (hdc=0xbc0107b1) returned 0x0
[0172.547] GetCurrentObject (hdc=0xbc0107b1, type=0x6) returned 0x8a01c2
[0172.548] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0172.548] SelectObject (hdc=0xbc0107b1, h=0x450a0799) returned 0x8a01c2
[0172.548] GetBkMode (hdc=0xbc0107b1) returned 2
[0172.548] SetBkMode (hdc=0xbc0107b1, mode=1) returned 2
[0172.548] DrawTextExW (in: hdc=0xbc0107b1, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x23b0874 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0172.548] DrawTextExW (in: hdc=0xbc0107b1, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x23b0874 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0172.549] RestoreDC (hdc=0xbc0107b1, nSavedDC=-1) returned 1
[0172.549] GdipReleaseDC (graphics=0x5da0378, hdc=0xbc0107b1) returned 0x0
[0172.549] GetFocus () returned 0x602d6
[0172.549] IsAppThemed () returned 0x1
[0172.549] GetThemeAppProperties () returned 0x3
[0172.549] GetThemeAppProperties () returned 0x3
[0172.549] GdipGetDC (graphics=0x5da0378, hdc=0x53e148) returned 0x0
[0172.549] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xbc0107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0172.549] GdipReleaseDC (graphics=0x5da0378, hdc=0xbc0107b1) returned 0x0
[0172.549] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0172.549] SelectObject (hdc=0xbc0107b1, h=0x85000f) returned 0x1e0507b9
[0172.550] DeleteDC (hdc=0xbc0107b1) returned 1
[0172.550] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0172.550] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0174.527] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x20, wParam=0x70036, lParam=0x200fffe) returned 0x0
[0175.710] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e57c) returned 0x0
[0175.710] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e57c) returned 0x0
[0175.716] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e2a8 | out: lpwndpl=0x53e2a8) returned 1
[0175.716] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x47, wParam=0x0, lParam=0x53e57c) returned 0x0
[0175.716] GetClientRect (in: hWnd=0x70036, lpRect=0x53e258 | out: lpRect=0x53e258) returned 1
[0175.716] GetWindowRect (in: hWnd=0x70036, lpRect=0x53e258 | out: lpRect=0x53e258) returned 1
[0175.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x47, wParam=0x0, lParam=0x53e57c) returned 0x0
[0175.734] NtdllDefWindowProc_W (hWnd=0x901f8, Msg=0x1c, wParam=0x0, lParam=0x1060) returned 0x0
[0175.734] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1c, wParam=0x0, lParam=0x1060) returned 0x0
[0175.735] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x1c, wParam=0x0, lParam=0x1060) returned 0x0
[0175.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x20, wParam=0x70036, lParam=0x200fffe) returned 0x0
[0177.546] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e57c) returned 0x0
[0177.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e57c) returned 0x0
[0177.550] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e2a8 | out: lpwndpl=0x53e2a8) returned 1
[0177.550] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x47, wParam=0x0, lParam=0x53e57c) returned 0x0
[0177.550] GetClientRect (in: hWnd=0x70036, lpRect=0x53e258 | out: lpRect=0x53e258) returned 1
[0177.550] GetWindowRect (in: hWnd=0x70036, lpRect=0x53e258 | out: lpRect=0x53e258) returned 1
[0177.551] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x47, wParam=0x0, lParam=0x53e57c) returned 0x0
[0177.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1c, wParam=0x1, lParam=0x1060) returned 0x0
[0177.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x1c, wParam=0x1, lParam=0x1060) returned 0x0
[0177.552] NtdllDefWindowProc_W (hWnd=0x901f8, Msg=0x1c, wParam=0x1, lParam=0x1060) returned 0x0
[0177.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x20, wParam=0x70036, lParam=0x200fffe) returned 0x0
[0177.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x20, wParam=0x70036, lParam=0x200fffe) returned 0x0
[0177.976] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0177.976] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0177.976] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x602da) returned 0x1
[0177.980] GetFocus () returned 0x602da
[0177.980] GetAncestor (hwnd=0x602da, gaFlags=0x1) returned 0x10010
[0177.980] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0177.980] SetFocus (hWnd=0x202c6) returned 0x0
[0177.982] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0177.984] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0177.984] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0177.984] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0177.984] GetFocus () returned 0x70036
[0177.985] SetFocus (hWnd=0x202c6) returned 0x0
[0178.005] IsWindow (hWnd=0x70036) returned 1
[0178.005] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0178.006] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0178.006] IsWindow (hWnd=0x70036) returned 1
[0178.006] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0178.006] IsWindow (hWnd=0x202c6) returned 1
[0178.006] SetFocus (hWnd=0x202c6) returned 0x70036
[0178.006] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0178.007] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0178.008] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0178.010] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0178.010] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0178.011] GetStockObject (i=5) returned 0x900015
[0178.011] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0178.011] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8da940) returned 0x7
[0178.011] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0178.011] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0178.011] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0178.011] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0178.013] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0178.013] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0178.013] GetFocus () returned 0x202c6
[0178.013] GetCapture () returned 0x0
[0178.014] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.014] IsWindowUnicode (hWnd=0x202c6) returned 1
[0178.014] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.014] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.014] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.015] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.016] IsWindowUnicode (hWnd=0x202c6) returned 1
[0178.016] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.016] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.016] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.016] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0178.016] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0178.016] CreateCompatibleDC (hdc=0xf0105ee) returned 0x7f0107bf
[0178.016] SelectObject (hdc=0x7f0107bf, h=0x1e0507b9) returned 0x85000f
[0178.017] GdipCreateFromHDC (hdc=0x7f0107bf, graphics=0x53e958) returned 0x0
[0178.018] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0178.018] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0178.018] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0178.018] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0178.018] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e9b8) returned 0x0
[0178.018] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0178.018] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0178.018] LocalFree (hMem=0x89ea88) returned 0x0
[0178.028] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0178.028] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0178.029] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0178.029] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e9ac) returned 0x0
[0178.029] GdipSaveGraphics (graphics=0x5da0378, state=0x53e9d8) returned 0x0
[0178.029] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd650dbd) returned 0x0
[0178.029] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0178.029] GdipGetDC (graphics=0x5da0378, hdc=0x53e7c4) returned 0x0
[0178.029] GetCurrentObject (hdc=0x7f0107bf, type=0x1) returned 0xb00017
[0178.029] GetCurrentObject (hdc=0x7f0107bf, type=0x2) returned 0x900010
[0178.029] GetCurrentObject (hdc=0x7f0107bf, type=0x7) returned 0x1e0507b9
[0178.030] GetCurrentObject (hdc=0x7f0107bf, type=0x6) returned 0x8a01c2
[0178.030] SaveDC (hdc=0x7f0107bf) returned 1
[0178.030] GetNearestColor (hdc=0x7f0107bf, color=0xff) returned 0xff
[0178.030] GetNearestColor (hdc=0x7f0107bf, color=0x55) returned 0x55
[0178.030] GetNearestColor (hdc=0x7f0107bf, color=0x0) returned 0x0
[0178.030] GetNearestColor (hdc=0x7f0107bf, color=0x55) returned 0x55
[0178.030] GetNearestColor (hdc=0x7f0107bf, color=0x0) returned 0x0
[0178.030] GetNearestColor (hdc=0x7f0107bf, color=0x8080ff) returned 0x8080ff
[0178.030] GetNearestColor (hdc=0x7f0107bf, color=0x7373e5) returned 0x7373e5
[0178.030] GetNearestColor (hdc=0x7f0107bf, color=0xe5) returned 0xe5
[0178.030] GetNearestColor (hdc=0x7f0107bf, color=0x0) returned 0x0
[0178.031] RestoreDC (hdc=0x7f0107bf, nSavedDC=-1) returned 1
[0178.031] GdipReleaseDC (graphics=0x5da0378, hdc=0x7f0107bf) returned 0x0
[0178.031] IsAppThemed () returned 0x1
[0178.031] GetThemeAppProperties () returned 0x3
[0178.031] GetThemeAppProperties () returned 0x3
[0178.031] IsAppThemed () returned 0x1
[0178.031] GetThemeAppProperties () returned 0x3
[0178.031] GetThemeAppProperties () returned 0x3
[0178.031] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x23b10d0 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0178.032] IsAppThemed () returned 0x1
[0178.032] GetThemeAppProperties () returned 0x3
[0178.032] GetThemeAppProperties () returned 0x3
[0178.032] IsAppThemed () returned 0x1
[0178.032] GetThemeAppProperties () returned 0x3
[0178.032] GetThemeAppProperties () returned 0x3
[0178.032] GetFocus () returned 0x202c6
[0178.033] IsAppThemed () returned 0x1
[0178.033] GetThemeAppProperties () returned 0x3
[0178.033] GetThemeAppProperties () returned 0x3
[0178.033] IsAppThemed () returned 0x1
[0178.033] GetThemeAppProperties () returned 0x3
[0178.033] GetThemeAppProperties () returned 0x3
[0178.033] IsThemePartDefined () returned 0x1
[0178.033] IsAppThemed () returned 0x1
[0178.033] GetThemeAppProperties () returned 0x3
[0178.033] GetThemeAppProperties () returned 0x3
[0178.033] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0178.033] IsAppThemed () returned 0x1
[0178.033] GetThemeAppProperties () returned 0x3
[0178.033] GetThemeAppProperties () returned 0x3
[0178.033] IsAppThemed () returned 0x1
[0178.033] GetThemeAppProperties () returned 0x3
[0178.033] GetThemeAppProperties () returned 0x3
[0178.033] IsThemePartDefined () returned 0x1
[0178.033] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0178.034] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0178.034] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0178.034] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0178.034] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e6e0) returned 0x0
[0178.034] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0178.034] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0178.034] LocalFree (hMem=0x89ec80) returned 0x0
[0178.038] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0178.038] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0178.038] LocalFree (hMem=0x89ea88) returned 0x0
[0178.038] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0178.038] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e708) returned 0x0
[0178.038] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6f8) returned 0x0
[0178.039] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e6f8) returned 0x0
[0178.039] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0178.039] GdipGetDC (graphics=0x5da0378, hdc=0x53e710) returned 0x0
[0178.039] GetCurrentObject (hdc=0x7f0107bf, type=0x1) returned 0xb00017
[0178.039] GetCurrentObject (hdc=0x7f0107bf, type=0x2) returned 0x900010
[0178.039] GetCurrentObject (hdc=0x7f0107bf, type=0x7) returned 0x1e0507b9
[0178.039] GetCurrentObject (hdc=0x7f0107bf, type=0x6) returned 0x8a01c2
[0178.040] SaveDC (hdc=0x7f0107bf) returned 1
[0178.040] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xca04051e
[0178.040] GetClipRgn (hdc=0x7f0107bf, hrgn=0xca04051e) returned 0
[0178.040] SelectClipRgn (hdc=0x7f0107bf, hrgn=0xea040798) returned 2
[0178.040] DeleteObject (ho=0xca04051e) returned 1
[0178.040] DeleteObject (ho=0xea040798) returned 1
[0178.040] OffsetViewportOrgEx (in: hdc=0x7f0107bf, x=0, y=0, lppt=0x23b1780 | out: lppt=0x23b1780) returned 1
[0178.040] DrawThemeParentBackground () returned 0x0
[0178.040] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0178.040] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0178.041] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0178.041] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0178.041] GetSystemMetrics (nIndex=42) returned 0
[0178.041] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0178.041] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0178.041] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0178.041] GetCurrentObject (hdc=0x7f0107bf, type=0x1) returned 0xb00017
[0178.041] GetCurrentObject (hdc=0x7f0107bf, type=0x2) returned 0x900010
[0178.041] GetCurrentObject (hdc=0x7f0107bf, type=0x7) returned 0x1e0507b9
[0178.041] GetCurrentObject (hdc=0x7f0107bf, type=0x6) returned 0x8a01c2
[0178.041] SaveDC (hdc=0x7f0107bf) returned 2
[0178.041] GetNearestColor (hdc=0x7f0107bf, color=0xff) returned 0xff
[0178.041] CreateSolidBrush (color=0xff) returned 0xaa10078d
[0178.041] FillRect (hDC=0x7f0107bf, lprc=0x53e128, hbr=0xaa10078d) returned 1
[0178.041] DeleteObject (ho=0xaa10078d) returned 1
[0178.041] RestoreDC (hdc=0x7f0107bf, nSavedDC=-1) returned 1
[0178.041] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0178.041] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0178.042] GetSystemMetrics (nIndex=42) returned 0
[0178.042] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0178.042] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0178.042] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0178.042] GetCurrentObject (hdc=0x7f0107bf, type=0x1) returned 0xb00017
[0178.042] GetCurrentObject (hdc=0x7f0107bf, type=0x2) returned 0x900010
[0178.042] GetCurrentObject (hdc=0x7f0107bf, type=0x7) returned 0x1e0507b9
[0178.042] GetCurrentObject (hdc=0x7f0107bf, type=0x6) returned 0x8a01c2
[0178.042] SaveDC (hdc=0x7f0107bf) returned 2
[0178.042] GetNearestColor (hdc=0x7f0107bf, color=0xff) returned 0xff
[0178.042] CreateSolidBrush (color=0xff) returned 0xab10078d
[0178.042] FillRect (hDC=0x7f0107bf, lprc=0x53e0c8, hbr=0xab10078d) returned 1
[0178.042] DeleteObject (ho=0xab10078d) returned 1
[0178.042] RestoreDC (hdc=0x7f0107bf, nSavedDC=-1) returned 1
[0178.042] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0178.042] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0178.042] GetSystemMetrics (nIndex=42) returned 0
[0178.042] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0178.042] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0178.043] RestoreDC (hdc=0x7f0107bf, nSavedDC=-1) returned 1
[0178.043] GdipReleaseDC (graphics=0x5da0378, hdc=0x7f0107bf) returned 0x0
[0178.043] IsAppThemed () returned 0x1
[0178.043] GetThemeAppProperties () returned 0x3
[0178.043] GetThemeAppProperties () returned 0x3
[0178.043] IsAppThemed () returned 0x1
[0178.043] GetThemeAppProperties () returned 0x3
[0178.043] GetThemeAppProperties () returned 0x3
[0178.043] IsThemePartDefined () returned 0x1
[0178.043] GdipCreateRegion (region=0x53e64c) returned 0x0
[0178.043] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0178.043] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0178.043] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0178.043] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e664) returned 0x0
[0178.043] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0178.043] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0178.043] LocalFree (hMem=0x89ee40) returned 0x0
[0178.043] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0178.043] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0178.043] LocalFree (hMem=0x89ec80) returned 0x0
[0178.044] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0178.044] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e68c) returned 0x0
[0178.044] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e67c) returned 0x0
[0178.044] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e67c) returned 0x0
[0178.044] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0178.044] GdipGetDC (graphics=0x5da0378, hdc=0x53e694) returned 0x0
[0178.044] GetCurrentObject (hdc=0x7f0107bf, type=0x1) returned 0xb00017
[0178.044] GetCurrentObject (hdc=0x7f0107bf, type=0x2) returned 0x900010
[0178.044] GetCurrentObject (hdc=0x7f0107bf, type=0x7) returned 0x1e0507b9
[0178.044] GetCurrentObject (hdc=0x7f0107bf, type=0x6) returned 0x8a01c2
[0178.044] SaveDC (hdc=0x7f0107bf) returned 1
[0178.044] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xeb040798
[0178.044] GetClipRgn (hdc=0x7f0107bf, hrgn=0xeb040798) returned 0
[0178.044] SelectClipRgn (hdc=0x7f0107bf, hrgn=0xcc04051e) returned 2
[0178.044] DeleteObject (ho=0xeb040798) returned 1
[0178.044] DeleteObject (ho=0xcc04051e) returned 1
[0178.044] OffsetViewportOrgEx (in: hdc=0x7f0107bf, x=0, y=0, lppt=0x23b1fe4 | out: lppt=0x23b1fe4) returned 1
[0178.044] IsAppThemed () returned 0x1
[0178.045] GetThemeAppProperties () returned 0x3
[0178.045] GetThemeAppProperties () returned 0x3
[0178.045] DrawThemeBackground () returned 0x0
[0178.045] RestoreDC (hdc=0x7f0107bf, nSavedDC=-1) returned 1
[0178.045] GdipReleaseDC (graphics=0x5da0378, hdc=0x7f0107bf) returned 0x0
[0178.045] GdipCreateRegion (region=0x53e650) returned 0x0
[0178.045] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0178.045] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0178.045] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0178.045] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e668) returned 0x0
[0178.045] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0178.045] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee40) returned 0x0
[0178.045] LocalFree (hMem=0x89ee40) returned 0x0
[0178.045] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0178.045] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee40) returned 0x0
[0178.045] LocalFree (hMem=0x89ee40) returned 0x0
[0178.045] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0178.045] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e690) returned 0x0
[0178.046] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e680) returned 0x0
[0178.046] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e680) returned 0x0
[0178.046] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0178.046] GdipGetDC (graphics=0x5da0378, hdc=0x53e698) returned 0x0
[0178.046] GetCurrentObject (hdc=0x7f0107bf, type=0x1) returned 0xb00017
[0178.046] GetCurrentObject (hdc=0x7f0107bf, type=0x2) returned 0x900010
[0178.046] GetCurrentObject (hdc=0x7f0107bf, type=0x7) returned 0x1e0507b9
[0178.046] GetCurrentObject (hdc=0x7f0107bf, type=0x6) returned 0x8a01c2
[0178.046] SaveDC (hdc=0x7f0107bf) returned 1
[0178.046] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcd04051e
[0178.046] GetClipRgn (hdc=0x7f0107bf, hrgn=0xcd04051e) returned 0
[0178.046] SelectClipRgn (hdc=0x7f0107bf, hrgn=0xec040798) returned 2
[0178.046] DeleteObject (ho=0xcd04051e) returned 1
[0178.046] DeleteObject (ho=0xec040798) returned 1
[0178.046] OffsetViewportOrgEx (in: hdc=0x7f0107bf, x=0, y=0, lppt=0x23b22b8 | out: lppt=0x23b22b8) returned 1
[0178.046] IsAppThemed () returned 0x1
[0178.046] GetThemeAppProperties () returned 0x3
[0178.047] GetThemeAppProperties () returned 0x3
[0178.047] GetThemeBackgroundContentRect () returned 0x0
[0178.047] RestoreDC (hdc=0x7f0107bf, nSavedDC=-1) returned 1
[0178.047] GdipReleaseDC (graphics=0x5da0378, hdc=0x7f0107bf) returned 0x0
[0178.047] IsAppThemed () returned 0x1
[0178.047] GetThemeAppProperties () returned 0x3
[0178.047] GetThemeAppProperties () returned 0x3
[0178.047] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e7cc) returned 0x0
[0178.047] GdipGetDC (graphics=0x5da0378, hdc=0x53e7b8) returned 0x0
[0178.047] GetCurrentObject (hdc=0x7f0107bf, type=0x1) returned 0xb00017
[0178.047] GetCurrentObject (hdc=0x7f0107bf, type=0x2) returned 0x900010
[0178.047] GetCurrentObject (hdc=0x7f0107bf, type=0x7) returned 0x1e0507b9
[0178.047] GetCurrentObject (hdc=0x7f0107bf, type=0x6) returned 0x8a01c2
[0178.047] SaveDC (hdc=0x7f0107bf) returned 1
[0178.048] GetTextAlign (hdc=0x7f0107bf) returned 0x0
[0178.048] GetTextColor (hdc=0x7f0107bf) returned 0x0
[0178.048] GetCurrentObject (hdc=0x7f0107bf, type=0x6) returned 0x8a01c2
[0178.048] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0178.048] SelectObject (hdc=0x7f0107bf, h=0x450a0799) returned 0x8a01c2
[0178.048] GetBkMode (hdc=0x7f0107bf) returned 2
[0178.048] SetBkMode (hdc=0x7f0107bf, mode=1) returned 2
[0178.048] DrawTextExW (in: hdc=0x7f0107bf, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x23b2658 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0178.048] DrawTextExW (in: hdc=0x7f0107bf, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x23b2658 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0178.049] RestoreDC (hdc=0x7f0107bf, nSavedDC=-1) returned 1
[0178.049] GdipReleaseDC (graphics=0x5da0378, hdc=0x7f0107bf) returned 0x0
[0178.049] GetFocus () returned 0x202c6
[0178.049] IsAppThemed () returned 0x1
[0178.049] GetThemeAppProperties () returned 0x3
[0178.049] GetThemeAppProperties () returned 0x3
[0178.049] GdipGetDC (graphics=0x5da0378, hdc=0x53e998) returned 0x0
[0178.049] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x7f0107bf, x1=0, y1=0, rop=0xcc0020) returned 1
[0178.049] GdipReleaseDC (graphics=0x5da0378, hdc=0x7f0107bf) returned 0x0
[0178.049] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0178.049] SelectObject (hdc=0x7f0107bf, h=0x85000f) returned 0x1e0507b9
[0178.049] DeleteDC (hdc=0x7f0107bf) returned 1
[0178.050] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0178.050] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0178.050] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.050] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.050] WaitMessage () returned 1
[0178.053] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.054] IsWindowUnicode (hWnd=0x102dc) returned 1
[0178.054] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.054] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.054] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.055] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.055] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.055] WaitMessage () returned 1
[0178.079] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.079] IsWindowUnicode (hWnd=0x102dc) returned 1
[0178.079] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.080] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.080] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.080] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.080] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.080] WaitMessage () returned 1
[0178.085] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.085] IsWindowUnicode (hWnd=0x102dc) returned 1
[0178.086] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.086] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.086] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.086] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.087] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.087] WaitMessage () returned 1
[0178.087] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.088] IsWindowUnicode (hWnd=0x102dc) returned 1
[0178.088] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.088] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.088] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.089] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.089] IsWindowUnicode (hWnd=0x102dc) returned 1
[0178.089] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.089] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.089] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.089] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.089] IsWindowUnicode (hWnd=0x102dc) returned 1
[0178.089] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.090] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.090] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.090] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.090] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.090] WaitMessage () returned 1
[0178.093] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.093] IsWindowUnicode (hWnd=0x102dc) returned 1
[0178.093] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.093] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.093] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.098] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.098] IsWindowUnicode (hWnd=0x102dc) returned 1
[0178.098] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.098] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.098] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.099] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.099] IsWindowUnicode (hWnd=0x102dc) returned 1
[0178.099] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.099] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.099] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.099] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.099] IsWindowUnicode (hWnd=0x102dc) returned 1
[0178.099] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.099] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.099] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.100] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.100] IsWindowUnicode (hWnd=0x102dc) returned 1
[0178.100] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.100] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.100] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.100] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.101] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.101] WaitMessage () returned 1
[0178.116] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.116] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.116] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.116] DispatchMessageA (lpMsg=0x53eef8) returned 0x0
[0178.116] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.116] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.116] WaitMessage () returned 1
[0178.316] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.316] IsWindowUnicode (hWnd=0x202d0) returned 1
[0178.316] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.316] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.316] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0178.316] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.316] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.316] WaitMessage () returned 1
[0178.551] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.551] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0178.551] TranslateMessage (lpMsg=0x53eef8) returned 0
[0178.551] DispatchMessageA (lpMsg=0x53eef8) returned 0x7f18
[0178.551] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.551] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0178.551] WaitMessage () returned 1
[0179.551] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.551] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.551] TranslateMessage (lpMsg=0x53eef8) returned 0
[0179.551] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0179.555] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0179.555] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0179.555] WaitMessage () returned 1
[0179.569] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.570] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192024c) returned 0x1
[0179.570] IsWindowUnicode (hWnd=0x202c6) returned 1
[0179.570] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.571] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192024c) returned 0x1
[0179.571] SetCursor (hCursor=0x10003) returned 0x10003
[0179.571] TranslateMessage (lpMsg=0x53eef8) returned 0
[0179.571] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0179.571] _TrackMouseEvent (in: lpEventTrack=0x23276fc | out: lpEventTrack=0x23276fc) returned 1
[0179.571] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0179.571] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0179.571] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0179.572] GetKeyState (nVirtKey=1) returned 1
[0179.572] GetKeyState (nVirtKey=2) returned 0
[0179.572] GetKeyState (nVirtKey=4) returned 0
[0179.572] GetKeyState (nVirtKey=5) returned 0
[0179.572] GetKeyState (nVirtKey=6) returned 0
[0179.572] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.572] IsWindowUnicode (hWnd=0x202c6) returned 1
[0179.572] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.572] TranslateMessage (lpMsg=0x53eef8) returned 0
[0179.572] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0179.572] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0179.572] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0179.573] CreateCompatibleDC (hdc=0xf0105ee) returned 0xdf0107a4
[0179.573] SelectObject (hdc=0xdf0107a4, h=0x1e0507b9) returned 0x85000f
[0179.573] GdipCreateFromHDC (hdc=0xdf0107a4, graphics=0x53e958) returned 0x0
[0179.573] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0179.573] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0179.573] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0179.573] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0179.574] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e9b8) returned 0x0
[0179.574] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0179.574] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0179.574] LocalFree (hMem=0x89ea88) returned 0x0
[0179.574] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0179.574] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0179.574] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0179.574] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e9ac) returned 0x0
[0179.574] GdipSaveGraphics (graphics=0x5da0378, state=0x53e9d8) returned 0x0
[0179.574] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd630dbd) returned 0x0
[0179.574] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0179.574] GdipGetDC (graphics=0x5da0378, hdc=0x53e7b8) returned 0x0
[0179.574] GetCurrentObject (hdc=0xdf0107a4, type=0x1) returned 0xb00017
[0179.574] GetCurrentObject (hdc=0xdf0107a4, type=0x2) returned 0x900010
[0179.574] GetCurrentObject (hdc=0xdf0107a4, type=0x7) returned 0x1e0507b9
[0179.575] GetCurrentObject (hdc=0xdf0107a4, type=0x6) returned 0x8a01c2
[0179.575] SaveDC (hdc=0xdf0107a4) returned 1
[0179.575] GetNearestColor (hdc=0xdf0107a4, color=0xff) returned 0xff
[0179.575] GetNearestColor (hdc=0xdf0107a4, color=0x55) returned 0x55
[0179.575] GetNearestColor (hdc=0xdf0107a4, color=0x0) returned 0x0
[0179.575] GetNearestColor (hdc=0xdf0107a4, color=0x55) returned 0x55
[0179.575] GetNearestColor (hdc=0xdf0107a4, color=0x0) returned 0x0
[0179.575] GetNearestColor (hdc=0xdf0107a4, color=0x8080ff) returned 0x8080ff
[0179.575] GetNearestColor (hdc=0xdf0107a4, color=0x7373e5) returned 0x7373e5
[0179.575] GetNearestColor (hdc=0xdf0107a4, color=0xe5) returned 0xe5
[0179.575] GetNearestColor (hdc=0xdf0107a4, color=0x0) returned 0x0
[0179.575] RestoreDC (hdc=0xdf0107a4, nSavedDC=-1) returned 1
[0179.576] GdipReleaseDC (graphics=0x5da0378, hdc=0xdf0107a4) returned 0x0
[0179.576] IsAppThemed () returned 0x1
[0179.576] GetThemeAppProperties () returned 0x3
[0179.576] GetThemeAppProperties () returned 0x3
[0179.576] IsAppThemed () returned 0x1
[0179.576] GetThemeAppProperties () returned 0x3
[0179.576] GetThemeAppProperties () returned 0x3
[0179.576] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x23b2fc8 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0179.576] IsAppThemed () returned 0x1
[0179.577] GetThemeAppProperties () returned 0x3
[0179.577] GetThemeAppProperties () returned 0x3
[0179.577] IsAppThemed () returned 0x1
[0179.577] GetThemeAppProperties () returned 0x3
[0179.577] GetThemeAppProperties () returned 0x3
[0179.577] IsAppThemed () returned 0x1
[0179.577] GetThemeAppProperties () returned 0x3
[0179.577] GetThemeAppProperties () returned 0x3
[0179.577] IsAppThemed () returned 0x1
[0179.577] GetThemeAppProperties () returned 0x3
[0179.577] GetThemeAppProperties () returned 0x3
[0179.577] IsThemePartDefined () returned 0x1
[0179.577] IsAppThemed () returned 0x1
[0179.577] GetThemeAppProperties () returned 0x3
[0179.577] GetThemeAppProperties () returned 0x3
[0179.577] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0179.577] IsAppThemed () returned 0x1
[0179.577] GetThemeAppProperties () returned 0x3
[0179.577] GetThemeAppProperties () returned 0x3
[0179.578] IsAppThemed () returned 0x1
[0179.578] GetThemeAppProperties () returned 0x3
[0179.578] GetThemeAppProperties () returned 0x3
[0179.578] IsThemePartDefined () returned 0x1
[0179.578] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0179.578] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0179.578] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0179.578] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0179.578] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e6d4) returned 0x0
[0179.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0179.578] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0179.578] LocalFree (hMem=0x89ee08) returned 0x0
[0179.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0179.578] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0179.578] LocalFree (hMem=0x89ea88) returned 0x0
[0179.578] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0179.578] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6fc) returned 0x0
[0179.579] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6ec) returned 0x0
[0179.579] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e6ec) returned 0x0
[0179.579] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0179.579] GdipGetDC (graphics=0x5da0378, hdc=0x53e704) returned 0x0
[0179.579] GetCurrentObject (hdc=0xdf0107a4, type=0x1) returned 0xb00017
[0179.579] GetCurrentObject (hdc=0xdf0107a4, type=0x2) returned 0x900010
[0179.579] GetCurrentObject (hdc=0xdf0107a4, type=0x7) returned 0x1e0507b9
[0179.579] GetCurrentObject (hdc=0xdf0107a4, type=0x6) returned 0x8a01c2
[0179.579] SaveDC (hdc=0xdf0107a4) returned 1
[0179.579] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xed040798
[0179.579] GetClipRgn (hdc=0xdf0107a4, hrgn=0xed040798) returned 0
[0179.579] SelectClipRgn (hdc=0xdf0107a4, hrgn=0xd104051e) returned 2
[0179.579] DeleteObject (ho=0xed040798) returned 1
[0179.579] DeleteObject (ho=0xd104051e) returned 1
[0179.579] OffsetViewportOrgEx (in: hdc=0xdf0107a4, x=0, y=0, lppt=0x23b3678 | out: lppt=0x23b3678) returned 1
[0179.580] DrawThemeParentBackground () returned 0x0
[0179.580] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0179.580] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0179.580] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0179.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0179.580] GetSystemMetrics (nIndex=42) returned 0
[0179.580] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0179.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0179.580] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0179.580] GetCurrentObject (hdc=0xdf0107a4, type=0x1) returned 0xb00017
[0179.580] GetCurrentObject (hdc=0xdf0107a4, type=0x2) returned 0x900010
[0179.580] GetCurrentObject (hdc=0xdf0107a4, type=0x7) returned 0x1e0507b9
[0179.580] GetCurrentObject (hdc=0xdf0107a4, type=0x6) returned 0x8a01c2
[0179.581] SaveDC (hdc=0xdf0107a4) returned 2
[0179.581] GetNearestColor (hdc=0xdf0107a4, color=0xff) returned 0xff
[0179.581] CreateSolidBrush (color=0xff) returned 0xac10078d
[0179.581] FillRect (hDC=0xdf0107a4, lprc=0x53e120, hbr=0xac10078d) returned 1
[0179.581] DeleteObject (ho=0xac10078d) returned 1
[0179.581] RestoreDC (hdc=0xdf0107a4, nSavedDC=-1) returned 1
[0179.581] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0179.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0179.581] GetSystemMetrics (nIndex=42) returned 0
[0179.581] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0179.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0179.581] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0179.581] GetCurrentObject (hdc=0xdf0107a4, type=0x1) returned 0xb00017
[0179.582] GetCurrentObject (hdc=0xdf0107a4, type=0x2) returned 0x900010
[0179.582] GetCurrentObject (hdc=0xdf0107a4, type=0x7) returned 0x1e0507b9
[0179.582] GetCurrentObject (hdc=0xdf0107a4, type=0x6) returned 0x8a01c2
[0179.582] SaveDC (hdc=0xdf0107a4) returned 2
[0179.582] GetNearestColor (hdc=0xdf0107a4, color=0xff) returned 0xff
[0179.582] CreateSolidBrush (color=0xff) returned 0xad10078d
[0179.582] FillRect (hDC=0xdf0107a4, lprc=0x53e0c0, hbr=0xad10078d) returned 1
[0179.582] DeleteObject (ho=0xad10078d) returned 1
[0179.582] RestoreDC (hdc=0xdf0107a4, nSavedDC=-1) returned 1
[0179.582] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0179.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0179.582] GetSystemMetrics (nIndex=42) returned 0
[0179.582] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0179.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0179.583] RestoreDC (hdc=0xdf0107a4, nSavedDC=-1) returned 1
[0179.583] GdipReleaseDC (graphics=0x5da0378, hdc=0xdf0107a4) returned 0x0
[0179.583] IsAppThemed () returned 0x1
[0179.583] GetThemeAppProperties () returned 0x3
[0179.583] GetThemeAppProperties () returned 0x3
[0179.583] IsAppThemed () returned 0x1
[0179.583] GetThemeAppProperties () returned 0x3
[0179.583] GetThemeAppProperties () returned 0x3
[0179.583] IsThemePartDefined () returned 0x1
[0179.583] GdipCreateRegion (region=0x53e640) returned 0x0
[0179.583] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0179.583] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0179.583] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0179.583] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e658) returned 0x0
[0179.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0179.583] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0179.584] LocalFree (hMem=0x89ea88) returned 0x0
[0179.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0179.584] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0179.584] LocalFree (hMem=0x89ea88) returned 0x0
[0179.584] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0179.584] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e680) returned 0x0
[0179.584] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e670) returned 0x0
[0179.584] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e670) returned 0x0
[0179.584] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0179.584] GdipGetDC (graphics=0x5da0378, hdc=0x53e688) returned 0x0
[0179.584] GetCurrentObject (hdc=0xdf0107a4, type=0x1) returned 0xb00017
[0179.584] GetCurrentObject (hdc=0xdf0107a4, type=0x2) returned 0x900010
[0179.584] GetCurrentObject (hdc=0xdf0107a4, type=0x7) returned 0x1e0507b9
[0179.584] GetCurrentObject (hdc=0xdf0107a4, type=0x6) returned 0x8a01c2
[0179.584] SaveDC (hdc=0xdf0107a4) returned 1
[0179.585] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd204051e
[0179.585] GetClipRgn (hdc=0xdf0107a4, hrgn=0xd204051e) returned 0
[0179.585] SelectClipRgn (hdc=0xdf0107a4, hrgn=0xef040798) returned 2
[0179.585] DeleteObject (ho=0xd204051e) returned 1
[0179.585] DeleteObject (ho=0xef040798) returned 1
[0179.585] OffsetViewportOrgEx (in: hdc=0xdf0107a4, x=0, y=0, lppt=0x23b3edc | out: lppt=0x23b3edc) returned 1
[0179.585] IsAppThemed () returned 0x1
[0179.585] GetThemeAppProperties () returned 0x3
[0179.585] GetThemeAppProperties () returned 0x3
[0179.585] DrawThemeBackground () returned 0x0
[0179.585] RestoreDC (hdc=0xdf0107a4, nSavedDC=-1) returned 1
[0179.585] GdipReleaseDC (graphics=0x5da0378, hdc=0xdf0107a4) returned 0x0
[0179.585] GdipCreateRegion (region=0x53e644) returned 0x0
[0179.586] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0179.586] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0179.586] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0179.586] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e65c) returned 0x0
[0179.586] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0179.586] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0179.586] LocalFree (hMem=0x89ec80) returned 0x0
[0179.586] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0179.586] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0179.586] LocalFree (hMem=0x89ee08) returned 0x0
[0179.586] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0179.586] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e684) returned 0x0
[0179.586] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e674) returned 0x0
[0179.586] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e674) returned 0x0
[0179.586] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0179.586] GdipGetDC (graphics=0x5da0378, hdc=0x53e68c) returned 0x0
[0179.586] GetCurrentObject (hdc=0xdf0107a4, type=0x1) returned 0xb00017
[0179.587] GetCurrentObject (hdc=0xdf0107a4, type=0x2) returned 0x900010
[0179.587] GetCurrentObject (hdc=0xdf0107a4, type=0x7) returned 0x1e0507b9
[0179.587] GetCurrentObject (hdc=0xdf0107a4, type=0x6) returned 0x8a01c2
[0179.587] SaveDC (hdc=0xdf0107a4) returned 1
[0179.587] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf0040798
[0179.587] GetClipRgn (hdc=0xdf0107a4, hrgn=0xf0040798) returned 0
[0179.587] SelectClipRgn (hdc=0xdf0107a4, hrgn=0xd304051e) returned 2
[0179.587] DeleteObject (ho=0xf0040798) returned 1
[0179.587] DeleteObject (ho=0xd304051e) returned 1
[0179.587] OffsetViewportOrgEx (in: hdc=0xdf0107a4, x=0, y=0, lppt=0x23b41b0 | out: lppt=0x23b41b0) returned 1
[0179.587] IsAppThemed () returned 0x1
[0179.587] GetThemeAppProperties () returned 0x3
[0179.587] GetThemeAppProperties () returned 0x3
[0179.587] GetThemeBackgroundContentRect () returned 0x0
[0179.587] RestoreDC (hdc=0xdf0107a4, nSavedDC=-1) returned 1
[0179.588] GdipReleaseDC (graphics=0x5da0378, hdc=0xdf0107a4) returned 0x0
[0179.588] IsAppThemed () returned 0x1
[0179.588] GetThemeAppProperties () returned 0x3
[0179.588] GetThemeAppProperties () returned 0x3
[0179.588] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e7c0) returned 0x0
[0179.588] GdipGetDC (graphics=0x5da0378, hdc=0x53e7ac) returned 0x0
[0179.588] GetCurrentObject (hdc=0xdf0107a4, type=0x1) returned 0xb00017
[0179.588] GetCurrentObject (hdc=0xdf0107a4, type=0x2) returned 0x900010
[0179.588] GetCurrentObject (hdc=0xdf0107a4, type=0x7) returned 0x1e0507b9
[0179.588] GetCurrentObject (hdc=0xdf0107a4, type=0x6) returned 0x8a01c2
[0179.588] SaveDC (hdc=0xdf0107a4) returned 1
[0179.588] GetTextAlign (hdc=0xdf0107a4) returned 0x0
[0179.588] GetTextColor (hdc=0xdf0107a4) returned 0x0
[0179.589] GetCurrentObject (hdc=0xdf0107a4, type=0x6) returned 0x8a01c2
[0179.589] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0179.589] SelectObject (hdc=0xdf0107a4, h=0x450a0799) returned 0x8a01c2
[0179.589] GetBkMode (hdc=0xdf0107a4) returned 2
[0179.589] SetBkMode (hdc=0xdf0107a4, mode=1) returned 2
[0179.589] DrawTextExW (in: hdc=0xdf0107a4, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x23b4550 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0179.589] DrawTextExW (in: hdc=0xdf0107a4, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x23b4550 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0179.590] RestoreDC (hdc=0xdf0107a4, nSavedDC=-1) returned 1
[0179.590] GdipReleaseDC (graphics=0x5da0378, hdc=0xdf0107a4) returned 0x0
[0179.590] GetFocus () returned 0x202c6
[0179.590] IsAppThemed () returned 0x1
[0179.590] GetThemeAppProperties () returned 0x3
[0179.590] GetThemeAppProperties () returned 0x3
[0179.590] GdipGetDC (graphics=0x5da0378, hdc=0x53e998) returned 0x0
[0179.590] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xdf0107a4, x1=0, y1=0, rop=0xcc0020) returned 1
[0179.591] GdipReleaseDC (graphics=0x5da0378, hdc=0xdf0107a4) returned 0x0
[0179.591] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0179.591] SelectObject (hdc=0xdf0107a4, h=0x85000f) returned 0x1e0507b9
[0179.591] DeleteDC (hdc=0xdf0107a4) returned 1
[0179.592] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0179.592] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0179.592] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0179.592] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0179.592] WaitMessage () returned 1
[0179.677] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.677] IsWindowUnicode (hWnd=0x202c6) returned 1
[0179.677] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.677] TranslateMessage (lpMsg=0x53eef8) returned 0
[0179.678] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0179.678] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.678] IsWindowUnicode (hWnd=0x202c6) returned 1
[0179.678] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.678] TranslateMessage (lpMsg=0x53eef8) returned 0
[0179.678] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0179.678] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xa005c) returned 0x0
[0179.678] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0179.678] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0179.678] WaitMessage () returned 1
[0179.799] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.799] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192024c) returned 0x1
[0179.799] IsWindowUnicode (hWnd=0x202c6) returned 1
[0179.799] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.799] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192024c) returned 0x1
[0179.800] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0179.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12501f6) returned 0x0
[0179.800] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0179.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0179.800] SetCursor (hCursor=0x10003) returned 0x10003
[0179.800] TranslateMessage (lpMsg=0x53eef8) returned 0
[0179.800] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0179.800] GetKeyState (nVirtKey=1) returned -128
[0179.800] GetKeyState (nVirtKey=2) returned 0
[0179.800] GetKeyState (nVirtKey=4) returned 0
[0179.801] GetKeyState (nVirtKey=5) returned 0
[0179.801] GetKeyState (nVirtKey=6) returned 0
[0179.801] IsWindowVisible (hWnd=0x202c6) returned 1
[0179.801] IsWindowEnabled (hWnd=0x202c6) returned 1
[0179.801] SetFocus (hWnd=0x202c6) returned 0x202c6
[0179.801] GetFocus () returned 0x202c6
[0179.801] GetFocus () returned 0x202c6
[0179.801] GetFocus () returned 0x202c6
[0179.801] GetKeyState (nVirtKey=1) returned -128
[0179.801] GetKeyState (nVirtKey=2) returned 0
[0179.801] GetKeyState (nVirtKey=4) returned 0
[0179.801] GetKeyState (nVirtKey=5) returned 0
[0179.801] GetKeyState (nVirtKey=6) returned 0
[0179.801] GetCapture () returned 0x0
[0179.801] SetCapture (hWnd=0x202c6) returned 0x0
[0179.801] GetKeyState (nVirtKey=1) returned -128
[0179.801] GetKeyState (nVirtKey=2) returned 0
[0179.801] GetKeyState (nVirtKey=4) returned 0
[0179.801] GetKeyState (nVirtKey=5) returned 0
[0179.801] GetKeyState (nVirtKey=6) returned 0
[0179.802] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0179.802] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0179.802] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.802] IsWindowUnicode (hWnd=0x202c6) returned 1
[0179.802] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0179.802] TranslateMessage (lpMsg=0x53eef8) returned 0
[0179.802] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0179.802] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23b46d4, cPoints=0x1 | out: lpPoints=0x23b46d4) returned 25690608
[0179.802] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0179.802] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0179.802] UpdateWindow (hWnd=0x202c6) returned 1
[0179.803] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0179.803] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0179.803] CreateCompatibleDC (hdc=0xf0105ee) returned 0xe00107a4
[0179.803] SelectObject (hdc=0xe00107a4, h=0x1e0507b9) returned 0x85000f
[0179.803] GdipCreateFromHDC (hdc=0xe00107a4, graphics=0x53e5f0) returned 0x0
[0179.803] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0179.803] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0179.804] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0179.804] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0179.804] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e650) returned 0x0
[0179.804] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0179.804] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0179.804] LocalFree (hMem=0x89ee08) returned 0x0
[0179.804] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0179.804] GdipCreateRegion (region=0x53e638) returned 0x0
[0179.804] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0179.804] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e644) returned 0x0
[0179.804] GdipSaveGraphics (graphics=0x5da0378, state=0x53e670) returned 0x0
[0179.804] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd610dbd) returned 0x0
[0179.804] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0179.805] GdipGetDC (graphics=0x5da0378, hdc=0x53e450) returned 0x0
[0179.805] GetCurrentObject (hdc=0xe00107a4, type=0x1) returned 0xb00017
[0179.805] GetCurrentObject (hdc=0xe00107a4, type=0x2) returned 0x900010
[0179.805] GetCurrentObject (hdc=0xe00107a4, type=0x7) returned 0x1e0507b9
[0179.805] GetCurrentObject (hdc=0xe00107a4, type=0x6) returned 0x8a01c2
[0179.805] SaveDC (hdc=0xe00107a4) returned 1
[0179.805] GetNearestColor (hdc=0xe00107a4, color=0xff) returned 0xff
[0179.805] GetNearestColor (hdc=0xe00107a4, color=0x55) returned 0x55
[0179.805] GetNearestColor (hdc=0xe00107a4, color=0x0) returned 0x0
[0179.805] GetNearestColor (hdc=0xe00107a4, color=0x55) returned 0x55
[0179.805] GetNearestColor (hdc=0xe00107a4, color=0x0) returned 0x0
[0179.805] GetNearestColor (hdc=0xe00107a4, color=0x8080ff) returned 0x8080ff
[0179.806] GetNearestColor (hdc=0xe00107a4, color=0x7373e5) returned 0x7373e5
[0179.806] GetNearestColor (hdc=0xe00107a4, color=0xe5) returned 0xe5
[0179.806] GetNearestColor (hdc=0xe00107a4, color=0x0) returned 0x0
[0179.806] RestoreDC (hdc=0xe00107a4, nSavedDC=-1) returned 1
[0179.806] GdipReleaseDC (graphics=0x5da0378, hdc=0xe00107a4) returned 0x0
[0179.806] IsAppThemed () returned 0x1
[0179.806] GetThemeAppProperties () returned 0x3
[0179.806] GetThemeAppProperties () returned 0x3
[0179.806] IsAppThemed () returned 0x1
[0179.806] GetThemeAppProperties () returned 0x3
[0179.806] GetThemeAppProperties () returned 0x3
[0179.807] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x23b4df0 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0179.807] IsAppThemed () returned 0x1
[0179.807] GetThemeAppProperties () returned 0x3
[0179.807] GetThemeAppProperties () returned 0x3
[0179.807] IsAppThemed () returned 0x1
[0179.807] GetThemeAppProperties () returned 0x3
[0179.807] GetThemeAppProperties () returned 0x3
[0179.807] IsAppThemed () returned 0x1
[0179.809] GetThemeAppProperties () returned 0x3
[0179.809] GetThemeAppProperties () returned 0x3
[0179.810] IsAppThemed () returned 0x1
[0179.810] GetThemeAppProperties () returned 0x3
[0179.810] GetThemeAppProperties () returned 0x3
[0179.810] IsThemePartDefined () returned 0x1
[0179.810] IsAppThemed () returned 0x1
[0179.810] GetThemeAppProperties () returned 0x3
[0179.810] GetThemeAppProperties () returned 0x3
[0179.810] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0179.810] IsAppThemed () returned 0x1
[0179.810] GetThemeAppProperties () returned 0x3
[0179.810] GetThemeAppProperties () returned 0x3
[0179.810] IsAppThemed () returned 0x1
[0179.810] GetThemeAppProperties () returned 0x3
[0179.810] GetThemeAppProperties () returned 0x3
[0179.810] IsThemePartDefined () returned 0x1
[0179.810] GdipCreateRegion (region=0x53e354) returned 0x0
[0179.810] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0179.810] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0179.810] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0179.810] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e36c) returned 0x0
[0179.810] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0179.811] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0179.811] LocalFree (hMem=0x89ee08) returned 0x0
[0179.811] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0179.811] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0179.811] LocalFree (hMem=0x89ee08) returned 0x0
[0179.811] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0179.811] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e394) returned 0x0
[0179.811] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e384) returned 0x0
[0179.811] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e384) returned 0x0
[0179.811] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0179.811] GdipGetDC (graphics=0x5da0378, hdc=0x53e39c) returned 0x0
[0179.811] GetCurrentObject (hdc=0xe00107a4, type=0x1) returned 0xb00017
[0179.811] GetCurrentObject (hdc=0xe00107a4, type=0x2) returned 0x900010
[0179.811] GetCurrentObject (hdc=0xe00107a4, type=0x7) returned 0x1e0507b9
[0179.811] GetCurrentObject (hdc=0xe00107a4, type=0x6) returned 0x8a01c2
[0179.811] SaveDC (hdc=0xe00107a4) returned 1
[0179.812] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd404051e
[0179.812] GetClipRgn (hdc=0xe00107a4, hrgn=0xd404051e) returned 0
[0179.812] SelectClipRgn (hdc=0xe00107a4, hrgn=0xf4040798) returned 2
[0179.812] DeleteObject (ho=0xd404051e) returned 1
[0179.812] DeleteObject (ho=0xf4040798) returned 1
[0179.812] OffsetViewportOrgEx (in: hdc=0xe00107a4, x=0, y=0, lppt=0x23b54a0 | out: lppt=0x23b54a0) returned 1
[0179.812] DrawThemeParentBackground () returned 0x0
[0179.812] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0179.812] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0179.812] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0179.812] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0179.813] GetSystemMetrics (nIndex=42) returned 0
[0179.813] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0179.813] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0179.813] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0179.813] GetCurrentObject (hdc=0xe00107a4, type=0x1) returned 0xb00017
[0179.813] GetCurrentObject (hdc=0xe00107a4, type=0x2) returned 0x900010
[0179.813] GetCurrentObject (hdc=0xe00107a4, type=0x7) returned 0x1e0507b9
[0179.813] GetCurrentObject (hdc=0xe00107a4, type=0x6) returned 0x8a01c2
[0179.813] SaveDC (hdc=0xe00107a4) returned 2
[0179.813] GetNearestColor (hdc=0xe00107a4, color=0xff) returned 0xff
[0179.813] CreateSolidBrush (color=0xff) returned 0xae10078d
[0179.813] FillRect (hDC=0xe00107a4, lprc=0x53ddb8, hbr=0xae10078d) returned 1
[0179.813] DeleteObject (ho=0xae10078d) returned 1
[0179.813] RestoreDC (hdc=0xe00107a4, nSavedDC=-1) returned 1
[0179.814] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0179.814] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0179.814] GetSystemMetrics (nIndex=42) returned 0
[0179.814] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0179.814] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0179.814] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0179.814] GetCurrentObject (hdc=0xe00107a4, type=0x1) returned 0xb00017
[0179.814] GetCurrentObject (hdc=0xe00107a4, type=0x2) returned 0x900010
[0179.814] GetCurrentObject (hdc=0xe00107a4, type=0x7) returned 0x1e0507b9
[0179.814] GetCurrentObject (hdc=0xe00107a4, type=0x6) returned 0x8a01c2
[0179.814] SaveDC (hdc=0xe00107a4) returned 2
[0179.814] GetNearestColor (hdc=0xe00107a4, color=0xff) returned 0xff
[0179.814] CreateSolidBrush (color=0xff) returned 0xaf10078d
[0179.814] FillRect (hDC=0xe00107a4, lprc=0x53dd58, hbr=0xaf10078d) returned 1
[0179.814] DeleteObject (ho=0xaf10078d) returned 1
[0179.814] RestoreDC (hdc=0xe00107a4, nSavedDC=-1) returned 1
[0179.815] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0179.815] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0179.815] GetSystemMetrics (nIndex=42) returned 0
[0179.815] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0179.815] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0179.815] RestoreDC (hdc=0xe00107a4, nSavedDC=-1) returned 1
[0179.815] GdipReleaseDC (graphics=0x5da0378, hdc=0xe00107a4) returned 0x0
[0179.815] IsAppThemed () returned 0x1
[0179.816] GetThemeAppProperties () returned 0x3
[0179.816] GetThemeAppProperties () returned 0x3
[0179.816] IsAppThemed () returned 0x1
[0179.816] GetThemeAppProperties () returned 0x3
[0179.816] GetThemeAppProperties () returned 0x3
[0179.816] IsThemePartDefined () returned 0x1
[0179.816] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0179.816] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0179.816] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0179.816] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0179.816] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f0) returned 0x0
[0179.816] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0179.816] LocalFree (hMem=0x89ee08) returned 0x0
[0179.816] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0179.816] LocalFree (hMem=0x89ea88) returned 0x0
[0179.816] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0179.816] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e318) returned 0x0
[0179.817] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e308) returned 0x0
[0179.817] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e308) returned 0x0
[0179.817] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0179.817] GdipGetDC (graphics=0x5da0378, hdc=0x53e320) returned 0x0
[0179.817] GetCurrentObject (hdc=0xe00107a4, type=0x1) returned 0xb00017
[0179.817] GetCurrentObject (hdc=0xe00107a4, type=0x2) returned 0x900010
[0179.817] GetCurrentObject (hdc=0xe00107a4, type=0x7) returned 0x1e0507b9
[0179.817] GetCurrentObject (hdc=0xe00107a4, type=0x6) returned 0x8a01c2
[0179.817] SaveDC (hdc=0xe00107a4) returned 1
[0179.817] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf5040798
[0179.817] GetClipRgn (hdc=0xe00107a4, hrgn=0xf5040798) returned 0
[0179.817] SelectClipRgn (hdc=0xe00107a4, hrgn=0xd604051e) returned 2
[0179.817] DeleteObject (ho=0xf5040798) returned 1
[0179.817] DeleteObject (ho=0xd604051e) returned 1
[0179.817] OffsetViewportOrgEx (in: hdc=0xe00107a4, x=0, y=0, lppt=0x23b9bec | out: lppt=0x23b9bec) returned 1
[0179.818] IsAppThemed () returned 0x1
[0179.818] GetThemeAppProperties () returned 0x3
[0179.818] GetThemeAppProperties () returned 0x3
[0179.818] DrawThemeBackground () returned 0x0
[0179.818] RestoreDC (hdc=0xe00107a4, nSavedDC=-1) returned 1
[0179.818] GdipReleaseDC (graphics=0x5da0378, hdc=0xe00107a4) returned 0x0
[0179.818] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0179.818] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0179.818] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0179.818] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0179.818] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e2f4) returned 0x0
[0179.818] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eee8) returned 0x0
[0179.818] LocalFree (hMem=0x89eee8) returned 0x0
[0179.818] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0179.818] LocalFree (hMem=0x89ea88) returned 0x0
[0179.818] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0179.818] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e31c) returned 0x0
[0179.818] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e30c) returned 0x0
[0179.819] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e30c) returned 0x0
[0179.819] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0179.819] GdipGetDC (graphics=0x5da0378, hdc=0x53e324) returned 0x0
[0179.819] GetCurrentObject (hdc=0xe00107a4, type=0x1) returned 0xb00017
[0179.819] GetCurrentObject (hdc=0xe00107a4, type=0x2) returned 0x900010
[0179.819] GetCurrentObject (hdc=0xe00107a4, type=0x7) returned 0x1e0507b9
[0179.819] GetCurrentObject (hdc=0xe00107a4, type=0x6) returned 0x8a01c2
[0179.819] SaveDC (hdc=0xe00107a4) returned 1
[0179.819] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd704051e
[0179.819] GetClipRgn (hdc=0xe00107a4, hrgn=0xd704051e) returned 0
[0179.819] SelectClipRgn (hdc=0xe00107a4, hrgn=0xf6040798) returned 2
[0179.819] DeleteObject (ho=0xd704051e) returned 1
[0179.819] DeleteObject (ho=0xf6040798) returned 1
[0179.819] OffsetViewportOrgEx (in: hdc=0xe00107a4, x=0, y=0, lppt=0x23b9ec0 | out: lppt=0x23b9ec0) returned 1
[0179.819] IsAppThemed () returned 0x1
[0179.819] GetThemeAppProperties () returned 0x3
[0179.819] GetThemeAppProperties () returned 0x3
[0179.819] GetThemeBackgroundContentRect () returned 0x0
[0179.819] RestoreDC (hdc=0xe00107a4, nSavedDC=-1) returned 1
[0179.820] GdipReleaseDC (graphics=0x5da0378, hdc=0xe00107a4) returned 0x0
[0179.820] IsAppThemed () returned 0x1
[0179.820] GetThemeAppProperties () returned 0x3
[0179.820] GetThemeAppProperties () returned 0x3
[0179.820] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e458) returned 0x0
[0179.820] GdipGetDC (graphics=0x5da0378, hdc=0x53e444) returned 0x0
[0179.820] GetCurrentObject (hdc=0xe00107a4, type=0x1) returned 0xb00017
[0179.820] GetCurrentObject (hdc=0xe00107a4, type=0x2) returned 0x900010
[0179.820] GetCurrentObject (hdc=0xe00107a4, type=0x7) returned 0x1e0507b9
[0179.820] GetCurrentObject (hdc=0xe00107a4, type=0x6) returned 0x8a01c2
[0179.820] SaveDC (hdc=0xe00107a4) returned 1
[0179.820] GetTextAlign (hdc=0xe00107a4) returned 0x0
[0179.820] GetTextColor (hdc=0xe00107a4) returned 0x0
[0179.820] GetCurrentObject (hdc=0xe00107a4, type=0x6) returned 0x8a01c2
[0179.820] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0179.820] SelectObject (hdc=0xe00107a4, h=0x450a0799) returned 0x8a01c2
[0179.821] GetBkMode (hdc=0xe00107a4) returned 2
[0179.821] SetBkMode (hdc=0xe00107a4, mode=1) returned 2
[0179.821] DrawTextExW (in: hdc=0xe00107a4, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x23ba260 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0179.821] DrawTextExW (in: hdc=0xe00107a4, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x23ba260 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0179.821] RestoreDC (hdc=0xe00107a4, nSavedDC=-1) returned 1
[0179.821] GdipReleaseDC (graphics=0x5da0378, hdc=0xe00107a4) returned 0x0
[0179.821] GetFocus () returned 0x202c6
[0179.821] IsAppThemed () returned 0x1
[0179.822] GetThemeAppProperties () returned 0x3
[0179.822] GetThemeAppProperties () returned 0x3
[0179.822] GdipGetDC (graphics=0x5da0378, hdc=0x53e630) returned 0x0
[0179.822] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xe00107a4, x1=0, y1=0, rop=0xcc0020) returned 1
[0179.822] GdipReleaseDC (graphics=0x5da0378, hdc=0xe00107a4) returned 0x0
[0179.822] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0179.822] SelectObject (hdc=0xe00107a4, h=0x85000f) returned 0x1e0507b9
[0179.822] DeleteDC (hdc=0xe00107a4) returned 1
[0179.822] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0179.823] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0179.823] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23ba35c, cPoints=0x1 | out: lpPoints=0x23ba35c) returned 25690608
[0179.823] WindowFromPoint (Point=0x24c) returned 0x202c6
[0179.823] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192024c) returned 0x1
[0179.823] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0179.823] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0179.825] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.827] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0179.828] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.828] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0179.829] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.829] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0179.829] GetDC (hWnd=0x0) returned 0x60100ce
[0179.829] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e888) returned 0x0
[0179.830] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5da0378, height=0x53e880) returned 0x0
[0179.830] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0179.830] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0179.830] GetSystemMetrics (nIndex=5) returned 1
[0179.830] GetSystemMetrics (nIndex=6) returned 1
[0179.830] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.831] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0179.831] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.832] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0179.902] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.902] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0179.903] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.903] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0179.903] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.903] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0179.904] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.904] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0179.904] GetSystemMetrics (nIndex=5) returned 1
[0179.904] GetSystemMetrics (nIndex=6) returned 1
[0179.904] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.904] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0179.904] GetSystemMetrics (nIndex=5) returned 1
[0179.904] GetSystemMetrics (nIndex=6) returned 1
[0179.905] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.905] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0179.905] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.905] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0179.905] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.906] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0179.906] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.906] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0179.906] GetSystemMetrics (nIndex=59) returned 1460
[0179.906] GetSystemMetrics (nIndex=60) returned 920
[0179.906] GetSystemMetrics (nIndex=34) returned 136
[0179.906] GetSystemMetrics (nIndex=35) returned 39
[0179.906] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.907] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0179.907] GetCurrentThreadId () returned 0x11d0
[0179.907] GetCurrentThreadId () returned 0x11d0
[0179.907] GetCurrentThreadId () returned 0x11d0
[0179.907] GetCurrentThreadId () returned 0x11d0
[0179.907] GetCurrentThreadId () returned 0x11d0
[0179.907] GetCurrentThreadId () returned 0x11d0
[0179.907] GetCurrentThreadId () returned 0x11d0
[0179.907] GetCurrentThreadId () returned 0x11d0
[0179.907] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.907] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0179.907] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0179.908] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0179.908] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.908] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0179.908] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.909] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0179.909] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x702da
[0179.910] SetWindowLongW (hWnd=0x702da, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0179.911] GetWindowLongW (hWnd=0x702da, nIndex=-4) returned 1950089536
[0179.911] SetWindowLongW (hWnd=0x702da, nIndex=-4, dwNewLong=79644422) returned 1950089536
[0179.911] GetWindowLongW (hWnd=0x702da, nIndex=-4) returned 79644422
[0179.911] GetWindowLongW (hWnd=0x702da, nIndex=-16) returned 113311744
[0179.912] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702da, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0179.915] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702da, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0179.917] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702da, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0179.917] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702da, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0179.917] GetClientRect (in: hWnd=0x702da, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0179.917] GetWindowRect (in: hWnd=0x702da, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0179.917] SetWindowTextW (hWnd=0x702da, lpString="WindowsFormsParkingWindow") returned 1
[0179.918] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702da, Msg=0xc, wParam=0x0, lParam=0x23ae3e4) returned 0x1
[0179.918] GetParent (hWnd=0x702da) returned 0x0
[0179.919] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0179.919] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x702da, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x602d8
[0179.919] SetWindowLongW (hWnd=0x602d8, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0179.920] GetWindowLongW (hWnd=0x602d8, nIndex=-4) returned 1868147648
[0179.920] SetWindowLongW (hWnd=0x602d8, nIndex=-4, dwNewLong=79644142) returned 1868147648
[0179.920] GetWindowLongW (hWnd=0x602d8, nIndex=-4) returned 79644142
[0179.920] GetWindowLongW (hWnd=0x602d8, nIndex=-16) returned 1174405133
[0179.920] GetWindowLongW (hWnd=0x602d8, nIndex=-12) returned 0
[0179.920] SetWindowLongW (hWnd=0x602d8, nIndex=-12, dwNewLong=393944) returned 0
[0179.920] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0179.921] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0179.921] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0179.922] GetClientRect (in: hWnd=0x602d8, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0179.922] GetWindowRect (in: hWnd=0x602d8, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0179.922] GetParent (hWnd=0x602d8) returned 0x702da
[0179.922] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702da, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0179.922] SetWindowTextW (hWnd=0x602d8, lpString="Enter password: ") returned 1
[0179.922] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0xc, wParam=0x0, lParam=0x2333718) returned 0x1
[0179.923] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0179.924] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0179.924] GetClientRect (in: hWnd=0x602d8, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0179.924] GetWindowRect (in: hWnd=0x602d8, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0179.924] GetParent (hWnd=0x602d8) returned 0x702da
[0179.924] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702da, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0179.924] SendMessageW (hWnd=0x602d8, Msg=0x2210, wParam=0x2d80001, lParam=0x602d8) returned 0x0
[0179.924] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x2210, wParam=0x2d80001, lParam=0x602d8) returned 0x0
[0179.925] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0179.925] GetParent (hWnd=0x602d8) returned 0x702da
[0179.925] GdipCreateFromHWND (hwnd=0x602d8, graphics=0x53e994) returned 0x0
[0179.926] GdipMeasureString (graphics=0x5da0378, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0179.926] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0179.926] GetProcessWindowStation () returned 0x13c
[0179.926] GetCapture () returned 0x202c6
[0179.926] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0179.926] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0179.926] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0179.927] ReleaseCapture () returned 1
[0179.927] GetActiveWindow () returned 0x70036
[0179.927] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0179.927] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.927] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0179.927] GetCursorPos (in: lpPoint=0x23cafc8 | out: lpPoint=0x23cafc8*(x=588, y=402)) returned 1
[0179.927] MonitorFromPoint (pt=0x24c, dwFlags=0x192) returned 0x10001
[0179.928] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0179.928] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xe40107a4
[0179.928] GetDeviceCaps (hdc=0xe40107a4, index=12) returned 32
[0179.928] GetDeviceCaps (hdc=0xe40107a4, index=14) returned 1
[0179.928] DeleteDC (hdc=0xe40107a4) returned 1
[0179.928] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0179.929] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0179.929] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x702d6
[0179.929] SetWindowLongW (hWnd=0x702d6, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0179.929] GetWindowLongW (hWnd=0x702d6, nIndex=-4) returned 1950089536
[0179.930] SetWindowLongW (hWnd=0x702d6, nIndex=-4, dwNewLong=79644102) returned 1950089536
[0179.930] GetWindowLongW (hWnd=0x702d6, nIndex=-4) returned 79644102
[0179.930] GetWindowLongW (hWnd=0x702d6, nIndex=-16) returned 113770496
[0179.930] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0179.931] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0179.932] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0179.932] GetClientRect (in: hWnd=0x702d6, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0179.932] GetWindowRect (in: hWnd=0x702d6, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0179.933] SetWindowTextW (hWnd=0x702d6, lpString="Ransomware") returned 1
[0179.933] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xc, wParam=0x0, lParam=0x23ba424) returned 0x1
[0179.934] GetStartupInfoW (in: lpStartupInfo=0x23cb304 | out: lpStartupInfo=0x23cb304*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0179.935] GetParent (hWnd=0x702d6) returned 0x0
[0179.935] SetWindowLongW (hWnd=0x702d6, nIndex=-8, dwNewLong=0) returned 0
[0179.937] SendMessageW (hWnd=0x702d6, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0179.937] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0179.937] SendMessageW (hWnd=0x702d6, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0179.937] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0179.937] GetSystemMenu (hWnd=0x702d6, bRevert=0) returned 0x140299
[0179.938] GetWindowPlacement (in: hWnd=0x702d6, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0179.938] EnableMenuItem (hMenu=0x140299, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0179.938] EnableMenuItem (hMenu=0x140299, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0179.938] EnableMenuItem (hMenu=0x140299, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0179.938] EnableMenuItem (hMenu=0x140299, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0179.938] EnableMenuItem (hMenu=0x140299, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0179.939] GetClientRect (in: hWnd=0x702d6, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0179.939] GetClientRect (in: hWnd=0x702d6, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0179.939] GetWindowRect (in: hWnd=0x702d6, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0179.939] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.939] GetWindowLongW (hWnd=0x702d6, nIndex=-16) returned 113770496
[0179.939] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0179.939] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0179.939] GetSystemMetrics (nIndex=42) returned 0
[0179.939] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0179.940] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0179.940] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0179.940] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0179.940] GetSystemMetrics (nIndex=42) returned 0
[0179.940] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0179.940] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0179.940] GetCursorPos (in: lpPoint=0x23cb478 | out: lpPoint=0x23cb478*(x=588, y=402)) returned 1
[0179.940] MonitorFromPoint (pt=0x24a, dwFlags=0x192) returned 0x10001
[0179.940] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0179.940] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xe80107a4
[0179.941] GetDeviceCaps (hdc=0xe80107a4, index=12) returned 32
[0179.941] GetDeviceCaps (hdc=0xe80107a4, index=14) returned 1
[0179.941] DeleteDC (hdc=0xe80107a4) returned 1
[0179.941] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0179.941] GetWindowLongW (hWnd=0x702d6, nIndex=-16) returned 113770496
[0179.941] GetWindowLongW (hWnd=0x702d6, nIndex=-20) returned 327937
[0179.941] SetWindowLongW (hWnd=0x702d6, nIndex=-16, dwNewLong=46661632) returned 113770496
[0179.941] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0179.941] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0179.942] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0179.942] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0179.943] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0179.943] SetWindowLongW (hWnd=0x702d6, nIndex=-20, dwNewLong=327681) returned 327937
[0179.943] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0179.943] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0179.944] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0179.944] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0179.944] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0179.945] SetWindowPos (hWnd=0x702d6, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0179.945] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0179.945] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0179.945] GetWindowPlacement (in: hWnd=0x702d6, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0179.945] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0179.945] GetClientRect (in: hWnd=0x702d6, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0179.945] GetWindowRect (in: hWnd=0x702d6, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0179.946] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0179.946] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0179.946] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0179.947] RedrawWindow (hWnd=0x702d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0179.947] GetSystemMenu (hWnd=0x702d6, bRevert=0) returned 0x140299
[0179.947] GetWindowPlacement (in: hWnd=0x702d6, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0179.947] EnableMenuItem (hMenu=0x140299, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0179.947] EnableMenuItem (hMenu=0x140299, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0179.947] EnableMenuItem (hMenu=0x140299, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0179.947] EnableMenuItem (hMenu=0x140299, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0179.947] EnableMenuItem (hMenu=0x140299, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0179.947] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0179.947] GetWindowLongW (hWnd=0x702d6, nIndex=-8) returned 0
[0179.947] SetWindowLongW (hWnd=0x702d6, nIndex=-8, dwNewLong=458806) returned 0
[0179.949] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0179.949] GetProcessWindowStation () returned 0x13c
[0179.950] GetCurrentThreadId () returned 0x11d0
[0179.950] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4756, lParam=0x0) returned 1
[0179.950] IsWindowVisible (hWnd=0x702d6) returned 0
[0179.950] IsWindowVisible (hWnd=0x70036) returned 1
[0179.950] IsWindowEnabled (hWnd=0x70036) returned 1
[0179.950] IsWindowVisible (hWnd=0x602b6) returned 0
[0179.950] IsWindowVisible (hWnd=0x901f8) returned 0
[0179.950] IsWindowVisible (hWnd=0x202d0) returned 0
[0179.950] IsWindowVisible (hWnd=0x202d4) returned 0
[0179.951] GetActiveWindow () returned 0x70036
[0179.951] GetFocus () returned 0x202c6
[0179.951] IsWindow (hWnd=0x70036) returned 1
[0179.951] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0179.951] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0179.952] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0179.952] GetWindowLongW (hWnd=0x702d6, nIndex=-8) returned 458806
[0179.952] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0179.952] GetCurrentThreadId () returned 0x11d0
[0179.952] GetWindowLongW (hWnd=0x702d6, nIndex=-8) returned 458806
[0179.952] IsWindowEnabled (hWnd=0x70036) returned 0
[0179.952] IsWindowEnabled (hWnd=0x702d6) returned 1
[0179.952] ShowWindow (hWnd=0x702d6, nCmdShow=5) returned 0
[0179.952] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0179.952] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0179.953] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.953] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0179.953] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x702d6, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x602c8
[0179.954] SetWindowLongW (hWnd=0x602c8, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0179.954] GetWindowLongW (hWnd=0x602c8, nIndex=-4) returned 1868026976
[0179.954] SetWindowLongW (hWnd=0x602c8, nIndex=-4, dwNewLong=79644182) returned 1868026976
[0179.955] GetWindowLongW (hWnd=0x602c8, nIndex=-4) returned 79644182
[0179.955] GetWindowLongW (hWnd=0x602c8, nIndex=-16) returned 1174470848
[0179.955] GetWindowLongW (hWnd=0x602c8, nIndex=-12) returned 0
[0179.955] SetWindowLongW (hWnd=0x602c8, nIndex=-12, dwNewLong=393928) returned 0
[0179.955] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0179.956] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0179.956] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0179.958] SendMessageW (hWnd=0x602c8, Msg=0x2055, wParam=0x602c8, lParam=0x3) returned 0x2
[0179.958] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0179.958] GetWindow (hWnd=0x602c8, uCmd=0x3) returned 0x0
[0179.958] GetClientRect (in: hWnd=0x602c8, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0179.958] GetWindowRect (in: hWnd=0x602c8, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0179.958] GetParent (hWnd=0x602c8) returned 0x702d6
[0179.958] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702d6, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0179.958] SendMessageW (hWnd=0x602c8, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0179.958] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0179.958] SendMessageW (hWnd=0x602c8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0179.958] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0179.959] GetSystemMetrics (nIndex=5) returned 1
[0179.959] GetSystemMetrics (nIndex=6) returned 1
[0179.959] SendMessageW (hWnd=0x602c8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0179.959] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0179.959] SendMessageW (hWnd=0x602c8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0179.959] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0179.960] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0179.960] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0179.960] GetClientRect (in: hWnd=0x602c8, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0179.960] GetWindowRect (in: hWnd=0x602c8, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0179.960] GetParent (hWnd=0x602c8) returned 0x702d6
[0179.960] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702d6, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0179.960] SendMessageW (hWnd=0x602c8, Msg=0x2210, wParam=0x2c80001, lParam=0x602c8) returned 0x0
[0179.960] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x2210, wParam=0x2c80001, lParam=0x602c8) returned 0x0
[0179.960] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0179.961] GetParent (hWnd=0x602c8) returned 0x702d6
[0179.961] GetParent (hWnd=0x602d8) returned 0x702da
[0179.961] SetParent (hWndChild=0x602d8, hWndNewParent=0x702d6) returned 0x702da
[0179.961] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0179.961] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0179.962] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0179.963] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0179.963] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0179.963] GetClientRect (in: hWnd=0x602d8, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0179.963] GetWindowRect (in: hWnd=0x602d8, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0179.963] GetParent (hWnd=0x602d8) returned 0x702d6
[0179.963] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702d6, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0179.963] GetClientRect (in: hWnd=0x602d8, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0179.963] GetWindowRect (in: hWnd=0x602d8, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0179.963] GetParent (hWnd=0x602d8) returned 0x702d6
[0179.963] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702d6, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0179.963] GetParent (hWnd=0x602d8) returned 0x702d6
[0179.964] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0179.964] GetWindow (hWnd=0x602d8, uCmd=0x3) returned 0x0
[0179.964] SetWindowPos (hWnd=0x602d8, hWndInsertAfter=0x602c8, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0179.964] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0179.965] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0179.965] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0179.965] GetClientRect (in: hWnd=0x602d8, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0179.965] GetWindowRect (in: hWnd=0x602d8, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0179.965] GetParent (hWnd=0x602d8) returned 0x702d6
[0179.965] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702d6, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0179.965] GetParent (hWnd=0x602d8) returned 0x702d6
[0179.965] GetWindow (hWnd=0x602d8, uCmd=0x3) returned 0x602c8
[0179.965] GetWindowThreadProcessId (in: hWnd=0x602d8, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0179.965] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0179.966] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.966] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0179.966] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x702d6, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x602d2
[0179.967] SetWindowLongW (hWnd=0x602d2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0179.967] GetWindowLongW (hWnd=0x602d2, nIndex=-4) returned 1868032000
[0179.968] SetWindowLongW (hWnd=0x602d2, nIndex=-4, dwNewLong=79643662) returned 1868032000
[0179.968] GetWindowLongW (hWnd=0x602d2, nIndex=-4) returned 79643662
[0179.968] GetWindowLongW (hWnd=0x602d2, nIndex=-16) returned 1174470667
[0179.968] GetWindowLongW (hWnd=0x602d2, nIndex=-12) returned 0
[0179.968] SetWindowLongW (hWnd=0x602d2, nIndex=-12, dwNewLong=393938) returned 0
[0179.968] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0179.969] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0179.969] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0179.970] SendMessageW (hWnd=0x602d2, Msg=0x2055, wParam=0x602d2, lParam=0x3) returned 0x2
[0179.970] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0179.970] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0179.970] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0179.970] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0179.970] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0179.970] RedrawWindow (hWnd=0x602c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0179.970] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0179.970] RedrawWindow (hWnd=0x602d8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0179.971] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0179.971] RedrawWindow (hWnd=0x602d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0179.971] RedrawWindow (hWnd=0x702d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0179.971] GetWindow (hWnd=0x602d2, uCmd=0x3) returned 0x602d8
[0179.971] GetClientRect (in: hWnd=0x602d2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0179.971] GetWindowRect (in: hWnd=0x602d2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0179.971] GetParent (hWnd=0x602d2) returned 0x702d6
[0179.971] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702d6, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0179.972] SetWindowTextW (hWnd=0x602d2, lpString="OK") returned 1
[0179.972] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0xc, wParam=0x0, lParam=0x23be8e4) returned 0x1
[0179.973] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0179.973] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0179.973] GetClientRect (in: hWnd=0x602d2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0179.973] GetWindowRect (in: hWnd=0x602d2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0179.973] GetParent (hWnd=0x602d2) returned 0x702d6
[0179.973] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702d6, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0179.973] SendMessageW (hWnd=0x602d2, Msg=0x2210, wParam=0x2d20001, lParam=0x602d2) returned 0x0
[0179.973] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x2210, wParam=0x2d20001, lParam=0x602d2) returned 0x0
[0179.973] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0179.974] GetParent (hWnd=0x602d2) returned 0x702d6
[0179.974] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0179.974] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0179.975] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0179.975] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x702d6, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xa013e
[0179.975] SetWindowLongW (hWnd=0xa013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0179.975] GetWindowLongW (hWnd=0xa013e, nIndex=-4) returned 1868032000
[0179.976] SetWindowLongW (hWnd=0xa013e, nIndex=-4, dwNewLong=79644462) returned 1868032000
[0179.976] GetWindowLongW (hWnd=0xa013e, nIndex=-4) returned 79644462
[0179.976] GetWindowLongW (hWnd=0xa013e, nIndex=-16) returned 1174470667
[0179.976] GetWindowLongW (hWnd=0xa013e, nIndex=-12) returned 0
[0179.976] SetWindowLongW (hWnd=0xa013e, nIndex=-12, dwNewLong=655678) returned 0
[0179.976] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0179.977] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0179.977] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0179.979] SendMessageW (hWnd=0xa013e, Msg=0x2055, wParam=0xa013e, lParam=0x3) returned 0x2
[0179.979] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0179.979] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0179.979] GetWindow (hWnd=0xa013e, uCmd=0x3) returned 0x602d2
[0179.979] GetClientRect (in: hWnd=0xa013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0179.979] GetWindowRect (in: hWnd=0xa013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0179.979] GetParent (hWnd=0xa013e) returned 0x702d6
[0179.979] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702d6, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0179.979] SetWindowTextW (hWnd=0xa013e, lpString="Cancel") returned 1
[0179.979] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0xc, wParam=0x0, lParam=0x23c21a4) returned 0x1
[0179.980] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0179.980] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0179.980] GetClientRect (in: hWnd=0xa013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0179.980] GetWindowRect (in: hWnd=0xa013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0179.980] GetParent (hWnd=0xa013e) returned 0x702d6
[0179.980] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702d6, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0179.980] SendMessageW (hWnd=0xa013e, Msg=0x2210, wParam=0x13e0001, lParam=0xa013e) returned 0x0
[0179.980] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0x2210, wParam=0x13e0001, lParam=0xa013e) returned 0x0
[0179.980] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0179.981] GetParent (hWnd=0xa013e) returned 0x702d6
[0179.981] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0179.981] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e320) returned 0x0
[0179.981] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5da0378, height=0x53e318) returned 0x0
[0179.981] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0179.982] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0179.982] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0179.982] GdipMeasureString (graphics=0x5da0378, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0179.982] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0179.982] GetWindowLongW (hWnd=0x702d6, nIndex=-8) returned 458806
[0179.982] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0179.982] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0179.982] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xef0107a4
[0179.983] GetDeviceCaps (hdc=0xef0107a4, index=12) returned 32
[0179.983] GetDeviceCaps (hdc=0xef0107a4, index=14) returned 1
[0179.983] DeleteDC (hdc=0xef0107a4) returned 1
[0179.983] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0179.983] GetWindowThreadProcessId (in: hWnd=0x702d6, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0179.983] GetCurrentThreadId () returned 0x11d0
[0179.983] PostMessageW (hWnd=0x702d6, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0179.983] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0179.983] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0179.983] GetSystemMetrics (nIndex=42) returned 0
[0179.984] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0179.984] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0179.984] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0179.984] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0179.984] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0179.984] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0180.022] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x702d6) returned 0x1
[0180.024] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0180.025] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0180.025] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0180.025] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0180.028] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0180.028] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0180.028] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0180.029] GetFocus () returned 0x202c6
[0180.029] IsChild (hWndParent=0x702d6, hWnd=0x202c6) returned 0
[0180.029] GetFocus () returned 0x202c6
[0180.030] SetFocus (hWnd=0x602c8) returned 0x202c6
[0180.032] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x602c8, lParam=0x0) returned 0x0
[0180.032] GetCapture () returned 0x0
[0180.032] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0180.033] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0180.046] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0180.049] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.049] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0180.049] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.050] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0180.050] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.051] GetParent (hWnd=0x702d6) returned 0x0
[0180.051] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0180.051] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.051] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0180.052] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0180.052] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0180.052] GetSysColorBrush (nIndex=5) returned 0x100079
[0180.053] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.053] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0180.055] SendMessageW (hWnd=0x602c8, Msg=0x2111, wParam=0x10002c8, lParam=0x602c8) returned 0x0
[0180.055] SendMessageW (hWnd=0x602c8, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0180.055] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0180.055] GetKeyState (nVirtKey=1) returned 0
[0180.055] GetKeyState (nVirtKey=2) returned 0
[0180.055] GetKeyState (nVirtKey=4) returned 0
[0180.055] GetKeyState (nVirtKey=5) returned 0
[0180.055] GetKeyState (nVirtKey=6) returned 0
[0180.055] GetWindowTextLengthW (hWnd=0x602c8) returned 0
[0180.055] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0180.055] SendMessageW (hWnd=0x602c8, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0180.055] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0180.056] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0180.056] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0180.061] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0180.062] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0180.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0180.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0180.064] GetWindowPlacement (in: hWnd=0x702d6, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0180.064] GetClientRect (in: hWnd=0x702d6, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0180.064] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.064] GetSystemMetrics (nIndex=42) returned 0
[0180.064] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0180.064] GetClientRect (in: hWnd=0x702d6, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0180.064] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0180.064] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0180.064] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0xffffffff870507a2
[0180.065] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0180.065] SaveDC (hdc=0x10105d6) returned 1
[0180.065] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0180.065] CreateSolidBrush (color=0xf0f0f0) returned 0xb010078d
[0180.065] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0xb010078d) returned 1
[0180.065] DeleteObject (ho=0xb010078d) returned 1
[0180.065] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0180.073] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0180.073] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0180.073] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0180.075] GetWindowPlacement (in: hWnd=0x702d6, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0180.075] GetClientRect (in: hWnd=0x702d6, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0180.075] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.075] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.075] GetSystemMetrics (nIndex=42) returned 0
[0180.075] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.075] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0180.075] GetClientRect (in: hWnd=0x702d6, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0180.075] GetCurrentObject (hdc=0x50107a4, type=0x1) returned 0xb00017
[0180.075] GetCurrentObject (hdc=0x50107a4, type=0x2) returned 0x900010
[0180.075] GetCurrentObject (hdc=0x50107a4, type=0x7) returned 0xffffffffc30507d0
[0180.075] GetCurrentObject (hdc=0x50107a4, type=0x6) returned 0x8a01c2
[0180.075] SaveDC (hdc=0x50107a4) returned 1
[0180.076] GetNearestColor (hdc=0x50107a4, color=0xf0f0f0) returned 0xf0f0f0
[0180.076] CreateSolidBrush (color=0xf0f0f0) returned 0xb110078d
[0180.077] FillRect (hDC=0x50107a4, lprc=0x53dc18, hbr=0xb110078d) returned 1
[0180.077] DeleteObject (ho=0xb110078d) returned 1
[0180.077] RestoreDC (hdc=0x50107a4, nSavedDC=-1) returned 1
[0180.077] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.077] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.077] GetSystemMetrics (nIndex=42) returned 0
[0180.077] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.077] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0180.077] GetClientRect (in: hWnd=0x702d6, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0180.077] GetCurrentObject (hdc=0x50107a4, type=0x1) returned 0xb00017
[0180.077] GetCurrentObject (hdc=0x50107a4, type=0x2) returned 0x900010
[0180.077] GetCurrentObject (hdc=0x50107a4, type=0x7) returned 0xffffffffc30507d0
[0180.077] GetCurrentObject (hdc=0x50107a4, type=0x6) returned 0x8a01c2
[0180.077] SaveDC (hdc=0x50107a4) returned 1
[0180.078] GetNearestColor (hdc=0x50107a4, color=0xf0f0f0) returned 0xf0f0f0
[0180.078] CreateSolidBrush (color=0xf0f0f0) returned 0xb210078d
[0180.078] FillRect (hDC=0x50107a4, lprc=0x53dbb8, hbr=0xb210078d) returned 1
[0180.078] DeleteObject (ho=0xb210078d) returned 1
[0180.078] RestoreDC (hdc=0x50107a4, nSavedDC=-1) returned 1
[0180.078] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.078] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.078] GetSystemMetrics (nIndex=42) returned 0
[0180.078] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.078] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0180.081] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0180.081] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0180.082] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0180.082] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0180.082] GetStockObject (i=5) returned 0x900015
[0180.082] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0180.082] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0180.082] GetStockObject (i=5) returned 0x900015
[0180.083] GetWindowPlacement (in: hWnd=0x702d6, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0180.083] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0180.083] GetClientRect (in: hWnd=0x702d6, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0180.083] GetWindowRect (in: hWnd=0x702d6, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0180.085] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0180.085] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0180.085] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0180.086] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0180.086] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0180.086] GetClientRect (in: hWnd=0x702d6, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0180.086] GetWindowRect (in: hWnd=0x702d6, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0180.086] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.086] IsWindowUnicode (hWnd=0x702d6) returned 1
[0180.086] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.086] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.086] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.086] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0180.086] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.086] IsWindowUnicode (hWnd=0x702d6) returned 1
[0180.087] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.087] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.087] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.087] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.087] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x84, wParam=0x0, lParam=0x18e0361) returned 0x1
[0180.088] IsWindowUnicode (hWnd=0x602d2) returned 1
[0180.088] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.088] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.088] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.088] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.088] IsWindowUnicode (hWnd=0x202c6) returned 1
[0180.088] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.088] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.088] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.088] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0180.088] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0180.088] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.089] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x84, wParam=0x0, lParam=0x18e0361) returned 0x1
[0180.089] IsWindowUnicode (hWnd=0x602d2) returned 1
[0180.089] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.089] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x84, wParam=0x0, lParam=0x18e0361) returned 0x1
[0180.089] SetCursor (hCursor=0x10003) returned 0x10003
[0180.089] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.089] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.089] _TrackMouseEvent (in: lpEventTrack=0x23cc9f4 | out: lpEventTrack=0x23cc9f4) returned 1
[0180.089] SendMessageW (hWnd=0x602d2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0180.089] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0180.089] InvalidateRect (hWnd=0x602d2, lpRect=0x0, bErase=0) returned 1
[0180.090] GetKeyState (nVirtKey=1) returned 0
[0180.090] GetKeyState (nVirtKey=2) returned 0
[0180.090] GetKeyState (nVirtKey=4) returned 0
[0180.090] GetKeyState (nVirtKey=5) returned 0
[0180.090] GetKeyState (nVirtKey=6) returned 0
[0180.090] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.090] IsWindowUnicode (hWnd=0x702d6) returned 1
[0180.090] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.090] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.090] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.090] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.091] IsWindowUnicode (hWnd=0x702d6) returned 1
[0180.092] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.092] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.092] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.092] BeginPaint (in: hWnd=0x702d6, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x60100ce
[0180.092] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0180.092] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.092] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.092] GetSystemMetrics (nIndex=42) returned 0
[0180.092] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.092] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0180.092] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0180.092] EndPaint (hWnd=0x702d6, lpPaint=0x53e30c) returned 1
[0180.093] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.093] IsWindowUnicode (hWnd=0x602c8) returned 1
[0180.093] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.093] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.093] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0180.093] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0180.094] SetTextColor (hdc=0x60107a4, color=0x0) returned 0x0
[0180.094] SetBkColor (hdc=0x60107a4, color=0xffffff) returned 0xffffff
[0180.095] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.095] IsWindowUnicode (hWnd=0x602d8) returned 1
[0180.095] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.095] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.095] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.095] BeginPaint (in: hWnd=0x602d8, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0xf0105ee
[0180.095] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0180.095] CreateCompatibleDC (hdc=0xf0105ee) returned 0x1c010795
[0180.095] SelectObject (hdc=0x1c010795, h=0x1e0507b9) returned 0x85000f
[0180.095] GdipCreateFromHDC (hdc=0x1c010795, graphics=0x53e30c) returned 0x0
[0180.096] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0180.096] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0180.096] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0180.096] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0180.096] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0180.096] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.096] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0180.096] LocalFree (hMem=0x89eac0) returned 0x0
[0180.096] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0180.096] GdipCreateRegion (region=0x53e354) returned 0x0
[0180.096] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.096] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e360) returned 0x0
[0180.096] GdipSaveGraphics (graphics=0x5da0378, state=0x53e38c) returned 0x0
[0180.132] GetWindowTextLengthW (hWnd=0x602d8) returned 16
[0180.132] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0180.132] GetSystemMetrics (nIndex=42) returned 0
[0180.133] GetWindowTextW (in: hWnd=0x602d8, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0180.133] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0180.133] GetClientRect (in: hWnd=0x602d8, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0180.133] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0180.133] GdipGetClip (graphics=0x5da0378, region=0x5d9d988) returned 0x0
[0180.133] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0180.133] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0180.133] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e1c0) returned 0x0
[0180.133] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.133] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0180.133] LocalFree (hMem=0x89eac0) returned 0x0
[0180.133] GdipCombineRegionRegion (region=0x5d9d988, region2=0x5d9d8f8, combineMode=0x1) returned 0x0
[0180.133] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.133] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0180.133] LocalFree (hMem=0x89eac0) returned 0x0
[0180.134] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0180.134] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e1e8) returned 0x0
[0180.134] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e1d8) returned 0x0
[0180.134] GdipGetRegionHRgn (region=0x5d9d988, graphics=0x5da0378, hRgn=0x53e1d8) returned 0x0
[0180.134] GdipDeleteRegion (region=0x5d9d988) returned 0x0
[0180.134] GdipGetDC (graphics=0x5da0378, hdc=0x53e1f0) returned 0x0
[0180.134] GetCurrentObject (hdc=0x1c010795, type=0x1) returned 0xb00017
[0180.134] GetCurrentObject (hdc=0x1c010795, type=0x2) returned 0x900010
[0180.134] GetCurrentObject (hdc=0x1c010795, type=0x7) returned 0x1e0507b9
[0180.134] GetCurrentObject (hdc=0x1c010795, type=0x6) returned 0x8a01c2
[0180.134] SaveDC (hdc=0x1c010795) returned 1
[0180.134] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9104053e
[0180.134] GetClipRgn (hdc=0x1c010795, hrgn=0x9104053e) returned 0
[0180.134] SelectClipRgn (hdc=0x1c010795, hrgn=0xfb040798) returned 2
[0180.135] DeleteObject (ho=0x9104053e) returned 1
[0180.135] DeleteObject (ho=0xfb040798) returned 1
[0180.135] OffsetViewportOrgEx (in: hdc=0x1c010795, x=0, y=0, lppt=0x23ccefc | out: lppt=0x23ccefc) returned 1
[0180.135] GetNearestColor (hdc=0x1c010795, color=0xf0f0f0) returned 0xf0f0f0
[0180.135] CreateSolidBrush (color=0xf0f0f0) returned 0xb310078d
[0180.135] FillRect (hDC=0x1c010795, lprc=0x53e1f4, hbr=0xb310078d) returned 1
[0180.135] DeleteObject (ho=0xb310078d) returned 1
[0180.135] RestoreDC (hdc=0x1c010795, nSavedDC=-1) returned 1
[0180.135] GdipReleaseDC (graphics=0x5da0378, hdc=0x1c010795) returned 0x0
[0180.135] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd5b0dbd) returned 0x0
[0180.135] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.135] GetWindowTextLengthW (hWnd=0x602d8) returned 16
[0180.135] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0180.135] GetSystemMetrics (nIndex=42) returned 0
[0180.136] GetWindowTextW (in: hWnd=0x602d8, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0180.136] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0180.136] GdipGetDC (graphics=0x5da0378, hdc=0x53e210) returned 0x0
[0180.136] GetCurrentObject (hdc=0x1c010795, type=0x1) returned 0xb00017
[0180.136] GetCurrentObject (hdc=0x1c010795, type=0x2) returned 0x900010
[0180.136] GetCurrentObject (hdc=0x1c010795, type=0x7) returned 0x1e0507b9
[0180.136] GetCurrentObject (hdc=0x1c010795, type=0x6) returned 0x8a01c2
[0180.136] SaveDC (hdc=0x1c010795) returned 1
[0180.136] GetNearestColor (hdc=0x1c010795, color=0x0) returned 0x0
[0180.136] RestoreDC (hdc=0x1c010795, nSavedDC=-1) returned 1
[0180.136] GdipReleaseDC (graphics=0x5da0378, hdc=0x1c010795) returned 0x0
[0180.137] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0180.137] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0180.137] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0180.137] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x23cd204 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0180.138] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e1b0) returned 0x0
[0180.138] GdipGetDC (graphics=0x5da0378, hdc=0x53e19c) returned 0x0
[0180.138] GetCurrentObject (hdc=0x1c010795, type=0x1) returned 0xb00017
[0180.138] GetCurrentObject (hdc=0x1c010795, type=0x2) returned 0x900010
[0180.138] GetCurrentObject (hdc=0x1c010795, type=0x7) returned 0x1e0507b9
[0180.138] GetCurrentObject (hdc=0x1c010795, type=0x6) returned 0x8a01c2
[0180.138] SaveDC (hdc=0x1c010795) returned 1
[0180.138] GetTextAlign (hdc=0x1c010795) returned 0x0
[0180.138] GetTextColor (hdc=0x1c010795) returned 0x0
[0180.138] GetCurrentObject (hdc=0x1c010795, type=0x6) returned 0x8a01c2
[0180.138] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0180.138] SelectObject (hdc=0x1c010795, h=0x730a066d) returned 0x8a01c2
[0180.138] GetBkMode (hdc=0x1c010795) returned 2
[0180.138] SetBkMode (hdc=0x1c010795, mode=1) returned 2
[0180.139] DrawTextExW (in: hdc=0x1c010795, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x23cd428 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0180.139] RestoreDC (hdc=0x1c010795, nSavedDC=-1) returned 1
[0180.139] GdipReleaseDC (graphics=0x5da0378, hdc=0x1c010795) returned 0x0
[0180.139] GdipGetDC (graphics=0x5da0378, hdc=0x53e34c) returned 0x0
[0180.139] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=250, cy=70, hdcSrc=0x1c010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0180.140] GdipReleaseDC (graphics=0x5da0378, hdc=0x1c010795) returned 0x0
[0180.140] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0180.140] SelectObject (hdc=0x1c010795, h=0x85000f) returned 0x1e0507b9
[0180.140] DeleteDC (hdc=0x1c010795) returned 1
[0180.140] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0180.140] EndPaint (hWnd=0x602d8, lpPaint=0x53e2f0) returned 1
[0180.140] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.140] IsWindowUnicode (hWnd=0x102dc) returned 1
[0180.140] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.140] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.140] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.141] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.142] IsWindowUnicode (hWnd=0x602d2) returned 1
[0180.142] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.142] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.142] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.142] BeginPaint (in: hWnd=0x602d2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0180.142] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0180.142] CreateCompatibleDC (hdc=0x8b010786) returned 0x1e010795
[0180.142] SelectObject (hdc=0x1e010795, h=0x1e0507b9) returned 0x85000f
[0180.142] GdipCreateFromHDC (hdc=0x1e010795, graphics=0x53e300) returned 0x0
[0180.142] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0180.142] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0180.142] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0180.143] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0180.143] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e360) returned 0x0
[0180.143] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0180.143] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0180.143] LocalFree (hMem=0x89ec80) returned 0x0
[0180.143] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0180.143] GdipCreateRegion (region=0x53e348) returned 0x0
[0180.143] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.143] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e354) returned 0x0
[0180.143] GdipSaveGraphics (graphics=0x5da0378, state=0x53e380) returned 0x0
[0180.143] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd590dbd) returned 0x0
[0180.143] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.143] GdipGetDC (graphics=0x5da0378, hdc=0x53e160) returned 0x0
[0180.143] GetCurrentObject (hdc=0x1e010795, type=0x1) returned 0xb00017
[0180.143] GetCurrentObject (hdc=0x1e010795, type=0x2) returned 0x900010
[0180.143] GetCurrentObject (hdc=0x1e010795, type=0x7) returned 0x1e0507b9
[0180.144] GetCurrentObject (hdc=0x1e010795, type=0x6) returned 0x8a01c2
[0180.144] SaveDC (hdc=0x1e010795) returned 1
[0180.144] GetNearestColor (hdc=0x1e010795, color=0xf0f0f0) returned 0xf0f0f0
[0180.144] GetNearestColor (hdc=0x1e010795, color=0xa0a0a0) returned 0xa0a0a0
[0180.144] GetNearestColor (hdc=0x1e010795, color=0x696969) returned 0x696969
[0180.144] GetNearestColor (hdc=0x1e010795, color=0xa0a0a0) returned 0xa0a0a0
[0180.144] GetNearestColor (hdc=0x1e010795, color=0x0) returned 0x0
[0180.144] GetNearestColor (hdc=0x1e010795, color=0xffffff) returned 0xffffff
[0180.144] GetNearestColor (hdc=0x1e010795, color=0xe5e5e5) returned 0xe5e5e5
[0180.144] GetNearestColor (hdc=0x1e010795, color=0xd7d7d7) returned 0xd7d7d7
[0180.144] GetNearestColor (hdc=0x1e010795, color=0x0) returned 0x0
[0180.144] RestoreDC (hdc=0x1e010795, nSavedDC=-1) returned 1
[0180.144] GdipReleaseDC (graphics=0x5da0378, hdc=0x1e010795) returned 0x0
[0180.145] IsAppThemed () returned 0x1
[0180.145] GetThemeAppProperties () returned 0x3
[0180.145] GetThemeAppProperties () returned 0x3
[0180.145] IsAppThemed () returned 0x1
[0180.145] GetThemeAppProperties () returned 0x3
[0180.145] GetThemeAppProperties () returned 0x3
[0180.145] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x23cdb94 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0180.145] IsAppThemed () returned 0x1
[0180.145] GetThemeAppProperties () returned 0x3
[0180.145] GetThemeAppProperties () returned 0x3
[0180.145] IsAppThemed () returned 0x1
[0180.145] GetThemeAppProperties () returned 0x3
[0180.145] GetThemeAppProperties () returned 0x3
[0180.145] IsAppThemed () returned 0x1
[0180.146] GetThemeAppProperties () returned 0x3
[0180.146] GetThemeAppProperties () returned 0x3
[0180.146] IsAppThemed () returned 0x1
[0180.146] GetThemeAppProperties () returned 0x3
[0180.146] GetThemeAppProperties () returned 0x3
[0180.146] IsThemePartDefined () returned 0x1
[0180.146] IsAppThemed () returned 0x1
[0180.146] GetThemeAppProperties () returned 0x3
[0180.146] GetThemeAppProperties () returned 0x3
[0180.146] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0180.146] IsAppThemed () returned 0x1
[0180.146] GetThemeAppProperties () returned 0x3
[0180.146] GetThemeAppProperties () returned 0x3
[0180.146] IsAppThemed () returned 0x1
[0180.146] GetThemeAppProperties () returned 0x3
[0180.146] GetThemeAppProperties () returned 0x3
[0180.146] IsThemePartDefined () returned 0x1
[0180.146] GdipCreateRegion (region=0x53e064) returned 0x0
[0180.146] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.147] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0180.147] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0180.147] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e07c) returned 0x0
[0180.147] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.147] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0180.147] LocalFree (hMem=0x89eac0) returned 0x0
[0180.147] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.147] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0180.147] LocalFree (hMem=0x89eac0) returned 0x0
[0180.147] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0180.147] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0a4) returned 0x0
[0180.147] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e094) returned 0x0
[0180.147] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e094) returned 0x0
[0180.147] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.147] GdipGetDC (graphics=0x5da0378, hdc=0x53e0ac) returned 0x0
[0180.147] GetCurrentObject (hdc=0x1e010795, type=0x1) returned 0xb00017
[0180.147] GetCurrentObject (hdc=0x1e010795, type=0x2) returned 0x900010
[0180.148] GetCurrentObject (hdc=0x1e010795, type=0x7) returned 0x1e0507b9
[0180.148] GetCurrentObject (hdc=0x1e010795, type=0x6) returned 0x8a01c2
[0180.148] SaveDC (hdc=0x1e010795) returned 1
[0180.148] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfc040798
[0180.148] GetClipRgn (hdc=0x1e010795, hrgn=0xfc040798) returned 0
[0180.148] SelectClipRgn (hdc=0x1e010795, hrgn=0x9504053e) returned 2
[0180.148] DeleteObject (ho=0xfc040798) returned 1
[0180.148] DeleteObject (ho=0x9504053e) returned 1
[0180.148] OffsetViewportOrgEx (in: hdc=0x1e010795, x=0, y=0, lppt=0x23ce244 | out: lppt=0x23ce244) returned 1
[0180.148] DrawThemeParentBackground () returned 0x0
[0180.148] GetWindowPlacement (in: hWnd=0x702d6, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0180.148] GetClientRect (in: hWnd=0x702d6, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0180.148] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.149] GetSystemMetrics (nIndex=42) returned 0
[0180.149] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0180.149] GetClientRect (in: hWnd=0x702d6, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0180.149] GetCurrentObject (hdc=0x1e010795, type=0x1) returned 0xb00017
[0180.149] GetCurrentObject (hdc=0x1e010795, type=0x2) returned 0x900010
[0180.149] GetCurrentObject (hdc=0x1e010795, type=0x7) returned 0x1e0507b9
[0180.149] GetCurrentObject (hdc=0x1e010795, type=0x6) returned 0x8a01c2
[0180.149] SaveDC (hdc=0x1e010795) returned 2
[0180.149] GetNearestColor (hdc=0x1e010795, color=0xf0f0f0) returned 0xf0f0f0
[0180.149] CreateSolidBrush (color=0xf0f0f0) returned 0xb410078d
[0180.149] FillRect (hDC=0x1e010795, lprc=0x53dac8, hbr=0xb410078d) returned 1
[0180.149] DeleteObject (ho=0xb410078d) returned 1
[0180.149] RestoreDC (hdc=0x1e010795, nSavedDC=-1) returned 1
[0180.150] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.150] GetSystemMetrics (nIndex=42) returned 0
[0180.150] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0180.150] GetClientRect (in: hWnd=0x702d6, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0180.150] GetCurrentObject (hdc=0x1e010795, type=0x1) returned 0xb00017
[0180.150] GetCurrentObject (hdc=0x1e010795, type=0x2) returned 0x900010
[0180.150] GetCurrentObject (hdc=0x1e010795, type=0x7) returned 0x1e0507b9
[0180.150] GetCurrentObject (hdc=0x1e010795, type=0x6) returned 0x8a01c2
[0180.150] SaveDC (hdc=0x1e010795) returned 2
[0180.150] GetNearestColor (hdc=0x1e010795, color=0xf0f0f0) returned 0xf0f0f0
[0180.150] CreateSolidBrush (color=0xf0f0f0) returned 0xb510078d
[0180.150] FillRect (hDC=0x1e010795, lprc=0x53da68, hbr=0xb510078d) returned 1
[0180.150] DeleteObject (ho=0xb510078d) returned 1
[0180.150] RestoreDC (hdc=0x1e010795, nSavedDC=-1) returned 1
[0180.151] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.151] GetSystemMetrics (nIndex=42) returned 0
[0180.151] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0180.151] RestoreDC (hdc=0x1e010795, nSavedDC=-1) returned 1
[0180.151] GdipReleaseDC (graphics=0x5da0378, hdc=0x1e010795) returned 0x0
[0180.151] IsAppThemed () returned 0x1
[0180.151] GetThemeAppProperties () returned 0x3
[0180.151] GetThemeAppProperties () returned 0x3
[0180.151] IsAppThemed () returned 0x1
[0180.151] GetThemeAppProperties () returned 0x3
[0180.151] GetThemeAppProperties () returned 0x3
[0180.151] IsThemePartDefined () returned 0x1
[0180.151] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0180.151] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.152] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0180.152] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0180.152] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e000) returned 0x0
[0180.152] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.152] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0180.152] LocalFree (hMem=0x89eac0) returned 0x0
[0180.152] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.152] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0180.152] LocalFree (hMem=0x89eac0) returned 0x0
[0180.152] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0180.152] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e028) returned 0x0
[0180.152] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e018) returned 0x0
[0180.152] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e018) returned 0x0
[0180.152] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.152] GdipGetDC (graphics=0x5da0378, hdc=0x53e030) returned 0x0
[0180.152] GetCurrentObject (hdc=0x1e010795, type=0x1) returned 0xb00017
[0180.152] GetCurrentObject (hdc=0x1e010795, type=0x2) returned 0x900010
[0180.152] GetCurrentObject (hdc=0x1e010795, type=0x7) returned 0x1e0507b9
[0180.152] GetCurrentObject (hdc=0x1e010795, type=0x6) returned 0x8a01c2
[0180.153] SaveDC (hdc=0x1e010795) returned 1
[0180.153] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9604053e
[0180.153] GetClipRgn (hdc=0x1e010795, hrgn=0x9604053e) returned 0
[0180.153] SelectClipRgn (hdc=0x1e010795, hrgn=0xfe040798) returned 2
[0180.153] DeleteObject (ho=0x9604053e) returned 1
[0180.153] DeleteObject (ho=0xfe040798) returned 1
[0180.153] OffsetViewportOrgEx (in: hdc=0x1e010795, x=0, y=0, lppt=0x23ceacc | out: lppt=0x23ceacc) returned 1
[0180.153] IsAppThemed () returned 0x1
[0180.153] GetThemeAppProperties () returned 0x3
[0180.153] GetThemeAppProperties () returned 0x3
[0180.153] DrawThemeBackground () returned 0x0
[0180.153] RestoreDC (hdc=0x1e010795, nSavedDC=-1) returned 1
[0180.153] GdipReleaseDC (graphics=0x5da0378, hdc=0x1e010795) returned 0x0
[0180.153] GdipCreateRegion (region=0x53dfec) returned 0x0
[0180.153] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.153] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0180.153] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0180.153] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e004) returned 0x0
[0180.154] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0180.154] LocalFree (hMem=0x89eac0) returned 0x0
[0180.154] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0180.154] LocalFree (hMem=0x89eac0) returned 0x0
[0180.154] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0180.154] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e02c) returned 0x0
[0180.154] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e01c) returned 0x0
[0180.154] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e01c) returned 0x0
[0180.154] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.154] GdipGetDC (graphics=0x5da0378, hdc=0x53e034) returned 0x0
[0180.154] GetCurrentObject (hdc=0x1e010795, type=0x1) returned 0xb00017
[0180.154] GetCurrentObject (hdc=0x1e010795, type=0x2) returned 0x900010
[0180.154] GetCurrentObject (hdc=0x1e010795, type=0x7) returned 0x1e0507b9
[0180.154] GetCurrentObject (hdc=0x1e010795, type=0x6) returned 0x8a01c2
[0180.154] SaveDC (hdc=0x1e010795) returned 1
[0180.154] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xff040798
[0180.154] GetClipRgn (hdc=0x1e010795, hrgn=0xff040798) returned 0
[0180.155] SelectClipRgn (hdc=0x1e010795, hrgn=0x9704053e) returned 2
[0180.155] DeleteObject (ho=0xff040798) returned 1
[0180.155] DeleteObject (ho=0x9704053e) returned 1
[0180.155] OffsetViewportOrgEx (in: hdc=0x1e010795, x=0, y=0, lppt=0x23ceda0 | out: lppt=0x23ceda0) returned 1
[0180.155] IsAppThemed () returned 0x1
[0180.155] GetThemeAppProperties () returned 0x3
[0180.155] GetThemeAppProperties () returned 0x3
[0180.155] GetThemeBackgroundContentRect () returned 0x0
[0180.155] RestoreDC (hdc=0x1e010795, nSavedDC=-1) returned 1
[0180.155] GdipReleaseDC (graphics=0x5da0378, hdc=0x1e010795) returned 0x0
[0180.155] IsAppThemed () returned 0x1
[0180.155] GetThemeAppProperties () returned 0x3
[0180.155] GetThemeAppProperties () returned 0x3
[0180.155] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e168) returned 0x0
[0180.155] GdipGetDC (graphics=0x5da0378, hdc=0x53e154) returned 0x0
[0180.155] GetCurrentObject (hdc=0x1e010795, type=0x1) returned 0xb00017
[0180.155] GetCurrentObject (hdc=0x1e010795, type=0x2) returned 0x900010
[0180.156] GetCurrentObject (hdc=0x1e010795, type=0x7) returned 0x1e0507b9
[0180.156] GetCurrentObject (hdc=0x1e010795, type=0x6) returned 0x8a01c2
[0180.156] SaveDC (hdc=0x1e010795) returned 1
[0180.156] GetTextAlign (hdc=0x1e010795) returned 0x0
[0180.156] GetTextColor (hdc=0x1e010795) returned 0x0
[0180.156] GetCurrentObject (hdc=0x1e010795, type=0x6) returned 0x8a01c2
[0180.156] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0180.156] SelectObject (hdc=0x1e010795, h=0x730a066d) returned 0x8a01c2
[0180.156] GetBkMode (hdc=0x1e010795) returned 2
[0180.156] SetBkMode (hdc=0x1e010795, mode=1) returned 2
[0180.156] DrawTextExW (in: hdc=0x1e010795, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x23cf140 | out: lpchText="OK", lprc=0x53df84) returned 13
[0180.157] DrawTextExW (in: hdc=0x1e010795, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x23cf140 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0180.157] RestoreDC (hdc=0x1e010795, nSavedDC=-1) returned 1
[0180.157] GdipReleaseDC (graphics=0x5da0378, hdc=0x1e010795) returned 0x0
[0180.157] GetFocus () returned 0x602c8
[0180.157] IsAppThemed () returned 0x1
[0180.157] GetThemeAppProperties () returned 0x3
[0180.157] GetThemeAppProperties () returned 0x3
[0180.157] GdipGetDC (graphics=0x5da0378, hdc=0x53e340) returned 0x0
[0180.157] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x1e010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0180.157] GdipReleaseDC (graphics=0x5da0378, hdc=0x1e010795) returned 0x0
[0180.157] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0180.157] SelectObject (hdc=0x1e010795, h=0x85000f) returned 0x1e0507b9
[0180.158] DeleteDC (hdc=0x1e010795) returned 1
[0180.158] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0180.158] EndPaint (hWnd=0x602d2, lpPaint=0x53e2e4) returned 1
[0180.158] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.158] IsWindowUnicode (hWnd=0xa013e) returned 1
[0180.158] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.158] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.158] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.158] BeginPaint (in: hWnd=0xa013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0180.158] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0180.159] CreateCompatibleDC (hdc=0x60100ce) returned 0x20010795
[0180.159] SelectObject (hdc=0x20010795, h=0x1e0507b9) returned 0x85000f
[0180.159] GdipCreateFromHDC (hdc=0x20010795, graphics=0x53e300) returned 0x0
[0180.159] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0180.159] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0180.173] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0180.173] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0180.173] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e360) returned 0x0
[0180.173] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0180.173] LocalFree (hMem=0x89ee08) returned 0x0
[0180.173] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0180.173] GdipCreateRegion (region=0x53e348) returned 0x0
[0180.173] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.173] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e354) returned 0x0
[0180.173] GdipSaveGraphics (graphics=0x5da0378, state=0x53e380) returned 0x0
[0180.173] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd570dbd) returned 0x0
[0180.173] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.173] GdipGetDC (graphics=0x5da0378, hdc=0x53e16c) returned 0x0
[0180.173] GetCurrentObject (hdc=0x20010795, type=0x1) returned 0xb00017
[0180.173] GetCurrentObject (hdc=0x20010795, type=0x2) returned 0x900010
[0180.173] GetCurrentObject (hdc=0x20010795, type=0x7) returned 0x1e0507b9
[0180.174] GetCurrentObject (hdc=0x20010795, type=0x6) returned 0x8a01c2
[0180.174] SaveDC (hdc=0x20010795) returned 1
[0180.174] GetNearestColor (hdc=0x20010795, color=0xf0f0f0) returned 0xf0f0f0
[0180.174] GetNearestColor (hdc=0x20010795, color=0xa0a0a0) returned 0xa0a0a0
[0180.174] GetNearestColor (hdc=0x20010795, color=0x696969) returned 0x696969
[0180.174] GetNearestColor (hdc=0x20010795, color=0xa0a0a0) returned 0xa0a0a0
[0180.174] GetNearestColor (hdc=0x20010795, color=0x0) returned 0x0
[0180.174] GetNearestColor (hdc=0x20010795, color=0xffffff) returned 0xffffff
[0180.174] GetNearestColor (hdc=0x20010795, color=0xe5e5e5) returned 0xe5e5e5
[0180.174] GetNearestColor (hdc=0x20010795, color=0xd7d7d7) returned 0xd7d7d7
[0180.174] GetNearestColor (hdc=0x20010795, color=0x0) returned 0x0
[0180.174] RestoreDC (hdc=0x20010795, nSavedDC=-1) returned 1
[0180.174] GdipReleaseDC (graphics=0x5da0378, hdc=0x20010795) returned 0x0
[0180.174] IsAppThemed () returned 0x1
[0180.175] GetThemeAppProperties () returned 0x3
[0180.175] GetThemeAppProperties () returned 0x3
[0180.175] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0180.175] SendMessageW (hWnd=0x702d6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0180.175] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0180.175] IsAppThemed () returned 0x1
[0180.175] GetThemeAppProperties () returned 0x3
[0180.175] GetThemeAppProperties () returned 0x3
[0180.175] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x23cf950 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0180.175] IsAppThemed () returned 0x1
[0180.176] GetThemeAppProperties () returned 0x3
[0180.176] GetThemeAppProperties () returned 0x3
[0180.176] IsAppThemed () returned 0x1
[0180.176] GetThemeAppProperties () returned 0x3
[0180.176] GetThemeAppProperties () returned 0x3
[0180.176] GetFocus () returned 0x602c8
[0180.176] IsAppThemed () returned 0x1
[0180.176] GetThemeAppProperties () returned 0x3
[0180.176] GetThemeAppProperties () returned 0x3
[0180.176] IsAppThemed () returned 0x1
[0180.176] GetThemeAppProperties () returned 0x3
[0180.176] GetThemeAppProperties () returned 0x3
[0180.176] IsThemePartDefined () returned 0x1
[0180.176] IsAppThemed () returned 0x1
[0180.176] GetThemeAppProperties () returned 0x3
[0180.176] GetThemeAppProperties () returned 0x3
[0180.176] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0180.176] IsAppThemed () returned 0x1
[0180.176] GetThemeAppProperties () returned 0x3
[0180.176] GetThemeAppProperties () returned 0x3
[0180.176] IsAppThemed () returned 0x1
[0180.177] GetThemeAppProperties () returned 0x3
[0180.177] GetThemeAppProperties () returned 0x3
[0180.177] IsThemePartDefined () returned 0x1
[0180.177] GdipCreateRegion (region=0x53e070) returned 0x0
[0180.177] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.177] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0180.177] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0180.177] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e088) returned 0x0
[0180.177] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.177] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0180.177] LocalFree (hMem=0x89eac0) returned 0x0
[0180.177] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.177] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0180.177] LocalFree (hMem=0x89eac0) returned 0x0
[0180.177] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0180.177] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0b0) returned 0x0
[0180.177] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0a0) returned 0x0
[0180.177] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e0a0) returned 0x0
[0180.178] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.178] GdipGetDC (graphics=0x5da0378, hdc=0x53e0b8) returned 0x0
[0180.178] GetCurrentObject (hdc=0x20010795, type=0x1) returned 0xb00017
[0180.178] GetCurrentObject (hdc=0x20010795, type=0x2) returned 0x900010
[0180.178] GetCurrentObject (hdc=0x20010795, type=0x7) returned 0x1e0507b9
[0180.178] GetCurrentObject (hdc=0x20010795, type=0x6) returned 0x8a01c2
[0180.178] SaveDC (hdc=0x20010795) returned 1
[0180.178] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9804053e
[0180.178] GetClipRgn (hdc=0x20010795, hrgn=0x9804053e) returned 0
[0180.178] SelectClipRgn (hdc=0x20010795, hrgn=0x3040798) returned 2
[0180.178] DeleteObject (ho=0x9804053e) returned 1
[0180.178] DeleteObject (ho=0x3040798) returned 1
[0180.178] OffsetViewportOrgEx (in: hdc=0x20010795, x=0, y=0, lppt=0x23d0000 | out: lppt=0x23d0000) returned 1
[0180.178] DrawThemeParentBackground () returned 0x0
[0180.179] GetWindowPlacement (in: hWnd=0x702d6, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0180.179] GetClientRect (in: hWnd=0x702d6, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0180.179] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.179] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.179] GetSystemMetrics (nIndex=42) returned 0
[0180.179] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.179] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0180.179] GetClientRect (in: hWnd=0x702d6, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0180.179] GetCurrentObject (hdc=0x20010795, type=0x1) returned 0xb00017
[0180.179] GetCurrentObject (hdc=0x20010795, type=0x2) returned 0x900010
[0180.179] GetCurrentObject (hdc=0x20010795, type=0x7) returned 0x1e0507b9
[0180.179] GetCurrentObject (hdc=0x20010795, type=0x6) returned 0x8a01c2
[0180.179] SaveDC (hdc=0x20010795) returned 2
[0180.180] GetNearestColor (hdc=0x20010795, color=0xf0f0f0) returned 0xf0f0f0
[0180.180] CreateSolidBrush (color=0xf0f0f0) returned 0xb610078d
[0180.180] FillRect (hDC=0x20010795, lprc=0x53dad0, hbr=0xb610078d) returned 1
[0180.180] DeleteObject (ho=0xb610078d) returned 1
[0180.180] RestoreDC (hdc=0x20010795, nSavedDC=-1) returned 1
[0180.180] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.180] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.180] GetSystemMetrics (nIndex=42) returned 0
[0180.180] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.180] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0180.180] GetClientRect (in: hWnd=0x702d6, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0180.180] GetCurrentObject (hdc=0x20010795, type=0x1) returned 0xb00017
[0180.180] GetCurrentObject (hdc=0x20010795, type=0x2) returned 0x900010
[0180.180] GetCurrentObject (hdc=0x20010795, type=0x7) returned 0x1e0507b9
[0180.180] GetCurrentObject (hdc=0x20010795, type=0x6) returned 0x8a01c2
[0180.181] SaveDC (hdc=0x20010795) returned 2
[0180.181] GetNearestColor (hdc=0x20010795, color=0xf0f0f0) returned 0xf0f0f0
[0180.181] CreateSolidBrush (color=0xf0f0f0) returned 0xb710078d
[0180.181] FillRect (hDC=0x20010795, lprc=0x53da70, hbr=0xb710078d) returned 1
[0180.181] DeleteObject (ho=0xb710078d) returned 1
[0180.181] RestoreDC (hdc=0x20010795, nSavedDC=-1) returned 1
[0180.181] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.181] GetSystemMetrics (nIndex=42) returned 0
[0180.181] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0180.181] RestoreDC (hdc=0x20010795, nSavedDC=-1) returned 1
[0180.181] GdipReleaseDC (graphics=0x5da0378, hdc=0x20010795) returned 0x0
[0180.182] IsAppThemed () returned 0x1
[0180.182] GetThemeAppProperties () returned 0x3
[0180.182] GetThemeAppProperties () returned 0x3
[0180.182] IsAppThemed () returned 0x1
[0180.182] GetThemeAppProperties () returned 0x3
[0180.182] GetThemeAppProperties () returned 0x3
[0180.182] IsThemePartDefined () returned 0x1
[0180.182] GdipCreateRegion (region=0x53dff4) returned 0x0
[0180.182] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.182] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0180.182] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0180.182] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e00c) returned 0x0
[0180.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.182] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0180.182] LocalFree (hMem=0x89eac0) returned 0x0
[0180.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0180.182] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0180.182] LocalFree (hMem=0x89ec80) returned 0x0
[0180.183] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0180.183] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e034) returned 0x0
[0180.183] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e024) returned 0x0
[0180.183] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e024) returned 0x0
[0180.183] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.183] GdipGetDC (graphics=0x5da0378, hdc=0x53e03c) returned 0x0
[0180.183] GetCurrentObject (hdc=0x20010795, type=0x1) returned 0xb00017
[0180.183] GetCurrentObject (hdc=0x20010795, type=0x2) returned 0x900010
[0180.183] GetCurrentObject (hdc=0x20010795, type=0x7) returned 0x1e0507b9
[0180.183] GetCurrentObject (hdc=0x20010795, type=0x6) returned 0x8a01c2
[0180.183] SaveDC (hdc=0x20010795) returned 1
[0180.183] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4040798
[0180.183] GetClipRgn (hdc=0x20010795, hrgn=0x4040798) returned 0
[0180.183] SelectClipRgn (hdc=0x20010795, hrgn=0x9a04053e) returned 2
[0180.183] DeleteObject (ho=0x4040798) returned 1
[0180.183] DeleteObject (ho=0x9a04053e) returned 1
[0180.184] OffsetViewportOrgEx (in: hdc=0x20010795, x=0, y=0, lppt=0x23d0888 | out: lppt=0x23d0888) returned 1
[0180.184] IsAppThemed () returned 0x1
[0180.184] GetThemeAppProperties () returned 0x3
[0180.184] GetThemeAppProperties () returned 0x3
[0180.184] DrawThemeBackground () returned 0x0
[0180.184] RestoreDC (hdc=0x20010795, nSavedDC=-1) returned 1
[0180.184] GdipReleaseDC (graphics=0x5da0378, hdc=0x20010795) returned 0x0
[0180.184] GdipCreateRegion (region=0x53dff8) returned 0x0
[0180.184] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.184] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0180.184] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0180.184] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e010) returned 0x0
[0180.184] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0180.184] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0180.184] LocalFree (hMem=0x89ee08) returned 0x0
[0180.184] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0180.184] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0180.185] LocalFree (hMem=0x89ee08) returned 0x0
[0180.185] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0180.185] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e038) returned 0x0
[0180.185] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e028) returned 0x0
[0180.185] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e028) returned 0x0
[0180.185] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.185] GdipGetDC (graphics=0x5da0378, hdc=0x53e040) returned 0x0
[0180.185] GetCurrentObject (hdc=0x20010795, type=0x1) returned 0xb00017
[0180.185] GetCurrentObject (hdc=0x20010795, type=0x2) returned 0x900010
[0180.185] GetCurrentObject (hdc=0x20010795, type=0x7) returned 0x1e0507b9
[0180.185] GetCurrentObject (hdc=0x20010795, type=0x6) returned 0x8a01c2
[0180.185] SaveDC (hdc=0x20010795) returned 1
[0180.185] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9b04053e
[0180.185] GetClipRgn (hdc=0x20010795, hrgn=0x9b04053e) returned 0
[0180.185] SelectClipRgn (hdc=0x20010795, hrgn=0x5040798) returned 2
[0180.185] DeleteObject (ho=0x9b04053e) returned 1
[0180.186] DeleteObject (ho=0x5040798) returned 1
[0180.186] OffsetViewportOrgEx (in: hdc=0x20010795, x=0, y=0, lppt=0x23d0b5c | out: lppt=0x23d0b5c) returned 1
[0180.186] IsAppThemed () returned 0x1
[0180.186] GetThemeAppProperties () returned 0x3
[0180.186] GetThemeAppProperties () returned 0x3
[0180.186] GetThemeBackgroundContentRect () returned 0x0
[0180.186] RestoreDC (hdc=0x20010795, nSavedDC=-1) returned 1
[0180.186] GdipReleaseDC (graphics=0x5da0378, hdc=0x20010795) returned 0x0
[0180.186] IsAppThemed () returned 0x1
[0180.186] GetThemeAppProperties () returned 0x3
[0180.186] GetThemeAppProperties () returned 0x3
[0180.186] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e174) returned 0x0
[0180.186] GdipGetDC (graphics=0x5da0378, hdc=0x53e160) returned 0x0
[0180.186] GetCurrentObject (hdc=0x20010795, type=0x1) returned 0xb00017
[0180.186] GetCurrentObject (hdc=0x20010795, type=0x2) returned 0x900010
[0180.186] GetCurrentObject (hdc=0x20010795, type=0x7) returned 0x1e0507b9
[0180.186] GetCurrentObject (hdc=0x20010795, type=0x6) returned 0x8a01c2
[0180.187] SaveDC (hdc=0x20010795) returned 1
[0180.187] GetTextAlign (hdc=0x20010795) returned 0x0
[0180.187] GetTextColor (hdc=0x20010795) returned 0x0
[0180.187] GetCurrentObject (hdc=0x20010795, type=0x6) returned 0x8a01c2
[0180.187] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0180.187] SelectObject (hdc=0x20010795, h=0x730a066d) returned 0x8a01c2
[0180.187] GetBkMode (hdc=0x20010795) returned 2
[0180.187] SetBkMode (hdc=0x20010795, mode=1) returned 2
[0180.187] DrawTextExW (in: hdc=0x20010795, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x23d0efc | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0180.187] DrawTextExW (in: hdc=0x20010795, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x23d0efc | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0180.188] RestoreDC (hdc=0x20010795, nSavedDC=-1) returned 1
[0180.188] GdipReleaseDC (graphics=0x5da0378, hdc=0x20010795) returned 0x0
[0180.188] GetFocus () returned 0x602c8
[0180.188] IsAppThemed () returned 0x1
[0180.188] GetThemeAppProperties () returned 0x3
[0180.188] GetThemeAppProperties () returned 0x3
[0180.188] GdipGetDC (graphics=0x5da0378, hdc=0x53e340) returned 0x0
[0180.188] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x20010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0180.189] GdipReleaseDC (graphics=0x5da0378, hdc=0x20010795) returned 0x0
[0180.189] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0180.189] SelectObject (hdc=0x20010795, h=0x85000f) returned 0x1e0507b9
[0180.189] DeleteDC (hdc=0x20010795) returned 1
[0180.189] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0180.189] EndPaint (hWnd=0xa013e, lpPaint=0x53e2e4) returned 1
[0180.189] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.189] IsWindowUnicode (hWnd=0x202c6) returned 1
[0180.189] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.189] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.189] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.189] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0180.190] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0180.190] CreateCompatibleDC (hdc=0x10105d6) returned 0x22010795
[0180.190] SelectObject (hdc=0x22010795, h=0x1e0507b9) returned 0x85000f
[0180.190] GdipCreateFromHDC (hdc=0x22010795, graphics=0x53e300) returned 0x0
[0180.190] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0180.190] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0180.190] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0180.190] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0180.195] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e360) returned 0x0
[0180.195] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0180.195] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0180.195] LocalFree (hMem=0x89ee08) returned 0x0
[0180.195] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0180.195] GdipCreateRegion (region=0x53e348) returned 0x0
[0180.195] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.195] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e354) returned 0x0
[0180.195] GdipSaveGraphics (graphics=0x5da0378, state=0x53e380) returned 0x0
[0180.195] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd550dbd) returned 0x0
[0180.195] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.195] GdipGetDC (graphics=0x5da0378, hdc=0x53e16c) returned 0x0
[0180.195] GetCurrentObject (hdc=0x22010795, type=0x1) returned 0xb00017
[0180.195] GetCurrentObject (hdc=0x22010795, type=0x2) returned 0x900010
[0180.195] GetCurrentObject (hdc=0x22010795, type=0x7) returned 0x1e0507b9
[0180.195] GetCurrentObject (hdc=0x22010795, type=0x6) returned 0x8a01c2
[0180.196] SaveDC (hdc=0x22010795) returned 1
[0180.196] GetNearestColor (hdc=0x22010795, color=0xff) returned 0xff
[0180.196] GetNearestColor (hdc=0x22010795, color=0x55) returned 0x55
[0180.196] GetNearestColor (hdc=0x22010795, color=0x0) returned 0x0
[0180.196] GetNearestColor (hdc=0x22010795, color=0x55) returned 0x55
[0180.196] GetNearestColor (hdc=0x22010795, color=0x0) returned 0x0
[0180.196] GetNearestColor (hdc=0x22010795, color=0x8080ff) returned 0x8080ff
[0180.196] GetNearestColor (hdc=0x22010795, color=0x7373e5) returned 0x7373e5
[0180.196] GetNearestColor (hdc=0x22010795, color=0xe5) returned 0xe5
[0180.196] GetNearestColor (hdc=0x22010795, color=0x0) returned 0x0
[0180.196] RestoreDC (hdc=0x22010795, nSavedDC=-1) returned 1
[0180.197] GdipReleaseDC (graphics=0x5da0378, hdc=0x22010795) returned 0x0
[0180.197] IsAppThemed () returned 0x1
[0180.197] GetThemeAppProperties () returned 0x3
[0180.197] GetThemeAppProperties () returned 0x3
[0180.197] IsAppThemed () returned 0x1
[0180.197] GetThemeAppProperties () returned 0x3
[0180.197] GetThemeAppProperties () returned 0x3
[0180.197] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0180.197] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x23d16e0 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0180.197] IsAppThemed () returned 0x1
[0180.197] GetThemeAppProperties () returned 0x3
[0180.197] GetThemeAppProperties () returned 0x3
[0180.198] IsAppThemed () returned 0x1
[0180.198] GetThemeAppProperties () returned 0x3
[0180.198] GetThemeAppProperties () returned 0x3
[0180.198] GetFocus () returned 0x602c8
[0180.198] IsAppThemed () returned 0x1
[0180.198] GetThemeAppProperties () returned 0x3
[0180.198] GetThemeAppProperties () returned 0x3
[0180.198] IsAppThemed () returned 0x1
[0180.198] GetThemeAppProperties () returned 0x3
[0180.198] GetThemeAppProperties () returned 0x3
[0180.198] IsThemePartDefined () returned 0x1
[0180.198] IsAppThemed () returned 0x1
[0180.198] GetThemeAppProperties () returned 0x3
[0180.198] GetThemeAppProperties () returned 0x3
[0180.198] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0180.198] IsAppThemed () returned 0x1
[0180.198] GetThemeAppProperties () returned 0x3
[0180.198] GetThemeAppProperties () returned 0x3
[0180.198] IsAppThemed () returned 0x1
[0180.198] GetThemeAppProperties () returned 0x3
[0180.198] GetThemeAppProperties () returned 0x3
[0180.199] IsThemePartDefined () returned 0x1
[0180.199] GdipCreateRegion (region=0x53e070) returned 0x0
[0180.199] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.199] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0180.199] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0180.199] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e088) returned 0x0
[0180.199] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0180.199] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0180.199] LocalFree (hMem=0x89ee08) returned 0x0
[0180.199] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0180.199] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0180.199] LocalFree (hMem=0x89ee08) returned 0x0
[0180.199] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0180.199] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0b0) returned 0x0
[0180.199] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0a0) returned 0x0
[0180.199] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e0a0) returned 0x0
[0180.199] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.199] GdipGetDC (graphics=0x5da0378, hdc=0x53e0b8) returned 0x0
[0180.200] GetCurrentObject (hdc=0x22010795, type=0x1) returned 0xb00017
[0180.200] GetCurrentObject (hdc=0x22010795, type=0x2) returned 0x900010
[0180.200] GetCurrentObject (hdc=0x22010795, type=0x7) returned 0x1e0507b9
[0180.200] GetCurrentObject (hdc=0x22010795, type=0x6) returned 0x8a01c2
[0180.200] SaveDC (hdc=0x22010795) returned 1
[0180.200] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6040798
[0180.200] GetClipRgn (hdc=0x22010795, hrgn=0x6040798) returned 0
[0180.200] SelectClipRgn (hdc=0x22010795, hrgn=0x9f04053e) returned 2
[0180.200] DeleteObject (ho=0x6040798) returned 1
[0180.200] DeleteObject (ho=0x9f04053e) returned 1
[0180.200] OffsetViewportOrgEx (in: hdc=0x22010795, x=0, y=0, lppt=0x23d1d90 | out: lppt=0x23d1d90) returned 1
[0180.200] DrawThemeParentBackground () returned 0x0
[0180.200] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0180.201] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0180.201] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0180.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0180.201] GetSystemMetrics (nIndex=42) returned 0
[0180.201] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0180.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0180.201] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0180.201] GetCurrentObject (hdc=0x22010795, type=0x1) returned 0xb00017
[0180.201] GetCurrentObject (hdc=0x22010795, type=0x2) returned 0x900010
[0180.201] GetCurrentObject (hdc=0x22010795, type=0x7) returned 0x1e0507b9
[0180.201] GetCurrentObject (hdc=0x22010795, type=0x6) returned 0x8a01c2
[0180.201] SaveDC (hdc=0x22010795) returned 2
[0180.203] GetNearestColor (hdc=0x22010795, color=0xff) returned 0xff
[0180.205] CreateSolidBrush (color=0xff) returned 0xb810078d
[0180.205] FillRect (hDC=0x22010795, lprc=0x53dad0, hbr=0xb810078d) returned 1
[0180.205] DeleteObject (ho=0xb810078d) returned 1
[0180.205] RestoreDC (hdc=0x22010795, nSavedDC=-1) returned 1
[0180.205] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0180.205] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0180.205] GetSystemMetrics (nIndex=42) returned 0
[0180.205] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0180.205] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0180.206] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0180.206] GetCurrentObject (hdc=0x22010795, type=0x1) returned 0xb00017
[0180.206] GetCurrentObject (hdc=0x22010795, type=0x2) returned 0x900010
[0180.206] GetCurrentObject (hdc=0x22010795, type=0x7) returned 0x1e0507b9
[0180.206] GetCurrentObject (hdc=0x22010795, type=0x6) returned 0x8a01c2
[0180.206] SaveDC (hdc=0x22010795) returned 2
[0180.206] GetNearestColor (hdc=0x22010795, color=0xff) returned 0xff
[0180.206] CreateSolidBrush (color=0xff) returned 0xb910078d
[0180.206] FillRect (hDC=0x22010795, lprc=0x53da70, hbr=0xb910078d) returned 1
[0180.206] DeleteObject (ho=0xb910078d) returned 1
[0180.206] RestoreDC (hdc=0x22010795, nSavedDC=-1) returned 1
[0180.207] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0180.207] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0180.207] GetSystemMetrics (nIndex=42) returned 0
[0180.207] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0180.207] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0180.207] RestoreDC (hdc=0x22010795, nSavedDC=-1) returned 1
[0180.207] GdipReleaseDC (graphics=0x5da0378, hdc=0x22010795) returned 0x0
[0180.207] IsAppThemed () returned 0x1
[0180.207] GetThemeAppProperties () returned 0x3
[0180.207] GetThemeAppProperties () returned 0x3
[0180.207] IsAppThemed () returned 0x1
[0180.207] GetThemeAppProperties () returned 0x3
[0180.207] GetThemeAppProperties () returned 0x3
[0180.207] IsThemePartDefined () returned 0x1
[0180.207] GdipCreateRegion (region=0x53dff4) returned 0x0
[0180.207] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.208] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0180.208] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0180.208] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e00c) returned 0x0
[0180.208] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.208] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0180.208] LocalFree (hMem=0x89eac0) returned 0x0
[0180.208] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0180.208] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0180.208] LocalFree (hMem=0x89eee8) returned 0x0
[0180.208] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0180.208] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e034) returned 0x0
[0180.208] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e024) returned 0x0
[0180.208] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e024) returned 0x0
[0180.208] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.208] GdipGetDC (graphics=0x5da0378, hdc=0x53e03c) returned 0x0
[0180.208] GetCurrentObject (hdc=0x22010795, type=0x1) returned 0xb00017
[0180.208] GetCurrentObject (hdc=0x22010795, type=0x2) returned 0x900010
[0180.209] GetCurrentObject (hdc=0x22010795, type=0x7) returned 0x1e0507b9
[0180.209] GetCurrentObject (hdc=0x22010795, type=0x6) returned 0x8a01c2
[0180.209] SaveDC (hdc=0x22010795) returned 1
[0180.209] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa004053e
[0180.209] GetClipRgn (hdc=0x22010795, hrgn=0xa004053e) returned 0
[0180.209] SelectClipRgn (hdc=0x22010795, hrgn=0x8040798) returned 2
[0180.209] DeleteObject (ho=0xa004053e) returned 1
[0180.209] DeleteObject (ho=0x8040798) returned 1
[0180.209] OffsetViewportOrgEx (in: hdc=0x22010795, x=0, y=0, lppt=0x23d25f4 | out: lppt=0x23d25f4) returned 1
[0180.209] IsAppThemed () returned 0x1
[0180.209] GetThemeAppProperties () returned 0x3
[0180.209] GetThemeAppProperties () returned 0x3
[0180.209] DrawThemeBackground () returned 0x0
[0180.209] RestoreDC (hdc=0x22010795, nSavedDC=-1) returned 1
[0180.210] GdipReleaseDC (graphics=0x5da0378, hdc=0x22010795) returned 0x0
[0180.210] GdipCreateRegion (region=0x53dff8) returned 0x0
[0180.210] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.210] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0180.210] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0180.210] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e010) returned 0x0
[0180.210] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.210] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0180.210] LocalFree (hMem=0x89eac0) returned 0x0
[0180.210] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.210] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0180.210] LocalFree (hMem=0x89eac0) returned 0x0
[0180.210] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0180.210] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e038) returned 0x0
[0180.210] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e028) returned 0x0
[0180.210] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e028) returned 0x0
[0180.210] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.210] GdipGetDC (graphics=0x5da0378, hdc=0x53e040) returned 0x0
[0180.211] GetCurrentObject (hdc=0x22010795, type=0x1) returned 0xb00017
[0180.211] GetCurrentObject (hdc=0x22010795, type=0x2) returned 0x900010
[0180.211] GetCurrentObject (hdc=0x22010795, type=0x7) returned 0x1e0507b9
[0180.211] GetCurrentObject (hdc=0x22010795, type=0x6) returned 0x8a01c2
[0180.211] SaveDC (hdc=0x22010795) returned 1
[0180.211] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9040798
[0180.211] GetClipRgn (hdc=0x22010795, hrgn=0x9040798) returned 0
[0180.211] SelectClipRgn (hdc=0x22010795, hrgn=0xa104053e) returned 2
[0180.211] DeleteObject (ho=0x9040798) returned 1
[0180.211] DeleteObject (ho=0xa104053e) returned 1
[0180.211] OffsetViewportOrgEx (in: hdc=0x22010795, x=0, y=0, lppt=0x23d28c8 | out: lppt=0x23d28c8) returned 1
[0180.211] IsAppThemed () returned 0x1
[0180.211] GetThemeAppProperties () returned 0x3
[0180.211] GetThemeAppProperties () returned 0x3
[0180.211] GetThemeBackgroundContentRect () returned 0x0
[0180.212] RestoreDC (hdc=0x22010795, nSavedDC=-1) returned 1
[0180.212] GdipReleaseDC (graphics=0x5da0378, hdc=0x22010795) returned 0x0
[0180.212] IsAppThemed () returned 0x1
[0180.212] GetThemeAppProperties () returned 0x3
[0180.212] GetThemeAppProperties () returned 0x3
[0180.212] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e174) returned 0x0
[0180.212] GdipGetDC (graphics=0x5da0378, hdc=0x53e160) returned 0x0
[0180.212] GetCurrentObject (hdc=0x22010795, type=0x1) returned 0xb00017
[0180.212] GetCurrentObject (hdc=0x22010795, type=0x2) returned 0x900010
[0180.212] GetCurrentObject (hdc=0x22010795, type=0x7) returned 0x1e0507b9
[0180.212] GetCurrentObject (hdc=0x22010795, type=0x6) returned 0x8a01c2
[0180.212] SaveDC (hdc=0x22010795) returned 1
[0180.212] GetTextAlign (hdc=0x22010795) returned 0x0
[0180.212] GetTextColor (hdc=0x22010795) returned 0x0
[0180.212] GetCurrentObject (hdc=0x22010795, type=0x6) returned 0x8a01c2
[0180.212] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0180.212] SelectObject (hdc=0x22010795, h=0x450a0799) returned 0x8a01c2
[0180.213] GetBkMode (hdc=0x22010795) returned 2
[0180.213] SetBkMode (hdc=0x22010795, mode=1) returned 2
[0180.213] DrawTextExW (in: hdc=0x22010795, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x23d2c68 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0180.213] DrawTextExW (in: hdc=0x22010795, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x23d2c68 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0180.213] RestoreDC (hdc=0x22010795, nSavedDC=-1) returned 1
[0180.213] GdipReleaseDC (graphics=0x5da0378, hdc=0x22010795) returned 0x0
[0180.213] GetFocus () returned 0x602c8
[0180.213] IsAppThemed () returned 0x1
[0180.214] GetThemeAppProperties () returned 0x3
[0180.214] GetThemeAppProperties () returned 0x3
[0180.214] GdipGetDC (graphics=0x5da0378, hdc=0x53e340) returned 0x0
[0180.214] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x22010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0180.214] GdipReleaseDC (graphics=0x5da0378, hdc=0x22010795) returned 0x0
[0180.214] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0180.214] SelectObject (hdc=0x22010795, h=0x85000f) returned 0x1e0507b9
[0180.214] DeleteDC (hdc=0x22010795) returned 1
[0180.214] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0180.214] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0180.214] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.214] IsWindowUnicode (hWnd=0x602d2) returned 1
[0180.214] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.215] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.215] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.215] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.215] IsWindowUnicode (hWnd=0x602d2) returned 1
[0180.215] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.215] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.215] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.215] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x2a1, wParam=0x0, lParam=0x50020) returned 0x0
[0180.215] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0180.215] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0180.215] WaitMessage () returned 1
[0180.265] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0180.265] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0180.265] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0180.265] WaitMessage () returned 1
[0180.266] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0180.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0180.267] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0180.267] WaitMessage () returned 1
[0180.267] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0180.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0180.267] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0180.267] WaitMessage () returned 1
[0180.352] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.352] IsWindowUnicode (hWnd=0x202d0) returned 1
[0180.352] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.352] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.352] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.352] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0180.352] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0180.352] WaitMessage () returned 1
[0180.393] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.393] IsWindowUnicode (hWnd=0x102dc) returned 1
[0180.393] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.394] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.394] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.394] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0180.394] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0180.394] WaitMessage () returned 1
[0180.395] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.395] IsWindowUnicode (hWnd=0x102dc) returned 1
[0180.395] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.395] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.395] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.396] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.399] IsWindowUnicode (hWnd=0x102dc) returned 1
[0180.399] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.399] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.399] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.400] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.400] IsWindowUnicode (hWnd=0x102dc) returned 1
[0180.400] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.400] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.400] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.400] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.400] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x84, wParam=0x0, lParam=0x18e0361) returned 0x1
[0180.400] IsWindowUnicode (hWnd=0x602d2) returned 1
[0180.400] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.400] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.400] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.401] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.401] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x84, wParam=0x0, lParam=0x18e0361) returned 0x1
[0180.401] IsWindowUnicode (hWnd=0x602d2) returned 1
[0180.401] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.401] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x84, wParam=0x0, lParam=0x18e0361) returned 0x1
[0180.401] GetDlgItem (hDlg=0x702d6, nIDDlgItem=0) returned 0x0
[0180.401] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x210, wParam=0x201, lParam=0x110142) returned 0x0
[0180.401] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x21, wParam=0x702d6, lParam=0x2010001) returned 0x1
[0180.401] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x21, wParam=0x702d6, lParam=0x2010001) returned 0x1
[0180.401] SetCursor (hCursor=0x10003) returned 0x10003
[0180.401] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.401] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0180.401] GetKeyState (nVirtKey=1) returned -127
[0180.402] GetKeyState (nVirtKey=2) returned 0
[0180.402] GetKeyState (nVirtKey=4) returned 0
[0180.402] GetKeyState (nVirtKey=5) returned 0
[0180.402] GetKeyState (nVirtKey=6) returned 0
[0180.402] IsWindowVisible (hWnd=0x602d2) returned 1
[0180.402] IsWindowEnabled (hWnd=0x602d2) returned 1
[0180.402] SetFocus (hWnd=0x602d2) returned 0x602c8
[0180.402] GetFocus () returned 0x602d2
[0180.402] IsChild (hWndParent=0x702d6, hWnd=0x602d2) returned 1
[0180.402] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x8, wParam=0x602d2, lParam=0x0) returned 0x1
[0180.402] SendMessageW (hWnd=0x602c8, Msg=0x2111, wParam=0x20002c8, lParam=0x602c8) returned 0x0
[0180.403] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0180.405] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0180.405] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.405] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0180.406] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.406] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0180.408] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.408] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x7, wParam=0x602c8, lParam=0x0) returned 0x0
[0180.408] GetStockObject (i=5) returned 0x900015
[0180.408] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0180.408] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0xd, wParam=0x3, lParam=0x89e628) returned 0x2
[0180.408] GetDlgItem (hDlg=0x702d6, nIDDlgItem=393938) returned 0x602d2
[0180.408] SendMessageW (hWnd=0x602d2, Msg=0x202b, wParam=0x602d2, lParam=0x53de74) returned 0x0
[0180.408] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x202b, wParam=0x602d2, lParam=0x53de74) returned 0x0
[0180.408] InvalidateRect (hWnd=0x602d2, lpRect=0x0, bErase=0) returned 1
[0180.411] GetFocus () returned 0x602d2
[0180.411] GetFocus () returned 0x602d2
[0180.411] GetFocus () returned 0x602d2
[0180.411] GetKeyState (nVirtKey=1) returned -127
[0180.411] GetKeyState (nVirtKey=2) returned 0
[0180.411] GetKeyState (nVirtKey=4) returned 0
[0180.411] GetKeyState (nVirtKey=5) returned 0
[0180.411] GetKeyState (nVirtKey=6) returned 0
[0180.411] GetCapture () returned 0x0
[0180.411] SetCapture (hWnd=0x602d2) returned 0x0
[0180.411] GetKeyState (nVirtKey=1) returned -127
[0180.411] GetKeyState (nVirtKey=2) returned 0
[0180.411] GetKeyState (nVirtKey=4) returned 0
[0180.411] GetKeyState (nVirtKey=5) returned 0
[0180.412] GetKeyState (nVirtKey=6) returned 0
[0180.412] NotifyWinEvent (event=0x800a, hwnd=0x602d2, idObject=-4, idChild=0)
[0180.412] InvalidateRect (hWnd=0x602d2, lpRect=0x53e4c8, bErase=0) returned 1
[0180.412] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.412] IsWindowUnicode (hWnd=0x602d2) returned 1
[0180.412] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0180.412] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0180.412] DispatchMessageW (lpMsg=0x53e8a0)
[0180.412] MapWindowPoints (in: hWndFrom=0x602d2, hWndTo=0x0, lpPoints=0x23d2edc, cPoints=0x1 | out: lpPoints=0x23d2edc) returned 25756481
[0180.412] NotifyWinEvent (event=0x800a, hwnd=0x602d2, idObject=-4, idChild=0)
[0180.412] InvalidateRect (hWnd=0x602d2, lpRect=0x53e468, bErase=0) returned 1
[0180.412] UpdateWindow (hWnd=0x602d2) returned 1
[0180.412] BeginPaint (in: hWnd=0x602d2, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0180.412] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0180.412] CreateCompatibleDC (hdc=0x10105d6) returned 0x510107bc
[0180.412] SelectObject (hdc=0x510107bc, h=0x1e0507b9) returned 0x85000f
[0180.413] GdipCreateFromHDC (hdc=0x510107bc, graphics=0x53df98) returned 0x0
[0180.413] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0180.413] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0180.413] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0180.413] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0180.413] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dff8) returned 0x0
[0180.413] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0180.413] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0180.413] LocalFree (hMem=0x89eee8) returned 0x0
[0180.413] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0180.413] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0180.413] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.413] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dfec) returned 0x0
[0180.413] GdipSaveGraphics (graphics=0x5da0378, state=0x53e018) returned 0x0
[0180.413] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd530dbd) returned 0x0
[0180.413] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.413] GdipGetDC (graphics=0x5da0378, hdc=0x53ddf8) returned 0x0
[0180.413] GetCurrentObject (hdc=0x510107bc, type=0x1) returned 0xb00017
[0180.414] GetCurrentObject (hdc=0x510107bc, type=0x2) returned 0x900010
[0180.414] GetCurrentObject (hdc=0x510107bc, type=0x7) returned 0x1e0507b9
[0180.414] GetCurrentObject (hdc=0x510107bc, type=0x6) returned 0x8a01c2
[0180.414] SaveDC (hdc=0x510107bc) returned 1
[0180.414] GetNearestColor (hdc=0x510107bc, color=0xf0f0f0) returned 0xf0f0f0
[0180.414] GetNearestColor (hdc=0x510107bc, color=0xa0a0a0) returned 0xa0a0a0
[0180.414] GetNearestColor (hdc=0x510107bc, color=0x696969) returned 0x696969
[0180.414] GetNearestColor (hdc=0x510107bc, color=0xa0a0a0) returned 0xa0a0a0
[0180.414] GetNearestColor (hdc=0x510107bc, color=0x0) returned 0x0
[0180.414] GetNearestColor (hdc=0x510107bc, color=0xffffff) returned 0xffffff
[0180.414] GetNearestColor (hdc=0x510107bc, color=0xe5e5e5) returned 0xe5e5e5
[0180.414] GetNearestColor (hdc=0x510107bc, color=0xd7d7d7) returned 0xd7d7d7
[0180.414] GetNearestColor (hdc=0x510107bc, color=0x0) returned 0x0
[0180.414] RestoreDC (hdc=0x510107bc, nSavedDC=-1) returned 1
[0180.414] GdipReleaseDC (graphics=0x5da0378, hdc=0x510107bc) returned 0x0
[0180.414] IsAppThemed () returned 0x1
[0180.414] GetThemeAppProperties () returned 0x3
[0180.415] GetThemeAppProperties () returned 0x3
[0180.415] IsAppThemed () returned 0x1
[0180.415] GetThemeAppProperties () returned 0x3
[0180.415] GetThemeAppProperties () returned 0x3
[0180.415] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0180.415] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x23d3650 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0180.415] IsAppThemed () returned 0x1
[0180.415] GetThemeAppProperties () returned 0x3
[0180.415] GetThemeAppProperties () returned 0x3
[0180.415] IsAppThemed () returned 0x1
[0180.415] GetThemeAppProperties () returned 0x3
[0180.415] GetThemeAppProperties () returned 0x3
[0180.415] IsAppThemed () returned 0x1
[0180.415] GetThemeAppProperties () returned 0x3
[0180.415] GetThemeAppProperties () returned 0x3
[0180.415] IsAppThemed () returned 0x1
[0180.416] GetThemeAppProperties () returned 0x3
[0180.416] GetThemeAppProperties () returned 0x3
[0180.416] IsThemePartDefined () returned 0x1
[0180.416] IsAppThemed () returned 0x1
[0180.416] GetThemeAppProperties () returned 0x3
[0180.416] GetThemeAppProperties () returned 0x3
[0180.416] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0180.416] IsAppThemed () returned 0x1
[0180.416] GetThemeAppProperties () returned 0x3
[0180.416] GetThemeAppProperties () returned 0x3
[0180.416] IsAppThemed () returned 0x1
[0180.416] GetThemeAppProperties () returned 0x3
[0180.416] GetThemeAppProperties () returned 0x3
[0180.416] IsThemePartDefined () returned 0x1
[0180.416] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0180.416] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.416] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0180.416] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0180.416] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53dd14) returned 0x0
[0180.416] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0180.416] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0180.416] LocalFree (hMem=0x89ea88) returned 0x0
[0180.416] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0180.416] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0180.417] LocalFree (hMem=0x89ee08) returned 0x0
[0180.417] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0180.417] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd3c) returned 0x0
[0180.417] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd2c) returned 0x0
[0180.417] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dd2c) returned 0x0
[0180.417] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.417] GdipGetDC (graphics=0x5da0378, hdc=0x53dd44) returned 0x0
[0180.417] GetCurrentObject (hdc=0x510107bc, type=0x1) returned 0xb00017
[0180.417] GetCurrentObject (hdc=0x510107bc, type=0x2) returned 0x900010
[0180.417] GetCurrentObject (hdc=0x510107bc, type=0x7) returned 0x1e0507b9
[0180.417] GetCurrentObject (hdc=0x510107bc, type=0x6) returned 0x8a01c2
[0180.417] SaveDC (hdc=0x510107bc) returned 1
[0180.417] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa204053e
[0180.417] GetClipRgn (hdc=0x510107bc, hrgn=0xa204053e) returned 0
[0180.417] SelectClipRgn (hdc=0x510107bc, hrgn=0xd040798) returned 2
[0180.417] DeleteObject (ho=0xa204053e) returned 1
[0180.417] DeleteObject (ho=0xd040798) returned 1
[0180.417] OffsetViewportOrgEx (in: hdc=0x510107bc, x=0, y=0, lppt=0x23d3d00 | out: lppt=0x23d3d00) returned 1
[0180.417] DrawThemeParentBackground () returned 0x0
[0180.418] GetWindowPlacement (in: hWnd=0x702d6, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0180.418] GetClientRect (in: hWnd=0x702d6, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0180.418] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.418] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.418] GetSystemMetrics (nIndex=42) returned 0
[0180.418] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.418] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0180.418] GetClientRect (in: hWnd=0x702d6, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0180.418] GetCurrentObject (hdc=0x510107bc, type=0x1) returned 0xb00017
[0180.418] GetCurrentObject (hdc=0x510107bc, type=0x2) returned 0x900010
[0180.418] GetCurrentObject (hdc=0x510107bc, type=0x7) returned 0x1e0507b9
[0180.418] GetCurrentObject (hdc=0x510107bc, type=0x6) returned 0x8a01c2
[0180.418] SaveDC (hdc=0x510107bc) returned 2
[0180.418] GetNearestColor (hdc=0x510107bc, color=0xf0f0f0) returned 0xf0f0f0
[0180.418] CreateSolidBrush (color=0xf0f0f0) returned 0xba10078d
[0180.418] FillRect (hDC=0x510107bc, lprc=0x53d760, hbr=0xba10078d) returned 1
[0180.419] DeleteObject (ho=0xba10078d) returned 1
[0180.419] RestoreDC (hdc=0x510107bc, nSavedDC=-1) returned 1
[0180.419] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.419] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.419] GetSystemMetrics (nIndex=42) returned 0
[0180.419] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.419] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0180.419] GetClientRect (in: hWnd=0x702d6, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0180.419] GetCurrentObject (hdc=0x510107bc, type=0x1) returned 0xb00017
[0180.419] GetCurrentObject (hdc=0x510107bc, type=0x2) returned 0x900010
[0180.419] GetCurrentObject (hdc=0x510107bc, type=0x7) returned 0x1e0507b9
[0180.419] GetCurrentObject (hdc=0x510107bc, type=0x6) returned 0x8a01c2
[0180.419] SaveDC (hdc=0x510107bc) returned 2
[0180.419] GetNearestColor (hdc=0x510107bc, color=0xf0f0f0) returned 0xf0f0f0
[0180.419] CreateSolidBrush (color=0xf0f0f0) returned 0xbb10078d
[0180.419] FillRect (hDC=0x510107bc, lprc=0x53d700, hbr=0xbb10078d) returned 1
[0180.419] DeleteObject (ho=0xbb10078d) returned 1
[0180.419] RestoreDC (hdc=0x510107bc, nSavedDC=-1) returned 1
[0180.420] GetWindowTextLengthW (hWnd=0x702d6) returned 10
[0180.420] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.420] GetSystemMetrics (nIndex=42) returned 0
[0180.420] GetWindowTextW (in: hWnd=0x702d6, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0180.420] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0180.420] RestoreDC (hdc=0x510107bc, nSavedDC=-1) returned 1
[0180.420] GdipReleaseDC (graphics=0x5da0378, hdc=0x510107bc) returned 0x0
[0180.420] IsAppThemed () returned 0x1
[0180.420] GetThemeAppProperties () returned 0x3
[0180.420] GetThemeAppProperties () returned 0x3
[0180.420] IsAppThemed () returned 0x1
[0180.420] GetThemeAppProperties () returned 0x3
[0180.420] GetThemeAppProperties () returned 0x3
[0180.420] IsThemePartDefined () returned 0x1
[0180.420] GdipCreateRegion (region=0x53dc80) returned 0x0
[0180.420] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.420] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0180.421] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0180.421] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc98) returned 0x0
[0180.421] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0180.421] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0180.421] LocalFree (hMem=0x89ea88) returned 0x0
[0180.421] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0180.421] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0180.421] LocalFree (hMem=0x89eee8) returned 0x0
[0180.421] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0180.421] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcc0) returned 0x0
[0180.421] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcb0) returned 0x0
[0180.421] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dcb0) returned 0x0
[0180.421] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.421] GdipGetDC (graphics=0x5da0378, hdc=0x53dcc8) returned 0x0
[0180.421] GetCurrentObject (hdc=0x510107bc, type=0x1) returned 0xb00017
[0180.421] GetCurrentObject (hdc=0x510107bc, type=0x2) returned 0x900010
[0180.421] GetCurrentObject (hdc=0x510107bc, type=0x7) returned 0x1e0507b9
[0180.421] GetCurrentObject (hdc=0x510107bc, type=0x6) returned 0x8a01c2
[0180.421] SaveDC (hdc=0x510107bc) returned 1
[0180.421] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe040798
[0180.422] GetClipRgn (hdc=0x510107bc, hrgn=0xe040798) returned 0
[0180.422] SelectClipRgn (hdc=0x510107bc, hrgn=0xa404053e) returned 2
[0180.422] DeleteObject (ho=0xe040798) returned 1
[0180.422] DeleteObject (ho=0xa404053e) returned 1
[0180.422] OffsetViewportOrgEx (in: hdc=0x510107bc, x=0, y=0, lppt=0x23d8450 | out: lppt=0x23d8450) returned 1
[0180.422] IsAppThemed () returned 0x1
[0180.422] GetThemeAppProperties () returned 0x3
[0180.422] GetThemeAppProperties () returned 0x3
[0180.422] DrawThemeBackground () returned 0x0
[0180.422] RestoreDC (hdc=0x510107bc, nSavedDC=-1) returned 1
[0180.422] GdipReleaseDC (graphics=0x5da0378, hdc=0x510107bc) returned 0x0
[0180.422] GdipCreateRegion (region=0x53dc84) returned 0x0
[0180.422] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.422] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0180.422] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0180.422] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53dc9c) returned 0x0
[0180.422] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0180.422] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0180.422] LocalFree (hMem=0x89ee08) returned 0x0
[0180.422] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0180.422] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0180.423] LocalFree (hMem=0x89ec80) returned 0x0
[0180.423] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0180.423] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcc4) returned 0x0
[0180.423] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcb4) returned 0x0
[0180.423] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dcb4) returned 0x0
[0180.423] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.423] GdipGetDC (graphics=0x5da0378, hdc=0x53dccc) returned 0x0
[0180.423] GetCurrentObject (hdc=0x510107bc, type=0x1) returned 0xb00017
[0180.423] GetCurrentObject (hdc=0x510107bc, type=0x2) returned 0x900010
[0180.423] GetCurrentObject (hdc=0x510107bc, type=0x7) returned 0x1e0507b9
[0180.423] GetCurrentObject (hdc=0x510107bc, type=0x6) returned 0x8a01c2
[0180.423] SaveDC (hdc=0x510107bc) returned 1
[0180.423] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa504053e
[0180.423] GetClipRgn (hdc=0x510107bc, hrgn=0xa504053e) returned 0
[0180.423] SelectClipRgn (hdc=0x510107bc, hrgn=0xf040798) returned 2
[0180.423] DeleteObject (ho=0xa504053e) returned 1
[0180.423] DeleteObject (ho=0xf040798) returned 1
[0180.423] OffsetViewportOrgEx (in: hdc=0x510107bc, x=0, y=0, lppt=0x23d8724 | out: lppt=0x23d8724) returned 1
[0180.423] IsAppThemed () returned 0x1
[0180.423] GetThemeAppProperties () returned 0x3
[0180.424] GetThemeAppProperties () returned 0x3
[0180.424] GetThemeBackgroundContentRect () returned 0x0
[0180.424] RestoreDC (hdc=0x510107bc, nSavedDC=-1) returned 1
[0180.424] GdipReleaseDC (graphics=0x5da0378, hdc=0x510107bc) returned 0x0
[0180.424] IsAppThemed () returned 0x1
[0180.424] GetThemeAppProperties () returned 0x3
[0180.424] GetThemeAppProperties () returned 0x3
[0180.424] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53de00) returned 0x0
[0180.424] GdipGetDC (graphics=0x5da0378, hdc=0x53ddec) returned 0x0
[0180.424] GetCurrentObject (hdc=0x510107bc, type=0x1) returned 0xb00017
[0180.424] GetCurrentObject (hdc=0x510107bc, type=0x2) returned 0x900010
[0180.424] GetCurrentObject (hdc=0x510107bc, type=0x7) returned 0x1e0507b9
[0180.424] GetCurrentObject (hdc=0x510107bc, type=0x6) returned 0x8a01c2
[0180.424] SaveDC (hdc=0x510107bc) returned 1
[0180.424] GetTextAlign (hdc=0x510107bc) returned 0x0
[0180.424] GetTextColor (hdc=0x510107bc) returned 0x0
[0180.424] GetCurrentObject (hdc=0x510107bc, type=0x6) returned 0x8a01c2
[0180.424] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0180.425] SelectObject (hdc=0x510107bc, h=0x730a066d) returned 0x8a01c2
[0180.427] GetBkMode (hdc=0x510107bc) returned 2
[0180.427] SetBkMode (hdc=0x510107bc, mode=1) returned 2
[0180.427] DrawTextExW (in: hdc=0x510107bc, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x23d8ac4 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0180.427] DrawTextExW (in: hdc=0x510107bc, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x23d8ac4 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0180.428] RestoreDC (hdc=0x510107bc, nSavedDC=-1) returned 1
[0180.428] GdipReleaseDC (graphics=0x5da0378, hdc=0x510107bc) returned 0x0
[0180.428] GetFocus () returned 0x602d2
[0180.428] IsAppThemed () returned 0x1
[0180.428] GetThemeAppProperties () returned 0x3
[0180.428] GetThemeAppProperties () returned 0x3
[0180.428] GdipGetDC (graphics=0x5da0378, hdc=0x53dfd8) returned 0x0
[0180.428] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x510107bc, x1=0, y1=0, rop=0xcc0020) returned 1
[0180.428] GdipReleaseDC (graphics=0x5da0378, hdc=0x510107bc) returned 0x0
[0180.428] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0180.428] SelectObject (hdc=0x510107bc, h=0x85000f) returned 0x1e0507b9
[0180.428] DeleteDC (hdc=0x510107bc) returned 1
[0180.428] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0180.428] EndPaint (hWnd=0x602d2, lpPaint=0x53df7c) returned 1
[0180.429] MapWindowPoints (in: hWndFrom=0x602d2, hWndTo=0x0, lpPoints=0x23d8bc0, cPoints=0x1 | out: lpPoints=0x23d8bc0) returned 25756481
[0180.429] WindowFromPoint (Point=0x361) returned 0x602d2
[0180.429] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x84, wParam=0x0, lParam=0x18e0361) returned 0x1
[0180.429] NotifyWinEvent (event=0x800a, hwnd=0x602d2, idObject=-4, idChild=0)
[0180.429] NotifyWinEvent (event=0x800c, hwnd=0x602d2, idObject=-4, idChild=0)
[0180.429] GetWindowTextLengthW (hWnd=0x602c8) returned 0
[0180.429] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0180.429] GetSystemMetrics (nIndex=42) returned 0
[0180.429] GetWindowTextW (in: hWnd=0x602c8, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0180.429] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0180.429] SendMessageW (hWnd=0x702d6, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0180.429] GetCapture () returned 0x602d2
[0180.429] ReleaseCapture () returned 1
[0180.429] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0180.430] PeekMessageW (lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0)
[0180.430] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x84, wParam=0x0, lParam=0x18e0361) returned 0x1
[0180.431] IsWindow (hWnd=0x70036) returned 1
[0180.431] EnableWindow (hWnd=0x70036, bEnable=1)
[0180.434] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0180.434] IsWindow (hWnd=0x70036) returned 1
[0180.434] SetActiveWindow (hWnd=0x70036)
[0180.434] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x86, wParam=0x0, lParam=0x70036)
[0180.436] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0180.436] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0180.436] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0180.439] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0180.439] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0180.447] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0180.447] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x702d6) returned 0x1
[0180.451] GetFocus () returned 0x602d2
[0180.451] SetFocus (hWnd=0x202c6)
[0180.451] GetFocus () returned 0x202c6
[0180.451] IsChild (hWndParent=0x702d6, hWnd=0x202c6) returned 0
[0180.452] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0180.452] GetCapture () returned 0x0
[0180.452] InvalidateRect (hWnd=0x602d2, lpRect=0x0, bErase=0) returned 1
[0180.453] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0180.454] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f)
[0180.458] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.459] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0180.460] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.460] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x602d2, lParam=0x0)
[0180.460] GetStockObject (i=5) returned 0x900015
[0180.460] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0180.461] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0180.461] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0180.467] IsWindowVisible (hWnd=0x70036) returned 1
[0180.467] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0180.467] GetFocus () returned 0x202c6
[0180.467] IsChild (hWndParent=0x702d6, hWnd=0x202c6) returned 0
[0180.467] ShowWindow (hWnd=0x702d6, nCmdShow=0)
[0180.467] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0180.467] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0180.470] GetWindowPlacement (in: hWnd=0x702d6, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0180.471] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0180.471] GetClientRect (in: hWnd=0x702d6, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0180.471] GetWindowRect (in: hWnd=0x702d6, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0180.486] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0180.486] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0180.486] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0180.538] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0180.540] GetWindowTextLengthW (hWnd=0x702d6)
[0180.540] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0180.540] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0180.541] SendMessageW (hWnd=0x602c8, Msg=0xb8, wParam=0x0, lParam=0x0)
[0180.541] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0180.541] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0180.541] GetWindowThreadProcessId (in: hWnd=0x702da, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0180.541] GetWindow (hWnd=0x702da, uCmd=0x5) returned 0x0
[0180.541] GetWindowLongW (hWnd=0x702da, nIndex=-20) returned 65792
[0180.541] DestroyWindow (hWnd=0x702da)
[0180.541] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702da, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0180.541] GetWindowTextLengthW (hWnd=0x702da)
[0180.541] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0180.541] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702da, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0180.542] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702da, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0180.543] GetWindowTextLengthW (hWnd=0x602d8)
[0180.543] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0180.543] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0180.543] InvalidateRect (hWnd=0x602d2, lpRect=0x0, bErase=0) returned 1
[0180.543] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0180.544] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0180.544] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x602c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0180.545] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x602d8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0180.546] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x602d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0180.548] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0180.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0180.556] GetProcessWindowStation () returned 0x13c
[0180.556] GetActiveWindow () returned 0x70036
[0180.557] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0180.557] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0180.557] GetCurrentThreadId () returned 0x11d0
[0180.557] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4436, lParam=0x0) returned 1
[0180.557] IsWindowVisible (hWnd=0x70036) returned 1
[0180.557] IsWindowEnabled (hWnd=0x70036) returned 1
[0180.557] IsWindowVisible (hWnd=0x602b6) returned 0
[0180.558] IsWindowVisible (hWnd=0x901f8) returned 0
[0180.558] IsWindowVisible (hWnd=0x202d0) returned 0
[0180.558] IsWindowVisible (hWnd=0x202d4) returned 0
[0180.558] GetActiveWindow () returned 0x70036
[0180.558] GetFocus () returned 0x202c6
[0180.558] IsWindow (hWnd=0x70036) returned 1
[0180.558] EnableWindow (hWnd=0x70036, bEnable=0)
[0180.558] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0180.559] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0180.559] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0180.560] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0180.579] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x802d6) returned 0x1
[0180.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0180.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0180.586] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xb013e, lParam=0x0) returned 0x0
[0180.586] GetCapture () returned 0x0
[0180.586] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0180.587] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0180.589] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.589] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0180.592] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x60100ce
[0180.593] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0180.593] CreateCompatibleDC (hdc=0x60100ce) returned 0x650107bc
[0180.593] SelectObject (hdc=0x650107bc, h=0x1e0507b9) returned 0x85000f
[0180.593] GdipCreateFromHDC (hdc=0x650107bc, graphics=0x53e108) returned 0x0
[0180.593] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0180.593] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0180.593] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0180.593] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0180.594] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e168) returned 0x0
[0180.594] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0180.594] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0180.594] LocalFree (hMem=0x89eac0) returned 0x0
[0180.594] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0180.594] GdipCreateRegion (region=0x53e150) returned 0x0
[0180.594] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.594] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e15c) returned 0x0
[0180.594] GdipSaveGraphics (graphics=0x5da0378, state=0x53e188) returned 0x0
[0180.594] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd510dbd) returned 0x0
[0180.594] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.594] GdipGetDC (graphics=0x5da0378, hdc=0x53df74) returned 0x0
[0180.594] GetCurrentObject (hdc=0x650107bc, type=0x1) returned 0xb00017
[0180.594] GetCurrentObject (hdc=0x650107bc, type=0x2) returned 0x900010
[0180.594] GetCurrentObject (hdc=0x650107bc, type=0x7) returned 0x1e0507b9
[0180.595] GetCurrentObject (hdc=0x650107bc, type=0x6) returned 0x8a01c2
[0180.595] SaveDC (hdc=0x650107bc) returned 1
[0180.595] GetNearestColor (hdc=0x650107bc, color=0xff) returned 0xff
[0180.595] GetNearestColor (hdc=0x650107bc, color=0x55) returned 0x55
[0180.595] GetNearestColor (hdc=0x650107bc, color=0x0) returned 0x0
[0180.595] GetNearestColor (hdc=0x650107bc, color=0x55) returned 0x55
[0180.595] GetNearestColor (hdc=0x650107bc, color=0x0) returned 0x0
[0180.595] GetNearestColor (hdc=0x650107bc, color=0x8080ff) returned 0x8080ff
[0180.595] GetNearestColor (hdc=0x650107bc, color=0x7373e5) returned 0x7373e5
[0180.595] GetNearestColor (hdc=0x650107bc, color=0xe5) returned 0xe5
[0180.595] GetNearestColor (hdc=0x650107bc, color=0x0) returned 0x0
[0180.595] RestoreDC (hdc=0x650107bc, nSavedDC=-1) returned 1
[0180.595] GdipReleaseDC (graphics=0x5da0378, hdc=0x650107bc) returned 0x0
[0180.596] IsAppThemed () returned 0x1
[0180.596] GetThemeAppProperties () returned 0x3
[0180.596] GetThemeAppProperties () returned 0x3
[0180.596] IsAppThemed () returned 0x1
[0180.596] GetThemeAppProperties () returned 0x3
[0180.596] GetThemeAppProperties () returned 0x3
[0180.596] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0180.596] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x23d9eb8 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0180.596] IsAppThemed () returned 0x1
[0180.596] GetThemeAppProperties () returned 0x3
[0180.596] GetThemeAppProperties () returned 0x3
[0180.596] IsAppThemed () returned 0x1
[0180.596] GetThemeAppProperties () returned 0x3
[0180.603] GetThemeAppProperties () returned 0x3
[0180.603] GetFocus () returned 0xb013e
[0180.603] IsAppThemed () returned 0x1
[0180.603] GetThemeAppProperties () returned 0x3
[0180.603] GetThemeAppProperties () returned 0x3
[0180.603] IsAppThemed () returned 0x1
[0180.603] GetThemeAppProperties () returned 0x3
[0180.603] GetThemeAppProperties () returned 0x3
[0180.603] IsThemePartDefined () returned 0x1
[0180.603] IsAppThemed () returned 0x1
[0180.603] GetThemeAppProperties () returned 0x3
[0180.603] GetThemeAppProperties () returned 0x3
[0180.604] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0180.604] IsAppThemed () returned 0x1
[0180.604] GetThemeAppProperties () returned 0x3
[0180.604] GetThemeAppProperties () returned 0x3
[0180.604] IsAppThemed () returned 0x1
[0180.604] GetThemeAppProperties () returned 0x3
[0180.604] GetThemeAppProperties () returned 0x3
[0180.604] IsThemePartDefined () returned 0x1
[0180.604] GdipCreateRegion (region=0x53de78) returned 0x0
[0180.604] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.604] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0180.604] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0180.604] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53de90) returned 0x0
[0180.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0180.604] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eee8) returned 0x0
[0180.604] LocalFree (hMem=0x89eee8) returned 0x0
[0180.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0180.604] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0180.604] LocalFree (hMem=0x89ec80) returned 0x0
[0180.605] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0180.605] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53deb8) returned 0x0
[0180.605] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dea8) returned 0x0
[0180.605] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dea8) returned 0x0
[0180.605] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.605] GdipGetDC (graphics=0x5da0378, hdc=0x53dec0) returned 0x0
[0180.605] GetCurrentObject (hdc=0x650107bc, type=0x1) returned 0xb00017
[0180.605] GetCurrentObject (hdc=0x650107bc, type=0x2) returned 0x900010
[0180.605] GetCurrentObject (hdc=0x650107bc, type=0x7) returned 0x1e0507b9
[0180.605] GetCurrentObject (hdc=0x650107bc, type=0x6) returned 0x8a01c2
[0180.605] SaveDC (hdc=0x650107bc) returned 1
[0180.605] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x10040798
[0180.605] GetClipRgn (hdc=0x650107bc, hrgn=0x10040798) returned 0
[0180.605] SelectClipRgn (hdc=0x650107bc, hrgn=0xab04053e) returned 2
[0180.605] DeleteObject (ho=0x10040798) returned 1
[0180.605] DeleteObject (ho=0xab04053e) returned 1
[0180.606] OffsetViewportOrgEx (in: hdc=0x650107bc, x=0, y=0, lppt=0x23da568 | out: lppt=0x23da568) returned 1
[0180.606] DrawThemeParentBackground () returned 0x0
[0180.606] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0180.606] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0180.606] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0180.606] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0180.606] GetSystemMetrics (nIndex=42) returned 0
[0180.606] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0180.606] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0180.606] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0180.606] GetCurrentObject (hdc=0x650107bc, type=0x1) returned 0xb00017
[0180.606] GetCurrentObject (hdc=0x650107bc, type=0x2) returned 0x900010
[0180.606] GetCurrentObject (hdc=0x650107bc, type=0x7) returned 0x1e0507b9
[0180.606] GetCurrentObject (hdc=0x650107bc, type=0x6) returned 0x8a01c2
[0180.606] SaveDC (hdc=0x650107bc) returned 2
[0180.607] GetNearestColor (hdc=0x650107bc, color=0xff) returned 0xff
[0180.607] CreateSolidBrush (color=0xff) returned 0xbc10078d
[0180.607] FillRect (hDC=0x650107bc, lprc=0x53d8d8, hbr=0xbc10078d) returned 1
[0180.607] DeleteObject (ho=0xbc10078d) returned 1
[0180.607] RestoreDC (hdc=0x650107bc, nSavedDC=-1) returned 1
[0180.607] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0180.607] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0180.607] GetSystemMetrics (nIndex=42) returned 0
[0180.607] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0180.607] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0180.607] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0180.607] GetCurrentObject (hdc=0x650107bc, type=0x1) returned 0xb00017
[0180.607] GetCurrentObject (hdc=0x650107bc, type=0x2) returned 0x900010
[0180.607] GetCurrentObject (hdc=0x650107bc, type=0x7) returned 0x1e0507b9
[0180.607] GetCurrentObject (hdc=0x650107bc, type=0x6) returned 0x8a01c2
[0180.607] SaveDC (hdc=0x650107bc) returned 2
[0180.608] GetNearestColor (hdc=0x650107bc, color=0xff) returned 0xff
[0180.608] CreateSolidBrush (color=0xff) returned 0xbd10078d
[0180.608] FillRect (hDC=0x650107bc, lprc=0x53d878, hbr=0xbd10078d) returned 1
[0180.608] DeleteObject (ho=0xbd10078d) returned 1
[0180.608] RestoreDC (hdc=0x650107bc, nSavedDC=-1) returned 1
[0180.608] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0180.608] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0180.608] GetSystemMetrics (nIndex=42) returned 0
[0180.608] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0180.608] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0180.608] RestoreDC (hdc=0x650107bc, nSavedDC=-1) returned 1
[0180.608] GdipReleaseDC (graphics=0x5da0378, hdc=0x650107bc) returned 0x0
[0180.608] IsAppThemed () returned 0x1
[0180.609] GetThemeAppProperties () returned 0x3
[0180.609] GetThemeAppProperties () returned 0x3
[0180.609] IsAppThemed () returned 0x1
[0180.609] GetThemeAppProperties () returned 0x3
[0180.609] GetThemeAppProperties () returned 0x3
[0180.609] IsThemePartDefined () returned 0x1
[0180.609] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0180.609] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.609] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0180.609] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0180.609] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de14) returned 0x0
[0180.609] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0180.609] LocalFree (hMem=0x89eee8) returned 0x0
[0180.609] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0180.609] LocalFree (hMem=0x89eee8) returned 0x0
[0180.609] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0180.609] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de3c) returned 0x0
[0180.609] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de2c) returned 0x0
[0180.609] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53de2c) returned 0x0
[0180.609] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.610] GdipGetDC (graphics=0x5da0378, hdc=0x53de44) returned 0x0
[0180.610] GetCurrentObject (hdc=0x650107bc, type=0x1) returned 0xb00017
[0180.610] GetCurrentObject (hdc=0x650107bc, type=0x2) returned 0x900010
[0180.610] GetCurrentObject (hdc=0x650107bc, type=0x7) returned 0x1e0507b9
[0180.610] GetCurrentObject (hdc=0x650107bc, type=0x6) returned 0x8a01c2
[0180.610] SaveDC (hdc=0x650107bc) returned 1
[0180.610] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xac04053e
[0180.610] GetClipRgn (hdc=0x650107bc, hrgn=0xac04053e) returned 0
[0180.610] SelectClipRgn (hdc=0x650107bc, hrgn=0x12040798) returned 2
[0180.610] DeleteObject (ho=0xac04053e) returned 1
[0180.610] DeleteObject (ho=0x12040798) returned 1
[0180.610] OffsetViewportOrgEx (in: hdc=0x650107bc, x=0, y=0, lppt=0x23dadcc | out: lppt=0x23dadcc) returned 1
[0180.610] IsAppThemed () returned 0x1
[0180.610] GetThemeAppProperties () returned 0x3
[0180.610] GetThemeAppProperties () returned 0x3
[0180.610] DrawThemeBackground () returned 0x0
[0180.610] RestoreDC (hdc=0x650107bc, nSavedDC=-1) returned 1
[0180.610] GdipReleaseDC (graphics=0x5da0378, hdc=0x650107bc) returned 0x0
[0180.611] GdipCreateRegion (region=0x53de00) returned 0x0
[0180.611] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0180.611] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0180.611] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0180.611] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53de18) returned 0x0
[0180.611] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0180.611] LocalFree (hMem=0x89ee08) returned 0x0
[0180.611] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eee8) returned 0x0
[0180.611] LocalFree (hMem=0x89eee8) returned 0x0
[0180.611] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0180.611] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de40) returned 0x0
[0180.611] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de30) returned 0x0
[0180.611] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53de30) returned 0x0
[0180.611] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0180.611] GdipGetDC (graphics=0x5da0378, hdc=0x53de48) returned 0x0
[0180.611] GetCurrentObject (hdc=0x650107bc, type=0x1) returned 0xb00017
[0180.611] GetCurrentObject (hdc=0x650107bc, type=0x2) returned 0x900010
[0180.611] GetCurrentObject (hdc=0x650107bc, type=0x7) returned 0x1e0507b9
[0180.611] GetCurrentObject (hdc=0x650107bc, type=0x6) returned 0x8a01c2
[0180.611] SaveDC (hdc=0x650107bc) returned 1
[0180.611] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x13040798
[0180.612] GetClipRgn (hdc=0x650107bc, hrgn=0x13040798) returned 0
[0180.612] SelectClipRgn (hdc=0x650107bc, hrgn=0xad04053e) returned 2
[0180.612] DeleteObject (ho=0x13040798) returned 1
[0180.612] DeleteObject (ho=0xad04053e) returned 1
[0180.612] OffsetViewportOrgEx (in: hdc=0x650107bc, x=0, y=0, lppt=0x23db0a0 | out: lppt=0x23db0a0) returned 1
[0180.612] IsAppThemed () returned 0x1
[0180.612] GetThemeAppProperties () returned 0x3
[0180.612] GetThemeAppProperties () returned 0x3
[0180.612] GetThemeBackgroundContentRect () returned 0x0
[0180.612] RestoreDC (hdc=0x650107bc, nSavedDC=-1) returned 1
[0180.612] GdipReleaseDC (graphics=0x5da0378, hdc=0x650107bc) returned 0x0
[0180.619] IsAppThemed () returned 0x1
[0180.619] GetThemeAppProperties () returned 0x3
[0180.619] GetThemeAppProperties () returned 0x3
[0180.619] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53df7c) returned 0x0
[0180.619] GdipGetDC (graphics=0x5da0378, hdc=0x53df68) returned 0x0
[0180.619] GetCurrentObject (hdc=0x650107bc, type=0x1) returned 0xb00017
[0180.619] GetCurrentObject (hdc=0x650107bc, type=0x2) returned 0x900010
[0180.619] GetCurrentObject (hdc=0x650107bc, type=0x7) returned 0x1e0507b9
[0180.619] GetCurrentObject (hdc=0x650107bc, type=0x6) returned 0x8a01c2
[0180.619] SaveDC (hdc=0x650107bc) returned 1
[0180.619] GetTextAlign (hdc=0x650107bc) returned 0x0
[0180.619] GetTextColor (hdc=0x650107bc) returned 0x0
[0180.619] GetCurrentObject (hdc=0x650107bc, type=0x6) returned 0x8a01c2
[0180.620] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0180.620] SelectObject (hdc=0x650107bc, h=0x450a0799) returned 0x8a01c2
[0180.620] GetBkMode (hdc=0x650107bc) returned 2
[0180.620] SetBkMode (hdc=0x650107bc, mode=1) returned 2
[0180.620] DrawTextExW (in: hdc=0x650107bc, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x23db440 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0180.620] DrawTextExW (in: hdc=0x650107bc, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x23db440 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0180.621] RestoreDC (hdc=0x650107bc, nSavedDC=-1) returned 1
[0180.621] GdipReleaseDC (graphics=0x5da0378, hdc=0x650107bc) returned 0x0
[0180.621] GetFocus () returned 0xb013e
[0180.621] IsAppThemed () returned 0x1
[0180.621] GetThemeAppProperties () returned 0x3
[0180.621] GetThemeAppProperties () returned 0x3
[0180.621] GdipGetDC (graphics=0x5da0378, hdc=0x53e148) returned 0x0
[0180.621] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x650107bc, x1=0, y1=0, rop=0xcc0020) returned 1
[0180.621] GdipReleaseDC (graphics=0x5da0378, hdc=0x650107bc) returned 0x0
[0180.621] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0180.621] SelectObject (hdc=0x650107bc, h=0x85000f) returned 0x1e0507b9
[0180.621] DeleteDC (hdc=0x650107bc) returned 1
[0180.621] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0180.621] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0180.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0180.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0180.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x802d6) returned 0x1
[0180.968] GetFocus () returned 0x802d6
[0180.968] GetAncestor (hwnd=0x802d6, gaFlags=0x1) returned 0x10010
[0180.968] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0180.968] SetFocus (hWnd=0x202c6) returned 0x0
[0180.971] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0180.980] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.980] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0180.980] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0180.980] GetFocus () returned 0x70036
[0180.981] SetFocus (hWnd=0x202c6) returned 0x0
[0180.986] IsWindow (hWnd=0x70036) returned 1
[0180.986] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0180.986] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0180.986] IsWindow (hWnd=0x70036) returned 1
[0180.986] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0180.986] IsWindow (hWnd=0x202c6) returned 1
[0180.986] SetFocus (hWnd=0x202c6) returned 0x70036
[0180.986] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0181.005] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0181.007] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0181.008] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0181.009] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0181.009] GetStockObject (i=5) returned 0x900015
[0181.009] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0181.009] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8da7a8) returned 0x7
[0181.009] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0181.009] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0181.009] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0181.009] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0181.011] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0181.011] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0181.011] GetFocus () returned 0x202c6
[0181.011] GetCapture () returned 0x0
[0181.011] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.012] IsWindowUnicode (hWnd=0x202c6) returned 1
[0181.012] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.012] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.012] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.012] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.013] IsWindowUnicode (hWnd=0x202c6) returned 1
[0181.013] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.013] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.013] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.014] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0181.014] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0181.014] CreateCompatibleDC (hdc=0x60100ce) returned 0x9e0107a2
[0181.014] SelectObject (hdc=0x9e0107a2, h=0x1e0507b9) returned 0x85000f
[0181.014] GdipCreateFromHDC (hdc=0x9e0107a2, graphics=0x53e958) returned 0x0
[0181.014] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0181.014] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0181.014] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0181.014] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0181.015] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e9b8) returned 0x0
[0181.015] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0181.015] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0181.015] LocalFree (hMem=0x89ee08) returned 0x0
[0181.015] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0181.015] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0181.015] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0181.015] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e9ac) returned 0x0
[0181.015] GdipSaveGraphics (graphics=0x5da0378, state=0x53e9d8) returned 0x0
[0181.015] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd4f0dbd) returned 0x0
[0181.015] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0181.015] GdipGetDC (graphics=0x5da0378, hdc=0x53e7c4) returned 0x0
[0181.015] GetCurrentObject (hdc=0x9e0107a2, type=0x1) returned 0xb00017
[0181.015] GetCurrentObject (hdc=0x9e0107a2, type=0x2) returned 0x900010
[0181.016] GetCurrentObject (hdc=0x9e0107a2, type=0x7) returned 0x1e0507b9
[0181.016] GetCurrentObject (hdc=0x9e0107a2, type=0x6) returned 0x8a01c2
[0181.016] SaveDC (hdc=0x9e0107a2) returned 1
[0181.016] GetNearestColor (hdc=0x9e0107a2, color=0xff) returned 0xff
[0181.016] GetNearestColor (hdc=0x9e0107a2, color=0x55) returned 0x55
[0181.016] GetNearestColor (hdc=0x9e0107a2, color=0x0) returned 0x0
[0181.016] GetNearestColor (hdc=0x9e0107a2, color=0x55) returned 0x55
[0181.016] GetNearestColor (hdc=0x9e0107a2, color=0x0) returned 0x0
[0181.016] GetNearestColor (hdc=0x9e0107a2, color=0x8080ff) returned 0x8080ff
[0181.016] GetNearestColor (hdc=0x9e0107a2, color=0x7373e5) returned 0x7373e5
[0181.016] GetNearestColor (hdc=0x9e0107a2, color=0xe5) returned 0xe5
[0181.016] GetNearestColor (hdc=0x9e0107a2, color=0x0) returned 0x0
[0181.016] RestoreDC (hdc=0x9e0107a2, nSavedDC=-1) returned 1
[0181.017] GdipReleaseDC (graphics=0x5da0378, hdc=0x9e0107a2) returned 0x0
[0181.017] IsAppThemed () returned 0x1
[0181.017] GetThemeAppProperties () returned 0x3
[0181.017] GetThemeAppProperties () returned 0x3
[0181.017] IsAppThemed () returned 0x1
[0181.017] GetThemeAppProperties () returned 0x3
[0181.017] GetThemeAppProperties () returned 0x3
[0181.017] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x23dbc9c | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0181.018] IsAppThemed () returned 0x1
[0181.018] GetThemeAppProperties () returned 0x3
[0181.018] GetThemeAppProperties () returned 0x3
[0181.018] IsAppThemed () returned 0x1
[0181.018] GetThemeAppProperties () returned 0x3
[0181.018] GetThemeAppProperties () returned 0x3
[0181.018] GetFocus () returned 0x202c6
[0181.018] IsAppThemed () returned 0x1
[0181.018] GetThemeAppProperties () returned 0x3
[0181.018] GetThemeAppProperties () returned 0x3
[0181.018] IsAppThemed () returned 0x1
[0181.018] GetThemeAppProperties () returned 0x3
[0181.018] GetThemeAppProperties () returned 0x3
[0181.018] IsThemePartDefined () returned 0x1
[0181.018] IsAppThemed () returned 0x1
[0181.022] GetThemeAppProperties () returned 0x3
[0181.022] GetThemeAppProperties () returned 0x3
[0181.022] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0181.022] IsAppThemed () returned 0x1
[0181.023] GetThemeAppProperties () returned 0x3
[0181.023] GetThemeAppProperties () returned 0x3
[0181.023] IsAppThemed () returned 0x1
[0181.023] GetThemeAppProperties () returned 0x3
[0181.023] GetThemeAppProperties () returned 0x3
[0181.023] IsThemePartDefined () returned 0x1
[0181.023] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0181.023] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0181.023] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0181.023] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0181.023] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e6e0) returned 0x0
[0181.023] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0181.023] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0181.023] LocalFree (hMem=0x89ee08) returned 0x0
[0181.023] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0181.023] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0181.023] LocalFree (hMem=0x89ea88) returned 0x0
[0181.023] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0181.023] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e708) returned 0x0
[0181.023] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6f8) returned 0x0
[0181.023] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e6f8) returned 0x0
[0181.023] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0181.023] GdipGetDC (graphics=0x5da0378, hdc=0x53e710) returned 0x0
[0181.024] GetCurrentObject (hdc=0x9e0107a2, type=0x1) returned 0xb00017
[0181.024] GetCurrentObject (hdc=0x9e0107a2, type=0x2) returned 0x900010
[0181.024] GetCurrentObject (hdc=0x9e0107a2, type=0x7) returned 0x1e0507b9
[0181.024] GetCurrentObject (hdc=0x9e0107a2, type=0x6) returned 0x8a01c2
[0181.024] SaveDC (hdc=0x9e0107a2) returned 1
[0181.024] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe004051e
[0181.024] GetClipRgn (hdc=0x9e0107a2, hrgn=0xe004051e) returned 0
[0181.024] SelectClipRgn (hdc=0x9e0107a2, hrgn=0xbb04053e) returned 2
[0181.024] DeleteObject (ho=0xe004051e) returned 1
[0181.024] DeleteObject (ho=0xbb04053e) returned 1
[0181.024] OffsetViewportOrgEx (in: hdc=0x9e0107a2, x=0, y=0, lppt=0x23dc34c | out: lppt=0x23dc34c) returned 1
[0181.024] DrawThemeParentBackground () returned 0x0
[0181.024] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0181.024] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0181.024] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0181.024] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0181.024] GetSystemMetrics (nIndex=42) returned 0
[0181.025] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0181.025] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0181.025] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0181.025] GetCurrentObject (hdc=0x9e0107a2, type=0x1) returned 0xb00017
[0181.025] GetCurrentObject (hdc=0x9e0107a2, type=0x2) returned 0x900010
[0181.025] GetCurrentObject (hdc=0x9e0107a2, type=0x7) returned 0x1e0507b9
[0181.025] GetCurrentObject (hdc=0x9e0107a2, type=0x6) returned 0x8a01c2
[0181.025] SaveDC (hdc=0x9e0107a2) returned 2
[0181.025] GetNearestColor (hdc=0x9e0107a2, color=0xff) returned 0xff
[0181.025] CreateSolidBrush (color=0xff) returned 0xbf10078d
[0181.025] FillRect (hDC=0x9e0107a2, lprc=0x53e128, hbr=0xbf10078d) returned 1
[0181.025] DeleteObject (ho=0xbf10078d) returned 1
[0181.025] RestoreDC (hdc=0x9e0107a2, nSavedDC=-1) returned 1
[0181.025] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0181.025] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0181.025] GetSystemMetrics (nIndex=42) returned 0
[0181.025] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0181.025] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0181.025] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0181.025] GetCurrentObject (hdc=0x9e0107a2, type=0x1) returned 0xb00017
[0181.025] GetCurrentObject (hdc=0x9e0107a2, type=0x2) returned 0x900010
[0181.026] GetCurrentObject (hdc=0x9e0107a2, type=0x7) returned 0x1e0507b9
[0181.026] GetCurrentObject (hdc=0x9e0107a2, type=0x6) returned 0x8a01c2
[0181.026] SaveDC (hdc=0x9e0107a2) returned 2
[0181.026] GetNearestColor (hdc=0x9e0107a2, color=0xff) returned 0xff
[0181.026] CreateSolidBrush (color=0xff) returned 0xc010078d
[0181.026] FillRect (hDC=0x9e0107a2, lprc=0x53e0c8, hbr=0xc010078d) returned 1
[0181.026] DeleteObject (ho=0xc010078d) returned 1
[0181.026] RestoreDC (hdc=0x9e0107a2, nSavedDC=-1) returned 1
[0181.026] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0181.026] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0181.026] GetSystemMetrics (nIndex=42) returned 0
[0181.026] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0181.026] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0181.026] RestoreDC (hdc=0x9e0107a2, nSavedDC=-1) returned 1
[0181.026] GdipReleaseDC (graphics=0x5da0378, hdc=0x9e0107a2) returned 0x0
[0181.026] IsAppThemed () returned 0x1
[0181.026] GetThemeAppProperties () returned 0x3
[0181.026] GetThemeAppProperties () returned 0x3
[0181.027] IsAppThemed () returned 0x1
[0181.027] GetThemeAppProperties () returned 0x3
[0181.027] GetThemeAppProperties () returned 0x3
[0181.027] IsThemePartDefined () returned 0x1
[0181.027] GdipCreateRegion (region=0x53e64c) returned 0x0
[0181.027] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0181.027] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0181.027] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0181.027] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e664) returned 0x0
[0181.027] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0181.027] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0181.027] LocalFree (hMem=0x89ea88) returned 0x0
[0181.027] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0181.027] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0181.027] LocalFree (hMem=0x89ea88) returned 0x0
[0181.027] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0181.027] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e68c) returned 0x0
[0181.027] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e67c) returned 0x0
[0181.027] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e67c) returned 0x0
[0181.027] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0181.027] GdipGetDC (graphics=0x5da0378, hdc=0x53e694) returned 0x0
[0181.027] GetCurrentObject (hdc=0x9e0107a2, type=0x1) returned 0xb00017
[0181.027] GetCurrentObject (hdc=0x9e0107a2, type=0x2) returned 0x900010
[0181.027] GetCurrentObject (hdc=0x9e0107a2, type=0x7) returned 0x1e0507b9
[0181.028] GetCurrentObject (hdc=0x9e0107a2, type=0x6) returned 0x8a01c2
[0181.028] SaveDC (hdc=0x9e0107a2) returned 1
[0181.028] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbc04053e
[0181.028] GetClipRgn (hdc=0x9e0107a2, hrgn=0xbc04053e) returned 0
[0181.028] SelectClipRgn (hdc=0x9e0107a2, hrgn=0xe204051e) returned 2
[0181.028] DeleteObject (ho=0xbc04053e) returned 1
[0181.028] DeleteObject (ho=0xe204051e) returned 1
[0181.028] OffsetViewportOrgEx (in: hdc=0x9e0107a2, x=0, y=0, lppt=0x23dcbb0 | out: lppt=0x23dcbb0) returned 1
[0181.028] IsAppThemed () returned 0x1
[0181.028] GetThemeAppProperties () returned 0x3
[0181.028] GetThemeAppProperties () returned 0x3
[0181.028] DrawThemeBackground () returned 0x0
[0181.028] RestoreDC (hdc=0x9e0107a2, nSavedDC=-1) returned 1
[0181.028] GdipReleaseDC (graphics=0x5da0378, hdc=0x9e0107a2) returned 0x0
[0181.028] GdipCreateRegion (region=0x53e650) returned 0x0
[0181.028] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0181.028] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0181.028] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0181.029] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e668) returned 0x0
[0181.029] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0181.029] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0181.029] LocalFree (hMem=0x89ee08) returned 0x0
[0181.029] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0181.029] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0181.029] LocalFree (hMem=0x89ee08) returned 0x0
[0181.029] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0181.029] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e690) returned 0x0
[0181.029] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e680) returned 0x0
[0181.029] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e680) returned 0x0
[0181.029] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0181.029] GdipGetDC (graphics=0x5da0378, hdc=0x53e698) returned 0x0
[0181.029] GetCurrentObject (hdc=0x9e0107a2, type=0x1) returned 0xb00017
[0181.029] GetCurrentObject (hdc=0x9e0107a2, type=0x2) returned 0x900010
[0181.029] GetCurrentObject (hdc=0x9e0107a2, type=0x7) returned 0x1e0507b9
[0181.029] GetCurrentObject (hdc=0x9e0107a2, type=0x6) returned 0x8a01c2
[0181.029] SaveDC (hdc=0x9e0107a2) returned 1
[0181.029] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe304051e
[0181.029] GetClipRgn (hdc=0x9e0107a2, hrgn=0xe304051e) returned 0
[0181.030] SelectClipRgn (hdc=0x9e0107a2, hrgn=0xbd04053e) returned 2
[0181.030] DeleteObject (ho=0xe304051e) returned 1
[0181.030] DeleteObject (ho=0xbd04053e) returned 1
[0181.030] OffsetViewportOrgEx (in: hdc=0x9e0107a2, x=0, y=0, lppt=0x23dce84 | out: lppt=0x23dce84) returned 1
[0181.030] IsAppThemed () returned 0x1
[0181.030] GetThemeAppProperties () returned 0x3
[0181.030] GetThemeAppProperties () returned 0x3
[0181.030] GetThemeBackgroundContentRect () returned 0x0
[0181.030] RestoreDC (hdc=0x9e0107a2, nSavedDC=-1) returned 1
[0181.030] GdipReleaseDC (graphics=0x5da0378, hdc=0x9e0107a2) returned 0x0
[0181.030] IsAppThemed () returned 0x1
[0181.030] GetThemeAppProperties () returned 0x3
[0181.030] GetThemeAppProperties () returned 0x3
[0181.030] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e7cc) returned 0x0
[0181.030] GdipGetDC (graphics=0x5da0378, hdc=0x53e7b8) returned 0x0
[0181.030] GetCurrentObject (hdc=0x9e0107a2, type=0x1) returned 0xb00017
[0181.030] GetCurrentObject (hdc=0x9e0107a2, type=0x2) returned 0x900010
[0181.030] GetCurrentObject (hdc=0x9e0107a2, type=0x7) returned 0x1e0507b9
[0181.030] GetCurrentObject (hdc=0x9e0107a2, type=0x6) returned 0x8a01c2
[0181.030] SaveDC (hdc=0x9e0107a2) returned 1
[0181.030] GetTextAlign (hdc=0x9e0107a2) returned 0x0
[0181.030] GetTextColor (hdc=0x9e0107a2) returned 0x0
[0181.031] GetCurrentObject (hdc=0x9e0107a2, type=0x6) returned 0x8a01c2
[0181.031] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0181.031] SelectObject (hdc=0x9e0107a2, h=0x450a0799) returned 0x8a01c2
[0181.031] GetBkMode (hdc=0x9e0107a2) returned 2
[0181.031] SetBkMode (hdc=0x9e0107a2, mode=1) returned 2
[0181.031] DrawTextExW (in: hdc=0x9e0107a2, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x23dd224 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0181.031] DrawTextExW (in: hdc=0x9e0107a2, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x23dd224 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0181.031] RestoreDC (hdc=0x9e0107a2, nSavedDC=-1) returned 1
[0181.031] GdipReleaseDC (graphics=0x5da0378, hdc=0x9e0107a2) returned 0x0
[0181.032] GetFocus () returned 0x202c6
[0181.032] IsAppThemed () returned 0x1
[0181.032] GetThemeAppProperties () returned 0x3
[0181.032] GetThemeAppProperties () returned 0x3
[0181.032] GdipGetDC (graphics=0x5da0378, hdc=0x53e998) returned 0x0
[0181.032] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x9e0107a2, x1=0, y1=0, rop=0xcc0020) returned 1
[0181.032] GdipReleaseDC (graphics=0x5da0378, hdc=0x9e0107a2) returned 0x0
[0181.032] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0181.032] SelectObject (hdc=0x9e0107a2, h=0x85000f) returned 0x1e0507b9
[0181.032] DeleteDC (hdc=0x9e0107a2) returned 1
[0181.032] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0181.032] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0181.033] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.033] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.033] WaitMessage () returned 1
[0181.038] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.039] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.039] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.039] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.039] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.040] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.040] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.040] WaitMessage () returned 1
[0181.066] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.066] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.066] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.066] DispatchMessageA (lpMsg=0x53eef8) returned 0x7f14
[0181.066] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.066] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.066] WaitMessage () returned 1
[0181.129] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.129] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.129] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.129] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.129] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.130] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.130] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.130] WaitMessage () returned 1
[0181.131] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.131] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.131] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.131] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.131] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.132] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.132] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.132] WaitMessage () returned 1
[0181.132] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.133] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.133] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.133] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.133] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.134] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.134] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.134] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.134] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.134] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.134] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.134] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.134] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.134] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.134] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.134] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.135] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.135] WaitMessage () returned 1
[0181.135] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.135] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.135] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.135] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.135] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.136] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.137] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.137] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.137] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.137] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.137] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.137] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.137] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.137] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.137] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.137] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.138] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.138] WaitMessage () returned 1
[0181.138] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.139] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.139] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.139] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.139] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.140] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.140] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.140] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.140] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.140] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.140] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.140] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.140] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.140] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.140] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.140] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.141] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.141] WaitMessage () returned 1
[0181.141] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.141] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.141] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.141] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.141] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.142] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.143] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.143] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.143] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.143] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.143] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.143] IsWindowUnicode (hWnd=0x102dc) returned 1
[0181.143] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.143] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.143] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.143] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.147] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.147] WaitMessage () returned 1
[0181.320] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.320] IsWindowUnicode (hWnd=0x202d0) returned 1
[0181.320] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0181.320] TranslateMessage (lpMsg=0x53eef8) returned 0
[0181.320] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0181.321] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.321] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0181.321] WaitMessage () returned 1
[0182.082] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.082] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.082] TranslateMessage (lpMsg=0x53eef8) returned 0
[0182.082] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0182.083] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0182.083] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0182.083] WaitMessage () returned 1
[0182.618] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.618] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x197021c) returned 0x1
[0182.618] IsWindowUnicode (hWnd=0x202c6) returned 1
[0182.618] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.618] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x197021c) returned 0x1
[0182.619] SetCursor (hCursor=0x10003) returned 0x10003
[0182.619] TranslateMessage (lpMsg=0x53eef8) returned 0
[0182.619] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0182.619] _TrackMouseEvent (in: lpEventTrack=0x23276fc | out: lpEventTrack=0x23276fc) returned 1
[0182.619] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0182.619] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0182.619] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0182.619] GetKeyState (nVirtKey=1) returned 0
[0182.619] GetKeyState (nVirtKey=2) returned 0
[0182.619] GetKeyState (nVirtKey=4) returned 0
[0182.619] GetKeyState (nVirtKey=5) returned 0
[0182.619] GetKeyState (nVirtKey=6) returned 0
[0182.620] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.620] IsWindowUnicode (hWnd=0x202c6) returned 1
[0182.620] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.620] TranslateMessage (lpMsg=0x53eef8) returned 0
[0182.620] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0182.620] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0182.620] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0182.620] CreateCompatibleDC (hdc=0x60100ce) returned 0x9d01078e
[0182.620] SelectObject (hdc=0x9d01078e, h=0x1e0507b9) returned 0x85000f
[0182.620] GdipCreateFromHDC (hdc=0x9d01078e, graphics=0x53e958) returned 0x0
[0182.621] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0182.621] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0182.621] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0182.621] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0182.621] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e9b8) returned 0x0
[0182.621] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0182.621] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0182.621] LocalFree (hMem=0x89ea88) returned 0x0
[0182.621] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0182.621] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0182.621] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0182.621] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e9ac) returned 0x0
[0182.622] GdipSaveGraphics (graphics=0x5da0378, state=0x53e9d8) returned 0x0
[0182.622] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd4d0dbd) returned 0x0
[0182.622] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0182.622] GdipGetDC (graphics=0x5da0378, hdc=0x53e7b8) returned 0x0
[0182.622] GetCurrentObject (hdc=0x9d01078e, type=0x1) returned 0xb00017
[0182.622] GetCurrentObject (hdc=0x9d01078e, type=0x2) returned 0x900010
[0182.622] GetCurrentObject (hdc=0x9d01078e, type=0x7) returned 0x1e0507b9
[0182.622] GetCurrentObject (hdc=0x9d01078e, type=0x6) returned 0x8a01c2
[0182.622] SaveDC (hdc=0x9d01078e) returned 1
[0182.622] GetNearestColor (hdc=0x9d01078e, color=0xff) returned 0xff
[0182.622] GetNearestColor (hdc=0x9d01078e, color=0x55) returned 0x55
[0182.622] GetNearestColor (hdc=0x9d01078e, color=0x0) returned 0x0
[0182.622] GetNearestColor (hdc=0x9d01078e, color=0x55) returned 0x55
[0182.623] GetNearestColor (hdc=0x9d01078e, color=0x0) returned 0x0
[0182.623] GetNearestColor (hdc=0x9d01078e, color=0x8080ff) returned 0x8080ff
[0182.623] GetNearestColor (hdc=0x9d01078e, color=0x7373e5) returned 0x7373e5
[0182.623] GetNearestColor (hdc=0x9d01078e, color=0xe5) returned 0xe5
[0182.623] GetNearestColor (hdc=0x9d01078e, color=0x0) returned 0x0
[0182.623] RestoreDC (hdc=0x9d01078e, nSavedDC=-1) returned 1
[0182.623] GdipReleaseDC (graphics=0x5da0378, hdc=0x9d01078e) returned 0x0
[0182.623] IsAppThemed () returned 0x1
[0182.623] GetThemeAppProperties () returned 0x3
[0182.623] GetThemeAppProperties () returned 0x3
[0182.623] IsAppThemed () returned 0x1
[0182.623] GetThemeAppProperties () returned 0x3
[0182.623] GetThemeAppProperties () returned 0x3
[0182.623] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x23ddbb8 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0182.624] IsAppThemed () returned 0x1
[0182.624] GetThemeAppProperties () returned 0x3
[0182.624] GetThemeAppProperties () returned 0x3
[0182.624] IsAppThemed () returned 0x1
[0182.624] GetThemeAppProperties () returned 0x3
[0182.624] GetThemeAppProperties () returned 0x3
[0182.624] IsAppThemed () returned 0x1
[0182.624] GetThemeAppProperties () returned 0x3
[0182.624] GetThemeAppProperties () returned 0x3
[0182.624] IsAppThemed () returned 0x1
[0182.624] GetThemeAppProperties () returned 0x3
[0182.624] GetThemeAppProperties () returned 0x3
[0182.624] IsThemePartDefined () returned 0x1
[0182.624] IsAppThemed () returned 0x1
[0182.625] GetThemeAppProperties () returned 0x3
[0182.625] GetThemeAppProperties () returned 0x3
[0182.625] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0182.625] IsAppThemed () returned 0x1
[0182.625] GetThemeAppProperties () returned 0x3
[0182.625] GetThemeAppProperties () returned 0x3
[0182.625] IsAppThemed () returned 0x1
[0182.625] GetThemeAppProperties () returned 0x3
[0182.625] GetThemeAppProperties () returned 0x3
[0182.625] IsThemePartDefined () returned 0x1
[0182.625] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0182.625] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0182.625] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0182.625] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0182.625] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e6d4) returned 0x0
[0182.625] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0182.626] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0182.626] LocalFree (hMem=0x89ee08) returned 0x0
[0182.626] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0182.626] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0182.626] LocalFree (hMem=0x89ec80) returned 0x0
[0182.626] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0182.626] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6fc) returned 0x0
[0182.626] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e6ec) returned 0x0
[0182.626] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e6ec) returned 0x0
[0182.626] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0182.626] GdipGetDC (graphics=0x5da0378, hdc=0x53e704) returned 0x0
[0182.626] GetCurrentObject (hdc=0x9d01078e, type=0x1) returned 0xb00017
[0182.626] GetCurrentObject (hdc=0x9d01078e, type=0x2) returned 0x900010
[0182.626] GetCurrentObject (hdc=0x9d01078e, type=0x7) returned 0x1e0507b9
[0182.626] GetCurrentObject (hdc=0x9d01078e, type=0x6) returned 0x8a01c2
[0182.626] SaveDC (hdc=0x9d01078e) returned 1
[0182.627] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbe04053e
[0182.627] GetClipRgn (hdc=0x9d01078e, hrgn=0xbe04053e) returned 0
[0182.627] SelectClipRgn (hdc=0x9d01078e, hrgn=0xe704051e) returned 2
[0182.627] DeleteObject (ho=0xbe04053e) returned 1
[0182.627] DeleteObject (ho=0xe704051e) returned 1
[0182.627] OffsetViewportOrgEx (in: hdc=0x9d01078e, x=0, y=0, lppt=0x23de268 | out: lppt=0x23de268) returned 1
[0182.627] DrawThemeParentBackground () returned 0x0
[0182.627] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0182.627] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0182.627] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0182.627] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0182.628] GetSystemMetrics (nIndex=42) returned 0
[0182.628] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0182.628] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0182.629] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0182.629] GetCurrentObject (hdc=0x9d01078e, type=0x1) returned 0xb00017
[0182.629] GetCurrentObject (hdc=0x9d01078e, type=0x2) returned 0x900010
[0182.629] GetCurrentObject (hdc=0x9d01078e, type=0x7) returned 0x1e0507b9
[0182.629] GetCurrentObject (hdc=0x9d01078e, type=0x6) returned 0x8a01c2
[0182.629] SaveDC (hdc=0x9d01078e) returned 2
[0182.629] GetNearestColor (hdc=0x9d01078e, color=0xff) returned 0xff
[0182.629] CreateSolidBrush (color=0xff) returned 0xc110078d
[0182.630] FillRect (hDC=0x9d01078e, lprc=0x53e120, hbr=0xc110078d) returned 1
[0182.630] DeleteObject (ho=0xc110078d) returned 1
[0182.630] RestoreDC (hdc=0x9d01078e, nSavedDC=-1) returned 1
[0182.630] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0182.630] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0182.630] GetSystemMetrics (nIndex=42) returned 0
[0182.630] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0182.630] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0182.630] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0182.630] GetCurrentObject (hdc=0x9d01078e, type=0x1) returned 0xb00017
[0182.630] GetCurrentObject (hdc=0x9d01078e, type=0x2) returned 0x900010
[0182.630] GetCurrentObject (hdc=0x9d01078e, type=0x7) returned 0x1e0507b9
[0182.630] GetCurrentObject (hdc=0x9d01078e, type=0x6) returned 0x8a01c2
[0182.630] SaveDC (hdc=0x9d01078e) returned 2
[0182.631] GetNearestColor (hdc=0x9d01078e, color=0xff) returned 0xff
[0182.631] CreateSolidBrush (color=0xff) returned 0xc210078d
[0182.631] FillRect (hDC=0x9d01078e, lprc=0x53e0c0, hbr=0xc210078d) returned 1
[0182.631] DeleteObject (ho=0xc210078d) returned 1
[0182.631] RestoreDC (hdc=0x9d01078e, nSavedDC=-1) returned 1
[0182.631] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0182.631] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0182.631] GetSystemMetrics (nIndex=42) returned 0
[0182.631] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0182.635] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0182.635] RestoreDC (hdc=0x9d01078e, nSavedDC=-1) returned 1
[0182.635] GdipReleaseDC (graphics=0x5da0378, hdc=0x9d01078e) returned 0x0
[0182.635] IsAppThemed () returned 0x1
[0182.635] GetThemeAppProperties () returned 0x3
[0182.635] GetThemeAppProperties () returned 0x3
[0182.636] IsAppThemed () returned 0x1
[0182.636] GetThemeAppProperties () returned 0x3
[0182.636] GetThemeAppProperties () returned 0x3
[0182.636] IsThemePartDefined () returned 0x1
[0182.636] GdipCreateRegion (region=0x53e640) returned 0x0
[0182.636] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0182.636] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0182.636] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0182.636] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e658) returned 0x0
[0182.636] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0182.636] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0182.636] LocalFree (hMem=0x89ee40) returned 0x0
[0182.636] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0182.636] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0182.636] LocalFree (hMem=0x89ee08) returned 0x0
[0182.636] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0182.636] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e680) returned 0x0
[0182.637] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e670) returned 0x0
[0182.637] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e670) returned 0x0
[0182.637] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0182.637] GdipGetDC (graphics=0x5da0378, hdc=0x53e688) returned 0x0
[0182.637] GetCurrentObject (hdc=0x9d01078e, type=0x1) returned 0xb00017
[0182.637] GetCurrentObject (hdc=0x9d01078e, type=0x2) returned 0x900010
[0182.637] GetCurrentObject (hdc=0x9d01078e, type=0x7) returned 0x1e0507b9
[0182.637] GetCurrentObject (hdc=0x9d01078e, type=0x6) returned 0x8a01c2
[0182.637] SaveDC (hdc=0x9d01078e) returned 1
[0182.637] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe804051e
[0182.637] GetClipRgn (hdc=0x9d01078e, hrgn=0xe804051e) returned 0
[0182.637] SelectClipRgn (hdc=0x9d01078e, hrgn=0xc004053e) returned 2
[0182.637] DeleteObject (ho=0xe804051e) returned 1
[0182.637] DeleteObject (ho=0xc004053e) returned 1
[0182.637] OffsetViewportOrgEx (in: hdc=0x9d01078e, x=0, y=0, lppt=0x23deacc | out: lppt=0x23deacc) returned 1
[0182.637] IsAppThemed () returned 0x1
[0182.637] GetThemeAppProperties () returned 0x3
[0182.637] GetThemeAppProperties () returned 0x3
[0182.637] DrawThemeBackground () returned 0x0
[0182.638] RestoreDC (hdc=0x9d01078e, nSavedDC=-1) returned 1
[0182.638] GdipReleaseDC (graphics=0x5da0378, hdc=0x9d01078e) returned 0x0
[0182.638] GdipCreateRegion (region=0x53e644) returned 0x0
[0182.638] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0182.638] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0182.638] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0182.638] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e65c) returned 0x0
[0182.638] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0182.638] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0182.638] LocalFree (hMem=0x89ea88) returned 0x0
[0182.638] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0182.638] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0182.638] LocalFree (hMem=0x89ee08) returned 0x0
[0182.638] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0182.638] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e684) returned 0x0
[0182.638] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e674) returned 0x0
[0182.638] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e674) returned 0x0
[0182.638] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0182.638] GdipGetDC (graphics=0x5da0378, hdc=0x53e68c) returned 0x0
[0182.639] GetCurrentObject (hdc=0x9d01078e, type=0x1) returned 0xb00017
[0182.639] GetCurrentObject (hdc=0x9d01078e, type=0x2) returned 0x900010
[0182.639] GetCurrentObject (hdc=0x9d01078e, type=0x7) returned 0x1e0507b9
[0182.639] GetCurrentObject (hdc=0x9d01078e, type=0x6) returned 0x8a01c2
[0182.639] SaveDC (hdc=0x9d01078e) returned 1
[0182.639] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc104053e
[0182.639] GetClipRgn (hdc=0x9d01078e, hrgn=0xc104053e) returned 0
[0182.639] SelectClipRgn (hdc=0x9d01078e, hrgn=0xe904051e) returned 2
[0182.639] DeleteObject (ho=0xc104053e) returned 1
[0182.639] DeleteObject (ho=0xe904051e) returned 1
[0182.639] OffsetViewportOrgEx (in: hdc=0x9d01078e, x=0, y=0, lppt=0x23deda0 | out: lppt=0x23deda0) returned 1
[0182.639] IsAppThemed () returned 0x1
[0182.639] GetThemeAppProperties () returned 0x3
[0182.639] GetThemeAppProperties () returned 0x3
[0182.639] GetThemeBackgroundContentRect () returned 0x0
[0182.639] RestoreDC (hdc=0x9d01078e, nSavedDC=-1) returned 1
[0182.640] GdipReleaseDC (graphics=0x5da0378, hdc=0x9d01078e) returned 0x0
[0182.640] IsAppThemed () returned 0x1
[0182.640] GetThemeAppProperties () returned 0x3
[0182.640] GetThemeAppProperties () returned 0x3
[0182.640] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e7c0) returned 0x0
[0182.640] GdipGetDC (graphics=0x5da0378, hdc=0x53e7ac) returned 0x0
[0182.640] GetCurrentObject (hdc=0x9d01078e, type=0x1) returned 0xb00017
[0182.640] GetCurrentObject (hdc=0x9d01078e, type=0x2) returned 0x900010
[0182.640] GetCurrentObject (hdc=0x9d01078e, type=0x7) returned 0x1e0507b9
[0182.640] GetCurrentObject (hdc=0x9d01078e, type=0x6) returned 0x8a01c2
[0182.640] SaveDC (hdc=0x9d01078e) returned 1
[0182.640] GetTextAlign (hdc=0x9d01078e) returned 0x0
[0182.640] GetTextColor (hdc=0x9d01078e) returned 0x0
[0182.640] GetCurrentObject (hdc=0x9d01078e, type=0x6) returned 0x8a01c2
[0182.640] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0182.641] SelectObject (hdc=0x9d01078e, h=0x450a0799) returned 0x8a01c2
[0182.641] GetBkMode (hdc=0x9d01078e) returned 2
[0182.641] SetBkMode (hdc=0x9d01078e, mode=1) returned 2
[0182.641] DrawTextExW (in: hdc=0x9d01078e, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x23df140 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0182.641] DrawTextExW (in: hdc=0x9d01078e, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x23df140 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0182.642] RestoreDC (hdc=0x9d01078e, nSavedDC=-1) returned 1
[0182.642] GdipReleaseDC (graphics=0x5da0378, hdc=0x9d01078e) returned 0x0
[0182.642] GetFocus () returned 0x202c6
[0182.642] IsAppThemed () returned 0x1
[0182.642] GetThemeAppProperties () returned 0x3
[0182.642] GetThemeAppProperties () returned 0x3
[0182.642] GdipGetDC (graphics=0x5da0378, hdc=0x53e998) returned 0x0
[0182.642] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x9d01078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0182.643] GdipReleaseDC (graphics=0x5da0378, hdc=0x9d01078e) returned 0x0
[0182.643] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0182.643] SelectObject (hdc=0x9d01078e, h=0x85000f) returned 0x1e0507b9
[0182.643] DeleteDC (hdc=0x9d01078e) returned 1
[0182.643] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0182.643] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0182.644] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0182.644] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0182.644] WaitMessage () returned 1
[0182.722] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.722] IsWindowUnicode (hWnd=0x202c6) returned 1
[0182.722] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.722] TranslateMessage (lpMsg=0x53eef8) returned 0
[0182.722] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0182.723] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.723] IsWindowUnicode (hWnd=0x202c6) returned 1
[0182.723] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.723] TranslateMessage (lpMsg=0x53eef8) returned 0
[0182.723] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0182.723] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xf002c) returned 0x0
[0182.723] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0182.723] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0182.723] WaitMessage () returned 1
[0182.865] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.865] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x197021c) returned 0x1
[0182.865] IsWindowUnicode (hWnd=0x202c6) returned 1
[0182.865] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.865] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x197021c) returned 0x1
[0182.866] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0182.866] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12a01c6) returned 0x0
[0182.866] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0182.866] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0182.866] SetCursor (hCursor=0x10003) returned 0x10003
[0182.866] TranslateMessage (lpMsg=0x53eef8) returned 0
[0182.866] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0182.866] GetKeyState (nVirtKey=1) returned -127
[0182.866] GetKeyState (nVirtKey=2) returned 0
[0182.867] GetKeyState (nVirtKey=4) returned 0
[0182.867] GetKeyState (nVirtKey=5) returned 0
[0182.867] GetKeyState (nVirtKey=6) returned 0
[0182.867] IsWindowVisible (hWnd=0x202c6) returned 1
[0182.867] IsWindowEnabled (hWnd=0x202c6) returned 1
[0182.867] SetFocus (hWnd=0x202c6) returned 0x202c6
[0182.867] GetFocus () returned 0x202c6
[0182.867] GetFocus () returned 0x202c6
[0182.867] GetFocus () returned 0x202c6
[0182.867] GetKeyState (nVirtKey=1) returned -127
[0182.867] GetKeyState (nVirtKey=2) returned 0
[0182.867] GetKeyState (nVirtKey=4) returned 0
[0182.867] GetKeyState (nVirtKey=5) returned 0
[0182.867] GetKeyState (nVirtKey=6) returned 0
[0182.867] GetCapture () returned 0x0
[0182.867] SetCapture (hWnd=0x202c6) returned 0x0
[0182.867] GetKeyState (nVirtKey=1) returned -127
[0182.867] GetKeyState (nVirtKey=2) returned 0
[0182.867] GetKeyState (nVirtKey=4) returned 0
[0182.867] GetKeyState (nVirtKey=5) returned 0
[0182.867] GetKeyState (nVirtKey=6) returned 0
[0182.867] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0182.868] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0182.868] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.868] IsWindowUnicode (hWnd=0x202c6) returned 1
[0182.868] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0182.868] TranslateMessage (lpMsg=0x53eef8) returned 0
[0182.868] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0182.868] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23df2c4, cPoints=0x1 | out: lpPoints=0x23df2c4) returned 25690608
[0182.868] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0182.868] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0182.868] UpdateWindow (hWnd=0x202c6) returned 1
[0182.868] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x60100ce
[0182.869] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0182.869] CreateCompatibleDC (hdc=0x60100ce) returned 0x1d0107ad
[0182.869] SelectObject (hdc=0x1d0107ad, h=0x1e0507b9) returned 0x85000f
[0182.869] GdipCreateFromHDC (hdc=0x1d0107ad, graphics=0x53e5f0) returned 0x0
[0182.869] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0182.869] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0182.869] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0182.869] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0182.869] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e650) returned 0x0
[0182.869] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0182.869] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0182.870] LocalFree (hMem=0x89ec80) returned 0x0
[0182.870] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0182.870] GdipCreateRegion (region=0x53e638) returned 0x0
[0182.870] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0182.870] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e644) returned 0x0
[0182.870] GdipSaveGraphics (graphics=0x5da0378, state=0x53e670) returned 0x0
[0182.870] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd4b0dbd) returned 0x0
[0182.870] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0182.870] GdipGetDC (graphics=0x5da0378, hdc=0x53e450) returned 0x0
[0182.870] GetCurrentObject (hdc=0x1d0107ad, type=0x1) returned 0xb00017
[0182.870] GetCurrentObject (hdc=0x1d0107ad, type=0x2) returned 0x900010
[0182.870] GetCurrentObject (hdc=0x1d0107ad, type=0x7) returned 0x1e0507b9
[0182.870] GetCurrentObject (hdc=0x1d0107ad, type=0x6) returned 0x8a01c2
[0182.870] SaveDC (hdc=0x1d0107ad) returned 1
[0182.870] GetNearestColor (hdc=0x1d0107ad, color=0xff) returned 0xff
[0182.871] GetNearestColor (hdc=0x1d0107ad, color=0x55) returned 0x55
[0182.871] GetNearestColor (hdc=0x1d0107ad, color=0x0) returned 0x0
[0182.871] GetNearestColor (hdc=0x1d0107ad, color=0x55) returned 0x55
[0182.871] GetNearestColor (hdc=0x1d0107ad, color=0x0) returned 0x0
[0182.871] GetNearestColor (hdc=0x1d0107ad, color=0x8080ff) returned 0x8080ff
[0182.871] GetNearestColor (hdc=0x1d0107ad, color=0x7373e5) returned 0x7373e5
[0182.871] GetNearestColor (hdc=0x1d0107ad, color=0xe5) returned 0xe5
[0182.871] GetNearestColor (hdc=0x1d0107ad, color=0x0) returned 0x0
[0182.871] RestoreDC (hdc=0x1d0107ad, nSavedDC=-1) returned 1
[0182.871] GdipReleaseDC (graphics=0x5da0378, hdc=0x1d0107ad) returned 0x0
[0182.871] IsAppThemed () returned 0x1
[0182.871] GetThemeAppProperties () returned 0x3
[0182.871] GetThemeAppProperties () returned 0x3
[0182.872] IsAppThemed () returned 0x1
[0182.872] GetThemeAppProperties () returned 0x3
[0182.872] GetThemeAppProperties () returned 0x3
[0182.872] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x23df9e0 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0182.872] IsAppThemed () returned 0x1
[0182.872] GetThemeAppProperties () returned 0x3
[0182.872] GetThemeAppProperties () returned 0x3
[0182.872] IsAppThemed () returned 0x1
[0182.872] GetThemeAppProperties () returned 0x3
[0182.872] GetThemeAppProperties () returned 0x3
[0182.872] IsAppThemed () returned 0x1
[0182.872] GetThemeAppProperties () returned 0x3
[0182.873] GetThemeAppProperties () returned 0x3
[0182.873] IsAppThemed () returned 0x1
[0182.873] GetThemeAppProperties () returned 0x3
[0182.873] GetThemeAppProperties () returned 0x3
[0182.873] IsThemePartDefined () returned 0x1
[0182.873] IsAppThemed () returned 0x1
[0182.873] GetThemeAppProperties () returned 0x3
[0182.873] GetThemeAppProperties () returned 0x3
[0182.873] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0182.873] IsAppThemed () returned 0x1
[0182.873] GetThemeAppProperties () returned 0x3
[0182.873] GetThemeAppProperties () returned 0x3
[0182.873] IsAppThemed () returned 0x1
[0182.873] GetThemeAppProperties () returned 0x3
[0182.873] GetThemeAppProperties () returned 0x3
[0182.873] IsThemePartDefined () returned 0x1
[0182.873] GdipCreateRegion (region=0x53e354) returned 0x0
[0182.873] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0182.873] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0182.873] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0182.873] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e36c) returned 0x0
[0182.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0182.874] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0182.874] LocalFree (hMem=0x89ea88) returned 0x0
[0182.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0182.874] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0182.874] LocalFree (hMem=0x89ec80) returned 0x0
[0182.874] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0182.874] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e394) returned 0x0
[0182.874] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e384) returned 0x0
[0182.874] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e384) returned 0x0
[0182.874] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0182.874] GdipGetDC (graphics=0x5da0378, hdc=0x53e39c) returned 0x0
[0182.874] GetCurrentObject (hdc=0x1d0107ad, type=0x1) returned 0xb00017
[0182.874] GetCurrentObject (hdc=0x1d0107ad, type=0x2) returned 0x900010
[0182.874] GetCurrentObject (hdc=0x1d0107ad, type=0x7) returned 0x1e0507b9
[0182.874] GetCurrentObject (hdc=0x1d0107ad, type=0x6) returned 0x8a01c2
[0182.875] SaveDC (hdc=0x1d0107ad) returned 1
[0182.875] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xea04051e
[0182.875] GetClipRgn (hdc=0x1d0107ad, hrgn=0xea04051e) returned 0
[0182.875] SelectClipRgn (hdc=0x1d0107ad, hrgn=0xc504053e) returned 2
[0182.875] DeleteObject (ho=0xea04051e) returned 1
[0182.875] DeleteObject (ho=0xc504053e) returned 1
[0182.875] OffsetViewportOrgEx (in: hdc=0x1d0107ad, x=0, y=0, lppt=0x23e0090 | out: lppt=0x23e0090) returned 1
[0182.875] DrawThemeParentBackground () returned 0x0
[0182.875] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0182.875] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0182.876] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0182.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0182.876] GetSystemMetrics (nIndex=42) returned 0
[0182.876] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0182.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0182.876] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0182.876] GetCurrentObject (hdc=0x1d0107ad, type=0x1) returned 0xb00017
[0182.876] GetCurrentObject (hdc=0x1d0107ad, type=0x2) returned 0x900010
[0182.876] GetCurrentObject (hdc=0x1d0107ad, type=0x7) returned 0x1e0507b9
[0182.876] GetCurrentObject (hdc=0x1d0107ad, type=0x6) returned 0x8a01c2
[0182.876] SaveDC (hdc=0x1d0107ad) returned 2
[0182.876] GetNearestColor (hdc=0x1d0107ad, color=0xff) returned 0xff
[0182.876] CreateSolidBrush (color=0xff) returned 0xc310078d
[0182.876] FillRect (hDC=0x1d0107ad, lprc=0x53ddb8, hbr=0xc310078d) returned 1
[0182.876] DeleteObject (ho=0xc310078d) returned 1
[0182.876] RestoreDC (hdc=0x1d0107ad, nSavedDC=-1) returned 1
[0182.877] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0182.877] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0182.877] GetSystemMetrics (nIndex=42) returned 0
[0182.877] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0182.877] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0182.877] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0182.877] GetCurrentObject (hdc=0x1d0107ad, type=0x1) returned 0xb00017
[0182.877] GetCurrentObject (hdc=0x1d0107ad, type=0x2) returned 0x900010
[0182.877] GetCurrentObject (hdc=0x1d0107ad, type=0x7) returned 0x1e0507b9
[0182.877] GetCurrentObject (hdc=0x1d0107ad, type=0x6) returned 0x8a01c2
[0182.877] SaveDC (hdc=0x1d0107ad) returned 2
[0182.877] GetNearestColor (hdc=0x1d0107ad, color=0xff) returned 0xff
[0182.877] CreateSolidBrush (color=0xff) returned 0xc410078d
[0182.877] FillRect (hDC=0x1d0107ad, lprc=0x53dd58, hbr=0xc410078d) returned 1
[0182.877] DeleteObject (ho=0xc410078d) returned 1
[0182.878] RestoreDC (hdc=0x1d0107ad, nSavedDC=-1) returned 1
[0182.878] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0182.878] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0182.878] GetSystemMetrics (nIndex=42) returned 0
[0182.879] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0182.879] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0182.879] RestoreDC (hdc=0x1d0107ad, nSavedDC=-1) returned 1
[0182.879] GdipReleaseDC (graphics=0x5da0378, hdc=0x1d0107ad) returned 0x0
[0182.879] IsAppThemed () returned 0x1
[0182.879] GetThemeAppProperties () returned 0x3
[0182.879] GetThemeAppProperties () returned 0x3
[0182.879] IsAppThemed () returned 0x1
[0182.879] GetThemeAppProperties () returned 0x3
[0182.879] GetThemeAppProperties () returned 0x3
[0182.879] IsThemePartDefined () returned 0x1
[0182.879] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0182.879] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0182.879] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0182.879] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0182.880] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f0) returned 0x0
[0182.880] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0182.880] LocalFree (hMem=0x89eee8) returned 0x0
[0182.880] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0182.880] LocalFree (hMem=0x89ee08) returned 0x0
[0182.880] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0182.880] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e318) returned 0x0
[0182.880] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e308) returned 0x0
[0182.880] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e308) returned 0x0
[0182.880] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0182.880] GdipGetDC (graphics=0x5da0378, hdc=0x53e320) returned 0x0
[0182.880] GetCurrentObject (hdc=0x1d0107ad, type=0x1) returned 0xb00017
[0182.880] GetCurrentObject (hdc=0x1d0107ad, type=0x2) returned 0x900010
[0182.880] GetCurrentObject (hdc=0x1d0107ad, type=0x7) returned 0x1e0507b9
[0182.880] GetCurrentObject (hdc=0x1d0107ad, type=0x6) returned 0x8a01c2
[0182.880] SaveDC (hdc=0x1d0107ad) returned 1
[0182.881] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc604053e
[0182.881] GetClipRgn (hdc=0x1d0107ad, hrgn=0xc604053e) returned 0
[0182.881] SelectClipRgn (hdc=0x1d0107ad, hrgn=0xec04051e) returned 2
[0182.881] DeleteObject (ho=0xc604053e) returned 1
[0182.881] DeleteObject (ho=0xec04051e) returned 1
[0182.881] OffsetViewportOrgEx (in: hdc=0x1d0107ad, x=0, y=0, lppt=0x23e08f4 | out: lppt=0x23e08f4) returned 1
[0182.881] IsAppThemed () returned 0x1
[0182.881] GetThemeAppProperties () returned 0x3
[0182.881] GetThemeAppProperties () returned 0x3
[0182.881] DrawThemeBackground () returned 0x0
[0182.881] RestoreDC (hdc=0x1d0107ad, nSavedDC=-1) returned 1
[0182.881] GdipReleaseDC (graphics=0x5da0378, hdc=0x1d0107ad) returned 0x0
[0182.881] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0182.881] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0182.881] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0182.881] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0182.881] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e2f4) returned 0x0
[0182.881] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0182.882] LocalFree (hMem=0x89ea88) returned 0x0
[0182.882] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0182.882] LocalFree (hMem=0x89ea88) returned 0x0
[0182.882] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0182.882] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e31c) returned 0x0
[0182.882] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e30c) returned 0x0
[0182.882] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e30c) returned 0x0
[0182.882] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0182.882] GdipGetDC (graphics=0x5da0378, hdc=0x53e324) returned 0x0
[0182.882] GetCurrentObject (hdc=0x1d0107ad, type=0x1) returned 0xb00017
[0182.882] GetCurrentObject (hdc=0x1d0107ad, type=0x2) returned 0x900010
[0182.882] GetCurrentObject (hdc=0x1d0107ad, type=0x7) returned 0x1e0507b9
[0182.882] GetCurrentObject (hdc=0x1d0107ad, type=0x6) returned 0x8a01c2
[0182.882] SaveDC (hdc=0x1d0107ad) returned 1
[0182.882] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xed04051e
[0182.883] GetClipRgn (hdc=0x1d0107ad, hrgn=0xed04051e) returned 0
[0182.883] SelectClipRgn (hdc=0x1d0107ad, hrgn=0xc704053e) returned 2
[0182.884] DeleteObject (ho=0xed04051e) returned 1
[0182.884] DeleteObject (ho=0xc704053e) returned 1
[0182.884] OffsetViewportOrgEx (in: hdc=0x1d0107ad, x=0, y=0, lppt=0x23e0bc8 | out: lppt=0x23e0bc8) returned 1
[0182.884] IsAppThemed () returned 0x1
[0182.884] GetThemeAppProperties () returned 0x3
[0182.884] GetThemeAppProperties () returned 0x3
[0182.884] GetThemeBackgroundContentRect () returned 0x0
[0182.884] RestoreDC (hdc=0x1d0107ad, nSavedDC=-1) returned 1
[0182.884] GdipReleaseDC (graphics=0x5da0378, hdc=0x1d0107ad) returned 0x0
[0182.884] IsAppThemed () returned 0x1
[0182.884] GetThemeAppProperties () returned 0x3
[0182.884] GetThemeAppProperties () returned 0x3
[0182.884] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e458) returned 0x0
[0182.884] GdipGetDC (graphics=0x5da0378, hdc=0x53e444) returned 0x0
[0182.884] GetCurrentObject (hdc=0x1d0107ad, type=0x1) returned 0xb00017
[0182.884] GetCurrentObject (hdc=0x1d0107ad, type=0x2) returned 0x900010
[0182.884] GetCurrentObject (hdc=0x1d0107ad, type=0x7) returned 0x1e0507b9
[0182.884] GetCurrentObject (hdc=0x1d0107ad, type=0x6) returned 0x8a01c2
[0182.884] SaveDC (hdc=0x1d0107ad) returned 1
[0182.885] GetTextAlign (hdc=0x1d0107ad) returned 0x0
[0182.885] GetTextColor (hdc=0x1d0107ad) returned 0x0
[0182.885] GetCurrentObject (hdc=0x1d0107ad, type=0x6) returned 0x8a01c2
[0182.885] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0182.885] SelectObject (hdc=0x1d0107ad, h=0x450a0799) returned 0x8a01c2
[0182.885] GetBkMode (hdc=0x1d0107ad) returned 2
[0182.885] SetBkMode (hdc=0x1d0107ad, mode=1) returned 2
[0182.885] DrawTextExW (in: hdc=0x1d0107ad, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x23e0f68 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0182.885] DrawTextExW (in: hdc=0x1d0107ad, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x23e0f68 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0182.886] RestoreDC (hdc=0x1d0107ad, nSavedDC=-1) returned 1
[0182.886] GdipReleaseDC (graphics=0x5da0378, hdc=0x1d0107ad) returned 0x0
[0182.886] GetFocus () returned 0x202c6
[0182.886] IsAppThemed () returned 0x1
[0182.886] GetThemeAppProperties () returned 0x3
[0182.886] GetThemeAppProperties () returned 0x3
[0182.886] GdipGetDC (graphics=0x5da0378, hdc=0x53e630) returned 0x0
[0182.886] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x1d0107ad, x1=0, y1=0, rop=0xcc0020) returned 1
[0182.886] GdipReleaseDC (graphics=0x5da0378, hdc=0x1d0107ad) returned 0x0
[0182.887] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0182.887] SelectObject (hdc=0x1d0107ad, h=0x85000f) returned 0x1e0507b9
[0182.887] DeleteDC (hdc=0x1d0107ad) returned 1
[0182.887] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0182.887] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0182.887] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23e1064, cPoints=0x1 | out: lpPoints=0x23e1064) returned 25690608
[0182.887] WindowFromPoint (Point=0x21c) returned 0x202c6
[0182.887] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x197021c) returned 0x1
[0182.887] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0182.887] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0182.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.889] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0182.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.890] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0182.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.891] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0182.891] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0182.891] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e888) returned 0x0
[0182.891] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5da0378, height=0x53e880) returned 0x0
[0182.892] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0182.892] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0182.892] GetSystemMetrics (nIndex=5) returned 1
[0182.892] GetSystemMetrics (nIndex=6) returned 1
[0182.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.892] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0182.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.893] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0182.962] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.963] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0182.963] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.963] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0182.964] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.964] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0182.964] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.964] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0182.964] GetSystemMetrics (nIndex=5) returned 1
[0182.964] GetSystemMetrics (nIndex=6) returned 1
[0182.964] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.965] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0182.965] GetSystemMetrics (nIndex=5) returned 1
[0182.965] GetSystemMetrics (nIndex=6) returned 1
[0182.965] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.965] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0182.965] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.966] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0182.966] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.966] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0182.966] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.966] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0182.967] GetSystemMetrics (nIndex=59) returned 1460
[0182.967] GetSystemMetrics (nIndex=60) returned 920
[0182.967] GetSystemMetrics (nIndex=34) returned 136
[0182.967] GetSystemMetrics (nIndex=35) returned 39
[0182.967] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.968] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0182.968] GetCurrentThreadId () returned 0x11d0
[0182.968] GetCurrentThreadId () returned 0x11d0
[0182.968] GetCurrentThreadId () returned 0x11d0
[0182.968] GetCurrentThreadId () returned 0x11d0
[0182.968] GetCurrentThreadId () returned 0x11d0
[0182.968] GetCurrentThreadId () returned 0x11d0
[0182.968] GetCurrentThreadId () returned 0x11d0
[0182.968] GetCurrentThreadId () returned 0x11d0
[0182.968] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.969] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0182.969] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0182.969] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0182.969] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.969] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0182.969] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.970] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0182.970] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x400ec
[0182.971] SetWindowLongW (hWnd=0x400ec, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0182.971] GetWindowLongW (hWnd=0x400ec, nIndex=-4) returned 1950089536
[0182.971] SetWindowLongW (hWnd=0x400ec, nIndex=-4, dwNewLong=79643742) returned 1950089536
[0182.971] GetWindowLongW (hWnd=0x400ec, nIndex=-4) returned 79643742
[0182.971] GetWindowLongW (hWnd=0x400ec, nIndex=-16) returned 113311744
[0182.972] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x400ec, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0182.972] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x400ec, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0182.973] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x400ec, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0182.973] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x400ec, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0182.973] GetClientRect (in: hWnd=0x400ec, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0182.973] GetWindowRect (in: hWnd=0x400ec, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0182.973] SetWindowTextW (hWnd=0x400ec, lpString="WindowsFormsParkingWindow") returned 1
[0182.973] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x400ec, Msg=0xc, wParam=0x0, lParam=0x23d8fb0) returned 0x1
[0182.974] GetParent (hWnd=0x400ec) returned 0x0
[0182.974] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0182.974] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x400ec, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x902d6
[0182.975] SetWindowLongW (hWnd=0x902d6, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0182.975] GetWindowLongW (hWnd=0x902d6, nIndex=-4) returned 1868147648
[0182.975] SetWindowLongW (hWnd=0x902d6, nIndex=-4, dwNewLong=79644662) returned 1868147648
[0182.976] GetWindowLongW (hWnd=0x902d6, nIndex=-4) returned 79644662
[0182.976] GetWindowLongW (hWnd=0x902d6, nIndex=-16) returned 1174405133
[0182.976] GetWindowLongW (hWnd=0x902d6, nIndex=-12) returned 0
[0182.976] SetWindowLongW (hWnd=0x902d6, nIndex=-12, dwNewLong=590550) returned 0
[0182.976] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0182.976] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0182.977] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0182.978] GetClientRect (in: hWnd=0x902d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0182.978] GetWindowRect (in: hWnd=0x902d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0182.978] GetParent (hWnd=0x902d6) returned 0x400ec
[0182.978] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x400ec, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0182.978] SetWindowTextW (hWnd=0x902d6, lpString="Enter password: ") returned 1
[0182.978] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0xc, wParam=0x0, lParam=0x2333718) returned 0x1
[0182.979] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0182.979] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0182.979] GetClientRect (in: hWnd=0x902d6, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0182.979] GetWindowRect (in: hWnd=0x902d6, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0182.979] GetParent (hWnd=0x902d6) returned 0x400ec
[0182.979] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x400ec, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0182.979] SendMessageW (hWnd=0x902d6, Msg=0x2210, wParam=0x2d60001, lParam=0x902d6) returned 0x0
[0182.979] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x2210, wParam=0x2d60001, lParam=0x902d6) returned 0x0
[0182.979] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0182.980] GetParent (hWnd=0x902d6) returned 0x400ec
[0182.980] GdipCreateFromHWND (hwnd=0x902d6, graphics=0x53e994) returned 0x0
[0182.980] GdipMeasureString (graphics=0x5da0378, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0182.980] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0182.980] GetProcessWindowStation () returned 0x13c
[0182.981] GetCapture () returned 0x202c6
[0182.981] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0182.981] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0182.981] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0182.981] ReleaseCapture () returned 1
[0182.981] GetActiveWindow () returned 0x70036
[0182.981] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0182.982] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0182.982] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0182.982] GetCursorPos (in: lpPoint=0x23f5c28 | out: lpPoint=0x23f5c28*(x=540, y=407)) returned 1
[0182.982] MonitorFromPoint (pt=0x21c, dwFlags=0x197) returned 0x10001
[0182.982] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0182.982] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x200107ad
[0182.983] GetDeviceCaps (hdc=0x200107ad, index=12) returned 32
[0182.983] GetDeviceCaps (hdc=0x200107ad, index=14) returned 1
[0182.983] DeleteDC (hdc=0x200107ad) returned 1
[0182.983] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0182.983] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0182.983] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x802d2
[0182.984] SetWindowLongW (hWnd=0x802d2, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0182.984] GetWindowLongW (hWnd=0x802d2, nIndex=-4) returned 1950089536
[0182.984] SetWindowLongW (hWnd=0x802d2, nIndex=-4, dwNewLong=79644542) returned 1950089536
[0182.984] GetWindowLongW (hWnd=0x802d2, nIndex=-4) returned 79644542
[0182.984] GetWindowLongW (hWnd=0x802d2, nIndex=-16) returned 113770496
[0182.985] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0182.986] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0182.986] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0182.986] GetClientRect (in: hWnd=0x802d2, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0182.986] GetWindowRect (in: hWnd=0x802d2, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0182.987] SetWindowTextW (hWnd=0x802d2, lpString="Ransomware") returned 1
[0182.987] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xc, wParam=0x0, lParam=0x23e112c) returned 0x1
[0182.998] GetStartupInfoW (in: lpStartupInfo=0x23f5f64 | out: lpStartupInfo=0x23f5f64*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0183.000] GetParent (hWnd=0x802d2) returned 0x0
[0183.000] SetWindowLongW (hWnd=0x802d2, nIndex=-8, dwNewLong=0) returned 0
[0183.001] SendMessageW (hWnd=0x802d2, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0183.001] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0183.001] SendMessageW (hWnd=0x802d2, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0183.001] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0183.001] GetSystemMenu (hWnd=0x802d2, bRevert=0) returned 0xd01d9
[0183.002] GetWindowPlacement (in: hWnd=0x802d2, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0183.002] EnableMenuItem (hMenu=0xd01d9, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0183.003] EnableMenuItem (hMenu=0xd01d9, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0183.003] EnableMenuItem (hMenu=0xd01d9, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0183.003] EnableMenuItem (hMenu=0xd01d9, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0183.003] EnableMenuItem (hMenu=0xd01d9, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0183.003] GetClientRect (in: hWnd=0x802d2, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0183.003] GetClientRect (in: hWnd=0x802d2, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0183.003] GetWindowRect (in: hWnd=0x802d2, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0183.004] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0183.004] GetWindowLongW (hWnd=0x802d2, nIndex=-16) returned 113770496
[0183.004] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0183.004] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0183.004] GetSystemMetrics (nIndex=42) returned 0
[0183.004] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0183.004] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0183.004] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0183.004] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0183.004] GetSystemMetrics (nIndex=42) returned 0
[0183.004] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0183.004] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0183.004] GetCursorPos (in: lpPoint=0x23f60d8 | out: lpPoint=0x23f60d8*(x=540, y=407)) returned 1
[0183.004] MonitorFromPoint (pt=0x21c, dwFlags=0x197) returned 0x10001
[0183.005] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0183.005] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x240107ad
[0183.005] GetDeviceCaps (hdc=0x240107ad, index=12) returned 32
[0183.005] GetDeviceCaps (hdc=0x240107ad, index=14) returned 1
[0183.005] DeleteDC (hdc=0x240107ad) returned 1
[0183.005] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0183.005] GetWindowLongW (hWnd=0x802d2, nIndex=-16) returned 113770496
[0183.005] GetWindowLongW (hWnd=0x802d2, nIndex=-20) returned 327937
[0183.005] SetWindowLongW (hWnd=0x802d2, nIndex=-16, dwNewLong=46661632) returned 113770496
[0183.005] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0183.006] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0183.006] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0183.007] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0183.007] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0183.007] SetWindowLongW (hWnd=0x802d2, nIndex=-20, dwNewLong=327681) returned 327937
[0183.007] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0183.008] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0183.008] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0183.009] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0183.009] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0183.009] SetWindowPos (hWnd=0x802d2, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0183.009] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0183.009] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0183.010] GetWindowPlacement (in: hWnd=0x802d2, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0183.010] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0183.010] GetClientRect (in: hWnd=0x802d2, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0183.010] GetWindowRect (in: hWnd=0x802d2, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0183.011] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0183.011] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0183.011] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0183.012] RedrawWindow (hWnd=0x802d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0183.012] GetSystemMenu (hWnd=0x802d2, bRevert=0) returned 0xd01d9
[0183.012] GetWindowPlacement (in: hWnd=0x802d2, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0183.012] EnableMenuItem (hMenu=0xd01d9, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0183.012] EnableMenuItem (hMenu=0xd01d9, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0183.012] EnableMenuItem (hMenu=0xd01d9, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0183.012] EnableMenuItem (hMenu=0xd01d9, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0183.012] EnableMenuItem (hMenu=0xd01d9, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0183.012] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0183.012] GetWindowLongW (hWnd=0x802d2, nIndex=-8) returned 0
[0183.012] SetWindowLongW (hWnd=0x802d2, nIndex=-8, dwNewLong=458806) returned 0
[0183.013] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0183.014] GetProcessWindowStation () returned 0x13c
[0183.014] GetCurrentThreadId () returned 0x11d0
[0183.014] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf47a6, lParam=0x0) returned 1
[0183.014] IsWindowVisible (hWnd=0x802d2) returned 0
[0183.014] IsWindowVisible (hWnd=0x70036) returned 1
[0183.014] IsWindowEnabled (hWnd=0x70036) returned 1
[0183.014] IsWindowVisible (hWnd=0x602b6) returned 0
[0183.014] IsWindowVisible (hWnd=0x901f8) returned 0
[0183.014] IsWindowVisible (hWnd=0x202d0) returned 0
[0183.014] IsWindowVisible (hWnd=0x202d4) returned 0
[0183.015] GetActiveWindow () returned 0x70036
[0183.015] GetFocus () returned 0x202c6
[0183.015] IsWindow (hWnd=0x70036) returned 1
[0183.015] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0183.015] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0183.016] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0183.016] GetWindowLongW (hWnd=0x802d2, nIndex=-8) returned 458806
[0183.016] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0183.016] GetCurrentThreadId () returned 0x11d0
[0183.016] GetWindowLongW (hWnd=0x802d2, nIndex=-8) returned 458806
[0183.016] IsWindowEnabled (hWnd=0x70036) returned 0
[0183.016] IsWindowEnabled (hWnd=0x802d2) returned 1
[0183.016] ShowWindow (hWnd=0x802d2, nCmdShow=5) returned 0
[0183.016] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0183.016] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0183.017] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0183.017] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0183.017] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x802d2, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xc013e
[0183.018] SetWindowLongW (hWnd=0xc013e, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0183.018] GetWindowLongW (hWnd=0xc013e, nIndex=-4) returned 1868026976
[0183.018] SetWindowLongW (hWnd=0xc013e, nIndex=-4, dwNewLong=79643782) returned 1868026976
[0183.018] GetWindowLongW (hWnd=0xc013e, nIndex=-4) returned 79643782
[0183.018] GetWindowLongW (hWnd=0xc013e, nIndex=-16) returned 1174470848
[0183.018] GetWindowLongW (hWnd=0xc013e, nIndex=-12) returned 0
[0183.019] SetWindowLongW (hWnd=0xc013e, nIndex=-12, dwNewLong=786750) returned 0
[0183.019] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0183.020] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0183.021] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0183.022] SendMessageW (hWnd=0xc013e, Msg=0x2055, wParam=0xc013e, lParam=0x3) returned 0x2
[0183.022] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0183.022] GetWindow (hWnd=0xc013e, uCmd=0x3) returned 0x0
[0183.022] GetClientRect (in: hWnd=0xc013e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0183.022] GetWindowRect (in: hWnd=0xc013e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0183.022] GetParent (hWnd=0xc013e) returned 0x802d2
[0183.022] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x802d2, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0183.022] SendMessageW (hWnd=0xc013e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0183.022] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0183.023] SendMessageW (hWnd=0xc013e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0183.023] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0183.023] GetSystemMetrics (nIndex=5) returned 1
[0183.023] GetSystemMetrics (nIndex=6) returned 1
[0183.023] SendMessageW (hWnd=0xc013e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0183.023] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0183.023] SendMessageW (hWnd=0xc013e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0183.023] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0183.024] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0183.024] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0183.024] GetClientRect (in: hWnd=0xc013e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0183.024] GetWindowRect (in: hWnd=0xc013e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0183.024] GetParent (hWnd=0xc013e) returned 0x802d2
[0183.024] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x802d2, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0183.024] SendMessageW (hWnd=0xc013e, Msg=0x2210, wParam=0x13e0001, lParam=0xc013e) returned 0x0
[0183.024] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x2210, wParam=0x13e0001, lParam=0xc013e) returned 0x0
[0183.024] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0183.025] GetParent (hWnd=0xc013e) returned 0x802d2
[0183.025] GetParent (hWnd=0x902d6) returned 0x400ec
[0183.025] SetParent (hWndChild=0x902d6, hWndNewParent=0x802d2) returned 0x400ec
[0183.025] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0183.026] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0183.026] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0183.026] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0183.027] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0183.027] GetClientRect (in: hWnd=0x902d6, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0183.027] GetWindowRect (in: hWnd=0x902d6, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0183.027] GetParent (hWnd=0x902d6) returned 0x802d2
[0183.027] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x802d2, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0183.027] GetClientRect (in: hWnd=0x902d6, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0183.027] GetWindowRect (in: hWnd=0x902d6, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0183.027] GetParent (hWnd=0x902d6) returned 0x802d2
[0183.027] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x802d2, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0183.027] GetParent (hWnd=0x902d6) returned 0x802d2
[0183.027] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0183.027] GetWindow (hWnd=0x902d6, uCmd=0x3) returned 0x0
[0183.027] SetWindowPos (hWnd=0x902d6, hWndInsertAfter=0xc013e, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0183.027] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0183.028] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0183.028] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0183.028] GetClientRect (in: hWnd=0x902d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0183.028] GetWindowRect (in: hWnd=0x902d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0183.028] GetParent (hWnd=0x902d6) returned 0x802d2
[0183.028] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x802d2, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0183.028] GetParent (hWnd=0x902d6) returned 0x802d2
[0183.028] GetWindow (hWnd=0x902d6, uCmd=0x3) returned 0xc013e
[0183.028] GetWindowThreadProcessId (in: hWnd=0x902d6, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0183.029] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0183.029] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0183.029] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0183.030] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x802d2, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x702d8
[0183.030] SetWindowLongW (hWnd=0x702d8, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0183.030] GetWindowLongW (hWnd=0x702d8, nIndex=-4) returned 1868032000
[0183.030] SetWindowLongW (hWnd=0x702d8, nIndex=-4, dwNewLong=79644622) returned 1868032000
[0183.031] GetWindowLongW (hWnd=0x702d8, nIndex=-4) returned 79644622
[0183.031] GetWindowLongW (hWnd=0x702d8, nIndex=-16) returned 1174470667
[0183.031] GetWindowLongW (hWnd=0x702d8, nIndex=-12) returned 0
[0183.031] SetWindowLongW (hWnd=0x702d8, nIndex=-12, dwNewLong=459480) returned 0
[0183.031] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0183.032] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0183.032] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0183.033] SendMessageW (hWnd=0x702d8, Msg=0x2055, wParam=0x702d8, lParam=0x3) returned 0x2
[0183.033] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0183.033] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0183.034] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0183.034] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0183.034] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0183.034] RedrawWindow (hWnd=0xc013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0183.034] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0183.034] RedrawWindow (hWnd=0x902d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0183.034] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0183.035] RedrawWindow (hWnd=0x702d8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0183.035] RedrawWindow (hWnd=0x802d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0183.035] GetWindow (hWnd=0x702d8, uCmd=0x3) returned 0x902d6
[0183.035] GetClientRect (in: hWnd=0x702d8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0183.035] GetWindowRect (in: hWnd=0x702d8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0183.035] GetParent (hWnd=0x702d8) returned 0x802d2
[0183.035] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x802d2, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0183.035] SetWindowTextW (hWnd=0x702d8, lpString="OK") returned 1
[0183.035] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0xc, wParam=0x0, lParam=0x23e94fc) returned 0x1
[0183.036] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0183.036] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0183.036] GetClientRect (in: hWnd=0x702d8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0183.036] GetWindowRect (in: hWnd=0x702d8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0183.036] GetParent (hWnd=0x702d8) returned 0x802d2
[0183.036] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x802d2, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0183.036] SendMessageW (hWnd=0x702d8, Msg=0x2210, wParam=0x2d80001, lParam=0x702d8) returned 0x0
[0183.036] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x2210, wParam=0x2d80001, lParam=0x702d8) returned 0x0
[0183.037] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0183.037] GetParent (hWnd=0x702d8) returned 0x802d2
[0183.037] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0183.037] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0183.038] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0183.038] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x802d2, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x702c8
[0183.038] SetWindowLongW (hWnd=0x702c8, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0183.039] GetWindowLongW (hWnd=0x702c8, nIndex=-4) returned 1868032000
[0183.039] SetWindowLongW (hWnd=0x702c8, nIndex=-4, dwNewLong=79644702) returned 1868032000
[0183.039] GetWindowLongW (hWnd=0x702c8, nIndex=-4) returned 79644702
[0183.039] GetWindowLongW (hWnd=0x702c8, nIndex=-16) returned 1174470667
[0183.039] GetWindowLongW (hWnd=0x702c8, nIndex=-12) returned 0
[0183.039] SetWindowLongW (hWnd=0x702c8, nIndex=-12, dwNewLong=459464) returned 0
[0183.039] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0183.040] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0183.040] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0183.041] SendMessageW (hWnd=0x702c8, Msg=0x2055, wParam=0x702c8, lParam=0x3) returned 0x2
[0183.041] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0183.041] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0183.041] GetWindow (hWnd=0x702c8, uCmd=0x3) returned 0x702d8
[0183.041] GetClientRect (in: hWnd=0x702c8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0183.041] GetWindowRect (in: hWnd=0x702c8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0183.041] GetParent (hWnd=0x702c8) returned 0x802d2
[0183.041] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x802d2, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0183.042] SetWindowTextW (hWnd=0x702c8, lpString="Cancel") returned 1
[0183.042] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0xc, wParam=0x0, lParam=0x23ecdbc) returned 0x1
[0183.042] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0183.042] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0183.042] GetClientRect (in: hWnd=0x702c8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0183.043] GetWindowRect (in: hWnd=0x702c8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0183.043] GetParent (hWnd=0x702c8) returned 0x802d2
[0183.043] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x802d2, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0183.043] SendMessageW (hWnd=0x702c8, Msg=0x2210, wParam=0x2c80001, lParam=0x702c8) returned 0x0
[0183.043] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0x2210, wParam=0x2c80001, lParam=0x702c8) returned 0x0
[0183.043] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0183.043] GetParent (hWnd=0x702c8) returned 0x802d2
[0183.043] GetDC (hWnd=0x0) returned 0x10105d6
[0183.043] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e320) returned 0x0
[0183.044] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5da0378, height=0x53e318) returned 0x0
[0183.044] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0183.044] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0183.044] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0183.044] GdipMeasureString (graphics=0x5da0378, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0183.045] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0183.045] GetWindowLongW (hWnd=0x802d2, nIndex=-8) returned 458806
[0183.045] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0183.045] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0183.045] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x2b0107ad
[0183.045] GetDeviceCaps (hdc=0x2b0107ad, index=12) returned 32
[0183.045] GetDeviceCaps (hdc=0x2b0107ad, index=14) returned 1
[0183.045] DeleteDC (hdc=0x2b0107ad) returned 1
[0183.045] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0183.046] GetWindowThreadProcessId (in: hWnd=0x802d2, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0183.046] GetCurrentThreadId () returned 0x11d0
[0183.046] PostMessageW (hWnd=0x802d2, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0183.046] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0183.046] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0183.046] GetSystemMetrics (nIndex=42) returned 0
[0183.046] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0183.046] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0183.046] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0183.046] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0183.047] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0183.047] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0183.057] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x802d2) returned 0x1
[0183.060] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0183.060] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0183.060] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0183.060] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0183.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0183.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0183.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0183.064] GetFocus () returned 0x202c6
[0183.064] IsChild (hWndParent=0x802d2, hWnd=0x202c6) returned 0
[0183.064] GetFocus () returned 0x202c6
[0183.065] SetFocus (hWnd=0xc013e) returned 0x202c6
[0183.070] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xc013e, lParam=0x0) returned 0x0
[0183.070] GetCapture () returned 0x0
[0183.070] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0183.071] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0183.073] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0183.074] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0183.075] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0183.075] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0183.075] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0183.075] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0183.076] GetParent (hWnd=0x802d2) returned 0x0
[0183.076] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0183.076] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0183.076] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0183.077] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0183.077] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0183.077] GetSysColorBrush (nIndex=5) returned 0x100079
[0183.078] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0183.078] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0183.080] SendMessageW (hWnd=0xc013e, Msg=0x2111, wParam=0x100013e, lParam=0xc013e) returned 0x0
[0183.080] SendMessageW (hWnd=0xc013e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0183.080] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0183.080] GetKeyState (nVirtKey=1) returned 1
[0183.080] GetKeyState (nVirtKey=2) returned 0
[0183.080] GetKeyState (nVirtKey=4) returned 0
[0183.080] GetKeyState (nVirtKey=5) returned 0
[0183.080] GetKeyState (nVirtKey=6) returned 0
[0183.080] GetWindowTextLengthW (hWnd=0xc013e) returned 0
[0183.080] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0183.080] SendMessageW (hWnd=0xc013e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0183.080] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0183.080] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0183.081] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0183.098] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0183.099] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0183.100] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0183.100] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0183.100] GetWindowPlacement (in: hWnd=0x802d2, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0183.101] GetClientRect (in: hWnd=0x802d2, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0183.101] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0183.101] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0183.101] GetSystemMetrics (nIndex=42) returned 0
[0183.101] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0183.101] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0183.101] GetClientRect (in: hWnd=0x802d2, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0183.101] GetCurrentObject (hdc=0xf0105ee, type=0x1) returned 0xb00017
[0183.101] GetCurrentObject (hdc=0xf0105ee, type=0x2) returned 0x900010
[0183.101] GetCurrentObject (hdc=0xf0105ee, type=0x7) returned 0x310507bd
[0183.101] GetCurrentObject (hdc=0xf0105ee, type=0x6) returned 0x8a01c2
[0183.101] SaveDC (hdc=0xf0105ee) returned 1
[0183.101] GetNearestColor (hdc=0xf0105ee, color=0xf0f0f0) returned 0xf0f0f0
[0183.101] CreateSolidBrush (color=0xf0f0f0) returned 0xc510078d
[0183.101] FillRect (hDC=0xf0105ee, lprc=0x53e250, hbr=0xc510078d) returned 1
[0183.102] DeleteObject (ho=0xc510078d) returned 1
[0183.102] RestoreDC (hdc=0xf0105ee, nSavedDC=-1) returned 1
[0183.102] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0183.102] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0183.102] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0183.104] GetWindowPlacement (in: hWnd=0x802d2, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0183.104] GetClientRect (in: hWnd=0x802d2, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0183.104] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0183.104] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0183.104] GetSystemMetrics (nIndex=42) returned 0
[0183.104] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0183.104] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0183.104] GetClientRect (in: hWnd=0x802d2, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0183.104] GetCurrentObject (hdc=0x410107ad, type=0x1) returned 0xb00017
[0183.104] GetCurrentObject (hdc=0x410107ad, type=0x2) returned 0x900010
[0183.104] GetCurrentObject (hdc=0x410107ad, type=0x7) returned 0x630507cb
[0183.104] GetCurrentObject (hdc=0x410107ad, type=0x6) returned 0x8a01c2
[0183.104] SaveDC (hdc=0x410107ad) returned 1
[0183.104] GetNearestColor (hdc=0x410107ad, color=0xf0f0f0) returned 0xf0f0f0
[0183.105] CreateSolidBrush (color=0xf0f0f0) returned 0xc610078d
[0183.105] FillRect (hDC=0x410107ad, lprc=0x53dc18, hbr=0xc610078d) returned 1
[0183.105] DeleteObject (ho=0xc610078d) returned 1
[0183.105] RestoreDC (hdc=0x410107ad, nSavedDC=-1) returned 1
[0183.105] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0183.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0183.105] GetSystemMetrics (nIndex=42) returned 0
[0183.105] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0183.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0183.105] GetClientRect (in: hWnd=0x802d2, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0183.105] GetCurrentObject (hdc=0x410107ad, type=0x1) returned 0xb00017
[0183.105] GetCurrentObject (hdc=0x410107ad, type=0x2) returned 0x900010
[0183.105] GetCurrentObject (hdc=0x410107ad, type=0x7) returned 0x630507cb
[0183.105] GetCurrentObject (hdc=0x410107ad, type=0x6) returned 0x8a01c2
[0183.106] SaveDC (hdc=0x410107ad) returned 1
[0183.106] GetNearestColor (hdc=0x410107ad, color=0xf0f0f0) returned 0xf0f0f0
[0183.106] CreateSolidBrush (color=0xf0f0f0) returned 0xc710078d
[0183.106] FillRect (hDC=0x410107ad, lprc=0x53dbb8, hbr=0xc710078d) returned 1
[0183.106] DeleteObject (ho=0xc710078d) returned 1
[0183.106] RestoreDC (hdc=0x410107ad, nSavedDC=-1) returned 1
[0183.106] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0183.106] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0183.106] GetSystemMetrics (nIndex=42) returned 0
[0183.106] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0183.106] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0183.107] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0183.107] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0183.108] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0183.108] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0183.108] GetStockObject (i=5) returned 0x900015
[0183.108] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0183.108] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0183.108] GetStockObject (i=5) returned 0x900015
[0183.109] GetWindowPlacement (in: hWnd=0x802d2, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0183.109] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0183.109] GetClientRect (in: hWnd=0x802d2, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0183.109] GetWindowRect (in: hWnd=0x802d2, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0183.110] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0183.110] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0183.111] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0183.111] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0183.111] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0183.111] GetClientRect (in: hWnd=0x802d2, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0183.111] GetWindowRect (in: hWnd=0x802d2, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0183.111] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0183.111] IsWindowUnicode (hWnd=0x802d2) returned 1
[0183.112] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0183.112] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0183.112] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0183.112] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0183.112] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0183.112] IsWindowUnicode (hWnd=0x802d2) returned 1
[0183.112] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0183.112] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0183.115] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0183.115] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0183.116] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x84, wParam=0x0, lParam=0x197021c) returned 0x12
[0184.402] IsWindowUnicode (hWnd=0x802d2) returned 1
[0184.402] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.402] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0184.403] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.403] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.403] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.403] IsWindowUnicode (hWnd=0x202c6) returned 1
[0184.403] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.403] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.403] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.403] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0184.403] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0184.403] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.404] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x84, wParam=0x0, lParam=0x197021c) returned 0x12
[0184.405] IsWindowUnicode (hWnd=0x802d2) returned 1
[0184.405] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.405] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0184.405] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x84, wParam=0x0, lParam=0x197021c) returned 0x12
[0184.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x20, wParam=0x802d2, lParam=0x2000012) returned 0x0
[0184.406] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.406] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xa0, wParam=0x12, lParam=0x197021c) returned 0x0
[0184.406] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0184.407] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x84, wParam=0x0, lParam=0x18e035b) returned 0x1
[0184.407] IsWindowUnicode (hWnd=0x702d8) returned 1
[0184.407] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.407] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.407] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.407] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.407] IsWindowUnicode (hWnd=0x802d2) returned 1
[0184.407] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.407] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.407] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.407] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x2a2, wParam=0x0, lParam=0x0) returned 0x0
[0184.407] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.408] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x84, wParam=0x0, lParam=0x18e035b) returned 0x1
[0184.408] IsWindowUnicode (hWnd=0x702d8) returned 1
[0184.408] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.408] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x84, wParam=0x0, lParam=0x18e035b) returned 0x1
[0184.408] SetCursor (hCursor=0x10003) returned 0x10003
[0184.408] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.408] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.408] _TrackMouseEvent (in: lpEventTrack=0x23f7654 | out: lpEventTrack=0x23f7654) returned 1
[0184.408] SendMessageW (hWnd=0x702d8, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0184.408] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0184.408] InvalidateRect (hWnd=0x702d8, lpRect=0x0, bErase=0) returned 1
[0184.409] GetKeyState (nVirtKey=1) returned 1
[0184.409] GetKeyState (nVirtKey=2) returned 0
[0184.409] GetKeyState (nVirtKey=4) returned 0
[0184.409] GetKeyState (nVirtKey=5) returned 0
[0184.409] GetKeyState (nVirtKey=6) returned 0
[0184.409] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.409] IsWindowUnicode (hWnd=0x802d2) returned 1
[0184.409] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.409] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.409] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.409] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.410] IsWindowUnicode (hWnd=0x802d2) returned 1
[0184.410] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.411] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.411] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.411] BeginPaint (in: hWnd=0x802d2, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x10105d6
[0184.411] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0184.411] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0184.411] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0184.411] GetSystemMetrics (nIndex=42) returned 0
[0184.411] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0184.411] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0184.411] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0184.412] EndPaint (hWnd=0x802d2, lpPaint=0x53e30c) returned 1
[0184.412] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.412] IsWindowUnicode (hWnd=0xc013e) returned 1
[0184.412] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.412] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.412] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0184.412] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0184.413] SetTextColor (hdc=0x420107ad, color=0x0) returned 0x0
[0184.413] SetBkColor (hdc=0x420107ad, color=0xffffff) returned 0xffffff
[0184.424] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.424] IsWindowUnicode (hWnd=0x902d6) returned 1
[0184.424] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.424] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.424] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.424] BeginPaint (in: hWnd=0x902d6, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0xf0105ee
[0184.425] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0184.425] CreateCompatibleDC (hdc=0xf0105ee) returned 0x4e010511
[0184.425] SelectObject (hdc=0x4e010511, h=0x1e0507b9) returned 0x85000f
[0184.425] GdipCreateFromHDC (hdc=0x4e010511, graphics=0x53e30c) returned 0x0
[0184.425] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0184.425] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0184.425] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0184.425] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0184.425] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0184.425] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0184.426] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0184.426] LocalFree (hMem=0x89ee40) returned 0x0
[0184.426] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0184.426] GdipCreateRegion (region=0x53e354) returned 0x0
[0184.426] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.426] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e360) returned 0x0
[0184.426] GdipSaveGraphics (graphics=0x5da0378, state=0x53e38c) returned 0x0
[0184.426] GetWindowTextLengthW (hWnd=0x902d6) returned 16
[0184.426] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0184.426] GetSystemMetrics (nIndex=42) returned 0
[0184.426] GetWindowTextW (in: hWnd=0x902d6, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0184.426] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0184.426] GetClientRect (in: hWnd=0x902d6, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0184.426] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0184.426] GdipGetClip (graphics=0x5da0378, region=0x5d9d988) returned 0x0
[0184.426] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0184.426] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0184.426] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e1c0) returned 0x0
[0184.427] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0184.427] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0184.427] LocalFree (hMem=0x89ec80) returned 0x0
[0184.427] GdipCombineRegionRegion (region=0x5d9d988, region2=0x5d9d8f8, combineMode=0x1) returned 0x0
[0184.427] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0184.427] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0184.427] LocalFree (hMem=0x89ee08) returned 0x0
[0184.427] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0184.427] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e1e8) returned 0x0
[0184.427] GdipIsInfiniteRegion (region=0x5d9d988, graphics=0x5da0378, result=0x53e1d8) returned 0x0
[0184.427] GdipGetRegionHRgn (region=0x5d9d988, graphics=0x5da0378, hRgn=0x53e1d8) returned 0x0
[0184.427] GdipDeleteRegion (region=0x5d9d988) returned 0x0
[0184.427] GdipGetDC (graphics=0x5da0378, hdc=0x53e1f0) returned 0x0
[0184.427] GetCurrentObject (hdc=0x4e010511, type=0x1) returned 0xb00017
[0184.427] GetCurrentObject (hdc=0x4e010511, type=0x2) returned 0x900010
[0184.428] GetCurrentObject (hdc=0x4e010511, type=0x7) returned 0x1e0507b9
[0184.428] GetCurrentObject (hdc=0x4e010511, type=0x6) returned 0x8a01c2
[0184.428] SaveDC (hdc=0x4e010511) returned 1
[0184.428] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfd0407a1
[0184.428] GetClipRgn (hdc=0x4e010511, hrgn=0xfd0407a1) returned 0
[0184.428] SelectClipRgn (hdc=0x4e010511, hrgn=0xcc04053e) returned 2
[0184.428] DeleteObject (ho=0xfd0407a1) returned 1
[0184.428] DeleteObject (ho=0xcc04053e) returned 1
[0184.428] OffsetViewportOrgEx (in: hdc=0x4e010511, x=0, y=0, lppt=0x23f7b5c | out: lppt=0x23f7b5c) returned 1
[0184.428] GetNearestColor (hdc=0x4e010511, color=0xf0f0f0) returned 0xf0f0f0
[0184.428] CreateSolidBrush (color=0xf0f0f0) returned 0xc810078d
[0184.428] FillRect (hDC=0x4e010511, lprc=0x53e1f4, hbr=0xc810078d) returned 1
[0184.428] DeleteObject (ho=0xc810078d) returned 1
[0184.428] RestoreDC (hdc=0x4e010511, nSavedDC=-1) returned 1
[0184.429] GdipReleaseDC (graphics=0x5da0378, hdc=0x4e010511) returned 0x0
[0184.429] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd450dbd) returned 0x0
[0184.429] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.429] GetWindowTextLengthW (hWnd=0x902d6) returned 16
[0184.429] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0184.429] GetSystemMetrics (nIndex=42) returned 0
[0184.429] GetWindowTextW (in: hWnd=0x902d6, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0184.429] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0184.429] GdipGetDC (graphics=0x5da0378, hdc=0x53e210) returned 0x0
[0184.429] GetCurrentObject (hdc=0x4e010511, type=0x1) returned 0xb00017
[0184.429] GetCurrentObject (hdc=0x4e010511, type=0x2) returned 0x900010
[0184.429] GetCurrentObject (hdc=0x4e010511, type=0x7) returned 0x1e0507b9
[0184.429] GetCurrentObject (hdc=0x4e010511, type=0x6) returned 0x8a01c2
[0184.429] SaveDC (hdc=0x4e010511) returned 1
[0184.429] GetNearestColor (hdc=0x4e010511, color=0x0) returned 0x0
[0184.429] RestoreDC (hdc=0x4e010511, nSavedDC=-1) returned 1
[0184.430] GdipReleaseDC (graphics=0x5da0378, hdc=0x4e010511) returned 0x0
[0184.430] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0184.430] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0184.430] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0184.431] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x23f7e64 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0184.431] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e1b0) returned 0x0
[0184.431] GdipGetDC (graphics=0x5da0378, hdc=0x53e19c) returned 0x0
[0184.431] GetCurrentObject (hdc=0x4e010511, type=0x1) returned 0xb00017
[0184.431] GetCurrentObject (hdc=0x4e010511, type=0x2) returned 0x900010
[0184.431] GetCurrentObject (hdc=0x4e010511, type=0x7) returned 0x1e0507b9
[0184.431] GetCurrentObject (hdc=0x4e010511, type=0x6) returned 0x8a01c2
[0184.431] SaveDC (hdc=0x4e010511) returned 1
[0184.431] GetTextAlign (hdc=0x4e010511) returned 0x0
[0184.431] GetTextColor (hdc=0x4e010511) returned 0x0
[0184.431] GetCurrentObject (hdc=0x4e010511, type=0x6) returned 0x8a01c2
[0184.431] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0184.432] SelectObject (hdc=0x4e010511, h=0x730a066d) returned 0x8a01c2
[0184.432] GetBkMode (hdc=0x4e010511) returned 2
[0184.432] SetBkMode (hdc=0x4e010511, mode=1) returned 2
[0184.432] DrawTextExW (in: hdc=0x4e010511, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x23f8088 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0184.432] RestoreDC (hdc=0x4e010511, nSavedDC=-1) returned 1
[0184.432] GdipReleaseDC (graphics=0x5da0378, hdc=0x4e010511) returned 0x0
[0184.432] GdipGetDC (graphics=0x5da0378, hdc=0x53e34c) returned 0x0
[0184.432] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=250, cy=70, hdcSrc=0x4e010511, x1=0, y1=0, rop=0xcc0020) returned 1
[0184.433] GdipReleaseDC (graphics=0x5da0378, hdc=0x4e010511) returned 0x0
[0184.433] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0184.433] SelectObject (hdc=0x4e010511, h=0x85000f) returned 0x1e0507b9
[0184.433] DeleteDC (hdc=0x4e010511) returned 1
[0184.433] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0184.433] EndPaint (hWnd=0x902d6, lpPaint=0x53e2f0) returned 1
[0184.433] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.433] IsWindowUnicode (hWnd=0x702d8) returned 1
[0184.433] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.433] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.434] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.434] BeginPaint (in: hWnd=0x702d8, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0184.434] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0184.434] CreateCompatibleDC (hdc=0x60100ce) returned 0x50010511
[0184.434] SelectObject (hdc=0x50010511, h=0x1e0507b9) returned 0x85000f
[0184.434] GdipCreateFromHDC (hdc=0x50010511, graphics=0x53e300) returned 0x0
[0184.434] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0184.434] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0184.434] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0184.434] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0184.434] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e360) returned 0x0
[0184.435] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0184.435] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0184.435] LocalFree (hMem=0x89ee08) returned 0x0
[0184.435] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0184.435] GdipCreateRegion (region=0x53e348) returned 0x0
[0184.435] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.435] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e354) returned 0x0
[0184.435] GdipSaveGraphics (graphics=0x5da0378, state=0x53e380) returned 0x0
[0184.435] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd430dbd) returned 0x0
[0184.435] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.435] GdipGetDC (graphics=0x5da0378, hdc=0x53e160) returned 0x0
[0184.435] GetCurrentObject (hdc=0x50010511, type=0x1) returned 0xb00017
[0184.435] GetCurrentObject (hdc=0x50010511, type=0x2) returned 0x900010
[0184.435] GetCurrentObject (hdc=0x50010511, type=0x7) returned 0x1e0507b9
[0184.435] GetCurrentObject (hdc=0x50010511, type=0x6) returned 0x8a01c2
[0184.435] SaveDC (hdc=0x50010511) returned 1
[0184.436] GetNearestColor (hdc=0x50010511, color=0xf0f0f0) returned 0xf0f0f0
[0184.436] GetNearestColor (hdc=0x50010511, color=0xa0a0a0) returned 0xa0a0a0
[0184.436] GetNearestColor (hdc=0x50010511, color=0x696969) returned 0x696969
[0184.436] GetNearestColor (hdc=0x50010511, color=0xa0a0a0) returned 0xa0a0a0
[0184.436] GetNearestColor (hdc=0x50010511, color=0x0) returned 0x0
[0184.436] GetNearestColor (hdc=0x50010511, color=0xffffff) returned 0xffffff
[0184.436] GetNearestColor (hdc=0x50010511, color=0xe5e5e5) returned 0xe5e5e5
[0184.436] GetNearestColor (hdc=0x50010511, color=0xd7d7d7) returned 0xd7d7d7
[0184.436] GetNearestColor (hdc=0x50010511, color=0x0) returned 0x0
[0184.436] RestoreDC (hdc=0x50010511, nSavedDC=-1) returned 1
[0184.436] GdipReleaseDC (graphics=0x5da0378, hdc=0x50010511) returned 0x0
[0184.436] IsAppThemed () returned 0x1
[0184.437] GetThemeAppProperties () returned 0x3
[0184.437] GetThemeAppProperties () returned 0x3
[0184.437] IsAppThemed () returned 0x1
[0184.437] GetThemeAppProperties () returned 0x3
[0184.437] GetThemeAppProperties () returned 0x3
[0184.437] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x23f87f4 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0184.437] IsAppThemed () returned 0x1
[0184.437] GetThemeAppProperties () returned 0x3
[0184.437] GetThemeAppProperties () returned 0x3
[0184.437] IsAppThemed () returned 0x1
[0184.437] GetThemeAppProperties () returned 0x3
[0184.437] GetThemeAppProperties () returned 0x3
[0184.437] IsAppThemed () returned 0x1
[0184.438] GetThemeAppProperties () returned 0x3
[0184.438] GetThemeAppProperties () returned 0x3
[0184.438] IsAppThemed () returned 0x1
[0184.438] GetThemeAppProperties () returned 0x3
[0184.438] GetThemeAppProperties () returned 0x3
[0184.438] IsThemePartDefined () returned 0x1
[0184.438] IsAppThemed () returned 0x1
[0184.438] GetThemeAppProperties () returned 0x3
[0184.438] GetThemeAppProperties () returned 0x3
[0184.438] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0184.438] IsAppThemed () returned 0x1
[0184.438] GetThemeAppProperties () returned 0x3
[0184.438] GetThemeAppProperties () returned 0x3
[0184.438] IsAppThemed () returned 0x1
[0184.438] GetThemeAppProperties () returned 0x3
[0184.438] GetThemeAppProperties () returned 0x3
[0184.438] IsThemePartDefined () returned 0x1
[0184.438] GdipCreateRegion (region=0x53e064) returned 0x0
[0184.438] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.438] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0184.439] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0184.439] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e07c) returned 0x0
[0184.439] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0184.439] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eee8) returned 0x0
[0184.439] LocalFree (hMem=0x89eee8) returned 0x0
[0184.439] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0184.439] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0184.439] LocalFree (hMem=0x89eac0) returned 0x0
[0184.439] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0184.439] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0a4) returned 0x0
[0184.439] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e094) returned 0x0
[0184.439] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e094) returned 0x0
[0184.439] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.439] GdipGetDC (graphics=0x5da0378, hdc=0x53e0ac) returned 0x0
[0184.440] GetCurrentObject (hdc=0x50010511, type=0x1) returned 0xb00017
[0184.440] GetCurrentObject (hdc=0x50010511, type=0x2) returned 0x900010
[0184.440] GetCurrentObject (hdc=0x50010511, type=0x7) returned 0x1e0507b9
[0184.440] GetCurrentObject (hdc=0x50010511, type=0x6) returned 0x8a01c2
[0184.440] SaveDC (hdc=0x50010511) returned 1
[0184.440] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcd04053e
[0184.440] GetClipRgn (hdc=0x50010511, hrgn=0xcd04053e) returned 0
[0184.440] SelectClipRgn (hdc=0x50010511, hrgn=0x10407a1) returned 2
[0184.440] DeleteObject (ho=0xcd04053e) returned 1
[0184.440] DeleteObject (ho=0x10407a1) returned 1
[0184.440] OffsetViewportOrgEx (in: hdc=0x50010511, x=0, y=0, lppt=0x23f8ea4 | out: lppt=0x23f8ea4) returned 1
[0184.440] DrawThemeParentBackground () returned 0x0
[0184.440] GetWindowPlacement (in: hWnd=0x802d2, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0184.441] GetClientRect (in: hWnd=0x802d2, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0184.441] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0184.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0184.441] GetSystemMetrics (nIndex=42) returned 0
[0184.441] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0184.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0184.441] GetClientRect (in: hWnd=0x802d2, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0184.441] GetCurrentObject (hdc=0x50010511, type=0x1) returned 0xb00017
[0184.441] GetCurrentObject (hdc=0x50010511, type=0x2) returned 0x900010
[0184.441] GetCurrentObject (hdc=0x50010511, type=0x7) returned 0x1e0507b9
[0184.441] GetCurrentObject (hdc=0x50010511, type=0x6) returned 0x8a01c2
[0184.441] SaveDC (hdc=0x50010511) returned 2
[0184.441] GetNearestColor (hdc=0x50010511, color=0xf0f0f0) returned 0xf0f0f0
[0184.441] CreateSolidBrush (color=0xf0f0f0) returned 0xc910078d
[0184.441] FillRect (hDC=0x50010511, lprc=0x53dac8, hbr=0xc910078d) returned 1
[0184.441] DeleteObject (ho=0xc910078d) returned 1
[0184.442] RestoreDC (hdc=0x50010511, nSavedDC=-1) returned 1
[0184.442] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0184.442] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0184.442] GetSystemMetrics (nIndex=42) returned 0
[0184.442] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0184.442] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0184.442] GetClientRect (in: hWnd=0x802d2, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0184.442] GetCurrentObject (hdc=0x50010511, type=0x1) returned 0xb00017
[0184.442] GetCurrentObject (hdc=0x50010511, type=0x2) returned 0x900010
[0184.442] GetCurrentObject (hdc=0x50010511, type=0x7) returned 0x1e0507b9
[0184.442] GetCurrentObject (hdc=0x50010511, type=0x6) returned 0x8a01c2
[0184.442] SaveDC (hdc=0x50010511) returned 2
[0184.442] GetNearestColor (hdc=0x50010511, color=0xf0f0f0) returned 0xf0f0f0
[0184.442] CreateSolidBrush (color=0xf0f0f0) returned 0xca10078d
[0184.442] FillRect (hDC=0x50010511, lprc=0x53da68, hbr=0xca10078d) returned 1
[0184.443] DeleteObject (ho=0xca10078d) returned 1
[0184.443] RestoreDC (hdc=0x50010511, nSavedDC=-1) returned 1
[0184.443] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0184.443] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0184.443] GetSystemMetrics (nIndex=42) returned 0
[0184.443] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0184.443] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0184.451] RestoreDC (hdc=0x50010511, nSavedDC=-1) returned 1
[0184.451] GdipReleaseDC (graphics=0x5da0378, hdc=0x50010511) returned 0x0
[0184.451] IsAppThemed () returned 0x1
[0184.451] GetThemeAppProperties () returned 0x3
[0184.451] GetThemeAppProperties () returned 0x3
[0184.451] IsAppThemed () returned 0x1
[0184.451] GetThemeAppProperties () returned 0x3
[0184.451] GetThemeAppProperties () returned 0x3
[0184.451] IsThemePartDefined () returned 0x1
[0184.451] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0184.452] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.452] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0184.452] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0184.452] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e000) returned 0x0
[0184.452] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0184.452] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0184.452] LocalFree (hMem=0x89eac0) returned 0x0
[0184.452] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0184.452] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0184.452] LocalFree (hMem=0x89ec80) returned 0x0
[0184.452] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0184.452] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e028) returned 0x0
[0184.452] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e018) returned 0x0
[0184.452] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e018) returned 0x0
[0184.452] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.452] GdipGetDC (graphics=0x5da0378, hdc=0x53e030) returned 0x0
[0184.452] GetCurrentObject (hdc=0x50010511, type=0x1) returned 0xb00017
[0184.453] GetCurrentObject (hdc=0x50010511, type=0x2) returned 0x900010
[0184.453] GetCurrentObject (hdc=0x50010511, type=0x7) returned 0x1e0507b9
[0184.453] GetCurrentObject (hdc=0x50010511, type=0x6) returned 0x8a01c2
[0184.453] SaveDC (hdc=0x50010511) returned 1
[0184.453] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x20407a1
[0184.453] GetClipRgn (hdc=0x50010511, hrgn=0x20407a1) returned 0
[0184.453] SelectClipRgn (hdc=0x50010511, hrgn=0xcf04053e) returned 2
[0184.453] DeleteObject (ho=0x20407a1) returned 1
[0184.453] DeleteObject (ho=0xcf04053e) returned 1
[0184.453] OffsetViewportOrgEx (in: hdc=0x50010511, x=0, y=0, lppt=0x23f972c | out: lppt=0x23f972c) returned 1
[0184.453] IsAppThemed () returned 0x1
[0184.453] GetThemeAppProperties () returned 0x3
[0184.453] GetThemeAppProperties () returned 0x3
[0184.453] DrawThemeBackground () returned 0x0
[0184.453] RestoreDC (hdc=0x50010511, nSavedDC=-1) returned 1
[0184.454] GdipReleaseDC (graphics=0x5da0378, hdc=0x50010511) returned 0x0
[0184.454] GdipCreateRegion (region=0x53dfec) returned 0x0
[0184.454] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.454] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0184.454] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0184.454] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e004) returned 0x0
[0184.454] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0184.454] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0184.454] LocalFree (hMem=0x89ee08) returned 0x0
[0184.454] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0184.454] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0184.454] LocalFree (hMem=0x89eac0) returned 0x0
[0184.454] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0184.454] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e02c) returned 0x0
[0184.454] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e01c) returned 0x0
[0184.454] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e01c) returned 0x0
[0184.454] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.455] GdipGetDC (graphics=0x5da0378, hdc=0x53e034) returned 0x0
[0184.455] GetCurrentObject (hdc=0x50010511, type=0x1) returned 0xb00017
[0184.455] GetCurrentObject (hdc=0x50010511, type=0x2) returned 0x900010
[0184.455] GetCurrentObject (hdc=0x50010511, type=0x7) returned 0x1e0507b9
[0184.455] GetCurrentObject (hdc=0x50010511, type=0x6) returned 0x8a01c2
[0184.455] SaveDC (hdc=0x50010511) returned 1
[0184.455] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd004053e
[0184.455] GetClipRgn (hdc=0x50010511, hrgn=0xd004053e) returned 0
[0184.455] SelectClipRgn (hdc=0x50010511, hrgn=0x30407a1) returned 2
[0184.455] DeleteObject (ho=0xd004053e) returned 1
[0184.455] DeleteObject (ho=0x30407a1) returned 1
[0184.455] OffsetViewportOrgEx (in: hdc=0x50010511, x=0, y=0, lppt=0x23f9a00 | out: lppt=0x23f9a00) returned 1
[0184.455] IsAppThemed () returned 0x1
[0184.455] GetThemeAppProperties () returned 0x3
[0184.455] GetThemeAppProperties () returned 0x3
[0184.456] GetThemeBackgroundContentRect () returned 0x0
[0184.456] RestoreDC (hdc=0x50010511, nSavedDC=-1) returned 1
[0184.456] GdipReleaseDC (graphics=0x5da0378, hdc=0x50010511) returned 0x0
[0184.456] IsAppThemed () returned 0x1
[0184.456] GetThemeAppProperties () returned 0x3
[0184.456] GetThemeAppProperties () returned 0x3
[0184.456] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e168) returned 0x0
[0184.456] GdipGetDC (graphics=0x5da0378, hdc=0x53e154) returned 0x0
[0184.456] GetCurrentObject (hdc=0x50010511, type=0x1) returned 0xb00017
[0184.456] GetCurrentObject (hdc=0x50010511, type=0x2) returned 0x900010
[0184.456] GetCurrentObject (hdc=0x50010511, type=0x7) returned 0x1e0507b9
[0184.456] GetCurrentObject (hdc=0x50010511, type=0x6) returned 0x8a01c2
[0184.456] SaveDC (hdc=0x50010511) returned 1
[0184.456] GetTextAlign (hdc=0x50010511) returned 0x0
[0184.456] GetTextColor (hdc=0x50010511) returned 0x0
[0184.456] GetCurrentObject (hdc=0x50010511, type=0x6) returned 0x8a01c2
[0184.457] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0184.457] SelectObject (hdc=0x50010511, h=0x730a066d) returned 0x8a01c2
[0184.457] GetBkMode (hdc=0x50010511) returned 2
[0184.457] SetBkMode (hdc=0x50010511, mode=1) returned 2
[0184.457] DrawTextExW (in: hdc=0x50010511, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x23f9da0 | out: lpchText="OK", lprc=0x53df84) returned 13
[0184.457] DrawTextExW (in: hdc=0x50010511, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x23f9da0 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0184.458] RestoreDC (hdc=0x50010511, nSavedDC=-1) returned 1
[0184.458] GdipReleaseDC (graphics=0x5da0378, hdc=0x50010511) returned 0x0
[0184.458] GetFocus () returned 0xc013e
[0184.458] IsAppThemed () returned 0x1
[0184.458] GetThemeAppProperties () returned 0x3
[0184.458] GetThemeAppProperties () returned 0x3
[0184.458] GdipGetDC (graphics=0x5da0378, hdc=0x53e340) returned 0x0
[0184.458] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x50010511, x1=0, y1=0, rop=0xcc0020) returned 1
[0184.458] GdipReleaseDC (graphics=0x5da0378, hdc=0x50010511) returned 0x0
[0184.458] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0184.458] SelectObject (hdc=0x50010511, h=0x85000f) returned 0x1e0507b9
[0184.458] DeleteDC (hdc=0x50010511) returned 1
[0184.458] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0184.458] EndPaint (hWnd=0x702d8, lpPaint=0x53e2e4) returned 1
[0184.459] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.459] IsWindowUnicode (hWnd=0x702c8) returned 1
[0184.459] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.459] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.459] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.459] BeginPaint (in: hWnd=0x702c8, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0184.459] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0184.460] CreateCompatibleDC (hdc=0x10105d6) returned 0x52010511
[0184.460] SelectObject (hdc=0x52010511, h=0x1e0507b9) returned 0x85000f
[0184.460] GdipCreateFromHDC (hdc=0x52010511, graphics=0x53e300) returned 0x0
[0184.460] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0184.460] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0184.460] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0184.460] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0184.460] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e360) returned 0x0
[0184.460] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0184.460] LocalFree (hMem=0x89eac0) returned 0x0
[0184.460] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0184.460] GdipCreateRegion (region=0x53e348) returned 0x0
[0184.460] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.460] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e354) returned 0x0
[0184.461] GdipSaveGraphics (graphics=0x5da0378, state=0x53e380) returned 0x0
[0184.461] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd410dbd) returned 0x0
[0184.461] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.461] GdipGetDC (graphics=0x5da0378, hdc=0x53e16c) returned 0x0
[0184.461] GetCurrentObject (hdc=0x52010511, type=0x1) returned 0xb00017
[0184.461] GetCurrentObject (hdc=0x52010511, type=0x2) returned 0x900010
[0184.461] GetCurrentObject (hdc=0x52010511, type=0x7) returned 0x1e0507b9
[0184.461] GetCurrentObject (hdc=0x52010511, type=0x6) returned 0x8a01c2
[0184.461] SaveDC (hdc=0x52010511) returned 1
[0184.461] GetNearestColor (hdc=0x52010511, color=0xf0f0f0) returned 0xf0f0f0
[0184.461] GetNearestColor (hdc=0x52010511, color=0xa0a0a0) returned 0xa0a0a0
[0184.461] GetNearestColor (hdc=0x52010511, color=0x696969) returned 0x696969
[0184.461] GetNearestColor (hdc=0x52010511, color=0xa0a0a0) returned 0xa0a0a0
[0184.461] GetNearestColor (hdc=0x52010511, color=0x0) returned 0x0
[0184.461] GetNearestColor (hdc=0x52010511, color=0xffffff) returned 0xffffff
[0184.461] GetNearestColor (hdc=0x52010511, color=0xe5e5e5) returned 0xe5e5e5
[0184.461] GetNearestColor (hdc=0x52010511, color=0xd7d7d7) returned 0xd7d7d7
[0184.462] GetNearestColor (hdc=0x52010511, color=0x0) returned 0x0
[0184.462] RestoreDC (hdc=0x52010511, nSavedDC=-1) returned 1
[0184.462] GdipReleaseDC (graphics=0x5da0378, hdc=0x52010511) returned 0x0
[0184.462] IsAppThemed () returned 0x1
[0184.462] GetThemeAppProperties () returned 0x3
[0184.462] GetThemeAppProperties () returned 0x3
[0184.462] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0184.462] SendMessageW (hWnd=0x802d2, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0184.462] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0184.462] IsAppThemed () returned 0x1
[0184.462] GetThemeAppProperties () returned 0x3
[0184.462] GetThemeAppProperties () returned 0x3
[0184.462] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x23fa5b0 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0184.463] IsAppThemed () returned 0x1
[0184.463] GetThemeAppProperties () returned 0x3
[0184.463] GetThemeAppProperties () returned 0x3
[0184.463] IsAppThemed () returned 0x1
[0184.463] GetThemeAppProperties () returned 0x3
[0184.463] GetThemeAppProperties () returned 0x3
[0184.463] GetFocus () returned 0xc013e
[0184.463] IsAppThemed () returned 0x1
[0184.463] GetThemeAppProperties () returned 0x3
[0184.463] GetThemeAppProperties () returned 0x3
[0184.463] IsAppThemed () returned 0x1
[0184.463] GetThemeAppProperties () returned 0x3
[0184.463] GetThemeAppProperties () returned 0x3
[0184.463] IsThemePartDefined () returned 0x1
[0184.463] IsAppThemed () returned 0x1
[0184.463] GetThemeAppProperties () returned 0x3
[0184.463] GetThemeAppProperties () returned 0x3
[0184.464] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0184.464] IsAppThemed () returned 0x1
[0184.464] GetThemeAppProperties () returned 0x3
[0184.464] GetThemeAppProperties () returned 0x3
[0184.464] IsAppThemed () returned 0x1
[0184.464] GetThemeAppProperties () returned 0x3
[0184.464] GetThemeAppProperties () returned 0x3
[0184.464] IsThemePartDefined () returned 0x1
[0184.464] GdipCreateRegion (region=0x53e070) returned 0x0
[0184.464] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.464] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0184.464] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0184.464] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e088) returned 0x0
[0184.464] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0184.464] LocalFree (hMem=0x89ee08) returned 0x0
[0184.464] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0184.464] LocalFree (hMem=0x89ec80) returned 0x0
[0184.464] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0184.464] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0b0) returned 0x0
[0184.464] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0a0) returned 0x0
[0184.464] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e0a0) returned 0x0
[0184.465] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.465] GdipGetDC (graphics=0x5da0378, hdc=0x53e0b8) returned 0x0
[0184.465] GetCurrentObject (hdc=0x52010511, type=0x1) returned 0xb00017
[0184.465] GetCurrentObject (hdc=0x52010511, type=0x2) returned 0x900010
[0184.465] GetCurrentObject (hdc=0x52010511, type=0x7) returned 0x1e0507b9
[0184.465] GetCurrentObject (hdc=0x52010511, type=0x6) returned 0x8a01c2
[0184.465] SaveDC (hdc=0x52010511) returned 1
[0184.465] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x40407a1
[0184.465] GetClipRgn (hdc=0x52010511, hrgn=0x40407a1) returned 0
[0184.465] SelectClipRgn (hdc=0x52010511, hrgn=0xd404053e) returned 2
[0184.465] DeleteObject (ho=0x40407a1) returned 1
[0184.465] DeleteObject (ho=0xd404053e) returned 1
[0184.465] OffsetViewportOrgEx (in: hdc=0x52010511, x=0, y=0, lppt=0x23fac60 | out: lppt=0x23fac60) returned 1
[0184.465] DrawThemeParentBackground () returned 0x0
[0184.465] GetWindowPlacement (in: hWnd=0x802d2, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0184.466] GetClientRect (in: hWnd=0x802d2, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0184.466] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0184.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0184.466] GetSystemMetrics (nIndex=42) returned 0
[0184.466] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0184.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0184.466] GetClientRect (in: hWnd=0x802d2, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0184.466] GetCurrentObject (hdc=0x52010511, type=0x1) returned 0xb00017
[0184.466] GetCurrentObject (hdc=0x52010511, type=0x2) returned 0x900010
[0184.466] GetCurrentObject (hdc=0x52010511, type=0x7) returned 0x1e0507b9
[0184.466] GetCurrentObject (hdc=0x52010511, type=0x6) returned 0x8a01c2
[0184.466] SaveDC (hdc=0x52010511) returned 2
[0184.466] GetNearestColor (hdc=0x52010511, color=0xf0f0f0) returned 0xf0f0f0
[0184.466] CreateSolidBrush (color=0xf0f0f0) returned 0xcb10078d
[0184.466] FillRect (hDC=0x52010511, lprc=0x53dad0, hbr=0xcb10078d) returned 1
[0184.466] DeleteObject (ho=0xcb10078d) returned 1
[0184.466] RestoreDC (hdc=0x52010511, nSavedDC=-1) returned 1
[0184.466] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0184.467] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0184.467] GetSystemMetrics (nIndex=42) returned 0
[0184.467] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0184.467] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0184.467] GetClientRect (in: hWnd=0x802d2, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0184.467] GetCurrentObject (hdc=0x52010511, type=0x1) returned 0xb00017
[0184.467] GetCurrentObject (hdc=0x52010511, type=0x2) returned 0x900010
[0184.467] GetCurrentObject (hdc=0x52010511, type=0x7) returned 0x1e0507b9
[0184.467] GetCurrentObject (hdc=0x52010511, type=0x6) returned 0x8a01c2
[0184.467] SaveDC (hdc=0x52010511) returned 2
[0184.467] GetNearestColor (hdc=0x52010511, color=0xf0f0f0) returned 0xf0f0f0
[0184.467] CreateSolidBrush (color=0xf0f0f0) returned 0xcc10078d
[0184.467] FillRect (hDC=0x52010511, lprc=0x53da70, hbr=0xcc10078d) returned 1
[0184.467] DeleteObject (ho=0xcc10078d) returned 1
[0184.467] RestoreDC (hdc=0x52010511, nSavedDC=-1) returned 1
[0184.467] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0184.467] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0184.467] GetSystemMetrics (nIndex=42) returned 0
[0184.468] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0184.468] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0184.468] RestoreDC (hdc=0x52010511, nSavedDC=-1) returned 1
[0184.468] GdipReleaseDC (graphics=0x5da0378, hdc=0x52010511) returned 0x0
[0184.468] IsAppThemed () returned 0x1
[0184.468] GetThemeAppProperties () returned 0x3
[0184.468] GetThemeAppProperties () returned 0x3
[0184.468] IsAppThemed () returned 0x1
[0184.468] GetThemeAppProperties () returned 0x3
[0184.468] GetThemeAppProperties () returned 0x3
[0184.468] IsThemePartDefined () returned 0x1
[0184.468] GdipCreateRegion (region=0x53dff4) returned 0x0
[0184.468] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.468] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0184.468] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0184.468] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e00c) returned 0x0
[0184.468] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0184.469] LocalFree (hMem=0x89ee40) returned 0x0
[0184.469] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0184.469] LocalFree (hMem=0x89ee08) returned 0x0
[0184.469] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0184.469] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e034) returned 0x0
[0184.469] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e024) returned 0x0
[0184.469] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e024) returned 0x0
[0184.469] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.469] GdipGetDC (graphics=0x5da0378, hdc=0x53e03c) returned 0x0
[0184.469] GetCurrentObject (hdc=0x52010511, type=0x1) returned 0xb00017
[0184.469] GetCurrentObject (hdc=0x52010511, type=0x2) returned 0x900010
[0184.469] GetCurrentObject (hdc=0x52010511, type=0x7) returned 0x1e0507b9
[0184.469] GetCurrentObject (hdc=0x52010511, type=0x6) returned 0x8a01c2
[0184.469] SaveDC (hdc=0x52010511) returned 1
[0184.469] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd504053e
[0184.469] GetClipRgn (hdc=0x52010511, hrgn=0xd504053e) returned 0
[0184.469] SelectClipRgn (hdc=0x52010511, hrgn=0x60407a1) returned 2
[0184.469] DeleteObject (ho=0xd504053e) returned 1
[0184.469] DeleteObject (ho=0x60407a1) returned 1
[0184.470] OffsetViewportOrgEx (in: hdc=0x52010511, x=0, y=0, lppt=0x23fb4e8 | out: lppt=0x23fb4e8) returned 1
[0184.470] IsAppThemed () returned 0x1
[0184.470] GetThemeAppProperties () returned 0x3
[0184.470] GetThemeAppProperties () returned 0x3
[0184.470] DrawThemeBackground () returned 0x0
[0184.470] RestoreDC (hdc=0x52010511, nSavedDC=-1) returned 1
[0184.470] GdipReleaseDC (graphics=0x5da0378, hdc=0x52010511) returned 0x0
[0184.470] GdipCreateRegion (region=0x53dff8) returned 0x0
[0184.470] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.470] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0184.470] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0184.470] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e010) returned 0x0
[0184.470] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0184.470] LocalFree (hMem=0x89eac0) returned 0x0
[0184.470] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ee08) returned 0x0
[0184.470] LocalFree (hMem=0x89ee08) returned 0x0
[0184.470] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0184.470] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e038) returned 0x0
[0184.470] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e028) returned 0x0
[0184.471] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e028) returned 0x0
[0184.471] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.471] GdipGetDC (graphics=0x5da0378, hdc=0x53e040) returned 0x0
[0184.471] GetCurrentObject (hdc=0x52010511, type=0x1) returned 0xb00017
[0184.471] GetCurrentObject (hdc=0x52010511, type=0x2) returned 0x900010
[0184.471] GetCurrentObject (hdc=0x52010511, type=0x7) returned 0x1e0507b9
[0184.471] GetCurrentObject (hdc=0x52010511, type=0x6) returned 0x8a01c2
[0184.471] SaveDC (hdc=0x52010511) returned 1
[0184.471] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x70407a1
[0184.471] GetClipRgn (hdc=0x52010511, hrgn=0x70407a1) returned 0
[0184.471] SelectClipRgn (hdc=0x52010511, hrgn=0xd604053e) returned 2
[0184.471] DeleteObject (ho=0x70407a1) returned 1
[0184.471] DeleteObject (ho=0xd604053e) returned 1
[0184.471] OffsetViewportOrgEx (in: hdc=0x52010511, x=0, y=0, lppt=0x23fb7bc | out: lppt=0x23fb7bc) returned 1
[0184.471] IsAppThemed () returned 0x1
[0184.471] GetThemeAppProperties () returned 0x3
[0184.471] GetThemeAppProperties () returned 0x3
[0184.471] GetThemeBackgroundContentRect () returned 0x0
[0184.471] RestoreDC (hdc=0x52010511, nSavedDC=-1) returned 1
[0184.472] GdipReleaseDC (graphics=0x5da0378, hdc=0x52010511) returned 0x0
[0184.472] IsAppThemed () returned 0x1
[0184.472] GetThemeAppProperties () returned 0x3
[0184.472] GetThemeAppProperties () returned 0x3
[0184.472] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e174) returned 0x0
[0184.472] GdipGetDC (graphics=0x5da0378, hdc=0x53e160) returned 0x0
[0184.472] GetCurrentObject (hdc=0x52010511, type=0x1) returned 0xb00017
[0184.472] GetCurrentObject (hdc=0x52010511, type=0x2) returned 0x900010
[0184.472] GetCurrentObject (hdc=0x52010511, type=0x7) returned 0x1e0507b9
[0184.472] GetCurrentObject (hdc=0x52010511, type=0x6) returned 0x8a01c2
[0184.472] SaveDC (hdc=0x52010511) returned 1
[0184.472] GetTextAlign (hdc=0x52010511) returned 0x0
[0184.472] GetTextColor (hdc=0x52010511) returned 0x0
[0184.472] GetCurrentObject (hdc=0x52010511, type=0x6) returned 0x8a01c2
[0184.472] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0184.473] SelectObject (hdc=0x52010511, h=0x730a066d) returned 0x8a01c2
[0184.473] GetBkMode (hdc=0x52010511) returned 2
[0184.473] SetBkMode (hdc=0x52010511, mode=1) returned 2
[0184.473] DrawTextExW (in: hdc=0x52010511, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x23fbb5c | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0184.473] DrawTextExW (in: hdc=0x52010511, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x23fbb5c | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0184.473] RestoreDC (hdc=0x52010511, nSavedDC=-1) returned 1
[0184.474] GdipReleaseDC (graphics=0x5da0378, hdc=0x52010511) returned 0x0
[0184.474] GetFocus () returned 0xc013e
[0184.474] IsAppThemed () returned 0x1
[0184.474] GetThemeAppProperties () returned 0x3
[0184.474] GetThemeAppProperties () returned 0x3
[0184.474] GdipGetDC (graphics=0x5da0378, hdc=0x53e340) returned 0x0
[0184.474] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x52010511, x1=0, y1=0, rop=0xcc0020) returned 1
[0184.474] GdipReleaseDC (graphics=0x5da0378, hdc=0x52010511) returned 0x0
[0184.474] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0184.474] SelectObject (hdc=0x52010511, h=0x85000f) returned 0x1e0507b9
[0184.485] DeleteDC (hdc=0x52010511) returned 1
[0184.485] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0184.485] EndPaint (hWnd=0x702c8, lpPaint=0x53e2e4) returned 1
[0184.485] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.485] IsWindowUnicode (hWnd=0x202c6) returned 1
[0184.485] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.485] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.485] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.485] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0184.486] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0184.486] CreateCompatibleDC (hdc=0x8b010786) returned 0x54010511
[0184.486] SelectObject (hdc=0x54010511, h=0x1e0507b9) returned 0x85000f
[0184.486] GdipCreateFromHDC (hdc=0x54010511, graphics=0x53e300) returned 0x0
[0184.486] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0184.486] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0184.486] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0184.486] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0184.486] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e360) returned 0x0
[0184.486] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0184.486] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0184.486] LocalFree (hMem=0x89ec80) returned 0x0
[0184.486] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0184.487] GdipCreateRegion (region=0x53e348) returned 0x0
[0184.487] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.487] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e354) returned 0x0
[0184.487] GdipSaveGraphics (graphics=0x5da0378, state=0x53e380) returned 0x0
[0184.487] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd3f0dbd) returned 0x0
[0184.487] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.487] GdipGetDC (graphics=0x5da0378, hdc=0x53e16c) returned 0x0
[0184.487] GetCurrentObject (hdc=0x54010511, type=0x1) returned 0xb00017
[0184.487] GetCurrentObject (hdc=0x54010511, type=0x2) returned 0x900010
[0184.487] GetCurrentObject (hdc=0x54010511, type=0x7) returned 0x1e0507b9
[0184.487] GetCurrentObject (hdc=0x54010511, type=0x6) returned 0x8a01c2
[0184.487] SaveDC (hdc=0x54010511) returned 1
[0184.487] GetNearestColor (hdc=0x54010511, color=0xff) returned 0xff
[0184.487] GetNearestColor (hdc=0x54010511, color=0x55) returned 0x55
[0184.488] GetNearestColor (hdc=0x54010511, color=0x0) returned 0x0
[0184.488] GetNearestColor (hdc=0x54010511, color=0x55) returned 0x55
[0184.488] GetNearestColor (hdc=0x54010511, color=0x0) returned 0x0
[0184.488] GetNearestColor (hdc=0x54010511, color=0x8080ff) returned 0x8080ff
[0184.488] GetNearestColor (hdc=0x54010511, color=0x7373e5) returned 0x7373e5
[0184.488] GetNearestColor (hdc=0x54010511, color=0xe5) returned 0xe5
[0184.488] GetNearestColor (hdc=0x54010511, color=0x0) returned 0x0
[0184.488] RestoreDC (hdc=0x54010511, nSavedDC=-1) returned 1
[0184.488] GdipReleaseDC (graphics=0x5da0378, hdc=0x54010511) returned 0x0
[0184.488] IsAppThemed () returned 0x1
[0184.488] GetThemeAppProperties () returned 0x3
[0184.488] GetThemeAppProperties () returned 0x3
[0184.488] IsAppThemed () returned 0x1
[0184.488] GetThemeAppProperties () returned 0x3
[0184.488] GetThemeAppProperties () returned 0x3
[0184.489] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0184.489] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x23fc340 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0184.489] IsAppThemed () returned 0x1
[0184.489] GetThemeAppProperties () returned 0x3
[0184.489] GetThemeAppProperties () returned 0x3
[0184.489] IsAppThemed () returned 0x1
[0184.489] GetThemeAppProperties () returned 0x3
[0184.489] GetThemeAppProperties () returned 0x3
[0184.489] GetFocus () returned 0xc013e
[0184.489] IsAppThemed () returned 0x1
[0184.497] GetThemeAppProperties () returned 0x3
[0184.497] GetThemeAppProperties () returned 0x3
[0184.497] IsAppThemed () returned 0x1
[0184.497] GetThemeAppProperties () returned 0x3
[0184.497] GetThemeAppProperties () returned 0x3
[0184.497] IsThemePartDefined () returned 0x1
[0184.497] IsAppThemed () returned 0x1
[0184.497] GetThemeAppProperties () returned 0x3
[0184.497] GetThemeAppProperties () returned 0x3
[0184.497] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0184.497] IsAppThemed () returned 0x1
[0184.498] GetThemeAppProperties () returned 0x3
[0184.498] GetThemeAppProperties () returned 0x3
[0184.498] IsAppThemed () returned 0x1
[0184.498] GetThemeAppProperties () returned 0x3
[0184.498] GetThemeAppProperties () returned 0x3
[0184.498] IsThemePartDefined () returned 0x1
[0184.498] GdipCreateRegion (region=0x53e070) returned 0x0
[0184.498] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.498] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0184.498] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0184.498] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e088) returned 0x0
[0184.498] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0184.498] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0184.498] LocalFree (hMem=0x89eac0) returned 0x0
[0184.498] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0184.498] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0184.499] LocalFree (hMem=0x89ec80) returned 0x0
[0184.499] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0184.499] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0b0) returned 0x0
[0184.499] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e0a0) returned 0x0
[0184.499] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e0a0) returned 0x0
[0184.499] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.499] GdipGetDC (graphics=0x5da0378, hdc=0x53e0b8) returned 0x0
[0184.499] GetCurrentObject (hdc=0x54010511, type=0x1) returned 0xb00017
[0184.499] GetCurrentObject (hdc=0x54010511, type=0x2) returned 0x900010
[0184.499] GetCurrentObject (hdc=0x54010511, type=0x7) returned 0x1e0507b9
[0184.499] GetCurrentObject (hdc=0x54010511, type=0x6) returned 0x8a01c2
[0184.499] SaveDC (hdc=0x54010511) returned 1
[0184.499] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd704053e
[0184.499] GetClipRgn (hdc=0x54010511, hrgn=0xd704053e) returned 0
[0184.500] SelectClipRgn (hdc=0x54010511, hrgn=0xb0407a1) returned 2
[0184.500] DeleteObject (ho=0xd704053e) returned 1
[0184.500] DeleteObject (ho=0xb0407a1) returned 1
[0184.500] OffsetViewportOrgEx (in: hdc=0x54010511, x=0, y=0, lppt=0x23fc9f0 | out: lppt=0x23fc9f0) returned 1
[0184.500] DrawThemeParentBackground () returned 0x0
[0184.500] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0184.500] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0184.500] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0184.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0184.500] GetSystemMetrics (nIndex=42) returned 0
[0184.500] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0184.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0184.500] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0184.500] GetCurrentObject (hdc=0x54010511, type=0x1) returned 0xb00017
[0184.501] GetCurrentObject (hdc=0x54010511, type=0x2) returned 0x900010
[0184.501] GetCurrentObject (hdc=0x54010511, type=0x7) returned 0x1e0507b9
[0184.501] GetCurrentObject (hdc=0x54010511, type=0x6) returned 0x8a01c2
[0184.501] SaveDC (hdc=0x54010511) returned 2
[0184.501] GetNearestColor (hdc=0x54010511, color=0xff) returned 0xff
[0184.501] CreateSolidBrush (color=0xff) returned 0xcd10078d
[0184.501] FillRect (hDC=0x54010511, lprc=0x53dad0, hbr=0xcd10078d) returned 1
[0184.501] DeleteObject (ho=0xcd10078d) returned 1
[0184.501] RestoreDC (hdc=0x54010511, nSavedDC=-1) returned 1
[0184.501] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0184.501] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0184.501] GetSystemMetrics (nIndex=42) returned 0
[0184.501] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0184.501] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0184.501] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0184.502] GetCurrentObject (hdc=0x54010511, type=0x1) returned 0xb00017
[0184.502] GetCurrentObject (hdc=0x54010511, type=0x2) returned 0x900010
[0184.502] GetCurrentObject (hdc=0x54010511, type=0x7) returned 0x1e0507b9
[0184.502] GetCurrentObject (hdc=0x54010511, type=0x6) returned 0x8a01c2
[0184.502] SaveDC (hdc=0x54010511) returned 2
[0184.502] GetNearestColor (hdc=0x54010511, color=0xff) returned 0xff
[0184.502] CreateSolidBrush (color=0xff) returned 0xce10078d
[0184.502] FillRect (hDC=0x54010511, lprc=0x53da70, hbr=0xce10078d) returned 1
[0184.502] DeleteObject (ho=0xce10078d) returned 1
[0184.502] RestoreDC (hdc=0x54010511, nSavedDC=-1) returned 1
[0184.502] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0184.502] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0184.502] GetSystemMetrics (nIndex=42) returned 0
[0184.502] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0184.502] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0184.503] RestoreDC (hdc=0x54010511, nSavedDC=-1) returned 1
[0184.503] GdipReleaseDC (graphics=0x5da0378, hdc=0x54010511) returned 0x0
[0184.503] IsAppThemed () returned 0x1
[0184.503] GetThemeAppProperties () returned 0x3
[0184.503] GetThemeAppProperties () returned 0x3
[0184.503] IsAppThemed () returned 0x1
[0184.503] GetThemeAppProperties () returned 0x3
[0184.503] GetThemeAppProperties () returned 0x3
[0184.503] IsThemePartDefined () returned 0x1
[0184.503] GdipCreateRegion (region=0x53dff4) returned 0x0
[0184.503] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.503] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0184.503] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0184.503] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e00c) returned 0x0
[0184.503] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0184.503] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0184.504] LocalFree (hMem=0x89eee8) returned 0x0
[0184.504] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0184.504] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0184.504] LocalFree (hMem=0x89ee08) returned 0x0
[0184.504] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0184.504] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e034) returned 0x0
[0184.504] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e024) returned 0x0
[0184.504] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e024) returned 0x0
[0184.504] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.504] GdipGetDC (graphics=0x5da0378, hdc=0x53e03c) returned 0x0
[0184.504] GetCurrentObject (hdc=0x54010511, type=0x1) returned 0xb00017
[0184.504] GetCurrentObject (hdc=0x54010511, type=0x2) returned 0x900010
[0184.504] GetCurrentObject (hdc=0x54010511, type=0x7) returned 0x1e0507b9
[0184.504] GetCurrentObject (hdc=0x54010511, type=0x6) returned 0x8a01c2
[0184.504] SaveDC (hdc=0x54010511) returned 1
[0184.505] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc0407a1
[0184.505] GetClipRgn (hdc=0x54010511, hrgn=0xc0407a1) returned 0
[0184.505] SelectClipRgn (hdc=0x54010511, hrgn=0xd904053e) returned 2
[0184.505] DeleteObject (ho=0xc0407a1) returned 1
[0184.505] DeleteObject (ho=0xd904053e) returned 1
[0184.505] OffsetViewportOrgEx (in: hdc=0x54010511, x=0, y=0, lppt=0x23fd254 | out: lppt=0x23fd254) returned 1
[0184.505] IsAppThemed () returned 0x1
[0184.505] GetThemeAppProperties () returned 0x3
[0184.505] GetThemeAppProperties () returned 0x3
[0184.505] DrawThemeBackground () returned 0x0
[0184.505] RestoreDC (hdc=0x54010511, nSavedDC=-1) returned 1
[0184.505] GdipReleaseDC (graphics=0x5da0378, hdc=0x54010511) returned 0x0
[0184.505] GdipCreateRegion (region=0x53dff8) returned 0x0
[0184.505] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.505] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0184.506] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0184.506] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53e010) returned 0x0
[0184.506] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0184.506] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0184.506] LocalFree (hMem=0x89eac0) returned 0x0
[0184.506] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0184.506] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0184.506] LocalFree (hMem=0x89eac0) returned 0x0
[0184.506] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0184.506] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e038) returned 0x0
[0184.506] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e028) returned 0x0
[0184.506] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53e028) returned 0x0
[0184.507] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.507] GdipGetDC (graphics=0x5da0378, hdc=0x53e040) returned 0x0
[0184.507] GetCurrentObject (hdc=0x54010511, type=0x1) returned 0xb00017
[0184.507] GetCurrentObject (hdc=0x54010511, type=0x2) returned 0x900010
[0184.507] GetCurrentObject (hdc=0x54010511, type=0x7) returned 0x1e0507b9
[0184.507] GetCurrentObject (hdc=0x54010511, type=0x6) returned 0x8a01c2
[0184.507] SaveDC (hdc=0x54010511) returned 1
[0184.507] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xda04053e
[0184.507] GetClipRgn (hdc=0x54010511, hrgn=0xda04053e) returned 0
[0184.507] SelectClipRgn (hdc=0x54010511, hrgn=0xd0407a1) returned 2
[0184.507] DeleteObject (ho=0xda04053e) returned 1
[0184.507] DeleteObject (ho=0xd0407a1) returned 1
[0184.507] OffsetViewportOrgEx (in: hdc=0x54010511, x=0, y=0, lppt=0x23fd528 | out: lppt=0x23fd528) returned 1
[0184.507] IsAppThemed () returned 0x1
[0184.507] GetThemeAppProperties () returned 0x3
[0184.507] GetThemeAppProperties () returned 0x3
[0184.508] GetThemeBackgroundContentRect () returned 0x0
[0184.508] RestoreDC (hdc=0x54010511, nSavedDC=-1) returned 1
[0184.508] GdipReleaseDC (graphics=0x5da0378, hdc=0x54010511) returned 0x0
[0184.508] IsAppThemed () returned 0x1
[0184.508] GetThemeAppProperties () returned 0x3
[0184.508] GetThemeAppProperties () returned 0x3
[0184.508] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53e174) returned 0x0
[0184.508] GdipGetDC (graphics=0x5da0378, hdc=0x53e160) returned 0x0
[0184.508] GetCurrentObject (hdc=0x54010511, type=0x1) returned 0xb00017
[0184.508] GetCurrentObject (hdc=0x54010511, type=0x2) returned 0x900010
[0184.508] GetCurrentObject (hdc=0x54010511, type=0x7) returned 0x1e0507b9
[0184.508] GetCurrentObject (hdc=0x54010511, type=0x6) returned 0x8a01c2
[0184.508] SaveDC (hdc=0x54010511) returned 1
[0184.508] GetTextAlign (hdc=0x54010511) returned 0x0
[0184.508] GetTextColor (hdc=0x54010511) returned 0x0
[0184.508] GetCurrentObject (hdc=0x54010511, type=0x6) returned 0x8a01c2
[0184.509] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0184.509] SelectObject (hdc=0x54010511, h=0x450a0799) returned 0x8a01c2
[0184.509] GetBkMode (hdc=0x54010511) returned 2
[0184.509] SetBkMode (hdc=0x54010511, mode=1) returned 2
[0184.509] DrawTextExW (in: hdc=0x54010511, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x23fd8c8 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0184.509] DrawTextExW (in: hdc=0x54010511, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x23fd8c8 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0184.509] RestoreDC (hdc=0x54010511, nSavedDC=-1) returned 1
[0184.510] GdipReleaseDC (graphics=0x5da0378, hdc=0x54010511) returned 0x0
[0184.510] GetFocus () returned 0xc013e
[0184.510] IsAppThemed () returned 0x1
[0184.510] GetThemeAppProperties () returned 0x3
[0184.510] GetThemeAppProperties () returned 0x3
[0184.510] GdipGetDC (graphics=0x5da0378, hdc=0x53e340) returned 0x0
[0184.510] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x54010511, x1=0, y1=0, rop=0xcc0020) returned 1
[0184.510] GdipReleaseDC (graphics=0x5da0378, hdc=0x54010511) returned 0x0
[0184.510] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0184.510] SelectObject (hdc=0x54010511, h=0x85000f) returned 0x1e0507b9
[0184.510] DeleteDC (hdc=0x54010511) returned 1
[0184.510] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0184.510] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0184.511] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.511] IsWindowUnicode (hWnd=0x202d0) returned 1
[0184.511] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.511] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.511] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.511] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.511] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.511] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.511] DispatchMessageA (lpMsg=0x53e8a0) returned 0x7f0f
[0184.512] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.512] IsWindowUnicode (hWnd=0x702d8) returned 1
[0184.512] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.512] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.512] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.512] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.512] IsWindowUnicode (hWnd=0x702d8) returned 1
[0184.512] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.512] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.512] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.512] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x2a1, wParam=0x0, lParam=0x5001a) returned 0x0
[0184.512] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0184.512] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0184.512] WaitMessage () returned 1
[0184.523] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.523] IsWindowUnicode (hWnd=0x102dc) returned 1
[0184.523] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.523] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.523] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.524] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0184.524] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0184.524] WaitMessage () returned 1
[0184.603] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.603] IsWindowUnicode (hWnd=0x102dc) returned 1
[0184.603] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.603] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.603] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.604] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0184.604] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0184.604] WaitMessage () returned 1
[0184.605] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.605] IsWindowUnicode (hWnd=0x102dc) returned 1
[0184.605] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.606] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.606] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.607] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.607] IsWindowUnicode (hWnd=0x102dc) returned 1
[0184.607] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.608] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.608] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.608] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.608] IsWindowUnicode (hWnd=0x102dc) returned 1
[0184.608] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.608] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.608] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.608] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0184.609] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0184.609] WaitMessage () returned 1
[0184.609] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.609] IsWindowUnicode (hWnd=0x102dc) returned 1
[0184.609] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.609] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.609] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.663] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.663] IsWindowUnicode (hWnd=0x102dc) returned 1
[0184.663] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.663] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.663] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.664] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.664] IsWindowUnicode (hWnd=0x102dc) returned 1
[0184.664] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.664] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.664] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.666] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.666] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x84, wParam=0x0, lParam=0x18e035b) returned 0x1
[0184.666] IsWindowUnicode (hWnd=0x702d8) returned 1
[0184.666] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.666] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x84, wParam=0x0, lParam=0x18e035b) returned 0x1
[0184.667] GetDlgItem (hDlg=0x802d2, nIDDlgItem=0) returned 0x0
[0184.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x210, wParam=0x201, lParam=0x11013c) returned 0x0
[0184.667] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x21, wParam=0x802d2, lParam=0x2010001) returned 0x1
[0184.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x21, wParam=0x802d2, lParam=0x2010001) returned 0x1
[0184.667] SetCursor (hCursor=0x10003) returned 0x10003
[0184.667] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.667] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.667] GetKeyState (nVirtKey=1) returned -128
[0184.667] GetKeyState (nVirtKey=2) returned 0
[0184.667] GetKeyState (nVirtKey=4) returned 0
[0184.667] GetKeyState (nVirtKey=5) returned 0
[0184.667] GetKeyState (nVirtKey=6) returned 0
[0184.668] IsWindowVisible (hWnd=0x702d8) returned 1
[0184.668] IsWindowEnabled (hWnd=0x702d8) returned 1
[0184.668] SetFocus (hWnd=0x702d8) returned 0xc013e
[0184.668] GetFocus () returned 0x702d8
[0184.669] IsChild (hWndParent=0x802d2, hWnd=0x702d8) returned 1
[0184.669] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x8, wParam=0x702d8, lParam=0x0) returned 0x1
[0184.669] SendMessageW (hWnd=0xc013e, Msg=0x2111, wParam=0x200013e, lParam=0xc013e) returned 0x0
[0184.670] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0184.672] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0184.673] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0184.673] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0184.673] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0184.673] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0184.675] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0184.675] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x7, wParam=0xc013e, lParam=0x0) returned 0x0
[0184.676] GetStockObject (i=5) returned 0x900015
[0184.676] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0184.676] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0xd, wParam=0x3, lParam=0x89e758) returned 0x2
[0184.676] GetDlgItem (hDlg=0x802d2, nIDDlgItem=459480) returned 0x702d8
[0184.676] SendMessageW (hWnd=0x702d8, Msg=0x202b, wParam=0x702d8, lParam=0x53de74) returned 0x0
[0184.676] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x202b, wParam=0x702d8, lParam=0x53de74) returned 0x0
[0184.676] InvalidateRect (hWnd=0x702d8, lpRect=0x0, bErase=0) returned 1
[0184.679] GetFocus () returned 0x702d8
[0184.679] GetFocus () returned 0x702d8
[0184.680] GetFocus () returned 0x702d8
[0184.680] GetKeyState (nVirtKey=1) returned -128
[0184.680] GetKeyState (nVirtKey=2) returned 0
[0184.680] GetKeyState (nVirtKey=4) returned 0
[0184.680] GetKeyState (nVirtKey=5) returned 0
[0184.680] GetKeyState (nVirtKey=6) returned 0
[0184.680] GetCapture () returned 0x0
[0184.680] SetCapture (hWnd=0x702d8) returned 0x0
[0184.680] GetKeyState (nVirtKey=1) returned -128
[0184.680] GetKeyState (nVirtKey=2) returned 0
[0184.680] GetKeyState (nVirtKey=4) returned 0
[0184.680] GetKeyState (nVirtKey=5) returned 0
[0184.680] GetKeyState (nVirtKey=6) returned 0
[0184.680] NotifyWinEvent (event=0x800a, hwnd=0x702d8, idObject=-4, idChild=0)
[0184.680] InvalidateRect (hWnd=0x702d8, lpRect=0x53e4c8, bErase=0) returned 1
[0184.680] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.680] IsWindowUnicode (hWnd=0x702d8) returned 1
[0184.680] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.681] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0184.681] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0184.681] MapWindowPoints (in: hWndFrom=0x702d8, hWndTo=0x0, lpPoints=0x23fdaf4, cPoints=0x1 | out: lpPoints=0x23fdaf4) returned 25756481
[0184.681] NotifyWinEvent (event=0x800a, hwnd=0x702d8, idObject=-4, idChild=0)
[0184.681] InvalidateRect (hWnd=0x702d8, lpRect=0x53e468, bErase=0) returned 1
[0184.681] UpdateWindow (hWnd=0x702d8) returned 1
[0184.681] BeginPaint (in: hWnd=0x702d8, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x8b010786
[0184.681] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0184.681] CreateCompatibleDC (hdc=0x8b010786) returned 0x9e0107b3
[0184.681] SelectObject (hdc=0x9e0107b3, h=0x1e0507b9) returned 0x85000f
[0184.681] GdipCreateFromHDC (hdc=0x9e0107b3, graphics=0x53df98) returned 0x0
[0184.682] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0184.682] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0184.682] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0184.682] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0184.682] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dff8) returned 0x0
[0184.682] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0184.682] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0184.682] LocalFree (hMem=0x89ee08) returned 0x0
[0184.682] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0184.682] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0184.682] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.682] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dfec) returned 0x0
[0184.682] GdipSaveGraphics (graphics=0x5da0378, state=0x53e018) returned 0x0
[0184.682] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd3d0dbd) returned 0x0
[0184.682] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.682] GdipGetDC (graphics=0x5da0378, hdc=0x53ddf8) returned 0x0
[0184.683] GetCurrentObject (hdc=0x9e0107b3, type=0x1) returned 0xb00017
[0184.683] GetCurrentObject (hdc=0x9e0107b3, type=0x2) returned 0x900010
[0184.683] GetCurrentObject (hdc=0x9e0107b3, type=0x7) returned 0x1e0507b9
[0184.683] GetCurrentObject (hdc=0x9e0107b3, type=0x6) returned 0x8a01c2
[0184.683] SaveDC (hdc=0x9e0107b3) returned 1
[0184.683] GetNearestColor (hdc=0x9e0107b3, color=0xf0f0f0) returned 0xf0f0f0
[0184.683] GetNearestColor (hdc=0x9e0107b3, color=0xa0a0a0) returned 0xa0a0a0
[0184.683] GetNearestColor (hdc=0x9e0107b3, color=0x696969) returned 0x696969
[0184.683] GetNearestColor (hdc=0x9e0107b3, color=0xa0a0a0) returned 0xa0a0a0
[0184.683] GetNearestColor (hdc=0x9e0107b3, color=0x0) returned 0x0
[0184.683] GetNearestColor (hdc=0x9e0107b3, color=0xffffff) returned 0xffffff
[0184.683] GetNearestColor (hdc=0x9e0107b3, color=0xe5e5e5) returned 0xe5e5e5
[0184.683] GetNearestColor (hdc=0x9e0107b3, color=0xd7d7d7) returned 0xd7d7d7
[0184.684] GetNearestColor (hdc=0x9e0107b3, color=0x0) returned 0x0
[0184.684] RestoreDC (hdc=0x9e0107b3, nSavedDC=-1) returned 1
[0184.684] GdipReleaseDC (graphics=0x5da0378, hdc=0x9e0107b3) returned 0x0
[0184.684] IsAppThemed () returned 0x1
[0184.684] GetThemeAppProperties () returned 0x3
[0184.684] GetThemeAppProperties () returned 0x3
[0184.684] IsAppThemed () returned 0x1
[0184.684] GetThemeAppProperties () returned 0x3
[0184.684] GetThemeAppProperties () returned 0x3
[0184.684] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0184.684] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x23fe268 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0184.685] IsAppThemed () returned 0x1
[0184.685] GetThemeAppProperties () returned 0x3
[0184.685] GetThemeAppProperties () returned 0x3
[0184.685] IsAppThemed () returned 0x1
[0184.685] GetThemeAppProperties () returned 0x3
[0184.685] GetThemeAppProperties () returned 0x3
[0184.685] IsAppThemed () returned 0x1
[0184.685] GetThemeAppProperties () returned 0x3
[0184.685] GetThemeAppProperties () returned 0x3
[0184.685] IsAppThemed () returned 0x1
[0184.685] GetThemeAppProperties () returned 0x3
[0184.685] GetThemeAppProperties () returned 0x3
[0184.685] IsThemePartDefined () returned 0x1
[0184.685] IsAppThemed () returned 0x1
[0184.685] GetThemeAppProperties () returned 0x3
[0184.685] GetThemeAppProperties () returned 0x3
[0184.685] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0184.685] IsAppThemed () returned 0x1
[0184.685] GetThemeAppProperties () returned 0x3
[0184.685] GetThemeAppProperties () returned 0x3
[0184.685] IsAppThemed () returned 0x1
[0184.686] GetThemeAppProperties () returned 0x3
[0184.686] GetThemeAppProperties () returned 0x3
[0184.686] IsThemePartDefined () returned 0x1
[0184.686] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0184.686] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.686] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0184.686] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0184.686] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53dd14) returned 0x0
[0184.686] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0184.686] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0184.686] LocalFree (hMem=0x89ea88) returned 0x0
[0184.686] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0184.686] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0184.686] LocalFree (hMem=0x89ea88) returned 0x0
[0184.686] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0184.686] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd3c) returned 0x0
[0184.686] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dd2c) returned 0x0
[0184.686] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dd2c) returned 0x0
[0184.687] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.687] GdipGetDC (graphics=0x5da0378, hdc=0x53dd44) returned 0x0
[0184.687] GetCurrentObject (hdc=0x9e0107b3, type=0x1) returned 0xb00017
[0184.687] GetCurrentObject (hdc=0x9e0107b3, type=0x2) returned 0x900010
[0184.687] GetCurrentObject (hdc=0x9e0107b3, type=0x7) returned 0x1e0507b9
[0184.687] GetCurrentObject (hdc=0x9e0107b3, type=0x6) returned 0x8a01c2
[0184.687] SaveDC (hdc=0x9e0107b3) returned 1
[0184.687] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe0407a1
[0184.687] GetClipRgn (hdc=0x9e0107b3, hrgn=0xe0407a1) returned 0
[0184.687] SelectClipRgn (hdc=0x9e0107b3, hrgn=0xde04053e) returned 2
[0184.687] DeleteObject (ho=0xe0407a1) returned 1
[0184.687] DeleteObject (ho=0xde04053e) returned 1
[0184.688] OffsetViewportOrgEx (in: hdc=0x9e0107b3, x=0, y=0, lppt=0x23fe918 | out: lppt=0x23fe918) returned 1
[0184.688] DrawThemeParentBackground () returned 0x0
[0184.688] GetWindowPlacement (in: hWnd=0x802d2, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0184.688] GetClientRect (in: hWnd=0x802d2, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0184.688] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0184.688] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0184.688] GetSystemMetrics (nIndex=42) returned 0
[0184.688] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0184.688] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0184.688] GetClientRect (in: hWnd=0x802d2, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0184.688] GetCurrentObject (hdc=0x9e0107b3, type=0x1) returned 0xb00017
[0184.688] GetCurrentObject (hdc=0x9e0107b3, type=0x2) returned 0x900010
[0184.688] GetCurrentObject (hdc=0x9e0107b3, type=0x7) returned 0x1e0507b9
[0184.688] GetCurrentObject (hdc=0x9e0107b3, type=0x6) returned 0x8a01c2
[0184.688] SaveDC (hdc=0x9e0107b3) returned 2
[0184.689] GetNearestColor (hdc=0x9e0107b3, color=0xf0f0f0) returned 0xf0f0f0
[0184.689] CreateSolidBrush (color=0xf0f0f0) returned 0xcf10078d
[0184.689] FillRect (hDC=0x9e0107b3, lprc=0x53d760, hbr=0xcf10078d) returned 1
[0184.689] DeleteObject (ho=0xcf10078d) returned 1
[0184.689] RestoreDC (hdc=0x9e0107b3, nSavedDC=-1) returned 1
[0184.689] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0184.689] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0184.689] GetSystemMetrics (nIndex=42) returned 0
[0184.689] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0184.689] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0184.689] GetClientRect (in: hWnd=0x802d2, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0184.689] GetCurrentObject (hdc=0x9e0107b3, type=0x1) returned 0xb00017
[0184.689] GetCurrentObject (hdc=0x9e0107b3, type=0x2) returned 0x900010
[0184.689] GetCurrentObject (hdc=0x9e0107b3, type=0x7) returned 0x1e0507b9
[0184.689] GetCurrentObject (hdc=0x9e0107b3, type=0x6) returned 0x8a01c2
[0184.689] SaveDC (hdc=0x9e0107b3) returned 2
[0184.689] GetNearestColor (hdc=0x9e0107b3, color=0xf0f0f0) returned 0xf0f0f0
[0184.690] CreateSolidBrush (color=0xf0f0f0) returned 0xd010078d
[0184.690] FillRect (hDC=0x9e0107b3, lprc=0x53d700, hbr=0xd010078d) returned 1
[0184.690] DeleteObject (ho=0xd010078d) returned 1
[0184.690] RestoreDC (hdc=0x9e0107b3, nSavedDC=-1) returned 1
[0184.690] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0184.690] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0184.690] GetSystemMetrics (nIndex=42) returned 0
[0184.690] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0184.690] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0184.690] RestoreDC (hdc=0x9e0107b3, nSavedDC=-1) returned 1
[0184.690] GdipReleaseDC (graphics=0x5da0378, hdc=0x9e0107b3) returned 0x0
[0184.690] IsAppThemed () returned 0x1
[0184.690] GetThemeAppProperties () returned 0x3
[0184.690] GetThemeAppProperties () returned 0x3
[0184.690] IsAppThemed () returned 0x1
[0184.691] GetThemeAppProperties () returned 0x3
[0184.691] GetThemeAppProperties () returned 0x3
[0184.691] IsThemePartDefined () returned 0x1
[0184.691] GdipCreateRegion (region=0x53dc80) returned 0x0
[0184.691] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.691] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0184.691] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0184.691] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc98) returned 0x0
[0184.691] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0184.691] LocalFree (hMem=0x89ec80) returned 0x0
[0184.691] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0184.691] LocalFree (hMem=0x89ee08) returned 0x0
[0184.691] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0184.691] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcc0) returned 0x0
[0184.691] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcb0) returned 0x0
[0184.692] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dcb0) returned 0x0
[0184.692] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.692] GdipGetDC (graphics=0x5da0378, hdc=0x53dcc8) returned 0x0
[0184.692] GetCurrentObject (hdc=0x9e0107b3, type=0x1) returned 0xb00017
[0184.692] GetCurrentObject (hdc=0x9e0107b3, type=0x2) returned 0x900010
[0184.692] GetCurrentObject (hdc=0x9e0107b3, type=0x7) returned 0x1e0507b9
[0184.692] GetCurrentObject (hdc=0x9e0107b3, type=0x6) returned 0x8a01c2
[0184.692] SaveDC (hdc=0x9e0107b3) returned 1
[0184.692] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdf04053e
[0184.692] GetClipRgn (hdc=0x9e0107b3, hrgn=0xdf04053e) returned 0
[0184.692] SelectClipRgn (hdc=0x9e0107b3, hrgn=0x100407a1) returned 2
[0184.692] DeleteObject (ho=0xdf04053e) returned 1
[0184.692] DeleteObject (ho=0x100407a1) returned 1
[0184.692] OffsetViewportOrgEx (in: hdc=0x9e0107b3, x=0, y=0, lppt=0x23ff1a0 | out: lppt=0x23ff1a0) returned 1
[0184.693] IsAppThemed () returned 0x1
[0184.693] GetThemeAppProperties () returned 0x3
[0184.693] GetThemeAppProperties () returned 0x3
[0184.693] DrawThemeBackground () returned 0x0
[0184.693] RestoreDC (hdc=0x9e0107b3, nSavedDC=-1) returned 1
[0184.694] GdipReleaseDC (graphics=0x5da0378, hdc=0x9e0107b3) returned 0x0
[0184.694] GdipCreateRegion (region=0x53dc84) returned 0x0
[0184.694] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.694] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0184.694] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0184.694] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53dc9c) returned 0x0
[0184.694] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0184.694] LocalFree (hMem=0x89ea88) returned 0x0
[0184.694] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ea88) returned 0x0
[0184.694] LocalFree (hMem=0x89ea88) returned 0x0
[0184.694] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0184.694] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcc4) returned 0x0
[0184.694] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dcb4) returned 0x0
[0184.694] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dcb4) returned 0x0
[0184.694] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.695] GdipGetDC (graphics=0x5da0378, hdc=0x53dccc) returned 0x0
[0184.695] GetCurrentObject (hdc=0x9e0107b3, type=0x1) returned 0xb00017
[0184.695] GetCurrentObject (hdc=0x9e0107b3, type=0x2) returned 0x900010
[0184.695] GetCurrentObject (hdc=0x9e0107b3, type=0x7) returned 0x1e0507b9
[0184.695] GetCurrentObject (hdc=0x9e0107b3, type=0x6) returned 0x8a01c2
[0184.695] SaveDC (hdc=0x9e0107b3) returned 1
[0184.695] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x110407a1
[0184.695] GetClipRgn (hdc=0x9e0107b3, hrgn=0x110407a1) returned 0
[0184.695] SelectClipRgn (hdc=0x9e0107b3, hrgn=0xe004053e) returned 2
[0184.695] DeleteObject (ho=0x110407a1) returned 1
[0184.695] DeleteObject (ho=0xe004053e) returned 1
[0184.695] OffsetViewportOrgEx (in: hdc=0x9e0107b3, x=0, y=0, lppt=0x23ff474 | out: lppt=0x23ff474) returned 1
[0184.695] IsAppThemed () returned 0x1
[0184.695] GetThemeAppProperties () returned 0x3
[0184.695] GetThemeAppProperties () returned 0x3
[0184.695] GetThemeBackgroundContentRect () returned 0x0
[0184.695] RestoreDC (hdc=0x9e0107b3, nSavedDC=-1) returned 1
[0184.696] GdipReleaseDC (graphics=0x5da0378, hdc=0x9e0107b3) returned 0x0
[0184.696] IsAppThemed () returned 0x1
[0184.696] GetThemeAppProperties () returned 0x3
[0184.696] GetThemeAppProperties () returned 0x3
[0184.696] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53de00) returned 0x0
[0184.696] GdipGetDC (graphics=0x5da0378, hdc=0x53ddec) returned 0x0
[0184.696] GetCurrentObject (hdc=0x9e0107b3, type=0x1) returned 0xb00017
[0184.696] GetCurrentObject (hdc=0x9e0107b3, type=0x2) returned 0x900010
[0184.696] GetCurrentObject (hdc=0x9e0107b3, type=0x7) returned 0x1e0507b9
[0184.696] GetCurrentObject (hdc=0x9e0107b3, type=0x6) returned 0x8a01c2
[0184.696] SaveDC (hdc=0x9e0107b3) returned 1
[0184.696] GetTextAlign (hdc=0x9e0107b3) returned 0x0
[0184.696] GetTextColor (hdc=0x9e0107b3) returned 0x0
[0184.696] GetCurrentObject (hdc=0x9e0107b3, type=0x6) returned 0x8a01c2
[0184.696] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0184.697] SelectObject (hdc=0x9e0107b3, h=0x730a066d) returned 0x8a01c2
[0184.697] GetBkMode (hdc=0x9e0107b3) returned 2
[0184.697] SetBkMode (hdc=0x9e0107b3, mode=1) returned 2
[0184.697] DrawTextExW (in: hdc=0x9e0107b3, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x23ff814 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0184.697] DrawTextExW (in: hdc=0x9e0107b3, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x23ff814 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0184.697] RestoreDC (hdc=0x9e0107b3, nSavedDC=-1) returned 1
[0184.698] GdipReleaseDC (graphics=0x5da0378, hdc=0x9e0107b3) returned 0x0
[0184.698] GetFocus () returned 0x702d8
[0184.698] IsAppThemed () returned 0x1
[0184.698] GetThemeAppProperties () returned 0x3
[0184.698] GetThemeAppProperties () returned 0x3
[0184.698] GdipGetDC (graphics=0x5da0378, hdc=0x53dfd8) returned 0x0
[0184.698] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x9e0107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0184.698] GdipReleaseDC (graphics=0x5da0378, hdc=0x9e0107b3) returned 0x0
[0184.698] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0184.698] SelectObject (hdc=0x9e0107b3, h=0x85000f) returned 0x1e0507b9
[0184.698] DeleteDC (hdc=0x9e0107b3) returned 1
[0184.698] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0184.698] EndPaint (hWnd=0x702d8, lpPaint=0x53df7c) returned 1
[0184.699] MapWindowPoints (in: hWndFrom=0x702d8, hWndTo=0x0, lpPoints=0x23ff910, cPoints=0x1 | out: lpPoints=0x23ff910) returned 25756481
[0184.699] WindowFromPoint (Point=0x35b) returned 0x702d8
[0184.700] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x84, wParam=0x0, lParam=0x18e035b) returned 0x1
[0184.700] NotifyWinEvent (event=0x800a, hwnd=0x702d8, idObject=-4, idChild=0)
[0184.700] NotifyWinEvent (event=0x800c, hwnd=0x702d8, idObject=-4, idChild=0)
[0184.700] GetWindowTextLengthW (hWnd=0xc013e) returned 0
[0184.700] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0184.700] GetSystemMetrics (nIndex=42) returned 0
[0184.700] GetWindowTextW (in: hWnd=0xc013e, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0184.700] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0184.700] SendMessageW (hWnd=0x802d2, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0184.700] GetCapture () returned 0x702d8
[0184.700] ReleaseCapture () returned 1
[0184.700] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0184.700] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0184.701] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x84, wParam=0x0, lParam=0x18e035b) returned 0x1
[0184.701] IsWindow (hWnd=0x70036) returned 1
[0184.701] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0184.702] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0184.702] IsWindow (hWnd=0x70036) returned 1
[0184.702] SetActiveWindow (hWnd=0x70036) returned 0x802d2
[0184.702] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0184.704] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0184.705] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0184.705] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0184.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0184.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0184.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0184.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x802d2) returned 0x1
[0184.709] GetFocus () returned 0x702d8
[0184.709] SetFocus (hWnd=0x202c6) returned 0x702d8
[0184.716] GetFocus () returned 0x202c6
[0184.716] IsChild (hWndParent=0x802d2, hWnd=0x202c6) returned 0
[0184.716] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0184.716] GetCapture () returned 0x0
[0184.716] InvalidateRect (hWnd=0x702d8, lpRect=0x0, bErase=0) returned 1
[0184.717] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0184.719] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0184.721] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0184.721] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0184.721] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0184.721] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0184.722] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0184.722] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x702d8, lParam=0x0) returned 0x0
[0184.722] GetStockObject (i=5) returned 0x900015
[0184.722] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0184.722] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8da7a8) returned 0x7
[0184.722] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0184.722] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0184.722] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0184.722] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0184.728] IsWindow (hWnd=0x202c6) returned 1
[0184.728] SetFocus (hWnd=0x202c6) returned 0x202c6
[0184.728] GetWindowLongW (hWnd=0x802d2, nIndex=-8) returned 458806
[0184.728] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0184.728] GetCurrentThreadId () returned 0x11d0
[0184.728] IsWindow (hWnd=0x70036) returned 1
[0184.728] IsWindow (hWnd=0x70036) returned 1
[0184.728] IsWindowVisible (hWnd=0x70036) returned 1
[0184.728] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0184.728] GetFocus () returned 0x202c6
[0184.728] IsChild (hWndParent=0x802d2, hWnd=0x202c6) returned 0
[0184.728] ShowWindow (hWnd=0x802d2, nCmdShow=0) returned 1
[0184.729] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0184.729] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0184.731] GetWindowPlacement (in: hWnd=0x802d2, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0184.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0184.731] GetClientRect (in: hWnd=0x802d2, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0184.731] GetWindowRect (in: hWnd=0x802d2, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0184.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0184.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0184.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0184.733] GetWindowLongW (hWnd=0x802d2, nIndex=-20) returned 327937
[0184.733] DestroyWindow (hWnd=0x802d2) returned 1
[0184.733] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0184.734] GetWindowTextLengthW (hWnd=0x802d2) returned 10
[0184.734] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0184.734] GetSystemMetrics (nIndex=42) returned 0
[0184.734] GetWindowTextW (in: hWnd=0x802d2, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0184.734] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0184.735] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0184.735] SendMessageW (hWnd=0xc013e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0184.735] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0184.735] SendMessageW (hWnd=0xc013e, Msg=0xb0, wParam=0x23e1920, lParam=0x53e518) returned 0x0
[0184.735] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xb0, wParam=0x23e1920, lParam=0x53e518) returned 0x0
[0184.735] GetWindowTextLengthW (hWnd=0xc013e) returned 0
[0184.735] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0184.735] GetSystemMetrics (nIndex=42) returned 0
[0184.735] GetWindowTextW (in: hWnd=0xc013e, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0184.735] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0184.735] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0184.735] GetWindowThreadProcessId (in: hWnd=0x400ec, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0184.735] GetWindow (hWnd=0x400ec, uCmd=0x5) returned 0x0
[0184.735] GetWindowLongW (hWnd=0x400ec, nIndex=-20) returned 65792
[0184.735] DestroyWindow (hWnd=0x400ec) returned 1
[0184.735] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x400ec, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0184.736] GetWindowTextLengthW (hWnd=0x400ec) returned 25
[0184.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x400ec, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0184.736] GetSystemMetrics (nIndex=42) returned 0
[0184.736] GetWindowTextW (in: hWnd=0x400ec, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0184.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x400ec, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0184.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x400ec, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0184.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x400ec, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0184.737] GetWindowTextLengthW (hWnd=0x902d6) returned 16
[0184.737] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0184.737] GetSystemMetrics (nIndex=42) returned 0
[0184.737] GetWindowTextW (in: hWnd=0x902d6, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0184.737] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0184.738] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0184.738] InvalidateRect (hWnd=0x702d8, lpRect=0x0, bErase=0) returned 1
[0184.738] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0184.738] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0184.738] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0184.740] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x902d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0184.755] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702d8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0184.756] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0184.758] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x802d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0184.760] GetProcessWindowStation () returned 0x13c
[0184.760] GetActiveWindow () returned 0x70036
[0184.761] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0184.761] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0184.761] GetCurrentThreadId () returned 0x11d0
[0184.761] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf44fe, lParam=0x0) returned 1
[0184.761] IsWindowVisible (hWnd=0x70036) returned 1
[0184.761] IsWindowEnabled (hWnd=0x70036) returned 1
[0184.761] IsWindowVisible (hWnd=0x602b6) returned 0
[0184.761] IsWindowVisible (hWnd=0x901f8) returned 0
[0184.761] IsWindowVisible (hWnd=0x202d0) returned 0
[0184.761] IsWindowVisible (hWnd=0x202d4) returned 0
[0184.761] GetActiveWindow () returned 0x70036
[0184.762] GetFocus () returned 0x202c6
[0184.762] IsWindow (hWnd=0x70036) returned 1
[0184.762] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0184.762] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0184.762] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0184.762] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0184.764] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0184.780] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x902d2) returned 0x1
[0184.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0184.783] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0184.786] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x802c8, lParam=0x0) returned 0x0
[0184.786] GetCapture () returned 0x0
[0184.786] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0184.794] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0184.796] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0184.796] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0184.801] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0xf0105ee
[0184.801] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0184.801] CreateCompatibleDC (hdc=0xf0105ee) returned 0xb50107af
[0184.801] SelectObject (hdc=0xb50107af, h=0x1e0507b9) returned 0x85000f
[0184.801] GdipCreateFromHDC (hdc=0xb50107af, graphics=0x53e108) returned 0x0
[0184.801] GdipTranslateWorldTransform (graphics=0x5da0378, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0184.801] GdipSetClipRectI (graphics=0x5da0378, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0184.801] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0184.802] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0184.802] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e168) returned 0x0
[0184.802] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0184.802] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0184.802] LocalFree (hMem=0x89ec80) returned 0x0
[0184.802] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0184.802] GdipCreateRegion (region=0x53e150) returned 0x0
[0184.802] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.802] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53e15c) returned 0x0
[0184.802] GdipSaveGraphics (graphics=0x5da0378, state=0x53e188) returned 0x0
[0184.802] GdipRestoreGraphics (graphics=0x5da0378, state=0xfd3b0dbd) returned 0x0
[0184.802] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.802] GdipGetDC (graphics=0x5da0378, hdc=0x53df74) returned 0x0
[0184.802] GetCurrentObject (hdc=0xb50107af, type=0x1) returned 0xb00017
[0184.809] GetCurrentObject (hdc=0xb50107af, type=0x2) returned 0x900010
[0184.809] GetCurrentObject (hdc=0xb50107af, type=0x7) returned 0x1e0507b9
[0184.809] GetCurrentObject (hdc=0xb50107af, type=0x6) returned 0x8a01c2
[0184.809] SaveDC (hdc=0xb50107af) returned 1
[0184.810] GetNearestColor (hdc=0xb50107af, color=0xff) returned 0xff
[0184.810] GetNearestColor (hdc=0xb50107af, color=0x55) returned 0x55
[0184.810] GetNearestColor (hdc=0xb50107af, color=0x0) returned 0x0
[0184.810] GetNearestColor (hdc=0xb50107af, color=0x55) returned 0x55
[0184.810] GetNearestColor (hdc=0xb50107af, color=0x0) returned 0x0
[0184.840] GetNearestColor (hdc=0xb50107af, color=0x8080ff) returned 0x8080ff
[0184.841] GetNearestColor (hdc=0xb50107af, color=0x7373e5) returned 0x7373e5
[0184.841] GetNearestColor (hdc=0xb50107af, color=0xe5) returned 0xe5
[0184.841] GetNearestColor (hdc=0xb50107af, color=0x0) returned 0x0
[0184.841] RestoreDC (hdc=0xb50107af, nSavedDC=-1) returned 1
[0184.841] GdipReleaseDC (graphics=0x5da0378, hdc=0xb50107af) returned 0x0
[0184.841] IsAppThemed () returned 0x1
[0184.841] GetThemeAppProperties () returned 0x3
[0184.841] GetThemeAppProperties () returned 0x3
[0184.841] IsAppThemed () returned 0x1
[0184.841] GetThemeAppProperties () returned 0x3
[0184.841] GetThemeAppProperties () returned 0x3
[0184.841] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0184.841] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2400c14 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0184.842] IsAppThemed () returned 0x1
[0184.842] GetThemeAppProperties () returned 0x3
[0184.842] GetThemeAppProperties () returned 0x3
[0184.842] IsAppThemed () returned 0x1
[0184.842] GetThemeAppProperties () returned 0x3
[0184.842] GetThemeAppProperties () returned 0x3
[0184.842] GetFocus () returned 0x802c8
[0184.842] IsAppThemed () returned 0x1
[0184.842] GetThemeAppProperties () returned 0x3
[0184.842] GetThemeAppProperties () returned 0x3
[0184.842] IsAppThemed () returned 0x1
[0184.842] GetThemeAppProperties () returned 0x3
[0184.842] GetThemeAppProperties () returned 0x3
[0184.842] IsThemePartDefined () returned 0x1
[0184.842] IsAppThemed () returned 0x1
[0184.843] GetThemeAppProperties () returned 0x3
[0184.843] GetThemeAppProperties () returned 0x3
[0184.843] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0184.843] IsAppThemed () returned 0x1
[0184.843] GetThemeAppProperties () returned 0x3
[0184.843] GetThemeAppProperties () returned 0x3
[0184.843] IsAppThemed () returned 0x1
[0184.843] GetThemeAppProperties () returned 0x3
[0184.843] GetThemeAppProperties () returned 0x3
[0184.843] IsThemePartDefined () returned 0x1
[0184.843] GdipCreateRegion (region=0x53de78) returned 0x0
[0184.843] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.843] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0184.843] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0184.843] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53de90) returned 0x0
[0184.843] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0184.843] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89ec80) returned 0x0
[0184.843] LocalFree (hMem=0x89ec80) returned 0x0
[0184.843] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0184.844] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0184.844] LocalFree (hMem=0x89eac0) returned 0x0
[0184.844] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0184.844] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53deb8) returned 0x0
[0184.844] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53dea8) returned 0x0
[0184.844] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53dea8) returned 0x0
[0184.844] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.844] GdipGetDC (graphics=0x5da0378, hdc=0x53dec0) returned 0x0
[0184.844] GetCurrentObject (hdc=0xb50107af, type=0x1) returned 0xb00017
[0184.844] GetCurrentObject (hdc=0xb50107af, type=0x2) returned 0x900010
[0184.844] GetCurrentObject (hdc=0xb50107af, type=0x7) returned 0x1e0507b9
[0184.844] GetCurrentObject (hdc=0xb50107af, type=0x6) returned 0x8a01c2
[0184.844] SaveDC (hdc=0xb50107af) returned 1
[0184.844] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe104053e
[0184.844] GetClipRgn (hdc=0xb50107af, hrgn=0xe104053e) returned 0
[0184.844] SelectClipRgn (hdc=0xb50107af, hrgn=0x170407a1) returned 2
[0184.845] DeleteObject (ho=0xe104053e) returned 1
[0184.845] DeleteObject (ho=0x170407a1) returned 1
[0184.845] OffsetViewportOrgEx (in: hdc=0xb50107af, x=0, y=0, lppt=0x24012c4 | out: lppt=0x24012c4) returned 1
[0184.845] DrawThemeParentBackground () returned 0x0
[0184.845] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0184.845] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0184.845] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0184.845] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0184.845] GetSystemMetrics (nIndex=42) returned 0
[0184.845] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0184.845] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0184.845] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0184.845] GetCurrentObject (hdc=0xb50107af, type=0x1) returned 0xb00017
[0184.845] GetCurrentObject (hdc=0xb50107af, type=0x2) returned 0x900010
[0184.845] GetCurrentObject (hdc=0xb50107af, type=0x7) returned 0x1e0507b9
[0184.846] GetCurrentObject (hdc=0xb50107af, type=0x6) returned 0x8a01c2
[0184.846] SaveDC (hdc=0xb50107af) returned 2
[0184.846] GetNearestColor (hdc=0xb50107af, color=0xff) returned 0xff
[0184.846] CreateSolidBrush (color=0xff) returned 0xd110078d
[0184.846] FillRect (hDC=0xb50107af, lprc=0x53d8d8, hbr=0xd110078d) returned 1
[0184.846] DeleteObject (ho=0xd110078d) returned 1
[0184.846] RestoreDC (hdc=0xb50107af, nSavedDC=-1) returned 1
[0184.846] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0184.846] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0184.846] GetSystemMetrics (nIndex=42) returned 0
[0184.846] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0184.846] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0184.846] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0184.846] GetCurrentObject (hdc=0xb50107af, type=0x1) returned 0xb00017
[0184.846] GetCurrentObject (hdc=0xb50107af, type=0x2) returned 0x900010
[0184.847] GetCurrentObject (hdc=0xb50107af, type=0x7) returned 0x1e0507b9
[0184.847] GetCurrentObject (hdc=0xb50107af, type=0x6) returned 0x8a01c2
[0184.847] SaveDC (hdc=0xb50107af) returned 2
[0184.847] GetNearestColor (hdc=0xb50107af, color=0xff) returned 0xff
[0184.847] CreateSolidBrush (color=0xff) returned 0xd210078d
[0184.847] FillRect (hDC=0xb50107af, lprc=0x53d878, hbr=0xd210078d) returned 1
[0184.847] DeleteObject (ho=0xd210078d) returned 1
[0184.847] RestoreDC (hdc=0xb50107af, nSavedDC=-1) returned 1
[0184.847] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0184.847] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0184.847] GetSystemMetrics (nIndex=42) returned 0
[0184.847] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0184.847] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0184.847] RestoreDC (hdc=0xb50107af, nSavedDC=-1) returned 1
[0184.848] GdipReleaseDC (graphics=0x5da0378, hdc=0xb50107af) returned 0x0
[0184.848] IsAppThemed () returned 0x1
[0184.848] GetThemeAppProperties () returned 0x3
[0184.848] GetThemeAppProperties () returned 0x3
[0184.848] IsAppThemed () returned 0x1
[0184.848] GetThemeAppProperties () returned 0x3
[0184.848] GetThemeAppProperties () returned 0x3
[0184.848] IsThemePartDefined () returned 0x1
[0184.848] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0184.848] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.848] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0184.848] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d93a48) returned 0x0
[0184.848] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de14) returned 0x0
[0184.848] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0184.848] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0184.848] LocalFree (hMem=0x89ee08) returned 0x0
[0184.848] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0184.848] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0184.849] LocalFree (hMem=0x89ec80) returned 0x0
[0184.849] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0184.849] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de3c) returned 0x0
[0184.849] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de2c) returned 0x0
[0184.849] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53de2c) returned 0x0
[0184.849] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.849] GdipGetDC (graphics=0x5da0378, hdc=0x53de44) returned 0x0
[0184.849] GetCurrentObject (hdc=0xb50107af, type=0x1) returned 0xb00017
[0184.849] GetCurrentObject (hdc=0xb50107af, type=0x2) returned 0x900010
[0184.849] GetCurrentObject (hdc=0xb50107af, type=0x7) returned 0x1e0507b9
[0184.849] GetCurrentObject (hdc=0xb50107af, type=0x6) returned 0x8a01c2
[0184.888] SaveDC (hdc=0xb50107af) returned 1
[0184.888] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x180407a1
[0184.888] GetClipRgn (hdc=0xb50107af, hrgn=0x180407a1) returned 0
[0184.888] SelectClipRgn (hdc=0xb50107af, hrgn=0xe304053e) returned 2
[0184.888] DeleteObject (ho=0x180407a1) returned 1
[0184.888] DeleteObject (ho=0xe304053e) returned 1
[0184.888] OffsetViewportOrgEx (in: hdc=0xb50107af, x=0, y=0, lppt=0x2401b28 | out: lppt=0x2401b28) returned 1
[0184.888] IsAppThemed () returned 0x1
[0184.888] GetThemeAppProperties () returned 0x3
[0184.889] GetThemeAppProperties () returned 0x3
[0184.889] DrawThemeBackground () returned 0x0
[0184.889] RestoreDC (hdc=0xb50107af, nSavedDC=-1) returned 1
[0184.889] GdipReleaseDC (graphics=0x5da0378, hdc=0xb50107af) returned 0x0
[0184.889] GdipCreateRegion (region=0x53de00) returned 0x0
[0184.889] GdipGetClip (graphics=0x5da0378, region=0x5d9d8f8) returned 0x0
[0184.889] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0184.889] GdipGetWorldTransform (graphics=0x5da0378, matrix=0x5d92cc0) returned 0x0
[0184.889] GdipIsMatrixIdentity (matrix=0x5d92cc0, result=0x53de18) returned 0x0
[0184.889] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0184.889] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0184.889] LocalFree (hMem=0x89eac0) returned 0x0
[0184.889] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0184.889] GdipGetMatrixElements (matrix=0x5d92cc0, matrixOut=0x89eac0) returned 0x0
[0184.889] LocalFree (hMem=0x89eac0) returned 0x0
[0184.889] GdipDeleteMatrix (matrix=0x5d92cc0) returned 0x0
[0184.890] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de40) returned 0x0
[0184.890] GdipIsInfiniteRegion (region=0x5d9d8f8, graphics=0x5da0378, result=0x53de30) returned 0x0
[0184.890] GdipGetRegionHRgn (region=0x5d9d8f8, graphics=0x5da0378, hRgn=0x53de30) returned 0x0
[0184.890] GdipDeleteRegion (region=0x5d9d8f8) returned 0x0
[0184.890] GdipGetDC (graphics=0x5da0378, hdc=0x53de48) returned 0x0
[0184.890] GetCurrentObject (hdc=0xb50107af, type=0x1) returned 0xb00017
[0184.890] GetCurrentObject (hdc=0xb50107af, type=0x2) returned 0x900010
[0184.890] GetCurrentObject (hdc=0xb50107af, type=0x7) returned 0x1e0507b9
[0184.890] GetCurrentObject (hdc=0xb50107af, type=0x6) returned 0x8a01c2
[0184.890] SaveDC (hdc=0xb50107af) returned 1
[0184.890] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe404053e
[0184.890] GetClipRgn (hdc=0xb50107af, hrgn=0xe404053e) returned 0
[0184.890] SelectClipRgn (hdc=0xb50107af, hrgn=0x190407a1) returned 2
[0184.890] DeleteObject (ho=0xe404053e) returned 1
[0184.890] DeleteObject (ho=0x190407a1) returned 1
[0184.890] OffsetViewportOrgEx (in: hdc=0xb50107af, x=0, y=0, lppt=0x2401dfc | out: lppt=0x2401dfc) returned 1
[0184.891] IsAppThemed () returned 0x1
[0184.891] GetThemeAppProperties () returned 0x3
[0184.891] GetThemeAppProperties () returned 0x3
[0184.891] GetThemeBackgroundContentRect () returned 0x0
[0184.891] RestoreDC (hdc=0xb50107af, nSavedDC=-1) returned 1
[0184.891] GdipReleaseDC (graphics=0x5da0378, hdc=0xb50107af) returned 0x0
[0184.891] IsAppThemed () returned 0x1
[0184.891] GetThemeAppProperties () returned 0x3
[0184.891] GetThemeAppProperties () returned 0x3
[0184.891] GdipGetTextRenderingHint (graphics=0x5da0378, mode=0x53df7c) returned 0x0
[0184.891] GdipGetDC (graphics=0x5da0378, hdc=0x53df68) returned 0x0
[0184.891] GetCurrentObject (hdc=0xb50107af, type=0x1) returned 0xb00017
[0184.891] GetCurrentObject (hdc=0xb50107af, type=0x2) returned 0x900010
[0184.891] GetCurrentObject (hdc=0xb50107af, type=0x7) returned 0x1e0507b9
[0184.891] GetCurrentObject (hdc=0xb50107af, type=0x6) returned 0x8a01c2
[0184.891] SaveDC (hdc=0xb50107af) returned 1
[0184.891] GetTextAlign (hdc=0xb50107af) returned 0x0
[0184.892] GetTextColor (hdc=0xb50107af) returned 0x0
[0184.892] GetCurrentObject (hdc=0xb50107af, type=0x6) returned 0x8a01c2
[0184.892] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0184.892] SelectObject (hdc=0xb50107af, h=0x450a0799) returned 0x8a01c2
[0184.892] GetBkMode (hdc=0xb50107af) returned 2
[0184.892] SetBkMode (hdc=0xb50107af, mode=1) returned 2
[0184.892] DrawTextExW (in: hdc=0xb50107af, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x240219c | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0184.892] DrawTextExW (in: hdc=0xb50107af, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x240219c | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0184.893] RestoreDC (hdc=0xb50107af, nSavedDC=-1) returned 1
[0184.893] GdipReleaseDC (graphics=0x5da0378, hdc=0xb50107af) returned 0x0
[0184.893] GetFocus () returned 0x802c8
[0184.893] IsAppThemed () returned 0x1
[0184.893] GetThemeAppProperties () returned 0x3
[0184.893] GetThemeAppProperties () returned 0x3
[0184.893] GdipGetDC (graphics=0x5da0378, hdc=0x53e148) returned 0x0
[0184.893] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xb50107af, x1=0, y1=0, rop=0xcc0020) returned 1
[0184.893] GdipReleaseDC (graphics=0x5da0378, hdc=0xb50107af) returned 0x0
[0184.893] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0184.893] SelectObject (hdc=0xb50107af, h=0x85000f) returned 0x1e0507b9
[0184.893] DeleteDC (hdc=0xb50107af) returned 1
[0184.894] GdipDeleteGraphics (graphics=0x5da0378) returned 0x0
[0184.894] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0186.555] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x20, wParam=0x70036, lParam=0x200fffe) returned 0x0
[0190.474] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0190.474] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0190.481] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x902d2) returned 0x1
[0190.485] GetFocus () returned 0x902d2
[0190.485] GetAncestor (hwnd=0x902d2, gaFlags=0x1) returned 0x10010
[0190.485] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0190.485] SetFocus (hWnd=0x202c6) returned 0x0
[0190.488] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0190.499] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0190.499] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0190.500] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0190.500] GetFocus () returned 0x70036
[0190.501] SetFocus (hWnd=0x202c6) returned 0x0
[0190.509] IsWindow (hWnd=0x70036) returned 1
[0190.509] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0190.510] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0190.510] IsWindow (hWnd=0x70036) returned 1
[0190.510] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0190.510] IsWindow (hWnd=0x202c6) returned 1
[0190.510] SetFocus (hWnd=0x202c6) returned 0x70036
[0190.510] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0190.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0190.513] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0190.515] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0190.515] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0190.515] GetStockObject (i=5) returned 0x900015
[0190.515] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0190.515] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8da988) returned 0x7
[0190.515] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0190.515] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0190.516] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0190.516] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0190.518] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0190.518] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0190.518] GetFocus () returned 0x202c6
[0190.518] GetCapture () returned 0x0
[0190.518] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.519] IsWindowUnicode (hWnd=0x202c6) returned 1
[0190.519] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.519] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.519] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.519] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.520] IsWindowUnicode (hWnd=0x202c6) returned 1
[0190.520] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.520] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.520] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.521] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0190.521] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0190.521] CreateCompatibleDC (hdc=0xf0105ee) returned 0xc70107ab
[0190.531] SelectObject (hdc=0xc70107ab, h=0x1e0507b9) returned 0x85000f
[0190.531] GdipCreateFromHDC (hdc=0xc70107ab, graphics=0x53e958) returned 0x0
[0190.532] GdipTranslateWorldTransform (graphics=0x5d920e8, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0190.532] GdipSetClipRectI (graphics=0x5d920e8, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0190.533] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0190.533] GdipGetWorldTransform (graphics=0x5d920e8, matrix=0x5d93a48) returned 0x0
[0190.533] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e9b8) returned 0x0
[0190.533] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0190.533] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0190.533] LocalFree (hMem=0x89ec80) returned 0x0
[0190.533] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0190.533] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0190.533] GdipGetClip (graphics=0x5d920e8, region=0x5d93ef0) returned 0x0
[0190.533] GdipIsInfiniteRegion (region=0x5d93ef0, graphics=0x5d920e8, result=0x53e9ac) returned 0x0
[0190.533] GdipSaveGraphics (graphics=0x5d920e8, state=0x53e9d8) returned 0x0
[0190.534] GdipRestoreGraphics (graphics=0x5d920e8, state=0xfd390dbd) returned 0x0
[0190.534] GdipDeleteRegion (region=0x5d93ef0) returned 0x0
[0190.534] GdipGetDC (graphics=0x5d920e8, hdc=0x53e7c4) returned 0x0
[0190.534] GetCurrentObject (hdc=0xc70107ab, type=0x1) returned 0xb00017
[0190.534] GetCurrentObject (hdc=0xc70107ab, type=0x2) returned 0x900010
[0190.534] GetCurrentObject (hdc=0xc70107ab, type=0x7) returned 0x1e0507b9
[0190.534] GetCurrentObject (hdc=0xc70107ab, type=0x6) returned 0x8a01c2
[0190.534] SaveDC (hdc=0xc70107ab) returned 1
[0190.535] GetNearestColor (hdc=0xc70107ab, color=0xff) returned 0xff
[0190.535] GetNearestColor (hdc=0xc70107ab, color=0x55) returned 0x55
[0190.535] GetNearestColor (hdc=0xc70107ab, color=0x0) returned 0x0
[0190.535] GetNearestColor (hdc=0xc70107ab, color=0x55) returned 0x55
[0190.535] GetNearestColor (hdc=0xc70107ab, color=0x0) returned 0x0
[0190.535] GetNearestColor (hdc=0xc70107ab, color=0x8080ff) returned 0x8080ff
[0190.535] GetNearestColor (hdc=0xc70107ab, color=0x7373e5) returned 0x7373e5
[0190.535] GetNearestColor (hdc=0xc70107ab, color=0xe5) returned 0xe5
[0190.535] GetNearestColor (hdc=0xc70107ab, color=0x0) returned 0x0
[0190.535] RestoreDC (hdc=0xc70107ab, nSavedDC=-1) returned 1
[0190.536] GdipReleaseDC (graphics=0x5d920e8, hdc=0xc70107ab) returned 0x0
[0190.536] IsAppThemed () returned 0x1
[0190.536] GetThemeAppProperties () returned 0x3
[0190.536] GetThemeAppProperties () returned 0x3
[0190.536] IsAppThemed () returned 0x1
[0190.536] GetThemeAppProperties () returned 0x3
[0190.536] GetThemeAppProperties () returned 0x3
[0190.536] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x22d75b8 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0190.537] IsAppThemed () returned 0x1
[0190.537] GetThemeAppProperties () returned 0x3
[0190.537] GetThemeAppProperties () returned 0x3
[0190.537] IsAppThemed () returned 0x1
[0190.537] GetThemeAppProperties () returned 0x3
[0190.537] GetThemeAppProperties () returned 0x3
[0190.537] GetFocus () returned 0x202c6
[0190.537] IsAppThemed () returned 0x1
[0190.537] GetThemeAppProperties () returned 0x3
[0190.537] GetThemeAppProperties () returned 0x3
[0190.538] IsAppThemed () returned 0x1
[0190.538] GetThemeAppProperties () returned 0x3
[0190.538] GetThemeAppProperties () returned 0x3
[0190.538] IsThemePartDefined () returned 0x1
[0190.538] IsAppThemed () returned 0x1
[0190.538] GetThemeAppProperties () returned 0x3
[0190.538] GetThemeAppProperties () returned 0x3
[0190.538] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0190.538] IsAppThemed () returned 0x1
[0190.538] GetThemeAppProperties () returned 0x3
[0190.538] GetThemeAppProperties () returned 0x3
[0190.538] IsAppThemed () returned 0x1
[0190.538] GetThemeAppProperties () returned 0x3
[0190.538] GetThemeAppProperties () returned 0x3
[0190.538] IsThemePartDefined () returned 0x1
[0190.538] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0190.538] GdipGetClip (graphics=0x5d920e8, region=0x5d93ef0) returned 0x0
[0190.539] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0190.539] GdipGetWorldTransform (graphics=0x5d920e8, matrix=0x5d93f80) returned 0x0
[0190.539] GdipIsMatrixIdentity (matrix=0x5d93f80, result=0x53e6e0) returned 0x0
[0190.539] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0190.539] GdipGetMatrixElements (matrix=0x5d93f80, matrixOut=0x89ea88) returned 0x0
[0190.539] LocalFree (hMem=0x89ea88) returned 0x0
[0190.539] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0190.539] GdipGetMatrixElements (matrix=0x5d93f80, matrixOut=0x89eee8) returned 0x0
[0190.539] LocalFree (hMem=0x89eee8) returned 0x0
[0190.539] GdipDeleteMatrix (matrix=0x5d93f80) returned 0x0
[0190.539] GdipIsInfiniteRegion (region=0x5d93ef0, graphics=0x5d920e8, result=0x53e708) returned 0x0
[0190.539] GdipIsInfiniteRegion (region=0x5d93ef0, graphics=0x5d920e8, result=0x53e6f8) returned 0x0
[0190.539] GdipGetRegionHRgn (region=0x5d93ef0, graphics=0x5d920e8, hRgn=0x53e6f8) returned 0x0
[0190.540] GdipDeleteRegion (region=0x5d93ef0) returned 0x0
[0190.540] GdipGetDC (graphics=0x5d920e8, hdc=0x53e710) returned 0x0
[0190.540] GetCurrentObject (hdc=0xc70107ab, type=0x1) returned 0xb00017
[0190.540] GetCurrentObject (hdc=0xc70107ab, type=0x2) returned 0x900010
[0190.540] GetCurrentObject (hdc=0xc70107ab, type=0x7) returned 0x1e0507b9
[0190.540] GetCurrentObject (hdc=0xc70107ab, type=0x6) returned 0x8a01c2
[0190.540] SaveDC (hdc=0xc70107ab) returned 1
[0190.540] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x240407a1
[0190.540] GetClipRgn (hdc=0xc70107ab, hrgn=0x240407a1) returned 0
[0190.540] SelectClipRgn (hdc=0xc70107ab, hrgn=0xec04053e) returned 2
[0190.540] DeleteObject (ho=0x240407a1) returned 1
[0190.540] DeleteObject (ho=0xec04053e) returned 1
[0190.540] OffsetViewportOrgEx (in: hdc=0xc70107ab, x=0, y=0, lppt=0x22d7c68 | out: lppt=0x22d7c68) returned 1
[0190.540] DrawThemeParentBackground () returned 0x0
[0190.541] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0190.541] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0190.541] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0190.541] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0190.541] GetSystemMetrics (nIndex=42) returned 0
[0190.541] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0190.541] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0190.541] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0190.541] GetCurrentObject (hdc=0xc70107ab, type=0x1) returned 0xb00017
[0190.541] GetCurrentObject (hdc=0xc70107ab, type=0x2) returned 0x900010
[0190.541] GetCurrentObject (hdc=0xc70107ab, type=0x7) returned 0x1e0507b9
[0190.541] GetCurrentObject (hdc=0xc70107ab, type=0x6) returned 0x8a01c2
[0190.541] SaveDC (hdc=0xc70107ab) returned 2
[0190.541] GetNearestColor (hdc=0xc70107ab, color=0xff) returned 0xff
[0190.542] CreateSolidBrush (color=0xff) returned 0xd410078d
[0190.542] FillRect (hDC=0xc70107ab, lprc=0x53e128, hbr=0xd410078d) returned 1
[0190.542] DeleteObject (ho=0xd410078d) returned 1
[0190.542] RestoreDC (hdc=0xc70107ab, nSavedDC=-1) returned 1
[0190.542] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0190.542] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0190.542] GetSystemMetrics (nIndex=42) returned 0
[0190.542] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0190.542] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0190.543] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0190.543] GetCurrentObject (hdc=0xc70107ab, type=0x1) returned 0xb00017
[0190.543] GetCurrentObject (hdc=0xc70107ab, type=0x2) returned 0x900010
[0190.543] GetCurrentObject (hdc=0xc70107ab, type=0x7) returned 0x1e0507b9
[0190.543] GetCurrentObject (hdc=0xc70107ab, type=0x6) returned 0x8a01c2
[0190.543] SaveDC (hdc=0xc70107ab) returned 2
[0190.543] GetNearestColor (hdc=0xc70107ab, color=0xff) returned 0xff
[0190.543] CreateSolidBrush (color=0xff) returned 0xd510078d
[0190.543] FillRect (hDC=0xc70107ab, lprc=0x53e0c8, hbr=0xd510078d) returned 1
[0190.543] DeleteObject (ho=0xd510078d) returned 1
[0190.543] RestoreDC (hdc=0xc70107ab, nSavedDC=-1) returned 1
[0190.543] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0190.543] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0190.543] GetSystemMetrics (nIndex=42) returned 0
[0190.543] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0190.543] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0190.544] RestoreDC (hdc=0xc70107ab, nSavedDC=-1) returned 1
[0190.544] GdipReleaseDC (graphics=0x5d920e8, hdc=0xc70107ab) returned 0x0
[0190.544] IsAppThemed () returned 0x1
[0190.544] GetThemeAppProperties () returned 0x3
[0190.544] GetThemeAppProperties () returned 0x3
[0190.544] IsAppThemed () returned 0x1
[0190.544] GetThemeAppProperties () returned 0x3
[0190.544] GetThemeAppProperties () returned 0x3
[0190.544] IsThemePartDefined () returned 0x1
[0190.544] GdipCreateRegion (region=0x53e64c) returned 0x0
[0190.544] GdipGetClip (graphics=0x5d920e8, region=0x5d93ef0) returned 0x0
[0190.544] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0190.544] GdipGetWorldTransform (graphics=0x5d920e8, matrix=0x5d93a48) returned 0x0
[0190.545] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e664) returned 0x0
[0190.545] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0190.545] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0190.545] LocalFree (hMem=0x89ea88) returned 0x0
[0190.545] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0190.545] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0190.545] LocalFree (hMem=0x89ea88) returned 0x0
[0190.545] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0190.545] GdipIsInfiniteRegion (region=0x5d93ef0, graphics=0x5d920e8, result=0x53e68c) returned 0x0
[0190.545] GdipIsInfiniteRegion (region=0x5d93ef0, graphics=0x5d920e8, result=0x53e67c) returned 0x0
[0190.545] GdipGetRegionHRgn (region=0x5d93ef0, graphics=0x5d920e8, hRgn=0x53e67c) returned 0x0
[0190.545] GdipDeleteRegion (region=0x5d93ef0) returned 0x0
[0190.545] GdipGetDC (graphics=0x5d920e8, hdc=0x53e694) returned 0x0
[0190.545] GetCurrentObject (hdc=0xc70107ab, type=0x1) returned 0xb00017
[0190.545] GetCurrentObject (hdc=0xc70107ab, type=0x2) returned 0x900010
[0190.545] GetCurrentObject (hdc=0xc70107ab, type=0x7) returned 0x1e0507b9
[0190.546] GetCurrentObject (hdc=0xc70107ab, type=0x6) returned 0x8a01c2
[0190.546] SaveDC (hdc=0xc70107ab) returned 1
[0190.546] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xed04053e
[0190.546] GetClipRgn (hdc=0xc70107ab, hrgn=0xed04053e) returned 0
[0190.546] SelectClipRgn (hdc=0xc70107ab, hrgn=0x260407a1) returned 2
[0190.546] DeleteObject (ho=0xed04053e) returned 1
[0190.546] DeleteObject (ho=0x260407a1) returned 1
[0190.546] OffsetViewportOrgEx (in: hdc=0xc70107ab, x=0, y=0, lppt=0x22d8f48 | out: lppt=0x22d8f48) returned 1
[0190.546] IsAppThemed () returned 0x1
[0190.546] GetThemeAppProperties () returned 0x3
[0190.546] GetThemeAppProperties () returned 0x3
[0190.546] DrawThemeBackground () returned 0x0
[0190.547] RestoreDC (hdc=0xc70107ab, nSavedDC=-1) returned 1
[0190.547] GdipReleaseDC (graphics=0x5d920e8, hdc=0xc70107ab) returned 0x0
[0190.547] GdipCreateRegion (region=0x53e650) returned 0x0
[0190.547] GdipGetClip (graphics=0x5d920e8, region=0x5d93ef0) returned 0x0
[0190.547] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0190.547] GdipGetWorldTransform (graphics=0x5d920e8, matrix=0x5d93f80) returned 0x0
[0190.547] GdipIsMatrixIdentity (matrix=0x5d93f80, result=0x53e668) returned 0x0
[0190.547] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0190.547] GdipGetMatrixElements (matrix=0x5d93f80, matrixOut=0x89ee40) returned 0x0
[0190.547] LocalFree (hMem=0x89ee40) returned 0x0
[0190.547] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0190.547] GdipGetMatrixElements (matrix=0x5d93f80, matrixOut=0x89ea88) returned 0x0
[0190.547] LocalFree (hMem=0x89ea88) returned 0x0
[0190.547] GdipDeleteMatrix (matrix=0x5d93f80) returned 0x0
[0190.548] GdipIsInfiniteRegion (region=0x5d93ef0, graphics=0x5d920e8, result=0x53e690) returned 0x0
[0190.548] GdipIsInfiniteRegion (region=0x5d93ef0, graphics=0x5d920e8, result=0x53e680) returned 0x0
[0190.548] GdipGetRegionHRgn (region=0x5d93ef0, graphics=0x5d920e8, hRgn=0x53e680) returned 0x0
[0190.548] GdipDeleteRegion (region=0x5d93ef0) returned 0x0
[0190.548] GdipGetDC (graphics=0x5d920e8, hdc=0x53e698) returned 0x0
[0190.548] GetCurrentObject (hdc=0xc70107ab, type=0x1) returned 0xb00017
[0190.548] GetCurrentObject (hdc=0xc70107ab, type=0x2) returned 0x900010
[0190.548] GetCurrentObject (hdc=0xc70107ab, type=0x7) returned 0x1e0507b9
[0190.548] GetCurrentObject (hdc=0xc70107ab, type=0x6) returned 0x8a01c2
[0190.548] SaveDC (hdc=0xc70107ab) returned 1
[0190.548] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x270407a1
[0190.548] GetClipRgn (hdc=0xc70107ab, hrgn=0x270407a1) returned 0
[0190.548] SelectClipRgn (hdc=0xc70107ab, hrgn=0xee04053e) returned 2
[0190.548] DeleteObject (ho=0x270407a1) returned 1
[0190.548] DeleteObject (ho=0xee04053e) returned 1
[0190.549] OffsetViewportOrgEx (in: hdc=0xc70107ab, x=0, y=0, lppt=0x22d921c | out: lppt=0x22d921c) returned 1
[0190.549] IsAppThemed () returned 0x1
[0190.549] GetThemeAppProperties () returned 0x3
[0190.549] GetThemeAppProperties () returned 0x3
[0190.549] GetThemeBackgroundContentRect () returned 0x0
[0190.549] RestoreDC (hdc=0xc70107ab, nSavedDC=-1) returned 1
[0190.549] GdipReleaseDC (graphics=0x5d920e8, hdc=0xc70107ab) returned 0x0
[0190.549] IsAppThemed () returned 0x1
[0190.549] GetThemeAppProperties () returned 0x3
[0190.549] GetThemeAppProperties () returned 0x3
[0190.549] GdipGetTextRenderingHint (graphics=0x5d920e8, mode=0x53e7cc) returned 0x0
[0190.549] GdipGetDC (graphics=0x5d920e8, hdc=0x53e7b8) returned 0x0
[0190.549] GetCurrentObject (hdc=0xc70107ab, type=0x1) returned 0xb00017
[0190.549] GetCurrentObject (hdc=0xc70107ab, type=0x2) returned 0x900010
[0190.549] GetCurrentObject (hdc=0xc70107ab, type=0x7) returned 0x1e0507b9
[0190.550] GetCurrentObject (hdc=0xc70107ab, type=0x6) returned 0x8a01c2
[0190.550] SaveDC (hdc=0xc70107ab) returned 1
[0190.550] GetTextAlign (hdc=0xc70107ab) returned 0x0
[0190.550] GetTextColor (hdc=0xc70107ab) returned 0x0
[0190.550] GetCurrentObject (hdc=0xc70107ab, type=0x6) returned 0x8a01c2
[0190.550] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0190.550] SelectObject (hdc=0xc70107ab, h=0x450a0799) returned 0x8a01c2
[0190.550] GetBkMode (hdc=0xc70107ab) returned 2
[0190.550] SetBkMode (hdc=0xc70107ab, mode=1) returned 2
[0190.550] DrawTextExW (in: hdc=0xc70107ab, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x22d98a4 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0190.551] DrawTextExW (in: hdc=0xc70107ab, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x22d98a4 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0190.551] RestoreDC (hdc=0xc70107ab, nSavedDC=-1) returned 1
[0190.551] GdipReleaseDC (graphics=0x5d920e8, hdc=0xc70107ab) returned 0x0
[0190.551] GetFocus () returned 0x202c6
[0190.551] IsAppThemed () returned 0x1
[0190.552] GetThemeAppProperties () returned 0x3
[0190.552] GetThemeAppProperties () returned 0x3
[0190.552] GdipGetDC (graphics=0x5d920e8, hdc=0x53e998) returned 0x0
[0190.552] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xc70107ab, x1=0, y1=0, rop=0xcc0020) returned 1
[0190.562] GdipReleaseDC (graphics=0x5d920e8, hdc=0xc70107ab) returned 0x0
[0190.562] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0190.562] SelectObject (hdc=0xc70107ab, h=0x85000f) returned 0x1e0507b9
[0190.562] DeleteDC (hdc=0xc70107ab) returned 1
[0190.562] GdipDeleteGraphics (graphics=0x5d920e8) returned 0x0
[0190.562] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0190.563] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.563] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.563] WaitMessage () returned 1
[0190.563] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.563] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.563] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.563] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.563] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.564] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.564] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.564] WaitMessage () returned 1
[0190.624] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.624] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.624] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.624] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.625] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.626] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.626] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.626] WaitMessage () returned 1
[0190.628] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.628] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.628] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.628] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.628] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.629] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.629] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.629] WaitMessage () returned 1
[0190.630] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.630] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.630] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.630] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.630] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.640] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.640] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.640] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.641] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.641] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.641] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.641] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.641] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.641] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.641] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.641] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.642] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.642] WaitMessage () returned 1
[0190.642] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.642] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.642] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.642] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.642] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.644] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.644] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.644] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.644] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.644] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.644] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.645] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.645] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.645] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.645] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.645] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.645] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.645] WaitMessage () returned 1
[0190.646] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.646] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.646] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.646] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.646] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.648] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.649] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.649] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.649] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.649] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.649] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.649] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.649] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.649] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.649] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.649] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.650] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.650] WaitMessage () returned 1
[0190.650] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.650] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.650] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.650] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.650] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.652] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.653] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.653] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.653] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.653] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.653] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.653] IsWindowUnicode (hWnd=0x102dc) returned 1
[0190.653] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.653] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.653] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.653] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.654] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.654] WaitMessage () returned 1
[0190.834] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.834] IsWindowUnicode (hWnd=0x202d0) returned 1
[0190.834] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0190.834] TranslateMessage (lpMsg=0x53eef8) returned 0
[0190.834] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0190.835] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.835] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0190.835] WaitMessage () returned 1
[0191.490] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.491] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.491] TranslateMessage (lpMsg=0x53eef8) returned 0
[0191.491] DispatchMessageA (lpMsg=0x53eef8) returned 0x7f0a
[0191.491] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0191.491] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0191.491] WaitMessage () returned 1
[0191.705] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.706] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c023e) returned 0x1
[0191.706] IsWindowUnicode (hWnd=0x202c6) returned 1
[0191.706] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.706] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c023e) returned 0x1
[0191.707] SetCursor (hCursor=0x10003) returned 0x10003
[0191.707] TranslateMessage (lpMsg=0x53eef8) returned 0
[0191.707] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0191.707] _TrackMouseEvent (in: lpEventTrack=0x23276fc | out: lpEventTrack=0x23276fc) returned 1
[0191.707] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0191.707] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0191.707] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0191.708] GetKeyState (nVirtKey=1) returned 1
[0191.708] GetKeyState (nVirtKey=2) returned 0
[0191.708] GetKeyState (nVirtKey=4) returned 0
[0191.708] GetKeyState (nVirtKey=5) returned 0
[0191.708] GetKeyState (nVirtKey=6) returned 0
[0191.708] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.708] IsWindowUnicode (hWnd=0x202c6) returned 1
[0191.708] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.708] TranslateMessage (lpMsg=0x53eef8) returned 0
[0191.708] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0191.708] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0191.709] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0191.709] CreateCompatibleDC (hdc=0xf0105ee) returned 0xd7010785
[0191.709] SelectObject (hdc=0xd7010785, h=0x1e0507b9) returned 0x85000f
[0191.709] GdipCreateFromHDC (hdc=0xd7010785, graphics=0x53e958) returned 0x0
[0191.710] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0191.710] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0191.710] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0191.710] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0191.710] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0191.710] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0191.710] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0191.710] LocalFree (hMem=0x89eac0) returned 0x0
[0191.710] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0191.710] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0191.710] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0191.710] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0191.710] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0191.711] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd370dbd) returned 0x0
[0191.711] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0191.711] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0191.711] GetCurrentObject (hdc=0xd7010785, type=0x1) returned 0xb00017
[0191.711] GetCurrentObject (hdc=0xd7010785, type=0x2) returned 0x900010
[0191.711] GetCurrentObject (hdc=0xd7010785, type=0x7) returned 0x1e0507b9
[0191.711] GetCurrentObject (hdc=0xd7010785, type=0x6) returned 0x8a01c2
[0191.711] SaveDC (hdc=0xd7010785) returned 1
[0191.711] GetNearestColor (hdc=0xd7010785, color=0xff) returned 0xff
[0191.711] GetNearestColor (hdc=0xd7010785, color=0x55) returned 0x55
[0191.711] GetNearestColor (hdc=0xd7010785, color=0x0) returned 0x0
[0191.711] GetNearestColor (hdc=0xd7010785, color=0x55) returned 0x55
[0191.711] GetNearestColor (hdc=0xd7010785, color=0x0) returned 0x0
[0191.712] GetNearestColor (hdc=0xd7010785, color=0x8080ff) returned 0x8080ff
[0191.712] GetNearestColor (hdc=0xd7010785, color=0x7373e5) returned 0x7373e5
[0191.712] GetNearestColor (hdc=0xd7010785, color=0xe5) returned 0xe5
[0191.712] GetNearestColor (hdc=0xd7010785, color=0x0) returned 0x0
[0191.712] RestoreDC (hdc=0xd7010785, nSavedDC=-1) returned 1
[0191.712] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010785) returned 0x0
[0191.712] IsAppThemed () returned 0x1
[0191.712] GetThemeAppProperties () returned 0x3
[0191.712] GetThemeAppProperties () returned 0x3
[0191.712] IsAppThemed () returned 0x1
[0191.712] GetThemeAppProperties () returned 0x3
[0191.712] GetThemeAppProperties () returned 0x3
[0191.712] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x22db75c | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0191.713] IsAppThemed () returned 0x1
[0191.713] GetThemeAppProperties () returned 0x3
[0191.713] GetThemeAppProperties () returned 0x3
[0191.713] IsAppThemed () returned 0x1
[0191.713] GetThemeAppProperties () returned 0x3
[0191.713] GetThemeAppProperties () returned 0x3
[0191.713] IsAppThemed () returned 0x1
[0191.713] GetThemeAppProperties () returned 0x3
[0191.713] GetThemeAppProperties () returned 0x3
[0191.713] IsAppThemed () returned 0x1
[0191.713] GetThemeAppProperties () returned 0x3
[0191.713] GetThemeAppProperties () returned 0x3
[0191.713] IsThemePartDefined () returned 0x1
[0191.714] IsAppThemed () returned 0x1
[0191.714] GetThemeAppProperties () returned 0x3
[0191.714] GetThemeAppProperties () returned 0x3
[0191.714] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0191.714] IsAppThemed () returned 0x1
[0191.714] GetThemeAppProperties () returned 0x3
[0191.714] GetThemeAppProperties () returned 0x3
[0191.714] IsAppThemed () returned 0x1
[0191.714] GetThemeAppProperties () returned 0x3
[0191.714] GetThemeAppProperties () returned 0x3
[0191.714] IsThemePartDefined () returned 0x1
[0191.714] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0191.714] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0191.714] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0191.714] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0191.714] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0191.714] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0191.714] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0191.714] LocalFree (hMem=0x89ec80) returned 0x0
[0191.714] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0191.714] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0191.714] LocalFree (hMem=0x89ec80) returned 0x0
[0191.714] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0191.715] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0191.715] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0191.715] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0191.715] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0191.715] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0191.715] GetCurrentObject (hdc=0xd7010785, type=0x1) returned 0xb00017
[0191.715] GetCurrentObject (hdc=0xd7010785, type=0x2) returned 0x900010
[0191.715] GetCurrentObject (hdc=0xd7010785, type=0x7) returned 0x1e0507b9
[0191.715] GetCurrentObject (hdc=0xd7010785, type=0x6) returned 0x8a01c2
[0191.715] SaveDC (hdc=0xd7010785) returned 1
[0191.715] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xef04053e
[0191.715] GetClipRgn (hdc=0xd7010785, hrgn=0xef04053e) returned 0
[0191.715] SelectClipRgn (hdc=0xd7010785, hrgn=0x2b0407a1) returned 2
[0191.715] DeleteObject (ho=0xef04053e) returned 1
[0191.715] DeleteObject (ho=0x2b0407a1) returned 1
[0191.715] OffsetViewportOrgEx (in: hdc=0xd7010785, x=0, y=0, lppt=0x22dbe60 | out: lppt=0x22dbe60) returned 1
[0191.715] DrawThemeParentBackground () returned 0x0
[0191.716] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0191.716] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0191.716] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0191.716] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0191.716] GetSystemMetrics (nIndex=42) returned 0
[0191.716] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0191.716] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0191.716] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0191.716] GetCurrentObject (hdc=0xd7010785, type=0x1) returned 0xb00017
[0191.716] GetCurrentObject (hdc=0xd7010785, type=0x2) returned 0x900010
[0191.716] GetCurrentObject (hdc=0xd7010785, type=0x7) returned 0x1e0507b9
[0191.716] GetCurrentObject (hdc=0xd7010785, type=0x6) returned 0x8a01c2
[0191.716] SaveDC (hdc=0xd7010785) returned 2
[0191.716] GetNearestColor (hdc=0xd7010785, color=0xff) returned 0xff
[0191.716] CreateSolidBrush (color=0xff) returned 0xd610078d
[0191.716] FillRect (hDC=0xd7010785, lprc=0x53e120, hbr=0xd610078d) returned 1
[0191.716] DeleteObject (ho=0xd610078d) returned 1
[0191.717] RestoreDC (hdc=0xd7010785, nSavedDC=-1) returned 1
[0191.717] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0191.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0191.717] GetSystemMetrics (nIndex=42) returned 0
[0191.717] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0191.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0191.717] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0191.717] GetCurrentObject (hdc=0xd7010785, type=0x1) returned 0xb00017
[0191.717] GetCurrentObject (hdc=0xd7010785, type=0x2) returned 0x900010
[0191.717] GetCurrentObject (hdc=0xd7010785, type=0x7) returned 0x1e0507b9
[0191.717] GetCurrentObject (hdc=0xd7010785, type=0x6) returned 0x8a01c2
[0191.717] SaveDC (hdc=0xd7010785) returned 2
[0191.717] GetNearestColor (hdc=0xd7010785, color=0xff) returned 0xff
[0191.717] CreateSolidBrush (color=0xff) returned 0xd710078d
[0191.717] FillRect (hDC=0xd7010785, lprc=0x53e0c0, hbr=0xd710078d) returned 1
[0191.717] DeleteObject (ho=0xd710078d) returned 1
[0191.717] RestoreDC (hdc=0xd7010785, nSavedDC=-1) returned 1
[0191.717] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0191.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0191.718] GetSystemMetrics (nIndex=42) returned 0
[0191.718] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0191.718] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0191.718] RestoreDC (hdc=0xd7010785, nSavedDC=-1) returned 1
[0191.718] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010785) returned 0x0
[0191.718] IsAppThemed () returned 0x1
[0191.718] GetThemeAppProperties () returned 0x3
[0191.718] GetThemeAppProperties () returned 0x3
[0191.718] IsAppThemed () returned 0x1
[0191.718] GetThemeAppProperties () returned 0x3
[0191.718] GetThemeAppProperties () returned 0x3
[0191.718] IsThemePartDefined () returned 0x1
[0191.718] GdipCreateRegion (region=0x53e640) returned 0x0
[0191.718] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0191.718] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0191.718] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0191.718] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0191.718] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0191.718] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0191.719] LocalFree (hMem=0x89ee08) returned 0x0
[0191.719] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0191.719] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0191.719] LocalFree (hMem=0x89ee08) returned 0x0
[0191.719] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0191.719] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0191.719] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0191.719] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0191.719] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0191.719] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0191.719] GetCurrentObject (hdc=0xd7010785, type=0x1) returned 0xb00017
[0191.719] GetCurrentObject (hdc=0xd7010785, type=0x2) returned 0x900010
[0191.719] GetCurrentObject (hdc=0xd7010785, type=0x7) returned 0x1e0507b9
[0191.719] GetCurrentObject (hdc=0xd7010785, type=0x6) returned 0x8a01c2
[0191.719] SaveDC (hdc=0xd7010785) returned 1
[0191.719] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2c0407a1
[0191.719] GetClipRgn (hdc=0xd7010785, hrgn=0x2c0407a1) returned 0
[0191.719] SelectClipRgn (hdc=0xd7010785, hrgn=0xf104053e) returned 2
[0191.720] DeleteObject (ho=0x2c0407a1) returned 1
[0191.720] DeleteObject (ho=0xf104053e) returned 1
[0191.720] OffsetViewportOrgEx (in: hdc=0xd7010785, x=0, y=0, lppt=0x22dcc48 | out: lppt=0x22dcc48) returned 1
[0191.720] IsAppThemed () returned 0x1
[0191.720] GetThemeAppProperties () returned 0x3
[0191.720] GetThemeAppProperties () returned 0x3
[0191.720] DrawThemeBackground () returned 0x0
[0191.720] RestoreDC (hdc=0xd7010785, nSavedDC=-1) returned 1
[0191.720] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010785) returned 0x0
[0191.720] GdipCreateRegion (region=0x53e644) returned 0x0
[0191.720] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0191.720] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0191.720] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0191.720] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0191.720] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0191.720] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0191.720] LocalFree (hMem=0x89ec80) returned 0x0
[0191.721] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0191.721] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0191.721] LocalFree (hMem=0x89ec80) returned 0x0
[0191.721] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0191.721] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0191.721] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0191.721] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0191.721] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0191.721] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0191.721] GetCurrentObject (hdc=0xd7010785, type=0x1) returned 0xb00017
[0191.721] GetCurrentObject (hdc=0xd7010785, type=0x2) returned 0x900010
[0191.721] GetCurrentObject (hdc=0xd7010785, type=0x7) returned 0x1e0507b9
[0191.721] GetCurrentObject (hdc=0xd7010785, type=0x6) returned 0x8a01c2
[0191.721] SaveDC (hdc=0xd7010785) returned 1
[0191.721] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf204053e
[0191.721] GetClipRgn (hdc=0xd7010785, hrgn=0xf204053e) returned 0
[0191.721] SelectClipRgn (hdc=0xd7010785, hrgn=0x2d0407a1) returned 2
[0191.721] DeleteObject (ho=0xf204053e) returned 1
[0191.721] DeleteObject (ho=0x2d0407a1) returned 1
[0191.721] OffsetViewportOrgEx (in: hdc=0xd7010785, x=0, y=0, lppt=0x22dcf1c | out: lppt=0x22dcf1c) returned 1
[0191.721] IsAppThemed () returned 0x1
[0191.722] GetThemeAppProperties () returned 0x3
[0191.722] GetThemeAppProperties () returned 0x3
[0191.722] GetThemeBackgroundContentRect () returned 0x0
[0191.722] RestoreDC (hdc=0xd7010785, nSavedDC=-1) returned 1
[0191.722] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010785) returned 0x0
[0191.722] IsAppThemed () returned 0x1
[0191.722] GetThemeAppProperties () returned 0x3
[0191.722] GetThemeAppProperties () returned 0x3
[0191.722] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0191.722] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0191.722] GetCurrentObject (hdc=0xd7010785, type=0x1) returned 0xb00017
[0191.722] GetCurrentObject (hdc=0xd7010785, type=0x2) returned 0x900010
[0191.722] GetCurrentObject (hdc=0xd7010785, type=0x7) returned 0x1e0507b9
[0191.722] GetCurrentObject (hdc=0xd7010785, type=0x6) returned 0x8a01c2
[0191.722] SaveDC (hdc=0xd7010785) returned 1
[0191.722] GetTextAlign (hdc=0xd7010785) returned 0x0
[0191.722] GetTextColor (hdc=0xd7010785) returned 0x0
[0191.722] GetCurrentObject (hdc=0xd7010785, type=0x6) returned 0x8a01c2
[0191.723] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0191.723] SelectObject (hdc=0xd7010785, h=0x450a0799) returned 0x8a01c2
[0191.723] GetBkMode (hdc=0xd7010785) returned 2
[0191.723] SetBkMode (hdc=0xd7010785, mode=1) returned 2
[0191.723] DrawTextExW (in: hdc=0xd7010785, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x22dd4b0 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0191.723] DrawTextExW (in: hdc=0xd7010785, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x22dd4b0 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0191.724] RestoreDC (hdc=0xd7010785, nSavedDC=-1) returned 1
[0191.724] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010785) returned 0x0
[0191.724] GetFocus () returned 0x202c6
[0191.724] IsAppThemed () returned 0x1
[0191.724] GetThemeAppProperties () returned 0x3
[0191.724] GetThemeAppProperties () returned 0x3
[0191.724] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0191.724] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xd7010785, x1=0, y1=0, rop=0xcc0020) returned 1
[0191.725] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010785) returned 0x0
[0191.725] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0191.725] SelectObject (hdc=0xd7010785, h=0x85000f) returned 0x1e0507b9
[0191.725] DeleteDC (hdc=0xd7010785) returned 1
[0191.725] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0191.725] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0191.725] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0191.725] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0191.726] WaitMessage () returned 1
[0191.803] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.803] IsWindowUnicode (hWnd=0x202c6) returned 1
[0191.803] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.803] TranslateMessage (lpMsg=0x53eef8) returned 0
[0191.803] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0191.803] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.803] IsWindowUnicode (hWnd=0x202c6) returned 1
[0191.803] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.803] TranslateMessage (lpMsg=0x53eef8) returned 0
[0191.804] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0191.804] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x14004e) returned 0x0
[0191.804] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0191.804] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0191.804] WaitMessage () returned 1
[0191.942] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.942] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c023e) returned 0x1
[0191.942] IsWindowUnicode (hWnd=0x202c6) returned 1
[0191.943] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.943] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c023e) returned 0x1
[0191.943] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0191.943] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12f01e8) returned 0x0
[0191.943] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0191.943] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0191.943] SetCursor (hCursor=0x10003) returned 0x10003
[0191.944] TranslateMessage (lpMsg=0x53eef8) returned 0
[0191.944] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0191.944] GetKeyState (nVirtKey=1) returned -128
[0191.944] GetKeyState (nVirtKey=2) returned 0
[0191.944] GetKeyState (nVirtKey=4) returned 0
[0191.944] GetKeyState (nVirtKey=5) returned 0
[0191.944] GetKeyState (nVirtKey=6) returned 0
[0191.944] IsWindowVisible (hWnd=0x202c6) returned 1
[0191.944] IsWindowEnabled (hWnd=0x202c6) returned 1
[0191.944] SetFocus (hWnd=0x202c6) returned 0x202c6
[0191.944] GetFocus () returned 0x202c6
[0191.944] GetFocus () returned 0x202c6
[0191.944] GetFocus () returned 0x202c6
[0191.944] GetKeyState (nVirtKey=1) returned -128
[0191.944] GetKeyState (nVirtKey=2) returned 0
[0191.944] GetKeyState (nVirtKey=4) returned 0
[0191.944] GetKeyState (nVirtKey=5) returned 0
[0191.944] GetKeyState (nVirtKey=6) returned 0
[0191.944] GetCapture () returned 0x0
[0191.945] SetCapture (hWnd=0x202c6) returned 0x0
[0191.945] GetKeyState (nVirtKey=1) returned -128
[0191.945] GetKeyState (nVirtKey=2) returned 0
[0191.945] GetKeyState (nVirtKey=4) returned 0
[0191.945] GetKeyState (nVirtKey=5) returned 0
[0191.945] GetKeyState (nVirtKey=6) returned 0
[0191.945] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0191.945] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0191.945] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.945] IsWindowUnicode (hWnd=0x202c6) returned 1
[0191.945] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0191.945] TranslateMessage (lpMsg=0x53eef8) returned 0
[0191.945] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0191.946] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x22dd708, cPoints=0x1 | out: lpPoints=0x22dd708) returned 25690608
[0191.946] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0191.946] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0191.946] UpdateWindow (hWnd=0x202c6) returned 1
[0191.946] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0191.946] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0191.946] CreateCompatibleDC (hdc=0xf0105ee) returned 0xd8010785
[0191.946] SelectObject (hdc=0xd8010785, h=0x1e0507b9) returned 0x85000f
[0191.946] GdipCreateFromHDC (hdc=0xd8010785, graphics=0x53e5f0) returned 0x0
[0191.946] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0191.946] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0191.947] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0191.947] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0191.947] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0191.947] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0191.947] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0191.947] LocalFree (hMem=0x89ea88) returned 0x0
[0191.947] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0191.947] GdipCreateRegion (region=0x53e638) returned 0x0
[0191.947] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0191.947] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0191.947] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0191.947] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd350dbd) returned 0x0
[0191.947] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0191.947] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0191.947] GetCurrentObject (hdc=0xd8010785, type=0x1) returned 0xb00017
[0191.947] GetCurrentObject (hdc=0xd8010785, type=0x2) returned 0x900010
[0191.947] GetCurrentObject (hdc=0xd8010785, type=0x7) returned 0x1e0507b9
[0191.948] GetCurrentObject (hdc=0xd8010785, type=0x6) returned 0x8a01c2
[0191.948] SaveDC (hdc=0xd8010785) returned 1
[0191.948] GetNearestColor (hdc=0xd8010785, color=0xff) returned 0xff
[0191.948] GetNearestColor (hdc=0xd8010785, color=0x55) returned 0x55
[0191.948] GetNearestColor (hdc=0xd8010785, color=0x0) returned 0x0
[0191.948] GetNearestColor (hdc=0xd8010785, color=0x55) returned 0x55
[0191.948] GetNearestColor (hdc=0xd8010785, color=0x0) returned 0x0
[0191.948] GetNearestColor (hdc=0xd8010785, color=0x8080ff) returned 0x8080ff
[0191.948] GetNearestColor (hdc=0xd8010785, color=0x7373e5) returned 0x7373e5
[0191.948] GetNearestColor (hdc=0xd8010785, color=0xe5) returned 0xe5
[0191.948] GetNearestColor (hdc=0xd8010785, color=0x0) returned 0x0
[0191.948] RestoreDC (hdc=0xd8010785, nSavedDC=-1) returned 1
[0191.949] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd8010785) returned 0x0
[0191.949] IsAppThemed () returned 0x1
[0191.949] GetThemeAppProperties () returned 0x3
[0191.949] GetThemeAppProperties () returned 0x3
[0191.949] IsAppThemed () returned 0x1
[0191.949] GetThemeAppProperties () returned 0x3
[0191.949] GetThemeAppProperties () returned 0x3
[0191.949] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x22ddf60 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0191.949] IsAppThemed () returned 0x1
[0191.950] GetThemeAppProperties () returned 0x3
[0191.950] GetThemeAppProperties () returned 0x3
[0191.950] IsAppThemed () returned 0x1
[0191.950] GetThemeAppProperties () returned 0x3
[0191.950] GetThemeAppProperties () returned 0x3
[0191.950] IsAppThemed () returned 0x1
[0191.950] GetThemeAppProperties () returned 0x3
[0191.950] GetThemeAppProperties () returned 0x3
[0191.950] IsAppThemed () returned 0x1
[0191.950] GetThemeAppProperties () returned 0x3
[0191.950] GetThemeAppProperties () returned 0x3
[0191.950] IsThemePartDefined () returned 0x1
[0191.950] IsAppThemed () returned 0x1
[0191.950] GetThemeAppProperties () returned 0x3
[0191.950] GetThemeAppProperties () returned 0x3
[0191.950] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0191.950] IsAppThemed () returned 0x1
[0191.950] GetThemeAppProperties () returned 0x3
[0191.950] GetThemeAppProperties () returned 0x3
[0191.950] IsAppThemed () returned 0x1
[0191.950] GetThemeAppProperties () returned 0x3
[0191.951] GetThemeAppProperties () returned 0x3
[0191.951] IsThemePartDefined () returned 0x1
[0191.951] GdipCreateRegion (region=0x53e354) returned 0x0
[0191.951] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0191.951] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0191.951] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0191.951] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0191.951] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0191.951] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0191.951] LocalFree (hMem=0x89ee08) returned 0x0
[0191.951] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0191.951] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0191.951] LocalFree (hMem=0x89ec80) returned 0x0
[0191.951] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0191.951] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0191.951] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0191.951] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0191.951] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0191.952] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0191.952] GetCurrentObject (hdc=0xd8010785, type=0x1) returned 0xb00017
[0191.952] GetCurrentObject (hdc=0xd8010785, type=0x2) returned 0x900010
[0191.952] GetCurrentObject (hdc=0xd8010785, type=0x7) returned 0x1e0507b9
[0191.952] GetCurrentObject (hdc=0xd8010785, type=0x6) returned 0x8a01c2
[0191.952] SaveDC (hdc=0xd8010785) returned 1
[0191.952] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2e0407a1
[0191.952] GetClipRgn (hdc=0xd8010785, hrgn=0x2e0407a1) returned 0
[0191.952] SelectClipRgn (hdc=0xd8010785, hrgn=0xf604053e) returned 2
[0191.952] DeleteObject (ho=0x2e0407a1) returned 1
[0191.952] DeleteObject (ho=0xf604053e) returned 1
[0191.952] OffsetViewportOrgEx (in: hdc=0xd8010785, x=0, y=0, lppt=0x22de64c | out: lppt=0x22de64c) returned 1
[0191.952] DrawThemeParentBackground () returned 0x0
[0191.953] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0191.953] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0191.953] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0191.953] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0191.953] GetSystemMetrics (nIndex=42) returned 0
[0191.953] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0191.953] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0191.953] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0191.953] GetCurrentObject (hdc=0xd8010785, type=0x1) returned 0xb00017
[0191.953] GetCurrentObject (hdc=0xd8010785, type=0x2) returned 0x900010
[0191.953] GetCurrentObject (hdc=0xd8010785, type=0x7) returned 0x1e0507b9
[0191.953] GetCurrentObject (hdc=0xd8010785, type=0x6) returned 0x8a01c2
[0191.953] SaveDC (hdc=0xd8010785) returned 2
[0191.953] GetNearestColor (hdc=0xd8010785, color=0xff) returned 0xff
[0191.953] CreateSolidBrush (color=0xff) returned 0xd810078d
[0191.953] FillRect (hDC=0xd8010785, lprc=0x53ddb8, hbr=0xd810078d) returned 1
[0191.954] DeleteObject (ho=0xd810078d) returned 1
[0191.954] RestoreDC (hdc=0xd8010785, nSavedDC=-1) returned 1
[0191.954] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0191.954] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0191.954] GetSystemMetrics (nIndex=42) returned 0
[0191.954] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0191.954] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0191.954] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0191.954] GetCurrentObject (hdc=0xd8010785, type=0x1) returned 0xb00017
[0191.954] GetCurrentObject (hdc=0xd8010785, type=0x2) returned 0x900010
[0191.954] GetCurrentObject (hdc=0xd8010785, type=0x7) returned 0x1e0507b9
[0191.954] GetCurrentObject (hdc=0xd8010785, type=0x6) returned 0x8a01c2
[0191.954] SaveDC (hdc=0xd8010785) returned 2
[0191.954] GetNearestColor (hdc=0xd8010785, color=0xff) returned 0xff
[0191.954] CreateSolidBrush (color=0xff) returned 0xd910078d
[0191.955] FillRect (hDC=0xd8010785, lprc=0x53dd58, hbr=0xd910078d) returned 1
[0191.955] DeleteObject (ho=0xd910078d) returned 1
[0191.955] RestoreDC (hdc=0xd8010785, nSavedDC=-1) returned 1
[0191.955] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0191.955] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0191.955] GetSystemMetrics (nIndex=42) returned 0
[0191.955] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0191.955] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0191.955] RestoreDC (hdc=0xd8010785, nSavedDC=-1) returned 1
[0191.955] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd8010785) returned 0x0
[0191.955] IsAppThemed () returned 0x1
[0191.956] GetThemeAppProperties () returned 0x3
[0191.956] GetThemeAppProperties () returned 0x3
[0191.956] IsAppThemed () returned 0x1
[0191.956] GetThemeAppProperties () returned 0x3
[0191.956] GetThemeAppProperties () returned 0x3
[0191.956] IsThemePartDefined () returned 0x1
[0191.956] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0191.956] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0191.956] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0191.956] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0191.956] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0191.956] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0191.956] LocalFree (hMem=0x89ea88) returned 0x0
[0191.956] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0191.956] LocalFree (hMem=0x89ea88) returned 0x0
[0191.957] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0191.957] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0191.957] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0191.957] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0191.957] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0191.957] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0191.957] GetCurrentObject (hdc=0xd8010785, type=0x1) returned 0xb00017
[0191.957] GetCurrentObject (hdc=0xd8010785, type=0x2) returned 0x900010
[0191.957] GetCurrentObject (hdc=0xd8010785, type=0x7) returned 0x1e0507b9
[0191.957] GetCurrentObject (hdc=0xd8010785, type=0x6) returned 0x8a01c2
[0191.957] SaveDC (hdc=0xd8010785) returned 1
[0191.957] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf704053e
[0191.957] GetClipRgn (hdc=0xd8010785, hrgn=0xf704053e) returned 0
[0191.957] SelectClipRgn (hdc=0xd8010785, hrgn=0x300407a1) returned 2
[0191.957] DeleteObject (ho=0xf704053e) returned 1
[0191.957] DeleteObject (ho=0x300407a1) returned 1
[0191.957] OffsetViewportOrgEx (in: hdc=0xd8010785, x=0, y=0, lppt=0x22df148 | out: lppt=0x22df148) returned 1
[0191.957] IsAppThemed () returned 0x1
[0191.958] GetThemeAppProperties () returned 0x3
[0191.958] GetThemeAppProperties () returned 0x3
[0191.958] DrawThemeBackground () returned 0x0
[0191.958] RestoreDC (hdc=0xd8010785, nSavedDC=-1) returned 1
[0191.958] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd8010785) returned 0x0
[0191.958] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0191.958] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0191.958] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0191.958] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0191.958] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0191.958] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0191.958] LocalFree (hMem=0x89ea88) returned 0x0
[0191.958] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0191.958] LocalFree (hMem=0x89ec80) returned 0x0
[0191.958] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0191.958] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0191.958] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0191.958] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0191.958] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0191.958] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0191.959] GetCurrentObject (hdc=0xd8010785, type=0x1) returned 0xb00017
[0191.959] GetCurrentObject (hdc=0xd8010785, type=0x2) returned 0x900010
[0191.959] GetCurrentObject (hdc=0xd8010785, type=0x7) returned 0x1e0507b9
[0191.959] GetCurrentObject (hdc=0xd8010785, type=0x6) returned 0x8a01c2
[0191.959] SaveDC (hdc=0xd8010785) returned 1
[0191.959] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x310407a1
[0191.959] GetClipRgn (hdc=0xd8010785, hrgn=0x310407a1) returned 0
[0191.959] SelectClipRgn (hdc=0xd8010785, hrgn=0xf804053e) returned 2
[0191.959] DeleteObject (ho=0x310407a1) returned 1
[0191.959] DeleteObject (ho=0xf804053e) returned 1
[0191.960] OffsetViewportOrgEx (in: hdc=0xd8010785, x=0, y=0, lppt=0x22df41c | out: lppt=0x22df41c) returned 1
[0191.960] IsAppThemed () returned 0x1
[0191.960] GetThemeAppProperties () returned 0x3
[0191.960] GetThemeAppProperties () returned 0x3
[0191.960] GetThemeBackgroundContentRect () returned 0x0
[0191.960] RestoreDC (hdc=0xd8010785, nSavedDC=-1) returned 1
[0191.960] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd8010785) returned 0x0
[0191.960] IsAppThemed () returned 0x1
[0191.960] GetThemeAppProperties () returned 0x3
[0191.960] GetThemeAppProperties () returned 0x3
[0191.960] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0191.960] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0191.960] GetCurrentObject (hdc=0xd8010785, type=0x1) returned 0xb00017
[0191.960] GetCurrentObject (hdc=0xd8010785, type=0x2) returned 0x900010
[0191.960] GetCurrentObject (hdc=0xd8010785, type=0x7) returned 0x1e0507b9
[0191.960] GetCurrentObject (hdc=0xd8010785, type=0x6) returned 0x8a01c2
[0191.960] SaveDC (hdc=0xd8010785) returned 1
[0191.960] GetTextAlign (hdc=0xd8010785) returned 0x0
[0191.961] GetTextColor (hdc=0xd8010785) returned 0x0
[0191.961] GetCurrentObject (hdc=0xd8010785, type=0x6) returned 0x8a01c2
[0191.961] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0191.961] SelectObject (hdc=0xd8010785, h=0x450a0799) returned 0x8a01c2
[0191.961] GetBkMode (hdc=0xd8010785) returned 2
[0191.961] SetBkMode (hdc=0xd8010785, mode=1) returned 2
[0191.961] DrawTextExW (in: hdc=0xd8010785, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x22df7bc | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0191.961] DrawTextExW (in: hdc=0xd8010785, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x22df7bc | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0191.962] RestoreDC (hdc=0xd8010785, nSavedDC=-1) returned 1
[0191.962] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd8010785) returned 0x0
[0191.962] GetFocus () returned 0x202c6
[0191.962] IsAppThemed () returned 0x1
[0191.962] GetThemeAppProperties () returned 0x3
[0191.962] GetThemeAppProperties () returned 0x3
[0191.962] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0191.962] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xd8010785, x1=0, y1=0, rop=0xcc0020) returned 1
[0191.962] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd8010785) returned 0x0
[0191.962] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0191.963] SelectObject (hdc=0xd8010785, h=0x85000f) returned 0x1e0507b9
[0191.963] DeleteDC (hdc=0xd8010785) returned 1
[0191.963] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0191.963] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0191.963] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x22df8b8, cPoints=0x1 | out: lpPoints=0x22df8b8) returned 25690608
[0191.963] WindowFromPoint (Point=0x23e) returned 0x202c6
[0191.963] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c023e) returned 0x1
[0191.963] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0191.963] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0191.965] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0191.967] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0191.968] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0191.969] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0191.969] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0191.969] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0191.969] GetDC (hWnd=0x0) returned 0x60100ce
[0191.969] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e888) returned 0x0
[0191.970] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0191.970] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0191.970] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0191.970] GetSystemMetrics (nIndex=5) returned 1
[0191.970] GetSystemMetrics (nIndex=6) returned 1
[0191.971] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0191.971] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0191.971] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0191.971] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0192.075] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.075] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0192.076] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.076] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0192.077] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.077] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0192.077] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.077] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0192.077] GetSystemMetrics (nIndex=5) returned 1
[0192.078] GetSystemMetrics (nIndex=6) returned 1
[0192.078] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.078] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0192.078] GetSystemMetrics (nIndex=5) returned 1
[0192.078] GetSystemMetrics (nIndex=6) returned 1
[0192.078] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.078] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0192.081] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0192.081] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0192.082] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0192.082] GetSystemMetrics (nIndex=59) returned 1460
[0192.082] GetSystemMetrics (nIndex=60) returned 920
[0192.082] GetSystemMetrics (nIndex=34) returned 136
[0192.082] GetSystemMetrics (nIndex=35) returned 39
[0192.082] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.083] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0192.083] GetCurrentThreadId () returned 0x11d0
[0192.083] GetCurrentThreadId () returned 0x11d0
[0192.083] GetCurrentThreadId () returned 0x11d0
[0192.083] GetCurrentThreadId () returned 0x11d0
[0192.083] GetCurrentThreadId () returned 0x11d0
[0192.083] GetCurrentThreadId () returned 0x11d0
[0192.083] GetCurrentThreadId () returned 0x11d0
[0192.083] GetCurrentThreadId () returned 0x11d0
[0192.083] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.083] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0192.083] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0192.084] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0192.084] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.084] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0192.085] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.085] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0192.085] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x602b4
[0192.086] SetWindowLongW (hWnd=0x602b4, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0192.086] GetWindowLongW (hWnd=0x602b4, nIndex=-4) returned 1950089536
[0192.087] SetWindowLongW (hWnd=0x602b4, nIndex=-4, dwNewLong=79644022) returned 1950089536
[0192.087] GetWindowLongW (hWnd=0x602b4, nIndex=-4) returned 79644022
[0192.087] GetWindowLongW (hWnd=0x602b4, nIndex=-16) returned 113311744
[0192.087] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b4, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0192.088] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b4, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0192.089] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b4, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0192.090] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b4, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0192.090] GetClientRect (in: hWnd=0x602b4, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0192.090] GetWindowRect (in: hWnd=0x602b4, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0192.090] SetWindowTextW (hWnd=0x602b4, lpString="WindowsFormsParkingWindow") returned 1
[0192.090] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b4, Msg=0xc, wParam=0x0, lParam=0x23ffd00) returned 0x1
[0192.091] GetParent (hWnd=0x602b4) returned 0x0
[0192.092] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0192.092] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x602b4, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xa02d2
[0192.092] SetWindowLongW (hWnd=0xa02d2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0192.092] GetWindowLongW (hWnd=0xa02d2, nIndex=-4) returned 1868147648
[0192.093] SetWindowLongW (hWnd=0xa02d2, nIndex=-4, dwNewLong=79643622) returned 1868147648
[0192.093] GetWindowLongW (hWnd=0xa02d2, nIndex=-4) returned 79643622
[0192.093] GetWindowLongW (hWnd=0xa02d2, nIndex=-16) returned 1174405133
[0192.093] GetWindowLongW (hWnd=0xa02d2, nIndex=-12) returned 0
[0192.093] SetWindowLongW (hWnd=0xa02d2, nIndex=-12, dwNewLong=656082) returned 0
[0192.093] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0192.094] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0192.095] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0192.096] GetClientRect (in: hWnd=0xa02d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0192.096] GetWindowRect (in: hWnd=0xa02d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0192.096] GetParent (hWnd=0xa02d2) returned 0x602b4
[0192.096] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x602b4, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0192.096] SetWindowTextW (hWnd=0xa02d2, lpString="Enter password: ") returned 1
[0192.096] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0xc, wParam=0x0, lParam=0x2333718) returned 0x1
[0192.096] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0192.097] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0192.097] GetClientRect (in: hWnd=0xa02d2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0192.097] GetWindowRect (in: hWnd=0xa02d2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0192.097] GetParent (hWnd=0xa02d2) returned 0x602b4
[0192.097] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x602b4, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0192.097] SendMessageW (hWnd=0xa02d2, Msg=0x2210, wParam=0x2d20001, lParam=0xa02d2) returned 0x0
[0192.097] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x2210, wParam=0x2d20001, lParam=0xa02d2) returned 0x0
[0192.097] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0192.097] GetParent (hWnd=0xa02d2) returned 0x602b4
[0192.097] GdipCreateFromHWND (hwnd=0xa02d2, graphics=0x53e994) returned 0x0
[0192.098] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0192.098] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0192.098] GetProcessWindowStation () returned 0x13c
[0192.098] GetCapture () returned 0x202c6
[0192.099] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0192.099] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0192.099] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0192.099] ReleaseCapture () returned 1
[0192.099] GetActiveWindow () returned 0x70036
[0192.099] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0192.100] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.100] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0192.100] GetCursorPos (in: lpPoint=0x22f2fa0 | out: lpPoint=0x22f2fa0*(x=574, y=412)) returned 1
[0192.100] MonitorFromPoint (pt=0x23e, dwFlags=0x19c) returned 0x10001
[0192.100] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0192.101] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xdb010785
[0192.101] GetDeviceCaps (hdc=0xdb010785, index=12) returned 32
[0192.101] GetDeviceCaps (hdc=0xdb010785, index=14) returned 1
[0192.101] DeleteDC (hdc=0xdb010785) returned 1
[0192.101] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0192.102] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0192.102] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x902d8
[0192.103] SetWindowLongW (hWnd=0x902d8, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0192.103] GetWindowLongW (hWnd=0x902d8, nIndex=-4) returned 1950089536
[0192.103] SetWindowLongW (hWnd=0x902d8, nIndex=-4, dwNewLong=79643902) returned 1950089536
[0192.103] GetWindowLongW (hWnd=0x902d8, nIndex=-4) returned 79643902
[0192.103] GetWindowLongW (hWnd=0x902d8, nIndex=-16) returned 113770496
[0192.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0192.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0192.106] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0192.106] GetClientRect (in: hWnd=0x902d8, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0192.106] GetWindowRect (in: hWnd=0x902d8, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0192.106] SetWindowTextW (hWnd=0x902d8, lpString="Ransomware") returned 1
[0192.106] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xc, wParam=0x0, lParam=0x22df980) returned 0x1
[0192.108] GetStartupInfoW (in: lpStartupInfo=0x22f32dc | out: lpStartupInfo=0x22f32dc*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0192.109] GetParent (hWnd=0x902d8) returned 0x0
[0192.109] SetWindowLongW (hWnd=0x902d8, nIndex=-8, dwNewLong=0) returned 0
[0192.110] SendMessageW (hWnd=0x902d8, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0192.110] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0192.110] SendMessageW (hWnd=0x902d8, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0192.110] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0192.111] GetSystemMenu (hWnd=0x902d8, bRevert=0) returned 0xe60241
[0192.112] GetWindowPlacement (in: hWnd=0x902d8, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0192.112] EnableMenuItem (hMenu=0xe60241, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0192.112] EnableMenuItem (hMenu=0xe60241, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0192.112] EnableMenuItem (hMenu=0xe60241, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0192.112] EnableMenuItem (hMenu=0xe60241, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0192.112] EnableMenuItem (hMenu=0xe60241, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0192.112] GetClientRect (in: hWnd=0x902d8, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0192.112] GetClientRect (in: hWnd=0x902d8, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0192.112] GetWindowRect (in: hWnd=0x902d8, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0192.113] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.113] GetWindowLongW (hWnd=0x902d8, nIndex=-16) returned 113770496
[0192.113] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.113] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.113] GetSystemMetrics (nIndex=42) returned 0
[0192.113] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.113] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0192.113] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.113] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.113] GetSystemMetrics (nIndex=42) returned 0
[0192.113] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.113] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0192.113] GetCursorPos (in: lpPoint=0x22f3450 | out: lpPoint=0x22f3450*(x=574, y=412)) returned 1
[0192.113] MonitorFromPoint (pt=0x23b, dwFlags=0x19c) returned 0x10001
[0192.114] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0192.114] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xdf010785
[0192.114] GetDeviceCaps (hdc=0xdf010785, index=12) returned 32
[0192.114] GetDeviceCaps (hdc=0xdf010785, index=14) returned 1
[0192.114] DeleteDC (hdc=0xdf010785) returned 1
[0192.114] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0192.114] GetWindowLongW (hWnd=0x902d8, nIndex=-16) returned 113770496
[0192.114] GetWindowLongW (hWnd=0x902d8, nIndex=-20) returned 327937
[0192.114] SetWindowLongW (hWnd=0x902d8, nIndex=-16, dwNewLong=46661632) returned 113770496
[0192.114] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0192.115] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0192.116] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0192.116] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0192.117] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0192.117] SetWindowLongW (hWnd=0x902d8, nIndex=-20, dwNewLong=327681) returned 327937
[0192.117] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0192.117] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0192.118] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0192.118] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0192.118] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0192.119] SetWindowPos (hWnd=0x902d8, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0192.119] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0192.119] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0192.120] GetWindowPlacement (in: hWnd=0x902d8, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0192.120] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0192.120] GetClientRect (in: hWnd=0x902d8, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0192.120] GetWindowRect (in: hWnd=0x902d8, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0192.120] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0192.121] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0192.121] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0192.121] RedrawWindow (hWnd=0x902d8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0192.122] GetSystemMenu (hWnd=0x902d8, bRevert=0) returned 0xe60241
[0192.122] GetWindowPlacement (in: hWnd=0x902d8, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0192.122] EnableMenuItem (hMenu=0xe60241, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0192.122] EnableMenuItem (hMenu=0xe60241, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0192.122] EnableMenuItem (hMenu=0xe60241, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0192.122] EnableMenuItem (hMenu=0xe60241, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0192.122] EnableMenuItem (hMenu=0xe60241, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0192.122] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0192.122] GetWindowLongW (hWnd=0x902d8, nIndex=-8) returned 0
[0192.122] SetWindowLongW (hWnd=0x902d8, nIndex=-8, dwNewLong=458806) returned 0
[0192.124] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0192.124] GetProcessWindowStation () returned 0x13c
[0192.124] GetCurrentThreadId () returned 0x11d0
[0192.125] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4846, lParam=0x0) returned 1
[0192.125] IsWindowVisible (hWnd=0x902d8) returned 0
[0192.125] IsWindowVisible (hWnd=0x70036) returned 1
[0192.125] IsWindowEnabled (hWnd=0x70036) returned 1
[0192.125] IsWindowVisible (hWnd=0x602b6) returned 0
[0192.125] IsWindowVisible (hWnd=0x901f8) returned 0
[0192.125] IsWindowVisible (hWnd=0x202d0) returned 0
[0192.125] IsWindowVisible (hWnd=0x202d4) returned 0
[0192.125] GetActiveWindow () returned 0x70036
[0192.125] GetFocus () returned 0x202c6
[0192.125] IsWindow (hWnd=0x70036) returned 1
[0192.126] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0192.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0192.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0192.127] GetWindowLongW (hWnd=0x902d8, nIndex=-8) returned 458806
[0192.127] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0192.127] GetCurrentThreadId () returned 0x11d0
[0192.127] GetWindowLongW (hWnd=0x902d8, nIndex=-8) returned 458806
[0192.127] IsWindowEnabled (hWnd=0x70036) returned 0
[0192.127] IsWindowEnabled (hWnd=0x902d8) returned 1
[0192.127] ShowWindow (hWnd=0x902d8, nCmdShow=5) returned 0
[0192.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0192.127] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0192.128] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.128] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0192.128] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x902d8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x902c8
[0192.129] SetWindowLongW (hWnd=0x902c8, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0192.129] GetWindowLongW (hWnd=0x902c8, nIndex=-4) returned 1868026976
[0192.129] SetWindowLongW (hWnd=0x902c8, nIndex=-4, dwNewLong=79644302) returned 1868026976
[0192.130] GetWindowLongW (hWnd=0x902c8, nIndex=-4) returned 79644302
[0192.130] GetWindowLongW (hWnd=0x902c8, nIndex=-16) returned 1174470848
[0192.130] GetWindowLongW (hWnd=0x902c8, nIndex=-12) returned 0
[0192.130] SetWindowLongW (hWnd=0x902c8, nIndex=-12, dwNewLong=590536) returned 0
[0192.130] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0192.132] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0192.132] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0192.134] SendMessageW (hWnd=0x902c8, Msg=0x2055, wParam=0x902c8, lParam=0x3) returned 0x2
[0192.134] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0192.134] GetWindow (hWnd=0x902c8, uCmd=0x3) returned 0x0
[0192.134] GetClientRect (in: hWnd=0x902c8, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0192.134] GetWindowRect (in: hWnd=0x902c8, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0192.134] GetParent (hWnd=0x902c8) returned 0x902d8
[0192.134] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x902d8, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0192.134] SendMessageW (hWnd=0x902c8, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0192.134] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0192.134] SendMessageW (hWnd=0x902c8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0192.134] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0192.135] GetSystemMetrics (nIndex=5) returned 1
[0192.135] GetSystemMetrics (nIndex=6) returned 1
[0192.135] SendMessageW (hWnd=0x902c8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0192.135] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0192.135] SendMessageW (hWnd=0x902c8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0192.135] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0192.136] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0192.136] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0192.136] GetClientRect (in: hWnd=0x902c8, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0192.136] GetWindowRect (in: hWnd=0x902c8, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0192.136] GetParent (hWnd=0x902c8) returned 0x902d8
[0192.136] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x902d8, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0192.136] SendMessageW (hWnd=0x902c8, Msg=0x2210, wParam=0x2c80001, lParam=0x902c8) returned 0x0
[0192.136] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x2210, wParam=0x2c80001, lParam=0x902c8) returned 0x0
[0192.136] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0192.136] GetParent (hWnd=0x902c8) returned 0x902d8
[0192.137] GetParent (hWnd=0xa02d2) returned 0x602b4
[0192.137] SetParent (hWndChild=0xa02d2, hWndNewParent=0x902d8) returned 0x602b4
[0192.137] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0192.137] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0192.138] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0192.138] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0192.138] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0192.138] GetClientRect (in: hWnd=0xa02d2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0192.138] GetWindowRect (in: hWnd=0xa02d2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0192.138] GetParent (hWnd=0xa02d2) returned 0x902d8
[0192.138] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x902d8, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0192.138] GetClientRect (in: hWnd=0xa02d2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0192.138] GetWindowRect (in: hWnd=0xa02d2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0192.138] GetParent (hWnd=0xa02d2) returned 0x902d8
[0192.138] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x902d8, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0192.138] GetParent (hWnd=0xa02d2) returned 0x902d8
[0192.138] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0192.139] GetWindow (hWnd=0xa02d2, uCmd=0x3) returned 0x0
[0192.139] SetWindowPos (hWnd=0xa02d2, hWndInsertAfter=0x902c8, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0192.139] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0192.139] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0192.140] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0192.140] GetClientRect (in: hWnd=0xa02d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0192.140] GetWindowRect (in: hWnd=0xa02d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0192.140] GetParent (hWnd=0xa02d2) returned 0x902d8
[0192.140] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x902d8, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0192.140] GetParent (hWnd=0xa02d2) returned 0x902d8
[0192.140] GetWindow (hWnd=0xa02d2, uCmd=0x3) returned 0x902c8
[0192.140] GetWindowThreadProcessId (in: hWnd=0xa02d2, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0192.140] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0192.140] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.141] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0192.141] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x902d8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xa02d6
[0192.141] SetWindowLongW (hWnd=0xa02d6, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0192.142] GetWindowLongW (hWnd=0xa02d6, nIndex=-4) returned 1868032000
[0192.142] SetWindowLongW (hWnd=0xa02d6, nIndex=-4, dwNewLong=79643942) returned 1868032000
[0192.142] GetWindowLongW (hWnd=0xa02d6, nIndex=-4) returned 79643942
[0192.142] GetWindowLongW (hWnd=0xa02d6, nIndex=-16) returned 1174470667
[0192.142] GetWindowLongW (hWnd=0xa02d6, nIndex=-12) returned 0
[0192.142] SetWindowLongW (hWnd=0xa02d6, nIndex=-12, dwNewLong=656086) returned 0
[0192.142] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0192.143] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0192.143] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0192.144] SendMessageW (hWnd=0xa02d6, Msg=0x2055, wParam=0xa02d6, lParam=0x3) returned 0x2
[0192.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0192.144] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0192.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0192.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0192.144] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0192.144] RedrawWindow (hWnd=0x902c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0192.144] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0192.145] RedrawWindow (hWnd=0xa02d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0192.145] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0192.145] RedrawWindow (hWnd=0xa02d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0192.145] RedrawWindow (hWnd=0x902d8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0192.145] GetWindow (hWnd=0xa02d6, uCmd=0x3) returned 0xa02d2
[0192.145] GetClientRect (in: hWnd=0xa02d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0192.145] GetWindowRect (in: hWnd=0xa02d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0192.145] GetParent (hWnd=0xa02d6) returned 0x902d8
[0192.145] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x902d8, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0192.145] SetWindowTextW (hWnd=0xa02d6, lpString="OK") returned 1
[0192.145] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0xc, wParam=0x0, lParam=0x22e4130) returned 0x1
[0192.146] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0192.146] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0192.146] GetClientRect (in: hWnd=0xa02d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0192.146] GetWindowRect (in: hWnd=0xa02d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0192.147] GetParent (hWnd=0xa02d6) returned 0x902d8
[0192.147] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x902d8, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0192.147] SendMessageW (hWnd=0xa02d6, Msg=0x2210, wParam=0x2d60001, lParam=0xa02d6) returned 0x0
[0192.147] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x2210, wParam=0x2d60001, lParam=0xa02d6) returned 0x0
[0192.147] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0192.147] GetParent (hWnd=0xa02d6) returned 0x902d8
[0192.147] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0192.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.148] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0192.148] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x902d8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xd013e
[0192.149] SetWindowLongW (hWnd=0xd013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0192.149] GetWindowLongW (hWnd=0xd013e, nIndex=-4) returned 1868032000
[0192.149] SetWindowLongW (hWnd=0xd013e, nIndex=-4, dwNewLong=79644342) returned 1868032000
[0192.149] GetWindowLongW (hWnd=0xd013e, nIndex=-4) returned 79644342
[0192.149] GetWindowLongW (hWnd=0xd013e, nIndex=-16) returned 1174470667
[0192.149] GetWindowLongW (hWnd=0xd013e, nIndex=-12) returned 0
[0192.149] SetWindowLongW (hWnd=0xd013e, nIndex=-12, dwNewLong=852286) returned 0
[0192.149] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0192.150] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0192.150] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0192.151] SendMessageW (hWnd=0xd013e, Msg=0x2055, wParam=0xd013e, lParam=0x3) returned 0x2
[0192.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0192.151] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0192.151] GetWindow (hWnd=0xd013e, uCmd=0x3) returned 0xa02d6
[0192.151] GetClientRect (in: hWnd=0xd013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0192.151] GetWindowRect (in: hWnd=0xd013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0192.151] GetParent (hWnd=0xd013e) returned 0x902d8
[0192.151] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x902d8, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0192.152] SetWindowTextW (hWnd=0xd013e, lpString="Cancel") returned 1
[0192.152] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0xc, wParam=0x0, lParam=0x22e7a40) returned 0x1
[0192.152] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0192.152] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0192.152] GetClientRect (in: hWnd=0xd013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0192.152] GetWindowRect (in: hWnd=0xd013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0192.152] GetParent (hWnd=0xd013e) returned 0x902d8
[0192.152] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x902d8, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0192.153] SendMessageW (hWnd=0xd013e, Msg=0x2210, wParam=0x13e0001, lParam=0xd013e) returned 0x0
[0192.153] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0x2210, wParam=0x13e0001, lParam=0xd013e) returned 0x0
[0192.153] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0192.153] GetParent (hWnd=0xd013e) returned 0x902d8
[0192.153] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0192.153] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e320) returned 0x0
[0192.154] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0192.154] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0192.154] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0192.154] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0192.154] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0192.154] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0192.154] GetWindowLongW (hWnd=0x902d8, nIndex=-8) returned 458806
[0192.154] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0192.155] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0192.155] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xe6010785
[0192.155] GetDeviceCaps (hdc=0xe6010785, index=12) returned 32
[0192.155] GetDeviceCaps (hdc=0xe6010785, index=14) returned 1
[0192.155] DeleteDC (hdc=0xe6010785) returned 1
[0192.156] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0192.156] GetWindowThreadProcessId (in: hWnd=0x902d8, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0192.156] GetCurrentThreadId () returned 0x11d0
[0192.156] PostMessageW (hWnd=0x902d8, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0192.156] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.156] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.156] GetSystemMetrics (nIndex=42) returned 0
[0192.156] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.156] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0192.156] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0192.156] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0192.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0192.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0192.178] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x902d8) returned 0x1
[0192.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0192.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0192.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0192.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0192.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0192.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0192.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0192.186] GetFocus () returned 0x202c6
[0192.186] IsChild (hWndParent=0x902d8, hWnd=0x202c6) returned 0
[0192.186] GetFocus () returned 0x202c6
[0192.186] SetFocus (hWnd=0x902c8) returned 0x202c6
[0192.187] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x902c8, lParam=0x0) returned 0x0
[0192.187] GetCapture () returned 0x0
[0192.188] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0192.188] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0192.190] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0192.192] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0192.192] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0192.192] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0192.193] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0192.226] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0192.226] GetParent (hWnd=0x902d8) returned 0x0
[0192.226] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0192.227] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0192.227] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0192.230] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0192.230] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0192.230] GetSysColorBrush (nIndex=5) returned 0x100079
[0192.232] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0192.232] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0192.233] SendMessageW (hWnd=0x902c8, Msg=0x2111, wParam=0x10002c8, lParam=0x902c8) returned 0x0
[0192.234] SendMessageW (hWnd=0x902c8, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0192.234] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0192.234] GetKeyState (nVirtKey=1) returned 0
[0192.234] GetKeyState (nVirtKey=2) returned 0
[0192.234] GetKeyState (nVirtKey=4) returned 0
[0192.234] GetKeyState (nVirtKey=5) returned 0
[0192.234] GetKeyState (nVirtKey=6) returned 0
[0192.234] GetWindowTextLengthW (hWnd=0x902c8) returned 0
[0192.234] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0192.234] SendMessageW (hWnd=0x902c8, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0192.234] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0192.234] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0192.234] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0192.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0192.258] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0192.258] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0192.258] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0192.258] GetWindowPlacement (in: hWnd=0x902d8, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0192.259] GetClientRect (in: hWnd=0x902d8, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0192.259] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.259] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.259] GetSystemMetrics (nIndex=42) returned 0
[0192.259] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.259] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0192.259] GetClientRect (in: hWnd=0x902d8, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0192.259] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0192.259] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0192.259] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x79050535
[0192.259] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0192.259] SaveDC (hdc=0x10105d6) returned 1
[0192.259] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0192.259] CreateSolidBrush (color=0xf0f0f0) returned 0xda10078d
[0192.259] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0xda10078d) returned 1
[0192.260] DeleteObject (ho=0xda10078d) returned 1
[0192.260] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0192.260] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0192.260] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0192.260] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0192.261] GetWindowPlacement (in: hWnd=0x902d8, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0192.261] GetClientRect (in: hWnd=0x902d8, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0192.261] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.261] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.261] GetSystemMetrics (nIndex=42) returned 0
[0192.261] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.262] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0192.262] GetClientRect (in: hWnd=0x902d8, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0192.262] GetCurrentObject (hdc=0xcb0107d0, type=0x1) returned 0xb00017
[0192.262] GetCurrentObject (hdc=0xcb0107d0, type=0x2) returned 0x900010
[0192.262] GetCurrentObject (hdc=0xcb0107d0, type=0x7) returned 0x5079e
[0192.262] GetCurrentObject (hdc=0xcb0107d0, type=0x6) returned 0x8a01c2
[0192.262] SaveDC (hdc=0xcb0107d0) returned 1
[0192.262] GetNearestColor (hdc=0xcb0107d0, color=0xf0f0f0) returned 0xf0f0f0
[0192.262] CreateSolidBrush (color=0xf0f0f0) returned 0xdb10078d
[0192.262] FillRect (hDC=0xcb0107d0, lprc=0x53dc18, hbr=0xdb10078d) returned 1
[0192.262] DeleteObject (ho=0xdb10078d) returned 1
[0192.262] RestoreDC (hdc=0xcb0107d0, nSavedDC=-1) returned 1
[0192.262] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.262] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.262] GetSystemMetrics (nIndex=42) returned 0
[0192.262] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.262] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0192.262] GetClientRect (in: hWnd=0x902d8, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0192.262] GetCurrentObject (hdc=0xcb0107d0, type=0x1) returned 0xb00017
[0192.262] GetCurrentObject (hdc=0xcb0107d0, type=0x2) returned 0x900010
[0192.262] GetCurrentObject (hdc=0xcb0107d0, type=0x7) returned 0x5079e
[0192.263] GetCurrentObject (hdc=0xcb0107d0, type=0x6) returned 0x8a01c2
[0192.263] SaveDC (hdc=0xcb0107d0) returned 1
[0192.263] GetNearestColor (hdc=0xcb0107d0, color=0xf0f0f0) returned 0xf0f0f0
[0192.263] CreateSolidBrush (color=0xf0f0f0) returned 0xdc10078d
[0192.263] FillRect (hDC=0xcb0107d0, lprc=0x53dbb8, hbr=0xdc10078d) returned 1
[0192.263] DeleteObject (ho=0xdc10078d) returned 1
[0192.263] RestoreDC (hdc=0xcb0107d0, nSavedDC=-1) returned 1
[0192.263] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.263] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.263] GetSystemMetrics (nIndex=42) returned 0
[0192.263] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.263] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0192.264] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0192.264] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0192.264] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0192.264] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0192.264] GetStockObject (i=5) returned 0x900015
[0192.265] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0192.265] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0192.265] GetStockObject (i=5) returned 0x900015
[0192.265] GetWindowPlacement (in: hWnd=0x902d8, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0192.265] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0192.265] GetClientRect (in: hWnd=0x902d8, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0192.265] GetWindowRect (in: hWnd=0x902d8, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0192.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0192.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0192.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0192.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0192.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0192.267] GetClientRect (in: hWnd=0x902d8, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0192.267] GetWindowRect (in: hWnd=0x902d8, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0192.267] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.267] IsWindowUnicode (hWnd=0x902d8) returned 1
[0192.267] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.267] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.267] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0192.267] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.268] IsWindowUnicode (hWnd=0x902d8) returned 1
[0192.268] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.268] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.268] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.268] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.268] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x84, wParam=0x0, lParam=0x1950353) returned 0x1
[0192.268] IsWindowUnicode (hWnd=0xa02d6) returned 1
[0192.268] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.268] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.268] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.269] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.269] IsWindowUnicode (hWnd=0x202c6) returned 1
[0192.269] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.269] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.269] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.269] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0192.269] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0192.269] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.269] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x84, wParam=0x0, lParam=0x1950353) returned 0x1
[0192.269] IsWindowUnicode (hWnd=0xa02d6) returned 1
[0192.269] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.269] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x84, wParam=0x0, lParam=0x1950353) returned 0x1
[0192.269] SetCursor (hCursor=0x10003) returned 0x10003
[0192.270] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.270] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.270] _TrackMouseEvent (in: lpEventTrack=0x22f49cc | out: lpEventTrack=0x22f49cc) returned 1
[0192.270] SendMessageW (hWnd=0xa02d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0192.270] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0192.270] InvalidateRect (hWnd=0xa02d6, lpRect=0x0, bErase=0) returned 1
[0192.270] GetKeyState (nVirtKey=1) returned 0
[0192.270] GetKeyState (nVirtKey=2) returned 0
[0192.270] GetKeyState (nVirtKey=4) returned 0
[0192.270] GetKeyState (nVirtKey=5) returned 0
[0192.270] GetKeyState (nVirtKey=6) returned 0
[0192.270] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.270] IsWindowUnicode (hWnd=0x902d8) returned 1
[0192.270] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.270] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.270] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.271] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.275] IsWindowUnicode (hWnd=0x902d8) returned 1
[0192.275] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.275] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.275] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.276] BeginPaint (in: hWnd=0x902d8, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x60100ce
[0192.276] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0192.276] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.276] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.276] GetSystemMetrics (nIndex=42) returned 0
[0192.276] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.276] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0192.276] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0192.276] EndPaint (hWnd=0x902d8, lpPaint=0x53e30c) returned 1
[0192.276] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.276] IsWindowUnicode (hWnd=0x902c8) returned 1
[0192.276] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.277] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.277] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0192.277] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0192.277] SetTextColor (hdc=0xcc0107d0, color=0x0) returned 0x0
[0192.277] SetBkColor (hdc=0xcc0107d0, color=0xffffff) returned 0xffffff
[0192.278] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.278] IsWindowUnicode (hWnd=0xa02d2) returned 1
[0192.278] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.278] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.278] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.278] BeginPaint (in: hWnd=0xa02d2, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0xf0105ee
[0192.278] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0192.278] CreateCompatibleDC (hdc=0xf0105ee) returned 0x8f0107c0
[0192.279] SelectObject (hdc=0x8f0107c0, h=0x1e0507b9) returned 0x85000f
[0192.279] GdipCreateFromHDC (hdc=0x8f0107c0, graphics=0x53e30c) returned 0x0
[0192.279] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0192.279] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0192.279] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0192.279] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0192.279] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0192.279] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.279] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0192.279] LocalFree (hMem=0x89eac0) returned 0x0
[0192.279] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0192.279] GdipCreateRegion (region=0x53e354) returned 0x0
[0192.279] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.279] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0192.280] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0192.280] GetWindowTextLengthW (hWnd=0xa02d2) returned 16
[0192.280] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0192.280] GetSystemMetrics (nIndex=42) returned 0
[0192.280] GetWindowTextW (in: hWnd=0xa02d2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0192.280] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0192.280] GetClientRect (in: hWnd=0xa02d2, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0192.280] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0192.280] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0192.280] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0192.280] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0192.280] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0192.280] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.280] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0192.280] LocalFree (hMem=0x89eac0) returned 0x0
[0192.280] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0192.280] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0192.280] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0192.280] LocalFree (hMem=0x89ee08) returned 0x0
[0192.281] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0192.281] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0192.281] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0192.281] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0192.281] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0192.281] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0192.281] GetCurrentObject (hdc=0x8f0107c0, type=0x1) returned 0xb00017
[0192.281] GetCurrentObject (hdc=0x8f0107c0, type=0x2) returned 0x900010
[0192.281] GetCurrentObject (hdc=0x8f0107c0, type=0x7) returned 0x1e0507b9
[0192.281] GetCurrentObject (hdc=0x8f0107c0, type=0x6) returned 0x8a01c2
[0192.281] SaveDC (hdc=0x8f0107c0) returned 1
[0192.281] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf704051e
[0192.281] GetClipRgn (hdc=0x8f0107c0, hrgn=0xf704051e) returned 0
[0192.281] SelectClipRgn (hdc=0x8f0107c0, hrgn=0xfc04053e) returned 2
[0192.281] DeleteObject (ho=0xf704051e) returned 1
[0192.282] DeleteObject (ho=0xfc04053e) returned 1
[0192.282] OffsetViewportOrgEx (in: hdc=0x8f0107c0, x=0, y=0, lppt=0x22f4ed4 | out: lppt=0x22f4ed4) returned 1
[0192.282] GetNearestColor (hdc=0x8f0107c0, color=0xf0f0f0) returned 0xf0f0f0
[0192.282] CreateSolidBrush (color=0xf0f0f0) returned 0xdd10078d
[0192.282] FillRect (hDC=0x8f0107c0, lprc=0x53e1f4, hbr=0xdd10078d) returned 1
[0192.282] DeleteObject (ho=0xdd10078d) returned 1
[0192.282] RestoreDC (hdc=0x8f0107c0, nSavedDC=-1) returned 1
[0192.282] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c0) returned 0x0
[0192.282] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd2f0dbd) returned 0x0
[0192.282] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.282] GetWindowTextLengthW (hWnd=0xa02d2) returned 16
[0192.282] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0192.282] GetSystemMetrics (nIndex=42) returned 0
[0192.282] GetWindowTextW (in: hWnd=0xa02d2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0192.282] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0192.282] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0192.283] GetCurrentObject (hdc=0x8f0107c0, type=0x1) returned 0xb00017
[0192.283] GetCurrentObject (hdc=0x8f0107c0, type=0x2) returned 0x900010
[0192.283] GetCurrentObject (hdc=0x8f0107c0, type=0x7) returned 0x1e0507b9
[0192.283] GetCurrentObject (hdc=0x8f0107c0, type=0x6) returned 0x8a01c2
[0192.283] SaveDC (hdc=0x8f0107c0) returned 1
[0192.283] GetNearestColor (hdc=0x8f0107c0, color=0x0) returned 0x0
[0192.283] RestoreDC (hdc=0x8f0107c0, nSavedDC=-1) returned 1
[0192.283] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c0) returned 0x0
[0192.284] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0192.284] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0192.284] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0192.284] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x22f51dc | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0192.285] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0192.285] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0192.285] GetCurrentObject (hdc=0x8f0107c0, type=0x1) returned 0xb00017
[0192.285] GetCurrentObject (hdc=0x8f0107c0, type=0x2) returned 0x900010
[0192.285] GetCurrentObject (hdc=0x8f0107c0, type=0x7) returned 0x1e0507b9
[0192.285] GetCurrentObject (hdc=0x8f0107c0, type=0x6) returned 0x8a01c2
[0192.285] SaveDC (hdc=0x8f0107c0) returned 1
[0192.285] GetTextAlign (hdc=0x8f0107c0) returned 0x0
[0192.285] GetTextColor (hdc=0x8f0107c0) returned 0x0
[0192.285] GetCurrentObject (hdc=0x8f0107c0, type=0x6) returned 0x8a01c2
[0192.285] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0192.285] SelectObject (hdc=0x8f0107c0, h=0x730a066d) returned 0x8a01c2
[0192.285] GetBkMode (hdc=0x8f0107c0) returned 2
[0192.285] SetBkMode (hdc=0x8f0107c0, mode=1) returned 2
[0192.285] DrawTextExW (in: hdc=0x8f0107c0, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x22f5400 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0192.286] RestoreDC (hdc=0x8f0107c0, nSavedDC=-1) returned 1
[0192.286] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c0) returned 0x0
[0192.286] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0192.286] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=250, cy=70, hdcSrc=0x8f0107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0192.286] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c0) returned 0x0
[0192.286] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0192.286] SelectObject (hdc=0x8f0107c0, h=0x85000f) returned 0x1e0507b9
[0192.286] DeleteDC (hdc=0x8f0107c0) returned 1
[0192.286] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0192.287] EndPaint (hWnd=0xa02d2, lpPaint=0x53e2f0) returned 1
[0192.322] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.322] IsWindowUnicode (hWnd=0x102dc) returned 1
[0192.322] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.322] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.322] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.323] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.323] IsWindowUnicode (hWnd=0xa02d6) returned 1
[0192.323] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.323] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.323] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.323] BeginPaint (in: hWnd=0xa02d6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0192.323] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0192.323] CreateCompatibleDC (hdc=0x8b010786) returned 0x910107c0
[0192.323] SelectObject (hdc=0x910107c0, h=0x1e0507b9) returned 0x85000f
[0192.323] GdipCreateFromHDC (hdc=0x910107c0, graphics=0x53e300) returned 0x0
[0192.324] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0192.324] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0192.324] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0192.324] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0192.324] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0192.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0192.324] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0192.324] LocalFree (hMem=0x89ec80) returned 0x0
[0192.324] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0192.324] GdipCreateRegion (region=0x53e348) returned 0x0
[0192.324] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.324] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0192.324] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0192.324] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd2d0dbd) returned 0x0
[0192.324] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.324] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0192.324] GetCurrentObject (hdc=0x910107c0, type=0x1) returned 0xb00017
[0192.324] GetCurrentObject (hdc=0x910107c0, type=0x2) returned 0x900010
[0192.324] GetCurrentObject (hdc=0x910107c0, type=0x7) returned 0x1e0507b9
[0192.325] GetCurrentObject (hdc=0x910107c0, type=0x6) returned 0x8a01c2
[0192.325] SaveDC (hdc=0x910107c0) returned 1
[0192.325] GetNearestColor (hdc=0x910107c0, color=0xf0f0f0) returned 0xf0f0f0
[0192.325] GetNearestColor (hdc=0x910107c0, color=0xa0a0a0) returned 0xa0a0a0
[0192.325] GetNearestColor (hdc=0x910107c0, color=0x696969) returned 0x696969
[0192.325] GetNearestColor (hdc=0x910107c0, color=0xa0a0a0) returned 0xa0a0a0
[0192.325] GetNearestColor (hdc=0x910107c0, color=0x0) returned 0x0
[0192.325] GetNearestColor (hdc=0x910107c0, color=0xffffff) returned 0xffffff
[0192.325] GetNearestColor (hdc=0x910107c0, color=0xe5e5e5) returned 0xe5e5e5
[0192.325] GetNearestColor (hdc=0x910107c0, color=0xd7d7d7) returned 0xd7d7d7
[0192.325] GetNearestColor (hdc=0x910107c0, color=0x0) returned 0x0
[0192.325] RestoreDC (hdc=0x910107c0, nSavedDC=-1) returned 1
[0192.325] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107c0) returned 0x0
[0192.325] IsAppThemed () returned 0x1
[0192.325] GetThemeAppProperties () returned 0x3
[0192.326] GetThemeAppProperties () returned 0x3
[0192.326] IsAppThemed () returned 0x1
[0192.326] GetThemeAppProperties () returned 0x3
[0192.326] GetThemeAppProperties () returned 0x3
[0192.326] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x22f5b6c | out: lpchText="OK", lprc=0x53e01c) returned 13
[0192.326] IsAppThemed () returned 0x1
[0192.326] GetThemeAppProperties () returned 0x3
[0192.326] GetThemeAppProperties () returned 0x3
[0192.326] IsAppThemed () returned 0x1
[0192.326] GetThemeAppProperties () returned 0x3
[0192.326] GetThemeAppProperties () returned 0x3
[0192.326] IsAppThemed () returned 0x1
[0192.326] GetThemeAppProperties () returned 0x3
[0192.326] GetThemeAppProperties () returned 0x3
[0192.326] IsAppThemed () returned 0x1
[0192.326] GetThemeAppProperties () returned 0x3
[0192.326] GetThemeAppProperties () returned 0x3
[0192.326] IsThemePartDefined () returned 0x1
[0192.326] IsAppThemed () returned 0x1
[0192.327] GetThemeAppProperties () returned 0x3
[0192.327] GetThemeAppProperties () returned 0x3
[0192.327] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0192.327] IsAppThemed () returned 0x1
[0192.327] GetThemeAppProperties () returned 0x3
[0192.327] GetThemeAppProperties () returned 0x3
[0192.327] IsAppThemed () returned 0x1
[0192.327] GetThemeAppProperties () returned 0x3
[0192.327] GetThemeAppProperties () returned 0x3
[0192.327] IsThemePartDefined () returned 0x1
[0192.327] GdipCreateRegion (region=0x53e064) returned 0x0
[0192.327] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.327] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0192.327] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0192.327] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0192.327] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.327] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0192.327] LocalFree (hMem=0x89eac0) returned 0x0
[0192.327] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.327] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0192.327] LocalFree (hMem=0x89eac0) returned 0x0
[0192.327] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0192.327] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0192.327] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0192.328] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0192.328] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.328] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0192.328] GetCurrentObject (hdc=0x910107c0, type=0x1) returned 0xb00017
[0192.328] GetCurrentObject (hdc=0x910107c0, type=0x2) returned 0x900010
[0192.328] GetCurrentObject (hdc=0x910107c0, type=0x7) returned 0x1e0507b9
[0192.328] GetCurrentObject (hdc=0x910107c0, type=0x6) returned 0x8a01c2
[0192.328] SaveDC (hdc=0x910107c0) returned 1
[0192.328] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfd04053e
[0192.328] GetClipRgn (hdc=0x910107c0, hrgn=0xfd04053e) returned 0
[0192.328] SelectClipRgn (hdc=0x910107c0, hrgn=0xfb04051e) returned 2
[0192.328] DeleteObject (ho=0xfd04053e) returned 1
[0192.328] DeleteObject (ho=0xfb04051e) returned 1
[0192.328] OffsetViewportOrgEx (in: hdc=0x910107c0, x=0, y=0, lppt=0x22f621c | out: lppt=0x22f621c) returned 1
[0192.328] DrawThemeParentBackground () returned 0x0
[0192.328] GetWindowPlacement (in: hWnd=0x902d8, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0192.328] GetClientRect (in: hWnd=0x902d8, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0192.328] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.329] GetSystemMetrics (nIndex=42) returned 0
[0192.329] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0192.329] GetClientRect (in: hWnd=0x902d8, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0192.329] GetCurrentObject (hdc=0x910107c0, type=0x1) returned 0xb00017
[0192.329] GetCurrentObject (hdc=0x910107c0, type=0x2) returned 0x900010
[0192.329] GetCurrentObject (hdc=0x910107c0, type=0x7) returned 0x1e0507b9
[0192.329] GetCurrentObject (hdc=0x910107c0, type=0x6) returned 0x8a01c2
[0192.329] SaveDC (hdc=0x910107c0) returned 2
[0192.329] GetNearestColor (hdc=0x910107c0, color=0xf0f0f0) returned 0xf0f0f0
[0192.329] CreateSolidBrush (color=0xf0f0f0) returned 0xde10078d
[0192.329] FillRect (hDC=0x910107c0, lprc=0x53dac8, hbr=0xde10078d) returned 1
[0192.329] DeleteObject (ho=0xde10078d) returned 1
[0192.329] RestoreDC (hdc=0x910107c0, nSavedDC=-1) returned 1
[0192.329] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.329] GetSystemMetrics (nIndex=42) returned 0
[0192.329] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0192.330] GetClientRect (in: hWnd=0x902d8, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0192.330] GetCurrentObject (hdc=0x910107c0, type=0x1) returned 0xb00017
[0192.330] GetCurrentObject (hdc=0x910107c0, type=0x2) returned 0x900010
[0192.330] GetCurrentObject (hdc=0x910107c0, type=0x7) returned 0x1e0507b9
[0192.330] GetCurrentObject (hdc=0x910107c0, type=0x6) returned 0x8a01c2
[0192.330] SaveDC (hdc=0x910107c0) returned 2
[0192.330] GetNearestColor (hdc=0x910107c0, color=0xf0f0f0) returned 0xf0f0f0
[0192.330] CreateSolidBrush (color=0xf0f0f0) returned 0xdf10078d
[0192.330] FillRect (hDC=0x910107c0, lprc=0x53da68, hbr=0xdf10078d) returned 1
[0192.330] DeleteObject (ho=0xdf10078d) returned 1
[0192.330] RestoreDC (hdc=0x910107c0, nSavedDC=-1) returned 1
[0192.330] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.330] GetSystemMetrics (nIndex=42) returned 0
[0192.330] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0192.330] RestoreDC (hdc=0x910107c0, nSavedDC=-1) returned 1
[0192.330] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107c0) returned 0x0
[0192.331] IsAppThemed () returned 0x1
[0192.331] GetThemeAppProperties () returned 0x3
[0192.331] GetThemeAppProperties () returned 0x3
[0192.331] IsAppThemed () returned 0x1
[0192.331] GetThemeAppProperties () returned 0x3
[0192.331] GetThemeAppProperties () returned 0x3
[0192.331] IsThemePartDefined () returned 0x1
[0192.331] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0192.331] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.331] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0192.331] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0192.331] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0192.331] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.331] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0192.331] LocalFree (hMem=0x89eac0) returned 0x0
[0192.331] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0192.331] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0192.331] LocalFree (hMem=0x89eee8) returned 0x0
[0192.331] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0192.331] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0192.331] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0192.331] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0192.331] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.332] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0192.332] GetCurrentObject (hdc=0x910107c0, type=0x1) returned 0xb00017
[0192.332] GetCurrentObject (hdc=0x910107c0, type=0x2) returned 0x900010
[0192.332] GetCurrentObject (hdc=0x910107c0, type=0x7) returned 0x1e0507b9
[0192.332] GetCurrentObject (hdc=0x910107c0, type=0x6) returned 0x8a01c2
[0192.332] SaveDC (hdc=0x910107c0) returned 1
[0192.332] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfc04051e
[0192.332] GetClipRgn (hdc=0x910107c0, hrgn=0xfc04051e) returned 0
[0192.332] SelectClipRgn (hdc=0x910107c0, hrgn=0xff04053e) returned 2
[0192.332] DeleteObject (ho=0xfc04051e) returned 1
[0192.332] DeleteObject (ho=0xff04053e) returned 1
[0192.332] OffsetViewportOrgEx (in: hdc=0x910107c0, x=0, y=0, lppt=0x22f6aa4 | out: lppt=0x22f6aa4) returned 1
[0192.332] IsAppThemed () returned 0x1
[0192.332] GetThemeAppProperties () returned 0x3
[0192.332] GetThemeAppProperties () returned 0x3
[0192.332] DrawThemeBackground () returned 0x0
[0192.332] RestoreDC (hdc=0x910107c0, nSavedDC=-1) returned 1
[0192.332] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107c0) returned 0x0
[0192.332] GdipCreateRegion (region=0x53dfec) returned 0x0
[0192.332] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.332] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0192.332] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0192.332] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0192.333] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0192.333] LocalFree (hMem=0x89ec80) returned 0x0
[0192.333] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0192.333] LocalFree (hMem=0x89eac0) returned 0x0
[0192.333] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0192.333] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0192.333] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0192.333] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0192.333] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.333] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0192.333] GetCurrentObject (hdc=0x910107c0, type=0x1) returned 0xb00017
[0192.333] GetCurrentObject (hdc=0x910107c0, type=0x2) returned 0x900010
[0192.333] GetCurrentObject (hdc=0x910107c0, type=0x7) returned 0x1e0507b9
[0192.333] GetCurrentObject (hdc=0x910107c0, type=0x6) returned 0x8a01c2
[0192.333] SaveDC (hdc=0x910107c0) returned 1
[0192.333] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4053e
[0192.333] GetClipRgn (hdc=0x910107c0, hrgn=0x4053e) returned 0
[0192.333] SelectClipRgn (hdc=0x910107c0, hrgn=0xfd04051e) returned 2
[0192.333] DeleteObject (ho=0x4053e) returned 1
[0192.333] DeleteObject (ho=0xfd04051e) returned 1
[0192.333] OffsetViewportOrgEx (in: hdc=0x910107c0, x=0, y=0, lppt=0x22f6d78 | out: lppt=0x22f6d78) returned 1
[0192.333] IsAppThemed () returned 0x1
[0192.334] GetThemeAppProperties () returned 0x3
[0192.334] GetThemeAppProperties () returned 0x3
[0192.334] GetThemeBackgroundContentRect () returned 0x0
[0192.334] RestoreDC (hdc=0x910107c0, nSavedDC=-1) returned 1
[0192.334] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107c0) returned 0x0
[0192.334] IsAppThemed () returned 0x1
[0192.334] GetThemeAppProperties () returned 0x3
[0192.334] GetThemeAppProperties () returned 0x3
[0192.334] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0192.334] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0192.334] GetCurrentObject (hdc=0x910107c0, type=0x1) returned 0xb00017
[0192.334] GetCurrentObject (hdc=0x910107c0, type=0x2) returned 0x900010
[0192.334] GetCurrentObject (hdc=0x910107c0, type=0x7) returned 0x1e0507b9
[0192.334] GetCurrentObject (hdc=0x910107c0, type=0x6) returned 0x8a01c2
[0192.334] SaveDC (hdc=0x910107c0) returned 1
[0192.334] GetTextAlign (hdc=0x910107c0) returned 0x0
[0192.334] GetTextColor (hdc=0x910107c0) returned 0x0
[0192.334] GetCurrentObject (hdc=0x910107c0, type=0x6) returned 0x8a01c2
[0192.335] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0192.335] SelectObject (hdc=0x910107c0, h=0x730a066d) returned 0x8a01c2
[0192.335] GetBkMode (hdc=0x910107c0) returned 2
[0192.335] SetBkMode (hdc=0x910107c0, mode=1) returned 2
[0192.335] DrawTextExW (in: hdc=0x910107c0, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x22f7118 | out: lpchText="OK", lprc=0x53df84) returned 13
[0192.335] DrawTextExW (in: hdc=0x910107c0, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x22f7118 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0192.335] RestoreDC (hdc=0x910107c0, nSavedDC=-1) returned 1
[0192.335] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107c0) returned 0x0
[0192.335] GetFocus () returned 0x902c8
[0192.336] IsAppThemed () returned 0x1
[0192.336] GetThemeAppProperties () returned 0x3
[0192.336] GetThemeAppProperties () returned 0x3
[0192.336] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0192.336] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x910107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0192.336] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107c0) returned 0x0
[0192.336] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0192.336] SelectObject (hdc=0x910107c0, h=0x85000f) returned 0x1e0507b9
[0192.336] DeleteDC (hdc=0x910107c0) returned 1
[0192.336] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0192.336] EndPaint (hWnd=0xa02d6, lpPaint=0x53e2e4) returned 1
[0192.336] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.336] IsWindowUnicode (hWnd=0xd013e) returned 1
[0192.336] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.336] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.337] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.337] BeginPaint (in: hWnd=0xd013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0192.337] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0192.337] CreateCompatibleDC (hdc=0x60100ce) returned 0x930107c0
[0192.337] SelectObject (hdc=0x930107c0, h=0x1e0507b9) returned 0x85000f
[0192.337] GdipCreateFromHDC (hdc=0x930107c0, graphics=0x53e300) returned 0x0
[0192.337] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0192.337] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0192.337] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0192.337] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0192.337] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0192.337] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0192.337] LocalFree (hMem=0x89eac0) returned 0x0
[0192.337] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0192.337] GdipCreateRegion (region=0x53e348) returned 0x0
[0192.337] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.337] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0192.337] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0192.337] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd2b0dbd) returned 0x0
[0192.338] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.338] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0192.338] GetCurrentObject (hdc=0x930107c0, type=0x1) returned 0xb00017
[0192.338] GetCurrentObject (hdc=0x930107c0, type=0x2) returned 0x900010
[0192.338] GetCurrentObject (hdc=0x930107c0, type=0x7) returned 0x1e0507b9
[0192.338] GetCurrentObject (hdc=0x930107c0, type=0x6) returned 0x8a01c2
[0192.338] SaveDC (hdc=0x930107c0) returned 1
[0192.338] GetNearestColor (hdc=0x930107c0, color=0xf0f0f0) returned 0xf0f0f0
[0192.338] GetNearestColor (hdc=0x930107c0, color=0xa0a0a0) returned 0xa0a0a0
[0192.338] GetNearestColor (hdc=0x930107c0, color=0x696969) returned 0x696969
[0192.338] GetNearestColor (hdc=0x930107c0, color=0xa0a0a0) returned 0xa0a0a0
[0192.338] GetNearestColor (hdc=0x930107c0, color=0x0) returned 0x0
[0192.338] GetNearestColor (hdc=0x930107c0, color=0xffffff) returned 0xffffff
[0192.338] GetNearestColor (hdc=0x930107c0, color=0xe5e5e5) returned 0xe5e5e5
[0192.338] GetNearestColor (hdc=0x930107c0, color=0xd7d7d7) returned 0xd7d7d7
[0192.338] GetNearestColor (hdc=0x930107c0, color=0x0) returned 0x0
[0192.338] RestoreDC (hdc=0x930107c0, nSavedDC=-1) returned 1
[0192.338] GdipReleaseDC (graphics=0x5d92c30, hdc=0x930107c0) returned 0x0
[0192.338] IsAppThemed () returned 0x1
[0192.338] GetThemeAppProperties () returned 0x3
[0192.339] GetThemeAppProperties () returned 0x3
[0192.339] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0192.339] SendMessageW (hWnd=0x902d8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0192.339] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0192.339] IsAppThemed () returned 0x1
[0192.339] GetThemeAppProperties () returned 0x3
[0192.339] GetThemeAppProperties () returned 0x3
[0192.339] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x22f7928 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0192.339] IsAppThemed () returned 0x1
[0192.339] GetThemeAppProperties () returned 0x3
[0192.339] GetThemeAppProperties () returned 0x3
[0192.339] IsAppThemed () returned 0x1
[0192.339] GetThemeAppProperties () returned 0x3
[0192.339] GetThemeAppProperties () returned 0x3
[0192.339] GetFocus () returned 0x902c8
[0192.339] IsAppThemed () returned 0x1
[0192.339] GetThemeAppProperties () returned 0x3
[0192.339] GetThemeAppProperties () returned 0x3
[0192.339] IsAppThemed () returned 0x1
[0192.340] GetThemeAppProperties () returned 0x3
[0192.340] GetThemeAppProperties () returned 0x3
[0192.340] IsThemePartDefined () returned 0x1
[0192.340] IsAppThemed () returned 0x1
[0192.340] GetThemeAppProperties () returned 0x3
[0192.340] GetThemeAppProperties () returned 0x3
[0192.340] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0192.340] IsAppThemed () returned 0x1
[0192.340] GetThemeAppProperties () returned 0x3
[0192.340] GetThemeAppProperties () returned 0x3
[0192.340] IsAppThemed () returned 0x1
[0192.340] GetThemeAppProperties () returned 0x3
[0192.340] GetThemeAppProperties () returned 0x3
[0192.340] IsThemePartDefined () returned 0x1
[0192.340] GdipCreateRegion (region=0x53e070) returned 0x0
[0192.340] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.340] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0192.340] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0192.340] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0192.340] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.340] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0192.340] LocalFree (hMem=0x89eac0) returned 0x0
[0192.340] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0192.340] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0192.340] LocalFree (hMem=0x89ee08) returned 0x0
[0192.341] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0192.341] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0192.341] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0192.341] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0192.341] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.341] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0192.341] GetCurrentObject (hdc=0x930107c0, type=0x1) returned 0xb00017
[0192.341] GetCurrentObject (hdc=0x930107c0, type=0x2) returned 0x900010
[0192.341] GetCurrentObject (hdc=0x930107c0, type=0x7) returned 0x1e0507b9
[0192.341] GetCurrentObject (hdc=0x930107c0, type=0x6) returned 0x8a01c2
[0192.341] SaveDC (hdc=0x930107c0) returned 1
[0192.341] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfe04051e
[0192.341] GetClipRgn (hdc=0x930107c0, hrgn=0xfe04051e) returned 0
[0192.341] SelectClipRgn (hdc=0x930107c0, hrgn=0x404053e) returned 2
[0192.341] DeleteObject (ho=0xfe04051e) returned 1
[0192.341] DeleteObject (ho=0x404053e) returned 1
[0192.341] OffsetViewportOrgEx (in: hdc=0x930107c0, x=0, y=0, lppt=0x22f7fd8 | out: lppt=0x22f7fd8) returned 1
[0192.341] DrawThemeParentBackground () returned 0x0
[0192.342] GetWindowPlacement (in: hWnd=0x902d8, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0192.342] GetClientRect (in: hWnd=0x902d8, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0192.342] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.342] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.342] GetSystemMetrics (nIndex=42) returned 0
[0192.342] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.342] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0192.342] GetClientRect (in: hWnd=0x902d8, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0192.342] GetCurrentObject (hdc=0x930107c0, type=0x1) returned 0xb00017
[0192.342] GetCurrentObject (hdc=0x930107c0, type=0x2) returned 0x900010
[0192.342] GetCurrentObject (hdc=0x930107c0, type=0x7) returned 0x1e0507b9
[0192.342] GetCurrentObject (hdc=0x930107c0, type=0x6) returned 0x8a01c2
[0192.342] SaveDC (hdc=0x930107c0) returned 2
[0192.342] GetNearestColor (hdc=0x930107c0, color=0xf0f0f0) returned 0xf0f0f0
[0192.342] CreateSolidBrush (color=0xf0f0f0) returned 0xe010078d
[0192.342] FillRect (hDC=0x930107c0, lprc=0x53dad0, hbr=0xe010078d) returned 1
[0192.342] DeleteObject (ho=0xe010078d) returned 1
[0192.342] RestoreDC (hdc=0x930107c0, nSavedDC=-1) returned 1
[0192.342] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.343] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.343] GetSystemMetrics (nIndex=42) returned 0
[0192.343] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.343] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0192.343] GetClientRect (in: hWnd=0x902d8, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0192.343] GetCurrentObject (hdc=0x930107c0, type=0x1) returned 0xb00017
[0192.343] GetCurrentObject (hdc=0x930107c0, type=0x2) returned 0x900010
[0192.343] GetCurrentObject (hdc=0x930107c0, type=0x7) returned 0x1e0507b9
[0192.343] GetCurrentObject (hdc=0x930107c0, type=0x6) returned 0x8a01c2
[0192.343] SaveDC (hdc=0x930107c0) returned 2
[0192.343] GetNearestColor (hdc=0x930107c0, color=0xf0f0f0) returned 0xf0f0f0
[0192.343] CreateSolidBrush (color=0xf0f0f0) returned 0xe110078d
[0192.343] FillRect (hDC=0x930107c0, lprc=0x53da70, hbr=0xe110078d) returned 1
[0192.343] DeleteObject (ho=0xe110078d) returned 1
[0192.343] RestoreDC (hdc=0x930107c0, nSavedDC=-1) returned 1
[0192.343] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.343] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.343] GetSystemMetrics (nIndex=42) returned 0
[0192.343] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.343] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0192.344] RestoreDC (hdc=0x930107c0, nSavedDC=-1) returned 1
[0192.344] GdipReleaseDC (graphics=0x5d92c30, hdc=0x930107c0) returned 0x0
[0192.344] IsAppThemed () returned 0x1
[0192.344] GetThemeAppProperties () returned 0x3
[0192.344] GetThemeAppProperties () returned 0x3
[0192.344] IsAppThemed () returned 0x1
[0192.344] GetThemeAppProperties () returned 0x3
[0192.344] GetThemeAppProperties () returned 0x3
[0192.344] IsThemePartDefined () returned 0x1
[0192.344] GdipCreateRegion (region=0x53dff4) returned 0x0
[0192.344] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.344] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0192.344] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0192.344] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0192.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0192.344] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0192.344] LocalFree (hMem=0x89ec80) returned 0x0
[0192.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.344] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0192.344] LocalFree (hMem=0x89eac0) returned 0x0
[0192.344] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0192.345] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0192.345] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0192.345] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0192.345] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.345] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0192.345] GetCurrentObject (hdc=0x930107c0, type=0x1) returned 0xb00017
[0192.345] GetCurrentObject (hdc=0x930107c0, type=0x2) returned 0x900010
[0192.345] GetCurrentObject (hdc=0x930107c0, type=0x7) returned 0x1e0507b9
[0192.345] GetCurrentObject (hdc=0x930107c0, type=0x6) returned 0x8a01c2
[0192.345] SaveDC (hdc=0x930107c0) returned 1
[0192.345] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x504053e
[0192.345] GetClipRgn (hdc=0x930107c0, hrgn=0x504053e) returned 0
[0192.345] SelectClipRgn (hdc=0x930107c0, hrgn=0x4051e) returned 2
[0192.345] DeleteObject (ho=0x504053e) returned 1
[0192.345] DeleteObject (ho=0x4051e) returned 1
[0192.345] OffsetViewportOrgEx (in: hdc=0x930107c0, x=0, y=0, lppt=0x22f8860 | out: lppt=0x22f8860) returned 1
[0192.345] IsAppThemed () returned 0x1
[0192.345] GetThemeAppProperties () returned 0x3
[0192.345] GetThemeAppProperties () returned 0x3
[0192.345] DrawThemeBackground () returned 0x0
[0192.346] RestoreDC (hdc=0x930107c0, nSavedDC=-1) returned 1
[0192.346] GdipReleaseDC (graphics=0x5d92c30, hdc=0x930107c0) returned 0x0
[0192.346] GdipCreateRegion (region=0x53dff8) returned 0x0
[0192.346] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.346] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0192.346] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0192.346] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0192.346] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.346] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0192.346] LocalFree (hMem=0x89eac0) returned 0x0
[0192.346] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.346] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0192.346] LocalFree (hMem=0x89eac0) returned 0x0
[0192.346] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0192.346] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0192.346] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0192.346] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0192.346] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.346] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0192.346] GetCurrentObject (hdc=0x930107c0, type=0x1) returned 0xb00017
[0192.346] GetCurrentObject (hdc=0x930107c0, type=0x2) returned 0x900010
[0192.346] GetCurrentObject (hdc=0x930107c0, type=0x7) returned 0x1e0507b9
[0192.347] GetCurrentObject (hdc=0x930107c0, type=0x6) returned 0x8a01c2
[0192.347] SaveDC (hdc=0x930107c0) returned 1
[0192.347] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x104051e
[0192.347] GetClipRgn (hdc=0x930107c0, hrgn=0x104051e) returned 0
[0192.347] SelectClipRgn (hdc=0x930107c0, hrgn=0x604053e) returned 2
[0192.347] DeleteObject (ho=0x104051e) returned 1
[0192.347] DeleteObject (ho=0x604053e) returned 1
[0192.347] OffsetViewportOrgEx (in: hdc=0x930107c0, x=0, y=0, lppt=0x22f8b34 | out: lppt=0x22f8b34) returned 1
[0192.347] IsAppThemed () returned 0x1
[0192.347] GetThemeAppProperties () returned 0x3
[0192.347] GetThemeAppProperties () returned 0x3
[0192.347] GetThemeBackgroundContentRect () returned 0x0
[0192.347] RestoreDC (hdc=0x930107c0, nSavedDC=-1) returned 1
[0192.347] GdipReleaseDC (graphics=0x5d92c30, hdc=0x930107c0) returned 0x0
[0192.347] IsAppThemed () returned 0x1
[0192.347] GetThemeAppProperties () returned 0x3
[0192.347] GetThemeAppProperties () returned 0x3
[0192.347] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0192.347] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0192.347] GetCurrentObject (hdc=0x930107c0, type=0x1) returned 0xb00017
[0192.347] GetCurrentObject (hdc=0x930107c0, type=0x2) returned 0x900010
[0192.348] GetCurrentObject (hdc=0x930107c0, type=0x7) returned 0x1e0507b9
[0192.348] GetCurrentObject (hdc=0x930107c0, type=0x6) returned 0x8a01c2
[0192.348] SaveDC (hdc=0x930107c0) returned 1
[0192.348] GetTextAlign (hdc=0x930107c0) returned 0x0
[0192.348] GetTextColor (hdc=0x930107c0) returned 0x0
[0192.348] GetCurrentObject (hdc=0x930107c0, type=0x6) returned 0x8a01c2
[0192.348] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0192.348] SelectObject (hdc=0x930107c0, h=0x730a066d) returned 0x8a01c2
[0192.348] GetBkMode (hdc=0x930107c0) returned 2
[0192.348] SetBkMode (hdc=0x930107c0, mode=1) returned 2
[0192.348] DrawTextExW (in: hdc=0x930107c0, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x22f8ed4 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0192.348] DrawTextExW (in: hdc=0x930107c0, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x22f8ed4 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0192.349] RestoreDC (hdc=0x930107c0, nSavedDC=-1) returned 1
[0192.349] GdipReleaseDC (graphics=0x5d92c30, hdc=0x930107c0) returned 0x0
[0192.349] GetFocus () returned 0x902c8
[0192.349] IsAppThemed () returned 0x1
[0192.349] GetThemeAppProperties () returned 0x3
[0192.349] GetThemeAppProperties () returned 0x3
[0192.349] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0192.349] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x930107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0192.349] GdipReleaseDC (graphics=0x5d92c30, hdc=0x930107c0) returned 0x0
[0192.352] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0192.352] SelectObject (hdc=0x930107c0, h=0x85000f) returned 0x1e0507b9
[0192.352] DeleteDC (hdc=0x930107c0) returned 1
[0192.352] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0192.352] EndPaint (hWnd=0xd013e, lpPaint=0x53e2e4) returned 1
[0192.353] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.353] IsWindowUnicode (hWnd=0x202c6) returned 1
[0192.353] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.353] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.353] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.353] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0192.353] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0192.353] CreateCompatibleDC (hdc=0x10105d6) returned 0x950107c0
[0192.353] SelectObject (hdc=0x950107c0, h=0x1e0507b9) returned 0x85000f
[0192.353] GdipCreateFromHDC (hdc=0x950107c0, graphics=0x53e300) returned 0x0
[0192.353] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0192.353] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0192.353] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0192.353] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0192.354] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0192.354] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0192.354] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0192.354] LocalFree (hMem=0x89ec80) returned 0x0
[0192.354] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0192.354] GdipCreateRegion (region=0x53e348) returned 0x0
[0192.354] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.354] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0192.354] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0192.354] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd290dbd) returned 0x0
[0192.354] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.354] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0192.354] GetCurrentObject (hdc=0x950107c0, type=0x1) returned 0xb00017
[0192.354] GetCurrentObject (hdc=0x950107c0, type=0x2) returned 0x900010
[0192.354] GetCurrentObject (hdc=0x950107c0, type=0x7) returned 0x1e0507b9
[0192.354] GetCurrentObject (hdc=0x950107c0, type=0x6) returned 0x8a01c2
[0192.354] SaveDC (hdc=0x950107c0) returned 1
[0192.354] GetNearestColor (hdc=0x950107c0, color=0xff) returned 0xff
[0192.355] GetNearestColor (hdc=0x950107c0, color=0x55) returned 0x55
[0192.355] GetNearestColor (hdc=0x950107c0, color=0x0) returned 0x0
[0192.355] GetNearestColor (hdc=0x950107c0, color=0x55) returned 0x55
[0192.355] GetNearestColor (hdc=0x950107c0, color=0x0) returned 0x0
[0192.355] GetNearestColor (hdc=0x950107c0, color=0x8080ff) returned 0x8080ff
[0192.355] GetNearestColor (hdc=0x950107c0, color=0x7373e5) returned 0x7373e5
[0192.355] GetNearestColor (hdc=0x950107c0, color=0xe5) returned 0xe5
[0192.355] GetNearestColor (hdc=0x950107c0, color=0x0) returned 0x0
[0192.355] RestoreDC (hdc=0x950107c0, nSavedDC=-1) returned 1
[0192.355] GdipReleaseDC (graphics=0x5d92c30, hdc=0x950107c0) returned 0x0
[0192.355] IsAppThemed () returned 0x1
[0192.355] GetThemeAppProperties () returned 0x3
[0192.355] GetThemeAppProperties () returned 0x3
[0192.355] IsAppThemed () returned 0x1
[0192.355] GetThemeAppProperties () returned 0x3
[0192.355] GetThemeAppProperties () returned 0x3
[0192.355] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0192.355] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x22f96b8 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0192.356] IsAppThemed () returned 0x1
[0192.356] GetThemeAppProperties () returned 0x3
[0192.356] GetThemeAppProperties () returned 0x3
[0192.356] IsAppThemed () returned 0x1
[0192.356] GetThemeAppProperties () returned 0x3
[0192.356] GetThemeAppProperties () returned 0x3
[0192.356] GetFocus () returned 0x902c8
[0192.356] IsAppThemed () returned 0x1
[0192.356] GetThemeAppProperties () returned 0x3
[0192.356] GetThemeAppProperties () returned 0x3
[0192.356] IsAppThemed () returned 0x1
[0192.356] GetThemeAppProperties () returned 0x3
[0192.356] GetThemeAppProperties () returned 0x3
[0192.356] IsThemePartDefined () returned 0x1
[0192.356] IsAppThemed () returned 0x1
[0192.356] GetThemeAppProperties () returned 0x3
[0192.356] GetThemeAppProperties () returned 0x3
[0192.356] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0192.356] IsAppThemed () returned 0x1
[0192.356] GetThemeAppProperties () returned 0x3
[0192.356] GetThemeAppProperties () returned 0x3
[0192.356] IsAppThemed () returned 0x1
[0192.357] GetThemeAppProperties () returned 0x3
[0192.357] GetThemeAppProperties () returned 0x3
[0192.357] IsThemePartDefined () returned 0x1
[0192.357] GdipCreateRegion (region=0x53e070) returned 0x0
[0192.357] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.357] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0192.357] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0192.357] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0192.357] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0192.357] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0192.357] LocalFree (hMem=0x89ec80) returned 0x0
[0192.357] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0192.357] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0192.357] LocalFree (hMem=0x89ee08) returned 0x0
[0192.357] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0192.357] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0192.357] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0192.357] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0192.357] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.357] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0192.357] GetCurrentObject (hdc=0x950107c0, type=0x1) returned 0xb00017
[0192.357] GetCurrentObject (hdc=0x950107c0, type=0x2) returned 0x900010
[0192.357] GetCurrentObject (hdc=0x950107c0, type=0x7) returned 0x1e0507b9
[0192.358] GetCurrentObject (hdc=0x950107c0, type=0x6) returned 0x8a01c2
[0192.358] SaveDC (hdc=0x950107c0) returned 1
[0192.358] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x704053e
[0192.358] GetClipRgn (hdc=0x950107c0, hrgn=0x704053e) returned 0
[0192.358] SelectClipRgn (hdc=0x950107c0, hrgn=0x504051e) returned 2
[0192.358] DeleteObject (ho=0x704053e) returned 1
[0192.358] DeleteObject (ho=0x504051e) returned 1
[0192.358] OffsetViewportOrgEx (in: hdc=0x950107c0, x=0, y=0, lppt=0x22f9d68 | out: lppt=0x22f9d68) returned 1
[0192.358] DrawThemeParentBackground () returned 0x0
[0192.358] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0192.358] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0192.358] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0192.358] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0192.358] GetSystemMetrics (nIndex=42) returned 0
[0192.358] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0192.358] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0192.358] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0192.358] GetCurrentObject (hdc=0x950107c0, type=0x1) returned 0xb00017
[0192.358] GetCurrentObject (hdc=0x950107c0, type=0x2) returned 0x900010
[0192.359] GetCurrentObject (hdc=0x950107c0, type=0x7) returned 0x1e0507b9
[0192.359] GetCurrentObject (hdc=0x950107c0, type=0x6) returned 0x8a01c2
[0192.359] SaveDC (hdc=0x950107c0) returned 2
[0192.359] GetNearestColor (hdc=0x950107c0, color=0xff) returned 0xff
[0192.359] CreateSolidBrush (color=0xff) returned 0xe210078d
[0192.359] FillRect (hDC=0x950107c0, lprc=0x53dad0, hbr=0xe210078d) returned 1
[0192.359] DeleteObject (ho=0xe210078d) returned 1
[0192.359] RestoreDC (hdc=0x950107c0, nSavedDC=-1) returned 1
[0192.359] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0192.359] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0192.359] GetSystemMetrics (nIndex=42) returned 0
[0192.359] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0192.359] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0192.359] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0192.359] GetCurrentObject (hdc=0x950107c0, type=0x1) returned 0xb00017
[0192.359] GetCurrentObject (hdc=0x950107c0, type=0x2) returned 0x900010
[0192.359] GetCurrentObject (hdc=0x950107c0, type=0x7) returned 0x1e0507b9
[0192.359] GetCurrentObject (hdc=0x950107c0, type=0x6) returned 0x8a01c2
[0192.359] SaveDC (hdc=0x950107c0) returned 2
[0192.360] GetNearestColor (hdc=0x950107c0, color=0xff) returned 0xff
[0192.360] CreateSolidBrush (color=0xff) returned 0xe310078d
[0192.360] FillRect (hDC=0x950107c0, lprc=0x53da70, hbr=0xe310078d) returned 1
[0192.360] DeleteObject (ho=0xe310078d) returned 1
[0192.360] RestoreDC (hdc=0x950107c0, nSavedDC=-1) returned 1
[0192.360] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0192.360] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0192.360] GetSystemMetrics (nIndex=42) returned 0
[0192.360] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0192.360] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0192.360] RestoreDC (hdc=0x950107c0, nSavedDC=-1) returned 1
[0192.360] GdipReleaseDC (graphics=0x5d92c30, hdc=0x950107c0) returned 0x0
[0192.360] IsAppThemed () returned 0x1
[0192.360] GetThemeAppProperties () returned 0x3
[0192.360] GetThemeAppProperties () returned 0x3
[0192.360] IsAppThemed () returned 0x1
[0192.360] GetThemeAppProperties () returned 0x3
[0192.360] GetThemeAppProperties () returned 0x3
[0192.360] IsThemePartDefined () returned 0x1
[0192.361] GdipCreateRegion (region=0x53dff4) returned 0x0
[0192.361] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.361] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0192.361] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0192.361] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0192.361] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0192.361] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0192.361] LocalFree (hMem=0x89ee08) returned 0x0
[0192.361] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0192.361] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0192.361] LocalFree (hMem=0x89ec80) returned 0x0
[0192.361] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0192.361] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0192.361] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0192.361] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0192.361] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.361] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0192.361] GetCurrentObject (hdc=0x950107c0, type=0x1) returned 0xb00017
[0192.361] GetCurrentObject (hdc=0x950107c0, type=0x2) returned 0x900010
[0192.361] GetCurrentObject (hdc=0x950107c0, type=0x7) returned 0x1e0507b9
[0192.361] GetCurrentObject (hdc=0x950107c0, type=0x6) returned 0x8a01c2
[0192.361] SaveDC (hdc=0x950107c0) returned 1
[0192.362] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x604051e
[0192.362] GetClipRgn (hdc=0x950107c0, hrgn=0x604051e) returned 0
[0192.362] SelectClipRgn (hdc=0x950107c0, hrgn=0x904053e) returned 2
[0192.362] DeleteObject (ho=0x604051e) returned 1
[0192.362] DeleteObject (ho=0x904053e) returned 1
[0192.362] OffsetViewportOrgEx (in: hdc=0x950107c0, x=0, y=0, lppt=0x22fa5cc | out: lppt=0x22fa5cc) returned 1
[0192.362] IsAppThemed () returned 0x1
[0192.362] GetThemeAppProperties () returned 0x3
[0192.362] GetThemeAppProperties () returned 0x3
[0192.362] DrawThemeBackground () returned 0x0
[0192.362] RestoreDC (hdc=0x950107c0, nSavedDC=-1) returned 1
[0192.362] GdipReleaseDC (graphics=0x5d92c30, hdc=0x950107c0) returned 0x0
[0192.362] GdipCreateRegion (region=0x53dff8) returned 0x0
[0192.362] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.362] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0192.362] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0192.362] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0192.362] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0192.362] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0192.362] LocalFree (hMem=0x89ec80) returned 0x0
[0192.363] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.363] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0192.363] LocalFree (hMem=0x89eac0) returned 0x0
[0192.363] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0192.363] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0192.363] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0192.363] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0192.363] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.363] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0192.363] GetCurrentObject (hdc=0x950107c0, type=0x1) returned 0xb00017
[0192.363] GetCurrentObject (hdc=0x950107c0, type=0x2) returned 0x900010
[0192.363] GetCurrentObject (hdc=0x950107c0, type=0x7) returned 0x1e0507b9
[0192.363] GetCurrentObject (hdc=0x950107c0, type=0x6) returned 0x8a01c2
[0192.363] SaveDC (hdc=0x950107c0) returned 1
[0192.363] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa04053e
[0192.363] GetClipRgn (hdc=0x950107c0, hrgn=0xa04053e) returned 0
[0192.363] SelectClipRgn (hdc=0x950107c0, hrgn=0x704051e) returned 2
[0192.363] DeleteObject (ho=0xa04053e) returned 1
[0192.363] DeleteObject (ho=0x704051e) returned 1
[0192.363] OffsetViewportOrgEx (in: hdc=0x950107c0, x=0, y=0, lppt=0x22fa8a0 | out: lppt=0x22fa8a0) returned 1
[0192.363] IsAppThemed () returned 0x1
[0192.363] GetThemeAppProperties () returned 0x3
[0192.363] GetThemeAppProperties () returned 0x3
[0192.364] GetThemeBackgroundContentRect () returned 0x0
[0192.364] RestoreDC (hdc=0x950107c0, nSavedDC=-1) returned 1
[0192.364] GdipReleaseDC (graphics=0x5d92c30, hdc=0x950107c0) returned 0x0
[0192.364] IsAppThemed () returned 0x1
[0192.364] GetThemeAppProperties () returned 0x3
[0192.364] GetThemeAppProperties () returned 0x3
[0192.364] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0192.364] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0192.364] GetCurrentObject (hdc=0x950107c0, type=0x1) returned 0xb00017
[0192.364] GetCurrentObject (hdc=0x950107c0, type=0x2) returned 0x900010
[0192.364] GetCurrentObject (hdc=0x950107c0, type=0x7) returned 0x1e0507b9
[0192.364] GetCurrentObject (hdc=0x950107c0, type=0x6) returned 0x8a01c2
[0192.364] SaveDC (hdc=0x950107c0) returned 1
[0192.364] GetTextAlign (hdc=0x950107c0) returned 0x0
[0192.364] GetTextColor (hdc=0x950107c0) returned 0x0
[0192.364] GetCurrentObject (hdc=0x950107c0, type=0x6) returned 0x8a01c2
[0192.364] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0192.364] SelectObject (hdc=0x950107c0, h=0x450a0799) returned 0x8a01c2
[0192.364] GetBkMode (hdc=0x950107c0) returned 2
[0192.364] SetBkMode (hdc=0x950107c0, mode=1) returned 2
[0192.364] DrawTextExW (in: hdc=0x950107c0, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x22fac40 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0192.365] DrawTextExW (in: hdc=0x950107c0, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x22fac40 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0192.433] RestoreDC (hdc=0x950107c0, nSavedDC=-1) returned 1
[0192.433] GdipReleaseDC (graphics=0x5d92c30, hdc=0x950107c0) returned 0x0
[0192.434] GetFocus () returned 0x902c8
[0192.434] IsAppThemed () returned 0x1
[0192.434] GetThemeAppProperties () returned 0x3
[0192.434] GetThemeAppProperties () returned 0x3
[0192.434] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0192.434] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x950107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0192.434] GdipReleaseDC (graphics=0x5d92c30, hdc=0x950107c0) returned 0x0
[0192.434] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0192.434] SelectObject (hdc=0x950107c0, h=0x85000f) returned 0x1e0507b9
[0192.434] DeleteDC (hdc=0x950107c0) returned 1
[0192.434] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0192.434] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0192.434] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.434] IsWindowUnicode (hWnd=0xa02d6) returned 1
[0192.435] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.435] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.435] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.435] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.435] IsWindowUnicode (hWnd=0xa02d6) returned 1
[0192.435] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.435] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.435] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.435] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x2a1, wParam=0x0, lParam=0xc0012) returned 0x0
[0192.435] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0192.435] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0192.435] WaitMessage () returned 1
[0192.453] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0192.453] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0192.453] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0192.453] WaitMessage () returned 1
[0192.454] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0192.454] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0192.455] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0192.455] WaitMessage () returned 1
[0192.455] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0192.455] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0192.455] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0192.455] WaitMessage () returned 1
[0192.465] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.465] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x84, wParam=0x0, lParam=0x1950353) returned 0x1
[0192.465] IsWindowUnicode (hWnd=0xa02d6) returned 1
[0192.465] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.465] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x84, wParam=0x0, lParam=0x1950353) returned 0x1
[0192.465] GetDlgItem (hDlg=0x902d8, nIDDlgItem=0) returned 0x0
[0192.465] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x210, wParam=0x201, lParam=0x180134) returned 0x0
[0192.465] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x21, wParam=0x902d8, lParam=0x2010001) returned 0x1
[0192.465] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x21, wParam=0x902d8, lParam=0x2010001) returned 0x1
[0192.466] SetCursor (hCursor=0x10003) returned 0x10003
[0192.466] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.466] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.466] GetKeyState (nVirtKey=1) returned -127
[0192.466] GetKeyState (nVirtKey=2) returned 0
[0192.466] GetKeyState (nVirtKey=4) returned 0
[0192.466] GetKeyState (nVirtKey=5) returned 0
[0192.466] GetKeyState (nVirtKey=6) returned 0
[0192.466] IsWindowVisible (hWnd=0xa02d6) returned 1
[0192.466] IsWindowEnabled (hWnd=0xa02d6) returned 1
[0192.466] SetFocus (hWnd=0xa02d6) returned 0x902c8
[0192.466] GetFocus () returned 0xa02d6
[0192.466] IsChild (hWndParent=0x902d8, hWnd=0xa02d6) returned 1
[0192.466] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x8, wParam=0xa02d6, lParam=0x0) returned 0x1
[0192.467] SendMessageW (hWnd=0x902c8, Msg=0x2111, wParam=0x20002c8, lParam=0x902c8) returned 0x0
[0192.468] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0192.469] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0192.469] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0192.469] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0192.470] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0192.470] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0192.472] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0192.472] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x7, wParam=0x902c8, lParam=0x0) returned 0x0
[0192.472] GetStockObject (i=5) returned 0x900015
[0192.472] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0192.472] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0xd, wParam=0x3, lParam=0x89e7a8) returned 0x2
[0192.472] GetDlgItem (hDlg=0x902d8, nIDDlgItem=656086) returned 0xa02d6
[0192.472] SendMessageW (hWnd=0xa02d6, Msg=0x202b, wParam=0xa02d6, lParam=0x53de74) returned 0x0
[0192.472] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x202b, wParam=0xa02d6, lParam=0x53de74) returned 0x0
[0192.472] InvalidateRect (hWnd=0xa02d6, lpRect=0x0, bErase=0) returned 1
[0192.474] GetFocus () returned 0xa02d6
[0192.474] GetFocus () returned 0xa02d6
[0192.474] GetFocus () returned 0xa02d6
[0192.474] GetKeyState (nVirtKey=1) returned -127
[0192.482] GetKeyState (nVirtKey=2) returned 0
[0192.482] GetKeyState (nVirtKey=4) returned 0
[0192.482] GetKeyState (nVirtKey=5) returned 0
[0192.482] GetKeyState (nVirtKey=6) returned 0
[0192.482] GetCapture () returned 0x0
[0192.482] SetCapture (hWnd=0xa02d6) returned 0x0
[0192.482] GetKeyState (nVirtKey=1) returned -127
[0192.482] GetKeyState (nVirtKey=2) returned 0
[0192.482] GetKeyState (nVirtKey=4) returned 0
[0192.482] GetKeyState (nVirtKey=5) returned 0
[0192.482] GetKeyState (nVirtKey=6) returned 0
[0192.482] NotifyWinEvent (event=0x800a, hwnd=0xa02d6, idObject=-4, idChild=0)
[0192.482] InvalidateRect (hWnd=0xa02d6, lpRect=0x53e4c8, bErase=0) returned 1
[0192.482] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.482] IsWindowUnicode (hWnd=0xa02d6) returned 1
[0192.483] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0192.483] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0192.483] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0192.483] MapWindowPoints (in: hWndFrom=0xa02d6, hWndTo=0x0, lpPoints=0x22fae6c, cPoints=0x1 | out: lpPoints=0x22fae6c) returned 25756481
[0192.483] NotifyWinEvent (event=0x800a, hwnd=0xa02d6, idObject=-4, idChild=0)
[0192.483] InvalidateRect (hWnd=0xa02d6, lpRect=0x53e468, bErase=0) returned 1
[0192.483] UpdateWindow (hWnd=0xa02d6) returned 1
[0192.483] BeginPaint (in: hWnd=0xa02d6, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0192.483] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0192.483] CreateCompatibleDC (hdc=0x10105d6) returned 0x250107aa
[0192.483] SelectObject (hdc=0x250107aa, h=0x1e0507b9) returned 0x85000f
[0192.483] GdipCreateFromHDC (hdc=0x250107aa, graphics=0x53df98) returned 0x0
[0192.484] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0192.484] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0192.484] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0192.484] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0192.484] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0192.484] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.484] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0192.484] LocalFree (hMem=0x89eac0) returned 0x0
[0192.484] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0192.484] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0192.484] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.484] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0192.484] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0192.484] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd270dbd) returned 0x0
[0192.485] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.485] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0192.485] GetCurrentObject (hdc=0x250107aa, type=0x1) returned 0xb00017
[0192.485] GetCurrentObject (hdc=0x250107aa, type=0x2) returned 0x900010
[0192.485] GetCurrentObject (hdc=0x250107aa, type=0x7) returned 0x1e0507b9
[0192.485] GetCurrentObject (hdc=0x250107aa, type=0x6) returned 0x8a01c2
[0192.485] SaveDC (hdc=0x250107aa) returned 1
[0192.485] GetNearestColor (hdc=0x250107aa, color=0xf0f0f0) returned 0xf0f0f0
[0192.485] GetNearestColor (hdc=0x250107aa, color=0xa0a0a0) returned 0xa0a0a0
[0192.485] GetNearestColor (hdc=0x250107aa, color=0x696969) returned 0x696969
[0192.485] GetNearestColor (hdc=0x250107aa, color=0xa0a0a0) returned 0xa0a0a0
[0192.485] GetNearestColor (hdc=0x250107aa, color=0x0) returned 0x0
[0192.485] GetNearestColor (hdc=0x250107aa, color=0xffffff) returned 0xffffff
[0192.486] GetNearestColor (hdc=0x250107aa, color=0xe5e5e5) returned 0xe5e5e5
[0192.486] GetNearestColor (hdc=0x250107aa, color=0xd7d7d7) returned 0xd7d7d7
[0192.486] GetNearestColor (hdc=0x250107aa, color=0x0) returned 0x0
[0192.486] RestoreDC (hdc=0x250107aa, nSavedDC=-1) returned 1
[0192.486] GdipReleaseDC (graphics=0x5d92c30, hdc=0x250107aa) returned 0x0
[0192.486] IsAppThemed () returned 0x1
[0192.486] GetThemeAppProperties () returned 0x3
[0192.486] GetThemeAppProperties () returned 0x3
[0192.486] IsAppThemed () returned 0x1
[0192.486] GetThemeAppProperties () returned 0x3
[0192.486] GetThemeAppProperties () returned 0x3
[0192.486] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0192.486] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x22fb5e0 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0192.487] IsAppThemed () returned 0x1
[0192.487] GetThemeAppProperties () returned 0x3
[0192.487] GetThemeAppProperties () returned 0x3
[0192.487] IsAppThemed () returned 0x1
[0192.487] GetThemeAppProperties () returned 0x3
[0192.487] GetThemeAppProperties () returned 0x3
[0192.487] IsAppThemed () returned 0x1
[0192.487] GetThemeAppProperties () returned 0x3
[0192.487] GetThemeAppProperties () returned 0x3
[0192.487] IsAppThemed () returned 0x1
[0192.487] GetThemeAppProperties () returned 0x3
[0192.487] GetThemeAppProperties () returned 0x3
[0192.487] IsThemePartDefined () returned 0x1
[0192.487] IsAppThemed () returned 0x1
[0192.487] GetThemeAppProperties () returned 0x3
[0192.487] GetThemeAppProperties () returned 0x3
[0192.487] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0192.487] IsAppThemed () returned 0x1
[0192.488] GetThemeAppProperties () returned 0x3
[0192.488] GetThemeAppProperties () returned 0x3
[0192.488] IsAppThemed () returned 0x1
[0192.488] GetThemeAppProperties () returned 0x3
[0192.488] GetThemeAppProperties () returned 0x3
[0192.488] IsThemePartDefined () returned 0x1
[0192.488] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0192.488] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.488] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0192.488] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0192.488] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0192.488] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0192.488] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0192.488] LocalFree (hMem=0x89ee08) returned 0x0
[0192.488] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0192.488] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0192.488] LocalFree (hMem=0x89ec80) returned 0x0
[0192.488] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0192.488] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0192.488] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0192.489] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0192.489] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.489] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0192.489] GetCurrentObject (hdc=0x250107aa, type=0x1) returned 0xb00017
[0192.489] GetCurrentObject (hdc=0x250107aa, type=0x2) returned 0x900010
[0192.489] GetCurrentObject (hdc=0x250107aa, type=0x7) returned 0x1e0507b9
[0192.489] GetCurrentObject (hdc=0x250107aa, type=0x6) returned 0x8a01c2
[0192.489] SaveDC (hdc=0x250107aa) returned 1
[0192.489] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x804051e
[0192.489] GetClipRgn (hdc=0x250107aa, hrgn=0x804051e) returned 0
[0192.489] SelectClipRgn (hdc=0x250107aa, hrgn=0xe04053e) returned 2
[0192.489] DeleteObject (ho=0x804051e) returned 1
[0192.489] DeleteObject (ho=0xe04053e) returned 1
[0192.489] OffsetViewportOrgEx (in: hdc=0x250107aa, x=0, y=0, lppt=0x22fbc90 | out: lppt=0x22fbc90) returned 1
[0192.489] DrawThemeParentBackground () returned 0x0
[0192.490] GetWindowPlacement (in: hWnd=0x902d8, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0192.490] GetClientRect (in: hWnd=0x902d8, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0192.490] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.494] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.494] GetSystemMetrics (nIndex=42) returned 0
[0192.494] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.494] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0192.494] GetClientRect (in: hWnd=0x902d8, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0192.494] GetCurrentObject (hdc=0x250107aa, type=0x1) returned 0xb00017
[0192.494] GetCurrentObject (hdc=0x250107aa, type=0x2) returned 0x900010
[0192.494] GetCurrentObject (hdc=0x250107aa, type=0x7) returned 0x1e0507b9
[0192.494] GetCurrentObject (hdc=0x250107aa, type=0x6) returned 0x8a01c2
[0192.494] SaveDC (hdc=0x250107aa) returned 2
[0192.494] GetNearestColor (hdc=0x250107aa, color=0xf0f0f0) returned 0xf0f0f0
[0192.494] CreateSolidBrush (color=0xf0f0f0) returned 0xe410078d
[0192.494] FillRect (hDC=0x250107aa, lprc=0x53d760, hbr=0xe410078d) returned 1
[0192.495] DeleteObject (ho=0xe410078d) returned 1
[0192.495] RestoreDC (hdc=0x250107aa, nSavedDC=-1) returned 1
[0192.495] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.495] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.495] GetSystemMetrics (nIndex=42) returned 0
[0192.495] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.495] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0192.495] GetClientRect (in: hWnd=0x902d8, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0192.495] GetCurrentObject (hdc=0x250107aa, type=0x1) returned 0xb00017
[0192.495] GetCurrentObject (hdc=0x250107aa, type=0x2) returned 0x900010
[0192.495] GetCurrentObject (hdc=0x250107aa, type=0x7) returned 0x1e0507b9
[0192.495] GetCurrentObject (hdc=0x250107aa, type=0x6) returned 0x8a01c2
[0192.495] SaveDC (hdc=0x250107aa) returned 2
[0192.495] GetNearestColor (hdc=0x250107aa, color=0xf0f0f0) returned 0xf0f0f0
[0192.495] CreateSolidBrush (color=0xf0f0f0) returned 0xe510078d
[0192.496] FillRect (hDC=0x250107aa, lprc=0x53d700, hbr=0xe510078d) returned 1
[0192.496] DeleteObject (ho=0xe510078d) returned 1
[0192.496] RestoreDC (hdc=0x250107aa, nSavedDC=-1) returned 1
[0192.496] GetWindowTextLengthW (hWnd=0x902d8) returned 10
[0192.496] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.496] GetSystemMetrics (nIndex=42) returned 0
[0192.496] GetWindowTextW (in: hWnd=0x902d8, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0192.496] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0192.496] RestoreDC (hdc=0x250107aa, nSavedDC=-1) returned 1
[0192.496] GdipReleaseDC (graphics=0x5d92c30, hdc=0x250107aa) returned 0x0
[0192.496] IsAppThemed () returned 0x1
[0192.497] GetThemeAppProperties () returned 0x3
[0192.497] GetThemeAppProperties () returned 0x3
[0192.497] IsAppThemed () returned 0x1
[0192.497] GetThemeAppProperties () returned 0x3
[0192.497] GetThemeAppProperties () returned 0x3
[0192.497] IsThemePartDefined () returned 0x1
[0192.497] GdipCreateRegion (region=0x53dc80) returned 0x0
[0192.497] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.497] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0192.497] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0192.497] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0192.497] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.497] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0192.497] LocalFree (hMem=0x89eac0) returned 0x0
[0192.497] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0192.497] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0192.497] LocalFree (hMem=0x89ec80) returned 0x0
[0192.497] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0192.498] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0192.498] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0192.498] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0192.498] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.498] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0192.498] GetCurrentObject (hdc=0x250107aa, type=0x1) returned 0xb00017
[0192.498] GetCurrentObject (hdc=0x250107aa, type=0x2) returned 0x900010
[0192.498] GetCurrentObject (hdc=0x250107aa, type=0x7) returned 0x1e0507b9
[0192.498] GetCurrentObject (hdc=0x250107aa, type=0x6) returned 0x8a01c2
[0192.498] SaveDC (hdc=0x250107aa) returned 1
[0192.498] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf04053e
[0192.498] GetClipRgn (hdc=0x250107aa, hrgn=0xf04053e) returned 0
[0192.498] SelectClipRgn (hdc=0x250107aa, hrgn=0xa04051e) returned 2
[0192.498] DeleteObject (ho=0xf04053e) returned 1
[0192.498] DeleteObject (ho=0xa04051e) returned 1
[0192.498] OffsetViewportOrgEx (in: hdc=0x250107aa, x=0, y=0, lppt=0x22fc600 | out: lppt=0x22fc600) returned 1
[0192.499] IsAppThemed () returned 0x1
[0192.499] GetThemeAppProperties () returned 0x3
[0192.499] GetThemeAppProperties () returned 0x3
[0192.499] DrawThemeBackground () returned 0x0
[0192.499] RestoreDC (hdc=0x250107aa, nSavedDC=-1) returned 1
[0192.499] GdipReleaseDC (graphics=0x5d92c30, hdc=0x250107aa) returned 0x0
[0192.499] GdipCreateRegion (region=0x53dc84) returned 0x0
[0192.499] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.499] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0192.499] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0192.499] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0192.499] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0192.499] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0192.499] LocalFree (hMem=0x89eee8) returned 0x0
[0192.499] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0192.499] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0192.500] LocalFree (hMem=0x89ee08) returned 0x0
[0192.500] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0192.500] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0192.500] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0192.500] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0192.500] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.500] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0192.500] GetCurrentObject (hdc=0x250107aa, type=0x1) returned 0xb00017
[0192.500] GetCurrentObject (hdc=0x250107aa, type=0x2) returned 0x900010
[0192.500] GetCurrentObject (hdc=0x250107aa, type=0x7) returned 0x1e0507b9
[0192.500] GetCurrentObject (hdc=0x250107aa, type=0x6) returned 0x8a01c2
[0192.500] SaveDC (hdc=0x250107aa) returned 1
[0192.500] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb04051e
[0192.500] GetClipRgn (hdc=0x250107aa, hrgn=0xb04051e) returned 0
[0192.500] SelectClipRgn (hdc=0x250107aa, hrgn=0x1004053e) returned 2
[0192.500] DeleteObject (ho=0xb04051e) returned 1
[0192.501] DeleteObject (ho=0x1004053e) returned 1
[0192.501] OffsetViewportOrgEx (in: hdc=0x250107aa, x=0, y=0, lppt=0x22fc8d4 | out: lppt=0x22fc8d4) returned 1
[0192.501] IsAppThemed () returned 0x1
[0192.501] GetThemeAppProperties () returned 0x3
[0192.501] GetThemeAppProperties () returned 0x3
[0192.501] GetThemeBackgroundContentRect () returned 0x0
[0192.501] RestoreDC (hdc=0x250107aa, nSavedDC=-1) returned 1
[0192.501] GdipReleaseDC (graphics=0x5d92c30, hdc=0x250107aa) returned 0x0
[0192.501] IsAppThemed () returned 0x1
[0192.501] GetThemeAppProperties () returned 0x3
[0192.501] GetThemeAppProperties () returned 0x3
[0192.501] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0192.501] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0192.501] GetCurrentObject (hdc=0x250107aa, type=0x1) returned 0xb00017
[0192.501] GetCurrentObject (hdc=0x250107aa, type=0x2) returned 0x900010
[0192.501] GetCurrentObject (hdc=0x250107aa, type=0x7) returned 0x1e0507b9
[0192.501] GetCurrentObject (hdc=0x250107aa, type=0x6) returned 0x8a01c2
[0192.501] SaveDC (hdc=0x250107aa) returned 1
[0192.502] GetTextAlign (hdc=0x250107aa) returned 0x0
[0192.502] GetTextColor (hdc=0x250107aa) returned 0x0
[0192.502] GetCurrentObject (hdc=0x250107aa, type=0x6) returned 0x8a01c2
[0192.502] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0192.502] SelectObject (hdc=0x250107aa, h=0x730a066d) returned 0x8a01c2
[0192.502] GetBkMode (hdc=0x250107aa) returned 2
[0192.502] SetBkMode (hdc=0x250107aa, mode=1) returned 2
[0192.502] DrawTextExW (in: hdc=0x250107aa, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x22fcc74 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0192.502] DrawTextExW (in: hdc=0x250107aa, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x22fcc74 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0192.503] RestoreDC (hdc=0x250107aa, nSavedDC=-1) returned 1
[0192.503] GdipReleaseDC (graphics=0x5d92c30, hdc=0x250107aa) returned 0x0
[0192.503] GetFocus () returned 0xa02d6
[0192.503] IsAppThemed () returned 0x1
[0192.503] GetThemeAppProperties () returned 0x3
[0192.503] GetThemeAppProperties () returned 0x3
[0192.503] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0192.503] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x250107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0192.503] GdipReleaseDC (graphics=0x5d92c30, hdc=0x250107aa) returned 0x0
[0192.503] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0192.504] SelectObject (hdc=0x250107aa, h=0x85000f) returned 0x1e0507b9
[0192.504] DeleteDC (hdc=0x250107aa) returned 1
[0192.504] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0192.504] EndPaint (hWnd=0xa02d6, lpPaint=0x53df7c) returned 1
[0192.504] MapWindowPoints (in: hWndFrom=0xa02d6, hWndTo=0x0, lpPoints=0x22fcd70, cPoints=0x1 | out: lpPoints=0x22fcd70) returned 25756481
[0192.504] WindowFromPoint (Point=0x353) returned 0xa02d6
[0192.504] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x84, wParam=0x0, lParam=0x1950353) returned 0x1
[0192.504] NotifyWinEvent (event=0x800a, hwnd=0xa02d6, idObject=-4, idChild=0)
[0192.504] NotifyWinEvent (event=0x800c, hwnd=0xa02d6, idObject=-4, idChild=0)
[0192.504] GetWindowTextLengthW (hWnd=0x902c8) returned 0
[0192.504] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0192.505] GetSystemMetrics (nIndex=42) returned 0
[0192.505] GetWindowTextW (in: hWnd=0x902c8, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0192.505] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0192.505] SendMessageW (hWnd=0x902d8, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0192.505] GetCapture () returned 0xa02d6
[0192.505] ReleaseCapture () returned 1
[0192.505] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0192.505] PeekMessageW (lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0)
[0192.506] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x84, wParam=0x0, lParam=0x1950353) returned 0x1
[0192.507] IsWindow (hWnd=0x70036) returned 1
[0192.507] EnableWindow (hWnd=0x70036, bEnable=1)
[0192.508] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0192.508] IsWindow (hWnd=0x70036) returned 1
[0192.508] SetActiveWindow (hWnd=0x70036)
[0192.508] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x86, wParam=0x0, lParam=0x70036)
[0192.510] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0192.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0192.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0192.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0192.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0192.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0192.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x902d8) returned 0x1
[0192.517] GetFocus () returned 0xa02d6
[0192.517] SetFocus (hWnd=0x202c6)
[0192.518] GetFocus () returned 0x202c6
[0192.518] IsChild (hWndParent=0x902d8, hWnd=0x202c6) returned 0
[0192.518] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0192.518] GetCapture () returned 0x0
[0192.518] InvalidateRect (hWnd=0xa02d6, lpRect=0x0, bErase=0) returned 1
[0192.519] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0192.521] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f)
[0192.527] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0192.527] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0192.529] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0192.530] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0xa02d6, lParam=0x0)
[0192.530] GetStockObject (i=5) returned 0x900015
[0192.530] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0192.530] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0192.530] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0192.533] IsWindowVisible (hWnd=0x70036) returned 1
[0192.533] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0192.533] GetFocus () returned 0x202c6
[0192.533] IsChild (hWndParent=0x902d8, hWnd=0x202c6) returned 0
[0192.533] ShowWindow (hWnd=0x902d8, nCmdShow=0)
[0192.533] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0192.533] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0192.536] GetWindowPlacement (in: hWnd=0x902d8, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0192.536] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0192.536] GetClientRect (in: hWnd=0x902d8, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0192.536] GetWindowRect (in: hWnd=0x902d8, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0192.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0192.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0192.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0192.550] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0192.550] GetWindowTextLengthW (hWnd=0x902d8)
[0192.550] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0192.551] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0192.551] SendMessageW (hWnd=0x902c8, Msg=0xb8, wParam=0x0, lParam=0x0)
[0192.551] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0192.551] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0192.551] GetWindowThreadProcessId (in: hWnd=0x602b4, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0192.551] GetWindow (hWnd=0x602b4, uCmd=0x5) returned 0x0
[0192.551] GetWindowLongW (hWnd=0x602b4, nIndex=-20) returned 65792
[0192.551] DestroyWindow (hWnd=0x602b4)
[0192.551] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b4, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0192.551] GetWindowTextLengthW (hWnd=0x602b4)
[0192.551] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0192.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0192.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b4, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0192.554] GetWindowTextLengthW (hWnd=0xa02d2)
[0192.554] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0192.554] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0192.554] InvalidateRect (hWnd=0xa02d6, lpRect=0x0, bErase=0) returned 1
[0192.554] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0192.554] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0192.555] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0192.556] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xa02d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0192.557] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0192.559] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0192.560] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x902d8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0192.561] GetProcessWindowStation () returned 0x13c
[0192.562] GetActiveWindow () returned 0x70036
[0192.562] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0192.562] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0192.562] GetCurrentThreadId () returned 0x11d0
[0192.563] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf486e, lParam=0x0) returned 1
[0192.563] IsWindowVisible (hWnd=0x70036) returned 1
[0192.563] IsWindowEnabled (hWnd=0x70036) returned 1
[0192.563] IsWindowVisible (hWnd=0x602b6) returned 0
[0192.563] IsWindowVisible (hWnd=0x901f8) returned 0
[0192.563] IsWindowVisible (hWnd=0x202d0) returned 0
[0192.563] IsWindowVisible (hWnd=0x202d4) returned 0
[0192.563] GetActiveWindow () returned 0x70036
[0192.563] GetFocus () returned 0x202c6
[0192.563] IsWindow (hWnd=0x70036) returned 1
[0192.563] EnableWindow (hWnd=0x70036, bEnable=0)
[0192.563] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0192.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0192.564] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0192.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0192.577] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0xa02d8) returned 0x1
[0192.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0192.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0192.584] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xe013e, lParam=0x0) returned 0x0
[0192.584] GetCapture () returned 0x0
[0192.584] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0192.585] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0192.587] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0192.588] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0192.591] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0xf0105ee
[0192.591] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0192.591] CreateCompatibleDC (hdc=0xf0105ee) returned 0x370107aa
[0192.591] SelectObject (hdc=0x370107aa, h=0x1e0507b9) returned 0x85000f
[0192.591] GdipCreateFromHDC (hdc=0x370107aa, graphics=0x53e108) returned 0x0
[0192.591] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0192.591] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0192.591] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0192.592] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0192.592] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0192.592] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.592] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0192.592] LocalFree (hMem=0x89eac0) returned 0x0
[0192.592] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0192.592] GdipCreateRegion (region=0x53e150) returned 0x0
[0192.592] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.592] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0192.592] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0192.592] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd250dbd) returned 0x0
[0192.592] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.593] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0192.593] GetCurrentObject (hdc=0x370107aa, type=0x1) returned 0xb00017
[0192.593] GetCurrentObject (hdc=0x370107aa, type=0x2) returned 0x900010
[0192.593] GetCurrentObject (hdc=0x370107aa, type=0x7) returned 0x1e0507b9
[0192.593] GetCurrentObject (hdc=0x370107aa, type=0x6) returned 0x8a01c2
[0192.593] SaveDC (hdc=0x370107aa) returned 1
[0192.593] GetNearestColor (hdc=0x370107aa, color=0xff) returned 0xff
[0192.593] GetNearestColor (hdc=0x370107aa, color=0x55) returned 0x55
[0192.593] GetNearestColor (hdc=0x370107aa, color=0x0) returned 0x0
[0192.593] GetNearestColor (hdc=0x370107aa, color=0x55) returned 0x55
[0192.593] GetNearestColor (hdc=0x370107aa, color=0x0) returned 0x0
[0192.593] GetNearestColor (hdc=0x370107aa, color=0x8080ff) returned 0x8080ff
[0192.593] GetNearestColor (hdc=0x370107aa, color=0x7373e5) returned 0x7373e5
[0192.593] GetNearestColor (hdc=0x370107aa, color=0xe5) returned 0xe5
[0192.593] GetNearestColor (hdc=0x370107aa, color=0x0) returned 0x0
[0192.594] RestoreDC (hdc=0x370107aa, nSavedDC=-1) returned 1
[0192.594] GdipReleaseDC (graphics=0x5d92c30, hdc=0x370107aa) returned 0x0
[0192.594] IsAppThemed () returned 0x1
[0192.594] GetThemeAppProperties () returned 0x3
[0192.594] GetThemeAppProperties () returned 0x3
[0192.594] IsAppThemed () returned 0x1
[0192.594] GetThemeAppProperties () returned 0x3
[0192.594] GetThemeAppProperties () returned 0x3
[0192.594] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0192.594] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x22fe068 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0192.594] IsAppThemed () returned 0x1
[0192.595] GetThemeAppProperties () returned 0x3
[0192.595] GetThemeAppProperties () returned 0x3
[0192.595] IsAppThemed () returned 0x1
[0192.595] GetThemeAppProperties () returned 0x3
[0192.595] GetThemeAppProperties () returned 0x3
[0192.595] GetFocus () returned 0xe013e
[0192.595] IsAppThemed () returned 0x1
[0192.595] GetThemeAppProperties () returned 0x3
[0192.595] GetThemeAppProperties () returned 0x3
[0192.595] IsAppThemed () returned 0x1
[0192.595] GetThemeAppProperties () returned 0x3
[0192.595] GetThemeAppProperties () returned 0x3
[0192.595] IsThemePartDefined () returned 0x1
[0192.595] IsAppThemed () returned 0x1
[0192.595] GetThemeAppProperties () returned 0x3
[0192.595] GetThemeAppProperties () returned 0x3
[0192.595] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0192.595] IsAppThemed () returned 0x1
[0192.595] GetThemeAppProperties () returned 0x3
[0192.595] GetThemeAppProperties () returned 0x3
[0192.595] IsAppThemed () returned 0x1
[0192.596] GetThemeAppProperties () returned 0x3
[0192.596] GetThemeAppProperties () returned 0x3
[0192.596] IsThemePartDefined () returned 0x1
[0192.596] GdipCreateRegion (region=0x53de78) returned 0x0
[0192.596] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.596] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0192.596] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0192.596] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0192.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.596] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0192.596] LocalFree (hMem=0x89eac0) returned 0x0
[0192.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0192.596] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0192.596] LocalFree (hMem=0x89eac0) returned 0x0
[0192.596] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0192.596] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0192.596] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0192.596] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0192.596] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.597] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0192.597] GetCurrentObject (hdc=0x370107aa, type=0x1) returned 0xb00017
[0192.597] GetCurrentObject (hdc=0x370107aa, type=0x2) returned 0x900010
[0192.597] GetCurrentObject (hdc=0x370107aa, type=0x7) returned 0x1e0507b9
[0192.597] GetCurrentObject (hdc=0x370107aa, type=0x6) returned 0x8a01c2
[0192.597] SaveDC (hdc=0x370107aa) returned 1
[0192.597] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1104053e
[0192.597] GetClipRgn (hdc=0x370107aa, hrgn=0x1104053e) returned 0
[0192.597] SelectClipRgn (hdc=0x370107aa, hrgn=0x1104051e) returned 2
[0192.597] DeleteObject (ho=0x1104053e) returned 1
[0192.597] DeleteObject (ho=0x1104051e) returned 1
[0192.597] OffsetViewportOrgEx (in: hdc=0x370107aa, x=0, y=0, lppt=0x22fe718 | out: lppt=0x22fe718) returned 1
[0192.597] DrawThemeParentBackground () returned 0x0
[0192.598] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0192.598] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0192.598] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0192.598] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0192.598] GetSystemMetrics (nIndex=42) returned 0
[0192.598] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0192.598] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0192.598] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0192.598] GetCurrentObject (hdc=0x370107aa, type=0x1) returned 0xb00017
[0192.598] GetCurrentObject (hdc=0x370107aa, type=0x2) returned 0x900010
[0192.598] GetCurrentObject (hdc=0x370107aa, type=0x7) returned 0x1e0507b9
[0192.598] GetCurrentObject (hdc=0x370107aa, type=0x6) returned 0x8a01c2
[0192.598] SaveDC (hdc=0x370107aa) returned 2
[0192.598] GetNearestColor (hdc=0x370107aa, color=0xff) returned 0xff
[0192.598] CreateSolidBrush (color=0xff) returned 0xe610078d
[0192.598] FillRect (hDC=0x370107aa, lprc=0x53d8d8, hbr=0xe610078d) returned 1
[0192.598] DeleteObject (ho=0xe610078d) returned 1
[0192.599] RestoreDC (hdc=0x370107aa, nSavedDC=-1) returned 1
[0192.599] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0192.599] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0192.599] GetSystemMetrics (nIndex=42) returned 0
[0192.599] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0192.599] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0192.599] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0192.599] GetCurrentObject (hdc=0x370107aa, type=0x1) returned 0xb00017
[0192.599] GetCurrentObject (hdc=0x370107aa, type=0x2) returned 0x900010
[0192.599] GetCurrentObject (hdc=0x370107aa, type=0x7) returned 0x1e0507b9
[0192.599] GetCurrentObject (hdc=0x370107aa, type=0x6) returned 0x8a01c2
[0192.634] SaveDC (hdc=0x370107aa) returned 2
[0192.635] GetNearestColor (hdc=0x370107aa, color=0xff) returned 0xff
[0192.635] CreateSolidBrush (color=0xff) returned 0xe710078d
[0192.635] FillRect (hDC=0x370107aa, lprc=0x53d878, hbr=0xe710078d) returned 1
[0192.635] DeleteObject (ho=0xe710078d) returned 1
[0192.635] RestoreDC (hdc=0x370107aa, nSavedDC=-1) returned 1
[0192.635] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0192.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0192.636] GetSystemMetrics (nIndex=42) returned 0
[0192.636] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0192.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0192.636] RestoreDC (hdc=0x370107aa, nSavedDC=-1) returned 1
[0192.636] GdipReleaseDC (graphics=0x5d92c30, hdc=0x370107aa) returned 0x0
[0192.636] IsAppThemed () returned 0x1
[0192.637] GetThemeAppProperties () returned 0x3
[0192.637] GetThemeAppProperties () returned 0x3
[0192.637] IsAppThemed () returned 0x1
[0192.637] GetThemeAppProperties () returned 0x3
[0192.637] GetThemeAppProperties () returned 0x3
[0192.637] IsThemePartDefined () returned 0x1
[0192.637] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0192.637] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.637] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0192.637] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0192.637] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0192.637] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0192.638] LocalFree (hMem=0x89ec80) returned 0x0
[0192.638] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0192.638] LocalFree (hMem=0x89ec80) returned 0x0
[0192.638] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0192.638] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0192.638] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0192.638] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0192.638] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.638] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0192.638] GetCurrentObject (hdc=0x370107aa, type=0x1) returned 0xb00017
[0192.638] GetCurrentObject (hdc=0x370107aa, type=0x2) returned 0x900010
[0192.638] GetCurrentObject (hdc=0x370107aa, type=0x7) returned 0x1e0507b9
[0192.638] GetCurrentObject (hdc=0x370107aa, type=0x6) returned 0x8a01c2
[0192.638] SaveDC (hdc=0x370107aa) returned 1
[0192.638] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1204051e
[0192.638] GetClipRgn (hdc=0x370107aa, hrgn=0x1204051e) returned 0
[0192.638] SelectClipRgn (hdc=0x370107aa, hrgn=0x1304053e) returned 2
[0192.638] DeleteObject (ho=0x1204051e) returned 1
[0192.638] DeleteObject (ho=0x1304053e) returned 1
[0192.638] OffsetViewportOrgEx (in: hdc=0x370107aa, x=0, y=0, lppt=0x22fef7c | out: lppt=0x22fef7c) returned 1
[0192.638] IsAppThemed () returned 0x1
[0192.639] GetThemeAppProperties () returned 0x3
[0192.639] GetThemeAppProperties () returned 0x3
[0192.639] DrawThemeBackground () returned 0x0
[0192.639] RestoreDC (hdc=0x370107aa, nSavedDC=-1) returned 1
[0192.639] GdipReleaseDC (graphics=0x5d92c30, hdc=0x370107aa) returned 0x0
[0192.639] GdipCreateRegion (region=0x53de00) returned 0x0
[0192.639] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0192.639] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0192.639] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0192.639] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0192.639] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0192.639] LocalFree (hMem=0x89ec80) returned 0x0
[0192.639] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0192.639] LocalFree (hMem=0x89eac0) returned 0x0
[0192.639] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0192.639] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0192.640] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0192.640] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0192.640] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0192.640] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0192.640] GetCurrentObject (hdc=0x370107aa, type=0x1) returned 0xb00017
[0192.640] GetCurrentObject (hdc=0x370107aa, type=0x2) returned 0x900010
[0192.640] GetCurrentObject (hdc=0x370107aa, type=0x7) returned 0x1e0507b9
[0192.640] GetCurrentObject (hdc=0x370107aa, type=0x6) returned 0x8a01c2
[0192.640] SaveDC (hdc=0x370107aa) returned 1
[0192.640] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1404053e
[0192.640] GetClipRgn (hdc=0x370107aa, hrgn=0x1404053e) returned 0
[0192.640] SelectClipRgn (hdc=0x370107aa, hrgn=0x1304051e) returned 2
[0192.640] DeleteObject (ho=0x1404053e) returned 1
[0192.640] DeleteObject (ho=0x1304051e) returned 1
[0192.640] OffsetViewportOrgEx (in: hdc=0x370107aa, x=0, y=0, lppt=0x22ff298 | out: lppt=0x22ff298) returned 1
[0192.640] IsAppThemed () returned 0x1
[0192.640] GetThemeAppProperties () returned 0x3
[0192.640] GetThemeAppProperties () returned 0x3
[0192.640] GetThemeBackgroundContentRect () returned 0x0
[0192.640] RestoreDC (hdc=0x370107aa, nSavedDC=-1) returned 1
[0192.641] GdipReleaseDC (graphics=0x5d92c30, hdc=0x370107aa) returned 0x0
[0192.641] IsAppThemed () returned 0x1
[0192.641] GetThemeAppProperties () returned 0x3
[0192.641] GetThemeAppProperties () returned 0x3
[0192.641] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0192.641] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0192.641] GetCurrentObject (hdc=0x370107aa, type=0x1) returned 0xb00017
[0192.641] GetCurrentObject (hdc=0x370107aa, type=0x2) returned 0x900010
[0192.641] GetCurrentObject (hdc=0x370107aa, type=0x7) returned 0x1e0507b9
[0192.641] GetCurrentObject (hdc=0x370107aa, type=0x6) returned 0x8a01c2
[0192.641] SaveDC (hdc=0x370107aa) returned 1
[0192.641] GetTextAlign (hdc=0x370107aa) returned 0x0
[0192.641] GetTextColor (hdc=0x370107aa) returned 0x0
[0192.641] GetCurrentObject (hdc=0x370107aa, type=0x6) returned 0x8a01c2
[0192.641] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0192.641] SelectObject (hdc=0x370107aa, h=0x450a0799) returned 0x8a01c2
[0192.641] GetBkMode (hdc=0x370107aa) returned 2
[0192.641] SetBkMode (hdc=0x370107aa, mode=1) returned 2
[0192.641] DrawTextExW (in: hdc=0x370107aa, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x22ff638 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0192.642] DrawTextExW (in: hdc=0x370107aa, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x22ff638 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0192.642] RestoreDC (hdc=0x370107aa, nSavedDC=-1) returned 1
[0192.642] GdipReleaseDC (graphics=0x5d92c30, hdc=0x370107aa) returned 0x0
[0192.642] GetFocus () returned 0xe013e
[0192.642] IsAppThemed () returned 0x1
[0192.642] GetThemeAppProperties () returned 0x3
[0192.642] GetThemeAppProperties () returned 0x3
[0192.642] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0192.642] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x370107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0192.665] GdipReleaseDC (graphics=0x5d92c30, hdc=0x370107aa) returned 0x0
[0192.665] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0192.665] SelectObject (hdc=0x370107aa, h=0x85000f) returned 0x1e0507b9
[0192.665] DeleteDC (hdc=0x370107aa) returned 1
[0192.665] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0192.665] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0192.985] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0192.985] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0192.986] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0xa02d8) returned 0x1
[0192.989] GetFocus () returned 0xa02d8
[0192.989] GetAncestor (hwnd=0xa02d8, gaFlags=0x1) returned 0x10010
[0192.989] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0192.989] SetFocus (hWnd=0x202c6) returned 0x0
[0193.000] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0193.002] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0193.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0193.003] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0193.003] GetFocus () returned 0x70036
[0193.003] SetFocus (hWnd=0x202c6) returned 0x0
[0193.033] IsWindow (hWnd=0x70036) returned 1
[0193.033] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0193.033] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0193.034] IsWindow (hWnd=0x70036) returned 1
[0193.034] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0193.034] IsWindow (hWnd=0x202c6) returned 1
[0193.034] SetFocus (hWnd=0x202c6) returned 0x70036
[0193.034] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0193.035] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0193.036] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0193.041] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0193.041] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0193.042] GetStockObject (i=5) returned 0x900015
[0193.042] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0193.042] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8da988) returned 0x7
[0193.042] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0193.042] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0193.042] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0193.042] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0193.044] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0193.044] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0193.044] GetFocus () returned 0x202c6
[0193.044] GetCapture () returned 0x0
[0193.044] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.045] IsWindowUnicode (hWnd=0x202c6) returned 1
[0193.045] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.045] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.045] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.045] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.046] IsWindowUnicode (hWnd=0x202c6) returned 1
[0193.046] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.046] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.046] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.046] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0193.046] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0193.046] CreateCompatibleDC (hdc=0x10105d6) returned 0xeb0107a2
[0193.046] SelectObject (hdc=0xeb0107a2, h=0x1e0507b9) returned 0x85000f
[0193.047] GdipCreateFromHDC (hdc=0xeb0107a2, graphics=0x53e958) returned 0x0
[0193.047] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0193.047] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0193.047] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0193.047] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0193.047] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0193.047] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0193.047] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0193.047] LocalFree (hMem=0x89eee8) returned 0x0
[0193.047] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0193.047] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0193.047] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0193.047] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0193.047] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0193.048] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd230dbd) returned 0x0
[0193.048] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0193.048] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0193.048] GetCurrentObject (hdc=0xeb0107a2, type=0x1) returned 0xb00017
[0193.048] GetCurrentObject (hdc=0xeb0107a2, type=0x2) returned 0x900010
[0193.048] GetCurrentObject (hdc=0xeb0107a2, type=0x7) returned 0x1e0507b9
[0193.048] GetCurrentObject (hdc=0xeb0107a2, type=0x6) returned 0x8a01c2
[0193.048] SaveDC (hdc=0xeb0107a2) returned 1
[0193.048] GetNearestColor (hdc=0xeb0107a2, color=0xff) returned 0xff
[0193.048] GetNearestColor (hdc=0xeb0107a2, color=0x55) returned 0x55
[0193.048] GetNearestColor (hdc=0xeb0107a2, color=0x0) returned 0x0
[0193.048] GetNearestColor (hdc=0xeb0107a2, color=0x55) returned 0x55
[0193.049] GetNearestColor (hdc=0xeb0107a2, color=0x0) returned 0x0
[0193.049] GetNearestColor (hdc=0xeb0107a2, color=0x8080ff) returned 0x8080ff
[0193.049] GetNearestColor (hdc=0xeb0107a2, color=0x7373e5) returned 0x7373e5
[0193.049] GetNearestColor (hdc=0xeb0107a2, color=0xe5) returned 0xe5
[0193.049] GetNearestColor (hdc=0xeb0107a2, color=0x0) returned 0x0
[0193.049] RestoreDC (hdc=0xeb0107a2, nSavedDC=-1) returned 1
[0193.049] GdipReleaseDC (graphics=0x5d92c30, hdc=0xeb0107a2) returned 0x0
[0193.049] IsAppThemed () returned 0x1
[0193.049] GetThemeAppProperties () returned 0x3
[0193.049] GetThemeAppProperties () returned 0x3
[0193.049] IsAppThemed () returned 0x1
[0193.049] GetThemeAppProperties () returned 0x3
[0193.049] GetThemeAppProperties () returned 0x3
[0193.049] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x22ffe94 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0193.050] IsAppThemed () returned 0x1
[0193.050] GetThemeAppProperties () returned 0x3
[0193.050] GetThemeAppProperties () returned 0x3
[0193.050] IsAppThemed () returned 0x1
[0193.050] GetThemeAppProperties () returned 0x3
[0193.050] GetThemeAppProperties () returned 0x3
[0193.050] GetFocus () returned 0x202c6
[0193.050] IsAppThemed () returned 0x1
[0193.050] GetThemeAppProperties () returned 0x3
[0193.050] GetThemeAppProperties () returned 0x3
[0193.050] IsAppThemed () returned 0x1
[0193.050] GetThemeAppProperties () returned 0x3
[0193.050] GetThemeAppProperties () returned 0x3
[0193.050] IsThemePartDefined () returned 0x1
[0193.050] IsAppThemed () returned 0x1
[0193.050] GetThemeAppProperties () returned 0x3
[0193.050] GetThemeAppProperties () returned 0x3
[0193.050] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0193.050] IsAppThemed () returned 0x1
[0193.051] GetThemeAppProperties () returned 0x3
[0193.051] GetThemeAppProperties () returned 0x3
[0193.051] IsAppThemed () returned 0x1
[0193.051] GetThemeAppProperties () returned 0x3
[0193.051] GetThemeAppProperties () returned 0x3
[0193.051] IsThemePartDefined () returned 0x1
[0193.051] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0193.051] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0193.051] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0193.051] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0193.051] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0193.051] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0193.051] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0193.051] LocalFree (hMem=0x89ec80) returned 0x0
[0193.051] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0193.051] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0193.051] LocalFree (hMem=0x89eee8) returned 0x0
[0193.051] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0193.051] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0193.051] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0193.051] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0193.052] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0193.052] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0193.052] GetCurrentObject (hdc=0xeb0107a2, type=0x1) returned 0xb00017
[0193.052] GetCurrentObject (hdc=0xeb0107a2, type=0x2) returned 0x900010
[0193.052] GetCurrentObject (hdc=0xeb0107a2, type=0x7) returned 0x1e0507b9
[0193.052] GetCurrentObject (hdc=0xeb0107a2, type=0x6) returned 0x8a01c2
[0193.052] SaveDC (hdc=0xeb0107a2) returned 1
[0193.052] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1904051e
[0193.052] GetClipRgn (hdc=0xeb0107a2, hrgn=0x1904051e) returned 0
[0193.052] SelectClipRgn (hdc=0xeb0107a2, hrgn=0x2404053e) returned 2
[0193.052] DeleteObject (ho=0x1904051e) returned 1
[0193.052] DeleteObject (ho=0x2404053e) returned 1
[0193.052] OffsetViewportOrgEx (in: hdc=0xeb0107a2, x=0, y=0, lppt=0x2300544 | out: lppt=0x2300544) returned 1
[0193.052] DrawThemeParentBackground () returned 0x0
[0193.053] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0193.053] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0193.053] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0193.053] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0193.053] GetSystemMetrics (nIndex=42) returned 0
[0193.053] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0193.053] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0193.053] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0193.053] GetCurrentObject (hdc=0xeb0107a2, type=0x1) returned 0xb00017
[0193.053] GetCurrentObject (hdc=0xeb0107a2, type=0x2) returned 0x900010
[0193.053] GetCurrentObject (hdc=0xeb0107a2, type=0x7) returned 0x1e0507b9
[0193.053] GetCurrentObject (hdc=0xeb0107a2, type=0x6) returned 0x8a01c2
[0193.053] SaveDC (hdc=0xeb0107a2) returned 2
[0193.053] GetNearestColor (hdc=0xeb0107a2, color=0xff) returned 0xff
[0193.053] CreateSolidBrush (color=0xff) returned 0xe910078d
[0193.053] FillRect (hDC=0xeb0107a2, lprc=0x53e128, hbr=0xe910078d) returned 1
[0193.053] DeleteObject (ho=0xe910078d) returned 1
[0193.053] RestoreDC (hdc=0xeb0107a2, nSavedDC=-1) returned 1
[0193.053] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0193.053] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0193.054] GetSystemMetrics (nIndex=42) returned 0
[0193.054] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0193.054] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0193.054] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0193.054] GetCurrentObject (hdc=0xeb0107a2, type=0x1) returned 0xb00017
[0193.054] GetCurrentObject (hdc=0xeb0107a2, type=0x2) returned 0x900010
[0193.054] GetCurrentObject (hdc=0xeb0107a2, type=0x7) returned 0x1e0507b9
[0193.054] GetCurrentObject (hdc=0xeb0107a2, type=0x6) returned 0x8a01c2
[0193.054] SaveDC (hdc=0xeb0107a2) returned 2
[0193.054] GetNearestColor (hdc=0xeb0107a2, color=0xff) returned 0xff
[0193.054] CreateSolidBrush (color=0xff) returned 0xea10078d
[0193.054] FillRect (hDC=0xeb0107a2, lprc=0x53e0c8, hbr=0xea10078d) returned 1
[0193.054] DeleteObject (ho=0xea10078d) returned 1
[0193.054] RestoreDC (hdc=0xeb0107a2, nSavedDC=-1) returned 1
[0193.054] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0193.054] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0193.054] GetSystemMetrics (nIndex=42) returned 0
[0193.054] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0193.054] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0193.055] RestoreDC (hdc=0xeb0107a2, nSavedDC=-1) returned 1
[0193.055] GdipReleaseDC (graphics=0x5d92c30, hdc=0xeb0107a2) returned 0x0
[0193.055] IsAppThemed () returned 0x1
[0193.055] GetThemeAppProperties () returned 0x3
[0193.055] GetThemeAppProperties () returned 0x3
[0193.055] IsAppThemed () returned 0x1
[0193.055] GetThemeAppProperties () returned 0x3
[0193.055] GetThemeAppProperties () returned 0x3
[0193.055] IsThemePartDefined () returned 0x1
[0193.055] GdipCreateRegion (region=0x53e64c) returned 0x0
[0193.055] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0193.055] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0193.055] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0193.055] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0193.055] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0193.055] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0193.055] LocalFree (hMem=0x89eee8) returned 0x0
[0193.055] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0193.055] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0193.055] LocalFree (hMem=0x89ee08) returned 0x0
[0193.055] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0193.055] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0193.055] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0193.056] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0193.056] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0193.056] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0193.056] GetCurrentObject (hdc=0xeb0107a2, type=0x1) returned 0xb00017
[0193.056] GetCurrentObject (hdc=0xeb0107a2, type=0x2) returned 0x900010
[0193.056] GetCurrentObject (hdc=0xeb0107a2, type=0x7) returned 0x1e0507b9
[0193.056] GetCurrentObject (hdc=0xeb0107a2, type=0x6) returned 0x8a01c2
[0193.056] SaveDC (hdc=0xeb0107a2) returned 1
[0193.056] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2504053e
[0193.056] GetClipRgn (hdc=0xeb0107a2, hrgn=0x2504053e) returned 0
[0193.056] SelectClipRgn (hdc=0xeb0107a2, hrgn=0x1b04051e) returned 2
[0193.056] DeleteObject (ho=0x2504053e) returned 1
[0193.056] DeleteObject (ho=0x1b04051e) returned 1
[0193.056] OffsetViewportOrgEx (in: hdc=0xeb0107a2, x=0, y=0, lppt=0x2300da8 | out: lppt=0x2300da8) returned 1
[0193.056] IsAppThemed () returned 0x1
[0193.056] GetThemeAppProperties () returned 0x3
[0193.056] GetThemeAppProperties () returned 0x3
[0193.056] DrawThemeBackground () returned 0x0
[0193.056] RestoreDC (hdc=0xeb0107a2, nSavedDC=-1) returned 1
[0193.056] GdipReleaseDC (graphics=0x5d92c30, hdc=0xeb0107a2) returned 0x0
[0193.056] GdipCreateRegion (region=0x53e650) returned 0x0
[0193.057] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0193.057] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0193.057] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0193.057] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0193.057] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0193.057] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0193.057] LocalFree (hMem=0x89eee8) returned 0x0
[0193.057] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0193.057] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0193.057] LocalFree (hMem=0x89eee8) returned 0x0
[0193.057] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0193.057] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0193.057] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0193.057] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0193.057] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0193.057] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0193.057] GetCurrentObject (hdc=0xeb0107a2, type=0x1) returned 0xb00017
[0193.057] GetCurrentObject (hdc=0xeb0107a2, type=0x2) returned 0x900010
[0193.057] GetCurrentObject (hdc=0xeb0107a2, type=0x7) returned 0x1e0507b9
[0193.057] GetCurrentObject (hdc=0xeb0107a2, type=0x6) returned 0x8a01c2
[0193.057] SaveDC (hdc=0xeb0107a2) returned 1
[0193.057] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1c04051e
[0193.057] GetClipRgn (hdc=0xeb0107a2, hrgn=0x1c04051e) returned 0
[0193.058] SelectClipRgn (hdc=0xeb0107a2, hrgn=0x2604053e) returned 2
[0193.058] DeleteObject (ho=0x1c04051e) returned 1
[0193.058] DeleteObject (ho=0x2604053e) returned 1
[0193.058] OffsetViewportOrgEx (in: hdc=0xeb0107a2, x=0, y=0, lppt=0x230107c | out: lppt=0x230107c) returned 1
[0193.058] IsAppThemed () returned 0x1
[0193.058] GetThemeAppProperties () returned 0x3
[0193.058] GetThemeAppProperties () returned 0x3
[0193.058] GetThemeBackgroundContentRect () returned 0x0
[0193.058] RestoreDC (hdc=0xeb0107a2, nSavedDC=-1) returned 1
[0193.058] GdipReleaseDC (graphics=0x5d92c30, hdc=0xeb0107a2) returned 0x0
[0193.058] IsAppThemed () returned 0x1
[0193.058] GetThemeAppProperties () returned 0x3
[0193.058] GetThemeAppProperties () returned 0x3
[0193.058] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0193.058] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0193.058] GetCurrentObject (hdc=0xeb0107a2, type=0x1) returned 0xb00017
[0193.058] GetCurrentObject (hdc=0xeb0107a2, type=0x2) returned 0x900010
[0193.058] GetCurrentObject (hdc=0xeb0107a2, type=0x7) returned 0x1e0507b9
[0193.058] GetCurrentObject (hdc=0xeb0107a2, type=0x6) returned 0x8a01c2
[0193.058] SaveDC (hdc=0xeb0107a2) returned 1
[0193.058] GetTextAlign (hdc=0xeb0107a2) returned 0x0
[0193.058] GetTextColor (hdc=0xeb0107a2) returned 0x0
[0193.058] GetCurrentObject (hdc=0xeb0107a2, type=0x6) returned 0x8a01c2
[0193.059] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0193.059] SelectObject (hdc=0xeb0107a2, h=0x450a0799) returned 0x8a01c2
[0193.059] GetBkMode (hdc=0xeb0107a2) returned 2
[0193.059] SetBkMode (hdc=0xeb0107a2, mode=1) returned 2
[0193.059] DrawTextExW (in: hdc=0xeb0107a2, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x230141c | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0193.059] DrawTextExW (in: hdc=0xeb0107a2, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x230141c | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0193.059] RestoreDC (hdc=0xeb0107a2, nSavedDC=-1) returned 1
[0193.059] GdipReleaseDC (graphics=0x5d92c30, hdc=0xeb0107a2) returned 0x0
[0193.059] GetFocus () returned 0x202c6
[0193.059] IsAppThemed () returned 0x1
[0193.060] GetThemeAppProperties () returned 0x3
[0193.060] GetThemeAppProperties () returned 0x3
[0193.060] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0193.060] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xeb0107a2, x1=0, y1=0, rop=0xcc0020) returned 1
[0193.060] GdipReleaseDC (graphics=0x5d92c30, hdc=0xeb0107a2) returned 0x0
[0193.060] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0193.060] SelectObject (hdc=0xeb0107a2, h=0x85000f) returned 0x1e0507b9
[0193.060] DeleteDC (hdc=0xeb0107a2) returned 1
[0193.060] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0193.060] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0193.060] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.060] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.060] WaitMessage () returned 1
[0193.065] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.065] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.065] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.065] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.065] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.066] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.066] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.066] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.066] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.066] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.067] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.067] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.067] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.067] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.067] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.067] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.067] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.067] WaitMessage () returned 1
[0193.068] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.068] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.068] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.068] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.068] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.072] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.072] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.072] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.072] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.072] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.072] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.073] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.073] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.073] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.073] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.073] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.073] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.073] WaitMessage () returned 1
[0193.089] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.089] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.089] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.089] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.089] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.090] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.090] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.090] WaitMessage () returned 1
[0193.091] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.091] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.091] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.091] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.091] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.092] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.092] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.092] WaitMessage () returned 1
[0193.093] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.093] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.093] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.093] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.093] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.094] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.094] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.094] WaitMessage () returned 1
[0193.094] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.094] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.094] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.094] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.094] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.095] WaitMessage () returned 1
[0193.096] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.096] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.096] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.096] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.096] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.097] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.097] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.097] WaitMessage () returned 1
[0193.098] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.098] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.098] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.098] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.098] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.099] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.099] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.099] WaitMessage () returned 1
[0193.099] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.099] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.099] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.099] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.099] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.100] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.101] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.101] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.101] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.101] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.101] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.101] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.101] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.101] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.101] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.101] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.102] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.102] WaitMessage () returned 1
[0193.103] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.103] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.103] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.103] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.103] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.104] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.105] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.105] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.105] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.105] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.105] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.105] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.105] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.105] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.105] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.105] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.106] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.106] WaitMessage () returned 1
[0193.106] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.106] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.106] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.106] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.106] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.107] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.108] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.108] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.108] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.108] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.108] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.108] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.108] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.108] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.108] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.108] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.109] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.109] WaitMessage () returned 1
[0193.109] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.109] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.109] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.109] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.109] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.110] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.110] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.110] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.110] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.110] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.111] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.111] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.111] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.111] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.111] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.111] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.111] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.111] WaitMessage () returned 1
[0193.111] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.112] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.112] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.112] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.112] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.113] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.113] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.113] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.113] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.113] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.113] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.113] IsWindowUnicode (hWnd=0x102dc) returned 1
[0193.113] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.113] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.113] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.114] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.114] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.114] WaitMessage () returned 1
[0193.355] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.356] IsWindowUnicode (hWnd=0x202d0) returned 1
[0193.356] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.356] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.356] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0193.356] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.356] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.356] WaitMessage () returned 1
[0193.664] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.664] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0193.664] TranslateMessage (lpMsg=0x53eef8) returned 0
[0193.664] DispatchMessageA (lpMsg=0x53eef8) returned 0x7f06
[0193.664] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.664] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0193.664] WaitMessage () returned 1
[0194.664] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0194.664] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0194.664] TranslateMessage (lpMsg=0x53eef8) returned 0
[0194.664] DispatchMessageA (lpMsg=0x53eef8) returned 0x7f05
[0194.665] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0194.665] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0194.665] WaitMessage () returned 1
[0194.790] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0194.791] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19b022b) returned 0x1
[0194.791] IsWindowUnicode (hWnd=0x202c6) returned 1
[0194.791] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0194.792] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19b022b) returned 0x1
[0194.792] SetCursor (hCursor=0x10003) returned 0x10003
[0194.792] TranslateMessage (lpMsg=0x53eef8) returned 0
[0194.792] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0194.792] _TrackMouseEvent (in: lpEventTrack=0x23276fc | out: lpEventTrack=0x23276fc) returned 1
[0194.792] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0194.792] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0194.792] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0194.793] GetKeyState (nVirtKey=1) returned 0
[0194.793] GetKeyState (nVirtKey=2) returned 0
[0194.793] GetKeyState (nVirtKey=4) returned 0
[0194.793] GetKeyState (nVirtKey=5) returned 0
[0194.793] GetKeyState (nVirtKey=6) returned 0
[0194.793] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0194.793] IsWindowUnicode (hWnd=0x202c6) returned 1
[0194.793] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0194.793] TranslateMessage (lpMsg=0x53eef8) returned 0
[0194.793] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0194.793] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0194.794] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0194.794] CreateCompatibleDC (hdc=0x10105d6) returned 0x5f0107ad
[0194.794] SelectObject (hdc=0x5f0107ad, h=0x1e0507b9) returned 0x85000f
[0194.794] GdipCreateFromHDC (hdc=0x5f0107ad, graphics=0x53e958) returned 0x0
[0194.795] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0194.795] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0194.795] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0194.795] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0194.795] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0194.795] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0194.796] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0194.796] LocalFree (hMem=0x89ec80) returned 0x0
[0194.796] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0194.796] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0194.796] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0194.796] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0194.796] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0194.796] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd210dbd) returned 0x0
[0194.796] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0194.796] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0194.797] GetCurrentObject (hdc=0x5f0107ad, type=0x1) returned 0xb00017
[0194.797] GetCurrentObject (hdc=0x5f0107ad, type=0x2) returned 0x900010
[0194.797] GetCurrentObject (hdc=0x5f0107ad, type=0x7) returned 0x1e0507b9
[0194.797] GetCurrentObject (hdc=0x5f0107ad, type=0x6) returned 0x8a01c2
[0194.797] SaveDC (hdc=0x5f0107ad) returned 1
[0194.797] GetNearestColor (hdc=0x5f0107ad, color=0xff) returned 0xff
[0194.797] GetNearestColor (hdc=0x5f0107ad, color=0x55) returned 0x55
[0194.797] GetNearestColor (hdc=0x5f0107ad, color=0x0) returned 0x0
[0194.797] GetNearestColor (hdc=0x5f0107ad, color=0x55) returned 0x55
[0194.797] GetNearestColor (hdc=0x5f0107ad, color=0x0) returned 0x0
[0194.797] GetNearestColor (hdc=0x5f0107ad, color=0x8080ff) returned 0x8080ff
[0194.797] GetNearestColor (hdc=0x5f0107ad, color=0x7373e5) returned 0x7373e5
[0194.797] GetNearestColor (hdc=0x5f0107ad, color=0xe5) returned 0xe5
[0194.797] GetNearestColor (hdc=0x5f0107ad, color=0x0) returned 0x0
[0194.797] RestoreDC (hdc=0x5f0107ad, nSavedDC=-1) returned 1
[0194.798] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107ad) returned 0x0
[0194.798] IsAppThemed () returned 0x1
[0194.798] GetThemeAppProperties () returned 0x3
[0194.798] GetThemeAppProperties () returned 0x3
[0194.798] IsAppThemed () returned 0x1
[0194.798] GetThemeAppProperties () returned 0x3
[0194.798] GetThemeAppProperties () returned 0x3
[0194.798] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x2301ed0 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0194.799] IsAppThemed () returned 0x1
[0194.799] GetThemeAppProperties () returned 0x3
[0194.799] GetThemeAppProperties () returned 0x3
[0194.799] IsAppThemed () returned 0x1
[0194.799] GetThemeAppProperties () returned 0x3
[0194.799] GetThemeAppProperties () returned 0x3
[0194.800] IsAppThemed () returned 0x1
[0194.800] GetThemeAppProperties () returned 0x3
[0194.800] GetThemeAppProperties () returned 0x3
[0194.800] IsAppThemed () returned 0x1
[0194.800] GetThemeAppProperties () returned 0x3
[0194.800] GetThemeAppProperties () returned 0x3
[0194.800] IsThemePartDefined () returned 0x1
[0194.800] IsAppThemed () returned 0x1
[0194.800] GetThemeAppProperties () returned 0x3
[0194.800] GetThemeAppProperties () returned 0x3
[0194.800] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0194.800] IsAppThemed () returned 0x1
[0194.800] GetThemeAppProperties () returned 0x3
[0194.800] GetThemeAppProperties () returned 0x3
[0194.800] IsAppThemed () returned 0x1
[0194.800] GetThemeAppProperties () returned 0x3
[0194.800] GetThemeAppProperties () returned 0x3
[0194.800] IsThemePartDefined () returned 0x1
[0194.800] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0194.800] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0194.801] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0194.801] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0194.801] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0194.801] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0194.801] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0194.801] LocalFree (hMem=0x89ea88) returned 0x0
[0194.801] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0194.801] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0194.801] LocalFree (hMem=0x89ee08) returned 0x0
[0194.801] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0194.801] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0194.801] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0194.801] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0194.801] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0194.801] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0194.801] GetCurrentObject (hdc=0x5f0107ad, type=0x1) returned 0xb00017
[0194.801] GetCurrentObject (hdc=0x5f0107ad, type=0x2) returned 0x900010
[0194.802] GetCurrentObject (hdc=0x5f0107ad, type=0x7) returned 0x1e0507b9
[0194.802] GetCurrentObject (hdc=0x5f0107ad, type=0x6) returned 0x8a01c2
[0194.802] SaveDC (hdc=0x5f0107ad) returned 1
[0194.802] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2704053e
[0194.802] GetClipRgn (hdc=0x5f0107ad, hrgn=0x2704053e) returned 0
[0194.802] SelectClipRgn (hdc=0x5f0107ad, hrgn=0x2004051e) returned 2
[0194.802] DeleteObject (ho=0x2704053e) returned 1
[0194.802] DeleteObject (ho=0x2004051e) returned 1
[0194.802] OffsetViewportOrgEx (in: hdc=0x5f0107ad, x=0, y=0, lppt=0x2302580 | out: lppt=0x2302580) returned 1
[0194.802] DrawThemeParentBackground () returned 0x0
[0194.802] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0194.803] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0194.803] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0194.803] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0194.803] GetSystemMetrics (nIndex=42) returned 0
[0194.803] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0194.803] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0194.803] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0194.803] GetCurrentObject (hdc=0x5f0107ad, type=0x1) returned 0xb00017
[0194.803] GetCurrentObject (hdc=0x5f0107ad, type=0x2) returned 0x900010
[0194.803] GetCurrentObject (hdc=0x5f0107ad, type=0x7) returned 0x1e0507b9
[0194.803] GetCurrentObject (hdc=0x5f0107ad, type=0x6) returned 0x8a01c2
[0194.803] SaveDC (hdc=0x5f0107ad) returned 2
[0194.803] GetNearestColor (hdc=0x5f0107ad, color=0xff) returned 0xff
[0194.803] CreateSolidBrush (color=0xff) returned 0xeb10078d
[0194.803] FillRect (hDC=0x5f0107ad, lprc=0x53e120, hbr=0xeb10078d) returned 1
[0194.803] DeleteObject (ho=0xeb10078d) returned 1
[0194.803] RestoreDC (hdc=0x5f0107ad, nSavedDC=-1) returned 1
[0194.804] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0194.804] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0194.804] GetSystemMetrics (nIndex=42) returned 0
[0194.804] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0194.804] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0194.804] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0194.804] GetCurrentObject (hdc=0x5f0107ad, type=0x1) returned 0xb00017
[0194.804] GetCurrentObject (hdc=0x5f0107ad, type=0x2) returned 0x900010
[0194.804] GetCurrentObject (hdc=0x5f0107ad, type=0x7) returned 0x1e0507b9
[0194.804] GetCurrentObject (hdc=0x5f0107ad, type=0x6) returned 0x8a01c2
[0194.804] SaveDC (hdc=0x5f0107ad) returned 2
[0194.804] GetNearestColor (hdc=0x5f0107ad, color=0xff) returned 0xff
[0194.804] CreateSolidBrush (color=0xff) returned 0xec10078d
[0194.804] FillRect (hDC=0x5f0107ad, lprc=0x53e0c0, hbr=0xec10078d) returned 1
[0194.804] DeleteObject (ho=0xec10078d) returned 1
[0194.804] RestoreDC (hdc=0x5f0107ad, nSavedDC=-1) returned 1
[0194.804] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0194.804] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0194.804] GetSystemMetrics (nIndex=42) returned 0
[0194.804] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0194.804] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0194.805] RestoreDC (hdc=0x5f0107ad, nSavedDC=-1) returned 1
[0194.805] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107ad) returned 0x0
[0194.805] IsAppThemed () returned 0x1
[0194.805] GetThemeAppProperties () returned 0x3
[0194.805] GetThemeAppProperties () returned 0x3
[0194.805] IsAppThemed () returned 0x1
[0194.805] GetThemeAppProperties () returned 0x3
[0194.805] GetThemeAppProperties () returned 0x3
[0194.805] IsThemePartDefined () returned 0x1
[0194.805] GdipCreateRegion (region=0x53e640) returned 0x0
[0194.805] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0194.805] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0194.805] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0194.805] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0194.805] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0194.805] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0194.805] LocalFree (hMem=0x89ee40) returned 0x0
[0194.805] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0194.805] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0194.805] LocalFree (hMem=0x89ec80) returned 0x0
[0194.806] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0194.806] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0194.806] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0194.806] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0194.806] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0194.806] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0194.806] GetCurrentObject (hdc=0x5f0107ad, type=0x1) returned 0xb00017
[0194.806] GetCurrentObject (hdc=0x5f0107ad, type=0x2) returned 0x900010
[0194.806] GetCurrentObject (hdc=0x5f0107ad, type=0x7) returned 0x1e0507b9
[0194.806] GetCurrentObject (hdc=0x5f0107ad, type=0x6) returned 0x8a01c2
[0194.806] SaveDC (hdc=0x5f0107ad) returned 1
[0194.806] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2104051e
[0194.806] GetClipRgn (hdc=0x5f0107ad, hrgn=0x2104051e) returned 0
[0194.806] SelectClipRgn (hdc=0x5f0107ad, hrgn=0x2904053e) returned 2
[0194.806] DeleteObject (ho=0x2104051e) returned 1
[0194.806] DeleteObject (ho=0x2904053e) returned 1
[0194.806] OffsetViewportOrgEx (in: hdc=0x5f0107ad, x=0, y=0, lppt=0x2302de4 | out: lppt=0x2302de4) returned 1
[0194.806] IsAppThemed () returned 0x1
[0194.807] GetThemeAppProperties () returned 0x3
[0194.807] GetThemeAppProperties () returned 0x3
[0194.807] DrawThemeBackground () returned 0x0
[0194.807] RestoreDC (hdc=0x5f0107ad, nSavedDC=-1) returned 1
[0194.807] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107ad) returned 0x0
[0194.807] GdipCreateRegion (region=0x53e644) returned 0x0
[0194.807] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0194.807] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0194.807] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0194.807] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0194.807] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0194.807] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0194.807] LocalFree (hMem=0x89ea88) returned 0x0
[0194.807] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0194.807] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0194.807] LocalFree (hMem=0x89ee08) returned 0x0
[0194.807] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0194.807] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0194.807] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0194.807] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0194.807] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0194.807] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0194.807] GetCurrentObject (hdc=0x5f0107ad, type=0x1) returned 0xb00017
[0194.808] GetCurrentObject (hdc=0x5f0107ad, type=0x2) returned 0x900010
[0194.808] GetCurrentObject (hdc=0x5f0107ad, type=0x7) returned 0x1e0507b9
[0194.808] GetCurrentObject (hdc=0x5f0107ad, type=0x6) returned 0x8a01c2
[0194.808] SaveDC (hdc=0x5f0107ad) returned 1
[0194.808] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2a04053e
[0194.808] GetClipRgn (hdc=0x5f0107ad, hrgn=0x2a04053e) returned 0
[0194.808] SelectClipRgn (hdc=0x5f0107ad, hrgn=0x2204051e) returned 2
[0194.808] DeleteObject (ho=0x2a04053e) returned 1
[0194.808] DeleteObject (ho=0x2204051e) returned 1
[0194.808] OffsetViewportOrgEx (in: hdc=0x5f0107ad, x=0, y=0, lppt=0x23030b8 | out: lppt=0x23030b8) returned 1
[0194.808] IsAppThemed () returned 0x1
[0194.808] GetThemeAppProperties () returned 0x3
[0194.808] GetThemeAppProperties () returned 0x3
[0194.808] GetThemeBackgroundContentRect () returned 0x0
[0194.808] RestoreDC (hdc=0x5f0107ad, nSavedDC=-1) returned 1
[0194.808] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107ad) returned 0x0
[0194.808] IsAppThemed () returned 0x1
[0194.809] GetThemeAppProperties () returned 0x3
[0194.809] GetThemeAppProperties () returned 0x3
[0194.809] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0194.809] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0194.809] GetCurrentObject (hdc=0x5f0107ad, type=0x1) returned 0xb00017
[0194.809] GetCurrentObject (hdc=0x5f0107ad, type=0x2) returned 0x900010
[0194.809] GetCurrentObject (hdc=0x5f0107ad, type=0x7) returned 0x1e0507b9
[0194.809] GetCurrentObject (hdc=0x5f0107ad, type=0x6) returned 0x8a01c2
[0194.809] SaveDC (hdc=0x5f0107ad) returned 1
[0194.809] GetTextAlign (hdc=0x5f0107ad) returned 0x0
[0194.809] GetTextColor (hdc=0x5f0107ad) returned 0x0
[0194.809] GetCurrentObject (hdc=0x5f0107ad, type=0x6) returned 0x8a01c2
[0194.809] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0194.810] SelectObject (hdc=0x5f0107ad, h=0x450a0799) returned 0x8a01c2
[0194.810] GetBkMode (hdc=0x5f0107ad) returned 2
[0194.810] SetBkMode (hdc=0x5f0107ad, mode=1) returned 2
[0194.810] DrawTextExW (in: hdc=0x5f0107ad, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2303458 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0194.810] DrawTextExW (in: hdc=0x5f0107ad, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2303458 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0194.811] RestoreDC (hdc=0x5f0107ad, nSavedDC=-1) returned 1
[0194.811] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107ad) returned 0x0
[0194.811] GetFocus () returned 0x202c6
[0194.811] IsAppThemed () returned 0x1
[0194.812] GetThemeAppProperties () returned 0x3
[0194.812] GetThemeAppProperties () returned 0x3
[0194.812] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0194.812] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x5f0107ad, x1=0, y1=0, rop=0xcc0020) returned 1
[0194.812] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107ad) returned 0x0
[0194.813] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0194.813] SelectObject (hdc=0x5f0107ad, h=0x85000f) returned 0x1e0507b9
[0194.813] DeleteDC (hdc=0x5f0107ad) returned 1
[0194.813] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0194.813] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0194.813] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0194.813] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0194.813] WaitMessage () returned 1
[0194.897] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0194.901] IsWindowUnicode (hWnd=0x202c6) returned 1
[0194.901] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0194.901] TranslateMessage (lpMsg=0x53eef8) returned 0
[0194.901] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0194.902] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0194.902] IsWindowUnicode (hWnd=0x202c6) returned 1
[0194.902] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0194.902] TranslateMessage (lpMsg=0x53eef8) returned 0
[0194.902] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0194.903] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x13003b) returned 0x0
[0194.903] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0194.903] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0194.903] WaitMessage () returned 1
[0195.045] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0195.045] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19b022b) returned 0x1
[0195.045] IsWindowUnicode (hWnd=0x202c6) returned 1
[0195.045] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0195.045] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19b022b) returned 0x1
[0195.046] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0195.046] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12e01d5) returned 0x0
[0195.046] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0195.046] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0195.046] SetCursor (hCursor=0x10003) returned 0x10003
[0195.046] TranslateMessage (lpMsg=0x53eef8) returned 0
[0195.046] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0195.046] GetKeyState (nVirtKey=1) returned -127
[0195.046] GetKeyState (nVirtKey=2) returned 0
[0195.046] GetKeyState (nVirtKey=4) returned 0
[0195.046] GetKeyState (nVirtKey=5) returned 0
[0195.046] GetKeyState (nVirtKey=6) returned 0
[0195.046] IsWindowVisible (hWnd=0x202c6) returned 1
[0195.046] IsWindowEnabled (hWnd=0x202c6) returned 1
[0195.046] SetFocus (hWnd=0x202c6) returned 0x202c6
[0195.046] GetFocus () returned 0x202c6
[0195.046] GetFocus () returned 0x202c6
[0195.047] GetFocus () returned 0x202c6
[0195.047] GetKeyState (nVirtKey=1) returned -127
[0195.047] GetKeyState (nVirtKey=2) returned 0
[0195.047] GetKeyState (nVirtKey=4) returned 0
[0195.047] GetKeyState (nVirtKey=5) returned 0
[0195.047] GetKeyState (nVirtKey=6) returned 0
[0195.047] GetCapture () returned 0x0
[0195.047] SetCapture (hWnd=0x202c6) returned 0x0
[0195.047] GetKeyState (nVirtKey=1) returned -127
[0195.047] GetKeyState (nVirtKey=2) returned 0
[0195.047] GetKeyState (nVirtKey=4) returned 0
[0195.047] GetKeyState (nVirtKey=5) returned 0
[0195.047] GetKeyState (nVirtKey=6) returned 0
[0195.047] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0195.047] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0195.047] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0195.047] IsWindowUnicode (hWnd=0x202c6) returned 1
[0195.047] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0195.047] TranslateMessage (lpMsg=0x53eef8) returned 0
[0195.048] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0195.048] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23035dc, cPoints=0x1 | out: lpPoints=0x23035dc) returned 25690608
[0195.048] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0195.048] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0195.048] UpdateWindow (hWnd=0x202c6) returned 1
[0195.048] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x10105d6
[0195.048] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0195.048] CreateCompatibleDC (hdc=0x10105d6) returned 0x600107ad
[0195.048] SelectObject (hdc=0x600107ad, h=0x1e0507b9) returned 0x85000f
[0195.048] GdipCreateFromHDC (hdc=0x600107ad, graphics=0x53e5f0) returned 0x0
[0195.048] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0195.048] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0195.049] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0195.049] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.049] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0195.049] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.049] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0195.049] LocalFree (hMem=0x89ea88) returned 0x0
[0195.049] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.049] GdipCreateRegion (region=0x53e638) returned 0x0
[0195.049] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.049] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0195.049] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0195.049] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd1f0dbd) returned 0x0
[0195.049] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.049] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0195.049] GetCurrentObject (hdc=0x600107ad, type=0x1) returned 0xb00017
[0195.049] GetCurrentObject (hdc=0x600107ad, type=0x2) returned 0x900010
[0195.050] GetCurrentObject (hdc=0x600107ad, type=0x7) returned 0x1e0507b9
[0195.050] GetCurrentObject (hdc=0x600107ad, type=0x6) returned 0x8a01c2
[0195.050] SaveDC (hdc=0x600107ad) returned 1
[0195.050] GetNearestColor (hdc=0x600107ad, color=0xff) returned 0xff
[0195.050] GetNearestColor (hdc=0x600107ad, color=0x55) returned 0x55
[0195.050] GetNearestColor (hdc=0x600107ad, color=0x0) returned 0x0
[0195.050] GetNearestColor (hdc=0x600107ad, color=0x55) returned 0x55
[0195.050] GetNearestColor (hdc=0x600107ad, color=0x0) returned 0x0
[0195.050] GetNearestColor (hdc=0x600107ad, color=0x8080ff) returned 0x8080ff
[0195.050] GetNearestColor (hdc=0x600107ad, color=0x7373e5) returned 0x7373e5
[0195.050] GetNearestColor (hdc=0x600107ad, color=0xe5) returned 0xe5
[0195.050] GetNearestColor (hdc=0x600107ad, color=0x0) returned 0x0
[0195.050] RestoreDC (hdc=0x600107ad, nSavedDC=-1) returned 1
[0195.050] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107ad) returned 0x0
[0195.051] IsAppThemed () returned 0x1
[0195.051] GetThemeAppProperties () returned 0x3
[0195.051] GetThemeAppProperties () returned 0x3
[0195.051] IsAppThemed () returned 0x1
[0195.051] GetThemeAppProperties () returned 0x3
[0195.051] GetThemeAppProperties () returned 0x3
[0195.051] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x2303cf8 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0195.051] IsAppThemed () returned 0x1
[0195.051] GetThemeAppProperties () returned 0x3
[0195.051] GetThemeAppProperties () returned 0x3
[0195.051] IsAppThemed () returned 0x1
[0195.051] GetThemeAppProperties () returned 0x3
[0195.051] GetThemeAppProperties () returned 0x3
[0195.052] IsAppThemed () returned 0x1
[0195.052] GetThemeAppProperties () returned 0x3
[0195.052] GetThemeAppProperties () returned 0x3
[0195.052] IsAppThemed () returned 0x1
[0195.052] GetThemeAppProperties () returned 0x3
[0195.052] GetThemeAppProperties () returned 0x3
[0195.052] IsThemePartDefined () returned 0x1
[0195.052] IsAppThemed () returned 0x1
[0195.052] GetThemeAppProperties () returned 0x3
[0195.052] GetThemeAppProperties () returned 0x3
[0195.052] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0195.052] IsAppThemed () returned 0x1
[0195.052] GetThemeAppProperties () returned 0x3
[0195.052] GetThemeAppProperties () returned 0x3
[0195.052] IsAppThemed () returned 0x1
[0195.052] GetThemeAppProperties () returned 0x3
[0195.052] GetThemeAppProperties () returned 0x3
[0195.052] IsThemePartDefined () returned 0x1
[0195.052] GdipCreateRegion (region=0x53e354) returned 0x0
[0195.052] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.052] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0195.053] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.053] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0195.053] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0195.053] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0195.053] LocalFree (hMem=0x89ec80) returned 0x0
[0195.053] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.053] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.053] LocalFree (hMem=0x89ea88) returned 0x0
[0195.053] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.053] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0195.053] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0195.053] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0195.053] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.053] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0195.053] GetCurrentObject (hdc=0x600107ad, type=0x1) returned 0xb00017
[0195.053] GetCurrentObject (hdc=0x600107ad, type=0x2) returned 0x900010
[0195.053] GetCurrentObject (hdc=0x600107ad, type=0x7) returned 0x1e0507b9
[0195.054] GetCurrentObject (hdc=0x600107ad, type=0x6) returned 0x8a01c2
[0195.054] SaveDC (hdc=0x600107ad) returned 1
[0195.054] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2304051e
[0195.054] GetClipRgn (hdc=0x600107ad, hrgn=0x2304051e) returned 0
[0195.054] SelectClipRgn (hdc=0x600107ad, hrgn=0x2e04053e) returned 2
[0195.054] DeleteObject (ho=0x2304051e) returned 1
[0195.054] DeleteObject (ho=0x2e04053e) returned 1
[0195.054] OffsetViewportOrgEx (in: hdc=0x600107ad, x=0, y=0, lppt=0x23043dc | out: lppt=0x23043dc) returned 1
[0195.054] DrawThemeParentBackground () returned 0x0
[0195.054] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0195.054] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0195.054] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0195.055] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0195.055] GetSystemMetrics (nIndex=42) returned 0
[0195.055] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0195.055] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0195.055] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0195.055] GetCurrentObject (hdc=0x600107ad, type=0x1) returned 0xb00017
[0195.055] GetCurrentObject (hdc=0x600107ad, type=0x2) returned 0x900010
[0195.055] GetCurrentObject (hdc=0x600107ad, type=0x7) returned 0x1e0507b9
[0195.055] GetCurrentObject (hdc=0x600107ad, type=0x6) returned 0x8a01c2
[0195.055] SaveDC (hdc=0x600107ad) returned 2
[0195.055] GetNearestColor (hdc=0x600107ad, color=0xff) returned 0xff
[0195.055] CreateSolidBrush (color=0xff) returned 0xed10078d
[0195.055] FillRect (hDC=0x600107ad, lprc=0x53ddb8, hbr=0xed10078d) returned 1
[0195.055] DeleteObject (ho=0xed10078d) returned 1
[0195.055] RestoreDC (hdc=0x600107ad, nSavedDC=-1) returned 1
[0195.055] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0195.055] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0195.056] GetSystemMetrics (nIndex=42) returned 0
[0195.056] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0195.056] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0195.056] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0195.056] GetCurrentObject (hdc=0x600107ad, type=0x1) returned 0xb00017
[0195.056] GetCurrentObject (hdc=0x600107ad, type=0x2) returned 0x900010
[0195.056] GetCurrentObject (hdc=0x600107ad, type=0x7) returned 0x1e0507b9
[0195.056] GetCurrentObject (hdc=0x600107ad, type=0x6) returned 0x8a01c2
[0195.056] SaveDC (hdc=0x600107ad) returned 2
[0195.056] GetNearestColor (hdc=0x600107ad, color=0xff) returned 0xff
[0195.056] CreateSolidBrush (color=0xff) returned 0xee10078d
[0195.056] FillRect (hDC=0x600107ad, lprc=0x53dd58, hbr=0xee10078d) returned 1
[0195.056] DeleteObject (ho=0xee10078d) returned 1
[0195.056] RestoreDC (hdc=0x600107ad, nSavedDC=-1) returned 1
[0195.056] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0195.056] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0195.056] GetSystemMetrics (nIndex=42) returned 0
[0195.056] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0195.056] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0195.057] RestoreDC (hdc=0x600107ad, nSavedDC=-1) returned 1
[0195.057] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107ad) returned 0x0
[0195.057] IsAppThemed () returned 0x1
[0195.057] GetThemeAppProperties () returned 0x3
[0195.057] GetThemeAppProperties () returned 0x3
[0195.057] IsAppThemed () returned 0x1
[0195.057] GetThemeAppProperties () returned 0x3
[0195.057] GetThemeAppProperties () returned 0x3
[0195.057] IsThemePartDefined () returned 0x1
[0195.057] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0195.057] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.057] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0195.057] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.057] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0195.057] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0195.057] LocalFree (hMem=0x89ec80) returned 0x0
[0195.057] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0195.057] LocalFree (hMem=0x89ea88) returned 0x0
[0195.057] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.057] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0195.057] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0195.057] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0195.058] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.058] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0195.058] GetCurrentObject (hdc=0x600107ad, type=0x1) returned 0xb00017
[0195.058] GetCurrentObject (hdc=0x600107ad, type=0x2) returned 0x900010
[0195.058] GetCurrentObject (hdc=0x600107ad, type=0x7) returned 0x1e0507b9
[0195.058] GetCurrentObject (hdc=0x600107ad, type=0x6) returned 0x8a01c2
[0195.058] SaveDC (hdc=0x600107ad) returned 1
[0195.058] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f04053e
[0195.058] GetClipRgn (hdc=0x600107ad, hrgn=0x2f04053e) returned 0
[0195.058] SelectClipRgn (hdc=0x600107ad, hrgn=0x2504051e) returned 2
[0195.058] DeleteObject (ho=0x2f04053e) returned 1
[0195.058] DeleteObject (ho=0x2504051e) returned 1
[0195.058] OffsetViewportOrgEx (in: hdc=0x600107ad, x=0, y=0, lppt=0x2304c40 | out: lppt=0x2304c40) returned 1
[0195.058] IsAppThemed () returned 0x1
[0195.058] GetThemeAppProperties () returned 0x3
[0195.058] GetThemeAppProperties () returned 0x3
[0195.058] DrawThemeBackground () returned 0x0
[0195.058] RestoreDC (hdc=0x600107ad, nSavedDC=-1) returned 1
[0195.058] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107ad) returned 0x0
[0195.058] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0195.058] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.058] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0195.059] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.059] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0195.059] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0195.059] LocalFree (hMem=0x89ec80) returned 0x0
[0195.059] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0195.059] LocalFree (hMem=0x89ee08) returned 0x0
[0195.059] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.059] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0195.059] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0195.059] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0195.059] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.059] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0195.059] GetCurrentObject (hdc=0x600107ad, type=0x1) returned 0xb00017
[0195.059] GetCurrentObject (hdc=0x600107ad, type=0x2) returned 0x900010
[0195.059] GetCurrentObject (hdc=0x600107ad, type=0x7) returned 0x1e0507b9
[0195.059] GetCurrentObject (hdc=0x600107ad, type=0x6) returned 0x8a01c2
[0195.059] SaveDC (hdc=0x600107ad) returned 1
[0195.059] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2604051e
[0195.059] GetClipRgn (hdc=0x600107ad, hrgn=0x2604051e) returned 0
[0195.059] SelectClipRgn (hdc=0x600107ad, hrgn=0x3004053e) returned 2
[0195.059] DeleteObject (ho=0x2604051e) returned 1
[0195.059] DeleteObject (ho=0x3004053e) returned 1
[0195.060] OffsetViewportOrgEx (in: hdc=0x600107ad, x=0, y=0, lppt=0x2304f14 | out: lppt=0x2304f14) returned 1
[0195.060] IsAppThemed () returned 0x1
[0195.060] GetThemeAppProperties () returned 0x3
[0195.060] GetThemeAppProperties () returned 0x3
[0195.060] GetThemeBackgroundContentRect () returned 0x0
[0195.060] RestoreDC (hdc=0x600107ad, nSavedDC=-1) returned 1
[0195.060] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107ad) returned 0x0
[0195.060] IsAppThemed () returned 0x1
[0195.060] GetThemeAppProperties () returned 0x3
[0195.060] GetThemeAppProperties () returned 0x3
[0195.060] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0195.060] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0195.060] GetCurrentObject (hdc=0x600107ad, type=0x1) returned 0xb00017
[0195.060] GetCurrentObject (hdc=0x600107ad, type=0x2) returned 0x900010
[0195.060] GetCurrentObject (hdc=0x600107ad, type=0x7) returned 0x1e0507b9
[0195.060] GetCurrentObject (hdc=0x600107ad, type=0x6) returned 0x8a01c2
[0195.060] SaveDC (hdc=0x600107ad) returned 1
[0195.060] GetTextAlign (hdc=0x600107ad) returned 0x0
[0195.060] GetTextColor (hdc=0x600107ad) returned 0x0
[0195.060] GetCurrentObject (hdc=0x600107ad, type=0x6) returned 0x8a01c2
[0195.060] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0195.061] SelectObject (hdc=0x600107ad, h=0x450a0799) returned 0x8a01c2
[0195.061] GetBkMode (hdc=0x600107ad) returned 2
[0195.061] SetBkMode (hdc=0x600107ad, mode=1) returned 2
[0195.061] DrawTextExW (in: hdc=0x600107ad, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x23052b4 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0195.061] DrawTextExW (in: hdc=0x600107ad, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x23052b4 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0195.061] RestoreDC (hdc=0x600107ad, nSavedDC=-1) returned 1
[0195.061] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107ad) returned 0x0
[0195.061] GetFocus () returned 0x202c6
[0195.061] IsAppThemed () returned 0x1
[0195.061] GetThemeAppProperties () returned 0x3
[0195.061] GetThemeAppProperties () returned 0x3
[0195.062] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0195.062] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x600107ad, x1=0, y1=0, rop=0xcc0020) returned 1
[0195.062] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107ad) returned 0x0
[0195.062] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0195.062] SelectObject (hdc=0x600107ad, h=0x85000f) returned 0x1e0507b9
[0195.062] DeleteDC (hdc=0x600107ad) returned 1
[0195.062] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0195.062] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0195.062] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23053b0, cPoints=0x1 | out: lpPoints=0x23053b0) returned 25690608
[0195.063] WindowFromPoint (Point=0x22b) returned 0x202c6
[0195.063] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19b022b) returned 0x1
[0195.063] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0195.063] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0195.065] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.066] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0195.067] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.067] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0195.067] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.067] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0195.068] GetDC (hWnd=0x0) returned 0x60100ce
[0195.068] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e888) returned 0x0
[0195.069] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0195.069] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0195.069] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0195.069] GetSystemMetrics (nIndex=5) returned 1
[0195.069] GetSystemMetrics (nIndex=6) returned 1
[0195.069] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.070] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0195.070] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.070] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0195.135] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.136] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0195.136] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.136] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0195.136] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.136] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0195.137] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.137] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0195.137] GetSystemMetrics (nIndex=5) returned 1
[0195.137] GetSystemMetrics (nIndex=6) returned 1
[0195.137] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.137] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0195.137] GetSystemMetrics (nIndex=5) returned 1
[0195.137] GetSystemMetrics (nIndex=6) returned 1
[0195.138] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.138] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0195.138] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.138] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0195.138] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.138] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0195.139] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.139] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0195.139] GetSystemMetrics (nIndex=59) returned 1460
[0195.139] GetSystemMetrics (nIndex=60) returned 920
[0195.139] GetSystemMetrics (nIndex=34) returned 136
[0195.139] GetSystemMetrics (nIndex=35) returned 39
[0195.139] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.139] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0195.139] GetCurrentThreadId () returned 0x11d0
[0195.139] GetCurrentThreadId () returned 0x11d0
[0195.139] GetCurrentThreadId () returned 0x11d0
[0195.139] GetCurrentThreadId () returned 0x11d0
[0195.139] GetCurrentThreadId () returned 0x11d0
[0195.139] GetCurrentThreadId () returned 0x11d0
[0195.139] GetCurrentThreadId () returned 0x11d0
[0195.139] GetCurrentThreadId () returned 0x11d0
[0195.140] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.140] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0195.140] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0195.140] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0195.140] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.140] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0195.141] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.141] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0195.141] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xb02d8
[0195.142] SetWindowLongW (hWnd=0xb02d8, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0195.142] GetWindowLongW (hWnd=0xb02d8, nIndex=-4) returned 1950089536
[0195.142] SetWindowLongW (hWnd=0xb02d8, nIndex=-4, dwNewLong=79644422) returned 1950089536
[0195.142] GetWindowLongW (hWnd=0xb02d8, nIndex=-4) returned 79644422
[0195.142] GetWindowLongW (hWnd=0xb02d8, nIndex=-16) returned 113311744
[0195.143] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb02d8, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0195.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb02d8, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0195.145] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb02d8, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0195.146] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb02d8, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0195.146] GetClientRect (in: hWnd=0xb02d8, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0195.146] GetWindowRect (in: hWnd=0xb02d8, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0195.146] SetWindowTextW (hWnd=0xb02d8, lpString="WindowsFormsParkingWindow") returned 1
[0195.146] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb02d8, Msg=0xc, wParam=0x0, lParam=0x22fd160) returned 0x1
[0195.147] GetParent (hWnd=0xb02d8) returned 0x0
[0195.148] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0195.148] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0xb02d8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xc02d6
[0195.148] SetWindowLongW (hWnd=0xc02d6, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0195.148] GetWindowLongW (hWnd=0xc02d6, nIndex=-4) returned 1868147648
[0195.149] SetWindowLongW (hWnd=0xc02d6, nIndex=-4, dwNewLong=79643702) returned 1868147648
[0195.149] GetWindowLongW (hWnd=0xc02d6, nIndex=-4) returned 79643702
[0195.149] GetWindowLongW (hWnd=0xc02d6, nIndex=-16) returned 1174405133
[0195.149] GetWindowLongW (hWnd=0xc02d6, nIndex=-12) returned 0
[0195.149] SetWindowLongW (hWnd=0xc02d6, nIndex=-12, dwNewLong=787158) returned 0
[0195.149] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0195.150] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0195.150] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0195.151] GetClientRect (in: hWnd=0xc02d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0195.151] GetWindowRect (in: hWnd=0xc02d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0195.151] GetParent (hWnd=0xc02d6) returned 0xb02d8
[0195.151] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xb02d8, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0195.151] SetWindowTextW (hWnd=0xc02d6, lpString="Enter password: ") returned 1
[0195.151] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0xc, wParam=0x0, lParam=0x2333718) returned 0x1
[0195.152] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0195.152] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0195.152] GetClientRect (in: hWnd=0xc02d6, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0195.152] GetWindowRect (in: hWnd=0xc02d6, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0195.152] GetParent (hWnd=0xc02d6) returned 0xb02d8
[0195.152] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xb02d8, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0195.152] SendMessageW (hWnd=0xc02d6, Msg=0x2210, wParam=0x2d60001, lParam=0xc02d6) returned 0x0
[0195.152] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x2210, wParam=0x2d60001, lParam=0xc02d6) returned 0x0
[0195.152] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0195.153] GetParent (hWnd=0xc02d6) returned 0xb02d8
[0195.153] GdipCreateFromHWND (hwnd=0xc02d6, graphics=0x53e994) returned 0x0
[0195.153] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0195.153] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0195.153] GetProcessWindowStation () returned 0x13c
[0195.153] GetCapture () returned 0x202c6
[0195.154] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0195.154] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0195.154] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0195.154] ReleaseCapture () returned 1
[0195.154] GetActiveWindow () returned 0x70036
[0195.154] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0195.154] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.155] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0195.155] GetCursorPos (in: lpPoint=0x23176fc | out: lpPoint=0x23176fc*(x=555, y=411)) returned 1
[0195.155] MonitorFromPoint (pt=0x22b, dwFlags=0x19b) returned 0x10001
[0195.155] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0195.155] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x630107ad
[0195.155] GetDeviceCaps (hdc=0x630107ad, index=12) returned 32
[0195.155] GetDeviceCaps (hdc=0x630107ad, index=14) returned 1
[0195.155] DeleteDC (hdc=0x630107ad) returned 1
[0195.156] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0195.156] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0195.156] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xf013e
[0195.157] SetWindowLongW (hWnd=0xf013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0195.157] GetWindowLongW (hWnd=0xf013e, nIndex=-4) returned 1950089536
[0195.157] SetWindowLongW (hWnd=0xf013e, nIndex=-4, dwNewLong=79644502) returned 1950089536
[0195.157] GetWindowLongW (hWnd=0xf013e, nIndex=-4) returned 79644502
[0195.157] GetWindowLongW (hWnd=0xf013e, nIndex=-16) returned 113770496
[0195.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0195.158] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0195.159] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0195.159] GetClientRect (in: hWnd=0xf013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0195.159] GetWindowRect (in: hWnd=0xf013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0195.159] SetWindowTextW (hWnd=0xf013e, lpString="Ransomware") returned 1
[0195.159] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xc, wParam=0x0, lParam=0x2305478) returned 0x1
[0195.160] GetStartupInfoW (in: lpStartupInfo=0x2317b3c | out: lpStartupInfo=0x2317b3c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0195.162] GetParent (hWnd=0xf013e) returned 0x0
[0195.162] SetWindowLongW (hWnd=0xf013e, nIndex=-8, dwNewLong=0) returned 0
[0195.163] SendMessageW (hWnd=0xf013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0195.163] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0195.163] SendMessageW (hWnd=0xf013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0195.163] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0195.164] GetSystemMenu (hWnd=0xf013e, bRevert=0) returned 0x1a0129
[0195.164] GetWindowPlacement (in: hWnd=0xf013e, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0195.164] EnableMenuItem (hMenu=0x1a0129, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0195.164] EnableMenuItem (hMenu=0x1a0129, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0195.165] EnableMenuItem (hMenu=0x1a0129, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0195.165] EnableMenuItem (hMenu=0x1a0129, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0195.165] EnableMenuItem (hMenu=0x1a0129, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0195.165] GetClientRect (in: hWnd=0xf013e, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0195.165] GetClientRect (in: hWnd=0xf013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0195.165] GetWindowRect (in: hWnd=0xf013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0195.165] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.165] GetWindowLongW (hWnd=0xf013e, nIndex=-16) returned 113770496
[0195.165] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.165] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.166] GetSystemMetrics (nIndex=42) returned 0
[0195.166] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.166] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0195.166] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.166] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.166] GetSystemMetrics (nIndex=42) returned 0
[0195.166] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.166] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0195.166] GetCursorPos (in: lpPoint=0x2317d18 | out: lpPoint=0x2317d18*(x=555, y=411)) returned 1
[0195.166] MonitorFromPoint (pt=0x22c, dwFlags=0x19c) returned 0x10001
[0195.166] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0195.166] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x670107ad
[0195.166] GetDeviceCaps (hdc=0x670107ad, index=12) returned 32
[0195.166] GetDeviceCaps (hdc=0x670107ad, index=14) returned 1
[0195.166] DeleteDC (hdc=0x670107ad) returned 1
[0195.167] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0195.167] GetWindowLongW (hWnd=0xf013e, nIndex=-16) returned 113770496
[0195.167] GetWindowLongW (hWnd=0xf013e, nIndex=-20) returned 327937
[0195.167] SetWindowLongW (hWnd=0xf013e, nIndex=-16, dwNewLong=46661632) returned 113770496
[0195.167] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0195.167] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0195.168] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0195.168] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0195.168] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0195.168] SetWindowLongW (hWnd=0xf013e, nIndex=-20, dwNewLong=327681) returned 327937
[0195.168] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0195.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0195.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0195.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0195.170] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0195.170] SetWindowPos (hWnd=0xf013e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0195.170] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0195.170] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0195.171] GetWindowPlacement (in: hWnd=0xf013e, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0195.171] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0195.171] GetClientRect (in: hWnd=0xf013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0195.171] GetWindowRect (in: hWnd=0xf013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0195.171] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0195.172] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0195.172] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0195.172] RedrawWindow (hWnd=0xf013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0195.172] GetSystemMenu (hWnd=0xf013e, bRevert=0) returned 0x1a0129
[0195.173] GetWindowPlacement (in: hWnd=0xf013e, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0195.173] EnableMenuItem (hMenu=0x1a0129, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0195.173] EnableMenuItem (hMenu=0x1a0129, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0195.173] EnableMenuItem (hMenu=0x1a0129, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0195.173] EnableMenuItem (hMenu=0x1a0129, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0195.173] EnableMenuItem (hMenu=0x1a0129, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0195.173] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0195.173] GetWindowLongW (hWnd=0xf013e, nIndex=-8) returned 0
[0195.173] SetWindowLongW (hWnd=0xf013e, nIndex=-8, dwNewLong=458806) returned 0
[0195.174] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0195.174] GetProcessWindowStation () returned 0x13c
[0195.174] GetCurrentThreadId () returned 0x11d0
[0195.175] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf44ae, lParam=0x0) returned 1
[0195.175] IsWindowVisible (hWnd=0xf013e) returned 0
[0195.175] IsWindowVisible (hWnd=0x70036) returned 1
[0195.175] IsWindowEnabled (hWnd=0x70036) returned 1
[0195.175] IsWindowVisible (hWnd=0x602b6) returned 0
[0195.175] IsWindowVisible (hWnd=0x901f8) returned 0
[0195.175] IsWindowVisible (hWnd=0x202d0) returned 0
[0195.175] IsWindowVisible (hWnd=0x202d4) returned 0
[0195.175] GetActiveWindow () returned 0x70036
[0195.175] GetFocus () returned 0x202c6
[0195.175] IsWindow (hWnd=0x70036) returned 1
[0195.175] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0195.175] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0195.176] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0195.176] GetWindowLongW (hWnd=0xf013e, nIndex=-8) returned 458806
[0195.176] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0195.176] GetCurrentThreadId () returned 0x11d0
[0195.176] GetWindowLongW (hWnd=0xf013e, nIndex=-8) returned 458806
[0195.176] IsWindowEnabled (hWnd=0x70036) returned 0
[0195.176] IsWindowEnabled (hWnd=0xf013e) returned 1
[0195.176] ShowWindow (hWnd=0xf013e, nCmdShow=5) returned 0
[0195.177] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0195.177] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0195.177] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.178] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0195.179] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0xf013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xb02d2
[0195.179] SetWindowLongW (hWnd=0xb02d2, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0195.179] GetWindowLongW (hWnd=0xb02d2, nIndex=-4) returned 1868026976
[0195.180] SetWindowLongW (hWnd=0xb02d2, nIndex=-4, dwNewLong=79643982) returned 1868026976
[0195.180] GetWindowLongW (hWnd=0xb02d2, nIndex=-4) returned 79643982
[0195.180] GetWindowLongW (hWnd=0xb02d2, nIndex=-16) returned 1174470848
[0195.180] GetWindowLongW (hWnd=0xb02d2, nIndex=-12) returned 0
[0195.180] SetWindowLongW (hWnd=0xb02d2, nIndex=-12, dwNewLong=721618) returned 0
[0195.180] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0195.181] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0195.182] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0195.183] SendMessageW (hWnd=0xb02d2, Msg=0x2055, wParam=0xb02d2, lParam=0x3) returned 0x2
[0195.183] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0195.183] GetWindow (hWnd=0xb02d2, uCmd=0x3) returned 0x0
[0195.183] GetClientRect (in: hWnd=0xb02d2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0195.183] GetWindowRect (in: hWnd=0xb02d2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0195.183] GetParent (hWnd=0xb02d2) returned 0xf013e
[0195.183] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf013e, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0195.183] SendMessageW (hWnd=0xb02d2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0195.183] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0195.183] SendMessageW (hWnd=0xb02d2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0195.183] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0195.184] GetSystemMetrics (nIndex=5) returned 1
[0195.184] GetSystemMetrics (nIndex=6) returned 1
[0195.184] SendMessageW (hWnd=0xb02d2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0195.184] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0195.184] SendMessageW (hWnd=0xb02d2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0195.184] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0195.184] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0195.185] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0195.185] GetClientRect (in: hWnd=0xb02d2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0195.185] GetWindowRect (in: hWnd=0xb02d2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0195.185] GetParent (hWnd=0xb02d2) returned 0xf013e
[0195.185] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf013e, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0195.185] SendMessageW (hWnd=0xb02d2, Msg=0x2210, wParam=0x2d20001, lParam=0xb02d2) returned 0x0
[0195.185] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x2210, wParam=0x2d20001, lParam=0xb02d2) returned 0x0
[0195.185] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0195.185] GetParent (hWnd=0xb02d2) returned 0xf013e
[0195.185] GetParent (hWnd=0xc02d6) returned 0xb02d8
[0195.185] SetParent (hWndChild=0xc02d6, hWndNewParent=0xf013e) returned 0xb02d8
[0195.185] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0195.186] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0195.186] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0195.187] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0195.187] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0195.187] GetClientRect (in: hWnd=0xc02d6, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0195.187] GetWindowRect (in: hWnd=0xc02d6, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0195.187] GetParent (hWnd=0xc02d6) returned 0xf013e
[0195.187] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf013e, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0195.187] GetClientRect (in: hWnd=0xc02d6, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0195.187] GetWindowRect (in: hWnd=0xc02d6, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0195.187] GetParent (hWnd=0xc02d6) returned 0xf013e
[0195.187] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf013e, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0195.187] GetParent (hWnd=0xc02d6) returned 0xf013e
[0195.187] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0195.187] GetWindow (hWnd=0xc02d6, uCmd=0x3) returned 0x0
[0195.187] SetWindowPos (hWnd=0xc02d6, hWndInsertAfter=0xb02d2, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0195.187] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0195.188] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0195.188] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0195.188] GetClientRect (in: hWnd=0xc02d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0195.188] GetWindowRect (in: hWnd=0xc02d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0195.188] GetParent (hWnd=0xc02d6) returned 0xf013e
[0195.188] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0195.188] GetParent (hWnd=0xc02d6) returned 0xf013e
[0195.188] GetWindow (hWnd=0xc02d6, uCmd=0x3) returned 0xb02d2
[0195.188] GetWindowThreadProcessId (in: hWnd=0xc02d6, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0195.188] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0195.189] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.189] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0195.189] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0xf013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xa02c8
[0195.190] SetWindowLongW (hWnd=0xa02c8, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0195.190] GetWindowLongW (hWnd=0xa02c8, nIndex=-4) returned 1868032000
[0195.190] SetWindowLongW (hWnd=0xa02c8, nIndex=-4, dwNewLong=79644582) returned 1868032000
[0195.190] GetWindowLongW (hWnd=0xa02c8, nIndex=-4) returned 79644582
[0195.190] GetWindowLongW (hWnd=0xa02c8, nIndex=-16) returned 1174470667
[0195.190] GetWindowLongW (hWnd=0xa02c8, nIndex=-12) returned 0
[0195.190] SetWindowLongW (hWnd=0xa02c8, nIndex=-12, dwNewLong=656072) returned 0
[0195.190] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0195.191] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0195.191] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0195.192] SendMessageW (hWnd=0xa02c8, Msg=0x2055, wParam=0xa02c8, lParam=0x3) returned 0x2
[0195.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0195.192] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0195.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0195.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0195.192] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0195.193] RedrawWindow (hWnd=0xb02d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0195.193] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0195.193] RedrawWindow (hWnd=0xc02d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0195.193] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0195.193] RedrawWindow (hWnd=0xa02c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0195.193] RedrawWindow (hWnd=0xf013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0195.193] GetWindow (hWnd=0xa02c8, uCmd=0x3) returned 0xc02d6
[0195.194] GetClientRect (in: hWnd=0xa02c8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0195.194] GetWindowRect (in: hWnd=0xa02c8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0195.194] GetParent (hWnd=0xa02c8) returned 0xf013e
[0195.194] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0195.194] SetWindowTextW (hWnd=0xa02c8, lpString="OK") returned 1
[0195.194] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0xc, wParam=0x0, lParam=0x2309938) returned 0x1
[0195.195] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0195.195] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0195.195] GetClientRect (in: hWnd=0xa02c8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0195.195] GetWindowRect (in: hWnd=0xa02c8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0195.195] GetParent (hWnd=0xa02c8) returned 0xf013e
[0195.195] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0195.195] SendMessageW (hWnd=0xa02c8, Msg=0x2210, wParam=0x2c80001, lParam=0xa02c8) returned 0x0
[0195.195] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x2210, wParam=0x2c80001, lParam=0xa02c8) returned 0x0
[0195.195] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0195.195] GetParent (hWnd=0xa02c8) returned 0xf013e
[0195.195] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0195.196] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.196] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0195.196] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0xf013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x702b4
[0195.197] SetWindowLongW (hWnd=0x702b4, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0195.197] GetWindowLongW (hWnd=0x702b4, nIndex=-4) returned 1868032000
[0195.197] SetWindowLongW (hWnd=0x702b4, nIndex=-4, dwNewLong=79644822) returned 1868032000
[0195.197] GetWindowLongW (hWnd=0x702b4, nIndex=-4) returned 79644822
[0195.197] GetWindowLongW (hWnd=0x702b4, nIndex=-16) returned 1174470667
[0195.197] GetWindowLongW (hWnd=0x702b4, nIndex=-12) returned 0
[0195.197] SetWindowLongW (hWnd=0x702b4, nIndex=-12, dwNewLong=459444) returned 0
[0195.197] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0195.198] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0195.198] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0195.199] SendMessageW (hWnd=0x702b4, Msg=0x2055, wParam=0x702b4, lParam=0x3) returned 0x2
[0195.199] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0195.199] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0195.199] GetWindow (hWnd=0x702b4, uCmd=0x3) returned 0xa02c8
[0195.199] GetClientRect (in: hWnd=0x702b4, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0195.199] GetWindowRect (in: hWnd=0x702b4, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0195.199] GetParent (hWnd=0x702b4) returned 0xf013e
[0195.199] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0195.199] SetWindowTextW (hWnd=0x702b4, lpString="Cancel") returned 1
[0195.200] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0xc, wParam=0x0, lParam=0x23117d4) returned 0x1
[0195.200] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0195.201] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0195.201] GetClientRect (in: hWnd=0x702b4, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0195.201] GetWindowRect (in: hWnd=0x702b4, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0195.201] GetParent (hWnd=0x702b4) returned 0xf013e
[0195.201] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0195.201] SendMessageW (hWnd=0x702b4, Msg=0x2210, wParam=0x2b40001, lParam=0x702b4) returned 0x0
[0195.201] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0x2210, wParam=0x2b40001, lParam=0x702b4) returned 0x0
[0195.201] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0195.201] GetParent (hWnd=0x702b4) returned 0xf013e
[0195.201] GetDC (hWnd=0x0) returned 0xf0105ee
[0195.201] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e320) returned 0x0
[0195.202] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0195.202] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0195.202] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0195.202] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0195.202] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0195.203] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0195.203] GetWindowLongW (hWnd=0xf013e, nIndex=-8) returned 458806
[0195.203] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0195.203] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0195.203] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x6e0107ad
[0195.203] GetDeviceCaps (hdc=0x6e0107ad, index=12) returned 32
[0195.203] GetDeviceCaps (hdc=0x6e0107ad, index=14) returned 1
[0195.203] DeleteDC (hdc=0x6e0107ad) returned 1
[0195.204] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0195.204] GetWindowThreadProcessId (in: hWnd=0xf013e, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0195.204] GetCurrentThreadId () returned 0x11d0
[0195.204] PostMessageW (hWnd=0xf013e, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0195.204] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.204] GetSystemMetrics (nIndex=42) returned 0
[0195.204] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0195.204] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0195.205] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0195.205] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0195.205] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0195.248] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0xf013e) returned 0x1
[0195.251] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0195.251] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0195.251] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0195.252] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0195.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0195.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0195.255] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0195.256] GetFocus () returned 0x202c6
[0195.256] IsChild (hWndParent=0xf013e, hWnd=0x202c6) returned 0
[0195.256] GetFocus () returned 0x202c6
[0195.256] SetFocus (hWnd=0xb02d2) returned 0x202c6
[0195.259] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xb02d2, lParam=0x0) returned 0x0
[0195.259] GetCapture () returned 0x0
[0195.259] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0195.260] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0195.261] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0195.263] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0195.263] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0195.263] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0195.263] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0195.264] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0195.264] GetParent (hWnd=0xf013e) returned 0x0
[0195.264] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0195.265] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0195.265] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0195.265] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0195.265] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0195.265] GetSysColorBrush (nIndex=5) returned 0x100079
[0195.266] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0195.266] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0195.268] SendMessageW (hWnd=0xb02d2, Msg=0x2111, wParam=0x10002d2, lParam=0xb02d2) returned 0x0
[0195.268] SendMessageW (hWnd=0xb02d2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0195.268] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0195.268] GetKeyState (nVirtKey=1) returned 1
[0195.268] GetKeyState (nVirtKey=2) returned 0
[0195.268] GetKeyState (nVirtKey=4) returned 0
[0195.268] GetKeyState (nVirtKey=5) returned 0
[0195.268] GetKeyState (nVirtKey=6) returned 0
[0195.268] GetWindowTextLengthW (hWnd=0xb02d2) returned 0
[0195.268] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0195.268] SendMessageW (hWnd=0xb02d2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0195.268] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0195.268] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0195.268] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0195.280] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0195.281] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0195.281] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0195.282] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0195.282] GetWindowPlacement (in: hWnd=0xf013e, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0195.282] GetClientRect (in: hWnd=0xf013e, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0195.282] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.282] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.283] GetSystemMetrics (nIndex=42) returned 0
[0195.283] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.283] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0195.283] GetClientRect (in: hWnd=0xf013e, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0195.283] GetCurrentObject (hdc=0x8b010786, type=0x1) returned 0xb00017
[0195.283] GetCurrentObject (hdc=0x8b010786, type=0x2) returned 0x900010
[0195.283] GetCurrentObject (hdc=0x8b010786, type=0x7) returned 0x740507ce
[0195.283] GetCurrentObject (hdc=0x8b010786, type=0x6) returned 0x8a01c2
[0195.283] SaveDC (hdc=0x8b010786) returned 1
[0195.283] GetNearestColor (hdc=0x8b010786, color=0xf0f0f0) returned 0xf0f0f0
[0195.283] CreateSolidBrush (color=0xf0f0f0) returned 0xef10078d
[0195.283] FillRect (hDC=0x8b010786, lprc=0x53e250, hbr=0xef10078d) returned 1
[0195.283] DeleteObject (ho=0xef10078d) returned 1
[0195.283] RestoreDC (hdc=0x8b010786, nSavedDC=-1) returned 1
[0195.284] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0195.284] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0195.284] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0195.285] GetWindowPlacement (in: hWnd=0xf013e, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0195.285] GetClientRect (in: hWnd=0xf013e, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0195.285] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.285] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.285] GetSystemMetrics (nIndex=42) returned 0
[0195.286] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.286] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0195.286] GetClientRect (in: hWnd=0xf013e, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0195.286] GetCurrentObject (hdc=0xcf0107d0, type=0x1) returned 0xb00017
[0195.286] GetCurrentObject (hdc=0xcf0107d0, type=0x2) returned 0x900010
[0195.286] GetCurrentObject (hdc=0xcf0107d0, type=0x7) returned 0x5079e
[0195.286] GetCurrentObject (hdc=0xcf0107d0, type=0x6) returned 0x8a01c2
[0195.286] SaveDC (hdc=0xcf0107d0) returned 1
[0195.286] GetNearestColor (hdc=0xcf0107d0, color=0xf0f0f0) returned 0xf0f0f0
[0195.286] CreateSolidBrush (color=0xf0f0f0) returned 0xf010078d
[0195.286] FillRect (hDC=0xcf0107d0, lprc=0x53dc18, hbr=0xf010078d) returned 1
[0195.306] DeleteObject (ho=0xf010078d) returned 1
[0195.306] RestoreDC (hdc=0xcf0107d0, nSavedDC=-1) returned 1
[0195.307] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.307] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.307] GetSystemMetrics (nIndex=42) returned 0
[0195.307] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.307] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0195.307] GetClientRect (in: hWnd=0xf013e, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0195.307] GetCurrentObject (hdc=0xcf0107d0, type=0x1) returned 0xb00017
[0195.307] GetCurrentObject (hdc=0xcf0107d0, type=0x2) returned 0x900010
[0195.307] GetCurrentObject (hdc=0xcf0107d0, type=0x7) returned 0x5079e
[0195.307] GetCurrentObject (hdc=0xcf0107d0, type=0x6) returned 0x8a01c2
[0195.307] SaveDC (hdc=0xcf0107d0) returned 1
[0195.308] GetNearestColor (hdc=0xcf0107d0, color=0xf0f0f0) returned 0xf0f0f0
[0195.308] CreateSolidBrush (color=0xf0f0f0) returned 0xf110078d
[0195.308] FillRect (hDC=0xcf0107d0, lprc=0x53dbb8, hbr=0xf110078d) returned 1
[0195.308] DeleteObject (ho=0xf110078d) returned 1
[0195.308] RestoreDC (hdc=0xcf0107d0, nSavedDC=-1) returned 1
[0195.308] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.308] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.308] GetSystemMetrics (nIndex=42) returned 0
[0195.308] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.308] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0195.309] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0195.310] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0195.310] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0195.310] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0195.310] GetStockObject (i=5) returned 0x900015
[0195.311] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0195.313] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0195.313] GetStockObject (i=5) returned 0x900015
[0195.313] GetWindowPlacement (in: hWnd=0xf013e, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0195.313] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0195.313] GetClientRect (in: hWnd=0xf013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0195.314] GetWindowRect (in: hWnd=0xf013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0195.315] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0195.315] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0195.316] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0195.316] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0195.316] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0195.316] GetClientRect (in: hWnd=0xf013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0195.316] GetWindowRect (in: hWnd=0xf013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0195.316] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.317] IsWindowUnicode (hWnd=0xf013e) returned 1
[0195.317] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.317] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.317] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0195.317] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.317] IsWindowUnicode (hWnd=0xf013e) returned 1
[0195.317] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.317] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.317] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.317] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.448] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x84, wParam=0x0, lParam=0x1930363) returned 0x1
[0195.448] IsWindowUnicode (hWnd=0xa02c8) returned 1
[0195.448] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.448] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.448] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.448] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.448] IsWindowUnicode (hWnd=0x202c6) returned 1
[0195.448] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.448] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.448] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.448] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0195.448] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0195.449] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.449] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x84, wParam=0x0, lParam=0x1930363) returned 0x1
[0195.449] IsWindowUnicode (hWnd=0xa02c8) returned 1
[0195.449] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.449] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x84, wParam=0x0, lParam=0x1930363) returned 0x1
[0195.449] SetCursor (hCursor=0x10003) returned 0x10003
[0195.449] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.449] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.449] _TrackMouseEvent (in: lpEventTrack=0x231971c | out: lpEventTrack=0x231971c) returned 1
[0195.450] SendMessageW (hWnd=0xa02c8, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0195.450] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0195.450] InvalidateRect (hWnd=0xa02c8, lpRect=0x0, bErase=0) returned 1
[0195.450] GetKeyState (nVirtKey=1) returned 1
[0195.450] GetKeyState (nVirtKey=2) returned 0
[0195.450] GetKeyState (nVirtKey=4) returned 0
[0195.450] GetKeyState (nVirtKey=5) returned 0
[0195.450] GetKeyState (nVirtKey=6) returned 0
[0195.450] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.450] IsWindowUnicode (hWnd=0xf013e) returned 1
[0195.450] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.451] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.451] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.451] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.452] IsWindowUnicode (hWnd=0xf013e) returned 1
[0195.452] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.452] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.452] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.452] BeginPaint (in: hWnd=0xf013e, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x60100ce
[0195.453] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0195.453] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.453] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.453] GetSystemMetrics (nIndex=42) returned 0
[0195.453] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.453] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0195.453] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0195.453] EndPaint (hWnd=0xf013e, lpPaint=0x53e30c) returned 1
[0195.453] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.454] IsWindowUnicode (hWnd=0xb02d2) returned 1
[0195.454] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.454] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.454] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0195.454] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0195.454] SetTextColor (hdc=0xd00107d0, color=0x0) returned 0x0
[0195.455] SetBkColor (hdc=0xd00107d0, color=0xffffff) returned 0xffffff
[0195.456] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.456] IsWindowUnicode (hWnd=0xc02d6) returned 1
[0195.456] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.456] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.456] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.456] BeginPaint (in: hWnd=0xc02d6, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x10105d6
[0195.456] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0195.456] CreateCompatibleDC (hdc=0x10105d6) returned 0x710107cd
[0195.456] SelectObject (hdc=0x710107cd, h=0x1e0507b9) returned 0x85000f
[0195.457] GdipCreateFromHDC (hdc=0x710107cd, graphics=0x53e30c) returned 0x0
[0195.457] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0195.457] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0195.457] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0195.457] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.457] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0195.457] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.457] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0195.457] LocalFree (hMem=0x89ea88) returned 0x0
[0195.457] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.457] GdipCreateRegion (region=0x53e354) returned 0x0
[0195.457] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.458] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0195.458] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0195.458] GetWindowTextLengthW (hWnd=0xc02d6) returned 16
[0195.458] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0195.458] GetSystemMetrics (nIndex=42) returned 0
[0195.458] GetWindowTextW (in: hWnd=0xc02d6, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0195.458] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0195.458] GetClientRect (in: hWnd=0xc02d6, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0195.458] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0195.458] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0195.458] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0195.458] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.458] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0195.458] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.458] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.458] LocalFree (hMem=0x89ea88) returned 0x0
[0195.459] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0195.463] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.463] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.463] LocalFree (hMem=0x89ea88) returned 0x0
[0195.463] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.463] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0195.463] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0195.464] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0195.464] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0195.464] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0195.464] GetCurrentObject (hdc=0x710107cd, type=0x1) returned 0xb00017
[0195.464] GetCurrentObject (hdc=0x710107cd, type=0x2) returned 0x900010
[0195.464] GetCurrentObject (hdc=0x710107cd, type=0x7) returned 0x1e0507b9
[0195.464] GetCurrentObject (hdc=0x710107cd, type=0x6) returned 0x8a01c2
[0195.464] SaveDC (hdc=0x710107cd) returned 1
[0195.464] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3304053e
[0195.464] GetClipRgn (hdc=0x710107cd, hrgn=0x3304053e) returned 0
[0195.464] SelectClipRgn (hdc=0x710107cd, hrgn=0x2c04051e) returned 2
[0195.465] DeleteObject (ho=0x3304053e) returned 1
[0195.465] DeleteObject (ho=0x2c04051e) returned 1
[0195.465] OffsetViewportOrgEx (in: hdc=0x710107cd, x=0, y=0, lppt=0x2319c24 | out: lppt=0x2319c24) returned 1
[0195.465] GetNearestColor (hdc=0x710107cd, color=0xf0f0f0) returned 0xf0f0f0
[0195.465] CreateSolidBrush (color=0xf0f0f0) returned 0xf210078d
[0195.465] FillRect (hDC=0x710107cd, lprc=0x53e1f4, hbr=0xf210078d) returned 1
[0195.465] DeleteObject (ho=0xf210078d) returned 1
[0195.465] RestoreDC (hdc=0x710107cd, nSavedDC=-1) returned 1
[0195.465] GdipReleaseDC (graphics=0x5d92c30, hdc=0x710107cd) returned 0x0
[0195.465] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd190dbd) returned 0x0
[0195.465] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.465] GetWindowTextLengthW (hWnd=0xc02d6) returned 16
[0195.466] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0195.466] GetSystemMetrics (nIndex=42) returned 0
[0195.466] GetWindowTextW (in: hWnd=0xc02d6, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0195.466] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0195.466] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0195.466] GetCurrentObject (hdc=0x710107cd, type=0x1) returned 0xb00017
[0195.466] GetCurrentObject (hdc=0x710107cd, type=0x2) returned 0x900010
[0195.466] GetCurrentObject (hdc=0x710107cd, type=0x7) returned 0x1e0507b9
[0195.466] GetCurrentObject (hdc=0x710107cd, type=0x6) returned 0x8a01c2
[0195.466] SaveDC (hdc=0x710107cd) returned 1
[0195.466] GetNearestColor (hdc=0x710107cd, color=0x0) returned 0x0
[0195.466] RestoreDC (hdc=0x710107cd, nSavedDC=-1) returned 1
[0195.466] GdipReleaseDC (graphics=0x5d92c30, hdc=0x710107cd) returned 0x0
[0195.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0195.467] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0195.468] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0195.468] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2319f2c | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0195.468] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0195.468] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0195.468] GetCurrentObject (hdc=0x710107cd, type=0x1) returned 0xb00017
[0195.468] GetCurrentObject (hdc=0x710107cd, type=0x2) returned 0x900010
[0195.468] GetCurrentObject (hdc=0x710107cd, type=0x7) returned 0x1e0507b9
[0195.468] GetCurrentObject (hdc=0x710107cd, type=0x6) returned 0x8a01c2
[0195.469] SaveDC (hdc=0x710107cd) returned 1
[0195.469] GetTextAlign (hdc=0x710107cd) returned 0x0
[0195.469] GetTextColor (hdc=0x710107cd) returned 0x0
[0195.469] GetCurrentObject (hdc=0x710107cd, type=0x6) returned 0x8a01c2
[0195.469] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0195.469] SelectObject (hdc=0x710107cd, h=0x730a066d) returned 0x8a01c2
[0195.469] GetBkMode (hdc=0x710107cd) returned 2
[0195.469] SetBkMode (hdc=0x710107cd, mode=1) returned 2
[0195.469] DrawTextExW (in: hdc=0x710107cd, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x231a150 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0195.470] RestoreDC (hdc=0x710107cd, nSavedDC=-1) returned 1
[0195.470] GdipReleaseDC (graphics=0x5d92c30, hdc=0x710107cd) returned 0x0
[0195.470] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0195.470] BitBlt (hdc=0x10105d6, x=0, y=0, cx=250, cy=70, hdcSrc=0x710107cd, x1=0, y1=0, rop=0xcc0020) returned 1
[0195.470] GdipReleaseDC (graphics=0x5d92c30, hdc=0x710107cd) returned 0x0
[0195.470] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0195.470] SelectObject (hdc=0x710107cd, h=0x85000f) returned 0x1e0507b9
[0195.470] DeleteDC (hdc=0x710107cd) returned 1
[0195.470] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0195.471] EndPaint (hWnd=0xc02d6, lpPaint=0x53e2f0) returned 1
[0195.471] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.471] IsWindowUnicode (hWnd=0xa02c8) returned 1
[0195.471] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.471] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.471] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.471] BeginPaint (in: hWnd=0xa02c8, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0195.471] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0195.471] CreateCompatibleDC (hdc=0xf0105ee) returned 0x730107cd
[0195.471] SelectObject (hdc=0x730107cd, h=0x1e0507b9) returned 0x85000f
[0195.472] GdipCreateFromHDC (hdc=0x730107cd, graphics=0x53e300) returned 0x0
[0195.472] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0195.472] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0195.472] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0195.472] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.472] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0195.472] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0195.472] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0195.472] LocalFree (hMem=0x89ec80) returned 0x0
[0195.472] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.472] GdipCreateRegion (region=0x53e348) returned 0x0
[0195.472] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.472] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0195.472] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0195.472] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd170dbd) returned 0x0
[0195.472] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.473] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0195.473] GetCurrentObject (hdc=0x730107cd, type=0x1) returned 0xb00017
[0195.473] GetCurrentObject (hdc=0x730107cd, type=0x2) returned 0x900010
[0195.473] GetCurrentObject (hdc=0x730107cd, type=0x7) returned 0x1e0507b9
[0195.473] GetCurrentObject (hdc=0x730107cd, type=0x6) returned 0x8a01c2
[0195.473] SaveDC (hdc=0x730107cd) returned 1
[0195.473] GetNearestColor (hdc=0x730107cd, color=0xf0f0f0) returned 0xf0f0f0
[0195.473] GetNearestColor (hdc=0x730107cd, color=0xa0a0a0) returned 0xa0a0a0
[0195.473] GetNearestColor (hdc=0x730107cd, color=0x696969) returned 0x696969
[0195.473] GetNearestColor (hdc=0x730107cd, color=0xa0a0a0) returned 0xa0a0a0
[0195.473] GetNearestColor (hdc=0x730107cd, color=0x0) returned 0x0
[0195.473] GetNearestColor (hdc=0x730107cd, color=0xffffff) returned 0xffffff
[0195.473] GetNearestColor (hdc=0x730107cd, color=0xe5e5e5) returned 0xe5e5e5
[0195.473] GetNearestColor (hdc=0x730107cd, color=0xd7d7d7) returned 0xd7d7d7
[0195.473] GetNearestColor (hdc=0x730107cd, color=0x0) returned 0x0
[0195.474] RestoreDC (hdc=0x730107cd, nSavedDC=-1) returned 1
[0195.474] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107cd) returned 0x0
[0195.474] IsAppThemed () returned 0x1
[0195.474] GetThemeAppProperties () returned 0x3
[0195.474] GetThemeAppProperties () returned 0x3
[0195.474] IsAppThemed () returned 0x1
[0195.474] GetThemeAppProperties () returned 0x3
[0195.474] GetThemeAppProperties () returned 0x3
[0195.474] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x231a8bc | out: lpchText="OK", lprc=0x53e01c) returned 13
[0195.475] IsAppThemed () returned 0x1
[0195.475] GetThemeAppProperties () returned 0x3
[0195.475] GetThemeAppProperties () returned 0x3
[0195.475] IsAppThemed () returned 0x1
[0195.475] GetThemeAppProperties () returned 0x3
[0195.475] GetThemeAppProperties () returned 0x3
[0195.475] IsAppThemed () returned 0x1
[0195.475] GetThemeAppProperties () returned 0x3
[0195.475] GetThemeAppProperties () returned 0x3
[0195.475] IsAppThemed () returned 0x1
[0195.475] GetThemeAppProperties () returned 0x3
[0195.475] GetThemeAppProperties () returned 0x3
[0195.476] IsThemePartDefined () returned 0x1
[0195.476] IsAppThemed () returned 0x1
[0195.476] GetThemeAppProperties () returned 0x3
[0195.476] GetThemeAppProperties () returned 0x3
[0195.476] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0195.476] IsAppThemed () returned 0x1
[0195.476] GetThemeAppProperties () returned 0x3
[0195.476] GetThemeAppProperties () returned 0x3
[0195.476] IsAppThemed () returned 0x1
[0195.476] GetThemeAppProperties () returned 0x3
[0195.476] GetThemeAppProperties () returned 0x3
[0195.476] IsThemePartDefined () returned 0x1
[0195.476] GdipCreateRegion (region=0x53e064) returned 0x0
[0195.476] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.476] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0195.476] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.476] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0195.476] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.476] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.476] LocalFree (hMem=0x89ea88) returned 0x0
[0195.476] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.476] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.477] LocalFree (hMem=0x89ea88) returned 0x0
[0195.477] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.477] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0195.477] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0195.477] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0195.477] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.477] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0195.477] GetCurrentObject (hdc=0x730107cd, type=0x1) returned 0xb00017
[0195.477] GetCurrentObject (hdc=0x730107cd, type=0x2) returned 0x900010
[0195.477] GetCurrentObject (hdc=0x730107cd, type=0x7) returned 0x1e0507b9
[0195.477] GetCurrentObject (hdc=0x730107cd, type=0x6) returned 0x8a01c2
[0195.477] SaveDC (hdc=0x730107cd) returned 1
[0195.477] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d04051e
[0195.477] GetClipRgn (hdc=0x730107cd, hrgn=0x2d04051e) returned 0
[0195.477] SelectClipRgn (hdc=0x730107cd, hrgn=0x3704053e) returned 2
[0195.477] DeleteObject (ho=0x2d04051e) returned 1
[0195.477] DeleteObject (ho=0x3704053e) returned 1
[0195.478] OffsetViewportOrgEx (in: hdc=0x730107cd, x=0, y=0, lppt=0x231af6c | out: lppt=0x231af6c) returned 1
[0195.478] DrawThemeParentBackground () returned 0x0
[0195.478] GetWindowPlacement (in: hWnd=0xf013e, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0195.478] GetClientRect (in: hWnd=0xf013e, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0195.478] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.478] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.478] GetSystemMetrics (nIndex=42) returned 0
[0195.478] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.478] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0195.478] GetClientRect (in: hWnd=0xf013e, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0195.478] GetCurrentObject (hdc=0x730107cd, type=0x1) returned 0xb00017
[0195.478] GetCurrentObject (hdc=0x730107cd, type=0x2) returned 0x900010
[0195.478] GetCurrentObject (hdc=0x730107cd, type=0x7) returned 0x1e0507b9
[0195.478] GetCurrentObject (hdc=0x730107cd, type=0x6) returned 0x8a01c2
[0195.478] SaveDC (hdc=0x730107cd) returned 2
[0195.479] GetNearestColor (hdc=0x730107cd, color=0xf0f0f0) returned 0xf0f0f0
[0195.479] CreateSolidBrush (color=0xf0f0f0) returned 0xf310078d
[0195.479] FillRect (hDC=0x730107cd, lprc=0x53dac8, hbr=0xf310078d) returned 1
[0195.479] DeleteObject (ho=0xf310078d) returned 1
[0195.479] RestoreDC (hdc=0x730107cd, nSavedDC=-1) returned 1
[0195.479] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.479] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.479] GetSystemMetrics (nIndex=42) returned 0
[0195.479] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.479] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0195.479] GetClientRect (in: hWnd=0xf013e, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0195.479] GetCurrentObject (hdc=0x730107cd, type=0x1) returned 0xb00017
[0195.479] GetCurrentObject (hdc=0x730107cd, type=0x2) returned 0x900010
[0195.479] GetCurrentObject (hdc=0x730107cd, type=0x7) returned 0x1e0507b9
[0195.479] GetCurrentObject (hdc=0x730107cd, type=0x6) returned 0x8a01c2
[0195.479] SaveDC (hdc=0x730107cd) returned 2
[0195.480] GetNearestColor (hdc=0x730107cd, color=0xf0f0f0) returned 0xf0f0f0
[0195.480] CreateSolidBrush (color=0xf0f0f0) returned 0xf410078d
[0195.480] FillRect (hDC=0x730107cd, lprc=0x53da68, hbr=0xf410078d) returned 1
[0195.480] DeleteObject (ho=0xf410078d) returned 1
[0195.480] RestoreDC (hdc=0x730107cd, nSavedDC=-1) returned 1
[0195.480] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.480] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.480] GetSystemMetrics (nIndex=42) returned 0
[0195.480] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.480] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0195.480] RestoreDC (hdc=0x730107cd, nSavedDC=-1) returned 1
[0195.480] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107cd) returned 0x0
[0195.480] IsAppThemed () returned 0x1
[0195.481] GetThemeAppProperties () returned 0x3
[0195.481] GetThemeAppProperties () returned 0x3
[0195.481] IsAppThemed () returned 0x1
[0195.481] GetThemeAppProperties () returned 0x3
[0195.481] GetThemeAppProperties () returned 0x3
[0195.481] IsThemePartDefined () returned 0x1
[0195.481] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0195.481] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.481] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0195.481] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.482] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0195.482] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0195.482] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0195.482] LocalFree (hMem=0x89ee40) returned 0x0
[0195.482] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0195.482] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0195.482] LocalFree (hMem=0x89ec80) returned 0x0
[0195.482] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.482] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0195.482] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0195.482] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0195.482] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.482] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0195.482] GetCurrentObject (hdc=0x730107cd, type=0x1) returned 0xb00017
[0195.482] GetCurrentObject (hdc=0x730107cd, type=0x2) returned 0x900010
[0195.482] GetCurrentObject (hdc=0x730107cd, type=0x7) returned 0x1e0507b9
[0195.482] GetCurrentObject (hdc=0x730107cd, type=0x6) returned 0x8a01c2
[0195.482] SaveDC (hdc=0x730107cd) returned 1
[0195.482] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3804053e
[0195.483] GetClipRgn (hdc=0x730107cd, hrgn=0x3804053e) returned 0
[0195.483] SelectClipRgn (hdc=0x730107cd, hrgn=0x2f04051e) returned 2
[0195.483] DeleteObject (ho=0x3804053e) returned 1
[0195.483] DeleteObject (ho=0x2f04051e) returned 1
[0195.483] OffsetViewportOrgEx (in: hdc=0x730107cd, x=0, y=0, lppt=0x231b7f4 | out: lppt=0x231b7f4) returned 1
[0195.483] IsAppThemed () returned 0x1
[0195.483] GetThemeAppProperties () returned 0x3
[0195.483] GetThemeAppProperties () returned 0x3
[0195.483] DrawThemeBackground () returned 0x0
[0195.483] RestoreDC (hdc=0x730107cd, nSavedDC=-1) returned 1
[0195.483] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107cd) returned 0x0
[0195.483] GdipCreateRegion (region=0x53dfec) returned 0x0
[0195.483] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.483] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0195.483] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.483] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0195.483] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0195.484] LocalFree (hMem=0x89ee40) returned 0x0
[0195.484] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0195.484] LocalFree (hMem=0x89ee40) returned 0x0
[0195.484] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.484] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0195.484] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0195.484] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0195.484] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.484] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0195.484] GetCurrentObject (hdc=0x730107cd, type=0x1) returned 0xb00017
[0195.484] GetCurrentObject (hdc=0x730107cd, type=0x2) returned 0x900010
[0195.484] GetCurrentObject (hdc=0x730107cd, type=0x7) returned 0x1e0507b9
[0195.484] GetCurrentObject (hdc=0x730107cd, type=0x6) returned 0x8a01c2
[0195.484] SaveDC (hdc=0x730107cd) returned 1
[0195.484] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3004051e
[0195.484] GetClipRgn (hdc=0x730107cd, hrgn=0x3004051e) returned 0
[0195.484] SelectClipRgn (hdc=0x730107cd, hrgn=0x3904053e) returned 2
[0195.484] DeleteObject (ho=0x3004051e) returned 1
[0195.484] DeleteObject (ho=0x3904053e) returned 1
[0195.484] OffsetViewportOrgEx (in: hdc=0x730107cd, x=0, y=0, lppt=0x231bac8 | out: lppt=0x231bac8) returned 1
[0195.485] IsAppThemed () returned 0x1
[0195.485] GetThemeAppProperties () returned 0x3
[0195.485] GetThemeAppProperties () returned 0x3
[0195.485] GetThemeBackgroundContentRect () returned 0x0
[0195.485] RestoreDC (hdc=0x730107cd, nSavedDC=-1) returned 1
[0195.485] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107cd) returned 0x0
[0195.485] IsAppThemed () returned 0x1
[0195.485] GetThemeAppProperties () returned 0x3
[0195.485] GetThemeAppProperties () returned 0x3
[0195.485] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0195.485] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0195.485] GetCurrentObject (hdc=0x730107cd, type=0x1) returned 0xb00017
[0195.485] GetCurrentObject (hdc=0x730107cd, type=0x2) returned 0x900010
[0195.485] GetCurrentObject (hdc=0x730107cd, type=0x7) returned 0x1e0507b9
[0195.485] GetCurrentObject (hdc=0x730107cd, type=0x6) returned 0x8a01c2
[0195.485] SaveDC (hdc=0x730107cd) returned 1
[0195.485] GetTextAlign (hdc=0x730107cd) returned 0x0
[0195.485] GetTextColor (hdc=0x730107cd) returned 0x0
[0195.486] GetCurrentObject (hdc=0x730107cd, type=0x6) returned 0x8a01c2
[0195.486] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0195.486] SelectObject (hdc=0x730107cd, h=0x730a066d) returned 0x8a01c2
[0195.486] GetBkMode (hdc=0x730107cd) returned 2
[0195.486] SetBkMode (hdc=0x730107cd, mode=1) returned 2
[0195.486] DrawTextExW (in: hdc=0x730107cd, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x231be68 | out: lpchText="OK", lprc=0x53df84) returned 13
[0195.486] DrawTextExW (in: hdc=0x730107cd, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x231be68 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0195.486] RestoreDC (hdc=0x730107cd, nSavedDC=-1) returned 1
[0195.487] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107cd) returned 0x0
[0195.487] GetFocus () returned 0xb02d2
[0195.487] IsAppThemed () returned 0x1
[0195.487] GetThemeAppProperties () returned 0x3
[0195.487] GetThemeAppProperties () returned 0x3
[0195.487] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0195.487] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x730107cd, x1=0, y1=0, rop=0xcc0020) returned 1
[0195.487] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107cd) returned 0x0
[0195.487] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0195.487] SelectObject (hdc=0x730107cd, h=0x85000f) returned 0x1e0507b9
[0195.487] DeleteDC (hdc=0x730107cd) returned 1
[0195.487] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0195.487] EndPaint (hWnd=0xa02c8, lpPaint=0x53e2e4) returned 1
[0195.488] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.488] IsWindowUnicode (hWnd=0x702b4) returned 1
[0195.488] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.488] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.488] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.488] BeginPaint (in: hWnd=0x702b4, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0195.488] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0195.488] CreateCompatibleDC (hdc=0x60100ce) returned 0x750107cd
[0195.488] SelectObject (hdc=0x750107cd, h=0x1e0507b9) returned 0x85000f
[0195.488] GdipCreateFromHDC (hdc=0x750107cd, graphics=0x53e300) returned 0x0
[0195.488] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0195.489] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0195.489] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0195.489] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.489] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0195.489] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0195.489] LocalFree (hMem=0x89ea88) returned 0x0
[0195.489] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.489] GdipCreateRegion (region=0x53e348) returned 0x0
[0195.489] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.489] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0195.489] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0195.489] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd150dbd) returned 0x0
[0195.489] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.489] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0195.489] GetCurrentObject (hdc=0x750107cd, type=0x1) returned 0xb00017
[0195.489] GetCurrentObject (hdc=0x750107cd, type=0x2) returned 0x900010
[0195.489] GetCurrentObject (hdc=0x750107cd, type=0x7) returned 0x1e0507b9
[0195.489] GetCurrentObject (hdc=0x750107cd, type=0x6) returned 0x8a01c2
[0195.489] SaveDC (hdc=0x750107cd) returned 1
[0195.489] GetNearestColor (hdc=0x750107cd, color=0xf0f0f0) returned 0xf0f0f0
[0195.489] GetNearestColor (hdc=0x750107cd, color=0xa0a0a0) returned 0xa0a0a0
[0195.490] GetNearestColor (hdc=0x750107cd, color=0x696969) returned 0x696969
[0195.490] GetNearestColor (hdc=0x750107cd, color=0xa0a0a0) returned 0xa0a0a0
[0195.490] GetNearestColor (hdc=0x750107cd, color=0x0) returned 0x0
[0195.490] GetNearestColor (hdc=0x750107cd, color=0xffffff) returned 0xffffff
[0195.490] GetNearestColor (hdc=0x750107cd, color=0xe5e5e5) returned 0xe5e5e5
[0195.495] GetNearestColor (hdc=0x750107cd, color=0xd7d7d7) returned 0xd7d7d7
[0195.495] GetNearestColor (hdc=0x750107cd, color=0x0) returned 0x0
[0195.495] RestoreDC (hdc=0x750107cd, nSavedDC=-1) returned 1
[0195.495] GdipReleaseDC (graphics=0x5d92c30, hdc=0x750107cd) returned 0x0
[0195.495] IsAppThemed () returned 0x1
[0195.495] GetThemeAppProperties () returned 0x3
[0195.495] GetThemeAppProperties () returned 0x3
[0195.495] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0195.495] SendMessageW (hWnd=0xf013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0195.495] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0195.496] IsAppThemed () returned 0x1
[0195.496] GetThemeAppProperties () returned 0x3
[0195.496] GetThemeAppProperties () returned 0x3
[0195.496] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x231c678 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0195.496] IsAppThemed () returned 0x1
[0195.496] GetThemeAppProperties () returned 0x3
[0195.496] GetThemeAppProperties () returned 0x3
[0195.496] IsAppThemed () returned 0x1
[0195.496] GetThemeAppProperties () returned 0x3
[0195.496] GetThemeAppProperties () returned 0x3
[0195.496] GetFocus () returned 0xb02d2
[0195.496] IsAppThemed () returned 0x1
[0195.497] GetThemeAppProperties () returned 0x3
[0195.497] GetThemeAppProperties () returned 0x3
[0195.497] IsAppThemed () returned 0x1
[0195.497] GetThemeAppProperties () returned 0x3
[0195.497] GetThemeAppProperties () returned 0x3
[0195.497] IsThemePartDefined () returned 0x1
[0195.497] IsAppThemed () returned 0x1
[0195.497] GetThemeAppProperties () returned 0x3
[0195.498] GetThemeAppProperties () returned 0x3
[0195.498] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0195.498] IsAppThemed () returned 0x1
[0195.498] GetThemeAppProperties () returned 0x3
[0195.498] GetThemeAppProperties () returned 0x3
[0195.498] IsAppThemed () returned 0x1
[0195.498] GetThemeAppProperties () returned 0x3
[0195.498] GetThemeAppProperties () returned 0x3
[0195.498] IsThemePartDefined () returned 0x1
[0195.498] GdipCreateRegion (region=0x53e070) returned 0x0
[0195.498] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.498] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0195.498] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.498] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0195.498] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.498] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.498] LocalFree (hMem=0x89ea88) returned 0x0
[0195.498] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.498] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.498] LocalFree (hMem=0x89ea88) returned 0x0
[0195.498] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.499] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0195.499] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0195.499] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0195.499] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.499] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0195.499] GetCurrentObject (hdc=0x750107cd, type=0x1) returned 0xb00017
[0195.499] GetCurrentObject (hdc=0x750107cd, type=0x2) returned 0x900010
[0195.499] GetCurrentObject (hdc=0x750107cd, type=0x7) returned 0x1e0507b9
[0195.499] GetCurrentObject (hdc=0x750107cd, type=0x6) returned 0x8a01c2
[0195.499] SaveDC (hdc=0x750107cd) returned 1
[0195.499] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a04053e
[0195.499] GetClipRgn (hdc=0x750107cd, hrgn=0x3a04053e) returned 0
[0195.499] SelectClipRgn (hdc=0x750107cd, hrgn=0x3404051e) returned 2
[0195.499] DeleteObject (ho=0x3a04053e) returned 1
[0195.499] DeleteObject (ho=0x3404051e) returned 1
[0195.499] OffsetViewportOrgEx (in: hdc=0x750107cd, x=0, y=0, lppt=0x231cd28 | out: lppt=0x231cd28) returned 1
[0195.500] DrawThemeParentBackground () returned 0x0
[0195.500] GetWindowPlacement (in: hWnd=0xf013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0195.500] GetClientRect (in: hWnd=0xf013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0195.500] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.500] GetSystemMetrics (nIndex=42) returned 0
[0195.500] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0195.500] GetClientRect (in: hWnd=0xf013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0195.500] GetCurrentObject (hdc=0x750107cd, type=0x1) returned 0xb00017
[0195.500] GetCurrentObject (hdc=0x750107cd, type=0x2) returned 0x900010
[0195.500] GetCurrentObject (hdc=0x750107cd, type=0x7) returned 0x1e0507b9
[0195.500] GetCurrentObject (hdc=0x750107cd, type=0x6) returned 0x8a01c2
[0195.500] SaveDC (hdc=0x750107cd) returned 2
[0195.500] GetNearestColor (hdc=0x750107cd, color=0xf0f0f0) returned 0xf0f0f0
[0195.501] CreateSolidBrush (color=0xf0f0f0) returned 0xf510078d
[0195.501] FillRect (hDC=0x750107cd, lprc=0x53dad0, hbr=0xf510078d) returned 1
[0195.501] DeleteObject (ho=0xf510078d) returned 1
[0195.501] RestoreDC (hdc=0x750107cd, nSavedDC=-1) returned 1
[0195.501] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.501] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.501] GetSystemMetrics (nIndex=42) returned 0
[0195.501] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.501] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0195.501] GetClientRect (in: hWnd=0xf013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0195.501] GetCurrentObject (hdc=0x750107cd, type=0x1) returned 0xb00017
[0195.501] GetCurrentObject (hdc=0x750107cd, type=0x2) returned 0x900010
[0195.501] GetCurrentObject (hdc=0x750107cd, type=0x7) returned 0x1e0507b9
[0195.501] GetCurrentObject (hdc=0x750107cd, type=0x6) returned 0x8a01c2
[0195.501] SaveDC (hdc=0x750107cd) returned 2
[0195.501] GetNearestColor (hdc=0x750107cd, color=0xf0f0f0) returned 0xf0f0f0
[0195.502] CreateSolidBrush (color=0xf0f0f0) returned 0xf610078d
[0195.502] FillRect (hDC=0x750107cd, lprc=0x53da70, hbr=0xf610078d) returned 1
[0195.502] DeleteObject (ho=0xf610078d) returned 1
[0195.502] RestoreDC (hdc=0x750107cd, nSavedDC=-1) returned 1
[0195.502] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.502] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.502] GetSystemMetrics (nIndex=42) returned 0
[0195.502] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.502] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0195.502] RestoreDC (hdc=0x750107cd, nSavedDC=-1) returned 1
[0195.502] GdipReleaseDC (graphics=0x5d92c30, hdc=0x750107cd) returned 0x0
[0195.502] IsAppThemed () returned 0x1
[0195.502] GetThemeAppProperties () returned 0x3
[0195.503] GetThemeAppProperties () returned 0x3
[0195.503] IsAppThemed () returned 0x1
[0195.503] GetThemeAppProperties () returned 0x3
[0195.503] GetThemeAppProperties () returned 0x3
[0195.503] IsThemePartDefined () returned 0x1
[0195.503] GdipCreateRegion (region=0x53dff4) returned 0x0
[0195.503] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.503] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0195.503] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.503] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0195.503] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0195.503] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0195.503] LocalFree (hMem=0x89ec80) returned 0x0
[0195.503] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0195.503] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0195.503] LocalFree (hMem=0x89ee40) returned 0x0
[0195.503] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.503] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0195.503] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0195.504] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0195.504] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.504] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0195.504] GetCurrentObject (hdc=0x750107cd, type=0x1) returned 0xb00017
[0195.504] GetCurrentObject (hdc=0x750107cd, type=0x2) returned 0x900010
[0195.504] GetCurrentObject (hdc=0x750107cd, type=0x7) returned 0x1e0507b9
[0195.504] GetCurrentObject (hdc=0x750107cd, type=0x6) returned 0x8a01c2
[0195.504] SaveDC (hdc=0x750107cd) returned 1
[0195.504] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3504051e
[0195.504] GetClipRgn (hdc=0x750107cd, hrgn=0x3504051e) returned 0
[0195.504] SelectClipRgn (hdc=0x750107cd, hrgn=0x3c04053e) returned 2
[0195.504] DeleteObject (ho=0x3504051e) returned 1
[0195.504] DeleteObject (ho=0x3c04053e) returned 1
[0195.504] OffsetViewportOrgEx (in: hdc=0x750107cd, x=0, y=0, lppt=0x231d7fc | out: lppt=0x231d7fc) returned 1
[0195.504] IsAppThemed () returned 0x1
[0195.506] GetThemeAppProperties () returned 0x3
[0195.509] GetThemeAppProperties () returned 0x3
[0195.509] DrawThemeBackground () returned 0x0
[0195.509] RestoreDC (hdc=0x750107cd, nSavedDC=-1) returned 1
[0195.509] GdipReleaseDC (graphics=0x5d92c30, hdc=0x750107cd) returned 0x0
[0195.509] GdipCreateRegion (region=0x53dff8) returned 0x0
[0195.509] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.509] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0195.509] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.510] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0195.510] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.510] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.510] LocalFree (hMem=0x89ea88) returned 0x0
[0195.510] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0195.510] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0195.510] LocalFree (hMem=0x89eac0) returned 0x0
[0195.510] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.510] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0195.510] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0195.510] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0195.510] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.510] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0195.510] GetCurrentObject (hdc=0x750107cd, type=0x1) returned 0xb00017
[0195.510] GetCurrentObject (hdc=0x750107cd, type=0x2) returned 0x900010
[0195.510] GetCurrentObject (hdc=0x750107cd, type=0x7) returned 0x1e0507b9
[0195.510] GetCurrentObject (hdc=0x750107cd, type=0x6) returned 0x8a01c2
[0195.510] SaveDC (hdc=0x750107cd) returned 1
[0195.511] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3d04053e
[0195.511] GetClipRgn (hdc=0x750107cd, hrgn=0x3d04053e) returned 0
[0195.511] SelectClipRgn (hdc=0x750107cd, hrgn=0x3604051e) returned 2
[0195.511] DeleteObject (ho=0x3d04053e) returned 1
[0195.511] DeleteObject (ho=0x3604051e) returned 1
[0195.511] OffsetViewportOrgEx (in: hdc=0x750107cd, x=0, y=0, lppt=0x231dad0 | out: lppt=0x231dad0) returned 1
[0195.511] IsAppThemed () returned 0x1
[0195.511] GetThemeAppProperties () returned 0x3
[0195.511] GetThemeAppProperties () returned 0x3
[0195.511] GetThemeBackgroundContentRect () returned 0x0
[0195.511] RestoreDC (hdc=0x750107cd, nSavedDC=-1) returned 1
[0195.511] GdipReleaseDC (graphics=0x5d92c30, hdc=0x750107cd) returned 0x0
[0195.511] IsAppThemed () returned 0x1
[0195.511] GetThemeAppProperties () returned 0x3
[0195.511] GetThemeAppProperties () returned 0x3
[0195.511] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0195.511] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0195.512] GetCurrentObject (hdc=0x750107cd, type=0x1) returned 0xb00017
[0195.512] GetCurrentObject (hdc=0x750107cd, type=0x2) returned 0x900010
[0195.512] GetCurrentObject (hdc=0x750107cd, type=0x7) returned 0x1e0507b9
[0195.512] GetCurrentObject (hdc=0x750107cd, type=0x6) returned 0x8a01c2
[0195.512] SaveDC (hdc=0x750107cd) returned 1
[0195.512] GetTextAlign (hdc=0x750107cd) returned 0x0
[0195.512] GetTextColor (hdc=0x750107cd) returned 0x0
[0195.512] GetCurrentObject (hdc=0x750107cd, type=0x6) returned 0x8a01c2
[0195.512] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0195.512] SelectObject (hdc=0x750107cd, h=0x730a066d) returned 0x8a01c2
[0195.512] GetBkMode (hdc=0x750107cd) returned 2
[0195.512] SetBkMode (hdc=0x750107cd, mode=1) returned 2
[0195.513] DrawTextExW (in: hdc=0x750107cd, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x231dfe4 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0195.513] DrawTextExW (in: hdc=0x750107cd, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x231dfe4 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0195.513] RestoreDC (hdc=0x750107cd, nSavedDC=-1) returned 1
[0195.513] GdipReleaseDC (graphics=0x5d92c30, hdc=0x750107cd) returned 0x0
[0195.513] GetFocus () returned 0xb02d2
[0195.513] IsAppThemed () returned 0x1
[0195.513] GetThemeAppProperties () returned 0x3
[0195.513] GetThemeAppProperties () returned 0x3
[0195.513] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0195.514] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x750107cd, x1=0, y1=0, rop=0xcc0020) returned 1
[0195.514] GdipReleaseDC (graphics=0x5d92c30, hdc=0x750107cd) returned 0x0
[0195.514] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0195.514] SelectObject (hdc=0x750107cd, h=0x85000f) returned 0x1e0507b9
[0195.514] DeleteDC (hdc=0x750107cd) returned 1
[0195.514] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0195.515] EndPaint (hWnd=0x702b4, lpPaint=0x53e2e4) returned 1
[0195.515] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.515] IsWindowUnicode (hWnd=0x202c6) returned 1
[0195.515] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.515] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.515] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.515] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0195.515] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0195.515] CreateCompatibleDC (hdc=0x8b010786) returned 0x770107cd
[0195.516] SelectObject (hdc=0x770107cd, h=0x1e0507b9) returned 0x85000f
[0195.516] GdipCreateFromHDC (hdc=0x770107cd, graphics=0x53e300) returned 0x0
[0195.516] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0195.516] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0195.516] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0195.516] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.516] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0195.516] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0195.516] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0195.516] LocalFree (hMem=0x89ec80) returned 0x0
[0195.516] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.517] GdipCreateRegion (region=0x53e348) returned 0x0
[0195.517] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.517] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0195.517] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0195.517] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd130dbd) returned 0x0
[0195.517] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.517] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0195.517] GetCurrentObject (hdc=0x770107cd, type=0x1) returned 0xb00017
[0195.517] GetCurrentObject (hdc=0x770107cd, type=0x2) returned 0x900010
[0195.517] GetCurrentObject (hdc=0x770107cd, type=0x7) returned 0x1e0507b9
[0195.517] GetCurrentObject (hdc=0x770107cd, type=0x6) returned 0x8a01c2
[0195.517] SaveDC (hdc=0x770107cd) returned 1
[0195.517] GetNearestColor (hdc=0x770107cd, color=0xff) returned 0xff
[0195.517] GetNearestColor (hdc=0x770107cd, color=0x55) returned 0x55
[0195.517] GetNearestColor (hdc=0x770107cd, color=0x0) returned 0x0
[0195.518] GetNearestColor (hdc=0x770107cd, color=0x55) returned 0x55
[0195.518] GetNearestColor (hdc=0x770107cd, color=0x0) returned 0x0
[0195.518] GetNearestColor (hdc=0x770107cd, color=0x8080ff) returned 0x8080ff
[0195.518] GetNearestColor (hdc=0x770107cd, color=0x7373e5) returned 0x7373e5
[0195.518] GetNearestColor (hdc=0x770107cd, color=0xe5) returned 0xe5
[0195.518] GetNearestColor (hdc=0x770107cd, color=0x0) returned 0x0
[0195.518] RestoreDC (hdc=0x770107cd, nSavedDC=-1) returned 1
[0195.518] GdipReleaseDC (graphics=0x5d92c30, hdc=0x770107cd) returned 0x0
[0195.518] IsAppThemed () returned 0x1
[0195.518] GetThemeAppProperties () returned 0x3
[0195.518] GetThemeAppProperties () returned 0x3
[0195.518] IsAppThemed () returned 0x1
[0195.518] GetThemeAppProperties () returned 0x3
[0195.518] GetThemeAppProperties () returned 0x3
[0195.518] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0195.519] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x231eb10 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0195.519] IsAppThemed () returned 0x1
[0195.519] GetThemeAppProperties () returned 0x3
[0195.519] GetThemeAppProperties () returned 0x3
[0195.519] IsAppThemed () returned 0x1
[0195.519] GetThemeAppProperties () returned 0x3
[0195.519] GetThemeAppProperties () returned 0x3
[0195.519] GetFocus () returned 0xb02d2
[0195.519] IsAppThemed () returned 0x1
[0195.519] GetThemeAppProperties () returned 0x3
[0195.519] GetThemeAppProperties () returned 0x3
[0195.519] IsAppThemed () returned 0x1
[0195.519] GetThemeAppProperties () returned 0x3
[0195.519] GetThemeAppProperties () returned 0x3
[0195.519] IsThemePartDefined () returned 0x1
[0195.520] IsAppThemed () returned 0x1
[0195.520] GetThemeAppProperties () returned 0x3
[0195.520] GetThemeAppProperties () returned 0x3
[0195.520] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0195.520] IsAppThemed () returned 0x1
[0195.520] GetThemeAppProperties () returned 0x3
[0195.520] GetThemeAppProperties () returned 0x3
[0195.520] IsAppThemed () returned 0x1
[0195.520] GetThemeAppProperties () returned 0x3
[0195.520] GetThemeAppProperties () returned 0x3
[0195.520] IsThemePartDefined () returned 0x1
[0195.520] GdipCreateRegion (region=0x53e070) returned 0x0
[0195.520] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.520] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0195.520] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.520] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0195.520] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.520] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.521] LocalFree (hMem=0x89ea88) returned 0x0
[0195.521] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0195.521] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0195.521] LocalFree (hMem=0x89ee40) returned 0x0
[0195.521] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.521] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0195.521] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0195.521] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0195.521] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.521] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0195.522] GetCurrentObject (hdc=0x770107cd, type=0x1) returned 0xb00017
[0195.522] GetCurrentObject (hdc=0x770107cd, type=0x2) returned 0x900010
[0195.522] GetCurrentObject (hdc=0x770107cd, type=0x7) returned 0x1e0507b9
[0195.522] GetCurrentObject (hdc=0x770107cd, type=0x6) returned 0x8a01c2
[0195.522] SaveDC (hdc=0x770107cd) returned 1
[0195.522] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3704051e
[0195.522] GetClipRgn (hdc=0x770107cd, hrgn=0x3704051e) returned 0
[0195.522] SelectClipRgn (hdc=0x770107cd, hrgn=0x4104053e) returned 2
[0195.522] DeleteObject (ho=0x3704051e) returned 1
[0195.522] DeleteObject (ho=0x4104053e) returned 1
[0195.522] OffsetViewportOrgEx (in: hdc=0x770107cd, x=0, y=0, lppt=0x231f40c | out: lppt=0x231f40c) returned 1
[0195.522] DrawThemeParentBackground () returned 0x0
[0195.522] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0195.523] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0195.523] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0195.523] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0195.523] GetSystemMetrics (nIndex=42) returned 0
[0195.523] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0195.523] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0195.523] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0195.523] GetCurrentObject (hdc=0x770107cd, type=0x1) returned 0xb00017
[0195.523] GetCurrentObject (hdc=0x770107cd, type=0x2) returned 0x900010
[0195.523] GetCurrentObject (hdc=0x770107cd, type=0x7) returned 0x1e0507b9
[0195.523] GetCurrentObject (hdc=0x770107cd, type=0x6) returned 0x8a01c2
[0195.523] SaveDC (hdc=0x770107cd) returned 2
[0195.523] GetNearestColor (hdc=0x770107cd, color=0xff) returned 0xff
[0195.523] CreateSolidBrush (color=0xff) returned 0xf710078d
[0195.523] FillRect (hDC=0x770107cd, lprc=0x53dad0, hbr=0xf710078d) returned 1
[0195.523] DeleteObject (ho=0xf710078d) returned 1
[0195.524] RestoreDC (hdc=0x770107cd, nSavedDC=-1) returned 1
[0195.524] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0195.524] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0195.524] GetSystemMetrics (nIndex=42) returned 0
[0195.524] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0195.524] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0195.524] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0195.524] GetCurrentObject (hdc=0x770107cd, type=0x1) returned 0xb00017
[0195.524] GetCurrentObject (hdc=0x770107cd, type=0x2) returned 0x900010
[0195.524] GetCurrentObject (hdc=0x770107cd, type=0x7) returned 0x1e0507b9
[0195.524] GetCurrentObject (hdc=0x770107cd, type=0x6) returned 0x8a01c2
[0195.524] SaveDC (hdc=0x770107cd) returned 2
[0195.524] GetNearestColor (hdc=0x770107cd, color=0xff) returned 0xff
[0195.524] CreateSolidBrush (color=0xff) returned 0xf810078d
[0195.524] FillRect (hDC=0x770107cd, lprc=0x53da70, hbr=0xf810078d) returned 1
[0195.524] DeleteObject (ho=0xf810078d) returned 1
[0195.525] RestoreDC (hdc=0x770107cd, nSavedDC=-1) returned 1
[0195.525] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0195.525] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0195.525] GetSystemMetrics (nIndex=42) returned 0
[0195.525] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0195.525] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0195.525] RestoreDC (hdc=0x770107cd, nSavedDC=-1) returned 1
[0195.525] GdipReleaseDC (graphics=0x5d92c30, hdc=0x770107cd) returned 0x0
[0195.525] IsAppThemed () returned 0x1
[0195.525] GetThemeAppProperties () returned 0x3
[0195.525] GetThemeAppProperties () returned 0x3
[0195.525] IsAppThemed () returned 0x1
[0195.525] GetThemeAppProperties () returned 0x3
[0195.525] GetThemeAppProperties () returned 0x3
[0195.525] IsThemePartDefined () returned 0x1
[0195.525] GdipCreateRegion (region=0x53dff4) returned 0x0
[0195.526] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.526] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0195.526] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.526] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0195.526] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0195.526] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0195.526] LocalFree (hMem=0x89ee40) returned 0x0
[0195.526] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0195.526] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0195.526] LocalFree (hMem=0x89ec80) returned 0x0
[0195.526] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.526] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0195.526] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0195.526] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0195.526] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.526] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0195.526] GetCurrentObject (hdc=0x770107cd, type=0x1) returned 0xb00017
[0195.527] GetCurrentObject (hdc=0x770107cd, type=0x2) returned 0x900010
[0195.527] GetCurrentObject (hdc=0x770107cd, type=0x7) returned 0x1e0507b9
[0195.527] GetCurrentObject (hdc=0x770107cd, type=0x6) returned 0x8a01c2
[0195.527] SaveDC (hdc=0x770107cd) returned 1
[0195.527] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4204053e
[0195.527] GetClipRgn (hdc=0x770107cd, hrgn=0x4204053e) returned 0
[0195.527] SelectClipRgn (hdc=0x770107cd, hrgn=0x3904051e) returned 2
[0195.527] DeleteObject (ho=0x4204053e) returned 1
[0195.527] DeleteObject (ho=0x3904051e) returned 1
[0195.527] OffsetViewportOrgEx (in: hdc=0x770107cd, x=0, y=0, lppt=0x231fc70 | out: lppt=0x231fc70) returned 1
[0195.527] IsAppThemed () returned 0x1
[0195.527] GetThemeAppProperties () returned 0x3
[0195.527] GetThemeAppProperties () returned 0x3
[0195.527] DrawThemeBackground () returned 0x0
[0195.528] RestoreDC (hdc=0x770107cd, nSavedDC=-1) returned 1
[0195.528] GdipReleaseDC (graphics=0x5d92c30, hdc=0x770107cd) returned 0x0
[0195.528] GdipCreateRegion (region=0x53dff8) returned 0x0
[0195.528] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.528] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0195.528] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.528] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0195.528] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.528] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.528] LocalFree (hMem=0x89ea88) returned 0x0
[0195.528] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0195.528] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0195.528] LocalFree (hMem=0x89ee40) returned 0x0
[0195.528] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.528] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0195.528] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0195.529] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0195.529] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.529] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0195.529] GetCurrentObject (hdc=0x770107cd, type=0x1) returned 0xb00017
[0195.529] GetCurrentObject (hdc=0x770107cd, type=0x2) returned 0x900010
[0195.529] GetCurrentObject (hdc=0x770107cd, type=0x7) returned 0x1e0507b9
[0195.529] GetCurrentObject (hdc=0x770107cd, type=0x6) returned 0x8a01c2
[0195.529] SaveDC (hdc=0x770107cd) returned 1
[0195.529] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a04051e
[0195.529] GetClipRgn (hdc=0x770107cd, hrgn=0x3a04051e) returned 0
[0195.529] SelectClipRgn (hdc=0x770107cd, hrgn=0x4304053e) returned 2
[0195.529] DeleteObject (ho=0x3a04051e) returned 1
[0195.529] DeleteObject (ho=0x4304053e) returned 1
[0195.529] OffsetViewportOrgEx (in: hdc=0x770107cd, x=0, y=0, lppt=0x231ff44 | out: lppt=0x231ff44) returned 1
[0195.529] IsAppThemed () returned 0x1
[0195.529] GetThemeAppProperties () returned 0x3
[0195.529] GetThemeAppProperties () returned 0x3
[0195.529] GetThemeBackgroundContentRect () returned 0x0
[0195.529] RestoreDC (hdc=0x770107cd, nSavedDC=-1) returned 1
[0195.530] GdipReleaseDC (graphics=0x5d92c30, hdc=0x770107cd) returned 0x0
[0195.530] IsAppThemed () returned 0x1
[0195.530] GetThemeAppProperties () returned 0x3
[0195.530] GetThemeAppProperties () returned 0x3
[0195.530] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0195.530] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0195.530] GetCurrentObject (hdc=0x770107cd, type=0x1) returned 0xb00017
[0195.530] GetCurrentObject (hdc=0x770107cd, type=0x2) returned 0x900010
[0195.530] GetCurrentObject (hdc=0x770107cd, type=0x7) returned 0x1e0507b9
[0195.530] GetCurrentObject (hdc=0x770107cd, type=0x6) returned 0x8a01c2
[0195.530] SaveDC (hdc=0x770107cd) returned 1
[0195.530] GetTextAlign (hdc=0x770107cd) returned 0x0
[0195.530] GetTextColor (hdc=0x770107cd) returned 0x0
[0195.530] GetCurrentObject (hdc=0x770107cd, type=0x6) returned 0x8a01c2
[0195.530] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0195.531] SelectObject (hdc=0x770107cd, h=0x450a0799) returned 0x8a01c2
[0195.531] GetBkMode (hdc=0x770107cd) returned 2
[0195.531] SetBkMode (hdc=0x770107cd, mode=1) returned 2
[0195.531] DrawTextExW (in: hdc=0x770107cd, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x23202e4 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0195.531] DrawTextExW (in: hdc=0x770107cd, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x23202e4 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0195.531] RestoreDC (hdc=0x770107cd, nSavedDC=-1) returned 1
[0195.531] GdipReleaseDC (graphics=0x5d92c30, hdc=0x770107cd) returned 0x0
[0195.532] GetFocus () returned 0xb02d2
[0195.532] IsAppThemed () returned 0x1
[0195.533] GetThemeAppProperties () returned 0x3
[0195.533] GetThemeAppProperties () returned 0x3
[0195.533] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0195.533] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x770107cd, x1=0, y1=0, rop=0xcc0020) returned 1
[0195.533] GdipReleaseDC (graphics=0x5d92c30, hdc=0x770107cd) returned 0x0
[0195.533] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0195.533] SelectObject (hdc=0x770107cd, h=0x85000f) returned 0x1e0507b9
[0195.533] DeleteDC (hdc=0x770107cd) returned 1
[0195.533] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0195.533] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0195.533] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0195.534] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0195.534] WaitMessage () returned 1
[0195.563] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.563] IsWindowUnicode (hWnd=0xa02c8) returned 1
[0195.563] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.563] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.563] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.563] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.563] IsWindowUnicode (hWnd=0xa02c8) returned 1
[0195.563] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.563] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.563] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.563] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x2a1, wParam=0x0, lParam=0xa0022) returned 0x0
[0195.563] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0195.563] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0195.563] WaitMessage () returned 1
[0195.564] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0195.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0195.564] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0195.564] WaitMessage () returned 1
[0195.565] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0195.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0195.566] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0195.566] WaitMessage () returned 1
[0195.566] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0195.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0195.566] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0195.567] WaitMessage () returned 1
[0195.579] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.580] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x84, wParam=0x0, lParam=0x1930363) returned 0x1
[0195.580] IsWindowUnicode (hWnd=0xa02c8) returned 1
[0195.580] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.580] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x84, wParam=0x0, lParam=0x1930363) returned 0x1
[0195.580] GetDlgItem (hDlg=0xf013e, nIDDlgItem=0) returned 0x0
[0195.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x210, wParam=0x201, lParam=0x160144) returned 0x0
[0195.580] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x21, wParam=0xf013e, lParam=0x2010001) returned 0x1
[0195.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x21, wParam=0xf013e, lParam=0x2010001) returned 0x1
[0195.580] SetCursor (hCursor=0x10003) returned 0x10003
[0195.581] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.581] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.581] GetKeyState (nVirtKey=1) returned -128
[0195.581] GetKeyState (nVirtKey=2) returned 0
[0195.581] GetKeyState (nVirtKey=4) returned 0
[0195.581] GetKeyState (nVirtKey=5) returned 0
[0195.581] GetKeyState (nVirtKey=6) returned 0
[0195.581] IsWindowVisible (hWnd=0xa02c8) returned 1
[0195.581] IsWindowEnabled (hWnd=0xa02c8) returned 1
[0195.581] SetFocus (hWnd=0xa02c8) returned 0xb02d2
[0195.581] GetFocus () returned 0xa02c8
[0195.581] IsChild (hWndParent=0xf013e, hWnd=0xa02c8) returned 1
[0195.582] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x8, wParam=0xa02c8, lParam=0x0) returned 0x1
[0195.582] SendMessageW (hWnd=0xb02d2, Msg=0x2111, wParam=0x20002d2, lParam=0xb02d2) returned 0x0
[0195.583] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0195.587] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0195.588] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0195.588] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0195.588] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0195.589] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0195.591] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0195.591] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x7, wParam=0xb02d2, lParam=0x0) returned 0x0
[0195.591] GetStockObject (i=5) returned 0x900015
[0195.592] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0195.592] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0xd, wParam=0x3, lParam=0x89e7d8) returned 0x2
[0195.592] GetDlgItem (hDlg=0xf013e, nIDDlgItem=656072) returned 0xa02c8
[0195.592] SendMessageW (hWnd=0xa02c8, Msg=0x202b, wParam=0xa02c8, lParam=0x53de74) returned 0x0
[0195.592] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x202b, wParam=0xa02c8, lParam=0x53de74) returned 0x0
[0195.592] InvalidateRect (hWnd=0xa02c8, lpRect=0x0, bErase=0) returned 1
[0195.594] GetFocus () returned 0xa02c8
[0195.594] GetFocus () returned 0xa02c8
[0195.594] GetFocus () returned 0xa02c8
[0195.594] GetKeyState (nVirtKey=1) returned -128
[0195.594] GetKeyState (nVirtKey=2) returned 0
[0195.594] GetKeyState (nVirtKey=4) returned 0
[0195.594] GetKeyState (nVirtKey=5) returned 0
[0195.594] GetKeyState (nVirtKey=6) returned 0
[0195.594] GetCapture () returned 0x0
[0195.594] SetCapture (hWnd=0xa02c8) returned 0x0
[0195.594] GetKeyState (nVirtKey=1) returned -128
[0195.594] GetKeyState (nVirtKey=2) returned 0
[0195.594] GetKeyState (nVirtKey=4) returned 0
[0195.594] GetKeyState (nVirtKey=5) returned 0
[0195.594] GetKeyState (nVirtKey=6) returned 0
[0195.594] NotifyWinEvent (event=0x800a, hwnd=0xa02c8, idObject=-4, idChild=0)
[0195.594] InvalidateRect (hWnd=0xa02c8, lpRect=0x53e4c8, bErase=0) returned 1
[0195.594] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.595] IsWindowUnicode (hWnd=0xa02c8) returned 1
[0195.595] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0195.595] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0195.595] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0195.595] MapWindowPoints (in: hWndFrom=0xa02c8, hWndTo=0x0, lpPoints=0x2320534, cPoints=0x1 | out: lpPoints=0x2320534) returned 25756481
[0195.595] NotifyWinEvent (event=0x800a, hwnd=0xa02c8, idObject=-4, idChild=0)
[0195.595] InvalidateRect (hWnd=0xa02c8, lpRect=0x53e468, bErase=0) returned 1
[0195.595] UpdateWindow (hWnd=0xa02c8) returned 1
[0195.595] BeginPaint (in: hWnd=0xa02c8, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x8b010786
[0195.595] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0195.595] CreateCompatibleDC (hdc=0x8b010786) returned 0x790107cc
[0195.596] SelectObject (hdc=0x790107cc, h=0x1e0507b9) returned 0x85000f
[0195.596] GdipCreateFromHDC (hdc=0x790107cc, graphics=0x53df98) returned 0x0
[0195.596] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0195.596] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0195.596] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0195.596] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.596] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0195.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.596] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0195.596] LocalFree (hMem=0x89ea88) returned 0x0
[0195.596] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.596] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0195.596] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.597] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0195.597] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0195.597] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd110dbd) returned 0x0
[0195.597] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.597] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0195.597] GetCurrentObject (hdc=0x790107cc, type=0x1) returned 0xb00017
[0195.597] GetCurrentObject (hdc=0x790107cc, type=0x2) returned 0x900010
[0195.597] GetCurrentObject (hdc=0x790107cc, type=0x7) returned 0x1e0507b9
[0195.597] GetCurrentObject (hdc=0x790107cc, type=0x6) returned 0x8a01c2
[0195.597] SaveDC (hdc=0x790107cc) returned 1
[0195.597] GetNearestColor (hdc=0x790107cc, color=0xf0f0f0) returned 0xf0f0f0
[0195.597] GetNearestColor (hdc=0x790107cc, color=0xa0a0a0) returned 0xa0a0a0
[0195.597] GetNearestColor (hdc=0x790107cc, color=0x696969) returned 0x696969
[0195.597] GetNearestColor (hdc=0x790107cc, color=0xa0a0a0) returned 0xa0a0a0
[0195.598] GetNearestColor (hdc=0x790107cc, color=0x0) returned 0x0
[0195.598] GetNearestColor (hdc=0x790107cc, color=0xffffff) returned 0xffffff
[0195.598] GetNearestColor (hdc=0x790107cc, color=0xe5e5e5) returned 0xe5e5e5
[0195.598] GetNearestColor (hdc=0x790107cc, color=0xd7d7d7) returned 0xd7d7d7
[0195.598] GetNearestColor (hdc=0x790107cc, color=0x0) returned 0x0
[0195.598] RestoreDC (hdc=0x790107cc, nSavedDC=-1) returned 1
[0195.598] GdipReleaseDC (graphics=0x5d92c30, hdc=0x790107cc) returned 0x0
[0195.598] IsAppThemed () returned 0x1
[0195.598] GetThemeAppProperties () returned 0x3
[0195.598] GetThemeAppProperties () returned 0x3
[0195.598] IsAppThemed () returned 0x1
[0195.598] GetThemeAppProperties () returned 0x3
[0195.598] GetThemeAppProperties () returned 0x3
[0195.598] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0195.598] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x2320ca8 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0195.599] IsAppThemed () returned 0x1
[0195.599] GetThemeAppProperties () returned 0x3
[0195.599] GetThemeAppProperties () returned 0x3
[0195.599] IsAppThemed () returned 0x1
[0195.599] GetThemeAppProperties () returned 0x3
[0195.599] GetThemeAppProperties () returned 0x3
[0195.599] IsAppThemed () returned 0x1
[0195.600] GetThemeAppProperties () returned 0x3
[0195.600] GetThemeAppProperties () returned 0x3
[0195.600] IsAppThemed () returned 0x1
[0195.600] GetThemeAppProperties () returned 0x3
[0195.600] GetThemeAppProperties () returned 0x3
[0195.600] IsThemePartDefined () returned 0x1
[0195.600] IsAppThemed () returned 0x1
[0195.600] GetThemeAppProperties () returned 0x3
[0195.600] GetThemeAppProperties () returned 0x3
[0195.600] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0195.600] IsAppThemed () returned 0x1
[0195.600] GetThemeAppProperties () returned 0x3
[0195.600] GetThemeAppProperties () returned 0x3
[0195.600] IsAppThemed () returned 0x1
[0195.600] GetThemeAppProperties () returned 0x3
[0195.600] GetThemeAppProperties () returned 0x3
[0195.600] IsThemePartDefined () returned 0x1
[0195.600] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0195.601] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.601] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0195.601] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.601] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0195.601] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0195.601] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0195.601] LocalFree (hMem=0x89ee40) returned 0x0
[0195.601] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.601] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.601] LocalFree (hMem=0x89ea88) returned 0x0
[0195.601] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.601] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0195.601] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0195.601] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0195.601] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.601] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0195.601] GetCurrentObject (hdc=0x790107cc, type=0x1) returned 0xb00017
[0195.602] GetCurrentObject (hdc=0x790107cc, type=0x2) returned 0x900010
[0195.602] GetCurrentObject (hdc=0x790107cc, type=0x7) returned 0x1e0507b9
[0195.602] GetCurrentObject (hdc=0x790107cc, type=0x6) returned 0x8a01c2
[0195.602] SaveDC (hdc=0x790107cc) returned 1
[0195.602] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4404053e
[0195.602] GetClipRgn (hdc=0x790107cc, hrgn=0x4404053e) returned 0
[0195.602] SelectClipRgn (hdc=0x790107cc, hrgn=0x3e04051e) returned 2
[0195.602] DeleteObject (ho=0x4404053e) returned 1
[0195.602] DeleteObject (ho=0x3e04051e) returned 1
[0195.602] OffsetViewportOrgEx (in: hdc=0x790107cc, x=0, y=0, lppt=0x2321358 | out: lppt=0x2321358) returned 1
[0195.602] DrawThemeParentBackground () returned 0x0
[0195.602] GetWindowPlacement (in: hWnd=0xf013e, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0195.603] GetClientRect (in: hWnd=0xf013e, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0195.603] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.603] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.603] GetSystemMetrics (nIndex=42) returned 0
[0195.603] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.603] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0195.603] GetClientRect (in: hWnd=0xf013e, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0195.603] GetCurrentObject (hdc=0x790107cc, type=0x1) returned 0xb00017
[0195.603] GetCurrentObject (hdc=0x790107cc, type=0x2) returned 0x900010
[0195.603] GetCurrentObject (hdc=0x790107cc, type=0x7) returned 0x1e0507b9
[0195.603] GetCurrentObject (hdc=0x790107cc, type=0x6) returned 0x8a01c2
[0195.603] SaveDC (hdc=0x790107cc) returned 2
[0195.603] GetNearestColor (hdc=0x790107cc, color=0xf0f0f0) returned 0xf0f0f0
[0195.603] CreateSolidBrush (color=0xf0f0f0) returned 0xf910078d
[0195.603] FillRect (hDC=0x790107cc, lprc=0x53d760, hbr=0xf910078d) returned 1
[0195.603] DeleteObject (ho=0xf910078d) returned 1
[0195.604] RestoreDC (hdc=0x790107cc, nSavedDC=-1) returned 1
[0195.604] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.604] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.604] GetSystemMetrics (nIndex=42) returned 0
[0195.604] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.604] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0195.604] GetClientRect (in: hWnd=0xf013e, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0195.604] GetCurrentObject (hdc=0x790107cc, type=0x1) returned 0xb00017
[0195.604] GetCurrentObject (hdc=0x790107cc, type=0x2) returned 0x900010
[0195.604] GetCurrentObject (hdc=0x790107cc, type=0x7) returned 0x1e0507b9
[0195.604] GetCurrentObject (hdc=0x790107cc, type=0x6) returned 0x8a01c2
[0195.604] SaveDC (hdc=0x790107cc) returned 2
[0195.604] GetNearestColor (hdc=0x790107cc, color=0xf0f0f0) returned 0xf0f0f0
[0195.604] CreateSolidBrush (color=0xf0f0f0) returned 0xfa10078d
[0195.604] FillRect (hDC=0x790107cc, lprc=0x53d700, hbr=0xfa10078d) returned 1
[0195.605] DeleteObject (ho=0xfa10078d) returned 1
[0195.605] RestoreDC (hdc=0x790107cc, nSavedDC=-1) returned 1
[0195.605] GetWindowTextLengthW (hWnd=0xf013e) returned 10
[0195.605] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.605] GetSystemMetrics (nIndex=42) returned 0
[0195.605] GetWindowTextW (in: hWnd=0xf013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0195.605] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0195.605] RestoreDC (hdc=0x790107cc, nSavedDC=-1) returned 1
[0195.605] GdipReleaseDC (graphics=0x5d92c30, hdc=0x790107cc) returned 0x0
[0195.605] IsAppThemed () returned 0x1
[0195.605] GetThemeAppProperties () returned 0x3
[0195.605] GetThemeAppProperties () returned 0x3
[0195.605] IsAppThemed () returned 0x1
[0195.606] GetThemeAppProperties () returned 0x3
[0195.606] GetThemeAppProperties () returned 0x3
[0195.606] IsThemePartDefined () returned 0x1
[0195.606] GdipCreateRegion (region=0x53dc80) returned 0x0
[0195.606] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.606] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0195.606] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.606] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0195.606] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0195.606] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0195.606] LocalFree (hMem=0x89ee40) returned 0x0
[0195.606] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0195.606] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0195.606] LocalFree (hMem=0x89ec80) returned 0x0
[0195.606] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.606] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0195.606] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0195.607] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0195.607] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.607] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0195.607] GetCurrentObject (hdc=0x790107cc, type=0x1) returned 0xb00017
[0195.607] GetCurrentObject (hdc=0x790107cc, type=0x2) returned 0x900010
[0195.607] GetCurrentObject (hdc=0x790107cc, type=0x7) returned 0x1e0507b9
[0195.607] GetCurrentObject (hdc=0x790107cc, type=0x6) returned 0x8a01c2
[0195.607] SaveDC (hdc=0x790107cc) returned 1
[0195.607] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3f04051e
[0195.607] GetClipRgn (hdc=0x790107cc, hrgn=0x3f04051e) returned 0
[0195.607] SelectClipRgn (hdc=0x790107cc, hrgn=0x4604053e) returned 2
[0195.607] DeleteObject (ho=0x3f04051e) returned 1
[0195.607] DeleteObject (ho=0x4604053e) returned 1
[0195.608] OffsetViewportOrgEx (in: hdc=0x790107cc, x=0, y=0, lppt=0x2321be0 | out: lppt=0x2321be0) returned 1
[0195.608] IsAppThemed () returned 0x1
[0195.608] GetThemeAppProperties () returned 0x3
[0195.608] GetThemeAppProperties () returned 0x3
[0195.608] DrawThemeBackground () returned 0x0
[0195.608] RestoreDC (hdc=0x790107cc, nSavedDC=-1) returned 1
[0195.608] GdipReleaseDC (graphics=0x5d92c30, hdc=0x790107cc) returned 0x0
[0195.608] GdipCreateRegion (region=0x53dc84) returned 0x0
[0195.608] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.608] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0195.608] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.608] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0195.608] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.608] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.608] LocalFree (hMem=0x89ea88) returned 0x0
[0195.608] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.608] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0195.609] LocalFree (hMem=0x89ea88) returned 0x0
[0195.609] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.609] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0195.609] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0195.609] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0195.609] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.609] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0195.609] GetCurrentObject (hdc=0x790107cc, type=0x1) returned 0xb00017
[0195.609] GetCurrentObject (hdc=0x790107cc, type=0x2) returned 0x900010
[0195.609] GetCurrentObject (hdc=0x790107cc, type=0x7) returned 0x1e0507b9
[0195.609] GetCurrentObject (hdc=0x790107cc, type=0x6) returned 0x8a01c2
[0195.609] SaveDC (hdc=0x790107cc) returned 1
[0195.610] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4704053e
[0195.610] GetClipRgn (hdc=0x790107cc, hrgn=0x4704053e) returned 0
[0195.610] SelectClipRgn (hdc=0x790107cc, hrgn=0x4004051e) returned 2
[0195.610] DeleteObject (ho=0x4704053e) returned 1
[0195.610] DeleteObject (ho=0x4004051e) returned 1
[0195.610] OffsetViewportOrgEx (in: hdc=0x790107cc, x=0, y=0, lppt=0x2321eb4 | out: lppt=0x2321eb4) returned 1
[0195.610] IsAppThemed () returned 0x1
[0195.610] GetThemeAppProperties () returned 0x3
[0195.610] GetThemeAppProperties () returned 0x3
[0195.610] GetThemeBackgroundContentRect () returned 0x0
[0195.610] RestoreDC (hdc=0x790107cc, nSavedDC=-1) returned 1
[0195.610] GdipReleaseDC (graphics=0x5d92c30, hdc=0x790107cc) returned 0x0
[0195.610] IsAppThemed () returned 0x1
[0195.610] GetThemeAppProperties () returned 0x3
[0195.610] GetThemeAppProperties () returned 0x3
[0195.610] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0195.611] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0195.611] GetCurrentObject (hdc=0x790107cc, type=0x1) returned 0xb00017
[0195.611] GetCurrentObject (hdc=0x790107cc, type=0x2) returned 0x900010
[0195.611] GetCurrentObject (hdc=0x790107cc, type=0x7) returned 0x1e0507b9
[0195.611] GetCurrentObject (hdc=0x790107cc, type=0x6) returned 0x8a01c2
[0195.611] SaveDC (hdc=0x790107cc) returned 1
[0195.611] GetTextAlign (hdc=0x790107cc) returned 0x0
[0195.611] GetTextColor (hdc=0x790107cc) returned 0x0
[0195.611] GetCurrentObject (hdc=0x790107cc, type=0x6) returned 0x8a01c2
[0195.611] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0195.611] SelectObject (hdc=0x790107cc, h=0x730a066d) returned 0x8a01c2
[0195.611] GetBkMode (hdc=0x790107cc) returned 2
[0195.611] SetBkMode (hdc=0x790107cc, mode=1) returned 2
[0195.612] DrawTextExW (in: hdc=0x790107cc, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x2322254 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0195.612] DrawTextExW (in: hdc=0x790107cc, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x2322254 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0195.612] RestoreDC (hdc=0x790107cc, nSavedDC=-1) returned 1
[0195.612] GdipReleaseDC (graphics=0x5d92c30, hdc=0x790107cc) returned 0x0
[0195.613] GetFocus () returned 0xa02c8
[0195.613] IsAppThemed () returned 0x1
[0195.613] GetThemeAppProperties () returned 0x3
[0195.613] GetThemeAppProperties () returned 0x3
[0195.613] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0195.613] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x790107cc, x1=0, y1=0, rop=0xcc0020) returned 1
[0195.613] GdipReleaseDC (graphics=0x5d92c30, hdc=0x790107cc) returned 0x0
[0195.613] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0195.613] SelectObject (hdc=0x790107cc, h=0x85000f) returned 0x1e0507b9
[0195.613] DeleteDC (hdc=0x790107cc) returned 1
[0195.613] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0195.614] EndPaint (hWnd=0xa02c8, lpPaint=0x53df7c) returned 1
[0195.614] MapWindowPoints (in: hWndFrom=0xa02c8, hWndTo=0x0, lpPoints=0x2322350, cPoints=0x1 | out: lpPoints=0x2322350) returned 25756481
[0195.614] WindowFromPoint (Point=0x363) returned 0xa02c8
[0195.614] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x84, wParam=0x0, lParam=0x1930363) returned 0x1
[0195.614] NotifyWinEvent (event=0x800a, hwnd=0xa02c8, idObject=-4, idChild=0)
[0195.614] NotifyWinEvent (event=0x800c, hwnd=0xa02c8, idObject=-4, idChild=0)
[0195.614] GetWindowTextLengthW (hWnd=0xb02d2) returned 0
[0195.614] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0195.614] GetSystemMetrics (nIndex=42) returned 0
[0195.614] GetWindowTextW (in: hWnd=0xb02d2, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0195.614] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0195.614] SendMessageW (hWnd=0xf013e, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0195.615] GetCapture () returned 0xa02c8
[0195.615] ReleaseCapture () returned 1
[0195.620] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0195.620] PeekMessageW (lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0)
[0195.620] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x84, wParam=0x0, lParam=0x1930363) returned 0x1
[0195.622] IsWindow (hWnd=0x70036) returned 1
[0195.622] EnableWindow (hWnd=0x70036, bEnable=1)
[0195.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0195.623] IsWindow (hWnd=0x70036) returned 1
[0195.623] SetActiveWindow (hWnd=0x70036)
[0195.623] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x86, wParam=0x0, lParam=0x70036)
[0195.625] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0195.625] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0195.625] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0195.628] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0195.629] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0195.629] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0195.629] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0xf013e) returned 0x1
[0195.666] GetFocus () returned 0xa02c8
[0195.666] SetFocus (hWnd=0x202c6)
[0195.667] GetFocus () returned 0x202c6
[0195.667] IsChild (hWndParent=0xf013e, hWnd=0x202c6) returned 0
[0195.667] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0195.667] GetCapture () returned 0x0
[0195.667] InvalidateRect (hWnd=0xa02c8, lpRect=0x0, bErase=0) returned 1
[0195.668] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0195.670] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f)
[0195.672] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0195.672] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0195.673] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0195.673] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0xa02c8, lParam=0x0)
[0195.673] GetStockObject (i=5) returned 0x900015
[0195.674] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0195.674] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0195.674] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0195.690] IsWindowVisible (hWnd=0x70036) returned 1
[0195.690] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0195.690] GetFocus () returned 0x202c6
[0195.690] IsChild (hWndParent=0xf013e, hWnd=0x202c6) returned 0
[0195.690] ShowWindow (hWnd=0xf013e, nCmdShow=0)
[0195.690] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0195.691] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0195.695] GetWindowPlacement (in: hWnd=0xf013e, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0195.695] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0195.695] GetClientRect (in: hWnd=0xf013e, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0195.695] GetWindowRect (in: hWnd=0xf013e, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0195.695] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0195.695] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0195.696] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0195.697] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0195.698] GetWindowTextLengthW (hWnd=0xf013e)
[0195.698] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0195.698] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0195.698] SendMessageW (hWnd=0xb02d2, Msg=0xb8, wParam=0x0, lParam=0x0)
[0195.698] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0195.698] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0195.698] GetWindowThreadProcessId (in: hWnd=0xb02d8, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0195.698] GetWindow (hWnd=0xb02d8, uCmd=0x5) returned 0x0
[0195.698] GetWindowLongW (hWnd=0xb02d8, nIndex=-20) returned 65792
[0195.698] DestroyWindow (hWnd=0xb02d8)
[0195.698] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb02d8, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0195.698] GetWindowTextLengthW (hWnd=0xb02d8)
[0195.698] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb02d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0195.699] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb02d8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0195.699] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb02d8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0195.700] GetWindowTextLengthW (hWnd=0xc02d6)
[0195.700] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0195.700] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0195.700] InvalidateRect (hWnd=0xa02c8, lpRect=0x0, bErase=0) returned 1
[0195.700] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0195.701] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0195.701] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xb02d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0195.702] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0195.703] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0195.704] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x702b4, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0195.705] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0195.707] GetProcessWindowStation () returned 0x13c
[0195.707] GetActiveWindow () returned 0x70036
[0195.707] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0195.707] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0195.707] GetCurrentThreadId () returned 0x11d0
[0195.708] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4b66, lParam=0x0) returned 1
[0195.708] IsWindowVisible (hWnd=0x70036) returned 1
[0195.708] IsWindowEnabled (hWnd=0x70036) returned 1
[0195.708] IsWindowVisible (hWnd=0x602b6) returned 0
[0195.708] IsWindowVisible (hWnd=0x901f8) returned 0
[0195.708] IsWindowVisible (hWnd=0x202d0) returned 0
[0195.708] IsWindowVisible (hWnd=0x202d4) returned 0
[0195.708] GetActiveWindow () returned 0x70036
[0195.708] GetFocus () returned 0x202c6
[0195.708] IsWindow (hWnd=0x70036) returned 1
[0195.708] EnableWindow (hWnd=0x70036, bEnable=0)
[0195.708] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0195.716] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0195.716] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0195.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0195.728] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x10013e) returned 0x1
[0195.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0195.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0195.735] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x802b4, lParam=0x0) returned 0x0
[0195.769] GetCapture () returned 0x0
[0195.769] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0195.771] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0195.780] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0195.780] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0195.784] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x8b010786
[0195.784] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0195.784] CreateCompatibleDC (hdc=0x8b010786) returned 0x970107cc
[0195.784] SelectObject (hdc=0x970107cc, h=0x1e0507b9) returned 0x85000f
[0195.785] GdipCreateFromHDC (hdc=0x970107cc, graphics=0x53e108) returned 0x0
[0195.785] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0195.785] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0195.785] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0195.785] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.785] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0195.785] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0195.785] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0195.786] LocalFree (hMem=0x89ea88) returned 0x0
[0195.786] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.786] GdipCreateRegion (region=0x53e150) returned 0x0
[0195.786] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.786] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0195.786] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0195.786] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd0f0dbd) returned 0x0
[0195.786] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.786] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0195.786] GetCurrentObject (hdc=0x970107cc, type=0x1) returned 0xb00017
[0195.786] GetCurrentObject (hdc=0x970107cc, type=0x2) returned 0x900010
[0195.786] GetCurrentObject (hdc=0x970107cc, type=0x7) returned 0x1e0507b9
[0195.786] GetCurrentObject (hdc=0x970107cc, type=0x6) returned 0x8a01c2
[0195.786] SaveDC (hdc=0x970107cc) returned 1
[0195.787] GetNearestColor (hdc=0x970107cc, color=0xff) returned 0xff
[0195.790] GetNearestColor (hdc=0x970107cc, color=0x55) returned 0x55
[0195.790] GetNearestColor (hdc=0x970107cc, color=0x0) returned 0x0
[0195.790] GetNearestColor (hdc=0x970107cc, color=0x55) returned 0x55
[0195.790] GetNearestColor (hdc=0x970107cc, color=0x0) returned 0x0
[0195.790] GetNearestColor (hdc=0x970107cc, color=0x8080ff) returned 0x8080ff
[0195.791] GetNearestColor (hdc=0x970107cc, color=0x7373e5) returned 0x7373e5
[0195.791] GetNearestColor (hdc=0x970107cc, color=0xe5) returned 0xe5
[0195.791] GetNearestColor (hdc=0x970107cc, color=0x0) returned 0x0
[0195.791] RestoreDC (hdc=0x970107cc, nSavedDC=-1) returned 1
[0195.791] GdipReleaseDC (graphics=0x5d92c30, hdc=0x970107cc) returned 0x0
[0195.791] IsAppThemed () returned 0x1
[0195.791] GetThemeAppProperties () returned 0x3
[0195.791] GetThemeAppProperties () returned 0x3
[0195.791] IsAppThemed () returned 0x1
[0195.791] GetThemeAppProperties () returned 0x3
[0195.791] GetThemeAppProperties () returned 0x3
[0195.791] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0195.791] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2323648 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0195.792] IsAppThemed () returned 0x1
[0195.792] GetThemeAppProperties () returned 0x3
[0195.792] GetThemeAppProperties () returned 0x3
[0195.792] IsAppThemed () returned 0x1
[0195.792] GetThemeAppProperties () returned 0x3
[0195.792] GetThemeAppProperties () returned 0x3
[0195.792] GetFocus () returned 0x802b4
[0195.792] IsAppThemed () returned 0x1
[0195.792] GetThemeAppProperties () returned 0x3
[0195.792] GetThemeAppProperties () returned 0x3
[0195.792] IsAppThemed () returned 0x1
[0195.792] GetThemeAppProperties () returned 0x3
[0195.792] GetThemeAppProperties () returned 0x3
[0195.792] IsThemePartDefined () returned 0x1
[0195.793] IsAppThemed () returned 0x1
[0195.793] GetThemeAppProperties () returned 0x3
[0195.793] GetThemeAppProperties () returned 0x3
[0195.793] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0195.793] IsAppThemed () returned 0x1
[0195.793] GetThemeAppProperties () returned 0x3
[0195.793] GetThemeAppProperties () returned 0x3
[0195.793] IsAppThemed () returned 0x1
[0195.793] GetThemeAppProperties () returned 0x3
[0195.793] GetThemeAppProperties () returned 0x3
[0195.793] IsThemePartDefined () returned 0x1
[0195.793] GdipCreateRegion (region=0x53de78) returned 0x0
[0195.793] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.793] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0195.793] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.793] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0195.793] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0195.793] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0195.793] LocalFree (hMem=0x89ee40) returned 0x0
[0195.794] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0195.794] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0195.794] LocalFree (hMem=0x89ec80) returned 0x0
[0195.794] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.794] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0195.794] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0195.794] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0195.794] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.794] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0195.794] GetCurrentObject (hdc=0x970107cc, type=0x1) returned 0xb00017
[0195.794] GetCurrentObject (hdc=0x970107cc, type=0x2) returned 0x900010
[0195.794] GetCurrentObject (hdc=0x970107cc, type=0x7) returned 0x1e0507b9
[0195.794] GetCurrentObject (hdc=0x970107cc, type=0x6) returned 0x8a01c2
[0195.794] SaveDC (hdc=0x970107cc) returned 1
[0195.794] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4104051e
[0195.794] GetClipRgn (hdc=0x970107cc, hrgn=0x4104051e) returned 0
[0195.795] SelectClipRgn (hdc=0x970107cc, hrgn=0x4d04053e) returned 2
[0195.795] DeleteObject (ho=0x4104051e) returned 1
[0195.795] DeleteObject (ho=0x4d04053e) returned 1
[0195.795] OffsetViewportOrgEx (in: hdc=0x970107cc, x=0, y=0, lppt=0x2323cf8 | out: lppt=0x2323cf8) returned 1
[0195.795] DrawThemeParentBackground () returned 0x0
[0195.795] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0195.795] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0195.795] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0195.795] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0195.795] GetSystemMetrics (nIndex=42) returned 0
[0195.795] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0195.795] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0195.796] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0195.796] GetCurrentObject (hdc=0x970107cc, type=0x1) returned 0xb00017
[0195.796] GetCurrentObject (hdc=0x970107cc, type=0x2) returned 0x900010
[0195.796] GetCurrentObject (hdc=0x970107cc, type=0x7) returned 0x1e0507b9
[0195.796] GetCurrentObject (hdc=0x970107cc, type=0x6) returned 0x8a01c2
[0195.796] SaveDC (hdc=0x970107cc) returned 2
[0195.796] GetNearestColor (hdc=0x970107cc, color=0xff) returned 0xff
[0195.796] CreateSolidBrush (color=0xff) returned 0xfb10078d
[0195.796] FillRect (hDC=0x970107cc, lprc=0x53d8d8, hbr=0xfb10078d) returned 1
[0195.796] DeleteObject (ho=0xfb10078d) returned 1
[0195.796] RestoreDC (hdc=0x970107cc, nSavedDC=-1) returned 1
[0195.796] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0195.796] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0195.797] GetSystemMetrics (nIndex=42) returned 0
[0195.797] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0195.797] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0195.797] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0195.797] GetCurrentObject (hdc=0x970107cc, type=0x1) returned 0xb00017
[0195.797] GetCurrentObject (hdc=0x970107cc, type=0x2) returned 0x900010
[0195.797] GetCurrentObject (hdc=0x970107cc, type=0x7) returned 0x1e0507b9
[0195.797] GetCurrentObject (hdc=0x970107cc, type=0x6) returned 0x8a01c2
[0195.797] SaveDC (hdc=0x970107cc) returned 2
[0195.797] GetNearestColor (hdc=0x970107cc, color=0xff) returned 0xff
[0195.797] CreateSolidBrush (color=0xff) returned 0xfc10078d
[0195.797] FillRect (hDC=0x970107cc, lprc=0x53d878, hbr=0xfc10078d) returned 1
[0195.797] DeleteObject (ho=0xfc10078d) returned 1
[0195.797] RestoreDC (hdc=0x970107cc, nSavedDC=-1) returned 1
[0195.797] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0195.797] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0195.798] GetSystemMetrics (nIndex=42) returned 0
[0195.798] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0195.798] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0195.798] RestoreDC (hdc=0x970107cc, nSavedDC=-1) returned 1
[0195.798] GdipReleaseDC (graphics=0x5d92c30, hdc=0x970107cc) returned 0x0
[0195.798] IsAppThemed () returned 0x1
[0195.798] GetThemeAppProperties () returned 0x3
[0195.798] GetThemeAppProperties () returned 0x3
[0195.798] IsAppThemed () returned 0x1
[0195.798] GetThemeAppProperties () returned 0x3
[0195.798] GetThemeAppProperties () returned 0x3
[0195.798] IsThemePartDefined () returned 0x1
[0195.798] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0195.798] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.799] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0195.799] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0195.799] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0195.799] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0195.799] LocalFree (hMem=0x89ea88) returned 0x0
[0195.799] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0195.799] LocalFree (hMem=0x89ec80) returned 0x0
[0195.799] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0195.799] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0195.799] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0195.799] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0195.799] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.799] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0195.799] GetCurrentObject (hdc=0x970107cc, type=0x1) returned 0xb00017
[0195.799] GetCurrentObject (hdc=0x970107cc, type=0x2) returned 0x900010
[0195.799] GetCurrentObject (hdc=0x970107cc, type=0x7) returned 0x1e0507b9
[0195.800] GetCurrentObject (hdc=0x970107cc, type=0x6) returned 0x8a01c2
[0195.800] SaveDC (hdc=0x970107cc) returned 1
[0195.800] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4e04053e
[0195.800] GetClipRgn (hdc=0x970107cc, hrgn=0x4e04053e) returned 0
[0195.800] SelectClipRgn (hdc=0x970107cc, hrgn=0x4304051e) returned 2
[0195.800] DeleteObject (ho=0x4e04053e) returned 1
[0195.800] DeleteObject (ho=0x4304051e) returned 1
[0195.800] OffsetViewportOrgEx (in: hdc=0x970107cc, x=0, y=0, lppt=0x2326cd4 | out: lppt=0x2326cd4) returned 1
[0195.800] IsAppThemed () returned 0x1
[0195.800] GetThemeAppProperties () returned 0x3
[0195.800] GetThemeAppProperties () returned 0x3
[0195.800] DrawThemeBackground () returned 0x0
[0195.800] RestoreDC (hdc=0x970107cc, nSavedDC=-1) returned 1
[0195.801] GdipReleaseDC (graphics=0x5d92c30, hdc=0x970107cc) returned 0x0
[0195.801] GdipCreateRegion (region=0x53de00) returned 0x0
[0195.801] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0195.801] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0195.801] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0195.801] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0195.801] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0195.801] LocalFree (hMem=0x89eee8) returned 0x0
[0195.801] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0195.801] LocalFree (hMem=0x89ee40) returned 0x0
[0195.801] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0195.801] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0195.801] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0195.801] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0195.801] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0195.801] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0195.801] GetCurrentObject (hdc=0x970107cc, type=0x1) returned 0xb00017
[0195.801] GetCurrentObject (hdc=0x970107cc, type=0x2) returned 0x900010
[0195.802] GetCurrentObject (hdc=0x970107cc, type=0x7) returned 0x1e0507b9
[0195.802] GetCurrentObject (hdc=0x970107cc, type=0x6) returned 0x8a01c2
[0195.802] SaveDC (hdc=0x970107cc) returned 1
[0195.802] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4404051e
[0195.802] GetClipRgn (hdc=0x970107cc, hrgn=0x4404051e) returned 0
[0195.802] SelectClipRgn (hdc=0x970107cc, hrgn=0x4f04053e) returned 2
[0195.802] DeleteObject (ho=0x4404051e) returned 1
[0195.802] DeleteObject (ho=0x4f04053e) returned 1
[0195.802] OffsetViewportOrgEx (in: hdc=0x970107cc, x=0, y=0, lppt=0x2327088 | out: lppt=0x2327088) returned 1
[0195.802] IsAppThemed () returned 0x1
[0195.802] GetThemeAppProperties () returned 0x3
[0195.802] GetThemeAppProperties () returned 0x3
[0195.803] GetThemeBackgroundContentRect () returned 0x0
[0195.803] RestoreDC (hdc=0x970107cc, nSavedDC=-1) returned 1
[0195.803] GdipReleaseDC (graphics=0x5d92c30, hdc=0x970107cc) returned 0x0
[0195.803] IsAppThemed () returned 0x1
[0195.803] GetThemeAppProperties () returned 0x3
[0195.803] GetThemeAppProperties () returned 0x3
[0195.803] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0195.803] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0195.803] GetCurrentObject (hdc=0x970107cc, type=0x1) returned 0xb00017
[0195.803] GetCurrentObject (hdc=0x970107cc, type=0x2) returned 0x900010
[0195.803] GetCurrentObject (hdc=0x970107cc, type=0x7) returned 0x1e0507b9
[0195.803] GetCurrentObject (hdc=0x970107cc, type=0x6) returned 0x8a01c2
[0195.803] SaveDC (hdc=0x970107cc) returned 1
[0195.804] GetTextAlign (hdc=0x970107cc) returned 0x0
[0195.804] GetTextColor (hdc=0x970107cc) returned 0x0
[0195.804] GetCurrentObject (hdc=0x970107cc, type=0x6) returned 0x8a01c2
[0195.804] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0195.804] SelectObject (hdc=0x970107cc, h=0x450a0799) returned 0x8a01c2
[0195.804] GetBkMode (hdc=0x970107cc) returned 2
[0195.804] SetBkMode (hdc=0x970107cc, mode=1) returned 2
[0195.804] DrawTextExW (in: hdc=0x970107cc, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x23275d8 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0195.804] DrawTextExW (in: hdc=0x970107cc, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x23275d8 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0195.805] RestoreDC (hdc=0x970107cc, nSavedDC=-1) returned 1
[0195.805] GdipReleaseDC (graphics=0x5d92c30, hdc=0x970107cc) returned 0x0
[0195.805] GetFocus () returned 0x802b4
[0195.805] IsAppThemed () returned 0x1
[0195.805] GetThemeAppProperties () returned 0x3
[0195.805] GetThemeAppProperties () returned 0x3
[0195.805] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0195.805] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x970107cc, x1=0, y1=0, rop=0xcc0020) returned 1
[0195.805] GdipReleaseDC (graphics=0x5d92c30, hdc=0x970107cc) returned 0x0
[0195.805] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0195.806] SelectObject (hdc=0x970107cc, h=0x85000f) returned 0x1e0507b9
[0195.806] DeleteDC (hdc=0x970107cc) returned 1
[0195.806] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0195.806] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0196.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0196.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0196.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x10013e) returned 0x1
[0196.130] GetFocus () returned 0x10013e
[0196.130] GetAncestor (hwnd=0x10013e, gaFlags=0x1) returned 0x10010
[0196.135] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0196.135] SetFocus (hWnd=0x202c6) returned 0x0
[0196.138] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0196.139] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0196.140] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0196.140] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0196.140] GetFocus () returned 0x70036
[0196.140] SetFocus (hWnd=0x202c6) returned 0x0
[0196.147] IsWindow (hWnd=0x70036) returned 1
[0196.147] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0196.148] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0196.148] IsWindow (hWnd=0x70036) returned 1
[0196.148] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0196.148] IsWindow (hWnd=0x202c6) returned 1
[0196.148] SetFocus (hWnd=0x202c6) returned 0x70036
[0196.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0196.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0196.151] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0196.153] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0196.153] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0196.153] GetStockObject (i=5) returned 0x900015
[0196.153] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0196.153] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8da988) returned 0x7
[0196.154] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0196.154] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0196.154] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0196.154] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0196.156] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0196.156] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0196.156] GetFocus () returned 0x202c6
[0196.156] GetCapture () returned 0x0
[0196.156] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.156] IsWindowUnicode (hWnd=0x202c6) returned 1
[0196.156] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.157] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.157] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.157] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.158] IsWindowUnicode (hWnd=0x202c6) returned 1
[0196.158] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.158] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.158] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.158] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0196.158] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0196.158] CreateCompatibleDC (hdc=0x8b010786) returned 0xa001065f
[0196.158] SelectObject (hdc=0xa001065f, h=0x1e0507b9) returned 0x85000f
[0196.158] GdipCreateFromHDC (hdc=0xa001065f, graphics=0x53e958) returned 0x0
[0196.159] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0196.159] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0196.159] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0196.159] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0196.159] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0196.159] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0196.159] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0196.159] LocalFree (hMem=0x89ea88) returned 0x0
[0196.159] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0196.159] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0196.159] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0196.159] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0196.159] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0196.159] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd0d0dbd) returned 0x0
[0196.159] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0196.160] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0196.160] GetCurrentObject (hdc=0xa001065f, type=0x1) returned 0xb00017
[0196.160] GetCurrentObject (hdc=0xa001065f, type=0x2) returned 0x900010
[0196.160] GetCurrentObject (hdc=0xa001065f, type=0x7) returned 0x1e0507b9
[0196.160] GetCurrentObject (hdc=0xa001065f, type=0x6) returned 0x8a01c2
[0196.160] SaveDC (hdc=0xa001065f) returned 1
[0196.160] GetNearestColor (hdc=0xa001065f, color=0xff) returned 0xff
[0196.160] GetNearestColor (hdc=0xa001065f, color=0x55) returned 0x55
[0196.160] GetNearestColor (hdc=0xa001065f, color=0x0) returned 0x0
[0196.160] GetNearestColor (hdc=0xa001065f, color=0x55) returned 0x55
[0196.160] GetNearestColor (hdc=0xa001065f, color=0x0) returned 0x0
[0196.160] GetNearestColor (hdc=0xa001065f, color=0x8080ff) returned 0x8080ff
[0196.161] GetNearestColor (hdc=0xa001065f, color=0x7373e5) returned 0x7373e5
[0196.161] GetNearestColor (hdc=0xa001065f, color=0xe5) returned 0xe5
[0196.161] GetNearestColor (hdc=0xa001065f, color=0x0) returned 0x0
[0196.161] RestoreDC (hdc=0xa001065f, nSavedDC=-1) returned 1
[0196.161] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa001065f) returned 0x0
[0196.161] IsAppThemed () returned 0x1
[0196.161] GetThemeAppProperties () returned 0x3
[0196.161] GetThemeAppProperties () returned 0x3
[0196.161] IsAppThemed () returned 0x1
[0196.161] GetThemeAppProperties () returned 0x3
[0196.161] GetThemeAppProperties () returned 0x3
[0196.161] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2328130 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0196.172] IsAppThemed () returned 0x1
[0196.172] GetThemeAppProperties () returned 0x3
[0196.172] GetThemeAppProperties () returned 0x3
[0196.172] IsAppThemed () returned 0x1
[0196.172] GetThemeAppProperties () returned 0x3
[0196.172] GetThemeAppProperties () returned 0x3
[0196.172] GetFocus () returned 0x202c6
[0196.172] IsAppThemed () returned 0x1
[0196.172] GetThemeAppProperties () returned 0x3
[0196.172] GetThemeAppProperties () returned 0x3
[0196.172] IsAppThemed () returned 0x1
[0196.172] GetThemeAppProperties () returned 0x3
[0196.172] GetThemeAppProperties () returned 0x3
[0196.172] IsThemePartDefined () returned 0x1
[0196.172] IsAppThemed () returned 0x1
[0196.172] GetThemeAppProperties () returned 0x3
[0196.172] GetThemeAppProperties () returned 0x3
[0196.172] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0196.173] IsAppThemed () returned 0x1
[0196.173] GetThemeAppProperties () returned 0x3
[0196.173] GetThemeAppProperties () returned 0x3
[0196.173] IsAppThemed () returned 0x1
[0196.173] GetThemeAppProperties () returned 0x3
[0196.173] GetThemeAppProperties () returned 0x3
[0196.173] IsThemePartDefined () returned 0x1
[0196.173] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0196.173] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0196.173] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0196.173] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0196.173] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0196.173] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0196.173] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0196.173] LocalFree (hMem=0x89ee40) returned 0x0
[0196.173] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0196.173] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0196.173] LocalFree (hMem=0x89ea88) returned 0x0
[0196.174] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0196.174] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0196.174] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0196.174] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0196.174] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0196.174] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0196.174] GetCurrentObject (hdc=0xa001065f, type=0x1) returned 0xb00017
[0196.174] GetCurrentObject (hdc=0xa001065f, type=0x2) returned 0x900010
[0196.174] GetCurrentObject (hdc=0xa001065f, type=0x7) returned 0x1e0507b9
[0196.174] GetCurrentObject (hdc=0xa001065f, type=0x6) returned 0x8a01c2
[0196.174] SaveDC (hdc=0xa001065f) returned 1
[0196.174] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5504053e
[0196.174] GetClipRgn (hdc=0xa001065f, hrgn=0x5504053e) returned 0
[0196.174] SelectClipRgn (hdc=0xa001065f, hrgn=0x5404051e) returned 2
[0196.174] DeleteObject (ho=0x5504053e) returned 1
[0196.175] DeleteObject (ho=0x5404051e) returned 1
[0196.175] OffsetViewportOrgEx (in: hdc=0xa001065f, x=0, y=0, lppt=0x23287e0 | out: lppt=0x23287e0) returned 1
[0196.175] DrawThemeParentBackground () returned 0x0
[0196.175] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0196.175] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0196.175] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0196.175] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0196.175] GetSystemMetrics (nIndex=42) returned 0
[0196.175] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0196.175] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0196.175] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0196.175] GetCurrentObject (hdc=0xa001065f, type=0x1) returned 0xb00017
[0196.175] GetCurrentObject (hdc=0xa001065f, type=0x2) returned 0x900010
[0196.175] GetCurrentObject (hdc=0xa001065f, type=0x7) returned 0x1e0507b9
[0196.176] GetCurrentObject (hdc=0xa001065f, type=0x6) returned 0x8a01c2
[0196.176] SaveDC (hdc=0xa001065f) returned 2
[0196.176] GetNearestColor (hdc=0xa001065f, color=0xff) returned 0xff
[0196.176] CreateSolidBrush (color=0xff) returned 0xfe10078d
[0196.176] FillRect (hDC=0xa001065f, lprc=0x53e128, hbr=0xfe10078d) returned 1
[0196.176] DeleteObject (ho=0xfe10078d) returned 1
[0196.176] RestoreDC (hdc=0xa001065f, nSavedDC=-1) returned 1
[0196.176] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0196.176] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0196.176] GetSystemMetrics (nIndex=42) returned 0
[0196.176] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0196.176] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0196.176] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0196.176] GetCurrentObject (hdc=0xa001065f, type=0x1) returned 0xb00017
[0196.177] GetCurrentObject (hdc=0xa001065f, type=0x2) returned 0x900010
[0196.177] GetCurrentObject (hdc=0xa001065f, type=0x7) returned 0x1e0507b9
[0196.177] GetCurrentObject (hdc=0xa001065f, type=0x6) returned 0x8a01c2
[0196.177] SaveDC (hdc=0xa001065f) returned 2
[0196.177] GetNearestColor (hdc=0xa001065f, color=0xff) returned 0xff
[0196.177] CreateSolidBrush (color=0xff) returned 0xff10078d
[0196.177] FillRect (hDC=0xa001065f, lprc=0x53e0c8, hbr=0xff10078d) returned 1
[0196.177] DeleteObject (ho=0xff10078d) returned 1
[0196.177] RestoreDC (hdc=0xa001065f, nSavedDC=-1) returned 1
[0196.177] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0196.177] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0196.181] GetSystemMetrics (nIndex=42) returned 0
[0196.181] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0196.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0196.181] RestoreDC (hdc=0xa001065f, nSavedDC=-1) returned 1
[0196.181] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa001065f) returned 0x0
[0196.181] IsAppThemed () returned 0x1
[0196.181] GetThemeAppProperties () returned 0x3
[0196.181] GetThemeAppProperties () returned 0x3
[0196.182] IsAppThemed () returned 0x1
[0196.182] GetThemeAppProperties () returned 0x3
[0196.182] GetThemeAppProperties () returned 0x3
[0196.182] IsThemePartDefined () returned 0x1
[0196.182] GdipCreateRegion (region=0x53e64c) returned 0x0
[0196.182] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0196.182] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0196.182] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0196.182] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0196.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0196.182] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0196.182] LocalFree (hMem=0x89ea88) returned 0x0
[0196.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0196.182] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0196.182] LocalFree (hMem=0x89ea88) returned 0x0
[0196.182] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0196.182] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0196.183] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0196.183] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0196.183] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0196.183] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0196.183] GetCurrentObject (hdc=0xa001065f, type=0x1) returned 0xb00017
[0196.183] GetCurrentObject (hdc=0xa001065f, type=0x2) returned 0x900010
[0196.183] GetCurrentObject (hdc=0xa001065f, type=0x7) returned 0x1e0507b9
[0196.183] GetCurrentObject (hdc=0xa001065f, type=0x6) returned 0x8a01c2
[0196.183] SaveDC (hdc=0xa001065f) returned 1
[0196.183] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5504051e
[0196.183] GetClipRgn (hdc=0xa001065f, hrgn=0x5504051e) returned 0
[0196.183] SelectClipRgn (hdc=0xa001065f, hrgn=0x5704053e) returned 2
[0196.183] DeleteObject (ho=0x5504051e) returned 1
[0196.183] DeleteObject (ho=0x5704053e) returned 1
[0196.184] OffsetViewportOrgEx (in: hdc=0xa001065f, x=0, y=0, lppt=0x232924c | out: lppt=0x232924c) returned 1
[0196.184] IsAppThemed () returned 0x1
[0196.184] GetThemeAppProperties () returned 0x3
[0196.184] GetThemeAppProperties () returned 0x3
[0196.184] DrawThemeBackground () returned 0x0
[0196.184] RestoreDC (hdc=0xa001065f, nSavedDC=-1) returned 1
[0196.184] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa001065f) returned 0x0
[0196.184] GdipCreateRegion (region=0x53e650) returned 0x0
[0196.184] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0196.184] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0196.184] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0196.184] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0196.184] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0196.184] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0196.184] LocalFree (hMem=0x89ee40) returned 0x0
[0196.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0196.185] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0196.185] LocalFree (hMem=0x89ea88) returned 0x0
[0196.185] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0196.185] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0196.185] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0196.185] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0196.185] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0196.185] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0196.185] GetCurrentObject (hdc=0xa001065f, type=0x1) returned 0xb00017
[0196.185] GetCurrentObject (hdc=0xa001065f, type=0x2) returned 0x900010
[0196.185] GetCurrentObject (hdc=0xa001065f, type=0x7) returned 0x1e0507b9
[0196.185] GetCurrentObject (hdc=0xa001065f, type=0x6) returned 0x8a01c2
[0196.185] SaveDC (hdc=0xa001065f) returned 1
[0196.186] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5804053e
[0196.186] GetClipRgn (hdc=0xa001065f, hrgn=0x5804053e) returned 0
[0196.186] SelectClipRgn (hdc=0xa001065f, hrgn=0x5604051e) returned 2
[0196.186] DeleteObject (ho=0x5804053e) returned 1
[0196.186] DeleteObject (ho=0x5604051e) returned 1
[0196.186] OffsetViewportOrgEx (in: hdc=0xa001065f, x=0, y=0, lppt=0x23297a0 | out: lppt=0x23297a0) returned 1
[0196.186] IsAppThemed () returned 0x1
[0196.186] GetThemeAppProperties () returned 0x3
[0196.186] GetThemeAppProperties () returned 0x3
[0196.186] GetThemeBackgroundContentRect () returned 0x0
[0196.186] RestoreDC (hdc=0xa001065f, nSavedDC=-1) returned 1
[0196.186] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa001065f) returned 0x0
[0196.186] IsAppThemed () returned 0x1
[0196.186] GetThemeAppProperties () returned 0x3
[0196.186] GetThemeAppProperties () returned 0x3
[0196.187] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0196.187] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0196.187] GetCurrentObject (hdc=0xa001065f, type=0x1) returned 0xb00017
[0196.187] GetCurrentObject (hdc=0xa001065f, type=0x2) returned 0x900010
[0196.187] GetCurrentObject (hdc=0xa001065f, type=0x7) returned 0x1e0507b9
[0196.187] GetCurrentObject (hdc=0xa001065f, type=0x6) returned 0x8a01c2
[0196.187] SaveDC (hdc=0xa001065f) returned 1
[0196.187] GetTextAlign (hdc=0xa001065f) returned 0x0
[0196.187] GetTextColor (hdc=0xa001065f) returned 0x0
[0196.187] GetCurrentObject (hdc=0xa001065f, type=0x6) returned 0x8a01c2
[0196.187] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0196.187] SelectObject (hdc=0xa001065f, h=0x450a0799) returned 0x8a01c2
[0196.187] GetBkMode (hdc=0xa001065f) returned 2
[0196.188] SetBkMode (hdc=0xa001065f, mode=1) returned 2
[0196.188] DrawTextExW (in: hdc=0xa001065f, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2329b40 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0196.188] DrawTextExW (in: hdc=0xa001065f, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2329b40 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0196.188] RestoreDC (hdc=0xa001065f, nSavedDC=-1) returned 1
[0196.188] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa001065f) returned 0x0
[0196.188] GetFocus () returned 0x202c6
[0196.189] IsAppThemed () returned 0x1
[0196.189] GetThemeAppProperties () returned 0x3
[0196.189] GetThemeAppProperties () returned 0x3
[0196.189] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0196.189] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xa001065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0196.189] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa001065f) returned 0x0
[0196.189] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0196.189] SelectObject (hdc=0xa001065f, h=0x85000f) returned 0x1e0507b9
[0196.189] DeleteDC (hdc=0xa001065f) returned 1
[0196.190] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0196.190] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0196.190] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.190] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.190] WaitMessage () returned 1
[0196.329] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.330] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.330] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.330] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.330] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.331] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.331] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.331] WaitMessage () returned 1
[0196.332] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.332] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.332] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.332] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.332] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.334] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.339] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.339] WaitMessage () returned 1
[0196.340] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.340] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.340] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.340] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.340] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.342] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.342] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.342] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.342] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.342] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.342] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.342] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.342] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.343] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.343] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.343] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.343] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.343] WaitMessage () returned 1
[0196.344] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.344] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.344] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.344] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.344] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.345] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.345] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.345] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.346] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.346] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.346] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.346] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.346] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.346] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.346] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.346] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.347] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.347] WaitMessage () returned 1
[0196.347] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.347] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.347] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.347] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.347] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.349] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.349] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.349] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.349] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.349] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.354] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.354] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.354] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.354] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.354] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.354] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.355] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.355] WaitMessage () returned 1
[0196.356] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.356] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.356] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.356] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.356] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.358] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.358] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.358] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.358] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.358] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.358] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.358] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.358] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.359] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.359] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.359] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.359] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.359] WaitMessage () returned 1
[0196.360] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.360] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.360] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.360] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.360] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.361] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.361] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.361] WaitMessage () returned 1
[0196.362] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.362] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.362] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.362] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.362] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.363] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.363] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.363] WaitMessage () returned 1
[0196.365] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.365] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.365] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.365] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.365] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.366] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.366] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.366] WaitMessage () returned 1
[0196.367] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.367] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.367] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.367] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.367] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.368] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.368] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.368] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.368] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.368] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.368] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.369] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.369] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.369] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.369] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.369] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.369] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.369] WaitMessage () returned 1
[0196.370] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.370] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.370] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.370] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.370] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.371] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.371] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.371] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.371] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.371] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.371] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.371] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.372] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.372] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.372] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.372] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.373] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.373] WaitMessage () returned 1
[0196.373] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.373] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.373] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.373] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.373] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.375] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.375] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.375] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.375] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.375] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.375] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.375] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.375] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.376] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.376] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.376] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.376] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.376] WaitMessage () returned 1
[0196.414] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.415] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.415] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.415] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.415] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.417] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.417] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.417] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.417] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.417] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.417] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.417] IsWindowUnicode (hWnd=0x102dc) returned 1
[0196.417] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.418] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.418] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.418] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.418] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.418] WaitMessage () returned 1
[0196.459] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.459] IsWindowUnicode (hWnd=0x202d0) returned 1
[0196.459] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.459] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.459] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0196.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.460] WaitMessage () returned 1
[0196.818] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.819] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0196.819] TranslateMessage (lpMsg=0x53eef8) returned 0
[0196.819] DispatchMessageA (lpMsg=0x53eef8) returned 0x7f01
[0196.819] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.819] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0196.819] WaitMessage () returned 1
[0197.819] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0197.819] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0197.819] TranslateMessage (lpMsg=0x53eef8) returned 0
[0197.819] DispatchMessageA (lpMsg=0x53eef8) returned 0x7f00
[0197.820] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0197.820] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0197.820] WaitMessage () returned 1
[0197.890] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0197.890] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a30229) returned 0x1
[0197.891] IsWindowUnicode (hWnd=0x202c6) returned 1
[0197.891] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0197.891] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a30229) returned 0x1
[0197.891] SetCursor (hCursor=0x10003) returned 0x10003
[0197.891] TranslateMessage (lpMsg=0x53eef8) returned 0
[0197.891] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0197.892] _TrackMouseEvent (in: lpEventTrack=0x23276fc | out: lpEventTrack=0x23276fc) returned 1
[0197.892] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0197.892] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0197.892] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0197.892] GetKeyState (nVirtKey=1) returned 1
[0197.892] GetKeyState (nVirtKey=2) returned 0
[0197.892] GetKeyState (nVirtKey=4) returned 0
[0197.892] GetKeyState (nVirtKey=5) returned 0
[0197.892] GetKeyState (nVirtKey=6) returned 0
[0197.892] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0197.892] IsWindowUnicode (hWnd=0x202c6) returned 1
[0197.892] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0197.892] TranslateMessage (lpMsg=0x53eef8) returned 0
[0197.892] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0197.893] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0197.893] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0197.893] CreateCompatibleDC (hdc=0x8b010786) returned 0xf40107b3
[0197.893] SelectObject (hdc=0xf40107b3, h=0x1e0507b9) returned 0x85000f
[0197.893] GdipCreateFromHDC (hdc=0xf40107b3, graphics=0x53e958) returned 0x0
[0197.894] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0197.894] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0197.894] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0197.894] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0197.894] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0197.894] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0197.895] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0197.895] LocalFree (hMem=0x89ec80) returned 0x0
[0197.895] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0197.895] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0197.895] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0197.895] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0197.895] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0197.895] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd0b0dbd) returned 0x0
[0197.895] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0197.895] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0197.895] GetCurrentObject (hdc=0xf40107b3, type=0x1) returned 0xb00017
[0197.896] GetCurrentObject (hdc=0xf40107b3, type=0x2) returned 0x900010
[0197.896] GetCurrentObject (hdc=0xf40107b3, type=0x7) returned 0x1e0507b9
[0197.896] GetCurrentObject (hdc=0xf40107b3, type=0x6) returned 0x8a01c2
[0197.896] SaveDC (hdc=0xf40107b3) returned 1
[0197.896] GetNearestColor (hdc=0xf40107b3, color=0xff) returned 0xff
[0197.896] GetNearestColor (hdc=0xf40107b3, color=0x55) returned 0x55
[0197.896] GetNearestColor (hdc=0xf40107b3, color=0x0) returned 0x0
[0197.896] GetNearestColor (hdc=0xf40107b3, color=0x55) returned 0x55
[0197.896] GetNearestColor (hdc=0xf40107b3, color=0x0) returned 0x0
[0197.896] GetNearestColor (hdc=0xf40107b3, color=0x8080ff) returned 0x8080ff
[0197.896] GetNearestColor (hdc=0xf40107b3, color=0x7373e5) returned 0x7373e5
[0197.896] GetNearestColor (hdc=0xf40107b3, color=0xe5) returned 0xe5
[0197.897] GetNearestColor (hdc=0xf40107b3, color=0x0) returned 0x0
[0197.897] RestoreDC (hdc=0xf40107b3, nSavedDC=-1) returned 1
[0197.897] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf40107b3) returned 0x0
[0197.897] IsAppThemed () returned 0x1
[0197.897] GetThemeAppProperties () returned 0x3
[0197.897] GetThemeAppProperties () returned 0x3
[0197.897] IsAppThemed () returned 0x1
[0197.897] GetThemeAppProperties () returned 0x3
[0197.897] GetThemeAppProperties () returned 0x3
[0197.897] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x232a5ac | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0197.898] IsAppThemed () returned 0x1
[0197.898] GetThemeAppProperties () returned 0x3
[0197.898] GetThemeAppProperties () returned 0x3
[0197.898] IsAppThemed () returned 0x1
[0197.898] GetThemeAppProperties () returned 0x3
[0197.898] GetThemeAppProperties () returned 0x3
[0197.898] IsAppThemed () returned 0x1
[0197.898] GetThemeAppProperties () returned 0x3
[0197.898] GetThemeAppProperties () returned 0x3
[0197.898] IsAppThemed () returned 0x1
[0197.899] GetThemeAppProperties () returned 0x3
[0197.899] GetThemeAppProperties () returned 0x3
[0197.899] IsThemePartDefined () returned 0x1
[0197.899] IsAppThemed () returned 0x1
[0197.899] GetThemeAppProperties () returned 0x3
[0197.899] GetThemeAppProperties () returned 0x3
[0197.899] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0197.899] IsAppThemed () returned 0x1
[0197.899] GetThemeAppProperties () returned 0x3
[0197.899] GetThemeAppProperties () returned 0x3
[0197.899] IsAppThemed () returned 0x1
[0197.899] GetThemeAppProperties () returned 0x3
[0197.899] GetThemeAppProperties () returned 0x3
[0197.899] IsThemePartDefined () returned 0x1
[0197.899] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0197.899] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0197.899] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0197.899] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0197.899] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0197.900] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0197.900] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0197.900] LocalFree (hMem=0x89ea88) returned 0x0
[0197.900] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0197.900] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0197.900] LocalFree (hMem=0x89ee08) returned 0x0
[0197.900] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0197.900] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0197.900] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0197.900] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0197.900] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0197.900] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0197.900] GetCurrentObject (hdc=0xf40107b3, type=0x1) returned 0xb00017
[0197.900] GetCurrentObject (hdc=0xf40107b3, type=0x2) returned 0x900010
[0197.900] GetCurrentObject (hdc=0xf40107b3, type=0x7) returned 0x1e0507b9
[0197.900] GetCurrentObject (hdc=0xf40107b3, type=0x6) returned 0x8a01c2
[0197.900] SaveDC (hdc=0xf40107b3) returned 1
[0197.901] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5704051e
[0197.901] GetClipRgn (hdc=0xf40107b3, hrgn=0x5704051e) returned 0
[0197.901] SelectClipRgn (hdc=0xf40107b3, hrgn=0x5c04053e) returned 2
[0197.901] DeleteObject (ho=0x5704051e) returned 1
[0197.901] DeleteObject (ho=0x5c04053e) returned 1
[0197.901] OffsetViewportOrgEx (in: hdc=0xf40107b3, x=0, y=0, lppt=0x232af4c | out: lppt=0x232af4c) returned 1
[0197.901] DrawThemeParentBackground () returned 0x0
[0197.901] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0197.901] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0197.901] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0197.901] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0197.902] GetSystemMetrics (nIndex=42) returned 0
[0197.902] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0197.902] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0197.902] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0197.902] GetCurrentObject (hdc=0xf40107b3, type=0x1) returned 0xb00017
[0197.902] GetCurrentObject (hdc=0xf40107b3, type=0x2) returned 0x900010
[0197.902] GetCurrentObject (hdc=0xf40107b3, type=0x7) returned 0x1e0507b9
[0197.902] GetCurrentObject (hdc=0xf40107b3, type=0x6) returned 0x8a01c2
[0197.902] SaveDC (hdc=0xf40107b3) returned 2
[0197.902] GetNearestColor (hdc=0xf40107b3, color=0xff) returned 0xff
[0197.902] CreateSolidBrush (color=0xff) returned 0x10078d
[0197.902] FillRect (hDC=0xf40107b3, lprc=0x53e120, hbr=0x10078d) returned 1
[0197.902] DeleteObject (ho=0x10078d) returned 1
[0197.902] RestoreDC (hdc=0xf40107b3, nSavedDC=-1) returned 1
[0197.903] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0197.903] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0197.903] GetSystemMetrics (nIndex=42) returned 0
[0197.903] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0197.903] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0197.903] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0197.903] GetCurrentObject (hdc=0xf40107b3, type=0x1) returned 0xb00017
[0197.903] GetCurrentObject (hdc=0xf40107b3, type=0x2) returned 0x900010
[0197.903] GetCurrentObject (hdc=0xf40107b3, type=0x7) returned 0x1e0507b9
[0197.903] GetCurrentObject (hdc=0xf40107b3, type=0x6) returned 0x8a01c2
[0197.903] SaveDC (hdc=0xf40107b3) returned 2
[0197.903] GetNearestColor (hdc=0xf40107b3, color=0xff) returned 0xff
[0197.904] CreateSolidBrush (color=0xff) returned 0x110078d
[0197.904] FillRect (hDC=0xf40107b3, lprc=0x53e0c0, hbr=0x110078d) returned 1
[0197.904] DeleteObject (ho=0x110078d) returned 1
[0197.904] RestoreDC (hdc=0xf40107b3, nSavedDC=-1) returned 1
[0197.904] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0197.904] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0197.904] GetSystemMetrics (nIndex=42) returned 0
[0197.904] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0197.904] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0197.904] RestoreDC (hdc=0xf40107b3, nSavedDC=-1) returned 1
[0197.904] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf40107b3) returned 0x0
[0197.904] IsAppThemed () returned 0x1
[0197.905] GetThemeAppProperties () returned 0x3
[0197.905] GetThemeAppProperties () returned 0x3
[0197.905] IsAppThemed () returned 0x1
[0197.905] GetThemeAppProperties () returned 0x3
[0197.905] GetThemeAppProperties () returned 0x3
[0197.905] IsThemePartDefined () returned 0x1
[0197.905] GdipCreateRegion (region=0x53e640) returned 0x0
[0197.905] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0197.905] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0197.905] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0197.905] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0197.905] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0197.905] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0197.905] LocalFree (hMem=0x89ea88) returned 0x0
[0197.905] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0197.905] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0197.906] LocalFree (hMem=0x89ea88) returned 0x0
[0197.906] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0197.906] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0197.906] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0197.906] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0197.906] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0197.906] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0197.906] GetCurrentObject (hdc=0xf40107b3, type=0x1) returned 0xb00017
[0197.906] GetCurrentObject (hdc=0xf40107b3, type=0x2) returned 0x900010
[0197.906] GetCurrentObject (hdc=0xf40107b3, type=0x7) returned 0x1e0507b9
[0197.906] GetCurrentObject (hdc=0xf40107b3, type=0x6) returned 0x8a01c2
[0197.906] SaveDC (hdc=0xf40107b3) returned 1
[0197.906] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d04053e
[0197.906] GetClipRgn (hdc=0xf40107b3, hrgn=0x5d04053e) returned 0
[0197.906] SelectClipRgn (hdc=0xf40107b3, hrgn=0x5904051e) returned 2
[0197.906] DeleteObject (ho=0x5d04053e) returned 1
[0197.907] DeleteObject (ho=0x5904051e) returned 1
[0197.907] OffsetViewportOrgEx (in: hdc=0xf40107b3, x=0, y=0, lppt=0x232be28 | out: lppt=0x232be28) returned 1
[0197.907] IsAppThemed () returned 0x1
[0197.907] GetThemeAppProperties () returned 0x3
[0197.907] GetThemeAppProperties () returned 0x3
[0197.907] DrawThemeBackground () returned 0x0
[0197.907] RestoreDC (hdc=0xf40107b3, nSavedDC=-1) returned 1
[0197.907] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf40107b3) returned 0x0
[0197.907] GdipCreateRegion (region=0x53e644) returned 0x0
[0197.907] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0197.908] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0197.908] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0197.908] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0197.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0197.908] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0197.908] LocalFree (hMem=0x89eee8) returned 0x0
[0197.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0197.908] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0197.908] LocalFree (hMem=0x89ea88) returned 0x0
[0197.908] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0197.908] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0197.908] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0197.908] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0197.908] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0197.908] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0197.908] GetCurrentObject (hdc=0xf40107b3, type=0x1) returned 0xb00017
[0197.908] GetCurrentObject (hdc=0xf40107b3, type=0x2) returned 0x900010
[0197.908] GetCurrentObject (hdc=0xf40107b3, type=0x7) returned 0x1e0507b9
[0197.909] GetCurrentObject (hdc=0xf40107b3, type=0x6) returned 0x8a01c2
[0197.909] SaveDC (hdc=0xf40107b3) returned 1
[0197.909] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a04051e
[0197.909] GetClipRgn (hdc=0xf40107b3, hrgn=0x5a04051e) returned 0
[0197.909] SelectClipRgn (hdc=0xf40107b3, hrgn=0x5e04053e) returned 2
[0197.909] DeleteObject (ho=0x5a04051e) returned 1
[0197.909] DeleteObject (ho=0x5e04053e) returned 1
[0197.909] OffsetViewportOrgEx (in: hdc=0xf40107b3, x=0, y=0, lppt=0x232c0fc | out: lppt=0x232c0fc) returned 1
[0197.909] IsAppThemed () returned 0x1
[0197.909] GetThemeAppProperties () returned 0x3
[0197.909] GetThemeAppProperties () returned 0x3
[0197.909] GetThemeBackgroundContentRect () returned 0x0
[0197.909] RestoreDC (hdc=0xf40107b3, nSavedDC=-1) returned 1
[0197.909] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf40107b3) returned 0x0
[0197.910] IsAppThemed () returned 0x1
[0197.910] GetThemeAppProperties () returned 0x3
[0197.910] GetThemeAppProperties () returned 0x3
[0197.910] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0197.910] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0197.910] GetCurrentObject (hdc=0xf40107b3, type=0x1) returned 0xb00017
[0197.910] GetCurrentObject (hdc=0xf40107b3, type=0x2) returned 0x900010
[0197.910] GetCurrentObject (hdc=0xf40107b3, type=0x7) returned 0x1e0507b9
[0197.910] GetCurrentObject (hdc=0xf40107b3, type=0x6) returned 0x8a01c2
[0197.910] SaveDC (hdc=0xf40107b3) returned 1
[0197.910] GetTextAlign (hdc=0xf40107b3) returned 0x0
[0197.910] GetTextColor (hdc=0xf40107b3) returned 0x0
[0197.910] GetCurrentObject (hdc=0xf40107b3, type=0x6) returned 0x8a01c2
[0197.910] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0197.911] SelectObject (hdc=0xf40107b3, h=0x450a0799) returned 0x8a01c2
[0197.911] GetBkMode (hdc=0xf40107b3) returned 2
[0197.911] SetBkMode (hdc=0xf40107b3, mode=1) returned 2
[0197.911] DrawTextExW (in: hdc=0xf40107b3, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x232c560 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0197.911] DrawTextExW (in: hdc=0xf40107b3, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x232c560 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0197.912] RestoreDC (hdc=0xf40107b3, nSavedDC=-1) returned 1
[0197.912] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf40107b3) returned 0x0
[0197.912] GetFocus () returned 0x202c6
[0197.912] IsAppThemed () returned 0x1
[0197.912] GetThemeAppProperties () returned 0x3
[0197.912] GetThemeAppProperties () returned 0x3
[0197.912] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0197.912] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xf40107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0197.914] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf40107b3) returned 0x0
[0197.914] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0197.914] SelectObject (hdc=0xf40107b3, h=0x85000f) returned 0x1e0507b9
[0197.914] DeleteDC (hdc=0xf40107b3) returned 1
[0197.914] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0197.914] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0197.914] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0197.914] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0197.914] WaitMessage () returned 1
[0197.992] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0197.992] IsWindowUnicode (hWnd=0x202c6) returned 1
[0197.992] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0197.992] TranslateMessage (lpMsg=0x53eef8) returned 0
[0197.992] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0197.992] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0197.992] IsWindowUnicode (hWnd=0x202c6) returned 1
[0197.992] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0197.993] TranslateMessage (lpMsg=0x53eef8) returned 0
[0197.993] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0197.993] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x1b0039) returned 0x0
[0197.993] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0197.993] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0197.993] WaitMessage () returned 1
[0198.117] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0198.117] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a30229) returned 0x1
[0198.117] IsWindowUnicode (hWnd=0x202c6) returned 1
[0198.117] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0198.117] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a30229) returned 0x1
[0198.118] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0198.118] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13601d3) returned 0x0
[0198.118] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0198.118] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0198.118] SetCursor (hCursor=0x10003) returned 0x10003
[0198.118] TranslateMessage (lpMsg=0x53eef8) returned 0
[0198.118] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0198.118] GetKeyState (nVirtKey=1) returned -128
[0198.118] GetKeyState (nVirtKey=2) returned 0
[0198.118] GetKeyState (nVirtKey=4) returned 0
[0198.118] GetKeyState (nVirtKey=5) returned 0
[0198.118] GetKeyState (nVirtKey=6) returned 0
[0198.118] IsWindowVisible (hWnd=0x202c6) returned 1
[0198.119] IsWindowEnabled (hWnd=0x202c6) returned 1
[0198.119] SetFocus (hWnd=0x202c6) returned 0x202c6
[0198.119] GetFocus () returned 0x202c6
[0198.119] GetFocus () returned 0x202c6
[0198.119] GetFocus () returned 0x202c6
[0198.119] GetKeyState (nVirtKey=1) returned -128
[0198.119] GetKeyState (nVirtKey=2) returned 0
[0198.119] GetKeyState (nVirtKey=4) returned 0
[0198.119] GetKeyState (nVirtKey=5) returned 0
[0198.119] GetKeyState (nVirtKey=6) returned 0
[0198.119] GetCapture () returned 0x0
[0198.119] SetCapture (hWnd=0x202c6) returned 0x0
[0198.119] GetKeyState (nVirtKey=1) returned -128
[0198.119] GetKeyState (nVirtKey=2) returned 0
[0198.119] GetKeyState (nVirtKey=4) returned 0
[0198.119] GetKeyState (nVirtKey=5) returned 0
[0198.119] GetKeyState (nVirtKey=6) returned 0
[0198.120] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0198.120] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0198.120] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0198.120] IsWindowUnicode (hWnd=0x202c6) returned 1
[0198.120] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0198.120] TranslateMessage (lpMsg=0x53eef8) returned 0
[0198.120] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0198.120] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x232c6e4, cPoints=0x1 | out: lpPoints=0x232c6e4) returned 25690608
[0198.120] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0198.120] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0198.120] UpdateWindow (hWnd=0x202c6) returned 1
[0198.121] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x8b010786
[0198.121] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0198.121] CreateCompatibleDC (hdc=0x8b010786) returned 0xf50107b3
[0198.121] SelectObject (hdc=0xf50107b3, h=0x1e0507b9) returned 0x85000f
[0198.121] GdipCreateFromHDC (hdc=0xf50107b3, graphics=0x53e5f0) returned 0x0
[0198.121] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0198.121] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0198.121] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0198.121] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0198.121] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0198.121] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0198.122] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0198.122] LocalFree (hMem=0x89eee8) returned 0x0
[0198.122] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0198.122] GdipCreateRegion (region=0x53e638) returned 0x0
[0198.122] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.122] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0198.122] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0198.122] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd090dbd) returned 0x0
[0198.122] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.122] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0198.122] GetCurrentObject (hdc=0xf50107b3, type=0x1) returned 0xb00017
[0198.122] GetCurrentObject (hdc=0xf50107b3, type=0x2) returned 0x900010
[0198.122] GetCurrentObject (hdc=0xf50107b3, type=0x7) returned 0x1e0507b9
[0198.122] GetCurrentObject (hdc=0xf50107b3, type=0x6) returned 0x8a01c2
[0198.122] SaveDC (hdc=0xf50107b3) returned 1
[0198.122] GetNearestColor (hdc=0xf50107b3, color=0xff) returned 0xff
[0198.123] GetNearestColor (hdc=0xf50107b3, color=0x55) returned 0x55
[0198.123] GetNearestColor (hdc=0xf50107b3, color=0x0) returned 0x0
[0198.123] GetNearestColor (hdc=0xf50107b3, color=0x55) returned 0x55
[0198.123] GetNearestColor (hdc=0xf50107b3, color=0x0) returned 0x0
[0198.123] GetNearestColor (hdc=0xf50107b3, color=0x8080ff) returned 0x8080ff
[0198.123] GetNearestColor (hdc=0xf50107b3, color=0x7373e5) returned 0x7373e5
[0198.123] GetNearestColor (hdc=0xf50107b3, color=0xe5) returned 0xe5
[0198.123] GetNearestColor (hdc=0xf50107b3, color=0x0) returned 0x0
[0198.123] RestoreDC (hdc=0xf50107b3, nSavedDC=-1) returned 1
[0198.123] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf50107b3) returned 0x0
[0198.123] IsAppThemed () returned 0x1
[0198.124] GetThemeAppProperties () returned 0x3
[0198.124] GetThemeAppProperties () returned 0x3
[0198.124] IsAppThemed () returned 0x1
[0198.124] GetThemeAppProperties () returned 0x3
[0198.124] GetThemeAppProperties () returned 0x3
[0198.124] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x232ce00 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0198.124] IsAppThemed () returned 0x1
[0198.124] GetThemeAppProperties () returned 0x3
[0198.124] GetThemeAppProperties () returned 0x3
[0198.124] IsAppThemed () returned 0x1
[0198.124] GetThemeAppProperties () returned 0x3
[0198.124] GetThemeAppProperties () returned 0x3
[0198.124] IsAppThemed () returned 0x1
[0198.125] GetThemeAppProperties () returned 0x3
[0198.125] GetThemeAppProperties () returned 0x3
[0198.125] IsAppThemed () returned 0x1
[0198.125] GetThemeAppProperties () returned 0x3
[0198.125] GetThemeAppProperties () returned 0x3
[0198.125] IsThemePartDefined () returned 0x1
[0198.125] IsAppThemed () returned 0x1
[0198.125] GetThemeAppProperties () returned 0x3
[0198.125] GetThemeAppProperties () returned 0x3
[0198.125] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0198.125] IsAppThemed () returned 0x1
[0198.125] GetThemeAppProperties () returned 0x3
[0198.125] GetThemeAppProperties () returned 0x3
[0198.125] IsAppThemed () returned 0x1
[0198.125] GetThemeAppProperties () returned 0x3
[0198.125] GetThemeAppProperties () returned 0x3
[0198.125] IsThemePartDefined () returned 0x1
[0198.125] GdipCreateRegion (region=0x53e354) returned 0x0
[0198.125] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.125] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0198.125] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0198.126] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0198.126] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0198.126] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0198.126] LocalFree (hMem=0x89ec80) returned 0x0
[0198.126] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0198.126] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0198.126] LocalFree (hMem=0x89eee8) returned 0x0
[0198.126] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0198.126] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0198.126] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0198.126] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0198.126] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.126] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0198.126] GetCurrentObject (hdc=0xf50107b3, type=0x1) returned 0xb00017
[0198.126] GetCurrentObject (hdc=0xf50107b3, type=0x2) returned 0x900010
[0198.126] GetCurrentObject (hdc=0xf50107b3, type=0x7) returned 0x1e0507b9
[0198.127] GetCurrentObject (hdc=0xf50107b3, type=0x6) returned 0x8a01c2
[0198.127] SaveDC (hdc=0xf50107b3) returned 1
[0198.127] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f04053e
[0198.127] GetClipRgn (hdc=0xf50107b3, hrgn=0x5f04053e) returned 0
[0198.127] SelectClipRgn (hdc=0xf50107b3, hrgn=0x5e04051e) returned 2
[0198.127] DeleteObject (ho=0x5f04053e) returned 1
[0198.127] DeleteObject (ho=0x5e04051e) returned 1
[0198.127] OffsetViewportOrgEx (in: hdc=0xf50107b3, x=0, y=0, lppt=0x232d4b0 | out: lppt=0x232d4b0) returned 1
[0198.127] DrawThemeParentBackground () returned 0x0
[0198.127] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0198.127] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0198.127] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0198.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0198.128] GetSystemMetrics (nIndex=42) returned 0
[0198.128] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0198.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0198.128] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0198.128] GetCurrentObject (hdc=0xf50107b3, type=0x1) returned 0xb00017
[0198.128] GetCurrentObject (hdc=0xf50107b3, type=0x2) returned 0x900010
[0198.128] GetCurrentObject (hdc=0xf50107b3, type=0x7) returned 0x1e0507b9
[0198.128] GetCurrentObject (hdc=0xf50107b3, type=0x6) returned 0x8a01c2
[0198.128] SaveDC (hdc=0xf50107b3) returned 2
[0198.128] GetNearestColor (hdc=0xf50107b3, color=0xff) returned 0xff
[0198.128] CreateSolidBrush (color=0xff) returned 0x210078d
[0198.128] FillRect (hDC=0xf50107b3, lprc=0x53ddb8, hbr=0x210078d) returned 1
[0198.128] DeleteObject (ho=0x210078d) returned 1
[0198.128] RestoreDC (hdc=0xf50107b3, nSavedDC=-1) returned 1
[0198.129] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0198.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0198.129] GetSystemMetrics (nIndex=42) returned 0
[0198.129] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0198.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0198.129] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0198.129] GetCurrentObject (hdc=0xf50107b3, type=0x1) returned 0xb00017
[0198.129] GetCurrentObject (hdc=0xf50107b3, type=0x2) returned 0x900010
[0198.129] GetCurrentObject (hdc=0xf50107b3, type=0x7) returned 0x1e0507b9
[0198.129] GetCurrentObject (hdc=0xf50107b3, type=0x6) returned 0x8a01c2
[0198.129] SaveDC (hdc=0xf50107b3) returned 2
[0198.129] GetNearestColor (hdc=0xf50107b3, color=0xff) returned 0xff
[0198.129] CreateSolidBrush (color=0xff) returned 0x310078d
[0198.129] FillRect (hDC=0xf50107b3, lprc=0x53dd58, hbr=0x310078d) returned 1
[0198.129] DeleteObject (ho=0x310078d) returned 1
[0198.130] RestoreDC (hdc=0xf50107b3, nSavedDC=-1) returned 1
[0198.130] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0198.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0198.130] GetSystemMetrics (nIndex=42) returned 0
[0198.130] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0198.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0198.130] RestoreDC (hdc=0xf50107b3, nSavedDC=-1) returned 1
[0198.130] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf50107b3) returned 0x0
[0198.130] IsAppThemed () returned 0x1
[0198.130] GetThemeAppProperties () returned 0x3
[0198.130] GetThemeAppProperties () returned 0x3
[0198.130] IsAppThemed () returned 0x1
[0198.132] GetThemeAppProperties () returned 0x3
[0198.132] GetThemeAppProperties () returned 0x3
[0198.132] IsThemePartDefined () returned 0x1
[0198.132] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0198.132] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.132] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0198.132] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0198.132] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0198.132] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0198.132] LocalFree (hMem=0x89eee8) returned 0x0
[0198.132] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0198.132] LocalFree (hMem=0x89ee08) returned 0x0
[0198.132] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0198.132] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0198.132] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0198.132] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0198.132] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.133] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0198.133] GetCurrentObject (hdc=0xf50107b3, type=0x1) returned 0xb00017
[0198.133] GetCurrentObject (hdc=0xf50107b3, type=0x2) returned 0x900010
[0198.133] GetCurrentObject (hdc=0xf50107b3, type=0x7) returned 0x1e0507b9
[0198.133] GetCurrentObject (hdc=0xf50107b3, type=0x6) returned 0x8a01c2
[0198.133] SaveDC (hdc=0xf50107b3) returned 1
[0198.133] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f04051e
[0198.133] GetClipRgn (hdc=0xf50107b3, hrgn=0x5f04051e) returned 0
[0198.133] SelectClipRgn (hdc=0xf50107b3, hrgn=0x6104053e) returned 2
[0198.133] DeleteObject (ho=0x5f04051e) returned 1
[0198.133] DeleteObject (ho=0x6104053e) returned 1
[0198.133] OffsetViewportOrgEx (in: hdc=0xf50107b3, x=0, y=0, lppt=0x232dd14 | out: lppt=0x232dd14) returned 1
[0198.133] IsAppThemed () returned 0x1
[0198.133] GetThemeAppProperties () returned 0x3
[0198.133] GetThemeAppProperties () returned 0x3
[0198.133] DrawThemeBackground () returned 0x0
[0198.134] RestoreDC (hdc=0xf50107b3, nSavedDC=-1) returned 1
[0198.134] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf50107b3) returned 0x0
[0198.134] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0198.134] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.134] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0198.134] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0198.134] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0198.134] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0198.134] LocalFree (hMem=0x89eee8) returned 0x0
[0198.134] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0198.134] LocalFree (hMem=0x89eee8) returned 0x0
[0198.134] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0198.134] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0198.134] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0198.134] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0198.134] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.134] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0198.134] GetCurrentObject (hdc=0xf50107b3, type=0x1) returned 0xb00017
[0198.134] GetCurrentObject (hdc=0xf50107b3, type=0x2) returned 0x900010
[0198.135] GetCurrentObject (hdc=0xf50107b3, type=0x7) returned 0x1e0507b9
[0198.135] GetCurrentObject (hdc=0xf50107b3, type=0x6) returned 0x8a01c2
[0198.135] SaveDC (hdc=0xf50107b3) returned 1
[0198.135] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6204053e
[0198.135] GetClipRgn (hdc=0xf50107b3, hrgn=0x6204053e) returned 0
[0198.135] SelectClipRgn (hdc=0xf50107b3, hrgn=0x6004051e) returned 2
[0198.135] DeleteObject (ho=0x6204053e) returned 1
[0198.135] DeleteObject (ho=0x6004051e) returned 1
[0198.135] OffsetViewportOrgEx (in: hdc=0xf50107b3, x=0, y=0, lppt=0x232dfe8 | out: lppt=0x232dfe8) returned 1
[0198.135] IsAppThemed () returned 0x1
[0198.135] GetThemeAppProperties () returned 0x3
[0198.135] GetThemeAppProperties () returned 0x3
[0198.135] GetThemeBackgroundContentRect () returned 0x0
[0198.135] RestoreDC (hdc=0xf50107b3, nSavedDC=-1) returned 1
[0198.135] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf50107b3) returned 0x0
[0198.135] IsAppThemed () returned 0x1
[0198.135] GetThemeAppProperties () returned 0x3
[0198.136] GetThemeAppProperties () returned 0x3
[0198.136] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0198.136] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0198.136] GetCurrentObject (hdc=0xf50107b3, type=0x1) returned 0xb00017
[0198.136] GetCurrentObject (hdc=0xf50107b3, type=0x2) returned 0x900010
[0198.136] GetCurrentObject (hdc=0xf50107b3, type=0x7) returned 0x1e0507b9
[0198.136] GetCurrentObject (hdc=0xf50107b3, type=0x6) returned 0x8a01c2
[0198.136] SaveDC (hdc=0xf50107b3) returned 1
[0198.136] GetTextAlign (hdc=0xf50107b3) returned 0x0
[0198.136] GetTextColor (hdc=0xf50107b3) returned 0x0
[0198.136] GetCurrentObject (hdc=0xf50107b3, type=0x6) returned 0x8a01c2
[0198.136] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0198.136] SelectObject (hdc=0xf50107b3, h=0x450a0799) returned 0x8a01c2
[0198.136] GetBkMode (hdc=0xf50107b3) returned 2
[0198.136] SetBkMode (hdc=0xf50107b3, mode=1) returned 2
[0198.137] DrawTextExW (in: hdc=0xf50107b3, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x232e388 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0198.137] DrawTextExW (in: hdc=0xf50107b3, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x232e388 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0198.137] RestoreDC (hdc=0xf50107b3, nSavedDC=-1) returned 1
[0198.137] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf50107b3) returned 0x0
[0198.137] GetFocus () returned 0x202c6
[0198.137] IsAppThemed () returned 0x1
[0198.138] GetThemeAppProperties () returned 0x3
[0198.138] GetThemeAppProperties () returned 0x3
[0198.138] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0198.138] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xf50107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0198.138] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf50107b3) returned 0x0
[0198.138] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0198.138] SelectObject (hdc=0xf50107b3, h=0x85000f) returned 0x1e0507b9
[0198.138] DeleteDC (hdc=0xf50107b3) returned 1
[0198.138] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0198.138] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0198.139] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x232e484, cPoints=0x1 | out: lpPoints=0x232e484) returned 25690608
[0198.139] WindowFromPoint (Point=0x229) returned 0x202c6
[0198.139] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a30229) returned 0x1
[0198.139] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0198.139] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0198.141] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.142] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0198.144] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.144] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0198.144] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.145] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0198.145] GetDC (hWnd=0x0) returned 0x60100ce
[0198.145] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e888) returned 0x0
[0198.145] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0198.145] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0198.146] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0198.146] GetSystemMetrics (nIndex=5) returned 1
[0198.146] GetSystemMetrics (nIndex=6) returned 1
[0198.146] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.147] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0198.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.147] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0198.215] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.215] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0198.216] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.216] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0198.216] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.216] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0198.216] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.216] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0198.217] GetSystemMetrics (nIndex=5) returned 1
[0198.217] GetSystemMetrics (nIndex=6) returned 1
[0198.217] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.217] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0198.217] GetSystemMetrics (nIndex=5) returned 1
[0198.217] GetSystemMetrics (nIndex=6) returned 1
[0198.217] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.217] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0198.218] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.218] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0198.218] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.218] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0198.219] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.219] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0198.219] GetSystemMetrics (nIndex=59) returned 1460
[0198.219] GetSystemMetrics (nIndex=60) returned 920
[0198.219] GetSystemMetrics (nIndex=34) returned 136
[0198.219] GetSystemMetrics (nIndex=35) returned 39
[0198.219] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.219] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0198.219] GetCurrentThreadId () returned 0x11d0
[0198.219] GetCurrentThreadId () returned 0x11d0
[0198.219] GetCurrentThreadId () returned 0x11d0
[0198.219] GetCurrentThreadId () returned 0x11d0
[0198.219] GetCurrentThreadId () returned 0x11d0
[0198.219] GetCurrentThreadId () returned 0x11d0
[0198.219] GetCurrentThreadId () returned 0x11d0
[0198.219] GetCurrentThreadId () returned 0x11d0
[0198.220] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.220] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0198.220] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0198.220] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0198.220] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.220] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0198.221] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.221] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0198.221] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x202de
[0198.223] SetWindowLongW (hWnd=0x202de, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0198.223] GetWindowLongW (hWnd=0x202de, nIndex=-4) returned 1950089536
[0198.223] SetWindowLongW (hWnd=0x202de, nIndex=-4, dwNewLong=79644942) returned 1950089536
[0198.223] GetWindowLongW (hWnd=0x202de, nIndex=-4) returned 79644942
[0198.223] GetWindowLongW (hWnd=0x202de, nIndex=-16) returned 113311744
[0198.224] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202de, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0198.224] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202de, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0198.225] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202de, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0198.226] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202de, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0198.226] GetClientRect (in: hWnd=0x202de, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0198.226] GetWindowRect (in: hWnd=0x202de, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0198.226] SetWindowTextW (hWnd=0x202de, lpString="WindowsFormsParkingWindow") returned 1
[0198.226] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202de, Msg=0xc, wParam=0x0, lParam=0x2322740) returned 0x1
[0198.227] GetParent (hWnd=0x202de) returned 0x0
[0198.227] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0198.227] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x202de, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x11013e
[0198.228] SetWindowLongW (hWnd=0x11013e, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0198.228] GetWindowLongW (hWnd=0x11013e, nIndex=-4) returned 1868147648
[0198.229] SetWindowLongW (hWnd=0x11013e, nIndex=-4, dwNewLong=79644862) returned 1868147648
[0198.229] GetWindowLongW (hWnd=0x11013e, nIndex=-4) returned 79644862
[0198.229] GetWindowLongW (hWnd=0x11013e, nIndex=-16) returned 1174405133
[0198.229] GetWindowLongW (hWnd=0x11013e, nIndex=-12) returned 0
[0198.229] SetWindowLongW (hWnd=0x11013e, nIndex=-12, dwNewLong=1114430) returned 0
[0198.229] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0198.230] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0198.230] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0198.231] GetClientRect (in: hWnd=0x11013e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0198.231] GetWindowRect (in: hWnd=0x11013e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0198.231] GetParent (hWnd=0x11013e) returned 0x202de
[0198.231] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202de, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0198.231] SetWindowTextW (hWnd=0x11013e, lpString="Enter password: ") returned 1
[0198.231] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0xc, wParam=0x0, lParam=0x2333718) returned 0x1
[0198.232] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0198.232] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0198.232] GetClientRect (in: hWnd=0x11013e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0198.232] GetWindowRect (in: hWnd=0x11013e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0198.232] GetParent (hWnd=0x11013e) returned 0x202de
[0198.232] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202de, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0198.232] SendMessageW (hWnd=0x11013e, Msg=0x2210, wParam=0x13e0001, lParam=0x11013e) returned 0x0
[0198.232] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x2210, wParam=0x13e0001, lParam=0x11013e) returned 0x0
[0198.232] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0198.233] GetParent (hWnd=0x11013e) returned 0x202de
[0198.233] GdipCreateFromHWND (hwnd=0x11013e, graphics=0x53e994) returned 0x0
[0198.233] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0198.233] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0198.233] GetProcessWindowStation () returned 0x13c
[0198.234] GetCapture () returned 0x202c6
[0198.234] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0198.234] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0198.234] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0198.234] ReleaseCapture () returned 1
[0198.234] GetActiveWindow () returned 0x70036
[0198.234] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0198.235] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.235] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0198.235] GetCursorPos (in: lpPoint=0x233dfa4 | out: lpPoint=0x233dfa4*(x=553, y=419)) returned 1
[0198.235] MonitorFromPoint (pt=0x229, dwFlags=0x1a3) returned 0x10001
[0198.235] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0198.235] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xf80107b3
[0198.236] GetDeviceCaps (hdc=0xf80107b3, index=12) returned 32
[0198.236] GetDeviceCaps (hdc=0xf80107b3, index=14) returned 1
[0198.236] DeleteDC (hdc=0xf80107b3) returned 1
[0198.236] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0198.236] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0198.236] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xc02c8
[0198.237] SetWindowLongW (hWnd=0xc02c8, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0198.237] GetWindowLongW (hWnd=0xc02c8, nIndex=-4) returned 1950089536
[0198.238] SetWindowLongW (hWnd=0xc02c8, nIndex=-4, dwNewLong=79644902) returned 1950089536
[0198.238] GetWindowLongW (hWnd=0xc02c8, nIndex=-4) returned 79644902
[0198.238] GetWindowLongW (hWnd=0xc02c8, nIndex=-16) returned 113770496
[0198.238] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0198.239] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0198.241] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0198.241] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0198.241] GetWindowRect (in: hWnd=0xc02c8, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0198.241] SetWindowTextW (hWnd=0xc02c8, lpString="Ransomware") returned 1
[0198.241] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xc, wParam=0x0, lParam=0x232e54c) returned 0x1
[0198.242] GetStartupInfoW (in: lpStartupInfo=0x233e2e0 | out: lpStartupInfo=0x233e2e0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0198.244] GetParent (hWnd=0xc02c8) returned 0x0
[0198.244] SetWindowLongW (hWnd=0xc02c8, nIndex=-8, dwNewLong=0) returned 0
[0198.245] SendMessageW (hWnd=0xc02c8, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0198.245] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0198.245] SendMessageW (hWnd=0xc02c8, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0198.245] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0198.246] GetSystemMenu (hWnd=0xc02c8, bRevert=0) returned 0x1d01d9
[0198.247] GetWindowPlacement (in: hWnd=0xc02c8, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0198.247] EnableMenuItem (hMenu=0x1d01d9, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0198.247] EnableMenuItem (hMenu=0x1d01d9, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0198.247] EnableMenuItem (hMenu=0x1d01d9, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0198.247] EnableMenuItem (hMenu=0x1d01d9, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0198.247] EnableMenuItem (hMenu=0x1d01d9, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0198.247] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0198.247] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0198.247] GetWindowRect (in: hWnd=0xc02c8, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0198.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.248] GetWindowLongW (hWnd=0xc02c8, nIndex=-16) returned 113770496
[0198.248] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.248] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.248] GetSystemMetrics (nIndex=42) returned 0
[0198.248] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.248] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0198.248] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.248] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.248] GetSystemMetrics (nIndex=42) returned 0
[0198.248] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.248] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0198.248] GetCursorPos (in: lpPoint=0x233e454 | out: lpPoint=0x233e454*(x=553, y=419)) returned 1
[0198.248] MonitorFromPoint (pt=0x229, dwFlags=0x1a3) returned 0x10001
[0198.249] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0198.249] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xfc0107b3
[0198.249] GetDeviceCaps (hdc=0xfc0107b3, index=12) returned 32
[0198.249] GetDeviceCaps (hdc=0xfc0107b3, index=14) returned 1
[0198.249] DeleteDC (hdc=0xfc0107b3) returned 1
[0198.249] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0198.249] GetWindowLongW (hWnd=0xc02c8, nIndex=-16) returned 113770496
[0198.249] GetWindowLongW (hWnd=0xc02c8, nIndex=-20) returned 327937
[0198.249] SetWindowLongW (hWnd=0xc02c8, nIndex=-16, dwNewLong=46661632) returned 113770496
[0198.249] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0198.250] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0198.250] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0198.251] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0198.251] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0198.251] SetWindowLongW (hWnd=0xc02c8, nIndex=-20, dwNewLong=327681) returned 327937
[0198.251] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0198.252] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0198.252] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0198.253] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0198.253] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0198.253] SetWindowPos (hWnd=0xc02c8, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0198.253] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0198.253] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0198.254] GetWindowPlacement (in: hWnd=0xc02c8, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0198.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0198.254] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0198.254] GetWindowRect (in: hWnd=0xc02c8, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0198.255] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0198.255] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0198.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0198.256] RedrawWindow (hWnd=0xc02c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0198.256] GetSystemMenu (hWnd=0xc02c8, bRevert=0) returned 0x1d01d9
[0198.256] GetWindowPlacement (in: hWnd=0xc02c8, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0198.256] EnableMenuItem (hMenu=0x1d01d9, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0198.256] EnableMenuItem (hMenu=0x1d01d9, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0198.256] EnableMenuItem (hMenu=0x1d01d9, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0198.257] EnableMenuItem (hMenu=0x1d01d9, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0198.257] EnableMenuItem (hMenu=0x1d01d9, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0198.257] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0198.257] GetWindowLongW (hWnd=0xc02c8, nIndex=-8) returned 0
[0198.257] SetWindowLongW (hWnd=0xc02c8, nIndex=-8, dwNewLong=458806) returned 0
[0198.258] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0198.258] GetProcessWindowStation () returned 0x13c
[0198.259] GetCurrentThreadId () returned 0x11d0
[0198.259] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4aee, lParam=0x0) returned 1
[0198.259] IsWindowVisible (hWnd=0xc02c8) returned 0
[0198.259] IsWindowVisible (hWnd=0x70036) returned 1
[0198.259] IsWindowEnabled (hWnd=0x70036) returned 1
[0198.259] IsWindowVisible (hWnd=0x602b6) returned 0
[0198.259] IsWindowVisible (hWnd=0x901f8) returned 0
[0198.259] IsWindowVisible (hWnd=0x202d0) returned 0
[0198.260] IsWindowVisible (hWnd=0x202d4) returned 0
[0198.260] GetActiveWindow () returned 0x70036
[0198.260] GetFocus () returned 0x202c6
[0198.260] IsWindow (hWnd=0x70036) returned 1
[0198.260] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0198.260] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0198.262] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0198.262] GetWindowLongW (hWnd=0xc02c8, nIndex=-8) returned 458806
[0198.262] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0198.262] GetCurrentThreadId () returned 0x11d0
[0198.262] GetWindowLongW (hWnd=0xc02c8, nIndex=-8) returned 458806
[0198.262] IsWindowEnabled (hWnd=0x70036) returned 0
[0198.262] IsWindowEnabled (hWnd=0xc02c8) returned 1
[0198.262] ShowWindow (hWnd=0xc02c8, nCmdShow=5) returned 0
[0198.262] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0198.262] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0198.262] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.263] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0198.263] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0xc02c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x902b4
[0198.264] SetWindowLongW (hWnd=0x902b4, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0198.264] GetWindowLongW (hWnd=0x902b4, nIndex=-4) returned 1868026976
[0198.264] SetWindowLongW (hWnd=0x902b4, nIndex=-4, dwNewLong=79645222) returned 1868026976
[0198.264] GetWindowLongW (hWnd=0x902b4, nIndex=-4) returned 79645222
[0198.264] GetWindowLongW (hWnd=0x902b4, nIndex=-16) returned 1174470848
[0198.265] GetWindowLongW (hWnd=0x902b4, nIndex=-12) returned 0
[0198.265] SetWindowLongW (hWnd=0x902b4, nIndex=-12, dwNewLong=590516) returned 0
[0198.265] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0198.266] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0198.266] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0198.268] SendMessageW (hWnd=0x902b4, Msg=0x2055, wParam=0x902b4, lParam=0x3) returned 0x2
[0198.268] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0198.268] GetWindow (hWnd=0x902b4, uCmd=0x3) returned 0x0
[0198.268] GetClientRect (in: hWnd=0x902b4, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0198.268] GetWindowRect (in: hWnd=0x902b4, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0198.268] GetParent (hWnd=0x902b4) returned 0xc02c8
[0198.268] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02c8, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0198.268] SendMessageW (hWnd=0x902b4, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0198.268] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0198.269] SendMessageW (hWnd=0x902b4, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0198.269] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0198.269] GetSystemMetrics (nIndex=5) returned 1
[0198.269] GetSystemMetrics (nIndex=6) returned 1
[0198.269] SendMessageW (hWnd=0x902b4, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0198.269] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0198.269] SendMessageW (hWnd=0x902b4, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0198.269] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0198.270] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0198.270] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0198.270] GetClientRect (in: hWnd=0x902b4, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0198.270] GetWindowRect (in: hWnd=0x902b4, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0198.270] GetParent (hWnd=0x902b4) returned 0xc02c8
[0198.270] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02c8, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0198.270] SendMessageW (hWnd=0x902b4, Msg=0x2210, wParam=0x2b40001, lParam=0x902b4) returned 0x0
[0198.270] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x2210, wParam=0x2b40001, lParam=0x902b4) returned 0x0
[0198.271] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0198.271] GetParent (hWnd=0x902b4) returned 0xc02c8
[0198.271] GetParent (hWnd=0x11013e) returned 0x202de
[0198.271] SetParent (hWndChild=0x11013e, hWndNewParent=0xc02c8) returned 0x202de
[0198.272] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0198.273] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0198.273] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0198.273] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0198.273] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0198.273] GetClientRect (in: hWnd=0x11013e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0198.273] GetWindowRect (in: hWnd=0x11013e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0198.273] GetParent (hWnd=0x11013e) returned 0xc02c8
[0198.273] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02c8, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0198.273] GetClientRect (in: hWnd=0x11013e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0198.273] GetWindowRect (in: hWnd=0x11013e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0198.273] GetParent (hWnd=0x11013e) returned 0xc02c8
[0198.273] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02c8, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0198.273] GetParent (hWnd=0x11013e) returned 0xc02c8
[0198.273] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0198.274] GetWindow (hWnd=0x11013e, uCmd=0x3) returned 0x0
[0198.274] SetWindowPos (hWnd=0x11013e, hWndInsertAfter=0x902b4, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0198.274] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0198.274] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0198.274] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0198.275] GetClientRect (in: hWnd=0x11013e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0198.275] GetWindowRect (in: hWnd=0x11013e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0198.275] GetParent (hWnd=0x11013e) returned 0xc02c8
[0198.275] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02c8, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0198.275] GetParent (hWnd=0x11013e) returned 0xc02c8
[0198.275] GetWindow (hWnd=0x11013e, uCmd=0x3) returned 0x902b4
[0198.275] GetWindowThreadProcessId (in: hWnd=0x11013e, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0198.275] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0198.275] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.276] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0198.276] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0xc02c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xd02d6
[0198.276] SetWindowLongW (hWnd=0xd02d6, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0198.277] GetWindowLongW (hWnd=0xd02d6, nIndex=-4) returned 1868032000
[0198.277] SetWindowLongW (hWnd=0xd02d6, nIndex=-4, dwNewLong=79644982) returned 1868032000
[0198.277] GetWindowLongW (hWnd=0xd02d6, nIndex=-4) returned 79644982
[0198.277] GetWindowLongW (hWnd=0xd02d6, nIndex=-16) returned 1174470667
[0198.277] GetWindowLongW (hWnd=0xd02d6, nIndex=-12) returned 0
[0198.277] SetWindowLongW (hWnd=0xd02d6, nIndex=-12, dwNewLong=852694) returned 0
[0198.277] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0198.278] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0198.278] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0198.279] SendMessageW (hWnd=0xd02d6, Msg=0x2055, wParam=0xd02d6, lParam=0x3) returned 0x2
[0198.279] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0198.279] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0198.279] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0198.279] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0198.279] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0198.280] RedrawWindow (hWnd=0x902b4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0198.280] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0198.280] RedrawWindow (hWnd=0x11013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0198.280] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0198.280] RedrawWindow (hWnd=0xd02d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0198.280] RedrawWindow (hWnd=0xc02c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0198.280] GetWindow (hWnd=0xd02d6, uCmd=0x3) returned 0x11013e
[0198.280] GetClientRect (in: hWnd=0xd02d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0198.280] GetWindowRect (in: hWnd=0xd02d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0198.280] GetParent (hWnd=0xd02d6) returned 0xc02c8
[0198.280] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02c8, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0198.281] SetWindowTextW (hWnd=0xd02d6, lpString="OK") returned 1
[0198.281] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0xc, wParam=0x0, lParam=0x2334758) returned 0x1
[0198.281] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0198.281] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0198.281] GetClientRect (in: hWnd=0xd02d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0198.282] GetWindowRect (in: hWnd=0xd02d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0198.282] GetParent (hWnd=0xd02d6) returned 0xc02c8
[0198.282] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02c8, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0198.282] SendMessageW (hWnd=0xd02d6, Msg=0x2210, wParam=0x2d60001, lParam=0xd02d6) returned 0x0
[0198.282] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x2210, wParam=0x2d60001, lParam=0xd02d6) returned 0x0
[0198.282] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0198.283] GetParent (hWnd=0xd02d6) returned 0xc02c8
[0198.283] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0198.283] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.284] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0198.284] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0xc02c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xc02d2
[0198.284] SetWindowLongW (hWnd=0xc02d2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0198.284] GetWindowLongW (hWnd=0xc02d2, nIndex=-4) returned 1868032000
[0198.285] SetWindowLongW (hWnd=0xc02d2, nIndex=-4, dwNewLong=79645262) returned 1868032000
[0198.285] GetWindowLongW (hWnd=0xc02d2, nIndex=-4) returned 79645262
[0198.285] GetWindowLongW (hWnd=0xc02d2, nIndex=-16) returned 1174470667
[0198.285] GetWindowLongW (hWnd=0xc02d2, nIndex=-12) returned 0
[0198.285] SetWindowLongW (hWnd=0xc02d2, nIndex=-12, dwNewLong=787154) returned 0
[0198.285] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0198.286] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0198.286] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0198.287] SendMessageW (hWnd=0xc02d2, Msg=0x2055, wParam=0xc02d2, lParam=0x3) returned 0x2
[0198.287] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0198.287] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0198.287] GetWindow (hWnd=0xc02d2, uCmd=0x3) returned 0xd02d6
[0198.287] GetClientRect (in: hWnd=0xc02d2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0198.287] GetWindowRect (in: hWnd=0xc02d2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0198.287] GetParent (hWnd=0xc02d2) returned 0xc02c8
[0198.287] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02c8, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0198.288] SetWindowTextW (hWnd=0xc02d2, lpString="Cancel") returned 1
[0198.288] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0xc, wParam=0x0, lParam=0x2338fd4) returned 0x1
[0198.288] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0198.289] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0198.289] GetClientRect (in: hWnd=0xc02d2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0198.289] GetWindowRect (in: hWnd=0xc02d2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0198.289] GetParent (hWnd=0xc02d2) returned 0xc02c8
[0198.289] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02c8, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0198.289] SendMessageW (hWnd=0xc02d2, Msg=0x2210, wParam=0x2d20001, lParam=0xc02d2) returned 0x0
[0198.289] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0x2210, wParam=0x2d20001, lParam=0xc02d2) returned 0x0
[0198.289] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0198.289] GetParent (hWnd=0xc02d2) returned 0xc02c8
[0198.289] GetDC (hWnd=0x0) returned 0xf0105ee
[0198.290] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e320) returned 0x0
[0198.290] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0198.290] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0198.290] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0198.290] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0198.291] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0198.291] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0198.291] GetWindowLongW (hWnd=0xc02c8, nIndex=-8) returned 458806
[0198.291] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0198.291] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0198.291] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x30107b3
[0198.291] GetDeviceCaps (hdc=0x30107b3, index=12) returned 32
[0198.291] GetDeviceCaps (hdc=0x30107b3, index=14) returned 1
[0198.291] DeleteDC (hdc=0x30107b3) returned 1
[0198.291] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0198.292] GetWindowThreadProcessId (in: hWnd=0xc02c8, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0198.292] GetCurrentThreadId () returned 0x11d0
[0198.292] PostMessageW (hWnd=0xc02c8, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0198.292] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.292] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.292] GetSystemMetrics (nIndex=42) returned 0
[0198.292] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.292] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0198.292] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0198.292] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0198.293] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0198.293] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0198.309] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0xc02c8) returned 0x1
[0198.314] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0198.314] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0198.314] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0198.314] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0198.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0198.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0198.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0198.328] GetFocus () returned 0x202c6
[0198.328] IsChild (hWndParent=0xc02c8, hWnd=0x202c6) returned 0
[0198.328] GetFocus () returned 0x202c6
[0198.328] SetFocus (hWnd=0x902b4) returned 0x202c6
[0198.330] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x902b4, lParam=0x0) returned 0x0
[0198.330] GetCapture () returned 0x0
[0198.330] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0198.331] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0198.332] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0198.351] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0198.351] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0198.351] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0198.352] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0198.352] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0198.352] GetParent (hWnd=0xc02c8) returned 0x0
[0198.352] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0198.353] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0198.353] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0198.354] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0198.354] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0198.354] GetSysColorBrush (nIndex=5) returned 0x100079
[0198.355] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0198.355] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0198.357] SendMessageW (hWnd=0x902b4, Msg=0x2111, wParam=0x10002b4, lParam=0x902b4) returned 0x0
[0198.357] SendMessageW (hWnd=0x902b4, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0198.357] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0198.357] GetKeyState (nVirtKey=1) returned 0
[0198.357] GetKeyState (nVirtKey=2) returned 0
[0198.357] GetKeyState (nVirtKey=4) returned 0
[0198.357] GetKeyState (nVirtKey=5) returned 0
[0198.357] GetKeyState (nVirtKey=6) returned 0
[0198.357] GetWindowTextLengthW (hWnd=0x902b4) returned 0
[0198.357] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0198.357] SendMessageW (hWnd=0x902b4, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0198.357] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0198.358] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0198.358] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0198.364] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0198.367] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0198.368] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0198.368] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0198.369] GetWindowPlacement (in: hWnd=0xc02c8, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0198.369] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0198.369] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.369] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.369] GetSystemMetrics (nIndex=42) returned 0
[0198.369] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.369] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0198.369] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0198.369] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0198.369] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0198.369] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0xffffffffa90507bf
[0198.369] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0198.369] SaveDC (hdc=0x10105d6) returned 1
[0198.369] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0198.369] CreateSolidBrush (color=0xf0f0f0) returned 0x410078d
[0198.370] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0x410078d) returned 1
[0198.370] DeleteObject (ho=0x410078d) returned 1
[0198.370] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0198.370] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0198.370] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0198.370] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0198.371] GetWindowPlacement (in: hWnd=0xc02c8, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0198.372] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0198.372] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.372] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.372] GetSystemMetrics (nIndex=42) returned 0
[0198.372] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.372] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0198.372] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0198.372] GetCurrentObject (hdc=0xd30107d0, type=0x1) returned 0xb00017
[0198.372] GetCurrentObject (hdc=0xd30107d0, type=0x2) returned 0x900010
[0198.372] GetCurrentObject (hdc=0xd30107d0, type=0x7) returned 0x5079e
[0198.372] GetCurrentObject (hdc=0xd30107d0, type=0x6) returned 0x8a01c2
[0198.372] SaveDC (hdc=0xd30107d0) returned 1
[0198.372] GetNearestColor (hdc=0xd30107d0, color=0xf0f0f0) returned 0xf0f0f0
[0198.372] CreateSolidBrush (color=0xf0f0f0) returned 0x510078d
[0198.372] FillRect (hDC=0xd30107d0, lprc=0x53dc18, hbr=0x510078d) returned 1
[0198.373] DeleteObject (ho=0x510078d) returned 1
[0198.373] RestoreDC (hdc=0xd30107d0, nSavedDC=-1) returned 1
[0198.373] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.373] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.373] GetSystemMetrics (nIndex=42) returned 0
[0198.373] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.373] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0198.373] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0198.373] GetCurrentObject (hdc=0xd30107d0, type=0x1) returned 0xb00017
[0198.373] GetCurrentObject (hdc=0xd30107d0, type=0x2) returned 0x900010
[0198.373] GetCurrentObject (hdc=0xd30107d0, type=0x7) returned 0x5079e
[0198.373] GetCurrentObject (hdc=0xd30107d0, type=0x6) returned 0x8a01c2
[0198.373] SaveDC (hdc=0xd30107d0) returned 1
[0198.373] GetNearestColor (hdc=0xd30107d0, color=0xf0f0f0) returned 0xf0f0f0
[0198.374] CreateSolidBrush (color=0xf0f0f0) returned 0x610078d
[0198.374] FillRect (hDC=0xd30107d0, lprc=0x53dbb8, hbr=0x610078d) returned 1
[0198.374] DeleteObject (ho=0x610078d) returned 1
[0198.374] RestoreDC (hdc=0xd30107d0, nSavedDC=-1) returned 1
[0198.374] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.374] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.374] GetSystemMetrics (nIndex=42) returned 0
[0198.374] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.374] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0198.376] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0198.376] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0198.377] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0198.377] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0198.377] GetStockObject (i=5) returned 0x900015
[0198.377] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0198.377] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0198.377] GetStockObject (i=5) returned 0x900015
[0198.378] GetWindowPlacement (in: hWnd=0xc02c8, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0198.378] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0198.378] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0198.378] GetWindowRect (in: hWnd=0xc02c8, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0198.379] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0198.380] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0198.380] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0198.380] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0198.380] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0198.380] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0198.380] GetWindowRect (in: hWnd=0xc02c8, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0198.389] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.389] IsWindowUnicode (hWnd=0xc02c8) returned 1
[0198.389] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.389] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.389] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.390] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0198.390] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.390] IsWindowUnicode (hWnd=0xc02c8) returned 1
[0198.390] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.390] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.390] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.390] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.391] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x84, wParam=0x0, lParam=0x194036b) returned 0x1
[0198.391] IsWindowUnicode (hWnd=0xd02d6) returned 1
[0198.391] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.391] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.391] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.391] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0198.391] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0198.391] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.391] IsWindowUnicode (hWnd=0x102dc) returned 1
[0198.391] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.392] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.392] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.392] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.392] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x84, wParam=0x0, lParam=0x194036b) returned 0x1
[0198.392] IsWindowUnicode (hWnd=0xd02d6) returned 1
[0198.392] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.392] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x84, wParam=0x0, lParam=0x194036b) returned 0x1
[0198.392] SetCursor (hCursor=0x10003) returned 0x10003
[0198.392] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.392] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.393] _TrackMouseEvent (in: lpEventTrack=0x233f9d0 | out: lpEventTrack=0x233f9d0) returned 1
[0198.393] SendMessageW (hWnd=0xd02d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0198.393] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0198.393] InvalidateRect (hWnd=0xd02d6, lpRect=0x0, bErase=0) returned 1
[0198.393] GetKeyState (nVirtKey=1) returned 0
[0198.393] GetKeyState (nVirtKey=2) returned 0
[0198.393] GetKeyState (nVirtKey=4) returned 0
[0198.393] GetKeyState (nVirtKey=5) returned 0
[0198.393] GetKeyState (nVirtKey=6) returned 0
[0198.393] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.393] IsWindowUnicode (hWnd=0xd02d6) returned 1
[0198.393] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.393] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.393] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.393] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0198.393] InvalidateRect (hWnd=0xd02d6, lpRect=0x0, bErase=0) returned 1
[0198.393] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.394] IsWindowUnicode (hWnd=0xc02c8) returned 1
[0198.394] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.394] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.394] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.394] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.395] IsWindowUnicode (hWnd=0xc02c8) returned 1
[0198.395] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.395] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.395] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.395] BeginPaint (in: hWnd=0xc02c8, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x60100ce
[0198.396] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0198.396] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.396] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.396] GetSystemMetrics (nIndex=42) returned 0
[0198.396] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.396] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0198.497] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0198.497] EndPaint (hWnd=0xc02c8, lpPaint=0x53e30c) returned 1
[0198.497] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.497] IsWindowUnicode (hWnd=0x102dc) returned 1
[0198.497] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.497] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.497] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.499] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.499] IsWindowUnicode (hWnd=0x902b4) returned 1
[0198.499] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.500] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.500] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0198.500] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0198.500] SetTextColor (hdc=0xd40107d0, color=0x0) returned 0x0
[0198.500] SetBkColor (hdc=0xd40107d0, color=0xffffff) returned 0xffffff
[0198.502] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.502] IsWindowUnicode (hWnd=0x11013e) returned 1
[0198.502] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.502] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.502] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.502] BeginPaint (in: hWnd=0x11013e, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x8b010786
[0198.503] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0198.503] CreateCompatibleDC (hdc=0x8b010786) returned 0xbd0107c1
[0198.503] SelectObject (hdc=0xbd0107c1, h=0x1e0507b9) returned 0x85000f
[0198.503] GdipCreateFromHDC (hdc=0xbd0107c1, graphics=0x53e30c) returned 0x0
[0198.503] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0198.503] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0198.503] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0198.503] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0198.503] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0198.503] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0198.503] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0198.503] LocalFree (hMem=0x89ee08) returned 0x0
[0198.504] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0198.504] GdipCreateRegion (region=0x53e354) returned 0x0
[0198.504] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.504] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0198.504] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0198.504] GetWindowTextLengthW (hWnd=0x11013e) returned 16
[0198.504] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0198.504] GetSystemMetrics (nIndex=42) returned 0
[0198.504] GetWindowTextW (in: hWnd=0x11013e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0198.504] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0198.504] GetClientRect (in: hWnd=0x11013e, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0198.504] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0198.504] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0198.504] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0198.504] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0198.504] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0198.504] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0198.505] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0198.505] LocalFree (hMem=0x89eac0) returned 0x0
[0198.505] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0198.505] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0198.505] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0198.505] LocalFree (hMem=0x89ea88) returned 0x0
[0198.505] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0198.505] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0198.505] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0198.505] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0198.505] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0198.505] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0198.505] GetCurrentObject (hdc=0xbd0107c1, type=0x1) returned 0xb00017
[0198.505] GetCurrentObject (hdc=0xbd0107c1, type=0x2) returned 0x900010
[0198.505] GetCurrentObject (hdc=0xbd0107c1, type=0x7) returned 0x1e0507b9
[0198.505] GetCurrentObject (hdc=0xbd0107c1, type=0x6) returned 0x8a01c2
[0198.510] SaveDC (hdc=0xbd0107c1) returned 1
[0198.510] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6304051e
[0198.510] GetClipRgn (hdc=0xbd0107c1, hrgn=0x6304051e) returned 0
[0198.510] SelectClipRgn (hdc=0xbd0107c1, hrgn=0x6804053e) returned 2
[0198.510] DeleteObject (ho=0x6304051e) returned 1
[0198.510] DeleteObject (ho=0x6804053e) returned 1
[0198.510] OffsetViewportOrgEx (in: hdc=0xbd0107c1, x=0, y=0, lppt=0x2340010 | out: lppt=0x2340010) returned 1
[0198.510] GetNearestColor (hdc=0xbd0107c1, color=0xf0f0f0) returned 0xf0f0f0
[0198.510] CreateSolidBrush (color=0xf0f0f0) returned 0x710078d
[0198.510] FillRect (hDC=0xbd0107c1, lprc=0x53e1f4, hbr=0x710078d) returned 1
[0198.510] DeleteObject (ho=0x710078d) returned 1
[0198.511] RestoreDC (hdc=0xbd0107c1, nSavedDC=-1) returned 1
[0198.511] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbd0107c1) returned 0x0
[0198.511] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd030dbd) returned 0x0
[0198.511] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.511] GetWindowTextLengthW (hWnd=0x11013e) returned 16
[0198.511] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0198.511] GetSystemMetrics (nIndex=42) returned 0
[0198.511] GetWindowTextW (in: hWnd=0x11013e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0198.511] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0198.511] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0198.511] GetCurrentObject (hdc=0xbd0107c1, type=0x1) returned 0xb00017
[0198.511] GetCurrentObject (hdc=0xbd0107c1, type=0x2) returned 0x900010
[0198.511] GetCurrentObject (hdc=0xbd0107c1, type=0x7) returned 0x1e0507b9
[0198.511] GetCurrentObject (hdc=0xbd0107c1, type=0x6) returned 0x8a01c2
[0198.512] SaveDC (hdc=0xbd0107c1) returned 1
[0198.512] GetNearestColor (hdc=0xbd0107c1, color=0x0) returned 0x0
[0198.512] RestoreDC (hdc=0xbd0107c1, nSavedDC=-1) returned 1
[0198.512] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbd0107c1) returned 0x0
[0198.512] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0198.513] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0198.513] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0198.513] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2340548 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0198.513] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0198.513] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0198.513] GetCurrentObject (hdc=0xbd0107c1, type=0x1) returned 0xb00017
[0198.513] GetCurrentObject (hdc=0xbd0107c1, type=0x2) returned 0x900010
[0198.513] GetCurrentObject (hdc=0xbd0107c1, type=0x7) returned 0x1e0507b9
[0198.514] GetCurrentObject (hdc=0xbd0107c1, type=0x6) returned 0x8a01c2
[0198.514] SaveDC (hdc=0xbd0107c1) returned 1
[0198.514] GetTextAlign (hdc=0xbd0107c1) returned 0x0
[0198.514] GetTextColor (hdc=0xbd0107c1) returned 0x0
[0198.514] GetCurrentObject (hdc=0xbd0107c1, type=0x6) returned 0x8a01c2
[0198.514] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0198.514] SelectObject (hdc=0xbd0107c1, h=0x730a066d) returned 0x8a01c2
[0198.514] GetBkMode (hdc=0xbd0107c1) returned 2
[0198.514] SetBkMode (hdc=0xbd0107c1, mode=1) returned 2
[0198.514] DrawTextExW (in: hdc=0xbd0107c1, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x2340fe0 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0198.515] RestoreDC (hdc=0xbd0107c1, nSavedDC=-1) returned 1
[0198.515] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbd0107c1) returned 0x0
[0198.515] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0198.515] BitBlt (hdc=0x8b010786, x=0, y=0, cx=250, cy=70, hdcSrc=0xbd0107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0198.515] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbd0107c1) returned 0x0
[0198.515] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0198.516] SelectObject (hdc=0xbd0107c1, h=0x85000f) returned 0x1e0507b9
[0198.516] DeleteDC (hdc=0xbd0107c1) returned 1
[0198.516] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0198.516] EndPaint (hWnd=0x11013e, lpPaint=0x53e2f0) returned 1
[0198.516] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.516] IsWindowUnicode (hWnd=0xd02d6) returned 1
[0198.516] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.516] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.516] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.516] BeginPaint (in: hWnd=0xd02d6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0198.518] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0198.518] CreateCompatibleDC (hdc=0xf0105ee) returned 0xbf0107c1
[0198.518] SelectObject (hdc=0xbf0107c1, h=0x1e0507b9) returned 0x85000f
[0198.518] GdipCreateFromHDC (hdc=0xbf0107c1, graphics=0x53e300) returned 0x0
[0198.518] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0198.519] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0198.519] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0198.519] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0198.519] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0198.519] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0198.519] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0198.519] LocalFree (hMem=0x89eee8) returned 0x0
[0198.519] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0198.519] GdipCreateRegion (region=0x53e348) returned 0x0
[0198.519] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.519] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0198.519] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0198.519] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfd010dbd) returned 0x0
[0198.519] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.519] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0198.519] GetCurrentObject (hdc=0xbf0107c1, type=0x1) returned 0xb00017
[0198.520] GetCurrentObject (hdc=0xbf0107c1, type=0x2) returned 0x900010
[0198.520] GetCurrentObject (hdc=0xbf0107c1, type=0x7) returned 0x1e0507b9
[0198.520] GetCurrentObject (hdc=0xbf0107c1, type=0x6) returned 0x8a01c2
[0198.520] SaveDC (hdc=0xbf0107c1) returned 1
[0198.520] GetNearestColor (hdc=0xbf0107c1, color=0xf0f0f0) returned 0xf0f0f0
[0198.520] GetNearestColor (hdc=0xbf0107c1, color=0xa0a0a0) returned 0xa0a0a0
[0198.520] GetNearestColor (hdc=0xbf0107c1, color=0x696969) returned 0x696969
[0198.520] GetNearestColor (hdc=0xbf0107c1, color=0xa0a0a0) returned 0xa0a0a0
[0198.520] GetNearestColor (hdc=0xbf0107c1, color=0x0) returned 0x0
[0198.520] GetNearestColor (hdc=0xbf0107c1, color=0xffffff) returned 0xffffff
[0198.520] GetNearestColor (hdc=0xbf0107c1, color=0xe5e5e5) returned 0xe5e5e5
[0198.520] GetNearestColor (hdc=0xbf0107c1, color=0xd7d7d7) returned 0xd7d7d7
[0198.520] GetNearestColor (hdc=0xbf0107c1, color=0x0) returned 0x0
[0198.521] RestoreDC (hdc=0xbf0107c1, nSavedDC=-1) returned 1
[0198.521] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbf0107c1) returned 0x0
[0198.521] IsAppThemed () returned 0x1
[0198.521] GetThemeAppProperties () returned 0x3
[0198.521] GetThemeAppProperties () returned 0x3
[0198.521] IsAppThemed () returned 0x1
[0198.521] GetThemeAppProperties () returned 0x3
[0198.521] GetThemeAppProperties () returned 0x3
[0198.522] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x234174c | out: lpchText="OK", lprc=0x53e028) returned 13
[0198.522] IsAppThemed () returned 0x1
[0198.522] GetThemeAppProperties () returned 0x3
[0198.522] GetThemeAppProperties () returned 0x3
[0198.522] IsAppThemed () returned 0x1
[0198.522] GetThemeAppProperties () returned 0x3
[0198.522] GetThemeAppProperties () returned 0x3
[0198.522] GetFocus () returned 0x902b4
[0198.522] IsAppThemed () returned 0x1
[0198.522] GetThemeAppProperties () returned 0x3
[0198.522] GetThemeAppProperties () returned 0x3
[0198.522] IsAppThemed () returned 0x1
[0198.522] GetThemeAppProperties () returned 0x3
[0198.523] GetThemeAppProperties () returned 0x3
[0198.523] IsThemePartDefined () returned 0x1
[0198.523] IsAppThemed () returned 0x1
[0198.523] GetThemeAppProperties () returned 0x3
[0198.523] GetThemeAppProperties () returned 0x3
[0198.523] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0198.523] IsAppThemed () returned 0x1
[0198.523] GetThemeAppProperties () returned 0x3
[0198.523] GetThemeAppProperties () returned 0x3
[0198.523] IsAppThemed () returned 0x1
[0198.523] GetThemeAppProperties () returned 0x3
[0198.523] GetThemeAppProperties () returned 0x3
[0198.523] IsThemePartDefined () returned 0x1
[0198.523] GdipCreateRegion (region=0x53e070) returned 0x0
[0198.523] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.523] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0198.523] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0198.523] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0198.524] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0198.524] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0198.524] LocalFree (hMem=0x89ea88) returned 0x0
[0198.524] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0198.524] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0198.524] LocalFree (hMem=0x89ea88) returned 0x0
[0198.524] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0198.524] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0198.524] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0198.524] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0198.524] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.524] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0198.524] GetCurrentObject (hdc=0xbf0107c1, type=0x1) returned 0xb00017
[0198.524] GetCurrentObject (hdc=0xbf0107c1, type=0x2) returned 0x900010
[0198.524] GetCurrentObject (hdc=0xbf0107c1, type=0x7) returned 0x1e0507b9
[0198.524] GetCurrentObject (hdc=0xbf0107c1, type=0x6) returned 0x8a01c2
[0198.525] SaveDC (hdc=0xbf0107c1) returned 1
[0198.525] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6904053e
[0198.525] GetClipRgn (hdc=0xbf0107c1, hrgn=0x6904053e) returned 0
[0198.525] SelectClipRgn (hdc=0xbf0107c1, hrgn=0x6704051e) returned 2
[0198.525] DeleteObject (ho=0x6904053e) returned 1
[0198.525] DeleteObject (ho=0x6704051e) returned 1
[0198.525] OffsetViewportOrgEx (in: hdc=0xbf0107c1, x=0, y=0, lppt=0x2341dfc | out: lppt=0x2341dfc) returned 1
[0198.525] DrawThemeParentBackground () returned 0x0
[0198.525] GetWindowPlacement (in: hWnd=0xc02c8, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0198.525] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0198.525] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.525] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.526] GetSystemMetrics (nIndex=42) returned 0
[0198.526] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.526] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0198.526] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0198.526] GetCurrentObject (hdc=0xbf0107c1, type=0x1) returned 0xb00017
[0198.526] GetCurrentObject (hdc=0xbf0107c1, type=0x2) returned 0x900010
[0198.526] GetCurrentObject (hdc=0xbf0107c1, type=0x7) returned 0x1e0507b9
[0198.526] GetCurrentObject (hdc=0xbf0107c1, type=0x6) returned 0x8a01c2
[0198.526] SaveDC (hdc=0xbf0107c1) returned 2
[0198.526] GetNearestColor (hdc=0xbf0107c1, color=0xf0f0f0) returned 0xf0f0f0
[0198.526] CreateSolidBrush (color=0xf0f0f0) returned 0x810078d
[0198.526] FillRect (hDC=0xbf0107c1, lprc=0x53dad0, hbr=0x810078d) returned 1
[0198.526] DeleteObject (ho=0x810078d) returned 1
[0198.526] RestoreDC (hdc=0xbf0107c1, nSavedDC=-1) returned 1
[0198.526] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.526] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.527] GetSystemMetrics (nIndex=42) returned 0
[0198.527] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.527] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0198.527] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0198.527] GetCurrentObject (hdc=0xbf0107c1, type=0x1) returned 0xb00017
[0198.527] GetCurrentObject (hdc=0xbf0107c1, type=0x2) returned 0x900010
[0198.527] GetCurrentObject (hdc=0xbf0107c1, type=0x7) returned 0x1e0507b9
[0198.527] GetCurrentObject (hdc=0xbf0107c1, type=0x6) returned 0x8a01c2
[0198.527] SaveDC (hdc=0xbf0107c1) returned 2
[0198.527] GetNearestColor (hdc=0xbf0107c1, color=0xf0f0f0) returned 0xf0f0f0
[0198.527] CreateSolidBrush (color=0xf0f0f0) returned 0x910078d
[0198.527] FillRect (hDC=0xbf0107c1, lprc=0x53da70, hbr=0x910078d) returned 1
[0198.527] DeleteObject (ho=0x910078d) returned 1
[0198.527] RestoreDC (hdc=0xbf0107c1, nSavedDC=-1) returned 1
[0198.528] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.528] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.528] GetSystemMetrics (nIndex=42) returned 0
[0198.528] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.528] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0198.528] RestoreDC (hdc=0xbf0107c1, nSavedDC=-1) returned 1
[0198.528] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbf0107c1) returned 0x0
[0198.528] IsAppThemed () returned 0x1
[0198.528] GetThemeAppProperties () returned 0x3
[0198.528] GetThemeAppProperties () returned 0x3
[0198.528] IsAppThemed () returned 0x1
[0198.528] GetThemeAppProperties () returned 0x3
[0198.528] GetThemeAppProperties () returned 0x3
[0198.528] IsThemePartDefined () returned 0x1
[0198.528] GdipCreateRegion (region=0x53dff4) returned 0x0
[0198.529] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.529] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0198.529] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0198.529] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0198.529] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0198.529] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0198.529] LocalFree (hMem=0x89ea88) returned 0x0
[0198.529] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0198.529] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0198.529] LocalFree (hMem=0x89ea88) returned 0x0
[0198.529] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0198.529] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0198.529] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0198.529] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0198.529] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.529] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0198.530] GetCurrentObject (hdc=0xbf0107c1, type=0x1) returned 0xb00017
[0198.530] GetCurrentObject (hdc=0xbf0107c1, type=0x2) returned 0x900010
[0198.530] GetCurrentObject (hdc=0xbf0107c1, type=0x7) returned 0x1e0507b9
[0198.530] GetCurrentObject (hdc=0xbf0107c1, type=0x6) returned 0x8a01c2
[0198.530] SaveDC (hdc=0xbf0107c1) returned 1
[0198.530] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6804051e
[0198.530] GetClipRgn (hdc=0xbf0107c1, hrgn=0x6804051e) returned 0
[0198.530] SelectClipRgn (hdc=0xbf0107c1, hrgn=0x6b04053e) returned 2
[0198.530] DeleteObject (ho=0x6804051e) returned 1
[0198.530] DeleteObject (ho=0x6b04053e) returned 1
[0198.530] OffsetViewportOrgEx (in: hdc=0xbf0107c1, x=0, y=0, lppt=0x23426dc | out: lppt=0x23426dc) returned 1
[0198.530] IsAppThemed () returned 0x1
[0198.530] GetThemeAppProperties () returned 0x3
[0198.530] GetThemeAppProperties () returned 0x3
[0198.530] DrawThemeBackground () returned 0x0
[0198.531] RestoreDC (hdc=0xbf0107c1, nSavedDC=-1) returned 1
[0198.531] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbf0107c1) returned 0x0
[0198.531] GdipCreateRegion (region=0x53dff8) returned 0x0
[0198.531] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.531] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0198.531] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0198.531] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0198.531] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0198.531] LocalFree (hMem=0x89ea88) returned 0x0
[0198.531] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0198.531] LocalFree (hMem=0x89ee08) returned 0x0
[0198.531] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0198.531] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0198.531] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0198.531] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0198.532] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.532] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0198.532] GetCurrentObject (hdc=0xbf0107c1, type=0x1) returned 0xb00017
[0198.532] GetCurrentObject (hdc=0xbf0107c1, type=0x2) returned 0x900010
[0198.532] GetCurrentObject (hdc=0xbf0107c1, type=0x7) returned 0x1e0507b9
[0198.532] GetCurrentObject (hdc=0xbf0107c1, type=0x6) returned 0x8a01c2
[0198.532] SaveDC (hdc=0xbf0107c1) returned 1
[0198.532] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c04053e
[0198.532] GetClipRgn (hdc=0xbf0107c1, hrgn=0x6c04053e) returned 0
[0198.532] SelectClipRgn (hdc=0xbf0107c1, hrgn=0x6904051e) returned 2
[0198.532] DeleteObject (ho=0x6c04053e) returned 1
[0198.532] DeleteObject (ho=0x6904051e) returned 1
[0198.532] OffsetViewportOrgEx (in: hdc=0xbf0107c1, x=0, y=0, lppt=0x23429b0 | out: lppt=0x23429b0) returned 1
[0198.532] IsAppThemed () returned 0x1
[0198.532] GetThemeAppProperties () returned 0x3
[0198.532] GetThemeAppProperties () returned 0x3
[0198.532] GetThemeBackgroundContentRect () returned 0x0
[0198.532] RestoreDC (hdc=0xbf0107c1, nSavedDC=-1) returned 1
[0198.533] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbf0107c1) returned 0x0
[0198.533] IsAppThemed () returned 0x1
[0198.533] GetThemeAppProperties () returned 0x3
[0198.533] GetThemeAppProperties () returned 0x3
[0198.533] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0198.533] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0198.533] GetCurrentObject (hdc=0xbf0107c1, type=0x1) returned 0xb00017
[0198.533] GetCurrentObject (hdc=0xbf0107c1, type=0x2) returned 0x900010
[0198.533] GetCurrentObject (hdc=0xbf0107c1, type=0x7) returned 0x1e0507b9
[0198.533] GetCurrentObject (hdc=0xbf0107c1, type=0x6) returned 0x8a01c2
[0198.533] SaveDC (hdc=0xbf0107c1) returned 1
[0198.533] GetTextAlign (hdc=0xbf0107c1) returned 0x0
[0198.533] GetTextColor (hdc=0xbf0107c1) returned 0x0
[0198.533] GetCurrentObject (hdc=0xbf0107c1, type=0x6) returned 0x8a01c2
[0198.533] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0198.533] SelectObject (hdc=0xbf0107c1, h=0x730a066d) returned 0x8a01c2
[0198.534] GetBkMode (hdc=0xbf0107c1) returned 2
[0198.534] SetBkMode (hdc=0xbf0107c1, mode=1) returned 2
[0198.534] DrawTextExW (in: hdc=0xbf0107c1, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x2342d50 | out: lpchText="OK", lprc=0x53df90) returned 13
[0198.534] DrawTextExW (in: hdc=0xbf0107c1, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x2342d50 | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0198.534] RestoreDC (hdc=0xbf0107c1, nSavedDC=-1) returned 1
[0198.534] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbf0107c1) returned 0x0
[0198.534] GetFocus () returned 0x902b4
[0198.535] IsAppThemed () returned 0x1
[0198.535] GetThemeAppProperties () returned 0x3
[0198.535] GetThemeAppProperties () returned 0x3
[0198.535] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0198.535] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xbf0107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0198.535] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbf0107c1) returned 0x0
[0198.535] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0198.535] SelectObject (hdc=0xbf0107c1, h=0x85000f) returned 0x1e0507b9
[0198.535] DeleteDC (hdc=0xbf0107c1) returned 1
[0198.535] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0198.535] EndPaint (hWnd=0xd02d6, lpPaint=0x53e2e4) returned 1
[0198.536] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.536] IsWindowUnicode (hWnd=0xc02d2) returned 1
[0198.536] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.536] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.536] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.536] BeginPaint (in: hWnd=0xc02d2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0198.536] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0198.536] CreateCompatibleDC (hdc=0x60100ce) returned 0xc10107c1
[0198.536] SelectObject (hdc=0xc10107c1, h=0x1e0507b9) returned 0x85000f
[0198.536] GdipCreateFromHDC (hdc=0xc10107c1, graphics=0x53e300) returned 0x0
[0198.536] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0198.537] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0198.537] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0198.537] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0198.537] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0198.541] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0198.541] LocalFree (hMem=0x89ee08) returned 0x0
[0198.541] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0198.541] GdipCreateRegion (region=0x53e348) returned 0x0
[0198.541] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.541] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0198.542] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0198.542] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcff0dbd) returned 0x0
[0198.542] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.542] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0198.542] GetCurrentObject (hdc=0xc10107c1, type=0x1) returned 0xb00017
[0198.542] GetCurrentObject (hdc=0xc10107c1, type=0x2) returned 0x900010
[0198.542] GetCurrentObject (hdc=0xc10107c1, type=0x7) returned 0x1e0507b9
[0198.542] GetCurrentObject (hdc=0xc10107c1, type=0x6) returned 0x8a01c2
[0198.542] SaveDC (hdc=0xc10107c1) returned 1
[0198.542] GetNearestColor (hdc=0xc10107c1, color=0xf0f0f0) returned 0xf0f0f0
[0198.542] GetNearestColor (hdc=0xc10107c1, color=0xa0a0a0) returned 0xa0a0a0
[0198.542] GetNearestColor (hdc=0xc10107c1, color=0x696969) returned 0x696969
[0198.542] GetNearestColor (hdc=0xc10107c1, color=0xa0a0a0) returned 0xa0a0a0
[0198.542] GetNearestColor (hdc=0xc10107c1, color=0x0) returned 0x0
[0198.542] GetNearestColor (hdc=0xc10107c1, color=0xffffff) returned 0xffffff
[0198.542] GetNearestColor (hdc=0xc10107c1, color=0xe5e5e5) returned 0xe5e5e5
[0198.543] GetNearestColor (hdc=0xc10107c1, color=0xd7d7d7) returned 0xd7d7d7
[0198.543] GetNearestColor (hdc=0xc10107c1, color=0x0) returned 0x0
[0198.543] RestoreDC (hdc=0xc10107c1, nSavedDC=-1) returned 1
[0198.543] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc10107c1) returned 0x0
[0198.543] IsAppThemed () returned 0x1
[0198.543] GetThemeAppProperties () returned 0x3
[0198.543] GetThemeAppProperties () returned 0x3
[0198.543] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0198.543] SendMessageW (hWnd=0xc02c8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0198.543] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0198.543] IsAppThemed () returned 0x1
[0198.543] GetThemeAppProperties () returned 0x3
[0198.543] GetThemeAppProperties () returned 0x3
[0198.543] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x2343560 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0198.544] IsAppThemed () returned 0x1
[0198.544] GetThemeAppProperties () returned 0x3
[0198.544] GetThemeAppProperties () returned 0x3
[0198.544] IsAppThemed () returned 0x1
[0198.544] GetThemeAppProperties () returned 0x3
[0198.544] GetThemeAppProperties () returned 0x3
[0198.544] GetFocus () returned 0x902b4
[0198.544] IsAppThemed () returned 0x1
[0198.544] GetThemeAppProperties () returned 0x3
[0198.544] GetThemeAppProperties () returned 0x3
[0198.544] IsAppThemed () returned 0x1
[0198.544] GetThemeAppProperties () returned 0x3
[0198.544] GetThemeAppProperties () returned 0x3
[0198.544] IsThemePartDefined () returned 0x1
[0198.544] IsAppThemed () returned 0x1
[0198.545] GetThemeAppProperties () returned 0x3
[0198.545] GetThemeAppProperties () returned 0x3
[0198.545] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0198.545] IsAppThemed () returned 0x1
[0198.545] GetThemeAppProperties () returned 0x3
[0198.545] GetThemeAppProperties () returned 0x3
[0198.545] IsAppThemed () returned 0x1
[0198.545] GetThemeAppProperties () returned 0x3
[0198.545] GetThemeAppProperties () returned 0x3
[0198.545] IsThemePartDefined () returned 0x1
[0198.545] GdipCreateRegion (region=0x53e070) returned 0x0
[0198.545] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.545] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0198.545] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0198.545] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0198.545] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0198.545] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0198.545] LocalFree (hMem=0x89ee08) returned 0x0
[0198.546] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0198.546] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0198.546] LocalFree (hMem=0x89ee08) returned 0x0
[0198.546] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0198.546] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0198.546] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0198.546] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0198.546] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.546] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0198.546] GetCurrentObject (hdc=0xc10107c1, type=0x1) returned 0xb00017
[0198.546] GetCurrentObject (hdc=0xc10107c1, type=0x2) returned 0x900010
[0198.546] GetCurrentObject (hdc=0xc10107c1, type=0x7) returned 0x1e0507b9
[0198.546] GetCurrentObject (hdc=0xc10107c1, type=0x6) returned 0x8a01c2
[0198.546] SaveDC (hdc=0xc10107c1) returned 1
[0198.546] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a04051e
[0198.546] GetClipRgn (hdc=0xc10107c1, hrgn=0x6a04051e) returned 0
[0198.547] SelectClipRgn (hdc=0xc10107c1, hrgn=0x7004053e) returned 2
[0198.547] DeleteObject (ho=0x6a04051e) returned 1
[0198.547] DeleteObject (ho=0x7004053e) returned 1
[0198.547] OffsetViewportOrgEx (in: hdc=0xc10107c1, x=0, y=0, lppt=0x2343c10 | out: lppt=0x2343c10) returned 1
[0198.547] DrawThemeParentBackground () returned 0x0
[0198.547] GetWindowPlacement (in: hWnd=0xc02c8, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0198.547] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0198.547] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.547] GetSystemMetrics (nIndex=42) returned 0
[0198.547] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0198.547] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0198.548] GetCurrentObject (hdc=0xc10107c1, type=0x1) returned 0xb00017
[0198.548] GetCurrentObject (hdc=0xc10107c1, type=0x2) returned 0x900010
[0198.548] GetCurrentObject (hdc=0xc10107c1, type=0x7) returned 0x1e0507b9
[0198.548] GetCurrentObject (hdc=0xc10107c1, type=0x6) returned 0x8a01c2
[0198.548] SaveDC (hdc=0xc10107c1) returned 2
[0198.548] GetNearestColor (hdc=0xc10107c1, color=0xf0f0f0) returned 0xf0f0f0
[0198.548] CreateSolidBrush (color=0xf0f0f0) returned 0xa10078d
[0198.548] FillRect (hDC=0xc10107c1, lprc=0x53dad0, hbr=0xa10078d) returned 1
[0198.548] DeleteObject (ho=0xa10078d) returned 1
[0198.548] RestoreDC (hdc=0xc10107c1, nSavedDC=-1) returned 1
[0198.548] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.548] GetSystemMetrics (nIndex=42) returned 0
[0198.548] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0198.549] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0198.549] GetCurrentObject (hdc=0xc10107c1, type=0x1) returned 0xb00017
[0198.549] GetCurrentObject (hdc=0xc10107c1, type=0x2) returned 0x900010
[0198.549] GetCurrentObject (hdc=0xc10107c1, type=0x7) returned 0x1e0507b9
[0198.549] GetCurrentObject (hdc=0xc10107c1, type=0x6) returned 0x8a01c2
[0198.549] SaveDC (hdc=0xc10107c1) returned 2
[0198.549] GetNearestColor (hdc=0xc10107c1, color=0xf0f0f0) returned 0xf0f0f0
[0198.549] CreateSolidBrush (color=0xf0f0f0) returned 0xb10078d
[0198.549] FillRect (hDC=0xc10107c1, lprc=0x53da70, hbr=0xb10078d) returned 1
[0198.549] DeleteObject (ho=0xb10078d) returned 1
[0198.549] RestoreDC (hdc=0xc10107c1, nSavedDC=-1) returned 1
[0198.549] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0198.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0198.549] GetSystemMetrics (nIndex=42) returned 0
[0198.549] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0198.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0198.550] RestoreDC (hdc=0xc10107c1, nSavedDC=-1) returned 1
[0198.550] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc10107c1) returned 0x0
[0198.550] IsAppThemed () returned 0x1
[0198.550] GetThemeAppProperties () returned 0x3
[0198.550] GetThemeAppProperties () returned 0x3
[0198.550] IsAppThemed () returned 0x1
[0198.550] GetThemeAppProperties () returned 0x3
[0198.550] GetThemeAppProperties () returned 0x3
[0198.550] IsThemePartDefined () returned 0x1
[0198.550] GdipCreateRegion (region=0x53dff4) returned 0x0
[0198.550] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.550] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0198.550] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0198.550] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0198.550] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0198.551] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0198.551] LocalFree (hMem=0x89ea88) returned 0x0
[0198.551] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0198.558] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0198.558] LocalFree (hMem=0x89ee08) returned 0x0
[0198.558] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0198.558] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0198.558] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0198.558] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0198.558] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.558] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0198.558] GetCurrentObject (hdc=0xc10107c1, type=0x1) returned 0xb00017
[0198.558] GetCurrentObject (hdc=0xc10107c1, type=0x2) returned 0x900010
[0198.558] GetCurrentObject (hdc=0xc10107c1, type=0x7) returned 0x1e0507b9
[0198.558] GetCurrentObject (hdc=0xc10107c1, type=0x6) returned 0x8a01c2
[0198.559] SaveDC (hdc=0xc10107c1) returned 1
[0198.559] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7104053e
[0198.559] GetClipRgn (hdc=0xc10107c1, hrgn=0x7104053e) returned 0
[0198.559] SelectClipRgn (hdc=0xc10107c1, hrgn=0x6c04051e) returned 2
[0198.559] DeleteObject (ho=0x7104053e) returned 1
[0198.559] DeleteObject (ho=0x6c04051e) returned 1
[0198.559] OffsetViewportOrgEx (in: hdc=0xc10107c1, x=0, y=0, lppt=0x2344498 | out: lppt=0x2344498) returned 1
[0198.559] IsAppThemed () returned 0x1
[0198.559] GetThemeAppProperties () returned 0x3
[0198.559] GetThemeAppProperties () returned 0x3
[0198.559] DrawThemeBackground () returned 0x0
[0198.559] RestoreDC (hdc=0xc10107c1, nSavedDC=-1) returned 1
[0198.559] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc10107c1) returned 0x0
[0198.560] GdipCreateRegion (region=0x53dff8) returned 0x0
[0198.560] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.560] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0198.560] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0198.560] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0198.560] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0198.560] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0198.560] LocalFree (hMem=0x89ea88) returned 0x0
[0198.560] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0198.560] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0198.560] LocalFree (hMem=0x89ea88) returned 0x0
[0198.560] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0198.560] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0198.560] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0198.561] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0198.561] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.561] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0198.561] GetCurrentObject (hdc=0xc10107c1, type=0x1) returned 0xb00017
[0198.561] GetCurrentObject (hdc=0xc10107c1, type=0x2) returned 0x900010
[0198.561] GetCurrentObject (hdc=0xc10107c1, type=0x7) returned 0x1e0507b9
[0198.561] GetCurrentObject (hdc=0xc10107c1, type=0x6) returned 0x8a01c2
[0198.561] SaveDC (hdc=0xc10107c1) returned 1
[0198.561] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d04051e
[0198.561] GetClipRgn (hdc=0xc10107c1, hrgn=0x6d04051e) returned 0
[0198.561] SelectClipRgn (hdc=0xc10107c1, hrgn=0x7204053e) returned 2
[0198.561] DeleteObject (ho=0x6d04051e) returned 1
[0198.561] DeleteObject (ho=0x7204053e) returned 1
[0198.561] OffsetViewportOrgEx (in: hdc=0xc10107c1, x=0, y=0, lppt=0x234476c | out: lppt=0x234476c) returned 1
[0198.561] IsAppThemed () returned 0x1
[0198.562] GetThemeAppProperties () returned 0x3
[0198.562] GetThemeAppProperties () returned 0x3
[0198.562] GetThemeBackgroundContentRect () returned 0x0
[0198.562] RestoreDC (hdc=0xc10107c1, nSavedDC=-1) returned 1
[0198.562] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc10107c1) returned 0x0
[0198.562] IsAppThemed () returned 0x1
[0198.562] GetThemeAppProperties () returned 0x3
[0198.562] GetThemeAppProperties () returned 0x3
[0198.562] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0198.562] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0198.562] GetCurrentObject (hdc=0xc10107c1, type=0x1) returned 0xb00017
[0198.562] GetCurrentObject (hdc=0xc10107c1, type=0x2) returned 0x900010
[0198.562] GetCurrentObject (hdc=0xc10107c1, type=0x7) returned 0x1e0507b9
[0198.562] GetCurrentObject (hdc=0xc10107c1, type=0x6) returned 0x8a01c2
[0198.562] SaveDC (hdc=0xc10107c1) returned 1
[0198.563] GetTextAlign (hdc=0xc10107c1) returned 0x0
[0198.563] GetTextColor (hdc=0xc10107c1) returned 0x0
[0198.563] GetCurrentObject (hdc=0xc10107c1, type=0x6) returned 0x8a01c2
[0198.563] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0198.563] SelectObject (hdc=0xc10107c1, h=0x730a066d) returned 0x8a01c2
[0198.563] GetBkMode (hdc=0xc10107c1) returned 2
[0198.563] SetBkMode (hdc=0xc10107c1, mode=1) returned 2
[0198.563] DrawTextExW (in: hdc=0xc10107c1, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x2344b0c | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0198.563] DrawTextExW (in: hdc=0xc10107c1, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x2344b0c | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0198.564] RestoreDC (hdc=0xc10107c1, nSavedDC=-1) returned 1
[0198.564] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc10107c1) returned 0x0
[0198.564] GetFocus () returned 0x902b4
[0198.564] IsAppThemed () returned 0x1
[0198.564] GetThemeAppProperties () returned 0x3
[0198.564] GetThemeAppProperties () returned 0x3
[0198.564] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0198.564] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0xc10107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0198.564] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc10107c1) returned 0x0
[0198.564] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0198.565] SelectObject (hdc=0xc10107c1, h=0x85000f) returned 0x1e0507b9
[0198.565] DeleteDC (hdc=0xc10107c1) returned 1
[0198.565] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0198.565] EndPaint (hWnd=0xc02d2, lpPaint=0x53e2e4) returned 1
[0198.565] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.565] IsWindowUnicode (hWnd=0x202c6) returned 1
[0198.565] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.565] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.565] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.566] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0198.566] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0198.566] CreateCompatibleDC (hdc=0x10105d6) returned 0xc30107c1
[0198.566] SelectObject (hdc=0xc30107c1, h=0x1e0507b9) returned 0x85000f
[0198.566] GdipCreateFromHDC (hdc=0xc30107c1, graphics=0x53e300) returned 0x0
[0198.566] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0198.566] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0198.566] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0198.566] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0198.566] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0198.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0198.566] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0198.567] LocalFree (hMem=0x89eee8) returned 0x0
[0198.567] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0198.567] GdipCreateRegion (region=0x53e348) returned 0x0
[0198.567] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.567] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0198.567] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0198.567] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcfd0dbd) returned 0x0
[0198.567] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.567] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0198.567] GetCurrentObject (hdc=0xc30107c1, type=0x1) returned 0xb00017
[0198.567] GetCurrentObject (hdc=0xc30107c1, type=0x2) returned 0x900010
[0198.567] GetCurrentObject (hdc=0xc30107c1, type=0x7) returned 0x1e0507b9
[0198.567] GetCurrentObject (hdc=0xc30107c1, type=0x6) returned 0x8a01c2
[0198.567] SaveDC (hdc=0xc30107c1) returned 1
[0198.567] GetNearestColor (hdc=0xc30107c1, color=0xff) returned 0xff
[0198.568] GetNearestColor (hdc=0xc30107c1, color=0x55) returned 0x55
[0198.568] GetNearestColor (hdc=0xc30107c1, color=0x0) returned 0x0
[0198.568] GetNearestColor (hdc=0xc30107c1, color=0x55) returned 0x55
[0198.568] GetNearestColor (hdc=0xc30107c1, color=0x0) returned 0x0
[0198.568] GetNearestColor (hdc=0xc30107c1, color=0x8080ff) returned 0x8080ff
[0198.568] GetNearestColor (hdc=0xc30107c1, color=0x7373e5) returned 0x7373e5
[0198.568] GetNearestColor (hdc=0xc30107c1, color=0xe5) returned 0xe5
[0198.568] GetNearestColor (hdc=0xc30107c1, color=0x0) returned 0x0
[0198.568] RestoreDC (hdc=0xc30107c1, nSavedDC=-1) returned 1
[0198.568] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc30107c1) returned 0x0
[0198.568] IsAppThemed () returned 0x1
[0198.568] GetThemeAppProperties () returned 0x3
[0198.569] GetThemeAppProperties () returned 0x3
[0198.569] IsAppThemed () returned 0x1
[0198.569] GetThemeAppProperties () returned 0x3
[0198.569] GetThemeAppProperties () returned 0x3
[0198.569] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0198.569] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x23452f0 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0198.569] IsAppThemed () returned 0x1
[0198.569] GetThemeAppProperties () returned 0x3
[0198.569] GetThemeAppProperties () returned 0x3
[0198.569] IsAppThemed () returned 0x1
[0198.569] GetThemeAppProperties () returned 0x3
[0198.569] GetThemeAppProperties () returned 0x3
[0198.569] GetFocus () returned 0x902b4
[0198.570] IsAppThemed () returned 0x1
[0198.570] GetThemeAppProperties () returned 0x3
[0198.570] GetThemeAppProperties () returned 0x3
[0198.570] IsAppThemed () returned 0x1
[0198.570] GetThemeAppProperties () returned 0x3
[0198.570] GetThemeAppProperties () returned 0x3
[0198.570] IsThemePartDefined () returned 0x1
[0198.570] IsAppThemed () returned 0x1
[0198.570] GetThemeAppProperties () returned 0x3
[0198.570] GetThemeAppProperties () returned 0x3
[0198.570] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0198.570] IsAppThemed () returned 0x1
[0198.570] GetThemeAppProperties () returned 0x3
[0198.570] GetThemeAppProperties () returned 0x3
[0198.570] IsAppThemed () returned 0x1
[0198.570] GetThemeAppProperties () returned 0x3
[0198.570] GetThemeAppProperties () returned 0x3
[0198.570] IsThemePartDefined () returned 0x1
[0198.570] GdipCreateRegion (region=0x53e070) returned 0x0
[0198.570] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.570] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0198.570] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0198.571] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0198.571] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0198.571] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0198.571] LocalFree (hMem=0x89ea88) returned 0x0
[0198.571] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0198.571] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0198.571] LocalFree (hMem=0x89eee8) returned 0x0
[0198.571] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0198.571] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0198.571] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0198.571] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0198.571] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.571] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0198.571] GetCurrentObject (hdc=0xc30107c1, type=0x1) returned 0xb00017
[0198.571] GetCurrentObject (hdc=0xc30107c1, type=0x2) returned 0x900010
[0198.571] GetCurrentObject (hdc=0xc30107c1, type=0x7) returned 0x1e0507b9
[0198.572] GetCurrentObject (hdc=0xc30107c1, type=0x6) returned 0x8a01c2
[0198.572] SaveDC (hdc=0xc30107c1) returned 1
[0198.572] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7304053e
[0198.572] GetClipRgn (hdc=0xc30107c1, hrgn=0x7304053e) returned 0
[0198.572] SelectClipRgn (hdc=0xc30107c1, hrgn=0x7104051e) returned 2
[0198.572] DeleteObject (ho=0x7304053e) returned 1
[0198.572] DeleteObject (ho=0x7104051e) returned 1
[0198.572] OffsetViewportOrgEx (in: hdc=0xc30107c1, x=0, y=0, lppt=0x23459a0 | out: lppt=0x23459a0) returned 1
[0198.572] DrawThemeParentBackground () returned 0x0
[0198.572] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0198.572] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0198.572] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0198.572] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0198.572] GetSystemMetrics (nIndex=42) returned 0
[0198.573] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0198.573] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0198.573] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0198.573] GetCurrentObject (hdc=0xc30107c1, type=0x1) returned 0xb00017
[0198.573] GetCurrentObject (hdc=0xc30107c1, type=0x2) returned 0x900010
[0198.573] GetCurrentObject (hdc=0xc30107c1, type=0x7) returned 0x1e0507b9
[0198.573] GetCurrentObject (hdc=0xc30107c1, type=0x6) returned 0x8a01c2
[0198.573] SaveDC (hdc=0xc30107c1) returned 2
[0198.573] GetNearestColor (hdc=0xc30107c1, color=0xff) returned 0xff
[0198.573] CreateSolidBrush (color=0xff) returned 0xc10078d
[0198.573] FillRect (hDC=0xc30107c1, lprc=0x53dad0, hbr=0xc10078d) returned 1
[0198.573] DeleteObject (ho=0xc10078d) returned 1
[0198.573] RestoreDC (hdc=0xc30107c1, nSavedDC=-1) returned 1
[0198.573] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0198.574] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0198.574] GetSystemMetrics (nIndex=42) returned 0
[0198.574] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0198.574] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0198.574] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0198.574] GetCurrentObject (hdc=0xc30107c1, type=0x1) returned 0xb00017
[0198.574] GetCurrentObject (hdc=0xc30107c1, type=0x2) returned 0x900010
[0198.574] GetCurrentObject (hdc=0xc30107c1, type=0x7) returned 0x1e0507b9
[0198.574] GetCurrentObject (hdc=0xc30107c1, type=0x6) returned 0x8a01c2
[0198.574] SaveDC (hdc=0xc30107c1) returned 2
[0198.574] GetNearestColor (hdc=0xc30107c1, color=0xff) returned 0xff
[0198.574] CreateSolidBrush (color=0xff) returned 0xd10078d
[0198.574] FillRect (hDC=0xc30107c1, lprc=0x53da70, hbr=0xd10078d) returned 1
[0198.574] DeleteObject (ho=0xd10078d) returned 1
[0198.574] RestoreDC (hdc=0xc30107c1, nSavedDC=-1) returned 1
[0198.574] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0198.574] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0198.575] GetSystemMetrics (nIndex=42) returned 0
[0198.575] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0198.575] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0198.575] RestoreDC (hdc=0xc30107c1, nSavedDC=-1) returned 1
[0198.575] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc30107c1) returned 0x0
[0198.575] IsAppThemed () returned 0x1
[0198.575] GetThemeAppProperties () returned 0x3
[0198.575] GetThemeAppProperties () returned 0x3
[0198.575] IsAppThemed () returned 0x1
[0198.575] GetThemeAppProperties () returned 0x3
[0198.575] GetThemeAppProperties () returned 0x3
[0198.575] IsThemePartDefined () returned 0x1
[0198.575] GdipCreateRegion (region=0x53dff4) returned 0x0
[0198.575] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.576] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0198.576] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0198.576] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0198.576] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0198.576] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0198.576] LocalFree (hMem=0x89ee08) returned 0x0
[0198.576] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0198.576] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0198.576] LocalFree (hMem=0x89eee8) returned 0x0
[0198.576] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0198.576] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0198.576] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0198.576] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0198.576] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.576] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0198.576] GetCurrentObject (hdc=0xc30107c1, type=0x1) returned 0xb00017
[0198.576] GetCurrentObject (hdc=0xc30107c1, type=0x2) returned 0x900010
[0198.576] GetCurrentObject (hdc=0xc30107c1, type=0x7) returned 0x1e0507b9
[0198.577] GetCurrentObject (hdc=0xc30107c1, type=0x6) returned 0x8a01c2
[0198.577] SaveDC (hdc=0xc30107c1) returned 1
[0198.577] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7204051e
[0198.577] GetClipRgn (hdc=0xc30107c1, hrgn=0x7204051e) returned 0
[0198.577] SelectClipRgn (hdc=0xc30107c1, hrgn=0x7504053e) returned 2
[0198.577] DeleteObject (ho=0x7204051e) returned 1
[0198.577] DeleteObject (ho=0x7504053e) returned 1
[0198.577] OffsetViewportOrgEx (in: hdc=0xc30107c1, x=0, y=0, lppt=0x2346204 | out: lppt=0x2346204) returned 1
[0198.577] IsAppThemed () returned 0x1
[0198.577] GetThemeAppProperties () returned 0x3
[0198.577] GetThemeAppProperties () returned 0x3
[0198.577] DrawThemeBackground () returned 0x0
[0198.577] RestoreDC (hdc=0xc30107c1, nSavedDC=-1) returned 1
[0198.577] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc30107c1) returned 0x0
[0198.577] GdipCreateRegion (region=0x53dff8) returned 0x0
[0198.578] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0198.578] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0198.578] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0198.578] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0198.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0198.578] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0198.578] LocalFree (hMem=0x89eee8) returned 0x0
[0198.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0198.578] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0198.578] LocalFree (hMem=0x89ee08) returned 0x0
[0198.578] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0198.578] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0198.578] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0198.578] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0198.578] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0198.578] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0198.578] GetCurrentObject (hdc=0xc30107c1, type=0x1) returned 0xb00017
[0198.578] GetCurrentObject (hdc=0xc30107c1, type=0x2) returned 0x900010
[0198.578] GetCurrentObject (hdc=0xc30107c1, type=0x7) returned 0x1e0507b9
[0198.578] GetCurrentObject (hdc=0xc30107c1, type=0x6) returned 0x8a01c2
[0198.579] SaveDC (hdc=0xc30107c1) returned 1
[0198.579] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7604053e
[0198.579] GetClipRgn (hdc=0xc30107c1, hrgn=0x7604053e) returned 0
[0198.579] SelectClipRgn (hdc=0xc30107c1, hrgn=0x7304051e) returned 2
[0198.579] DeleteObject (ho=0x7604053e) returned 1
[0198.579] DeleteObject (ho=0x7304051e) returned 1
[0198.579] OffsetViewportOrgEx (in: hdc=0xc30107c1, x=0, y=0, lppt=0x23464d8 | out: lppt=0x23464d8) returned 1
[0198.579] IsAppThemed () returned 0x1
[0198.579] GetThemeAppProperties () returned 0x3
[0198.579] GetThemeAppProperties () returned 0x3
[0198.579] GetThemeBackgroundContentRect () returned 0x0
[0198.579] RestoreDC (hdc=0xc30107c1, nSavedDC=-1) returned 1
[0198.579] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc30107c1) returned 0x0
[0198.580] IsAppThemed () returned 0x1
[0198.580] GetThemeAppProperties () returned 0x3
[0198.580] GetThemeAppProperties () returned 0x3
[0198.580] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0198.580] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0198.580] GetCurrentObject (hdc=0xc30107c1, type=0x1) returned 0xb00017
[0198.580] GetCurrentObject (hdc=0xc30107c1, type=0x2) returned 0x900010
[0198.580] GetCurrentObject (hdc=0xc30107c1, type=0x7) returned 0x1e0507b9
[0198.580] GetCurrentObject (hdc=0xc30107c1, type=0x6) returned 0x8a01c2
[0198.580] SaveDC (hdc=0xc30107c1) returned 1
[0198.580] GetTextAlign (hdc=0xc30107c1) returned 0x0
[0198.580] GetTextColor (hdc=0xc30107c1) returned 0x0
[0198.580] GetCurrentObject (hdc=0xc30107c1, type=0x6) returned 0x8a01c2
[0198.580] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0198.580] SelectObject (hdc=0xc30107c1, h=0x450a0799) returned 0x8a01c2
[0198.580] GetBkMode (hdc=0xc30107c1) returned 2
[0198.580] SetBkMode (hdc=0xc30107c1, mode=1) returned 2
[0198.581] DrawTextExW (in: hdc=0xc30107c1, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x2346878 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0198.581] DrawTextExW (in: hdc=0xc30107c1, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x2346878 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0198.581] RestoreDC (hdc=0xc30107c1, nSavedDC=-1) returned 1
[0198.581] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc30107c1) returned 0x0
[0198.581] GetFocus () returned 0x902b4
[0198.581] IsAppThemed () returned 0x1
[0198.581] GetThemeAppProperties () returned 0x3
[0198.581] GetThemeAppProperties () returned 0x3
[0198.582] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0198.582] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xc30107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0198.582] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc30107c1) returned 0x0
[0198.582] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0198.582] SelectObject (hdc=0xc30107c1, h=0x85000f) returned 0x1e0507b9
[0198.582] DeleteDC (hdc=0xc30107c1) returned 1
[0198.582] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0198.582] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0198.582] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.582] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.582] WaitMessage () returned 1
[0198.613] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.613] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0198.614] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.614] WaitMessage () returned 1
[0198.615] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.619] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0198.619] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.619] WaitMessage () returned 1
[0198.619] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.619] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0198.620] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.620] WaitMessage () returned 1
[0198.665] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.665] IsWindowUnicode (hWnd=0x202d0) returned 1
[0198.665] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.666] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.666] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.666] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.666] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.666] WaitMessage () returned 1
[0198.779] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.779] IsWindowUnicode (hWnd=0x102dc) returned 1
[0198.779] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.779] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.779] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.780] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.780] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.780] WaitMessage () returned 1
[0198.781] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.781] IsWindowUnicode (hWnd=0x102dc) returned 1
[0198.781] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.781] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.781] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.783] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.783] IsWindowUnicode (hWnd=0x102dc) returned 1
[0198.783] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.784] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.784] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.784] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.784] IsWindowUnicode (hWnd=0x102dc) returned 1
[0198.784] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.784] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.784] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.784] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.785] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.785] WaitMessage () returned 1
[0198.785] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.785] IsWindowUnicode (hWnd=0x102dc) returned 1
[0198.785] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.786] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.786] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.788] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.788] IsWindowUnicode (hWnd=0x102dc) returned 1
[0198.788] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.788] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.788] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.788] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.788] IsWindowUnicode (hWnd=0x102dc) returned 1
[0198.789] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.789] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.789] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.789] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.789] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.789] WaitMessage () returned 1
[0198.792] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.792] IsWindowUnicode (hWnd=0x102dc) returned 1
[0198.792] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.792] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.792] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.794] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.794] IsWindowUnicode (hWnd=0x102dc) returned 1
[0198.794] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.794] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.794] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.794] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.795] IsWindowUnicode (hWnd=0x102dc) returned 1
[0198.795] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.795] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.795] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0198.795] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.796] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.796] WaitMessage () returned 1
[0198.820] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.820] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0198.820] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0198.820] DispatchMessageA (lpMsg=0x53e8a0) returned 0x7efe
[0198.820] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.820] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0198.820] WaitMessage () returned 1
[0199.022] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0199.022] IsWindowUnicode (hWnd=0x902b4) returned 1
[0199.022] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0199.022] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0199.022] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0199.023] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0199.023] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0199.023] WaitMessage () returned 1
[0199.569] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0199.569] IsWindowUnicode (hWnd=0x902b4) returned 1
[0199.569] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0199.569] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0199.569] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0199.569] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0199.570] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0199.570] WaitMessage () returned 1
[0199.819] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0199.819] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0199.819] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0199.819] DispatchMessageA (lpMsg=0x53e8a0) returned 0x1
[0199.820] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0199.820] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0199.821] WaitMessage () returned 1
[0200.143] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0200.143] IsWindowUnicode (hWnd=0x902b4) returned 1
[0200.143] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0200.143] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0200.143] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0200.143] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0200.143] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0200.143] WaitMessage () returned 1
[0200.631] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0200.631] IsWindowUnicode (hWnd=0x902b4) returned 1
[0200.631] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0200.631] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0200.631] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0200.632] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0200.632] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0200.632] WaitMessage () returned 1
[0200.927] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0200.929] MapWindowPoints (in: hWndFrom=0x11013e, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0200.930] IsWindowUnicode (hWnd=0x11013e) returned 1
[0200.930] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0200.930] MapWindowPoints (in: hWndFrom=0x11013e, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0200.930] SetCursor (hCursor=0x10003) returned 0x10003
[0200.930] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0200.930] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0200.930] _TrackMouseEvent (in: lpEventTrack=0x2346b90 | out: lpEventTrack=0x2346b90) returned 1
[0200.930] SendMessageW (hWnd=0x11013e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0200.931] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0200.931] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x200, wParam=0x0, lParam=0x14000c) returned 0x0
[0200.931] GetKeyState (nVirtKey=1) returned 0
[0200.931] GetKeyState (nVirtKey=2) returned 0
[0200.931] GetKeyState (nVirtKey=4) returned 0
[0200.931] GetKeyState (nVirtKey=5) returned 0
[0200.931] GetKeyState (nVirtKey=6) returned 0
[0200.931] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0200.931] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0200.931] WaitMessage () returned 1
[0201.001] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.001] MapWindowPoints (in: hWndFrom=0x11013e, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0201.001] IsWindowUnicode (hWnd=0x11013e) returned 1
[0201.001] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.002] MapWindowPoints (in: hWndFrom=0x11013e, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0201.002] GetDlgItem (hDlg=0xc02c8, nIDDlgItem=0) returned 0x0
[0201.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x210, wParam=0x201, lParam=0x1e0016) returned 0x0
[0201.002] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x21, wParam=0xc02c8, lParam=0x2010001) returned 0x1
[0201.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x21, wParam=0xc02c8, lParam=0x2010001) returned 0x1
[0201.002] SetCursor (hCursor=0x10003) returned 0x10003
[0201.003] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0201.003] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0201.003] GetKeyState (nVirtKey=1) returned -127
[0201.003] GetKeyState (nVirtKey=2) returned 0
[0201.003] GetKeyState (nVirtKey=4) returned 0
[0201.003] GetKeyState (nVirtKey=5) returned 0
[0201.003] GetKeyState (nVirtKey=6) returned 0
[0201.003] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x201, wParam=0x1, lParam=0x14000c) returned 0x0
[0201.003] GetKeyState (nVirtKey=1) returned -127
[0201.003] GetKeyState (nVirtKey=2) returned 0
[0201.003] GetKeyState (nVirtKey=4) returned 0
[0201.003] GetKeyState (nVirtKey=5) returned 0
[0201.003] GetKeyState (nVirtKey=6) returned 0
[0201.003] GetCapture () returned 0x0
[0201.003] SetCapture (hWnd=0x11013e) returned 0x0
[0201.003] GetKeyState (nVirtKey=1) returned -127
[0201.003] GetKeyState (nVirtKey=2) returned 0
[0201.003] GetKeyState (nVirtKey=4) returned 0
[0201.003] GetKeyState (nVirtKey=5) returned 0
[0201.003] GetKeyState (nVirtKey=6) returned 0
[0201.003] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.004] IsWindowUnicode (hWnd=0x11013e) returned 1
[0201.004] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.004] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0201.004] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0201.004] MapWindowPoints (in: hWndFrom=0x11013e, hWndTo=0x0, lpPoints=0x2346c04, cPoints=0x1 | out: lpPoints=0x2346c04) returned 25625129
[0201.004] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x202, wParam=0x0, lParam=0x14000c) returned 0x0
[0201.004] WindowFromPoint (Point=0x235) returned 0x11013e
[0201.004] MapWindowPoints (in: hWndFrom=0x11013e, hWndTo=0x0, lpPoints=0x53e1c8, cPoints=0x2 | out: lpPoints=0x53e1c8) returned 25625129
[0201.004] GetCapture () returned 0x11013e
[0201.004] ReleaseCapture () returned 1
[0201.004] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0201.005] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.005] MapWindowPoints (in: hWndFrom=0x11013e, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0201.005] IsWindowUnicode (hWnd=0x11013e) returned 1
[0201.005] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.005] MapWindowPoints (in: hWndFrom=0x11013e, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0201.005] SetCursor (hCursor=0x10003) returned 0x10003
[0201.005] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0201.005] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0201.005] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x200, wParam=0x0, lParam=0x14000c) returned 0x0
[0201.005] GetKeyState (nVirtKey=1) returned 1
[0201.030] GetKeyState (nVirtKey=2) returned 0
[0201.031] GetKeyState (nVirtKey=4) returned 0
[0201.031] GetKeyState (nVirtKey=5) returned 0
[0201.031] GetKeyState (nVirtKey=6) returned 0
[0201.031] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0201.031] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0201.031] WaitMessage () returned 1
[0201.100] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.100] IsWindowUnicode (hWnd=0x11013e) returned 1
[0201.100] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.100] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0201.100] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0201.100] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.100] IsWindowUnicode (hWnd=0x11013e) returned 1
[0201.100] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.100] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0201.100] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0201.100] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x2a1, wParam=0x0, lParam=0x14000c) returned 0x0
[0201.100] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0201.100] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0201.101] WaitMessage () returned 1
[0201.162] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.162] IsWindowUnicode (hWnd=0x902b4) returned 1
[0201.162] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.162] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0201.163] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0201.163] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0201.163] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0201.163] WaitMessage () returned 1
[0201.694] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.694] IsWindowUnicode (hWnd=0x902b4) returned 1
[0201.694] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0201.694] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0201.694] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0201.695] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0201.695] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0201.695] WaitMessage () returned 1
[0202.225] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0202.225] IsWindowUnicode (hWnd=0x902b4) returned 1
[0202.225] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0202.225] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0202.225] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0202.226] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0202.226] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0202.226] WaitMessage () returned 1
[0202.771] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0202.772] IsWindowUnicode (hWnd=0x902b4) returned 1
[0202.772] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0202.772] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0202.772] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0202.772] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0202.772] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0202.772] WaitMessage () returned 1
[0203.303] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.303] IsWindowUnicode (hWnd=0x902b4) returned 1
[0203.303] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.303] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0203.303] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0203.304] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0203.305] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0203.305] WaitMessage () returned 1
[0203.447] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.448] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0203.449] IsWindowUnicode (hWnd=0xd02d6) returned 1
[0203.449] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.449] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0203.449] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0203.449] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0203.449] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.449] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0203.449] IsWindowUnicode (hWnd=0xd02d6) returned 1
[0203.449] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.450] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0203.450] SetCursor (hCursor=0x10003) returned 0x10003
[0203.450] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0203.450] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0203.450] _TrackMouseEvent (in: lpEventTrack=0x233f9d0 | out: lpEventTrack=0x233f9d0) returned 1
[0203.450] SendMessageW (hWnd=0xd02d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0203.450] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0203.450] InvalidateRect (hWnd=0xd02d6, lpRect=0x0, bErase=0) returned 1
[0203.451] GetKeyState (nVirtKey=1) returned 1
[0203.451] GetKeyState (nVirtKey=2) returned 0
[0203.451] GetKeyState (nVirtKey=4) returned 0
[0203.451] GetKeyState (nVirtKey=5) returned 0
[0203.451] GetKeyState (nVirtKey=6) returned 0
[0203.451] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.451] IsWindowUnicode (hWnd=0xd02d6) returned 1
[0203.451] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.451] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0203.451] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0203.451] BeginPaint (in: hWnd=0xd02d6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0203.452] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0203.452] CreateCompatibleDC (hdc=0x10105d6) returned 0xcb010527
[0203.452] SelectObject (hdc=0xcb010527, h=0x1e0507b9) returned 0x85000f
[0203.452] GdipCreateFromHDC (hdc=0xcb010527, graphics=0x53e300) returned 0x0
[0203.453] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0203.453] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0203.453] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0203.453] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0203.453] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0203.454] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0203.454] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0203.454] LocalFree (hMem=0x89ea88) returned 0x0
[0203.454] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0203.454] GdipCreateRegion (region=0x53e348) returned 0x0
[0203.454] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0203.454] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0203.454] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0203.454] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcfb0dbd) returned 0x0
[0203.454] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0203.455] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0203.455] GetCurrentObject (hdc=0xcb010527, type=0x1) returned 0xb00017
[0203.455] GetCurrentObject (hdc=0xcb010527, type=0x2) returned 0x900010
[0203.455] GetCurrentObject (hdc=0xcb010527, type=0x7) returned 0x1e0507b9
[0203.455] GetCurrentObject (hdc=0xcb010527, type=0x6) returned 0x8a01c2
[0203.455] SaveDC (hdc=0xcb010527) returned 1
[0203.455] GetNearestColor (hdc=0xcb010527, color=0xf0f0f0) returned 0xf0f0f0
[0203.455] GetNearestColor (hdc=0xcb010527, color=0xa0a0a0) returned 0xa0a0a0
[0203.455] GetNearestColor (hdc=0xcb010527, color=0x696969) returned 0x696969
[0203.456] GetNearestColor (hdc=0xcb010527, color=0xa0a0a0) returned 0xa0a0a0
[0203.456] GetNearestColor (hdc=0xcb010527, color=0x0) returned 0x0
[0203.456] GetNearestColor (hdc=0xcb010527, color=0xffffff) returned 0xffffff
[0203.456] GetNearestColor (hdc=0xcb010527, color=0xe5e5e5) returned 0xe5e5e5
[0203.456] GetNearestColor (hdc=0xcb010527, color=0xd7d7d7) returned 0xd7d7d7
[0203.456] GetNearestColor (hdc=0xcb010527, color=0x0) returned 0x0
[0203.456] RestoreDC (hdc=0xcb010527, nSavedDC=-1) returned 1
[0203.456] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb010527) returned 0x0
[0203.456] IsAppThemed () returned 0x1
[0203.456] GetThemeAppProperties () returned 0x3
[0203.456] GetThemeAppProperties () returned 0x3
[0203.457] IsAppThemed () returned 0x1
[0203.457] GetThemeAppProperties () returned 0x3
[0203.457] GetThemeAppProperties () returned 0x3
[0203.457] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0203.457] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x23474e4 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0203.458] IsAppThemed () returned 0x1
[0203.458] GetThemeAppProperties () returned 0x3
[0203.458] GetThemeAppProperties () returned 0x3
[0203.458] IsAppThemed () returned 0x1
[0203.458] GetThemeAppProperties () returned 0x3
[0203.458] GetThemeAppProperties () returned 0x3
[0203.458] IsAppThemed () returned 0x1
[0203.459] GetThemeAppProperties () returned 0x3
[0203.459] GetThemeAppProperties () returned 0x3
[0203.459] IsAppThemed () returned 0x1
[0203.459] GetThemeAppProperties () returned 0x3
[0203.459] GetThemeAppProperties () returned 0x3
[0203.459] IsThemePartDefined () returned 0x1
[0203.459] IsAppThemed () returned 0x1
[0203.459] GetThemeAppProperties () returned 0x3
[0203.459] GetThemeAppProperties () returned 0x3
[0203.459] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0203.459] IsAppThemed () returned 0x1
[0203.459] GetThemeAppProperties () returned 0x3
[0203.459] GetThemeAppProperties () returned 0x3
[0203.459] IsAppThemed () returned 0x1
[0203.460] GetThemeAppProperties () returned 0x3
[0203.460] GetThemeAppProperties () returned 0x3
[0203.460] IsThemePartDefined () returned 0x1
[0203.460] GdipCreateRegion (region=0x53e064) returned 0x0
[0203.460] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0203.460] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0203.460] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0203.460] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0203.460] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0203.460] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0203.460] LocalFree (hMem=0x89ea88) returned 0x0
[0203.460] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0203.460] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0203.460] LocalFree (hMem=0x89ea88) returned 0x0
[0203.460] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0203.460] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0203.460] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0203.460] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0203.461] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0203.461] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0203.461] GetCurrentObject (hdc=0xcb010527, type=0x1) returned 0xb00017
[0203.461] GetCurrentObject (hdc=0xcb010527, type=0x2) returned 0x900010
[0203.461] GetCurrentObject (hdc=0xcb010527, type=0x7) returned 0x1e0507b9
[0203.461] GetCurrentObject (hdc=0xcb010527, type=0x6) returned 0x8a01c2
[0203.461] SaveDC (hdc=0xcb010527) returned 1
[0203.461] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7404051e
[0203.461] GetClipRgn (hdc=0xcb010527, hrgn=0x7404051e) returned 0
[0203.461] SelectClipRgn (hdc=0xcb010527, hrgn=0x7a04053e) returned 2
[0203.461] DeleteObject (ho=0x7404051e) returned 1
[0203.461] DeleteObject (ho=0x7a04053e) returned 1
[0203.461] OffsetViewportOrgEx (in: hdc=0xcb010527, x=0, y=0, lppt=0x2347b94 | out: lppt=0x2347b94) returned 1
[0203.461] DrawThemeParentBackground () returned 0x0
[0203.462] GetWindowPlacement (in: hWnd=0xc02c8, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0203.462] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0203.462] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0203.462] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0203.462] GetSystemMetrics (nIndex=42) returned 0
[0203.462] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0203.462] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0203.462] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0203.462] GetCurrentObject (hdc=0xcb010527, type=0x1) returned 0xb00017
[0203.462] GetCurrentObject (hdc=0xcb010527, type=0x2) returned 0x900010
[0203.463] GetCurrentObject (hdc=0xcb010527, type=0x7) returned 0x1e0507b9
[0203.463] GetCurrentObject (hdc=0xcb010527, type=0x6) returned 0x8a01c2
[0203.463] SaveDC (hdc=0xcb010527) returned 2
[0203.463] GetNearestColor (hdc=0xcb010527, color=0xf0f0f0) returned 0xf0f0f0
[0203.463] CreateSolidBrush (color=0xf0f0f0) returned 0xe10078d
[0203.463] FillRect (hDC=0xcb010527, lprc=0x53dac8, hbr=0xe10078d) returned 1
[0203.463] DeleteObject (ho=0xe10078d) returned 1
[0203.463] RestoreDC (hdc=0xcb010527, nSavedDC=-1) returned 1
[0203.463] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0203.463] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0203.463] GetSystemMetrics (nIndex=42) returned 0
[0203.463] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0203.463] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0203.463] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0203.464] GetCurrentObject (hdc=0xcb010527, type=0x1) returned 0xb00017
[0203.464] GetCurrentObject (hdc=0xcb010527, type=0x2) returned 0x900010
[0203.464] GetCurrentObject (hdc=0xcb010527, type=0x7) returned 0x1e0507b9
[0203.464] GetCurrentObject (hdc=0xcb010527, type=0x6) returned 0x8a01c2
[0203.464] SaveDC (hdc=0xcb010527) returned 2
[0203.464] GetNearestColor (hdc=0xcb010527, color=0xf0f0f0) returned 0xf0f0f0
[0203.464] CreateSolidBrush (color=0xf0f0f0) returned 0xf10078d
[0203.464] FillRect (hDC=0xcb010527, lprc=0x53da68, hbr=0xf10078d) returned 1
[0203.464] DeleteObject (ho=0xf10078d) returned 1
[0203.464] RestoreDC (hdc=0xcb010527, nSavedDC=-1) returned 1
[0203.464] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0203.464] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0203.464] GetSystemMetrics (nIndex=42) returned 0
[0203.464] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0203.464] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0203.464] RestoreDC (hdc=0xcb010527, nSavedDC=-1) returned 1
[0203.465] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb010527) returned 0x0
[0203.465] IsAppThemed () returned 0x1
[0203.465] GetThemeAppProperties () returned 0x3
[0203.465] GetThemeAppProperties () returned 0x3
[0203.465] IsAppThemed () returned 0x1
[0203.465] GetThemeAppProperties () returned 0x3
[0203.465] GetThemeAppProperties () returned 0x3
[0203.465] IsThemePartDefined () returned 0x1
[0203.465] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0203.465] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0203.465] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0203.465] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0203.465] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0203.465] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0203.465] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0203.465] LocalFree (hMem=0x89ee08) returned 0x0
[0203.465] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0203.465] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0203.465] LocalFree (hMem=0x89ea88) returned 0x0
[0203.465] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0203.466] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0203.466] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0203.466] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0203.466] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0203.466] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0203.466] GetCurrentObject (hdc=0xcb010527, type=0x1) returned 0xb00017
[0203.466] GetCurrentObject (hdc=0xcb010527, type=0x2) returned 0x900010
[0203.466] GetCurrentObject (hdc=0xcb010527, type=0x7) returned 0x1e0507b9
[0203.466] GetCurrentObject (hdc=0xcb010527, type=0x6) returned 0x8a01c2
[0203.466] SaveDC (hdc=0xcb010527) returned 1
[0203.466] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b04053e
[0203.466] GetClipRgn (hdc=0xcb010527, hrgn=0x7b04053e) returned 0
[0203.466] SelectClipRgn (hdc=0xcb010527, hrgn=0x7604051e) returned 2
[0203.466] DeleteObject (ho=0x7b04053e) returned 1
[0203.466] DeleteObject (ho=0x7604051e) returned 1
[0203.466] OffsetViewportOrgEx (in: hdc=0xcb010527, x=0, y=0, lppt=0x234841c | out: lppt=0x234841c) returned 1
[0203.466] IsAppThemed () returned 0x1
[0203.467] GetThemeAppProperties () returned 0x3
[0203.467] GetThemeAppProperties () returned 0x3
[0203.467] DrawThemeBackground () returned 0x0
[0203.467] RestoreDC (hdc=0xcb010527, nSavedDC=-1) returned 1
[0203.467] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb010527) returned 0x0
[0203.467] GdipCreateRegion (region=0x53dfec) returned 0x0
[0203.467] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0203.467] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0203.467] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0203.467] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0203.467] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0203.467] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0203.467] LocalFree (hMem=0x89ec80) returned 0x0
[0203.467] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0203.467] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0203.468] LocalFree (hMem=0x89ea88) returned 0x0
[0203.468] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0203.468] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0203.468] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0203.468] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0203.468] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0203.468] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0203.468] GetCurrentObject (hdc=0xcb010527, type=0x1) returned 0xb00017
[0203.468] GetCurrentObject (hdc=0xcb010527, type=0x2) returned 0x900010
[0203.468] GetCurrentObject (hdc=0xcb010527, type=0x7) returned 0x1e0507b9
[0203.468] GetCurrentObject (hdc=0xcb010527, type=0x6) returned 0x8a01c2
[0203.468] SaveDC (hdc=0xcb010527) returned 1
[0203.468] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7704051e
[0203.468] GetClipRgn (hdc=0xcb010527, hrgn=0x7704051e) returned 0
[0203.468] SelectClipRgn (hdc=0xcb010527, hrgn=0x7c04053e) returned 2
[0203.468] DeleteObject (ho=0x7704051e) returned 1
[0203.468] DeleteObject (ho=0x7c04053e) returned 1
[0203.468] OffsetViewportOrgEx (in: hdc=0xcb010527, x=0, y=0, lppt=0x23486f0 | out: lppt=0x23486f0) returned 1
[0203.469] IsAppThemed () returned 0x1
[0203.469] GetThemeAppProperties () returned 0x3
[0203.469] GetThemeAppProperties () returned 0x3
[0203.469] GetThemeBackgroundContentRect () returned 0x0
[0203.469] RestoreDC (hdc=0xcb010527, nSavedDC=-1) returned 1
[0203.469] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb010527) returned 0x0
[0203.469] IsAppThemed () returned 0x1
[0203.469] GetThemeAppProperties () returned 0x3
[0203.469] GetThemeAppProperties () returned 0x3
[0203.469] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0203.469] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0203.469] GetCurrentObject (hdc=0xcb010527, type=0x1) returned 0xb00017
[0203.469] GetCurrentObject (hdc=0xcb010527, type=0x2) returned 0x900010
[0203.469] GetCurrentObject (hdc=0xcb010527, type=0x7) returned 0x1e0507b9
[0203.469] GetCurrentObject (hdc=0xcb010527, type=0x6) returned 0x8a01c2
[0203.469] SaveDC (hdc=0xcb010527) returned 1
[0203.469] GetTextAlign (hdc=0xcb010527) returned 0x0
[0203.469] GetTextColor (hdc=0xcb010527) returned 0x0
[0203.470] GetCurrentObject (hdc=0xcb010527, type=0x6) returned 0x8a01c2
[0203.470] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0203.470] SelectObject (hdc=0xcb010527, h=0x730a066d) returned 0x8a01c2
[0203.470] GetBkMode (hdc=0xcb010527) returned 2
[0203.470] SetBkMode (hdc=0xcb010527, mode=1) returned 2
[0203.470] DrawTextExW (in: hdc=0xcb010527, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x2348a90 | out: lpchText="OK", lprc=0x53df84) returned 13
[0203.470] DrawTextExW (in: hdc=0xcb010527, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x2348a90 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0203.471] RestoreDC (hdc=0xcb010527, nSavedDC=-1) returned 1
[0203.471] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb010527) returned 0x0
[0203.471] GetFocus () returned 0x902b4
[0203.471] IsAppThemed () returned 0x1
[0203.471] GetThemeAppProperties () returned 0x3
[0203.471] GetThemeAppProperties () returned 0x3
[0203.471] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0203.471] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0xcb010527, x1=0, y1=0, rop=0xcc0020) returned 1
[0203.472] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb010527) returned 0x0
[0203.472] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0203.472] SelectObject (hdc=0xcb010527, h=0x85000f) returned 0x1e0507b9
[0203.472] DeleteDC (hdc=0xcb010527) returned 1
[0203.472] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0203.472] EndPaint (hWnd=0xd02d6, lpPaint=0x53e2e4) returned 1
[0203.472] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0203.472] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0203.472] WaitMessage () returned 1
[0203.553] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.553] IsWindowUnicode (hWnd=0xd02d6) returned 1
[0203.553] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.553] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0203.553] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0203.553] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.553] IsWindowUnicode (hWnd=0xd02d6) returned 1
[0203.553] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.553] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0203.553] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0203.554] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x2a1, wParam=0x0, lParam=0xa0020) returned 0x0
[0203.554] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0203.554] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0203.554] WaitMessage () returned 1
[0203.670] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.671] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0203.671] IsWindowUnicode (hWnd=0xd02d6) returned 1
[0203.671] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.671] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0203.672] GetDlgItem (hDlg=0xc02c8, nIDDlgItem=0) returned 0x0
[0203.672] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x210, wParam=0x201, lParam=0x160142) returned 0x0
[0203.672] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x21, wParam=0xc02c8, lParam=0x2010001) returned 0x1
[0203.672] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x21, wParam=0xc02c8, lParam=0x2010001) returned 0x1
[0203.672] SetCursor (hCursor=0x10003) returned 0x10003
[0203.672] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0203.672] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0203.672] GetKeyState (nVirtKey=1) returned -128
[0203.672] GetKeyState (nVirtKey=2) returned 0
[0203.672] GetKeyState (nVirtKey=4) returned 0
[0203.672] GetKeyState (nVirtKey=5) returned 0
[0203.672] GetKeyState (nVirtKey=6) returned 0
[0203.672] IsWindowVisible (hWnd=0xd02d6) returned 1
[0203.672] IsWindowEnabled (hWnd=0xd02d6) returned 1
[0203.672] SetFocus (hWnd=0xd02d6) returned 0x902b4
[0203.676] GetFocus () returned 0xd02d6
[0203.676] IsChild (hWndParent=0xc02c8, hWnd=0xd02d6) returned 1
[0203.676] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x8, wParam=0xd02d6, lParam=0x0) returned 0x1
[0203.676] SendMessageW (hWnd=0x902b4, Msg=0x2111, wParam=0x20002b4, lParam=0x902b4) returned 0x0
[0203.677] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0203.680] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0203.681] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0203.681] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0203.682] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0203.682] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0203.684] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0203.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x7, wParam=0x902b4, lParam=0x0) returned 0x0
[0203.685] GetStockObject (i=5) returned 0x900015
[0203.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0203.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0xd, wParam=0x3, lParam=0x89e638) returned 0x2
[0203.685] GetDlgItem (hDlg=0xc02c8, nIDDlgItem=852694) returned 0xd02d6
[0203.685] SendMessageW (hWnd=0xd02d6, Msg=0x202b, wParam=0xd02d6, lParam=0x53de74) returned 0x0
[0203.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x202b, wParam=0xd02d6, lParam=0x53de74) returned 0x0
[0203.685] InvalidateRect (hWnd=0xd02d6, lpRect=0x0, bErase=0) returned 1
[0203.688] GetFocus () returned 0xd02d6
[0203.688] GetFocus () returned 0xd02d6
[0203.688] GetFocus () returned 0xd02d6
[0203.688] GetKeyState (nVirtKey=1) returned -128
[0203.688] GetKeyState (nVirtKey=2) returned 0
[0203.688] GetKeyState (nVirtKey=4) returned 0
[0203.688] GetKeyState (nVirtKey=5) returned 0
[0203.688] GetKeyState (nVirtKey=6) returned 0
[0203.688] GetCapture () returned 0x0
[0203.688] SetCapture (hWnd=0xd02d6) returned 0x0
[0203.688] GetKeyState (nVirtKey=1) returned -128
[0203.688] GetKeyState (nVirtKey=2) returned 0
[0203.688] GetKeyState (nVirtKey=4) returned 0
[0203.688] GetKeyState (nVirtKey=5) returned 0
[0203.689] GetKeyState (nVirtKey=6) returned 0
[0203.689] NotifyWinEvent (event=0x800a, hwnd=0xd02d6, idObject=-4, idChild=0)
[0203.689] InvalidateRect (hWnd=0xd02d6, lpRect=0x53e4c8, bErase=0) returned 1
[0203.689] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.689] IsWindowUnicode (hWnd=0xd02d6) returned 1
[0203.689] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.689] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0203.689] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0203.689] MapWindowPoints (in: hWndFrom=0xd02d6, hWndTo=0x0, lpPoints=0x2348c74, cPoints=0x1 | out: lpPoints=0x2348c74) returned 25756481
[0203.689] NotifyWinEvent (event=0x800a, hwnd=0xd02d6, idObject=-4, idChild=0)
[0203.689] InvalidateRect (hWnd=0xd02d6, lpRect=0x53e468, bErase=0) returned 1
[0203.689] UpdateWindow (hWnd=0xd02d6) returned 1
[0203.689] BeginPaint (in: hWnd=0xd02d6, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0203.689] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0203.690] CreateCompatibleDC (hdc=0x10105d6) returned 0xcc010527
[0203.690] SelectObject (hdc=0xcc010527, h=0x1e0507b9) returned 0x85000f
[0203.690] GdipCreateFromHDC (hdc=0xcc010527, graphics=0x53df98) returned 0x0
[0203.690] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0203.690] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0203.690] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0203.690] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0203.690] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0203.690] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0203.690] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0203.690] LocalFree (hMem=0x89ea88) returned 0x0
[0203.690] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0203.691] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0203.691] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0203.691] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0203.691] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0203.691] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcf90dbd) returned 0x0
[0203.691] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0203.691] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0203.691] GetCurrentObject (hdc=0xcc010527, type=0x1) returned 0xb00017
[0203.691] GetCurrentObject (hdc=0xcc010527, type=0x2) returned 0x900010
[0203.691] GetCurrentObject (hdc=0xcc010527, type=0x7) returned 0x1e0507b9
[0203.691] GetCurrentObject (hdc=0xcc010527, type=0x6) returned 0x8a01c2
[0203.691] SaveDC (hdc=0xcc010527) returned 1
[0203.691] GetNearestColor (hdc=0xcc010527, color=0xf0f0f0) returned 0xf0f0f0
[0203.692] GetNearestColor (hdc=0xcc010527, color=0xa0a0a0) returned 0xa0a0a0
[0203.692] GetNearestColor (hdc=0xcc010527, color=0x696969) returned 0x696969
[0203.692] GetNearestColor (hdc=0xcc010527, color=0xa0a0a0) returned 0xa0a0a0
[0203.692] GetNearestColor (hdc=0xcc010527, color=0x0) returned 0x0
[0203.692] GetNearestColor (hdc=0xcc010527, color=0xffffff) returned 0xffffff
[0203.692] GetNearestColor (hdc=0xcc010527, color=0xe5e5e5) returned 0xe5e5e5
[0203.692] GetNearestColor (hdc=0xcc010527, color=0xd7d7d7) returned 0xd7d7d7
[0203.692] GetNearestColor (hdc=0xcc010527, color=0x0) returned 0x0
[0203.692] RestoreDC (hdc=0xcc010527, nSavedDC=-1) returned 1
[0203.692] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcc010527) returned 0x0
[0203.692] IsAppThemed () returned 0x1
[0203.693] GetThemeAppProperties () returned 0x3
[0203.693] GetThemeAppProperties () returned 0x3
[0203.693] IsAppThemed () returned 0x1
[0203.693] GetThemeAppProperties () returned 0x3
[0203.693] GetThemeAppProperties () returned 0x3
[0203.693] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x23493e8 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0203.694] IsAppThemed () returned 0x1
[0203.694] GetThemeAppProperties () returned 0x3
[0203.694] GetThemeAppProperties () returned 0x3
[0203.694] IsAppThemed () returned 0x1
[0203.694] GetThemeAppProperties () returned 0x3
[0203.694] GetThemeAppProperties () returned 0x3
[0203.694] IsAppThemed () returned 0x1
[0203.694] GetThemeAppProperties () returned 0x3
[0203.694] GetThemeAppProperties () returned 0x3
[0203.694] IsAppThemed () returned 0x1
[0203.694] GetThemeAppProperties () returned 0x3
[0203.694] GetThemeAppProperties () returned 0x3
[0203.694] IsThemePartDefined () returned 0x1
[0203.694] IsAppThemed () returned 0x1
[0203.695] GetThemeAppProperties () returned 0x3
[0203.695] GetThemeAppProperties () returned 0x3
[0203.695] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0203.695] IsAppThemed () returned 0x1
[0203.695] GetThemeAppProperties () returned 0x3
[0203.695] GetThemeAppProperties () returned 0x3
[0203.695] IsAppThemed () returned 0x1
[0203.695] GetThemeAppProperties () returned 0x3
[0203.695] GetThemeAppProperties () returned 0x3
[0203.695] IsThemePartDefined () returned 0x1
[0203.695] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0203.695] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0203.695] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0203.695] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0203.695] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0203.695] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0203.695] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0203.695] LocalFree (hMem=0x89ec80) returned 0x0
[0203.695] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0203.695] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0203.696] LocalFree (hMem=0x89eac0) returned 0x0
[0203.696] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0203.696] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0203.696] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0203.696] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0203.696] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0203.696] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0203.696] GetCurrentObject (hdc=0xcc010527, type=0x1) returned 0xb00017
[0203.696] GetCurrentObject (hdc=0xcc010527, type=0x2) returned 0x900010
[0203.696] GetCurrentObject (hdc=0xcc010527, type=0x7) returned 0x1e0507b9
[0203.696] GetCurrentObject (hdc=0xcc010527, type=0x6) returned 0x8a01c2
[0203.696] SaveDC (hdc=0xcc010527) returned 1
[0203.696] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d04053e
[0203.696] GetClipRgn (hdc=0xcc010527, hrgn=0x7d04053e) returned 0
[0203.696] SelectClipRgn (hdc=0xcc010527, hrgn=0x7b04051e) returned 2
[0203.696] DeleteObject (ho=0x7d04053e) returned 1
[0203.696] DeleteObject (ho=0x7b04051e) returned 1
[0203.697] OffsetViewportOrgEx (in: hdc=0xcc010527, x=0, y=0, lppt=0x2349a98 | out: lppt=0x2349a98) returned 1
[0203.697] DrawThemeParentBackground () returned 0x0
[0203.697] GetWindowPlacement (in: hWnd=0xc02c8, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0203.697] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0203.697] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0203.697] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0203.697] GetSystemMetrics (nIndex=42) returned 0
[0203.697] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0203.697] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0203.697] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0203.697] GetCurrentObject (hdc=0xcc010527, type=0x1) returned 0xb00017
[0203.697] GetCurrentObject (hdc=0xcc010527, type=0x2) returned 0x900010
[0203.697] GetCurrentObject (hdc=0xcc010527, type=0x7) returned 0x1e0507b9
[0203.697] GetCurrentObject (hdc=0xcc010527, type=0x6) returned 0x8a01c2
[0203.698] SaveDC (hdc=0xcc010527) returned 2
[0203.698] GetNearestColor (hdc=0xcc010527, color=0xf0f0f0) returned 0xf0f0f0
[0203.698] CreateSolidBrush (color=0xf0f0f0) returned 0x1010078d
[0203.698] FillRect (hDC=0xcc010527, lprc=0x53d760, hbr=0x1010078d) returned 1
[0203.698] DeleteObject (ho=0x1010078d) returned 1
[0203.698] RestoreDC (hdc=0xcc010527, nSavedDC=-1) returned 1
[0203.698] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0203.698] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0203.698] GetSystemMetrics (nIndex=42) returned 0
[0203.698] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0203.698] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0203.698] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0203.698] GetCurrentObject (hdc=0xcc010527, type=0x1) returned 0xb00017
[0203.698] GetCurrentObject (hdc=0xcc010527, type=0x2) returned 0x900010
[0203.698] GetCurrentObject (hdc=0xcc010527, type=0x7) returned 0x1e0507b9
[0203.698] GetCurrentObject (hdc=0xcc010527, type=0x6) returned 0x8a01c2
[0203.698] SaveDC (hdc=0xcc010527) returned 2
[0203.698] GetNearestColor (hdc=0xcc010527, color=0xf0f0f0) returned 0xf0f0f0
[0203.699] CreateSolidBrush (color=0xf0f0f0) returned 0x1110078d
[0203.699] FillRect (hDC=0xcc010527, lprc=0x53d700, hbr=0x1110078d) returned 1
[0203.699] DeleteObject (ho=0x1110078d) returned 1
[0203.699] RestoreDC (hdc=0xcc010527, nSavedDC=-1) returned 1
[0203.699] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0203.699] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0203.699] GetSystemMetrics (nIndex=42) returned 0
[0203.699] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0203.699] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0203.699] RestoreDC (hdc=0xcc010527, nSavedDC=-1) returned 1
[0203.699] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcc010527) returned 0x0
[0203.699] IsAppThemed () returned 0x1
[0203.699] GetThemeAppProperties () returned 0x3
[0203.699] GetThemeAppProperties () returned 0x3
[0203.699] IsAppThemed () returned 0x1
[0203.700] GetThemeAppProperties () returned 0x3
[0203.700] GetThemeAppProperties () returned 0x3
[0203.700] IsThemePartDefined () returned 0x1
[0203.700] GdipCreateRegion (region=0x53dc80) returned 0x0
[0203.700] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0203.700] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0203.700] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0203.700] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0203.700] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0203.700] LocalFree (hMem=0x89ee08) returned 0x0
[0203.700] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0203.700] LocalFree (hMem=0x89ea88) returned 0x0
[0203.700] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0203.700] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0203.700] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0203.700] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0203.700] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0203.700] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0203.700] GetCurrentObject (hdc=0xcc010527, type=0x1) returned 0xb00017
[0203.700] GetCurrentObject (hdc=0xcc010527, type=0x2) returned 0x900010
[0203.700] GetCurrentObject (hdc=0xcc010527, type=0x7) returned 0x1e0507b9
[0203.700] GetCurrentObject (hdc=0xcc010527, type=0x6) returned 0x8a01c2
[0203.701] SaveDC (hdc=0xcc010527) returned 1
[0203.701] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c04051e
[0203.701] GetClipRgn (hdc=0xcc010527, hrgn=0x7c04051e) returned 0
[0203.701] SelectClipRgn (hdc=0xcc010527, hrgn=0x7f04053e) returned 2
[0203.701] DeleteObject (ho=0x7c04051e) returned 1
[0203.701] DeleteObject (ho=0x7f04053e) returned 1
[0203.701] OffsetViewportOrgEx (in: hdc=0xcc010527, x=0, y=0, lppt=0x234a320 | out: lppt=0x234a320) returned 1
[0203.701] IsAppThemed () returned 0x1
[0203.701] GetThemeAppProperties () returned 0x3
[0203.701] GetThemeAppProperties () returned 0x3
[0203.701] DrawThemeBackground () returned 0x0
[0203.701] RestoreDC (hdc=0xcc010527, nSavedDC=-1) returned 1
[0203.701] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcc010527) returned 0x0
[0203.701] GdipCreateRegion (region=0x53dc84) returned 0x0
[0203.701] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0203.701] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0203.701] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0203.701] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0203.701] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0203.701] LocalFree (hMem=0x89ec80) returned 0x0
[0203.701] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0203.702] LocalFree (hMem=0x89ee08) returned 0x0
[0203.702] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0203.702] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0203.702] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0203.702] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0203.702] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0203.702] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0203.702] GetCurrentObject (hdc=0xcc010527, type=0x1) returned 0xb00017
[0203.702] GetCurrentObject (hdc=0xcc010527, type=0x2) returned 0x900010
[0203.702] GetCurrentObject (hdc=0xcc010527, type=0x7) returned 0x1e0507b9
[0203.702] GetCurrentObject (hdc=0xcc010527, type=0x6) returned 0x8a01c2
[0203.702] SaveDC (hdc=0xcc010527) returned 1
[0203.702] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8004053e
[0203.702] GetClipRgn (hdc=0xcc010527, hrgn=0x8004053e) returned 0
[0203.702] SelectClipRgn (hdc=0xcc010527, hrgn=0x7d04051e) returned 2
[0203.702] DeleteObject (ho=0x8004053e) returned 1
[0203.702] DeleteObject (ho=0x7d04051e) returned 1
[0203.702] OffsetViewportOrgEx (in: hdc=0xcc010527, x=0, y=0, lppt=0x234a5f4 | out: lppt=0x234a5f4) returned 1
[0203.702] IsAppThemed () returned 0x1
[0203.702] GetThemeAppProperties () returned 0x3
[0203.702] GetThemeAppProperties () returned 0x3
[0203.702] GetThemeBackgroundContentRect () returned 0x0
[0203.702] RestoreDC (hdc=0xcc010527, nSavedDC=-1) returned 1
[0203.703] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcc010527) returned 0x0
[0203.703] IsAppThemed () returned 0x1
[0203.703] GetThemeAppProperties () returned 0x3
[0203.703] GetThemeAppProperties () returned 0x3
[0203.703] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0203.703] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0203.703] GetCurrentObject (hdc=0xcc010527, type=0x1) returned 0xb00017
[0203.703] GetCurrentObject (hdc=0xcc010527, type=0x2) returned 0x900010
[0203.703] GetCurrentObject (hdc=0xcc010527, type=0x7) returned 0x1e0507b9
[0203.703] GetCurrentObject (hdc=0xcc010527, type=0x6) returned 0x8a01c2
[0203.703] SaveDC (hdc=0xcc010527) returned 1
[0203.703] GetTextAlign (hdc=0xcc010527) returned 0x0
[0203.703] GetTextColor (hdc=0xcc010527) returned 0x0
[0203.703] GetCurrentObject (hdc=0xcc010527, type=0x6) returned 0x8a01c2
[0203.703] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0203.703] SelectObject (hdc=0xcc010527, h=0x730a066d) returned 0x8a01c2
[0203.704] GetBkMode (hdc=0xcc010527) returned 2
[0203.704] SetBkMode (hdc=0xcc010527, mode=1) returned 2
[0203.704] DrawTextExW (in: hdc=0xcc010527, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x234a9bc | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0203.704] DrawTextExW (in: hdc=0xcc010527, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x234a9bc | out: lpchText="OK", lprc=0x53dd80) returned 13
[0203.704] RestoreDC (hdc=0xcc010527, nSavedDC=-1) returned 1
[0203.704] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcc010527) returned 0x0
[0203.704] GetFocus () returned 0xd02d6
[0203.704] IsAppThemed () returned 0x1
[0203.704] GetThemeAppProperties () returned 0x3
[0203.704] GetThemeAppProperties () returned 0x3
[0203.704] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0203.704] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0xcc010527, x1=0, y1=0, rop=0xcc0020) returned 1
[0203.705] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcc010527) returned 0x0
[0203.705] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0203.705] SelectObject (hdc=0xcc010527, h=0x85000f) returned 0x1e0507b9
[0203.705] DeleteDC (hdc=0xcc010527) returned 1
[0203.705] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0203.705] EndPaint (hWnd=0xd02d6, lpPaint=0x53df7c) returned 1
[0203.705] MapWindowPoints (in: hWndFrom=0xd02d6, hWndTo=0x0, lpPoints=0x234aab8, cPoints=0x1 | out: lpPoints=0x234aab8) returned 25756481
[0203.705] WindowFromPoint (Point=0x361) returned 0xd02d6
[0203.706] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0203.706] NotifyWinEvent (event=0x800a, hwnd=0xd02d6, idObject=-4, idChild=0)
[0203.706] NotifyWinEvent (event=0x800c, hwnd=0xd02d6, idObject=-4, idChild=0)
[0203.706] GetWindowTextLengthW (hWnd=0x902b4) returned 0
[0203.706] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0203.706] GetSystemMetrics (nIndex=42) returned 0
[0203.706] GetWindowTextW (in: hWnd=0x902b4, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0203.706] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0203.706] SendMessageW (hWnd=0xc02c8, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0203.706] GetCapture () returned 0xd02d6
[0203.706] ReleaseCapture () returned 1
[0203.706] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0203.707] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0203.707] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0203.707] IsWindow (hWnd=0x70036) returned 1
[0203.708] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0203.710] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0203.710] IsWindow (hWnd=0x70036) returned 1
[0203.710] SetActiveWindow (hWnd=0x70036) returned 0xc02c8
[0203.710] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0203.715] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0203.715] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0203.716] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0203.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0203.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0203.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0203.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0xc02c8) returned 0x1
[0203.721] GetFocus () returned 0xd02d6
[0203.721] SetFocus (hWnd=0x202c6) returned 0xd02d6
[0203.722] GetFocus () returned 0x202c6
[0203.722] IsChild (hWndParent=0xc02c8, hWnd=0x202c6) returned 0
[0203.722] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0203.722] GetCapture () returned 0x0
[0203.722] InvalidateRect (hWnd=0xd02d6, lpRect=0x0, bErase=0) returned 1
[0203.723] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0203.724] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0203.726] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0203.726] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0203.726] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0203.726] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0203.727] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0203.727] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0xd02d6, lParam=0x0) returned 0x0
[0203.727] GetStockObject (i=5) returned 0x900015
[0203.727] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0203.727] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8da7d8) returned 0x7
[0203.727] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0203.727] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0203.727] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0203.728] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0203.730] IsWindow (hWnd=0x202c6) returned 1
[0203.730] SetFocus (hWnd=0x202c6) returned 0x202c6
[0203.730] GetWindowLongW (hWnd=0xc02c8, nIndex=-8) returned 458806
[0203.730] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0203.730] GetCurrentThreadId () returned 0x11d0
[0203.730] IsWindow (hWnd=0x70036) returned 1
[0203.730] IsWindow (hWnd=0x70036) returned 1
[0203.730] IsWindowVisible (hWnd=0x70036) returned 1
[0203.730] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0203.731] GetFocus () returned 0x202c6
[0203.731] IsChild (hWndParent=0xc02c8, hWnd=0x202c6) returned 0
[0203.731] ShowWindow (hWnd=0xc02c8, nCmdShow=0) returned 1
[0203.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0203.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0203.733] GetWindowPlacement (in: hWnd=0xc02c8, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0203.733] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0203.733] GetClientRect (in: hWnd=0xc02c8, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0203.733] GetWindowRect (in: hWnd=0xc02c8, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0203.734] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0203.734] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0203.734] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0203.735] GetWindowLongW (hWnd=0xc02c8, nIndex=-20) returned 327937
[0203.735] DestroyWindow (hWnd=0xc02c8) returned 1
[0203.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0203.736] GetWindowTextLengthW (hWnd=0xc02c8) returned 10
[0203.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0203.736] GetSystemMetrics (nIndex=42) returned 0
[0203.736] GetWindowTextW (in: hWnd=0xc02c8, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0203.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0203.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0203.736] SendMessageW (hWnd=0x902b4, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0203.736] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0203.736] SendMessageW (hWnd=0x902b4, Msg=0xb0, wParam=0x232ed40, lParam=0x53e518) returned 0x0
[0203.737] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xb0, wParam=0x232ed40, lParam=0x53e518) returned 0x0
[0203.737] GetWindowTextLengthW (hWnd=0x902b4) returned 0
[0203.737] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0203.737] GetSystemMetrics (nIndex=42) returned 0
[0203.737] GetWindowTextW (in: hWnd=0x902b4, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0203.737] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0203.737] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0203.737] GetWindowThreadProcessId (in: hWnd=0x202de, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0203.737] GetWindow (hWnd=0x202de, uCmd=0x5) returned 0x0
[0203.737] GetWindowLongW (hWnd=0x202de, nIndex=-20) returned 65792
[0203.737] DestroyWindow (hWnd=0x202de) returned 1
[0203.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202de, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0203.737] GetWindowTextLengthW (hWnd=0x202de) returned 25
[0203.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0203.737] GetSystemMetrics (nIndex=42) returned 0
[0203.737] GetWindowTextW (in: hWnd=0x202de, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0203.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202de, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0203.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202de, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0203.738] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202de, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0203.740] GetWindowTextLengthW (hWnd=0x11013e) returned 16
[0203.740] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0203.740] GetSystemMetrics (nIndex=42) returned 0
[0203.740] GetWindowTextW (in: hWnd=0x11013e, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0203.740] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0203.765] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0203.765] InvalidateRect (hWnd=0xd02d6, lpRect=0x0, bErase=0) returned 1
[0203.765] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0203.765] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0203.766] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902b4, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0203.767] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x11013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0203.768] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0203.769] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc02d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0203.770] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0203.781] GetProcessWindowStation () returned 0x13c
[0203.781] GetActiveWindow () returned 0x70036
[0203.782] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0203.782] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0203.782] GetCurrentThreadId () returned 0x11d0
[0203.782] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4a76, lParam=0x0) returned 1
[0203.782] IsWindowVisible (hWnd=0x70036) returned 1
[0203.783] IsWindowEnabled (hWnd=0x70036) returned 1
[0203.783] IsWindowVisible (hWnd=0x602b6) returned 0
[0203.783] IsWindowVisible (hWnd=0x901f8) returned 0
[0203.783] IsWindowVisible (hWnd=0x202d0) returned 0
[0203.783] IsWindowVisible (hWnd=0x202d4) returned 0
[0203.783] GetActiveWindow () returned 0x70036
[0203.783] GetFocus () returned 0x202c6
[0203.783] IsWindow (hWnd=0x70036) returned 1
[0203.783] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0203.783] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0203.784] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0203.784] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0203.786] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0203.795] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0xd02c8) returned 0x1
[0203.798] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0203.798] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0203.800] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xd02d2, lParam=0x0) returned 0x0
[0203.800] GetCapture () returned 0x0
[0203.800] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0203.801] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0203.814] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0203.814] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0203.820] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x8b010786
[0203.820] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0203.820] CreateCompatibleDC (hdc=0x8b010786) returned 0xde010527
[0203.820] SelectObject (hdc=0xde010527, h=0x1e0507b9) returned 0x85000f
[0203.820] GdipCreateFromHDC (hdc=0xde010527, graphics=0x53e108) returned 0x0
[0203.821] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0203.821] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0203.821] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0203.821] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0203.821] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0203.821] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0203.821] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0203.821] LocalFree (hMem=0x89ee08) returned 0x0
[0203.821] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0203.821] GdipCreateRegion (region=0x53e150) returned 0x0
[0203.821] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0203.821] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0203.821] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0203.821] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcf70dbd) returned 0x0
[0203.821] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0203.822] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0203.822] GetCurrentObject (hdc=0xde010527, type=0x1) returned 0xb00017
[0203.822] GetCurrentObject (hdc=0xde010527, type=0x2) returned 0x900010
[0203.822] GetCurrentObject (hdc=0xde010527, type=0x7) returned 0x1e0507b9
[0203.822] GetCurrentObject (hdc=0xde010527, type=0x6) returned 0x8a01c2
[0203.822] SaveDC (hdc=0xde010527) returned 1
[0203.822] GetNearestColor (hdc=0xde010527, color=0xff) returned 0xff
[0203.822] GetNearestColor (hdc=0xde010527, color=0x55) returned 0x55
[0203.822] GetNearestColor (hdc=0xde010527, color=0x0) returned 0x0
[0203.822] GetNearestColor (hdc=0xde010527, color=0x55) returned 0x55
[0203.822] GetNearestColor (hdc=0xde010527, color=0x0) returned 0x0
[0203.823] GetNearestColor (hdc=0xde010527, color=0x8080ff) returned 0x8080ff
[0203.823] GetNearestColor (hdc=0xde010527, color=0x7373e5) returned 0x7373e5
[0203.823] GetNearestColor (hdc=0xde010527, color=0xe5) returned 0xe5
[0203.823] GetNearestColor (hdc=0xde010527, color=0x0) returned 0x0
[0203.823] RestoreDC (hdc=0xde010527, nSavedDC=-1) returned 1
[0203.823] GdipReleaseDC (graphics=0x5d92c30, hdc=0xde010527) returned 0x0
[0203.823] IsAppThemed () returned 0x1
[0203.823] GetThemeAppProperties () returned 0x3
[0203.823] GetThemeAppProperties () returned 0x3
[0203.823] IsAppThemed () returned 0x1
[0203.823] GetThemeAppProperties () returned 0x3
[0203.823] GetThemeAppProperties () returned 0x3
[0203.823] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0203.824] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x234bdb0 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0203.824] IsAppThemed () returned 0x1
[0203.824] GetThemeAppProperties () returned 0x3
[0203.824] GetThemeAppProperties () returned 0x3
[0203.824] IsAppThemed () returned 0x1
[0203.824] GetThemeAppProperties () returned 0x3
[0203.824] GetThemeAppProperties () returned 0x3
[0203.824] GetFocus () returned 0xd02d2
[0203.824] IsAppThemed () returned 0x1
[0203.824] GetThemeAppProperties () returned 0x3
[0203.824] GetThemeAppProperties () returned 0x3
[0203.825] IsAppThemed () returned 0x1
[0203.825] GetThemeAppProperties () returned 0x3
[0203.825] GetThemeAppProperties () returned 0x3
[0203.825] IsThemePartDefined () returned 0x1
[0203.825] IsAppThemed () returned 0x1
[0203.825] GetThemeAppProperties () returned 0x3
[0203.825] GetThemeAppProperties () returned 0x3
[0203.825] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0203.825] IsAppThemed () returned 0x1
[0203.825] GetThemeAppProperties () returned 0x3
[0203.825] GetThemeAppProperties () returned 0x3
[0203.825] IsAppThemed () returned 0x1
[0203.825] GetThemeAppProperties () returned 0x3
[0203.825] GetThemeAppProperties () returned 0x3
[0203.825] IsThemePartDefined () returned 0x1
[0203.825] GdipCreateRegion (region=0x53de78) returned 0x0
[0203.825] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0203.825] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0203.825] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0203.825] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0203.825] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0203.825] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0203.826] LocalFree (hMem=0x89ee08) returned 0x0
[0203.826] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0203.826] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0203.826] LocalFree (hMem=0x89ea88) returned 0x0
[0203.826] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0203.826] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0203.826] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0203.826] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0203.826] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0203.826] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0203.826] GetCurrentObject (hdc=0xde010527, type=0x1) returned 0xb00017
[0203.826] GetCurrentObject (hdc=0xde010527, type=0x2) returned 0x900010
[0203.826] GetCurrentObject (hdc=0xde010527, type=0x7) returned 0x1e0507b9
[0203.826] GetCurrentObject (hdc=0xde010527, type=0x6) returned 0x8a01c2
[0203.826] SaveDC (hdc=0xde010527) returned 1
[0203.827] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e04051e
[0203.827] GetClipRgn (hdc=0xde010527, hrgn=0x7e04051e) returned 0
[0203.827] SelectClipRgn (hdc=0xde010527, hrgn=0x8604053e) returned 2
[0203.827] DeleteObject (ho=0x7e04051e) returned 1
[0203.827] DeleteObject (ho=0x8604053e) returned 1
[0203.827] OffsetViewportOrgEx (in: hdc=0xde010527, x=0, y=0, lppt=0x234c460 | out: lppt=0x234c460) returned 1
[0203.827] DrawThemeParentBackground () returned 0x0
[0203.827] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0203.827] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0203.827] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0203.827] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0203.827] GetSystemMetrics (nIndex=42) returned 0
[0203.827] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0203.827] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0203.828] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0203.828] GetCurrentObject (hdc=0xde010527, type=0x1) returned 0xb00017
[0203.828] GetCurrentObject (hdc=0xde010527, type=0x2) returned 0x900010
[0203.828] GetCurrentObject (hdc=0xde010527, type=0x7) returned 0x1e0507b9
[0203.828] GetCurrentObject (hdc=0xde010527, type=0x6) returned 0x8a01c2
[0203.828] SaveDC (hdc=0xde010527) returned 2
[0203.828] GetNearestColor (hdc=0xde010527, color=0xff) returned 0xff
[0203.828] CreateSolidBrush (color=0xff) returned 0x1210078d
[0203.828] FillRect (hDC=0xde010527, lprc=0x53d8d8, hbr=0x1210078d) returned 1
[0203.828] DeleteObject (ho=0x1210078d) returned 1
[0203.828] RestoreDC (hdc=0xde010527, nSavedDC=-1) returned 1
[0203.828] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0203.828] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0203.829] GetSystemMetrics (nIndex=42) returned 0
[0203.829] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0203.829] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0203.829] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0203.829] GetCurrentObject (hdc=0xde010527, type=0x1) returned 0xb00017
[0203.829] GetCurrentObject (hdc=0xde010527, type=0x2) returned 0x900010
[0203.829] GetCurrentObject (hdc=0xde010527, type=0x7) returned 0x1e0507b9
[0203.829] GetCurrentObject (hdc=0xde010527, type=0x6) returned 0x8a01c2
[0203.829] SaveDC (hdc=0xde010527) returned 2
[0203.829] GetNearestColor (hdc=0xde010527, color=0xff) returned 0xff
[0203.829] CreateSolidBrush (color=0xff) returned 0x1310078d
[0203.829] FillRect (hDC=0xde010527, lprc=0x53d878, hbr=0x1310078d) returned 1
[0203.829] DeleteObject (ho=0x1310078d) returned 1
[0203.829] RestoreDC (hdc=0xde010527, nSavedDC=-1) returned 1
[0203.830] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0203.830] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0203.830] GetSystemMetrics (nIndex=42) returned 0
[0203.830] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0203.830] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0203.830] RestoreDC (hdc=0xde010527, nSavedDC=-1) returned 1
[0203.830] GdipReleaseDC (graphics=0x5d92c30, hdc=0xde010527) returned 0x0
[0203.830] IsAppThemed () returned 0x1
[0203.830] GetThemeAppProperties () returned 0x3
[0203.830] GetThemeAppProperties () returned 0x3
[0203.830] IsAppThemed () returned 0x1
[0203.830] GetThemeAppProperties () returned 0x3
[0203.830] GetThemeAppProperties () returned 0x3
[0203.830] IsThemePartDefined () returned 0x1
[0203.830] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0203.830] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0203.831] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0203.831] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0203.831] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0203.831] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0203.831] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0203.831] LocalFree (hMem=0x89ee08) returned 0x0
[0203.831] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0203.831] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0203.831] LocalFree (hMem=0x89ea88) returned 0x0
[0203.831] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0203.831] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0203.831] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0203.831] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0203.831] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0203.831] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0203.831] GetCurrentObject (hdc=0xde010527, type=0x1) returned 0xb00017
[0203.831] GetCurrentObject (hdc=0xde010527, type=0x2) returned 0x900010
[0203.831] GetCurrentObject (hdc=0xde010527, type=0x7) returned 0x1e0507b9
[0203.832] GetCurrentObject (hdc=0xde010527, type=0x6) returned 0x8a01c2
[0203.832] SaveDC (hdc=0xde010527) returned 1
[0203.832] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8704053e
[0203.832] GetClipRgn (hdc=0xde010527, hrgn=0x8704053e) returned 0
[0203.832] SelectClipRgn (hdc=0xde010527, hrgn=0x8004051e) returned 2
[0203.832] DeleteObject (ho=0x8704053e) returned 1
[0203.832] DeleteObject (ho=0x8004051e) returned 1
[0203.832] OffsetViewportOrgEx (in: hdc=0xde010527, x=0, y=0, lppt=0x234ccc4 | out: lppt=0x234ccc4) returned 1
[0203.832] IsAppThemed () returned 0x1
[0203.832] GetThemeAppProperties () returned 0x3
[0203.832] GetThemeAppProperties () returned 0x3
[0203.832] DrawThemeBackground () returned 0x0
[0203.832] RestoreDC (hdc=0xde010527, nSavedDC=-1) returned 1
[0203.832] GdipReleaseDC (graphics=0x5d92c30, hdc=0xde010527) returned 0x0
[0203.832] GdipCreateRegion (region=0x53de00) returned 0x0
[0203.833] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0203.833] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0203.833] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0203.833] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0203.833] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0203.833] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0203.833] LocalFree (hMem=0x89ee08) returned 0x0
[0203.833] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0203.833] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0203.833] LocalFree (hMem=0x89eee8) returned 0x0
[0203.833] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0203.833] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0203.833] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0203.833] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0203.833] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0203.833] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0203.833] GetCurrentObject (hdc=0xde010527, type=0x1) returned 0xb00017
[0203.833] GetCurrentObject (hdc=0xde010527, type=0x2) returned 0x900010
[0203.834] GetCurrentObject (hdc=0xde010527, type=0x7) returned 0x1e0507b9
[0203.865] GetCurrentObject (hdc=0xde010527, type=0x6) returned 0x8a01c2
[0203.865] SaveDC (hdc=0xde010527) returned 1
[0203.865] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8104051e
[0203.865] GetClipRgn (hdc=0xde010527, hrgn=0x8104051e) returned 0
[0203.866] SelectClipRgn (hdc=0xde010527, hrgn=0x8804053e) returned 2
[0203.866] DeleteObject (ho=0x8104051e) returned 1
[0203.866] DeleteObject (ho=0x8804053e) returned 1
[0203.866] OffsetViewportOrgEx (in: hdc=0xde010527, x=0, y=0, lppt=0x234cf98 | out: lppt=0x234cf98) returned 1
[0203.866] IsAppThemed () returned 0x1
[0203.866] GetThemeAppProperties () returned 0x3
[0203.866] GetThemeAppProperties () returned 0x3
[0203.866] GetThemeBackgroundContentRect () returned 0x0
[0203.866] RestoreDC (hdc=0xde010527, nSavedDC=-1) returned 1
[0203.866] GdipReleaseDC (graphics=0x5d92c30, hdc=0xde010527) returned 0x0
[0203.866] IsAppThemed () returned 0x1
[0203.867] GetThemeAppProperties () returned 0x3
[0203.867] GetThemeAppProperties () returned 0x3
[0203.867] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0203.867] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0203.867] GetCurrentObject (hdc=0xde010527, type=0x1) returned 0xb00017
[0203.867] GetCurrentObject (hdc=0xde010527, type=0x2) returned 0x900010
[0203.867] GetCurrentObject (hdc=0xde010527, type=0x7) returned 0x1e0507b9
[0203.867] GetCurrentObject (hdc=0xde010527, type=0x6) returned 0x8a01c2
[0203.867] SaveDC (hdc=0xde010527) returned 1
[0203.867] GetTextAlign (hdc=0xde010527) returned 0x0
[0203.867] GetTextColor (hdc=0xde010527) returned 0x0
[0203.867] GetCurrentObject (hdc=0xde010527, type=0x6) returned 0x8a01c2
[0203.867] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0203.868] SelectObject (hdc=0xde010527, h=0x450a0799) returned 0x8a01c2
[0203.868] GetBkMode (hdc=0xde010527) returned 2
[0203.868] SetBkMode (hdc=0xde010527, mode=1) returned 2
[0203.868] DrawTextExW (in: hdc=0xde010527, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x234d338 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0203.868] DrawTextExW (in: hdc=0xde010527, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x234d338 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0203.869] RestoreDC (hdc=0xde010527, nSavedDC=-1) returned 1
[0203.869] GdipReleaseDC (graphics=0x5d92c30, hdc=0xde010527) returned 0x0
[0203.869] GetFocus () returned 0xd02d2
[0203.869] IsAppThemed () returned 0x1
[0203.869] GetThemeAppProperties () returned 0x3
[0203.869] GetThemeAppProperties () returned 0x3
[0203.869] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0203.869] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xde010527, x1=0, y1=0, rop=0xcc0020) returned 1
[0203.869] GdipReleaseDC (graphics=0x5d92c30, hdc=0xde010527) returned 0x0
[0203.869] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0203.869] SelectObject (hdc=0xde010527, h=0x85000f) returned 0x1e0507b9
[0203.870] DeleteDC (hdc=0xde010527) returned 1
[0203.870] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0203.870] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0204.172] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0204.172] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0204.173] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0xd02c8) returned 0x1
[0204.176] GetFocus () returned 0xd02c8
[0204.176] GetAncestor (hwnd=0xd02c8, gaFlags=0x1) returned 0x10010
[0204.176] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0204.176] SetFocus (hWnd=0x202c6) returned 0x0
[0204.179] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0204.181] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0204.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0204.182] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0204.182] GetFocus () returned 0x70036
[0204.182] SetFocus (hWnd=0x202c6) returned 0x0
[0204.188] IsWindow (hWnd=0x70036) returned 1
[0204.188] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0204.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0204.188] IsWindow (hWnd=0x70036) returned 1
[0204.188] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0204.189] IsWindow (hWnd=0x202c6) returned 1
[0204.189] SetFocus (hWnd=0x202c6) returned 0x70036
[0204.189] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0204.190] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0204.191] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0204.198] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0204.198] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0204.198] GetStockObject (i=5) returned 0x900015
[0204.198] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0204.198] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8dabe0) returned 0x7
[0204.198] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0204.198] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0204.198] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0204.198] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0204.200] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0204.200] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0204.200] GetFocus () returned 0x202c6
[0204.200] GetCapture () returned 0x0
[0204.200] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.201] IsWindowUnicode (hWnd=0x202c6) returned 1
[0204.201] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.201] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.201] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.201] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.202] IsWindowUnicode (hWnd=0x202c6) returned 1
[0204.202] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.202] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.202] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.202] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0204.202] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0204.202] CreateCompatibleDC (hdc=0xf0105ee) returned 0xbb0107ad
[0204.203] SelectObject (hdc=0xbb0107ad, h=0x1e0507b9) returned 0x85000f
[0204.203] GdipCreateFromHDC (hdc=0xbb0107ad, graphics=0x53e958) returned 0x0
[0204.203] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0204.203] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0204.203] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0204.203] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.203] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0204.203] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0204.203] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0204.203] LocalFree (hMem=0x89eee8) returned 0x0
[0204.203] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.203] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0204.204] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.204] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0204.204] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0204.204] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcf50dbd) returned 0x0
[0204.204] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.204] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0204.204] GetCurrentObject (hdc=0xbb0107ad, type=0x1) returned 0xb00017
[0204.204] GetCurrentObject (hdc=0xbb0107ad, type=0x2) returned 0x900010
[0204.204] GetCurrentObject (hdc=0xbb0107ad, type=0x7) returned 0x1e0507b9
[0204.204] GetCurrentObject (hdc=0xbb0107ad, type=0x6) returned 0x8a01c2
[0204.204] SaveDC (hdc=0xbb0107ad) returned 1
[0204.204] GetNearestColor (hdc=0xbb0107ad, color=0xff) returned 0xff
[0204.204] GetNearestColor (hdc=0xbb0107ad, color=0x55) returned 0x55
[0204.204] GetNearestColor (hdc=0xbb0107ad, color=0x0) returned 0x0
[0204.204] GetNearestColor (hdc=0xbb0107ad, color=0x55) returned 0x55
[0204.205] GetNearestColor (hdc=0xbb0107ad, color=0x0) returned 0x0
[0204.205] GetNearestColor (hdc=0xbb0107ad, color=0x8080ff) returned 0x8080ff
[0204.205] GetNearestColor (hdc=0xbb0107ad, color=0x7373e5) returned 0x7373e5
[0204.205] GetNearestColor (hdc=0xbb0107ad, color=0xe5) returned 0xe5
[0204.205] GetNearestColor (hdc=0xbb0107ad, color=0x0) returned 0x0
[0204.205] RestoreDC (hdc=0xbb0107ad, nSavedDC=-1) returned 1
[0204.205] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbb0107ad) returned 0x0
[0204.205] IsAppThemed () returned 0x1
[0204.205] GetThemeAppProperties () returned 0x3
[0204.205] GetThemeAppProperties () returned 0x3
[0204.205] IsAppThemed () returned 0x1
[0204.205] GetThemeAppProperties () returned 0x3
[0204.205] GetThemeAppProperties () returned 0x3
[0204.205] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x234db94 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0204.206] IsAppThemed () returned 0x1
[0204.206] GetThemeAppProperties () returned 0x3
[0204.206] GetThemeAppProperties () returned 0x3
[0204.206] IsAppThemed () returned 0x1
[0204.206] GetThemeAppProperties () returned 0x3
[0204.206] GetThemeAppProperties () returned 0x3
[0204.206] GetFocus () returned 0x202c6
[0204.206] IsAppThemed () returned 0x1
[0204.206] GetThemeAppProperties () returned 0x3
[0204.206] GetThemeAppProperties () returned 0x3
[0204.206] IsAppThemed () returned 0x1
[0204.206] GetThemeAppProperties () returned 0x3
[0204.206] GetThemeAppProperties () returned 0x3
[0204.206] IsThemePartDefined () returned 0x1
[0204.206] IsAppThemed () returned 0x1
[0204.207] GetThemeAppProperties () returned 0x3
[0204.207] GetThemeAppProperties () returned 0x3
[0204.207] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0204.207] IsAppThemed () returned 0x1
[0204.207] GetThemeAppProperties () returned 0x3
[0204.207] GetThemeAppProperties () returned 0x3
[0204.207] IsAppThemed () returned 0x1
[0204.207] GetThemeAppProperties () returned 0x3
[0204.207] GetThemeAppProperties () returned 0x3
[0204.207] IsThemePartDefined () returned 0x1
[0204.207] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0204.207] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.207] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0204.207] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.207] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0204.207] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0204.207] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0204.207] LocalFree (hMem=0x89ee08) returned 0x0
[0204.207] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.207] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.208] LocalFree (hMem=0x89ea88) returned 0x0
[0204.208] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.208] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0204.208] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0204.208] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0204.208] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.208] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0204.208] GetCurrentObject (hdc=0xbb0107ad, type=0x1) returned 0xb00017
[0204.208] GetCurrentObject (hdc=0xbb0107ad, type=0x2) returned 0x900010
[0204.208] GetCurrentObject (hdc=0xbb0107ad, type=0x7) returned 0x1e0507b9
[0204.208] GetCurrentObject (hdc=0xbb0107ad, type=0x6) returned 0x8a01c2
[0204.208] SaveDC (hdc=0xbb0107ad) returned 1
[0204.208] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x25040798
[0204.208] GetClipRgn (hdc=0xbb0107ad, hrgn=0x25040798) returned 0
[0204.208] SelectClipRgn (hdc=0xbb0107ad, hrgn=0x9604053e) returned 2
[0204.209] DeleteObject (ho=0x25040798) returned 1
[0204.218] DeleteObject (ho=0x9604053e) returned 1
[0204.218] OffsetViewportOrgEx (in: hdc=0xbb0107ad, x=0, y=0, lppt=0x234e244 | out: lppt=0x234e244) returned 1
[0204.218] DrawThemeParentBackground () returned 0x0
[0204.218] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0204.218] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0204.218] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0204.219] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0204.219] GetSystemMetrics (nIndex=42) returned 0
[0204.219] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0204.219] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0204.219] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0204.219] GetCurrentObject (hdc=0xbb0107ad, type=0x1) returned 0xb00017
[0204.219] GetCurrentObject (hdc=0xbb0107ad, type=0x2) returned 0x900010
[0204.219] GetCurrentObject (hdc=0xbb0107ad, type=0x7) returned 0x1e0507b9
[0204.219] GetCurrentObject (hdc=0xbb0107ad, type=0x6) returned 0x8a01c2
[0204.219] SaveDC (hdc=0xbb0107ad) returned 2
[0204.219] GetNearestColor (hdc=0xbb0107ad, color=0xff) returned 0xff
[0204.219] CreateSolidBrush (color=0xff) returned 0x1510078d
[0204.219] FillRect (hDC=0xbb0107ad, lprc=0x53e128, hbr=0x1510078d) returned 1
[0204.219] DeleteObject (ho=0x1510078d) returned 1
[0204.219] RestoreDC (hdc=0xbb0107ad, nSavedDC=-1) returned 1
[0204.220] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0204.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0204.220] GetSystemMetrics (nIndex=42) returned 0
[0204.220] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0204.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0204.220] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0204.220] GetCurrentObject (hdc=0xbb0107ad, type=0x1) returned 0xb00017
[0204.220] GetCurrentObject (hdc=0xbb0107ad, type=0x2) returned 0x900010
[0204.220] GetCurrentObject (hdc=0xbb0107ad, type=0x7) returned 0x1e0507b9
[0204.220] GetCurrentObject (hdc=0xbb0107ad, type=0x6) returned 0x8a01c2
[0204.220] SaveDC (hdc=0xbb0107ad) returned 2
[0204.220] GetNearestColor (hdc=0xbb0107ad, color=0xff) returned 0xff
[0204.220] CreateSolidBrush (color=0xff) returned 0x1610078d
[0204.220] FillRect (hDC=0xbb0107ad, lprc=0x53e0c8, hbr=0x1610078d) returned 1
[0204.220] DeleteObject (ho=0x1610078d) returned 1
[0204.221] RestoreDC (hdc=0xbb0107ad, nSavedDC=-1) returned 1
[0204.221] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0204.221] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0204.221] GetSystemMetrics (nIndex=42) returned 0
[0204.221] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0204.221] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0204.221] RestoreDC (hdc=0xbb0107ad, nSavedDC=-1) returned 1
[0204.221] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbb0107ad) returned 0x0
[0204.221] IsAppThemed () returned 0x1
[0204.221] GetThemeAppProperties () returned 0x3
[0204.221] GetThemeAppProperties () returned 0x3
[0204.221] IsAppThemed () returned 0x1
[0204.222] GetThemeAppProperties () returned 0x3
[0204.222] GetThemeAppProperties () returned 0x3
[0204.222] IsThemePartDefined () returned 0x1
[0204.222] GdipCreateRegion (region=0x53e64c) returned 0x0
[0204.222] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.222] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0204.222] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.222] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0204.222] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0204.222] LocalFree (hMem=0x89ea88) returned 0x0
[0204.222] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0204.222] LocalFree (hMem=0x89eee8) returned 0x0
[0204.222] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.222] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0204.222] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0204.222] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0204.222] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.222] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0204.222] GetCurrentObject (hdc=0xbb0107ad, type=0x1) returned 0xb00017
[0204.223] GetCurrentObject (hdc=0xbb0107ad, type=0x2) returned 0x900010
[0204.223] GetCurrentObject (hdc=0xbb0107ad, type=0x7) returned 0x1e0507b9
[0204.223] GetCurrentObject (hdc=0xbb0107ad, type=0x6) returned 0x8a01c2
[0204.223] SaveDC (hdc=0xbb0107ad) returned 1
[0204.223] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9704053e
[0204.223] GetClipRgn (hdc=0xbb0107ad, hrgn=0x9704053e) returned 0
[0204.223] SelectClipRgn (hdc=0xbb0107ad, hrgn=0x27040798) returned 2
[0204.223] DeleteObject (ho=0x9704053e) returned 1
[0204.223] DeleteObject (ho=0x27040798) returned 1
[0204.223] OffsetViewportOrgEx (in: hdc=0xbb0107ad, x=0, y=0, lppt=0x234eadc | out: lppt=0x234eadc) returned 1
[0204.223] IsAppThemed () returned 0x1
[0204.223] GetThemeAppProperties () returned 0x3
[0204.223] GetThemeAppProperties () returned 0x3
[0204.223] DrawThemeBackground () returned 0x0
[0204.223] RestoreDC (hdc=0xbb0107ad, nSavedDC=-1) returned 1
[0204.223] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbb0107ad) returned 0x0
[0204.224] GdipCreateRegion (region=0x53e650) returned 0x0
[0204.224] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.224] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0204.224] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.224] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0204.224] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.224] LocalFree (hMem=0x89ea88) returned 0x0
[0204.224] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0204.224] LocalFree (hMem=0x89ee08) returned 0x0
[0204.224] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.224] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0204.224] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0204.224] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0204.228] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.229] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0204.229] GetCurrentObject (hdc=0xbb0107ad, type=0x1) returned 0xb00017
[0204.229] GetCurrentObject (hdc=0xbb0107ad, type=0x2) returned 0x900010
[0204.229] GetCurrentObject (hdc=0xbb0107ad, type=0x7) returned 0x1e0507b9
[0204.229] GetCurrentObject (hdc=0xbb0107ad, type=0x6) returned 0x8a01c2
[0204.229] SaveDC (hdc=0xbb0107ad) returned 1
[0204.229] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x28040798
[0204.229] GetClipRgn (hdc=0xbb0107ad, hrgn=0x28040798) returned 0
[0204.229] SelectClipRgn (hdc=0xbb0107ad, hrgn=0x9804053e) returned 2
[0204.229] DeleteObject (ho=0x28040798) returned 1
[0204.229] DeleteObject (ho=0x9804053e) returned 1
[0204.229] OffsetViewportOrgEx (in: hdc=0xbb0107ad, x=0, y=0, lppt=0x234edb0 | out: lppt=0x234edb0) returned 1
[0204.229] IsAppThemed () returned 0x1
[0204.230] GetThemeAppProperties () returned 0x3
[0204.230] GetThemeAppProperties () returned 0x3
[0204.230] GetThemeBackgroundContentRect () returned 0x0
[0204.230] RestoreDC (hdc=0xbb0107ad, nSavedDC=-1) returned 1
[0204.230] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbb0107ad) returned 0x0
[0204.230] IsAppThemed () returned 0x1
[0204.230] GetThemeAppProperties () returned 0x3
[0204.230] GetThemeAppProperties () returned 0x3
[0204.230] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0204.230] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0204.230] GetCurrentObject (hdc=0xbb0107ad, type=0x1) returned 0xb00017
[0204.230] GetCurrentObject (hdc=0xbb0107ad, type=0x2) returned 0x900010
[0204.230] GetCurrentObject (hdc=0xbb0107ad, type=0x7) returned 0x1e0507b9
[0204.230] GetCurrentObject (hdc=0xbb0107ad, type=0x6) returned 0x8a01c2
[0204.230] SaveDC (hdc=0xbb0107ad) returned 1
[0204.230] GetTextAlign (hdc=0xbb0107ad) returned 0x0
[0204.230] GetTextColor (hdc=0xbb0107ad) returned 0x0
[0204.230] GetCurrentObject (hdc=0xbb0107ad, type=0x6) returned 0x8a01c2
[0204.231] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0204.231] SelectObject (hdc=0xbb0107ad, h=0x450a0799) returned 0x8a01c2
[0204.231] GetBkMode (hdc=0xbb0107ad) returned 2
[0204.231] SetBkMode (hdc=0xbb0107ad, mode=1) returned 2
[0204.231] DrawTextExW (in: hdc=0xbb0107ad, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x234f16c | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0204.231] DrawTextExW (in: hdc=0xbb0107ad, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x234f16c | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0204.231] RestoreDC (hdc=0xbb0107ad, nSavedDC=-1) returned 1
[0204.232] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbb0107ad) returned 0x0
[0204.232] GetFocus () returned 0x202c6
[0204.232] IsAppThemed () returned 0x1
[0204.232] GetThemeAppProperties () returned 0x3
[0204.232] GetThemeAppProperties () returned 0x3
[0204.232] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0204.232] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xbb0107ad, x1=0, y1=0, rop=0xcc0020) returned 1
[0204.232] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbb0107ad) returned 0x0
[0204.232] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0204.232] SelectObject (hdc=0xbb0107ad, h=0x85000f) returned 0x1e0507b9
[0204.232] DeleteDC (hdc=0xbb0107ad) returned 1
[0204.233] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0204.233] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0204.233] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.233] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x198021a) returned 0x1
[0204.233] IsWindowUnicode (hWnd=0x202c6) returned 1
[0204.233] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.233] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x198021a) returned 0x1
[0204.233] SetCursor (hCursor=0x10003) returned 0x10003
[0204.234] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.234] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.234] _TrackMouseEvent (in: lpEventTrack=0x23276fc | out: lpEventTrack=0x23276fc) returned 1
[0204.234] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0204.234] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0204.234] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0204.234] GetKeyState (nVirtKey=1) returned 1
[0204.234] GetKeyState (nVirtKey=2) returned 0
[0204.234] GetKeyState (nVirtKey=4) returned 0
[0204.234] GetKeyState (nVirtKey=5) returned 0
[0204.234] GetKeyState (nVirtKey=6) returned 0
[0204.234] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.234] IsWindowUnicode (hWnd=0x202c6) returned 1
[0204.234] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.234] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.234] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.235] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0204.235] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0204.235] CreateCompatibleDC (hdc=0xf0105ee) returned 0xbc0107ad
[0204.235] SelectObject (hdc=0xbc0107ad, h=0x1e0507b9) returned 0x85000f
[0204.235] GdipCreateFromHDC (hdc=0xbc0107ad, graphics=0x53e958) returned 0x0
[0204.235] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0204.235] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0204.235] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0204.235] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.235] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0204.236] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.236] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0204.236] LocalFree (hMem=0x89ea88) returned 0x0
[0204.236] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.236] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0204.236] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.236] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0204.236] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0204.236] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcf30dbd) returned 0x0
[0204.236] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.236] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0204.236] GetCurrentObject (hdc=0xbc0107ad, type=0x1) returned 0xb00017
[0204.236] GetCurrentObject (hdc=0xbc0107ad, type=0x2) returned 0x900010
[0204.236] GetCurrentObject (hdc=0xbc0107ad, type=0x7) returned 0x1e0507b9
[0204.236] GetCurrentObject (hdc=0xbc0107ad, type=0x6) returned 0x8a01c2
[0204.236] SaveDC (hdc=0xbc0107ad) returned 1
[0204.237] GetNearestColor (hdc=0xbc0107ad, color=0xff) returned 0xff
[0204.237] GetNearestColor (hdc=0xbc0107ad, color=0x55) returned 0x55
[0204.237] GetNearestColor (hdc=0xbc0107ad, color=0x0) returned 0x0
[0204.237] GetNearestColor (hdc=0xbc0107ad, color=0x55) returned 0x55
[0204.237] GetNearestColor (hdc=0xbc0107ad, color=0x0) returned 0x0
[0204.237] GetNearestColor (hdc=0xbc0107ad, color=0x8080ff) returned 0x8080ff
[0204.237] GetNearestColor (hdc=0xbc0107ad, color=0x7373e5) returned 0x7373e5
[0204.237] GetNearestColor (hdc=0xbc0107ad, color=0xe5) returned 0xe5
[0204.237] GetNearestColor (hdc=0xbc0107ad, color=0x0) returned 0x0
[0204.237] RestoreDC (hdc=0xbc0107ad, nSavedDC=-1) returned 1
[0204.237] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbc0107ad) returned 0x0
[0204.237] IsAppThemed () returned 0x1
[0204.238] GetThemeAppProperties () returned 0x3
[0204.238] GetThemeAppProperties () returned 0x3
[0204.238] IsAppThemed () returned 0x1
[0204.238] GetThemeAppProperties () returned 0x3
[0204.238] GetThemeAppProperties () returned 0x3
[0204.238] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x234f974 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0204.238] IsAppThemed () returned 0x1
[0204.238] GetThemeAppProperties () returned 0x3
[0204.238] GetThemeAppProperties () returned 0x3
[0204.238] IsAppThemed () returned 0x1
[0204.238] GetThemeAppProperties () returned 0x3
[0204.238] GetThemeAppProperties () returned 0x3
[0204.238] IsAppThemed () returned 0x1
[0204.238] GetThemeAppProperties () returned 0x3
[0204.238] GetThemeAppProperties () returned 0x3
[0204.238] IsAppThemed () returned 0x1
[0204.239] GetThemeAppProperties () returned 0x3
[0204.239] GetThemeAppProperties () returned 0x3
[0204.239] IsThemePartDefined () returned 0x1
[0204.239] IsAppThemed () returned 0x1
[0204.239] GetThemeAppProperties () returned 0x3
[0204.239] GetThemeAppProperties () returned 0x3
[0204.239] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0204.239] IsAppThemed () returned 0x1
[0204.239] GetThemeAppProperties () returned 0x3
[0204.239] GetThemeAppProperties () returned 0x3
[0204.239] IsAppThemed () returned 0x1
[0204.239] GetThemeAppProperties () returned 0x3
[0204.239] GetThemeAppProperties () returned 0x3
[0204.239] IsThemePartDefined () returned 0x1
[0204.239] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0204.239] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.239] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0204.239] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.239] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0204.239] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0204.239] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0204.240] LocalFree (hMem=0x89eee8) returned 0x0
[0204.240] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0204.240] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0204.240] LocalFree (hMem=0x89ee08) returned 0x0
[0204.240] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.246] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0204.246] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0204.246] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0204.246] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.246] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0204.246] GetCurrentObject (hdc=0xbc0107ad, type=0x1) returned 0xb00017
[0204.246] GetCurrentObject (hdc=0xbc0107ad, type=0x2) returned 0x900010
[0204.246] GetCurrentObject (hdc=0xbc0107ad, type=0x7) returned 0x1e0507b9
[0204.246] GetCurrentObject (hdc=0xbc0107ad, type=0x6) returned 0x8a01c2
[0204.247] SaveDC (hdc=0xbc0107ad) returned 1
[0204.247] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9904053e
[0204.247] GetClipRgn (hdc=0xbc0107ad, hrgn=0x9904053e) returned 0
[0204.247] SelectClipRgn (hdc=0xbc0107ad, hrgn=0x2c040798) returned 2
[0204.247] DeleteObject (ho=0x9904053e) returned 1
[0204.247] DeleteObject (ho=0x2c040798) returned 1
[0204.247] OffsetViewportOrgEx (in: hdc=0xbc0107ad, x=0, y=0, lppt=0x2350024 | out: lppt=0x2350024) returned 1
[0204.247] DrawThemeParentBackground () returned 0x0
[0204.247] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0204.247] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0204.247] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0204.247] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0204.248] GetSystemMetrics (nIndex=42) returned 0
[0204.248] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0204.248] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0204.248] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0204.248] GetCurrentObject (hdc=0xbc0107ad, type=0x1) returned 0xb00017
[0204.248] GetCurrentObject (hdc=0xbc0107ad, type=0x2) returned 0x900010
[0204.248] GetCurrentObject (hdc=0xbc0107ad, type=0x7) returned 0x1e0507b9
[0204.248] GetCurrentObject (hdc=0xbc0107ad, type=0x6) returned 0x8a01c2
[0204.248] SaveDC (hdc=0xbc0107ad) returned 2
[0204.248] GetNearestColor (hdc=0xbc0107ad, color=0xff) returned 0xff
[0204.248] CreateSolidBrush (color=0xff) returned 0x1710078d
[0204.248] FillRect (hDC=0xbc0107ad, lprc=0x53e120, hbr=0x1710078d) returned 1
[0204.248] DeleteObject (ho=0x1710078d) returned 1
[0204.248] RestoreDC (hdc=0xbc0107ad, nSavedDC=-1) returned 1
[0204.249] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0204.249] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0204.249] GetSystemMetrics (nIndex=42) returned 0
[0204.249] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0204.249] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0204.249] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0204.249] GetCurrentObject (hdc=0xbc0107ad, type=0x1) returned 0xb00017
[0204.249] GetCurrentObject (hdc=0xbc0107ad, type=0x2) returned 0x900010
[0204.249] GetCurrentObject (hdc=0xbc0107ad, type=0x7) returned 0x1e0507b9
[0204.249] GetCurrentObject (hdc=0xbc0107ad, type=0x6) returned 0x8a01c2
[0204.249] SaveDC (hdc=0xbc0107ad) returned 2
[0204.249] GetNearestColor (hdc=0xbc0107ad, color=0xff) returned 0xff
[0204.249] CreateSolidBrush (color=0xff) returned 0x1810078d
[0204.249] FillRect (hDC=0xbc0107ad, lprc=0x53e0c0, hbr=0x1810078d) returned 1
[0204.249] DeleteObject (ho=0x1810078d) returned 1
[0204.249] RestoreDC (hdc=0xbc0107ad, nSavedDC=-1) returned 1
[0204.250] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0204.250] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0204.250] GetSystemMetrics (nIndex=42) returned 0
[0204.250] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0204.250] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0204.250] RestoreDC (hdc=0xbc0107ad, nSavedDC=-1) returned 1
[0204.250] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbc0107ad) returned 0x0
[0204.250] IsAppThemed () returned 0x1
[0204.250] GetThemeAppProperties () returned 0x3
[0204.250] GetThemeAppProperties () returned 0x3
[0204.250] IsAppThemed () returned 0x1
[0204.250] GetThemeAppProperties () returned 0x3
[0204.250] GetThemeAppProperties () returned 0x3
[0204.250] IsThemePartDefined () returned 0x1
[0204.250] GdipCreateRegion (region=0x53e640) returned 0x0
[0204.251] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.251] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0204.251] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.251] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0204.251] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0204.251] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0204.251] LocalFree (hMem=0x89ee08) returned 0x0
[0204.251] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.251] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0204.251] LocalFree (hMem=0x89ea88) returned 0x0
[0204.251] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.251] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0204.251] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0204.251] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0204.251] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.251] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0204.251] GetCurrentObject (hdc=0xbc0107ad, type=0x1) returned 0xb00017
[0204.252] GetCurrentObject (hdc=0xbc0107ad, type=0x2) returned 0x900010
[0204.252] GetCurrentObject (hdc=0xbc0107ad, type=0x7) returned 0x1e0507b9
[0204.252] GetCurrentObject (hdc=0xbc0107ad, type=0x6) returned 0x8a01c2
[0204.252] SaveDC (hdc=0xbc0107ad) returned 1
[0204.252] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d040798
[0204.252] GetClipRgn (hdc=0xbc0107ad, hrgn=0x2d040798) returned 0
[0204.252] SelectClipRgn (hdc=0xbc0107ad, hrgn=0x9b04053e) returned 2
[0204.252] DeleteObject (ho=0x2d040798) returned 1
[0204.252] DeleteObject (ho=0x9b04053e) returned 1
[0204.252] OffsetViewportOrgEx (in: hdc=0xbc0107ad, x=0, y=0, lppt=0x23509d4 | out: lppt=0x23509d4) returned 1
[0204.252] IsAppThemed () returned 0x1
[0204.252] GetThemeAppProperties () returned 0x3
[0204.252] GetThemeAppProperties () returned 0x3
[0204.252] DrawThemeBackground () returned 0x0
[0204.252] RestoreDC (hdc=0xbc0107ad, nSavedDC=-1) returned 1
[0204.253] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbc0107ad) returned 0x0
[0204.253] GdipCreateRegion (region=0x53e644) returned 0x0
[0204.253] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.253] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0204.253] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.253] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0204.253] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0204.253] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0204.253] LocalFree (hMem=0x89eee8) returned 0x0
[0204.253] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.253] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.253] LocalFree (hMem=0x89ea88) returned 0x0
[0204.253] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.253] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0204.253] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0204.253] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0204.253] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.254] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0204.254] GetCurrentObject (hdc=0xbc0107ad, type=0x1) returned 0xb00017
[0204.254] GetCurrentObject (hdc=0xbc0107ad, type=0x2) returned 0x900010
[0204.254] GetCurrentObject (hdc=0xbc0107ad, type=0x7) returned 0x1e0507b9
[0204.254] GetCurrentObject (hdc=0xbc0107ad, type=0x6) returned 0x8a01c2
[0204.254] SaveDC (hdc=0xbc0107ad) returned 1
[0204.254] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9c04053e
[0204.254] GetClipRgn (hdc=0xbc0107ad, hrgn=0x9c04053e) returned 0
[0204.254] SelectClipRgn (hdc=0xbc0107ad, hrgn=0x2e040798) returned 2
[0204.254] DeleteObject (ho=0x9c04053e) returned 1
[0204.254] DeleteObject (ho=0x2e040798) returned 1
[0204.254] OffsetViewportOrgEx (in: hdc=0xbc0107ad, x=0, y=0, lppt=0x2350cc4 | out: lppt=0x2350cc4) returned 1
[0204.254] IsAppThemed () returned 0x1
[0204.254] GetThemeAppProperties () returned 0x3
[0204.254] GetThemeAppProperties () returned 0x3
[0204.255] GetThemeBackgroundContentRect () returned 0x0
[0204.255] RestoreDC (hdc=0xbc0107ad, nSavedDC=-1) returned 1
[0204.255] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbc0107ad) returned 0x0
[0204.255] IsAppThemed () returned 0x1
[0204.255] GetThemeAppProperties () returned 0x3
[0204.255] GetThemeAppProperties () returned 0x3
[0204.255] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0204.255] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0204.255] GetCurrentObject (hdc=0xbc0107ad, type=0x1) returned 0xb00017
[0204.255] GetCurrentObject (hdc=0xbc0107ad, type=0x2) returned 0x900010
[0204.255] GetCurrentObject (hdc=0xbc0107ad, type=0x7) returned 0x1e0507b9
[0204.255] GetCurrentObject (hdc=0xbc0107ad, type=0x6) returned 0x8a01c2
[0204.261] SaveDC (hdc=0xbc0107ad) returned 1
[0204.261] GetTextAlign (hdc=0xbc0107ad) returned 0x0
[0204.261] GetTextColor (hdc=0xbc0107ad) returned 0x0
[0204.261] GetCurrentObject (hdc=0xbc0107ad, type=0x6) returned 0x8a01c2
[0204.262] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0204.262] SelectObject (hdc=0xbc0107ad, h=0x450a0799) returned 0x8a01c2
[0204.262] GetBkMode (hdc=0xbc0107ad) returned 2
[0204.262] SetBkMode (hdc=0xbc0107ad, mode=1) returned 2
[0204.262] DrawTextExW (in: hdc=0xbc0107ad, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2351064 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0204.262] DrawTextExW (in: hdc=0xbc0107ad, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2351064 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0204.263] RestoreDC (hdc=0xbc0107ad, nSavedDC=-1) returned 1
[0204.263] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbc0107ad) returned 0x0
[0204.263] GetFocus () returned 0x202c6
[0204.263] IsAppThemed () returned 0x1
[0204.263] GetThemeAppProperties () returned 0x3
[0204.263] GetThemeAppProperties () returned 0x3
[0204.263] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0204.263] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xbc0107ad, x1=0, y1=0, rop=0xcc0020) returned 1
[0204.263] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbc0107ad) returned 0x0
[0204.263] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0204.263] SelectObject (hdc=0xbc0107ad, h=0x85000f) returned 0x1e0507b9
[0204.263] DeleteDC (hdc=0xbc0107ad) returned 1
[0204.264] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0204.264] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0204.264] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.264] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.264] WaitMessage () returned 1
[0204.264] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.264] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.264] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.264] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.264] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.265] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.265] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.265] WaitMessage () returned 1
[0204.277] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.277] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.277] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.277] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.277] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.278] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.278] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.278] WaitMessage () returned 1
[0204.280] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.280] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.280] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.280] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.280] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.281] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.281] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.282] WaitMessage () returned 1
[0204.282] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.282] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.282] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.283] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.283] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.284] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.284] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.284] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.285] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.285] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.285] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.285] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.285] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.285] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.285] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.285] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.286] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.286] WaitMessage () returned 1
[0204.286] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.286] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.286] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.286] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.286] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.292] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.292] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.292] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.292] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.292] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.292] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.293] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.293] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.293] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.293] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.293] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.293] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.293] WaitMessage () returned 1
[0204.295] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.295] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.295] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.295] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.295] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.296] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.297] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.297] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.297] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.297] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.297] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.297] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.297] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.297] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.297] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.297] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.298] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.298] WaitMessage () returned 1
[0204.298] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.298] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.298] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.298] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.298] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.299] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.300] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.300] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.300] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.300] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.300] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.300] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.300] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.300] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.300] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.300] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.301] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.301] WaitMessage () returned 1
[0204.337] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.337] IsWindowUnicode (hWnd=0x202c6) returned 1
[0204.337] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.337] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.337] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.337] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.338] IsWindowUnicode (hWnd=0x202c6) returned 1
[0204.338] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.338] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.338] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.338] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x10002a) returned 0x0
[0204.338] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.338] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.338] WaitMessage () returned 1
[0204.491] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.491] IsWindowUnicode (hWnd=0x202d0) returned 1
[0204.491] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.491] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.491] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.492] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.492] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0204.492] WaitMessage () returned 1
[0204.509] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.509] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x198021a) returned 0x1
[0204.509] IsWindowUnicode (hWnd=0x202c6) returned 1
[0204.509] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.509] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x198021a) returned 0x1
[0204.509] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0204.509] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12b01c4) returned 0x0
[0204.509] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0204.509] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0204.510] SetCursor (hCursor=0x10003) returned 0x10003
[0204.510] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.510] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.510] GetKeyState (nVirtKey=1) returned -128
[0204.510] GetKeyState (nVirtKey=2) returned 0
[0204.510] GetKeyState (nVirtKey=4) returned 0
[0204.510] GetKeyState (nVirtKey=5) returned 0
[0204.510] GetKeyState (nVirtKey=6) returned 0
[0204.510] IsWindowVisible (hWnd=0x202c6) returned 1
[0204.510] IsWindowEnabled (hWnd=0x202c6) returned 1
[0204.510] SetFocus (hWnd=0x202c6) returned 0x202c6
[0204.510] GetFocus () returned 0x202c6
[0204.510] GetFocus () returned 0x202c6
[0204.510] GetFocus () returned 0x202c6
[0204.510] GetKeyState (nVirtKey=1) returned -128
[0204.510] GetKeyState (nVirtKey=2) returned 0
[0204.510] GetKeyState (nVirtKey=4) returned 0
[0204.510] GetKeyState (nVirtKey=5) returned 0
[0204.511] GetKeyState (nVirtKey=6) returned 0
[0204.511] GetCapture () returned 0x0
[0204.511] SetCapture (hWnd=0x202c6) returned 0x0
[0204.511] GetKeyState (nVirtKey=1) returned -128
[0204.511] GetKeyState (nVirtKey=2) returned 0
[0204.511] GetKeyState (nVirtKey=4) returned 0
[0204.511] GetKeyState (nVirtKey=5) returned 0
[0204.511] GetKeyState (nVirtKey=6) returned 0
[0204.511] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0204.511] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0204.511] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.511] IsWindowUnicode (hWnd=0x202c6) returned 1
[0204.511] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0204.511] TranslateMessage (lpMsg=0x53eef8) returned 0
[0204.511] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0204.511] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2351308, cPoints=0x1 | out: lpPoints=0x2351308) returned 25690608
[0204.511] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0204.511] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0204.511] UpdateWindow (hWnd=0x202c6) returned 1
[0204.512] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0204.512] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0204.512] CreateCompatibleDC (hdc=0xf0105ee) returned 0x130107a2
[0204.512] SelectObject (hdc=0x130107a2, h=0x1e0507b9) returned 0x85000f
[0204.512] GdipCreateFromHDC (hdc=0x130107a2, graphics=0x53e5f0) returned 0x0
[0204.512] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0204.512] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0204.512] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0204.512] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.512] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0204.513] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.513] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0204.513] LocalFree (hMem=0x89ea88) returned 0x0
[0204.513] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.513] GdipCreateRegion (region=0x53e638) returned 0x0
[0204.513] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.513] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0204.513] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0204.513] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcf10dbd) returned 0x0
[0204.513] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.513] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0204.513] GetCurrentObject (hdc=0x130107a2, type=0x1) returned 0xb00017
[0204.513] GetCurrentObject (hdc=0x130107a2, type=0x2) returned 0x900010
[0204.513] GetCurrentObject (hdc=0x130107a2, type=0x7) returned 0x1e0507b9
[0204.513] GetCurrentObject (hdc=0x130107a2, type=0x6) returned 0x8a01c2
[0204.513] SaveDC (hdc=0x130107a2) returned 1
[0204.514] GetNearestColor (hdc=0x130107a2, color=0xff) returned 0xff
[0204.514] GetNearestColor (hdc=0x130107a2, color=0x55) returned 0x55
[0204.514] GetNearestColor (hdc=0x130107a2, color=0x0) returned 0x0
[0204.514] GetNearestColor (hdc=0x130107a2, color=0x55) returned 0x55
[0204.514] GetNearestColor (hdc=0x130107a2, color=0x0) returned 0x0
[0204.514] GetNearestColor (hdc=0x130107a2, color=0x8080ff) returned 0x8080ff
[0204.514] GetNearestColor (hdc=0x130107a2, color=0x7373e5) returned 0x7373e5
[0204.514] GetNearestColor (hdc=0x130107a2, color=0xe5) returned 0xe5
[0204.514] GetNearestColor (hdc=0x130107a2, color=0x0) returned 0x0
[0204.514] RestoreDC (hdc=0x130107a2, nSavedDC=-1) returned 1
[0204.514] GdipReleaseDC (graphics=0x5d92c30, hdc=0x130107a2) returned 0x0
[0204.514] IsAppThemed () returned 0x1
[0204.515] GetThemeAppProperties () returned 0x3
[0204.515] GetThemeAppProperties () returned 0x3
[0204.515] IsAppThemed () returned 0x1
[0204.515] GetThemeAppProperties () returned 0x3
[0204.515] GetThemeAppProperties () returned 0x3
[0204.515] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x2351ab0 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0204.515] IsAppThemed () returned 0x1
[0204.515] GetThemeAppProperties () returned 0x3
[0204.515] GetThemeAppProperties () returned 0x3
[0204.515] IsAppThemed () returned 0x1
[0204.515] GetThemeAppProperties () returned 0x3
[0204.515] GetThemeAppProperties () returned 0x3
[0204.515] IsAppThemed () returned 0x1
[0204.516] GetThemeAppProperties () returned 0x3
[0204.516] GetThemeAppProperties () returned 0x3
[0204.516] IsAppThemed () returned 0x1
[0204.516] GetThemeAppProperties () returned 0x3
[0204.516] GetThemeAppProperties () returned 0x3
[0204.516] IsThemePartDefined () returned 0x1
[0204.516] IsAppThemed () returned 0x1
[0204.516] GetThemeAppProperties () returned 0x3
[0204.516] GetThemeAppProperties () returned 0x3
[0204.516] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0204.516] IsAppThemed () returned 0x1
[0204.516] GetThemeAppProperties () returned 0x3
[0204.516] GetThemeAppProperties () returned 0x3
[0204.516] IsAppThemed () returned 0x1
[0204.516] GetThemeAppProperties () returned 0x3
[0204.516] GetThemeAppProperties () returned 0x3
[0204.516] IsThemePartDefined () returned 0x1
[0204.516] GdipCreateRegion (region=0x53e354) returned 0x0
[0204.516] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.516] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0204.516] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.516] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0204.517] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0204.517] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0204.517] LocalFree (hMem=0x89ec80) returned 0x0
[0204.517] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0204.517] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0204.517] LocalFree (hMem=0x89ec80) returned 0x0
[0204.517] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.517] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0204.517] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0204.517] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0204.517] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.517] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0204.517] GetCurrentObject (hdc=0x130107a2, type=0x1) returned 0xb00017
[0204.517] GetCurrentObject (hdc=0x130107a2, type=0x2) returned 0x900010
[0204.517] GetCurrentObject (hdc=0x130107a2, type=0x7) returned 0x1e0507b9
[0204.517] GetCurrentObject (hdc=0x130107a2, type=0x6) returned 0x8a01c2
[0204.517] SaveDC (hdc=0x130107a2) returned 1
[0204.518] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f040798
[0204.518] GetClipRgn (hdc=0x130107a2, hrgn=0x2f040798) returned 0
[0204.518] SelectClipRgn (hdc=0x130107a2, hrgn=0xa004053e) returned 2
[0204.518] DeleteObject (ho=0x2f040798) returned 1
[0204.518] DeleteObject (ho=0xa004053e) returned 1
[0204.518] OffsetViewportOrgEx (in: hdc=0x130107a2, x=0, y=0, lppt=0x2352160 | out: lppt=0x2352160) returned 1
[0204.518] DrawThemeParentBackground () returned 0x0
[0204.518] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0204.518] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0204.518] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0204.518] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0204.518] GetSystemMetrics (nIndex=42) returned 0
[0204.518] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0204.518] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0204.519] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0204.519] GetCurrentObject (hdc=0x130107a2, type=0x1) returned 0xb00017
[0204.519] GetCurrentObject (hdc=0x130107a2, type=0x2) returned 0x900010
[0204.519] GetCurrentObject (hdc=0x130107a2, type=0x7) returned 0x1e0507b9
[0204.519] GetCurrentObject (hdc=0x130107a2, type=0x6) returned 0x8a01c2
[0204.519] SaveDC (hdc=0x130107a2) returned 2
[0204.519] GetNearestColor (hdc=0x130107a2, color=0xff) returned 0xff
[0204.519] CreateSolidBrush (color=0xff) returned 0x1910078d
[0204.519] FillRect (hDC=0x130107a2, lprc=0x53ddb8, hbr=0x1910078d) returned 1
[0204.519] DeleteObject (ho=0x1910078d) returned 1
[0204.519] RestoreDC (hdc=0x130107a2, nSavedDC=-1) returned 1
[0204.519] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0204.519] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0204.519] GetSystemMetrics (nIndex=42) returned 0
[0204.519] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0204.520] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0204.520] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0204.520] GetCurrentObject (hdc=0x130107a2, type=0x1) returned 0xb00017
[0204.520] GetCurrentObject (hdc=0x130107a2, type=0x2) returned 0x900010
[0204.520] GetCurrentObject (hdc=0x130107a2, type=0x7) returned 0x1e0507b9
[0204.520] GetCurrentObject (hdc=0x130107a2, type=0x6) returned 0x8a01c2
[0204.520] SaveDC (hdc=0x130107a2) returned 2
[0204.520] GetNearestColor (hdc=0x130107a2, color=0xff) returned 0xff
[0204.520] CreateSolidBrush (color=0xff) returned 0x1a10078d
[0204.520] FillRect (hDC=0x130107a2, lprc=0x53dd58, hbr=0x1a10078d) returned 1
[0204.520] DeleteObject (ho=0x1a10078d) returned 1
[0204.520] RestoreDC (hdc=0x130107a2, nSavedDC=-1) returned 1
[0204.520] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0204.520] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0204.520] GetSystemMetrics (nIndex=42) returned 0
[0204.520] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0204.520] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0204.521] RestoreDC (hdc=0x130107a2, nSavedDC=-1) returned 1
[0204.521] GdipReleaseDC (graphics=0x5d92c30, hdc=0x130107a2) returned 0x0
[0204.521] IsAppThemed () returned 0x1
[0204.521] GetThemeAppProperties () returned 0x3
[0204.521] GetThemeAppProperties () returned 0x3
[0204.521] IsAppThemed () returned 0x1
[0204.522] GetThemeAppProperties () returned 0x3
[0204.522] GetThemeAppProperties () returned 0x3
[0204.522] IsThemePartDefined () returned 0x1
[0204.522] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0204.522] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.522] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0204.522] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.522] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0204.522] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0204.522] LocalFree (hMem=0x89ea88) returned 0x0
[0204.522] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0204.522] LocalFree (hMem=0x89ea88) returned 0x0
[0204.522] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.522] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0204.523] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0204.523] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0204.523] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.523] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0204.523] GetCurrentObject (hdc=0x130107a2, type=0x1) returned 0xb00017
[0204.523] GetCurrentObject (hdc=0x130107a2, type=0x2) returned 0x900010
[0204.523] GetCurrentObject (hdc=0x130107a2, type=0x7) returned 0x1e0507b9
[0204.523] GetCurrentObject (hdc=0x130107a2, type=0x6) returned 0x8a01c2
[0204.523] SaveDC (hdc=0x130107a2) returned 1
[0204.523] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa104053e
[0204.523] GetClipRgn (hdc=0x130107a2, hrgn=0xa104053e) returned 0
[0204.523] SelectClipRgn (hdc=0x130107a2, hrgn=0x31040798) returned 2
[0204.523] DeleteObject (ho=0xa104053e) returned 1
[0204.523] DeleteObject (ho=0x31040798) returned 1
[0204.523] OffsetViewportOrgEx (in: hdc=0x130107a2, x=0, y=0, lppt=0x23529c4 | out: lppt=0x23529c4) returned 1
[0204.523] IsAppThemed () returned 0x1
[0204.523] GetThemeAppProperties () returned 0x3
[0204.523] GetThemeAppProperties () returned 0x3
[0204.523] DrawThemeBackground () returned 0x0
[0204.524] RestoreDC (hdc=0x130107a2, nSavedDC=-1) returned 1
[0204.524] GdipReleaseDC (graphics=0x5d92c30, hdc=0x130107a2) returned 0x0
[0204.524] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0204.524] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.524] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0204.524] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.524] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0204.524] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0204.524] LocalFree (hMem=0x89ec80) returned 0x0
[0204.524] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.524] LocalFree (hMem=0x89ea88) returned 0x0
[0204.524] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.524] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0204.524] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0204.524] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0204.524] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.524] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0204.524] GetCurrentObject (hdc=0x130107a2, type=0x1) returned 0xb00017
[0204.524] GetCurrentObject (hdc=0x130107a2, type=0x2) returned 0x900010
[0204.525] GetCurrentObject (hdc=0x130107a2, type=0x7) returned 0x1e0507b9
[0204.525] GetCurrentObject (hdc=0x130107a2, type=0x6) returned 0x8a01c2
[0204.525] SaveDC (hdc=0x130107a2) returned 1
[0204.525] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x32040798
[0204.525] GetClipRgn (hdc=0x130107a2, hrgn=0x32040798) returned 0
[0204.525] SelectClipRgn (hdc=0x130107a2, hrgn=0xa204053e) returned 2
[0204.525] DeleteObject (ho=0x32040798) returned 1
[0204.525] DeleteObject (ho=0xa204053e) returned 1
[0204.525] OffsetViewportOrgEx (in: hdc=0x130107a2, x=0, y=0, lppt=0x2352c98 | out: lppt=0x2352c98) returned 1
[0204.525] IsAppThemed () returned 0x1
[0204.525] GetThemeAppProperties () returned 0x3
[0204.525] GetThemeAppProperties () returned 0x3
[0204.525] GetThemeBackgroundContentRect () returned 0x0
[0204.525] RestoreDC (hdc=0x130107a2, nSavedDC=-1) returned 1
[0204.525] GdipReleaseDC (graphics=0x5d92c30, hdc=0x130107a2) returned 0x0
[0204.525] IsAppThemed () returned 0x1
[0204.525] GetThemeAppProperties () returned 0x3
[0204.525] GetThemeAppProperties () returned 0x3
[0204.525] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0204.526] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0204.526] GetCurrentObject (hdc=0x130107a2, type=0x1) returned 0xb00017
[0204.526] GetCurrentObject (hdc=0x130107a2, type=0x2) returned 0x900010
[0204.526] GetCurrentObject (hdc=0x130107a2, type=0x7) returned 0x1e0507b9
[0204.526] GetCurrentObject (hdc=0x130107a2, type=0x6) returned 0x8a01c2
[0204.526] SaveDC (hdc=0x130107a2) returned 1
[0204.526] GetTextAlign (hdc=0x130107a2) returned 0x0
[0204.526] GetTextColor (hdc=0x130107a2) returned 0x0
[0204.526] GetCurrentObject (hdc=0x130107a2, type=0x6) returned 0x8a01c2
[0204.526] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0204.526] SelectObject (hdc=0x130107a2, h=0x450a0799) returned 0x8a01c2
[0204.526] GetBkMode (hdc=0x130107a2) returned 2
[0204.526] SetBkMode (hdc=0x130107a2, mode=1) returned 2
[0204.526] DrawTextExW (in: hdc=0x130107a2, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x2353038 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0204.527] DrawTextExW (in: hdc=0x130107a2, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x2353038 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0204.527] RestoreDC (hdc=0x130107a2, nSavedDC=-1) returned 1
[0204.527] GdipReleaseDC (graphics=0x5d92c30, hdc=0x130107a2) returned 0x0
[0204.527] GetFocus () returned 0x202c6
[0204.527] IsAppThemed () returned 0x1
[0204.527] GetThemeAppProperties () returned 0x3
[0204.527] GetThemeAppProperties () returned 0x3
[0204.527] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0204.527] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x130107a2, x1=0, y1=0, rop=0xcc0020) returned 1
[0204.528] GdipReleaseDC (graphics=0x5d92c30, hdc=0x130107a2) returned 0x0
[0204.528] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0204.528] SelectObject (hdc=0x130107a2, h=0x85000f) returned 0x1e0507b9
[0204.528] DeleteDC (hdc=0x130107a2) returned 1
[0204.528] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0204.528] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0204.528] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2353134, cPoints=0x1 | out: lpPoints=0x2353134) returned 25690608
[0204.528] WindowFromPoint (Point=0x21a) returned 0x202c6
[0204.528] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x198021a) returned 0x1
[0204.529] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0204.529] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0204.529] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.530] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0204.532] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.532] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0204.533] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.533] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0204.533] GetDC (hWnd=0x0) returned 0x60100ce
[0204.551] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e888) returned 0x0
[0204.552] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0204.552] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0204.552] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0204.552] GetSystemMetrics (nIndex=5) returned 1
[0204.552] GetSystemMetrics (nIndex=6) returned 1
[0204.553] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.554] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0204.554] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.554] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0204.628] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.628] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0204.628] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.629] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0204.629] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.629] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0204.629] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.629] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0204.630] GetSystemMetrics (nIndex=5) returned 1
[0204.630] GetSystemMetrics (nIndex=6) returned 1
[0204.630] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.630] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0204.630] GetSystemMetrics (nIndex=5) returned 1
[0204.630] GetSystemMetrics (nIndex=6) returned 1
[0204.630] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.631] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0204.631] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.631] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0204.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.632] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0204.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.632] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0204.632] GetSystemMetrics (nIndex=59) returned 1460
[0204.632] GetSystemMetrics (nIndex=60) returned 920
[0204.632] GetSystemMetrics (nIndex=34) returned 136
[0204.632] GetSystemMetrics (nIndex=35) returned 39
[0204.633] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.633] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0204.633] GetCurrentThreadId () returned 0x11d0
[0204.633] GetCurrentThreadId () returned 0x11d0
[0204.633] GetCurrentThreadId () returned 0x11d0
[0204.633] GetCurrentThreadId () returned 0x11d0
[0204.633] GetCurrentThreadId () returned 0x11d0
[0204.633] GetCurrentThreadId () returned 0x11d0
[0204.633] GetCurrentThreadId () returned 0x11d0
[0204.633] GetCurrentThreadId () returned 0x11d0
[0204.633] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.633] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0204.633] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0204.634] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0204.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.634] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0204.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.635] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0204.635] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xe02c8
[0204.637] SetWindowLongW (hWnd=0xe02c8, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0204.637] GetWindowLongW (hWnd=0xe02c8, nIndex=-4) returned 1950089536
[0204.637] SetWindowLongW (hWnd=0xe02c8, nIndex=-4, dwNewLong=79645182) returned 1950089536
[0204.638] GetWindowLongW (hWnd=0xe02c8, nIndex=-4) returned 79645182
[0204.638] GetWindowLongW (hWnd=0xe02c8, nIndex=-16) returned 113311744
[0204.638] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02c8, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0204.638] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02c8, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0204.639] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02c8, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0204.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02c8, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0204.640] GetClientRect (in: hWnd=0xe02c8, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0204.640] GetWindowRect (in: hWnd=0xe02c8, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0204.640] SetWindowTextW (hWnd=0xe02c8, lpString="WindowsFormsParkingWindow") returned 1
[0204.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02c8, Msg=0xc, wParam=0x0, lParam=0x234aea8) returned 0x1
[0204.641] GetParent (hWnd=0xe02c8) returned 0x0
[0204.641] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0204.641] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0xe02c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xf02d6
[0204.642] SetWindowLongW (hWnd=0xf02d6, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0204.642] GetWindowLongW (hWnd=0xf02d6, nIndex=-4) returned 1868147648
[0204.642] SetWindowLongW (hWnd=0xf02d6, nIndex=-4, dwNewLong=79645342) returned 1868147648
[0204.642] GetWindowLongW (hWnd=0xf02d6, nIndex=-4) returned 79645342
[0204.642] GetWindowLongW (hWnd=0xf02d6, nIndex=-16) returned 1174405133
[0204.642] GetWindowLongW (hWnd=0xf02d6, nIndex=-12) returned 0
[0204.642] SetWindowLongW (hWnd=0xf02d6, nIndex=-12, dwNewLong=983766) returned 0
[0204.642] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0204.643] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0204.643] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0204.644] GetClientRect (in: hWnd=0xf02d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0204.644] GetWindowRect (in: hWnd=0xf02d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0204.644] GetParent (hWnd=0xf02d6) returned 0xe02c8
[0204.644] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe02c8, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0204.644] SetWindowTextW (hWnd=0xf02d6, lpString="Enter password: ") returned 1
[0204.644] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0xc, wParam=0x0, lParam=0x2333718) returned 0x1
[0204.645] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0204.645] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0204.645] GetClientRect (in: hWnd=0xf02d6, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0204.645] GetWindowRect (in: hWnd=0xf02d6, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0204.645] GetParent (hWnd=0xf02d6) returned 0xe02c8
[0204.645] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe02c8, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0204.645] SendMessageW (hWnd=0xf02d6, Msg=0x2210, wParam=0x2d60001, lParam=0xf02d6) returned 0x0
[0204.645] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x2210, wParam=0x2d60001, lParam=0xf02d6) returned 0x0
[0204.646] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0204.646] GetParent (hWnd=0xf02d6) returned 0xe02c8
[0204.646] GdipCreateFromHWND (hwnd=0xf02d6, graphics=0x53e994) returned 0x0
[0204.647] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0204.647] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0204.647] GetProcessWindowStation () returned 0x13c
[0204.647] GetCapture () returned 0x202c6
[0204.647] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0204.647] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0204.648] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0204.648] ReleaseCapture () returned 1
[0204.648] GetActiveWindow () returned 0x70036
[0204.648] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0204.648] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.649] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0204.649] GetCursorPos (in: lpPoint=0x23629cc | out: lpPoint=0x23629cc*(x=538, y=408)) returned 1
[0204.649] MonitorFromPoint (pt=0x21a, dwFlags=0x198) returned 0x10001
[0204.649] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0204.649] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x160107a2
[0204.650] GetDeviceCaps (hdc=0x160107a2, index=12) returned 32
[0204.650] GetDeviceCaps (hdc=0x160107a2, index=14) returned 1
[0204.650] DeleteDC (hdc=0x160107a2) returned 1
[0204.650] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0204.650] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0204.650] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xe02d2
[0204.651] SetWindowLongW (hWnd=0xe02d2, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0204.651] GetWindowLongW (hWnd=0xe02d2, nIndex=-4) returned 1950089536
[0204.651] SetWindowLongW (hWnd=0xe02d2, nIndex=-4, dwNewLong=79645382) returned 1950089536
[0204.652] GetWindowLongW (hWnd=0xe02d2, nIndex=-4) returned 79645382
[0204.652] GetWindowLongW (hWnd=0xe02d2, nIndex=-16) returned 113770496
[0204.652] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0204.653] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0204.654] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0204.654] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0204.654] GetWindowRect (in: hWnd=0xe02d2, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0204.654] SetWindowTextW (hWnd=0xe02d2, lpString="Ransomware") returned 1
[0204.654] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xc, wParam=0x0, lParam=0x23531fc) returned 0x1
[0204.655] GetStartupInfoW (in: lpStartupInfo=0x2362e9c | out: lpStartupInfo=0x2362e9c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0204.657] GetParent (hWnd=0xe02d2) returned 0x0
[0204.657] SetWindowLongW (hWnd=0xe02d2, nIndex=-8, dwNewLong=0) returned 0
[0204.657] SendMessageW (hWnd=0xe02d2, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0204.658] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0204.658] SendMessageW (hWnd=0xe02d2, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0204.658] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0204.658] GetSystemMenu (hWnd=0xe02d2, bRevert=0) returned 0x2f021b
[0204.659] GetWindowPlacement (in: hWnd=0xe02d2, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0204.660] EnableMenuItem (hMenu=0x2f021b, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0204.660] EnableMenuItem (hMenu=0x2f021b, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0204.660] EnableMenuItem (hMenu=0x2f021b, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0204.660] EnableMenuItem (hMenu=0x2f021b, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0204.660] EnableMenuItem (hMenu=0x2f021b, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0204.660] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0204.660] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0204.660] GetWindowRect (in: hWnd=0xe02d2, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0204.661] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.661] GetWindowLongW (hWnd=0xe02d2, nIndex=-16) returned 113770496
[0204.661] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.661] GetSystemMetrics (nIndex=42) returned 0
[0204.661] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0204.661] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.661] GetSystemMetrics (nIndex=42) returned 0
[0204.661] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0204.662] GetCursorPos (in: lpPoint=0x2363048 | out: lpPoint=0x2363048*(x=538, y=408)) returned 1
[0204.662] MonitorFromPoint (pt=0x21d, dwFlags=0x197) returned 0x10001
[0204.662] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0204.663] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1a0107a2
[0204.663] GetDeviceCaps (hdc=0x1a0107a2, index=12) returned 32
[0204.663] GetDeviceCaps (hdc=0x1a0107a2, index=14) returned 1
[0204.663] DeleteDC (hdc=0x1a0107a2) returned 1
[0204.663] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0204.663] GetWindowLongW (hWnd=0xe02d2, nIndex=-16) returned 113770496
[0204.663] GetWindowLongW (hWnd=0xe02d2, nIndex=-20) returned 327937
[0204.663] SetWindowLongW (hWnd=0xe02d2, nIndex=-16, dwNewLong=46661632) returned 113770496
[0204.663] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0204.664] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0204.664] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0204.664] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0204.665] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0204.665] SetWindowLongW (hWnd=0xe02d2, nIndex=-20, dwNewLong=327681) returned 327937
[0204.665] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0204.665] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0204.666] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0204.666] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0204.666] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0204.667] SetWindowPos (hWnd=0xe02d2, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0204.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0204.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0204.667] GetWindowPlacement (in: hWnd=0xe02d2, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0204.668] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0204.668] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0204.668] GetWindowRect (in: hWnd=0xe02d2, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0204.668] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0204.669] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0204.669] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0204.670] RedrawWindow (hWnd=0xe02d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0204.670] GetSystemMenu (hWnd=0xe02d2, bRevert=0) returned 0x2f021b
[0204.670] GetWindowPlacement (in: hWnd=0xe02d2, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0204.670] EnableMenuItem (hMenu=0x2f021b, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0204.670] EnableMenuItem (hMenu=0x2f021b, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0204.670] EnableMenuItem (hMenu=0x2f021b, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0204.670] EnableMenuItem (hMenu=0x2f021b, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0204.670] EnableMenuItem (hMenu=0x2f021b, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0204.670] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0204.670] GetWindowLongW (hWnd=0xe02d2, nIndex=-8) returned 0
[0204.670] SetWindowLongW (hWnd=0xe02d2, nIndex=-8, dwNewLong=458806) returned 0
[0204.671] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0204.671] GetProcessWindowStation () returned 0x13c
[0204.672] GetCurrentThreadId () returned 0x11d0
[0204.672] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf495e, lParam=0x0) returned 1
[0204.672] IsWindowVisible (hWnd=0xe02d2) returned 0
[0204.672] IsWindowVisible (hWnd=0x70036) returned 1
[0204.672] IsWindowEnabled (hWnd=0x70036) returned 1
[0204.672] IsWindowVisible (hWnd=0x602b6) returned 0
[0204.672] IsWindowVisible (hWnd=0x901f8) returned 0
[0204.672] IsWindowVisible (hWnd=0x202d0) returned 0
[0204.672] IsWindowVisible (hWnd=0x202d4) returned 0
[0204.672] GetActiveWindow () returned 0x70036
[0204.672] GetFocus () returned 0x202c6
[0204.672] IsWindow (hWnd=0x70036) returned 1
[0204.673] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0204.673] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0204.674] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0204.674] GetWindowLongW (hWnd=0xe02d2, nIndex=-8) returned 458806
[0204.674] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0204.674] GetCurrentThreadId () returned 0x11d0
[0204.674] GetWindowLongW (hWnd=0xe02d2, nIndex=-8) returned 458806
[0204.674] IsWindowEnabled (hWnd=0x70036) returned 0
[0204.674] IsWindowEnabled (hWnd=0xe02d2) returned 1
[0204.674] ShowWindow (hWnd=0xe02d2, nCmdShow=5) returned 0
[0204.674] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0204.674] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0204.675] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.675] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0204.675] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0xe02d2, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x12013e
[0204.676] SetWindowLongW (hWnd=0x12013e, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0204.676] GetWindowLongW (hWnd=0x12013e, nIndex=-4) returned 1868026976
[0204.677] SetWindowLongW (hWnd=0x12013e, nIndex=-4, dwNewLong=79645062) returned 1868026976
[0204.677] GetWindowLongW (hWnd=0x12013e, nIndex=-4) returned 79645062
[0204.677] GetWindowLongW (hWnd=0x12013e, nIndex=-16) returned 1174470848
[0204.677] GetWindowLongW (hWnd=0x12013e, nIndex=-12) returned 0
[0204.677] SetWindowLongW (hWnd=0x12013e, nIndex=-12, dwNewLong=1179966) returned 0
[0204.677] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0204.678] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0204.678] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0204.680] SendMessageW (hWnd=0x12013e, Msg=0x2055, wParam=0x12013e, lParam=0x3) returned 0x2
[0204.680] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0204.680] GetWindow (hWnd=0x12013e, uCmd=0x3) returned 0x0
[0204.680] GetClientRect (in: hWnd=0x12013e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0204.680] GetWindowRect (in: hWnd=0x12013e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0204.681] GetParent (hWnd=0x12013e) returned 0xe02d2
[0204.681] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe02d2, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0204.681] SendMessageW (hWnd=0x12013e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0204.681] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0204.681] SendMessageW (hWnd=0x12013e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0204.681] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0204.681] GetSystemMetrics (nIndex=5) returned 1
[0204.681] GetSystemMetrics (nIndex=6) returned 1
[0204.681] SendMessageW (hWnd=0x12013e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0204.681] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0204.681] SendMessageW (hWnd=0x12013e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0204.681] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0204.682] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0204.682] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0204.682] GetClientRect (in: hWnd=0x12013e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0204.682] GetWindowRect (in: hWnd=0x12013e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0204.682] GetParent (hWnd=0x12013e) returned 0xe02d2
[0204.682] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe02d2, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0204.682] SendMessageW (hWnd=0x12013e, Msg=0x2210, wParam=0x13e0001, lParam=0x12013e) returned 0x0
[0204.682] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x2210, wParam=0x13e0001, lParam=0x12013e) returned 0x0
[0204.683] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0204.683] GetParent (hWnd=0x12013e) returned 0xe02d2
[0204.683] GetParent (hWnd=0xf02d6) returned 0xe02c8
[0204.683] SetParent (hWndChild=0xf02d6, hWndNewParent=0xe02d2) returned 0xe02c8
[0204.683] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0204.684] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0204.684] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0204.684] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0204.684] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0204.684] GetClientRect (in: hWnd=0xf02d6, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0204.684] GetWindowRect (in: hWnd=0xf02d6, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0204.684] GetParent (hWnd=0xf02d6) returned 0xe02d2
[0204.684] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe02d2, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0204.684] GetClientRect (in: hWnd=0xf02d6, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0204.684] GetWindowRect (in: hWnd=0xf02d6, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0204.684] GetParent (hWnd=0xf02d6) returned 0xe02d2
[0204.684] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe02d2, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0204.684] GetParent (hWnd=0xf02d6) returned 0xe02d2
[0204.685] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0204.685] GetWindow (hWnd=0xf02d6, uCmd=0x3) returned 0x0
[0204.685] SetWindowPos (hWnd=0xf02d6, hWndInsertAfter=0x12013e, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0204.685] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0204.686] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0204.686] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0204.686] GetClientRect (in: hWnd=0xf02d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0204.686] GetWindowRect (in: hWnd=0xf02d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0204.686] GetParent (hWnd=0xf02d6) returned 0xe02d2
[0204.686] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe02d2, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0204.686] GetParent (hWnd=0xf02d6) returned 0xe02d2
[0204.686] GetWindow (hWnd=0xf02d6, uCmd=0x3) returned 0x12013e
[0204.686] GetWindowThreadProcessId (in: hWnd=0xf02d6, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0204.686] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0204.686] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.687] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0204.687] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0xe02d2, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xa02b4
[0204.688] SetWindowLongW (hWnd=0xa02b4, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0204.688] GetWindowLongW (hWnd=0xa02b4, nIndex=-4) returned 1868032000
[0204.688] SetWindowLongW (hWnd=0xa02b4, nIndex=-4, dwNewLong=79645142) returned 1868032000
[0204.688] GetWindowLongW (hWnd=0xa02b4, nIndex=-4) returned 79645142
[0204.688] GetWindowLongW (hWnd=0xa02b4, nIndex=-16) returned 1174470667
[0204.688] GetWindowLongW (hWnd=0xa02b4, nIndex=-12) returned 0
[0204.688] SetWindowLongW (hWnd=0xa02b4, nIndex=-12, dwNewLong=656052) returned 0
[0204.688] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0204.689] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0204.689] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0204.690] SendMessageW (hWnd=0xa02b4, Msg=0x2055, wParam=0xa02b4, lParam=0x3) returned 0x2
[0204.690] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0204.690] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0204.690] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0204.690] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0204.690] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0204.690] RedrawWindow (hWnd=0x12013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0204.691] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0204.691] RedrawWindow (hWnd=0xf02d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0204.691] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0204.691] RedrawWindow (hWnd=0xa02b4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0204.692] RedrawWindow (hWnd=0xe02d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0204.692] GetWindow (hWnd=0xa02b4, uCmd=0x3) returned 0xf02d6
[0204.692] GetClientRect (in: hWnd=0xa02b4, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0204.692] GetWindowRect (in: hWnd=0xa02b4, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0204.692] GetParent (hWnd=0xa02b4) returned 0xe02d2
[0204.692] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe02d2, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0204.692] SetWindowTextW (hWnd=0xa02b4, lpString="OK") returned 1
[0204.692] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0xc, wParam=0x0, lParam=0x23588cc) returned 0x1
[0204.693] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0204.693] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0204.693] GetClientRect (in: hWnd=0xa02b4, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0204.693] GetWindowRect (in: hWnd=0xa02b4, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0204.693] GetParent (hWnd=0xa02b4) returned 0xe02d2
[0204.693] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe02d2, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0204.694] SendMessageW (hWnd=0xa02b4, Msg=0x2210, wParam=0x2b40001, lParam=0xa02b4) returned 0x0
[0204.694] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x2210, wParam=0x2b40001, lParam=0xa02b4) returned 0x0
[0204.695] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0204.695] GetParent (hWnd=0xa02b4) returned 0xe02d2
[0204.695] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0204.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.696] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0204.696] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0xe02d2, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x302de
[0204.696] SetWindowLongW (hWnd=0x302de, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0204.696] GetWindowLongW (hWnd=0x302de, nIndex=-4) returned 1868032000
[0204.697] SetWindowLongW (hWnd=0x302de, nIndex=-4, dwNewLong=79645462) returned 1868032000
[0204.697] GetWindowLongW (hWnd=0x302de, nIndex=-4) returned 79645462
[0204.697] GetWindowLongW (hWnd=0x302de, nIndex=-16) returned 1174470667
[0204.697] GetWindowLongW (hWnd=0x302de, nIndex=-12) returned 0
[0204.697] SetWindowLongW (hWnd=0x302de, nIndex=-12, dwNewLong=197342) returned 0
[0204.697] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0204.698] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0204.698] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0204.699] SendMessageW (hWnd=0x302de, Msg=0x2055, wParam=0x302de, lParam=0x3) returned 0x2
[0204.699] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0204.699] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0204.699] GetWindow (hWnd=0x302de, uCmd=0x3) returned 0xa02b4
[0204.699] GetClientRect (in: hWnd=0x302de, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0204.699] GetWindowRect (in: hWnd=0x302de, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0204.699] GetParent (hWnd=0x302de) returned 0xe02d2
[0204.699] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe02d2, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0204.699] SetWindowTextW (hWnd=0x302de, lpString="Cancel") returned 1
[0204.699] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0xc, wParam=0x0, lParam=0x235c5c8) returned 0x1
[0204.700] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0204.700] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0204.700] GetClientRect (in: hWnd=0x302de, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0204.700] GetWindowRect (in: hWnd=0x302de, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0204.700] GetParent (hWnd=0x302de) returned 0xe02d2
[0204.700] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe02d2, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0204.700] SendMessageW (hWnd=0x302de, Msg=0x2210, wParam=0x2de0001, lParam=0x302de) returned 0x0
[0204.700] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0x2210, wParam=0x2de0001, lParam=0x302de) returned 0x0
[0204.700] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0204.701] GetParent (hWnd=0x302de) returned 0xe02d2
[0204.701] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0204.701] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e320) returned 0x0
[0204.701] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0204.701] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0204.701] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0204.701] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0204.702] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0204.702] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0204.702] GetWindowLongW (hWnd=0xe02d2, nIndex=-8) returned 458806
[0204.702] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0204.702] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0204.702] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x210107a2
[0204.702] GetDeviceCaps (hdc=0x210107a2, index=12) returned 32
[0204.702] GetDeviceCaps (hdc=0x210107a2, index=14) returned 1
[0204.702] DeleteDC (hdc=0x210107a2) returned 1
[0204.702] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0204.702] GetWindowThreadProcessId (in: hWnd=0xe02d2, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0204.702] GetCurrentThreadId () returned 0x11d0
[0204.703] PostMessageW (hWnd=0xe02d2, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0204.703] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.703] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.703] GetSystemMetrics (nIndex=42) returned 0
[0204.703] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.703] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0204.703] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0204.703] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0204.703] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0204.704] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0204.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0xe02d2) returned 0x1
[0204.719] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0204.720] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0204.720] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0204.720] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0204.722] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0204.722] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0204.723] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0204.724] GetFocus () returned 0x202c6
[0204.724] IsChild (hWndParent=0xe02d2, hWnd=0x202c6) returned 0
[0204.724] GetFocus () returned 0x202c6
[0204.724] SetFocus (hWnd=0x12013e) returned 0x202c6
[0204.731] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x12013e, lParam=0x0) returned 0x0
[0204.732] GetCapture () returned 0x0
[0204.732] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0204.732] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0204.734] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0204.735] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0204.735] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0204.736] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0204.736] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0204.736] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0204.736] GetParent (hWnd=0xe02d2) returned 0x0
[0204.736] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0204.737] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0204.737] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0204.738] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0204.738] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0204.738] GetSysColorBrush (nIndex=5) returned 0x100079
[0204.739] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0204.739] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0204.741] SendMessageW (hWnd=0x12013e, Msg=0x2111, wParam=0x100013e, lParam=0x12013e) returned 0x0
[0204.741] SendMessageW (hWnd=0x12013e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0204.741] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0204.741] GetKeyState (nVirtKey=1) returned 0
[0204.741] GetKeyState (nVirtKey=2) returned 0
[0204.741] GetKeyState (nVirtKey=4) returned 0
[0204.741] GetKeyState (nVirtKey=5) returned 0
[0204.741] GetKeyState (nVirtKey=6) returned 0
[0204.741] GetWindowTextLengthW (hWnd=0x12013e) returned 0
[0204.741] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0204.741] SendMessageW (hWnd=0x12013e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0204.741] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0204.742] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0204.742] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0204.747] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0204.748] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0204.748] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0204.749] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0204.749] GetWindowPlacement (in: hWnd=0xe02d2, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0204.749] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0204.749] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.749] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.749] GetSystemMetrics (nIndex=42) returned 0
[0204.749] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.749] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0204.749] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0204.750] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0204.750] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0204.750] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0xffffffffe005065f
[0204.750] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0204.750] SaveDC (hdc=0x10105d6) returned 1
[0204.750] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0204.750] CreateSolidBrush (color=0xf0f0f0) returned 0x1b10078d
[0204.750] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0x1b10078d) returned 1
[0204.750] DeleteObject (ho=0x1b10078d) returned 1
[0204.750] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0204.750] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0204.751] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0204.751] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0204.752] GetWindowPlacement (in: hWnd=0xe02d2, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0204.752] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0204.752] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.752] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.752] GetSystemMetrics (nIndex=42) returned 0
[0204.752] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.752] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0204.753] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0204.753] GetCurrentObject (hdc=0xe20107c0, type=0x1) returned 0xb00017
[0204.753] GetCurrentObject (hdc=0xe20107c0, type=0x2) returned 0x900010
[0204.753] GetCurrentObject (hdc=0xe20107c0, type=0x7) returned 0x3e0507a3
[0204.753] GetCurrentObject (hdc=0xe20107c0, type=0x6) returned 0x8a01c2
[0204.753] SaveDC (hdc=0xe20107c0) returned 1
[0204.753] GetNearestColor (hdc=0xe20107c0, color=0xf0f0f0) returned 0xf0f0f0
[0204.753] CreateSolidBrush (color=0xf0f0f0) returned 0x1c10078d
[0204.753] FillRect (hDC=0xe20107c0, lprc=0x53dc18, hbr=0x1c10078d) returned 1
[0204.753] DeleteObject (ho=0x1c10078d) returned 1
[0204.753] RestoreDC (hdc=0xe20107c0, nSavedDC=-1) returned 1
[0204.753] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.753] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.753] GetSystemMetrics (nIndex=42) returned 0
[0204.753] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.753] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0204.754] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0204.754] GetCurrentObject (hdc=0xe20107c0, type=0x1) returned 0xb00017
[0204.754] GetCurrentObject (hdc=0xe20107c0, type=0x2) returned 0x900010
[0204.754] GetCurrentObject (hdc=0xe20107c0, type=0x7) returned 0x3e0507a3
[0204.754] GetCurrentObject (hdc=0xe20107c0, type=0x6) returned 0x8a01c2
[0204.754] SaveDC (hdc=0xe20107c0) returned 1
[0204.754] GetNearestColor (hdc=0xe20107c0, color=0xf0f0f0) returned 0xf0f0f0
[0204.754] CreateSolidBrush (color=0xf0f0f0) returned 0x1d10078d
[0204.754] FillRect (hDC=0xe20107c0, lprc=0x53dbb8, hbr=0x1d10078d) returned 1
[0204.754] DeleteObject (ho=0x1d10078d) returned 1
[0204.754] RestoreDC (hdc=0xe20107c0, nSavedDC=-1) returned 1
[0204.754] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.754] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.754] GetSystemMetrics (nIndex=42) returned 0
[0204.754] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.754] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0204.768] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0204.769] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0204.769] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0204.769] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0204.769] GetStockObject (i=5) returned 0x900015
[0204.769] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0204.770] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0204.770] GetStockObject (i=5) returned 0x900015
[0204.770] GetWindowPlacement (in: hWnd=0xe02d2, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0204.770] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0204.770] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0204.770] GetWindowRect (in: hWnd=0xe02d2, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0204.772] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0204.772] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0204.772] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0204.772] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0204.773] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0204.773] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0204.773] GetWindowRect (in: hWnd=0xe02d2, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0204.773] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.773] IsWindowUnicode (hWnd=0xe02d2) returned 1
[0204.773] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.773] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.773] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.773] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0204.773] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.773] IsWindowUnicode (hWnd=0xe02d2) returned 1
[0204.773] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.773] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.773] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.773] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.774] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x84, wParam=0x0, lParam=0x198021a) returned 0x12
[0204.775] IsWindowUnicode (hWnd=0xe02d2) returned 1
[0204.775] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.775] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.775] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.775] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.775] IsWindowUnicode (hWnd=0x202c6) returned 1
[0204.775] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.776] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.776] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.776] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0204.776] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0204.776] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.811] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x84, wParam=0x0, lParam=0x198021a) returned 0x12
[0204.811] IsWindowUnicode (hWnd=0xe02d2) returned 1
[0204.812] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.812] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x84, wParam=0x0, lParam=0x198021a) returned 0x12
[0204.813] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x20, wParam=0xe02d2, lParam=0x2000012) returned 0x0
[0204.813] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.813] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.813] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xa0, wParam=0x12, lParam=0x198021a) returned 0x0
[0204.813] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.814] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x84, wParam=0x0, lParam=0x194036c) returned 0x1
[0204.814] IsWindowUnicode (hWnd=0xa02b4) returned 1
[0204.814] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.814] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.814] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.814] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.814] IsWindowUnicode (hWnd=0xe02d2) returned 1
[0204.814] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.814] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.814] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.814] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x2a2, wParam=0x0, lParam=0x0) returned 0x0
[0204.814] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.815] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x84, wParam=0x0, lParam=0x194036c) returned 0x1
[0204.815] IsWindowUnicode (hWnd=0xa02b4) returned 1
[0204.815] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.815] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x84, wParam=0x0, lParam=0x194036c) returned 0x1
[0204.815] SetCursor (hCursor=0x10003) returned 0x10003
[0204.815] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.815] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.815] _TrackMouseEvent (in: lpEventTrack=0x2364c20 | out: lpEventTrack=0x2364c20) returned 1
[0204.815] SendMessageW (hWnd=0xa02b4, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0204.815] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0204.815] InvalidateRect (hWnd=0xa02b4, lpRect=0x0, bErase=0) returned 1
[0204.815] GetKeyState (nVirtKey=1) returned 0
[0204.815] GetKeyState (nVirtKey=2) returned 0
[0204.816] GetKeyState (nVirtKey=4) returned 0
[0204.816] GetKeyState (nVirtKey=5) returned 0
[0204.816] GetKeyState (nVirtKey=6) returned 0
[0204.816] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.816] IsWindowUnicode (hWnd=0xe02d2) returned 1
[0204.816] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.816] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.816] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.816] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.817] IsWindowUnicode (hWnd=0xe02d2) returned 1
[0204.817] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.817] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.817] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.817] BeginPaint (in: hWnd=0xe02d2, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0xf0105ee
[0204.818] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0204.818] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.818] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.818] GetSystemMetrics (nIndex=42) returned 0
[0204.818] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.818] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0204.818] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0204.818] EndPaint (hWnd=0xe02d2, lpPaint=0x53e30c) returned 1
[0204.819] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.819] IsWindowUnicode (hWnd=0x12013e) returned 1
[0204.819] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.819] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.819] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0204.819] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0204.820] SetTextColor (hdc=0xe30107c0, color=0x0) returned 0x0
[0204.821] SetBkColor (hdc=0xe30107c0, color=0xffffff) returned 0xffffff
[0204.822] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.822] IsWindowUnicode (hWnd=0xf02d6) returned 1
[0204.822] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.822] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.822] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.822] BeginPaint (in: hWnd=0xf02d6, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x10105d6
[0204.822] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0204.822] CreateCompatibleDC (hdc=0x10105d6) returned 0x10010788
[0204.822] SelectObject (hdc=0x10010788, h=0x1e0507b9) returned 0x85000f
[0204.822] GdipCreateFromHDC (hdc=0x10010788, graphics=0x53e30c) returned 0x0
[0204.823] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0204.823] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0204.823] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0204.823] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.823] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0204.823] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0204.823] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0204.823] LocalFree (hMem=0x89ec80) returned 0x0
[0204.823] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.823] GdipCreateRegion (region=0x53e354) returned 0x0
[0204.824] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.824] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0204.824] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0204.824] GetWindowTextLengthW (hWnd=0xf02d6) returned 16
[0204.824] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0204.824] GetSystemMetrics (nIndex=42) returned 0
[0204.824] GetWindowTextW (in: hWnd=0xf02d6, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0204.824] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0204.824] GetClientRect (in: hWnd=0xf02d6, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0204.824] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0204.824] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0204.824] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0204.824] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.825] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0204.825] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.825] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.825] LocalFree (hMem=0x89ea88) returned 0x0
[0204.825] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0204.825] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.825] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.825] LocalFree (hMem=0x89ea88) returned 0x0
[0204.825] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.825] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0204.825] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0204.825] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0204.825] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0204.825] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0204.825] GetCurrentObject (hdc=0x10010788, type=0x1) returned 0xb00017
[0204.825] GetCurrentObject (hdc=0x10010788, type=0x2) returned 0x900010
[0204.825] GetCurrentObject (hdc=0x10010788, type=0x7) returned 0x1e0507b9
[0204.826] GetCurrentObject (hdc=0x10010788, type=0x6) returned 0x8a01c2
[0204.826] SaveDC (hdc=0x10010788) returned 1
[0204.826] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a0407a1
[0204.826] GetClipRgn (hdc=0x10010788, hrgn=0x3a0407a1) returned 0
[0204.826] SelectClipRgn (hdc=0x10010788, hrgn=0xa604053e) returned 2
[0204.826] DeleteObject (ho=0x3a0407a1) returned 1
[0204.826] DeleteObject (ho=0xa604053e) returned 1
[0204.826] OffsetViewportOrgEx (in: hdc=0x10010788, x=0, y=0, lppt=0x2365a0c | out: lppt=0x2365a0c) returned 1
[0204.826] GetNearestColor (hdc=0x10010788, color=0xf0f0f0) returned 0xf0f0f0
[0204.826] CreateSolidBrush (color=0xf0f0f0) returned 0x1e10078d
[0204.826] FillRect (hDC=0x10010788, lprc=0x53e1f4, hbr=0x1e10078d) returned 1
[0204.827] DeleteObject (ho=0x1e10078d) returned 1
[0204.827] RestoreDC (hdc=0x10010788, nSavedDC=-1) returned 1
[0204.827] GdipReleaseDC (graphics=0x5d92c30, hdc=0x10010788) returned 0x0
[0204.827] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfceb0dbd) returned 0x0
[0204.827] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.827] GetWindowTextLengthW (hWnd=0xf02d6) returned 16
[0204.827] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0204.827] GetSystemMetrics (nIndex=42) returned 0
[0204.827] GetWindowTextW (in: hWnd=0xf02d6, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0204.827] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0204.827] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0204.827] GetCurrentObject (hdc=0x10010788, type=0x1) returned 0xb00017
[0204.827] GetCurrentObject (hdc=0x10010788, type=0x2) returned 0x900010
[0204.828] GetCurrentObject (hdc=0x10010788, type=0x7) returned 0x1e0507b9
[0204.828] GetCurrentObject (hdc=0x10010788, type=0x6) returned 0x8a01c2
[0204.828] SaveDC (hdc=0x10010788) returned 1
[0204.828] GetNearestColor (hdc=0x10010788, color=0x0) returned 0x0
[0204.828] RestoreDC (hdc=0x10010788, nSavedDC=-1) returned 1
[0204.828] GdipReleaseDC (graphics=0x5d92c30, hdc=0x10010788) returned 0x0
[0204.829] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0204.829] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0204.829] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0204.829] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2365d14 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0204.829] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0204.829] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0204.829] GetCurrentObject (hdc=0x10010788, type=0x1) returned 0xb00017
[0204.830] GetCurrentObject (hdc=0x10010788, type=0x2) returned 0x900010
[0204.830] GetCurrentObject (hdc=0x10010788, type=0x7) returned 0x1e0507b9
[0204.830] GetCurrentObject (hdc=0x10010788, type=0x6) returned 0x8a01c2
[0204.830] SaveDC (hdc=0x10010788) returned 1
[0204.830] GetTextAlign (hdc=0x10010788) returned 0x0
[0204.830] GetTextColor (hdc=0x10010788) returned 0x0
[0204.830] GetCurrentObject (hdc=0x10010788, type=0x6) returned 0x8a01c2
[0204.830] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0204.830] SelectObject (hdc=0x10010788, h=0x730a066d) returned 0x8a01c2
[0204.830] GetBkMode (hdc=0x10010788) returned 2
[0204.830] SetBkMode (hdc=0x10010788, mode=1) returned 2
[0204.830] DrawTextExW (in: hdc=0x10010788, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x2365f38 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0204.831] RestoreDC (hdc=0x10010788, nSavedDC=-1) returned 1
[0204.831] GdipReleaseDC (graphics=0x5d92c30, hdc=0x10010788) returned 0x0
[0204.831] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0204.831] BitBlt (hdc=0x10105d6, x=0, y=0, cx=250, cy=70, hdcSrc=0x10010788, x1=0, y1=0, rop=0xcc0020) returned 1
[0204.831] GdipReleaseDC (graphics=0x5d92c30, hdc=0x10010788) returned 0x0
[0204.831] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0204.831] SelectObject (hdc=0x10010788, h=0x85000f) returned 0x1e0507b9
[0204.831] DeleteDC (hdc=0x10010788) returned 1
[0204.832] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0204.832] EndPaint (hWnd=0xf02d6, lpPaint=0x53e2f0) returned 1
[0204.832] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.832] IsWindowUnicode (hWnd=0xa02b4) returned 1
[0204.832] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.832] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.832] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.832] BeginPaint (in: hWnd=0xa02b4, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0204.832] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0204.832] CreateCompatibleDC (hdc=0x60100ce) returned 0x12010788
[0204.833] SelectObject (hdc=0x12010788, h=0x1e0507b9) returned 0x85000f
[0204.833] GdipCreateFromHDC (hdc=0x12010788, graphics=0x53e300) returned 0x0
[0204.833] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0204.833] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0204.833] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0204.833] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.833] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0204.833] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0204.833] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0204.833] LocalFree (hMem=0x89ee08) returned 0x0
[0204.833] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.833] GdipCreateRegion (region=0x53e348) returned 0x0
[0204.833] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.834] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0204.838] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0204.838] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfce90dbd) returned 0x0
[0204.838] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.838] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0204.838] GetCurrentObject (hdc=0x12010788, type=0x1) returned 0xb00017
[0204.838] GetCurrentObject (hdc=0x12010788, type=0x2) returned 0x900010
[0204.838] GetCurrentObject (hdc=0x12010788, type=0x7) returned 0x1e0507b9
[0204.838] GetCurrentObject (hdc=0x12010788, type=0x6) returned 0x8a01c2
[0204.838] SaveDC (hdc=0x12010788) returned 1
[0204.838] GetNearestColor (hdc=0x12010788, color=0xf0f0f0) returned 0xf0f0f0
[0204.838] GetNearestColor (hdc=0x12010788, color=0xa0a0a0) returned 0xa0a0a0
[0204.838] GetNearestColor (hdc=0x12010788, color=0x696969) returned 0x696969
[0204.838] GetNearestColor (hdc=0x12010788, color=0xa0a0a0) returned 0xa0a0a0
[0204.839] GetNearestColor (hdc=0x12010788, color=0x0) returned 0x0
[0204.839] GetNearestColor (hdc=0x12010788, color=0xffffff) returned 0xffffff
[0204.839] GetNearestColor (hdc=0x12010788, color=0xe5e5e5) returned 0xe5e5e5
[0204.839] GetNearestColor (hdc=0x12010788, color=0xd7d7d7) returned 0xd7d7d7
[0204.839] GetNearestColor (hdc=0x12010788, color=0x0) returned 0x0
[0204.839] RestoreDC (hdc=0x12010788, nSavedDC=-1) returned 1
[0204.839] GdipReleaseDC (graphics=0x5d92c30, hdc=0x12010788) returned 0x0
[0204.839] IsAppThemed () returned 0x1
[0204.839] GetThemeAppProperties () returned 0x3
[0204.839] GetThemeAppProperties () returned 0x3
[0204.839] IsAppThemed () returned 0x1
[0204.839] GetThemeAppProperties () returned 0x3
[0204.839] GetThemeAppProperties () returned 0x3
[0204.839] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x23666a4 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0204.840] IsAppThemed () returned 0x1
[0204.840] GetThemeAppProperties () returned 0x3
[0204.840] GetThemeAppProperties () returned 0x3
[0204.840] IsAppThemed () returned 0x1
[0204.840] GetThemeAppProperties () returned 0x3
[0204.840] GetThemeAppProperties () returned 0x3
[0204.840] IsAppThemed () returned 0x1
[0204.840] GetThemeAppProperties () returned 0x3
[0204.840] GetThemeAppProperties () returned 0x3
[0204.840] IsAppThemed () returned 0x1
[0204.840] GetThemeAppProperties () returned 0x3
[0204.840] GetThemeAppProperties () returned 0x3
[0204.840] IsThemePartDefined () returned 0x1
[0204.840] IsAppThemed () returned 0x1
[0204.841] GetThemeAppProperties () returned 0x3
[0204.841] GetThemeAppProperties () returned 0x3
[0204.841] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0204.841] IsAppThemed () returned 0x1
[0204.841] GetThemeAppProperties () returned 0x3
[0204.841] GetThemeAppProperties () returned 0x3
[0204.841] IsAppThemed () returned 0x1
[0204.841] GetThemeAppProperties () returned 0x3
[0204.841] GetThemeAppProperties () returned 0x3
[0204.841] IsThemePartDefined () returned 0x1
[0204.841] GdipCreateRegion (region=0x53e064) returned 0x0
[0204.841] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.841] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0204.841] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.841] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0204.841] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.841] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.841] LocalFree (hMem=0x89ea88) returned 0x0
[0204.841] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.841] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.842] LocalFree (hMem=0x89ea88) returned 0x0
[0204.842] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.842] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0204.842] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0204.842] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0204.842] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.842] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0204.842] GetCurrentObject (hdc=0x12010788, type=0x1) returned 0xb00017
[0204.842] GetCurrentObject (hdc=0x12010788, type=0x2) returned 0x900010
[0204.842] GetCurrentObject (hdc=0x12010788, type=0x7) returned 0x1e0507b9
[0204.842] GetCurrentObject (hdc=0x12010788, type=0x6) returned 0x8a01c2
[0204.842] SaveDC (hdc=0x12010788) returned 1
[0204.842] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa704053e
[0204.842] GetClipRgn (hdc=0x12010788, hrgn=0xa704053e) returned 0
[0204.842] SelectClipRgn (hdc=0x12010788, hrgn=0x3e0407a1) returned 2
[0204.843] DeleteObject (ho=0xa704053e) returned 1
[0204.843] DeleteObject (ho=0x3e0407a1) returned 1
[0204.843] OffsetViewportOrgEx (in: hdc=0x12010788, x=0, y=0, lppt=0x2366d54 | out: lppt=0x2366d54) returned 1
[0204.843] DrawThemeParentBackground () returned 0x0
[0204.843] GetWindowPlacement (in: hWnd=0xe02d2, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0204.843] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0204.843] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.843] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.843] GetSystemMetrics (nIndex=42) returned 0
[0204.843] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.843] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0204.843] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0204.843] GetCurrentObject (hdc=0x12010788, type=0x1) returned 0xb00017
[0204.843] GetCurrentObject (hdc=0x12010788, type=0x2) returned 0x900010
[0204.843] GetCurrentObject (hdc=0x12010788, type=0x7) returned 0x1e0507b9
[0204.844] GetCurrentObject (hdc=0x12010788, type=0x6) returned 0x8a01c2
[0204.844] SaveDC (hdc=0x12010788) returned 2
[0204.844] GetNearestColor (hdc=0x12010788, color=0xf0f0f0) returned 0xf0f0f0
[0204.844] CreateSolidBrush (color=0xf0f0f0) returned 0x1f10078d
[0204.844] FillRect (hDC=0x12010788, lprc=0x53dac8, hbr=0x1f10078d) returned 1
[0204.844] DeleteObject (ho=0x1f10078d) returned 1
[0204.844] RestoreDC (hdc=0x12010788, nSavedDC=-1) returned 1
[0204.844] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.844] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.844] GetSystemMetrics (nIndex=42) returned 0
[0204.844] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.844] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0204.844] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0204.844] GetCurrentObject (hdc=0x12010788, type=0x1) returned 0xb00017
[0204.844] GetCurrentObject (hdc=0x12010788, type=0x2) returned 0x900010
[0204.845] GetCurrentObject (hdc=0x12010788, type=0x7) returned 0x1e0507b9
[0204.845] GetCurrentObject (hdc=0x12010788, type=0x6) returned 0x8a01c2
[0204.845] SaveDC (hdc=0x12010788) returned 2
[0204.845] GetNearestColor (hdc=0x12010788, color=0xf0f0f0) returned 0xf0f0f0
[0204.845] CreateSolidBrush (color=0xf0f0f0) returned 0x2010078d
[0204.845] FillRect (hDC=0x12010788, lprc=0x53da68, hbr=0x2010078d) returned 1
[0204.845] DeleteObject (ho=0x2010078d) returned 1
[0204.845] RestoreDC (hdc=0x12010788, nSavedDC=-1) returned 1
[0204.845] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.845] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.845] GetSystemMetrics (nIndex=42) returned 0
[0204.845] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.845] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0204.846] RestoreDC (hdc=0x12010788, nSavedDC=-1) returned 1
[0204.846] GdipReleaseDC (graphics=0x5d92c30, hdc=0x12010788) returned 0x0
[0204.846] IsAppThemed () returned 0x1
[0204.846] GetThemeAppProperties () returned 0x3
[0204.846] GetThemeAppProperties () returned 0x3
[0204.846] IsAppThemed () returned 0x1
[0204.846] GetThemeAppProperties () returned 0x3
[0204.846] GetThemeAppProperties () returned 0x3
[0204.846] IsThemePartDefined () returned 0x1
[0204.846] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0204.846] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.846] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0204.846] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.846] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0204.847] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.847] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0204.847] LocalFree (hMem=0x89ea88) returned 0x0
[0204.847] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0204.847] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0204.847] LocalFree (hMem=0x89ee08) returned 0x0
[0204.847] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.847] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0204.847] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0204.847] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0204.847] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.847] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0204.847] GetCurrentObject (hdc=0x12010788, type=0x1) returned 0xb00017
[0204.847] GetCurrentObject (hdc=0x12010788, type=0x2) returned 0x900010
[0204.847] GetCurrentObject (hdc=0x12010788, type=0x7) returned 0x1e0507b9
[0204.847] GetCurrentObject (hdc=0x12010788, type=0x6) returned 0x8a01c2
[0204.847] SaveDC (hdc=0x12010788) returned 1
[0204.848] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3f0407a1
[0204.848] GetClipRgn (hdc=0x12010788, hrgn=0x3f0407a1) returned 0
[0204.848] SelectClipRgn (hdc=0x12010788, hrgn=0xa904053e) returned 2
[0204.848] DeleteObject (ho=0x3f0407a1) returned 1
[0204.848] DeleteObject (ho=0xa904053e) returned 1
[0204.848] OffsetViewportOrgEx (in: hdc=0x12010788, x=0, y=0, lppt=0x23675dc | out: lppt=0x23675dc) returned 1
[0204.848] IsAppThemed () returned 0x1
[0204.848] GetThemeAppProperties () returned 0x3
[0204.848] GetThemeAppProperties () returned 0x3
[0204.848] DrawThemeBackground () returned 0x0
[0204.848] RestoreDC (hdc=0x12010788, nSavedDC=-1) returned 1
[0204.848] GdipReleaseDC (graphics=0x5d92c30, hdc=0x12010788) returned 0x0
[0204.848] GdipCreateRegion (region=0x53dfec) returned 0x0
[0204.848] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.848] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0204.848] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.848] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0204.849] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.849] LocalFree (hMem=0x89ea88) returned 0x0
[0204.849] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.849] LocalFree (hMem=0x89ea88) returned 0x0
[0204.849] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.849] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0204.849] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0204.849] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0204.849] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.849] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0204.849] GetCurrentObject (hdc=0x12010788, type=0x1) returned 0xb00017
[0204.854] GetCurrentObject (hdc=0x12010788, type=0x2) returned 0x900010
[0204.854] GetCurrentObject (hdc=0x12010788, type=0x7) returned 0x1e0507b9
[0204.854] GetCurrentObject (hdc=0x12010788, type=0x6) returned 0x8a01c2
[0204.854] SaveDC (hdc=0x12010788) returned 1
[0204.854] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaa04053e
[0204.854] GetClipRgn (hdc=0x12010788, hrgn=0xaa04053e) returned 0
[0204.854] SelectClipRgn (hdc=0x12010788, hrgn=0x400407a1) returned 2
[0204.854] DeleteObject (ho=0xaa04053e) returned 1
[0204.854] DeleteObject (ho=0x400407a1) returned 1
[0204.854] OffsetViewportOrgEx (in: hdc=0x12010788, x=0, y=0, lppt=0x23678b0 | out: lppt=0x23678b0) returned 1
[0204.854] IsAppThemed () returned 0x1
[0204.854] GetThemeAppProperties () returned 0x3
[0204.854] GetThemeAppProperties () returned 0x3
[0204.855] GetThemeBackgroundContentRect () returned 0x0
[0204.855] RestoreDC (hdc=0x12010788, nSavedDC=-1) returned 1
[0204.855] GdipReleaseDC (graphics=0x5d92c30, hdc=0x12010788) returned 0x0
[0204.855] IsAppThemed () returned 0x1
[0204.855] GetThemeAppProperties () returned 0x3
[0204.855] GetThemeAppProperties () returned 0x3
[0204.855] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0204.855] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0204.855] GetCurrentObject (hdc=0x12010788, type=0x1) returned 0xb00017
[0204.855] GetCurrentObject (hdc=0x12010788, type=0x2) returned 0x900010
[0204.855] GetCurrentObject (hdc=0x12010788, type=0x7) returned 0x1e0507b9
[0204.855] GetCurrentObject (hdc=0x12010788, type=0x6) returned 0x8a01c2
[0204.855] SaveDC (hdc=0x12010788) returned 1
[0204.855] GetTextAlign (hdc=0x12010788) returned 0x0
[0204.855] GetTextColor (hdc=0x12010788) returned 0x0
[0204.855] GetCurrentObject (hdc=0x12010788, type=0x6) returned 0x8a01c2
[0204.855] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0204.856] SelectObject (hdc=0x12010788, h=0x730a066d) returned 0x8a01c2
[0204.856] GetBkMode (hdc=0x12010788) returned 2
[0204.856] SetBkMode (hdc=0x12010788, mode=1) returned 2
[0204.856] DrawTextExW (in: hdc=0x12010788, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x2367c50 | out: lpchText="OK", lprc=0x53df84) returned 13
[0204.856] DrawTextExW (in: hdc=0x12010788, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x2367c50 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0204.856] RestoreDC (hdc=0x12010788, nSavedDC=-1) returned 1
[0204.856] GdipReleaseDC (graphics=0x5d92c30, hdc=0x12010788) returned 0x0
[0204.856] GetFocus () returned 0x12013e
[0204.857] IsAppThemed () returned 0x1
[0204.857] GetThemeAppProperties () returned 0x3
[0204.857] GetThemeAppProperties () returned 0x3
[0204.857] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0204.857] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x12010788, x1=0, y1=0, rop=0xcc0020) returned 1
[0204.857] GdipReleaseDC (graphics=0x5d92c30, hdc=0x12010788) returned 0x0
[0204.857] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0204.857] SelectObject (hdc=0x12010788, h=0x85000f) returned 0x1e0507b9
[0204.857] DeleteDC (hdc=0x12010788) returned 1
[0204.857] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0204.857] EndPaint (hWnd=0xa02b4, lpPaint=0x53e2e4) returned 1
[0204.857] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.858] IsWindowUnicode (hWnd=0x302de) returned 1
[0204.858] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.858] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.858] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.858] BeginPaint (in: hWnd=0x302de, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0204.858] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0204.858] CreateCompatibleDC (hdc=0xf0105ee) returned 0x14010788
[0204.858] SelectObject (hdc=0x14010788, h=0x1e0507b9) returned 0x85000f
[0204.858] GdipCreateFromHDC (hdc=0x14010788, graphics=0x53e300) returned 0x0
[0204.858] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0204.858] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0204.858] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0204.859] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.859] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0204.859] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0204.859] LocalFree (hMem=0x89ec80) returned 0x0
[0204.859] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.859] GdipCreateRegion (region=0x53e348) returned 0x0
[0204.859] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.859] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0204.859] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0204.859] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfce70dbd) returned 0x0
[0204.859] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.859] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0204.859] GetCurrentObject (hdc=0x14010788, type=0x1) returned 0xb00017
[0204.859] GetCurrentObject (hdc=0x14010788, type=0x2) returned 0x900010
[0204.859] GetCurrentObject (hdc=0x14010788, type=0x7) returned 0x1e0507b9
[0204.859] GetCurrentObject (hdc=0x14010788, type=0x6) returned 0x8a01c2
[0204.859] SaveDC (hdc=0x14010788) returned 1
[0204.859] GetNearestColor (hdc=0x14010788, color=0xf0f0f0) returned 0xf0f0f0
[0204.860] GetNearestColor (hdc=0x14010788, color=0xa0a0a0) returned 0xa0a0a0
[0204.860] GetNearestColor (hdc=0x14010788, color=0x696969) returned 0x696969
[0204.860] GetNearestColor (hdc=0x14010788, color=0xa0a0a0) returned 0xa0a0a0
[0204.860] GetNearestColor (hdc=0x14010788, color=0x0) returned 0x0
[0204.860] GetNearestColor (hdc=0x14010788, color=0xffffff) returned 0xffffff
[0204.860] GetNearestColor (hdc=0x14010788, color=0xe5e5e5) returned 0xe5e5e5
[0204.860] GetNearestColor (hdc=0x14010788, color=0xd7d7d7) returned 0xd7d7d7
[0204.860] GetNearestColor (hdc=0x14010788, color=0x0) returned 0x0
[0204.860] RestoreDC (hdc=0x14010788, nSavedDC=-1) returned 1
[0204.860] GdipReleaseDC (graphics=0x5d92c30, hdc=0x14010788) returned 0x0
[0204.860] IsAppThemed () returned 0x1
[0204.860] GetThemeAppProperties () returned 0x3
[0204.860] GetThemeAppProperties () returned 0x3
[0204.860] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0204.860] SendMessageW (hWnd=0xe02d2, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0204.860] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0204.860] IsAppThemed () returned 0x1
[0204.861] GetThemeAppProperties () returned 0x3
[0204.861] GetThemeAppProperties () returned 0x3
[0204.861] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x2368460 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0204.861] IsAppThemed () returned 0x1
[0204.861] GetThemeAppProperties () returned 0x3
[0204.861] GetThemeAppProperties () returned 0x3
[0204.861] IsAppThemed () returned 0x1
[0204.861] GetThemeAppProperties () returned 0x3
[0204.861] GetThemeAppProperties () returned 0x3
[0204.861] GetFocus () returned 0x12013e
[0204.861] IsAppThemed () returned 0x1
[0204.861] GetThemeAppProperties () returned 0x3
[0204.861] GetThemeAppProperties () returned 0x3
[0204.862] IsAppThemed () returned 0x1
[0204.862] GetThemeAppProperties () returned 0x3
[0204.862] GetThemeAppProperties () returned 0x3
[0204.862] IsThemePartDefined () returned 0x1
[0204.862] IsAppThemed () returned 0x1
[0204.862] GetThemeAppProperties () returned 0x3
[0204.862] GetThemeAppProperties () returned 0x3
[0204.862] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0204.862] IsAppThemed () returned 0x1
[0204.862] GetThemeAppProperties () returned 0x3
[0204.862] GetThemeAppProperties () returned 0x3
[0204.862] IsAppThemed () returned 0x1
[0204.862] GetThemeAppProperties () returned 0x3
[0204.862] GetThemeAppProperties () returned 0x3
[0204.862] IsThemePartDefined () returned 0x1
[0204.862] GdipCreateRegion (region=0x53e070) returned 0x0
[0204.862] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.862] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0204.862] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.862] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0204.862] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.863] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.863] LocalFree (hMem=0x89ea88) returned 0x0
[0204.863] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0204.863] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0204.863] LocalFree (hMem=0x89ec80) returned 0x0
[0204.863] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.863] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0204.863] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0204.863] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0204.863] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.863] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0204.863] GetCurrentObject (hdc=0x14010788, type=0x1) returned 0xb00017
[0204.863] GetCurrentObject (hdc=0x14010788, type=0x2) returned 0x900010
[0204.863] GetCurrentObject (hdc=0x14010788, type=0x7) returned 0x1e0507b9
[0204.863] GetCurrentObject (hdc=0x14010788, type=0x6) returned 0x8a01c2
[0204.863] SaveDC (hdc=0x14010788) returned 1
[0204.863] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x410407a1
[0204.864] GetClipRgn (hdc=0x14010788, hrgn=0x410407a1) returned 0
[0204.864] SelectClipRgn (hdc=0x14010788, hrgn=0xae04053e) returned 2
[0204.864] DeleteObject (ho=0x410407a1) returned 1
[0204.864] DeleteObject (ho=0xae04053e) returned 1
[0204.864] OffsetViewportOrgEx (in: hdc=0x14010788, x=0, y=0, lppt=0x2368b10 | out: lppt=0x2368b10) returned 1
[0204.864] DrawThemeParentBackground () returned 0x0
[0204.864] GetWindowPlacement (in: hWnd=0xe02d2, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0204.864] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0204.864] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.864] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.864] GetSystemMetrics (nIndex=42) returned 0
[0204.864] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.864] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0204.864] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0204.864] GetCurrentObject (hdc=0x14010788, type=0x1) returned 0xb00017
[0204.865] GetCurrentObject (hdc=0x14010788, type=0x2) returned 0x900010
[0204.865] GetCurrentObject (hdc=0x14010788, type=0x7) returned 0x1e0507b9
[0204.865] GetCurrentObject (hdc=0x14010788, type=0x6) returned 0x8a01c2
[0204.865] SaveDC (hdc=0x14010788) returned 2
[0204.865] GetNearestColor (hdc=0x14010788, color=0xf0f0f0) returned 0xf0f0f0
[0204.865] CreateSolidBrush (color=0xf0f0f0) returned 0x2110078d
[0204.865] FillRect (hDC=0x14010788, lprc=0x53dad0, hbr=0x2110078d) returned 1
[0204.865] DeleteObject (ho=0x2110078d) returned 1
[0204.865] RestoreDC (hdc=0x14010788, nSavedDC=-1) returned 1
[0204.865] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.865] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.866] GetSystemMetrics (nIndex=42) returned 0
[0204.866] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.866] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0204.866] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0204.866] GetCurrentObject (hdc=0x14010788, type=0x1) returned 0xb00017
[0204.866] GetCurrentObject (hdc=0x14010788, type=0x2) returned 0x900010
[0204.866] GetCurrentObject (hdc=0x14010788, type=0x7) returned 0x1e0507b9
[0204.866] GetCurrentObject (hdc=0x14010788, type=0x6) returned 0x8a01c2
[0204.866] SaveDC (hdc=0x14010788) returned 2
[0204.866] GetNearestColor (hdc=0x14010788, color=0xf0f0f0) returned 0xf0f0f0
[0204.866] CreateSolidBrush (color=0xf0f0f0) returned 0x2210078d
[0204.866] FillRect (hDC=0x14010788, lprc=0x53da70, hbr=0x2210078d) returned 1
[0204.866] DeleteObject (ho=0x2210078d) returned 1
[0204.866] RestoreDC (hdc=0x14010788, nSavedDC=-1) returned 1
[0204.866] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0204.866] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0204.866] GetSystemMetrics (nIndex=42) returned 0
[0204.866] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0204.867] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0204.867] RestoreDC (hdc=0x14010788, nSavedDC=-1) returned 1
[0204.867] GdipReleaseDC (graphics=0x5d92c30, hdc=0x14010788) returned 0x0
[0204.867] IsAppThemed () returned 0x1
[0204.867] GetThemeAppProperties () returned 0x3
[0204.867] GetThemeAppProperties () returned 0x3
[0204.867] IsAppThemed () returned 0x1
[0204.867] GetThemeAppProperties () returned 0x3
[0204.867] GetThemeAppProperties () returned 0x3
[0204.867] IsThemePartDefined () returned 0x1
[0204.867] GdipCreateRegion (region=0x53dff4) returned 0x0
[0204.867] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.868] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0204.868] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.868] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0204.868] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.868] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0204.868] LocalFree (hMem=0x89ea88) returned 0x0
[0204.868] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0204.868] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0204.868] LocalFree (hMem=0x89ec80) returned 0x0
[0204.868] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.868] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0204.868] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0204.868] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0204.868] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.868] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0204.868] GetCurrentObject (hdc=0x14010788, type=0x1) returned 0xb00017
[0204.868] GetCurrentObject (hdc=0x14010788, type=0x2) returned 0x900010
[0204.869] GetCurrentObject (hdc=0x14010788, type=0x7) returned 0x1e0507b9
[0204.869] GetCurrentObject (hdc=0x14010788, type=0x6) returned 0x8a01c2
[0204.869] SaveDC (hdc=0x14010788) returned 1
[0204.869] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaf04053e
[0204.869] GetClipRgn (hdc=0x14010788, hrgn=0xaf04053e) returned 0
[0204.869] SelectClipRgn (hdc=0x14010788, hrgn=0x430407a1) returned 2
[0204.869] DeleteObject (ho=0xaf04053e) returned 1
[0204.869] DeleteObject (ho=0x430407a1) returned 1
[0204.869] OffsetViewportOrgEx (in: hdc=0x14010788, x=0, y=0, lppt=0x23693b8 | out: lppt=0x23693b8) returned 1
[0204.869] IsAppThemed () returned 0x1
[0204.869] GetThemeAppProperties () returned 0x3
[0204.869] GetThemeAppProperties () returned 0x3
[0204.869] DrawThemeBackground () returned 0x0
[0204.869] RestoreDC (hdc=0x14010788, nSavedDC=-1) returned 1
[0204.869] GdipReleaseDC (graphics=0x5d92c30, hdc=0x14010788) returned 0x0
[0204.870] GdipCreateRegion (region=0x53dff8) returned 0x0
[0204.870] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.870] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0204.870] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.870] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0204.870] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.870] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.871] LocalFree (hMem=0x89ea88) returned 0x0
[0204.871] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0204.871] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0204.871] LocalFree (hMem=0x89ee40) returned 0x0
[0204.871] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.871] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0204.871] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0204.871] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0204.871] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.871] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0204.871] GetCurrentObject (hdc=0x14010788, type=0x1) returned 0xb00017
[0204.871] GetCurrentObject (hdc=0x14010788, type=0x2) returned 0x900010
[0204.871] GetCurrentObject (hdc=0x14010788, type=0x7) returned 0x1e0507b9
[0204.871] GetCurrentObject (hdc=0x14010788, type=0x6) returned 0x8a01c2
[0204.871] SaveDC (hdc=0x14010788) returned 1
[0204.871] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x440407a1
[0204.872] GetClipRgn (hdc=0x14010788, hrgn=0x440407a1) returned 0
[0204.872] SelectClipRgn (hdc=0x14010788, hrgn=0xb004053e) returned 2
[0204.872] DeleteObject (ho=0x440407a1) returned 1
[0204.872] DeleteObject (ho=0xb004053e) returned 1
[0204.872] OffsetViewportOrgEx (in: hdc=0x14010788, x=0, y=0, lppt=0x236968c | out: lppt=0x236968c) returned 1
[0204.872] IsAppThemed () returned 0x1
[0204.872] GetThemeAppProperties () returned 0x3
[0204.872] GetThemeAppProperties () returned 0x3
[0204.872] GetThemeBackgroundContentRect () returned 0x0
[0204.872] RestoreDC (hdc=0x14010788, nSavedDC=-1) returned 1
[0204.872] GdipReleaseDC (graphics=0x5d92c30, hdc=0x14010788) returned 0x0
[0204.872] IsAppThemed () returned 0x1
[0204.872] GetThemeAppProperties () returned 0x3
[0204.872] GetThemeAppProperties () returned 0x3
[0204.872] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0204.872] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0204.872] GetCurrentObject (hdc=0x14010788, type=0x1) returned 0xb00017
[0204.872] GetCurrentObject (hdc=0x14010788, type=0x2) returned 0x900010
[0204.873] GetCurrentObject (hdc=0x14010788, type=0x7) returned 0x1e0507b9
[0204.873] GetCurrentObject (hdc=0x14010788, type=0x6) returned 0x8a01c2
[0204.873] SaveDC (hdc=0x14010788) returned 1
[0204.873] GetTextAlign (hdc=0x14010788) returned 0x0
[0204.873] GetTextColor (hdc=0x14010788) returned 0x0
[0204.873] GetCurrentObject (hdc=0x14010788, type=0x6) returned 0x8a01c2
[0204.873] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0204.873] SelectObject (hdc=0x14010788, h=0x730a066d) returned 0x8a01c2
[0204.873] GetBkMode (hdc=0x14010788) returned 2
[0204.873] SetBkMode (hdc=0x14010788, mode=1) returned 2
[0204.873] DrawTextExW (in: hdc=0x14010788, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x2369a2c | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0204.874] DrawTextExW (in: hdc=0x14010788, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x2369a2c | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0204.874] RestoreDC (hdc=0x14010788, nSavedDC=-1) returned 1
[0204.874] GdipReleaseDC (graphics=0x5d92c30, hdc=0x14010788) returned 0x0
[0204.874] GetFocus () returned 0x12013e
[0204.874] IsAppThemed () returned 0x1
[0204.874] GetThemeAppProperties () returned 0x3
[0204.874] GetThemeAppProperties () returned 0x3
[0204.874] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0204.874] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x14010788, x1=0, y1=0, rop=0xcc0020) returned 1
[0204.874] GdipReleaseDC (graphics=0x5d92c30, hdc=0x14010788) returned 0x0
[0204.875] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0204.875] SelectObject (hdc=0x14010788, h=0x85000f) returned 0x1e0507b9
[0204.875] DeleteDC (hdc=0x14010788) returned 1
[0204.875] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0204.875] EndPaint (hWnd=0x302de, lpPaint=0x53e2e4) returned 1
[0204.876] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.876] IsWindowUnicode (hWnd=0x202c6) returned 1
[0204.876] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.876] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.876] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.876] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0204.876] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0204.876] CreateCompatibleDC (hdc=0x8b010786) returned 0x16010788
[0204.876] SelectObject (hdc=0x16010788, h=0x1e0507b9) returned 0x85000f
[0204.876] GdipCreateFromHDC (hdc=0x16010788, graphics=0x53e300) returned 0x0
[0204.877] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0204.877] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0204.877] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0204.877] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.877] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0204.877] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.877] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0204.877] LocalFree (hMem=0x89ea88) returned 0x0
[0204.877] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.877] GdipCreateRegion (region=0x53e348) returned 0x0
[0204.877] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.877] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0204.877] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0204.877] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfce50dbd) returned 0x0
[0204.877] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.878] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0204.878] GetCurrentObject (hdc=0x16010788, type=0x1) returned 0xb00017
[0204.878] GetCurrentObject (hdc=0x16010788, type=0x2) returned 0x900010
[0204.878] GetCurrentObject (hdc=0x16010788, type=0x7) returned 0x1e0507b9
[0204.878] GetCurrentObject (hdc=0x16010788, type=0x6) returned 0x8a01c2
[0204.878] SaveDC (hdc=0x16010788) returned 1
[0204.878] GetNearestColor (hdc=0x16010788, color=0xff) returned 0xff
[0204.878] GetNearestColor (hdc=0x16010788, color=0x55) returned 0x55
[0204.878] GetNearestColor (hdc=0x16010788, color=0x0) returned 0x0
[0204.878] GetNearestColor (hdc=0x16010788, color=0x55) returned 0x55
[0204.878] GetNearestColor (hdc=0x16010788, color=0x0) returned 0x0
[0204.878] GetNearestColor (hdc=0x16010788, color=0x8080ff) returned 0x8080ff
[0204.878] GetNearestColor (hdc=0x16010788, color=0x7373e5) returned 0x7373e5
[0204.878] GetNearestColor (hdc=0x16010788, color=0xe5) returned 0xe5
[0204.879] GetNearestColor (hdc=0x16010788, color=0x0) returned 0x0
[0204.879] RestoreDC (hdc=0x16010788, nSavedDC=-1) returned 1
[0204.879] GdipReleaseDC (graphics=0x5d92c30, hdc=0x16010788) returned 0x0
[0204.879] IsAppThemed () returned 0x1
[0204.879] GetThemeAppProperties () returned 0x3
[0204.879] GetThemeAppProperties () returned 0x3
[0204.879] IsAppThemed () returned 0x1
[0204.879] GetThemeAppProperties () returned 0x3
[0204.879] GetThemeAppProperties () returned 0x3
[0204.879] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0204.879] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x236a210 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0204.880] IsAppThemed () returned 0x1
[0204.880] GetThemeAppProperties () returned 0x3
[0204.880] GetThemeAppProperties () returned 0x3
[0204.880] IsAppThemed () returned 0x1
[0204.880] GetThemeAppProperties () returned 0x3
[0204.880] GetThemeAppProperties () returned 0x3
[0204.880] GetFocus () returned 0x12013e
[0204.880] IsAppThemed () returned 0x1
[0204.880] GetThemeAppProperties () returned 0x3
[0204.880] GetThemeAppProperties () returned 0x3
[0204.880] IsAppThemed () returned 0x1
[0204.880] GetThemeAppProperties () returned 0x3
[0204.880] GetThemeAppProperties () returned 0x3
[0204.880] IsThemePartDefined () returned 0x1
[0204.880] IsAppThemed () returned 0x1
[0204.880] GetThemeAppProperties () returned 0x3
[0204.880] GetThemeAppProperties () returned 0x3
[0204.880] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0204.880] IsAppThemed () returned 0x1
[0204.880] GetThemeAppProperties () returned 0x3
[0204.887] GetThemeAppProperties () returned 0x3
[0204.887] IsAppThemed () returned 0x1
[0204.887] GetThemeAppProperties () returned 0x3
[0204.887] GetThemeAppProperties () returned 0x3
[0204.887] IsThemePartDefined () returned 0x1
[0204.887] GdipCreateRegion (region=0x53e070) returned 0x0
[0204.887] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.887] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0204.887] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.887] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0204.887] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0204.888] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0204.888] LocalFree (hMem=0x89ec80) returned 0x0
[0204.888] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0204.888] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0204.888] LocalFree (hMem=0x89ec80) returned 0x0
[0204.888] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.888] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0204.888] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0204.888] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0204.888] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.888] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0204.888] GetCurrentObject (hdc=0x16010788, type=0x1) returned 0xb00017
[0204.888] GetCurrentObject (hdc=0x16010788, type=0x2) returned 0x900010
[0204.888] GetCurrentObject (hdc=0x16010788, type=0x7) returned 0x1e0507b9
[0204.888] GetCurrentObject (hdc=0x16010788, type=0x6) returned 0x8a01c2
[0204.888] SaveDC (hdc=0x16010788) returned 1
[0204.889] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb104053e
[0204.889] GetClipRgn (hdc=0x16010788, hrgn=0xb104053e) returned 0
[0204.889] SelectClipRgn (hdc=0x16010788, hrgn=0x480407a1) returned 2
[0204.889] DeleteObject (ho=0xb104053e) returned 1
[0204.889] DeleteObject (ho=0x480407a1) returned 1
[0204.889] OffsetViewportOrgEx (in: hdc=0x16010788, x=0, y=0, lppt=0x236a8c0 | out: lppt=0x236a8c0) returned 1
[0204.889] DrawThemeParentBackground () returned 0x0
[0204.889] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0204.889] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0204.889] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0204.889] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0204.889] GetSystemMetrics (nIndex=42) returned 0
[0204.889] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0204.889] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0204.890] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0204.890] GetCurrentObject (hdc=0x16010788, type=0x1) returned 0xb00017
[0204.890] GetCurrentObject (hdc=0x16010788, type=0x2) returned 0x900010
[0204.890] GetCurrentObject (hdc=0x16010788, type=0x7) returned 0x1e0507b9
[0204.890] GetCurrentObject (hdc=0x16010788, type=0x6) returned 0x8a01c2
[0204.890] SaveDC (hdc=0x16010788) returned 2
[0204.890] GetNearestColor (hdc=0x16010788, color=0xff) returned 0xff
[0204.890] CreateSolidBrush (color=0xff) returned 0x2310078d
[0204.890] FillRect (hDC=0x16010788, lprc=0x53dad0, hbr=0x2310078d) returned 1
[0204.890] DeleteObject (ho=0x2310078d) returned 1
[0204.890] RestoreDC (hdc=0x16010788, nSavedDC=-1) returned 1
[0204.890] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0204.890] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0204.890] GetSystemMetrics (nIndex=42) returned 0
[0204.890] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0204.890] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0204.890] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0204.891] GetCurrentObject (hdc=0x16010788, type=0x1) returned 0xb00017
[0204.891] GetCurrentObject (hdc=0x16010788, type=0x2) returned 0x900010
[0204.891] GetCurrentObject (hdc=0x16010788, type=0x7) returned 0x1e0507b9
[0204.891] GetCurrentObject (hdc=0x16010788, type=0x6) returned 0x8a01c2
[0204.891] SaveDC (hdc=0x16010788) returned 2
[0204.891] GetNearestColor (hdc=0x16010788, color=0xff) returned 0xff
[0204.891] CreateSolidBrush (color=0xff) returned 0x2410078d
[0204.891] FillRect (hDC=0x16010788, lprc=0x53da70, hbr=0x2410078d) returned 1
[0204.891] DeleteObject (ho=0x2410078d) returned 1
[0204.891] RestoreDC (hdc=0x16010788, nSavedDC=-1) returned 1
[0204.891] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0204.891] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0204.891] GetSystemMetrics (nIndex=42) returned 0
[0204.891] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0204.891] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0204.892] RestoreDC (hdc=0x16010788, nSavedDC=-1) returned 1
[0204.892] GdipReleaseDC (graphics=0x5d92c30, hdc=0x16010788) returned 0x0
[0204.892] IsAppThemed () returned 0x1
[0204.892] GetThemeAppProperties () returned 0x3
[0204.892] GetThemeAppProperties () returned 0x3
[0204.892] IsAppThemed () returned 0x1
[0204.892] GetThemeAppProperties () returned 0x3
[0204.892] GetThemeAppProperties () returned 0x3
[0204.892] IsThemePartDefined () returned 0x1
[0204.892] GdipCreateRegion (region=0x53dff4) returned 0x0
[0204.892] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.892] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0204.892] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0204.892] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0204.892] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.892] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0204.892] LocalFree (hMem=0x89ea88) returned 0x0
[0204.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0204.893] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0204.893] LocalFree (hMem=0x89ea88) returned 0x0
[0204.893] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0204.893] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0204.893] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0204.893] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0204.893] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.893] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0204.893] GetCurrentObject (hdc=0x16010788, type=0x1) returned 0xb00017
[0204.893] GetCurrentObject (hdc=0x16010788, type=0x2) returned 0x900010
[0204.893] GetCurrentObject (hdc=0x16010788, type=0x7) returned 0x1e0507b9
[0204.893] GetCurrentObject (hdc=0x16010788, type=0x6) returned 0x8a01c2
[0204.893] SaveDC (hdc=0x16010788) returned 1
[0204.893] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x490407a1
[0204.893] GetClipRgn (hdc=0x16010788, hrgn=0x490407a1) returned 0
[0204.893] SelectClipRgn (hdc=0x16010788, hrgn=0xb304053e) returned 2
[0204.894] DeleteObject (ho=0x490407a1) returned 1
[0204.894] DeleteObject (ho=0xb304053e) returned 1
[0204.894] OffsetViewportOrgEx (in: hdc=0x16010788, x=0, y=0, lppt=0x236b124 | out: lppt=0x236b124) returned 1
[0204.894] IsAppThemed () returned 0x1
[0204.894] GetThemeAppProperties () returned 0x3
[0204.894] GetThemeAppProperties () returned 0x3
[0204.894] DrawThemeBackground () returned 0x0
[0204.894] RestoreDC (hdc=0x16010788, nSavedDC=-1) returned 1
[0204.894] GdipReleaseDC (graphics=0x5d92c30, hdc=0x16010788) returned 0x0
[0204.894] GdipCreateRegion (region=0x53dff8) returned 0x0
[0204.894] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0204.894] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0204.894] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0204.894] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0204.894] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0204.894] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0204.895] LocalFree (hMem=0x89ec80) returned 0x0
[0204.895] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0204.895] LocalFree (hMem=0x89ea88) returned 0x0
[0204.895] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0204.895] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0204.895] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0204.895] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0204.895] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0204.895] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0204.895] GetCurrentObject (hdc=0x16010788, type=0x1) returned 0xb00017
[0204.895] GetCurrentObject (hdc=0x16010788, type=0x2) returned 0x900010
[0204.895] GetCurrentObject (hdc=0x16010788, type=0x7) returned 0x1e0507b9
[0204.895] GetCurrentObject (hdc=0x16010788, type=0x6) returned 0x8a01c2
[0204.895] SaveDC (hdc=0x16010788) returned 1
[0204.895] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb404053e
[0204.895] GetClipRgn (hdc=0x16010788, hrgn=0xb404053e) returned 0
[0204.896] SelectClipRgn (hdc=0x16010788, hrgn=0x4a0407a1) returned 2
[0204.896] DeleteObject (ho=0xb404053e) returned 1
[0204.896] DeleteObject (ho=0x4a0407a1) returned 1
[0204.896] OffsetViewportOrgEx (in: hdc=0x16010788, x=0, y=0, lppt=0x236b3f8 | out: lppt=0x236b3f8) returned 1
[0204.896] IsAppThemed () returned 0x1
[0204.896] GetThemeAppProperties () returned 0x3
[0204.896] GetThemeAppProperties () returned 0x3
[0204.896] GetThemeBackgroundContentRect () returned 0x0
[0204.896] RestoreDC (hdc=0x16010788, nSavedDC=-1) returned 1
[0204.896] GdipReleaseDC (graphics=0x5d92c30, hdc=0x16010788) returned 0x0
[0204.896] IsAppThemed () returned 0x1
[0204.896] GetThemeAppProperties () returned 0x3
[0204.896] GetThemeAppProperties () returned 0x3
[0204.896] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0204.896] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0204.896] GetCurrentObject (hdc=0x16010788, type=0x1) returned 0xb00017
[0204.896] GetCurrentObject (hdc=0x16010788, type=0x2) returned 0x900010
[0204.896] GetCurrentObject (hdc=0x16010788, type=0x7) returned 0x1e0507b9
[0204.896] GetCurrentObject (hdc=0x16010788, type=0x6) returned 0x8a01c2
[0204.897] SaveDC (hdc=0x16010788) returned 1
[0204.897] GetTextAlign (hdc=0x16010788) returned 0x0
[0204.897] GetTextColor (hdc=0x16010788) returned 0x0
[0204.897] GetCurrentObject (hdc=0x16010788, type=0x6) returned 0x8a01c2
[0204.897] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0204.897] SelectObject (hdc=0x16010788, h=0x450a0799) returned 0x8a01c2
[0204.897] GetBkMode (hdc=0x16010788) returned 2
[0204.897] SetBkMode (hdc=0x16010788, mode=1) returned 2
[0204.897] DrawTextExW (in: hdc=0x16010788, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x236b798 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0204.897] DrawTextExW (in: hdc=0x16010788, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x236b798 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0204.898] RestoreDC (hdc=0x16010788, nSavedDC=-1) returned 1
[0204.898] GdipReleaseDC (graphics=0x5d92c30, hdc=0x16010788) returned 0x0
[0204.898] GetFocus () returned 0x12013e
[0204.898] IsAppThemed () returned 0x1
[0204.898] GetThemeAppProperties () returned 0x3
[0204.898] GetThemeAppProperties () returned 0x3
[0204.898] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0204.898] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x16010788, x1=0, y1=0, rop=0xcc0020) returned 1
[0204.898] GdipReleaseDC (graphics=0x5d92c30, hdc=0x16010788) returned 0x0
[0204.898] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0204.898] SelectObject (hdc=0x16010788, h=0x85000f) returned 0x1e0507b9
[0204.898] DeleteDC (hdc=0x16010788) returned 1
[0204.898] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0204.899] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0204.899] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.899] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.899] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.899] DispatchMessageA (lpMsg=0x53e8a0) returned 0x7ef9
[0204.899] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.899] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.899] WaitMessage () returned 1
[0204.902] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.902] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0204.902] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.902] WaitMessage () returned 1
[0204.903] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.904] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0204.904] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.904] WaitMessage () returned 1
[0204.904] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.904] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0204.904] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.904] WaitMessage () returned 1
[0204.916] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.916] IsWindowUnicode (hWnd=0xa02b4) returned 1
[0204.916] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.916] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.916] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.917] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.917] IsWindowUnicode (hWnd=0xa02b4) returned 1
[0204.917] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.917] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.917] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.917] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x2a1, wParam=0x0, lParam=0xb002b) returned 0x0
[0204.917] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.917] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.917] WaitMessage () returned 1
[0204.936] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.936] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.936] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.936] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.936] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.937] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.937] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.937] WaitMessage () returned 1
[0204.957] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.957] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.957] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.957] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.957] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.958] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.958] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.958] WaitMessage () returned 1
[0204.959] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.959] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.959] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.959] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.959] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.960] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.961] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.961] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.961] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.961] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.961] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.961] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.961] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.961] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.961] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.961] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.962] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.962] WaitMessage () returned 1
[0204.964] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.964] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.964] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.964] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.965] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.966] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.966] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.966] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.966] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.966] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.966] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.967] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.967] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.967] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.967] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.967] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.967] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.967] WaitMessage () returned 1
[0204.968] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.968] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.968] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.968] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.968] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.970] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.970] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.970] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.970] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.970] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.970] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.971] IsWindowUnicode (hWnd=0x102dc) returned 1
[0204.971] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0204.971] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0204.971] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0204.971] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.971] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0204.971] WaitMessage () returned 1
[0205.018] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0205.019] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x84, wParam=0x0, lParam=0x194036c) returned 0x1
[0205.019] IsWindowUnicode (hWnd=0xa02b4) returned 1
[0205.019] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0205.019] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x84, wParam=0x0, lParam=0x194036c) returned 0x1
[0205.019] GetDlgItem (hDlg=0xe02d2, nIDDlgItem=0) returned 0x0
[0205.019] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x210, wParam=0x201, lParam=0x17014d) returned 0x0
[0205.019] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x21, wParam=0xe02d2, lParam=0x2010001) returned 0x1
[0205.019] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x21, wParam=0xe02d2, lParam=0x2010001) returned 0x1
[0205.019] SetCursor (hCursor=0x10003) returned 0x10003
[0205.020] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0205.020] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0205.020] GetKeyState (nVirtKey=1) returned -127
[0205.020] GetKeyState (nVirtKey=2) returned 0
[0205.020] GetKeyState (nVirtKey=4) returned 0
[0205.020] GetKeyState (nVirtKey=5) returned 0
[0205.020] GetKeyState (nVirtKey=6) returned 0
[0205.020] IsWindowVisible (hWnd=0xa02b4) returned 1
[0205.020] IsWindowEnabled (hWnd=0xa02b4) returned 1
[0205.020] SetFocus (hWnd=0xa02b4) returned 0x12013e
[0205.021] GetFocus () returned 0xa02b4
[0205.021] IsChild (hWndParent=0xe02d2, hWnd=0xa02b4) returned 1
[0205.021] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x8, wParam=0xa02b4, lParam=0x0) returned 0x1
[0205.025] SendMessageW (hWnd=0x12013e, Msg=0x2111, wParam=0x200013e, lParam=0x12013e) returned 0x0
[0205.026] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0205.028] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0205.029] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0205.029] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0205.029] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0205.029] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0205.031] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0205.031] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x7, wParam=0x12013e, lParam=0x0) returned 0x0
[0205.031] GetStockObject (i=5) returned 0x900015
[0205.032] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0205.032] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0xd, wParam=0x3, lParam=0x89e7c8) returned 0x2
[0205.032] GetDlgItem (hDlg=0xe02d2, nIDDlgItem=656052) returned 0xa02b4
[0205.032] SendMessageW (hWnd=0xa02b4, Msg=0x202b, wParam=0xa02b4, lParam=0x53de74) returned 0x0
[0205.032] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x202b, wParam=0xa02b4, lParam=0x53de74) returned 0x0
[0205.032] InvalidateRect (hWnd=0xa02b4, lpRect=0x0, bErase=0) returned 1
[0205.033] GetFocus () returned 0xa02b4
[0205.034] GetFocus () returned 0xa02b4
[0205.034] GetFocus () returned 0xa02b4
[0205.034] GetKeyState (nVirtKey=1) returned -127
[0205.034] GetKeyState (nVirtKey=2) returned 0
[0205.034] GetKeyState (nVirtKey=4) returned 0
[0205.034] GetKeyState (nVirtKey=5) returned 0
[0205.034] GetKeyState (nVirtKey=6) returned 0
[0205.034] GetCapture () returned 0x0
[0205.034] SetCapture (hWnd=0xa02b4) returned 0x0
[0205.034] GetKeyState (nVirtKey=1) returned -127
[0205.034] GetKeyState (nVirtKey=2) returned 0
[0205.034] GetKeyState (nVirtKey=4) returned 0
[0205.034] GetKeyState (nVirtKey=5) returned 0
[0205.034] GetKeyState (nVirtKey=6) returned 0
[0205.034] NotifyWinEvent (event=0x800a, hwnd=0xa02b4, idObject=-4, idChild=0)
[0205.034] InvalidateRect (hWnd=0xa02b4, lpRect=0x53e4c8, bErase=0) returned 1
[0205.034] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0205.034] IsWindowUnicode (hWnd=0xa02b4) returned 1
[0205.034] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0205.035] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0205.035] DispatchMessageW (lpMsg=0x53e8a0)
[0205.035] MapWindowPoints (in: hWndFrom=0xa02b4, hWndTo=0x0, lpPoints=0x236ba9c, cPoints=0x1 | out: lpPoints=0x236ba9c) returned 25756481
[0205.035] NotifyWinEvent (event=0x800a, hwnd=0xa02b4, idObject=-4, idChild=0)
[0205.035] InvalidateRect (hWnd=0xa02b4, lpRect=0x53e468, bErase=0) returned 1
[0205.035] UpdateWindow (hWnd=0xa02b4) returned 1
[0205.035] BeginPaint (in: hWnd=0xa02b4, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x8b010786
[0205.035] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0205.035] CreateCompatibleDC (hdc=0x8b010786) returned 0x940107aa
[0205.035] SelectObject (hdc=0x940107aa, h=0x1e0507b9) returned 0x85000f
[0205.035] GdipCreateFromHDC (hdc=0x940107aa, graphics=0x53df98) returned 0x0
[0205.036] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0205.036] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0205.036] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0205.036] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0205.036] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0205.036] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0205.036] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0205.036] LocalFree (hMem=0x89ea88) returned 0x0
[0205.036] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0205.036] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0205.036] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0205.036] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0205.036] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0205.036] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfce30dbd) returned 0x0
[0205.036] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0205.037] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0205.037] GetCurrentObject (hdc=0x940107aa, type=0x1) returned 0xb00017
[0205.044] GetCurrentObject (hdc=0x940107aa, type=0x2) returned 0x900010
[0205.044] GetCurrentObject (hdc=0x940107aa, type=0x7) returned 0x1e0507b9
[0205.044] GetCurrentObject (hdc=0x940107aa, type=0x6) returned 0x8a01c2
[0205.045] SaveDC (hdc=0x940107aa) returned 1
[0205.045] GetNearestColor (hdc=0x940107aa, color=0xf0f0f0) returned 0xf0f0f0
[0205.045] GetNearestColor (hdc=0x940107aa, color=0xa0a0a0) returned 0xa0a0a0
[0205.045] GetNearestColor (hdc=0x940107aa, color=0x696969) returned 0x696969
[0205.045] GetNearestColor (hdc=0x940107aa, color=0xa0a0a0) returned 0xa0a0a0
[0205.045] GetNearestColor (hdc=0x940107aa, color=0x0) returned 0x0
[0205.045] GetNearestColor (hdc=0x940107aa, color=0xffffff) returned 0xffffff
[0205.045] GetNearestColor (hdc=0x940107aa, color=0xe5e5e5) returned 0xe5e5e5
[0205.045] GetNearestColor (hdc=0x940107aa, color=0xd7d7d7) returned 0xd7d7d7
[0205.045] GetNearestColor (hdc=0x940107aa, color=0x0) returned 0x0
[0205.045] RestoreDC (hdc=0x940107aa, nSavedDC=-1) returned 1
[0205.045] GdipReleaseDC (graphics=0x5d92c30, hdc=0x940107aa) returned 0x0
[0205.045] IsAppThemed () returned 0x1
[0205.046] GetThemeAppProperties () returned 0x3
[0205.046] GetThemeAppProperties () returned 0x3
[0205.046] IsAppThemed () returned 0x1
[0205.046] GetThemeAppProperties () returned 0x3
[0205.046] GetThemeAppProperties () returned 0x3
[0205.046] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0205.046] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x236c210 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0205.046] IsAppThemed () returned 0x1
[0205.046] GetThemeAppProperties () returned 0x3
[0205.046] GetThemeAppProperties () returned 0x3
[0205.046] IsAppThemed () returned 0x1
[0205.046] GetThemeAppProperties () returned 0x3
[0205.046] GetThemeAppProperties () returned 0x3
[0205.047] IsAppThemed () returned 0x1
[0205.047] GetThemeAppProperties () returned 0x3
[0205.047] GetThemeAppProperties () returned 0x3
[0205.047] IsAppThemed () returned 0x1
[0205.047] GetThemeAppProperties () returned 0x3
[0205.047] GetThemeAppProperties () returned 0x3
[0205.047] IsThemePartDefined () returned 0x1
[0205.047] IsAppThemed () returned 0x1
[0205.047] GetThemeAppProperties () returned 0x3
[0205.047] GetThemeAppProperties () returned 0x3
[0205.047] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0205.047] IsAppThemed () returned 0x1
[0205.047] GetThemeAppProperties () returned 0x3
[0205.047] GetThemeAppProperties () returned 0x3
[0205.047] IsAppThemed () returned 0x1
[0205.047] GetThemeAppProperties () returned 0x3
[0205.047] GetThemeAppProperties () returned 0x3
[0205.047] IsThemePartDefined () returned 0x1
[0205.047] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0205.047] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0205.047] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0205.048] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0205.048] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0205.048] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0205.048] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0205.048] LocalFree (hMem=0x89ea88) returned 0x0
[0205.048] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0205.048] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0205.048] LocalFree (hMem=0x89ee08) returned 0x0
[0205.048] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0205.048] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0205.048] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0205.048] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0205.048] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0205.048] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0205.048] GetCurrentObject (hdc=0x940107aa, type=0x1) returned 0xb00017
[0205.048] GetCurrentObject (hdc=0x940107aa, type=0x2) returned 0x900010
[0205.048] GetCurrentObject (hdc=0x940107aa, type=0x7) returned 0x1e0507b9
[0205.049] GetCurrentObject (hdc=0x940107aa, type=0x6) returned 0x8a01c2
[0205.049] SaveDC (hdc=0x940107aa) returned 1
[0205.049] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4b0407a1
[0205.049] GetClipRgn (hdc=0x940107aa, hrgn=0x4b0407a1) returned 0
[0205.049] SelectClipRgn (hdc=0x940107aa, hrgn=0xb804053e) returned 2
[0205.049] DeleteObject (ho=0x4b0407a1) returned 1
[0205.049] DeleteObject (ho=0xb804053e) returned 1
[0205.049] OffsetViewportOrgEx (in: hdc=0x940107aa, x=0, y=0, lppt=0x236c8c0 | out: lppt=0x236c8c0) returned 1
[0205.049] DrawThemeParentBackground () returned 0x0
[0205.049] GetWindowPlacement (in: hWnd=0xe02d2, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0205.049] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0205.049] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0205.049] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0205.050] GetSystemMetrics (nIndex=42) returned 0
[0205.050] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0205.050] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0205.050] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0205.050] GetCurrentObject (hdc=0x940107aa, type=0x1) returned 0xb00017
[0205.050] GetCurrentObject (hdc=0x940107aa, type=0x2) returned 0x900010
[0205.050] GetCurrentObject (hdc=0x940107aa, type=0x7) returned 0x1e0507b9
[0205.050] GetCurrentObject (hdc=0x940107aa, type=0x6) returned 0x8a01c2
[0205.050] SaveDC (hdc=0x940107aa) returned 2
[0205.050] GetNearestColor (hdc=0x940107aa, color=0xf0f0f0) returned 0xf0f0f0
[0205.050] CreateSolidBrush (color=0xf0f0f0) returned 0x2510078d
[0205.050] FillRect (hDC=0x940107aa, lprc=0x53d760, hbr=0x2510078d) returned 1
[0205.050] DeleteObject (ho=0x2510078d) returned 1
[0205.050] RestoreDC (hdc=0x940107aa, nSavedDC=-1) returned 1
[0205.051] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0205.051] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0205.051] GetSystemMetrics (nIndex=42) returned 0
[0205.051] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0205.051] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0205.051] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0205.051] GetCurrentObject (hdc=0x940107aa, type=0x1) returned 0xb00017
[0205.051] GetCurrentObject (hdc=0x940107aa, type=0x2) returned 0x900010
[0205.051] GetCurrentObject (hdc=0x940107aa, type=0x7) returned 0x1e0507b9
[0205.051] GetCurrentObject (hdc=0x940107aa, type=0x6) returned 0x8a01c2
[0205.051] SaveDC (hdc=0x940107aa) returned 2
[0205.051] GetNearestColor (hdc=0x940107aa, color=0xf0f0f0) returned 0xf0f0f0
[0205.051] CreateSolidBrush (color=0xf0f0f0) returned 0x2610078d
[0205.051] FillRect (hDC=0x940107aa, lprc=0x53d700, hbr=0x2610078d) returned 1
[0205.051] DeleteObject (ho=0x2610078d) returned 1
[0205.051] RestoreDC (hdc=0x940107aa, nSavedDC=-1) returned 1
[0205.052] GetWindowTextLengthW (hWnd=0xe02d2) returned 10
[0205.052] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0205.052] GetSystemMetrics (nIndex=42) returned 0
[0205.052] GetWindowTextW (in: hWnd=0xe02d2, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0205.052] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0205.052] RestoreDC (hdc=0x940107aa, nSavedDC=-1) returned 1
[0205.052] GdipReleaseDC (graphics=0x5d92c30, hdc=0x940107aa) returned 0x0
[0205.052] IsAppThemed () returned 0x1
[0205.052] GetThemeAppProperties () returned 0x3
[0205.052] GetThemeAppProperties () returned 0x3
[0205.052] IsAppThemed () returned 0x1
[0205.053] GetThemeAppProperties () returned 0x3
[0205.053] GetThemeAppProperties () returned 0x3
[0205.053] IsThemePartDefined () returned 0x1
[0205.053] GdipCreateRegion (region=0x53dc80) returned 0x0
[0205.053] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0205.053] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0205.053] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0205.053] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0205.053] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0205.053] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0205.053] LocalFree (hMem=0x89ea88) returned 0x0
[0205.053] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0205.053] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0205.053] LocalFree (hMem=0x89ec80) returned 0x0
[0205.053] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0205.053] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0205.054] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0205.054] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0205.054] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0205.054] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0205.054] GetCurrentObject (hdc=0x940107aa, type=0x1) returned 0xb00017
[0205.054] GetCurrentObject (hdc=0x940107aa, type=0x2) returned 0x900010
[0205.054] GetCurrentObject (hdc=0x940107aa, type=0x7) returned 0x1e0507b9
[0205.054] GetCurrentObject (hdc=0x940107aa, type=0x6) returned 0x8a01c2
[0205.054] SaveDC (hdc=0x940107aa) returned 1
[0205.054] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb904053e
[0205.054] GetClipRgn (hdc=0x940107aa, hrgn=0xb904053e) returned 0
[0205.054] SelectClipRgn (hdc=0x940107aa, hrgn=0x4d0407a1) returned 2
[0205.054] DeleteObject (ho=0xb904053e) returned 1
[0205.054] DeleteObject (ho=0x4d0407a1) returned 1
[0205.054] OffsetViewportOrgEx (in: hdc=0x940107aa, x=0, y=0, lppt=0x236d184 | out: lppt=0x236d184) returned 1
[0205.054] IsAppThemed () returned 0x1
[0205.055] GetThemeAppProperties () returned 0x3
[0205.055] GetThemeAppProperties () returned 0x3
[0205.055] DrawThemeBackground () returned 0x0
[0205.055] RestoreDC (hdc=0x940107aa, nSavedDC=-1) returned 1
[0205.055] GdipReleaseDC (graphics=0x5d92c30, hdc=0x940107aa) returned 0x0
[0205.055] GdipCreateRegion (region=0x53dc84) returned 0x0
[0205.055] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0205.055] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0205.055] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0205.055] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0205.055] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0205.055] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0205.055] LocalFree (hMem=0x89ea88) returned 0x0
[0205.055] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0205.055] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0205.055] LocalFree (hMem=0x89ea88) returned 0x0
[0205.055] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0205.055] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0205.056] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0205.056] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0205.056] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0205.056] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0205.056] GetCurrentObject (hdc=0x940107aa, type=0x1) returned 0xb00017
[0205.056] GetCurrentObject (hdc=0x940107aa, type=0x2) returned 0x900010
[0205.056] GetCurrentObject (hdc=0x940107aa, type=0x7) returned 0x1e0507b9
[0205.056] GetCurrentObject (hdc=0x940107aa, type=0x6) returned 0x8a01c2
[0205.056] SaveDC (hdc=0x940107aa) returned 1
[0205.056] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4e0407a1
[0205.056] GetClipRgn (hdc=0x940107aa, hrgn=0x4e0407a1) returned 0
[0205.056] SelectClipRgn (hdc=0x940107aa, hrgn=0xba04053e) returned 2
[0205.056] DeleteObject (ho=0x4e0407a1) returned 1
[0205.056] DeleteObject (ho=0xba04053e) returned 1
[0205.056] OffsetViewportOrgEx (in: hdc=0x940107aa, x=0, y=0, lppt=0x236d458 | out: lppt=0x236d458) returned 1
[0205.056] IsAppThemed () returned 0x1
[0205.057] GetThemeAppProperties () returned 0x3
[0205.057] GetThemeAppProperties () returned 0x3
[0205.057] GetThemeBackgroundContentRect () returned 0x0
[0205.057] RestoreDC (hdc=0x940107aa, nSavedDC=-1) returned 1
[0205.057] GdipReleaseDC (graphics=0x5d92c30, hdc=0x940107aa) returned 0x0
[0205.057] IsAppThemed () returned 0x1
[0205.057] GetThemeAppProperties () returned 0x3
[0205.057] GetThemeAppProperties () returned 0x3
[0205.057] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0205.057] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0205.057] GetCurrentObject (hdc=0x940107aa, type=0x1) returned 0xb00017
[0205.057] GetCurrentObject (hdc=0x940107aa, type=0x2) returned 0x900010
[0205.057] GetCurrentObject (hdc=0x940107aa, type=0x7) returned 0x1e0507b9
[0205.057] GetCurrentObject (hdc=0x940107aa, type=0x6) returned 0x8a01c2
[0205.057] SaveDC (hdc=0x940107aa) returned 1
[0205.057] GetTextAlign (hdc=0x940107aa) returned 0x0
[0205.057] GetTextColor (hdc=0x940107aa) returned 0x0
[0205.057] GetCurrentObject (hdc=0x940107aa, type=0x6) returned 0x8a01c2
[0205.058] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0205.058] SelectObject (hdc=0x940107aa, h=0x730a066d) returned 0x8a01c2
[0205.058] GetBkMode (hdc=0x940107aa) returned 2
[0205.058] SetBkMode (hdc=0x940107aa, mode=1) returned 2
[0205.058] DrawTextExW (in: hdc=0x940107aa, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x236d7f8 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0205.058] DrawTextExW (in: hdc=0x940107aa, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x236d7f8 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0205.059] RestoreDC (hdc=0x940107aa, nSavedDC=-1) returned 1
[0205.059] GdipReleaseDC (graphics=0x5d92c30, hdc=0x940107aa) returned 0x0
[0205.059] GetFocus () returned 0xa02b4
[0205.059] IsAppThemed () returned 0x1
[0205.059] GetThemeAppProperties () returned 0x3
[0205.059] GetThemeAppProperties () returned 0x3
[0205.059] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0205.059] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x940107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0205.059] GdipReleaseDC (graphics=0x5d92c30, hdc=0x940107aa) returned 0x0
[0205.059] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0205.059] SelectObject (hdc=0x940107aa, h=0x85000f) returned 0x1e0507b9
[0205.059] DeleteDC (hdc=0x940107aa) returned 1
[0205.059] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0205.059] EndPaint (hWnd=0xa02b4, lpPaint=0x53df7c) returned 1
[0205.060] MapWindowPoints (in: hWndFrom=0xa02b4, hWndTo=0x0, lpPoints=0x236d8f4, cPoints=0x1 | out: lpPoints=0x236d8f4) returned 25756481
[0205.060] WindowFromPoint (Point=0x36c)
[0205.060] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x84, wParam=0x0, lParam=0x194036c) returned 0x1
[0205.061] NotifyWinEvent (event=0x800a, hwnd=0xa02b4, idObject=-4, idChild=0)
[0205.061] NotifyWinEvent (event=0x800c, hwnd=0xa02b4, idObject=-4, idChild=0)
[0205.061] GetWindowTextLengthW (hWnd=0x12013e)
[0205.061] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0205.061] GetSystemMetrics (nIndex=42) returned 0
[0205.061] GetWindowTextW (hWnd=0x12013e, lpString=0x53e3e4, nMaxCount=1)
[0205.061] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0205.061] SendMessageW (hWnd=0xe02d2, Msg=0x10, wParam=0x0, lParam=0x0)
[0205.061] GetCapture () returned 0xa02b4
[0205.061] ReleaseCapture ()
[0205.061] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0205.062] PeekMessageW (lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0)
[0205.062] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x84, wParam=0x0, lParam=0x194036c) returned 0x1
[0205.062] IsWindow (hWnd=0x70036) returned 1
[0205.062] EnableWindow (hWnd=0x70036, bEnable=1)
[0205.075] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0205.075] IsWindow (hWnd=0x70036) returned 1
[0205.075] SetActiveWindow (hWnd=0x70036)
[0205.076] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x86, wParam=0x0, lParam=0x70036)
[0205.078] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0205.078] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0205.078] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0205.081] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0205.081] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0205.081] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0205.082] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0xe02d2) returned 0x1
[0205.087] GetFocus () returned 0xa02b4
[0205.088] SetFocus (hWnd=0x202c6)
[0205.088] GetFocus () returned 0x202c6
[0205.088] IsChild (hWndParent=0xe02d2, hWnd=0x202c6) returned 0
[0205.088] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0205.088] GetCapture () returned 0x0
[0205.088] InvalidateRect (hWnd=0xa02b4, lpRect=0x0, bErase=0) returned 1
[0205.089] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0205.091] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f)
[0205.092] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0205.093] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0205.094] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0205.094] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0xa02b4, lParam=0x0)
[0205.094] GetStockObject (i=5) returned 0x900015
[0205.094] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0205.094] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0205.094] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0205.115] IsWindowVisible (hWnd=0x70036) returned 1
[0205.115] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0205.115] GetFocus () returned 0x202c6
[0205.136] IsChild (hWndParent=0xe02d2, hWnd=0x202c6) returned 0
[0205.136] ShowWindow (hWnd=0xe02d2, nCmdShow=0)
[0205.137] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0205.137] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0205.140] GetWindowPlacement (in: hWnd=0xe02d2, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0205.140] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0205.140] GetClientRect (in: hWnd=0xe02d2, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0205.140] GetWindowRect (in: hWnd=0xe02d2, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0205.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0205.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0205.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0205.142] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0205.143] GetWindowTextLengthW (hWnd=0xe02d2)
[0205.143] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0205.143] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0205.144] SendMessageW (hWnd=0x12013e, Msg=0xb8, wParam=0x0, lParam=0x0)
[0205.144] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0205.144] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0205.144] GetWindowThreadProcessId (in: hWnd=0xe02c8, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0205.144] GetWindow (hWnd=0xe02c8, uCmd=0x5) returned 0x0
[0205.144] GetWindowLongW (hWnd=0xe02c8, nIndex=-20) returned 65792
[0205.144] DestroyWindow (hWnd=0xe02c8)
[0205.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02c8, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0205.144] GetWindowTextLengthW (hWnd=0xe02c8)
[0205.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0205.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0205.145] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0205.146] GetWindowTextLengthW (hWnd=0xf02d6)
[0205.146] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0205.146] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0205.153] InvalidateRect (hWnd=0xa02b4, lpRect=0x0, bErase=0) returned 1
[0205.153] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0205.153] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0205.154] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x12013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0205.155] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf02d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0205.156] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02b4, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0205.157] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302de, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0205.158] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe02d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0205.160] GetProcessWindowStation () returned 0x13c
[0205.160] GetActiveWindow () returned 0x70036
[0205.161] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0205.161] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0205.161] GetCurrentThreadId () returned 0x11d0
[0205.161] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4b3e, lParam=0x0) returned 1
[0205.161] IsWindowVisible (hWnd=0x70036) returned 1
[0205.161] IsWindowEnabled (hWnd=0x70036) returned 1
[0205.161] IsWindowVisible (hWnd=0x602b6) returned 0
[0205.161] IsWindowVisible (hWnd=0x901f8) returned 0
[0205.161] IsWindowVisible (hWnd=0x202d0) returned 0
[0205.162] IsWindowVisible (hWnd=0x202d4) returned 0
[0205.162] GetActiveWindow () returned 0x70036
[0205.162] GetFocus () returned 0x202c6
[0205.162] IsWindow (hWnd=0x70036) returned 1
[0205.162] EnableWindow (hWnd=0x70036, bEnable=0)
[0205.162] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0205.163] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0205.163] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0205.165] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0205.176] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0xf02d2) returned 0x1
[0205.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0205.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0205.189] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x402de, lParam=0x0) returned 0x0
[0205.189] GetCapture () returned 0x0
[0205.189] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0205.190] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0205.192] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0205.192] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0205.197] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0xf0105ee
[0205.197] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0205.197] CreateCompatibleDC (hdc=0xf0105ee) returned 0xa9010792
[0205.197] SelectObject (hdc=0xa9010792, h=0x1e0507b9) returned 0x85000f
[0205.197] GdipCreateFromHDC (hdc=0xa9010792, graphics=0x53e108) returned 0x0
[0205.198] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0205.198] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0205.198] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0205.198] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0205.198] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0205.198] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0205.198] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0205.198] LocalFree (hMem=0x89eac0) returned 0x0
[0205.198] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0205.198] GdipCreateRegion (region=0x53e150) returned 0x0
[0205.198] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0205.198] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0205.198] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0205.198] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfce10dbd) returned 0x0
[0205.198] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0205.198] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0205.199] GetCurrentObject (hdc=0xa9010792, type=0x1) returned 0xb00017
[0205.199] GetCurrentObject (hdc=0xa9010792, type=0x2) returned 0x900010
[0205.199] GetCurrentObject (hdc=0xa9010792, type=0x7) returned 0x1e0507b9
[0205.199] GetCurrentObject (hdc=0xa9010792, type=0x6) returned 0x8a01c2
[0205.199] SaveDC (hdc=0xa9010792) returned 1
[0205.199] GetNearestColor (hdc=0xa9010792, color=0xff) returned 0xff
[0205.199] GetNearestColor (hdc=0xa9010792, color=0x55) returned 0x55
[0205.199] GetNearestColor (hdc=0xa9010792, color=0x0) returned 0x0
[0205.199] GetNearestColor (hdc=0xa9010792, color=0x55) returned 0x55
[0205.199] GetNearestColor (hdc=0xa9010792, color=0x0) returned 0x0
[0205.199] GetNearestColor (hdc=0xa9010792, color=0x8080ff) returned 0x8080ff
[0205.199] GetNearestColor (hdc=0xa9010792, color=0x7373e5) returned 0x7373e5
[0205.199] GetNearestColor (hdc=0xa9010792, color=0xe5) returned 0xe5
[0205.199] GetNearestColor (hdc=0xa9010792, color=0x0) returned 0x0
[0205.200] RestoreDC (hdc=0xa9010792, nSavedDC=-1) returned 1
[0205.200] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa9010792) returned 0x0
[0205.200] IsAppThemed () returned 0x1
[0205.200] GetThemeAppProperties () returned 0x3
[0205.200] GetThemeAppProperties () returned 0x3
[0205.200] IsAppThemed () returned 0x1
[0205.200] GetThemeAppProperties () returned 0x3
[0205.200] GetThemeAppProperties () returned 0x3
[0205.200] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0205.200] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x236ebec | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0205.201] IsAppThemed () returned 0x1
[0205.201] GetThemeAppProperties () returned 0x3
[0205.201] GetThemeAppProperties () returned 0x3
[0205.201] IsAppThemed () returned 0x1
[0205.201] GetThemeAppProperties () returned 0x3
[0205.201] GetThemeAppProperties () returned 0x3
[0205.201] GetFocus () returned 0x402de
[0205.201] IsAppThemed () returned 0x1
[0205.201] GetThemeAppProperties () returned 0x3
[0205.201] GetThemeAppProperties () returned 0x3
[0205.201] IsAppThemed () returned 0x1
[0205.201] GetThemeAppProperties () returned 0x3
[0205.201] GetThemeAppProperties () returned 0x3
[0205.201] IsThemePartDefined () returned 0x1
[0205.201] IsAppThemed () returned 0x1
[0205.201] GetThemeAppProperties () returned 0x3
[0205.201] GetThemeAppProperties () returned 0x3
[0205.201] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0205.201] IsAppThemed () returned 0x1
[0205.201] GetThemeAppProperties () returned 0x3
[0205.201] GetThemeAppProperties () returned 0x3
[0205.202] IsAppThemed () returned 0x1
[0205.202] GetThemeAppProperties () returned 0x3
[0205.202] GetThemeAppProperties () returned 0x3
[0205.202] IsThemePartDefined () returned 0x1
[0205.202] GdipCreateRegion (region=0x53de78) returned 0x0
[0205.202] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0205.202] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0205.202] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0205.202] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0205.202] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0205.202] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0205.202] LocalFree (hMem=0x89ee08) returned 0x0
[0205.202] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0205.202] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0205.202] LocalFree (hMem=0x89ec80) returned 0x0
[0205.202] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0205.202] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0205.202] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0205.202] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0205.203] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0205.203] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0205.203] GetCurrentObject (hdc=0xa9010792, type=0x1) returned 0xb00017
[0205.203] GetCurrentObject (hdc=0xa9010792, type=0x2) returned 0x900010
[0205.203] GetCurrentObject (hdc=0xa9010792, type=0x7) returned 0x1e0507b9
[0205.203] GetCurrentObject (hdc=0xa9010792, type=0x6) returned 0x8a01c2
[0205.203] SaveDC (hdc=0xa9010792) returned 1
[0205.203] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbb04053e
[0205.203] GetClipRgn (hdc=0xa9010792, hrgn=0xbb04053e) returned 0
[0205.203] SelectClipRgn (hdc=0xa9010792, hrgn=0x540407a1) returned 2
[0205.203] DeleteObject (ho=0xbb04053e) returned 1
[0205.203] DeleteObject (ho=0x540407a1) returned 1
[0205.203] OffsetViewportOrgEx (in: hdc=0xa9010792, x=0, y=0, lppt=0x236f29c | out: lppt=0x236f29c) returned 1
[0205.203] DrawThemeParentBackground () returned 0x0
[0205.204] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0205.204] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0205.204] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0205.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0205.204] GetSystemMetrics (nIndex=42) returned 0
[0205.204] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0205.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0205.204] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0205.204] GetCurrentObject (hdc=0xa9010792, type=0x1) returned 0xb00017
[0205.204] GetCurrentObject (hdc=0xa9010792, type=0x2) returned 0x900010
[0205.204] GetCurrentObject (hdc=0xa9010792, type=0x7) returned 0x1e0507b9
[0205.204] GetCurrentObject (hdc=0xa9010792, type=0x6) returned 0x8a01c2
[0205.204] SaveDC (hdc=0xa9010792) returned 2
[0205.204] GetNearestColor (hdc=0xa9010792, color=0xff) returned 0xff
[0205.204] CreateSolidBrush (color=0xff) returned 0x2710078d
[0205.204] FillRect (hDC=0xa9010792, lprc=0x53d8d8, hbr=0x2710078d) returned 1
[0205.205] DeleteObject (ho=0x2710078d) returned 1
[0205.205] RestoreDC (hdc=0xa9010792, nSavedDC=-1) returned 1
[0205.205] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0205.205] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0205.205] GetSystemMetrics (nIndex=42) returned 0
[0205.205] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0205.205] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0205.205] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0205.205] GetCurrentObject (hdc=0xa9010792, type=0x1) returned 0xb00017
[0205.205] GetCurrentObject (hdc=0xa9010792, type=0x2) returned 0x900010
[0205.205] GetCurrentObject (hdc=0xa9010792, type=0x7) returned 0x1e0507b9
[0205.205] GetCurrentObject (hdc=0xa9010792, type=0x6) returned 0x8a01c2
[0205.205] SaveDC (hdc=0xa9010792) returned 2
[0205.205] GetNearestColor (hdc=0xa9010792, color=0xff) returned 0xff
[0205.205] CreateSolidBrush (color=0xff) returned 0x2810078d
[0205.205] FillRect (hDC=0xa9010792, lprc=0x53d878, hbr=0x2810078d) returned 1
[0205.206] DeleteObject (ho=0x2810078d) returned 1
[0205.206] RestoreDC (hdc=0xa9010792, nSavedDC=-1) returned 1
[0205.206] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0205.206] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0205.206] GetSystemMetrics (nIndex=42) returned 0
[0205.206] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0205.206] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0205.206] RestoreDC (hdc=0xa9010792, nSavedDC=-1) returned 1
[0205.206] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa9010792) returned 0x0
[0205.206] IsAppThemed () returned 0x1
[0205.206] GetThemeAppProperties () returned 0x3
[0205.206] GetThemeAppProperties () returned 0x3
[0205.206] IsAppThemed () returned 0x1
[0205.206] GetThemeAppProperties () returned 0x3
[0205.206] GetThemeAppProperties () returned 0x3
[0205.206] IsThemePartDefined () returned 0x1
[0205.207] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0205.207] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0205.207] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0205.207] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0205.207] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0205.207] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0205.207] LocalFree (hMem=0x89eac0) returned 0x0
[0205.207] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0205.207] LocalFree (hMem=0x89eac0) returned 0x0
[0205.207] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0205.207] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0205.207] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0205.207] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0205.207] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0205.207] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0205.207] GetCurrentObject (hdc=0xa9010792, type=0x1) returned 0xb00017
[0205.207] GetCurrentObject (hdc=0xa9010792, type=0x2) returned 0x900010
[0205.207] GetCurrentObject (hdc=0xa9010792, type=0x7) returned 0x1e0507b9
[0205.207] GetCurrentObject (hdc=0xa9010792, type=0x6) returned 0x8a01c2
[0205.208] SaveDC (hdc=0xa9010792) returned 1
[0205.208] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x550407a1
[0205.208] GetClipRgn (hdc=0xa9010792, hrgn=0x550407a1) returned 0
[0205.208] SelectClipRgn (hdc=0xa9010792, hrgn=0xbd04053e) returned 2
[0205.208] DeleteObject (ho=0x550407a1) returned 1
[0205.208] DeleteObject (ho=0xbd04053e) returned 1
[0205.208] OffsetViewportOrgEx (in: hdc=0xa9010792, x=0, y=0, lppt=0x236fb00 | out: lppt=0x236fb00) returned 1
[0205.208] IsAppThemed () returned 0x1
[0205.208] GetThemeAppProperties () returned 0x3
[0205.208] GetThemeAppProperties () returned 0x3
[0205.208] DrawThemeBackground () returned 0x0
[0205.208] RestoreDC (hdc=0xa9010792, nSavedDC=-1) returned 1
[0205.208] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa9010792) returned 0x0
[0205.208] GdipCreateRegion (region=0x53de00) returned 0x0
[0205.208] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0205.208] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0205.208] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0205.208] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0205.208] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0205.215] LocalFree (hMem=0x89eac0) returned 0x0
[0205.215] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0205.215] LocalFree (hMem=0x89eee8) returned 0x0
[0205.215] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0205.215] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0205.215] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0205.215] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0205.215] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0205.215] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0205.215] GetCurrentObject (hdc=0xa9010792, type=0x1) returned 0xb00017
[0205.215] GetCurrentObject (hdc=0xa9010792, type=0x2) returned 0x900010
[0205.215] GetCurrentObject (hdc=0xa9010792, type=0x7) returned 0x1e0507b9
[0205.215] GetCurrentObject (hdc=0xa9010792, type=0x6) returned 0x8a01c2
[0205.215] SaveDC (hdc=0xa9010792) returned 1
[0205.215] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbe04053e
[0205.215] GetClipRgn (hdc=0xa9010792, hrgn=0xbe04053e) returned 0
[0205.215] SelectClipRgn (hdc=0xa9010792, hrgn=0x560407a1) returned 2
[0205.215] DeleteObject (ho=0xbe04053e) returned 1
[0205.216] DeleteObject (ho=0x560407a1) returned 1
[0205.216] OffsetViewportOrgEx (in: hdc=0xa9010792, x=0, y=0, lppt=0x236fdd4 | out: lppt=0x236fdd4) returned 1
[0205.216] IsAppThemed () returned 0x1
[0205.216] GetThemeAppProperties () returned 0x3
[0205.216] GetThemeAppProperties () returned 0x3
[0205.216] GetThemeBackgroundContentRect () returned 0x0
[0205.216] RestoreDC (hdc=0xa9010792, nSavedDC=-1) returned 1
[0205.216] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa9010792) returned 0x0
[0205.216] IsAppThemed () returned 0x1
[0205.216] GetThemeAppProperties () returned 0x3
[0205.216] GetThemeAppProperties () returned 0x3
[0205.216] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0205.216] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0205.216] GetCurrentObject (hdc=0xa9010792, type=0x1) returned 0xb00017
[0205.216] GetCurrentObject (hdc=0xa9010792, type=0x2) returned 0x900010
[0205.216] GetCurrentObject (hdc=0xa9010792, type=0x7) returned 0x1e0507b9
[0205.216] GetCurrentObject (hdc=0xa9010792, type=0x6) returned 0x8a01c2
[0205.216] SaveDC (hdc=0xa9010792) returned 1
[0205.216] GetTextAlign (hdc=0xa9010792) returned 0x0
[0205.216] GetTextColor (hdc=0xa9010792) returned 0x0
[0205.217] GetCurrentObject (hdc=0xa9010792, type=0x6) returned 0x8a01c2
[0205.217] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0205.217] SelectObject (hdc=0xa9010792, h=0x450a0799) returned 0x8a01c2
[0205.217] GetBkMode (hdc=0xa9010792) returned 2
[0205.217] SetBkMode (hdc=0xa9010792, mode=1) returned 2
[0205.217] DrawTextExW (in: hdc=0xa9010792, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2370174 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0205.217] DrawTextExW (in: hdc=0xa9010792, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2370174 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0205.218] RestoreDC (hdc=0xa9010792, nSavedDC=-1) returned 1
[0205.218] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa9010792) returned 0x0
[0205.218] GetFocus () returned 0x402de
[0205.218] IsAppThemed () returned 0x1
[0205.218] GetThemeAppProperties () returned 0x3
[0205.218] GetThemeAppProperties () returned 0x3
[0205.218] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0205.218] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xa9010792, x1=0, y1=0, rop=0xcc0020) returned 1
[0205.218] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa9010792) returned 0x0
[0205.218] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0205.218] SelectObject (hdc=0xa9010792, h=0x85000f) returned 0x1e0507b9
[0205.218] DeleteDC (hdc=0xa9010792) returned 1
[0205.218] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0205.218] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0205.520] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0205.520] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0205.521] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0xf02d2) returned 0x1
[0205.533] GetFocus () returned 0xf02d2
[0205.534] GetAncestor (hwnd=0xf02d2, gaFlags=0x1) returned 0x10010
[0205.534] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0205.534] SetFocus (hWnd=0x202c6) returned 0x0
[0205.536] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0205.548] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0205.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0205.548] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0205.548] GetFocus () returned 0x70036
[0205.549] SetFocus (hWnd=0x202c6) returned 0x0
[0205.559] IsWindow (hWnd=0x70036) returned 1
[0205.559] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0205.559] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0205.560] IsWindow (hWnd=0x70036) returned 1
[0205.560] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0205.560] IsWindow (hWnd=0x202c6) returned 1
[0205.560] SetFocus (hWnd=0x202c6) returned 0x70036
[0205.560] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0205.561] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0205.562] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0205.564] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0205.564] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0205.564] GetStockObject (i=5) returned 0x900015
[0205.565] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0205.565] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8daa18) returned 0x7
[0205.565] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0205.565] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0205.565] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0205.565] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0205.567] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0205.567] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0205.567] GetFocus () returned 0x202c6
[0205.567] GetCapture () returned 0x0
[0205.567] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.568] IsWindowUnicode (hWnd=0x202c6) returned 1
[0205.568] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.568] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.568] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.568] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.569] IsWindowUnicode (hWnd=0x202c6) returned 1
[0205.569] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.569] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.569] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.569] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0205.569] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0205.569] CreateCompatibleDC (hdc=0x10105d6) returned 0xef01065f
[0205.569] SelectObject (hdc=0xef01065f, h=0x1e0507b9) returned 0x85000f
[0205.570] GdipCreateFromHDC (hdc=0xef01065f, graphics=0x53e958) returned 0x0
[0205.570] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0205.570] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0205.570] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0205.570] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0205.570] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0205.570] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0205.570] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0205.570] LocalFree (hMem=0x89ee40) returned 0x0
[0205.570] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0205.571] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0205.571] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0205.571] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0205.571] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0205.571] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcdf0dbd) returned 0x0
[0205.571] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0205.571] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0205.571] GetCurrentObject (hdc=0xef01065f, type=0x1) returned 0xb00017
[0205.571] GetCurrentObject (hdc=0xef01065f, type=0x2) returned 0x900010
[0205.571] GetCurrentObject (hdc=0xef01065f, type=0x7) returned 0x1e0507b9
[0205.571] GetCurrentObject (hdc=0xef01065f, type=0x6) returned 0x8a01c2
[0205.571] SaveDC (hdc=0xef01065f) returned 1
[0205.572] GetNearestColor (hdc=0xef01065f, color=0xff) returned 0xff
[0205.572] GetNearestColor (hdc=0xef01065f, color=0x55) returned 0x55
[0205.572] GetNearestColor (hdc=0xef01065f, color=0x0) returned 0x0
[0205.572] GetNearestColor (hdc=0xef01065f, color=0x55) returned 0x55
[0205.572] GetNearestColor (hdc=0xef01065f, color=0x0) returned 0x0
[0205.572] GetNearestColor (hdc=0xef01065f, color=0x8080ff) returned 0x8080ff
[0205.572] GetNearestColor (hdc=0xef01065f, color=0x7373e5) returned 0x7373e5
[0205.572] GetNearestColor (hdc=0xef01065f, color=0xe5) returned 0xe5
[0205.572] GetNearestColor (hdc=0xef01065f, color=0x0) returned 0x0
[0205.572] RestoreDC (hdc=0xef01065f, nSavedDC=-1) returned 1
[0205.572] GdipReleaseDC (graphics=0x5d92c30, hdc=0xef01065f) returned 0x0
[0205.573] IsAppThemed () returned 0x1
[0205.573] GetThemeAppProperties () returned 0x3
[0205.573] GetThemeAppProperties () returned 0x3
[0205.573] IsAppThemed () returned 0x1
[0205.573] GetThemeAppProperties () returned 0x3
[0205.573] GetThemeAppProperties () returned 0x3
[0205.573] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x23709d0 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0205.573] IsAppThemed () returned 0x1
[0205.573] GetThemeAppProperties () returned 0x3
[0205.574] GetThemeAppProperties () returned 0x3
[0205.574] IsAppThemed () returned 0x1
[0205.574] GetThemeAppProperties () returned 0x3
[0205.574] GetThemeAppProperties () returned 0x3
[0205.574] GetFocus () returned 0x202c6
[0205.574] IsAppThemed () returned 0x1
[0205.574] GetThemeAppProperties () returned 0x3
[0205.574] GetThemeAppProperties () returned 0x3
[0205.574] IsAppThemed () returned 0x1
[0205.574] GetThemeAppProperties () returned 0x3
[0205.574] GetThemeAppProperties () returned 0x3
[0205.574] IsThemePartDefined () returned 0x1
[0205.574] IsAppThemed () returned 0x1
[0205.575] GetThemeAppProperties () returned 0x3
[0205.575] GetThemeAppProperties () returned 0x3
[0205.575] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0205.575] IsAppThemed () returned 0x1
[0205.575] GetThemeAppProperties () returned 0x3
[0205.575] GetThemeAppProperties () returned 0x3
[0205.575] IsAppThemed () returned 0x1
[0205.575] GetThemeAppProperties () returned 0x3
[0205.575] GetThemeAppProperties () returned 0x3
[0205.575] IsThemePartDefined () returned 0x1
[0205.575] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0205.575] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0205.575] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0205.575] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0205.575] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0205.576] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0205.576] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0205.576] LocalFree (hMem=0x89ea88) returned 0x0
[0205.576] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0205.576] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0205.581] LocalFree (hMem=0x89eee8) returned 0x0
[0205.581] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0205.581] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0205.581] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0205.581] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0205.582] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0205.582] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0205.582] GetCurrentObject (hdc=0xef01065f, type=0x1) returned 0xb00017
[0205.582] GetCurrentObject (hdc=0xef01065f, type=0x2) returned 0x900010
[0205.582] GetCurrentObject (hdc=0xef01065f, type=0x7) returned 0x1e0507b9
[0205.582] GetCurrentObject (hdc=0xef01065f, type=0x6) returned 0x8a01c2
[0205.582] SaveDC (hdc=0xef01065f) returned 1
[0205.582] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5c0407a1
[0205.582] GetClipRgn (hdc=0xef01065f, hrgn=0x5c0407a1) returned 0
[0205.582] SelectClipRgn (hdc=0xef01065f, hrgn=0xce04053e) returned 2
[0205.582] DeleteObject (ho=0x5c0407a1) returned 1
[0205.582] DeleteObject (ho=0xce04053e) returned 1
[0205.582] OffsetViewportOrgEx (in: hdc=0xef01065f, x=0, y=0, lppt=0x2371080 | out: lppt=0x2371080) returned 1
[0205.582] DrawThemeParentBackground () returned 0x0
[0205.583] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0205.583] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0205.583] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0205.583] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0205.583] GetSystemMetrics (nIndex=42) returned 0
[0205.583] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0205.583] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0205.583] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0205.583] GetCurrentObject (hdc=0xef01065f, type=0x1) returned 0xb00017
[0205.583] GetCurrentObject (hdc=0xef01065f, type=0x2) returned 0x900010
[0205.583] GetCurrentObject (hdc=0xef01065f, type=0x7) returned 0x1e0507b9
[0205.583] GetCurrentObject (hdc=0xef01065f, type=0x6) returned 0x8a01c2
[0205.583] SaveDC (hdc=0xef01065f) returned 2
[0205.583] GetNearestColor (hdc=0xef01065f, color=0xff) returned 0xff
[0205.583] CreateSolidBrush (color=0xff) returned 0x2a10078d
[0205.584] FillRect (hDC=0xef01065f, lprc=0x53e128, hbr=0x2a10078d) returned 1
[0205.584] DeleteObject (ho=0x2a10078d) returned 1
[0205.584] RestoreDC (hdc=0xef01065f, nSavedDC=-1) returned 1
[0205.584] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0205.584] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0205.584] GetSystemMetrics (nIndex=42) returned 0
[0205.584] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0205.584] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0205.584] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0205.584] GetCurrentObject (hdc=0xef01065f, type=0x1) returned 0xb00017
[0205.584] GetCurrentObject (hdc=0xef01065f, type=0x2) returned 0x900010
[0205.584] GetCurrentObject (hdc=0xef01065f, type=0x7) returned 0x1e0507b9
[0205.584] GetCurrentObject (hdc=0xef01065f, type=0x6) returned 0x8a01c2
[0205.584] SaveDC (hdc=0xef01065f) returned 2
[0205.584] GetNearestColor (hdc=0xef01065f, color=0xff) returned 0xff
[0205.585] CreateSolidBrush (color=0xff) returned 0x2b10078d
[0205.585] FillRect (hDC=0xef01065f, lprc=0x53e0c8, hbr=0x2b10078d) returned 1
[0205.585] DeleteObject (ho=0x2b10078d) returned 1
[0205.585] RestoreDC (hdc=0xef01065f, nSavedDC=-1) returned 1
[0205.585] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0205.585] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0205.585] GetSystemMetrics (nIndex=42) returned 0
[0205.585] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0205.585] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0205.585] RestoreDC (hdc=0xef01065f, nSavedDC=-1) returned 1
[0205.585] GdipReleaseDC (graphics=0x5d92c30, hdc=0xef01065f) returned 0x0
[0205.585] IsAppThemed () returned 0x1
[0205.585] GetThemeAppProperties () returned 0x3
[0205.585] GetThemeAppProperties () returned 0x3
[0205.585] IsAppThemed () returned 0x1
[0205.586] GetThemeAppProperties () returned 0x3
[0205.586] GetThemeAppProperties () returned 0x3
[0205.586] IsThemePartDefined () returned 0x1
[0205.586] GdipCreateRegion (region=0x53e64c) returned 0x0
[0205.586] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0205.586] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0205.586] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0205.586] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0205.586] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0205.586] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0205.586] LocalFree (hMem=0x89ea88) returned 0x0
[0205.586] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0205.586] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0205.586] LocalFree (hMem=0x89ea88) returned 0x0
[0205.586] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0205.586] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0205.586] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0205.586] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0205.587] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0205.594] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0205.594] GetCurrentObject (hdc=0xef01065f, type=0x1) returned 0xb00017
[0205.595] GetCurrentObject (hdc=0xef01065f, type=0x2) returned 0x900010
[0205.595] GetCurrentObject (hdc=0xef01065f, type=0x7) returned 0x1e0507b9
[0205.595] GetCurrentObject (hdc=0xef01065f, type=0x6) returned 0x8a01c2
[0205.595] SaveDC (hdc=0xef01065f) returned 1
[0205.595] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcf04053e
[0205.595] GetClipRgn (hdc=0xef01065f, hrgn=0xcf04053e) returned 0
[0205.595] SelectClipRgn (hdc=0xef01065f, hrgn=0x5e0407a1) returned 2
[0205.595] DeleteObject (ho=0xcf04053e) returned 1
[0205.595] DeleteObject (ho=0x5e0407a1) returned 1
[0205.595] OffsetViewportOrgEx (in: hdc=0xef01065f, x=0, y=0, lppt=0x23718e4 | out: lppt=0x23718e4) returned 1
[0205.595] IsAppThemed () returned 0x1
[0205.595] GetThemeAppProperties () returned 0x3
[0205.595] GetThemeAppProperties () returned 0x3
[0205.595] DrawThemeBackground () returned 0x0
[0205.596] RestoreDC (hdc=0xef01065f, nSavedDC=-1) returned 1
[0205.596] GdipReleaseDC (graphics=0x5d92c30, hdc=0xef01065f) returned 0x0
[0205.596] GdipCreateRegion (region=0x53e650) returned 0x0
[0205.596] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0205.596] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0205.596] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0205.596] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0205.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0205.596] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0205.596] LocalFree (hMem=0x89ea88) returned 0x0
[0205.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0205.596] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0205.596] LocalFree (hMem=0x89ec80) returned 0x0
[0205.596] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0205.596] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0205.596] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0205.597] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0205.597] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0205.597] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0205.597] GetCurrentObject (hdc=0xef01065f, type=0x1) returned 0xb00017
[0205.597] GetCurrentObject (hdc=0xef01065f, type=0x2) returned 0x900010
[0205.597] GetCurrentObject (hdc=0xef01065f, type=0x7) returned 0x1e0507b9
[0205.597] GetCurrentObject (hdc=0xef01065f, type=0x6) returned 0x8a01c2
[0205.597] SaveDC (hdc=0xef01065f) returned 1
[0205.597] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f0407a1
[0205.597] GetClipRgn (hdc=0xef01065f, hrgn=0x5f0407a1) returned 0
[0205.597] SelectClipRgn (hdc=0xef01065f, hrgn=0xd004053e) returned 2
[0205.597] DeleteObject (ho=0x5f0407a1) returned 1
[0205.597] DeleteObject (ho=0xd004053e) returned 1
[0205.597] OffsetViewportOrgEx (in: hdc=0xef01065f, x=0, y=0, lppt=0x2371bb8 | out: lppt=0x2371bb8) returned 1
[0205.597] IsAppThemed () returned 0x1
[0205.597] GetThemeAppProperties () returned 0x3
[0205.598] GetThemeAppProperties () returned 0x3
[0205.598] GetThemeBackgroundContentRect () returned 0x0
[0205.598] RestoreDC (hdc=0xef01065f, nSavedDC=-1) returned 1
[0205.598] GdipReleaseDC (graphics=0x5d92c30, hdc=0xef01065f) returned 0x0
[0205.598] IsAppThemed () returned 0x1
[0205.598] GetThemeAppProperties () returned 0x3
[0205.598] GetThemeAppProperties () returned 0x3
[0205.598] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0205.598] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0205.598] GetCurrentObject (hdc=0xef01065f, type=0x1) returned 0xb00017
[0205.598] GetCurrentObject (hdc=0xef01065f, type=0x2) returned 0x900010
[0205.598] GetCurrentObject (hdc=0xef01065f, type=0x7) returned 0x1e0507b9
[0205.598] GetCurrentObject (hdc=0xef01065f, type=0x6) returned 0x8a01c2
[0205.598] SaveDC (hdc=0xef01065f) returned 1
[0205.598] GetTextAlign (hdc=0xef01065f) returned 0x0
[0205.598] GetTextColor (hdc=0xef01065f) returned 0x0
[0205.598] GetCurrentObject (hdc=0xef01065f, type=0x6) returned 0x8a01c2
[0205.599] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0205.628] SelectObject (hdc=0xef01065f, h=0x450a0799) returned 0x8a01c2
[0205.628] GetBkMode (hdc=0xef01065f) returned 2
[0205.628] SetBkMode (hdc=0xef01065f, mode=1) returned 2
[0205.628] DrawTextExW (in: hdc=0xef01065f, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2371f58 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0205.640] DrawTextExW (in: hdc=0xef01065f, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2371f58 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0205.641] RestoreDC (hdc=0xef01065f, nSavedDC=-1) returned 1
[0205.641] GdipReleaseDC (graphics=0x5d92c30, hdc=0xef01065f) returned 0x0
[0205.641] GetFocus () returned 0x202c6
[0205.641] IsAppThemed () returned 0x1
[0205.641] GetThemeAppProperties () returned 0x3
[0205.641] GetThemeAppProperties () returned 0x3
[0205.641] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0205.641] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xef01065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0205.641] GdipReleaseDC (graphics=0x5d92c30, hdc=0xef01065f) returned 0x0
[0205.641] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0205.642] SelectObject (hdc=0xef01065f, h=0x85000f) returned 0x1e0507b9
[0205.642] DeleteDC (hdc=0xef01065f) returned 1
[0205.642] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0205.642] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0205.642] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.642] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.642] WaitMessage () returned 1
[0205.642] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.642] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.643] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.643] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.643] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.644] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.644] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.644] WaitMessage () returned 1
[0205.656] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.657] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.657] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.657] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.657] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.658] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.658] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.658] WaitMessage () returned 1
[0205.660] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.660] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.660] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.660] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.660] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.666] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.666] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.666] WaitMessage () returned 1
[0205.668] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.668] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.668] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.669] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.669] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.670] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.670] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.670] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.671] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.671] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.671] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.671] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.671] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.671] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.671] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.671] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.672] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.672] WaitMessage () returned 1
[0205.672] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.672] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.672] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.672] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.672] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.675] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.675] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.675] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.675] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.675] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.676] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.676] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.676] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.676] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.676] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.676] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.677] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.677] WaitMessage () returned 1
[0205.677] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.677] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.677] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.677] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.677] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.683] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.684] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.684] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.684] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.684] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.684] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.684] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.684] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.684] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.684] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.685] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.685] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.685] WaitMessage () returned 1
[0205.692] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.692] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.692] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.692] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.692] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.694] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.694] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.695] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.695] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.695] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.695] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.695] IsWindowUnicode (hWnd=0x102dc) returned 1
[0205.695] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.695] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.695] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.695] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.696] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.696] WaitMessage () returned 1
[0205.866] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.866] IsWindowUnicode (hWnd=0x202d0) returned 1
[0205.866] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.866] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.866] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0205.866] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.867] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.867] WaitMessage () returned 1
[0205.897] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.897] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0205.897] TranslateMessage (lpMsg=0x53eef8) returned 0
[0205.897] DispatchMessageA (lpMsg=0x53eef8) returned 0x7ef7
[0205.898] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.898] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0205.898] WaitMessage () returned 1
[0206.897] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0206.897] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0206.897] TranslateMessage (lpMsg=0x53eef8) returned 0
[0206.897] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0206.897] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0206.897] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0206.897] WaitMessage () returned 1
[0207.273] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0207.273] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19e0249) returned 0x1
[0207.274] IsWindowUnicode (hWnd=0x202c6) returned 1
[0207.274] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0207.274] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19e0249) returned 0x1
[0207.274] SetCursor (hCursor=0x10003) returned 0x10003
[0207.274] TranslateMessage (lpMsg=0x53eef8) returned 0
[0207.274] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0207.274] _TrackMouseEvent (in: lpEventTrack=0x23276fc | out: lpEventTrack=0x23276fc) returned 1
[0207.274] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0207.274] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0207.274] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0207.274] GetKeyState (nVirtKey=1) returned 0
[0207.274] GetKeyState (nVirtKey=2) returned 0
[0207.274] GetKeyState (nVirtKey=4) returned 0
[0207.274] GetKeyState (nVirtKey=5) returned 0
[0207.274] GetKeyState (nVirtKey=6) returned 0
[0207.275] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0207.275] IsWindowUnicode (hWnd=0x202c6) returned 1
[0207.275] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0207.275] TranslateMessage (lpMsg=0x53eef8) returned 0
[0207.275] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0207.275] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0207.275] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0207.275] CreateCompatibleDC (hdc=0x10105d6) returned 0x470107c4
[0207.275] SelectObject (hdc=0x470107c4, h=0x1e0507b9) returned 0x85000f
[0207.275] GdipCreateFromHDC (hdc=0x470107c4, graphics=0x53e958) returned 0x0
[0207.275] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0207.275] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0207.276] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0207.276] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.276] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0207.276] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0207.276] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0207.276] LocalFree (hMem=0x89ec80) returned 0x0
[0207.276] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.276] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0207.276] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.276] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0207.276] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0207.276] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcdd0dbd) returned 0x0
[0207.276] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.276] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0207.276] GetCurrentObject (hdc=0x470107c4, type=0x1) returned 0xb00017
[0207.276] GetCurrentObject (hdc=0x470107c4, type=0x2) returned 0x900010
[0207.276] GetCurrentObject (hdc=0x470107c4, type=0x7) returned 0x1e0507b9
[0207.276] GetCurrentObject (hdc=0x470107c4, type=0x6) returned 0x8a01c2
[0207.276] SaveDC (hdc=0x470107c4) returned 1
[0207.277] GetNearestColor (hdc=0x470107c4, color=0xff) returned 0xff
[0207.277] GetNearestColor (hdc=0x470107c4, color=0x55) returned 0x55
[0207.277] GetNearestColor (hdc=0x470107c4, color=0x0) returned 0x0
[0207.277] GetNearestColor (hdc=0x470107c4, color=0x55) returned 0x55
[0207.277] GetNearestColor (hdc=0x470107c4, color=0x0) returned 0x0
[0207.277] GetNearestColor (hdc=0x470107c4, color=0x8080ff) returned 0x8080ff
[0207.277] GetNearestColor (hdc=0x470107c4, color=0x7373e5) returned 0x7373e5
[0207.277] GetNearestColor (hdc=0x470107c4, color=0xe5) returned 0xe5
[0207.277] GetNearestColor (hdc=0x470107c4, color=0x0) returned 0x0
[0207.277] RestoreDC (hdc=0x470107c4, nSavedDC=-1) returned 1
[0207.277] GdipReleaseDC (graphics=0x5d92c30, hdc=0x470107c4) returned 0x0
[0207.277] IsAppThemed () returned 0x1
[0207.277] GetThemeAppProperties () returned 0x3
[0207.277] GetThemeAppProperties () returned 0x3
[0207.277] IsAppThemed () returned 0x1
[0207.278] GetThemeAppProperties () returned 0x3
[0207.278] GetThemeAppProperties () returned 0x3
[0207.278] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x23728ec | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0207.278] IsAppThemed () returned 0x1
[0207.278] GetThemeAppProperties () returned 0x3
[0207.278] GetThemeAppProperties () returned 0x3
[0207.278] IsAppThemed () returned 0x1
[0207.278] GetThemeAppProperties () returned 0x3
[0207.278] GetThemeAppProperties () returned 0x3
[0207.278] IsAppThemed () returned 0x1
[0207.278] GetThemeAppProperties () returned 0x3
[0207.278] GetThemeAppProperties () returned 0x3
[0207.278] IsAppThemed () returned 0x1
[0207.278] GetThemeAppProperties () returned 0x3
[0207.278] GetThemeAppProperties () returned 0x3
[0207.279] IsThemePartDefined () returned 0x1
[0207.279] IsAppThemed () returned 0x1
[0207.279] GetThemeAppProperties () returned 0x3
[0207.279] GetThemeAppProperties () returned 0x3
[0207.279] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0207.279] IsAppThemed () returned 0x1
[0207.279] GetThemeAppProperties () returned 0x3
[0207.279] GetThemeAppProperties () returned 0x3
[0207.279] IsAppThemed () returned 0x1
[0207.279] GetThemeAppProperties () returned 0x3
[0207.279] GetThemeAppProperties () returned 0x3
[0207.279] IsThemePartDefined () returned 0x1
[0207.279] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0207.279] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.279] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0207.279] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.279] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0207.279] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0207.279] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0207.280] LocalFree (hMem=0x89ee08) returned 0x0
[0207.280] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.280] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0207.280] LocalFree (hMem=0x89ea88) returned 0x0
[0207.280] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.280] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0207.280] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0207.280] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0207.280] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.280] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0207.280] GetCurrentObject (hdc=0x470107c4, type=0x1) returned 0xb00017
[0207.280] GetCurrentObject (hdc=0x470107c4, type=0x2) returned 0x900010
[0207.280] GetCurrentObject (hdc=0x470107c4, type=0x7) returned 0x1e0507b9
[0207.280] GetCurrentObject (hdc=0x470107c4, type=0x6) returned 0x8a01c2
[0207.280] SaveDC (hdc=0x470107c4) returned 1
[0207.280] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd104053e
[0207.280] GetClipRgn (hdc=0x470107c4, hrgn=0xd104053e) returned 0
[0207.280] SelectClipRgn (hdc=0x470107c4, hrgn=0x630407a1) returned 2
[0207.281] DeleteObject (ho=0xd104053e) returned 1
[0207.281] DeleteObject (ho=0x630407a1) returned 1
[0207.281] OffsetViewportOrgEx (in: hdc=0x470107c4, x=0, y=0, lppt=0x2372f9c | out: lppt=0x2372f9c) returned 1
[0207.281] DrawThemeParentBackground () returned 0x0
[0207.281] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0207.281] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0207.281] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0207.281] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0207.281] GetSystemMetrics (nIndex=42) returned 0
[0207.281] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0207.281] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0207.281] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0207.281] GetCurrentObject (hdc=0x470107c4, type=0x1) returned 0xb00017
[0207.281] GetCurrentObject (hdc=0x470107c4, type=0x2) returned 0x900010
[0207.281] GetCurrentObject (hdc=0x470107c4, type=0x7) returned 0x1e0507b9
[0207.281] GetCurrentObject (hdc=0x470107c4, type=0x6) returned 0x8a01c2
[0207.281] SaveDC (hdc=0x470107c4) returned 2
[0207.281] GetNearestColor (hdc=0x470107c4, color=0xff) returned 0xff
[0207.282] CreateSolidBrush (color=0xff) returned 0x2c10078d
[0207.282] FillRect (hDC=0x470107c4, lprc=0x53e120, hbr=0x2c10078d) returned 1
[0207.282] DeleteObject (ho=0x2c10078d) returned 1
[0207.282] RestoreDC (hdc=0x470107c4, nSavedDC=-1) returned 1
[0207.282] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0207.282] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0207.282] GetSystemMetrics (nIndex=42) returned 0
[0207.282] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0207.282] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0207.282] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0207.282] GetCurrentObject (hdc=0x470107c4, type=0x1) returned 0xb00017
[0207.282] GetCurrentObject (hdc=0x470107c4, type=0x2) returned 0x900010
[0207.282] GetCurrentObject (hdc=0x470107c4, type=0x7) returned 0x1e0507b9
[0207.282] GetCurrentObject (hdc=0x470107c4, type=0x6) returned 0x8a01c2
[0207.282] SaveDC (hdc=0x470107c4) returned 2
[0207.282] GetNearestColor (hdc=0x470107c4, color=0xff) returned 0xff
[0207.282] CreateSolidBrush (color=0xff) returned 0x2d10078d
[0207.282] FillRect (hDC=0x470107c4, lprc=0x53e0c0, hbr=0x2d10078d) returned 1
[0207.282] DeleteObject (ho=0x2d10078d) returned 1
[0207.283] RestoreDC (hdc=0x470107c4, nSavedDC=-1) returned 1
[0207.283] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0207.283] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0207.283] GetSystemMetrics (nIndex=42) returned 0
[0207.283] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0207.283] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0207.283] RestoreDC (hdc=0x470107c4, nSavedDC=-1) returned 1
[0207.283] GdipReleaseDC (graphics=0x5d92c30, hdc=0x470107c4) returned 0x0
[0207.283] IsAppThemed () returned 0x1
[0207.283] GetThemeAppProperties () returned 0x3
[0207.283] GetThemeAppProperties () returned 0x3
[0207.283] IsAppThemed () returned 0x1
[0207.283] GetThemeAppProperties () returned 0x3
[0207.283] GetThemeAppProperties () returned 0x3
[0207.283] IsThemePartDefined () returned 0x1
[0207.283] GdipCreateRegion (region=0x53e640) returned 0x0
[0207.283] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.283] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0207.283] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.284] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0207.284] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0207.284] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0207.284] LocalFree (hMem=0x89ec80) returned 0x0
[0207.284] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.284] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0207.284] LocalFree (hMem=0x89ea88) returned 0x0
[0207.284] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.284] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0207.284] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0207.284] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0207.284] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.284] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0207.284] GetCurrentObject (hdc=0x470107c4, type=0x1) returned 0xb00017
[0207.284] GetCurrentObject (hdc=0x470107c4, type=0x2) returned 0x900010
[0207.284] GetCurrentObject (hdc=0x470107c4, type=0x7) returned 0x1e0507b9
[0207.284] GetCurrentObject (hdc=0x470107c4, type=0x6) returned 0x8a01c2
[0207.284] SaveDC (hdc=0x470107c4) returned 1
[0207.284] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x640407a1
[0207.285] GetClipRgn (hdc=0x470107c4, hrgn=0x640407a1) returned 0
[0207.285] SelectClipRgn (hdc=0x470107c4, hrgn=0xd304053e) returned 2
[0207.285] DeleteObject (ho=0x640407a1) returned 1
[0207.285] DeleteObject (ho=0xd304053e) returned 1
[0207.285] OffsetViewportOrgEx (in: hdc=0x470107c4, x=0, y=0, lppt=0x2373800 | out: lppt=0x2373800) returned 1
[0207.285] IsAppThemed () returned 0x1
[0207.285] GetThemeAppProperties () returned 0x3
[0207.285] GetThemeAppProperties () returned 0x3
[0207.285] DrawThemeBackground () returned 0x0
[0207.285] RestoreDC (hdc=0x470107c4, nSavedDC=-1) returned 1
[0207.285] GdipReleaseDC (graphics=0x5d92c30, hdc=0x470107c4) returned 0x0
[0207.285] GdipCreateRegion (region=0x53e644) returned 0x0
[0207.285] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.285] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0207.285] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.285] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0207.285] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.285] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0207.285] LocalFree (hMem=0x89ea88) returned 0x0
[0207.285] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0207.285] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0207.286] LocalFree (hMem=0x89eee8) returned 0x0
[0207.286] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.286] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0207.286] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0207.286] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0207.286] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.286] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0207.286] GetCurrentObject (hdc=0x470107c4, type=0x1) returned 0xb00017
[0207.286] GetCurrentObject (hdc=0x470107c4, type=0x2) returned 0x900010
[0207.286] GetCurrentObject (hdc=0x470107c4, type=0x7) returned 0x1e0507b9
[0207.286] GetCurrentObject (hdc=0x470107c4, type=0x6) returned 0x8a01c2
[0207.286] SaveDC (hdc=0x470107c4) returned 1
[0207.286] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd404053e
[0207.286] GetClipRgn (hdc=0x470107c4, hrgn=0xd404053e) returned 0
[0207.286] SelectClipRgn (hdc=0x470107c4, hrgn=0x650407a1) returned 2
[0207.286] DeleteObject (ho=0xd404053e) returned 1
[0207.286] DeleteObject (ho=0x650407a1) returned 1
[0207.286] OffsetViewportOrgEx (in: hdc=0x470107c4, x=0, y=0, lppt=0x2373ad4 | out: lppt=0x2373ad4) returned 1
[0207.286] IsAppThemed () returned 0x1
[0207.286] GetThemeAppProperties () returned 0x3
[0207.286] GetThemeAppProperties () returned 0x3
[0207.287] GetThemeBackgroundContentRect () returned 0x0
[0207.287] RestoreDC (hdc=0x470107c4, nSavedDC=-1) returned 1
[0207.287] GdipReleaseDC (graphics=0x5d92c30, hdc=0x470107c4) returned 0x0
[0207.288] IsAppThemed () returned 0x1
[0207.288] GetThemeAppProperties () returned 0x3
[0207.288] GetThemeAppProperties () returned 0x3
[0207.288] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0207.288] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0207.288] GetCurrentObject (hdc=0x470107c4, type=0x1) returned 0xb00017
[0207.288] GetCurrentObject (hdc=0x470107c4, type=0x2) returned 0x900010
[0207.288] GetCurrentObject (hdc=0x470107c4, type=0x7) returned 0x1e0507b9
[0207.288] GetCurrentObject (hdc=0x470107c4, type=0x6) returned 0x8a01c2
[0207.288] SaveDC (hdc=0x470107c4) returned 1
[0207.288] GetTextAlign (hdc=0x470107c4) returned 0x0
[0207.288] GetTextColor (hdc=0x470107c4) returned 0x0
[0207.288] GetCurrentObject (hdc=0x470107c4, type=0x6) returned 0x8a01c2
[0207.288] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0207.288] SelectObject (hdc=0x470107c4, h=0x450a0799) returned 0x8a01c2
[0207.288] GetBkMode (hdc=0x470107c4) returned 2
[0207.289] SetBkMode (hdc=0x470107c4, mode=1) returned 2
[0207.289] DrawTextExW (in: hdc=0x470107c4, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2373e74 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0207.289] DrawTextExW (in: hdc=0x470107c4, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2373e74 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0207.289] RestoreDC (hdc=0x470107c4, nSavedDC=-1) returned 1
[0207.289] GdipReleaseDC (graphics=0x5d92c30, hdc=0x470107c4) returned 0x0
[0207.289] GetFocus () returned 0x202c6
[0207.289] IsAppThemed () returned 0x1
[0207.289] GetThemeAppProperties () returned 0x3
[0207.289] GetThemeAppProperties () returned 0x3
[0207.289] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0207.289] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x470107c4, x1=0, y1=0, rop=0xcc0020) returned 1
[0207.290] GdipReleaseDC (graphics=0x5d92c30, hdc=0x470107c4) returned 0x0
[0207.290] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0207.290] SelectObject (hdc=0x470107c4, h=0x85000f) returned 0x1e0507b9
[0207.290] DeleteDC (hdc=0x470107c4) returned 1
[0207.290] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0207.290] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0207.290] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0207.290] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0207.290] WaitMessage () returned 1
[0207.381] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0207.381] IsWindowUnicode (hWnd=0x202c6) returned 1
[0207.381] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0207.381] TranslateMessage (lpMsg=0x53eef8) returned 0
[0207.381] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0207.381] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0207.381] IsWindowUnicode (hWnd=0x202c6) returned 1
[0207.381] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0207.381] TranslateMessage (lpMsg=0x53eef8) returned 0
[0207.381] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0207.381] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x160059) returned 0x0
[0207.382] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0207.382] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0207.382] WaitMessage () returned 1
[0207.546] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0207.546] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19e0249) returned 0x1
[0207.546] IsWindowUnicode (hWnd=0x202c6) returned 1
[0207.546] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0207.546] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19e0249) returned 0x1
[0207.546] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0207.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13101f3) returned 0x0
[0207.547] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0207.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0207.547] SetCursor (hCursor=0x10003) returned 0x10003
[0207.547] TranslateMessage (lpMsg=0x53eef8) returned 0
[0207.547] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0207.547] GetKeyState (nVirtKey=1) returned -127
[0207.547] GetKeyState (nVirtKey=2) returned 0
[0207.547] GetKeyState (nVirtKey=4) returned 0
[0207.547] GetKeyState (nVirtKey=5) returned 0
[0207.547] GetKeyState (nVirtKey=6) returned 0
[0207.547] IsWindowVisible (hWnd=0x202c6) returned 1
[0207.547] IsWindowEnabled (hWnd=0x202c6) returned 1
[0207.547] SetFocus (hWnd=0x202c6) returned 0x202c6
[0207.547] GetFocus () returned 0x202c6
[0207.548] GetFocus () returned 0x202c6
[0207.548] GetFocus () returned 0x202c6
[0207.548] GetKeyState (nVirtKey=1) returned -127
[0207.548] GetKeyState (nVirtKey=2) returned 0
[0207.548] GetKeyState (nVirtKey=4) returned 0
[0207.548] GetKeyState (nVirtKey=5) returned 0
[0207.548] GetKeyState (nVirtKey=6) returned 0
[0207.548] GetCapture () returned 0x0
[0207.548] SetCapture (hWnd=0x202c6) returned 0x0
[0207.548] GetKeyState (nVirtKey=1) returned -127
[0207.548] GetKeyState (nVirtKey=2) returned 0
[0207.548] GetKeyState (nVirtKey=4) returned 0
[0207.548] GetKeyState (nVirtKey=5) returned 0
[0207.548] GetKeyState (nVirtKey=6) returned 0
[0207.548] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0207.548] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0207.548] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0207.548] IsWindowUnicode (hWnd=0x202c6) returned 1
[0207.548] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0207.549] TranslateMessage (lpMsg=0x53eef8) returned 0
[0207.549] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0207.549] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2373ff8, cPoints=0x1 | out: lpPoints=0x2373ff8) returned 25690608
[0207.549] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0207.549] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0207.549] UpdateWindow (hWnd=0x202c6) returned 1
[0207.549] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x10105d6
[0207.549] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0207.549] CreateCompatibleDC (hdc=0x10105d6) returned 0x480107c4
[0207.549] SelectObject (hdc=0x480107c4, h=0x1e0507b9) returned 0x85000f
[0207.549] GdipCreateFromHDC (hdc=0x480107c4, graphics=0x53e5f0) returned 0x0
[0207.550] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0207.550] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0207.550] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0207.550] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.550] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0207.550] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.550] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0207.550] LocalFree (hMem=0x89ea88) returned 0x0
[0207.550] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.550] GdipCreateRegion (region=0x53e638) returned 0x0
[0207.550] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.550] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0207.550] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0207.550] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcdb0dbd) returned 0x0
[0207.550] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.550] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0207.550] GetCurrentObject (hdc=0x480107c4, type=0x1) returned 0xb00017
[0207.550] GetCurrentObject (hdc=0x480107c4, type=0x2) returned 0x900010
[0207.550] GetCurrentObject (hdc=0x480107c4, type=0x7) returned 0x1e0507b9
[0207.551] GetCurrentObject (hdc=0x480107c4, type=0x6) returned 0x8a01c2
[0207.551] SaveDC (hdc=0x480107c4) returned 1
[0207.551] GetNearestColor (hdc=0x480107c4, color=0xff) returned 0xff
[0207.551] GetNearestColor (hdc=0x480107c4, color=0x55) returned 0x55
[0207.551] GetNearestColor (hdc=0x480107c4, color=0x0) returned 0x0
[0207.551] GetNearestColor (hdc=0x480107c4, color=0x55) returned 0x55
[0207.551] GetNearestColor (hdc=0x480107c4, color=0x0) returned 0x0
[0207.551] GetNearestColor (hdc=0x480107c4, color=0x8080ff) returned 0x8080ff
[0207.551] GetNearestColor (hdc=0x480107c4, color=0x7373e5) returned 0x7373e5
[0207.551] GetNearestColor (hdc=0x480107c4, color=0xe5) returned 0xe5
[0207.551] GetNearestColor (hdc=0x480107c4, color=0x0) returned 0x0
[0207.551] RestoreDC (hdc=0x480107c4, nSavedDC=-1) returned 1
[0207.551] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107c4) returned 0x0
[0207.551] IsAppThemed () returned 0x1
[0207.551] GetThemeAppProperties () returned 0x3
[0207.552] GetThemeAppProperties () returned 0x3
[0207.552] IsAppThemed () returned 0x1
[0207.552] GetThemeAppProperties () returned 0x3
[0207.552] GetThemeAppProperties () returned 0x3
[0207.552] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x2374714 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0207.552] IsAppThemed () returned 0x1
[0207.552] GetThemeAppProperties () returned 0x3
[0207.552] GetThemeAppProperties () returned 0x3
[0207.552] IsAppThemed () returned 0x1
[0207.552] GetThemeAppProperties () returned 0x3
[0207.552] GetThemeAppProperties () returned 0x3
[0207.552] IsAppThemed () returned 0x1
[0207.552] GetThemeAppProperties () returned 0x3
[0207.552] GetThemeAppProperties () returned 0x3
[0207.552] IsAppThemed () returned 0x1
[0207.552] GetThemeAppProperties () returned 0x3
[0207.552] GetThemeAppProperties () returned 0x3
[0207.552] IsThemePartDefined () returned 0x1
[0207.552] IsAppThemed () returned 0x1
[0207.553] GetThemeAppProperties () returned 0x3
[0207.553] GetThemeAppProperties () returned 0x3
[0207.553] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0207.553] IsAppThemed () returned 0x1
[0207.553] GetThemeAppProperties () returned 0x3
[0207.553] GetThemeAppProperties () returned 0x3
[0207.553] IsAppThemed () returned 0x1
[0207.553] GetThemeAppProperties () returned 0x3
[0207.553] GetThemeAppProperties () returned 0x3
[0207.553] IsThemePartDefined () returned 0x1
[0207.553] GdipCreateRegion (region=0x53e354) returned 0x0
[0207.553] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.553] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0207.553] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.553] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0207.553] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.553] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0207.553] LocalFree (hMem=0x89ea88) returned 0x0
[0207.553] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0207.553] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0207.553] LocalFree (hMem=0x89ec80) returned 0x0
[0207.553] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.553] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0207.554] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0207.554] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0207.554] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.554] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0207.554] GetCurrentObject (hdc=0x480107c4, type=0x1) returned 0xb00017
[0207.554] GetCurrentObject (hdc=0x480107c4, type=0x2) returned 0x900010
[0207.554] GetCurrentObject (hdc=0x480107c4, type=0x7) returned 0x1e0507b9
[0207.554] GetCurrentObject (hdc=0x480107c4, type=0x6) returned 0x8a01c2
[0207.554] SaveDC (hdc=0x480107c4) returned 1
[0207.554] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x660407a1
[0207.554] GetClipRgn (hdc=0x480107c4, hrgn=0x660407a1) returned 0
[0207.554] SelectClipRgn (hdc=0x480107c4, hrgn=0xd804053e) returned 2
[0207.554] DeleteObject (ho=0x660407a1) returned 1
[0207.554] DeleteObject (ho=0xd804053e) returned 1
[0207.554] OffsetViewportOrgEx (in: hdc=0x480107c4, x=0, y=0, lppt=0x2374e78 | out: lppt=0x2374e78) returned 1
[0207.554] DrawThemeParentBackground () returned 0x0
[0207.555] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0207.555] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0207.555] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0207.555] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0207.555] GetSystemMetrics (nIndex=42) returned 0
[0207.555] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0207.555] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0207.555] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0207.555] GetCurrentObject (hdc=0x480107c4, type=0x1) returned 0xb00017
[0207.555] GetCurrentObject (hdc=0x480107c4, type=0x2) returned 0x900010
[0207.555] GetCurrentObject (hdc=0x480107c4, type=0x7) returned 0x1e0507b9
[0207.555] GetCurrentObject (hdc=0x480107c4, type=0x6) returned 0x8a01c2
[0207.555] SaveDC (hdc=0x480107c4) returned 2
[0207.555] GetNearestColor (hdc=0x480107c4, color=0xff) returned 0xff
[0207.555] CreateSolidBrush (color=0xff) returned 0x2e10078d
[0207.556] FillRect (hDC=0x480107c4, lprc=0x53ddb8, hbr=0x2e10078d) returned 1
[0207.556] DeleteObject (ho=0x2e10078d) returned 1
[0207.556] RestoreDC (hdc=0x480107c4, nSavedDC=-1) returned 1
[0207.556] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0207.556] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0207.556] GetSystemMetrics (nIndex=42) returned 0
[0207.556] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0207.556] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0207.556] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0207.556] GetCurrentObject (hdc=0x480107c4, type=0x1) returned 0xb00017
[0207.556] GetCurrentObject (hdc=0x480107c4, type=0x2) returned 0x900010
[0207.556] GetCurrentObject (hdc=0x480107c4, type=0x7) returned 0x1e0507b9
[0207.556] GetCurrentObject (hdc=0x480107c4, type=0x6) returned 0x8a01c2
[0207.556] SaveDC (hdc=0x480107c4) returned 2
[0207.556] GetNearestColor (hdc=0x480107c4, color=0xff) returned 0xff
[0207.556] CreateSolidBrush (color=0xff) returned 0x2f10078d
[0207.556] FillRect (hDC=0x480107c4, lprc=0x53dd58, hbr=0x2f10078d) returned 1
[0207.557] DeleteObject (ho=0x2f10078d) returned 1
[0207.557] RestoreDC (hdc=0x480107c4, nSavedDC=-1) returned 1
[0207.557] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0207.557] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0207.557] GetSystemMetrics (nIndex=42) returned 0
[0207.557] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0207.557] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0207.557] RestoreDC (hdc=0x480107c4, nSavedDC=-1) returned 1
[0207.557] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107c4) returned 0x0
[0207.557] IsAppThemed () returned 0x1
[0207.557] GetThemeAppProperties () returned 0x3
[0207.557] GetThemeAppProperties () returned 0x3
[0207.557] IsAppThemed () returned 0x1
[0207.557] GetThemeAppProperties () returned 0x3
[0207.557] GetThemeAppProperties () returned 0x3
[0207.557] IsThemePartDefined () returned 0x1
[0207.557] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0207.557] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.557] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0207.558] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.558] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0207.558] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0207.558] LocalFree (hMem=0x89ea88) returned 0x0
[0207.558] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0207.558] LocalFree (hMem=0x89eee8) returned 0x0
[0207.558] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.558] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0207.558] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0207.558] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0207.558] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.558] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0207.558] GetCurrentObject (hdc=0x480107c4, type=0x1) returned 0xb00017
[0207.558] GetCurrentObject (hdc=0x480107c4, type=0x2) returned 0x900010
[0207.558] GetCurrentObject (hdc=0x480107c4, type=0x7) returned 0x1e0507b9
[0207.558] GetCurrentObject (hdc=0x480107c4, type=0x6) returned 0x8a01c2
[0207.558] SaveDC (hdc=0x480107c4) returned 1
[0207.558] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd904053e
[0207.558] GetClipRgn (hdc=0x480107c4, hrgn=0xd904053e) returned 0
[0207.558] SelectClipRgn (hdc=0x480107c4, hrgn=0x680407a1) returned 2
[0207.558] DeleteObject (ho=0xd904053e) returned 1
[0207.559] DeleteObject (ho=0x680407a1) returned 1
[0207.559] OffsetViewportOrgEx (in: hdc=0x480107c4, x=0, y=0, lppt=0x23758b4 | out: lppt=0x23758b4) returned 1
[0207.559] IsAppThemed () returned 0x1
[0207.559] GetThemeAppProperties () returned 0x3
[0207.559] GetThemeAppProperties () returned 0x3
[0207.559] DrawThemeBackground () returned 0x0
[0207.559] RestoreDC (hdc=0x480107c4, nSavedDC=-1) returned 1
[0207.559] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107c4) returned 0x0
[0207.559] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0207.559] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.559] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0207.559] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.559] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0207.559] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0207.559] LocalFree (hMem=0x89ec80) returned 0x0
[0207.559] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0207.559] LocalFree (hMem=0x89ea88) returned 0x0
[0207.559] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.559] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0207.559] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0207.559] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0207.560] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.560] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0207.560] GetCurrentObject (hdc=0x480107c4, type=0x1) returned 0xb00017
[0207.560] GetCurrentObject (hdc=0x480107c4, type=0x2) returned 0x900010
[0207.560] GetCurrentObject (hdc=0x480107c4, type=0x7) returned 0x1e0507b9
[0207.560] GetCurrentObject (hdc=0x480107c4, type=0x6) returned 0x8a01c2
[0207.560] SaveDC (hdc=0x480107c4) returned 1
[0207.560] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x690407a1
[0207.560] GetClipRgn (hdc=0x480107c4, hrgn=0x690407a1) returned 0
[0207.560] SelectClipRgn (hdc=0x480107c4, hrgn=0xda04053e) returned 2
[0207.560] DeleteObject (ho=0x690407a1) returned 1
[0207.560] DeleteObject (ho=0xda04053e) returned 1
[0207.560] OffsetViewportOrgEx (in: hdc=0x480107c4, x=0, y=0, lppt=0x2375bcc | out: lppt=0x2375bcc) returned 1
[0207.560] IsAppThemed () returned 0x1
[0207.560] GetThemeAppProperties () returned 0x3
[0207.560] GetThemeAppProperties () returned 0x3
[0207.560] GetThemeBackgroundContentRect () returned 0x0
[0207.560] RestoreDC (hdc=0x480107c4, nSavedDC=-1) returned 1
[0207.560] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107c4) returned 0x0
[0207.560] IsAppThemed () returned 0x1
[0207.560] GetThemeAppProperties () returned 0x3
[0207.560] GetThemeAppProperties () returned 0x3
[0207.560] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0207.561] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0207.561] GetCurrentObject (hdc=0x480107c4, type=0x1) returned 0xb00017
[0207.561] GetCurrentObject (hdc=0x480107c4, type=0x2) returned 0x900010
[0207.561] GetCurrentObject (hdc=0x480107c4, type=0x7) returned 0x1e0507b9
[0207.561] GetCurrentObject (hdc=0x480107c4, type=0x6) returned 0x8a01c2
[0207.561] SaveDC (hdc=0x480107c4) returned 1
[0207.561] GetTextAlign (hdc=0x480107c4) returned 0x0
[0207.561] GetTextColor (hdc=0x480107c4) returned 0x0
[0207.561] GetCurrentObject (hdc=0x480107c4, type=0x6) returned 0x8a01c2
[0207.561] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0207.561] SelectObject (hdc=0x480107c4, h=0x450a0799) returned 0x8a01c2
[0207.561] GetBkMode (hdc=0x480107c4) returned 2
[0207.561] SetBkMode (hdc=0x480107c4, mode=1) returned 2
[0207.561] DrawTextExW (in: hdc=0x480107c4, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x2375f6c | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0207.561] DrawTextExW (in: hdc=0x480107c4, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x2375f6c | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0207.562] RestoreDC (hdc=0x480107c4, nSavedDC=-1) returned 1
[0207.562] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107c4) returned 0x0
[0207.562] GetFocus () returned 0x202c6
[0207.562] IsAppThemed () returned 0x1
[0207.562] GetThemeAppProperties () returned 0x3
[0207.562] GetThemeAppProperties () returned 0x3
[0207.562] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0207.562] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x480107c4, x1=0, y1=0, rop=0xcc0020) returned 1
[0207.562] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107c4) returned 0x0
[0207.562] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0207.563] SelectObject (hdc=0x480107c4, h=0x85000f) returned 0x1e0507b9
[0207.563] DeleteDC (hdc=0x480107c4) returned 1
[0207.563] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0207.563] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0207.563] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23760c8, cPoints=0x1 | out: lpPoints=0x23760c8) returned 25690608
[0207.563] WindowFromPoint (Point=0x249) returned 0x202c6
[0207.563] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19e0249) returned 0x1
[0207.563] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0207.563] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0207.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.564] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0207.565] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.565] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0207.566] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.566] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0207.566] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0207.566] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e888) returned 0x0
[0207.566] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0207.566] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0207.566] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0207.566] GetSystemMetrics (nIndex=5) returned 1
[0207.566] GetSystemMetrics (nIndex=6) returned 1
[0207.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.567] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0207.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.567] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0207.633] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0207.634] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0207.634] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0207.635] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.635] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0207.635] GetSystemMetrics (nIndex=5) returned 1
[0207.635] GetSystemMetrics (nIndex=6) returned 1
[0207.635] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.635] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0207.636] GetSystemMetrics (nIndex=5) returned 1
[0207.636] GetSystemMetrics (nIndex=6) returned 1
[0207.636] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.636] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0207.636] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.637] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0207.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.637] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0207.638] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.638] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0207.638] GetSystemMetrics (nIndex=59) returned 1460
[0207.638] GetSystemMetrics (nIndex=60) returned 920
[0207.638] GetSystemMetrics (nIndex=34) returned 136
[0207.638] GetSystemMetrics (nIndex=35) returned 39
[0207.638] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.638] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0207.639] GetCurrentThreadId () returned 0x11d0
[0207.639] GetCurrentThreadId () returned 0x11d0
[0207.639] GetCurrentThreadId () returned 0x11d0
[0207.639] GetCurrentThreadId () returned 0x11d0
[0207.639] GetCurrentThreadId () returned 0x11d0
[0207.639] GetCurrentThreadId () returned 0x11d0
[0207.639] GetCurrentThreadId () returned 0x11d0
[0207.639] GetCurrentThreadId () returned 0x11d0
[0207.639] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.639] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0207.639] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0207.639] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0207.640] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.640] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0207.640] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.640] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0207.640] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1002d2
[0207.641] SetWindowLongW (hWnd=0x1002d2, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0207.641] GetWindowLongW (hWnd=0x1002d2, nIndex=-4) returned 1950089536
[0207.641] SetWindowLongW (hWnd=0x1002d2, nIndex=-4, dwNewLong=79645102) returned 1950089536
[0207.642] GetWindowLongW (hWnd=0x1002d2, nIndex=-4) returned 79645102
[0207.642] GetWindowLongW (hWnd=0x1002d2, nIndex=-16) returned 113311744
[0207.642] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002d2, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0207.642] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002d2, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0207.642] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002d2, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0207.643] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002d2, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0207.643] GetClientRect (in: hWnd=0x1002d2, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0207.643] GetWindowRect (in: hWnd=0x1002d2, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0207.643] SetWindowTextW (hWnd=0x1002d2, lpString="WindowsFormsParkingWindow") returned 1
[0207.643] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002d2, Msg=0xc, wParam=0x0, lParam=0x22c98b8) returned 0x1
[0207.644] GetParent (hWnd=0x1002d2) returned 0x0
[0207.644] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0207.644] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1002d2, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xc02b4
[0207.644] SetWindowLongW (hWnd=0xc02b4, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0207.644] GetWindowLongW (hWnd=0xc02b4, nIndex=-4) returned 1868147648
[0207.645] SetWindowLongW (hWnd=0xc02b4, nIndex=-4, dwNewLong=79641318) returned 1868147648
[0207.645] GetWindowLongW (hWnd=0xc02b4, nIndex=-4) returned 79641318
[0207.645] GetWindowLongW (hWnd=0xc02b4, nIndex=-16) returned 1174405133
[0207.645] GetWindowLongW (hWnd=0xc02b4, nIndex=-12) returned 0
[0207.645] SetWindowLongW (hWnd=0xc02b4, nIndex=-12, dwNewLong=787124) returned 0
[0207.645] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0207.652] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0207.653] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0207.653] GetClientRect (in: hWnd=0xc02b4, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0207.653] GetWindowRect (in: hWnd=0xc02b4, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0207.653] GetParent (hWnd=0xc02b4) returned 0x1002d2
[0207.653] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1002d2, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0207.653] SetWindowTextW (hWnd=0xc02b4, lpString="Enter password: ") returned 1
[0207.654] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0207.654] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0207.654] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0207.654] GetClientRect (in: hWnd=0xc02b4, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0207.654] GetWindowRect (in: hWnd=0xc02b4, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0207.654] GetParent (hWnd=0xc02b4) returned 0x1002d2
[0207.654] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1002d2, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0207.654] SendMessageW (hWnd=0xc02b4, Msg=0x2210, wParam=0x2b40001, lParam=0xc02b4) returned 0x0
[0207.654] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x2210, wParam=0x2b40001, lParam=0xc02b4) returned 0x0
[0207.655] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0207.655] GetParent (hWnd=0xc02b4) returned 0x1002d2
[0207.655] GdipCreateFromHWND (hwnd=0xc02b4, graphics=0x53e994) returned 0x0
[0207.655] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0207.655] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0207.655] GetProcessWindowStation () returned 0x13c
[0207.655] GetCapture () returned 0x202c6
[0207.656] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0207.656] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0207.656] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0207.656] ReleaseCapture () returned 1
[0207.656] GetActiveWindow () returned 0x70036
[0207.656] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0207.657] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.657] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0207.657] GetCursorPos (in: lpPoint=0x22d5f40 | out: lpPoint=0x22d5f40*(x=585, y=414)) returned 1
[0207.657] MonitorFromPoint (pt=0x249, dwFlags=0x19e) returned 0x10001
[0207.657] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0207.657] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x4b0107c4
[0207.657] GetDeviceCaps (hdc=0x4b0107c4, index=12) returned 32
[0207.657] GetDeviceCaps (hdc=0x4b0107c4, index=14) returned 1
[0207.658] DeleteDC (hdc=0x4b0107c4) returned 1
[0207.658] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0207.658] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0207.658] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x502de
[0207.659] SetWindowLongW (hWnd=0x502de, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0207.659] GetWindowLongW (hWnd=0x502de, nIndex=-4) returned 1950089536
[0207.659] SetWindowLongW (hWnd=0x502de, nIndex=-4, dwNewLong=79641678) returned 1950089536
[0207.659] GetWindowLongW (hWnd=0x502de, nIndex=-4) returned 79641678
[0207.659] GetWindowLongW (hWnd=0x502de, nIndex=-16) returned 113770496
[0207.660] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0207.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0207.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0207.661] GetClientRect (in: hWnd=0x502de, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0207.662] GetWindowRect (in: hWnd=0x502de, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0207.662] SetWindowTextW (hWnd=0x502de, lpString="Ransomware") returned 1
[0207.662] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xc, wParam=0x0, lParam=0x22cac20) returned 0x1
[0207.663] GetStartupInfoW (in: lpStartupInfo=0x22d627c | out: lpStartupInfo=0x22d627c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0207.665] GetParent (hWnd=0x502de) returned 0x0
[0207.665] SetWindowLongW (hWnd=0x502de, nIndex=-8, dwNewLong=0) returned 0
[0207.666] SendMessageW (hWnd=0x502de, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0207.666] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0207.666] SendMessageW (hWnd=0x502de, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0207.666] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0207.666] GetSystemMenu (hWnd=0x502de, bRevert=0) returned 0x100217
[0207.667] GetWindowPlacement (in: hWnd=0x502de, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0207.674] EnableMenuItem (hMenu=0x100217, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0207.674] EnableMenuItem (hMenu=0x100217, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0207.674] EnableMenuItem (hMenu=0x100217, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0207.674] EnableMenuItem (hMenu=0x100217, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0207.674] EnableMenuItem (hMenu=0x100217, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0207.675] GetClientRect (in: hWnd=0x502de, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0207.675] GetClientRect (in: hWnd=0x502de, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0207.675] GetWindowRect (in: hWnd=0x502de, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0207.675] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.680] GetWindowLongW (hWnd=0x502de, nIndex=-16) returned 113770496
[0207.680] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.680] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.680] GetSystemMetrics (nIndex=42) returned 0
[0207.680] GetWindowTextW (in: hWnd=0x502de, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.680] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0207.680] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.680] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.680] GetSystemMetrics (nIndex=42) returned 0
[0207.680] GetWindowTextW (in: hWnd=0x502de, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.680] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0207.680] GetCursorPos (in: lpPoint=0x22d63f0 | out: lpPoint=0x22d63f0*(x=585, y=414)) returned 1
[0207.680] MonitorFromPoint (pt=0x249, dwFlags=0x19e) returned 0x10001
[0207.681] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0207.681] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x4f0107c4
[0207.681] GetDeviceCaps (hdc=0x4f0107c4, index=12) returned 32
[0207.681] GetDeviceCaps (hdc=0x4f0107c4, index=14) returned 1
[0207.681] DeleteDC (hdc=0x4f0107c4) returned 1
[0207.681] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0207.681] GetWindowLongW (hWnd=0x502de, nIndex=-16) returned 113770496
[0207.681] GetWindowLongW (hWnd=0x502de, nIndex=-20) returned 327937
[0207.681] SetWindowLongW (hWnd=0x502de, nIndex=-16, dwNewLong=46661632) returned 113770496
[0207.682] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0207.682] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0207.683] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0207.683] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0207.683] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0207.684] SetWindowLongW (hWnd=0x502de, nIndex=-20, dwNewLong=327681) returned 327937
[0207.684] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0207.705] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0207.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0207.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0207.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0207.706] SetWindowPos (hWnd=0x502de, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0207.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0207.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0207.707] GetWindowPlacement (in: hWnd=0x502de, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0207.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0207.707] GetClientRect (in: hWnd=0x502de, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0207.707] GetWindowRect (in: hWnd=0x502de, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0207.708] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0207.708] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0207.708] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0207.709] RedrawWindow (hWnd=0x502de, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0207.709] GetSystemMenu (hWnd=0x502de, bRevert=0) returned 0x100217
[0207.709] GetWindowPlacement (in: hWnd=0x502de, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0207.709] EnableMenuItem (hMenu=0x100217, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0207.709] EnableMenuItem (hMenu=0x100217, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0207.709] EnableMenuItem (hMenu=0x100217, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0207.710] EnableMenuItem (hMenu=0x100217, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0207.710] EnableMenuItem (hMenu=0x100217, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0207.710] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0207.710] GetWindowLongW (hWnd=0x502de, nIndex=-8) returned 0
[0207.710] SetWindowLongW (hWnd=0x502de, nIndex=-8, dwNewLong=458806) returned 0
[0207.711] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0207.711] GetProcessWindowStation () returned 0x13c
[0207.711] GetCurrentThreadId () returned 0x11d0
[0207.712] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3db6, lParam=0x0) returned 1
[0207.712] IsWindowVisible (hWnd=0x502de) returned 0
[0207.712] IsWindowVisible (hWnd=0x70036) returned 1
[0207.712] IsWindowEnabled (hWnd=0x70036) returned 1
[0207.712] IsWindowVisible (hWnd=0x602b6) returned 0
[0207.712] IsWindowVisible (hWnd=0x901f8) returned 0
[0207.712] IsWindowVisible (hWnd=0x202d0) returned 0
[0207.712] IsWindowVisible (hWnd=0x202d4) returned 0
[0207.712] GetActiveWindow () returned 0x70036
[0207.713] GetFocus () returned 0x202c6
[0207.713] IsWindow (hWnd=0x70036) returned 1
[0207.713] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0207.713] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0207.714] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0207.714] GetWindowLongW (hWnd=0x502de, nIndex=-8) returned 458806
[0207.714] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0207.714] GetCurrentThreadId () returned 0x11d0
[0207.714] GetWindowLongW (hWnd=0x502de, nIndex=-8) returned 458806
[0207.714] IsWindowEnabled (hWnd=0x70036) returned 0
[0207.714] IsWindowEnabled (hWnd=0x502de) returned 1
[0207.714] ShowWindow (hWnd=0x502de, nCmdShow=5) returned 0
[0207.715] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0207.715] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0207.715] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.716] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0207.716] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x502de, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1002d6
[0207.717] SetWindowLongW (hWnd=0x1002d6, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0207.717] GetWindowLongW (hWnd=0x1002d6, nIndex=-4) returned 1868026976
[0207.717] SetWindowLongW (hWnd=0x1002d6, nIndex=-4, dwNewLong=79641838) returned 1868026976
[0207.717] GetWindowLongW (hWnd=0x1002d6, nIndex=-4) returned 79641838
[0207.717] GetWindowLongW (hWnd=0x1002d6, nIndex=-16) returned 1174470848
[0207.717] GetWindowLongW (hWnd=0x1002d6, nIndex=-12) returned 0
[0207.717] SetWindowLongW (hWnd=0x1002d6, nIndex=-12, dwNewLong=1049302) returned 0
[0207.717] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0207.718] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0207.719] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0207.720] SendMessageW (hWnd=0x1002d6, Msg=0x2055, wParam=0x1002d6, lParam=0x3) returned 0x2
[0207.720] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0207.720] GetWindow (hWnd=0x1002d6, uCmd=0x3) returned 0x0
[0207.720] GetClientRect (in: hWnd=0x1002d6, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0207.720] GetWindowRect (in: hWnd=0x1002d6, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0207.720] GetParent (hWnd=0x1002d6) returned 0x502de
[0207.720] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502de, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0207.720] SendMessageW (hWnd=0x1002d6, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0207.720] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0207.720] SendMessageW (hWnd=0x1002d6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0207.720] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0207.721] GetSystemMetrics (nIndex=5) returned 1
[0207.721] GetSystemMetrics (nIndex=6) returned 1
[0207.721] SendMessageW (hWnd=0x1002d6, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0207.721] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0207.721] SendMessageW (hWnd=0x1002d6, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0207.721] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0207.721] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0207.722] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0207.722] GetClientRect (in: hWnd=0x1002d6, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0207.722] GetWindowRect (in: hWnd=0x1002d6, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0207.722] GetParent (hWnd=0x1002d6) returned 0x502de
[0207.722] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502de, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0207.722] SendMessageW (hWnd=0x1002d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1002d6) returned 0x0
[0207.722] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1002d6) returned 0x0
[0207.722] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0207.722] GetParent (hWnd=0x1002d6) returned 0x502de
[0207.722] GetParent (hWnd=0xc02b4) returned 0x1002d2
[0207.722] SetParent (hWndChild=0xc02b4, hWndNewParent=0x502de) returned 0x1002d2
[0207.722] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0207.723] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0207.723] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0207.723] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0207.723] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0207.723] GetClientRect (in: hWnd=0xc02b4, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0207.723] GetWindowRect (in: hWnd=0xc02b4, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0207.723] GetParent (hWnd=0xc02b4) returned 0x502de
[0207.723] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502de, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0207.723] GetClientRect (in: hWnd=0xc02b4, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0207.723] GetWindowRect (in: hWnd=0xc02b4, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0207.723] GetParent (hWnd=0xc02b4) returned 0x502de
[0207.723] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502de, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0207.724] GetParent (hWnd=0xc02b4) returned 0x502de
[0207.724] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0207.724] GetWindow (hWnd=0xc02b4, uCmd=0x3) returned 0x0
[0207.724] SetWindowPos (hWnd=0xc02b4, hWndInsertAfter=0x1002d6, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0207.724] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0207.724] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0207.725] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0207.725] GetClientRect (in: hWnd=0xc02b4, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0207.725] GetWindowRect (in: hWnd=0xc02b4, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0207.725] GetParent (hWnd=0xc02b4) returned 0x502de
[0207.725] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502de, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0207.725] GetParent (hWnd=0xc02b4) returned 0x502de
[0207.725] GetWindow (hWnd=0xc02b4, uCmd=0x3) returned 0x1002d6
[0207.725] GetWindowThreadProcessId (in: hWnd=0xc02b4, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0207.725] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0207.725] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.726] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0207.726] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x502de, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x13013e
[0207.727] SetWindowLongW (hWnd=0x13013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0207.727] GetWindowLongW (hWnd=0x13013e, nIndex=-4) returned 1868032000
[0207.727] SetWindowLongW (hWnd=0x13013e, nIndex=-4, dwNewLong=79641958) returned 1868032000
[0207.728] GetWindowLongW (hWnd=0x13013e, nIndex=-4) returned 79641958
[0207.728] GetWindowLongW (hWnd=0x13013e, nIndex=-16) returned 1174470667
[0207.728] GetWindowLongW (hWnd=0x13013e, nIndex=-12) returned 0
[0207.728] SetWindowLongW (hWnd=0x13013e, nIndex=-12, dwNewLong=1245502) returned 0
[0207.728] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0207.728] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0207.729] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0207.729] SendMessageW (hWnd=0x13013e, Msg=0x2055, wParam=0x13013e, lParam=0x3) returned 0x2
[0207.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0207.730] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0207.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0207.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0207.730] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0207.730] RedrawWindow (hWnd=0x1002d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0207.730] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0207.730] RedrawWindow (hWnd=0xc02b4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0207.730] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0207.730] RedrawWindow (hWnd=0x13013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0207.730] RedrawWindow (hWnd=0x502de, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0207.730] GetWindow (hWnd=0x13013e, uCmd=0x3) returned 0xc02b4
[0207.731] GetClientRect (in: hWnd=0x13013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0207.731] GetWindowRect (in: hWnd=0x13013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0207.731] GetParent (hWnd=0x13013e) returned 0x502de
[0207.731] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502de, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0207.731] SetWindowTextW (hWnd=0x13013e, lpString="OK") returned 1
[0207.731] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0xc, wParam=0x0, lParam=0x22cbcac) returned 0x1
[0207.731] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0207.731] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0207.731] GetClientRect (in: hWnd=0x13013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0207.731] GetWindowRect (in: hWnd=0x13013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0207.731] GetParent (hWnd=0x13013e) returned 0x502de
[0207.731] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502de, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0207.732] SendMessageW (hWnd=0x13013e, Msg=0x2210, wParam=0x13e0001, lParam=0x13013e) returned 0x0
[0207.732] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x2210, wParam=0x13e0001, lParam=0x13013e) returned 0x0
[0207.732] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0207.732] GetParent (hWnd=0x13013e) returned 0x502de
[0207.732] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0207.732] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.733] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0207.733] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x502de, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xf02c8
[0207.733] SetWindowLongW (hWnd=0xf02c8, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0207.733] GetWindowLongW (hWnd=0xf02c8, nIndex=-4) returned 1868032000
[0207.734] SetWindowLongW (hWnd=0xf02c8, nIndex=-4, dwNewLong=79641478) returned 1868032000
[0207.734] GetWindowLongW (hWnd=0xf02c8, nIndex=-4) returned 79641478
[0207.734] GetWindowLongW (hWnd=0xf02c8, nIndex=-16) returned 1174470667
[0207.734] GetWindowLongW (hWnd=0xf02c8, nIndex=-12) returned 0
[0207.734] SetWindowLongW (hWnd=0xf02c8, nIndex=-12, dwNewLong=983752) returned 0
[0207.734] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0207.734] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0207.735] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0207.735] SendMessageW (hWnd=0xf02c8, Msg=0x2055, wParam=0xf02c8, lParam=0x3) returned 0x2
[0207.735] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0207.736] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0207.736] GetWindow (hWnd=0xf02c8, uCmd=0x3) returned 0x13013e
[0207.736] GetClientRect (in: hWnd=0xf02c8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0207.736] GetWindowRect (in: hWnd=0xf02c8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0207.736] GetParent (hWnd=0xf02c8) returned 0x502de
[0207.736] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502de, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0207.736] SetWindowTextW (hWnd=0xf02c8, lpString="Cancel") returned 1
[0207.736] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0xc, wParam=0x0, lParam=0x22cbea8) returned 0x1
[0207.736] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0207.736] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0207.736] GetClientRect (in: hWnd=0xf02c8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0207.737] GetWindowRect (in: hWnd=0xf02c8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0207.737] GetParent (hWnd=0xf02c8) returned 0x502de
[0207.737] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502de, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0207.737] SendMessageW (hWnd=0xf02c8, Msg=0x2210, wParam=0x2c80001, lParam=0xf02c8) returned 0x0
[0207.737] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0x2210, wParam=0x2c80001, lParam=0xf02c8) returned 0x0
[0207.737] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0207.737] GetParent (hWnd=0xf02c8) returned 0x502de
[0207.737] GetDC (hWnd=0x0) returned 0xf0105ee
[0207.737] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e320) returned 0x0
[0207.738] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0207.738] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0207.738] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0207.738] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0207.738] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0207.738] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0207.739] GetWindowLongW (hWnd=0x502de, nIndex=-8) returned 458806
[0207.739] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0207.739] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0207.739] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x560107c4
[0207.739] GetDeviceCaps (hdc=0x560107c4, index=12) returned 32
[0207.739] GetDeviceCaps (hdc=0x560107c4, index=14) returned 1
[0207.739] DeleteDC (hdc=0x560107c4) returned 1
[0207.739] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0207.739] GetWindowThreadProcessId (in: hWnd=0x502de, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0207.739] GetCurrentThreadId () returned 0x11d0
[0207.739] PostMessageW (hWnd=0x502de, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0207.739] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.740] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.740] GetSystemMetrics (nIndex=42) returned 0
[0207.740] GetWindowTextW (in: hWnd=0x502de, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.740] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0207.740] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0207.741] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0207.741] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0207.741] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0207.755] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x502de) returned 0x1
[0207.757] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0207.757] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0207.758] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0207.758] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0207.760] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0207.761] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0207.761] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0207.762] GetFocus () returned 0x202c6
[0207.762] IsChild (hWndParent=0x502de, hWnd=0x202c6) returned 0
[0207.762] GetFocus () returned 0x202c6
[0207.762] SetFocus (hWnd=0x1002d6) returned 0x202c6
[0207.763] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1002d6, lParam=0x0) returned 0x0
[0207.763] GetCapture () returned 0x0
[0207.763] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0207.764] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0207.765] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0207.767] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0207.767] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0207.767] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0207.767] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0207.768] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0207.768] GetParent (hWnd=0x502de) returned 0x0
[0207.768] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0207.768] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0207.768] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0207.769] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0207.769] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0207.769] GetSysColorBrush (nIndex=5) returned 0x100079
[0207.770] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0207.770] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0207.771] SendMessageW (hWnd=0x1002d6, Msg=0x2111, wParam=0x10002d6, lParam=0x1002d6) returned 0x0
[0207.771] SendMessageW (hWnd=0x1002d6, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0207.775] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0207.775] GetKeyState (nVirtKey=1) returned 1
[0207.775] GetKeyState (nVirtKey=2) returned 0
[0207.775] GetKeyState (nVirtKey=4) returned 0
[0207.775] GetKeyState (nVirtKey=5) returned 0
[0207.775] GetKeyState (nVirtKey=6) returned 0
[0207.775] GetWindowTextLengthW (hWnd=0x1002d6) returned 0
[0207.775] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0207.775] SendMessageW (hWnd=0x1002d6, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0207.775] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0207.776] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0207.776] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0207.781] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0207.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0207.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0207.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0207.782] GetWindowPlacement (in: hWnd=0x502de, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0207.783] GetClientRect (in: hWnd=0x502de, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0207.783] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.783] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.783] GetSystemMetrics (nIndex=42) returned 0
[0207.783] GetWindowTextW (in: hWnd=0x502de, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.783] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0207.783] GetClientRect (in: hWnd=0x502de, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0207.783] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017
[0207.783] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010
[0207.783] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0xffffffffaf0507cb
[0207.783] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2
[0207.783] SaveDC (hdc=0x60100ce) returned 1
[0207.783] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0
[0207.783] CreateSolidBrush (color=0xf0f0f0) returned 0x3010078d
[0207.783] FillRect (hDC=0x60100ce, lprc=0x53e250, hbr=0x3010078d) returned 1
[0207.784] DeleteObject (ho=0x3010078d) returned 1
[0207.784] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1
[0207.784] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0207.784] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0207.784] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0207.785] GetWindowPlacement (in: hWnd=0x502de, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0207.785] GetClientRect (in: hWnd=0x502de, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0207.785] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.785] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.785] GetSystemMetrics (nIndex=42) returned 0
[0207.785] GetWindowTextW (in: hWnd=0x502de, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.785] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0207.785] GetClientRect (in: hWnd=0x502de, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0207.785] GetCurrentObject (hdc=0x6c0107c4, type=0x1) returned 0xb00017
[0207.785] GetCurrentObject (hdc=0x6c0107c4, type=0x2) returned 0x900010
[0207.785] GetCurrentObject (hdc=0x6c0107c4, type=0x7) returned 0xffffffffc8050535
[0207.785] GetCurrentObject (hdc=0x6c0107c4, type=0x6) returned 0x8a01c2
[0207.786] SaveDC (hdc=0x6c0107c4) returned 1
[0207.786] GetNearestColor (hdc=0x6c0107c4, color=0xf0f0f0) returned 0xf0f0f0
[0207.786] CreateSolidBrush (color=0xf0f0f0) returned 0x3110078d
[0207.786] FillRect (hDC=0x6c0107c4, lprc=0x53dc18, hbr=0x3110078d) returned 1
[0207.786] DeleteObject (ho=0x3110078d) returned 1
[0207.786] RestoreDC (hdc=0x6c0107c4, nSavedDC=-1) returned 1
[0207.786] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.786] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.786] GetSystemMetrics (nIndex=42) returned 0
[0207.786] GetWindowTextW (in: hWnd=0x502de, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.786] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0207.786] GetClientRect (in: hWnd=0x502de, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0207.786] GetCurrentObject (hdc=0x6c0107c4, type=0x1) returned 0xb00017
[0207.786] GetCurrentObject (hdc=0x6c0107c4, type=0x2) returned 0x900010
[0207.786] GetCurrentObject (hdc=0x6c0107c4, type=0x7) returned 0xffffffffc8050535
[0207.786] GetCurrentObject (hdc=0x6c0107c4, type=0x6) returned 0x8a01c2
[0207.786] SaveDC (hdc=0x6c0107c4) returned 1
[0207.786] GetNearestColor (hdc=0x6c0107c4, color=0xf0f0f0) returned 0xf0f0f0
[0207.786] CreateSolidBrush (color=0xf0f0f0) returned 0x3210078d
[0207.787] FillRect (hDC=0x6c0107c4, lprc=0x53dbb8, hbr=0x3210078d) returned 1
[0207.787] DeleteObject (ho=0x3210078d) returned 1
[0207.787] RestoreDC (hdc=0x6c0107c4, nSavedDC=-1) returned 1
[0207.796] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.796] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.796] GetSystemMetrics (nIndex=42) returned 0
[0207.796] GetWindowTextW (in: hWnd=0x502de, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.796] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0207.797] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0207.798] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0207.798] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0207.798] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0207.798] GetStockObject (i=5) returned 0x900015
[0207.799] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0207.799] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0207.799] GetStockObject (i=5) returned 0x900015
[0207.799] GetWindowPlacement (in: hWnd=0x502de, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0207.799] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0207.799] GetClientRect (in: hWnd=0x502de, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0207.799] GetWindowRect (in: hWnd=0x502de, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0207.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0207.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0207.801] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0207.801] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0207.801] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0207.801] GetClientRect (in: hWnd=0x502de, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0207.801] GetWindowRect (in: hWnd=0x502de, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0207.801] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.801] IsWindowUnicode (hWnd=0x502de) returned 1
[0207.801] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.802] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.802] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.802] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0207.802] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.802] IsWindowUnicode (hWnd=0x502de) returned 1
[0207.802] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.802] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.802] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.802] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.803] MapWindowPoints (in: hWndFrom=0xc02b4, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0207.803] IsWindowUnicode (hWnd=0xc02b4) returned 1
[0207.803] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.803] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.803] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.803] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.803] IsWindowUnicode (hWnd=0x202c6) returned 1
[0207.804] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.804] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.804] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.804] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0207.804] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0207.804] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.804] MapWindowPoints (in: hWndFrom=0xc02b4, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0207.804] IsWindowUnicode (hWnd=0xc02b4) returned 1
[0207.804] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.804] MapWindowPoints (in: hWndFrom=0xc02b4, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0207.804] SetCursor (hCursor=0x10003) returned 0x10003
[0207.804] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.804] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.804] _TrackMouseEvent (in: lpEventTrack=0x22d796c | out: lpEventTrack=0x22d796c) returned 1
[0207.804] SendMessageW (hWnd=0xc02b4, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0207.804] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0207.805] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x200, wParam=0x0, lParam=0x170020) returned 0x0
[0207.805] GetKeyState (nVirtKey=1) returned 1
[0207.805] GetKeyState (nVirtKey=2) returned 0
[0207.805] GetKeyState (nVirtKey=4) returned 0
[0207.805] GetKeyState (nVirtKey=5) returned 0
[0207.805] GetKeyState (nVirtKey=6) returned 0
[0207.805] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.805] IsWindowUnicode (hWnd=0x502de) returned 1
[0207.805] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.805] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.805] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.805] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.806] IsWindowUnicode (hWnd=0x502de) returned 1
[0207.806] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.806] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.806] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.806] BeginPaint (in: hWnd=0x502de, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x8b010786
[0207.806] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0207.806] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.807] GetSystemMetrics (nIndex=42) returned 0
[0207.807] GetWindowTextW (in: hWnd=0x502de, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.807] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0207.807] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0207.807] EndPaint (hWnd=0x502de, lpPaint=0x53e30c) returned 1
[0207.807] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.807] IsWindowUnicode (hWnd=0x1002d6) returned 1
[0207.807] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.807] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.807] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0207.807] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0207.808] SetTextColor (hdc=0x6d0107c4, color=0x0) returned 0x0
[0207.808] SetBkColor (hdc=0x6d0107c4, color=0xffffff) returned 0xffffff
[0207.809] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.809] IsWindowUnicode (hWnd=0xc02b4) returned 1
[0207.809] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.809] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.809] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.809] BeginPaint (in: hWnd=0xc02b4, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x10105d6
[0207.809] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0207.809] CreateCompatibleDC (hdc=0x10105d6) returned 0x860107c5
[0207.809] SelectObject (hdc=0x860107c5, h=0x1e0507b9) returned 0x85000f
[0207.809] GdipCreateFromHDC (hdc=0x860107c5, graphics=0x53e30c) returned 0x0
[0207.809] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0207.809] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0207.809] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0207.809] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.809] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0207.810] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0207.810] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0207.810] LocalFree (hMem=0x89ec80) returned 0x0
[0207.810] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.810] GdipCreateRegion (region=0x53e354) returned 0x0
[0207.810] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.810] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0207.810] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0207.810] GetWindowTextLengthW (hWnd=0xc02b4) returned 16
[0207.810] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0207.810] GetSystemMetrics (nIndex=42) returned 0
[0207.810] GetWindowTextW (in: hWnd=0xc02b4, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0207.810] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0207.810] GetClientRect (in: hWnd=0xc02b4, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0207.810] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0207.810] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0207.810] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0207.811] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.811] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0207.811] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0207.811] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0207.811] LocalFree (hMem=0x89ee40) returned 0x0
[0207.811] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0207.811] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0207.811] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0207.811] LocalFree (hMem=0x89ee40) returned 0x0
[0207.811] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.811] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0207.811] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0207.811] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0207.811] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0207.811] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0207.811] GetCurrentObject (hdc=0x860107c5, type=0x1) returned 0xb00017
[0207.811] GetCurrentObject (hdc=0x860107c5, type=0x2) returned 0x900010
[0207.811] GetCurrentObject (hdc=0x860107c5, type=0x7) returned 0x1e0507b9
[0207.811] GetCurrentObject (hdc=0x860107c5, type=0x6) returned 0x8a01c2
[0207.811] SaveDC (hdc=0x860107c5) returned 1
[0207.812] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8b04051e
[0207.812] GetClipRgn (hdc=0x860107c5, hrgn=0x8b04051e) returned 0
[0207.812] SelectClipRgn (hdc=0x860107c5, hrgn=0xdf04053e) returned 2
[0207.812] DeleteObject (ho=0x8b04051e) returned 1
[0207.812] DeleteObject (ho=0xdf04053e) returned 1
[0207.812] OffsetViewportOrgEx (in: hdc=0x860107c5, x=0, y=0, lppt=0x22d7e50 | out: lppt=0x22d7e50) returned 1
[0207.812] GetNearestColor (hdc=0x860107c5, color=0xf0f0f0) returned 0xf0f0f0
[0207.812] CreateSolidBrush (color=0xf0f0f0) returned 0x3310078d
[0207.812] FillRect (hDC=0x860107c5, lprc=0x53e1f4, hbr=0x3310078d) returned 1
[0207.812] DeleteObject (ho=0x3310078d) returned 1
[0207.812] RestoreDC (hdc=0x860107c5, nSavedDC=-1) returned 1
[0207.812] GdipReleaseDC (graphics=0x5d92c30, hdc=0x860107c5) returned 0x0
[0207.812] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcd50dbd) returned 0x0
[0207.812] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.812] GetWindowTextLengthW (hWnd=0xc02b4) returned 16
[0207.812] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0207.812] GetSystemMetrics (nIndex=42) returned 0
[0207.812] GetWindowTextW (in: hWnd=0xc02b4, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0207.812] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0207.813] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0207.813] GetCurrentObject (hdc=0x860107c5, type=0x1) returned 0xb00017
[0207.813] GetCurrentObject (hdc=0x860107c5, type=0x2) returned 0x900010
[0207.813] GetCurrentObject (hdc=0x860107c5, type=0x7) returned 0x1e0507b9
[0207.813] GetCurrentObject (hdc=0x860107c5, type=0x6) returned 0x8a01c2
[0207.813] SaveDC (hdc=0x860107c5) returned 1
[0207.813] GetNearestColor (hdc=0x860107c5, color=0x0) returned 0x0
[0207.813] RestoreDC (hdc=0x860107c5, nSavedDC=-1) returned 1
[0207.813] GdipReleaseDC (graphics=0x5d92c30, hdc=0x860107c5) returned 0x0
[0207.813] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0207.814] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0207.814] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0207.814] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x22d8158 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0207.814] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0207.814] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0207.814] GetCurrentObject (hdc=0x860107c5, type=0x1) returned 0xb00017
[0207.814] GetCurrentObject (hdc=0x860107c5, type=0x2) returned 0x900010
[0207.814] GetCurrentObject (hdc=0x860107c5, type=0x7) returned 0x1e0507b9
[0207.814] GetCurrentObject (hdc=0x860107c5, type=0x6) returned 0x8a01c2
[0207.814] SaveDC (hdc=0x860107c5) returned 1
[0207.814] GetTextAlign (hdc=0x860107c5) returned 0x0
[0207.815] GetTextColor (hdc=0x860107c5) returned 0x0
[0207.815] GetCurrentObject (hdc=0x860107c5, type=0x6) returned 0x8a01c2
[0207.815] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0207.815] SelectObject (hdc=0x860107c5, h=0x730a066d) returned 0x8a01c2
[0207.815] GetBkMode (hdc=0x860107c5) returned 2
[0207.815] SetBkMode (hdc=0x860107c5, mode=1) returned 2
[0207.815] DrawTextExW (in: hdc=0x860107c5, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x22d837c | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0207.815] RestoreDC (hdc=0x860107c5, nSavedDC=-1) returned 1
[0207.815] GdipReleaseDC (graphics=0x5d92c30, hdc=0x860107c5) returned 0x0
[0207.815] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0207.815] BitBlt (hdc=0x10105d6, x=0, y=0, cx=250, cy=70, hdcSrc=0x860107c5, x1=0, y1=0, rop=0xcc0020) returned 1
[0207.816] GdipReleaseDC (graphics=0x5d92c30, hdc=0x860107c5) returned 0x0
[0207.816] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0207.816] SelectObject (hdc=0x860107c5, h=0x85000f) returned 0x1e0507b9
[0207.816] DeleteDC (hdc=0x860107c5) returned 1
[0207.816] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0207.816] EndPaint (hWnd=0xc02b4, lpPaint=0x53e2f0) returned 1
[0207.816] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.817] IsWindowUnicode (hWnd=0x13013e) returned 1
[0207.817] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.817] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.817] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.817] BeginPaint (in: hWnd=0x13013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0207.817] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0207.817] CreateCompatibleDC (hdc=0xf0105ee) returned 0x880107c5
[0207.817] SelectObject (hdc=0x880107c5, h=0x1e0507b9) returned 0x85000f
[0207.817] GdipCreateFromHDC (hdc=0x880107c5, graphics=0x53e300) returned 0x0
[0207.817] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0207.817] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0207.817] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0207.817] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.817] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0207.817] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0207.818] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0207.818] LocalFree (hMem=0x89ec80) returned 0x0
[0207.818] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.818] GdipCreateRegion (region=0x53e348) returned 0x0
[0207.818] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.818] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0207.818] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0207.818] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcd30dbd) returned 0x0
[0207.821] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.821] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0207.821] GetCurrentObject (hdc=0x880107c5, type=0x1) returned 0xb00017
[0207.821] GetCurrentObject (hdc=0x880107c5, type=0x2) returned 0x900010
[0207.821] GetCurrentObject (hdc=0x880107c5, type=0x7) returned 0x1e0507b9
[0207.821] GetCurrentObject (hdc=0x880107c5, type=0x6) returned 0x8a01c2
[0207.821] SaveDC (hdc=0x880107c5) returned 1
[0207.821] GetNearestColor (hdc=0x880107c5, color=0xf0f0f0) returned 0xf0f0f0
[0207.821] GetNearestColor (hdc=0x880107c5, color=0xa0a0a0) returned 0xa0a0a0
[0207.821] GetNearestColor (hdc=0x880107c5, color=0x696969) returned 0x696969
[0207.821] GetNearestColor (hdc=0x880107c5, color=0xa0a0a0) returned 0xa0a0a0
[0207.821] GetNearestColor (hdc=0x880107c5, color=0x0) returned 0x0
[0207.821] GetNearestColor (hdc=0x880107c5, color=0xffffff) returned 0xffffff
[0207.821] GetNearestColor (hdc=0x880107c5, color=0xe5e5e5) returned 0xe5e5e5
[0207.821] GetNearestColor (hdc=0x880107c5, color=0xd7d7d7) returned 0xd7d7d7
[0207.821] GetNearestColor (hdc=0x880107c5, color=0x0) returned 0x0
[0207.821] RestoreDC (hdc=0x880107c5, nSavedDC=-1) returned 1
[0207.822] GdipReleaseDC (graphics=0x5d92c30, hdc=0x880107c5) returned 0x0
[0207.822] IsAppThemed () returned 0x1
[0207.822] GetThemeAppProperties () returned 0x3
[0207.822] GetThemeAppProperties () returned 0x3
[0207.822] IsAppThemed () returned 0x1
[0207.822] GetThemeAppProperties () returned 0x3
[0207.822] GetThemeAppProperties () returned 0x3
[0207.822] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x22d8ae8 | out: lpchText="OK", lprc=0x53e028) returned 13
[0207.822] IsAppThemed () returned 0x1
[0207.822] GetThemeAppProperties () returned 0x3
[0207.822] GetThemeAppProperties () returned 0x3
[0207.822] IsAppThemed () returned 0x1
[0207.822] GetThemeAppProperties () returned 0x3
[0207.822] GetThemeAppProperties () returned 0x3
[0207.822] GetFocus () returned 0x1002d6
[0207.822] IsAppThemed () returned 0x1
[0207.823] GetThemeAppProperties () returned 0x3
[0207.823] GetThemeAppProperties () returned 0x3
[0207.823] IsAppThemed () returned 0x1
[0207.823] GetThemeAppProperties () returned 0x3
[0207.823] GetThemeAppProperties () returned 0x3
[0207.823] IsThemePartDefined () returned 0x1
[0207.823] IsAppThemed () returned 0x1
[0207.823] GetThemeAppProperties () returned 0x3
[0207.823] GetThemeAppProperties () returned 0x3
[0207.823] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0207.823] IsAppThemed () returned 0x1
[0207.823] GetThemeAppProperties () returned 0x3
[0207.823] GetThemeAppProperties () returned 0x3
[0207.823] IsAppThemed () returned 0x1
[0207.823] GetThemeAppProperties () returned 0x3
[0207.823] GetThemeAppProperties () returned 0x3
[0207.823] IsThemePartDefined () returned 0x1
[0207.823] GdipCreateRegion (region=0x53e070) returned 0x0
[0207.823] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.823] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0207.823] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.823] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0207.823] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0207.824] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0207.824] LocalFree (hMem=0x89ee40) returned 0x0
[0207.824] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.824] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0207.824] LocalFree (hMem=0x89ea88) returned 0x0
[0207.824] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.824] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0207.824] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0207.824] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0207.824] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.824] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0207.824] GetCurrentObject (hdc=0x880107c5, type=0x1) returned 0xb00017
[0207.824] GetCurrentObject (hdc=0x880107c5, type=0x2) returned 0x900010
[0207.824] GetCurrentObject (hdc=0x880107c5, type=0x7) returned 0x1e0507b9
[0207.824] GetCurrentObject (hdc=0x880107c5, type=0x6) returned 0x8a01c2
[0207.824] SaveDC (hdc=0x880107c5) returned 1
[0207.824] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe004053e
[0207.824] GetClipRgn (hdc=0x880107c5, hrgn=0xe004053e) returned 0
[0207.825] SelectClipRgn (hdc=0x880107c5, hrgn=0x8f04051e) returned 2
[0207.825] DeleteObject (ho=0xe004053e) returned 1
[0207.825] DeleteObject (ho=0x8f04051e) returned 1
[0207.825] OffsetViewportOrgEx (in: hdc=0x880107c5, x=0, y=0, lppt=0x22d9198 | out: lppt=0x22d9198) returned 1
[0207.825] DrawThemeParentBackground () returned 0x0
[0207.825] GetWindowPlacement (in: hWnd=0x502de, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0207.825] GetClientRect (in: hWnd=0x502de, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0207.825] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.825] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.825] GetSystemMetrics (nIndex=42) returned 0
[0207.825] GetWindowTextW (in: hWnd=0x502de, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.825] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0207.825] GetClientRect (in: hWnd=0x502de, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0207.825] GetCurrentObject (hdc=0x880107c5, type=0x1) returned 0xb00017
[0207.825] GetCurrentObject (hdc=0x880107c5, type=0x2) returned 0x900010
[0207.825] GetCurrentObject (hdc=0x880107c5, type=0x7) returned 0x1e0507b9
[0207.825] GetCurrentObject (hdc=0x880107c5, type=0x6) returned 0x8a01c2
[0207.825] SaveDC (hdc=0x880107c5) returned 2
[0207.826] GetNearestColor (hdc=0x880107c5, color=0xf0f0f0) returned 0xf0f0f0
[0207.826] CreateSolidBrush (color=0xf0f0f0) returned 0x3410078d
[0207.826] FillRect (hDC=0x880107c5, lprc=0x53dad0, hbr=0x3410078d) returned 1
[0207.826] DeleteObject (ho=0x3410078d) returned 1
[0207.826] RestoreDC (hdc=0x880107c5, nSavedDC=-1) returned 1
[0207.826] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.826] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.826] GetSystemMetrics (nIndex=42) returned 0
[0207.826] GetWindowTextW (in: hWnd=0x502de, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.826] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0207.826] GetClientRect (in: hWnd=0x502de, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0207.826] GetCurrentObject (hdc=0x880107c5, type=0x1) returned 0xb00017
[0207.826] GetCurrentObject (hdc=0x880107c5, type=0x2) returned 0x900010
[0207.826] GetCurrentObject (hdc=0x880107c5, type=0x7) returned 0x1e0507b9
[0207.826] GetCurrentObject (hdc=0x880107c5, type=0x6) returned 0x8a01c2
[0207.826] SaveDC (hdc=0x880107c5) returned 2
[0207.826] GetNearestColor (hdc=0x880107c5, color=0xf0f0f0) returned 0xf0f0f0
[0207.826] CreateSolidBrush (color=0xf0f0f0) returned 0x3510078d
[0207.827] FillRect (hDC=0x880107c5, lprc=0x53da70, hbr=0x3510078d) returned 1
[0207.827] DeleteObject (ho=0x3510078d) returned 1
[0207.827] RestoreDC (hdc=0x880107c5, nSavedDC=-1) returned 1
[0207.827] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.827] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.827] GetSystemMetrics (nIndex=42) returned 0
[0207.827] GetWindowTextW (in: hWnd=0x502de, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.827] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0207.829] RestoreDC (hdc=0x880107c5, nSavedDC=-1) returned 1
[0207.829] GdipReleaseDC (graphics=0x5d92c30, hdc=0x880107c5) returned 0x0
[0207.829] IsAppThemed () returned 0x1
[0207.829] GetThemeAppProperties () returned 0x3
[0207.829] GetThemeAppProperties () returned 0x3
[0207.829] IsAppThemed () returned 0x1
[0207.830] GetThemeAppProperties () returned 0x3
[0207.830] GetThemeAppProperties () returned 0x3
[0207.830] IsThemePartDefined () returned 0x1
[0207.830] GdipCreateRegion (region=0x53dff4) returned 0x0
[0207.830] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.830] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0207.830] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.830] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0207.830] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.830] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0207.830] LocalFree (hMem=0x89ea88) returned 0x0
[0207.830] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.830] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0207.830] LocalFree (hMem=0x89ea88) returned 0x0
[0207.830] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.830] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0207.830] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0207.830] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0207.830] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.830] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0207.830] GetCurrentObject (hdc=0x880107c5, type=0x1) returned 0xb00017
[0207.830] GetCurrentObject (hdc=0x880107c5, type=0x2) returned 0x900010
[0207.830] GetCurrentObject (hdc=0x880107c5, type=0x7) returned 0x1e0507b9
[0207.831] GetCurrentObject (hdc=0x880107c5, type=0x6) returned 0x8a01c2
[0207.831] SaveDC (hdc=0x880107c5) returned 1
[0207.831] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9004051e
[0207.831] GetClipRgn (hdc=0x880107c5, hrgn=0x9004051e) returned 0
[0207.831] SelectClipRgn (hdc=0x880107c5, hrgn=0xe204053e) returned 2
[0207.831] DeleteObject (ho=0x9004051e) returned 1
[0207.831] DeleteObject (ho=0xe204053e) returned 1
[0207.831] OffsetViewportOrgEx (in: hdc=0x880107c5, x=0, y=0, lppt=0x22d9a20 | out: lppt=0x22d9a20) returned 1
[0207.831] IsAppThemed () returned 0x1
[0207.831] GetThemeAppProperties () returned 0x3
[0207.831] GetThemeAppProperties () returned 0x3
[0207.831] DrawThemeBackground () returned 0x0
[0207.831] RestoreDC (hdc=0x880107c5, nSavedDC=-1) returned 1
[0207.831] GdipReleaseDC (graphics=0x5d92c30, hdc=0x880107c5) returned 0x0
[0207.831] GdipCreateRegion (region=0x53dff8) returned 0x0
[0207.831] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.831] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0207.831] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.831] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0207.832] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0207.832] LocalFree (hMem=0x89ec80) returned 0x0
[0207.832] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0207.832] LocalFree (hMem=0x89ec80) returned 0x0
[0207.832] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.832] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0207.832] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0207.832] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0207.832] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.832] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0207.832] GetCurrentObject (hdc=0x880107c5, type=0x1) returned 0xb00017
[0207.832] GetCurrentObject (hdc=0x880107c5, type=0x2) returned 0x900010
[0207.832] GetCurrentObject (hdc=0x880107c5, type=0x7) returned 0x1e0507b9
[0207.832] GetCurrentObject (hdc=0x880107c5, type=0x6) returned 0x8a01c2
[0207.832] SaveDC (hdc=0x880107c5) returned 1
[0207.832] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe304053e
[0207.832] GetClipRgn (hdc=0x880107c5, hrgn=0xe304053e) returned 0
[0207.832] SelectClipRgn (hdc=0x880107c5, hrgn=0x9104051e) returned 2
[0207.832] DeleteObject (ho=0xe304053e) returned 1
[0207.832] DeleteObject (ho=0x9104051e) returned 1
[0207.832] OffsetViewportOrgEx (in: hdc=0x880107c5, x=0, y=0, lppt=0x22d9cf4 | out: lppt=0x22d9cf4) returned 1
[0207.832] IsAppThemed () returned 0x1
[0207.833] GetThemeAppProperties () returned 0x3
[0207.833] GetThemeAppProperties () returned 0x3
[0207.833] GetThemeBackgroundContentRect () returned 0x0
[0207.833] RestoreDC (hdc=0x880107c5, nSavedDC=-1) returned 1
[0207.833] GdipReleaseDC (graphics=0x5d92c30, hdc=0x880107c5) returned 0x0
[0207.833] IsAppThemed () returned 0x1
[0207.833] GetThemeAppProperties () returned 0x3
[0207.833] GetThemeAppProperties () returned 0x3
[0207.833] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0207.833] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0207.833] GetCurrentObject (hdc=0x880107c5, type=0x1) returned 0xb00017
[0207.833] GetCurrentObject (hdc=0x880107c5, type=0x2) returned 0x900010
[0207.833] GetCurrentObject (hdc=0x880107c5, type=0x7) returned 0x1e0507b9
[0207.833] GetCurrentObject (hdc=0x880107c5, type=0x6) returned 0x8a01c2
[0207.833] SaveDC (hdc=0x880107c5) returned 1
[0207.833] GetTextAlign (hdc=0x880107c5) returned 0x0
[0207.833] GetTextColor (hdc=0x880107c5) returned 0x0
[0207.833] GetCurrentObject (hdc=0x880107c5, type=0x6) returned 0x8a01c2
[0207.833] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0207.834] SelectObject (hdc=0x880107c5, h=0x730a066d) returned 0x8a01c2
[0207.834] GetBkMode (hdc=0x880107c5) returned 2
[0207.834] SetBkMode (hdc=0x880107c5, mode=1) returned 2
[0207.834] DrawTextExW (in: hdc=0x880107c5, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x22da094 | out: lpchText="OK", lprc=0x53df90) returned 13
[0207.834] DrawTextExW (in: hdc=0x880107c5, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x22da094 | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0207.834] RestoreDC (hdc=0x880107c5, nSavedDC=-1) returned 1
[0207.834] GdipReleaseDC (graphics=0x5d92c30, hdc=0x880107c5) returned 0x0
[0207.834] GetFocus () returned 0x1002d6
[0207.834] IsAppThemed () returned 0x1
[0207.835] GetThemeAppProperties () returned 0x3
[0207.835] GetThemeAppProperties () returned 0x3
[0207.835] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0207.835] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x880107c5, x1=0, y1=0, rop=0xcc0020) returned 1
[0207.835] GdipReleaseDC (graphics=0x5d92c30, hdc=0x880107c5) returned 0x0
[0207.835] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0207.835] SelectObject (hdc=0x880107c5, h=0x85000f) returned 0x1e0507b9
[0207.835] DeleteDC (hdc=0x880107c5) returned 1
[0207.835] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0207.835] EndPaint (hWnd=0x13013e, lpPaint=0x53e2e4) returned 1
[0207.835] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.835] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x84, wParam=0x0, lParam=0x18e0364) returned 0x1
[0207.836] IsWindowUnicode (hWnd=0x13013e) returned 1
[0207.836] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.836] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.836] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.836] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0207.836] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.836] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x84, wParam=0x0, lParam=0x18e0364) returned 0x1
[0207.836] IsWindowUnicode (hWnd=0x13013e) returned 1
[0207.836] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.836] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x84, wParam=0x0, lParam=0x18e0364) returned 0x1
[0207.836] SetCursor (hCursor=0x10003) returned 0x10003
[0207.836] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.836] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.836] _TrackMouseEvent (in: lpEventTrack=0x22da190 | out: lpEventTrack=0x22da190) returned 1
[0207.836] SendMessageW (hWnd=0x13013e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0207.836] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0207.837] InvalidateRect (hWnd=0x13013e, lpRect=0x0, bErase=0) returned 1
[0207.837] GetKeyState (nVirtKey=1) returned 1
[0207.837] GetKeyState (nVirtKey=2) returned 0
[0207.837] GetKeyState (nVirtKey=4) returned 0
[0207.837] GetKeyState (nVirtKey=5) returned 0
[0207.837] GetKeyState (nVirtKey=6) returned 0
[0207.837] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.837] IsWindowUnicode (hWnd=0x13013e) returned 1
[0207.837] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.837] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.837] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.837] BeginPaint (in: hWnd=0x13013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0207.837] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0207.837] CreateCompatibleDC (hdc=0xf0105ee) returned 0x890107c5
[0207.837] SelectObject (hdc=0x890107c5, h=0x1e0507b9) returned 0x85000f
[0207.837] GdipCreateFromHDC (hdc=0x890107c5, graphics=0x53e300) returned 0x0
[0207.838] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0207.838] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0207.838] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0207.838] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.838] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0207.838] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0207.838] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0207.838] LocalFree (hMem=0x89ec80) returned 0x0
[0207.838] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.838] GdipCreateRegion (region=0x53e348) returned 0x0
[0207.838] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.838] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0207.838] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0207.838] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcd10dbd) returned 0x0
[0207.838] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.839] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0207.839] GetCurrentObject (hdc=0x890107c5, type=0x1) returned 0xb00017
[0207.839] GetCurrentObject (hdc=0x890107c5, type=0x2) returned 0x900010
[0207.839] GetCurrentObject (hdc=0x890107c5, type=0x7) returned 0x1e0507b9
[0207.839] GetCurrentObject (hdc=0x890107c5, type=0x6) returned 0x8a01c2
[0207.839] SaveDC (hdc=0x890107c5) returned 1
[0207.839] GetNearestColor (hdc=0x890107c5, color=0xf0f0f0) returned 0xf0f0f0
[0207.839] GetNearestColor (hdc=0x890107c5, color=0xa0a0a0) returned 0xa0a0a0
[0207.839] GetNearestColor (hdc=0x890107c5, color=0x696969) returned 0x696969
[0207.839] GetNearestColor (hdc=0x890107c5, color=0xa0a0a0) returned 0xa0a0a0
[0207.839] GetNearestColor (hdc=0x890107c5, color=0x0) returned 0x0
[0207.839] GetNearestColor (hdc=0x890107c5, color=0xffffff) returned 0xffffff
[0207.839] GetNearestColor (hdc=0x890107c5, color=0xe5e5e5) returned 0xe5e5e5
[0207.839] GetNearestColor (hdc=0x890107c5, color=0xd7d7d7) returned 0xd7d7d7
[0207.839] GetNearestColor (hdc=0x890107c5, color=0x0) returned 0x0
[0207.839] RestoreDC (hdc=0x890107c5, nSavedDC=-1) returned 1
[0207.840] GdipReleaseDC (graphics=0x5d92c30, hdc=0x890107c5) returned 0x0
[0207.840] IsAppThemed () returned 0x1
[0207.840] GetThemeAppProperties () returned 0x3
[0207.840] GetThemeAppProperties () returned 0x3
[0207.840] IsAppThemed () returned 0x1
[0207.840] GetThemeAppProperties () returned 0x3
[0207.840] GetThemeAppProperties () returned 0x3
[0207.840] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x22da8f0 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0207.840] IsAppThemed () returned 0x1
[0207.840] GetThemeAppProperties () returned 0x3
[0207.840] GetThemeAppProperties () returned 0x3
[0207.840] IsAppThemed () returned 0x1
[0207.840] GetThemeAppProperties () returned 0x3
[0207.840] GetThemeAppProperties () returned 0x3
[0207.840] IsAppThemed () returned 0x1
[0207.840] GetThemeAppProperties () returned 0x3
[0207.840] GetThemeAppProperties () returned 0x3
[0207.840] IsAppThemed () returned 0x1
[0207.841] GetThemeAppProperties () returned 0x3
[0207.841] GetThemeAppProperties () returned 0x3
[0207.841] IsThemePartDefined () returned 0x1
[0207.841] IsAppThemed () returned 0x1
[0207.841] GetThemeAppProperties () returned 0x3
[0207.841] GetThemeAppProperties () returned 0x3
[0207.841] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0207.841] IsAppThemed () returned 0x1
[0207.841] GetThemeAppProperties () returned 0x3
[0207.841] GetThemeAppProperties () returned 0x3
[0207.841] IsAppThemed () returned 0x1
[0207.841] GetThemeAppProperties () returned 0x3
[0207.841] GetThemeAppProperties () returned 0x3
[0207.841] IsThemePartDefined () returned 0x1
[0207.841] GdipCreateRegion (region=0x53e064) returned 0x0
[0207.841] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.841] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0207.841] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.841] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0207.841] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.841] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0207.841] LocalFree (hMem=0x89ea88) returned 0x0
[0207.841] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.841] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0207.842] LocalFree (hMem=0x89ea88) returned 0x0
[0207.842] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.842] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0207.842] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0207.842] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0207.842] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.842] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0207.842] GetCurrentObject (hdc=0x890107c5, type=0x1) returned 0xb00017
[0207.842] GetCurrentObject (hdc=0x890107c5, type=0x2) returned 0x900010
[0207.842] GetCurrentObject (hdc=0x890107c5, type=0x7) returned 0x1e0507b9
[0207.842] GetCurrentObject (hdc=0x890107c5, type=0x6) returned 0x8a01c2
[0207.842] SaveDC (hdc=0x890107c5) returned 1
[0207.842] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9204051e
[0207.842] GetClipRgn (hdc=0x890107c5, hrgn=0x9204051e) returned 0
[0207.842] SelectClipRgn (hdc=0x890107c5, hrgn=0xe704053e) returned 2
[0207.842] DeleteObject (ho=0x9204051e) returned 1
[0207.842] DeleteObject (ho=0xe704053e) returned 1
[0207.842] OffsetViewportOrgEx (in: hdc=0x890107c5, x=0, y=0, lppt=0x22dafa0 | out: lppt=0x22dafa0) returned 1
[0207.843] DrawThemeParentBackground () returned 0x0
[0207.843] GetWindowPlacement (in: hWnd=0x502de, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0207.843] GetClientRect (in: hWnd=0x502de, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0207.843] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.843] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.843] GetSystemMetrics (nIndex=42) returned 0
[0207.843] GetWindowTextW (in: hWnd=0x502de, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.843] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0207.843] GetClientRect (in: hWnd=0x502de, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0207.843] GetCurrentObject (hdc=0x890107c5, type=0x1) returned 0xb00017
[0207.843] GetCurrentObject (hdc=0x890107c5, type=0x2) returned 0x900010
[0207.843] GetCurrentObject (hdc=0x890107c5, type=0x7) returned 0x1e0507b9
[0207.843] GetCurrentObject (hdc=0x890107c5, type=0x6) returned 0x8a01c2
[0207.843] SaveDC (hdc=0x890107c5) returned 2
[0207.843] GetNearestColor (hdc=0x890107c5, color=0xf0f0f0) returned 0xf0f0f0
[0207.843] CreateSolidBrush (color=0xf0f0f0) returned 0x3610078d
[0207.844] FillRect (hDC=0x890107c5, lprc=0x53dac8, hbr=0x3610078d) returned 1
[0207.844] DeleteObject (ho=0x3610078d) returned 1
[0207.844] RestoreDC (hdc=0x890107c5, nSavedDC=-1) returned 1
[0207.844] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.844] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.844] GetSystemMetrics (nIndex=42) returned 0
[0207.844] GetWindowTextW (in: hWnd=0x502de, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.844] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0207.844] GetClientRect (in: hWnd=0x502de, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0207.844] GetCurrentObject (hdc=0x890107c5, type=0x1) returned 0xb00017
[0207.844] GetCurrentObject (hdc=0x890107c5, type=0x2) returned 0x900010
[0207.844] GetCurrentObject (hdc=0x890107c5, type=0x7) returned 0x1e0507b9
[0207.844] GetCurrentObject (hdc=0x890107c5, type=0x6) returned 0x8a01c2
[0207.844] SaveDC (hdc=0x890107c5) returned 2
[0207.844] GetNearestColor (hdc=0x890107c5, color=0xf0f0f0) returned 0xf0f0f0
[0207.844] CreateSolidBrush (color=0xf0f0f0) returned 0x3710078d
[0207.844] FillRect (hDC=0x890107c5, lprc=0x53da68, hbr=0x3710078d) returned 1
[0207.844] DeleteObject (ho=0x3710078d) returned 1
[0207.844] RestoreDC (hdc=0x890107c5, nSavedDC=-1) returned 1
[0207.845] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.845] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.845] GetSystemMetrics (nIndex=42) returned 0
[0207.845] GetWindowTextW (in: hWnd=0x502de, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.845] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0207.845] RestoreDC (hdc=0x890107c5, nSavedDC=-1) returned 1
[0207.845] GdipReleaseDC (graphics=0x5d92c30, hdc=0x890107c5) returned 0x0
[0207.845] IsAppThemed () returned 0x1
[0207.845] GetThemeAppProperties () returned 0x3
[0207.845] GetThemeAppProperties () returned 0x3
[0207.845] IsAppThemed () returned 0x1
[0207.845] GetThemeAppProperties () returned 0x3
[0207.845] GetThemeAppProperties () returned 0x3
[0207.845] IsThemePartDefined () returned 0x1
[0207.845] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0207.845] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.845] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0207.845] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.845] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0207.846] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0207.846] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0207.846] LocalFree (hMem=0x89ec80) returned 0x0
[0207.846] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0207.846] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0207.846] LocalFree (hMem=0x89ec80) returned 0x0
[0207.846] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.846] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0207.846] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0207.846] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0207.846] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.846] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0207.846] GetCurrentObject (hdc=0x890107c5, type=0x1) returned 0xb00017
[0207.846] GetCurrentObject (hdc=0x890107c5, type=0x2) returned 0x900010
[0207.846] GetCurrentObject (hdc=0x890107c5, type=0x7) returned 0x1e0507b9
[0207.846] GetCurrentObject (hdc=0x890107c5, type=0x6) returned 0x8a01c2
[0207.846] SaveDC (hdc=0x890107c5) returned 1
[0207.846] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe804053e
[0207.846] GetClipRgn (hdc=0x890107c5, hrgn=0xe804053e) returned 0
[0207.846] SelectClipRgn (hdc=0x890107c5, hrgn=0x9404051e) returned 2
[0207.847] DeleteObject (ho=0xe804053e) returned 1
[0207.847] DeleteObject (ho=0x9404051e) returned 1
[0207.847] OffsetViewportOrgEx (in: hdc=0x890107c5, x=0, y=0, lppt=0x22db828 | out: lppt=0x22db828) returned 1
[0207.847] IsAppThemed () returned 0x1
[0207.847] GetThemeAppProperties () returned 0x3
[0207.847] GetThemeAppProperties () returned 0x3
[0207.847] DrawThemeBackground () returned 0x0
[0207.847] RestoreDC (hdc=0x890107c5, nSavedDC=-1) returned 1
[0207.847] GdipReleaseDC (graphics=0x5d92c30, hdc=0x890107c5) returned 0x0
[0207.847] GdipCreateRegion (region=0x53dfec) returned 0x0
[0207.847] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.847] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0207.847] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.847] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0207.847] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0207.847] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0207.847] LocalFree (hMem=0x89ee40) returned 0x0
[0207.847] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.847] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0207.847] LocalFree (hMem=0x89ea88) returned 0x0
[0207.848] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.848] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0207.848] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0207.848] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0207.848] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.848] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0207.848] GetCurrentObject (hdc=0x890107c5, type=0x1) returned 0xb00017
[0207.848] GetCurrentObject (hdc=0x890107c5, type=0x2) returned 0x900010
[0207.848] GetCurrentObject (hdc=0x890107c5, type=0x7) returned 0x1e0507b9
[0207.848] GetCurrentObject (hdc=0x890107c5, type=0x6) returned 0x8a01c2
[0207.848] SaveDC (hdc=0x890107c5) returned 1
[0207.848] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9504051e
[0207.848] GetClipRgn (hdc=0x890107c5, hrgn=0x9504051e) returned 0
[0207.848] SelectClipRgn (hdc=0x890107c5, hrgn=0xe904053e) returned 2
[0207.848] DeleteObject (ho=0x9504051e) returned 1
[0207.848] DeleteObject (ho=0xe904053e) returned 1
[0207.848] OffsetViewportOrgEx (in: hdc=0x890107c5, x=0, y=0, lppt=0x22dbafc | out: lppt=0x22dbafc) returned 1
[0207.848] IsAppThemed () returned 0x1
[0207.848] GetThemeAppProperties () returned 0x3
[0207.848] GetThemeAppProperties () returned 0x3
[0207.848] GetThemeBackgroundContentRect () returned 0x0
[0207.849] RestoreDC (hdc=0x890107c5, nSavedDC=-1) returned 1
[0207.849] GdipReleaseDC (graphics=0x5d92c30, hdc=0x890107c5) returned 0x0
[0207.849] IsAppThemed () returned 0x1
[0207.849] GetThemeAppProperties () returned 0x3
[0207.849] GetThemeAppProperties () returned 0x3
[0207.849] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0207.849] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0207.849] GetCurrentObject (hdc=0x890107c5, type=0x1) returned 0xb00017
[0207.849] GetCurrentObject (hdc=0x890107c5, type=0x2) returned 0x900010
[0207.849] GetCurrentObject (hdc=0x890107c5, type=0x7) returned 0x1e0507b9
[0207.849] GetCurrentObject (hdc=0x890107c5, type=0x6) returned 0x8a01c2
[0207.849] SaveDC (hdc=0x890107c5) returned 1
[0207.887] GetTextAlign (hdc=0x890107c5) returned 0x0
[0207.887] GetTextColor (hdc=0x890107c5) returned 0x0
[0207.887] GetCurrentObject (hdc=0x890107c5, type=0x6) returned 0x8a01c2
[0207.887] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0207.888] SelectObject (hdc=0x890107c5, h=0x730a066d) returned 0x8a01c2
[0207.888] GetBkMode (hdc=0x890107c5) returned 2
[0207.888] SetBkMode (hdc=0x890107c5, mode=1) returned 2
[0207.888] DrawTextExW (in: hdc=0x890107c5, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x22dbe9c | out: lpchText="OK", lprc=0x53df84) returned 13
[0207.888] DrawTextExW (in: hdc=0x890107c5, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x22dbe9c | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0207.888] RestoreDC (hdc=0x890107c5, nSavedDC=-1) returned 1
[0207.889] GdipReleaseDC (graphics=0x5d92c30, hdc=0x890107c5) returned 0x0
[0207.889] GetFocus () returned 0x1002d6
[0207.889] IsAppThemed () returned 0x1
[0207.889] GetThemeAppProperties () returned 0x3
[0207.889] GetThemeAppProperties () returned 0x3
[0207.889] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0207.889] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x890107c5, x1=0, y1=0, rop=0xcc0020) returned 1
[0207.889] GdipReleaseDC (graphics=0x5d92c30, hdc=0x890107c5) returned 0x0
[0207.889] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0207.889] SelectObject (hdc=0x890107c5, h=0x85000f) returned 0x1e0507b9
[0207.889] DeleteDC (hdc=0x890107c5) returned 1
[0207.889] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0207.890] EndPaint (hWnd=0x13013e, lpPaint=0x53e2e4) returned 1
[0207.890] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.890] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0207.891] IsWindowUnicode (hWnd=0x102dc) returned 1
[0207.891] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.891] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0207.891] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.891] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.892] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.892] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0207.893] IsWindowUnicode (hWnd=0x102dc) returned 1
[0207.893] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.893] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.893] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.894] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.894] IsWindowUnicode (hWnd=0xf02c8) returned 1
[0207.895] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.895] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.895] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.895] BeginPaint (in: hWnd=0xf02c8, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0207.895] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0207.895] CreateCompatibleDC (hdc=0x10105d6) returned 0x8b0107c5
[0207.895] SelectObject (hdc=0x8b0107c5, h=0x1e0507b9) returned 0x85000f
[0207.895] GdipCreateFromHDC (hdc=0x8b0107c5, graphics=0x53e300) returned 0x0
[0207.895] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0207.895] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0207.896] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0207.896] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.896] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0207.896] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.896] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0207.896] LocalFree (hMem=0x89ea88) returned 0x0
[0207.896] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.896] GdipCreateRegion (region=0x53e348) returned 0x0
[0207.896] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.900] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0207.901] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0207.901] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfccf0dbd) returned 0x0
[0207.901] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.901] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0207.901] GetCurrentObject (hdc=0x8b0107c5, type=0x1) returned 0xb00017
[0207.901] GetCurrentObject (hdc=0x8b0107c5, type=0x2) returned 0x900010
[0207.901] GetCurrentObject (hdc=0x8b0107c5, type=0x7) returned 0x1e0507b9
[0207.901] GetCurrentObject (hdc=0x8b0107c5, type=0x6) returned 0x8a01c2
[0207.901] SaveDC (hdc=0x8b0107c5) returned 1
[0207.901] GetNearestColor (hdc=0x8b0107c5, color=0xf0f0f0) returned 0xf0f0f0
[0207.901] GetNearestColor (hdc=0x8b0107c5, color=0xa0a0a0) returned 0xa0a0a0
[0207.901] GetNearestColor (hdc=0x8b0107c5, color=0x696969) returned 0x696969
[0207.901] GetNearestColor (hdc=0x8b0107c5, color=0xa0a0a0) returned 0xa0a0a0
[0207.901] GetNearestColor (hdc=0x8b0107c5, color=0x0) returned 0x0
[0207.902] GetNearestColor (hdc=0x8b0107c5, color=0xffffff) returned 0xffffff
[0207.902] GetNearestColor (hdc=0x8b0107c5, color=0xe5e5e5) returned 0xe5e5e5
[0207.902] GetNearestColor (hdc=0x8b0107c5, color=0xd7d7d7) returned 0xd7d7d7
[0207.902] GetNearestColor (hdc=0x8b0107c5, color=0x0) returned 0x0
[0207.902] RestoreDC (hdc=0x8b0107c5, nSavedDC=-1) returned 1
[0207.902] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8b0107c5) returned 0x0
[0207.902] IsAppThemed () returned 0x1
[0207.902] GetThemeAppProperties () returned 0x3
[0207.902] GetThemeAppProperties () returned 0x3
[0207.902] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0207.902] SendMessageW (hWnd=0x502de, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0207.902] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0207.902] IsAppThemed () returned 0x1
[0207.903] GetThemeAppProperties () returned 0x3
[0207.903] GetThemeAppProperties () returned 0x3
[0207.903] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x22dc6ac | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0207.903] IsAppThemed () returned 0x1
[0207.903] GetThemeAppProperties () returned 0x3
[0207.903] GetThemeAppProperties () returned 0x3
[0207.903] IsAppThemed () returned 0x1
[0207.903] GetThemeAppProperties () returned 0x3
[0207.903] GetThemeAppProperties () returned 0x3
[0207.903] GetFocus () returned 0x1002d6
[0207.904] IsAppThemed () returned 0x1
[0207.904] GetThemeAppProperties () returned 0x3
[0207.904] GetThemeAppProperties () returned 0x3
[0207.904] IsAppThemed () returned 0x1
[0207.904] GetThemeAppProperties () returned 0x3
[0207.904] GetThemeAppProperties () returned 0x3
[0207.904] IsThemePartDefined () returned 0x1
[0207.904] IsAppThemed () returned 0x1
[0207.904] GetThemeAppProperties () returned 0x3
[0207.904] GetThemeAppProperties () returned 0x3
[0207.904] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0207.904] IsAppThemed () returned 0x1
[0207.904] GetThemeAppProperties () returned 0x3
[0207.904] GetThemeAppProperties () returned 0x3
[0207.904] IsAppThemed () returned 0x1
[0207.904] GetThemeAppProperties () returned 0x3
[0207.904] GetThemeAppProperties () returned 0x3
[0207.904] IsThemePartDefined () returned 0x1
[0207.904] GdipCreateRegion (region=0x53e070) returned 0x0
[0207.904] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.904] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0207.905] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.905] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0207.905] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.905] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0207.905] LocalFree (hMem=0x89ea88) returned 0x0
[0207.905] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0207.905] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0207.905] LocalFree (hMem=0x89eee8) returned 0x0
[0207.905] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.905] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0207.905] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0207.905] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0207.905] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.905] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0207.905] GetCurrentObject (hdc=0x8b0107c5, type=0x1) returned 0xb00017
[0207.905] GetCurrentObject (hdc=0x8b0107c5, type=0x2) returned 0x900010
[0207.905] GetCurrentObject (hdc=0x8b0107c5, type=0x7) returned 0x1e0507b9
[0207.906] GetCurrentObject (hdc=0x8b0107c5, type=0x6) returned 0x8a01c2
[0207.906] SaveDC (hdc=0x8b0107c5) returned 1
[0207.906] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xea04053e
[0207.906] GetClipRgn (hdc=0x8b0107c5, hrgn=0xea04053e) returned 0
[0207.906] SelectClipRgn (hdc=0x8b0107c5, hrgn=0x9904051e) returned 2
[0207.906] DeleteObject (ho=0xea04053e) returned 1
[0207.906] DeleteObject (ho=0x9904051e) returned 1
[0207.906] OffsetViewportOrgEx (in: hdc=0x8b0107c5, x=0, y=0, lppt=0x22dcd5c | out: lppt=0x22dcd5c) returned 1
[0207.906] DrawThemeParentBackground () returned 0x0
[0207.906] GetWindowPlacement (in: hWnd=0x502de, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0207.906] GetClientRect (in: hWnd=0x502de, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0207.906] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.907] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.907] GetSystemMetrics (nIndex=42) returned 0
[0207.907] GetWindowTextW (in: hWnd=0x502de, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.907] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0207.907] GetClientRect (in: hWnd=0x502de, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0207.907] GetCurrentObject (hdc=0x8b0107c5, type=0x1) returned 0xb00017
[0207.907] GetCurrentObject (hdc=0x8b0107c5, type=0x2) returned 0x900010
[0207.907] GetCurrentObject (hdc=0x8b0107c5, type=0x7) returned 0x1e0507b9
[0207.907] GetCurrentObject (hdc=0x8b0107c5, type=0x6) returned 0x8a01c2
[0207.907] SaveDC (hdc=0x8b0107c5) returned 2
[0207.907] GetNearestColor (hdc=0x8b0107c5, color=0xf0f0f0) returned 0xf0f0f0
[0207.907] CreateSolidBrush (color=0xf0f0f0) returned 0x3810078d
[0207.907] FillRect (hDC=0x8b0107c5, lprc=0x53dad0, hbr=0x3810078d) returned 1
[0207.907] DeleteObject (ho=0x3810078d) returned 1
[0207.907] RestoreDC (hdc=0x8b0107c5, nSavedDC=-1) returned 1
[0207.908] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.908] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.908] GetSystemMetrics (nIndex=42) returned 0
[0207.908] GetWindowTextW (in: hWnd=0x502de, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.908] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0207.908] GetClientRect (in: hWnd=0x502de, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0207.908] GetCurrentObject (hdc=0x8b0107c5, type=0x1) returned 0xb00017
[0207.908] GetCurrentObject (hdc=0x8b0107c5, type=0x2) returned 0x900010
[0207.908] GetCurrentObject (hdc=0x8b0107c5, type=0x7) returned 0x1e0507b9
[0207.908] GetCurrentObject (hdc=0x8b0107c5, type=0x6) returned 0x8a01c2
[0207.908] SaveDC (hdc=0x8b0107c5) returned 2
[0207.908] GetNearestColor (hdc=0x8b0107c5, color=0xf0f0f0) returned 0xf0f0f0
[0207.908] CreateSolidBrush (color=0xf0f0f0) returned 0x3910078d
[0207.908] FillRect (hDC=0x8b0107c5, lprc=0x53da70, hbr=0x3910078d) returned 1
[0207.908] DeleteObject (ho=0x3910078d) returned 1
[0207.909] RestoreDC (hdc=0x8b0107c5, nSavedDC=-1) returned 1
[0207.909] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0207.909] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0207.909] GetSystemMetrics (nIndex=42) returned 0
[0207.909] GetWindowTextW (in: hWnd=0x502de, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0207.909] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0207.909] RestoreDC (hdc=0x8b0107c5, nSavedDC=-1) returned 1
[0207.909] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8b0107c5) returned 0x0
[0207.909] IsAppThemed () returned 0x1
[0207.909] GetThemeAppProperties () returned 0x3
[0207.909] GetThemeAppProperties () returned 0x3
[0207.909] IsAppThemed () returned 0x1
[0207.909] GetThemeAppProperties () returned 0x3
[0207.910] GetThemeAppProperties () returned 0x3
[0207.910] IsThemePartDefined () returned 0x1
[0207.910] GdipCreateRegion (region=0x53dff4) returned 0x0
[0207.910] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.910] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0207.910] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.910] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0207.910] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0207.910] LocalFree (hMem=0x89ea88) returned 0x0
[0207.910] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0207.910] LocalFree (hMem=0x89ea88) returned 0x0
[0207.910] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.910] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0207.910] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0207.910] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0207.910] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.910] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0207.910] GetCurrentObject (hdc=0x8b0107c5, type=0x1) returned 0xb00017
[0207.910] GetCurrentObject (hdc=0x8b0107c5, type=0x2) returned 0x900010
[0207.911] GetCurrentObject (hdc=0x8b0107c5, type=0x7) returned 0x1e0507b9
[0207.911] GetCurrentObject (hdc=0x8b0107c5, type=0x6) returned 0x8a01c2
[0207.911] SaveDC (hdc=0x8b0107c5) returned 1
[0207.911] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9a04051e
[0207.911] GetClipRgn (hdc=0x8b0107c5, hrgn=0x9a04051e) returned 0
[0207.911] SelectClipRgn (hdc=0x8b0107c5, hrgn=0xec04053e) returned 2
[0207.911] DeleteObject (ho=0x9a04051e) returned 1
[0207.911] DeleteObject (ho=0xec04053e) returned 1
[0207.911] OffsetViewportOrgEx (in: hdc=0x8b0107c5, x=0, y=0, lppt=0x22dd5e4 | out: lppt=0x22dd5e4) returned 1
[0207.911] IsAppThemed () returned 0x1
[0207.911] GetThemeAppProperties () returned 0x3
[0207.911] GetThemeAppProperties () returned 0x3
[0207.911] DrawThemeBackground () returned 0x0
[0207.911] RestoreDC (hdc=0x8b0107c5, nSavedDC=-1) returned 1
[0207.911] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8b0107c5) returned 0x0
[0207.912] GdipCreateRegion (region=0x53dff8) returned 0x0
[0207.912] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.912] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0207.912] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.919] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0207.919] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0207.920] LocalFree (hMem=0x89ec80) returned 0x0
[0207.920] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0207.920] LocalFree (hMem=0x89ea88) returned 0x0
[0207.920] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.920] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0207.920] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0207.920] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0207.920] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.920] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0207.920] GetCurrentObject (hdc=0x8b0107c5, type=0x1) returned 0xb00017
[0207.920] GetCurrentObject (hdc=0x8b0107c5, type=0x2) returned 0x900010
[0207.920] GetCurrentObject (hdc=0x8b0107c5, type=0x7) returned 0x1e0507b9
[0207.920] GetCurrentObject (hdc=0x8b0107c5, type=0x6) returned 0x8a01c2
[0207.920] SaveDC (hdc=0x8b0107c5) returned 1
[0207.920] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xed04053e
[0207.920] GetClipRgn (hdc=0x8b0107c5, hrgn=0xed04053e) returned 0
[0207.921] SelectClipRgn (hdc=0x8b0107c5, hrgn=0x9b04051e) returned 2
[0207.921] DeleteObject (ho=0xed04053e) returned 1
[0207.921] DeleteObject (ho=0x9b04051e) returned 1
[0207.921] OffsetViewportOrgEx (in: hdc=0x8b0107c5, x=0, y=0, lppt=0x22dd8b8 | out: lppt=0x22dd8b8) returned 1
[0207.921] IsAppThemed () returned 0x1
[0207.921] GetThemeAppProperties () returned 0x3
[0207.921] GetThemeAppProperties () returned 0x3
[0207.921] GetThemeBackgroundContentRect () returned 0x0
[0207.921] RestoreDC (hdc=0x8b0107c5, nSavedDC=-1) returned 1
[0207.921] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8b0107c5) returned 0x0
[0207.921] IsAppThemed () returned 0x1
[0207.921] GetThemeAppProperties () returned 0x3
[0207.921] GetThemeAppProperties () returned 0x3
[0207.921] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0207.921] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0207.921] GetCurrentObject (hdc=0x8b0107c5, type=0x1) returned 0xb00017
[0207.921] GetCurrentObject (hdc=0x8b0107c5, type=0x2) returned 0x900010
[0207.921] GetCurrentObject (hdc=0x8b0107c5, type=0x7) returned 0x1e0507b9
[0207.922] GetCurrentObject (hdc=0x8b0107c5, type=0x6) returned 0x8a01c2
[0207.922] SaveDC (hdc=0x8b0107c5) returned 1
[0207.922] GetTextAlign (hdc=0x8b0107c5) returned 0x0
[0207.922] GetTextColor (hdc=0x8b0107c5) returned 0x0
[0207.922] GetCurrentObject (hdc=0x8b0107c5, type=0x6) returned 0x8a01c2
[0207.922] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0207.922] SelectObject (hdc=0x8b0107c5, h=0x730a066d) returned 0x8a01c2
[0207.922] GetBkMode (hdc=0x8b0107c5) returned 2
[0207.922] SetBkMode (hdc=0x8b0107c5, mode=1) returned 2
[0207.922] DrawTextExW (in: hdc=0x8b0107c5, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x22ddc58 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0207.923] DrawTextExW (in: hdc=0x8b0107c5, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x22ddc58 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0207.923] RestoreDC (hdc=0x8b0107c5, nSavedDC=-1) returned 1
[0207.923] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8b0107c5) returned 0x0
[0207.923] GetFocus () returned 0x1002d6
[0207.923] IsAppThemed () returned 0x1
[0207.923] GetThemeAppProperties () returned 0x3
[0207.923] GetThemeAppProperties () returned 0x3
[0207.923] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0207.923] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x8b0107c5, x1=0, y1=0, rop=0xcc0020) returned 1
[0207.923] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8b0107c5) returned 0x0
[0207.923] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0207.924] SelectObject (hdc=0x8b0107c5, h=0x85000f) returned 0x1e0507b9
[0207.924] DeleteDC (hdc=0x8b0107c5) returned 1
[0207.924] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0207.924] EndPaint (hWnd=0xf02c8, lpPaint=0x53e2e4) returned 1
[0207.924] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.924] IsWindowUnicode (hWnd=0x202c6) returned 1
[0207.924] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.924] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.924] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.924] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0207.924] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0207.925] CreateCompatibleDC (hdc=0xf0105ee) returned 0x8d0107c5
[0207.925] SelectObject (hdc=0x8d0107c5, h=0x1e0507b9) returned 0x85000f
[0207.925] GdipCreateFromHDC (hdc=0x8d0107c5, graphics=0x53e300) returned 0x0
[0207.925] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0207.925] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0207.925] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0207.925] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.925] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0207.925] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0207.925] LocalFree (hMem=0x89eee8) returned 0x0
[0207.925] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.925] GdipCreateRegion (region=0x53e348) returned 0x0
[0207.925] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.925] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0207.925] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0207.926] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfccd0dbd) returned 0x0
[0207.926] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.926] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0207.926] GetCurrentObject (hdc=0x8d0107c5, type=0x1) returned 0xb00017
[0207.926] GetCurrentObject (hdc=0x8d0107c5, type=0x2) returned 0x900010
[0207.926] GetCurrentObject (hdc=0x8d0107c5, type=0x7) returned 0x1e0507b9
[0207.926] GetCurrentObject (hdc=0x8d0107c5, type=0x6) returned 0x8a01c2
[0207.926] SaveDC (hdc=0x8d0107c5) returned 1
[0207.926] GetNearestColor (hdc=0x8d0107c5, color=0xff) returned 0xff
[0207.926] GetNearestColor (hdc=0x8d0107c5, color=0x55) returned 0x55
[0207.926] GetNearestColor (hdc=0x8d0107c5, color=0x0) returned 0x0
[0207.926] GetNearestColor (hdc=0x8d0107c5, color=0x55) returned 0x55
[0207.926] GetNearestColor (hdc=0x8d0107c5, color=0x0) returned 0x0
[0207.926] GetNearestColor (hdc=0x8d0107c5, color=0x8080ff) returned 0x8080ff
[0207.926] GetNearestColor (hdc=0x8d0107c5, color=0x7373e5) returned 0x7373e5
[0207.926] GetNearestColor (hdc=0x8d0107c5, color=0xe5) returned 0xe5
[0207.927] GetNearestColor (hdc=0x8d0107c5, color=0x0) returned 0x0
[0207.927] RestoreDC (hdc=0x8d0107c5, nSavedDC=-1) returned 1
[0207.927] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c5) returned 0x0
[0207.927] IsAppThemed () returned 0x1
[0207.927] GetThemeAppProperties () returned 0x3
[0207.927] GetThemeAppProperties () returned 0x3
[0207.927] IsAppThemed () returned 0x1
[0207.927] GetThemeAppProperties () returned 0x3
[0207.927] GetThemeAppProperties () returned 0x3
[0207.927] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0207.928] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x22de43c | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0207.928] IsAppThemed () returned 0x1
[0207.928] GetThemeAppProperties () returned 0x3
[0207.928] GetThemeAppProperties () returned 0x3
[0207.928] IsAppThemed () returned 0x1
[0207.928] GetThemeAppProperties () returned 0x3
[0207.929] GetThemeAppProperties () returned 0x3
[0207.929] GetFocus () returned 0x1002d6
[0207.929] IsAppThemed () returned 0x1
[0207.929] GetThemeAppProperties () returned 0x3
[0207.929] GetThemeAppProperties () returned 0x3
[0207.929] IsAppThemed () returned 0x1
[0207.929] GetThemeAppProperties () returned 0x3
[0207.929] GetThemeAppProperties () returned 0x3
[0207.929] IsThemePartDefined () returned 0x1
[0207.929] IsAppThemed () returned 0x1
[0207.929] GetThemeAppProperties () returned 0x3
[0207.929] GetThemeAppProperties () returned 0x3
[0207.929] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0207.929] IsAppThemed () returned 0x1
[0207.929] GetThemeAppProperties () returned 0x3
[0207.929] GetThemeAppProperties () returned 0x3
[0207.929] IsAppThemed () returned 0x1
[0207.929] GetThemeAppProperties () returned 0x3
[0207.929] GetThemeAppProperties () returned 0x3
[0207.929] IsThemePartDefined () returned 0x1
[0207.929] GdipCreateRegion (region=0x53e070) returned 0x0
[0207.930] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.930] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0207.930] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.930] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0207.930] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0207.930] LocalFree (hMem=0x89ec80) returned 0x0
[0207.930] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0207.930] LocalFree (hMem=0x89ea88) returned 0x0
[0207.930] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.930] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0207.930] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0207.930] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0207.930] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.930] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0207.930] GetCurrentObject (hdc=0x8d0107c5, type=0x1) returned 0xb00017
[0207.930] GetCurrentObject (hdc=0x8d0107c5, type=0x2) returned 0x900010
[0207.930] GetCurrentObject (hdc=0x8d0107c5, type=0x7) returned 0x1e0507b9
[0207.930] GetCurrentObject (hdc=0x8d0107c5, type=0x6) returned 0x8a01c2
[0207.930] SaveDC (hdc=0x8d0107c5) returned 1
[0207.931] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9c04051e
[0207.931] GetClipRgn (hdc=0x8d0107c5, hrgn=0x9c04051e) returned 0
[0207.931] SelectClipRgn (hdc=0x8d0107c5, hrgn=0xf104053e) returned 2
[0207.931] DeleteObject (ho=0x9c04051e) returned 1
[0207.931] DeleteObject (ho=0xf104053e) returned 1
[0207.931] OffsetViewportOrgEx (in: hdc=0x8d0107c5, x=0, y=0, lppt=0x22deaec | out: lppt=0x22deaec) returned 1
[0207.931] DrawThemeParentBackground () returned 0x0
[0207.931] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0207.931] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0207.931] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0207.931] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0207.931] GetSystemMetrics (nIndex=42) returned 0
[0207.931] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0207.931] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0207.932] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0207.932] GetCurrentObject (hdc=0x8d0107c5, type=0x1) returned 0xb00017
[0207.932] GetCurrentObject (hdc=0x8d0107c5, type=0x2) returned 0x900010
[0207.932] GetCurrentObject (hdc=0x8d0107c5, type=0x7) returned 0x1e0507b9
[0207.932] GetCurrentObject (hdc=0x8d0107c5, type=0x6) returned 0x8a01c2
[0207.932] SaveDC (hdc=0x8d0107c5) returned 2
[0207.932] GetNearestColor (hdc=0x8d0107c5, color=0xff) returned 0xff
[0207.932] CreateSolidBrush (color=0xff) returned 0x3a10078d
[0207.932] FillRect (hDC=0x8d0107c5, lprc=0x53dad0, hbr=0x3a10078d) returned 1
[0207.932] DeleteObject (ho=0x3a10078d) returned 1
[0207.932] RestoreDC (hdc=0x8d0107c5, nSavedDC=-1) returned 1
[0207.932] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0207.932] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0207.932] GetSystemMetrics (nIndex=42) returned 0
[0207.932] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0207.933] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0207.933] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0207.933] GetCurrentObject (hdc=0x8d0107c5, type=0x1) returned 0xb00017
[0207.933] GetCurrentObject (hdc=0x8d0107c5, type=0x2) returned 0x900010
[0207.933] GetCurrentObject (hdc=0x8d0107c5, type=0x7) returned 0x1e0507b9
[0207.933] GetCurrentObject (hdc=0x8d0107c5, type=0x6) returned 0x8a01c2
[0207.933] SaveDC (hdc=0x8d0107c5) returned 2
[0207.933] GetNearestColor (hdc=0x8d0107c5, color=0xff) returned 0xff
[0207.933] CreateSolidBrush (color=0xff) returned 0x3b10078d
[0207.933] FillRect (hDC=0x8d0107c5, lprc=0x53da70, hbr=0x3b10078d) returned 1
[0207.933] DeleteObject (ho=0x3b10078d) returned 1
[0207.933] RestoreDC (hdc=0x8d0107c5, nSavedDC=-1) returned 1
[0207.933] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0207.933] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0207.934] GetSystemMetrics (nIndex=42) returned 0
[0207.934] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0207.934] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0207.934] RestoreDC (hdc=0x8d0107c5, nSavedDC=-1) returned 1
[0207.934] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c5) returned 0x0
[0207.934] IsAppThemed () returned 0x1
[0207.934] GetThemeAppProperties () returned 0x3
[0207.934] GetThemeAppProperties () returned 0x3
[0207.934] IsAppThemed () returned 0x1
[0207.934] GetThemeAppProperties () returned 0x3
[0207.934] GetThemeAppProperties () returned 0x3
[0207.934] IsThemePartDefined () returned 0x1
[0207.934] GdipCreateRegion (region=0x53dff4) returned 0x0
[0207.934] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.934] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0207.935] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0207.935] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0207.935] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.935] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0207.935] LocalFree (hMem=0x89ea88) returned 0x0
[0207.935] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0207.935] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0207.935] LocalFree (hMem=0x89eee8) returned 0x0
[0207.935] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0207.935] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0207.935] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0207.935] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0207.935] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.935] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0207.935] GetCurrentObject (hdc=0x8d0107c5, type=0x1) returned 0xb00017
[0207.935] GetCurrentObject (hdc=0x8d0107c5, type=0x2) returned 0x900010
[0207.936] GetCurrentObject (hdc=0x8d0107c5, type=0x7) returned 0x1e0507b9
[0207.936] GetCurrentObject (hdc=0x8d0107c5, type=0x6) returned 0x8a01c2
[0207.936] SaveDC (hdc=0x8d0107c5) returned 1
[0207.936] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf204053e
[0207.936] GetClipRgn (hdc=0x8d0107c5, hrgn=0xf204053e) returned 0
[0207.936] SelectClipRgn (hdc=0x8d0107c5, hrgn=0x9e04051e) returned 2
[0207.936] DeleteObject (ho=0xf204053e) returned 1
[0207.936] DeleteObject (ho=0x9e04051e) returned 1
[0207.936] OffsetViewportOrgEx (in: hdc=0x8d0107c5, x=0, y=0, lppt=0x22df350 | out: lppt=0x22df350) returned 1
[0207.936] IsAppThemed () returned 0x1
[0207.936] GetThemeAppProperties () returned 0x3
[0207.936] GetThemeAppProperties () returned 0x3
[0207.936] DrawThemeBackground () returned 0x0
[0207.936] RestoreDC (hdc=0x8d0107c5, nSavedDC=-1) returned 1
[0207.936] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c5) returned 0x0
[0207.937] GdipCreateRegion (region=0x53dff8) returned 0x0
[0207.937] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0207.937] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0207.937] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0207.937] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0207.937] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0207.937] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0207.937] LocalFree (hMem=0x89ea88) returned 0x0
[0207.937] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0207.937] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0207.937] LocalFree (hMem=0x89ee40) returned 0x0
[0207.937] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0207.937] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0207.937] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0207.937] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0207.937] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0207.937] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0207.938] GetCurrentObject (hdc=0x8d0107c5, type=0x1) returned 0xb00017
[0207.938] GetCurrentObject (hdc=0x8d0107c5, type=0x2) returned 0x900010
[0207.938] GetCurrentObject (hdc=0x8d0107c5, type=0x7) returned 0x1e0507b9
[0207.938] GetCurrentObject (hdc=0x8d0107c5, type=0x6) returned 0x8a01c2
[0207.938] SaveDC (hdc=0x8d0107c5) returned 1
[0207.938] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9f04051e
[0207.938] GetClipRgn (hdc=0x8d0107c5, hrgn=0x9f04051e) returned 0
[0207.938] SelectClipRgn (hdc=0x8d0107c5, hrgn=0xf304053e) returned 2
[0207.938] DeleteObject (ho=0x9f04051e) returned 1
[0207.938] DeleteObject (ho=0xf304053e) returned 1
[0207.938] OffsetViewportOrgEx (in: hdc=0x8d0107c5, x=0, y=0, lppt=0x22df624 | out: lppt=0x22df624) returned 1
[0207.938] IsAppThemed () returned 0x1
[0207.938] GetThemeAppProperties () returned 0x3
[0207.938] GetThemeAppProperties () returned 0x3
[0207.938] GetThemeBackgroundContentRect () returned 0x0
[0207.938] RestoreDC (hdc=0x8d0107c5, nSavedDC=-1) returned 1
[0207.939] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c5) returned 0x0
[0207.939] IsAppThemed () returned 0x1
[0207.939] GetThemeAppProperties () returned 0x3
[0207.939] GetThemeAppProperties () returned 0x3
[0207.939] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0207.939] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0207.939] GetCurrentObject (hdc=0x8d0107c5, type=0x1) returned 0xb00017
[0207.939] GetCurrentObject (hdc=0x8d0107c5, type=0x2) returned 0x900010
[0207.939] GetCurrentObject (hdc=0x8d0107c5, type=0x7) returned 0x1e0507b9
[0207.939] GetCurrentObject (hdc=0x8d0107c5, type=0x6) returned 0x8a01c2
[0207.939] SaveDC (hdc=0x8d0107c5) returned 1
[0207.939] GetTextAlign (hdc=0x8d0107c5) returned 0x0
[0207.939] GetTextColor (hdc=0x8d0107c5) returned 0x0
[0207.939] GetCurrentObject (hdc=0x8d0107c5, type=0x6) returned 0x8a01c2
[0207.939] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0207.940] SelectObject (hdc=0x8d0107c5, h=0x450a0799) returned 0x8a01c2
[0207.940] GetBkMode (hdc=0x8d0107c5) returned 2
[0207.940] SetBkMode (hdc=0x8d0107c5, mode=1) returned 2
[0207.940] DrawTextExW (in: hdc=0x8d0107c5, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x22df9c4 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0207.940] DrawTextExW (in: hdc=0x8d0107c5, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x22df9c4 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0207.941] RestoreDC (hdc=0x8d0107c5, nSavedDC=-1) returned 1
[0207.941] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c5) returned 0x0
[0207.941] GetFocus () returned 0x1002d6
[0207.941] IsAppThemed () returned 0x1
[0207.941] GetThemeAppProperties () returned 0x3
[0207.941] GetThemeAppProperties () returned 0x3
[0207.941] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0207.941] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x8d0107c5, x1=0, y1=0, rop=0xcc0020) returned 1
[0207.941] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c5) returned 0x0
[0207.941] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0207.941] SelectObject (hdc=0x8d0107c5, h=0x85000f) returned 0x1e0507b9
[0207.941] DeleteDC (hdc=0x8d0107c5) returned 1
[0207.941] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0207.941] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0207.942] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0207.942] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0207.942] WaitMessage () returned 1
[0207.947] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.947] IsWindowUnicode (hWnd=0x13013e) returned 1
[0207.947] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.947] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.947] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.948] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.948] IsWindowUnicode (hWnd=0x13013e) returned 1
[0207.948] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0207.948] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0207.948] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0207.948] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x2a1, wParam=0x0, lParam=0x50023) returned 0x0
[0207.949] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0207.949] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0207.949] WaitMessage () returned 1
[0208.058] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0208.058] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x84, wParam=0x0, lParam=0x18e0364) returned 0x1
[0208.058] IsWindowUnicode (hWnd=0x13013e) returned 1
[0208.058] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0208.058] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x84, wParam=0x0, lParam=0x18e0364) returned 0x1
[0208.059] GetDlgItem (hDlg=0x502de, nIDDlgItem=0) returned 0x0
[0208.059] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x210, wParam=0x201, lParam=0x110145) returned 0x0
[0208.059] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x21, wParam=0x502de, lParam=0x2010001) returned 0x1
[0208.059] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x21, wParam=0x502de, lParam=0x2010001) returned 0x1
[0208.059] SetCursor (hCursor=0x10003) returned 0x10003
[0208.059] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0208.059] DispatchMessageW (lpMsg=0x53e8a0)
[0208.059] GetKeyState (nVirtKey=1) returned -128
[0208.060] GetKeyState (nVirtKey=2) returned 0
[0208.060] GetKeyState (nVirtKey=4) returned 0
[0208.060] GetKeyState (nVirtKey=5) returned 0
[0208.060] GetKeyState (nVirtKey=6) returned 0
[0208.060] IsWindowVisible (hWnd=0x13013e) returned 1
[0208.060] IsWindowEnabled (hWnd=0x13013e) returned 1
[0208.060] SetFocus (hWnd=0x13013e) returned 0x1002d6
[0208.060] GetFocus () returned 0x13013e
[0208.060] IsChild (hWndParent=0x502de, hWnd=0x13013e) returned 1
[0208.060] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x8, wParam=0x13013e, lParam=0x0) returned 0x1
[0208.061] SendMessageW (hWnd=0x1002d6, Msg=0x2111, wParam=0x20002d6, lParam=0x1002d6) returned 0x0
[0208.062] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0208.063] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0208.064] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0208.064] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0208.064] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0208.065] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0208.067] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0208.067] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x7, wParam=0x1002d6, lParam=0x0) returned 0x0
[0208.067] GetStockObject (i=5) returned 0x900015
[0208.067] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0208.067] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0xd, wParam=0x3, lParam=0x89e648) returned 0x2
[0208.068] GetDlgItem (hDlg=0x502de, nIDDlgItem=1245502) returned 0x13013e
[0208.068] SendMessageW (hWnd=0x13013e, Msg=0x202b, wParam=0x13013e, lParam=0x53de74) returned 0x0
[0208.068] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x202b, wParam=0x13013e, lParam=0x53de74) returned 0x0
[0208.068] InvalidateRect (hWnd=0x13013e, lpRect=0x0, bErase=0) returned 1
[0208.074] GetFocus () returned 0x13013e
[0208.074] GetFocus () returned 0x13013e
[0208.074] GetFocus () returned 0x13013e
[0208.074] GetKeyState (nVirtKey=1) returned -128
[0208.074] GetKeyState (nVirtKey=2) returned 0
[0208.074] GetKeyState (nVirtKey=4) returned 0
[0208.074] GetKeyState (nVirtKey=5) returned 0
[0208.074] GetKeyState (nVirtKey=6) returned 0
[0208.074] GetCapture () returned 0x0
[0208.074] SetCapture (hWnd=0x13013e) returned 0x0
[0208.074] GetKeyState (nVirtKey=1) returned -128
[0208.074] GetKeyState (nVirtKey=2) returned 0
[0208.074] GetKeyState (nVirtKey=4) returned 0
[0208.074] GetKeyState (nVirtKey=5) returned 0
[0208.074] GetKeyState (nVirtKey=6) returned 0
[0208.074] NotifyWinEvent (event=0x800a, hwnd=0x13013e, idObject=-4, idChild=0)
[0208.074] InvalidateRect (hWnd=0x13013e, lpRect=0x53e4c8, bErase=0) returned 1
[0208.075] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0208.075] IsWindowUnicode (hWnd=0x13013e) returned 1
[0208.075] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0208.075] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0208.075] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0208.075] MapWindowPoints (in: hWndFrom=0x13013e, hWndTo=0x0, lpPoints=0x22dfba8, cPoints=0x1 | out: lpPoints=0x22dfba8) returned 25756481
[0208.075] NotifyWinEvent (event=0x800a, hwnd=0x13013e, idObject=-4, idChild=0)
[0208.075] InvalidateRect (hWnd=0x13013e, lpRect=0x53e468, bErase=0) returned 1
[0208.075] UpdateWindow (hWnd=0x13013e) returned 1
[0208.075] BeginPaint (in: hWnd=0x13013e, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0xf0105ee
[0208.075] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0208.075] CreateCompatibleDC (hdc=0xf0105ee) returned 0xe901078e
[0208.076] SelectObject (hdc=0xe901078e, h=0x1e0507b9) returned 0x85000f
[0208.076] GdipCreateFromHDC (hdc=0xe901078e, graphics=0x53df98) returned 0x0
[0208.076] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0208.076] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0208.076] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0208.076] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0208.076] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0208.076] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0208.076] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0208.076] LocalFree (hMem=0x89ec80) returned 0x0
[0208.076] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0208.076] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0208.076] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0208.077] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0208.077] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0208.077] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfccb0dbd) returned 0x0
[0208.077] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0208.077] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0208.077] GetCurrentObject (hdc=0xe901078e, type=0x1) returned 0xb00017
[0208.077] GetCurrentObject (hdc=0xe901078e, type=0x2) returned 0x900010
[0208.077] GetCurrentObject (hdc=0xe901078e, type=0x7) returned 0x1e0507b9
[0208.077] GetCurrentObject (hdc=0xe901078e, type=0x6) returned 0x8a01c2
[0208.077] SaveDC (hdc=0xe901078e) returned 1
[0208.077] GetNearestColor (hdc=0xe901078e, color=0xf0f0f0) returned 0xf0f0f0
[0208.077] GetNearestColor (hdc=0xe901078e, color=0xa0a0a0) returned 0xa0a0a0
[0208.077] GetNearestColor (hdc=0xe901078e, color=0x696969) returned 0x696969
[0208.077] GetNearestColor (hdc=0xe901078e, color=0xa0a0a0) returned 0xa0a0a0
[0208.078] GetNearestColor (hdc=0xe901078e, color=0x0) returned 0x0
[0208.078] GetNearestColor (hdc=0xe901078e, color=0xffffff) returned 0xffffff
[0208.078] GetNearestColor (hdc=0xe901078e, color=0xe5e5e5) returned 0xe5e5e5
[0208.078] GetNearestColor (hdc=0xe901078e, color=0xd7d7d7) returned 0xd7d7d7
[0208.078] GetNearestColor (hdc=0xe901078e, color=0x0) returned 0x0
[0208.078] RestoreDC (hdc=0xe901078e, nSavedDC=-1) returned 1
[0208.078] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe901078e) returned 0x0
[0208.078] IsAppThemed () returned 0x1
[0208.078] GetThemeAppProperties () returned 0x3
[0208.078] GetThemeAppProperties () returned 0x3
[0208.078] IsAppThemed () returned 0x1
[0208.078] GetThemeAppProperties () returned 0x3
[0208.078] GetThemeAppProperties () returned 0x3
[0208.078] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0208.079] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x22e031c | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0208.079] IsAppThemed () returned 0x1
[0208.079] GetThemeAppProperties () returned 0x3
[0208.079] GetThemeAppProperties () returned 0x3
[0208.079] IsAppThemed () returned 0x1
[0208.079] GetThemeAppProperties () returned 0x3
[0208.079] GetThemeAppProperties () returned 0x3
[0208.079] IsAppThemed () returned 0x1
[0208.079] GetThemeAppProperties () returned 0x3
[0208.079] GetThemeAppProperties () returned 0x3
[0208.079] IsAppThemed () returned 0x1
[0208.079] GetThemeAppProperties () returned 0x3
[0208.079] GetThemeAppProperties () returned 0x3
[0208.079] IsThemePartDefined () returned 0x1
[0208.079] IsAppThemed () returned 0x1
[0208.080] GetThemeAppProperties () returned 0x3
[0208.080] GetThemeAppProperties () returned 0x3
[0208.080] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0208.080] IsAppThemed () returned 0x1
[0208.080] GetThemeAppProperties () returned 0x3
[0208.080] GetThemeAppProperties () returned 0x3
[0208.080] IsAppThemed () returned 0x1
[0208.080] GetThemeAppProperties () returned 0x3
[0208.080] GetThemeAppProperties () returned 0x3
[0208.080] IsThemePartDefined () returned 0x1
[0208.080] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0208.080] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0208.080] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0208.080] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0208.080] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0208.080] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0208.080] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0208.080] LocalFree (hMem=0x89ea88) returned 0x0
[0208.080] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0208.081] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0208.081] LocalFree (hMem=0x89ee40) returned 0x0
[0208.081] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0208.081] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0208.081] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0208.081] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0208.081] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0208.081] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0208.081] GetCurrentObject (hdc=0xe901078e, type=0x1) returned 0xb00017
[0208.081] GetCurrentObject (hdc=0xe901078e, type=0x2) returned 0x900010
[0208.081] GetCurrentObject (hdc=0xe901078e, type=0x7) returned 0x1e0507b9
[0208.081] GetCurrentObject (hdc=0xe901078e, type=0x6) returned 0x8a01c2
[0208.081] SaveDC (hdc=0xe901078e) returned 1
[0208.081] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf404053e
[0208.081] GetClipRgn (hdc=0xe901078e, hrgn=0xf404053e) returned 0
[0208.082] SelectClipRgn (hdc=0xe901078e, hrgn=0xa304051e) returned 2
[0208.082] DeleteObject (ho=0xf404053e) returned 1
[0208.082] DeleteObject (ho=0xa304051e) returned 1
[0208.082] OffsetViewportOrgEx (in: hdc=0xe901078e, x=0, y=0, lppt=0x22e09cc | out: lppt=0x22e09cc) returned 1
[0208.082] DrawThemeParentBackground ()
[0208.082] GetWindowPlacement (in: hWnd=0x502de, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0208.082] GetClientRect (in: hWnd=0x502de, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0208.082] GetWindowTextLengthW (hWnd=0x502de)
[0208.082] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0208.082] GetSystemMetrics (nIndex=42) returned 0
[0208.082] GetWindowTextW (hWnd=0x502de, lpString=0x53d878, nMaxCount=11)
[0208.082] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0208.082] GetClientRect (in: hWnd=0x502de, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0208.082] GetCurrentObject (hdc=0xe901078e, type=0x1) returned 0xb00017
[0208.083] GetCurrentObject (hdc=0xe901078e, type=0x2) returned 0x900010
[0208.083] GetCurrentObject (hdc=0xe901078e, type=0x7) returned 0x1e0507b9
[0208.083] GetCurrentObject (hdc=0xe901078e, type=0x6) returned 0x8a01c2
[0208.083] SaveDC (hdc=0xe901078e) returned 2
[0208.083] GetNearestColor (hdc=0xe901078e, color=0xf0f0f0) returned 0xf0f0f0
[0208.083] CreateSolidBrush (color=0xf0f0f0) returned 0x3c10078d
[0208.083] FillRect (hDC=0xe901078e, lprc=0x53d760, hbr=0x3c10078d) returned 1
[0208.083] DeleteObject (ho=0x3c10078d) returned 1
[0208.083] RestoreDC (hdc=0xe901078e, nSavedDC=-1) returned 1
[0208.084] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0208.084] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0208.088] GetClientRect (in: hWnd=0x502de, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0208.088] GetCurrentObject (hdc=0xe901078e, type=0x1) returned 0xb00017
[0208.088] GetCurrentObject (hdc=0xe901078e, type=0x2) returned 0x900010
[0208.088] GetCurrentObject (hdc=0xe901078e, type=0x7) returned 0x1e0507b9
[0208.088] GetCurrentObject (hdc=0xe901078e, type=0x6) returned 0x8a01c2
[0208.088] SaveDC (hdc=0xe901078e) returned 2
[0208.088] GetNearestColor (hdc=0xe901078e, color=0xf0f0f0) returned 0xf0f0f0
[0208.088] CreateSolidBrush (color=0xf0f0f0) returned 0x3d10078d
[0208.088] FillRect (hDC=0xe901078e, lprc=0x53d700, hbr=0x3d10078d) returned 1
[0208.089] DeleteObject (ho=0x3d10078d) returned 1
[0208.089] RestoreDC (hdc=0xe901078e, nSavedDC=-1) returned 1
[0208.089] GetWindowTextLengthW (hWnd=0x502de)
[0208.089] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0208.089] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0208.090] RestoreDC (hdc=0xe901078e, nSavedDC=-1) returned 1
[0208.090] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe901078e) returned 0x0
[0208.090] IsAppThemed () returned 0x1
[0208.090] GetThemeAppProperties () returned 0x3
[0208.090] GetThemeAppProperties () returned 0x3
[0208.090] IsAppThemed () returned 0x1
[0208.090] GetThemeAppProperties () returned 0x3
[0208.090] GetThemeAppProperties () returned 0x3
[0208.090] IsThemePartDefined () returned 0x1
[0208.090] GdipCreateRegion (region=0x53dc80) returned 0x0
[0208.090] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0208.091] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0208.091] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0208.091] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0208.091] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0208.091] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0208.091] LocalFree (hMem=0x89ec80) returned 0x0
[0208.091] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0208.091] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0208.091] LocalFree (hMem=0x89eac0) returned 0x0
[0208.091] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0208.091] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0208.091] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0208.091] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0208.091] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0208.092] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0208.092] GetCurrentObject (hdc=0xe901078e, type=0x1) returned 0xb00017
[0208.092] GetCurrentObject (hdc=0xe901078e, type=0x2) returned 0x900010
[0208.092] GetCurrentObject (hdc=0xe901078e, type=0x7) returned 0x1e0507b9
[0208.092] GetCurrentObject (hdc=0xe901078e, type=0x6) returned 0x8a01c2
[0208.092] SaveDC (hdc=0xe901078e) returned 1
[0208.092] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa404051e
[0208.092] GetClipRgn (hdc=0xe901078e, hrgn=0xa404051e) returned 0
[0208.092] SelectClipRgn (hdc=0xe901078e, hrgn=0xf604053e) returned 2
[0208.092] DeleteObject (ho=0xa404051e) returned 1
[0208.092] DeleteObject (ho=0xf604053e) returned 1
[0208.092] OffsetViewportOrgEx (in: hdc=0xe901078e, x=0, y=0, lppt=0x22e1254 | out: lppt=0x22e1254) returned 1
[0208.092] IsAppThemed () returned 0x1
[0208.093] GetThemeAppProperties () returned 0x3
[0208.093] GetThemeAppProperties () returned 0x3
[0208.093] DrawThemeBackground () returned 0x0
[0208.093] RestoreDC (hdc=0xe901078e, nSavedDC=-1) returned 1
[0208.093] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe901078e) returned 0x0
[0208.093] GdipCreateRegion (region=0x53dc84) returned 0x0
[0208.093] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0208.093] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0208.093] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0208.093] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0208.093] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0208.093] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0208.093] LocalFree (hMem=0x89ea88) returned 0x0
[0208.093] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0208.093] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0208.093] LocalFree (hMem=0x89ec80) returned 0x0
[0208.093] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0208.093] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0208.094] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0208.094] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0208.094] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0208.094] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0208.094] GetCurrentObject (hdc=0xe901078e, type=0x1) returned 0xb00017
[0208.094] GetCurrentObject (hdc=0xe901078e, type=0x2) returned 0x900010
[0208.094] GetCurrentObject (hdc=0xe901078e, type=0x7) returned 0x1e0507b9
[0208.094] GetCurrentObject (hdc=0xe901078e, type=0x6) returned 0x8a01c2
[0208.094] SaveDC (hdc=0xe901078e) returned 1
[0208.094] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf704053e
[0208.094] GetClipRgn (hdc=0xe901078e, hrgn=0xf704053e) returned 0
[0208.094] SelectClipRgn (hdc=0xe901078e, hrgn=0xa504051e) returned 2
[0208.094] DeleteObject (ho=0xf704053e) returned 1
[0208.094] DeleteObject (ho=0xa504051e) returned 1
[0208.094] OffsetViewportOrgEx (in: hdc=0xe901078e, x=0, y=0, lppt=0x22e1528 | out: lppt=0x22e1528) returned 1
[0208.095] IsAppThemed () returned 0x1
[0208.095] GetThemeAppProperties () returned 0x3
[0208.095] GetThemeAppProperties () returned 0x3
[0208.095] GetThemeBackgroundContentRect () returned 0x0
[0208.095] RestoreDC (hdc=0xe901078e, nSavedDC=-1) returned 1
[0208.095] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe901078e) returned 0x0
[0208.095] IsAppThemed () returned 0x1
[0208.095] GetThemeAppProperties () returned 0x3
[0208.095] GetThemeAppProperties () returned 0x3
[0208.095] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0208.095] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0208.095] GetCurrentObject (hdc=0xe901078e, type=0x1) returned 0xb00017
[0208.095] GetCurrentObject (hdc=0xe901078e, type=0x2) returned 0x900010
[0208.095] GetCurrentObject (hdc=0xe901078e, type=0x7) returned 0x1e0507b9
[0208.095] GetCurrentObject (hdc=0xe901078e, type=0x6) returned 0x8a01c2
[0208.095] SaveDC (hdc=0xe901078e) returned 1
[0208.095] GetTextAlign (hdc=0xe901078e) returned 0x0
[0208.096] GetTextColor (hdc=0xe901078e) returned 0x0
[0208.096] GetCurrentObject (hdc=0xe901078e, type=0x6) returned 0x8a01c2
[0208.096] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0208.096] SelectObject (hdc=0xe901078e, h=0x730a066d) returned 0x8a01c2
[0208.096] GetBkMode (hdc=0xe901078e) returned 2
[0208.096] SetBkMode (hdc=0xe901078e, mode=1) returned 2
[0208.096] DrawTextExW (in: hdc=0xe901078e, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x22e18c8 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0208.096] DrawTextExW (in: hdc=0xe901078e, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x22e18c8 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0208.097] RestoreDC (hdc=0xe901078e, nSavedDC=-1) returned 1
[0208.097] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe901078e) returned 0x0
[0208.097] GetFocus () returned 0x13013e
[0208.097] IsAppThemed () returned 0x1
[0208.097] GetThemeAppProperties () returned 0x3
[0208.097] GetThemeAppProperties () returned 0x3
[0208.097] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0208.097] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xe901078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0208.097] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe901078e) returned 0x0
[0208.097] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0208.097] SelectObject (hdc=0xe901078e, h=0x85000f) returned 0x1e0507b9
[0208.097] DeleteDC (hdc=0xe901078e) returned 1
[0208.098] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0208.098] EndPaint (hWnd=0x13013e, lpPaint=0x53df7c) returned 1
[0208.098] MapWindowPoints (in: hWndFrom=0x13013e, hWndTo=0x0, lpPoints=0x22e19c4, cPoints=0x1 | out: lpPoints=0x22e19c4) returned 25756481
[0208.098] WindowFromPoint (Point=0x364) returned 0x13013e
[0208.098] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x84, wParam=0x0, lParam=0x18e0364) returned 0x1
[0208.098] NotifyWinEvent (event=0x800a, hwnd=0x13013e, idObject=-4, idChild=0)
[0208.098] NotifyWinEvent (event=0x800c, hwnd=0x13013e, idObject=-4, idChild=0)
[0208.098] GetWindowTextLengthW (hWnd=0x1002d6) returned 0
[0208.098] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0208.098] GetSystemMetrics (nIndex=42) returned 0
[0208.098] GetWindowTextW (in: hWnd=0x1002d6, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0208.098] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0208.099] SendMessageW (hWnd=0x502de, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0208.099] GetCapture () returned 0x13013e
[0208.099] ReleaseCapture () returned 1
[0208.099] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0208.099] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0208.100] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x84, wParam=0x0, lParam=0x18e0364) returned 0x1
[0208.100] IsWindow (hWnd=0x70036) returned 1
[0208.100] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0208.101] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0208.101] IsWindow (hWnd=0x70036) returned 1
[0208.101] SetActiveWindow (hWnd=0x70036) returned 0x502de
[0208.101] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0208.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0208.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0208.104] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0208.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0208.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0208.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0208.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x502de) returned 0x1
[0208.108] GetFocus () returned 0x13013e
[0208.108] SetFocus (hWnd=0x202c6) returned 0x13013e
[0208.109] GetFocus () returned 0x202c6
[0208.109] IsChild (hWndParent=0x502de, hWnd=0x202c6) returned 0
[0208.109] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0208.109] GetCapture () returned 0x0
[0208.109] InvalidateRect (hWnd=0x13013e, lpRect=0x0, bErase=0) returned 1
[0208.110] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0208.111] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0208.113] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0208.113] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0208.113] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0208.113] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0208.114] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0208.114] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x13013e, lParam=0x0) returned 0x0
[0208.114] GetStockObject (i=5) returned 0x900015
[0208.114] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0208.114] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8da7a8) returned 0x7
[0208.115] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0208.115] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0208.115] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0208.115] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0208.116] IsWindow (hWnd=0x202c6) returned 1
[0208.117] SetFocus (hWnd=0x202c6) returned 0x202c6
[0208.117] GetWindowLongW (hWnd=0x502de, nIndex=-8) returned 458806
[0208.117] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0208.117] GetCurrentThreadId () returned 0x11d0
[0208.117] IsWindow (hWnd=0x70036) returned 1
[0208.117] IsWindow (hWnd=0x70036) returned 1
[0208.117] IsWindowVisible (hWnd=0x70036) returned 1
[0208.117] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0208.117] GetFocus () returned 0x202c6
[0208.117] IsChild (hWndParent=0x502de, hWnd=0x202c6) returned 0
[0208.117] ShowWindow (hWnd=0x502de, nCmdShow=0) returned 1
[0208.117] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0208.117] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0208.126] GetWindowPlacement (in: hWnd=0x502de, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0208.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0208.126] GetClientRect (in: hWnd=0x502de, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0208.126] GetWindowRect (in: hWnd=0x502de, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0208.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0208.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0208.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0208.128] GetWindowLongW (hWnd=0x502de, nIndex=-20) returned 327937
[0208.128] DestroyWindow (hWnd=0x502de) returned 1
[0208.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0208.128] GetWindowTextLengthW (hWnd=0x502de) returned 10
[0208.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0208.128] GetSystemMetrics (nIndex=42) returned 0
[0208.128] GetWindowTextW (in: hWnd=0x502de, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0208.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0208.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0208.129] SendMessageW (hWnd=0x1002d6, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0208.129] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0208.129] SendMessageW (hWnd=0x1002d6, Msg=0xb0, wParam=0x22cb32c, lParam=0x53e518) returned 0x0
[0208.129] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xb0, wParam=0x22cb32c, lParam=0x53e518) returned 0x0
[0208.129] GetWindowTextLengthW (hWnd=0x1002d6) returned 0
[0208.129] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0208.129] GetSystemMetrics (nIndex=42) returned 0
[0208.129] GetWindowTextW (in: hWnd=0x1002d6, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0208.129] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0208.129] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0208.130] GetWindowThreadProcessId (in: hWnd=0x1002d2, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0208.130] GetWindow (hWnd=0x1002d2, uCmd=0x5) returned 0x0
[0208.130] GetWindowLongW (hWnd=0x1002d2, nIndex=-20) returned 65792
[0208.130] DestroyWindow (hWnd=0x1002d2) returned 1
[0208.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002d2, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0208.130] GetWindowTextLengthW (hWnd=0x1002d2) returned 25
[0208.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0208.130] GetSystemMetrics (nIndex=42) returned 0
[0208.130] GetWindowTextW (in: hWnd=0x1002d2, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0208.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002d2, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0208.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0208.131] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0208.132] GetWindowTextLengthW (hWnd=0xc02b4) returned 16
[0208.132] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0208.132] GetSystemMetrics (nIndex=42) returned 0
[0208.132] GetWindowTextW (in: hWnd=0xc02b4, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0208.132] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0208.133] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0208.133] InvalidateRect (hWnd=0x13013e, lpRect=0x0, bErase=0) returned 1
[0208.133] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0208.133] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0208.134] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1002d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0208.135] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02b4, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0208.136] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x13013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0208.138] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0208.139] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502de, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0208.141] GetProcessWindowStation () returned 0x13c
[0208.141] GetActiveWindow () returned 0x70036
[0208.142] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0208.142] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0208.142] GetCurrentThreadId () returned 0x11d0
[0208.142] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3d8e, lParam=0x0) returned 1
[0208.142] IsWindowVisible (hWnd=0x70036) returned 1
[0208.142] IsWindowEnabled (hWnd=0x70036) returned 1
[0208.142] IsWindowVisible (hWnd=0x602b6) returned 0
[0208.142] IsWindowVisible (hWnd=0x901f8) returned 0
[0208.142] IsWindowVisible (hWnd=0x202d0) returned 0
[0208.142] IsWindowVisible (hWnd=0x202d4) returned 0
[0208.142] GetActiveWindow () returned 0x70036
[0208.143] GetFocus () returned 0x202c6
[0208.143] IsWindow (hWnd=0x70036) returned 1
[0208.143] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0208.143] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0208.158] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0208.158] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0208.160] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0208.175] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x602de) returned 0x1
[0208.179] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0208.180] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0208.183] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1002c8, lParam=0x0) returned 0x0
[0208.183] GetCapture () returned 0x0
[0208.183] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0208.184] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0208.187] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0208.187] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0208.191] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0xf0105ee
[0208.191] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0208.191] CreateCompatibleDC (hdc=0xf0105ee) returned 0x1d010527
[0208.191] SelectObject (hdc=0x1d010527, h=0x1e0507b9) returned 0x85000f
[0208.191] GdipCreateFromHDC (hdc=0x1d010527, graphics=0x53e108) returned 0x0
[0208.191] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0208.191] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0208.192] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0208.192] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0208.192] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0208.192] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0208.192] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0208.192] LocalFree (hMem=0x89ea88) returned 0x0
[0208.192] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0208.192] GdipCreateRegion (region=0x53e150) returned 0x0
[0208.192] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0208.192] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0208.192] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0208.192] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcc90dbd) returned 0x0
[0208.192] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0208.193] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0208.193] GetCurrentObject (hdc=0x1d010527, type=0x1) returned 0xb00017
[0208.193] GetCurrentObject (hdc=0x1d010527, type=0x2) returned 0x900010
[0208.193] GetCurrentObject (hdc=0x1d010527, type=0x7) returned 0x1e0507b9
[0208.193] GetCurrentObject (hdc=0x1d010527, type=0x6) returned 0x8a01c2
[0208.199] SaveDC (hdc=0x1d010527) returned 1
[0208.199] GetNearestColor (hdc=0x1d010527, color=0xff) returned 0xff
[0208.199] GetNearestColor (hdc=0x1d010527, color=0x55) returned 0x55
[0208.200] GetNearestColor (hdc=0x1d010527, color=0x0) returned 0x0
[0208.200] GetNearestColor (hdc=0x1d010527, color=0x55) returned 0x55
[0208.200] GetNearestColor (hdc=0x1d010527, color=0x0) returned 0x0
[0208.200] GetNearestColor (hdc=0x1d010527, color=0x8080ff) returned 0x8080ff
[0208.200] GetNearestColor (hdc=0x1d010527, color=0x7373e5) returned 0x7373e5
[0208.200] GetNearestColor (hdc=0x1d010527, color=0xe5) returned 0xe5
[0208.200] GetNearestColor (hdc=0x1d010527, color=0x0) returned 0x0
[0208.200] RestoreDC (hdc=0x1d010527, nSavedDC=-1) returned 1
[0208.200] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1d010527) returned 0x0
[0208.200] IsAppThemed () returned 0x1
[0208.201] GetThemeAppProperties () returned 0x3
[0208.201] GetThemeAppProperties () returned 0x3
[0208.201] IsAppThemed () returned 0x1
[0208.201] GetThemeAppProperties () returned 0x3
[0208.201] GetThemeAppProperties () returned 0x3
[0208.201] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0208.201] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x22e2ce0 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0208.201] IsAppThemed () returned 0x1
[0208.202] GetThemeAppProperties () returned 0x3
[0208.202] GetThemeAppProperties () returned 0x3
[0208.202] IsAppThemed () returned 0x1
[0208.202] GetThemeAppProperties () returned 0x3
[0208.202] GetThemeAppProperties () returned 0x3
[0208.202] GetFocus () returned 0x1002c8
[0208.202] IsAppThemed () returned 0x1
[0208.202] GetThemeAppProperties () returned 0x3
[0208.202] GetThemeAppProperties () returned 0x3
[0208.202] IsAppThemed () returned 0x1
[0208.202] GetThemeAppProperties () returned 0x3
[0208.202] GetThemeAppProperties () returned 0x3
[0208.202] IsThemePartDefined () returned 0x1
[0208.202] IsAppThemed () returned 0x1
[0208.203] GetThemeAppProperties () returned 0x3
[0208.203] GetThemeAppProperties () returned 0x3
[0208.203] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0208.203] IsAppThemed () returned 0x1
[0208.203] GetThemeAppProperties () returned 0x3
[0208.203] GetThemeAppProperties () returned 0x3
[0208.203] IsAppThemed () returned 0x1
[0208.203] GetThemeAppProperties () returned 0x3
[0208.203] GetThemeAppProperties () returned 0x3
[0208.203] IsThemePartDefined () returned 0x1
[0208.203] GdipCreateRegion (region=0x53de78) returned 0x0
[0208.203] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0208.203] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0208.203] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0208.204] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0208.204] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0208.204] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0208.204] LocalFree (hMem=0x89ea88) returned 0x0
[0208.204] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0208.204] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0208.204] LocalFree (hMem=0x89ea88) returned 0x0
[0208.204] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0208.204] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0208.204] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0208.204] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0208.204] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0208.204] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0208.205] GetCurrentObject (hdc=0x1d010527, type=0x1) returned 0xb00017
[0208.205] GetCurrentObject (hdc=0x1d010527, type=0x2) returned 0x900010
[0208.205] GetCurrentObject (hdc=0x1d010527, type=0x7) returned 0x1e0507b9
[0208.205] GetCurrentObject (hdc=0x1d010527, type=0x6) returned 0x8a01c2
[0208.205] SaveDC (hdc=0x1d010527) returned 1
[0208.205] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa604051e
[0208.205] GetClipRgn (hdc=0x1d010527, hrgn=0xa604051e) returned 0
[0208.205] SelectClipRgn (hdc=0x1d010527, hrgn=0xfd04053e) returned 2
[0208.205] DeleteObject (ho=0xa604051e) returned 1
[0208.205] DeleteObject (ho=0xfd04053e) returned 1
[0208.205] OffsetViewportOrgEx (in: hdc=0x1d010527, x=0, y=0, lppt=0x22e3390 | out: lppt=0x22e3390) returned 1
[0208.206] DrawThemeParentBackground () returned 0x0
[0208.206] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0208.206] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0208.206] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0208.206] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0208.206] GetSystemMetrics (nIndex=42) returned 0
[0208.206] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0208.206] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0208.206] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0208.206] GetCurrentObject (hdc=0x1d010527, type=0x1) returned 0xb00017
[0208.207] GetCurrentObject (hdc=0x1d010527, type=0x2) returned 0x900010
[0208.207] GetCurrentObject (hdc=0x1d010527, type=0x7) returned 0x1e0507b9
[0208.207] GetCurrentObject (hdc=0x1d010527, type=0x6) returned 0x8a01c2
[0208.207] SaveDC (hdc=0x1d010527) returned 2
[0208.207] GetNearestColor (hdc=0x1d010527, color=0xff) returned 0xff
[0208.207] CreateSolidBrush (color=0xff) returned 0x3e10078d
[0208.207] FillRect (hDC=0x1d010527, lprc=0x53d8d8, hbr=0x3e10078d) returned 1
[0208.207] DeleteObject (ho=0x3e10078d) returned 1
[0208.207] RestoreDC (hdc=0x1d010527, nSavedDC=-1) returned 1
[0208.208] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0208.208] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0208.208] GetSystemMetrics (nIndex=42) returned 0
[0208.208] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0208.208] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0208.208] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0208.208] GetCurrentObject (hdc=0x1d010527, type=0x1) returned 0xb00017
[0208.208] GetCurrentObject (hdc=0x1d010527, type=0x2) returned 0x900010
[0208.208] GetCurrentObject (hdc=0x1d010527, type=0x7) returned 0x1e0507b9
[0208.208] GetCurrentObject (hdc=0x1d010527, type=0x6) returned 0x8a01c2
[0208.208] SaveDC (hdc=0x1d010527) returned 2
[0208.208] GetNearestColor (hdc=0x1d010527, color=0xff) returned 0xff
[0208.221] CreateSolidBrush (color=0xff) returned 0x3f10078d
[0208.222] FillRect (hDC=0x1d010527, lprc=0x53d878, hbr=0x3f10078d) returned 1
[0208.222] DeleteObject (ho=0x3f10078d) returned 1
[0208.222] RestoreDC (hdc=0x1d010527, nSavedDC=-1) returned 1
[0208.222] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0208.222] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0208.222] GetSystemMetrics (nIndex=42) returned 0
[0208.222] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0208.222] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0208.223] RestoreDC (hdc=0x1d010527, nSavedDC=-1) returned 1
[0208.223] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1d010527) returned 0x0
[0208.223] IsAppThemed () returned 0x1
[0208.225] GetThemeAppProperties () returned 0x3
[0208.225] GetThemeAppProperties () returned 0x3
[0208.225] IsAppThemed () returned 0x1
[0208.226] GetThemeAppProperties () returned 0x3
[0208.226] GetThemeAppProperties () returned 0x3
[0208.226] IsThemePartDefined () returned 0x1
[0208.226] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0208.226] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0208.226] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0208.226] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0208.226] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0208.226] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0208.226] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0208.226] LocalFree (hMem=0x89ec80) returned 0x0
[0208.226] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0208.226] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0208.226] LocalFree (hMem=0x89ee40) returned 0x0
[0208.226] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0208.226] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0208.227] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0208.227] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0208.227] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0208.227] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0208.227] GetCurrentObject (hdc=0x1d010527, type=0x1) returned 0xb00017
[0208.227] GetCurrentObject (hdc=0x1d010527, type=0x2) returned 0x900010
[0208.227] GetCurrentObject (hdc=0x1d010527, type=0x7) returned 0x1e0507b9
[0208.227] GetCurrentObject (hdc=0x1d010527, type=0x6) returned 0x8a01c2
[0208.227] SaveDC (hdc=0x1d010527) returned 1
[0208.227] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfe04053e
[0208.227] GetClipRgn (hdc=0x1d010527, hrgn=0xfe04053e) returned 0
[0208.227] SelectClipRgn (hdc=0x1d010527, hrgn=0xa804051e) returned 2
[0208.227] DeleteObject (ho=0xfe04053e) returned 1
[0208.227] DeleteObject (ho=0xa804051e) returned 1
[0208.228] OffsetViewportOrgEx (in: hdc=0x1d010527, x=0, y=0, lppt=0x22e3bf4 | out: lppt=0x22e3bf4) returned 1
[0208.228] IsAppThemed () returned 0x1
[0208.228] GetThemeAppProperties () returned 0x3
[0208.228] GetThemeAppProperties () returned 0x3
[0208.228] DrawThemeBackground () returned 0x0
[0208.228] RestoreDC (hdc=0x1d010527, nSavedDC=-1) returned 1
[0208.228] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1d010527) returned 0x0
[0208.228] GdipCreateRegion (region=0x53de00) returned 0x0
[0208.228] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0208.228] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0208.228] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0208.228] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0208.228] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0208.228] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0208.229] LocalFree (hMem=0x89ea88) returned 0x0
[0208.229] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0208.229] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0208.229] LocalFree (hMem=0x89eac0) returned 0x0
[0208.229] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0208.229] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0208.229] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0208.229] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0208.229] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0208.229] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0208.229] GetCurrentObject (hdc=0x1d010527, type=0x1) returned 0xb00017
[0208.229] GetCurrentObject (hdc=0x1d010527, type=0x2) returned 0x900010
[0208.229] GetCurrentObject (hdc=0x1d010527, type=0x7) returned 0x1e0507b9
[0208.229] GetCurrentObject (hdc=0x1d010527, type=0x6) returned 0x8a01c2
[0208.229] SaveDC (hdc=0x1d010527) returned 1
[0208.229] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa904051e
[0208.230] GetClipRgn (hdc=0x1d010527, hrgn=0xa904051e) returned 0
[0208.230] SelectClipRgn (hdc=0x1d010527, hrgn=0xff04053e) returned 2
[0208.230] DeleteObject (ho=0xa904051e) returned 1
[0208.230] DeleteObject (ho=0xff04053e) returned 1
[0208.230] OffsetViewportOrgEx (in: hdc=0x1d010527, x=0, y=0, lppt=0x22e3ec8 | out: lppt=0x22e3ec8) returned 1
[0208.230] IsAppThemed () returned 0x1
[0208.230] GetThemeAppProperties () returned 0x3
[0208.230] GetThemeAppProperties () returned 0x3
[0208.230] GetThemeBackgroundContentRect () returned 0x0
[0208.230] RestoreDC (hdc=0x1d010527, nSavedDC=-1) returned 1
[0208.230] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1d010527) returned 0x0
[0208.230] IsAppThemed () returned 0x1
[0208.230] GetThemeAppProperties () returned 0x3
[0208.230] GetThemeAppProperties () returned 0x3
[0208.230] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0208.230] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0208.230] GetCurrentObject (hdc=0x1d010527, type=0x1) returned 0xb00017
[0208.231] GetCurrentObject (hdc=0x1d010527, type=0x2) returned 0x900010
[0208.231] GetCurrentObject (hdc=0x1d010527, type=0x7) returned 0x1e0507b9
[0208.231] GetCurrentObject (hdc=0x1d010527, type=0x6) returned 0x8a01c2
[0208.231] SaveDC (hdc=0x1d010527) returned 1
[0208.231] GetTextAlign (hdc=0x1d010527) returned 0x0
[0208.231] GetTextColor (hdc=0x1d010527) returned 0x0
[0208.231] GetCurrentObject (hdc=0x1d010527, type=0x6) returned 0x8a01c2
[0208.231] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0208.231] SelectObject (hdc=0x1d010527, h=0x450a0799) returned 0x8a01c2
[0208.231] GetBkMode (hdc=0x1d010527) returned 2
[0208.231] SetBkMode (hdc=0x1d010527, mode=1) returned 2
[0208.232] DrawTextExW (in: hdc=0x1d010527, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x22e4268 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0208.232] DrawTextExW (in: hdc=0x1d010527, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x22e4268 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0208.232] RestoreDC (hdc=0x1d010527, nSavedDC=-1) returned 1
[0208.232] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1d010527) returned 0x0
[0208.232] GetFocus () returned 0x1002c8
[0208.232] IsAppThemed () returned 0x1
[0208.233] GetThemeAppProperties () returned 0x3
[0208.233] GetThemeAppProperties () returned 0x3
[0208.233] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0208.233] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x1d010527, x1=0, y1=0, rop=0xcc0020) returned 1
[0208.233] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1d010527) returned 0x0
[0208.233] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0208.233] SelectObject (hdc=0x1d010527, h=0x85000f) returned 0x1e0507b9
[0208.233] DeleteDC (hdc=0x1d010527) returned 1
[0208.233] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0208.233] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0208.594] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0208.594] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0208.595] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x602de) returned 0x1
[0208.598] GetFocus () returned 0x602de
[0208.598] GetAncestor (hwnd=0x602de, gaFlags=0x1) returned 0x10010
[0208.598] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0208.598] SetFocus (hWnd=0x202c6) returned 0x0
[0208.611] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0208.612] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0208.612] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0208.613] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0208.613] GetFocus () returned 0x70036
[0208.613] SetFocus (hWnd=0x202c6) returned 0x0
[0208.637] IsWindow (hWnd=0x70036) returned 1
[0208.637] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0208.638] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0208.638] IsWindow (hWnd=0x70036) returned 1
[0208.638] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0208.638] IsWindow (hWnd=0x202c6) returned 1
[0208.638] SetFocus (hWnd=0x202c6) returned 0x70036
[0208.638] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0208.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0208.642] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0208.645] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0208.645] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0208.645] GetStockObject (i=5) returned 0x900015
[0208.645] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0208.645] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8da940) returned 0x7
[0208.645] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0208.645] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0208.645] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0208.646] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0208.653] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0208.653] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0208.653] GetFocus () returned 0x202c6
[0208.653] GetCapture () returned 0x0
[0208.653] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.654] IsWindowUnicode (hWnd=0x202c6) returned 1
[0208.654] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.654] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.654] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.654] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.655] IsWindowUnicode (hWnd=0x202c6) returned 1
[0208.655] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.655] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.655] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.656] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0208.656] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0208.656] CreateCompatibleDC (hdc=0xf0105ee) returned 0x50010785
[0208.656] SelectObject (hdc=0x50010785, h=0x1e0507b9) returned 0x85000f
[0208.656] GdipCreateFromHDC (hdc=0x50010785, graphics=0x53e958) returned 0x0
[0208.656] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0208.656] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0208.656] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0208.657] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0208.657] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0208.657] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0208.657] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0208.657] LocalFree (hMem=0x89ee08) returned 0x0
[0208.657] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0208.657] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0208.657] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0208.657] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0208.657] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0208.657] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcc70dbd) returned 0x0
[0208.657] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0208.657] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0208.657] GetCurrentObject (hdc=0x50010785, type=0x1) returned 0xb00017
[0208.657] GetCurrentObject (hdc=0x50010785, type=0x2) returned 0x900010
[0208.657] GetCurrentObject (hdc=0x50010785, type=0x7) returned 0x1e0507b9
[0208.658] GetCurrentObject (hdc=0x50010785, type=0x6) returned 0x8a01c2
[0208.658] SaveDC (hdc=0x50010785) returned 1
[0208.658] GetNearestColor (hdc=0x50010785, color=0xff) returned 0xff
[0208.658] GetNearestColor (hdc=0x50010785, color=0x55) returned 0x55
[0208.658] GetNearestColor (hdc=0x50010785, color=0x0) returned 0x0
[0208.658] GetNearestColor (hdc=0x50010785, color=0x55) returned 0x55
[0208.658] GetNearestColor (hdc=0x50010785, color=0x0) returned 0x0
[0208.658] GetNearestColor (hdc=0x50010785, color=0x8080ff) returned 0x8080ff
[0208.658] GetNearestColor (hdc=0x50010785, color=0x7373e5) returned 0x7373e5
[0208.658] GetNearestColor (hdc=0x50010785, color=0xe5) returned 0xe5
[0208.658] GetNearestColor (hdc=0x50010785, color=0x0) returned 0x0
[0208.658] RestoreDC (hdc=0x50010785, nSavedDC=-1) returned 1
[0208.659] GdipReleaseDC (graphics=0x5d92c30, hdc=0x50010785) returned 0x0
[0208.659] IsAppThemed () returned 0x1
[0208.659] GetThemeAppProperties () returned 0x3
[0208.659] GetThemeAppProperties () returned 0x3
[0208.659] IsAppThemed () returned 0x1
[0208.659] GetThemeAppProperties () returned 0x3
[0208.659] GetThemeAppProperties () returned 0x3
[0208.659] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x22e4ac4 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0208.659] IsAppThemed () returned 0x1
[0208.660] GetThemeAppProperties () returned 0x3
[0208.660] GetThemeAppProperties () returned 0x3
[0208.660] IsAppThemed () returned 0x1
[0208.660] GetThemeAppProperties () returned 0x3
[0208.660] GetThemeAppProperties () returned 0x3
[0208.660] GetFocus () returned 0x202c6
[0208.660] IsAppThemed () returned 0x1
[0208.660] GetThemeAppProperties () returned 0x3
[0208.660] GetThemeAppProperties () returned 0x3
[0208.660] IsAppThemed () returned 0x1
[0208.660] GetThemeAppProperties () returned 0x3
[0208.660] GetThemeAppProperties () returned 0x3
[0208.660] IsThemePartDefined () returned 0x1
[0208.660] IsAppThemed () returned 0x1
[0208.661] GetThemeAppProperties () returned 0x3
[0208.661] GetThemeAppProperties () returned 0x3
[0208.661] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0208.661] IsAppThemed () returned 0x1
[0208.661] GetThemeAppProperties () returned 0x3
[0208.661] GetThemeAppProperties () returned 0x3
[0208.661] IsAppThemed () returned 0x1
[0208.661] GetThemeAppProperties () returned 0x3
[0208.661] GetThemeAppProperties () returned 0x3
[0208.661] IsThemePartDefined () returned 0x1
[0208.661] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0208.661] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0208.661] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0208.661] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0208.661] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0208.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0208.661] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0208.661] LocalFree (hMem=0x89ea88) returned 0x0
[0208.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0208.661] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0208.661] LocalFree (hMem=0x89ea88) returned 0x0
[0208.662] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0208.662] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0208.662] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0208.665] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0208.665] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0208.665] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0208.665] GetCurrentObject (hdc=0x50010785, type=0x1) returned 0xb00017
[0208.665] GetCurrentObject (hdc=0x50010785, type=0x2) returned 0x900010
[0208.665] GetCurrentObject (hdc=0x50010785, type=0x7) returned 0x1e0507b9
[0208.665] GetCurrentObject (hdc=0x50010785, type=0x6) returned 0x8a01c2
[0208.666] SaveDC (hdc=0x50010785) returned 1
[0208.666] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa04053e
[0208.666] GetClipRgn (hdc=0x50010785, hrgn=0xa04053e) returned 0
[0208.666] SelectClipRgn (hdc=0x50010785, hrgn=0x3a040798) returned 2
[0208.666] DeleteObject (ho=0xa04053e) returned 1
[0208.666] DeleteObject (ho=0x3a040798) returned 1
[0208.666] OffsetViewportOrgEx (in: hdc=0x50010785, x=0, y=0, lppt=0x22e5174 | out: lppt=0x22e5174) returned 1
[0208.666] DrawThemeParentBackground () returned 0x0
[0208.666] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0208.666] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0208.666] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0208.666] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0208.666] GetSystemMetrics (nIndex=42) returned 0
[0208.666] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0208.666] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0208.666] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0208.667] GetCurrentObject (hdc=0x50010785, type=0x1) returned 0xb00017
[0208.667] GetCurrentObject (hdc=0x50010785, type=0x2) returned 0x900010
[0208.667] GetCurrentObject (hdc=0x50010785, type=0x7) returned 0x1e0507b9
[0208.667] GetCurrentObject (hdc=0x50010785, type=0x6) returned 0x8a01c2
[0208.667] SaveDC (hdc=0x50010785) returned 2
[0208.667] GetNearestColor (hdc=0x50010785, color=0xff) returned 0xff
[0208.667] CreateSolidBrush (color=0xff) returned 0x4110078d
[0208.667] FillRect (hDC=0x50010785, lprc=0x53e128, hbr=0x4110078d) returned 1
[0208.667] DeleteObject (ho=0x4110078d) returned 1
[0208.667] RestoreDC (hdc=0x50010785, nSavedDC=-1) returned 1
[0208.667] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0208.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0208.667] GetSystemMetrics (nIndex=42) returned 0
[0208.667] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0208.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0208.667] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0208.667] GetCurrentObject (hdc=0x50010785, type=0x1) returned 0xb00017
[0208.668] GetCurrentObject (hdc=0x50010785, type=0x2) returned 0x900010
[0208.668] GetCurrentObject (hdc=0x50010785, type=0x7) returned 0x1e0507b9
[0208.668] GetCurrentObject (hdc=0x50010785, type=0x6) returned 0x8a01c2
[0208.668] SaveDC (hdc=0x50010785) returned 2
[0208.668] GetNearestColor (hdc=0x50010785, color=0xff) returned 0xff
[0208.668] CreateSolidBrush (color=0xff) returned 0x4210078d
[0208.668] FillRect (hDC=0x50010785, lprc=0x53e0c8, hbr=0x4210078d) returned 1
[0208.668] DeleteObject (ho=0x4210078d) returned 1
[0208.668] RestoreDC (hdc=0x50010785, nSavedDC=-1) returned 1
[0208.668] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0208.668] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0208.668] GetSystemMetrics (nIndex=42) returned 0
[0208.668] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0208.668] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0208.668] RestoreDC (hdc=0x50010785, nSavedDC=-1) returned 1
[0208.668] GdipReleaseDC (graphics=0x5d92c30, hdc=0x50010785) returned 0x0
[0208.669] IsAppThemed () returned 0x1
[0208.669] GetThemeAppProperties () returned 0x3
[0208.669] GetThemeAppProperties () returned 0x3
[0208.669] IsAppThemed () returned 0x1
[0208.669] GetThemeAppProperties () returned 0x3
[0208.669] GetThemeAppProperties () returned 0x3
[0208.669] IsThemePartDefined () returned 0x1
[0208.669] GdipCreateRegion (region=0x53e64c) returned 0x0
[0208.669] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0208.669] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0208.669] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0208.669] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0208.669] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0208.669] LocalFree (hMem=0x89ee08) returned 0x0
[0208.669] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0208.669] LocalFree (hMem=0x89ea88) returned 0x0
[0208.669] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0208.669] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0208.669] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0208.669] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0208.669] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0208.669] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0208.669] GetCurrentObject (hdc=0x50010785, type=0x1) returned 0xb00017
[0208.670] GetCurrentObject (hdc=0x50010785, type=0x2) returned 0x900010
[0208.670] GetCurrentObject (hdc=0x50010785, type=0x7) returned 0x1e0507b9
[0208.670] GetCurrentObject (hdc=0x50010785, type=0x6) returned 0x8a01c2
[0208.670] SaveDC (hdc=0x50010785) returned 1
[0208.670] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b040798
[0208.670] GetClipRgn (hdc=0x50010785, hrgn=0x3b040798) returned 0
[0208.670] SelectClipRgn (hdc=0x50010785, hrgn=0xc04053e) returned 2
[0208.670] DeleteObject (ho=0x3b040798) returned 1
[0208.670] DeleteObject (ho=0xc04053e) returned 1
[0208.670] OffsetViewportOrgEx (in: hdc=0x50010785, x=0, y=0, lppt=0x22e59d8 | out: lppt=0x22e59d8) returned 1
[0208.670] IsAppThemed () returned 0x1
[0208.670] GetThemeAppProperties () returned 0x3
[0208.670] GetThemeAppProperties () returned 0x3
[0208.670] DrawThemeBackground () returned 0x0
[0208.670] RestoreDC (hdc=0x50010785, nSavedDC=-1) returned 1
[0208.670] GdipReleaseDC (graphics=0x5d92c30, hdc=0x50010785) returned 0x0
[0208.670] GdipCreateRegion (region=0x53e650) returned 0x0
[0208.670] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0208.670] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0208.670] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0208.671] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0208.671] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0208.671] LocalFree (hMem=0x89ee08) returned 0x0
[0208.671] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0208.671] LocalFree (hMem=0x89ee08) returned 0x0
[0208.671] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0208.671] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0208.671] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0208.671] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0208.671] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0208.671] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0208.671] GetCurrentObject (hdc=0x50010785, type=0x1) returned 0xb00017
[0208.671] GetCurrentObject (hdc=0x50010785, type=0x2) returned 0x900010
[0208.671] GetCurrentObject (hdc=0x50010785, type=0x7) returned 0x1e0507b9
[0208.671] GetCurrentObject (hdc=0x50010785, type=0x6) returned 0x8a01c2
[0208.671] SaveDC (hdc=0x50010785) returned 1
[0208.671] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd04053e
[0208.671] GetClipRgn (hdc=0x50010785, hrgn=0xd04053e) returned 0
[0208.671] SelectClipRgn (hdc=0x50010785, hrgn=0x3c040798) returned 2
[0208.671] DeleteObject (ho=0xd04053e) returned 1
[0208.671] DeleteObject (ho=0x3c040798) returned 1
[0208.672] OffsetViewportOrgEx (in: hdc=0x50010785, x=0, y=0, lppt=0x22e5cac | out: lppt=0x22e5cac) returned 1
[0208.672] IsAppThemed () returned 0x1
[0208.672] GetThemeAppProperties () returned 0x3
[0208.672] GetThemeAppProperties () returned 0x3
[0208.672] GetThemeBackgroundContentRect () returned 0x0
[0208.672] RestoreDC (hdc=0x50010785, nSavedDC=-1) returned 1
[0208.672] GdipReleaseDC (graphics=0x5d92c30, hdc=0x50010785) returned 0x0
[0208.672] IsAppThemed () returned 0x1
[0208.672] GetThemeAppProperties () returned 0x3
[0208.672] GetThemeAppProperties () returned 0x3
[0208.672] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0208.672] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0208.672] GetCurrentObject (hdc=0x50010785, type=0x1) returned 0xb00017
[0208.672] GetCurrentObject (hdc=0x50010785, type=0x2) returned 0x900010
[0208.672] GetCurrentObject (hdc=0x50010785, type=0x7) returned 0x1e0507b9
[0208.672] GetCurrentObject (hdc=0x50010785, type=0x6) returned 0x8a01c2
[0208.672] SaveDC (hdc=0x50010785) returned 1
[0208.672] GetTextAlign (hdc=0x50010785) returned 0x0
[0208.672] GetTextColor (hdc=0x50010785) returned 0x0
[0208.672] GetCurrentObject (hdc=0x50010785, type=0x6) returned 0x8a01c2
[0208.673] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0208.673] SelectObject (hdc=0x50010785, h=0x450a0799) returned 0x8a01c2
[0208.673] GetBkMode (hdc=0x50010785) returned 2
[0208.673] SetBkMode (hdc=0x50010785, mode=1) returned 2
[0208.673] DrawTextExW (in: hdc=0x50010785, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x22e604c | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0208.673] DrawTextExW (in: hdc=0x50010785, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x22e604c | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0208.673] RestoreDC (hdc=0x50010785, nSavedDC=-1) returned 1
[0208.674] GdipReleaseDC (graphics=0x5d92c30, hdc=0x50010785) returned 0x0
[0208.674] GetFocus () returned 0x202c6
[0208.674] IsAppThemed () returned 0x1
[0208.674] GetThemeAppProperties () returned 0x3
[0208.674] GetThemeAppProperties () returned 0x3
[0208.674] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0208.674] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x50010785, x1=0, y1=0, rop=0xcc0020) returned 1
[0208.685] GdipReleaseDC (graphics=0x5d92c30, hdc=0x50010785) returned 0x0
[0208.685] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0208.685] SelectObject (hdc=0x50010785, h=0x85000f) returned 0x1e0507b9
[0208.685] DeleteDC (hdc=0x50010785) returned 1
[0208.686] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0208.686] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0208.686] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.686] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.686] WaitMessage () returned 1
[0208.686] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.686] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.686] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.687] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.687] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.688] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.688] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.688] WaitMessage () returned 1
[0208.729] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.729] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.729] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.729] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.729] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.730] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.730] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.730] WaitMessage () returned 1
[0208.731] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.731] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.731] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.731] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.731] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.732] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.732] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.732] WaitMessage () returned 1
[0208.732] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.732] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.732] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.732] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.733] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.734] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.735] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.735] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.735] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.735] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.735] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.735] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.735] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.735] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.735] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.735] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.736] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.736] WaitMessage () returned 1
[0208.736] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.736] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.736] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.736] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.736] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.738] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.738] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.738] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.738] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.738] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.738] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.738] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.738] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.738] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.738] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.738] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.739] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.739] WaitMessage () returned 1
[0208.739] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.739] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.739] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.739] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.739] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.741] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.742] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.742] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.742] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.742] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.742] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.742] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.742] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.742] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.742] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.742] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.743] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.743] WaitMessage () returned 1
[0208.743] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.743] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.743] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.743] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.743] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.744] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.745] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.745] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.745] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.745] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.745] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.745] IsWindowUnicode (hWnd=0x102dc) returned 1
[0208.745] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.745] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.745] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.745] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.746] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.746] WaitMessage () returned 1
[0208.787] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.787] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.787] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.787] DispatchMessageA (lpMsg=0x53eef8) returned 0x7ef3
[0208.788] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.788] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.788] WaitMessage () returned 1
[0208.943] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.944] IsWindowUnicode (hWnd=0x202d0) returned 1
[0208.944] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0208.944] TranslateMessage (lpMsg=0x53eef8) returned 0
[0208.944] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0208.944] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.944] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0208.944] WaitMessage () returned 1
[0209.803] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0209.803] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0209.803] TranslateMessage (lpMsg=0x53eef8) returned 0
[0209.803] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0209.804] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0209.804] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0209.804] WaitMessage () returned 1
[0210.288] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0210.289] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19d0228) returned 0x1
[0210.289] IsWindowUnicode (hWnd=0x202c6) returned 1
[0210.289] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0210.289] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19d0228) returned 0x1
[0210.289] SetCursor (hCursor=0x10003) returned 0x10003
[0210.289] TranslateMessage (lpMsg=0x53eef8) returned 0
[0210.289] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0210.290] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0210.290] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0210.290] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0210.290] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0210.290] GetKeyState (nVirtKey=1) returned 1
[0210.290] GetKeyState (nVirtKey=2) returned 0
[0210.290] GetKeyState (nVirtKey=4) returned 0
[0210.290] GetKeyState (nVirtKey=5) returned 0
[0210.290] GetKeyState (nVirtKey=6) returned 0
[0210.290] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0210.290] IsWindowUnicode (hWnd=0x202c6) returned 1
[0210.290] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0210.291] TranslateMessage (lpMsg=0x53eef8) returned 0
[0210.291] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0210.291] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0210.291] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0210.291] CreateCompatibleDC (hdc=0xf0105ee) returned 0xe90107c0
[0210.292] SelectObject (hdc=0xe90107c0, h=0x1e0507b9) returned 0x85000f
[0210.292] GdipCreateFromHDC (hdc=0xe90107c0, graphics=0x53e958) returned 0x0
[0210.292] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0210.292] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0210.293] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0210.293] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0210.293] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0210.293] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0210.293] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0210.293] LocalFree (hMem=0x89ea88) returned 0x0
[0210.293] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0210.293] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0210.293] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.293] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0210.293] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0210.293] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcc50dbd) returned 0x0
[0210.293] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.294] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0210.294] GetCurrentObject (hdc=0xe90107c0, type=0x1) returned 0xb00017
[0210.294] GetCurrentObject (hdc=0xe90107c0, type=0x2) returned 0x900010
[0210.294] GetCurrentObject (hdc=0xe90107c0, type=0x7) returned 0x1e0507b9
[0210.294] GetCurrentObject (hdc=0xe90107c0, type=0x6) returned 0x8a01c2
[0210.294] SaveDC (hdc=0xe90107c0) returned 1
[0210.294] GetNearestColor (hdc=0xe90107c0, color=0xff) returned 0xff
[0210.294] GetNearestColor (hdc=0xe90107c0, color=0x55) returned 0x55
[0210.294] GetNearestColor (hdc=0xe90107c0, color=0x0) returned 0x0
[0210.294] GetNearestColor (hdc=0xe90107c0, color=0x55) returned 0x55
[0210.294] GetNearestColor (hdc=0xe90107c0, color=0x0) returned 0x0
[0210.294] GetNearestColor (hdc=0xe90107c0, color=0x8080ff) returned 0x8080ff
[0210.294] GetNearestColor (hdc=0xe90107c0, color=0x7373e5) returned 0x7373e5
[0210.295] GetNearestColor (hdc=0xe90107c0, color=0xe5) returned 0xe5
[0210.295] GetNearestColor (hdc=0xe90107c0, color=0x0) returned 0x0
[0210.295] RestoreDC (hdc=0xe90107c0, nSavedDC=-1) returned 1
[0210.295] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe90107c0) returned 0x0
[0210.295] IsAppThemed () returned 0x1
[0210.295] GetThemeAppProperties () returned 0x3
[0210.295] GetThemeAppProperties () returned 0x3
[0210.295] IsAppThemed () returned 0x1
[0210.295] GetThemeAppProperties () returned 0x3
[0210.295] GetThemeAppProperties () returned 0x3
[0210.295] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x22e69e0 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0210.296] IsAppThemed () returned 0x1
[0210.296] GetThemeAppProperties () returned 0x3
[0210.296] GetThemeAppProperties () returned 0x3
[0210.296] IsAppThemed () returned 0x1
[0210.296] GetThemeAppProperties () returned 0x3
[0210.296] GetThemeAppProperties () returned 0x3
[0210.296] IsAppThemed () returned 0x1
[0210.296] GetThemeAppProperties () returned 0x3
[0210.296] GetThemeAppProperties () returned 0x3
[0210.296] IsAppThemed () returned 0x1
[0210.296] GetThemeAppProperties () returned 0x3
[0210.296] GetThemeAppProperties () returned 0x3
[0210.296] IsThemePartDefined () returned 0x1
[0210.296] IsAppThemed () returned 0x1
[0210.297] GetThemeAppProperties () returned 0x3
[0210.297] GetThemeAppProperties () returned 0x3
[0210.297] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0210.297] IsAppThemed () returned 0x1
[0210.297] GetThemeAppProperties () returned 0x3
[0210.297] GetThemeAppProperties () returned 0x3
[0210.297] IsAppThemed () returned 0x1
[0210.297] GetThemeAppProperties () returned 0x3
[0210.297] GetThemeAppProperties () returned 0x3
[0210.297] IsThemePartDefined () returned 0x1
[0210.297] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0210.297] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.297] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0210.297] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0210.297] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0210.297] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0210.297] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0210.297] LocalFree (hMem=0x89ee08) returned 0x0
[0210.297] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0210.297] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0210.297] LocalFree (hMem=0x89ea88) returned 0x0
[0210.298] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0210.298] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0210.298] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0210.298] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0210.298] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.298] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0210.298] GetCurrentObject (hdc=0xe90107c0, type=0x1) returned 0xb00017
[0210.298] GetCurrentObject (hdc=0xe90107c0, type=0x2) returned 0x900010
[0210.298] GetCurrentObject (hdc=0xe90107c0, type=0x7) returned 0x1e0507b9
[0210.298] GetCurrentObject (hdc=0xe90107c0, type=0x6) returned 0x8a01c2
[0210.298] SaveDC (hdc=0xe90107c0) returned 1
[0210.298] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3d040798
[0210.298] GetClipRgn (hdc=0xe90107c0, hrgn=0x3d040798) returned 0
[0210.298] SelectClipRgn (hdc=0xe90107c0, hrgn=0x1104053e) returned 2
[0210.298] DeleteObject (ho=0x3d040798) returned 1
[0210.298] DeleteObject (ho=0x1104053e) returned 1
[0210.298] OffsetViewportOrgEx (in: hdc=0xe90107c0, x=0, y=0, lppt=0x22e7090 | out: lppt=0x22e7090) returned 1
[0210.298] DrawThemeParentBackground () returned 0x0
[0210.299] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0210.299] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0210.299] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0210.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0210.299] GetSystemMetrics (nIndex=42) returned 0
[0210.299] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0210.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0210.299] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0210.299] GetCurrentObject (hdc=0xe90107c0, type=0x1) returned 0xb00017
[0210.299] GetCurrentObject (hdc=0xe90107c0, type=0x2) returned 0x900010
[0210.299] GetCurrentObject (hdc=0xe90107c0, type=0x7) returned 0x1e0507b9
[0210.299] GetCurrentObject (hdc=0xe90107c0, type=0x6) returned 0x8a01c2
[0210.299] SaveDC (hdc=0xe90107c0) returned 2
[0210.300] GetNearestColor (hdc=0xe90107c0, color=0xff) returned 0xff
[0210.300] CreateSolidBrush (color=0xff) returned 0x4310078d
[0210.300] FillRect (hDC=0xe90107c0, lprc=0x53e120, hbr=0x4310078d) returned 1
[0210.300] DeleteObject (ho=0x4310078d) returned 1
[0210.300] RestoreDC (hdc=0xe90107c0, nSavedDC=-1) returned 1
[0210.300] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0210.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0210.300] GetSystemMetrics (nIndex=42) returned 0
[0210.300] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0210.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0210.300] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0210.300] GetCurrentObject (hdc=0xe90107c0, type=0x1) returned 0xb00017
[0210.300] GetCurrentObject (hdc=0xe90107c0, type=0x2) returned 0x900010
[0210.300] GetCurrentObject (hdc=0xe90107c0, type=0x7) returned 0x1e0507b9
[0210.300] GetCurrentObject (hdc=0xe90107c0, type=0x6) returned 0x8a01c2
[0210.300] SaveDC (hdc=0xe90107c0) returned 2
[0210.300] GetNearestColor (hdc=0xe90107c0, color=0xff) returned 0xff
[0210.301] CreateSolidBrush (color=0xff) returned 0x4410078d
[0210.301] FillRect (hDC=0xe90107c0, lprc=0x53e0c0, hbr=0x4410078d) returned 1
[0210.301] DeleteObject (ho=0x4410078d) returned 1
[0210.301] RestoreDC (hdc=0xe90107c0, nSavedDC=-1) returned 1
[0210.301] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0210.301] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0210.301] GetSystemMetrics (nIndex=42) returned 0
[0210.301] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0210.301] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0210.301] RestoreDC (hdc=0xe90107c0, nSavedDC=-1) returned 1
[0210.301] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe90107c0) returned 0x0
[0210.301] IsAppThemed () returned 0x1
[0210.301] GetThemeAppProperties () returned 0x3
[0210.301] GetThemeAppProperties () returned 0x3
[0210.301] IsAppThemed () returned 0x1
[0210.301] GetThemeAppProperties () returned 0x3
[0210.301] GetThemeAppProperties () returned 0x3
[0210.301] IsThemePartDefined () returned 0x1
[0210.301] GdipCreateRegion (region=0x53e640) returned 0x0
[0210.302] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.302] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0210.302] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0210.302] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0210.302] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0210.302] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0210.302] LocalFree (hMem=0x89ea88) returned 0x0
[0210.302] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0210.302] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0210.302] LocalFree (hMem=0x89ea88) returned 0x0
[0210.302] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0210.302] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0210.302] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0210.302] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0210.302] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.302] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0210.302] GetCurrentObject (hdc=0xe90107c0, type=0x1) returned 0xb00017
[0210.302] GetCurrentObject (hdc=0xe90107c0, type=0x2) returned 0x900010
[0210.302] GetCurrentObject (hdc=0xe90107c0, type=0x7) returned 0x1e0507b9
[0210.303] GetCurrentObject (hdc=0xe90107c0, type=0x6) returned 0x8a01c2
[0210.303] SaveDC (hdc=0xe90107c0) returned 1
[0210.303] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1204053e
[0210.303] GetClipRgn (hdc=0xe90107c0, hrgn=0x1204053e) returned 0
[0210.303] SelectClipRgn (hdc=0xe90107c0, hrgn=0x3f040798) returned 2
[0210.303] DeleteObject (ho=0x1204053e) returned 1
[0210.303] DeleteObject (ho=0x3f040798) returned 1
[0210.303] OffsetViewportOrgEx (in: hdc=0xe90107c0, x=0, y=0, lppt=0x22e78f4 | out: lppt=0x22e78f4) returned 1
[0210.303] IsAppThemed () returned 0x1
[0210.303] GetThemeAppProperties () returned 0x3
[0210.303] GetThemeAppProperties () returned 0x3
[0210.303] DrawThemeBackground () returned 0x0
[0210.303] RestoreDC (hdc=0xe90107c0, nSavedDC=-1) returned 1
[0210.303] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe90107c0) returned 0x0
[0210.303] GdipCreateRegion (region=0x53e644) returned 0x0
[0210.303] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.303] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0210.304] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0210.304] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0210.304] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0210.304] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0210.304] LocalFree (hMem=0x89ec80) returned 0x0
[0210.304] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0210.304] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0210.304] LocalFree (hMem=0x89ee08) returned 0x0
[0210.304] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0210.304] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0210.304] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0210.304] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0210.304] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.304] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0210.304] GetCurrentObject (hdc=0xe90107c0, type=0x1) returned 0xb00017
[0210.304] GetCurrentObject (hdc=0xe90107c0, type=0x2) returned 0x900010
[0210.304] GetCurrentObject (hdc=0xe90107c0, type=0x7) returned 0x1e0507b9
[0210.304] GetCurrentObject (hdc=0xe90107c0, type=0x6) returned 0x8a01c2
[0210.304] SaveDC (hdc=0xe90107c0) returned 1
[0210.305] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x40040798
[0210.305] GetClipRgn (hdc=0xe90107c0, hrgn=0x40040798) returned 0
[0210.305] SelectClipRgn (hdc=0xe90107c0, hrgn=0x1304053e) returned 2
[0210.305] DeleteObject (ho=0x40040798) returned 1
[0210.305] DeleteObject (ho=0x1304053e) returned 1
[0210.305] OffsetViewportOrgEx (in: hdc=0xe90107c0, x=0, y=0, lppt=0x22e7bc8 | out: lppt=0x22e7bc8) returned 1
[0210.305] IsAppThemed () returned 0x1
[0210.305] GetThemeAppProperties () returned 0x3
[0210.305] GetThemeAppProperties () returned 0x3
[0210.305] GetThemeBackgroundContentRect () returned 0x0
[0210.305] RestoreDC (hdc=0xe90107c0, nSavedDC=-1) returned 1
[0210.305] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe90107c0) returned 0x0
[0210.305] IsAppThemed () returned 0x1
[0210.305] GetThemeAppProperties () returned 0x3
[0210.305] GetThemeAppProperties () returned 0x3
[0210.305] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0210.305] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0210.305] GetCurrentObject (hdc=0xe90107c0, type=0x1) returned 0xb00017
[0210.306] GetCurrentObject (hdc=0xe90107c0, type=0x2) returned 0x900010
[0210.306] GetCurrentObject (hdc=0xe90107c0, type=0x7) returned 0x1e0507b9
[0210.306] GetCurrentObject (hdc=0xe90107c0, type=0x6) returned 0x8a01c2
[0210.306] SaveDC (hdc=0xe90107c0) returned 1
[0210.306] GetTextAlign (hdc=0xe90107c0) returned 0x0
[0210.306] GetTextColor (hdc=0xe90107c0) returned 0x0
[0210.306] GetCurrentObject (hdc=0xe90107c0, type=0x6) returned 0x8a01c2
[0210.306] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0210.306] SelectObject (hdc=0xe90107c0, h=0x450a0799) returned 0x8a01c2
[0210.306] GetBkMode (hdc=0xe90107c0) returned 2
[0210.306] SetBkMode (hdc=0xe90107c0, mode=1) returned 2
[0210.306] DrawTextExW (in: hdc=0xe90107c0, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x22e7f68 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0210.307] DrawTextExW (in: hdc=0xe90107c0, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x22e7f68 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0210.307] RestoreDC (hdc=0xe90107c0, nSavedDC=-1) returned 1
[0210.307] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe90107c0) returned 0x0
[0210.307] GetFocus () returned 0x202c6
[0210.307] IsAppThemed () returned 0x1
[0210.307] GetThemeAppProperties () returned 0x3
[0210.307] GetThemeAppProperties () returned 0x3
[0210.307] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0210.307] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xe90107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0210.308] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe90107c0) returned 0x0
[0210.308] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0210.308] SelectObject (hdc=0xe90107c0, h=0x85000f) returned 0x1e0507b9
[0210.308] DeleteDC (hdc=0xe90107c0) returned 1
[0210.308] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0210.308] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0210.308] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0210.308] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0210.309] WaitMessage () returned 1
[0210.421] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0210.421] IsWindowUnicode (hWnd=0x202c6) returned 1
[0210.421] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0210.421] TranslateMessage (lpMsg=0x53eef8) returned 0
[0210.421] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0210.421] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0210.421] IsWindowUnicode (hWnd=0x202c6) returned 1
[0210.421] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0210.421] TranslateMessage (lpMsg=0x53eef8) returned 0
[0210.422] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0210.422] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x150038) returned 0x0
[0210.422] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0210.422] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0210.422] WaitMessage () returned 1
[0210.561] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0210.561] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19d0228) returned 0x1
[0210.561] IsWindowUnicode (hWnd=0x202c6) returned 1
[0210.561] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0210.562] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19d0228) returned 0x1
[0210.562] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0210.562] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13001d2) returned 0x0
[0210.562] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0210.562] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0210.562] SetCursor (hCursor=0x10003) returned 0x10003
[0210.562] TranslateMessage (lpMsg=0x53eef8) returned 0
[0210.562] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0210.562] GetKeyState (nVirtKey=1) returned -128
[0210.562] GetKeyState (nVirtKey=2) returned 0
[0210.562] GetKeyState (nVirtKey=4) returned 0
[0210.562] GetKeyState (nVirtKey=5) returned 0
[0210.562] GetKeyState (nVirtKey=6) returned 0
[0210.562] IsWindowVisible (hWnd=0x202c6) returned 1
[0210.562] IsWindowEnabled (hWnd=0x202c6) returned 1
[0210.562] SetFocus (hWnd=0x202c6) returned 0x202c6
[0210.563] GetFocus () returned 0x202c6
[0210.563] GetFocus () returned 0x202c6
[0210.563] GetFocus () returned 0x202c6
[0210.563] GetKeyState (nVirtKey=1) returned -128
[0210.563] GetKeyState (nVirtKey=2) returned 0
[0210.563] GetKeyState (nVirtKey=4) returned 0
[0210.563] GetKeyState (nVirtKey=5) returned 0
[0210.563] GetKeyState (nVirtKey=6) returned 0
[0210.563] GetCapture () returned 0x0
[0210.563] SetCapture (hWnd=0x202c6) returned 0x0
[0210.563] GetKeyState (nVirtKey=1) returned -128
[0210.563] GetKeyState (nVirtKey=2) returned 0
[0210.563] GetKeyState (nVirtKey=4) returned 0
[0210.563] GetKeyState (nVirtKey=5) returned 0
[0210.563] GetKeyState (nVirtKey=6) returned 0
[0210.563] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0210.563] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0210.563] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0210.563] IsWindowUnicode (hWnd=0x202c6) returned 1
[0210.563] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0210.564] TranslateMessage (lpMsg=0x53eef8) returned 0
[0210.564] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0210.564] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x22e80ec, cPoints=0x1 | out: lpPoints=0x22e80ec) returned 25690608
[0210.564] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0210.564] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0210.564] UpdateWindow (hWnd=0x202c6) returned 1
[0210.564] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0210.564] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0210.564] CreateCompatibleDC (hdc=0xf0105ee) returned 0xea0107c0
[0210.564] SelectObject (hdc=0xea0107c0, h=0x1e0507b9) returned 0x85000f
[0210.564] GdipCreateFromHDC (hdc=0xea0107c0, graphics=0x53e5f0) returned 0x0
[0210.564] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0210.565] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0210.565] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0210.565] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0210.565] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0210.565] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0210.565] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0210.565] LocalFree (hMem=0x89ee08) returned 0x0
[0210.565] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0210.565] GdipCreateRegion (region=0x53e638) returned 0x0
[0210.565] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.565] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0210.565] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0210.565] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcc30dbd) returned 0x0
[0210.565] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.565] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0210.565] GetCurrentObject (hdc=0xea0107c0, type=0x1) returned 0xb00017
[0210.565] GetCurrentObject (hdc=0xea0107c0, type=0x2) returned 0x900010
[0210.565] GetCurrentObject (hdc=0xea0107c0, type=0x7) returned 0x1e0507b9
[0210.565] GetCurrentObject (hdc=0xea0107c0, type=0x6) returned 0x8a01c2
[0210.566] SaveDC (hdc=0xea0107c0) returned 1
[0210.566] GetNearestColor (hdc=0xea0107c0, color=0xff) returned 0xff
[0210.566] GetNearestColor (hdc=0xea0107c0, color=0x55) returned 0x55
[0210.566] GetNearestColor (hdc=0xea0107c0, color=0x0) returned 0x0
[0210.566] GetNearestColor (hdc=0xea0107c0, color=0x55) returned 0x55
[0210.566] GetNearestColor (hdc=0xea0107c0, color=0x0) returned 0x0
[0210.566] GetNearestColor (hdc=0xea0107c0, color=0x8080ff) returned 0x8080ff
[0210.566] GetNearestColor (hdc=0xea0107c0, color=0x7373e5) returned 0x7373e5
[0210.566] GetNearestColor (hdc=0xea0107c0, color=0xe5) returned 0xe5
[0210.566] GetNearestColor (hdc=0xea0107c0, color=0x0) returned 0x0
[0210.566] RestoreDC (hdc=0xea0107c0, nSavedDC=-1) returned 1
[0210.566] GdipReleaseDC (graphics=0x5d92c30, hdc=0xea0107c0) returned 0x0
[0210.566] IsAppThemed () returned 0x1
[0210.566] GetThemeAppProperties () returned 0x3
[0210.566] GetThemeAppProperties () returned 0x3
[0210.566] IsAppThemed () returned 0x1
[0210.566] GetThemeAppProperties () returned 0x3
[0210.567] GetThemeAppProperties () returned 0x3
[0210.567] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x22e8808 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0210.567] IsAppThemed () returned 0x1
[0210.567] GetThemeAppProperties () returned 0x3
[0210.567] GetThemeAppProperties () returned 0x3
[0210.567] IsAppThemed () returned 0x1
[0210.567] GetThemeAppProperties () returned 0x3
[0210.567] GetThemeAppProperties () returned 0x3
[0210.567] IsAppThemed () returned 0x1
[0210.567] GetThemeAppProperties () returned 0x3
[0210.567] GetThemeAppProperties () returned 0x3
[0210.567] IsAppThemed () returned 0x1
[0210.567] GetThemeAppProperties () returned 0x3
[0210.567] GetThemeAppProperties () returned 0x3
[0210.567] IsThemePartDefined () returned 0x1
[0210.567] IsAppThemed () returned 0x1
[0210.567] GetThemeAppProperties () returned 0x3
[0210.567] GetThemeAppProperties () returned 0x3
[0210.567] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0210.568] IsAppThemed () returned 0x1
[0210.568] GetThemeAppProperties () returned 0x3
[0210.568] GetThemeAppProperties () returned 0x3
[0210.568] IsAppThemed () returned 0x1
[0210.568] GetThemeAppProperties () returned 0x3
[0210.568] GetThemeAppProperties () returned 0x3
[0210.568] IsThemePartDefined () returned 0x1
[0210.568] GdipCreateRegion (region=0x53e354) returned 0x0
[0210.568] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.568] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0210.568] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0210.569] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0210.569] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0210.569] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0210.569] LocalFree (hMem=0x89ee08) returned 0x0
[0210.569] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0210.569] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0210.569] LocalFree (hMem=0x89ee08) returned 0x0
[0210.569] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0210.569] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0210.569] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0210.569] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0210.569] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.569] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0210.569] GetCurrentObject (hdc=0xea0107c0, type=0x1) returned 0xb00017
[0210.569] GetCurrentObject (hdc=0xea0107c0, type=0x2) returned 0x900010
[0210.569] GetCurrentObject (hdc=0xea0107c0, type=0x7) returned 0x1e0507b9
[0210.569] GetCurrentObject (hdc=0xea0107c0, type=0x6) returned 0x8a01c2
[0210.569] SaveDC (hdc=0xea0107c0) returned 1
[0210.570] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1404053e
[0210.570] GetClipRgn (hdc=0xea0107c0, hrgn=0x1404053e) returned 0
[0210.570] SelectClipRgn (hdc=0xea0107c0, hrgn=0x44040798) returned 2
[0210.570] DeleteObject (ho=0x1404053e) returned 1
[0210.570] DeleteObject (ho=0x44040798) returned 1
[0210.570] OffsetViewportOrgEx (in: hdc=0xea0107c0, x=0, y=0, lppt=0x22e8eb8 | out: lppt=0x22e8eb8) returned 1
[0210.570] DrawThemeParentBackground () returned 0x0
[0210.570] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0210.570] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0210.570] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0210.570] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0210.570] GetSystemMetrics (nIndex=42) returned 0
[0210.570] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0210.570] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0210.570] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0210.570] GetCurrentObject (hdc=0xea0107c0, type=0x1) returned 0xb00017
[0210.570] GetCurrentObject (hdc=0xea0107c0, type=0x2) returned 0x900010
[0210.570] GetCurrentObject (hdc=0xea0107c0, type=0x7) returned 0x1e0507b9
[0210.571] GetCurrentObject (hdc=0xea0107c0, type=0x6) returned 0x8a01c2
[0210.571] SaveDC (hdc=0xea0107c0) returned 2
[0210.571] GetNearestColor (hdc=0xea0107c0, color=0xff) returned 0xff
[0210.571] CreateSolidBrush (color=0xff) returned 0x4510078d
[0210.571] FillRect (hDC=0xea0107c0, lprc=0x53ddb8, hbr=0x4510078d) returned 1
[0210.571] DeleteObject (ho=0x4510078d) returned 1
[0210.571] RestoreDC (hdc=0xea0107c0, nSavedDC=-1) returned 1
[0210.571] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0210.571] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0210.571] GetSystemMetrics (nIndex=42) returned 0
[0210.571] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0210.571] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0210.571] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0210.571] GetCurrentObject (hdc=0xea0107c0, type=0x1) returned 0xb00017
[0210.571] GetCurrentObject (hdc=0xea0107c0, type=0x2) returned 0x900010
[0210.571] GetCurrentObject (hdc=0xea0107c0, type=0x7) returned 0x1e0507b9
[0210.571] GetCurrentObject (hdc=0xea0107c0, type=0x6) returned 0x8a01c2
[0210.571] SaveDC (hdc=0xea0107c0) returned 2
[0210.571] GetNearestColor (hdc=0xea0107c0, color=0xff) returned 0xff
[0210.572] CreateSolidBrush (color=0xff) returned 0x4610078d
[0210.572] FillRect (hDC=0xea0107c0, lprc=0x53dd58, hbr=0x4610078d) returned 1
[0210.572] DeleteObject (ho=0x4610078d) returned 1
[0210.572] RestoreDC (hdc=0xea0107c0, nSavedDC=-1) returned 1
[0210.572] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0210.572] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0210.572] GetSystemMetrics (nIndex=42) returned 0
[0210.572] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0210.572] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0210.572] RestoreDC (hdc=0xea0107c0, nSavedDC=-1) returned 1
[0210.572] GdipReleaseDC (graphics=0x5d92c30, hdc=0xea0107c0) returned 0x0
[0210.572] IsAppThemed () returned 0x1
[0210.572] GetThemeAppProperties () returned 0x3
[0210.572] GetThemeAppProperties () returned 0x3
[0210.572] IsAppThemed () returned 0x1
[0210.572] GetThemeAppProperties () returned 0x3
[0210.572] GetThemeAppProperties () returned 0x3
[0210.572] IsThemePartDefined () returned 0x1
[0210.572] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0210.573] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.573] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0210.573] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0210.573] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0210.573] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0210.573] LocalFree (hMem=0x89ee08) returned 0x0
[0210.573] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0210.573] LocalFree (hMem=0x89ea88) returned 0x0
[0210.573] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0210.573] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0210.573] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0210.573] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0210.573] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.573] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0210.573] GetCurrentObject (hdc=0xea0107c0, type=0x1) returned 0xb00017
[0210.573] GetCurrentObject (hdc=0xea0107c0, type=0x2) returned 0x900010
[0210.573] GetCurrentObject (hdc=0xea0107c0, type=0x7) returned 0x1e0507b9
[0210.573] GetCurrentObject (hdc=0xea0107c0, type=0x6) returned 0x8a01c2
[0210.573] SaveDC (hdc=0xea0107c0) returned 1
[0210.573] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x45040798
[0210.573] GetClipRgn (hdc=0xea0107c0, hrgn=0x45040798) returned 0
[0210.573] SelectClipRgn (hdc=0xea0107c0, hrgn=0x1604053e) returned 2
[0210.573] DeleteObject (ho=0x45040798) returned 1
[0210.574] DeleteObject (ho=0x1604053e) returned 1
[0210.574] OffsetViewportOrgEx (in: hdc=0xea0107c0, x=0, y=0, lppt=0x22e971c | out: lppt=0x22e971c) returned 1
[0210.574] IsAppThemed () returned 0x1
[0210.574] GetThemeAppProperties () returned 0x3
[0210.574] GetThemeAppProperties () returned 0x3
[0210.574] DrawThemeBackground () returned 0x0
[0210.574] RestoreDC (hdc=0xea0107c0, nSavedDC=-1) returned 1
[0210.574] GdipReleaseDC (graphics=0x5d92c30, hdc=0xea0107c0) returned 0x0
[0210.574] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0210.574] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.574] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0210.574] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0210.574] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0210.574] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0210.574] LocalFree (hMem=0x89eee8) returned 0x0
[0210.574] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0210.574] LocalFree (hMem=0x89ea88) returned 0x0
[0210.574] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0210.574] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0210.574] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0210.574] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0210.574] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.574] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0210.574] GetCurrentObject (hdc=0xea0107c0, type=0x1) returned 0xb00017
[0210.574] GetCurrentObject (hdc=0xea0107c0, type=0x2) returned 0x900010
[0210.575] GetCurrentObject (hdc=0xea0107c0, type=0x7) returned 0x1e0507b9
[0210.575] GetCurrentObject (hdc=0xea0107c0, type=0x6) returned 0x8a01c2
[0210.575] SaveDC (hdc=0xea0107c0) returned 1
[0210.575] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1704053e
[0210.575] GetClipRgn (hdc=0xea0107c0, hrgn=0x1704053e) returned 0
[0210.575] SelectClipRgn (hdc=0xea0107c0, hrgn=0x46040798) returned 2
[0210.575] DeleteObject (ho=0x1704053e) returned 1
[0210.575] DeleteObject (ho=0x46040798) returned 1
[0210.575] OffsetViewportOrgEx (in: hdc=0xea0107c0, x=0, y=0, lppt=0x22e99f0 | out: lppt=0x22e99f0) returned 1
[0210.575] IsAppThemed () returned 0x1
[0210.575] GetThemeAppProperties () returned 0x3
[0210.575] GetThemeAppProperties () returned 0x3
[0210.575] GetThemeBackgroundContentRect () returned 0x0
[0210.575] RestoreDC (hdc=0xea0107c0, nSavedDC=-1) returned 1
[0210.575] GdipReleaseDC (graphics=0x5d92c30, hdc=0xea0107c0) returned 0x0
[0210.575] IsAppThemed () returned 0x1
[0210.575] GetThemeAppProperties () returned 0x3
[0210.575] GetThemeAppProperties () returned 0x3
[0210.575] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0210.575] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0210.575] GetCurrentObject (hdc=0xea0107c0, type=0x1) returned 0xb00017
[0210.575] GetCurrentObject (hdc=0xea0107c0, type=0x2) returned 0x900010
[0210.575] GetCurrentObject (hdc=0xea0107c0, type=0x7) returned 0x1e0507b9
[0210.576] GetCurrentObject (hdc=0xea0107c0, type=0x6) returned 0x8a01c2
[0210.576] SaveDC (hdc=0xea0107c0) returned 1
[0210.576] GetTextAlign (hdc=0xea0107c0) returned 0x0
[0210.576] GetTextColor (hdc=0xea0107c0) returned 0x0
[0210.576] GetCurrentObject (hdc=0xea0107c0, type=0x6) returned 0x8a01c2
[0210.576] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0210.576] SelectObject (hdc=0xea0107c0, h=0x450a0799) returned 0x8a01c2
[0210.576] GetBkMode (hdc=0xea0107c0) returned 2
[0210.576] SetBkMode (hdc=0xea0107c0, mode=1) returned 2
[0210.576] DrawTextExW (in: hdc=0xea0107c0, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x22e9d90 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0210.576] DrawTextExW (in: hdc=0xea0107c0, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x22e9d90 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0210.577] RestoreDC (hdc=0xea0107c0, nSavedDC=-1) returned 1
[0210.577] GdipReleaseDC (graphics=0x5d92c30, hdc=0xea0107c0) returned 0x0
[0210.577] GetFocus () returned 0x202c6
[0210.577] IsAppThemed () returned 0x1
[0210.577] GetThemeAppProperties () returned 0x3
[0210.577] GetThemeAppProperties () returned 0x3
[0210.577] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0210.577] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xea0107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0210.577] GdipReleaseDC (graphics=0x5d92c30, hdc=0xea0107c0) returned 0x0
[0210.577] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0210.577] SelectObject (hdc=0xea0107c0, h=0x85000f) returned 0x1e0507b9
[0210.577] DeleteDC (hdc=0xea0107c0) returned 1
[0210.577] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0210.578] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0210.578] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x22e9e8c, cPoints=0x1 | out: lpPoints=0x22e9e8c) returned 25690608
[0210.578] WindowFromPoint (Point=0x228) returned 0x202c6
[0210.578] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19d0228) returned 0x1
[0210.578] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0210.578] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0210.579] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.580] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0210.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.581] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0210.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.581] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0210.581] GetDC (hWnd=0x0) returned 0x10105d6
[0210.582] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e888) returned 0x0
[0210.582] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0210.582] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0210.582] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0210.582] GetSystemMetrics (nIndex=5) returned 1
[0210.582] GetSystemMetrics (nIndex=6) returned 1
[0210.582] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.583] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0210.583] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.583] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0210.631] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.631] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0210.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.632] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0210.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.632] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0210.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.632] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0210.632] GetSystemMetrics (nIndex=5) returned 1
[0210.632] GetSystemMetrics (nIndex=6) returned 1
[0210.633] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.633] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0210.633] GetSystemMetrics (nIndex=5) returned 1
[0210.633] GetSystemMetrics (nIndex=6) returned 1
[0210.633] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.633] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0210.633] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.633] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0210.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.634] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0210.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.634] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0210.634] GetSystemMetrics (nIndex=59) returned 1460
[0210.634] GetSystemMetrics (nIndex=60) returned 920
[0210.634] GetSystemMetrics (nIndex=34) returned 136
[0210.634] GetSystemMetrics (nIndex=35) returned 39
[0210.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.635] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0210.635] GetCurrentThreadId () returned 0x11d0
[0210.635] GetCurrentThreadId () returned 0x11d0
[0210.635] GetCurrentThreadId () returned 0x11d0
[0210.635] GetCurrentThreadId () returned 0x11d0
[0210.635] GetCurrentThreadId () returned 0x11d0
[0210.635] GetCurrentThreadId () returned 0x11d0
[0210.635] GetCurrentThreadId () returned 0x11d0
[0210.635] GetCurrentThreadId () returned 0x11d0
[0210.635] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.635] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0210.635] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0210.636] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0210.636] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.636] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0210.636] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.636] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0210.636] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x702de
[0210.637] SetWindowLongW (hWnd=0x702de, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0210.637] GetWindowLongW (hWnd=0x702de, nIndex=-4) returned 1950089536
[0210.638] SetWindowLongW (hWnd=0x702de, nIndex=-4, dwNewLong=79641558) returned 1950089536
[0210.638] GetWindowLongW (hWnd=0x702de, nIndex=-4) returned 79641558
[0210.638] GetWindowLongW (hWnd=0x702de, nIndex=-16) returned 113311744
[0210.638] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702de, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0210.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702de, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0210.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702de, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0210.641] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702de, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0210.641] GetClientRect (in: hWnd=0x702de, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0210.641] GetWindowRect (in: hWnd=0x702de, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0210.641] SetWindowTextW (hWnd=0x702de, lpString="WindowsFormsParkingWindow") returned 1
[0210.641] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702de, Msg=0xc, wParam=0x0, lParam=0x22e1dd8) returned 0x1
[0210.641] GetParent (hWnd=0x702de) returned 0x0
[0210.642] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0210.642] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x702de, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x15013e
[0210.642] SetWindowLongW (hWnd=0x15013e, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0210.642] GetWindowLongW (hWnd=0x15013e, nIndex=-4) returned 1868147648
[0210.643] SetWindowLongW (hWnd=0x15013e, nIndex=-4, dwNewLong=79641358) returned 1868147648
[0210.643] GetWindowLongW (hWnd=0x15013e, nIndex=-4) returned 79641358
[0210.643] GetWindowLongW (hWnd=0x15013e, nIndex=-16) returned 1174405133
[0210.643] GetWindowLongW (hWnd=0x15013e, nIndex=-12) returned 0
[0210.643] SetWindowLongW (hWnd=0x15013e, nIndex=-12, dwNewLong=1376574) returned 0
[0210.643] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0210.643] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0210.644] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0210.644] GetClientRect (in: hWnd=0x15013e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0210.644] GetWindowRect (in: hWnd=0x15013e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0210.644] GetParent (hWnd=0x15013e) returned 0x702de
[0210.644] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702de, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0210.644] SetWindowTextW (hWnd=0x15013e, lpString="Enter password: ") returned 1
[0210.644] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0210.645] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0210.645] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0210.645] GetClientRect (in: hWnd=0x15013e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0210.645] GetWindowRect (in: hWnd=0x15013e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0210.645] GetParent (hWnd=0x15013e) returned 0x702de
[0210.645] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702de, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0210.645] SendMessageW (hWnd=0x15013e, Msg=0x2210, wParam=0x13e0001, lParam=0x15013e) returned 0x0
[0210.645] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x2210, wParam=0x13e0001, lParam=0x15013e) returned 0x0
[0210.645] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0210.646] GetParent (hWnd=0x15013e) returned 0x702de
[0210.646] GdipCreateFromHWND (hwnd=0x15013e, graphics=0x53e994) returned 0x0
[0210.646] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0210.646] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0210.646] GetProcessWindowStation () returned 0x13c
[0210.647] GetCapture () returned 0x202c6
[0210.647] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0210.647] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0210.647] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0210.647] ReleaseCapture () returned 1
[0210.647] GetActiveWindow () returned 0x70036
[0210.647] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0210.647] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.648] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0210.648] GetCursorPos (in: lpPoint=0x22f6c98 | out: lpPoint=0x22f6c98*(x=552, y=413)) returned 1
[0210.648] MonitorFromPoint (pt=0x228, dwFlags=0x19d) returned 0x10001
[0210.648] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0210.648] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xed0107c0
[0210.648] GetDeviceCaps (hdc=0xed0107c0, index=12) returned 32
[0210.648] GetDeviceCaps (hdc=0xed0107c0, index=14) returned 1
[0210.648] DeleteDC (hdc=0xed0107c0) returned 1
[0210.648] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0210.649] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0210.649] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1102c8
[0210.649] SetWindowLongW (hWnd=0x1102c8, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0210.649] GetWindowLongW (hWnd=0x1102c8, nIndex=-4) returned 1950089536
[0210.649] SetWindowLongW (hWnd=0x1102c8, nIndex=-4, dwNewLong=79641758) returned 1950089536
[0210.650] GetWindowLongW (hWnd=0x1102c8, nIndex=-4) returned 79641758
[0210.650] GetWindowLongW (hWnd=0x1102c8, nIndex=-16) returned 113770496
[0210.650] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0210.650] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0210.651] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0210.651] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0210.651] GetWindowRect (in: hWnd=0x1102c8, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0210.651] SetWindowTextW (hWnd=0x1102c8, lpString="Ransomware") returned 1
[0210.651] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xc, wParam=0x0, lParam=0x22e9f54) returned 0x1
[0210.652] GetStartupInfoW (in: lpStartupInfo=0x22f6fd4 | out: lpStartupInfo=0x22f6fd4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0210.654] GetParent (hWnd=0x1102c8) returned 0x0
[0210.654] SetWindowLongW (hWnd=0x1102c8, nIndex=-8, dwNewLong=0) returned 0
[0210.655] SendMessageW (hWnd=0x1102c8, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0210.656] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0210.656] SendMessageW (hWnd=0x1102c8, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0210.656] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0210.656] GetSystemMenu (hWnd=0x1102c8, bRevert=0) returned 0x3d011d
[0210.656] GetWindowPlacement (in: hWnd=0x1102c8, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0210.656] EnableMenuItem (hMenu=0x3d011d, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0210.656] EnableMenuItem (hMenu=0x3d011d, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0210.656] EnableMenuItem (hMenu=0x3d011d, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0210.656] EnableMenuItem (hMenu=0x3d011d, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0210.657] EnableMenuItem (hMenu=0x3d011d, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0210.657] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0210.657] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0210.657] GetWindowRect (in: hWnd=0x1102c8, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0210.657] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.657] GetWindowLongW (hWnd=0x1102c8, nIndex=-16) returned 113770496
[0210.657] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.657] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.657] GetSystemMetrics (nIndex=42) returned 0
[0210.657] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.657] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0210.657] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.657] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.657] GetSystemMetrics (nIndex=42) returned 0
[0210.658] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.658] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0210.658] GetCursorPos (in: lpPoint=0x22f7148 | out: lpPoint=0x22f7148*(x=552, y=413)) returned 1
[0210.658] MonitorFromPoint (pt=0x22b, dwFlags=0x19b) returned 0x10001
[0210.658] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0210.658] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xf10107c0
[0210.658] GetDeviceCaps (hdc=0xf10107c0, index=12) returned 32
[0210.658] GetDeviceCaps (hdc=0xf10107c0, index=14) returned 1
[0210.658] DeleteDC (hdc=0xf10107c0) returned 1
[0210.658] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0210.658] GetWindowLongW (hWnd=0x1102c8, nIndex=-16) returned 113770496
[0210.658] GetWindowLongW (hWnd=0x1102c8, nIndex=-20) returned 327937
[0210.658] SetWindowLongW (hWnd=0x1102c8, nIndex=-16, dwNewLong=46661632) returned 113770496
[0210.658] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0210.659] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0210.659] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0210.659] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0210.660] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0210.660] SetWindowLongW (hWnd=0x1102c8, nIndex=-20, dwNewLong=327681) returned 327937
[0210.660] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0210.660] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0210.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0210.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0210.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0210.661] SetWindowPos (hWnd=0x1102c8, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0210.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0210.662] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0210.662] GetWindowPlacement (in: hWnd=0x1102c8, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0210.662] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0210.662] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0210.662] GetWindowRect (in: hWnd=0x1102c8, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0210.663] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0210.663] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0210.663] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0210.663] RedrawWindow (hWnd=0x1102c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0210.664] GetSystemMenu (hWnd=0x1102c8, bRevert=0) returned 0x3d011d
[0210.664] GetWindowPlacement (in: hWnd=0x1102c8, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0210.664] EnableMenuItem (hMenu=0x3d011d, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0210.664] EnableMenuItem (hMenu=0x3d011d, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0210.664] EnableMenuItem (hMenu=0x3d011d, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0210.664] EnableMenuItem (hMenu=0x3d011d, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0210.664] EnableMenuItem (hMenu=0x3d011d, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0210.664] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0210.664] GetWindowLongW (hWnd=0x1102c8, nIndex=-8) returned 0
[0210.664] SetWindowLongW (hWnd=0x1102c8, nIndex=-8, dwNewLong=458806) returned 0
[0210.665] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0210.665] GetProcessWindowStation () returned 0x13c
[0210.665] GetCurrentThreadId () returned 0x11d0
[0210.665] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3c76, lParam=0x0) returned 1
[0210.665] IsWindowVisible (hWnd=0x1102c8) returned 0
[0210.665] IsWindowVisible (hWnd=0x70036) returned 1
[0210.665] IsWindowEnabled (hWnd=0x70036) returned 1
[0210.665] IsWindowVisible (hWnd=0x602b6) returned 0
[0210.665] IsWindowVisible (hWnd=0x901f8) returned 0
[0210.666] IsWindowVisible (hWnd=0x202d0) returned 0
[0210.666] IsWindowVisible (hWnd=0x202d4) returned 0
[0210.666] GetActiveWindow () returned 0x70036
[0210.666] GetFocus () returned 0x202c6
[0210.666] IsWindow (hWnd=0x70036) returned 1
[0210.666] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0210.666] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0210.666] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0210.667] GetWindowLongW (hWnd=0x1102c8, nIndex=-8) returned 458806
[0210.667] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0210.667] GetCurrentThreadId () returned 0x11d0
[0210.667] GetWindowLongW (hWnd=0x1102c8, nIndex=-8) returned 458806
[0210.667] IsWindowEnabled (hWnd=0x70036) returned 0
[0210.667] IsWindowEnabled (hWnd=0x1102c8) returned 1
[0210.667] ShowWindow (hWnd=0x1102c8, nCmdShow=5) returned 0
[0210.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0210.667] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0210.667] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.668] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0210.668] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x1102c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xd02b4
[0210.668] SetWindowLongW (hWnd=0xd02b4, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0210.668] GetWindowLongW (hWnd=0xd02b4, nIndex=-4) returned 1868026976
[0210.669] SetWindowLongW (hWnd=0xd02b4, nIndex=-4, dwNewLong=79641798) returned 1868026976
[0210.669] GetWindowLongW (hWnd=0xd02b4, nIndex=-4) returned 79641798
[0210.669] GetWindowLongW (hWnd=0xd02b4, nIndex=-16) returned 1174470848
[0210.669] GetWindowLongW (hWnd=0xd02b4, nIndex=-12) returned 0
[0210.669] SetWindowLongW (hWnd=0xd02b4, nIndex=-12, dwNewLong=852660) returned 0
[0210.669] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0210.670] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0210.671] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0210.672] SendMessageW (hWnd=0xd02b4, Msg=0x2055, wParam=0xd02b4, lParam=0x3) returned 0x2
[0210.672] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0210.672] GetWindow (hWnd=0xd02b4, uCmd=0x3) returned 0x0
[0210.672] GetClientRect (in: hWnd=0xd02b4, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0210.672] GetWindowRect (in: hWnd=0xd02b4, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0210.672] GetParent (hWnd=0xd02b4) returned 0x1102c8
[0210.672] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c8, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0210.672] SendMessageW (hWnd=0xd02b4, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0210.672] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0210.672] SendMessageW (hWnd=0xd02b4, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0210.672] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0210.672] GetSystemMetrics (nIndex=5) returned 1
[0210.672] GetSystemMetrics (nIndex=6) returned 1
[0210.672] SendMessageW (hWnd=0xd02b4, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0210.672] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0210.673] SendMessageW (hWnd=0xd02b4, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0210.673] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0210.673] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0210.673] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0210.673] GetClientRect (in: hWnd=0xd02b4, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0210.673] GetWindowRect (in: hWnd=0xd02b4, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0210.673] GetParent (hWnd=0xd02b4) returned 0x1102c8
[0210.673] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c8, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0210.673] SendMessageW (hWnd=0xd02b4, Msg=0x2210, wParam=0x2b40001, lParam=0xd02b4) returned 0x0
[0210.673] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x2210, wParam=0x2b40001, lParam=0xd02b4) returned 0x0
[0210.673] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0210.674] GetParent (hWnd=0xd02b4) returned 0x1102c8
[0210.674] GetParent (hWnd=0x15013e) returned 0x702de
[0210.674] SetParent (hWndChild=0x15013e, hWndNewParent=0x1102c8) returned 0x702de
[0210.674] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0210.674] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0210.675] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0210.675] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0210.675] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0210.675] GetClientRect (in: hWnd=0x15013e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0210.675] GetWindowRect (in: hWnd=0x15013e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0210.675] GetParent (hWnd=0x15013e) returned 0x1102c8
[0210.675] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c8, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0210.675] GetClientRect (in: hWnd=0x15013e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0210.675] GetWindowRect (in: hWnd=0x15013e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0210.675] GetParent (hWnd=0x15013e) returned 0x1102c8
[0210.675] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c8, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0210.675] GetParent (hWnd=0x15013e) returned 0x1102c8
[0210.675] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0210.676] GetWindow (hWnd=0x15013e, uCmd=0x3) returned 0x0
[0210.676] SetWindowPos (hWnd=0x15013e, hWndInsertAfter=0xd02b4, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0210.676] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0210.677] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0210.677] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0210.677] GetClientRect (in: hWnd=0x15013e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0210.677] GetWindowRect (in: hWnd=0x15013e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0210.677] GetParent (hWnd=0x15013e) returned 0x1102c8
[0210.677] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c8, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0210.677] GetParent (hWnd=0x15013e) returned 0x1102c8
[0210.677] GetWindow (hWnd=0x15013e, uCmd=0x3) returned 0xd02b4
[0210.677] GetWindowThreadProcessId (in: hWnd=0x15013e, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0210.677] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0210.678] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.679] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0210.679] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x1102c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1102d6
[0210.680] SetWindowLongW (hWnd=0x1102d6, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0210.680] GetWindowLongW (hWnd=0x1102d6, nIndex=-4) returned 1868032000
[0210.680] SetWindowLongW (hWnd=0x1102d6, nIndex=-4, dwNewLong=79641278) returned 1868032000
[0210.680] GetWindowLongW (hWnd=0x1102d6, nIndex=-4) returned 79641278
[0210.680] GetWindowLongW (hWnd=0x1102d6, nIndex=-16) returned 1174470667
[0210.680] GetWindowLongW (hWnd=0x1102d6, nIndex=-12) returned 0
[0210.680] SetWindowLongW (hWnd=0x1102d6, nIndex=-12, dwNewLong=1114838) returned 0
[0210.680] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0210.681] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0210.681] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0210.682] SendMessageW (hWnd=0x1102d6, Msg=0x2055, wParam=0x1102d6, lParam=0x3) returned 0x2
[0210.682] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0210.682] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0210.683] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0210.683] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0210.683] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0210.683] RedrawWindow (hWnd=0xd02b4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0210.683] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0210.683] RedrawWindow (hWnd=0x15013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0210.683] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0210.683] RedrawWindow (hWnd=0x1102d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0210.683] RedrawWindow (hWnd=0x1102c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0210.684] GetWindow (hWnd=0x1102d6, uCmd=0x3) returned 0x15013e
[0210.684] GetClientRect (in: hWnd=0x1102d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0210.684] GetWindowRect (in: hWnd=0x1102d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0210.684] GetParent (hWnd=0x1102d6) returned 0x1102c8
[0210.684] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c8, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0210.684] SetWindowTextW (hWnd=0x1102d6, lpString="OK") returned 1
[0210.684] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0xc, wParam=0x0, lParam=0x22ee470) returned 0x1
[0210.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0210.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0210.685] GetClientRect (in: hWnd=0x1102d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0210.685] GetWindowRect (in: hWnd=0x1102d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0210.685] GetParent (hWnd=0x1102d6) returned 0x1102c8
[0210.685] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c8, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0210.685] SendMessageW (hWnd=0x1102d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1102d6) returned 0x0
[0210.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1102d6) returned 0x0
[0210.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0210.686] GetParent (hWnd=0x1102d6) returned 0x1102c8
[0210.686] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0210.686] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.687] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0210.687] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x1102c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1102d2
[0210.687] SetWindowLongW (hWnd=0x1102d2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0210.687] GetWindowLongW (hWnd=0x1102d2, nIndex=-4) returned 1868032000
[0210.688] SetWindowLongW (hWnd=0x1102d2, nIndex=-4, dwNewLong=79641518) returned 1868032000
[0210.688] GetWindowLongW (hWnd=0x1102d2, nIndex=-4) returned 79641518
[0210.688] GetWindowLongW (hWnd=0x1102d2, nIndex=-16) returned 1174470667
[0210.688] GetWindowLongW (hWnd=0x1102d2, nIndex=-12) returned 0
[0210.688] SetWindowLongW (hWnd=0x1102d2, nIndex=-12, dwNewLong=1114834) returned 0
[0210.688] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0210.689] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0210.689] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0210.690] SendMessageW (hWnd=0x1102d2, Msg=0x2055, wParam=0x1102d2, lParam=0x3) returned 0x2
[0210.690] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0210.691] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0210.691] GetWindow (hWnd=0x1102d2, uCmd=0x3) returned 0x1102d6
[0210.691] GetClientRect (in: hWnd=0x1102d2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0210.691] GetWindowRect (in: hWnd=0x1102d2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0210.691] GetParent (hWnd=0x1102d2) returned 0x1102c8
[0210.691] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c8, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0210.691] SetWindowTextW (hWnd=0x1102d2, lpString="Cancel") returned 1
[0210.691] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d2, Msg=0xc, wParam=0x0, lParam=0x22f1d30) returned 0x1
[0210.692] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0210.692] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d2, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0210.692] GetClientRect (in: hWnd=0x1102d2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0210.692] GetWindowRect (in: hWnd=0x1102d2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0210.692] GetParent (hWnd=0x1102d2) returned 0x1102c8
[0210.692] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c8, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0210.692] SendMessageW (hWnd=0x1102d2, Msg=0x2210, wParam=0x2d20001, lParam=0x1102d2) returned 0x0
[0210.692] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d2, Msg=0x2210, wParam=0x2d20001, lParam=0x1102d2) returned 0x0
[0210.692] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0210.693] GetParent (hWnd=0x1102d2) returned 0x1102c8
[0210.693] GetDC (hWnd=0x0) returned 0x60100ce
[0210.693] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e320) returned 0x0
[0210.694] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0210.694] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0210.694] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0210.694] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0210.695] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0210.695] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0210.695] GetWindowLongW (hWnd=0x1102c8, nIndex=-8) returned 458806
[0210.695] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0210.695] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0210.695] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xf80107c0
[0210.695] GetDeviceCaps (hdc=0xf80107c0, index=12) returned 32
[0210.695] GetDeviceCaps (hdc=0xf80107c0, index=14) returned 1
[0210.695] DeleteDC (hdc=0xf80107c0) returned 1
[0210.696] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0210.696] GetWindowThreadProcessId (in: hWnd=0x1102c8, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0210.696] GetCurrentThreadId () returned 0x11d0
[0210.696] PostMessageW (hWnd=0x1102c8, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0210.696] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.696] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.696] GetSystemMetrics (nIndex=42) returned 0
[0210.696] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.696] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0210.696] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0210.696] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0210.697] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0210.697] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0210.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1102c8) returned 0x1
[0210.715] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0210.716] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0210.716] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0210.716] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0210.719] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0210.719] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0210.719] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0210.720] GetFocus () returned 0x202c6
[0210.720] IsChild (hWndParent=0x1102c8, hWnd=0x202c6) returned 0
[0210.720] GetFocus () returned 0x202c6
[0210.720] SetFocus (hWnd=0xd02b4) returned 0x202c6
[0210.723] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xd02b4, lParam=0x0) returned 0x0
[0210.723] GetCapture () returned 0x0
[0210.723] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0210.724] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0210.736] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0210.739] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0210.739] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0210.739] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0210.739] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0210.740] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0210.741] GetParent (hWnd=0x1102c8) returned 0x0
[0210.741] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0210.742] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0210.742] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0210.743] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0210.743] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0210.743] GetSysColorBrush (nIndex=5) returned 0x100079
[0210.745] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0210.745] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0210.746] SendMessageW (hWnd=0xd02b4, Msg=0x2111, wParam=0x10002b4, lParam=0xd02b4) returned 0x0
[0210.746] SendMessageW (hWnd=0xd02b4, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0210.746] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0210.746] GetKeyState (nVirtKey=1) returned 0
[0210.746] GetKeyState (nVirtKey=2) returned 0
[0210.746] GetKeyState (nVirtKey=4) returned 0
[0210.746] GetKeyState (nVirtKey=5) returned 0
[0210.746] GetKeyState (nVirtKey=6) returned 0
[0210.746] GetWindowTextLengthW (hWnd=0xd02b4) returned 0
[0210.746] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0210.746] SendMessageW (hWnd=0xd02b4, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0210.746] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0210.748] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0210.748] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0210.754] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0210.755] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0210.755] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0210.755] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0210.756] GetWindowPlacement (in: hWnd=0x1102c8, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0210.756] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0210.756] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.757] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.757] GetSystemMetrics (nIndex=42) returned 0
[0210.757] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.757] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0210.757] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0210.757] GetCurrentObject (hdc=0x8b010786, type=0x1) returned 0xb00017
[0210.757] GetCurrentObject (hdc=0x8b010786, type=0x2) returned 0x900010
[0210.757] GetCurrentObject (hdc=0x8b010786, type=0x7) returned 0xffffffff920507ce
[0210.757] GetCurrentObject (hdc=0x8b010786, type=0x6) returned 0x8a01c2
[0210.757] SaveDC (hdc=0x8b010786) returned 1
[0210.757] GetNearestColor (hdc=0x8b010786, color=0xf0f0f0) returned 0xf0f0f0
[0210.757] CreateSolidBrush (color=0xf0f0f0) returned 0x4710078d
[0210.757] FillRect (hDC=0x8b010786, lprc=0x53e250, hbr=0x4710078d) returned 1
[0210.758] DeleteObject (ho=0x4710078d) returned 1
[0210.758] RestoreDC (hdc=0x8b010786, nSavedDC=-1) returned 1
[0210.758] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0210.758] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0210.758] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0210.759] GetWindowPlacement (in: hWnd=0x1102c8, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0210.760] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0210.760] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.760] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.760] GetSystemMetrics (nIndex=42) returned 0
[0210.760] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.760] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0210.760] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0210.760] GetCurrentObject (hdc=0xe0107c0, type=0x1) returned 0xb00017
[0210.760] GetCurrentObject (hdc=0xe0107c0, type=0x2) returned 0x900010
[0210.760] GetCurrentObject (hdc=0xe0107c0, type=0x7) returned 0xffffffffbd0504fd
[0210.760] GetCurrentObject (hdc=0xe0107c0, type=0x6) returned 0x8a01c2
[0210.760] SaveDC (hdc=0xe0107c0) returned 1
[0210.760] GetNearestColor (hdc=0xe0107c0, color=0xf0f0f0) returned 0xf0f0f0
[0210.760] CreateSolidBrush (color=0xf0f0f0) returned 0x4810078d
[0210.761] FillRect (hDC=0xe0107c0, lprc=0x53dc18, hbr=0x4810078d) returned 1
[0210.761] DeleteObject (ho=0x4810078d) returned 1
[0210.761] RestoreDC (hdc=0xe0107c0, nSavedDC=-1) returned 1
[0210.761] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.761] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.761] GetSystemMetrics (nIndex=42) returned 0
[0210.761] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.761] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0210.761] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0210.761] GetCurrentObject (hdc=0xe0107c0, type=0x1) returned 0xb00017
[0210.761] GetCurrentObject (hdc=0xe0107c0, type=0x2) returned 0x900010
[0210.761] GetCurrentObject (hdc=0xe0107c0, type=0x7) returned 0xffffffffbd0504fd
[0210.761] GetCurrentObject (hdc=0xe0107c0, type=0x6) returned 0x8a01c2
[0210.761] SaveDC (hdc=0xe0107c0) returned 1
[0210.762] GetNearestColor (hdc=0xe0107c0, color=0xf0f0f0) returned 0xf0f0f0
[0210.762] CreateSolidBrush (color=0xf0f0f0) returned 0x4910078d
[0210.762] FillRect (hDC=0xe0107c0, lprc=0x53dbb8, hbr=0x4910078d) returned 1
[0210.762] DeleteObject (ho=0x4910078d) returned 1
[0210.762] RestoreDC (hdc=0xe0107c0, nSavedDC=-1) returned 1
[0210.762] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.762] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.762] GetSystemMetrics (nIndex=42) returned 0
[0210.762] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.762] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0210.763] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0210.763] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0210.764] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0210.764] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0210.764] GetStockObject (i=5) returned 0x900015
[0210.764] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0210.764] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d2, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0210.764] GetStockObject (i=5) returned 0x900015
[0210.765] GetWindowPlacement (in: hWnd=0x1102c8, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0210.765] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0210.765] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0210.765] GetWindowRect (in: hWnd=0x1102c8, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0210.766] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0210.766] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0210.767] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0210.767] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0210.767] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0210.767] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0210.767] GetWindowRect (in: hWnd=0x1102c8, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0210.767] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.768] IsWindowUnicode (hWnd=0x1102c8) returned 1
[0210.768] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.768] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.768] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.768] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0210.768] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.768] IsWindowUnicode (hWnd=0x1102c8) returned 1
[0210.768] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.768] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.768] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.768] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.769] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x84, wParam=0x0, lParam=0x18e0352) returned 0x1
[0210.769] IsWindowUnicode (hWnd=0x1102d6) returned 1
[0210.769] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.769] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.769] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.769] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.769] IsWindowUnicode (hWnd=0x202c6) returned 1
[0210.769] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.769] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.770] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.770] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0210.770] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0210.770] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.770] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x84, wParam=0x0, lParam=0x18e0352) returned 0x1
[0210.770] IsWindowUnicode (hWnd=0x1102d6) returned 1
[0210.770] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.770] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x84, wParam=0x0, lParam=0x18e0352) returned 0x1
[0210.770] SetCursor (hCursor=0x10003) returned 0x10003
[0210.770] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.771] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.771] _TrackMouseEvent (in: lpEventTrack=0x22f86c4 | out: lpEventTrack=0x22f86c4) returned 1
[0210.771] SendMessageW (hWnd=0x1102d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0210.771] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0210.771] InvalidateRect (hWnd=0x1102d6, lpRect=0x0, bErase=0) returned 1
[0210.771] GetKeyState (nVirtKey=1) returned 0
[0210.771] GetKeyState (nVirtKey=2) returned 0
[0210.771] GetKeyState (nVirtKey=4) returned 0
[0210.771] GetKeyState (nVirtKey=5) returned 0
[0210.771] GetKeyState (nVirtKey=6) returned 0
[0210.809] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.809] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0210.810] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0210.811] IsWindowUnicode (hWnd=0x1102c8) returned 1
[0210.811] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.811] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0210.812] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.812] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.812] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.813] IsWindowUnicode (hWnd=0x1102c8) returned 1
[0210.813] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.813] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.813] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.814] BeginPaint (in: hWnd=0x1102c8, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0xf0105ee
[0210.814] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0210.814] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.814] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.814] GetSystemMetrics (nIndex=42) returned 0
[0210.814] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.814] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0210.814] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0210.814] EndPaint (hWnd=0x1102c8, lpPaint=0x53e30c) returned 1
[0210.815] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.815] IsWindowUnicode (hWnd=0xd02b4) returned 1
[0210.815] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.815] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.815] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0210.815] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0210.815] SetTextColor (hdc=0xf0107c0, color=0x0) returned 0x0
[0210.816] SetBkColor (hdc=0xf0107c0, color=0xffffff) returned 0xffffff
[0210.817] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.817] IsWindowUnicode (hWnd=0x15013e) returned 1
[0210.817] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.817] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.817] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.817] BeginPaint (in: hWnd=0x15013e, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x8b010786
[0210.817] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0210.817] CreateCompatibleDC (hdc=0x8b010786) returned 0x1801078e
[0210.817] SelectObject (hdc=0x1801078e, h=0x1e0507b9) returned 0x85000f
[0210.817] GdipCreateFromHDC (hdc=0x1801078e, graphics=0x53e30c) returned 0x0
[0210.818] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0210.818] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0210.818] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0210.818] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0210.818] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0210.818] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0210.818] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0210.818] LocalFree (hMem=0x89ec80) returned 0x0
[0210.822] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0210.822] GdipCreateRegion (region=0x53e354) returned 0x0
[0210.822] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.823] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0210.823] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0210.823] GetWindowTextLengthW (hWnd=0x15013e) returned 16
[0210.823] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0210.823] GetSystemMetrics (nIndex=42) returned 0
[0210.823] GetWindowTextW (in: hWnd=0x15013e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0210.823] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0210.823] GetClientRect (in: hWnd=0x15013e, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0210.823] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0210.823] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0210.823] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0210.823] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0210.823] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0210.823] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.823] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0210.824] LocalFree (hMem=0x89eac0) returned 0x0
[0210.824] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0210.824] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0210.824] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0210.824] LocalFree (hMem=0x89ee08) returned 0x0
[0210.824] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0210.824] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0210.824] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0210.824] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0210.824] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0210.824] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0210.824] GetCurrentObject (hdc=0x1801078e, type=0x1) returned 0xb00017
[0210.824] GetCurrentObject (hdc=0x1801078e, type=0x2) returned 0x900010
[0210.824] GetCurrentObject (hdc=0x1801078e, type=0x7) returned 0x1e0507b9
[0210.824] GetCurrentObject (hdc=0x1801078e, type=0x6) returned 0x8a01c2
[0210.825] SaveDC (hdc=0x1801078e) returned 1
[0210.825] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x730407a1
[0210.825] GetClipRgn (hdc=0x1801078e, hrgn=0x730407a1) returned 0
[0210.825] SelectClipRgn (hdc=0x1801078e, hrgn=0x4b040798) returned 2
[0210.825] DeleteObject (ho=0x730407a1) returned 1
[0210.825] DeleteObject (ho=0x4b040798) returned 1
[0210.825] OffsetViewportOrgEx (in: hdc=0x1801078e, x=0, y=0, lppt=0x22f8bcc | out: lppt=0x22f8bcc) returned 1
[0210.825] GetNearestColor (hdc=0x1801078e, color=0xf0f0f0) returned 0xf0f0f0
[0210.825] CreateSolidBrush (color=0xf0f0f0) returned 0x4a10078d
[0210.825] FillRect (hDC=0x1801078e, lprc=0x53e1f4, hbr=0x4a10078d) returned 1
[0210.825] DeleteObject (ho=0x4a10078d) returned 1
[0210.826] RestoreDC (hdc=0x1801078e, nSavedDC=-1) returned 1
[0210.826] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1801078e) returned 0x0
[0210.826] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcbd0dbd) returned 0x0
[0210.826] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.826] GetWindowTextLengthW (hWnd=0x15013e) returned 16
[0210.826] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0210.826] GetSystemMetrics (nIndex=42) returned 0
[0210.826] GetWindowTextW (in: hWnd=0x15013e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0210.826] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0210.826] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0210.826] GetCurrentObject (hdc=0x1801078e, type=0x1) returned 0xb00017
[0210.826] GetCurrentObject (hdc=0x1801078e, type=0x2) returned 0x900010
[0210.826] GetCurrentObject (hdc=0x1801078e, type=0x7) returned 0x1e0507b9
[0210.826] GetCurrentObject (hdc=0x1801078e, type=0x6) returned 0x8a01c2
[0210.826] SaveDC (hdc=0x1801078e) returned 1
[0210.827] GetNearestColor (hdc=0x1801078e, color=0x0) returned 0x0
[0210.827] RestoreDC (hdc=0x1801078e, nSavedDC=-1) returned 1
[0210.827] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1801078e) returned 0x0
[0210.827] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0210.828] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0210.828] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0210.828] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x22f8ed4 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0210.828] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0210.828] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0210.828] GetCurrentObject (hdc=0x1801078e, type=0x1) returned 0xb00017
[0210.828] GetCurrentObject (hdc=0x1801078e, type=0x2) returned 0x900010
[0210.828] GetCurrentObject (hdc=0x1801078e, type=0x7) returned 0x1e0507b9
[0210.829] GetCurrentObject (hdc=0x1801078e, type=0x6) returned 0x8a01c2
[0210.829] SaveDC (hdc=0x1801078e) returned 1
[0210.829] GetTextAlign (hdc=0x1801078e) returned 0x0
[0210.829] GetTextColor (hdc=0x1801078e) returned 0x0
[0210.829] GetCurrentObject (hdc=0x1801078e, type=0x6) returned 0x8a01c2
[0210.829] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0210.829] SelectObject (hdc=0x1801078e, h=0x730a066d) returned 0x8a01c2
[0210.829] GetBkMode (hdc=0x1801078e) returned 2
[0210.829] SetBkMode (hdc=0x1801078e, mode=1) returned 2
[0210.829] DrawTextExW (in: hdc=0x1801078e, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x22f90f8 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0210.830] RestoreDC (hdc=0x1801078e, nSavedDC=-1) returned 1
[0210.830] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1801078e) returned 0x0
[0210.830] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0210.830] BitBlt (hdc=0x8b010786, x=0, y=0, cx=250, cy=70, hdcSrc=0x1801078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0210.830] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1801078e) returned 0x0
[0210.830] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0210.830] SelectObject (hdc=0x1801078e, h=0x85000f) returned 0x1e0507b9
[0210.831] DeleteDC (hdc=0x1801078e) returned 1
[0210.831] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0210.831] EndPaint (hWnd=0x15013e, lpPaint=0x53e2f0) returned 1
[0210.831] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.831] IsWindowUnicode (hWnd=0x1102d6) returned 1
[0210.831] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.831] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.831] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.831] BeginPaint (in: hWnd=0x1102d6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0210.831] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0210.832] CreateCompatibleDC (hdc=0x10105d6) returned 0x1a01078e
[0210.832] SelectObject (hdc=0x1a01078e, h=0x1e0507b9) returned 0x85000f
[0210.832] GdipCreateFromHDC (hdc=0x1a01078e, graphics=0x53e300) returned 0x0
[0210.832] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0210.832] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0210.832] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0210.832] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0210.832] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0210.832] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0210.832] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0210.832] LocalFree (hMem=0x89ec80) returned 0x0
[0210.832] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0210.833] GdipCreateRegion (region=0x53e348) returned 0x0
[0210.833] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.833] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0210.833] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0210.833] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcbb0dbd) returned 0x0
[0210.833] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.833] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0210.833] GetCurrentObject (hdc=0x1a01078e, type=0x1) returned 0xb00017
[0210.833] GetCurrentObject (hdc=0x1a01078e, type=0x2) returned 0x900010
[0210.833] GetCurrentObject (hdc=0x1a01078e, type=0x7) returned 0x1e0507b9
[0210.833] GetCurrentObject (hdc=0x1a01078e, type=0x6) returned 0x8a01c2
[0210.833] SaveDC (hdc=0x1a01078e) returned 1
[0210.833] GetNearestColor (hdc=0x1a01078e, color=0xf0f0f0) returned 0xf0f0f0
[0210.833] GetNearestColor (hdc=0x1a01078e, color=0xa0a0a0) returned 0xa0a0a0
[0210.833] GetNearestColor (hdc=0x1a01078e, color=0x696969) returned 0x696969
[0210.836] GetNearestColor (hdc=0x1a01078e, color=0xa0a0a0) returned 0xa0a0a0
[0210.836] GetNearestColor (hdc=0x1a01078e, color=0x0) returned 0x0
[0210.836] GetNearestColor (hdc=0x1a01078e, color=0xffffff) returned 0xffffff
[0210.836] GetNearestColor (hdc=0x1a01078e, color=0xe5e5e5) returned 0xe5e5e5
[0210.836] GetNearestColor (hdc=0x1a01078e, color=0xd7d7d7) returned 0xd7d7d7
[0210.836] GetNearestColor (hdc=0x1a01078e, color=0x0) returned 0x0
[0210.836] RestoreDC (hdc=0x1a01078e, nSavedDC=-1) returned 1
[0210.837] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1a01078e) returned 0x0
[0210.837] IsAppThemed () returned 0x1
[0210.837] GetThemeAppProperties () returned 0x3
[0210.837] GetThemeAppProperties () returned 0x3
[0210.837] IsAppThemed () returned 0x1
[0210.837] GetThemeAppProperties () returned 0x3
[0210.837] GetThemeAppProperties () returned 0x3
[0210.837] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x22f9864 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0210.837] IsAppThemed () returned 0x1
[0210.837] GetThemeAppProperties () returned 0x3
[0210.837] GetThemeAppProperties () returned 0x3
[0210.837] IsAppThemed () returned 0x1
[0210.838] GetThemeAppProperties () returned 0x3
[0210.838] GetThemeAppProperties () returned 0x3
[0210.838] IsAppThemed () returned 0x1
[0210.838] GetThemeAppProperties () returned 0x3
[0210.838] GetThemeAppProperties () returned 0x3
[0210.838] IsAppThemed () returned 0x1
[0210.838] GetThemeAppProperties () returned 0x3
[0210.838] GetThemeAppProperties () returned 0x3
[0210.838] IsThemePartDefined () returned 0x1
[0210.838] IsAppThemed () returned 0x1
[0210.838] GetThemeAppProperties () returned 0x3
[0210.838] GetThemeAppProperties () returned 0x3
[0210.838] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0210.838] IsAppThemed () returned 0x1
[0210.838] GetThemeAppProperties () returned 0x3
[0210.838] GetThemeAppProperties () returned 0x3
[0210.838] IsAppThemed () returned 0x1
[0210.838] GetThemeAppProperties () returned 0x3
[0210.838] GetThemeAppProperties () returned 0x3
[0210.838] IsThemePartDefined () returned 0x1
[0210.838] GdipCreateRegion (region=0x53e064) returned 0x0
[0210.839] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.839] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0210.839] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0210.839] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0210.839] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.839] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0210.839] LocalFree (hMem=0x89eac0) returned 0x0
[0210.839] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.839] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0210.839] LocalFree (hMem=0x89eac0) returned 0x0
[0210.839] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0210.839] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0210.839] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0210.839] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0210.839] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.839] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0210.840] GetCurrentObject (hdc=0x1a01078e, type=0x1) returned 0xb00017
[0210.840] GetCurrentObject (hdc=0x1a01078e, type=0x2) returned 0x900010
[0210.840] GetCurrentObject (hdc=0x1a01078e, type=0x7) returned 0x1e0507b9
[0210.840] GetCurrentObject (hdc=0x1a01078e, type=0x6) returned 0x8a01c2
[0210.840] SaveDC (hdc=0x1a01078e) returned 1
[0210.840] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c040798
[0210.840] GetClipRgn (hdc=0x1a01078e, hrgn=0x4c040798) returned 0
[0210.840] SelectClipRgn (hdc=0x1a01078e, hrgn=0x770407a1) returned 2
[0210.840] DeleteObject (ho=0x4c040798) returned 1
[0210.840] DeleteObject (ho=0x770407a1) returned 1
[0210.840] OffsetViewportOrgEx (in: hdc=0x1a01078e, x=0, y=0, lppt=0x22f9f14 | out: lppt=0x22f9f14) returned 1
[0210.840] DrawThemeParentBackground () returned 0x0
[0210.841] GetWindowPlacement (in: hWnd=0x1102c8, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0210.841] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0210.841] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.841] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.841] GetSystemMetrics (nIndex=42) returned 0
[0210.841] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.841] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0210.841] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0210.841] GetCurrentObject (hdc=0x1a01078e, type=0x1) returned 0xb00017
[0210.841] GetCurrentObject (hdc=0x1a01078e, type=0x2) returned 0x900010
[0210.841] GetCurrentObject (hdc=0x1a01078e, type=0x7) returned 0x1e0507b9
[0210.841] GetCurrentObject (hdc=0x1a01078e, type=0x6) returned 0x8a01c2
[0210.841] SaveDC (hdc=0x1a01078e) returned 2
[0210.841] GetNearestColor (hdc=0x1a01078e, color=0xf0f0f0) returned 0xf0f0f0
[0210.841] CreateSolidBrush (color=0xf0f0f0) returned 0x4b10078d
[0210.841] FillRect (hDC=0x1a01078e, lprc=0x53dac8, hbr=0x4b10078d) returned 1
[0210.842] DeleteObject (ho=0x4b10078d) returned 1
[0210.842] RestoreDC (hdc=0x1a01078e, nSavedDC=-1) returned 1
[0210.842] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.842] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.842] GetSystemMetrics (nIndex=42) returned 0
[0210.842] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.842] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0210.842] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0210.842] GetCurrentObject (hdc=0x1a01078e, type=0x1) returned 0xb00017
[0210.842] GetCurrentObject (hdc=0x1a01078e, type=0x2) returned 0x900010
[0210.842] GetCurrentObject (hdc=0x1a01078e, type=0x7) returned 0x1e0507b9
[0210.842] GetCurrentObject (hdc=0x1a01078e, type=0x6) returned 0x8a01c2
[0210.842] SaveDC (hdc=0x1a01078e) returned 2
[0210.843] GetNearestColor (hdc=0x1a01078e, color=0xf0f0f0) returned 0xf0f0f0
[0210.843] CreateSolidBrush (color=0xf0f0f0) returned 0x4c10078d
[0210.843] FillRect (hDC=0x1a01078e, lprc=0x53da68, hbr=0x4c10078d) returned 1
[0210.843] DeleteObject (ho=0x4c10078d) returned 1
[0210.843] RestoreDC (hdc=0x1a01078e, nSavedDC=-1) returned 1
[0210.843] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.843] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.843] GetSystemMetrics (nIndex=42) returned 0
[0210.843] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.843] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0210.843] RestoreDC (hdc=0x1a01078e, nSavedDC=-1) returned 1
[0210.843] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1a01078e) returned 0x0
[0210.844] IsAppThemed () returned 0x1
[0210.844] GetThemeAppProperties () returned 0x3
[0210.844] GetThemeAppProperties () returned 0x3
[0210.844] IsAppThemed () returned 0x1
[0210.844] GetThemeAppProperties () returned 0x3
[0210.844] GetThemeAppProperties () returned 0x3
[0210.844] IsThemePartDefined () returned 0x1
[0210.844] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0210.844] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.844] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0210.844] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0210.844] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0210.844] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.844] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0210.844] LocalFree (hMem=0x89eac0) returned 0x0
[0210.844] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0210.844] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0210.845] LocalFree (hMem=0x89ec80) returned 0x0
[0210.845] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0210.845] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0210.845] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0210.845] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0210.845] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.845] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0210.845] GetCurrentObject (hdc=0x1a01078e, type=0x1) returned 0xb00017
[0210.845] GetCurrentObject (hdc=0x1a01078e, type=0x2) returned 0x900010
[0210.845] GetCurrentObject (hdc=0x1a01078e, type=0x7) returned 0x1e0507b9
[0210.845] GetCurrentObject (hdc=0x1a01078e, type=0x6) returned 0x8a01c2
[0210.845] SaveDC (hdc=0x1a01078e) returned 1
[0210.845] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x780407a1
[0210.845] GetClipRgn (hdc=0x1a01078e, hrgn=0x780407a1) returned 0
[0210.845] SelectClipRgn (hdc=0x1a01078e, hrgn=0x4e040798) returned 2
[0210.845] DeleteObject (ho=0x780407a1) returned 1
[0210.845] DeleteObject (ho=0x4e040798) returned 1
[0210.846] OffsetViewportOrgEx (in: hdc=0x1a01078e, x=0, y=0, lppt=0x22fa79c | out: lppt=0x22fa79c) returned 1
[0210.846] IsAppThemed () returned 0x1
[0210.846] GetThemeAppProperties () returned 0x3
[0210.846] GetThemeAppProperties () returned 0x3
[0210.846] DrawThemeBackground () returned 0x0
[0210.846] RestoreDC (hdc=0x1a01078e, nSavedDC=-1) returned 1
[0210.846] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1a01078e) returned 0x0
[0210.846] GdipCreateRegion (region=0x53dfec) returned 0x0
[0210.846] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.846] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0210.846] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0210.846] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0210.846] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0210.846] LocalFree (hMem=0x89ec80) returned 0x0
[0210.846] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0210.846] LocalFree (hMem=0x89eac0) returned 0x0
[0210.847] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0210.847] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0210.847] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0210.847] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0210.847] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.847] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0210.847] GetCurrentObject (hdc=0x1a01078e, type=0x1) returned 0xb00017
[0210.847] GetCurrentObject (hdc=0x1a01078e, type=0x2) returned 0x900010
[0210.847] GetCurrentObject (hdc=0x1a01078e, type=0x7) returned 0x1e0507b9
[0210.847] GetCurrentObject (hdc=0x1a01078e, type=0x6) returned 0x8a01c2
[0210.847] SaveDC (hdc=0x1a01078e) returned 1
[0210.847] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f040798
[0210.847] GetClipRgn (hdc=0x1a01078e, hrgn=0x4f040798) returned 0
[0210.847] SelectClipRgn (hdc=0x1a01078e, hrgn=0x790407a1) returned 2
[0210.847] DeleteObject (ho=0x4f040798) returned 1
[0210.847] DeleteObject (ho=0x790407a1) returned 1
[0210.847] OffsetViewportOrgEx (in: hdc=0x1a01078e, x=0, y=0, lppt=0x22faa70 | out: lppt=0x22faa70) returned 1
[0210.847] IsAppThemed () returned 0x1
[0210.848] GetThemeAppProperties () returned 0x3
[0210.848] GetThemeAppProperties () returned 0x3
[0210.848] GetThemeBackgroundContentRect () returned 0x0
[0210.848] RestoreDC (hdc=0x1a01078e, nSavedDC=-1) returned 1
[0210.848] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1a01078e) returned 0x0
[0210.848] IsAppThemed () returned 0x1
[0210.848] GetThemeAppProperties () returned 0x3
[0210.848] GetThemeAppProperties () returned 0x3
[0210.848] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0210.848] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0210.848] GetCurrentObject (hdc=0x1a01078e, type=0x1) returned 0xb00017
[0210.848] GetCurrentObject (hdc=0x1a01078e, type=0x2) returned 0x900010
[0210.848] GetCurrentObject (hdc=0x1a01078e, type=0x7) returned 0x1e0507b9
[0210.848] GetCurrentObject (hdc=0x1a01078e, type=0x6) returned 0x8a01c2
[0210.848] SaveDC (hdc=0x1a01078e) returned 1
[0210.849] GetTextAlign (hdc=0x1a01078e) returned 0x0
[0210.849] GetTextColor (hdc=0x1a01078e) returned 0x0
[0210.849] GetCurrentObject (hdc=0x1a01078e, type=0x6) returned 0x8a01c2
[0210.849] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0210.849] SelectObject (hdc=0x1a01078e, h=0x730a066d) returned 0x8a01c2
[0210.849] GetBkMode (hdc=0x1a01078e) returned 2
[0210.849] SetBkMode (hdc=0x1a01078e, mode=1) returned 2
[0210.849] DrawTextExW (in: hdc=0x1a01078e, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x22fae10 | out: lpchText="OK", lprc=0x53df84) returned 13
[0210.857] DrawTextExW (in: hdc=0x1a01078e, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x22fae10 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0210.857] RestoreDC (hdc=0x1a01078e, nSavedDC=-1) returned 1
[0210.858] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1a01078e) returned 0x0
[0210.858] GetFocus () returned 0xd02b4
[0210.858] IsAppThemed () returned 0x1
[0210.858] GetThemeAppProperties () returned 0x3
[0210.858] GetThemeAppProperties () returned 0x3
[0210.858] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0210.858] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x1a01078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0210.858] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1a01078e) returned 0x0
[0210.858] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0210.858] SelectObject (hdc=0x1a01078e, h=0x85000f) returned 0x1e0507b9
[0210.858] DeleteDC (hdc=0x1a01078e) returned 1
[0210.858] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0210.858] EndPaint (hWnd=0x1102d6, lpPaint=0x53e2e4) returned 1
[0210.859] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.859] IsWindowUnicode (hWnd=0x1102d2) returned 1
[0210.859] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.859] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.859] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.859] BeginPaint (in: hWnd=0x1102d2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0210.859] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0210.859] CreateCompatibleDC (hdc=0x8b010786) returned 0x1c01078e
[0210.859] SelectObject (hdc=0x1c01078e, h=0x1e0507b9) returned 0x85000f
[0210.860] GdipCreateFromHDC (hdc=0x1c01078e, graphics=0x53e300) returned 0x0
[0210.860] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0210.860] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0210.860] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0210.860] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0210.860] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0210.860] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0210.860] LocalFree (hMem=0x89ec80) returned 0x0
[0210.860] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0210.860] GdipCreateRegion (region=0x53e348) returned 0x0
[0210.860] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.860] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0210.860] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0210.860] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcb90dbd) returned 0x0
[0210.860] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.860] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0210.860] GetCurrentObject (hdc=0x1c01078e, type=0x1) returned 0xb00017
[0210.861] GetCurrentObject (hdc=0x1c01078e, type=0x2) returned 0x900010
[0210.861] GetCurrentObject (hdc=0x1c01078e, type=0x7) returned 0x1e0507b9
[0210.861] GetCurrentObject (hdc=0x1c01078e, type=0x6) returned 0x8a01c2
[0210.861] SaveDC (hdc=0x1c01078e) returned 1
[0210.861] GetNearestColor (hdc=0x1c01078e, color=0xf0f0f0) returned 0xf0f0f0
[0210.861] GetNearestColor (hdc=0x1c01078e, color=0xa0a0a0) returned 0xa0a0a0
[0210.861] GetNearestColor (hdc=0x1c01078e, color=0x696969) returned 0x696969
[0210.861] GetNearestColor (hdc=0x1c01078e, color=0xa0a0a0) returned 0xa0a0a0
[0210.861] GetNearestColor (hdc=0x1c01078e, color=0x0) returned 0x0
[0210.861] GetNearestColor (hdc=0x1c01078e, color=0xffffff) returned 0xffffff
[0210.861] GetNearestColor (hdc=0x1c01078e, color=0xe5e5e5) returned 0xe5e5e5
[0210.861] GetNearestColor (hdc=0x1c01078e, color=0xd7d7d7) returned 0xd7d7d7
[0210.861] GetNearestColor (hdc=0x1c01078e, color=0x0) returned 0x0
[0210.861] RestoreDC (hdc=0x1c01078e, nSavedDC=-1) returned 1
[0210.861] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1c01078e) returned 0x0
[0210.862] IsAppThemed () returned 0x1
[0210.862] GetThemeAppProperties () returned 0x3
[0210.862] GetThemeAppProperties () returned 0x3
[0210.862] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0210.862] SendMessageW (hWnd=0x1102c8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0210.862] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0210.862] IsAppThemed () returned 0x1
[0210.862] GetThemeAppProperties () returned 0x3
[0210.862] GetThemeAppProperties () returned 0x3
[0210.862] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x22fb620 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0210.862] IsAppThemed () returned 0x1
[0210.862] GetThemeAppProperties () returned 0x3
[0210.862] GetThemeAppProperties () returned 0x3
[0210.863] IsAppThemed () returned 0x1
[0210.863] GetThemeAppProperties () returned 0x3
[0210.863] GetThemeAppProperties () returned 0x3
[0210.863] GetFocus () returned 0xd02b4
[0210.863] IsAppThemed () returned 0x1
[0210.863] GetThemeAppProperties () returned 0x3
[0210.863] GetThemeAppProperties () returned 0x3
[0210.863] IsAppThemed () returned 0x1
[0210.863] GetThemeAppProperties () returned 0x3
[0210.863] GetThemeAppProperties () returned 0x3
[0210.863] IsThemePartDefined () returned 0x1
[0210.863] IsAppThemed () returned 0x1
[0210.863] GetThemeAppProperties () returned 0x3
[0210.863] GetThemeAppProperties () returned 0x3
[0210.863] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0210.863] IsAppThemed () returned 0x1
[0210.863] GetThemeAppProperties () returned 0x3
[0210.863] GetThemeAppProperties () returned 0x3
[0210.863] IsAppThemed () returned 0x1
[0210.864] GetThemeAppProperties () returned 0x3
[0210.864] GetThemeAppProperties () returned 0x3
[0210.864] IsThemePartDefined () returned 0x1
[0210.864] GdipCreateRegion (region=0x53e070) returned 0x0
[0210.864] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.864] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0210.864] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0210.864] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0210.864] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0210.864] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0210.864] LocalFree (hMem=0x89ec80) returned 0x0
[0210.864] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.864] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0210.865] LocalFree (hMem=0x89eac0) returned 0x0
[0210.865] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0210.865] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0210.865] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0210.865] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0210.873] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.873] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0210.873] GetCurrentObject (hdc=0x1c01078e, type=0x1) returned 0xb00017
[0210.873] GetCurrentObject (hdc=0x1c01078e, type=0x2) returned 0x900010
[0210.873] GetCurrentObject (hdc=0x1c01078e, type=0x7) returned 0x1e0507b9
[0210.873] GetCurrentObject (hdc=0x1c01078e, type=0x6) returned 0x8a01c2
[0210.873] SaveDC (hdc=0x1c01078e) returned 1
[0210.873] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a0407a1
[0210.873] GetClipRgn (hdc=0x1c01078e, hrgn=0x7a0407a1) returned 0
[0210.873] SelectClipRgn (hdc=0x1c01078e, hrgn=0x53040798) returned 2
[0210.873] DeleteObject (ho=0x7a0407a1) returned 1
[0210.874] DeleteObject (ho=0x53040798) returned 1
[0210.874] OffsetViewportOrgEx (in: hdc=0x1c01078e, x=0, y=0, lppt=0x22fbcd0 | out: lppt=0x22fbcd0) returned 1
[0210.874] DrawThemeParentBackground () returned 0x0
[0210.874] GetWindowPlacement (in: hWnd=0x1102c8, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0210.874] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0210.874] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.874] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.874] GetSystemMetrics (nIndex=42) returned 0
[0210.874] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.874] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0210.874] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0210.874] GetCurrentObject (hdc=0x1c01078e, type=0x1) returned 0xb00017
[0210.874] GetCurrentObject (hdc=0x1c01078e, type=0x2) returned 0x900010
[0210.874] GetCurrentObject (hdc=0x1c01078e, type=0x7) returned 0x1e0507b9
[0210.875] GetCurrentObject (hdc=0x1c01078e, type=0x6) returned 0x8a01c2
[0210.875] SaveDC (hdc=0x1c01078e) returned 2
[0210.875] GetNearestColor (hdc=0x1c01078e, color=0xf0f0f0) returned 0xf0f0f0
[0210.875] CreateSolidBrush (color=0xf0f0f0) returned 0x4d10078d
[0210.875] FillRect (hDC=0x1c01078e, lprc=0x53dad0, hbr=0x4d10078d) returned 1
[0210.875] DeleteObject (ho=0x4d10078d) returned 1
[0210.875] RestoreDC (hdc=0x1c01078e, nSavedDC=-1) returned 1
[0210.875] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.875] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.875] GetSystemMetrics (nIndex=42) returned 0
[0210.875] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.875] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0210.875] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0210.875] GetCurrentObject (hdc=0x1c01078e, type=0x1) returned 0xb00017
[0210.876] GetCurrentObject (hdc=0x1c01078e, type=0x2) returned 0x900010
[0210.876] GetCurrentObject (hdc=0x1c01078e, type=0x7) returned 0x1e0507b9
[0210.876] GetCurrentObject (hdc=0x1c01078e, type=0x6) returned 0x8a01c2
[0210.876] SaveDC (hdc=0x1c01078e) returned 2
[0210.876] GetNearestColor (hdc=0x1c01078e, color=0xf0f0f0) returned 0xf0f0f0
[0210.876] CreateSolidBrush (color=0xf0f0f0) returned 0x4e10078d
[0210.876] FillRect (hDC=0x1c01078e, lprc=0x53da70, hbr=0x4e10078d) returned 1
[0210.876] DeleteObject (ho=0x4e10078d) returned 1
[0210.876] RestoreDC (hdc=0x1c01078e, nSavedDC=-1) returned 1
[0210.876] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0210.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0210.876] GetSystemMetrics (nIndex=42) returned 0
[0210.876] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0210.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0210.877] RestoreDC (hdc=0x1c01078e, nSavedDC=-1) returned 1
[0210.877] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1c01078e) returned 0x0
[0210.877] IsAppThemed () returned 0x1
[0210.877] GetThemeAppProperties () returned 0x3
[0210.877] GetThemeAppProperties () returned 0x3
[0210.877] IsAppThemed () returned 0x1
[0210.877] GetThemeAppProperties () returned 0x3
[0210.877] GetThemeAppProperties () returned 0x3
[0210.877] IsThemePartDefined () returned 0x1
[0210.877] GdipCreateRegion (region=0x53dff4) returned 0x0
[0210.877] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.877] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0210.877] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0210.877] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0210.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.878] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0210.878] LocalFree (hMem=0x89eac0) returned 0x0
[0210.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.878] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0210.878] LocalFree (hMem=0x89eac0) returned 0x0
[0210.878] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0210.878] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0210.878] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0210.878] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0210.878] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.878] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0210.878] GetCurrentObject (hdc=0x1c01078e, type=0x1) returned 0xb00017
[0210.878] GetCurrentObject (hdc=0x1c01078e, type=0x2) returned 0x900010
[0210.878] GetCurrentObject (hdc=0x1c01078e, type=0x7) returned 0x1e0507b9
[0210.878] GetCurrentObject (hdc=0x1c01078e, type=0x6) returned 0x8a01c2
[0210.879] SaveDC (hdc=0x1c01078e) returned 1
[0210.879] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x54040798
[0210.879] GetClipRgn (hdc=0x1c01078e, hrgn=0x54040798) returned 0
[0210.879] SelectClipRgn (hdc=0x1c01078e, hrgn=0x7c0407a1) returned 2
[0210.879] DeleteObject (ho=0x54040798) returned 1
[0210.879] DeleteObject (ho=0x7c0407a1) returned 1
[0210.879] OffsetViewportOrgEx (in: hdc=0x1c01078e, x=0, y=0, lppt=0x22fc558 | out: lppt=0x22fc558) returned 1
[0210.879] IsAppThemed () returned 0x1
[0210.879] GetThemeAppProperties () returned 0x3
[0210.879] GetThemeAppProperties () returned 0x3
[0210.879] DrawThemeBackground () returned 0x0
[0210.879] RestoreDC (hdc=0x1c01078e, nSavedDC=-1) returned 1
[0210.879] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1c01078e) returned 0x0
[0210.879] GdipCreateRegion (region=0x53dff8) returned 0x0
[0210.880] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.880] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0210.880] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0210.880] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0210.880] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.880] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0210.880] LocalFree (hMem=0x89eac0) returned 0x0
[0210.880] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.880] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0210.880] LocalFree (hMem=0x89eac0) returned 0x0
[0210.880] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0210.880] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0210.880] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0210.880] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0210.880] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.880] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0210.881] GetCurrentObject (hdc=0x1c01078e, type=0x1) returned 0xb00017
[0210.881] GetCurrentObject (hdc=0x1c01078e, type=0x2) returned 0x900010
[0210.881] GetCurrentObject (hdc=0x1c01078e, type=0x7) returned 0x1e0507b9
[0210.881] GetCurrentObject (hdc=0x1c01078e, type=0x6) returned 0x8a01c2
[0210.881] SaveDC (hdc=0x1c01078e) returned 1
[0210.881] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d0407a1
[0210.882] GetClipRgn (hdc=0x1c01078e, hrgn=0x7d0407a1) returned 0
[0210.882] SelectClipRgn (hdc=0x1c01078e, hrgn=0x55040798) returned 2
[0210.882] DeleteObject (ho=0x7d0407a1) returned 1
[0210.882] DeleteObject (ho=0x55040798) returned 1
[0210.882] OffsetViewportOrgEx (in: hdc=0x1c01078e, x=0, y=0, lppt=0x22fc82c | out: lppt=0x22fc82c) returned 1
[0210.882] IsAppThemed () returned 0x1
[0210.882] GetThemeAppProperties () returned 0x3
[0210.882] GetThemeAppProperties () returned 0x3
[0210.882] GetThemeBackgroundContentRect () returned 0x0
[0210.882] RestoreDC (hdc=0x1c01078e, nSavedDC=-1) returned 1
[0210.882] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1c01078e) returned 0x0
[0210.882] IsAppThemed () returned 0x1
[0210.882] GetThemeAppProperties () returned 0x3
[0210.882] GetThemeAppProperties () returned 0x3
[0210.882] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0210.883] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0210.883] GetCurrentObject (hdc=0x1c01078e, type=0x1) returned 0xb00017
[0210.884] GetCurrentObject (hdc=0x1c01078e, type=0x2) returned 0x900010
[0210.884] GetCurrentObject (hdc=0x1c01078e, type=0x7) returned 0x1e0507b9
[0210.884] GetCurrentObject (hdc=0x1c01078e, type=0x6) returned 0x8a01c2
[0210.884] SaveDC (hdc=0x1c01078e) returned 1
[0210.884] GetTextAlign (hdc=0x1c01078e) returned 0x0
[0210.884] GetTextColor (hdc=0x1c01078e) returned 0x0
[0210.884] GetCurrentObject (hdc=0x1c01078e, type=0x6) returned 0x8a01c2
[0210.884] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0210.884] SelectObject (hdc=0x1c01078e, h=0x730a066d) returned 0x8a01c2
[0210.884] GetBkMode (hdc=0x1c01078e) returned 2
[0210.884] SetBkMode (hdc=0x1c01078e, mode=1) returned 2
[0210.885] DrawTextExW (in: hdc=0x1c01078e, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x22fcbcc | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0210.885] DrawTextExW (in: hdc=0x1c01078e, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x22fcbcc | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0210.885] RestoreDC (hdc=0x1c01078e, nSavedDC=-1) returned 1
[0210.885] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1c01078e) returned 0x0
[0210.885] GetFocus () returned 0xd02b4
[0210.885] IsAppThemed () returned 0x1
[0210.886] GetThemeAppProperties () returned 0x3
[0210.886] GetThemeAppProperties () returned 0x3
[0210.886] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0210.886] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x1c01078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0210.886] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1c01078e) returned 0x0
[0210.886] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0210.886] SelectObject (hdc=0x1c01078e, h=0x85000f) returned 0x1e0507b9
[0210.886] DeleteDC (hdc=0x1c01078e) returned 1
[0210.886] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0210.886] EndPaint (hWnd=0x1102d2, lpPaint=0x53e2e4) returned 1
[0210.886] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.887] IsWindowUnicode (hWnd=0x202c6) returned 1
[0210.887] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.887] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.887] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.887] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0210.887] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0210.888] CreateCompatibleDC (hdc=0x10105d6) returned 0x1e01078e
[0210.888] SelectObject (hdc=0x1e01078e, h=0x1e0507b9) returned 0x85000f
[0210.888] GdipCreateFromHDC (hdc=0x1e01078e, graphics=0x53e300) returned 0x0
[0210.888] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0210.888] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0210.888] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0210.888] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0210.888] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0210.888] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.888] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0210.888] LocalFree (hMem=0x89eac0) returned 0x0
[0210.888] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0210.888] GdipCreateRegion (region=0x53e348) returned 0x0
[0210.889] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.889] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0210.889] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0210.889] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcb70dbd) returned 0x0
[0210.889] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.889] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0210.889] GetCurrentObject (hdc=0x1e01078e, type=0x1) returned 0xb00017
[0210.889] GetCurrentObject (hdc=0x1e01078e, type=0x2) returned 0x900010
[0210.889] GetCurrentObject (hdc=0x1e01078e, type=0x7) returned 0x1e0507b9
[0210.889] GetCurrentObject (hdc=0x1e01078e, type=0x6) returned 0x8a01c2
[0210.889] SaveDC (hdc=0x1e01078e) returned 1
[0210.889] GetNearestColor (hdc=0x1e01078e, color=0xff) returned 0xff
[0210.889] GetNearestColor (hdc=0x1e01078e, color=0x55) returned 0x55
[0210.889] GetNearestColor (hdc=0x1e01078e, color=0x0) returned 0x0
[0210.890] GetNearestColor (hdc=0x1e01078e, color=0x55) returned 0x55
[0210.890] GetNearestColor (hdc=0x1e01078e, color=0x0) returned 0x0
[0210.890] GetNearestColor (hdc=0x1e01078e, color=0x8080ff) returned 0x8080ff
[0210.890] GetNearestColor (hdc=0x1e01078e, color=0x7373e5) returned 0x7373e5
[0210.890] GetNearestColor (hdc=0x1e01078e, color=0xe5) returned 0xe5
[0210.890] GetNearestColor (hdc=0x1e01078e, color=0x0) returned 0x0
[0210.890] RestoreDC (hdc=0x1e01078e, nSavedDC=-1) returned 1
[0210.890] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1e01078e) returned 0x0
[0210.890] IsAppThemed () returned 0x1
[0210.890] GetThemeAppProperties () returned 0x3
[0210.890] GetThemeAppProperties () returned 0x3
[0210.890] IsAppThemed () returned 0x1
[0210.890] GetThemeAppProperties () returned 0x3
[0210.890] GetThemeAppProperties () returned 0x3
[0210.891] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0210.891] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x22fd3b0 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0210.891] IsAppThemed () returned 0x1
[0210.891] GetThemeAppProperties () returned 0x3
[0210.891] GetThemeAppProperties () returned 0x3
[0210.891] IsAppThemed () returned 0x1
[0210.891] GetThemeAppProperties () returned 0x3
[0210.891] GetThemeAppProperties () returned 0x3
[0210.891] GetFocus () returned 0xd02b4
[0210.891] IsAppThemed () returned 0x1
[0210.891] GetThemeAppProperties () returned 0x3
[0210.891] GetThemeAppProperties () returned 0x3
[0210.892] IsAppThemed () returned 0x1
[0210.892] GetThemeAppProperties () returned 0x3
[0210.892] GetThemeAppProperties () returned 0x3
[0210.892] IsThemePartDefined () returned 0x1
[0210.892] IsAppThemed () returned 0x1
[0210.892] GetThemeAppProperties () returned 0x3
[0210.892] GetThemeAppProperties () returned 0x3
[0210.892] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0210.892] IsAppThemed () returned 0x1
[0210.892] GetThemeAppProperties () returned 0x3
[0210.892] GetThemeAppProperties () returned 0x3
[0210.892] IsAppThemed () returned 0x1
[0210.892] GetThemeAppProperties () returned 0x3
[0210.892] GetThemeAppProperties () returned 0x3
[0210.892] IsThemePartDefined () returned 0x1
[0210.892] GdipCreateRegion (region=0x53e070) returned 0x0
[0210.892] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.892] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0210.892] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0210.892] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0210.892] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0210.893] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0210.893] LocalFree (hMem=0x89ee08) returned 0x0
[0210.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.893] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0210.893] LocalFree (hMem=0x89eac0) returned 0x0
[0210.893] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0210.893] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0210.893] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0210.893] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0210.893] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.893] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0210.893] GetCurrentObject (hdc=0x1e01078e, type=0x1) returned 0xb00017
[0210.893] GetCurrentObject (hdc=0x1e01078e, type=0x2) returned 0x900010
[0210.893] GetCurrentObject (hdc=0x1e01078e, type=0x7) returned 0x1e0507b9
[0210.893] GetCurrentObject (hdc=0x1e01078e, type=0x6) returned 0x8a01c2
[0210.893] SaveDC (hdc=0x1e01078e) returned 1
[0210.894] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x56040798
[0210.894] GetClipRgn (hdc=0x1e01078e, hrgn=0x56040798) returned 0
[0210.894] SelectClipRgn (hdc=0x1e01078e, hrgn=0x810407a1) returned 2
[0210.894] DeleteObject (ho=0x56040798) returned 1
[0210.894] DeleteObject (ho=0x810407a1) returned 1
[0210.894] OffsetViewportOrgEx (in: hdc=0x1e01078e, x=0, y=0, lppt=0x22fda60 | out: lppt=0x22fda60) returned 1
[0210.894] DrawThemeParentBackground () returned 0x0
[0210.894] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0210.894] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0210.894] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0210.894] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0210.894] GetSystemMetrics (nIndex=42) returned 0
[0210.894] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0210.895] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0210.895] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0210.895] GetCurrentObject (hdc=0x1e01078e, type=0x1) returned 0xb00017
[0210.895] GetCurrentObject (hdc=0x1e01078e, type=0x2) returned 0x900010
[0210.895] GetCurrentObject (hdc=0x1e01078e, type=0x7) returned 0x1e0507b9
[0210.895] GetCurrentObject (hdc=0x1e01078e, type=0x6) returned 0x8a01c2
[0210.895] SaveDC (hdc=0x1e01078e) returned 2
[0210.895] GetNearestColor (hdc=0x1e01078e, color=0xff) returned 0xff
[0210.895] CreateSolidBrush (color=0xff) returned 0x4f10078d
[0210.895] FillRect (hDC=0x1e01078e, lprc=0x53dad0, hbr=0x4f10078d) returned 1
[0210.895] DeleteObject (ho=0x4f10078d) returned 1
[0210.895] RestoreDC (hdc=0x1e01078e, nSavedDC=-1) returned 1
[0210.895] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0210.896] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0210.896] GetSystemMetrics (nIndex=42) returned 0
[0210.896] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0210.896] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0210.896] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0210.896] GetCurrentObject (hdc=0x1e01078e, type=0x1) returned 0xb00017
[0210.896] GetCurrentObject (hdc=0x1e01078e, type=0x2) returned 0x900010
[0210.896] GetCurrentObject (hdc=0x1e01078e, type=0x7) returned 0x1e0507b9
[0210.896] GetCurrentObject (hdc=0x1e01078e, type=0x6) returned 0x8a01c2
[0210.903] SaveDC (hdc=0x1e01078e) returned 2
[0210.903] GetNearestColor (hdc=0x1e01078e, color=0xff) returned 0xff
[0210.903] CreateSolidBrush (color=0xff) returned 0x5010078d
[0210.904] FillRect (hDC=0x1e01078e, lprc=0x53da70, hbr=0x5010078d) returned 1
[0210.904] DeleteObject (ho=0x5010078d) returned 1
[0210.904] RestoreDC (hdc=0x1e01078e, nSavedDC=-1) returned 1
[0210.904] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0210.904] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0210.904] GetSystemMetrics (nIndex=42) returned 0
[0210.904] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0210.904] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0210.904] RestoreDC (hdc=0x1e01078e, nSavedDC=-1) returned 1
[0210.904] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1e01078e) returned 0x0
[0210.904] IsAppThemed () returned 0x1
[0210.905] GetThemeAppProperties () returned 0x3
[0210.905] GetThemeAppProperties () returned 0x3
[0210.905] IsAppThemed () returned 0x1
[0210.905] GetThemeAppProperties () returned 0x3
[0210.905] GetThemeAppProperties () returned 0x3
[0210.905] IsThemePartDefined () returned 0x1
[0210.905] GdipCreateRegion (region=0x53dff4) returned 0x0
[0210.905] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.905] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0210.905] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0210.905] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0210.905] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.905] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0210.905] LocalFree (hMem=0x89eac0) returned 0x0
[0210.905] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0210.905] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0210.905] LocalFree (hMem=0x89eac0) returned 0x0
[0210.906] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0210.906] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0210.906] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0210.906] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0210.906] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.906] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0210.906] GetCurrentObject (hdc=0x1e01078e, type=0x1) returned 0xb00017
[0210.906] GetCurrentObject (hdc=0x1e01078e, type=0x2) returned 0x900010
[0210.906] GetCurrentObject (hdc=0x1e01078e, type=0x7) returned 0x1e0507b9
[0210.906] GetCurrentObject (hdc=0x1e01078e, type=0x6) returned 0x8a01c2
[0210.906] SaveDC (hdc=0x1e01078e) returned 1
[0210.906] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x820407a1
[0210.906] GetClipRgn (hdc=0x1e01078e, hrgn=0x820407a1) returned 0
[0210.906] SelectClipRgn (hdc=0x1e01078e, hrgn=0x58040798) returned 2
[0210.907] DeleteObject (ho=0x820407a1) returned 1
[0210.907] DeleteObject (ho=0x58040798) returned 1
[0210.907] OffsetViewportOrgEx (in: hdc=0x1e01078e, x=0, y=0, lppt=0x22fe2c4 | out: lppt=0x22fe2c4) returned 1
[0210.907] IsAppThemed () returned 0x1
[0210.907] GetThemeAppProperties () returned 0x3
[0210.907] GetThemeAppProperties () returned 0x3
[0210.907] DrawThemeBackground () returned 0x0
[0210.907] RestoreDC (hdc=0x1e01078e, nSavedDC=-1) returned 1
[0210.907] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1e01078e) returned 0x0
[0210.907] GdipCreateRegion (region=0x53dff8) returned 0x0
[0210.907] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0210.907] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0210.907] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0210.907] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0210.907] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0210.907] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0210.908] LocalFree (hMem=0x89ec80) returned 0x0
[0210.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0210.908] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0210.908] LocalFree (hMem=0x89ee08) returned 0x0
[0210.908] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0210.908] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0210.908] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0210.908] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0210.908] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0210.908] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0210.908] GetCurrentObject (hdc=0x1e01078e, type=0x1) returned 0xb00017
[0210.908] GetCurrentObject (hdc=0x1e01078e, type=0x2) returned 0x900010
[0210.908] GetCurrentObject (hdc=0x1e01078e, type=0x7) returned 0x1e0507b9
[0210.908] GetCurrentObject (hdc=0x1e01078e, type=0x6) returned 0x8a01c2
[0210.908] SaveDC (hdc=0x1e01078e) returned 1
[0210.908] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x59040798
[0210.908] GetClipRgn (hdc=0x1e01078e, hrgn=0x59040798) returned 0
[0210.909] SelectClipRgn (hdc=0x1e01078e, hrgn=0x830407a1) returned 2
[0210.909] DeleteObject (ho=0x59040798) returned 1
[0210.909] DeleteObject (ho=0x830407a1) returned 1
[0210.909] OffsetViewportOrgEx (in: hdc=0x1e01078e, x=0, y=0, lppt=0x22fe598 | out: lppt=0x22fe598) returned 1
[0210.909] IsAppThemed () returned 0x1
[0210.909] GetThemeAppProperties () returned 0x3
[0210.909] GetThemeAppProperties () returned 0x3
[0210.909] GetThemeBackgroundContentRect () returned 0x0
[0210.909] RestoreDC (hdc=0x1e01078e, nSavedDC=-1) returned 1
[0210.909] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1e01078e) returned 0x0
[0210.909] IsAppThemed () returned 0x1
[0210.909] GetThemeAppProperties () returned 0x3
[0210.909] GetThemeAppProperties () returned 0x3
[0210.909] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0210.909] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0210.909] GetCurrentObject (hdc=0x1e01078e, type=0x1) returned 0xb00017
[0210.909] GetCurrentObject (hdc=0x1e01078e, type=0x2) returned 0x900010
[0210.909] GetCurrentObject (hdc=0x1e01078e, type=0x7) returned 0x1e0507b9
[0210.910] GetCurrentObject (hdc=0x1e01078e, type=0x6) returned 0x8a01c2
[0210.910] SaveDC (hdc=0x1e01078e) returned 1
[0210.910] GetTextAlign (hdc=0x1e01078e) returned 0x0
[0210.910] GetTextColor (hdc=0x1e01078e) returned 0x0
[0210.910] GetCurrentObject (hdc=0x1e01078e, type=0x6) returned 0x8a01c2
[0210.910] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0210.910] SelectObject (hdc=0x1e01078e, h=0x450a0799) returned 0x8a01c2
[0210.910] GetBkMode (hdc=0x1e01078e) returned 2
[0210.910] SetBkMode (hdc=0x1e01078e, mode=1) returned 2
[0210.910] DrawTextExW (in: hdc=0x1e01078e, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x22fe938 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0210.911] DrawTextExW (in: hdc=0x1e01078e, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x22fe938 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0210.911] RestoreDC (hdc=0x1e01078e, nSavedDC=-1) returned 1
[0210.911] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1e01078e) returned 0x0
[0210.911] GetFocus () returned 0xd02b4
[0210.911] IsAppThemed () returned 0x1
[0210.911] GetThemeAppProperties () returned 0x3
[0210.911] GetThemeAppProperties () returned 0x3
[0210.911] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0210.911] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x1e01078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0210.911] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1e01078e) returned 0x0
[0210.912] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0210.912] SelectObject (hdc=0x1e01078e, h=0x85000f) returned 0x1e0507b9
[0210.919] DeleteDC (hdc=0x1e01078e) returned 1
[0210.919] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0210.920] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0210.920] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.920] IsWindowUnicode (hWnd=0x1102d6) returned 1
[0210.920] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.920] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.920] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.920] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.920] IsWindowUnicode (hWnd=0x1102d6) returned 1
[0210.920] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.920] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.920] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.921] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x2a1, wParam=0x0, lParam=0x50011) returned 0x0
[0210.921] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0210.921] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0210.921] WaitMessage () returned 1
[0210.936] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.936] IsWindowUnicode (hWnd=0x102dc) returned 1
[0210.936] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.936] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.936] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.937] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0210.937] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0210.937] WaitMessage () returned 1
[0210.979] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.980] IsWindowUnicode (hWnd=0x102dc) returned 1
[0210.980] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.980] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.980] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.981] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.981] IsWindowUnicode (hWnd=0x102dc) returned 1
[0210.981] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.981] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.981] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.981] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.981] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x84, wParam=0x0, lParam=0x18e0352) returned 0x1
[0210.982] IsWindowUnicode (hWnd=0x1102d6) returned 1
[0210.982] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.982] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x84, wParam=0x0, lParam=0x18e0352) returned 0x1
[0210.982] GetDlgItem (hDlg=0x1102c8, nIDDlgItem=0) returned 0x0
[0210.982] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x210, wParam=0x201, lParam=0x110133) returned 0x0
[0210.982] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x21, wParam=0x1102c8, lParam=0x2010001) returned 0x1
[0210.982] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x21, wParam=0x1102c8, lParam=0x2010001) returned 0x1
[0210.982] SetCursor (hCursor=0x10003) returned 0x10003
[0210.983] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.983] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.983] GetKeyState (nVirtKey=1) returned -127
[0210.983] GetKeyState (nVirtKey=2) returned 0
[0210.983] GetKeyState (nVirtKey=4) returned 0
[0210.983] GetKeyState (nVirtKey=5) returned 0
[0210.983] GetKeyState (nVirtKey=6) returned 0
[0210.983] IsWindowVisible (hWnd=0x1102d6) returned 1
[0210.983] IsWindowEnabled (hWnd=0x1102d6) returned 1
[0210.983] SetFocus (hWnd=0x1102d6) returned 0xd02b4
[0210.983] GetFocus () returned 0x1102d6
[0210.983] IsChild (hWndParent=0x1102c8, hWnd=0x1102d6) returned 1
[0210.983] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x8, wParam=0x1102d6, lParam=0x0) returned 0x1
[0210.984] SendMessageW (hWnd=0xd02b4, Msg=0x2111, wParam=0x20002b4, lParam=0xd02b4) returned 0x0
[0210.985] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0210.986] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0210.987] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0210.987] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0210.987] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0210.987] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0210.990] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0210.995] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x7, wParam=0xd02b4, lParam=0x0) returned 0x0
[0210.995] GetStockObject (i=5) returned 0x900015
[0210.995] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0210.995] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0xd, wParam=0x3, lParam=0x89e7d8) returned 0x2
[0210.995] GetDlgItem (hDlg=0x1102c8, nIDDlgItem=1114838) returned 0x1102d6
[0210.995] SendMessageW (hWnd=0x1102d6, Msg=0x202b, wParam=0x1102d6, lParam=0x53de74) returned 0x0
[0210.995] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x202b, wParam=0x1102d6, lParam=0x53de74) returned 0x0
[0210.996] InvalidateRect (hWnd=0x1102d6, lpRect=0x0, bErase=0) returned 1
[0210.997] GetFocus () returned 0x1102d6
[0210.997] GetFocus () returned 0x1102d6
[0210.997] GetFocus () returned 0x1102d6
[0210.997] GetKeyState (nVirtKey=1) returned -127
[0210.997] GetKeyState (nVirtKey=2) returned 0
[0210.997] GetKeyState (nVirtKey=4) returned 0
[0210.998] GetKeyState (nVirtKey=5) returned 0
[0210.998] GetKeyState (nVirtKey=6) returned 0
[0210.998] GetCapture () returned 0x0
[0210.998] SetCapture (hWnd=0x1102d6) returned 0x0
[0210.998] GetKeyState (nVirtKey=1) returned -127
[0210.998] GetKeyState (nVirtKey=2) returned 0
[0210.998] GetKeyState (nVirtKey=4) returned 0
[0210.998] GetKeyState (nVirtKey=5) returned 0
[0210.998] GetKeyState (nVirtKey=6) returned 0
[0210.998] NotifyWinEvent (event=0x800a, hwnd=0x1102d6, idObject=-4, idChild=0)
[0210.998] InvalidateRect (hWnd=0x1102d6, lpRect=0x53e4c8, bErase=0) returned 1
[0210.998] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.998] IsWindowUnicode (hWnd=0x1102d6) returned 1
[0210.998] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0210.998] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0210.998] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0210.999] MapWindowPoints (in: hWndFrom=0x1102d6, hWndTo=0x0, lpPoints=0x22feb1c, cPoints=0x1 | out: lpPoints=0x22feb1c) returned 25756481
[0210.999] NotifyWinEvent (event=0x800a, hwnd=0x1102d6, idObject=-4, idChild=0)
[0210.999] InvalidateRect (hWnd=0x1102d6, lpRect=0x53e468, bErase=0) returned 1
[0210.999] UpdateWindow (hWnd=0x1102d6) returned 1
[0210.999] BeginPaint (in: hWnd=0x1102d6, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0210.999] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0210.999] CreateCompatibleDC (hdc=0x10105d6) returned 0x20107af
[0210.999] SelectObject (hdc=0x20107af, h=0x1e0507b9) returned 0x85000f
[0210.999] GdipCreateFromHDC (hdc=0x20107af, graphics=0x53df98) returned 0x0
[0210.999] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0211.000] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0211.000] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0211.000] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0211.000] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0211.000] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0211.000] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0211.000] LocalFree (hMem=0x89ea88) returned 0x0
[0211.000] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0211.000] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0211.000] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0211.000] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0211.000] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0211.000] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcb50dbd) returned 0x0
[0211.000] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0211.000] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0211.000] GetCurrentObject (hdc=0x20107af, type=0x1) returned 0xb00017
[0211.001] GetCurrentObject (hdc=0x20107af, type=0x2) returned 0x900010
[0211.001] GetCurrentObject (hdc=0x20107af, type=0x7) returned 0x1e0507b9
[0211.001] GetCurrentObject (hdc=0x20107af, type=0x6) returned 0x8a01c2
[0211.001] SaveDC (hdc=0x20107af) returned 1
[0211.001] GetNearestColor (hdc=0x20107af, color=0xf0f0f0) returned 0xf0f0f0
[0211.001] GetNearestColor (hdc=0x20107af, color=0xa0a0a0) returned 0xa0a0a0
[0211.001] GetNearestColor (hdc=0x20107af, color=0x696969) returned 0x696969
[0211.001] GetNearestColor (hdc=0x20107af, color=0xa0a0a0) returned 0xa0a0a0
[0211.001] GetNearestColor (hdc=0x20107af, color=0x0) returned 0x0
[0211.001] GetNearestColor (hdc=0x20107af, color=0xffffff) returned 0xffffff
[0211.001] GetNearestColor (hdc=0x20107af, color=0xe5e5e5) returned 0xe5e5e5
[0211.001] GetNearestColor (hdc=0x20107af, color=0xd7d7d7) returned 0xd7d7d7
[0211.001] GetNearestColor (hdc=0x20107af, color=0x0) returned 0x0
[0211.002] RestoreDC (hdc=0x20107af, nSavedDC=-1) returned 1
[0211.002] GdipReleaseDC (graphics=0x5d92c30, hdc=0x20107af) returned 0x0
[0211.002] IsAppThemed () returned 0x1
[0211.002] GetThemeAppProperties () returned 0x3
[0211.002] GetThemeAppProperties () returned 0x3
[0211.002] IsAppThemed () returned 0x1
[0211.002] GetThemeAppProperties () returned 0x3
[0211.002] GetThemeAppProperties () returned 0x3
[0211.002] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0211.002] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x22ff290 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0211.003] IsAppThemed () returned 0x1
[0211.003] GetThemeAppProperties () returned 0x3
[0211.003] GetThemeAppProperties () returned 0x3
[0211.003] IsAppThemed () returned 0x1
[0211.003] GetThemeAppProperties () returned 0x3
[0211.003] GetThemeAppProperties () returned 0x3
[0211.003] IsAppThemed () returned 0x1
[0211.003] GetThemeAppProperties () returned 0x3
[0211.003] GetThemeAppProperties () returned 0x3
[0211.003] IsAppThemed () returned 0x1
[0211.003] GetThemeAppProperties () returned 0x3
[0211.003] GetThemeAppProperties () returned 0x3
[0211.003] IsThemePartDefined () returned 0x1
[0211.003] IsAppThemed () returned 0x1
[0211.003] GetThemeAppProperties () returned 0x3
[0211.003] GetThemeAppProperties () returned 0x3
[0211.003] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0211.003] IsAppThemed () returned 0x1
[0211.003] GetThemeAppProperties () returned 0x3
[0211.004] GetThemeAppProperties () returned 0x3
[0211.004] IsAppThemed () returned 0x1
[0211.004] GetThemeAppProperties () returned 0x3
[0211.004] GetThemeAppProperties () returned 0x3
[0211.004] IsThemePartDefined () returned 0x1
[0211.004] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0211.004] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0211.004] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0211.004] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0211.004] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0211.004] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0211.004] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0211.004] LocalFree (hMem=0x89ea88) returned 0x0
[0211.004] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0211.004] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0211.004] LocalFree (hMem=0x89eee8) returned 0x0
[0211.004] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0211.004] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0211.005] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0211.005] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0211.005] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0211.005] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0211.005] GetCurrentObject (hdc=0x20107af, type=0x1) returned 0xb00017
[0211.005] GetCurrentObject (hdc=0x20107af, type=0x2) returned 0x900010
[0211.005] GetCurrentObject (hdc=0x20107af, type=0x7) returned 0x1e0507b9
[0211.005] GetCurrentObject (hdc=0x20107af, type=0x6) returned 0x8a01c2
[0211.005] SaveDC (hdc=0x20107af) returned 1
[0211.005] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x840407a1
[0211.005] GetClipRgn (hdc=0x20107af, hrgn=0x840407a1) returned 0
[0211.005] SelectClipRgn (hdc=0x20107af, hrgn=0x5d040798) returned 2
[0211.005] DeleteObject (ho=0x840407a1) returned 1
[0211.035] DeleteObject (ho=0x5d040798) returned 1
[0211.035] OffsetViewportOrgEx (in: hdc=0x20107af, x=0, y=0, lppt=0x22ff940 | out: lppt=0x22ff940) returned 1
[0211.035] DrawThemeParentBackground () returned 0x0
[0211.035] GetWindowPlacement (in: hWnd=0x1102c8, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0211.035] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0211.035] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0211.035] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0211.035] GetSystemMetrics (nIndex=42) returned 0
[0211.035] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0211.035] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0211.036] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0211.036] GetCurrentObject (hdc=0x20107af, type=0x1) returned 0xb00017
[0211.036] GetCurrentObject (hdc=0x20107af, type=0x2) returned 0x900010
[0211.036] GetCurrentObject (hdc=0x20107af, type=0x7) returned 0x1e0507b9
[0211.036] GetCurrentObject (hdc=0x20107af, type=0x6) returned 0x8a01c2
[0211.036] SaveDC (hdc=0x20107af) returned 2
[0211.036] GetNearestColor (hdc=0x20107af, color=0xf0f0f0) returned 0xf0f0f0
[0211.036] CreateSolidBrush (color=0xf0f0f0) returned 0x5110078d
[0211.036] FillRect (hDC=0x20107af, lprc=0x53d760, hbr=0x5110078d) returned 1
[0211.036] DeleteObject (ho=0x5110078d) returned 1
[0211.036] RestoreDC (hdc=0x20107af, nSavedDC=-1) returned 1
[0211.036] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0211.036] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0211.037] GetSystemMetrics (nIndex=42) returned 0
[0211.037] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0211.037] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0211.037] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0211.037] GetCurrentObject (hdc=0x20107af, type=0x1) returned 0xb00017
[0211.037] GetCurrentObject (hdc=0x20107af, type=0x2) returned 0x900010
[0211.037] GetCurrentObject (hdc=0x20107af, type=0x7) returned 0x1e0507b9
[0211.037] GetCurrentObject (hdc=0x20107af, type=0x6) returned 0x8a01c2
[0211.037] SaveDC (hdc=0x20107af) returned 2
[0211.037] GetNearestColor (hdc=0x20107af, color=0xf0f0f0) returned 0xf0f0f0
[0211.037] CreateSolidBrush (color=0xf0f0f0) returned 0x5210078d
[0211.037] FillRect (hDC=0x20107af, lprc=0x53d700, hbr=0x5210078d) returned 1
[0211.037] DeleteObject (ho=0x5210078d) returned 1
[0211.037] RestoreDC (hdc=0x20107af, nSavedDC=-1) returned 1
[0211.038] GetWindowTextLengthW (hWnd=0x1102c8) returned 10
[0211.038] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0211.038] GetSystemMetrics (nIndex=42) returned 0
[0211.038] GetWindowTextW (in: hWnd=0x1102c8, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0211.038] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0211.038] RestoreDC (hdc=0x20107af, nSavedDC=-1) returned 1
[0211.038] GdipReleaseDC (graphics=0x5d92c30, hdc=0x20107af) returned 0x0
[0211.038] IsAppThemed () returned 0x1
[0211.038] GetThemeAppProperties () returned 0x3
[0211.038] GetThemeAppProperties () returned 0x3
[0211.038] IsAppThemed () returned 0x1
[0211.038] GetThemeAppProperties () returned 0x3
[0211.038] GetThemeAppProperties () returned 0x3
[0211.038] IsThemePartDefined () returned 0x1
[0211.039] GdipCreateRegion (region=0x53dc80) returned 0x0
[0211.039] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0211.039] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0211.039] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0211.039] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0211.039] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0211.039] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0211.039] LocalFree (hMem=0x89ea88) returned 0x0
[0211.039] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0211.039] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0211.039] LocalFree (hMem=0x89ea88) returned 0x0
[0211.039] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0211.039] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0211.039] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0211.039] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0211.039] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0211.040] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0211.040] GetCurrentObject (hdc=0x20107af, type=0x1) returned 0xb00017
[0211.040] GetCurrentObject (hdc=0x20107af, type=0x2) returned 0x900010
[0211.040] GetCurrentObject (hdc=0x20107af, type=0x7) returned 0x1e0507b9
[0211.040] GetCurrentObject (hdc=0x20107af, type=0x6) returned 0x8a01c2
[0211.040] SaveDC (hdc=0x20107af) returned 1
[0211.040] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e040798
[0211.040] GetClipRgn (hdc=0x20107af, hrgn=0x5e040798) returned 0
[0211.040] SelectClipRgn (hdc=0x20107af, hrgn=0x860407a1) returned 2
[0211.040] DeleteObject (ho=0x5e040798) returned 1
[0211.040] DeleteObject (ho=0x860407a1) returned 1
[0211.040] OffsetViewportOrgEx (in: hdc=0x20107af, x=0, y=0, lppt=0x23001c8 | out: lppt=0x23001c8) returned 1
[0211.040] IsAppThemed () returned 0x1
[0211.040] GetThemeAppProperties () returned 0x3
[0211.041] GetThemeAppProperties () returned 0x3
[0211.041] DrawThemeBackground () returned 0x0
[0211.041] RestoreDC (hdc=0x20107af, nSavedDC=-1) returned 1
[0211.041] GdipReleaseDC (graphics=0x5d92c30, hdc=0x20107af) returned 0x0
[0211.041] GdipCreateRegion (region=0x53dc84) returned 0x0
[0211.041] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0211.041] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0211.041] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0211.041] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0211.041] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0211.041] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0211.041] LocalFree (hMem=0x89ec80) returned 0x0
[0211.041] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0211.041] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0211.041] LocalFree (hMem=0x89ea88) returned 0x0
[0211.041] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0211.041] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0211.042] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0211.042] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0211.042] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0211.042] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0211.042] GetCurrentObject (hdc=0x20107af, type=0x1) returned 0xb00017
[0211.042] GetCurrentObject (hdc=0x20107af, type=0x2) returned 0x900010
[0211.042] GetCurrentObject (hdc=0x20107af, type=0x7) returned 0x1e0507b9
[0211.042] GetCurrentObject (hdc=0x20107af, type=0x6) returned 0x8a01c2
[0211.042] SaveDC (hdc=0x20107af) returned 1
[0211.042] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x870407a1
[0211.042] GetClipRgn (hdc=0x20107af, hrgn=0x870407a1) returned 0
[0211.042] SelectClipRgn (hdc=0x20107af, hrgn=0x5f040798) returned 2
[0211.042] DeleteObject (ho=0x870407a1) returned 1
[0211.042] DeleteObject (ho=0x5f040798) returned 1
[0211.042] OffsetViewportOrgEx (in: hdc=0x20107af, x=0, y=0, lppt=0x230049c | out: lppt=0x230049c) returned 1
[0211.042] IsAppThemed () returned 0x1
[0211.043] GetThemeAppProperties () returned 0x3
[0211.043] GetThemeAppProperties () returned 0x3
[0211.043] GetThemeBackgroundContentRect () returned 0x0
[0211.043] RestoreDC (hdc=0x20107af, nSavedDC=-1) returned 1
[0211.043] GdipReleaseDC (graphics=0x5d92c30, hdc=0x20107af) returned 0x0
[0211.043] IsAppThemed () returned 0x1
[0211.043] GetThemeAppProperties () returned 0x3
[0211.043] GetThemeAppProperties () returned 0x3
[0211.043] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0211.043] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0211.043] GetCurrentObject (hdc=0x20107af, type=0x1) returned 0xb00017
[0211.043] GetCurrentObject (hdc=0x20107af, type=0x2) returned 0x900010
[0211.043] GetCurrentObject (hdc=0x20107af, type=0x7) returned 0x1e0507b9
[0211.043] GetCurrentObject (hdc=0x20107af, type=0x6) returned 0x8a01c2
[0211.043] SaveDC (hdc=0x20107af) returned 1
[0211.043] GetTextAlign (hdc=0x20107af) returned 0x0
[0211.043] GetTextColor (hdc=0x20107af) returned 0x0
[0211.044] GetCurrentObject (hdc=0x20107af, type=0x6) returned 0x8a01c2
[0211.044] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0211.044] SelectObject (hdc=0x20107af, h=0x730a066d) returned 0x8a01c2
[0211.044] GetBkMode (hdc=0x20107af) returned 2
[0211.044] SetBkMode (hdc=0x20107af, mode=1) returned 2
[0211.044] DrawTextExW (in: hdc=0x20107af, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x230083c | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0211.044] DrawTextExW (in: hdc=0x20107af, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x230083c | out: lpchText="OK", lprc=0x53dd80) returned 13
[0211.045] RestoreDC (hdc=0x20107af, nSavedDC=-1) returned 1
[0211.045] GdipReleaseDC (graphics=0x5d92c30, hdc=0x20107af) returned 0x0
[0211.045] GetFocus () returned 0x1102d6
[0211.045] IsAppThemed () returned 0x1
[0211.045] GetThemeAppProperties () returned 0x3
[0211.045] GetThemeAppProperties () returned 0x3
[0211.045] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0211.045] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x20107af, x1=0, y1=0, rop=0xcc0020) returned 1
[0211.045] GdipReleaseDC (graphics=0x5d92c30, hdc=0x20107af) returned 0x0
[0211.045] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0211.045] SelectObject (hdc=0x20107af, h=0x85000f) returned 0x1e0507b9
[0211.045] DeleteDC (hdc=0x20107af) returned 1
[0211.045] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0211.046] EndPaint (hWnd=0x1102d6, lpPaint=0x53df7c) returned 1
[0211.046] MapWindowPoints (in: hWndFrom=0x1102d6, hWndTo=0x0, lpPoints=0x2300938, cPoints=0x1 | out: lpPoints=0x2300938) returned 25756481
[0211.046] WindowFromPoint (Point=0x352) returned 0x1102d6
[0211.046] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x84, wParam=0x0, lParam=0x18e0352) returned 0x1
[0211.046] NotifyWinEvent (event=0x800a, hwnd=0x1102d6, idObject=-4, idChild=0)
[0211.046] NotifyWinEvent (event=0x800c, hwnd=0x1102d6, idObject=-4, idChild=0)
[0211.046] GetWindowTextLengthW (hWnd=0xd02b4) returned 0
[0211.046] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0211.046] GetSystemMetrics (nIndex=42) returned 0
[0211.046] GetWindowTextW (in: hWnd=0xd02b4, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0211.046] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0211.047] SendMessageW (hWnd=0x1102c8, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0211.047] GetCapture () returned 0x1102d6
[0211.047] ReleaseCapture () returned 1
[0211.047] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0211.047] PeekMessageW (lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0)
[0211.052] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x84, wParam=0x0, lParam=0x18e0352) returned 0x1
[0211.055] IsWindow (hWnd=0x70036) returned 1
[0211.055] EnableWindow (hWnd=0x70036, bEnable=1)
[0211.055] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0211.056] IsWindow (hWnd=0x70036) returned 1
[0211.056] SetActiveWindow (hWnd=0x70036)
[0211.056] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x86, wParam=0x0, lParam=0x70036)
[0211.058] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0211.058] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0211.058] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0211.062] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0211.062] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0211.062] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0211.062] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1102c8) returned 0x1
[0211.066] GetFocus () returned 0x1102d6
[0211.066] SetFocus (hWnd=0x202c6)
[0211.067] GetFocus () returned 0x202c6
[0211.067] IsChild (hWndParent=0x1102c8, hWnd=0x202c6) returned 0
[0211.067] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0211.067] GetCapture () returned 0x0
[0211.067] InvalidateRect (hWnd=0x1102d6, lpRect=0x0, bErase=0) returned 1
[0211.069] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0211.070] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f)
[0211.072] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0211.072] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1102d6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0211.073] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0211.073] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x1102d6, lParam=0x0)
[0211.073] GetStockObject (i=5) returned 0x900015
[0211.074] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0211.074] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0211.074] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0211.079] IsWindowVisible (hWnd=0x70036) returned 1
[0211.079] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0211.079] GetFocus () returned 0x202c6
[0211.079] IsChild (hWndParent=0x1102c8, hWnd=0x202c6) returned 0
[0211.079] ShowWindow (hWnd=0x1102c8, nCmdShow=0)
[0211.080] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0211.080] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0211.082] GetWindowPlacement (in: hWnd=0x1102c8, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0211.082] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0211.082] GetClientRect (in: hWnd=0x1102c8, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0211.082] GetWindowRect (in: hWnd=0x1102c8, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0211.083] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0211.083] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0211.083] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0211.084] GetWindowLongW (hWnd=0x1102c8, nIndex=-20) returned 327937
[0211.092] DestroyWindow (hWnd=0x1102c8)
[0211.092] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0211.093] GetWindowTextLengthW (hWnd=0x1102c8)
[0211.093] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0211.093] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0211.093] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0211.094] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702de, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0211.096] GetWindowTextLengthW (hWnd=0x15013e)
[0211.096] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0211.096] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x15013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0211.103] GetProcessWindowStation () returned 0x13c
[0211.103] GetActiveWindow () returned 0x70036
[0211.104] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0211.104] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0211.104] GetCurrentThreadId () returned 0x11d0
[0211.104] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3d16, lParam=0x0) returned 1
[0211.104] IsWindowVisible (hWnd=0x70036) returned 1
[0211.104] IsWindowEnabled (hWnd=0x70036) returned 1
[0211.104] IsWindowVisible (hWnd=0x602b6) returned 0
[0211.104] IsWindowVisible (hWnd=0x901f8) returned 0
[0211.104] IsWindowVisible (hWnd=0x202d0) returned 0
[0211.104] IsWindowVisible (hWnd=0x202d4) returned 0
[0211.105] GetActiveWindow () returned 0x70036
[0211.105] GetFocus () returned 0x202c6
[0211.105] IsWindow (hWnd=0x70036) returned 1
[0211.105] EnableWindow (hWnd=0x70036, bEnable=0)
[0211.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0211.105] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0211.107] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0211.139] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0xf0105ee
[0211.139] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0211.139] CreateCompatibleDC (hdc=0xf0105ee) returned 0xa50107c3
[0211.139] SelectObject (hdc=0xa50107c3, h=0x1e0507b9) returned 0x85000f
[0211.139] GdipCreateFromHDC (hdc=0xa50107c3, graphics=0x53e108) returned 0x0
[0211.140] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0211.140] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0211.140] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0211.140] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0211.140] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0211.140] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0211.140] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0211.140] LocalFree (hMem=0x89ec80) returned 0x0
[0211.140] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0211.140] GdipCreateRegion (region=0x53e150) returned 0x0
[0211.140] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0211.140] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0211.141] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0211.141] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcb30dbd) returned 0x0
[0211.141] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0211.141] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0211.141] GetCurrentObject (hdc=0xa50107c3, type=0x1) returned 0xb00017
[0211.141] GetCurrentObject (hdc=0xa50107c3, type=0x2) returned 0x900010
[0211.141] GetCurrentObject (hdc=0xa50107c3, type=0x7) returned 0x1e0507b9
[0211.141] GetCurrentObject (hdc=0xa50107c3, type=0x6) returned 0x8a01c2
[0211.141] SaveDC (hdc=0xa50107c3) returned 1
[0211.141] GetNearestColor (hdc=0xa50107c3, color=0xff) returned 0xff
[0211.141] GetNearestColor (hdc=0xa50107c3, color=0x55) returned 0x55
[0211.141] GetNearestColor (hdc=0xa50107c3, color=0x0) returned 0x0
[0211.141] GetNearestColor (hdc=0xa50107c3, color=0x55) returned 0x55
[0211.141] GetNearestColor (hdc=0xa50107c3, color=0x0) returned 0x0
[0211.141] GetNearestColor (hdc=0xa50107c3, color=0x8080ff) returned 0x8080ff
[0211.141] GetNearestColor (hdc=0xa50107c3, color=0x7373e5) returned 0x7373e5
[0211.141] GetNearestColor (hdc=0xa50107c3, color=0xe5) returned 0xe5
[0211.142] GetNearestColor (hdc=0xa50107c3, color=0x0) returned 0x0
[0211.142] RestoreDC (hdc=0xa50107c3, nSavedDC=-1) returned 1
[0211.142] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa50107c3) returned 0x0
[0211.142] IsAppThemed () returned 0x1
[0211.142] GetThemeAppProperties () returned 0x3
[0211.142] GetThemeAppProperties () returned 0x3
[0211.142] IsAppThemed () returned 0x1
[0211.142] GetThemeAppProperties () returned 0x3
[0211.142] GetThemeAppProperties () returned 0x3
[0211.142] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0211.142] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2301c30 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0211.142] IsAppThemed () returned 0x1
[0211.142] GetThemeAppProperties () returned 0x3
[0211.142] GetThemeAppProperties () returned 0x3
[0211.142] IsAppThemed () returned 0x1
[0211.142] GetThemeAppProperties () returned 0x3
[0211.143] GetThemeAppProperties () returned 0x3
[0211.143] GetFocus () returned 0x1202d2
[0211.143] IsAppThemed () returned 0x1
[0211.143] GetThemeAppProperties () returned 0x3
[0211.143] GetThemeAppProperties () returned 0x3
[0211.143] IsAppThemed () returned 0x1
[0211.143] GetThemeAppProperties () returned 0x3
[0211.143] GetThemeAppProperties () returned 0x3
[0211.143] IsThemePartDefined () returned 0x1
[0211.143] IsAppThemed () returned 0x1
[0211.143] GetThemeAppProperties () returned 0x3
[0211.143] GetThemeAppProperties () returned 0x3
[0211.143] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0211.143] IsAppThemed () returned 0x1
[0211.143] GetThemeAppProperties () returned 0x3
[0211.143] GetThemeAppProperties () returned 0x3
[0211.143] IsAppThemed () returned 0x1
[0211.143] GetThemeAppProperties () returned 0x3
[0211.143] GetThemeAppProperties () returned 0x3
[0211.143] IsThemePartDefined () returned 0x1
[0211.143] GdipCreateRegion (region=0x53de78) returned 0x0
[0211.143] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0211.143] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0211.143] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0211.143] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0211.143] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0211.144] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0211.144] LocalFree (hMem=0x89eac0) returned 0x0
[0211.144] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0211.144] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0211.144] LocalFree (hMem=0x89ee08) returned 0x0
[0211.144] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0211.144] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0211.144] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0211.144] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0211.144] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0211.144] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0211.144] GetCurrentObject (hdc=0xa50107c3, type=0x1) returned 0xb00017
[0211.144] GetCurrentObject (hdc=0xa50107c3, type=0x2) returned 0x900010
[0211.144] GetCurrentObject (hdc=0xa50107c3, type=0x7) returned 0x1e0507b9
[0211.144] GetCurrentObject (hdc=0xa50107c3, type=0x6) returned 0x8a01c2
[0211.144] SaveDC (hdc=0xa50107c3) returned 1
[0211.144] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x60040798
[0211.144] GetClipRgn (hdc=0xa50107c3, hrgn=0x60040798) returned 0
[0211.144] SelectClipRgn (hdc=0xa50107c3, hrgn=0x8d0407a1) returned 2
[0211.144] DeleteObject (ho=0x60040798) returned 1
[0211.145] DeleteObject (ho=0x8d0407a1) returned 1
[0211.145] OffsetViewportOrgEx (in: hdc=0xa50107c3, x=0, y=0, lppt=0x23022e0 | out: lppt=0x23022e0) returned 1
[0211.145] DrawThemeParentBackground () returned 0x0
[0211.145] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0211.145] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0211.145] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0211.145] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0211.145] GetSystemMetrics (nIndex=42) returned 0
[0211.145] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0211.145] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0211.145] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0211.145] GetCurrentObject (hdc=0xa50107c3, type=0x1) returned 0xb00017
[0211.145] GetCurrentObject (hdc=0xa50107c3, type=0x2) returned 0x900010
[0211.145] GetCurrentObject (hdc=0xa50107c3, type=0x7) returned 0x1e0507b9
[0211.145] GetCurrentObject (hdc=0xa50107c3, type=0x6) returned 0x8a01c2
[0211.145] SaveDC (hdc=0xa50107c3) returned 2
[0211.145] GetNearestColor (hdc=0xa50107c3, color=0xff) returned 0xff
[0211.146] CreateSolidBrush (color=0xff) returned 0x5310078d
[0211.146] FillRect (hDC=0xa50107c3, lprc=0x53d8d8, hbr=0x5310078d) returned 1
[0211.146] DeleteObject (ho=0x5310078d) returned 1
[0211.146] RestoreDC (hdc=0xa50107c3, nSavedDC=-1) returned 1
[0211.146] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0211.146] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0211.146] GetSystemMetrics (nIndex=42) returned 0
[0211.146] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0211.146] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0211.146] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0211.146] GetCurrentObject (hdc=0xa50107c3, type=0x1) returned 0xb00017
[0211.150] GetCurrentObject (hdc=0xa50107c3, type=0x2) returned 0x900010
[0211.150] GetCurrentObject (hdc=0xa50107c3, type=0x7) returned 0x1e0507b9
[0211.150] GetCurrentObject (hdc=0xa50107c3, type=0x6) returned 0x8a01c2
[0211.150] SaveDC (hdc=0xa50107c3) returned 2
[0211.151] GetNearestColor (hdc=0xa50107c3, color=0xff) returned 0xff
[0211.151] CreateSolidBrush (color=0xff) returned 0x5410078d
[0211.151] FillRect (hDC=0xa50107c3, lprc=0x53d878, hbr=0x5410078d) returned 1
[0211.151] DeleteObject (ho=0x5410078d) returned 1
[0211.151] RestoreDC (hdc=0xa50107c3, nSavedDC=-1) returned 1
[0211.151] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0211.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0211.151] GetSystemMetrics (nIndex=42) returned 0
[0211.151] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0211.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0211.151] RestoreDC (hdc=0xa50107c3, nSavedDC=-1) returned 1
[0211.151] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa50107c3) returned 0x0
[0211.151] IsAppThemed () returned 0x1
[0211.151] GetThemeAppProperties () returned 0x3
[0211.151] GetThemeAppProperties () returned 0x3
[0211.152] IsAppThemed () returned 0x1
[0211.152] GetThemeAppProperties () returned 0x3
[0211.152] GetThemeAppProperties () returned 0x3
[0211.152] IsThemePartDefined () returned 0x1
[0211.152] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0211.152] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0211.152] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0211.152] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0211.152] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0211.152] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0211.152] LocalFree (hMem=0x89eac0) returned 0x0
[0211.152] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0211.152] LocalFree (hMem=0x89eac0) returned 0x0
[0211.152] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0211.152] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0211.152] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0211.152] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0211.152] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0211.152] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0211.152] GetCurrentObject (hdc=0xa50107c3, type=0x1) returned 0xb00017
[0211.152] GetCurrentObject (hdc=0xa50107c3, type=0x2) returned 0x900010
[0211.152] GetCurrentObject (hdc=0xa50107c3, type=0x7) returned 0x1e0507b9
[0211.152] GetCurrentObject (hdc=0xa50107c3, type=0x6) returned 0x8a01c2
[0211.152] SaveDC (hdc=0xa50107c3) returned 1
[0211.153] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8e0407a1
[0211.153] GetClipRgn (hdc=0xa50107c3, hrgn=0x8e0407a1) returned 0
[0211.153] SelectClipRgn (hdc=0xa50107c3, hrgn=0x62040798) returned 2
[0211.153] DeleteObject (ho=0x8e0407a1) returned 1
[0211.153] DeleteObject (ho=0x62040798) returned 1
[0211.153] OffsetViewportOrgEx (in: hdc=0xa50107c3, x=0, y=0, lppt=0x2302b44 | out: lppt=0x2302b44) returned 1
[0211.153] IsAppThemed () returned 0x1
[0211.153] GetThemeAppProperties () returned 0x3
[0211.153] GetThemeAppProperties () returned 0x3
[0211.153] DrawThemeBackground () returned 0x0
[0211.153] RestoreDC (hdc=0xa50107c3, nSavedDC=-1) returned 1
[0211.153] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa50107c3) returned 0x0
[0211.153] GdipCreateRegion (region=0x53de00) returned 0x0
[0211.153] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0211.153] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0211.153] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0211.153] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0211.153] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0211.153] LocalFree (hMem=0x89eee8) returned 0x0
[0211.153] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0211.153] LocalFree (hMem=0x89eac0) returned 0x0
[0211.154] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0211.154] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0211.154] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0211.154] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0211.154] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0211.154] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0211.154] GetCurrentObject (hdc=0xa50107c3, type=0x1) returned 0xb00017
[0211.154] GetCurrentObject (hdc=0xa50107c3, type=0x2) returned 0x900010
[0211.154] GetCurrentObject (hdc=0xa50107c3, type=0x7) returned 0x1e0507b9
[0211.154] GetCurrentObject (hdc=0xa50107c3, type=0x6) returned 0x8a01c2
[0211.154] SaveDC (hdc=0xa50107c3) returned 1
[0211.154] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x63040798
[0211.154] GetClipRgn (hdc=0xa50107c3, hrgn=0x63040798) returned 0
[0211.154] SelectClipRgn (hdc=0xa50107c3, hrgn=0x8f0407a1) returned 2
[0211.154] DeleteObject (ho=0x63040798) returned 1
[0211.154] DeleteObject (ho=0x8f0407a1) returned 1
[0211.154] OffsetViewportOrgEx (in: hdc=0xa50107c3, x=0, y=0, lppt=0x2302e18 | out: lppt=0x2302e18) returned 1
[0211.154] IsAppThemed () returned 0x1
[0211.154] GetThemeAppProperties () returned 0x3
[0211.154] GetThemeAppProperties () returned 0x3
[0211.154] GetThemeBackgroundContentRect () returned 0x0
[0211.154] RestoreDC (hdc=0xa50107c3, nSavedDC=-1) returned 1
[0211.154] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa50107c3) returned 0x0
[0211.154] IsAppThemed () returned 0x1
[0211.154] GetThemeAppProperties () returned 0x3
[0211.155] GetThemeAppProperties () returned 0x3
[0211.155] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0211.155] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0211.155] GetCurrentObject (hdc=0xa50107c3, type=0x1) returned 0xb00017
[0211.155] GetCurrentObject (hdc=0xa50107c3, type=0x2) returned 0x900010
[0211.155] GetCurrentObject (hdc=0xa50107c3, type=0x7) returned 0x1e0507b9
[0211.155] GetCurrentObject (hdc=0xa50107c3, type=0x6) returned 0x8a01c2
[0211.155] SaveDC (hdc=0xa50107c3) returned 1
[0211.155] GetTextAlign (hdc=0xa50107c3) returned 0x0
[0211.155] GetTextColor (hdc=0xa50107c3) returned 0x0
[0211.155] GetCurrentObject (hdc=0xa50107c3, type=0x6) returned 0x8a01c2
[0211.155] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0211.156] SelectObject (hdc=0xa50107c3, h=0x450a0799) returned 0x8a01c2
[0211.156] GetBkMode (hdc=0xa50107c3) returned 2
[0211.156] SetBkMode (hdc=0xa50107c3, mode=1) returned 2
[0211.156] DrawTextExW (in: hdc=0xa50107c3, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x23031b8 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0211.156] DrawTextExW (in: hdc=0xa50107c3, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x23031b8 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0211.156] RestoreDC (hdc=0xa50107c3, nSavedDC=-1) returned 1
[0211.156] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa50107c3) returned 0x0
[0211.156] GetFocus () returned 0x1202d2
[0211.156] IsAppThemed () returned 0x1
[0211.156] GetThemeAppProperties () returned 0x3
[0211.156] GetThemeAppProperties () returned 0x3
[0211.156] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0211.157] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xa50107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0211.157] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa50107c3) returned 0x0
[0211.157] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0211.157] SelectObject (hdc=0xa50107c3, h=0x85000f) returned 0x1e0507b9
[0211.157] DeleteDC (hdc=0xa50107c3) returned 1
[0211.157] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0211.157] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0211.537] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0211.563] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0211.563] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1202c8) returned 0x1
[0211.567] GetFocus () returned 0x1202c8
[0211.567] GetAncestor (hwnd=0x1202c8, gaFlags=0x1) returned 0x10010
[0211.567] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0211.567] SetFocus (hWnd=0x202c6) returned 0x0
[0211.571] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0211.573] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0211.573] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0211.573] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0211.573] GetFocus () returned 0x70036
[0211.573] SetFocus (hWnd=0x202c6) returned 0x0
[0211.580] IsWindow (hWnd=0x70036) returned 1
[0211.580] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0211.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0211.580] IsWindow (hWnd=0x70036) returned 1
[0211.580] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0211.581] IsWindow (hWnd=0x202c6) returned 1
[0211.581] SetFocus (hWnd=0x202c6) returned 0x70036
[0211.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0211.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0211.583] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0211.591] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0211.591] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0211.592] GetStockObject (i=5) returned 0x900015
[0211.592] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0211.592] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8daa18) returned 0x7
[0211.592] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0211.592] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0211.592] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0211.592] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0211.594] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0211.594] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0211.594] GetFocus () returned 0x202c6
[0211.594] GetCapture () returned 0x0
[0211.594] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.595] IsWindowUnicode (hWnd=0x202c6) returned 1
[0211.595] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.595] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.595] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.595] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.596] IsWindowUnicode (hWnd=0x202c6) returned 1
[0211.596] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.596] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.596] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.596] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0211.596] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0211.596] CreateCompatibleDC (hdc=0xf0105ee) returned 0xa60107ce
[0211.596] SelectObject (hdc=0xa60107ce, h=0x1e0507b9) returned 0x85000f
[0211.596] GdipCreateFromHDC (hdc=0xa60107ce, graphics=0x53e958) returned 0x0
[0211.597] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0211.597] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0211.597] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0211.597] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0211.597] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0211.597] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0211.597] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0211.597] LocalFree (hMem=0x89ea88) returned 0x0
[0211.597] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0211.597] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0211.597] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0211.597] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0211.598] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0211.598] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcb10dbd) returned 0x0
[0211.598] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0211.598] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0211.598] GetCurrentObject (hdc=0xa60107ce, type=0x1) returned 0xb00017
[0211.598] GetCurrentObject (hdc=0xa60107ce, type=0x2) returned 0x900010
[0211.598] GetCurrentObject (hdc=0xa60107ce, type=0x7) returned 0x1e0507b9
[0211.598] GetCurrentObject (hdc=0xa60107ce, type=0x6) returned 0x8a01c2
[0211.598] SaveDC (hdc=0xa60107ce) returned 1
[0211.598] GetNearestColor (hdc=0xa60107ce, color=0xff) returned 0xff
[0211.598] GetNearestColor (hdc=0xa60107ce, color=0x55) returned 0x55
[0211.598] GetNearestColor (hdc=0xa60107ce, color=0x0) returned 0x0
[0211.598] GetNearestColor (hdc=0xa60107ce, color=0x55) returned 0x55
[0211.599] GetNearestColor (hdc=0xa60107ce, color=0x0) returned 0x0
[0211.599] GetNearestColor (hdc=0xa60107ce, color=0x8080ff) returned 0x8080ff
[0211.599] GetNearestColor (hdc=0xa60107ce, color=0x7373e5) returned 0x7373e5
[0211.599] GetNearestColor (hdc=0xa60107ce, color=0xe5) returned 0xe5
[0211.599] GetNearestColor (hdc=0xa60107ce, color=0x0) returned 0x0
[0211.599] RestoreDC (hdc=0xa60107ce, nSavedDC=-1) returned 1
[0211.599] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa60107ce) returned 0x0
[0211.599] IsAppThemed () returned 0x1
[0211.600] GetThemeAppProperties () returned 0x3
[0211.600] GetThemeAppProperties () returned 0x3
[0211.600] IsAppThemed () returned 0x1
[0211.600] GetThemeAppProperties () returned 0x3
[0211.600] GetThemeAppProperties () returned 0x3
[0211.600] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2303a14 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0211.600] IsAppThemed () returned 0x1
[0211.600] GetThemeAppProperties () returned 0x3
[0211.600] GetThemeAppProperties () returned 0x3
[0211.600] IsAppThemed () returned 0x1
[0211.600] GetThemeAppProperties () returned 0x3
[0211.600] GetThemeAppProperties () returned 0x3
[0211.600] GetFocus () returned 0x202c6
[0211.601] IsAppThemed () returned 0x1
[0211.601] GetThemeAppProperties () returned 0x3
[0211.601] GetThemeAppProperties () returned 0x3
[0211.601] IsAppThemed () returned 0x1
[0211.601] GetThemeAppProperties () returned 0x3
[0211.601] GetThemeAppProperties () returned 0x3
[0211.601] IsThemePartDefined () returned 0x1
[0211.601] IsAppThemed () returned 0x1
[0211.601] GetThemeAppProperties () returned 0x3
[0211.601] GetThemeAppProperties () returned 0x3
[0211.601] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0211.601] IsAppThemed () returned 0x1
[0211.601] GetThemeAppProperties () returned 0x3
[0211.601] GetThemeAppProperties () returned 0x3
[0211.601] IsAppThemed () returned 0x1
[0211.601] GetThemeAppProperties () returned 0x3
[0211.601] GetThemeAppProperties () returned 0x3
[0211.601] IsThemePartDefined () returned 0x1
[0211.601] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0211.601] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0211.601] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0211.602] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0211.602] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0211.602] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0211.602] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0211.602] LocalFree (hMem=0x89ea88) returned 0x0
[0211.602] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0211.602] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0211.602] LocalFree (hMem=0x89eac0) returned 0x0
[0211.602] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0211.602] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0211.602] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0211.602] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0211.602] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0211.602] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0211.602] GetCurrentObject (hdc=0xa60107ce, type=0x1) returned 0xb00017
[0211.602] GetCurrentObject (hdc=0xa60107ce, type=0x2) returned 0x900010
[0211.602] GetCurrentObject (hdc=0xa60107ce, type=0x7) returned 0x1e0507b9
[0211.603] GetCurrentObject (hdc=0xa60107ce, type=0x6) returned 0x8a01c2
[0211.603] SaveDC (hdc=0xa60107ce) returned 1
[0211.603] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2004053e
[0211.603] GetClipRgn (hdc=0xa60107ce, hrgn=0x2004053e) returned 0
[0211.603] SelectClipRgn (hdc=0xa60107ce, hrgn=0x9d0407a1) returned 2
[0211.603] DeleteObject (ho=0x2004053e) returned 1
[0211.603] DeleteObject (ho=0x9d0407a1) returned 1
[0211.603] OffsetViewportOrgEx (in: hdc=0xa60107ce, x=0, y=0, lppt=0x23040c4 | out: lppt=0x23040c4) returned 1
[0211.603] DrawThemeParentBackground () returned 0x0
[0211.603] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0211.603] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0211.603] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0211.603] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0211.604] GetSystemMetrics (nIndex=42) returned 0
[0211.604] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0211.604] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0211.604] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0211.604] GetCurrentObject (hdc=0xa60107ce, type=0x1) returned 0xb00017
[0211.604] GetCurrentObject (hdc=0xa60107ce, type=0x2) returned 0x900010
[0211.604] GetCurrentObject (hdc=0xa60107ce, type=0x7) returned 0x1e0507b9
[0211.604] GetCurrentObject (hdc=0xa60107ce, type=0x6) returned 0x8a01c2
[0211.604] SaveDC (hdc=0xa60107ce) returned 2
[0211.604] GetNearestColor (hdc=0xa60107ce, color=0xff) returned 0xff
[0211.604] CreateSolidBrush (color=0xff) returned 0x5610078d
[0211.604] FillRect (hDC=0xa60107ce, lprc=0x53e128, hbr=0x5610078d) returned 1
[0211.604] DeleteObject (ho=0x5610078d) returned 1
[0211.604] RestoreDC (hdc=0xa60107ce, nSavedDC=-1) returned 1
[0211.605] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0211.605] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0211.605] GetSystemMetrics (nIndex=42) returned 0
[0211.605] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0211.605] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0211.605] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0211.605] GetCurrentObject (hdc=0xa60107ce, type=0x1) returned 0xb00017
[0211.605] GetCurrentObject (hdc=0xa60107ce, type=0x2) returned 0x900010
[0211.605] GetCurrentObject (hdc=0xa60107ce, type=0x7) returned 0x1e0507b9
[0211.605] GetCurrentObject (hdc=0xa60107ce, type=0x6) returned 0x8a01c2
[0211.605] SaveDC (hdc=0xa60107ce) returned 2
[0211.605] GetNearestColor (hdc=0xa60107ce, color=0xff) returned 0xff
[0211.605] CreateSolidBrush (color=0xff) returned 0x5710078d
[0211.606] FillRect (hDC=0xa60107ce, lprc=0x53e0c8, hbr=0x5710078d) returned 1
[0211.606] DeleteObject (ho=0x5710078d) returned 1
[0211.606] RestoreDC (hdc=0xa60107ce, nSavedDC=-1) returned 1
[0211.606] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0211.606] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0211.606] GetSystemMetrics (nIndex=42) returned 0
[0211.606] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0211.606] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0211.606] RestoreDC (hdc=0xa60107ce, nSavedDC=-1) returned 1
[0211.606] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa60107ce) returned 0x0
[0211.606] IsAppThemed () returned 0x1
[0211.607] GetThemeAppProperties () returned 0x3
[0211.607] GetThemeAppProperties () returned 0x3
[0211.607] IsAppThemed () returned 0x1
[0211.607] GetThemeAppProperties () returned 0x3
[0211.607] GetThemeAppProperties () returned 0x3
[0211.607] IsThemePartDefined () returned 0x1
[0211.607] GdipCreateRegion (region=0x53e64c) returned 0x0
[0211.607] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0211.607] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0211.607] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0211.607] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0211.607] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0211.607] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0211.607] LocalFree (hMem=0x89ec80) returned 0x0
[0211.607] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0211.607] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0211.607] LocalFree (hMem=0x89ec80) returned 0x0
[0211.608] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0211.608] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0211.608] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0211.608] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0211.608] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0211.608] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0211.608] GetCurrentObject (hdc=0xa60107ce, type=0x1) returned 0xb00017
[0211.608] GetCurrentObject (hdc=0xa60107ce, type=0x2) returned 0x900010
[0211.608] GetCurrentObject (hdc=0xa60107ce, type=0x7) returned 0x1e0507b9
[0211.608] GetCurrentObject (hdc=0xa60107ce, type=0x6) returned 0x8a01c2
[0211.608] SaveDC (hdc=0xa60107ce) returned 1
[0211.608] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9e0407a1
[0211.608] GetClipRgn (hdc=0xa60107ce, hrgn=0x9e0407a1) returned 0
[0211.608] SelectClipRgn (hdc=0xa60107ce, hrgn=0x2204053e) returned 2
[0211.609] DeleteObject (ho=0x9e0407a1) returned 1
[0211.609] DeleteObject (ho=0x2204053e) returned 1
[0211.609] OffsetViewportOrgEx (in: hdc=0xa60107ce, x=0, y=0, lppt=0x2304928 | out: lppt=0x2304928) returned 1
[0211.609] IsAppThemed () returned 0x1
[0211.609] GetThemeAppProperties () returned 0x3
[0211.609] GetThemeAppProperties () returned 0x3
[0211.609] DrawThemeBackground () returned 0x0
[0211.609] RestoreDC (hdc=0xa60107ce, nSavedDC=-1) returned 1
[0211.609] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa60107ce) returned 0x0
[0211.609] GdipCreateRegion (region=0x53e650) returned 0x0
[0211.609] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0211.609] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0211.609] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0211.609] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0211.610] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0211.610] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0211.610] LocalFree (hMem=0x89ee40) returned 0x0
[0211.610] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0211.610] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0211.610] LocalFree (hMem=0x89ee40) returned 0x0
[0211.610] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0211.610] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0211.610] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0211.610] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0211.610] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0211.610] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0211.610] GetCurrentObject (hdc=0xa60107ce, type=0x1) returned 0xb00017
[0211.610] GetCurrentObject (hdc=0xa60107ce, type=0x2) returned 0x900010
[0211.610] GetCurrentObject (hdc=0xa60107ce, type=0x7) returned 0x1e0507b9
[0211.611] GetCurrentObject (hdc=0xa60107ce, type=0x6) returned 0x8a01c2
[0211.611] SaveDC (hdc=0xa60107ce) returned 1
[0211.611] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2304053e
[0211.611] GetClipRgn (hdc=0xa60107ce, hrgn=0x2304053e) returned 0
[0211.611] SelectClipRgn (hdc=0xa60107ce, hrgn=0x9f0407a1) returned 2
[0211.611] DeleteObject (ho=0x2304053e) returned 1
[0211.611] DeleteObject (ho=0x9f0407a1) returned 1
[0211.611] OffsetViewportOrgEx (in: hdc=0xa60107ce, x=0, y=0, lppt=0x2304bfc | out: lppt=0x2304bfc) returned 1
[0211.611] IsAppThemed () returned 0x1
[0211.611] GetThemeAppProperties () returned 0x3
[0211.611] GetThemeAppProperties () returned 0x3
[0211.611] GetThemeBackgroundContentRect () returned 0x0
[0211.611] RestoreDC (hdc=0xa60107ce, nSavedDC=-1) returned 1
[0211.611] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa60107ce) returned 0x0
[0211.612] IsAppThemed () returned 0x1
[0211.612] GetThemeAppProperties () returned 0x3
[0211.612] GetThemeAppProperties () returned 0x3
[0211.612] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0211.612] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0211.612] GetCurrentObject (hdc=0xa60107ce, type=0x1) returned 0xb00017
[0211.612] GetCurrentObject (hdc=0xa60107ce, type=0x2) returned 0x900010
[0211.612] GetCurrentObject (hdc=0xa60107ce, type=0x7) returned 0x1e0507b9
[0211.612] GetCurrentObject (hdc=0xa60107ce, type=0x6) returned 0x8a01c2
[0211.612] SaveDC (hdc=0xa60107ce) returned 1
[0211.612] GetTextAlign (hdc=0xa60107ce) returned 0x0
[0211.612] GetTextColor (hdc=0xa60107ce) returned 0x0
[0211.612] GetCurrentObject (hdc=0xa60107ce, type=0x6) returned 0x8a01c2
[0211.612] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0211.613] SelectObject (hdc=0xa60107ce, h=0x450a0799) returned 0x8a01c2
[0211.613] GetBkMode (hdc=0xa60107ce) returned 2
[0211.613] SetBkMode (hdc=0xa60107ce, mode=1) returned 2
[0211.613] DrawTextExW (in: hdc=0xa60107ce, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2304f9c | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0211.613] DrawTextExW (in: hdc=0xa60107ce, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2304f9c | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0211.614] RestoreDC (hdc=0xa60107ce, nSavedDC=-1) returned 1
[0211.614] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa60107ce) returned 0x0
[0211.614] GetFocus () returned 0x202c6
[0211.614] IsAppThemed () returned 0x1
[0211.614] GetThemeAppProperties () returned 0x3
[0211.614] GetThemeAppProperties () returned 0x3
[0211.614] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0211.614] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xa60107ce, x1=0, y1=0, rop=0xcc0020) returned 1
[0211.614] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa60107ce) returned 0x0
[0211.614] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0211.614] SelectObject (hdc=0xa60107ce, h=0x85000f) returned 0x1e0507b9
[0211.614] DeleteDC (hdc=0xa60107ce) returned 1
[0211.615] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0211.615] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0211.625] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.625] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.625] WaitMessage () returned 1
[0211.629] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.629] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.629] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.629] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.629] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.630] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.631] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.631] WaitMessage () returned 1
[0211.661] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.661] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.661] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.661] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.661] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.666] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.666] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.666] WaitMessage () returned 1
[0211.667] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.667] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.667] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.667] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.668] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.668] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.669] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.669] WaitMessage () returned 1
[0211.669] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.669] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.669] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.670] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.670] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.671] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.671] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.671] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.671] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.671] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.672] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.672] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.672] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.672] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.672] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.672] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.672] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.673] WaitMessage () returned 1
[0211.673] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.673] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.673] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.673] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.673] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.674] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.675] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.675] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.675] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.675] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.675] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.675] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.675] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.675] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.675] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.675] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.676] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.676] WaitMessage () returned 1
[0211.676] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.676] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.676] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.676] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.676] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.681] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.682] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.682] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.682] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.682] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.682] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.682] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.682] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.682] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.682] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.682] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.683] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.683] WaitMessage () returned 1
[0211.683] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.683] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.683] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.684] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.684] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.685] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.686] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.686] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.686] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.686] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.686] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.686] IsWindowUnicode (hWnd=0x102dc) returned 1
[0211.686] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.686] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.686] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.686] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.687] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.687] WaitMessage () returned 1
[0211.774] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.774] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.774] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.774] DispatchMessageA (lpMsg=0x53eef8) returned 0x7eef
[0211.774] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.774] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.774] WaitMessage () returned 1
[0211.900] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.900] IsWindowUnicode (hWnd=0x202d0) returned 1
[0211.900] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0211.900] TranslateMessage (lpMsg=0x53eef8) returned 0
[0211.900] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0211.900] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.900] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0211.900] WaitMessage () returned 1
[0212.772] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0212.772] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0212.772] TranslateMessage (lpMsg=0x53eef8) returned 0
[0212.772] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0212.772] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0212.772] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0212.772] WaitMessage () returned 1
[0213.504] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0213.505] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a10222) returned 0x1
[0213.505] IsWindowUnicode (hWnd=0x202c6) returned 1
[0213.505] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0213.505] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a10222) returned 0x1
[0213.505] SetCursor (hCursor=0x10003) returned 0x10003
[0213.506] TranslateMessage (lpMsg=0x53eef8) returned 0
[0213.506] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0213.506] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0213.506] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0213.506] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0213.506] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0213.506] GetKeyState (nVirtKey=1) returned 0
[0213.506] GetKeyState (nVirtKey=2) returned 0
[0213.506] GetKeyState (nVirtKey=4) returned 0
[0213.506] GetKeyState (nVirtKey=5) returned 0
[0213.506] GetKeyState (nVirtKey=6) returned 0
[0213.506] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0213.506] IsWindowUnicode (hWnd=0x202c6) returned 1
[0213.507] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0213.507] TranslateMessage (lpMsg=0x53eef8) returned 0
[0213.507] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0213.507] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0213.507] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0213.507] CreateCompatibleDC (hdc=0xf0105ee) returned 0x730107c4
[0213.507] SelectObject (hdc=0x730107c4, h=0x1e0507b9) returned 0x85000f
[0213.507] GdipCreateFromHDC (hdc=0x730107c4, graphics=0x53e958) returned 0x0
[0213.508] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0213.508] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0213.508] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0213.508] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0213.508] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0213.508] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0213.508] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0213.508] LocalFree (hMem=0x89ea88) returned 0x0
[0213.508] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0213.508] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0213.508] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0213.508] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0213.508] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0213.509] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcaf0dbd) returned 0x0
[0213.509] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0213.509] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0213.509] GetCurrentObject (hdc=0x730107c4, type=0x1) returned 0xb00017
[0213.509] GetCurrentObject (hdc=0x730107c4, type=0x2) returned 0x900010
[0213.509] GetCurrentObject (hdc=0x730107c4, type=0x7) returned 0x1e0507b9
[0213.509] GetCurrentObject (hdc=0x730107c4, type=0x6) returned 0x8a01c2
[0213.509] SaveDC (hdc=0x730107c4) returned 1
[0213.509] GetNearestColor (hdc=0x730107c4, color=0xff) returned 0xff
[0213.509] GetNearestColor (hdc=0x730107c4, color=0x55) returned 0x55
[0213.509] GetNearestColor (hdc=0x730107c4, color=0x0) returned 0x0
[0213.509] GetNearestColor (hdc=0x730107c4, color=0x55) returned 0x55
[0213.509] GetNearestColor (hdc=0x730107c4, color=0x0) returned 0x0
[0213.509] GetNearestColor (hdc=0x730107c4, color=0x8080ff) returned 0x8080ff
[0213.510] GetNearestColor (hdc=0x730107c4, color=0x7373e5) returned 0x7373e5
[0213.510] GetNearestColor (hdc=0x730107c4, color=0xe5) returned 0xe5
[0213.510] GetNearestColor (hdc=0x730107c4, color=0x0) returned 0x0
[0213.510] RestoreDC (hdc=0x730107c4, nSavedDC=-1) returned 1
[0213.510] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107c4) returned 0x0
[0213.510] IsAppThemed () returned 0x1
[0213.510] GetThemeAppProperties () returned 0x3
[0213.510] GetThemeAppProperties () returned 0x3
[0213.510] IsAppThemed () returned 0x1
[0213.510] GetThemeAppProperties () returned 0x3
[0213.510] GetThemeAppProperties () returned 0x3
[0213.510] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x2305930 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0213.511] IsAppThemed () returned 0x1
[0213.511] GetThemeAppProperties () returned 0x3
[0213.511] GetThemeAppProperties () returned 0x3
[0213.511] IsAppThemed () returned 0x1
[0213.511] GetThemeAppProperties () returned 0x3
[0213.511] GetThemeAppProperties () returned 0x3
[0213.511] IsAppThemed () returned 0x1
[0213.511] GetThemeAppProperties () returned 0x3
[0213.511] GetThemeAppProperties () returned 0x3
[0213.511] IsAppThemed () returned 0x1
[0213.511] GetThemeAppProperties () returned 0x3
[0213.511] GetThemeAppProperties () returned 0x3
[0213.511] IsThemePartDefined () returned 0x1
[0213.511] IsAppThemed () returned 0x1
[0213.512] GetThemeAppProperties () returned 0x3
[0213.512] GetThemeAppProperties () returned 0x3
[0213.512] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0213.512] IsAppThemed () returned 0x1
[0213.512] GetThemeAppProperties () returned 0x3
[0213.512] GetThemeAppProperties () returned 0x3
[0213.512] IsAppThemed () returned 0x1
[0213.512] GetThemeAppProperties () returned 0x3
[0213.512] GetThemeAppProperties () returned 0x3
[0213.512] IsThemePartDefined () returned 0x1
[0213.512] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0213.512] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0213.512] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0213.512] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0213.512] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0213.512] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0213.512] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0213.512] LocalFree (hMem=0x89ec80) returned 0x0
[0213.512] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0213.512] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0213.513] LocalFree (hMem=0x89ea88) returned 0x0
[0213.513] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0213.513] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0213.513] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0213.513] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0213.513] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0213.513] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0213.513] GetCurrentObject (hdc=0x730107c4, type=0x1) returned 0xb00017
[0213.513] GetCurrentObject (hdc=0x730107c4, type=0x2) returned 0x900010
[0213.513] GetCurrentObject (hdc=0x730107c4, type=0x7) returned 0x1e0507b9
[0213.513] GetCurrentObject (hdc=0x730107c4, type=0x6) returned 0x8a01c2
[0213.513] SaveDC (hdc=0x730107c4) returned 1
[0213.513] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa00407a1
[0213.513] GetClipRgn (hdc=0x730107c4, hrgn=0xa00407a1) returned 0
[0213.513] SelectClipRgn (hdc=0x730107c4, hrgn=0x2704053e) returned 2
[0213.513] DeleteObject (ho=0xa00407a1) returned 1
[0213.514] DeleteObject (ho=0x2704053e) returned 1
[0213.514] OffsetViewportOrgEx (in: hdc=0x730107c4, x=0, y=0, lppt=0x2305fe0 | out: lppt=0x2305fe0) returned 1
[0213.514] DrawThemeParentBackground () returned 0x0
[0213.514] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0213.514] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0213.514] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0213.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0213.514] GetSystemMetrics (nIndex=42) returned 0
[0213.514] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0213.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0213.514] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0213.514] GetCurrentObject (hdc=0x730107c4, type=0x1) returned 0xb00017
[0213.514] GetCurrentObject (hdc=0x730107c4, type=0x2) returned 0x900010
[0213.514] GetCurrentObject (hdc=0x730107c4, type=0x7) returned 0x1e0507b9
[0213.515] GetCurrentObject (hdc=0x730107c4, type=0x6) returned 0x8a01c2
[0213.515] SaveDC (hdc=0x730107c4) returned 2
[0213.515] GetNearestColor (hdc=0x730107c4, color=0xff) returned 0xff
[0213.515] CreateSolidBrush (color=0xff) returned 0x5810078d
[0213.515] FillRect (hDC=0x730107c4, lprc=0x53e120, hbr=0x5810078d) returned 1
[0213.515] DeleteObject (ho=0x5810078d) returned 1
[0213.515] RestoreDC (hdc=0x730107c4, nSavedDC=-1) returned 1
[0213.515] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0213.515] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0213.515] GetSystemMetrics (nIndex=42) returned 0
[0213.515] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0213.515] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0213.515] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0213.515] GetCurrentObject (hdc=0x730107c4, type=0x1) returned 0xb00017
[0213.515] GetCurrentObject (hdc=0x730107c4, type=0x2) returned 0x900010
[0213.515] GetCurrentObject (hdc=0x730107c4, type=0x7) returned 0x1e0507b9
[0213.516] GetCurrentObject (hdc=0x730107c4, type=0x6) returned 0x8a01c2
[0213.516] SaveDC (hdc=0x730107c4) returned 2
[0213.516] GetNearestColor (hdc=0x730107c4, color=0xff) returned 0xff
[0213.516] CreateSolidBrush (color=0xff) returned 0x5910078d
[0213.516] FillRect (hDC=0x730107c4, lprc=0x53e0c0, hbr=0x5910078d) returned 1
[0213.516] DeleteObject (ho=0x5910078d) returned 1
[0213.516] RestoreDC (hdc=0x730107c4, nSavedDC=-1) returned 1
[0213.516] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0213.516] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0213.516] GetSystemMetrics (nIndex=42) returned 0
[0213.516] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0213.516] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0213.516] RestoreDC (hdc=0x730107c4, nSavedDC=-1) returned 1
[0213.516] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107c4) returned 0x0
[0213.517] IsAppThemed () returned 0x1
[0213.517] GetThemeAppProperties () returned 0x3
[0213.517] GetThemeAppProperties () returned 0x3
[0213.517] IsAppThemed () returned 0x1
[0213.517] GetThemeAppProperties () returned 0x3
[0213.517] GetThemeAppProperties () returned 0x3
[0213.517] IsThemePartDefined () returned 0x1
[0213.517] GdipCreateRegion (region=0x53e640) returned 0x0
[0213.517] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0213.517] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0213.517] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0213.517] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0213.517] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0213.517] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0213.517] LocalFree (hMem=0x89ee08) returned 0x0
[0213.517] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0213.517] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0213.517] LocalFree (hMem=0x89eee8) returned 0x0
[0213.517] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0213.518] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0213.518] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0213.518] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0213.518] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0213.518] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0213.518] GetCurrentObject (hdc=0x730107c4, type=0x1) returned 0xb00017
[0213.518] GetCurrentObject (hdc=0x730107c4, type=0x2) returned 0x900010
[0213.518] GetCurrentObject (hdc=0x730107c4, type=0x7) returned 0x1e0507b9
[0213.518] GetCurrentObject (hdc=0x730107c4, type=0x6) returned 0x8a01c2
[0213.518] SaveDC (hdc=0x730107c4) returned 1
[0213.518] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2804053e
[0213.518] GetClipRgn (hdc=0x730107c4, hrgn=0x2804053e) returned 0
[0213.518] SelectClipRgn (hdc=0x730107c4, hrgn=0xa20407a1) returned 2
[0213.518] DeleteObject (ho=0x2804053e) returned 1
[0213.518] DeleteObject (ho=0xa20407a1) returned 1
[0213.518] OffsetViewportOrgEx (in: hdc=0x730107c4, x=0, y=0, lppt=0x2306844 | out: lppt=0x2306844) returned 1
[0213.518] IsAppThemed () returned 0x1
[0213.519] GetThemeAppProperties () returned 0x3
[0213.519] GetThemeAppProperties () returned 0x3
[0213.519] DrawThemeBackground () returned 0x0
[0213.519] RestoreDC (hdc=0x730107c4, nSavedDC=-1) returned 1
[0213.519] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107c4) returned 0x0
[0213.519] GdipCreateRegion (region=0x53e644) returned 0x0
[0213.519] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0213.519] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0213.519] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0213.519] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0213.519] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0213.519] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0213.519] LocalFree (hMem=0x89ea88) returned 0x0
[0213.519] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0213.519] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0213.520] LocalFree (hMem=0x89eac0) returned 0x0
[0213.520] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0213.520] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0213.520] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0213.520] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0213.520] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0213.520] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0213.520] GetCurrentObject (hdc=0x730107c4, type=0x1) returned 0xb00017
[0213.520] GetCurrentObject (hdc=0x730107c4, type=0x2) returned 0x900010
[0213.520] GetCurrentObject (hdc=0x730107c4, type=0x7) returned 0x1e0507b9
[0213.520] GetCurrentObject (hdc=0x730107c4, type=0x6) returned 0x8a01c2
[0213.520] SaveDC (hdc=0x730107c4) returned 1
[0213.520] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa30407a1
[0213.520] GetClipRgn (hdc=0x730107c4, hrgn=0xa30407a1) returned 0
[0213.520] SelectClipRgn (hdc=0x730107c4, hrgn=0x2904053e) returned 2
[0213.520] DeleteObject (ho=0xa30407a1) returned 1
[0213.521] DeleteObject (ho=0x2904053e) returned 1
[0213.521] OffsetViewportOrgEx (in: hdc=0x730107c4, x=0, y=0, lppt=0x2306b18 | out: lppt=0x2306b18) returned 1
[0213.521] IsAppThemed () returned 0x1
[0213.521] GetThemeAppProperties () returned 0x3
[0213.521] GetThemeAppProperties () returned 0x3
[0213.521] GetThemeBackgroundContentRect () returned 0x0
[0213.521] RestoreDC (hdc=0x730107c4, nSavedDC=-1) returned 1
[0213.523] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107c4) returned 0x0
[0213.523] IsAppThemed () returned 0x1
[0213.523] GetThemeAppProperties () returned 0x3
[0213.523] GetThemeAppProperties () returned 0x3
[0213.523] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0213.523] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0213.524] GetCurrentObject (hdc=0x730107c4, type=0x1) returned 0xb00017
[0213.524] GetCurrentObject (hdc=0x730107c4, type=0x2) returned 0x900010
[0213.524] GetCurrentObject (hdc=0x730107c4, type=0x7) returned 0x1e0507b9
[0213.524] GetCurrentObject (hdc=0x730107c4, type=0x6) returned 0x8a01c2
[0213.524] SaveDC (hdc=0x730107c4) returned 1
[0213.524] GetTextAlign (hdc=0x730107c4) returned 0x0
[0213.524] GetTextColor (hdc=0x730107c4) returned 0x0
[0213.524] GetCurrentObject (hdc=0x730107c4, type=0x6) returned 0x8a01c2
[0213.524] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0213.524] SelectObject (hdc=0x730107c4, h=0x450a0799) returned 0x8a01c2
[0213.524] GetBkMode (hdc=0x730107c4) returned 2
[0213.524] SetBkMode (hdc=0x730107c4, mode=1) returned 2
[0213.525] DrawTextExW (in: hdc=0x730107c4, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2306eb8 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0213.525] DrawTextExW (in: hdc=0x730107c4, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2306eb8 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0213.525] RestoreDC (hdc=0x730107c4, nSavedDC=-1) returned 1
[0213.525] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107c4) returned 0x0
[0213.525] GetFocus () returned 0x202c6
[0213.525] IsAppThemed () returned 0x1
[0213.525] GetThemeAppProperties () returned 0x3
[0213.526] GetThemeAppProperties () returned 0x3
[0213.526] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0213.526] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x730107c4, x1=0, y1=0, rop=0xcc0020) returned 1
[0213.526] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107c4) returned 0x0
[0213.526] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0213.526] SelectObject (hdc=0x730107c4, h=0x85000f) returned 0x1e0507b9
[0213.526] DeleteDC (hdc=0x730107c4) returned 1
[0213.526] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0213.526] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0213.527] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0213.527] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0213.527] WaitMessage () returned 1
[0213.616] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0213.616] IsWindowUnicode (hWnd=0x202c6) returned 1
[0213.616] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0213.616] TranslateMessage (lpMsg=0x53eef8) returned 0
[0213.616] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0213.616] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0213.616] IsWindowUnicode (hWnd=0x202c6) returned 1
[0213.616] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0213.616] TranslateMessage (lpMsg=0x53eef8) returned 0
[0213.616] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0213.617] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x190032) returned 0x0
[0213.617] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0213.617] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0213.617] WaitMessage () returned 1
[0213.761] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0213.761] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a10222) returned 0x1
[0213.761] IsWindowUnicode (hWnd=0x202c6) returned 1
[0213.762] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0213.762] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a10222) returned 0x1
[0213.762] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0213.762] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13401cc) returned 0x0
[0213.762] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0213.762] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0213.762] SetCursor (hCursor=0x10003) returned 0x10003
[0213.762] TranslateMessage (lpMsg=0x53eef8) returned 0
[0213.762] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0213.762] GetKeyState (nVirtKey=1) returned -127
[0213.763] GetKeyState (nVirtKey=2) returned 0
[0213.763] GetKeyState (nVirtKey=4) returned 0
[0213.763] GetKeyState (nVirtKey=5) returned 0
[0213.763] GetKeyState (nVirtKey=6) returned 0
[0213.763] IsWindowVisible (hWnd=0x202c6) returned 1
[0213.763] IsWindowEnabled (hWnd=0x202c6) returned 1
[0213.763] SetFocus (hWnd=0x202c6) returned 0x202c6
[0213.763] GetFocus () returned 0x202c6
[0213.763] GetFocus () returned 0x202c6
[0213.763] GetFocus () returned 0x202c6
[0213.763] GetKeyState (nVirtKey=1) returned -127
[0213.763] GetKeyState (nVirtKey=2) returned 0
[0213.763] GetKeyState (nVirtKey=4) returned 0
[0213.763] GetKeyState (nVirtKey=5) returned 0
[0213.763] GetKeyState (nVirtKey=6) returned 0
[0213.763] GetCapture () returned 0x0
[0213.763] SetCapture (hWnd=0x202c6) returned 0x0
[0213.763] GetKeyState (nVirtKey=1) returned -127
[0213.763] GetKeyState (nVirtKey=2) returned 0
[0213.763] GetKeyState (nVirtKey=4) returned 0
[0213.763] GetKeyState (nVirtKey=5) returned 0
[0213.763] GetKeyState (nVirtKey=6) returned 0
[0213.764] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0213.764] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0213.764] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0213.764] IsWindowUnicode (hWnd=0x202c6) returned 1
[0213.764] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0213.764] TranslateMessage (lpMsg=0x53eef8) returned 0
[0213.764] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0213.764] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x230703c, cPoints=0x1 | out: lpPoints=0x230703c) returned 25690608
[0213.764] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0213.764] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0213.764] UpdateWindow (hWnd=0x202c6) returned 1
[0213.764] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0213.764] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0213.765] CreateCompatibleDC (hdc=0xf0105ee) returned 0x740107c4
[0213.765] SelectObject (hdc=0x740107c4, h=0x1e0507b9) returned 0x85000f
[0213.765] GdipCreateFromHDC (hdc=0x740107c4, graphics=0x53e5f0) returned 0x0
[0213.765] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0213.765] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0213.765] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0213.765] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0213.765] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0213.765] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0213.765] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0213.765] LocalFree (hMem=0x89ec80) returned 0x0
[0213.765] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0213.766] GdipCreateRegion (region=0x53e638) returned 0x0
[0213.766] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0213.766] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0213.766] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0213.766] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfcad0dbd) returned 0x0
[0213.766] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0213.766] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0213.766] GetCurrentObject (hdc=0x740107c4, type=0x1) returned 0xb00017
[0213.766] GetCurrentObject (hdc=0x740107c4, type=0x2) returned 0x900010
[0213.766] GetCurrentObject (hdc=0x740107c4, type=0x7) returned 0x1e0507b9
[0213.766] GetCurrentObject (hdc=0x740107c4, type=0x6) returned 0x8a01c2
[0213.766] SaveDC (hdc=0x740107c4) returned 1
[0213.766] GetNearestColor (hdc=0x740107c4, color=0xff) returned 0xff
[0213.766] GetNearestColor (hdc=0x740107c4, color=0x55) returned 0x55
[0213.766] GetNearestColor (hdc=0x740107c4, color=0x0) returned 0x0
[0213.766] GetNearestColor (hdc=0x740107c4, color=0x55) returned 0x55
[0213.767] GetNearestColor (hdc=0x740107c4, color=0x0) returned 0x0
[0213.767] GetNearestColor (hdc=0x740107c4, color=0x8080ff) returned 0x8080ff
[0213.767] GetNearestColor (hdc=0x740107c4, color=0x7373e5) returned 0x7373e5
[0213.767] GetNearestColor (hdc=0x740107c4, color=0xe5) returned 0xe5
[0213.767] GetNearestColor (hdc=0x740107c4, color=0x0) returned 0x0
[0213.767] RestoreDC (hdc=0x740107c4, nSavedDC=-1) returned 1
[0213.767] GdipReleaseDC (graphics=0x5d92c30, hdc=0x740107c4) returned 0x0
[0213.767] IsAppThemed () returned 0x1
[0213.767] GetThemeAppProperties () returned 0x3
[0213.767] GetThemeAppProperties () returned 0x3
[0213.767] IsAppThemed () returned 0x1
[0213.767] GetThemeAppProperties () returned 0x3
[0213.767] GetThemeAppProperties () returned 0x3
[0213.767] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x2307758 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0213.768] IsAppThemed () returned 0x1
[0213.768] GetThemeAppProperties () returned 0x3
[0213.768] GetThemeAppProperties () returned 0x3
[0213.768] IsAppThemed () returned 0x1
[0213.768] GetThemeAppProperties () returned 0x3
[0213.768] GetThemeAppProperties () returned 0x3
[0213.768] IsAppThemed () returned 0x1
[0213.768] GetThemeAppProperties () returned 0x3
[0213.768] GetThemeAppProperties () returned 0x3
[0213.768] IsAppThemed () returned 0x1
[0213.768] GetThemeAppProperties () returned 0x3
[0213.768] GetThemeAppProperties () returned 0x3
[0213.768] IsThemePartDefined () returned 0x1
[0213.768] IsAppThemed () returned 0x1
[0213.768] GetThemeAppProperties () returned 0x3
[0213.768] GetThemeAppProperties () returned 0x3
[0213.768] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0213.768] IsAppThemed () returned 0x1
[0213.768] GetThemeAppProperties () returned 0x3
[0213.769] GetThemeAppProperties () returned 0x3
[0213.769] IsAppThemed () returned 0x1
[0213.769] GetThemeAppProperties () returned 0x3
[0213.769] GetThemeAppProperties () returned 0x3
[0213.769] IsThemePartDefined () returned 0x1
[0213.769] GdipCreateRegion (region=0x53e354) returned 0x0
[0213.769] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0213.769] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0213.769] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0213.769] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0213.769] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0213.769] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0213.769] LocalFree (hMem=0x89ee08) returned 0x0
[0213.769] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0213.769] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0213.769] LocalFree (hMem=0x89ea88) returned 0x0
[0213.769] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0213.769] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0213.769] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0213.769] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0213.770] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0213.770] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0213.770] GetCurrentObject (hdc=0x740107c4, type=0x1) returned 0xb00017
[0213.770] GetCurrentObject (hdc=0x740107c4, type=0x2) returned 0x900010
[0213.770] GetCurrentObject (hdc=0x740107c4, type=0x7) returned 0x1e0507b9
[0213.770] GetCurrentObject (hdc=0x740107c4, type=0x6) returned 0x8a01c2
[0213.770] SaveDC (hdc=0x740107c4) returned 1
[0213.770] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2a04053e
[0213.770] GetClipRgn (hdc=0x740107c4, hrgn=0x2a04053e) returned 0
[0213.770] SelectClipRgn (hdc=0x740107c4, hrgn=0xa70407a1) returned 2
[0213.770] DeleteObject (ho=0x2a04053e) returned 1
[0213.770] DeleteObject (ho=0xa70407a1) returned 1
[0213.770] OffsetViewportOrgEx (in: hdc=0x740107c4, x=0, y=0, lppt=0x2307e08 | out: lppt=0x2307e08) returned 1
[0213.770] DrawThemeParentBackground () returned 0x0
[0213.771] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0213.771] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0213.771] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0213.771] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0213.771] GetSystemMetrics (nIndex=42) returned 0
[0213.771] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0213.771] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0213.771] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0213.771] GetCurrentObject (hdc=0x740107c4, type=0x1) returned 0xb00017
[0213.771] GetCurrentObject (hdc=0x740107c4, type=0x2) returned 0x900010
[0213.771] GetCurrentObject (hdc=0x740107c4, type=0x7) returned 0x1e0507b9
[0213.771] GetCurrentObject (hdc=0x740107c4, type=0x6) returned 0x8a01c2
[0213.771] SaveDC (hdc=0x740107c4) returned 2
[0213.771] GetNearestColor (hdc=0x740107c4, color=0xff) returned 0xff
[0213.772] CreateSolidBrush (color=0xff) returned 0x5a10078d
[0213.772] FillRect (hDC=0x740107c4, lprc=0x53ddb8, hbr=0x5a10078d) returned 1
[0213.772] DeleteObject (ho=0x5a10078d) returned 1
[0213.772] RestoreDC (hdc=0x740107c4, nSavedDC=-1) returned 1
[0213.772] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0213.772] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0213.772] GetSystemMetrics (nIndex=42) returned 0
[0213.772] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0213.772] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0213.772] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0213.772] GetCurrentObject (hdc=0x740107c4, type=0x1) returned 0xb00017
[0213.772] GetCurrentObject (hdc=0x740107c4, type=0x2) returned 0x900010
[0213.772] GetCurrentObject (hdc=0x740107c4, type=0x7) returned 0x1e0507b9
[0213.772] GetCurrentObject (hdc=0x740107c4, type=0x6) returned 0x8a01c2
[0213.772] SaveDC (hdc=0x740107c4) returned 2
[0213.772] GetNearestColor (hdc=0x740107c4, color=0xff) returned 0xff
[0213.773] CreateSolidBrush (color=0xff) returned 0x5b10078d
[0213.773] FillRect (hDC=0x740107c4, lprc=0x53dd58, hbr=0x5b10078d) returned 1
[0213.773] DeleteObject (ho=0x5b10078d) returned 1
[0213.773] RestoreDC (hdc=0x740107c4, nSavedDC=-1) returned 1
[0213.773] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0213.773] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0213.773] GetSystemMetrics (nIndex=42) returned 0
[0213.773] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0213.773] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0213.773] RestoreDC (hdc=0x740107c4, nSavedDC=-1) returned 1
[0213.773] GdipReleaseDC (graphics=0x5d92c30, hdc=0x740107c4) returned 0x0
[0213.773] IsAppThemed () returned 0x1
[0213.773] GetThemeAppProperties () returned 0x3
[0213.774] GetThemeAppProperties () returned 0x3
[0213.774] IsAppThemed () returned 0x1
[0213.774] GetThemeAppProperties () returned 0x3
[0213.774] GetThemeAppProperties () returned 0x3
[0213.774] IsThemePartDefined () returned 0x1
[0213.774] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0213.774] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0213.774] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0213.774] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0213.774] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0213.774] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0213.774] LocalFree (hMem=0x89ea88) returned 0x0
[0213.774] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0213.774] LocalFree (hMem=0x89ee08) returned 0x0
[0213.774] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0213.774] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0213.774] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0213.774] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0213.774] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0213.774] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0213.775] GetCurrentObject (hdc=0x740107c4, type=0x1) returned 0xb00017
[0213.775] GetCurrentObject (hdc=0x740107c4, type=0x2) returned 0x900010
[0213.775] GetCurrentObject (hdc=0x740107c4, type=0x7) returned 0x1e0507b9
[0213.775] GetCurrentObject (hdc=0x740107c4, type=0x6) returned 0x8a01c2
[0213.775] SaveDC (hdc=0x740107c4) returned 1
[0213.775] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa80407a1
[0213.775] GetClipRgn (hdc=0x740107c4, hrgn=0xa80407a1) returned 0
[0213.775] SelectClipRgn (hdc=0x740107c4, hrgn=0x2c04053e) returned 2
[0213.775] DeleteObject (ho=0xa80407a1) returned 1
[0213.775] DeleteObject (ho=0x2c04053e) returned 1
[0213.775] OffsetViewportOrgEx (in: hdc=0x740107c4, x=0, y=0, lppt=0x230866c | out: lppt=0x230866c) returned 1
[0213.775] IsAppThemed () returned 0x1
[0213.775] GetThemeAppProperties () returned 0x3
[0213.775] GetThemeAppProperties () returned 0x3
[0213.775] DrawThemeBackground () returned 0x0
[0213.775] RestoreDC (hdc=0x740107c4, nSavedDC=-1) returned 1
[0213.775] GdipReleaseDC (graphics=0x5d92c30, hdc=0x740107c4) returned 0x0
[0213.776] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0213.776] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0213.776] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0213.776] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0213.776] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0213.776] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0213.776] LocalFree (hMem=0x89ec80) returned 0x0
[0213.776] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0213.776] LocalFree (hMem=0x89ee40) returned 0x0
[0213.776] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0213.776] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0213.776] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0213.776] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0213.776] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0213.776] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0213.776] GetCurrentObject (hdc=0x740107c4, type=0x1) returned 0xb00017
[0213.776] GetCurrentObject (hdc=0x740107c4, type=0x2) returned 0x900010
[0213.776] GetCurrentObject (hdc=0x740107c4, type=0x7) returned 0x1e0507b9
[0213.776] GetCurrentObject (hdc=0x740107c4, type=0x6) returned 0x8a01c2
[0213.776] SaveDC (hdc=0x740107c4) returned 1
[0213.777] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d04053e
[0213.777] GetClipRgn (hdc=0x740107c4, hrgn=0x2d04053e) returned 0
[0213.777] SelectClipRgn (hdc=0x740107c4, hrgn=0xa90407a1) returned 2
[0213.777] DeleteObject (ho=0x2d04053e) returned 1
[0213.777] DeleteObject (ho=0xa90407a1) returned 1
[0213.777] OffsetViewportOrgEx (in: hdc=0x740107c4, x=0, y=0, lppt=0x2308940 | out: lppt=0x2308940) returned 1
[0213.777] IsAppThemed () returned 0x1
[0213.777] GetThemeAppProperties () returned 0x3
[0213.777] GetThemeAppProperties () returned 0x3
[0213.777] GetThemeBackgroundContentRect () returned 0x0
[0213.777] RestoreDC (hdc=0x740107c4, nSavedDC=-1) returned 1
[0213.777] GdipReleaseDC (graphics=0x5d92c30, hdc=0x740107c4) returned 0x0
[0213.777] IsAppThemed () returned 0x1
[0213.777] GetThemeAppProperties () returned 0x3
[0213.777] GetThemeAppProperties () returned 0x3
[0213.777] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0213.777] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0213.777] GetCurrentObject (hdc=0x740107c4, type=0x1) returned 0xb00017
[0213.778] GetCurrentObject (hdc=0x740107c4, type=0x2) returned 0x900010
[0213.778] GetCurrentObject (hdc=0x740107c4, type=0x7) returned 0x1e0507b9
[0213.778] GetCurrentObject (hdc=0x740107c4, type=0x6) returned 0x8a01c2
[0213.778] SaveDC (hdc=0x740107c4) returned 1
[0213.778] GetTextAlign (hdc=0x740107c4) returned 0x0
[0213.778] GetTextColor (hdc=0x740107c4) returned 0x0
[0213.778] GetCurrentObject (hdc=0x740107c4, type=0x6) returned 0x8a01c2
[0213.778] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0213.778] SelectObject (hdc=0x740107c4, h=0x450a0799) returned 0x8a01c2
[0213.778] GetBkMode (hdc=0x740107c4) returned 2
[0213.778] SetBkMode (hdc=0x740107c4, mode=1) returned 2
[0213.778] DrawTextExW (in: hdc=0x740107c4, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x2308ce0 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0213.779] DrawTextExW (in: hdc=0x740107c4, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x2308ce0 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0213.779] RestoreDC (hdc=0x740107c4, nSavedDC=-1) returned 1
[0213.779] GdipReleaseDC (graphics=0x5d92c30, hdc=0x740107c4) returned 0x0
[0213.779] GetFocus () returned 0x202c6
[0213.779] IsAppThemed () returned 0x1
[0213.779] GetThemeAppProperties () returned 0x3
[0213.779] GetThemeAppProperties () returned 0x3
[0213.779] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0213.779] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x740107c4, x1=0, y1=0, rop=0xcc0020) returned 1
[0213.780] GdipReleaseDC (graphics=0x5d92c30, hdc=0x740107c4) returned 0x0
[0213.780] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0213.780] SelectObject (hdc=0x740107c4, h=0x85000f) returned 0x1e0507b9
[0213.780] DeleteDC (hdc=0x740107c4) returned 1
[0213.780] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0213.780] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0213.780] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2308ddc, cPoints=0x1 | out: lpPoints=0x2308ddc) returned 25690608
[0213.780] WindowFromPoint (Point=0x222) returned 0x202c6
[0213.780] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a10222) returned 0x1
[0213.780] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0213.781] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0213.782] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.782] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0213.783] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.783] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0213.784] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.784] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0213.784] GetDC (hWnd=0x0) returned 0x10105d6
[0213.784] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e888) returned 0x0
[0213.785] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0213.785] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0213.785] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0213.785] GetSystemMetrics (nIndex=5) returned 1
[0213.785] GetSystemMetrics (nIndex=6) returned 1
[0213.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.785] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0213.786] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.786] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0213.847] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.847] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0213.848] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.848] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0213.848] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.848] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0213.849] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.849] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0213.849] GetSystemMetrics (nIndex=5) returned 1
[0213.849] GetSystemMetrics (nIndex=6) returned 1
[0213.849] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.850] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0213.850] GetSystemMetrics (nIndex=5) returned 1
[0213.850] GetSystemMetrics (nIndex=6) returned 1
[0213.850] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.850] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0213.851] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.851] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0213.851] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.851] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0213.851] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.851] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0213.851] GetSystemMetrics (nIndex=59) returned 1460
[0213.851] GetSystemMetrics (nIndex=60) returned 920
[0213.852] GetSystemMetrics (nIndex=34) returned 136
[0213.852] GetSystemMetrics (nIndex=35) returned 39
[0213.852] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.852] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0213.852] GetCurrentThreadId () returned 0x11d0
[0213.852] GetCurrentThreadId () returned 0x11d0
[0213.852] GetCurrentThreadId () returned 0x11d0
[0213.852] GetCurrentThreadId () returned 0x11d0
[0213.852] GetCurrentThreadId () returned 0x11d0
[0213.852] GetCurrentThreadId () returned 0x11d0
[0213.852] GetCurrentThreadId () returned 0x11d0
[0213.852] GetCurrentThreadId () returned 0x11d0
[0213.852] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.853] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0213.853] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0213.853] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0213.853] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.853] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0213.853] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.854] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0213.854] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x702c0
[0213.855] SetWindowLongW (hWnd=0x702c0, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0213.855] GetWindowLongW (hWnd=0x702c0, nIndex=-4) returned 1950089536
[0213.855] SetWindowLongW (hWnd=0x702c0, nIndex=-4, dwNewLong=79641918) returned 1950089536
[0213.855] GetWindowLongW (hWnd=0x702c0, nIndex=-4) returned 79641918
[0213.855] GetWindowLongW (hWnd=0x702c0, nIndex=-16) returned 113311744
[0213.856] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702c0, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0213.856] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702c0, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0213.856] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702c0, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0213.857] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702c0, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0213.857] GetClientRect (in: hWnd=0x702c0, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0213.857] GetWindowRect (in: hWnd=0x702c0, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0213.857] SetWindowTextW (hWnd=0x702c0, lpString="WindowsFormsParkingWindow") returned 1
[0213.857] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702c0, Msg=0xc, wParam=0x0, lParam=0x2300d28) returned 0x1
[0213.858] GetParent (hWnd=0x702c0) returned 0x0
[0213.858] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0213.858] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x702c0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x802be
[0213.858] SetWindowLongW (hWnd=0x802be, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0213.859] GetWindowLongW (hWnd=0x802be, nIndex=-4) returned 1868147648
[0213.859] SetWindowLongW (hWnd=0x802be, nIndex=-4, dwNewLong=79642078) returned 1868147648
[0213.859] GetWindowLongW (hWnd=0x802be, nIndex=-4) returned 79642078
[0213.859] GetWindowLongW (hWnd=0x802be, nIndex=-16) returned 1174405133
[0213.859] GetWindowLongW (hWnd=0x802be, nIndex=-12) returned 0
[0213.859] SetWindowLongW (hWnd=0x802be, nIndex=-12, dwNewLong=524990) returned 0
[0213.859] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0213.860] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0213.860] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0213.861] GetClientRect (in: hWnd=0x802be, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0213.861] GetWindowRect (in: hWnd=0x802be, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0213.861] GetParent (hWnd=0x802be) returned 0x702c0
[0213.861] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702c0, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0213.861] SetWindowTextW (hWnd=0x802be, lpString="Enter password: ") returned 1
[0213.861] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0213.862] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0213.862] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0213.862] GetClientRect (in: hWnd=0x802be, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0213.862] GetWindowRect (in: hWnd=0x802be, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0213.862] GetParent (hWnd=0x802be) returned 0x702c0
[0213.862] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702c0, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0213.862] SendMessageW (hWnd=0x802be, Msg=0x2210, wParam=0x2be0001, lParam=0x802be) returned 0x0
[0213.862] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x2210, wParam=0x2be0001, lParam=0x802be) returned 0x0
[0213.862] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0213.862] GetParent (hWnd=0x802be) returned 0x702c0
[0213.862] GdipCreateFromHWND (hwnd=0x802be, graphics=0x53e994) returned 0x0
[0213.863] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0213.863] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0213.863] GetProcessWindowStation () returned 0x13c
[0213.863] GetCapture () returned 0x202c6
[0213.863] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0213.863] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0213.863] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0213.863] ReleaseCapture () returned 1
[0213.864] GetActiveWindow () returned 0x70036
[0213.864] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0213.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.864] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0213.864] GetCursorPos (in: lpPoint=0x2315b8c | out: lpPoint=0x2315b8c*(x=546, y=417)) returned 1
[0213.864] MonitorFromPoint (pt=0x222, dwFlags=0x1a1) returned 0x10001
[0213.864] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0213.864] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x770107c4
[0213.865] GetDeviceCaps (hdc=0x770107c4, index=12) returned 32
[0213.865] GetDeviceCaps (hdc=0x770107c4, index=14) returned 1
[0213.865] DeleteDC (hdc=0x770107c4) returned 1
[0213.865] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0213.865] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0213.865] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1302c8
[0213.866] SetWindowLongW (hWnd=0x1302c8, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0213.866] GetWindowLongW (hWnd=0x1302c8, nIndex=-4) returned 1950089536
[0213.866] SetWindowLongW (hWnd=0x1302c8, nIndex=-4, dwNewLong=79641638) returned 1950089536
[0213.866] GetWindowLongW (hWnd=0x1302c8, nIndex=-4) returned 79641638
[0213.866] GetWindowLongW (hWnd=0x1302c8, nIndex=-16) returned 113770496
[0213.867] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0213.868] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0213.868] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0213.869] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0213.869] GetWindowRect (in: hWnd=0x1302c8, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0213.869] SetWindowTextW (hWnd=0x1302c8, lpString="Ransomware") returned 1
[0213.869] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xc, wParam=0x0, lParam=0x2308ea4) returned 0x1
[0213.869] GetStartupInfoW (in: lpStartupInfo=0x2315ec8 | out: lpStartupInfo=0x2315ec8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0213.870] GetParent (hWnd=0x1302c8) returned 0x0
[0213.870] SetWindowLongW (hWnd=0x1302c8, nIndex=-8, dwNewLong=0) returned 0
[0213.870] SendMessageW (hWnd=0x1302c8, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0213.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0213.870] SendMessageW (hWnd=0x1302c8, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0213.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0213.870] GetSystemMenu (hWnd=0x1302c8, bRevert=0) returned 0x2601d9
[0213.871] GetWindowPlacement (in: hWnd=0x1302c8, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0213.871] EnableMenuItem (hMenu=0x2601d9, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0213.871] EnableMenuItem (hMenu=0x2601d9, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0213.871] EnableMenuItem (hMenu=0x2601d9, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0213.871] EnableMenuItem (hMenu=0x2601d9, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0213.872] EnableMenuItem (hMenu=0x2601d9, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0213.872] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0213.872] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0213.872] GetWindowRect (in: hWnd=0x1302c8, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0213.872] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.872] GetWindowLongW (hWnd=0x1302c8, nIndex=-16) returned 113770496
[0213.872] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0213.872] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0213.872] GetSystemMetrics (nIndex=42) returned 0
[0213.872] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0213.872] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0213.872] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0213.873] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0213.873] GetSystemMetrics (nIndex=42) returned 0
[0213.873] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0213.873] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0213.873] GetCursorPos (in: lpPoint=0x231603c | out: lpPoint=0x231603c*(x=546, y=417)) returned 1
[0213.873] MonitorFromPoint (pt=0x224, dwFlags=0x1a3) returned 0x10001
[0213.873] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0213.873] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x7b0107c4
[0213.873] GetDeviceCaps (hdc=0x7b0107c4, index=12) returned 32
[0213.873] GetDeviceCaps (hdc=0x7b0107c4, index=14) returned 1
[0213.873] DeleteDC (hdc=0x7b0107c4) returned 1
[0213.873] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0213.874] GetWindowLongW (hWnd=0x1302c8, nIndex=-16) returned 113770496
[0213.874] GetWindowLongW (hWnd=0x1302c8, nIndex=-20) returned 327937
[0213.874] SetWindowLongW (hWnd=0x1302c8, nIndex=-16, dwNewLong=46661632) returned 113770496
[0213.874] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0213.874] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0213.875] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0213.875] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0213.875] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0213.875] SetWindowLongW (hWnd=0x1302c8, nIndex=-20, dwNewLong=327681) returned 327937
[0213.875] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0213.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0213.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0213.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0213.877] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0213.877] SetWindowPos (hWnd=0x1302c8, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0213.877] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0213.877] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0213.878] GetWindowPlacement (in: hWnd=0x1302c8, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0213.878] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0213.878] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0213.878] GetWindowRect (in: hWnd=0x1302c8, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0213.879] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0213.879] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0213.879] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0213.879] RedrawWindow (hWnd=0x1302c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0213.880] GetSystemMenu (hWnd=0x1302c8, bRevert=0) returned 0x2601d9
[0213.880] GetWindowPlacement (in: hWnd=0x1302c8, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0213.880] EnableMenuItem (hMenu=0x2601d9, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0213.880] EnableMenuItem (hMenu=0x2601d9, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0213.880] EnableMenuItem (hMenu=0x2601d9, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0213.880] EnableMenuItem (hMenu=0x2601d9, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0213.880] EnableMenuItem (hMenu=0x2601d9, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0213.880] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0213.880] GetWindowLongW (hWnd=0x1302c8, nIndex=-8) returned 0
[0213.880] SetWindowLongW (hWnd=0x1302c8, nIndex=-8, dwNewLong=458806) returned 0
[0213.880] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0213.880] GetProcessWindowStation () returned 0x13c
[0213.880] GetCurrentThreadId () returned 0x11d0
[0213.881] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3e06, lParam=0x0) returned 1
[0213.881] IsWindowVisible (hWnd=0x1302c8) returned 0
[0213.881] IsWindowVisible (hWnd=0x70036) returned 1
[0213.881] IsWindowEnabled (hWnd=0x70036) returned 1
[0213.881] IsWindowVisible (hWnd=0x602b6) returned 0
[0213.881] IsWindowVisible (hWnd=0x901f8) returned 0
[0213.881] IsWindowVisible (hWnd=0x202d0) returned 0
[0213.881] IsWindowVisible (hWnd=0x202d4) returned 0
[0213.882] GetActiveWindow () returned 0x70036
[0213.882] GetFocus () returned 0x202c6
[0213.882] IsWindow (hWnd=0x70036) returned 1
[0213.882] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0213.882] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0213.884] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0213.884] GetWindowLongW (hWnd=0x1302c8, nIndex=-8) returned 458806
[0213.884] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0213.884] GetCurrentThreadId () returned 0x11d0
[0213.884] GetWindowLongW (hWnd=0x1302c8, nIndex=-8) returned 458806
[0213.884] IsWindowEnabled (hWnd=0x70036) returned 0
[0213.884] IsWindowEnabled (hWnd=0x1302c8) returned 1
[0213.884] ShowWindow (hWnd=0x1302c8, nCmdShow=5) returned 0
[0213.884] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0213.884] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0213.885] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.885] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0213.885] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x1302c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1302d6
[0213.886] SetWindowLongW (hWnd=0x1302d6, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0213.886] GetWindowLongW (hWnd=0x1302d6, nIndex=-4) returned 1868026976
[0213.886] SetWindowLongW (hWnd=0x1302d6, nIndex=-4, dwNewLong=79641598) returned 1868026976
[0213.886] GetWindowLongW (hWnd=0x1302d6, nIndex=-4) returned 79641598
[0213.886] GetWindowLongW (hWnd=0x1302d6, nIndex=-16) returned 1174470848
[0213.886] GetWindowLongW (hWnd=0x1302d6, nIndex=-12) returned 0
[0213.886] SetWindowLongW (hWnd=0x1302d6, nIndex=-12, dwNewLong=1245910) returned 0
[0213.886] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0213.888] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0213.888] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0213.889] SendMessageW (hWnd=0x1302d6, Msg=0x2055, wParam=0x1302d6, lParam=0x3) returned 0x2
[0213.889] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0213.889] GetWindow (hWnd=0x1302d6, uCmd=0x3) returned 0x0
[0213.889] GetClientRect (in: hWnd=0x1302d6, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0213.889] GetWindowRect (in: hWnd=0x1302d6, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0213.889] GetParent (hWnd=0x1302d6) returned 0x1302c8
[0213.890] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1302c8, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0213.890] SendMessageW (hWnd=0x1302d6, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0213.890] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0213.890] SendMessageW (hWnd=0x1302d6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0213.890] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0213.890] GetSystemMetrics (nIndex=5) returned 1
[0213.890] GetSystemMetrics (nIndex=6) returned 1
[0213.890] SendMessageW (hWnd=0x1302d6, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0213.890] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0213.890] SendMessageW (hWnd=0x1302d6, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0213.890] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0213.891] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0213.891] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0213.891] GetClientRect (in: hWnd=0x1302d6, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0213.891] GetWindowRect (in: hWnd=0x1302d6, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0213.891] GetParent (hWnd=0x1302d6) returned 0x1302c8
[0213.891] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1302c8, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0213.891] SendMessageW (hWnd=0x1302d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1302d6) returned 0x0
[0213.891] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1302d6) returned 0x0
[0213.891] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0213.892] GetParent (hWnd=0x1302d6) returned 0x1302c8
[0213.892] GetParent (hWnd=0x802be) returned 0x702c0
[0213.892] SetParent (hWndChild=0x802be, hWndNewParent=0x1302c8) returned 0x702c0
[0213.892] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0213.893] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0213.893] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0213.893] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0213.893] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0213.893] GetClientRect (in: hWnd=0x802be, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0213.893] GetWindowRect (in: hWnd=0x802be, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0213.893] GetParent (hWnd=0x802be) returned 0x1302c8
[0213.893] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1302c8, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0213.893] GetClientRect (in: hWnd=0x802be, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0213.893] GetWindowRect (in: hWnd=0x802be, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0213.893] GetParent (hWnd=0x802be) returned 0x1302c8
[0213.893] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1302c8, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0213.893] GetParent (hWnd=0x802be) returned 0x1302c8
[0213.893] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0213.894] GetWindow (hWnd=0x802be, uCmd=0x3) returned 0x0
[0213.894] SetWindowPos (hWnd=0x802be, hWndInsertAfter=0x1302d6, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0213.894] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0213.894] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0213.895] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0213.895] GetClientRect (in: hWnd=0x802be, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0213.895] GetWindowRect (in: hWnd=0x802be, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0213.895] GetParent (hWnd=0x802be) returned 0x1302c8
[0213.895] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1302c8, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0213.895] GetParent (hWnd=0x802be) returned 0x1302c8
[0213.895] GetWindow (hWnd=0x802be, uCmd=0x3) returned 0x1302d6
[0213.895] GetWindowThreadProcessId (in: hWnd=0x802be, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0213.895] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0213.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.896] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0213.896] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x1302c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1302d2
[0213.897] SetWindowLongW (hWnd=0x1302d2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0213.897] GetWindowLongW (hWnd=0x1302d2, nIndex=-4) returned 1868032000
[0213.897] SetWindowLongW (hWnd=0x1302d2, nIndex=-4, dwNewLong=79641198) returned 1868032000
[0213.897] GetWindowLongW (hWnd=0x1302d2, nIndex=-4) returned 79641198
[0213.897] GetWindowLongW (hWnd=0x1302d2, nIndex=-16) returned 1174470667
[0213.897] GetWindowLongW (hWnd=0x1302d2, nIndex=-12) returned 0
[0213.897] SetWindowLongW (hWnd=0x1302d2, nIndex=-12, dwNewLong=1245906) returned 0
[0213.897] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0213.898] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0213.898] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0213.899] SendMessageW (hWnd=0x1302d2, Msg=0x2055, wParam=0x1302d2, lParam=0x3) returned 0x2
[0213.899] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0213.899] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0213.899] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0213.899] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0213.900] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0213.900] RedrawWindow (hWnd=0x1302d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0213.900] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0213.900] RedrawWindow (hWnd=0x802be, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0213.900] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0213.900] RedrawWindow (hWnd=0x1302d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0213.900] RedrawWindow (hWnd=0x1302c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0213.901] GetWindow (hWnd=0x1302d2, uCmd=0x3) returned 0x802be
[0213.901] GetClientRect (in: hWnd=0x1302d2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0213.901] GetWindowRect (in: hWnd=0x1302d2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0213.901] GetParent (hWnd=0x1302d2) returned 0x1302c8
[0213.901] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1302c8, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0213.901] SetWindowTextW (hWnd=0x1302d2, lpString="OK") returned 1
[0213.901] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0xc, wParam=0x0, lParam=0x230d364) returned 0x1
[0213.902] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0213.902] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0213.902] GetClientRect (in: hWnd=0x1302d2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0213.902] GetWindowRect (in: hWnd=0x1302d2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0213.902] GetParent (hWnd=0x1302d2) returned 0x1302c8
[0213.902] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1302c8, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0213.902] SendMessageW (hWnd=0x1302d2, Msg=0x2210, wParam=0x2d20001, lParam=0x1302d2) returned 0x0
[0213.902] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x2210, wParam=0x2d20001, lParam=0x1302d2) returned 0x0
[0213.902] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0213.902] GetParent (hWnd=0x1302d2) returned 0x1302c8
[0213.902] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0213.903] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0213.903] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0213.903] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x1302c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x16013e
[0213.904] SetWindowLongW (hWnd=0x16013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0213.904] GetWindowLongW (hWnd=0x16013e, nIndex=-4) returned 1868032000
[0213.904] SetWindowLongW (hWnd=0x16013e, nIndex=-4, dwNewLong=79641398) returned 1868032000
[0213.904] GetWindowLongW (hWnd=0x16013e, nIndex=-4) returned 79641398
[0213.904] GetWindowLongW (hWnd=0x16013e, nIndex=-16) returned 1174470667
[0213.904] GetWindowLongW (hWnd=0x16013e, nIndex=-12) returned 0
[0213.904] SetWindowLongW (hWnd=0x16013e, nIndex=-12, dwNewLong=1442110) returned 0
[0213.905] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0213.905] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0213.905] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0213.906] SendMessageW (hWnd=0x16013e, Msg=0x2055, wParam=0x16013e, lParam=0x3) returned 0x2
[0213.906] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0213.906] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0213.906] GetWindow (hWnd=0x16013e, uCmd=0x3) returned 0x1302d2
[0213.906] GetClientRect (in: hWnd=0x16013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0213.907] GetWindowRect (in: hWnd=0x16013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0213.907] GetParent (hWnd=0x16013e) returned 0x1302c8
[0213.907] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1302c8, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0213.907] SetWindowTextW (hWnd=0x16013e, lpString="Cancel") returned 1
[0213.907] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0xc, wParam=0x0, lParam=0x2310c24) returned 0x1
[0213.907] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0213.908] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0213.908] GetClientRect (in: hWnd=0x16013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0213.908] GetWindowRect (in: hWnd=0x16013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0213.908] GetParent (hWnd=0x16013e) returned 0x1302c8
[0213.908] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1302c8, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0213.908] SendMessageW (hWnd=0x16013e, Msg=0x2210, wParam=0x13e0001, lParam=0x16013e) returned 0x0
[0213.908] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0x2210, wParam=0x13e0001, lParam=0x16013e) returned 0x0
[0213.908] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0213.908] GetParent (hWnd=0x16013e) returned 0x1302c8
[0213.908] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0213.908] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e320) returned 0x0
[0213.909] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0213.909] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0213.909] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0213.909] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0213.909] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0213.909] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0213.910] GetWindowLongW (hWnd=0x1302c8, nIndex=-8) returned 458806
[0213.910] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0213.910] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0213.910] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x820107c4
[0213.910] GetDeviceCaps (hdc=0x820107c4, index=12) returned 32
[0213.910] GetDeviceCaps (hdc=0x820107c4, index=14) returned 1
[0213.910] DeleteDC (hdc=0x820107c4) returned 1
[0213.910] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0213.910] GetWindowThreadProcessId (in: hWnd=0x1302c8, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0213.910] GetCurrentThreadId () returned 0x11d0
[0213.910] PostMessageW (hWnd=0x1302c8, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0213.911] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0213.911] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0213.911] GetSystemMetrics (nIndex=42) returned 0
[0213.911] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0213.911] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0213.911] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0213.911] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0213.911] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0213.911] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0213.926] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1302c8) returned 0x1
[0213.942] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0213.942] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0213.943] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0213.943] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0213.946] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0213.946] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0213.946] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0213.947] GetFocus () returned 0x202c6
[0213.947] IsChild (hWndParent=0x1302c8, hWnd=0x202c6) returned 0
[0213.947] GetFocus () returned 0x202c6
[0213.947] SetFocus (hWnd=0x1302d6) returned 0x202c6
[0213.948] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1302d6, lParam=0x0) returned 0x0
[0213.948] GetCapture () returned 0x0
[0213.948] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0213.949] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0213.950] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0213.952] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0213.952] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0213.952] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0213.952] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0213.953] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0213.953] GetParent (hWnd=0x1302c8) returned 0x0
[0213.953] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0213.953] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0213.954] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0213.954] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0213.954] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0213.954] GetSysColorBrush (nIndex=5) returned 0x100079
[0213.956] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0213.956] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0213.957] SendMessageW (hWnd=0x1302d6, Msg=0x2111, wParam=0x10002d6, lParam=0x1302d6) returned 0x0
[0213.958] SendMessageW (hWnd=0x1302d6, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0213.958] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0213.958] GetKeyState (nVirtKey=1) returned 1
[0213.958] GetKeyState (nVirtKey=2) returned 0
[0213.958] GetKeyState (nVirtKey=4) returned 0
[0213.958] GetKeyState (nVirtKey=5) returned 0
[0213.958] GetKeyState (nVirtKey=6) returned 0
[0213.958] GetWindowTextLengthW (hWnd=0x1302d6) returned 0
[0213.958] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0213.958] SendMessageW (hWnd=0x1302d6, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0213.958] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0213.958] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0213.958] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0213.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0213.971] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0213.971] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0213.971] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0213.972] GetWindowPlacement (in: hWnd=0x1302c8, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0213.972] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0213.972] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0213.972] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0213.972] GetSystemMetrics (nIndex=42) returned 0
[0213.972] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0213.972] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0213.972] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0213.972] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017
[0213.972] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010
[0213.972] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x51050788
[0213.972] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2
[0213.972] SaveDC (hdc=0x60100ce) returned 1
[0213.972] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0
[0213.973] CreateSolidBrush (color=0xf0f0f0) returned 0x5c10078d
[0213.973] FillRect (hDC=0x60100ce, lprc=0x53e250, hbr=0x5c10078d) returned 1
[0213.973] DeleteObject (ho=0x5c10078d) returned 1
[0213.973] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1
[0213.973] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0213.973] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0213.973] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0213.975] GetWindowPlacement (in: hWnd=0x1302c8, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0213.975] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0213.975] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0213.975] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0213.975] GetSystemMetrics (nIndex=42) returned 0
[0213.975] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0213.975] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0213.975] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0213.975] GetCurrentObject (hdc=0x980107c4, type=0x1) returned 0xb00017
[0213.975] GetCurrentObject (hdc=0x980107c4, type=0x2) returned 0x900010
[0213.975] GetCurrentObject (hdc=0x980107c4, type=0x7) returned 0x6f0507b1
[0213.975] GetCurrentObject (hdc=0x980107c4, type=0x6) returned 0x8a01c2
[0213.975] SaveDC (hdc=0x980107c4) returned 1
[0213.975] GetNearestColor (hdc=0x980107c4, color=0xf0f0f0) returned 0xf0f0f0
[0213.976] CreateSolidBrush (color=0xf0f0f0) returned 0x5d10078d
[0213.976] FillRect (hDC=0x980107c4, lprc=0x53dc18, hbr=0x5d10078d) returned 1
[0213.976] DeleteObject (ho=0x5d10078d) returned 1
[0213.976] RestoreDC (hdc=0x980107c4, nSavedDC=-1) returned 1
[0213.976] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0213.976] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0213.976] GetSystemMetrics (nIndex=42) returned 0
[0213.976] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0213.976] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0213.976] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0213.976] GetCurrentObject (hdc=0x980107c4, type=0x1) returned 0xb00017
[0213.976] GetCurrentObject (hdc=0x980107c4, type=0x2) returned 0x900010
[0213.976] GetCurrentObject (hdc=0x980107c4, type=0x7) returned 0x6f0507b1
[0213.976] GetCurrentObject (hdc=0x980107c4, type=0x6) returned 0x8a01c2
[0213.976] SaveDC (hdc=0x980107c4) returned 1
[0213.976] GetNearestColor (hdc=0x980107c4, color=0xf0f0f0) returned 0xf0f0f0
[0213.977] CreateSolidBrush (color=0xf0f0f0) returned 0x5e10078d
[0213.977] FillRect (hDC=0x980107c4, lprc=0x53dbb8, hbr=0x5e10078d) returned 1
[0213.977] DeleteObject (ho=0x5e10078d) returned 1
[0213.977] RestoreDC (hdc=0x980107c4, nSavedDC=-1) returned 1
[0213.977] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0213.977] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0213.977] GetSystemMetrics (nIndex=42) returned 0
[0213.977] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0213.977] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0213.978] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0213.978] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0213.978] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0213.979] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0213.979] GetStockObject (i=5) returned 0x900015
[0213.979] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0213.979] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0213.979] GetStockObject (i=5) returned 0x900015
[0213.979] GetWindowPlacement (in: hWnd=0x1302c8, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0213.979] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0213.979] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0213.979] GetWindowRect (in: hWnd=0x1302c8, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0213.981] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0213.981] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0213.981] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0213.981] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0213.982] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0213.982] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0213.982] GetWindowRect (in: hWnd=0x1302c8, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0213.982] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.982] IsWindowUnicode (hWnd=0x1302c8) returned 1
[0213.982] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.982] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0213.982] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0213.982] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0213.982] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.982] IsWindowUnicode (hWnd=0x1302c8) returned 1
[0213.982] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.982] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0213.983] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0213.983] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.983] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x84, wParam=0x0, lParam=0x18f0356) returned 0x1
[0213.983] IsWindowUnicode (hWnd=0x1302d2) returned 1
[0213.983] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.983] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0213.983] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0213.983] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.984] IsWindowUnicode (hWnd=0x202c6) returned 1
[0213.984] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.984] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0213.984] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0213.984] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0213.984] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0213.984] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.984] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x84, wParam=0x0, lParam=0x18f0356) returned 0x1
[0213.984] IsWindowUnicode (hWnd=0x1302d2) returned 1
[0213.984] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.984] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x84, wParam=0x0, lParam=0x18f0356) returned 0x1
[0213.984] SetCursor (hCursor=0x10003) returned 0x10003
[0213.984] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0213.985] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0213.985] _TrackMouseEvent (in: lpEventTrack=0x23175b8 | out: lpEventTrack=0x23175b8) returned 1
[0213.985] SendMessageW (hWnd=0x1302d2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0213.985] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0213.985] InvalidateRect (hWnd=0x1302d2, lpRect=0x0, bErase=0) returned 1
[0213.985] GetKeyState (nVirtKey=1) returned 1
[0213.985] GetKeyState (nVirtKey=2) returned 0
[0213.985] GetKeyState (nVirtKey=4) returned 0
[0213.985] GetKeyState (nVirtKey=5) returned 0
[0213.985] GetKeyState (nVirtKey=6) returned 0
[0213.985] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.985] IsWindowUnicode (hWnd=0x1302c8) returned 1
[0213.985] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.985] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0213.986] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0213.986] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.986] IsWindowUnicode (hWnd=0x1302c8) returned 1
[0213.987] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.987] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0213.987] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0213.987] BeginPaint (in: hWnd=0x1302c8, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x10105d6
[0213.987] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0213.987] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0213.987] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0213.987] GetSystemMetrics (nIndex=42) returned 0
[0213.987] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0213.987] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0213.987] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0213.987] EndPaint (hWnd=0x1302c8, lpPaint=0x53e30c) returned 1
[0213.988] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.988] IsWindowUnicode (hWnd=0x1302d6) returned 1
[0213.988] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.988] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0213.988] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0213.988] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0213.988] SetTextColor (hdc=0x990107c4, color=0x0) returned 0x0
[0213.988] SetBkColor (hdc=0x990107c4, color=0xffffff) returned 0xffffff
[0213.989] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.990] IsWindowUnicode (hWnd=0x802be) returned 1
[0213.990] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0213.990] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0213.990] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0213.990] BeginPaint (in: hWnd=0x802be, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0xf0105ee
[0214.042] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0214.042] CreateCompatibleDC (hdc=0xf0105ee) returned 0xc30107c3
[0214.043] SelectObject (hdc=0xc30107c3, h=0x1e0507b9) returned 0x85000f
[0214.043] GdipCreateFromHDC (hdc=0xc30107c3, graphics=0x53e30c) returned 0x0
[0214.043] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0214.043] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0214.043] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0214.043] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.043] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0214.043] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0214.043] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0214.043] LocalFree (hMem=0x89ec80) returned 0x0
[0214.043] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.043] GdipCreateRegion (region=0x53e354) returned 0x0
[0214.043] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.043] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0214.044] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0214.044] GetWindowTextLengthW (hWnd=0x802be) returned 16
[0214.044] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0214.044] GetSystemMetrics (nIndex=42) returned 0
[0214.044] GetWindowTextW (in: hWnd=0x802be, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0214.044] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0214.044] GetClientRect (in: hWnd=0x802be, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0214.044] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0214.044] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0214.044] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0214.044] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.044] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0214.044] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0214.044] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0214.044] LocalFree (hMem=0x89ec80) returned 0x0
[0214.044] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0214.044] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0214.044] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0214.045] LocalFree (hMem=0x89ee08) returned 0x0
[0214.045] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.045] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0214.045] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0214.045] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0214.045] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0214.045] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0214.045] GetCurrentObject (hdc=0xc30107c3, type=0x1) returned 0xb00017
[0214.045] GetCurrentObject (hdc=0xc30107c3, type=0x2) returned 0x900010
[0214.045] GetCurrentObject (hdc=0xc30107c3, type=0x7) returned 0x1e0507b9
[0214.045] GetCurrentObject (hdc=0xc30107c3, type=0x6) returned 0x8a01c2
[0214.045] SaveDC (hdc=0xc30107c3) returned 1
[0214.045] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb204051e
[0214.045] GetClipRgn (hdc=0xc30107c3, hrgn=0xb204051e) returned 0
[0214.045] SelectClipRgn (hdc=0xc30107c3, hrgn=0xae0407a1) returned 2
[0214.045] DeleteObject (ho=0xb204051e) returned 1
[0214.046] DeleteObject (ho=0xae0407a1) returned 1
[0214.046] OffsetViewportOrgEx (in: hdc=0xc30107c3, x=0, y=0, lppt=0x2317ac0 | out: lppt=0x2317ac0) returned 1
[0214.046] GetNearestColor (hdc=0xc30107c3, color=0xf0f0f0) returned 0xf0f0f0
[0214.046] CreateSolidBrush (color=0xf0f0f0) returned 0x5f10078d
[0214.046] FillRect (hDC=0xc30107c3, lprc=0x53e1f4, hbr=0x5f10078d) returned 1
[0214.046] DeleteObject (ho=0x5f10078d) returned 1
[0214.046] RestoreDC (hdc=0xc30107c3, nSavedDC=-1) returned 1
[0214.046] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc30107c3) returned 0x0
[0214.046] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfca70dbd) returned 0x0
[0214.046] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.046] GetWindowTextLengthW (hWnd=0x802be) returned 16
[0214.046] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0214.046] GetSystemMetrics (nIndex=42) returned 0
[0214.046] GetWindowTextW (in: hWnd=0x802be, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0214.046] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0214.046] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0214.046] GetCurrentObject (hdc=0xc30107c3, type=0x1) returned 0xb00017
[0214.047] GetCurrentObject (hdc=0xc30107c3, type=0x2) returned 0x900010
[0214.047] GetCurrentObject (hdc=0xc30107c3, type=0x7) returned 0x1e0507b9
[0214.047] GetCurrentObject (hdc=0xc30107c3, type=0x6) returned 0x8a01c2
[0214.047] SaveDC (hdc=0xc30107c3) returned 1
[0214.047] GetNearestColor (hdc=0xc30107c3, color=0x0) returned 0x0
[0214.047] RestoreDC (hdc=0xc30107c3, nSavedDC=-1) returned 1
[0214.047] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc30107c3) returned 0x0
[0214.048] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0214.048] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0214.048] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0214.048] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2317dc8 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0214.048] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0214.048] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0214.048] GetCurrentObject (hdc=0xc30107c3, type=0x1) returned 0xb00017
[0214.048] GetCurrentObject (hdc=0xc30107c3, type=0x2) returned 0x900010
[0214.048] GetCurrentObject (hdc=0xc30107c3, type=0x7) returned 0x1e0507b9
[0214.048] GetCurrentObject (hdc=0xc30107c3, type=0x6) returned 0x8a01c2
[0214.049] SaveDC (hdc=0xc30107c3) returned 1
[0214.049] GetTextAlign (hdc=0xc30107c3) returned 0x0
[0214.049] GetTextColor (hdc=0xc30107c3) returned 0x0
[0214.049] GetCurrentObject (hdc=0xc30107c3, type=0x6) returned 0x8a01c2
[0214.049] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0214.049] SelectObject (hdc=0xc30107c3, h=0x730a066d) returned 0x8a01c2
[0214.049] GetBkMode (hdc=0xc30107c3) returned 2
[0214.049] SetBkMode (hdc=0xc30107c3, mode=1) returned 2
[0214.049] DrawTextExW (in: hdc=0xc30107c3, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x2317fec | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0214.050] RestoreDC (hdc=0xc30107c3, nSavedDC=-1) returned 1
[0214.050] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc30107c3) returned 0x0
[0214.050] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0214.050] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=250, cy=70, hdcSrc=0xc30107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0214.050] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc30107c3) returned 0x0
[0214.050] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0214.050] SelectObject (hdc=0xc30107c3, h=0x85000f) returned 0x1e0507b9
[0214.050] DeleteDC (hdc=0xc30107c3) returned 1
[0214.050] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0214.050] EndPaint (hWnd=0x802be, lpPaint=0x53e2f0) returned 1
[0214.051] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.051] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.051] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.051] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.051] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.052] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.052] IsWindowUnicode (hWnd=0x1302d2) returned 1
[0214.052] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.052] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.052] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.052] BeginPaint (in: hWnd=0x1302d2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0214.052] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0214.056] CreateCompatibleDC (hdc=0x8b010786) returned 0xc50107c3
[0214.056] SelectObject (hdc=0xc50107c3, h=0x1e0507b9) returned 0x85000f
[0214.056] GdipCreateFromHDC (hdc=0xc50107c3, graphics=0x53e300) returned 0x0
[0214.056] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0214.056] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0214.057] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0214.057] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.057] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0214.057] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0214.057] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0214.057] LocalFree (hMem=0x89ee08) returned 0x0
[0214.057] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.057] GdipCreateRegion (region=0x53e348) returned 0x0
[0214.057] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.057] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0214.057] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0214.057] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfca50dbd) returned 0x0
[0214.057] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.057] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0214.057] GetCurrentObject (hdc=0xc50107c3, type=0x1) returned 0xb00017
[0214.057] GetCurrentObject (hdc=0xc50107c3, type=0x2) returned 0x900010
[0214.057] GetCurrentObject (hdc=0xc50107c3, type=0x7) returned 0x1e0507b9
[0214.058] GetCurrentObject (hdc=0xc50107c3, type=0x6) returned 0x8a01c2
[0214.058] SaveDC (hdc=0xc50107c3) returned 1
[0214.058] GetNearestColor (hdc=0xc50107c3, color=0xf0f0f0) returned 0xf0f0f0
[0214.058] GetNearestColor (hdc=0xc50107c3, color=0xa0a0a0) returned 0xa0a0a0
[0214.058] GetNearestColor (hdc=0xc50107c3, color=0x696969) returned 0x696969
[0214.058] GetNearestColor (hdc=0xc50107c3, color=0xa0a0a0) returned 0xa0a0a0
[0214.058] GetNearestColor (hdc=0xc50107c3, color=0x0) returned 0x0
[0214.058] GetNearestColor (hdc=0xc50107c3, color=0xffffff) returned 0xffffff
[0214.058] GetNearestColor (hdc=0xc50107c3, color=0xe5e5e5) returned 0xe5e5e5
[0214.058] GetNearestColor (hdc=0xc50107c3, color=0xd7d7d7) returned 0xd7d7d7
[0214.058] GetNearestColor (hdc=0xc50107c3, color=0x0) returned 0x0
[0214.058] RestoreDC (hdc=0xc50107c3, nSavedDC=-1) returned 1
[0214.058] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107c3) returned 0x0
[0214.058] IsAppThemed () returned 0x1
[0214.059] GetThemeAppProperties () returned 0x3
[0214.059] GetThemeAppProperties () returned 0x3
[0214.059] IsAppThemed () returned 0x1
[0214.059] GetThemeAppProperties () returned 0x3
[0214.059] GetThemeAppProperties () returned 0x3
[0214.059] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x2318758 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0214.059] IsAppThemed () returned 0x1
[0214.059] GetThemeAppProperties () returned 0x3
[0214.059] GetThemeAppProperties () returned 0x3
[0214.059] IsAppThemed () returned 0x1
[0214.059] GetThemeAppProperties () returned 0x3
[0214.059] GetThemeAppProperties () returned 0x3
[0214.059] IsAppThemed () returned 0x1
[0214.059] GetThemeAppProperties () returned 0x3
[0214.059] GetThemeAppProperties () returned 0x3
[0214.060] IsAppThemed () returned 0x1
[0214.060] GetThemeAppProperties () returned 0x3
[0214.060] GetThemeAppProperties () returned 0x3
[0214.060] IsThemePartDefined () returned 0x1
[0214.060] IsAppThemed () returned 0x1
[0214.060] GetThemeAppProperties () returned 0x3
[0214.060] GetThemeAppProperties () returned 0x3
[0214.060] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0214.060] IsAppThemed () returned 0x1
[0214.060] GetThemeAppProperties () returned 0x3
[0214.060] GetThemeAppProperties () returned 0x3
[0214.060] IsAppThemed () returned 0x1
[0214.060] GetThemeAppProperties () returned 0x3
[0214.060] GetThemeAppProperties () returned 0x3
[0214.060] IsThemePartDefined () returned 0x1
[0214.060] GdipCreateRegion (region=0x53e064) returned 0x0
[0214.060] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.060] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0214.060] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.060] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0214.060] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0214.060] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0214.061] LocalFree (hMem=0x89ec80) returned 0x0
[0214.061] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0214.061] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0214.061] LocalFree (hMem=0x89eac0) returned 0x0
[0214.061] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.061] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0214.061] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0214.061] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0214.061] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.061] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0214.061] GetCurrentObject (hdc=0xc50107c3, type=0x1) returned 0xb00017
[0214.061] GetCurrentObject (hdc=0xc50107c3, type=0x2) returned 0x900010
[0214.061] GetCurrentObject (hdc=0xc50107c3, type=0x7) returned 0x1e0507b9
[0214.061] GetCurrentObject (hdc=0xc50107c3, type=0x6) returned 0x8a01c2
[0214.061] SaveDC (hdc=0xc50107c3) returned 1
[0214.061] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaf0407a1
[0214.061] GetClipRgn (hdc=0xc50107c3, hrgn=0xaf0407a1) returned 0
[0214.062] SelectClipRgn (hdc=0xc50107c3, hrgn=0xb604051e) returned 2
[0214.062] DeleteObject (ho=0xaf0407a1) returned 1
[0214.062] DeleteObject (ho=0xb604051e) returned 1
[0214.062] OffsetViewportOrgEx (in: hdc=0xc50107c3, x=0, y=0, lppt=0x2318e08 | out: lppt=0x2318e08) returned 1
[0214.062] DrawThemeParentBackground () returned 0x0
[0214.062] GetWindowPlacement (in: hWnd=0x1302c8, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0214.062] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0214.062] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0214.062] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0214.062] GetSystemMetrics (nIndex=42) returned 0
[0214.062] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0214.062] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0214.062] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0214.062] GetCurrentObject (hdc=0xc50107c3, type=0x1) returned 0xb00017
[0214.062] GetCurrentObject (hdc=0xc50107c3, type=0x2) returned 0x900010
[0214.062] GetCurrentObject (hdc=0xc50107c3, type=0x7) returned 0x1e0507b9
[0214.063] GetCurrentObject (hdc=0xc50107c3, type=0x6) returned 0x8a01c2
[0214.063] SaveDC (hdc=0xc50107c3) returned 2
[0214.063] GetNearestColor (hdc=0xc50107c3, color=0xf0f0f0) returned 0xf0f0f0
[0214.063] CreateSolidBrush (color=0xf0f0f0) returned 0x6010078d
[0214.063] FillRect (hDC=0xc50107c3, lprc=0x53dac8, hbr=0x6010078d) returned 1
[0214.063] DeleteObject (ho=0x6010078d) returned 1
[0214.063] RestoreDC (hdc=0xc50107c3, nSavedDC=-1) returned 1
[0214.063] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0214.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0214.063] GetSystemMetrics (nIndex=42) returned 0
[0214.063] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0214.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0214.063] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0214.063] GetCurrentObject (hdc=0xc50107c3, type=0x1) returned 0xb00017
[0214.063] GetCurrentObject (hdc=0xc50107c3, type=0x2) returned 0x900010
[0214.064] GetCurrentObject (hdc=0xc50107c3, type=0x7) returned 0x1e0507b9
[0214.064] GetCurrentObject (hdc=0xc50107c3, type=0x6) returned 0x8a01c2
[0214.064] SaveDC (hdc=0xc50107c3) returned 2
[0214.064] GetNearestColor (hdc=0xc50107c3, color=0xf0f0f0) returned 0xf0f0f0
[0214.064] CreateSolidBrush (color=0xf0f0f0) returned 0x6110078d
[0214.064] FillRect (hDC=0xc50107c3, lprc=0x53da68, hbr=0x6110078d) returned 1
[0214.064] DeleteObject (ho=0x6110078d) returned 1
[0214.064] RestoreDC (hdc=0xc50107c3, nSavedDC=-1) returned 1
[0214.064] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0214.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0214.064] GetSystemMetrics (nIndex=42) returned 0
[0214.064] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0214.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0214.064] RestoreDC (hdc=0xc50107c3, nSavedDC=-1) returned 1
[0214.065] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107c3) returned 0x0
[0214.065] IsAppThemed () returned 0x1
[0214.065] GetThemeAppProperties () returned 0x3
[0214.065] GetThemeAppProperties () returned 0x3
[0214.065] IsAppThemed () returned 0x1
[0214.065] GetThemeAppProperties () returned 0x3
[0214.065] GetThemeAppProperties () returned 0x3
[0214.065] IsThemePartDefined () returned 0x1
[0214.065] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0214.065] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.065] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0214.065] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.065] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0214.065] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0214.065] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0214.065] LocalFree (hMem=0x89eac0) returned 0x0
[0214.065] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0214.065] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0214.065] LocalFree (hMem=0x89eac0) returned 0x0
[0214.066] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.066] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0214.066] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0214.066] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0214.066] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.066] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0214.066] GetCurrentObject (hdc=0xc50107c3, type=0x1) returned 0xb00017
[0214.066] GetCurrentObject (hdc=0xc50107c3, type=0x2) returned 0x900010
[0214.066] GetCurrentObject (hdc=0xc50107c3, type=0x7) returned 0x1e0507b9
[0214.066] GetCurrentObject (hdc=0xc50107c3, type=0x6) returned 0x8a01c2
[0214.066] SaveDC (hdc=0xc50107c3) returned 1
[0214.066] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb704051e
[0214.066] GetClipRgn (hdc=0xc50107c3, hrgn=0xb704051e) returned 0
[0214.066] SelectClipRgn (hdc=0xc50107c3, hrgn=0xb10407a1) returned 2
[0214.066] DeleteObject (ho=0xb704051e) returned 1
[0214.066] DeleteObject (ho=0xb10407a1) returned 1
[0214.066] OffsetViewportOrgEx (in: hdc=0xc50107c3, x=0, y=0, lppt=0x2319690 | out: lppt=0x2319690) returned 1
[0214.066] IsAppThemed () returned 0x1
[0214.067] GetThemeAppProperties () returned 0x3
[0214.067] GetThemeAppProperties () returned 0x3
[0214.067] DrawThemeBackground () returned 0x0
[0214.067] RestoreDC (hdc=0xc50107c3, nSavedDC=-1) returned 1
[0214.067] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107c3) returned 0x0
[0214.067] GdipCreateRegion (region=0x53dfec) returned 0x0
[0214.067] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.067] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0214.067] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.067] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0214.067] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0214.067] LocalFree (hMem=0x89ec80) returned 0x0
[0214.067] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0214.067] LocalFree (hMem=0x89ee08) returned 0x0
[0214.067] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.067] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0214.067] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0214.067] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0214.067] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.068] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0214.068] GetCurrentObject (hdc=0xc50107c3, type=0x1) returned 0xb00017
[0214.068] GetCurrentObject (hdc=0xc50107c3, type=0x2) returned 0x900010
[0214.068] GetCurrentObject (hdc=0xc50107c3, type=0x7) returned 0x1e0507b9
[0214.068] GetCurrentObject (hdc=0xc50107c3, type=0x6) returned 0x8a01c2
[0214.068] SaveDC (hdc=0xc50107c3) returned 1
[0214.068] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb20407a1
[0214.068] GetClipRgn (hdc=0xc50107c3, hrgn=0xb20407a1) returned 0
[0214.073] SelectClipRgn (hdc=0xc50107c3, hrgn=0xb804051e) returned 2
[0214.073] DeleteObject (ho=0xb20407a1) returned 1
[0214.073] DeleteObject (ho=0xb804051e) returned 1
[0214.073] OffsetViewportOrgEx (in: hdc=0xc50107c3, x=0, y=0, lppt=0x2319964 | out: lppt=0x2319964) returned 1
[0214.073] IsAppThemed () returned 0x1
[0214.073] GetThemeAppProperties () returned 0x3
[0214.073] GetThemeAppProperties () returned 0x3
[0214.073] GetThemeBackgroundContentRect () returned 0x0
[0214.073] RestoreDC (hdc=0xc50107c3, nSavedDC=-1) returned 1
[0214.073] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107c3) returned 0x0
[0214.073] IsAppThemed () returned 0x1
[0214.073] GetThemeAppProperties () returned 0x3
[0214.073] GetThemeAppProperties () returned 0x3
[0214.073] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0214.073] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0214.073] GetCurrentObject (hdc=0xc50107c3, type=0x1) returned 0xb00017
[0214.074] GetCurrentObject (hdc=0xc50107c3, type=0x2) returned 0x900010
[0214.074] GetCurrentObject (hdc=0xc50107c3, type=0x7) returned 0x1e0507b9
[0214.074] GetCurrentObject (hdc=0xc50107c3, type=0x6) returned 0x8a01c2
[0214.074] SaveDC (hdc=0xc50107c3) returned 1
[0214.074] GetTextAlign (hdc=0xc50107c3) returned 0x0
[0214.074] GetTextColor (hdc=0xc50107c3) returned 0x0
[0214.074] GetCurrentObject (hdc=0xc50107c3, type=0x6) returned 0x8a01c2
[0214.074] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0214.074] SelectObject (hdc=0xc50107c3, h=0x730a066d) returned 0x8a01c2
[0214.074] GetBkMode (hdc=0xc50107c3) returned 2
[0214.074] SetBkMode (hdc=0xc50107c3, mode=1) returned 2
[0214.074] DrawTextExW (in: hdc=0xc50107c3, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x2319d04 | out: lpchText="OK", lprc=0x53df84) returned 13
[0214.075] DrawTextExW (in: hdc=0xc50107c3, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x2319d04 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0214.075] RestoreDC (hdc=0xc50107c3, nSavedDC=-1) returned 1
[0214.075] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107c3) returned 0x0
[0214.075] GetFocus () returned 0x1302d6
[0214.075] IsAppThemed () returned 0x1
[0214.075] GetThemeAppProperties () returned 0x3
[0214.075] GetThemeAppProperties () returned 0x3
[0214.075] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0214.075] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0xc50107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0214.075] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107c3) returned 0x0
[0214.075] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0214.075] SelectObject (hdc=0xc50107c3, h=0x85000f) returned 0x1e0507b9
[0214.076] DeleteDC (hdc=0xc50107c3) returned 1
[0214.076] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0214.076] EndPaint (hWnd=0x1302d2, lpPaint=0x53e2e4) returned 1
[0214.076] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.076] IsWindowUnicode (hWnd=0x16013e) returned 1
[0214.076] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.076] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.076] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.076] BeginPaint (in: hWnd=0x16013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0214.076] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0214.076] CreateCompatibleDC (hdc=0x10105d6) returned 0xc70107c3
[0214.077] SelectObject (hdc=0xc70107c3, h=0x1e0507b9) returned 0x85000f
[0214.077] GdipCreateFromHDC (hdc=0xc70107c3, graphics=0x53e300) returned 0x0
[0214.077] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0214.077] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0214.077] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0214.077] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.077] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0214.077] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0214.077] LocalFree (hMem=0x89ee08) returned 0x0
[0214.077] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.077] GdipCreateRegion (region=0x53e348) returned 0x0
[0214.077] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.077] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0214.077] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0214.077] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfca30dbd) returned 0x0
[0214.077] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.078] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0214.078] GetCurrentObject (hdc=0xc70107c3, type=0x1) returned 0xb00017
[0214.078] GetCurrentObject (hdc=0xc70107c3, type=0x2) returned 0x900010
[0214.078] GetCurrentObject (hdc=0xc70107c3, type=0x7) returned 0x1e0507b9
[0214.078] GetCurrentObject (hdc=0xc70107c3, type=0x6) returned 0x8a01c2
[0214.078] SaveDC (hdc=0xc70107c3) returned 1
[0214.078] GetNearestColor (hdc=0xc70107c3, color=0xf0f0f0) returned 0xf0f0f0
[0214.078] GetNearestColor (hdc=0xc70107c3, color=0xa0a0a0) returned 0xa0a0a0
[0214.078] GetNearestColor (hdc=0xc70107c3, color=0x696969) returned 0x696969
[0214.078] GetNearestColor (hdc=0xc70107c3, color=0xa0a0a0) returned 0xa0a0a0
[0214.078] GetNearestColor (hdc=0xc70107c3, color=0x0) returned 0x0
[0214.078] GetNearestColor (hdc=0xc70107c3, color=0xffffff) returned 0xffffff
[0214.078] GetNearestColor (hdc=0xc70107c3, color=0xe5e5e5) returned 0xe5e5e5
[0214.078] GetNearestColor (hdc=0xc70107c3, color=0xd7d7d7) returned 0xd7d7d7
[0214.078] GetNearestColor (hdc=0xc70107c3, color=0x0) returned 0x0
[0214.078] RestoreDC (hdc=0xc70107c3, nSavedDC=-1) returned 1
[0214.078] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107c3) returned 0x0
[0214.079] IsAppThemed () returned 0x1
[0214.079] GetThemeAppProperties () returned 0x3
[0214.079] GetThemeAppProperties () returned 0x3
[0214.079] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0214.079] SendMessageW (hWnd=0x1302c8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0214.079] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0214.079] IsAppThemed () returned 0x1
[0214.079] GetThemeAppProperties () returned 0x3
[0214.079] GetThemeAppProperties () returned 0x3
[0214.079] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x231a514 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0214.079] IsAppThemed () returned 0x1
[0214.079] GetThemeAppProperties () returned 0x3
[0214.079] GetThemeAppProperties () returned 0x3
[0214.079] IsAppThemed () returned 0x1
[0214.080] GetThemeAppProperties () returned 0x3
[0214.080] GetThemeAppProperties () returned 0x3
[0214.080] GetFocus () returned 0x1302d6
[0214.080] IsAppThemed () returned 0x1
[0214.080] GetThemeAppProperties () returned 0x3
[0214.080] GetThemeAppProperties () returned 0x3
[0214.080] IsAppThemed () returned 0x1
[0214.080] GetThemeAppProperties () returned 0x3
[0214.080] GetThemeAppProperties () returned 0x3
[0214.080] IsThemePartDefined () returned 0x1
[0214.080] IsAppThemed () returned 0x1
[0214.080] GetThemeAppProperties () returned 0x3
[0214.080] GetThemeAppProperties () returned 0x3
[0214.080] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0214.080] IsAppThemed () returned 0x1
[0214.080] GetThemeAppProperties () returned 0x3
[0214.080] GetThemeAppProperties () returned 0x3
[0214.080] IsAppThemed () returned 0x1
[0214.080] GetThemeAppProperties () returned 0x3
[0214.080] GetThemeAppProperties () returned 0x3
[0214.080] IsThemePartDefined () returned 0x1
[0214.080] GdipCreateRegion (region=0x53e070) returned 0x0
[0214.081] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.081] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0214.081] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.081] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0214.081] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0214.081] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0214.081] LocalFree (hMem=0x89ec80) returned 0x0
[0214.081] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0214.081] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0214.081] LocalFree (hMem=0x89ec80) returned 0x0
[0214.081] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.081] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0214.081] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0214.081] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0214.081] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.081] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0214.081] GetCurrentObject (hdc=0xc70107c3, type=0x1) returned 0xb00017
[0214.081] GetCurrentObject (hdc=0xc70107c3, type=0x2) returned 0x900010
[0214.081] GetCurrentObject (hdc=0xc70107c3, type=0x7) returned 0x1e0507b9
[0214.082] GetCurrentObject (hdc=0xc70107c3, type=0x6) returned 0x8a01c2
[0214.082] SaveDC (hdc=0xc70107c3) returned 1
[0214.082] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb904051e
[0214.082] GetClipRgn (hdc=0xc70107c3, hrgn=0xb904051e) returned 0
[0214.082] SelectClipRgn (hdc=0xc70107c3, hrgn=0xb60407a1) returned 2
[0214.082] DeleteObject (ho=0xb904051e) returned 1
[0214.082] DeleteObject (ho=0xb60407a1) returned 1
[0214.082] OffsetViewportOrgEx (in: hdc=0xc70107c3, x=0, y=0, lppt=0x231abc4 | out: lppt=0x231abc4) returned 1
[0214.082] DrawThemeParentBackground () returned 0x0
[0214.082] GetWindowPlacement (in: hWnd=0x1302c8, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0214.083] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0214.083] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0214.083] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0214.083] GetSystemMetrics (nIndex=42) returned 0
[0214.083] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0214.083] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0214.083] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0214.083] GetCurrentObject (hdc=0xc70107c3, type=0x1) returned 0xb00017
[0214.083] GetCurrentObject (hdc=0xc70107c3, type=0x2) returned 0x900010
[0214.083] GetCurrentObject (hdc=0xc70107c3, type=0x7) returned 0x1e0507b9
[0214.083] GetCurrentObject (hdc=0xc70107c3, type=0x6) returned 0x8a01c2
[0214.084] SaveDC (hdc=0xc70107c3) returned 2
[0214.084] GetNearestColor (hdc=0xc70107c3, color=0xf0f0f0) returned 0xf0f0f0
[0214.084] CreateSolidBrush (color=0xf0f0f0) returned 0x6210078d
[0214.084] FillRect (hDC=0xc70107c3, lprc=0x53dad0, hbr=0x6210078d) returned 1
[0214.084] DeleteObject (ho=0x6210078d) returned 1
[0214.084] RestoreDC (hdc=0xc70107c3, nSavedDC=-1) returned 1
[0214.084] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0214.084] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0214.084] GetSystemMetrics (nIndex=42) returned 0
[0214.084] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0214.084] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0214.085] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0214.085] GetCurrentObject (hdc=0xc70107c3, type=0x1) returned 0xb00017
[0214.085] GetCurrentObject (hdc=0xc70107c3, type=0x2) returned 0x900010
[0214.085] GetCurrentObject (hdc=0xc70107c3, type=0x7) returned 0x1e0507b9
[0214.085] GetCurrentObject (hdc=0xc70107c3, type=0x6) returned 0x8a01c2
[0214.085] SaveDC (hdc=0xc70107c3) returned 2
[0214.085] GetNearestColor (hdc=0xc70107c3, color=0xf0f0f0) returned 0xf0f0f0
[0214.085] CreateSolidBrush (color=0xf0f0f0) returned 0x6310078d
[0214.085] FillRect (hDC=0xc70107c3, lprc=0x53da70, hbr=0x6310078d) returned 1
[0214.085] DeleteObject (ho=0x6310078d) returned 1
[0214.085] RestoreDC (hdc=0xc70107c3, nSavedDC=-1) returned 1
[0214.085] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0214.085] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0214.085] GetSystemMetrics (nIndex=42) returned 0
[0214.085] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0214.085] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0214.086] RestoreDC (hdc=0xc70107c3, nSavedDC=-1) returned 1
[0214.086] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107c3) returned 0x0
[0214.086] IsAppThemed () returned 0x1
[0214.086] GetThemeAppProperties () returned 0x3
[0214.086] GetThemeAppProperties () returned 0x3
[0214.086] IsAppThemed () returned 0x1
[0214.086] GetThemeAppProperties () returned 0x3
[0214.086] GetThemeAppProperties () returned 0x3
[0214.086] IsThemePartDefined () returned 0x1
[0214.086] GdipCreateRegion (region=0x53dff4) returned 0x0
[0214.086] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.086] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0214.086] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.086] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0214.086] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0214.086] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0214.086] LocalFree (hMem=0x89ee40) returned 0x0
[0214.087] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0214.087] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0214.087] LocalFree (hMem=0x89ec80) returned 0x0
[0214.087] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.087] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0214.087] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0214.087] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0214.087] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.087] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0214.087] GetCurrentObject (hdc=0xc70107c3, type=0x1) returned 0xb00017
[0214.087] GetCurrentObject (hdc=0xc70107c3, type=0x2) returned 0x900010
[0214.087] GetCurrentObject (hdc=0xc70107c3, type=0x7) returned 0x1e0507b9
[0214.087] GetCurrentObject (hdc=0xc70107c3, type=0x6) returned 0x8a01c2
[0214.087] SaveDC (hdc=0xc70107c3) returned 1
[0214.087] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb70407a1
[0214.087] GetClipRgn (hdc=0xc70107c3, hrgn=0xb70407a1) returned 0
[0214.088] SelectClipRgn (hdc=0xc70107c3, hrgn=0xbb04051e) returned 2
[0214.088] DeleteObject (ho=0xb70407a1) returned 1
[0214.088] DeleteObject (ho=0xbb04051e) returned 1
[0214.088] OffsetViewportOrgEx (in: hdc=0xc70107c3, x=0, y=0, lppt=0x231b44c | out: lppt=0x231b44c) returned 1
[0214.088] IsAppThemed () returned 0x1
[0214.088] GetThemeAppProperties () returned 0x3
[0214.088] GetThemeAppProperties () returned 0x3
[0214.088] DrawThemeBackground () returned 0x0
[0214.088] RestoreDC (hdc=0xc70107c3, nSavedDC=-1) returned 1
[0214.088] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107c3) returned 0x0
[0214.088] GdipCreateRegion (region=0x53dff8) returned 0x0
[0214.088] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.088] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0214.088] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.088] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0214.088] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0214.088] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0214.089] LocalFree (hMem=0x89ee08) returned 0x0
[0214.089] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0214.089] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0214.089] LocalFree (hMem=0x89eac0) returned 0x0
[0214.089] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.089] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0214.089] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0214.089] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0214.089] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.089] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0214.089] GetCurrentObject (hdc=0xc70107c3, type=0x1) returned 0xb00017
[0214.089] GetCurrentObject (hdc=0xc70107c3, type=0x2) returned 0x900010
[0214.089] GetCurrentObject (hdc=0xc70107c3, type=0x7) returned 0x1e0507b9
[0214.089] GetCurrentObject (hdc=0xc70107c3, type=0x6) returned 0x8a01c2
[0214.089] SaveDC (hdc=0xc70107c3) returned 1
[0214.089] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbc04051e
[0214.089] GetClipRgn (hdc=0xc70107c3, hrgn=0xbc04051e) returned 0
[0214.090] SelectClipRgn (hdc=0xc70107c3, hrgn=0xb80407a1) returned 2
[0214.090] DeleteObject (ho=0xbc04051e) returned 1
[0214.090] DeleteObject (ho=0xb80407a1) returned 1
[0214.090] OffsetViewportOrgEx (in: hdc=0xc70107c3, x=0, y=0, lppt=0x231b720 | out: lppt=0x231b720) returned 1
[0214.090] IsAppThemed () returned 0x1
[0214.090] GetThemeAppProperties () returned 0x3
[0214.090] GetThemeAppProperties () returned 0x3
[0214.090] GetThemeBackgroundContentRect () returned 0x0
[0214.090] RestoreDC (hdc=0xc70107c3, nSavedDC=-1) returned 1
[0214.090] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107c3) returned 0x0
[0214.090] IsAppThemed () returned 0x1
[0214.090] GetThemeAppProperties () returned 0x3
[0214.090] GetThemeAppProperties () returned 0x3
[0214.090] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0214.090] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0214.090] GetCurrentObject (hdc=0xc70107c3, type=0x1) returned 0xb00017
[0214.090] GetCurrentObject (hdc=0xc70107c3, type=0x2) returned 0x900010
[0214.090] GetCurrentObject (hdc=0xc70107c3, type=0x7) returned 0x1e0507b9
[0214.091] GetCurrentObject (hdc=0xc70107c3, type=0x6) returned 0x8a01c2
[0214.091] SaveDC (hdc=0xc70107c3) returned 1
[0214.091] GetTextAlign (hdc=0xc70107c3) returned 0x0
[0214.091] GetTextColor (hdc=0xc70107c3) returned 0x0
[0214.091] GetCurrentObject (hdc=0xc70107c3, type=0x6) returned 0x8a01c2
[0214.091] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0214.091] SelectObject (hdc=0xc70107c3, h=0x730a066d) returned 0x8a01c2
[0214.091] GetBkMode (hdc=0xc70107c3) returned 2
[0214.091] SetBkMode (hdc=0xc70107c3, mode=1) returned 2
[0214.091] DrawTextExW (in: hdc=0xc70107c3, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x231bac0 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0214.092] DrawTextExW (in: hdc=0xc70107c3, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x231bac0 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0214.092] RestoreDC (hdc=0xc70107c3, nSavedDC=-1) returned 1
[0214.092] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107c3) returned 0x0
[0214.092] GetFocus () returned 0x1302d6
[0214.092] IsAppThemed () returned 0x1
[0214.092] GetThemeAppProperties () returned 0x3
[0214.092] GetThemeAppProperties () returned 0x3
[0214.092] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0214.092] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0xc70107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0214.092] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107c3) returned 0x0
[0214.092] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0214.093] SelectObject (hdc=0xc70107c3, h=0x85000f) returned 0x1e0507b9
[0214.093] DeleteDC (hdc=0xc70107c3) returned 1
[0214.093] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0214.093] EndPaint (hWnd=0x16013e, lpPaint=0x53e2e4) returned 1
[0214.093] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.093] IsWindowUnicode (hWnd=0x202c6) returned 1
[0214.093] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.093] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.093] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.093] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0214.093] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0214.094] CreateCompatibleDC (hdc=0x60100ce) returned 0xc90107c3
[0214.094] SelectObject (hdc=0xc90107c3, h=0x1e0507b9) returned 0x85000f
[0214.094] GdipCreateFromHDC (hdc=0xc90107c3, graphics=0x53e300) returned 0x0
[0214.094] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0214.094] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0214.094] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0214.094] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.094] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0214.094] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0214.094] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0214.094] LocalFree (hMem=0x89ec80) returned 0x0
[0214.094] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.094] GdipCreateRegion (region=0x53e348) returned 0x0
[0214.094] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.095] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0214.095] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0214.095] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfca10dbd) returned 0x0
[0214.095] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.095] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0214.095] GetCurrentObject (hdc=0xc90107c3, type=0x1) returned 0xb00017
[0214.095] GetCurrentObject (hdc=0xc90107c3, type=0x2) returned 0x900010
[0214.095] GetCurrentObject (hdc=0xc90107c3, type=0x7) returned 0x1e0507b9
[0214.095] GetCurrentObject (hdc=0xc90107c3, type=0x6) returned 0x8a01c2
[0214.095] SaveDC (hdc=0xc90107c3) returned 1
[0214.095] GetNearestColor (hdc=0xc90107c3, color=0xff) returned 0xff
[0214.095] GetNearestColor (hdc=0xc90107c3, color=0x55) returned 0x55
[0214.095] GetNearestColor (hdc=0xc90107c3, color=0x0) returned 0x0
[0214.095] GetNearestColor (hdc=0xc90107c3, color=0x55) returned 0x55
[0214.095] GetNearestColor (hdc=0xc90107c3, color=0x0) returned 0x0
[0214.096] GetNearestColor (hdc=0xc90107c3, color=0x8080ff) returned 0x8080ff
[0214.096] GetNearestColor (hdc=0xc90107c3, color=0x7373e5) returned 0x7373e5
[0214.096] GetNearestColor (hdc=0xc90107c3, color=0xe5) returned 0xe5
[0214.096] GetNearestColor (hdc=0xc90107c3, color=0x0) returned 0x0
[0214.096] RestoreDC (hdc=0xc90107c3, nSavedDC=-1) returned 1
[0214.096] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107c3) returned 0x0
[0214.096] IsAppThemed () returned 0x1
[0214.096] GetThemeAppProperties () returned 0x3
[0214.096] GetThemeAppProperties () returned 0x3
[0214.096] IsAppThemed () returned 0x1
[0214.096] GetThemeAppProperties () returned 0x3
[0214.096] GetThemeAppProperties () returned 0x3
[0214.096] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0214.096] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x231c2a4 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0214.097] IsAppThemed () returned 0x1
[0214.098] GetThemeAppProperties () returned 0x3
[0214.098] GetThemeAppProperties () returned 0x3
[0214.098] IsAppThemed () returned 0x1
[0214.098] GetThemeAppProperties () returned 0x3
[0214.098] GetThemeAppProperties () returned 0x3
[0214.098] GetFocus () returned 0x1302d6
[0214.098] IsAppThemed () returned 0x1
[0214.098] GetThemeAppProperties () returned 0x3
[0214.098] GetThemeAppProperties () returned 0x3
[0214.098] IsAppThemed () returned 0x1
[0214.098] GetThemeAppProperties () returned 0x3
[0214.098] GetThemeAppProperties () returned 0x3
[0214.098] IsThemePartDefined () returned 0x1
[0214.098] IsAppThemed () returned 0x1
[0214.098] GetThemeAppProperties () returned 0x3
[0214.098] GetThemeAppProperties () returned 0x3
[0214.098] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0214.098] IsAppThemed () returned 0x1
[0214.098] GetThemeAppProperties () returned 0x3
[0214.098] GetThemeAppProperties () returned 0x3
[0214.098] IsAppThemed () returned 0x1
[0214.099] GetThemeAppProperties () returned 0x3
[0214.099] GetThemeAppProperties () returned 0x3
[0214.099] IsThemePartDefined () returned 0x1
[0214.099] GdipCreateRegion (region=0x53e070) returned 0x0
[0214.099] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.099] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0214.099] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.099] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0214.099] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0214.099] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0214.099] LocalFree (hMem=0x89eac0) returned 0x0
[0214.099] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0214.099] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0214.103] LocalFree (hMem=0x89ee08) returned 0x0
[0214.103] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.103] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0214.103] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0214.103] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0214.103] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.103] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0214.103] GetCurrentObject (hdc=0xc90107c3, type=0x1) returned 0xb00017
[0214.103] GetCurrentObject (hdc=0xc90107c3, type=0x2) returned 0x900010
[0214.103] GetCurrentObject (hdc=0xc90107c3, type=0x7) returned 0x1e0507b9
[0214.104] GetCurrentObject (hdc=0xc90107c3, type=0x6) returned 0x8a01c2
[0214.104] SaveDC (hdc=0xc90107c3) returned 1
[0214.104] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb90407a1
[0214.104] GetClipRgn (hdc=0xc90107c3, hrgn=0xb90407a1) returned 0
[0214.104] SelectClipRgn (hdc=0xc90107c3, hrgn=0xc004051e) returned 2
[0214.104] DeleteObject (ho=0xb90407a1) returned 1
[0214.104] DeleteObject (ho=0xc004051e) returned 1
[0214.104] OffsetViewportOrgEx (in: hdc=0xc90107c3, x=0, y=0, lppt=0x231c954 | out: lppt=0x231c954) returned 1
[0214.104] DrawThemeParentBackground () returned 0x0
[0214.104] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0214.104] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0214.104] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0214.104] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0214.104] GetSystemMetrics (nIndex=42) returned 0
[0214.104] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0214.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0214.105] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0214.105] GetCurrentObject (hdc=0xc90107c3, type=0x1) returned 0xb00017
[0214.105] GetCurrentObject (hdc=0xc90107c3, type=0x2) returned 0x900010
[0214.105] GetCurrentObject (hdc=0xc90107c3, type=0x7) returned 0x1e0507b9
[0214.105] GetCurrentObject (hdc=0xc90107c3, type=0x6) returned 0x8a01c2
[0214.105] SaveDC (hdc=0xc90107c3) returned 2
[0214.105] GetNearestColor (hdc=0xc90107c3, color=0xff) returned 0xff
[0214.105] CreateSolidBrush (color=0xff) returned 0x6410078d
[0214.105] FillRect (hDC=0xc90107c3, lprc=0x53dad0, hbr=0x6410078d) returned 1
[0214.105] DeleteObject (ho=0x6410078d) returned 1
[0214.105] RestoreDC (hdc=0xc90107c3, nSavedDC=-1) returned 1
[0214.105] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0214.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0214.105] GetSystemMetrics (nIndex=42) returned 0
[0214.106] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0214.106] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0214.106] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0214.106] GetCurrentObject (hdc=0xc90107c3, type=0x1) returned 0xb00017
[0214.106] GetCurrentObject (hdc=0xc90107c3, type=0x2) returned 0x900010
[0214.106] GetCurrentObject (hdc=0xc90107c3, type=0x7) returned 0x1e0507b9
[0214.106] GetCurrentObject (hdc=0xc90107c3, type=0x6) returned 0x8a01c2
[0214.106] SaveDC (hdc=0xc90107c3) returned 2
[0214.106] GetNearestColor (hdc=0xc90107c3, color=0xff) returned 0xff
[0214.106] CreateSolidBrush (color=0xff) returned 0x6510078d
[0214.106] FillRect (hDC=0xc90107c3, lprc=0x53da70, hbr=0x6510078d) returned 1
[0214.106] DeleteObject (ho=0x6510078d) returned 1
[0214.106] RestoreDC (hdc=0xc90107c3, nSavedDC=-1) returned 1
[0214.106] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0214.106] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0214.106] GetSystemMetrics (nIndex=42) returned 0
[0214.106] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0214.107] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0214.107] RestoreDC (hdc=0xc90107c3, nSavedDC=-1) returned 1
[0214.107] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107c3) returned 0x0
[0214.107] IsAppThemed () returned 0x1
[0214.107] GetThemeAppProperties () returned 0x3
[0214.107] GetThemeAppProperties () returned 0x3
[0214.107] IsAppThemed () returned 0x1
[0214.107] GetThemeAppProperties () returned 0x3
[0214.107] GetThemeAppProperties () returned 0x3
[0214.107] IsThemePartDefined () returned 0x1
[0214.107] GdipCreateRegion (region=0x53dff4) returned 0x0
[0214.107] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.107] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0214.107] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.107] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0214.107] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0214.108] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0214.108] LocalFree (hMem=0x89eee8) returned 0x0
[0214.108] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0214.108] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0214.108] LocalFree (hMem=0x89eac0) returned 0x0
[0214.108] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.108] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0214.108] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0214.108] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0214.108] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.108] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0214.108] GetCurrentObject (hdc=0xc90107c3, type=0x1) returned 0xb00017
[0214.108] GetCurrentObject (hdc=0xc90107c3, type=0x2) returned 0x900010
[0214.108] GetCurrentObject (hdc=0xc90107c3, type=0x7) returned 0x1e0507b9
[0214.108] GetCurrentObject (hdc=0xc90107c3, type=0x6) returned 0x8a01c2
[0214.108] SaveDC (hdc=0xc90107c3) returned 1
[0214.108] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc104051e
[0214.109] GetClipRgn (hdc=0xc90107c3, hrgn=0xc104051e) returned 0
[0214.109] SelectClipRgn (hdc=0xc90107c3, hrgn=0xbb0407a1) returned 2
[0214.109] DeleteObject (ho=0xc104051e) returned 1
[0214.109] DeleteObject (ho=0xbb0407a1) returned 1
[0214.109] OffsetViewportOrgEx (in: hdc=0xc90107c3, x=0, y=0, lppt=0x231d1b8 | out: lppt=0x231d1b8) returned 1
[0214.109] IsAppThemed () returned 0x1
[0214.109] GetThemeAppProperties () returned 0x3
[0214.109] GetThemeAppProperties () returned 0x3
[0214.109] DrawThemeBackground () returned 0x0
[0214.109] RestoreDC (hdc=0xc90107c3, nSavedDC=-1) returned 1
[0214.109] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107c3) returned 0x0
[0214.109] GdipCreateRegion (region=0x53dff8) returned 0x0
[0214.109] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.109] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0214.109] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.109] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0214.109] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0214.110] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0214.110] LocalFree (hMem=0x89eac0) returned 0x0
[0214.110] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0214.110] LocalFree (hMem=0x89ec80) returned 0x0
[0214.110] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.110] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0214.110] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0214.110] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0214.110] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.110] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0214.110] GetCurrentObject (hdc=0xc90107c3, type=0x1) returned 0xb00017
[0214.110] GetCurrentObject (hdc=0xc90107c3, type=0x2) returned 0x900010
[0214.110] GetCurrentObject (hdc=0xc90107c3, type=0x7) returned 0x1e0507b9
[0214.110] GetCurrentObject (hdc=0xc90107c3, type=0x6) returned 0x8a01c2
[0214.110] SaveDC (hdc=0xc90107c3) returned 1
[0214.110] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbc0407a1
[0214.110] GetClipRgn (hdc=0xc90107c3, hrgn=0xbc0407a1) returned 0
[0214.110] SelectClipRgn (hdc=0xc90107c3, hrgn=0xc204051e) returned 2
[0214.110] DeleteObject (ho=0xbc0407a1) returned 1
[0214.111] DeleteObject (ho=0xc204051e) returned 1
[0214.111] OffsetViewportOrgEx (in: hdc=0xc90107c3, x=0, y=0, lppt=0x231d48c | out: lppt=0x231d48c) returned 1
[0214.111] IsAppThemed () returned 0x1
[0214.111] GetThemeAppProperties () returned 0x3
[0214.111] GetThemeAppProperties () returned 0x3
[0214.111] GetThemeBackgroundContentRect () returned 0x0
[0214.111] RestoreDC (hdc=0xc90107c3, nSavedDC=-1) returned 1
[0214.111] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107c3) returned 0x0
[0214.111] IsAppThemed () returned 0x1
[0214.111] GetThemeAppProperties () returned 0x3
[0214.111] GetThemeAppProperties () returned 0x3
[0214.111] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0214.111] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0214.111] GetCurrentObject (hdc=0xc90107c3, type=0x1) returned 0xb00017
[0214.111] GetCurrentObject (hdc=0xc90107c3, type=0x2) returned 0x900010
[0214.111] GetCurrentObject (hdc=0xc90107c3, type=0x7) returned 0x1e0507b9
[0214.111] GetCurrentObject (hdc=0xc90107c3, type=0x6) returned 0x8a01c2
[0214.111] SaveDC (hdc=0xc90107c3) returned 1
[0214.111] GetTextAlign (hdc=0xc90107c3) returned 0x0
[0214.111] GetTextColor (hdc=0xc90107c3) returned 0x0
[0214.112] GetCurrentObject (hdc=0xc90107c3, type=0x6) returned 0x8a01c2
[0214.112] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0214.112] SelectObject (hdc=0xc90107c3, h=0x450a0799) returned 0x8a01c2
[0214.112] GetBkMode (hdc=0xc90107c3) returned 2
[0214.112] SetBkMode (hdc=0xc90107c3, mode=1) returned 2
[0214.112] DrawTextExW (in: hdc=0xc90107c3, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x231d82c | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0214.112] DrawTextExW (in: hdc=0xc90107c3, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x231d82c | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0214.112] RestoreDC (hdc=0xc90107c3, nSavedDC=-1) returned 1
[0214.113] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107c3) returned 0x0
[0214.113] GetFocus () returned 0x1302d6
[0214.113] IsAppThemed () returned 0x1
[0214.113] GetThemeAppProperties () returned 0x3
[0214.113] GetThemeAppProperties () returned 0x3
[0214.113] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0214.113] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xc90107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0214.113] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107c3) returned 0x0
[0214.113] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0214.114] SelectObject (hdc=0xc90107c3, h=0x85000f) returned 0x1e0507b9
[0214.114] DeleteDC (hdc=0xc90107c3) returned 1
[0214.114] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0214.114] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0214.114] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.114] IsWindowUnicode (hWnd=0x1302d2) returned 1
[0214.114] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.114] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.114] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.114] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.114] IsWindowUnicode (hWnd=0x1302d2) returned 1
[0214.114] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.115] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.115] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.115] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x2a1, wParam=0x0, lParam=0x60015) returned 0x0
[0214.115] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.115] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.115] WaitMessage () returned 1
[0214.137] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.137] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0214.137] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.137] WaitMessage () returned 1
[0214.139] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.139] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0214.139] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.139] WaitMessage () returned 1
[0214.139] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.139] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0214.140] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.140] WaitMessage () returned 1
[0214.188] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.188] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.188] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.188] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.188] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.189] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.189] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.189] WaitMessage () returned 1
[0214.190] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.190] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.190] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.190] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.190] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.191] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.192] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.192] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.192] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.192] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.192] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.192] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.192] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.192] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.192] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.192] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.193] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.193] WaitMessage () returned 1
[0214.196] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.196] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.196] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.196] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.196] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.197] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.198] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.198] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.198] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.198] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.198] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.198] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.198] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.198] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.198] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.198] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.199] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.199] WaitMessage () returned 1
[0214.199] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.199] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.199] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.199] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.199] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.201] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.201] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.201] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.201] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.201] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.201] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.202] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.202] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.202] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.202] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.202] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.202] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.202] WaitMessage () returned 1
[0214.265] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.265] IsWindowUnicode (hWnd=0x202d0) returned 1
[0214.265] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.265] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.265] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.266] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.266] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0214.266] WaitMessage () returned 1
[0214.271] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.271] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x84, wParam=0x0, lParam=0x18f0356) returned 0x1
[0214.271] IsWindowUnicode (hWnd=0x1302d2) returned 1
[0214.271] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.278] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x84, wParam=0x0, lParam=0x18f0356) returned 0x1
[0214.278] GetDlgItem (hDlg=0x1302c8, nIDDlgItem=0) returned 0x0
[0214.278] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x210, wParam=0x201, lParam=0x120137) returned 0x0
[0214.279] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x21, wParam=0x1302c8, lParam=0x2010001) returned 0x1
[0214.279] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x21, wParam=0x1302c8, lParam=0x2010001) returned 0x1
[0214.279] SetCursor (hCursor=0x10003) returned 0x10003
[0214.279] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.279] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.279] GetKeyState (nVirtKey=1) returned -128
[0214.279] GetKeyState (nVirtKey=2) returned 0
[0214.279] GetKeyState (nVirtKey=4) returned 0
[0214.279] GetKeyState (nVirtKey=5) returned 0
[0214.279] GetKeyState (nVirtKey=6) returned 0
[0214.279] IsWindowVisible (hWnd=0x1302d2) returned 1
[0214.279] IsWindowEnabled (hWnd=0x1302d2) returned 1
[0214.279] SetFocus (hWnd=0x1302d2) returned 0x1302d6
[0214.280] GetFocus () returned 0x1302d2
[0214.280] IsChild (hWndParent=0x1302c8, hWnd=0x1302d2) returned 1
[0214.280] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x8, wParam=0x1302d2, lParam=0x0) returned 0x1
[0214.280] SendMessageW (hWnd=0x1302d6, Msg=0x2111, wParam=0x20002d6, lParam=0x1302d6) returned 0x0
[0214.281] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0214.282] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0214.283] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0214.283] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0214.284] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0214.284] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0214.286] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0214.286] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x7, wParam=0x1302d6, lParam=0x0) returned 0x0
[0214.286] GetStockObject (i=5) returned 0x900015
[0214.286] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0214.286] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0xd, wParam=0x3, lParam=0x89e668) returned 0x2
[0214.286] GetDlgItem (hDlg=0x1302c8, nIDDlgItem=1245906) returned 0x1302d2
[0214.286] SendMessageW (hWnd=0x1302d2, Msg=0x202b, wParam=0x1302d2, lParam=0x53de74) returned 0x0
[0214.286] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x202b, wParam=0x1302d2, lParam=0x53de74) returned 0x0
[0214.286] InvalidateRect (hWnd=0x1302d2, lpRect=0x0, bErase=0) returned 1
[0214.290] GetFocus () returned 0x1302d2
[0214.291] GetFocus () returned 0x1302d2
[0214.291] GetFocus () returned 0x1302d2
[0214.291] GetKeyState (nVirtKey=1) returned -128
[0214.291] GetKeyState (nVirtKey=2) returned 0
[0214.291] GetKeyState (nVirtKey=4) returned 0
[0214.291] GetKeyState (nVirtKey=5) returned 0
[0214.291] GetKeyState (nVirtKey=6) returned 0
[0214.291] GetCapture () returned 0x0
[0214.291] SetCapture (hWnd=0x1302d2) returned 0x0
[0214.291] GetKeyState (nVirtKey=1) returned -128
[0214.291] GetKeyState (nVirtKey=2) returned 0
[0214.291] GetKeyState (nVirtKey=4) returned 0
[0214.291] GetKeyState (nVirtKey=5) returned 0
[0214.291] GetKeyState (nVirtKey=6) returned 0
[0214.291] NotifyWinEvent (event=0x800a, hwnd=0x1302d2, idObject=-4, idChild=0)
[0214.291] InvalidateRect (hWnd=0x1302d2, lpRect=0x53e4c8, bErase=0) returned 1
[0214.292] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.292] IsWindowUnicode (hWnd=0x1302d2) returned 1
[0214.292] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0214.292] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0214.292] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0214.292] MapWindowPoints (in: hWndFrom=0x1302d2, hWndTo=0x0, lpPoints=0x231db0c, cPoints=0x1 | out: lpPoints=0x231db0c) returned 25756481
[0214.292] NotifyWinEvent (event=0x800a, hwnd=0x1302d2, idObject=-4, idChild=0)
[0214.292] InvalidateRect (hWnd=0x1302d2, lpRect=0x53e468, bErase=0) returned 1
[0214.292] UpdateWindow (hWnd=0x1302d2) returned 1
[0214.292] BeginPaint (in: hWnd=0x1302d2, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x60100ce
[0214.292] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0214.293] CreateCompatibleDC (hdc=0x60100ce) returned 0x73010794
[0214.293] SelectObject (hdc=0x73010794, h=0x1e0507b9) returned 0x85000f
[0214.293] GdipCreateFromHDC (hdc=0x73010794, graphics=0x53df98) returned 0x0
[0214.293] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0214.293] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0214.293] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0214.293] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.293] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0214.293] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0214.293] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0214.293] LocalFree (hMem=0x89ea88) returned 0x0
[0214.293] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.293] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0214.293] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.294] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0214.294] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0214.294] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc9f0dbd) returned 0x0
[0214.294] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.294] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0214.294] GetCurrentObject (hdc=0x73010794, type=0x1) returned 0xb00017
[0214.294] GetCurrentObject (hdc=0x73010794, type=0x2) returned 0x900010
[0214.294] GetCurrentObject (hdc=0x73010794, type=0x7) returned 0x1e0507b9
[0214.294] GetCurrentObject (hdc=0x73010794, type=0x6) returned 0x8a01c2
[0214.294] SaveDC (hdc=0x73010794) returned 1
[0214.294] GetNearestColor (hdc=0x73010794, color=0xf0f0f0) returned 0xf0f0f0
[0214.294] GetNearestColor (hdc=0x73010794, color=0xa0a0a0) returned 0xa0a0a0
[0214.294] GetNearestColor (hdc=0x73010794, color=0x696969) returned 0x696969
[0214.294] GetNearestColor (hdc=0x73010794, color=0xa0a0a0) returned 0xa0a0a0
[0214.294] GetNearestColor (hdc=0x73010794, color=0x0) returned 0x0
[0214.295] GetNearestColor (hdc=0x73010794, color=0xffffff) returned 0xffffff
[0214.295] GetNearestColor (hdc=0x73010794, color=0xe5e5e5) returned 0xe5e5e5
[0214.295] GetNearestColor (hdc=0x73010794, color=0xd7d7d7) returned 0xd7d7d7
[0214.295] GetNearestColor (hdc=0x73010794, color=0x0) returned 0x0
[0214.295] RestoreDC (hdc=0x73010794, nSavedDC=-1) returned 1
[0214.295] GdipReleaseDC (graphics=0x5d92c30, hdc=0x73010794) returned 0x0
[0214.295] IsAppThemed () returned 0x1
[0214.295] GetThemeAppProperties () returned 0x3
[0214.295] GetThemeAppProperties () returned 0x3
[0214.295] IsAppThemed () returned 0x1
[0214.295] GetThemeAppProperties () returned 0x3
[0214.295] GetThemeAppProperties () returned 0x3
[0214.295] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0214.295] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x231e280 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0214.296] IsAppThemed () returned 0x1
[0214.296] GetThemeAppProperties () returned 0x3
[0214.296] GetThemeAppProperties () returned 0x3
[0214.296] IsAppThemed () returned 0x1
[0214.296] GetThemeAppProperties () returned 0x3
[0214.296] GetThemeAppProperties () returned 0x3
[0214.296] IsAppThemed () returned 0x1
[0214.296] GetThemeAppProperties () returned 0x3
[0214.296] GetThemeAppProperties () returned 0x3
[0214.296] IsAppThemed () returned 0x1
[0214.296] GetThemeAppProperties () returned 0x3
[0214.296] GetThemeAppProperties () returned 0x3
[0214.296] IsThemePartDefined () returned 0x1
[0214.296] IsAppThemed () returned 0x1
[0214.296] GetThemeAppProperties () returned 0x3
[0214.296] GetThemeAppProperties () returned 0x3
[0214.296] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0214.296] IsAppThemed () returned 0x1
[0214.297] GetThemeAppProperties () returned 0x3
[0214.297] GetThemeAppProperties () returned 0x3
[0214.297] IsAppThemed () returned 0x1
[0214.297] GetThemeAppProperties () returned 0x3
[0214.297] GetThemeAppProperties () returned 0x3
[0214.297] IsThemePartDefined () returned 0x1
[0214.297] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0214.297] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.297] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0214.297] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.297] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0214.297] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0214.297] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0214.297] LocalFree (hMem=0x89ea88) returned 0x0
[0214.297] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0214.297] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0214.297] LocalFree (hMem=0x89ec80) returned 0x0
[0214.297] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.297] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0214.297] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0214.298] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0214.298] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.298] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0214.298] GetCurrentObject (hdc=0x73010794, type=0x1) returned 0xb00017
[0214.298] GetCurrentObject (hdc=0x73010794, type=0x2) returned 0x900010
[0214.298] GetCurrentObject (hdc=0x73010794, type=0x7) returned 0x1e0507b9
[0214.298] GetCurrentObject (hdc=0x73010794, type=0x6) returned 0x8a01c2
[0214.298] SaveDC (hdc=0x73010794) returned 1
[0214.298] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc304051e
[0214.298] GetClipRgn (hdc=0x73010794, hrgn=0xc304051e) returned 0
[0214.298] SelectClipRgn (hdc=0x73010794, hrgn=0xc00407a1) returned 2
[0214.298] DeleteObject (ho=0xc304051e) returned 1
[0214.298] DeleteObject (ho=0xc00407a1) returned 1
[0214.298] OffsetViewportOrgEx (in: hdc=0x73010794, x=0, y=0, lppt=0x231e930 | out: lppt=0x231e930) returned 1
[0214.298] DrawThemeParentBackground () returned 0x0
[0214.299] GetWindowPlacement (in: hWnd=0x1302c8, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0214.299] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0214.299] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0214.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0214.299] GetSystemMetrics (nIndex=42) returned 0
[0214.299] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0214.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0214.299] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0214.299] GetCurrentObject (hdc=0x73010794, type=0x1) returned 0xb00017
[0214.299] GetCurrentObject (hdc=0x73010794, type=0x2) returned 0x900010
[0214.299] GetCurrentObject (hdc=0x73010794, type=0x7) returned 0x1e0507b9
[0214.299] GetCurrentObject (hdc=0x73010794, type=0x6) returned 0x8a01c2
[0214.299] SaveDC (hdc=0x73010794) returned 2
[0214.299] GetNearestColor (hdc=0x73010794, color=0xf0f0f0) returned 0xf0f0f0
[0214.299] CreateSolidBrush (color=0xf0f0f0) returned 0x6610078d
[0214.300] FillRect (hDC=0x73010794, lprc=0x53d760, hbr=0x6610078d) returned 1
[0214.300] DeleteObject (ho=0x6610078d) returned 1
[0214.300] RestoreDC (hdc=0x73010794, nSavedDC=-1) returned 1
[0214.300] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0214.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0214.300] GetSystemMetrics (nIndex=42) returned 0
[0214.300] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0214.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0214.300] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0214.300] GetCurrentObject (hdc=0x73010794, type=0x1) returned 0xb00017
[0214.300] GetCurrentObject (hdc=0x73010794, type=0x2) returned 0x900010
[0214.300] GetCurrentObject (hdc=0x73010794, type=0x7) returned 0x1e0507b9
[0214.300] GetCurrentObject (hdc=0x73010794, type=0x6) returned 0x8a01c2
[0214.300] SaveDC (hdc=0x73010794) returned 2
[0214.300] GetNearestColor (hdc=0x73010794, color=0xf0f0f0) returned 0xf0f0f0
[0214.301] CreateSolidBrush (color=0xf0f0f0) returned 0x6710078d
[0214.301] FillRect (hDC=0x73010794, lprc=0x53d700, hbr=0x6710078d) returned 1
[0214.301] DeleteObject (ho=0x6710078d) returned 1
[0214.301] RestoreDC (hdc=0x73010794, nSavedDC=-1) returned 1
[0214.301] GetWindowTextLengthW (hWnd=0x1302c8) returned 10
[0214.301] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0214.301] GetSystemMetrics (nIndex=42) returned 0
[0214.301] GetWindowTextW (in: hWnd=0x1302c8, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0214.301] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0214.301] RestoreDC (hdc=0x73010794, nSavedDC=-1) returned 1
[0214.301] GdipReleaseDC (graphics=0x5d92c30, hdc=0x73010794) returned 0x0
[0214.301] IsAppThemed () returned 0x1
[0214.301] GetThemeAppProperties () returned 0x3
[0214.301] GetThemeAppProperties () returned 0x3
[0214.301] IsAppThemed () returned 0x1
[0214.302] GetThemeAppProperties () returned 0x3
[0214.302] GetThemeAppProperties () returned 0x3
[0214.302] IsThemePartDefined () returned 0x1
[0214.302] GdipCreateRegion (region=0x53dc80) returned 0x0
[0214.302] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.302] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0214.302] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.302] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0214.302] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0214.302] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0214.302] LocalFree (hMem=0x89ee08) returned 0x0
[0214.302] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0214.302] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0214.302] LocalFree (hMem=0x89ee08) returned 0x0
[0214.302] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.305] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0214.305] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0214.305] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0214.305] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.305] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0214.305] GetCurrentObject (hdc=0x73010794, type=0x1) returned 0xb00017
[0214.305] GetCurrentObject (hdc=0x73010794, type=0x2) returned 0x900010
[0214.305] GetCurrentObject (hdc=0x73010794, type=0x7) returned 0x1e0507b9
[0214.305] GetCurrentObject (hdc=0x73010794, type=0x6) returned 0x8a01c2
[0214.305] SaveDC (hdc=0x73010794) returned 1
[0214.305] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc10407a1
[0214.305] GetClipRgn (hdc=0x73010794, hrgn=0xc10407a1) returned 0
[0214.305] SelectClipRgn (hdc=0x73010794, hrgn=0xc504051e) returned 2
[0214.306] DeleteObject (ho=0xc10407a1) returned 1
[0214.306] DeleteObject (ho=0xc504051e) returned 1
[0214.306] OffsetViewportOrgEx (in: hdc=0x73010794, x=0, y=0, lppt=0x231f1b8 | out: lppt=0x231f1b8) returned 1
[0214.306] IsAppThemed () returned 0x1
[0214.306] GetThemeAppProperties () returned 0x3
[0214.306] GetThemeAppProperties () returned 0x3
[0214.306] DrawThemeBackground () returned 0x0
[0214.306] RestoreDC (hdc=0x73010794, nSavedDC=-1) returned 1
[0214.306] GdipReleaseDC (graphics=0x5d92c30, hdc=0x73010794) returned 0x0
[0214.306] GdipCreateRegion (region=0x53dc84) returned 0x0
[0214.306] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.306] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0214.306] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.306] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0214.306] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0214.306] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0214.307] LocalFree (hMem=0x89ee08) returned 0x0
[0214.307] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0214.307] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0214.307] LocalFree (hMem=0x89ee08) returned 0x0
[0214.307] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.307] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0214.307] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0214.307] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0214.307] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.307] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0214.307] GetCurrentObject (hdc=0x73010794, type=0x1) returned 0xb00017
[0214.307] GetCurrentObject (hdc=0x73010794, type=0x2) returned 0x900010
[0214.307] GetCurrentObject (hdc=0x73010794, type=0x7) returned 0x1e0507b9
[0214.307] GetCurrentObject (hdc=0x73010794, type=0x6) returned 0x8a01c2
[0214.307] SaveDC (hdc=0x73010794) returned 1
[0214.307] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc604051e
[0214.307] GetClipRgn (hdc=0x73010794, hrgn=0xc604051e) returned 0
[0214.308] SelectClipRgn (hdc=0x73010794, hrgn=0xc20407a1) returned 2
[0214.308] DeleteObject (ho=0xc604051e) returned 1
[0214.308] DeleteObject (ho=0xc20407a1) returned 1
[0214.308] OffsetViewportOrgEx (in: hdc=0x73010794, x=0, y=0, lppt=0x231f48c | out: lppt=0x231f48c) returned 1
[0214.308] IsAppThemed () returned 0x1
[0214.308] GetThemeAppProperties () returned 0x3
[0214.308] GetThemeAppProperties () returned 0x3
[0214.308] GetThemeBackgroundContentRect () returned 0x0
[0214.308] RestoreDC (hdc=0x73010794, nSavedDC=-1) returned 1
[0214.308] GdipReleaseDC (graphics=0x5d92c30, hdc=0x73010794) returned 0x0
[0214.308] IsAppThemed () returned 0x1
[0214.308] GetThemeAppProperties () returned 0x3
[0214.308] GetThemeAppProperties () returned 0x3
[0214.308] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0214.308] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0214.308] GetCurrentObject (hdc=0x73010794, type=0x1) returned 0xb00017
[0214.308] GetCurrentObject (hdc=0x73010794, type=0x2) returned 0x900010
[0214.308] GetCurrentObject (hdc=0x73010794, type=0x7) returned 0x1e0507b9
[0214.309] GetCurrentObject (hdc=0x73010794, type=0x6) returned 0x8a01c2
[0214.309] SaveDC (hdc=0x73010794) returned 1
[0214.309] GetTextAlign (hdc=0x73010794) returned 0x0
[0214.309] GetTextColor (hdc=0x73010794) returned 0x0
[0214.309] GetCurrentObject (hdc=0x73010794, type=0x6) returned 0x8a01c2
[0214.309] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0214.309] SelectObject (hdc=0x73010794, h=0x730a066d) returned 0x8a01c2
[0214.309] GetBkMode (hdc=0x73010794) returned 2
[0214.309] SetBkMode (hdc=0x73010794, mode=1) returned 2
[0214.309] DrawTextExW (in: hdc=0x73010794, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x231f82c | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0214.310] DrawTextExW (in: hdc=0x73010794, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x231f82c | out: lpchText="OK", lprc=0x53dd80) returned 13
[0214.310] RestoreDC (hdc=0x73010794, nSavedDC=-1) returned 1
[0214.310] GdipReleaseDC (graphics=0x5d92c30, hdc=0x73010794) returned 0x0
[0214.310] GetFocus () returned 0x1302d2
[0214.310] IsAppThemed () returned 0x1
[0214.310] GetThemeAppProperties () returned 0x3
[0214.310] GetThemeAppProperties () returned 0x3
[0214.310] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0214.310] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x73010794, x1=0, y1=0, rop=0xcc0020) returned 1
[0214.310] GdipReleaseDC (graphics=0x5d92c30, hdc=0x73010794) returned 0x0
[0214.310] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0214.311] SelectObject (hdc=0x73010794, h=0x85000f) returned 0x1e0507b9
[0214.311] DeleteDC (hdc=0x73010794) returned 1
[0214.311] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0214.311] EndPaint (hWnd=0x1302d2, lpPaint=0x53df7c) returned 1
[0214.311] MapWindowPoints (in: hWndFrom=0x1302d2, hWndTo=0x0, lpPoints=0x231f928, cPoints=0x1 | out: lpPoints=0x231f928) returned 25756481
[0214.311] WindowFromPoint (Point=0x356) returned 0x1302d2
[0214.311] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x84, wParam=0x0, lParam=0x18f0356) returned 0x1
[0214.311] NotifyWinEvent (event=0x800a, hwnd=0x1302d2, idObject=-4, idChild=0)
[0214.311] NotifyWinEvent (event=0x800c, hwnd=0x1302d2, idObject=-4, idChild=0)
[0214.311] GetWindowTextLengthW (hWnd=0x1302d6) returned 0
[0214.311] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0214.311] GetSystemMetrics (nIndex=42) returned 0
[0214.311] GetWindowTextW (in: hWnd=0x1302d6, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0214.311] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0214.312] SendMessageW (hWnd=0x1302c8, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0214.312] GetCapture () returned 0x1302d2
[0214.312] ReleaseCapture () returned 1
[0214.312] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0214.312] PeekMessageW (lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0)
[0214.312] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x84, wParam=0x0, lParam=0x18f0356) returned 0x1
[0214.313] IsWindow (hWnd=0x70036) returned 1
[0214.313] EnableWindow (hWnd=0x70036, bEnable=1)
[0214.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0214.318] IsWindow (hWnd=0x70036) returned 1
[0214.318] SetActiveWindow (hWnd=0x70036)
[0214.318] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x86, wParam=0x0, lParam=0x70036)
[0214.320] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0214.320] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0214.321] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0214.323] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0214.324] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0214.324] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0214.324] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1302c8) returned 0x1
[0214.327] GetFocus () returned 0x1302d2
[0214.327] SetFocus (hWnd=0x202c6)
[0214.328] GetFocus () returned 0x202c6
[0214.328] IsChild (hWndParent=0x1302c8, hWnd=0x202c6) returned 0
[0214.328] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0214.328] GetCapture () returned 0x0
[0214.328] InvalidateRect (hWnd=0x1302d2, lpRect=0x0, bErase=0) returned 1
[0214.329] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0214.331] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f)
[0214.332] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0214.332] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0214.333] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0214.333] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x1302d2, lParam=0x0)
[0214.333] GetStockObject (i=5) returned 0x900015
[0214.339] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0214.339] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0214.339] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0214.344] IsWindowVisible (hWnd=0x70036) returned 1
[0214.344] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0214.344] GetFocus () returned 0x202c6
[0214.345] IsChild (hWndParent=0x1302c8, hWnd=0x202c6) returned 0
[0214.345] ShowWindow (hWnd=0x1302c8, nCmdShow=0)
[0214.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0214.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0214.348] GetWindowPlacement (in: hWnd=0x1302c8, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0214.348] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0214.348] GetClientRect (in: hWnd=0x1302c8, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0214.348] GetWindowRect (in: hWnd=0x1302c8, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0214.349] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0214.349] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0214.360] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0214.360] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0214.361] GetWindowTextLengthW (hWnd=0x1302c8)
[0214.361] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0214.361] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0214.361] SendMessageW (hWnd=0x1302d6, Msg=0xb8, wParam=0x0, lParam=0x0)
[0214.362] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0214.362] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0214.362] GetWindowThreadProcessId (in: hWnd=0x702c0, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0214.362] GetWindow (hWnd=0x702c0, uCmd=0x5) returned 0x0
[0214.362] GetWindowLongW (hWnd=0x702c0, nIndex=-20) returned 65792
[0214.362] DestroyWindow (hWnd=0x702c0)
[0214.362] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702c0, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0214.362] GetWindowTextLengthW (hWnd=0x702c0)
[0214.362] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0214.362] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702c0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0214.363] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702c0, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0214.364] GetWindowTextLengthW (hWnd=0x802be)
[0214.364] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0214.364] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0214.364] InvalidateRect (hWnd=0x1302d2, lpRect=0x0, bErase=0) returned 1
[0214.364] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0214.364] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0214.368] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1302d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0214.370] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x802be, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0214.371] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1302d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0214.405] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x16013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0214.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0214.409] GetProcessWindowStation () returned 0x13c
[0214.409] GetActiveWindow () returned 0x70036
[0214.410] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0214.410] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0214.410] GetCurrentThreadId () returned 0x11d0
[0214.410] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3b5e, lParam=0x0) returned 1
[0214.411] IsWindowVisible (hWnd=0x70036) returned 1
[0214.411] IsWindowEnabled (hWnd=0x70036) returned 1
[0214.411] IsWindowVisible (hWnd=0x602b6) returned 0
[0214.411] IsWindowVisible (hWnd=0x901f8) returned 0
[0214.411] IsWindowVisible (hWnd=0x202d0) returned 0
[0214.411] IsWindowVisible (hWnd=0x202d4) returned 0
[0214.411] GetActiveWindow () returned 0x70036
[0214.411] GetFocus () returned 0x202c6
[0214.411] IsWindow (hWnd=0x70036) returned 1
[0214.411] EnableWindow (hWnd=0x70036, bEnable=0)
[0214.411] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0214.422] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0214.422] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0214.424] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0214.436] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1402c8) returned 0x1
[0214.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0214.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0214.512] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x17013e, lParam=0x0) returned 0x0
[0214.512] GetCapture () returned 0x0
[0214.512] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0214.513] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0214.515] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0214.515] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0214.519] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x60100ce
[0214.519] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0214.519] CreateCompatibleDC (hdc=0x60100ce) returned 0xd00107c5
[0214.519] SelectObject (hdc=0xd00107c5, h=0x1e0507b9) returned 0x85000f
[0214.519] GdipCreateFromHDC (hdc=0xd00107c5, graphics=0x53e108) returned 0x0
[0214.519] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0214.520] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0214.520] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0214.520] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.520] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0214.520] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0214.520] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0214.520] LocalFree (hMem=0x89eac0) returned 0x0
[0214.520] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.520] GdipCreateRegion (region=0x53e150) returned 0x0
[0214.520] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.520] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0214.521] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0214.521] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc9d0dbd) returned 0x0
[0214.521] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.521] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0214.521] GetCurrentObject (hdc=0xd00107c5, type=0x1) returned 0xb00017
[0214.521] GetCurrentObject (hdc=0xd00107c5, type=0x2) returned 0x900010
[0214.521] GetCurrentObject (hdc=0xd00107c5, type=0x7) returned 0x1e0507b9
[0214.521] GetCurrentObject (hdc=0xd00107c5, type=0x6) returned 0x8a01c2
[0214.521] SaveDC (hdc=0xd00107c5) returned 1
[0214.535] GetNearestColor (hdc=0xd00107c5, color=0xff) returned 0xff
[0214.535] GetNearestColor (hdc=0xd00107c5, color=0x55) returned 0x55
[0214.536] GetNearestColor (hdc=0xd00107c5, color=0x0) returned 0x0
[0214.536] GetNearestColor (hdc=0xd00107c5, color=0x55) returned 0x55
[0214.536] GetNearestColor (hdc=0xd00107c5, color=0x0) returned 0x0
[0214.536] GetNearestColor (hdc=0xd00107c5, color=0x8080ff) returned 0x8080ff
[0214.536] GetNearestColor (hdc=0xd00107c5, color=0x7373e5) returned 0x7373e5
[0214.536] GetNearestColor (hdc=0xd00107c5, color=0xe5) returned 0xe5
[0214.536] GetNearestColor (hdc=0xd00107c5, color=0x0) returned 0x0
[0214.536] RestoreDC (hdc=0xd00107c5, nSavedDC=-1) returned 1
[0214.536] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107c5) returned 0x0
[0214.536] IsAppThemed () returned 0x1
[0214.536] GetThemeAppProperties () returned 0x3
[0214.536] GetThemeAppProperties () returned 0x3
[0214.536] IsAppThemed () returned 0x1
[0214.537] GetThemeAppProperties () returned 0x3
[0214.537] GetThemeAppProperties () returned 0x3
[0214.537] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0214.537] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2320c20 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0214.537] IsAppThemed () returned 0x1
[0214.537] GetThemeAppProperties () returned 0x3
[0214.538] GetThemeAppProperties () returned 0x3
[0214.538] IsAppThemed () returned 0x1
[0214.538] GetThemeAppProperties () returned 0x3
[0214.538] GetThemeAppProperties () returned 0x3
[0214.538] GetFocus () returned 0x17013e
[0214.538] IsAppThemed () returned 0x1
[0214.538] GetThemeAppProperties () returned 0x3
[0214.538] GetThemeAppProperties () returned 0x3
[0214.538] IsAppThemed () returned 0x1
[0214.538] GetThemeAppProperties () returned 0x3
[0214.538] GetThemeAppProperties () returned 0x3
[0214.538] IsThemePartDefined () returned 0x1
[0214.538] IsAppThemed () returned 0x1
[0214.538] GetThemeAppProperties () returned 0x3
[0214.538] GetThemeAppProperties () returned 0x3
[0214.538] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0214.538] IsAppThemed () returned 0x1
[0214.538] GetThemeAppProperties () returned 0x3
[0214.538] GetThemeAppProperties () returned 0x3
[0214.538] IsAppThemed () returned 0x1
[0214.538] GetThemeAppProperties () returned 0x3
[0214.538] GetThemeAppProperties () returned 0x3
[0214.539] IsThemePartDefined () returned 0x1
[0214.539] GdipCreateRegion (region=0x53de78) returned 0x0
[0214.539] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.539] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0214.539] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.539] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0214.539] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0214.539] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0214.539] LocalFree (hMem=0x89ee08) returned 0x0
[0214.539] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0214.539] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0214.539] LocalFree (hMem=0x89eac0) returned 0x0
[0214.539] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.539] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0214.539] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0214.539] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0214.539] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.539] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0214.540] GetCurrentObject (hdc=0xd00107c5, type=0x1) returned 0xb00017
[0214.540] GetCurrentObject (hdc=0xd00107c5, type=0x2) returned 0x900010
[0214.540] GetCurrentObject (hdc=0xd00107c5, type=0x7) returned 0x1e0507b9
[0214.540] GetCurrentObject (hdc=0xd00107c5, type=0x6) returned 0x8a01c2
[0214.540] SaveDC (hdc=0xd00107c5) returned 1
[0214.540] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc30407a1
[0214.540] GetClipRgn (hdc=0xd00107c5, hrgn=0xc30407a1) returned 0
[0214.540] SelectClipRgn (hdc=0xd00107c5, hrgn=0xcc04051e) returned 2
[0214.540] DeleteObject (ho=0xc30407a1) returned 1
[0214.540] DeleteObject (ho=0xcc04051e) returned 1
[0214.540] OffsetViewportOrgEx (in: hdc=0xd00107c5, x=0, y=0, lppt=0x23212d0 | out: lppt=0x23212d0) returned 1
[0214.540] DrawThemeParentBackground () returned 0x0
[0214.540] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0214.541] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0214.541] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0214.541] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0214.541] GetSystemMetrics (nIndex=42) returned 0
[0214.541] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0214.541] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0214.541] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0214.541] GetCurrentObject (hdc=0xd00107c5, type=0x1) returned 0xb00017
[0214.541] GetCurrentObject (hdc=0xd00107c5, type=0x2) returned 0x900010
[0214.541] GetCurrentObject (hdc=0xd00107c5, type=0x7) returned 0x1e0507b9
[0214.541] GetCurrentObject (hdc=0xd00107c5, type=0x6) returned 0x8a01c2
[0214.541] SaveDC (hdc=0xd00107c5) returned 2
[0214.541] GetNearestColor (hdc=0xd00107c5, color=0xff) returned 0xff
[0214.541] CreateSolidBrush (color=0xff) returned 0x6810078d
[0214.541] FillRect (hDC=0xd00107c5, lprc=0x53d8d8, hbr=0x6810078d) returned 1
[0214.542] DeleteObject (ho=0x6810078d) returned 1
[0214.542] RestoreDC (hdc=0xd00107c5, nSavedDC=-1) returned 1
[0214.542] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0214.542] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0214.542] GetSystemMetrics (nIndex=42) returned 0
[0214.542] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0214.542] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0214.542] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0214.542] GetCurrentObject (hdc=0xd00107c5, type=0x1) returned 0xb00017
[0214.542] GetCurrentObject (hdc=0xd00107c5, type=0x2) returned 0x900010
[0214.542] GetCurrentObject (hdc=0xd00107c5, type=0x7) returned 0x1e0507b9
[0214.542] GetCurrentObject (hdc=0xd00107c5, type=0x6) returned 0x8a01c2
[0214.542] SaveDC (hdc=0xd00107c5) returned 2
[0214.542] GetNearestColor (hdc=0xd00107c5, color=0xff) returned 0xff
[0214.542] CreateSolidBrush (color=0xff) returned 0x6910078d
[0214.542] FillRect (hDC=0xd00107c5, lprc=0x53d878, hbr=0x6910078d) returned 1
[0214.543] DeleteObject (ho=0x6910078d) returned 1
[0214.543] RestoreDC (hdc=0xd00107c5, nSavedDC=-1) returned 1
[0214.543] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0214.543] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0214.543] GetSystemMetrics (nIndex=42) returned 0
[0214.543] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0214.543] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0214.543] RestoreDC (hdc=0xd00107c5, nSavedDC=-1) returned 1
[0214.543] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107c5) returned 0x0
[0214.543] IsAppThemed () returned 0x1
[0214.544] GetThemeAppProperties () returned 0x3
[0214.544] GetThemeAppProperties () returned 0x3
[0214.544] IsAppThemed () returned 0x1
[0214.544] GetThemeAppProperties () returned 0x3
[0214.544] GetThemeAppProperties () returned 0x3
[0214.544] IsThemePartDefined () returned 0x1
[0214.544] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0214.544] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.544] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0214.544] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.544] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0214.544] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0214.544] LocalFree (hMem=0x89ee08) returned 0x0
[0214.544] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0214.544] LocalFree (hMem=0x89eac0) returned 0x0
[0214.545] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.545] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0214.545] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0214.545] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0214.545] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.545] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0214.545] GetCurrentObject (hdc=0xd00107c5, type=0x1) returned 0xb00017
[0214.545] GetCurrentObject (hdc=0xd00107c5, type=0x2) returned 0x900010
[0214.545] GetCurrentObject (hdc=0xd00107c5, type=0x7) returned 0x1e0507b9
[0214.545] GetCurrentObject (hdc=0xd00107c5, type=0x6) returned 0x8a01c2
[0214.545] SaveDC (hdc=0xd00107c5) returned 1
[0214.545] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcd04051e
[0214.545] GetClipRgn (hdc=0xd00107c5, hrgn=0xcd04051e) returned 0
[0214.545] SelectClipRgn (hdc=0xd00107c5, hrgn=0xc50407a1) returned 2
[0214.545] DeleteObject (ho=0xcd04051e) returned 1
[0214.545] DeleteObject (ho=0xc50407a1) returned 1
[0214.545] OffsetViewportOrgEx (in: hdc=0xd00107c5, x=0, y=0, lppt=0x2321b34 | out: lppt=0x2321b34) returned 1
[0214.545] IsAppThemed () returned 0x1
[0214.545] GetThemeAppProperties () returned 0x3
[0214.545] GetThemeAppProperties () returned 0x3
[0214.546] DrawThemeBackground () returned 0x0
[0214.546] RestoreDC (hdc=0xd00107c5, nSavedDC=-1) returned 1
[0214.546] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107c5) returned 0x0
[0214.546] GdipCreateRegion (region=0x53de00) returned 0x0
[0214.546] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.546] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0214.546] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.546] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0214.546] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0214.546] LocalFree (hMem=0x89eac0) returned 0x0
[0214.546] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0214.546] LocalFree (hMem=0x89eac0) returned 0x0
[0214.546] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.546] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0214.546] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0214.546] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0214.546] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.546] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0214.547] GetCurrentObject (hdc=0xd00107c5, type=0x1) returned 0xb00017
[0214.547] GetCurrentObject (hdc=0xd00107c5, type=0x2) returned 0x900010
[0214.547] GetCurrentObject (hdc=0xd00107c5, type=0x7) returned 0x1e0507b9
[0214.547] GetCurrentObject (hdc=0xd00107c5, type=0x6) returned 0x8a01c2
[0214.547] SaveDC (hdc=0xd00107c5) returned 1
[0214.547] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc60407a1
[0214.547] GetClipRgn (hdc=0xd00107c5, hrgn=0xc60407a1) returned 0
[0214.547] SelectClipRgn (hdc=0xd00107c5, hrgn=0xce04051e) returned 2
[0214.547] DeleteObject (ho=0xc60407a1) returned 1
[0214.547] DeleteObject (ho=0xce04051e) returned 1
[0214.547] OffsetViewportOrgEx (in: hdc=0xd00107c5, x=0, y=0, lppt=0x2321e08 | out: lppt=0x2321e08) returned 1
[0214.547] IsAppThemed () returned 0x1
[0214.547] GetThemeAppProperties () returned 0x3
[0214.547] GetThemeAppProperties () returned 0x3
[0214.547] GetThemeBackgroundContentRect () returned 0x0
[0214.547] RestoreDC (hdc=0xd00107c5, nSavedDC=-1) returned 1
[0214.547] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107c5) returned 0x0
[0214.547] IsAppThemed () returned 0x1
[0214.548] GetThemeAppProperties () returned 0x3
[0214.548] GetThemeAppProperties () returned 0x3
[0214.548] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0214.548] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0214.548] GetCurrentObject (hdc=0xd00107c5, type=0x1) returned 0xb00017
[0214.548] GetCurrentObject (hdc=0xd00107c5, type=0x2) returned 0x900010
[0214.548] GetCurrentObject (hdc=0xd00107c5, type=0x7) returned 0x1e0507b9
[0214.548] GetCurrentObject (hdc=0xd00107c5, type=0x6) returned 0x8a01c2
[0214.548] SaveDC (hdc=0xd00107c5) returned 1
[0214.548] GetTextAlign (hdc=0xd00107c5) returned 0x0
[0214.548] GetTextColor (hdc=0xd00107c5) returned 0x0
[0214.548] GetCurrentObject (hdc=0xd00107c5, type=0x6) returned 0x8a01c2
[0214.548] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0214.548] SelectObject (hdc=0xd00107c5, h=0x450a0799) returned 0x8a01c2
[0214.548] GetBkMode (hdc=0xd00107c5) returned 2
[0214.548] SetBkMode (hdc=0xd00107c5, mode=1) returned 2
[0214.549] DrawTextExW (in: hdc=0xd00107c5, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x23221a8 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0214.549] DrawTextExW (in: hdc=0xd00107c5, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x23221a8 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0214.549] RestoreDC (hdc=0xd00107c5, nSavedDC=-1) returned 1
[0214.549] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107c5) returned 0x0
[0214.549] GetFocus () returned 0x17013e
[0214.549] IsAppThemed () returned 0x1
[0214.549] GetThemeAppProperties () returned 0x3
[0214.549] GetThemeAppProperties () returned 0x3
[0214.549] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0214.550] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xd00107c5, x1=0, y1=0, rop=0xcc0020) returned 1
[0214.550] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107c5) returned 0x0
[0214.550] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0214.550] SelectObject (hdc=0xd00107c5, h=0x85000f) returned 0x1e0507b9
[0214.550] DeleteDC (hdc=0xd00107c5) returned 1
[0214.550] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0214.550] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0214.920] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0214.920] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0214.920] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1402c8) returned 0x1
[0214.923] GetFocus () returned 0x1402c8
[0214.923] GetAncestor (hwnd=0x1402c8, gaFlags=0x1) returned 0x10010
[0214.923] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0214.923] SetFocus (hWnd=0x202c6) returned 0x0
[0214.925] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0214.927] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0214.927] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0214.927] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0214.927] GetFocus () returned 0x70036
[0214.928] SetFocus (hWnd=0x202c6) returned 0x0
[0214.932] IsWindow (hWnd=0x70036) returned 1
[0214.933] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0214.933] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0214.933] IsWindow (hWnd=0x70036) returned 1
[0214.933] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0214.933] IsWindow (hWnd=0x202c6) returned 1
[0214.933] SetFocus (hWnd=0x202c6) returned 0x70036
[0214.933] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0214.934] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0214.935] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0214.937] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0214.937] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0214.937] GetStockObject (i=5) returned 0x900015
[0214.937] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0214.937] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8daa18) returned 0x7
[0214.937] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0214.937] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0214.937] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0214.937] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0214.938] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0214.938] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0214.938] GetFocus () returned 0x202c6
[0214.938] GetCapture () returned 0x0
[0214.939] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.939] IsWindowUnicode (hWnd=0x202c6) returned 1
[0214.939] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.939] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.939] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.939] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.940] IsWindowUnicode (hWnd=0x202c6) returned 1
[0214.940] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.940] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.940] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.940] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0214.940] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0214.940] CreateCompatibleDC (hdc=0x60100ce) returned 0x6d010788
[0214.940] SelectObject (hdc=0x6d010788, h=0x1e0507b9) returned 0x85000f
[0214.940] GdipCreateFromHDC (hdc=0x6d010788, graphics=0x53e958) returned 0x0
[0214.941] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0214.941] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0214.941] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0214.941] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.941] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0214.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0214.941] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0214.941] LocalFree (hMem=0x89ec80) returned 0x0
[0214.941] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.941] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0214.941] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.941] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0214.941] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0214.941] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc9b0dbd) returned 0x0
[0214.941] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.941] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0214.941] GetCurrentObject (hdc=0x6d010788, type=0x1) returned 0xb00017
[0214.941] GetCurrentObject (hdc=0x6d010788, type=0x2) returned 0x900010
[0214.941] GetCurrentObject (hdc=0x6d010788, type=0x7) returned 0x1e0507b9
[0214.941] GetCurrentObject (hdc=0x6d010788, type=0x6) returned 0x8a01c2
[0214.941] SaveDC (hdc=0x6d010788) returned 1
[0214.942] GetNearestColor (hdc=0x6d010788, color=0xff) returned 0xff
[0214.942] GetNearestColor (hdc=0x6d010788, color=0x55) returned 0x55
[0214.942] GetNearestColor (hdc=0x6d010788, color=0x0) returned 0x0
[0214.942] GetNearestColor (hdc=0x6d010788, color=0x55) returned 0x55
[0214.942] GetNearestColor (hdc=0x6d010788, color=0x0) returned 0x0
[0214.942] GetNearestColor (hdc=0x6d010788, color=0x8080ff) returned 0x8080ff
[0214.942] GetNearestColor (hdc=0x6d010788, color=0x7373e5) returned 0x7373e5
[0214.942] GetNearestColor (hdc=0x6d010788, color=0xe5) returned 0xe5
[0214.942] GetNearestColor (hdc=0x6d010788, color=0x0) returned 0x0
[0214.942] RestoreDC (hdc=0x6d010788, nSavedDC=-1) returned 1
[0214.942] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6d010788) returned 0x0
[0214.942] IsAppThemed () returned 0x1
[0214.942] GetThemeAppProperties () returned 0x3
[0214.942] GetThemeAppProperties () returned 0x3
[0214.942] IsAppThemed () returned 0x1
[0214.942] GetThemeAppProperties () returned 0x3
[0214.942] GetThemeAppProperties () returned 0x3
[0214.942] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2322a04 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0214.943] IsAppThemed () returned 0x1
[0214.943] GetThemeAppProperties () returned 0x3
[0214.943] GetThemeAppProperties () returned 0x3
[0214.943] IsAppThemed () returned 0x1
[0214.948] GetThemeAppProperties () returned 0x3
[0214.948] GetThemeAppProperties () returned 0x3
[0214.948] GetFocus () returned 0x202c6
[0214.948] IsAppThemed () returned 0x1
[0214.948] GetThemeAppProperties () returned 0x3
[0214.948] GetThemeAppProperties () returned 0x3
[0214.948] IsAppThemed () returned 0x1
[0214.948] GetThemeAppProperties () returned 0x3
[0214.948] GetThemeAppProperties () returned 0x3
[0214.948] IsThemePartDefined () returned 0x1
[0214.948] IsAppThemed () returned 0x1
[0214.949] GetThemeAppProperties () returned 0x3
[0214.949] GetThemeAppProperties () returned 0x3
[0214.949] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0214.949] IsAppThemed () returned 0x1
[0214.949] GetThemeAppProperties () returned 0x3
[0214.949] GetThemeAppProperties () returned 0x3
[0214.949] IsAppThemed () returned 0x1
[0214.949] GetThemeAppProperties () returned 0x3
[0214.949] GetThemeAppProperties () returned 0x3
[0214.949] IsThemePartDefined () returned 0x1
[0214.949] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0214.949] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.949] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0214.949] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.949] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0214.949] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0214.949] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0214.949] LocalFree (hMem=0x89ea88) returned 0x0
[0214.949] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0214.949] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0214.949] LocalFree (hMem=0x89ec80) returned 0x0
[0214.949] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.949] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0214.949] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0214.949] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0214.950] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.950] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0214.950] GetCurrentObject (hdc=0x6d010788, type=0x1) returned 0xb00017
[0214.950] GetCurrentObject (hdc=0x6d010788, type=0x2) returned 0x900010
[0214.950] GetCurrentObject (hdc=0x6d010788, type=0x7) returned 0x1e0507b9
[0214.950] GetCurrentObject (hdc=0x6d010788, type=0x6) returned 0x8a01c2
[0214.950] SaveDC (hdc=0x6d010788) returned 1
[0214.950] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3604053e
[0214.950] GetClipRgn (hdc=0x6d010788, hrgn=0x3604053e) returned 0
[0214.950] SelectClipRgn (hdc=0x6d010788, hrgn=0xdc04051e) returned 2
[0214.950] DeleteObject (ho=0x3604053e) returned 1
[0214.950] DeleteObject (ho=0xdc04051e) returned 1
[0214.950] OffsetViewportOrgEx (in: hdc=0x6d010788, x=0, y=0, lppt=0x23230b4 | out: lppt=0x23230b4) returned 1
[0214.950] DrawThemeParentBackground () returned 0x0
[0214.950] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0214.950] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0214.950] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0214.950] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0214.951] GetSystemMetrics (nIndex=42) returned 0
[0214.951] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0214.951] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0214.951] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0214.951] GetCurrentObject (hdc=0x6d010788, type=0x1) returned 0xb00017
[0214.951] GetCurrentObject (hdc=0x6d010788, type=0x2) returned 0x900010
[0214.951] GetCurrentObject (hdc=0x6d010788, type=0x7) returned 0x1e0507b9
[0214.951] GetCurrentObject (hdc=0x6d010788, type=0x6) returned 0x8a01c2
[0214.951] SaveDC (hdc=0x6d010788) returned 2
[0214.951] GetNearestColor (hdc=0x6d010788, color=0xff) returned 0xff
[0214.951] CreateSolidBrush (color=0xff) returned 0x6b10078d
[0214.951] FillRect (hDC=0x6d010788, lprc=0x53e128, hbr=0x6b10078d) returned 1
[0214.951] DeleteObject (ho=0x6b10078d) returned 1
[0214.951] RestoreDC (hdc=0x6d010788, nSavedDC=-1) returned 1
[0214.951] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0214.951] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0214.951] GetSystemMetrics (nIndex=42) returned 0
[0214.951] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0214.951] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0214.951] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0214.951] GetCurrentObject (hdc=0x6d010788, type=0x1) returned 0xb00017
[0214.952] GetCurrentObject (hdc=0x6d010788, type=0x2) returned 0x900010
[0214.952] GetCurrentObject (hdc=0x6d010788, type=0x7) returned 0x1e0507b9
[0214.952] GetCurrentObject (hdc=0x6d010788, type=0x6) returned 0x8a01c2
[0214.952] SaveDC (hdc=0x6d010788) returned 2
[0214.952] GetNearestColor (hdc=0x6d010788, color=0xff) returned 0xff
[0214.952] CreateSolidBrush (color=0xff) returned 0x6c10078d
[0214.952] FillRect (hDC=0x6d010788, lprc=0x53e0c8, hbr=0x6c10078d) returned 1
[0214.952] DeleteObject (ho=0x6c10078d) returned 1
[0214.952] RestoreDC (hdc=0x6d010788, nSavedDC=-1) returned 1
[0214.952] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0214.952] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0214.952] GetSystemMetrics (nIndex=42) returned 0
[0214.952] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0214.952] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0214.952] RestoreDC (hdc=0x6d010788, nSavedDC=-1) returned 1
[0214.952] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6d010788) returned 0x0
[0214.952] IsAppThemed () returned 0x1
[0214.952] GetThemeAppProperties () returned 0x3
[0214.952] GetThemeAppProperties () returned 0x3
[0214.953] IsAppThemed () returned 0x1
[0214.953] GetThemeAppProperties () returned 0x3
[0214.953] GetThemeAppProperties () returned 0x3
[0214.953] IsThemePartDefined () returned 0x1
[0214.953] GdipCreateRegion (region=0x53e64c) returned 0x0
[0214.953] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.953] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0214.953] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0214.953] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0214.953] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0214.953] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0214.953] LocalFree (hMem=0x89ea88) returned 0x0
[0214.953] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0214.953] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0214.953] LocalFree (hMem=0x89ec80) returned 0x0
[0214.953] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0214.953] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0214.953] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0214.953] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0214.953] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.953] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0214.953] GetCurrentObject (hdc=0x6d010788, type=0x1) returned 0xb00017
[0214.953] GetCurrentObject (hdc=0x6d010788, type=0x2) returned 0x900010
[0214.953] GetCurrentObject (hdc=0x6d010788, type=0x7) returned 0x1e0507b9
[0214.954] GetCurrentObject (hdc=0x6d010788, type=0x6) returned 0x8a01c2
[0214.954] SaveDC (hdc=0x6d010788) returned 1
[0214.954] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdd04051e
[0214.954] GetClipRgn (hdc=0x6d010788, hrgn=0xdd04051e) returned 0
[0214.954] SelectClipRgn (hdc=0x6d010788, hrgn=0x3804053e) returned 2
[0214.954] DeleteObject (ho=0xdd04051e) returned 1
[0214.954] DeleteObject (ho=0x3804053e) returned 1
[0214.954] OffsetViewportOrgEx (in: hdc=0x6d010788, x=0, y=0, lppt=0x2323918 | out: lppt=0x2323918) returned 1
[0214.954] IsAppThemed () returned 0x1
[0214.954] GetThemeAppProperties () returned 0x3
[0214.954] GetThemeAppProperties () returned 0x3
[0214.954] DrawThemeBackground () returned 0x0
[0214.954] RestoreDC (hdc=0x6d010788, nSavedDC=-1) returned 1
[0214.954] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6d010788) returned 0x0
[0214.954] GdipCreateRegion (region=0x53e650) returned 0x0
[0214.954] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0214.954] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0214.954] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0214.954] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0214.954] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0214.955] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0214.955] LocalFree (hMem=0x89ee40) returned 0x0
[0214.955] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0214.955] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0214.955] LocalFree (hMem=0x89ec80) returned 0x0
[0214.955] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0214.955] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0214.955] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0214.955] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0214.955] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0214.955] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0214.955] GetCurrentObject (hdc=0x6d010788, type=0x1) returned 0xb00017
[0214.955] GetCurrentObject (hdc=0x6d010788, type=0x2) returned 0x900010
[0214.955] GetCurrentObject (hdc=0x6d010788, type=0x7) returned 0x1e0507b9
[0214.955] GetCurrentObject (hdc=0x6d010788, type=0x6) returned 0x8a01c2
[0214.955] SaveDC (hdc=0x6d010788) returned 1
[0214.955] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3904053e
[0214.955] GetClipRgn (hdc=0x6d010788, hrgn=0x3904053e) returned 0
[0214.955] SelectClipRgn (hdc=0x6d010788, hrgn=0xde04051e) returned 2
[0214.955] DeleteObject (ho=0x3904053e) returned 1
[0214.955] DeleteObject (ho=0xde04051e) returned 1
[0214.956] OffsetViewportOrgEx (in: hdc=0x6d010788, x=0, y=0, lppt=0x2323bec | out: lppt=0x2323bec) returned 1
[0214.956] IsAppThemed () returned 0x1
[0214.956] GetThemeAppProperties () returned 0x3
[0214.956] GetThemeAppProperties () returned 0x3
[0214.956] GetThemeBackgroundContentRect () returned 0x0
[0214.956] RestoreDC (hdc=0x6d010788, nSavedDC=-1) returned 1
[0214.956] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6d010788) returned 0x0
[0214.956] IsAppThemed () returned 0x1
[0214.956] GetThemeAppProperties () returned 0x3
[0214.956] GetThemeAppProperties () returned 0x3
[0214.956] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0214.956] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0214.956] GetCurrentObject (hdc=0x6d010788, type=0x1) returned 0xb00017
[0214.956] GetCurrentObject (hdc=0x6d010788, type=0x2) returned 0x900010
[0214.956] GetCurrentObject (hdc=0x6d010788, type=0x7) returned 0x1e0507b9
[0214.956] GetCurrentObject (hdc=0x6d010788, type=0x6) returned 0x8a01c2
[0214.956] SaveDC (hdc=0x6d010788) returned 1
[0214.956] GetTextAlign (hdc=0x6d010788) returned 0x0
[0214.956] GetTextColor (hdc=0x6d010788) returned 0x0
[0214.956] GetCurrentObject (hdc=0x6d010788, type=0x6) returned 0x8a01c2
[0214.956] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0214.957] SelectObject (hdc=0x6d010788, h=0x450a0799) returned 0x8a01c2
[0214.957] GetBkMode (hdc=0x6d010788) returned 2
[0214.957] SetBkMode (hdc=0x6d010788, mode=1) returned 2
[0214.957] DrawTextExW (in: hdc=0x6d010788, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2323f8c | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0214.957] DrawTextExW (in: hdc=0x6d010788, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2323f8c | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0214.957] RestoreDC (hdc=0x6d010788, nSavedDC=-1) returned 1
[0214.957] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6d010788) returned 0x0
[0214.957] GetFocus () returned 0x202c6
[0214.957] IsAppThemed () returned 0x1
[0214.957] GetThemeAppProperties () returned 0x3
[0214.957] GetThemeAppProperties () returned 0x3
[0214.957] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0214.958] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x6d010788, x1=0, y1=0, rop=0xcc0020) returned 1
[0214.958] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6d010788) returned 0x0
[0214.958] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0214.958] SelectObject (hdc=0x6d010788, h=0x85000f) returned 0x1e0507b9
[0214.958] DeleteDC (hdc=0x6d010788) returned 1
[0214.958] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0214.958] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0214.958] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.958] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.958] WaitMessage () returned 1
[0214.969] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.969] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.969] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.969] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.969] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.970] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.970] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.970] WaitMessage () returned 1
[0214.975] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.975] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.975] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.975] DispatchMessageA (lpMsg=0x53eef8) returned 0x7eeb
[0214.975] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.975] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.975] WaitMessage () returned 1
[0214.981] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.981] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.981] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.982] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.982] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.982] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.982] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.982] WaitMessage () returned 1
[0214.984] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.984] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.984] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.984] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.984] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.985] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.985] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.985] WaitMessage () returned 1
[0214.985] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.985] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.985] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.985] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.985] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.987] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.987] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.987] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.987] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.987] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.987] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.987] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.987] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.987] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.987] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.987] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.988] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.988] WaitMessage () returned 1
[0214.988] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.988] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.988] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.988] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.988] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.989] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.990] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.990] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.990] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.990] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.993] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.993] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.993] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.993] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.993] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.993] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.993] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.993] WaitMessage () returned 1
[0214.995] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.995] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.995] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.995] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.995] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.996] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.997] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.997] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.997] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.997] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.997] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.997] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.997] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.997] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.997] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0214.997] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.998] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0214.998] WaitMessage () returned 1
[0214.998] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.998] IsWindowUnicode (hWnd=0x102dc) returned 1
[0214.998] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0214.998] TranslateMessage (lpMsg=0x53eef8) returned 0
[0214.998] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0215.000] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0215.000] IsWindowUnicode (hWnd=0x102dc) returned 1
[0215.000] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0215.000] TranslateMessage (lpMsg=0x53eef8) returned 0
[0215.000] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0215.000] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0215.000] IsWindowUnicode (hWnd=0x102dc) returned 1
[0215.000] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0215.001] TranslateMessage (lpMsg=0x53eef8) returned 0
[0215.001] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0215.001] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0215.001] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0215.001] WaitMessage () returned 1
[0215.240] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0215.240] IsWindowUnicode (hWnd=0x202d0) returned 1
[0215.240] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0215.241] TranslateMessage (lpMsg=0x53eef8) returned 0
[0215.241] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0215.241] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0215.241] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0215.241] WaitMessage () returned 1
[0215.991] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0215.991] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0215.991] TranslateMessage (lpMsg=0x53eef8) returned 0
[0215.991] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0215.991] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0215.991] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0215.991] WaitMessage () returned 1
[0216.541] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0216.541] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930218) returned 0x1
[0216.541] IsWindowUnicode (hWnd=0x202c6) returned 1
[0216.541] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0216.541] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930218) returned 0x1
[0216.541] SetCursor (hCursor=0x10003) returned 0x10003
[0216.541] TranslateMessage (lpMsg=0x53eef8) returned 0
[0216.541] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0216.541] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0216.542] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0216.542] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0216.542] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0216.542] GetKeyState (nVirtKey=1) returned 1
[0216.542] GetKeyState (nVirtKey=2) returned 0
[0216.542] GetKeyState (nVirtKey=4) returned 0
[0216.542] GetKeyState (nVirtKey=5) returned 0
[0216.542] GetKeyState (nVirtKey=6) returned 0
[0216.542] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0216.542] IsWindowUnicode (hWnd=0x202c6) returned 1
[0216.542] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0216.542] TranslateMessage (lpMsg=0x53eef8) returned 0
[0216.542] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0216.542] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0216.542] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0216.543] CreateCompatibleDC (hdc=0x60100ce) returned 0x280107c0
[0216.543] SelectObject (hdc=0x280107c0, h=0x1e0507b9) returned 0x85000f
[0216.543] GdipCreateFromHDC (hdc=0x280107c0, graphics=0x53e958) returned 0x0
[0216.543] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0216.543] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0216.543] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0216.543] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0216.543] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0216.543] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0216.543] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0216.543] LocalFree (hMem=0x89eee8) returned 0x0
[0216.543] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0216.543] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0216.544] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0216.544] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0216.544] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0216.544] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc990dbd) returned 0x0
[0216.544] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0216.544] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0216.544] GetCurrentObject (hdc=0x280107c0, type=0x1) returned 0xb00017
[0216.544] GetCurrentObject (hdc=0x280107c0, type=0x2) returned 0x900010
[0216.544] GetCurrentObject (hdc=0x280107c0, type=0x7) returned 0x1e0507b9
[0216.544] GetCurrentObject (hdc=0x280107c0, type=0x6) returned 0x8a01c2
[0216.544] SaveDC (hdc=0x280107c0) returned 1
[0216.544] GetNearestColor (hdc=0x280107c0, color=0xff) returned 0xff
[0216.544] GetNearestColor (hdc=0x280107c0, color=0x55) returned 0x55
[0216.544] GetNearestColor (hdc=0x280107c0, color=0x0) returned 0x0
[0216.544] GetNearestColor (hdc=0x280107c0, color=0x55) returned 0x55
[0216.544] GetNearestColor (hdc=0x280107c0, color=0x0) returned 0x0
[0216.545] GetNearestColor (hdc=0x280107c0, color=0x8080ff) returned 0x8080ff
[0216.545] GetNearestColor (hdc=0x280107c0, color=0x7373e5) returned 0x7373e5
[0216.545] GetNearestColor (hdc=0x280107c0, color=0xe5) returned 0xe5
[0216.545] GetNearestColor (hdc=0x280107c0, color=0x0) returned 0x0
[0216.545] RestoreDC (hdc=0x280107c0, nSavedDC=-1) returned 1
[0216.545] GdipReleaseDC (graphics=0x5d92c30, hdc=0x280107c0) returned 0x0
[0216.545] IsAppThemed () returned 0x1
[0216.545] GetThemeAppProperties () returned 0x3
[0216.545] GetThemeAppProperties () returned 0x3
[0216.545] IsAppThemed () returned 0x1
[0216.545] GetThemeAppProperties () returned 0x3
[0216.545] GetThemeAppProperties () returned 0x3
[0216.545] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x2324920 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0216.546] IsAppThemed () returned 0x1
[0216.546] GetThemeAppProperties () returned 0x3
[0216.546] GetThemeAppProperties () returned 0x3
[0216.546] IsAppThemed () returned 0x1
[0216.546] GetThemeAppProperties () returned 0x3
[0216.546] GetThemeAppProperties () returned 0x3
[0216.546] IsAppThemed () returned 0x1
[0216.546] GetThemeAppProperties () returned 0x3
[0216.546] GetThemeAppProperties () returned 0x3
[0216.546] IsAppThemed () returned 0x1
[0216.546] GetThemeAppProperties () returned 0x3
[0216.546] GetThemeAppProperties () returned 0x3
[0216.546] IsThemePartDefined () returned 0x1
[0216.546] IsAppThemed () returned 0x1
[0216.546] GetThemeAppProperties () returned 0x3
[0216.546] GetThemeAppProperties () returned 0x3
[0216.546] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0216.546] IsAppThemed () returned 0x1
[0216.546] GetThemeAppProperties () returned 0x3
[0216.546] GetThemeAppProperties () returned 0x3
[0216.546] IsAppThemed () returned 0x1
[0216.546] GetThemeAppProperties () returned 0x3
[0216.547] GetThemeAppProperties () returned 0x3
[0216.547] IsThemePartDefined () returned 0x1
[0216.547] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0216.547] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0216.547] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0216.547] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0216.547] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0216.547] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0216.547] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0216.547] LocalFree (hMem=0x89ea88) returned 0x0
[0216.547] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0216.547] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0216.547] LocalFree (hMem=0x89ea88) returned 0x0
[0216.547] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0216.547] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0216.547] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0216.547] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0216.547] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0216.547] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0216.547] GetCurrentObject (hdc=0x280107c0, type=0x1) returned 0xb00017
[0216.547] GetCurrentObject (hdc=0x280107c0, type=0x2) returned 0x900010
[0216.547] GetCurrentObject (hdc=0x280107c0, type=0x7) returned 0x1e0507b9
[0216.548] GetCurrentObject (hdc=0x280107c0, type=0x6) returned 0x8a01c2
[0216.548] SaveDC (hdc=0x280107c0) returned 1
[0216.548] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdf04051e
[0216.548] GetClipRgn (hdc=0x280107c0, hrgn=0xdf04051e) returned 0
[0216.548] SelectClipRgn (hdc=0x280107c0, hrgn=0x3d04053e) returned 2
[0216.548] DeleteObject (ho=0xdf04051e) returned 1
[0216.548] DeleteObject (ho=0x3d04053e) returned 1
[0216.548] OffsetViewportOrgEx (in: hdc=0x280107c0, x=0, y=0, lppt=0x2324fd0 | out: lppt=0x2324fd0) returned 1
[0216.548] DrawThemeParentBackground () returned 0x0
[0216.548] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0216.548] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0216.548] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0216.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0216.548] GetSystemMetrics (nIndex=42) returned 0
[0216.548] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0216.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0216.549] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0216.549] GetCurrentObject (hdc=0x280107c0, type=0x1) returned 0xb00017
[0216.549] GetCurrentObject (hdc=0x280107c0, type=0x2) returned 0x900010
[0216.549] GetCurrentObject (hdc=0x280107c0, type=0x7) returned 0x1e0507b9
[0216.549] GetCurrentObject (hdc=0x280107c0, type=0x6) returned 0x8a01c2
[0216.549] SaveDC (hdc=0x280107c0) returned 2
[0216.549] GetNearestColor (hdc=0x280107c0, color=0xff) returned 0xff
[0216.549] CreateSolidBrush (color=0xff) returned 0x6d10078d
[0216.549] FillRect (hDC=0x280107c0, lprc=0x53e120, hbr=0x6d10078d) returned 1
[0216.549] DeleteObject (ho=0x6d10078d) returned 1
[0216.549] RestoreDC (hdc=0x280107c0, nSavedDC=-1) returned 1
[0216.549] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0216.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0216.549] GetSystemMetrics (nIndex=42) returned 0
[0216.549] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0216.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0216.549] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0216.549] GetCurrentObject (hdc=0x280107c0, type=0x1) returned 0xb00017
[0216.549] GetCurrentObject (hdc=0x280107c0, type=0x2) returned 0x900010
[0216.550] GetCurrentObject (hdc=0x280107c0, type=0x7) returned 0x1e0507b9
[0216.550] GetCurrentObject (hdc=0x280107c0, type=0x6) returned 0x8a01c2
[0216.550] SaveDC (hdc=0x280107c0) returned 2
[0216.550] GetNearestColor (hdc=0x280107c0, color=0xff) returned 0xff
[0216.550] CreateSolidBrush (color=0xff) returned 0x6e10078d
[0216.550] FillRect (hDC=0x280107c0, lprc=0x53e0c0, hbr=0x6e10078d) returned 1
[0216.550] DeleteObject (ho=0x6e10078d) returned 1
[0216.550] RestoreDC (hdc=0x280107c0, nSavedDC=-1) returned 1
[0216.550] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0216.550] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0216.550] GetSystemMetrics (nIndex=42) returned 0
[0216.550] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0216.550] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0216.550] RestoreDC (hdc=0x280107c0, nSavedDC=-1) returned 1
[0216.550] GdipReleaseDC (graphics=0x5d92c30, hdc=0x280107c0) returned 0x0
[0216.550] IsAppThemed () returned 0x1
[0216.551] GetThemeAppProperties () returned 0x3
[0216.551] GetThemeAppProperties () returned 0x3
[0216.551] IsAppThemed () returned 0x1
[0216.551] GetThemeAppProperties () returned 0x3
[0216.551] GetThemeAppProperties () returned 0x3
[0216.551] IsThemePartDefined () returned 0x1
[0216.551] GdipCreateRegion (region=0x53e640) returned 0x0
[0216.551] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0216.551] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0216.551] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0216.551] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0216.551] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0216.551] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0216.551] LocalFree (hMem=0x89ee08) returned 0x0
[0216.551] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0216.551] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0216.551] LocalFree (hMem=0x89ea88) returned 0x0
[0216.551] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0216.551] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0216.551] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0216.551] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0216.551] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0216.551] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0216.552] GetCurrentObject (hdc=0x280107c0, type=0x1) returned 0xb00017
[0216.552] GetCurrentObject (hdc=0x280107c0, type=0x2) returned 0x900010
[0216.552] GetCurrentObject (hdc=0x280107c0, type=0x7) returned 0x1e0507b9
[0216.552] GetCurrentObject (hdc=0x280107c0, type=0x6) returned 0x8a01c2
[0216.552] SaveDC (hdc=0x280107c0) returned 1
[0216.552] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3e04053e
[0216.552] GetClipRgn (hdc=0x280107c0, hrgn=0x3e04053e) returned 0
[0216.552] SelectClipRgn (hdc=0x280107c0, hrgn=0xe104051e) returned 2
[0216.552] DeleteObject (ho=0x3e04053e) returned 1
[0216.552] DeleteObject (ho=0xe104051e) returned 1
[0216.552] OffsetViewportOrgEx (in: hdc=0x280107c0, x=0, y=0, lppt=0x2325834 | out: lppt=0x2325834) returned 1
[0216.552] IsAppThemed () returned 0x1
[0216.552] GetThemeAppProperties () returned 0x3
[0216.552] GetThemeAppProperties () returned 0x3
[0216.552] DrawThemeBackground () returned 0x0
[0216.552] RestoreDC (hdc=0x280107c0, nSavedDC=-1) returned 1
[0216.552] GdipReleaseDC (graphics=0x5d92c30, hdc=0x280107c0) returned 0x0
[0216.553] GdipCreateRegion (region=0x53e644) returned 0x0
[0216.553] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0216.553] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0216.553] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0216.553] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0216.553] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0216.553] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0216.553] LocalFree (hMem=0x89ee08) returned 0x0
[0216.553] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0216.553] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0216.553] LocalFree (hMem=0x89ea88) returned 0x0
[0216.553] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0216.553] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0216.553] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0216.553] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0216.553] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0216.553] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0216.553] GetCurrentObject (hdc=0x280107c0, type=0x1) returned 0xb00017
[0216.553] GetCurrentObject (hdc=0x280107c0, type=0x2) returned 0x900010
[0216.553] GetCurrentObject (hdc=0x280107c0, type=0x7) returned 0x1e0507b9
[0216.553] GetCurrentObject (hdc=0x280107c0, type=0x6) returned 0x8a01c2
[0216.553] SaveDC (hdc=0x280107c0) returned 1
[0216.554] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe204051e
[0216.554] GetClipRgn (hdc=0x280107c0, hrgn=0xe204051e) returned 0
[0216.554] SelectClipRgn (hdc=0x280107c0, hrgn=0x3f04053e) returned 2
[0216.554] DeleteObject (ho=0xe204051e) returned 1
[0216.554] DeleteObject (ho=0x3f04053e) returned 1
[0216.554] OffsetViewportOrgEx (in: hdc=0x280107c0, x=0, y=0, lppt=0x2325b08 | out: lppt=0x2325b08) returned 1
[0216.554] IsAppThemed () returned 0x1
[0216.554] GetThemeAppProperties () returned 0x3
[0216.554] GetThemeAppProperties () returned 0x3
[0216.554] GetThemeBackgroundContentRect () returned 0x0
[0216.554] RestoreDC (hdc=0x280107c0, nSavedDC=-1) returned 1
[0216.554] GdipReleaseDC (graphics=0x5d92c30, hdc=0x280107c0) returned 0x0
[0216.554] IsAppThemed () returned 0x1
[0216.554] GetThemeAppProperties () returned 0x3
[0216.554] GetThemeAppProperties () returned 0x3
[0216.554] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0216.554] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0216.554] GetCurrentObject (hdc=0x280107c0, type=0x1) returned 0xb00017
[0216.554] GetCurrentObject (hdc=0x280107c0, type=0x2) returned 0x900010
[0216.554] GetCurrentObject (hdc=0x280107c0, type=0x7) returned 0x1e0507b9
[0216.554] GetCurrentObject (hdc=0x280107c0, type=0x6) returned 0x8a01c2
[0216.554] SaveDC (hdc=0x280107c0) returned 1
[0216.555] GetTextAlign (hdc=0x280107c0) returned 0x0
[0216.555] GetTextColor (hdc=0x280107c0) returned 0x0
[0216.555] GetCurrentObject (hdc=0x280107c0, type=0x6) returned 0x8a01c2
[0216.555] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0216.555] SelectObject (hdc=0x280107c0, h=0x450a0799) returned 0x8a01c2
[0216.555] GetBkMode (hdc=0x280107c0) returned 2
[0216.555] SetBkMode (hdc=0x280107c0, mode=1) returned 2
[0216.555] DrawTextExW (in: hdc=0x280107c0, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2325ea8 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0216.555] DrawTextExW (in: hdc=0x280107c0, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2325ea8 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0216.556] RestoreDC (hdc=0x280107c0, nSavedDC=-1) returned 1
[0216.556] GdipReleaseDC (graphics=0x5d92c30, hdc=0x280107c0) returned 0x0
[0216.556] GetFocus () returned 0x202c6
[0216.556] IsAppThemed () returned 0x1
[0216.556] GetThemeAppProperties () returned 0x3
[0216.556] GetThemeAppProperties () returned 0x3
[0216.556] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0216.556] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x280107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0216.556] GdipReleaseDC (graphics=0x5d92c30, hdc=0x280107c0) returned 0x0
[0216.556] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0216.557] SelectObject (hdc=0x280107c0, h=0x85000f) returned 0x1e0507b9
[0216.557] DeleteDC (hdc=0x280107c0) returned 1
[0216.557] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0216.557] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0216.557] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0216.557] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0216.557] WaitMessage () returned 1
[0216.647] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0216.647] IsWindowUnicode (hWnd=0x202c6) returned 1
[0216.647] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0216.647] TranslateMessage (lpMsg=0x53eef8) returned 0
[0216.647] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0216.647] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0216.647] IsWindowUnicode (hWnd=0x202c6) returned 1
[0216.647] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0216.647] TranslateMessage (lpMsg=0x53eef8) returned 0
[0216.647] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0216.647] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xb0028) returned 0x0
[0216.647] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0216.647] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0216.647] WaitMessage () returned 1
[0216.774] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0216.774] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930218) returned 0x1
[0216.774] IsWindowUnicode (hWnd=0x202c6) returned 1
[0216.774] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0216.775] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930218) returned 0x1
[0216.775] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0216.775] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12601c2) returned 0x0
[0216.775] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0216.775] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0216.775] SetCursor (hCursor=0x10003) returned 0x10003
[0216.775] TranslateMessage (lpMsg=0x53eef8) returned 0
[0216.775] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0216.775] GetKeyState (nVirtKey=1) returned -128
[0216.775] GetKeyState (nVirtKey=2) returned 0
[0216.775] GetKeyState (nVirtKey=4) returned 0
[0216.775] GetKeyState (nVirtKey=5) returned 0
[0216.775] GetKeyState (nVirtKey=6) returned 0
[0216.775] IsWindowVisible (hWnd=0x202c6) returned 1
[0216.775] IsWindowEnabled (hWnd=0x202c6) returned 1
[0216.775] SetFocus (hWnd=0x202c6) returned 0x202c6
[0216.775] GetFocus () returned 0x202c6
[0216.776] GetFocus () returned 0x202c6
[0216.776] GetFocus () returned 0x202c6
[0216.776] GetKeyState (nVirtKey=1) returned -128
[0216.776] GetKeyState (nVirtKey=2) returned 0
[0216.776] GetKeyState (nVirtKey=4) returned 0
[0216.776] GetKeyState (nVirtKey=5) returned 0
[0216.776] GetKeyState (nVirtKey=6) returned 0
[0216.776] GetCapture () returned 0x0
[0216.776] SetCapture (hWnd=0x202c6) returned 0x0
[0216.776] GetKeyState (nVirtKey=1) returned -128
[0216.776] GetKeyState (nVirtKey=2) returned 0
[0216.776] GetKeyState (nVirtKey=4) returned 0
[0216.776] GetKeyState (nVirtKey=5) returned 0
[0216.776] GetKeyState (nVirtKey=6) returned 0
[0216.776] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0216.776] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0216.776] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0216.776] IsWindowUnicode (hWnd=0x202c6) returned 1
[0216.776] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0216.776] TranslateMessage (lpMsg=0x53eef8) returned 0
[0216.776] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0216.776] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x232602c, cPoints=0x1 | out: lpPoints=0x232602c) returned 25690608
[0216.776] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0216.777] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0216.777] UpdateWindow (hWnd=0x202c6) returned 1
[0216.777] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x60100ce
[0216.777] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0216.777] CreateCompatibleDC (hdc=0x60100ce) returned 0x290107c0
[0216.777] SelectObject (hdc=0x290107c0, h=0x1e0507b9) returned 0x85000f
[0216.777] GdipCreateFromHDC (hdc=0x290107c0, graphics=0x53e5f0) returned 0x0
[0216.777] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0216.777] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0216.777] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0216.777] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0216.777] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0216.777] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0216.777] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0216.777] LocalFree (hMem=0x89ee08) returned 0x0
[0216.778] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0216.778] GdipCreateRegion (region=0x53e638) returned 0x0
[0216.778] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0216.778] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0216.778] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0216.778] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc970dbd) returned 0x0
[0216.778] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0216.778] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0216.778] GetCurrentObject (hdc=0x290107c0, type=0x1) returned 0xb00017
[0216.778] GetCurrentObject (hdc=0x290107c0, type=0x2) returned 0x900010
[0216.778] GetCurrentObject (hdc=0x290107c0, type=0x7) returned 0x1e0507b9
[0216.778] GetCurrentObject (hdc=0x290107c0, type=0x6) returned 0x8a01c2
[0216.778] SaveDC (hdc=0x290107c0) returned 1
[0216.778] GetNearestColor (hdc=0x290107c0, color=0xff) returned 0xff
[0216.778] GetNearestColor (hdc=0x290107c0, color=0x55) returned 0x55
[0216.778] GetNearestColor (hdc=0x290107c0, color=0x0) returned 0x0
[0216.778] GetNearestColor (hdc=0x290107c0, color=0x55) returned 0x55
[0216.778] GetNearestColor (hdc=0x290107c0, color=0x0) returned 0x0
[0216.778] GetNearestColor (hdc=0x290107c0, color=0x8080ff) returned 0x8080ff
[0216.779] GetNearestColor (hdc=0x290107c0, color=0x7373e5) returned 0x7373e5
[0216.779] GetNearestColor (hdc=0x290107c0, color=0xe5) returned 0xe5
[0216.779] GetNearestColor (hdc=0x290107c0, color=0x0) returned 0x0
[0216.779] RestoreDC (hdc=0x290107c0, nSavedDC=-1) returned 1
[0216.779] GdipReleaseDC (graphics=0x5d92c30, hdc=0x290107c0) returned 0x0
[0216.779] IsAppThemed () returned 0x1
[0216.779] GetThemeAppProperties () returned 0x3
[0216.779] GetThemeAppProperties () returned 0x3
[0216.779] IsAppThemed () returned 0x1
[0216.779] GetThemeAppProperties () returned 0x3
[0216.779] GetThemeAppProperties () returned 0x3
[0216.779] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x2326748 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0216.779] IsAppThemed () returned 0x1
[0216.779] GetThemeAppProperties () returned 0x3
[0216.779] GetThemeAppProperties () returned 0x3
[0216.779] IsAppThemed () returned 0x1
[0216.780] GetThemeAppProperties () returned 0x3
[0216.780] GetThemeAppProperties () returned 0x3
[0216.780] IsAppThemed () returned 0x1
[0216.780] GetThemeAppProperties () returned 0x3
[0216.780] GetThemeAppProperties () returned 0x3
[0216.780] IsAppThemed () returned 0x1
[0216.780] GetThemeAppProperties () returned 0x3
[0216.780] GetThemeAppProperties () returned 0x3
[0216.780] IsThemePartDefined () returned 0x1
[0216.780] IsAppThemed () returned 0x1
[0216.780] GetThemeAppProperties () returned 0x3
[0216.780] GetThemeAppProperties () returned 0x3
[0216.780] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0216.780] IsAppThemed () returned 0x1
[0216.780] GetThemeAppProperties () returned 0x3
[0216.780] GetThemeAppProperties () returned 0x3
[0216.780] IsAppThemed () returned 0x1
[0216.780] GetThemeAppProperties () returned 0x3
[0216.780] GetThemeAppProperties () returned 0x3
[0216.780] IsThemePartDefined () returned 0x1
[0216.780] GdipCreateRegion (region=0x53e354) returned 0x0
[0216.780] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0216.780] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0216.780] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0216.780] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0216.780] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0216.781] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0216.781] LocalFree (hMem=0x89ec80) returned 0x0
[0216.781] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0216.781] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0216.781] LocalFree (hMem=0x89ea88) returned 0x0
[0216.781] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0216.781] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0216.781] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0216.781] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0216.781] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0216.781] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0216.781] GetCurrentObject (hdc=0x290107c0, type=0x1) returned 0xb00017
[0216.781] GetCurrentObject (hdc=0x290107c0, type=0x2) returned 0x900010
[0216.781] GetCurrentObject (hdc=0x290107c0, type=0x7) returned 0x1e0507b9
[0216.781] GetCurrentObject (hdc=0x290107c0, type=0x6) returned 0x8a01c2
[0216.781] SaveDC (hdc=0x290107c0) returned 1
[0216.781] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4004053e
[0216.781] GetClipRgn (hdc=0x290107c0, hrgn=0x4004053e) returned 0
[0216.782] SelectClipRgn (hdc=0x290107c0, hrgn=0xe604051e) returned 2
[0216.782] DeleteObject (ho=0x4004053e) returned 1
[0216.782] DeleteObject (ho=0xe604051e) returned 1
[0216.782] OffsetViewportOrgEx (in: hdc=0x290107c0, x=0, y=0, lppt=0x2326df8 | out: lppt=0x2326df8) returned 1
[0216.782] DrawThemeParentBackground () returned 0x0
[0216.782] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0216.782] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0216.782] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0216.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0216.782] GetSystemMetrics (nIndex=42) returned 0
[0216.782] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0216.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0216.782] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0216.782] GetCurrentObject (hdc=0x290107c0, type=0x1) returned 0xb00017
[0216.782] GetCurrentObject (hdc=0x290107c0, type=0x2) returned 0x900010
[0216.782] GetCurrentObject (hdc=0x290107c0, type=0x7) returned 0x1e0507b9
[0216.783] GetCurrentObject (hdc=0x290107c0, type=0x6) returned 0x8a01c2
[0216.783] SaveDC (hdc=0x290107c0) returned 2
[0216.783] GetNearestColor (hdc=0x290107c0, color=0xff) returned 0xff
[0216.783] CreateSolidBrush (color=0xff) returned 0x6f10078d
[0216.783] FillRect (hDC=0x290107c0, lprc=0x53ddb8, hbr=0x6f10078d) returned 1
[0216.783] DeleteObject (ho=0x6f10078d) returned 1
[0216.783] RestoreDC (hdc=0x290107c0, nSavedDC=-1) returned 1
[0216.783] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0216.783] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0216.783] GetSystemMetrics (nIndex=42) returned 0
[0216.783] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0216.783] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0216.783] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0216.783] GetCurrentObject (hdc=0x290107c0, type=0x1) returned 0xb00017
[0216.783] GetCurrentObject (hdc=0x290107c0, type=0x2) returned 0x900010
[0216.783] GetCurrentObject (hdc=0x290107c0, type=0x7) returned 0x1e0507b9
[0216.784] GetCurrentObject (hdc=0x290107c0, type=0x6) returned 0x8a01c2
[0216.784] SaveDC (hdc=0x290107c0) returned 2
[0216.784] GetNearestColor (hdc=0x290107c0, color=0xff) returned 0xff
[0216.784] CreateSolidBrush (color=0xff) returned 0x7010078d
[0216.784] FillRect (hDC=0x290107c0, lprc=0x53dd58, hbr=0x7010078d) returned 1
[0216.784] DeleteObject (ho=0x7010078d) returned 1
[0216.784] RestoreDC (hdc=0x290107c0, nSavedDC=-1) returned 1
[0216.784] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0216.784] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0216.784] GetSystemMetrics (nIndex=42) returned 0
[0216.784] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0216.784] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0216.784] RestoreDC (hdc=0x290107c0, nSavedDC=-1) returned 1
[0216.785] GdipReleaseDC (graphics=0x5d92c30, hdc=0x290107c0) returned 0x0
[0216.785] IsAppThemed () returned 0x1
[0216.785] GetThemeAppProperties () returned 0x3
[0216.785] GetThemeAppProperties () returned 0x3
[0216.785] IsAppThemed () returned 0x1
[0216.785] GetThemeAppProperties () returned 0x3
[0216.785] GetThemeAppProperties () returned 0x3
[0216.785] IsThemePartDefined () returned 0x1
[0216.785] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0216.785] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0216.785] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0216.785] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0216.785] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0216.785] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0216.785] LocalFree (hMem=0x89ea88) returned 0x0
[0216.785] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0216.785] LocalFree (hMem=0x89ea88) returned 0x0
[0216.785] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0216.786] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0216.786] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0216.786] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0216.786] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0216.786] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0216.786] GetCurrentObject (hdc=0x290107c0, type=0x1) returned 0xb00017
[0216.786] GetCurrentObject (hdc=0x290107c0, type=0x2) returned 0x900010
[0216.786] GetCurrentObject (hdc=0x290107c0, type=0x7) returned 0x1e0507b9
[0216.786] GetCurrentObject (hdc=0x290107c0, type=0x6) returned 0x8a01c2
[0216.786] SaveDC (hdc=0x290107c0) returned 1
[0216.786] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe704051e
[0216.786] GetClipRgn (hdc=0x290107c0, hrgn=0xe704051e) returned 0
[0216.786] SelectClipRgn (hdc=0x290107c0, hrgn=0x4204053e) returned 2
[0216.786] DeleteObject (ho=0xe704051e) returned 1
[0216.786] DeleteObject (ho=0x4204053e) returned 1
[0216.786] OffsetViewportOrgEx (in: hdc=0x290107c0, x=0, y=0, lppt=0x232765c | out: lppt=0x232765c) returned 1
[0216.786] IsAppThemed () returned 0x1
[0216.786] GetThemeAppProperties () returned 0x3
[0216.786] GetThemeAppProperties () returned 0x3
[0216.786] DrawThemeBackground () returned 0x0
[0216.787] RestoreDC (hdc=0x290107c0, nSavedDC=-1) returned 1
[0216.787] GdipReleaseDC (graphics=0x5d92c30, hdc=0x290107c0) returned 0x0
[0216.787] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0216.787] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0216.787] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0216.787] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0216.787] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0216.787] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0216.787] LocalFree (hMem=0x89eee8) returned 0x0
[0216.787] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0216.787] LocalFree (hMem=0x89ec80) returned 0x0
[0216.787] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0216.787] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0216.787] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0216.788] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0216.788] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0216.788] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0216.788] GetCurrentObject (hdc=0x290107c0, type=0x1) returned 0xb00017
[0216.788] GetCurrentObject (hdc=0x290107c0, type=0x2) returned 0x900010
[0216.788] GetCurrentObject (hdc=0x290107c0, type=0x7) returned 0x1e0507b9
[0216.788] GetCurrentObject (hdc=0x290107c0, type=0x6) returned 0x8a01c2
[0216.788] SaveDC (hdc=0x290107c0) returned 1
[0216.788] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4304053e
[0216.788] GetClipRgn (hdc=0x290107c0, hrgn=0x4304053e) returned 0
[0216.788] SelectClipRgn (hdc=0x290107c0, hrgn=0xe804051e) returned 2
[0216.788] DeleteObject (ho=0x4304053e) returned 1
[0216.788] DeleteObject (ho=0xe804051e) returned 1
[0216.788] OffsetViewportOrgEx (in: hdc=0x290107c0, x=0, y=0, lppt=0x2327930 | out: lppt=0x2327930) returned 1
[0216.788] IsAppThemed () returned 0x1
[0216.788] GetThemeAppProperties () returned 0x3
[0216.788] GetThemeAppProperties () returned 0x3
[0216.789] GetThemeBackgroundContentRect () returned 0x0
[0216.789] RestoreDC (hdc=0x290107c0, nSavedDC=-1) returned 1
[0216.789] GdipReleaseDC (graphics=0x5d92c30, hdc=0x290107c0) returned 0x0
[0216.789] IsAppThemed () returned 0x1
[0216.789] GetThemeAppProperties () returned 0x3
[0216.789] GetThemeAppProperties () returned 0x3
[0216.789] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0216.789] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0216.789] GetCurrentObject (hdc=0x290107c0, type=0x1) returned 0xb00017
[0216.789] GetCurrentObject (hdc=0x290107c0, type=0x2) returned 0x900010
[0216.789] GetCurrentObject (hdc=0x290107c0, type=0x7) returned 0x1e0507b9
[0216.789] GetCurrentObject (hdc=0x290107c0, type=0x6) returned 0x8a01c2
[0216.789] SaveDC (hdc=0x290107c0) returned 1
[0216.789] GetTextAlign (hdc=0x290107c0) returned 0x0
[0216.789] GetTextColor (hdc=0x290107c0) returned 0x0
[0216.789] GetCurrentObject (hdc=0x290107c0, type=0x6) returned 0x8a01c2
[0216.789] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0216.790] SelectObject (hdc=0x290107c0, h=0x450a0799) returned 0x8a01c2
[0216.790] GetBkMode (hdc=0x290107c0) returned 2
[0216.790] SetBkMode (hdc=0x290107c0, mode=1) returned 2
[0216.790] DrawTextExW (in: hdc=0x290107c0, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x2327cd0 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0216.790] DrawTextExW (in: hdc=0x290107c0, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x2327cd0 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0216.790] RestoreDC (hdc=0x290107c0, nSavedDC=-1) returned 1
[0216.790] GdipReleaseDC (graphics=0x5d92c30, hdc=0x290107c0) returned 0x0
[0216.790] GetFocus () returned 0x202c6
[0216.790] IsAppThemed () returned 0x1
[0216.790] GetThemeAppProperties () returned 0x3
[0216.790] GetThemeAppProperties () returned 0x3
[0216.790] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0216.791] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x290107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0216.791] GdipReleaseDC (graphics=0x5d92c30, hdc=0x290107c0) returned 0x0
[0216.791] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0216.791] SelectObject (hdc=0x290107c0, h=0x85000f) returned 0x1e0507b9
[0216.791] DeleteDC (hdc=0x290107c0) returned 1
[0216.791] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0216.791] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0216.791] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2327dcc, cPoints=0x1 | out: lpPoints=0x2327dcc) returned 25690608
[0216.791] WindowFromPoint (Point=0x218) returned 0x202c6
[0216.791] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930218) returned 0x1
[0216.792] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0216.792] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0216.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.793] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0216.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.794] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0216.795] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.795] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0216.795] GetDC (hWnd=0x0) returned 0xf0105ee
[0216.795] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e888) returned 0x0
[0216.795] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0216.795] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0216.795] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0216.795] GetSystemMetrics (nIndex=5) returned 1
[0216.795] GetSystemMetrics (nIndex=6) returned 1
[0216.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.796] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0216.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.796] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0216.847] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.847] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0216.848] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.848] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0216.848] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.848] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0216.848] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.848] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0216.848] GetSystemMetrics (nIndex=5) returned 1
[0216.848] GetSystemMetrics (nIndex=6) returned 1
[0216.849] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.849] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0216.849] GetSystemMetrics (nIndex=5) returned 1
[0216.849] GetSystemMetrics (nIndex=6) returned 1
[0216.849] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.849] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0216.849] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.849] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0216.850] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.850] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0216.850] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.850] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0216.850] GetSystemMetrics (nIndex=59) returned 1460
[0216.850] GetSystemMetrics (nIndex=60) returned 920
[0216.850] GetSystemMetrics (nIndex=34) returned 136
[0216.850] GetSystemMetrics (nIndex=35) returned 39
[0216.850] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.850] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0216.850] GetCurrentThreadId () returned 0x11d0
[0216.850] GetCurrentThreadId () returned 0x11d0
[0216.850] GetCurrentThreadId () returned 0x11d0
[0216.850] GetCurrentThreadId () returned 0x11d0
[0216.850] GetCurrentThreadId () returned 0x11d0
[0216.850] GetCurrentThreadId () returned 0x11d0
[0216.850] GetCurrentThreadId () returned 0x11d0
[0216.850] GetCurrentThreadId () returned 0x11d0
[0216.851] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.851] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0216.851] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0216.851] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0216.851] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.851] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0216.851] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.852] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0216.852] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1502c8
[0216.853] SetWindowLongW (hWnd=0x1502c8, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0216.853] GetWindowLongW (hWnd=0x1502c8, nIndex=-4) returned 1950089536
[0216.853] SetWindowLongW (hWnd=0x1502c8, nIndex=-4, dwNewLong=79641238) returned 1950089536
[0216.853] GetWindowLongW (hWnd=0x1502c8, nIndex=-4) returned 79641238
[0216.853] GetWindowLongW (hWnd=0x1502c8, nIndex=-16) returned 113311744
[0216.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1502c8, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0216.854] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1502c8, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0216.855] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1502c8, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0216.855] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1502c8, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0216.855] GetClientRect (in: hWnd=0x1502c8, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0216.855] GetWindowRect (in: hWnd=0x1502c8, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0216.855] SetWindowTextW (hWnd=0x1502c8, lpString="WindowsFormsParkingWindow") returned 1
[0216.855] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1502c8, Msg=0xc, wParam=0x0, lParam=0x231fd18) returned 0x1
[0216.856] GetParent (hWnd=0x1502c8) returned 0x0
[0216.856] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0216.856] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1502c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1502d2
[0216.857] SetWindowLongW (hWnd=0x1502d2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0216.857] GetWindowLongW (hWnd=0x1502d2, nIndex=-4) returned 1868147648
[0216.857] SetWindowLongW (hWnd=0x1502d2, nIndex=-4, dwNewLong=79645022) returned 1868147648
[0216.857] GetWindowLongW (hWnd=0x1502d2, nIndex=-4) returned 79645022
[0216.857] GetWindowLongW (hWnd=0x1502d2, nIndex=-16) returned 1174405133
[0216.857] GetWindowLongW (hWnd=0x1502d2, nIndex=-12) returned 0
[0216.857] SetWindowLongW (hWnd=0x1502d2, nIndex=-12, dwNewLong=1376978) returned 0
[0216.857] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0216.858] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0216.859] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0216.859] GetClientRect (in: hWnd=0x1502d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0216.859] GetWindowRect (in: hWnd=0x1502d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0216.859] GetParent (hWnd=0x1502d2) returned 0x1502c8
[0216.859] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1502c8, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0216.859] SetWindowTextW (hWnd=0x1502d2, lpString="Enter password: ") returned 1
[0216.859] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0216.860] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0216.860] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0216.860] GetClientRect (in: hWnd=0x1502d2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0216.860] GetWindowRect (in: hWnd=0x1502d2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0216.860] GetParent (hWnd=0x1502d2) returned 0x1502c8
[0216.860] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1502c8, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0216.860] SendMessageW (hWnd=0x1502d2, Msg=0x2210, wParam=0x2d20001, lParam=0x1502d2) returned 0x0
[0216.860] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x2210, wParam=0x2d20001, lParam=0x1502d2) returned 0x0
[0216.860] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0216.861] GetParent (hWnd=0x1502d2) returned 0x1502c8
[0216.861] GdipCreateFromHWND (hwnd=0x1502d2, graphics=0x53e994) returned 0x0
[0216.861] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0216.861] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0216.861] GetProcessWindowStation () returned 0x13c
[0216.861] GetCapture () returned 0x202c6
[0216.861] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0216.861] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0216.861] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0216.861] ReleaseCapture () returned 1
[0216.861] GetActiveWindow () returned 0x70036
[0216.862] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0216.862] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.862] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0216.862] GetCursorPos (in: lpPoint=0x2334b7c | out: lpPoint=0x2334b7c*(x=536, y=403)) returned 1
[0216.862] MonitorFromPoint (pt=0x218, dwFlags=0x193) returned 0x10001
[0216.862] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0216.862] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x2c0107c0
[0216.862] GetDeviceCaps (hdc=0x2c0107c0, index=12) returned 32
[0216.863] GetDeviceCaps (hdc=0x2c0107c0, index=14) returned 1
[0216.863] DeleteDC (hdc=0x2c0107c0) returned 1
[0216.863] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0216.863] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0216.863] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x18013e
[0216.863] SetWindowLongW (hWnd=0x18013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0216.864] GetWindowLongW (hWnd=0x18013e, nIndex=-4) returned 1950089536
[0216.864] SetWindowLongW (hWnd=0x18013e, nIndex=-4, dwNewLong=79645302) returned 1950089536
[0216.864] GetWindowLongW (hWnd=0x18013e, nIndex=-4) returned 79645302
[0216.864] GetWindowLongW (hWnd=0x18013e, nIndex=-16) returned 113770496
[0216.864] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0216.866] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0216.867] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0216.867] GetClientRect (in: hWnd=0x18013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0216.867] GetWindowRect (in: hWnd=0x18013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0216.867] SetWindowTextW (hWnd=0x18013e, lpString="Ransomware") returned 1
[0216.867] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xc, wParam=0x0, lParam=0x2327e94) returned 0x1
[0216.868] GetStartupInfoW (in: lpStartupInfo=0x2334eb8 | out: lpStartupInfo=0x2334eb8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0216.869] GetParent (hWnd=0x18013e) returned 0x0
[0216.869] SetWindowLongW (hWnd=0x18013e, nIndex=-8, dwNewLong=0) returned 0
[0216.869] SendMessageW (hWnd=0x18013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0216.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0216.870] SendMessageW (hWnd=0x18013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0216.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0216.870] GetSystemMenu (hWnd=0x18013e, bRevert=0) returned 0x602ad
[0216.870] GetWindowPlacement (in: hWnd=0x18013e, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0216.870] EnableMenuItem (hMenu=0x602ad, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0216.870] EnableMenuItem (hMenu=0x602ad, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0216.871] EnableMenuItem (hMenu=0x602ad, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0216.871] EnableMenuItem (hMenu=0x602ad, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0216.871] EnableMenuItem (hMenu=0x602ad, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0216.871] GetClientRect (in: hWnd=0x18013e, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0216.871] GetClientRect (in: hWnd=0x18013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0216.871] GetWindowRect (in: hWnd=0x18013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0216.871] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.871] GetWindowLongW (hWnd=0x18013e, nIndex=-16) returned 113770496
[0216.871] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0216.871] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0216.871] GetSystemMetrics (nIndex=42) returned 0
[0216.871] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0216.871] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0216.871] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0216.872] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0216.872] GetSystemMetrics (nIndex=42) returned 0
[0216.872] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0216.872] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0216.872] GetCursorPos (in: lpPoint=0x233502c | out: lpPoint=0x233502c*(x=536, y=403)) returned 1
[0216.872] MonitorFromPoint (pt=0x218, dwFlags=0x193) returned 0x10001
[0216.872] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0216.872] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x300107c0
[0216.872] GetDeviceCaps (hdc=0x300107c0, index=12) returned 32
[0216.872] GetDeviceCaps (hdc=0x300107c0, index=14) returned 1
[0216.872] DeleteDC (hdc=0x300107c0) returned 1
[0216.872] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0216.872] GetWindowLongW (hWnd=0x18013e, nIndex=-16) returned 113770496
[0216.872] GetWindowLongW (hWnd=0x18013e, nIndex=-20) returned 327937
[0216.872] SetWindowLongW (hWnd=0x18013e, nIndex=-16, dwNewLong=46661632) returned 113770496
[0216.873] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0216.873] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0216.873] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0216.873] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0216.874] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0216.874] SetWindowLongW (hWnd=0x18013e, nIndex=-20, dwNewLong=327681) returned 327937
[0216.874] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0216.874] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0216.875] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0216.875] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0216.875] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0216.875] SetWindowPos (hWnd=0x18013e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0216.875] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0216.875] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0216.876] GetWindowPlacement (in: hWnd=0x18013e, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0216.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0216.876] GetClientRect (in: hWnd=0x18013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0216.876] GetWindowRect (in: hWnd=0x18013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0216.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0216.877] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0216.877] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0216.877] RedrawWindow (hWnd=0x18013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0216.877] GetSystemMenu (hWnd=0x18013e, bRevert=0) returned 0x602ad
[0216.877] GetWindowPlacement (in: hWnd=0x18013e, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0216.877] EnableMenuItem (hMenu=0x602ad, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0216.877] EnableMenuItem (hMenu=0x602ad, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0216.877] EnableMenuItem (hMenu=0x602ad, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0216.877] EnableMenuItem (hMenu=0x602ad, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0216.877] EnableMenuItem (hMenu=0x602ad, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0216.877] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0216.877] GetWindowLongW (hWnd=0x18013e, nIndex=-8) returned 0
[0216.877] SetWindowLongW (hWnd=0x18013e, nIndex=-8, dwNewLong=458806) returned 0
[0216.878] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0216.878] GetProcessWindowStation () returned 0x13c
[0216.878] GetCurrentThreadId () returned 0x11d0
[0216.879] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf490e, lParam=0x0) returned 1
[0216.879] IsWindowVisible (hWnd=0x18013e) returned 0
[0216.879] IsWindowVisible (hWnd=0x70036) returned 1
[0216.879] IsWindowEnabled (hWnd=0x70036) returned 1
[0216.879] IsWindowVisible (hWnd=0x602b6) returned 0
[0216.879] IsWindowVisible (hWnd=0x901f8) returned 0
[0216.879] IsWindowVisible (hWnd=0x202d0) returned 0
[0216.879] IsWindowVisible (hWnd=0x202d4) returned 0
[0216.879] GetActiveWindow () returned 0x70036
[0216.879] GetFocus () returned 0x202c6
[0216.879] IsWindow (hWnd=0x70036) returned 1
[0216.879] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0216.879] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0216.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0216.880] GetWindowLongW (hWnd=0x18013e, nIndex=-8) returned 458806
[0216.880] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0216.880] GetCurrentThreadId () returned 0x11d0
[0216.880] GetWindowLongW (hWnd=0x18013e, nIndex=-8) returned 458806
[0216.880] IsWindowEnabled (hWnd=0x70036) returned 0
[0216.880] IsWindowEnabled (hWnd=0x18013e) returned 1
[0216.880] ShowWindow (hWnd=0x18013e, nCmdShow=5) returned 0
[0216.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0216.880] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0216.881] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.882] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0216.882] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x18013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x902be
[0216.883] SetWindowLongW (hWnd=0x902be, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0216.883] GetWindowLongW (hWnd=0x902be, nIndex=-4) returned 1868026976
[0216.883] SetWindowLongW (hWnd=0x902be, nIndex=-4, dwNewLong=79645422) returned 1868026976
[0216.883] GetWindowLongW (hWnd=0x902be, nIndex=-4) returned 79645422
[0216.883] GetWindowLongW (hWnd=0x902be, nIndex=-16) returned 1174470848
[0216.884] GetWindowLongW (hWnd=0x902be, nIndex=-12) returned 0
[0216.884] SetWindowLongW (hWnd=0x902be, nIndex=-12, dwNewLong=590526) returned 0
[0216.884] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0216.884] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0216.885] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0216.886] SendMessageW (hWnd=0x902be, Msg=0x2055, wParam=0x902be, lParam=0x3) returned 0x2
[0216.886] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0216.886] GetWindow (hWnd=0x902be, uCmd=0x3) returned 0x0
[0216.886] GetClientRect (in: hWnd=0x902be, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0216.886] GetWindowRect (in: hWnd=0x902be, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0216.886] GetParent (hWnd=0x902be) returned 0x18013e
[0216.886] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x18013e, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0216.886] SendMessageW (hWnd=0x902be, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0216.886] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0216.886] SendMessageW (hWnd=0x902be, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0216.886] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0216.887] GetSystemMetrics (nIndex=5) returned 1
[0216.887] GetSystemMetrics (nIndex=6) returned 1
[0216.887] SendMessageW (hWnd=0x902be, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0216.887] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0216.887] SendMessageW (hWnd=0x902be, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0216.887] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0216.887] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0216.887] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0216.887] GetClientRect (in: hWnd=0x902be, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0216.888] GetWindowRect (in: hWnd=0x902be, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0216.888] GetParent (hWnd=0x902be) returned 0x18013e
[0216.888] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x18013e, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0216.888] SendMessageW (hWnd=0x902be, Msg=0x2210, wParam=0x2be0001, lParam=0x902be) returned 0x0
[0216.888] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x2210, wParam=0x2be0001, lParam=0x902be) returned 0x0
[0216.888] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0216.888] GetParent (hWnd=0x902be) returned 0x18013e
[0216.888] GetParent (hWnd=0x1502d2) returned 0x1502c8
[0216.888] SetParent (hWndChild=0x1502d2, hWndNewParent=0x18013e) returned 0x1502c8
[0216.888] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0216.889] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0216.889] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0216.889] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0216.889] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0216.889] GetClientRect (in: hWnd=0x1502d2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0216.889] GetWindowRect (in: hWnd=0x1502d2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0216.889] GetParent (hWnd=0x1502d2) returned 0x18013e
[0216.889] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x18013e, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0216.889] GetClientRect (in: hWnd=0x1502d2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0216.889] GetWindowRect (in: hWnd=0x1502d2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0216.889] GetParent (hWnd=0x1502d2) returned 0x18013e
[0216.889] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x18013e, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0216.889] GetParent (hWnd=0x1502d2) returned 0x18013e
[0216.889] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0216.890] GetWindow (hWnd=0x1502d2, uCmd=0x3) returned 0x0
[0216.890] SetWindowPos (hWnd=0x1502d2, hWndInsertAfter=0x902be, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0216.890] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0216.890] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0216.890] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0216.890] GetClientRect (in: hWnd=0x1502d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0216.890] GetWindowRect (in: hWnd=0x1502d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0216.890] GetParent (hWnd=0x1502d2) returned 0x18013e
[0216.890] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x18013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0216.890] GetParent (hWnd=0x1502d2) returned 0x18013e
[0216.890] GetWindow (hWnd=0x1502d2, uCmd=0x3) returned 0x902be
[0216.890] GetWindowThreadProcessId (in: hWnd=0x1502d2, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0216.891] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0216.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.891] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0216.891] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x18013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1402d6
[0216.892] SetWindowLongW (hWnd=0x1402d6, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0216.892] GetWindowLongW (hWnd=0x1402d6, nIndex=-4) returned 1868032000
[0216.892] SetWindowLongW (hWnd=0x1402d6, nIndex=-4, dwNewLong=79645502) returned 1868032000
[0216.892] GetWindowLongW (hWnd=0x1402d6, nIndex=-4) returned 79645502
[0216.892] GetWindowLongW (hWnd=0x1402d6, nIndex=-16) returned 1174470667
[0216.892] GetWindowLongW (hWnd=0x1402d6, nIndex=-12) returned 0
[0216.892] SetWindowLongW (hWnd=0x1402d6, nIndex=-12, dwNewLong=1311446) returned 0
[0216.892] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0216.893] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0216.893] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0216.894] SendMessageW (hWnd=0x1402d6, Msg=0x2055, wParam=0x1402d6, lParam=0x3) returned 0x2
[0216.894] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0216.894] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0216.894] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0216.894] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0216.894] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0216.894] RedrawWindow (hWnd=0x902be, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0216.894] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0216.894] RedrawWindow (hWnd=0x1502d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0216.894] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0216.894] RedrawWindow (hWnd=0x1402d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0216.894] RedrawWindow (hWnd=0x18013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0216.895] GetWindow (hWnd=0x1402d6, uCmd=0x3) returned 0x1502d2
[0216.895] GetClientRect (in: hWnd=0x1402d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0216.895] GetWindowRect (in: hWnd=0x1402d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0216.895] GetParent (hWnd=0x1402d6) returned 0x18013e
[0216.895] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x18013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0216.895] SetWindowTextW (hWnd=0x1402d6, lpString="OK") returned 1
[0216.895] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0xc, wParam=0x0, lParam=0x232c354) returned 0x1
[0216.895] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0216.895] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0216.895] GetClientRect (in: hWnd=0x1402d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0216.895] GetWindowRect (in: hWnd=0x1402d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0216.895] GetParent (hWnd=0x1402d6) returned 0x18013e
[0216.895] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x18013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0216.896] SendMessageW (hWnd=0x1402d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1402d6) returned 0x0
[0216.896] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1402d6) returned 0x0
[0216.896] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0216.896] GetParent (hWnd=0x1402d6) returned 0x18013e
[0216.896] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0216.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.897] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0216.897] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x18013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x802c0
[0216.898] SetWindowLongW (hWnd=0x802c0, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0216.898] GetWindowLongW (hWnd=0x802c0, nIndex=-4) returned 1868032000
[0216.898] SetWindowLongW (hWnd=0x802c0, nIndex=-4, dwNewLong=79645542) returned 1868032000
[0216.898] GetWindowLongW (hWnd=0x802c0, nIndex=-4) returned 79645542
[0216.898] GetWindowLongW (hWnd=0x802c0, nIndex=-16) returned 1174470667
[0216.898] GetWindowLongW (hWnd=0x802c0, nIndex=-12) returned 0
[0216.898] SetWindowLongW (hWnd=0x802c0, nIndex=-12, dwNewLong=524992) returned 0
[0216.898] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0216.899] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0216.899] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0216.900] SendMessageW (hWnd=0x802c0, Msg=0x2055, wParam=0x802c0, lParam=0x3) returned 0x2
[0216.900] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0216.900] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0216.900] GetWindow (hWnd=0x802c0, uCmd=0x3) returned 0x1402d6
[0216.900] GetClientRect (in: hWnd=0x802c0, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0216.900] GetWindowRect (in: hWnd=0x802c0, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0216.900] GetParent (hWnd=0x802c0) returned 0x18013e
[0216.900] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x18013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0216.900] SetWindowTextW (hWnd=0x802c0, lpString="Cancel") returned 1
[0216.900] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0xc, wParam=0x0, lParam=0x232fc14) returned 0x1
[0216.900] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0216.901] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0216.901] GetClientRect (in: hWnd=0x802c0, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0216.901] GetWindowRect (in: hWnd=0x802c0, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0216.901] GetParent (hWnd=0x802c0) returned 0x18013e
[0216.901] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x18013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0216.901] SendMessageW (hWnd=0x802c0, Msg=0x2210, wParam=0x2c00001, lParam=0x802c0) returned 0x0
[0216.901] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0x2210, wParam=0x2c00001, lParam=0x802c0) returned 0x0
[0216.901] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0216.901] GetParent (hWnd=0x802c0) returned 0x18013e
[0216.901] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0216.901] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e320) returned 0x0
[0216.902] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0216.902] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0216.902] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0216.902] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0216.902] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0216.902] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0216.903] GetWindowLongW (hWnd=0x18013e, nIndex=-8) returned 458806
[0216.903] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0216.903] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0216.903] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x370107c0
[0216.903] GetDeviceCaps (hdc=0x370107c0, index=12) returned 32
[0216.903] GetDeviceCaps (hdc=0x370107c0, index=14) returned 1
[0216.903] DeleteDC (hdc=0x370107c0) returned 1
[0216.903] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0216.903] GetWindowThreadProcessId (in: hWnd=0x18013e, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0216.903] GetCurrentThreadId () returned 0x11d0
[0216.903] PostMessageW (hWnd=0x18013e, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0216.903] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0216.903] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0216.903] GetSystemMetrics (nIndex=42) returned 0
[0216.903] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0216.903] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0216.904] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0216.904] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0216.904] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0216.904] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0216.912] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x18013e) returned 0x1
[0216.914] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0216.914] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0216.914] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0216.914] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0216.916] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0216.917] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0216.917] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0216.917] GetFocus () returned 0x202c6
[0216.918] IsChild (hWndParent=0x18013e, hWnd=0x202c6) returned 0
[0216.918] GetFocus () returned 0x202c6
[0216.918] SetFocus (hWnd=0x902be) returned 0x202c6
[0216.919] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x902be, lParam=0x0) returned 0x0
[0216.919] GetCapture () returned 0x0
[0216.919] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0216.920] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0216.921] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0216.922] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0216.922] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0216.922] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0216.922] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0216.923] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0216.923] GetParent (hWnd=0x18013e) returned 0x0
[0216.923] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0216.923] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0216.923] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0216.924] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0216.924] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0216.924] GetSysColorBrush (nIndex=5) returned 0x100079
[0216.925] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0216.925] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0216.926] SendMessageW (hWnd=0x902be, Msg=0x2111, wParam=0x10002be, lParam=0x902be) returned 0x0
[0216.926] SendMessageW (hWnd=0x902be, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0216.926] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0216.926] GetKeyState (nVirtKey=1) returned 0
[0216.926] GetKeyState (nVirtKey=2) returned 0
[0216.926] GetKeyState (nVirtKey=4) returned 0
[0216.926] GetKeyState (nVirtKey=5) returned 0
[0216.926] GetKeyState (nVirtKey=6) returned 0
[0216.926] GetWindowTextLengthW (hWnd=0x902be) returned 0
[0216.926] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0216.926] SendMessageW (hWnd=0x902be, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0216.926] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0216.927] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0216.927] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0216.934] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0216.935] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0216.935] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0216.935] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0216.936] GetWindowPlacement (in: hWnd=0x18013e, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0216.936] GetClientRect (in: hWnd=0x18013e, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0216.936] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0216.936] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0216.936] GetSystemMetrics (nIndex=42) returned 0
[0216.936] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0216.936] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0216.936] GetClientRect (in: hWnd=0x18013e, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0216.936] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0216.936] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0216.936] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0xfffffffff40507cd
[0216.936] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0216.936] SaveDC (hdc=0x10105d6) returned 1
[0216.937] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0216.937] CreateSolidBrush (color=0xf0f0f0) returned 0x7110078d
[0216.937] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0x7110078d) returned 1
[0216.937] DeleteObject (ho=0x7110078d) returned 1
[0216.937] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0216.937] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0216.937] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0216.937] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0216.938] GetWindowPlacement (in: hWnd=0x18013e, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0216.938] GetClientRect (in: hWnd=0x18013e, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0216.938] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0216.938] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0216.938] GetSystemMetrics (nIndex=42) returned 0
[0216.938] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0216.938] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0216.938] GetClientRect (in: hWnd=0x18013e, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0216.938] GetCurrentObject (hdc=0x4d0107c0, type=0x1) returned 0xb00017
[0216.938] GetCurrentObject (hdc=0x4d0107c0, type=0x2) returned 0x900010
[0216.938] GetCurrentObject (hdc=0x4d0107c0, type=0x7) returned 0xffffffffcd0507c9
[0216.938] GetCurrentObject (hdc=0x4d0107c0, type=0x6) returned 0x8a01c2
[0216.938] SaveDC (hdc=0x4d0107c0) returned 1
[0216.939] GetNearestColor (hdc=0x4d0107c0, color=0xf0f0f0) returned 0xf0f0f0
[0216.939] CreateSolidBrush (color=0xf0f0f0) returned 0x7210078d
[0216.939] FillRect (hDC=0x4d0107c0, lprc=0x53dc18, hbr=0x7210078d) returned 1
[0216.939] DeleteObject (ho=0x7210078d) returned 1
[0216.939] RestoreDC (hdc=0x4d0107c0, nSavedDC=-1) returned 1
[0216.939] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0216.939] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0216.939] GetSystemMetrics (nIndex=42) returned 0
[0216.939] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0216.939] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0216.939] GetClientRect (in: hWnd=0x18013e, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0216.939] GetCurrentObject (hdc=0x4d0107c0, type=0x1) returned 0xb00017
[0216.939] GetCurrentObject (hdc=0x4d0107c0, type=0x2) returned 0x900010
[0216.939] GetCurrentObject (hdc=0x4d0107c0, type=0x7) returned 0xffffffffcd0507c9
[0216.939] GetCurrentObject (hdc=0x4d0107c0, type=0x6) returned 0x8a01c2
[0216.939] SaveDC (hdc=0x4d0107c0) returned 1
[0216.939] GetNearestColor (hdc=0x4d0107c0, color=0xf0f0f0) returned 0xf0f0f0
[0216.939] CreateSolidBrush (color=0xf0f0f0) returned 0x7310078d
[0216.939] FillRect (hDC=0x4d0107c0, lprc=0x53dbb8, hbr=0x7310078d) returned 1
[0216.940] DeleteObject (ho=0x7310078d) returned 1
[0216.940] RestoreDC (hdc=0x4d0107c0, nSavedDC=-1) returned 1
[0216.940] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0216.940] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0216.940] GetSystemMetrics (nIndex=42) returned 0
[0216.940] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0216.940] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0216.941] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0216.941] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0216.941] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0216.941] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0216.941] GetStockObject (i=5) returned 0x900015
[0216.941] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0216.942] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0216.942] GetStockObject (i=5) returned 0x900015
[0216.942] GetWindowPlacement (in: hWnd=0x18013e, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0216.942] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0216.942] GetClientRect (in: hWnd=0x18013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0216.942] GetWindowRect (in: hWnd=0x18013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0216.943] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0216.943] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0216.944] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0216.944] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0216.944] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0216.944] GetClientRect (in: hWnd=0x18013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0216.944] GetWindowRect (in: hWnd=0x18013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0216.944] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.944] IsWindowUnicode (hWnd=0x18013e) returned 1
[0216.944] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.944] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0216.944] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0216.944] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0216.944] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.944] IsWindowUnicode (hWnd=0x18013e) returned 1
[0216.944] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.945] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0216.945] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0216.945] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.945] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x84, wParam=0x0, lParam=0x1930218) returned 0x12
[0216.946] IsWindowUnicode (hWnd=0x18013e) returned 1
[0216.946] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.946] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0216.946] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0216.946] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.946] IsWindowUnicode (hWnd=0x202c6) returned 1
[0216.946] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.946] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0216.946] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0216.946] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0216.946] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0216.946] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.947] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x84, wParam=0x0, lParam=0x1930218) returned 0x12
[0216.947] IsWindowUnicode (hWnd=0x18013e) returned 1
[0216.947] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.947] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x84, wParam=0x0, lParam=0x1930218) returned 0x12
[0216.948] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x20, wParam=0x18013e, lParam=0x2000012) returned 0x0
[0216.948] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0216.948] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0216.948] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xa0, wParam=0x12, lParam=0x1930218) returned 0x0
[0216.948] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.948] IsWindowUnicode (hWnd=0x18013e) returned 1
[0216.948] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.948] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0216.948] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0216.948] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.949] IsWindowUnicode (hWnd=0x18013e) returned 1
[0216.949] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.949] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0216.949] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0216.949] BeginPaint (in: hWnd=0x18013e, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x10105d6
[0216.949] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0216.949] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0216.949] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0216.950] GetSystemMetrics (nIndex=42) returned 0
[0216.950] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0216.950] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0216.950] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0216.950] EndPaint (hWnd=0x18013e, lpPaint=0x53e30c) returned 1
[0216.950] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.950] IsWindowUnicode (hWnd=0x902be) returned 1
[0216.950] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.950] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0216.950] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0216.950] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0216.951] SetTextColor (hdc=0x4e0107c0, color=0x0) returned 0x0
[0216.951] SetBkColor (hdc=0x4e0107c0, color=0xffffff) returned 0xffffff
[0216.952] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.952] IsWindowUnicode (hWnd=0x1502d2) returned 1
[0216.952] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.952] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0216.952] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0216.952] BeginPaint (in: hWnd=0x1502d2, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x8b010786
[0216.953] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0216.953] CreateCompatibleDC (hdc=0x8b010786) returned 0xa10107a4
[0216.953] SelectObject (hdc=0xa10107a4, h=0x1e0507b9) returned 0x85000f
[0216.953] GdipCreateFromHDC (hdc=0xa10107a4, graphics=0x53e30c) returned 0x0
[0216.953] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0216.953] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0216.953] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0216.953] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0216.953] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0216.953] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0216.953] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0216.953] LocalFree (hMem=0x89eac0) returned 0x0
[0216.953] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0216.953] GdipCreateRegion (region=0x53e354) returned 0x0
[0216.953] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0216.953] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0216.953] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0216.954] GetWindowTextLengthW (hWnd=0x1502d2) returned 16
[0216.954] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0216.954] GetSystemMetrics (nIndex=42) returned 0
[0216.954] GetWindowTextW (in: hWnd=0x1502d2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0216.954] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0216.954] GetClientRect (in: hWnd=0x1502d2, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0216.954] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0216.954] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0216.954] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0216.954] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0216.954] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0216.954] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0216.954] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0216.954] LocalFree (hMem=0x89ec80) returned 0x0
[0216.954] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0216.954] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0216.954] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0216.954] LocalFree (hMem=0x89ee08) returned 0x0
[0216.954] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0216.954] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0216.954] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0216.954] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0216.955] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0216.955] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0216.955] GetCurrentObject (hdc=0xa10107a4, type=0x1) returned 0xb00017
[0216.955] GetCurrentObject (hdc=0xa10107a4, type=0x2) returned 0x900010
[0216.955] GetCurrentObject (hdc=0xa10107a4, type=0x7) returned 0x1e0507b9
[0216.955] GetCurrentObject (hdc=0xa10107a4, type=0x6) returned 0x8a01c2
[0216.955] SaveDC (hdc=0xa10107a4) returned 1
[0216.955] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c040798
[0216.955] GetClipRgn (hdc=0xa10107a4, hrgn=0x6c040798) returned 0
[0216.955] SelectClipRgn (hdc=0xa10107a4, hrgn=0xed04051e) returned 2
[0216.955] DeleteObject (ho=0x6c040798) returned 1
[0216.955] DeleteObject (ho=0xed04051e) returned 1
[0216.955] OffsetViewportOrgEx (in: hdc=0xa10107a4, x=0, y=0, lppt=0x2336a58 | out: lppt=0x2336a58) returned 1
[0216.955] GetNearestColor (hdc=0xa10107a4, color=0xf0f0f0) returned 0xf0f0f0
[0216.955] CreateSolidBrush (color=0xf0f0f0) returned 0x7410078d
[0216.955] FillRect (hDC=0xa10107a4, lprc=0x53e1f4, hbr=0x7410078d) returned 1
[0216.955] DeleteObject (ho=0x7410078d) returned 1
[0216.955] RestoreDC (hdc=0xa10107a4, nSavedDC=-1) returned 1
[0216.955] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107a4) returned 0x0
[0216.956] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc910dbd) returned 0x0
[0216.956] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0216.956] GetWindowTextLengthW (hWnd=0x1502d2) returned 16
[0216.956] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0216.956] GetSystemMetrics (nIndex=42) returned 0
[0216.956] GetWindowTextW (in: hWnd=0x1502d2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0216.956] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0216.956] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0216.956] GetCurrentObject (hdc=0xa10107a4, type=0x1) returned 0xb00017
[0216.956] GetCurrentObject (hdc=0xa10107a4, type=0x2) returned 0x900010
[0216.956] GetCurrentObject (hdc=0xa10107a4, type=0x7) returned 0x1e0507b9
[0216.956] GetCurrentObject (hdc=0xa10107a4, type=0x6) returned 0x8a01c2
[0216.956] SaveDC (hdc=0xa10107a4) returned 1
[0216.956] GetNearestColor (hdc=0xa10107a4, color=0x0) returned 0x0
[0216.956] RestoreDC (hdc=0xa10107a4, nSavedDC=-1) returned 1
[0216.956] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107a4) returned 0x0
[0216.957] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0216.957] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0216.957] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0216.957] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2336d60 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0216.957] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0216.957] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0216.957] GetCurrentObject (hdc=0xa10107a4, type=0x1) returned 0xb00017
[0216.957] GetCurrentObject (hdc=0xa10107a4, type=0x2) returned 0x900010
[0216.957] GetCurrentObject (hdc=0xa10107a4, type=0x7) returned 0x1e0507b9
[0216.958] GetCurrentObject (hdc=0xa10107a4, type=0x6) returned 0x8a01c2
[0216.958] SaveDC (hdc=0xa10107a4) returned 1
[0216.958] GetTextAlign (hdc=0xa10107a4) returned 0x0
[0216.958] GetTextColor (hdc=0xa10107a4) returned 0x0
[0216.958] GetCurrentObject (hdc=0xa10107a4, type=0x6) returned 0x8a01c2
[0216.958] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0216.958] SelectObject (hdc=0xa10107a4, h=0x730a066d) returned 0x8a01c2
[0216.958] GetBkMode (hdc=0xa10107a4) returned 2
[0216.958] SetBkMode (hdc=0xa10107a4, mode=1) returned 2
[0216.958] DrawTextExW (in: hdc=0xa10107a4, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x2336f84 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0216.959] RestoreDC (hdc=0xa10107a4, nSavedDC=-1) returned 1
[0216.968] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107a4) returned 0x0
[0216.968] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0216.968] BitBlt (hdc=0x8b010786, x=0, y=0, cx=250, cy=70, hdcSrc=0xa10107a4, x1=0, y1=0, rop=0xcc0020) returned 1
[0216.968] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107a4) returned 0x0
[0216.968] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0216.968] SelectObject (hdc=0xa10107a4, h=0x85000f) returned 0x1e0507b9
[0216.968] DeleteDC (hdc=0xa10107a4) returned 1
[0216.968] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0216.968] EndPaint (hWnd=0x1502d2, lpPaint=0x53e2f0) returned 1
[0216.969] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.969] IsWindowUnicode (hWnd=0x1402d6) returned 1
[0216.969] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0216.969] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0216.969] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0216.969] BeginPaint (in: hWnd=0x1402d6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0216.969] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0216.969] CreateCompatibleDC (hdc=0xf0105ee) returned 0xa30107a4
[0216.969] SelectObject (hdc=0xa30107a4, h=0x1e0507b9) returned 0x85000f
[0216.969] GdipCreateFromHDC (hdc=0xa30107a4, graphics=0x53e300) returned 0x0
[0216.969] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0216.969] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0216.969] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0216.969] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0216.969] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0216.969] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0216.970] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0216.970] LocalFree (hMem=0x89ec80) returned 0x0
[0216.970] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0216.970] GdipCreateRegion (region=0x53e348) returned 0x0
[0216.970] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0216.970] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0216.970] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0216.970] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc8f0dbd) returned 0x0
[0216.970] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0216.970] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0216.970] GetCurrentObject (hdc=0xa30107a4, type=0x1) returned 0xb00017
[0216.970] GetCurrentObject (hdc=0xa30107a4, type=0x2) returned 0x900010
[0216.970] GetCurrentObject (hdc=0xa30107a4, type=0x7) returned 0x1e0507b9
[0216.970] GetCurrentObject (hdc=0xa30107a4, type=0x6) returned 0x8a01c2
[0216.970] SaveDC (hdc=0xa30107a4) returned 1
[0216.970] GetNearestColor (hdc=0xa30107a4, color=0xf0f0f0) returned 0xf0f0f0
[0216.970] GetNearestColor (hdc=0xa30107a4, color=0xa0a0a0) returned 0xa0a0a0
[0216.970] GetNearestColor (hdc=0xa30107a4, color=0x696969) returned 0x696969
[0216.970] GetNearestColor (hdc=0xa30107a4, color=0xa0a0a0) returned 0xa0a0a0
[0216.970] GetNearestColor (hdc=0xa30107a4, color=0x0) returned 0x0
[0216.971] GetNearestColor (hdc=0xa30107a4, color=0xffffff) returned 0xffffff
[0216.971] GetNearestColor (hdc=0xa30107a4, color=0xe5e5e5) returned 0xe5e5e5
[0216.971] GetNearestColor (hdc=0xa30107a4, color=0xd7d7d7) returned 0xd7d7d7
[0216.971] GetNearestColor (hdc=0xa30107a4, color=0x0) returned 0x0
[0216.971] RestoreDC (hdc=0xa30107a4, nSavedDC=-1) returned 1
[0216.971] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa30107a4) returned 0x0
[0216.971] IsAppThemed () returned 0x1
[0216.971] GetThemeAppProperties () returned 0x3
[0216.971] GetThemeAppProperties () returned 0x3
[0216.971] IsAppThemed () returned 0x1
[0216.971] GetThemeAppProperties () returned 0x3
[0216.971] GetThemeAppProperties () returned 0x3
[0216.971] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x23376f0 | out: lpchText="OK", lprc=0x53e028) returned 13
[0216.971] IsAppThemed () returned 0x1
[0216.971] GetThemeAppProperties () returned 0x3
[0216.971] GetThemeAppProperties () returned 0x3
[0216.972] IsAppThemed () returned 0x1
[0216.972] GetThemeAppProperties () returned 0x3
[0216.972] GetThemeAppProperties () returned 0x3
[0216.972] GetFocus () returned 0x902be
[0216.972] IsAppThemed () returned 0x1
[0216.972] GetThemeAppProperties () returned 0x3
[0216.972] GetThemeAppProperties () returned 0x3
[0216.972] IsAppThemed () returned 0x1
[0216.972] GetThemeAppProperties () returned 0x3
[0216.972] GetThemeAppProperties () returned 0x3
[0216.972] IsThemePartDefined () returned 0x1
[0216.972] IsAppThemed () returned 0x1
[0216.972] GetThemeAppProperties () returned 0x3
[0216.972] GetThemeAppProperties () returned 0x3
[0216.972] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0216.972] IsAppThemed () returned 0x1
[0216.972] GetThemeAppProperties () returned 0x3
[0216.973] GetThemeAppProperties () returned 0x3
[0216.973] IsAppThemed () returned 0x1
[0216.973] GetThemeAppProperties () returned 0x3
[0216.973] GetThemeAppProperties () returned 0x3
[0216.973] IsThemePartDefined () returned 0x1
[0216.973] GdipCreateRegion (region=0x53e070) returned 0x0
[0216.973] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0216.973] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0216.973] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0216.973] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0216.973] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0216.973] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0216.973] LocalFree (hMem=0x89eac0) returned 0x0
[0216.973] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0216.973] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0216.973] LocalFree (hMem=0x89ee08) returned 0x0
[0216.973] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0216.973] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0216.973] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0216.973] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0216.973] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0216.974] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0216.974] GetCurrentObject (hdc=0xa30107a4, type=0x1) returned 0xb00017
[0216.974] GetCurrentObject (hdc=0xa30107a4, type=0x2) returned 0x900010
[0216.974] GetCurrentObject (hdc=0xa30107a4, type=0x7) returned 0x1e0507b9
[0216.974] GetCurrentObject (hdc=0xa30107a4, type=0x6) returned 0x8a01c2
[0216.974] SaveDC (hdc=0xa30107a4) returned 1
[0216.974] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xee04051e
[0216.974] GetClipRgn (hdc=0xa30107a4, hrgn=0xee04051e) returned 0
[0216.974] SelectClipRgn (hdc=0xa30107a4, hrgn=0x70040798) returned 2
[0217.030] DeleteObject (ho=0xee04051e) returned 1
[0217.030] DeleteObject (ho=0x70040798) returned 1
[0217.030] OffsetViewportOrgEx (in: hdc=0xa30107a4, x=0, y=0, lppt=0x2337da0 | out: lppt=0x2337da0) returned 1
[0217.030] DrawThemeParentBackground () returned 0x0
[0217.030] GetWindowPlacement (in: hWnd=0x18013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0217.030] GetClientRect (in: hWnd=0x18013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0217.030] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0217.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.030] GetSystemMetrics (nIndex=42) returned 0
[0217.030] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0217.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0217.031] GetClientRect (in: hWnd=0x18013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0217.031] GetCurrentObject (hdc=0xa30107a4, type=0x1) returned 0xb00017
[0217.031] GetCurrentObject (hdc=0xa30107a4, type=0x2) returned 0x900010
[0217.031] GetCurrentObject (hdc=0xa30107a4, type=0x7) returned 0x1e0507b9
[0217.031] GetCurrentObject (hdc=0xa30107a4, type=0x6) returned 0x8a01c2
[0217.031] SaveDC (hdc=0xa30107a4) returned 2
[0217.031] GetNearestColor (hdc=0xa30107a4, color=0xf0f0f0) returned 0xf0f0f0
[0217.031] CreateSolidBrush (color=0xf0f0f0) returned 0x7510078d
[0217.031] FillRect (hDC=0xa30107a4, lprc=0x53dad0, hbr=0x7510078d) returned 1
[0217.031] DeleteObject (ho=0x7510078d) returned 1
[0217.031] RestoreDC (hdc=0xa30107a4, nSavedDC=-1) returned 1
[0217.031] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0217.031] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.031] GetSystemMetrics (nIndex=42) returned 0
[0217.031] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0217.031] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0217.032] GetClientRect (in: hWnd=0x18013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0217.032] GetCurrentObject (hdc=0xa30107a4, type=0x1) returned 0xb00017
[0217.032] GetCurrentObject (hdc=0xa30107a4, type=0x2) returned 0x900010
[0217.032] GetCurrentObject (hdc=0xa30107a4, type=0x7) returned 0x1e0507b9
[0217.032] GetCurrentObject (hdc=0xa30107a4, type=0x6) returned 0x8a01c2
[0217.032] SaveDC (hdc=0xa30107a4) returned 2
[0217.032] GetNearestColor (hdc=0xa30107a4, color=0xf0f0f0) returned 0xf0f0f0
[0217.032] CreateSolidBrush (color=0xf0f0f0) returned 0x7610078d
[0217.032] FillRect (hDC=0xa30107a4, lprc=0x53da70, hbr=0x7610078d) returned 1
[0217.032] DeleteObject (ho=0x7610078d) returned 1
[0217.032] RestoreDC (hdc=0xa30107a4, nSavedDC=-1) returned 1
[0217.032] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0217.032] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.032] GetSystemMetrics (nIndex=42) returned 0
[0217.032] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0217.032] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0217.033] RestoreDC (hdc=0xa30107a4, nSavedDC=-1) returned 1
[0217.033] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa30107a4) returned 0x0
[0217.033] IsAppThemed () returned 0x1
[0217.033] GetThemeAppProperties () returned 0x3
[0217.033] GetThemeAppProperties () returned 0x3
[0217.033] IsAppThemed () returned 0x1
[0217.033] GetThemeAppProperties () returned 0x3
[0217.033] GetThemeAppProperties () returned 0x3
[0217.033] IsThemePartDefined () returned 0x1
[0217.033] GdipCreateRegion (region=0x53dff4) returned 0x0
[0217.033] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.033] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0217.033] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.033] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0217.033] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0217.034] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0217.034] LocalFree (hMem=0x89eac0) returned 0x0
[0217.034] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0217.034] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0217.034] LocalFree (hMem=0x89ec80) returned 0x0
[0217.034] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.034] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0217.034] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0217.034] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0217.034] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.034] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0217.034] GetCurrentObject (hdc=0xa30107a4, type=0x1) returned 0xb00017
[0217.034] GetCurrentObject (hdc=0xa30107a4, type=0x2) returned 0x900010
[0217.034] GetCurrentObject (hdc=0xa30107a4, type=0x7) returned 0x1e0507b9
[0217.034] GetCurrentObject (hdc=0xa30107a4, type=0x6) returned 0x8a01c2
[0217.034] SaveDC (hdc=0xa30107a4) returned 1
[0217.035] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x71040798
[0217.035] GetClipRgn (hdc=0xa30107a4, hrgn=0x71040798) returned 0
[0217.035] SelectClipRgn (hdc=0xa30107a4, hrgn=0xf004051e) returned 2
[0217.035] DeleteObject (ho=0x71040798) returned 1
[0217.035] DeleteObject (ho=0xf004051e) returned 1
[0217.035] OffsetViewportOrgEx (in: hdc=0xa30107a4, x=0, y=0, lppt=0x2338628 | out: lppt=0x2338628) returned 1
[0217.035] IsAppThemed () returned 0x1
[0217.035] GetThemeAppProperties () returned 0x3
[0217.035] GetThemeAppProperties () returned 0x3
[0217.035] DrawThemeBackground () returned 0x0
[0217.035] RestoreDC (hdc=0xa30107a4, nSavedDC=-1) returned 1
[0217.035] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa30107a4) returned 0x0
[0217.035] GdipCreateRegion (region=0x53dff8) returned 0x0
[0217.035] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.035] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0217.035] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.035] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0217.035] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0217.036] LocalFree (hMem=0x89ee08) returned 0x0
[0217.036] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0217.036] LocalFree (hMem=0x89ee08) returned 0x0
[0217.036] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.036] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0217.036] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0217.036] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0217.036] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.036] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0217.036] GetCurrentObject (hdc=0xa30107a4, type=0x1) returned 0xb00017
[0217.036] GetCurrentObject (hdc=0xa30107a4, type=0x2) returned 0x900010
[0217.036] GetCurrentObject (hdc=0xa30107a4, type=0x7) returned 0x1e0507b9
[0217.036] GetCurrentObject (hdc=0xa30107a4, type=0x6) returned 0x8a01c2
[0217.036] SaveDC (hdc=0xa30107a4) returned 1
[0217.036] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf104051e
[0217.036] GetClipRgn (hdc=0xa30107a4, hrgn=0xf104051e) returned 0
[0217.036] SelectClipRgn (hdc=0xa30107a4, hrgn=0x72040798) returned 2
[0217.037] DeleteObject (ho=0xf104051e) returned 1
[0217.037] DeleteObject (ho=0x72040798) returned 1
[0217.037] OffsetViewportOrgEx (in: hdc=0xa30107a4, x=0, y=0, lppt=0x23388fc | out: lppt=0x23388fc) returned 1
[0217.037] IsAppThemed () returned 0x1
[0217.041] GetThemeAppProperties () returned 0x3
[0217.041] GetThemeAppProperties () returned 0x3
[0217.042] GetThemeBackgroundContentRect () returned 0x0
[0217.042] RestoreDC (hdc=0xa30107a4, nSavedDC=-1) returned 1
[0217.042] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa30107a4) returned 0x0
[0217.042] IsAppThemed () returned 0x1
[0217.042] GetThemeAppProperties () returned 0x3
[0217.042] GetThemeAppProperties () returned 0x3
[0217.042] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0217.042] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0217.042] GetCurrentObject (hdc=0xa30107a4, type=0x1) returned 0xb00017
[0217.042] GetCurrentObject (hdc=0xa30107a4, type=0x2) returned 0x900010
[0217.042] GetCurrentObject (hdc=0xa30107a4, type=0x7) returned 0x1e0507b9
[0217.042] GetCurrentObject (hdc=0xa30107a4, type=0x6) returned 0x8a01c2
[0217.042] SaveDC (hdc=0xa30107a4) returned 1
[0217.042] GetTextAlign (hdc=0xa30107a4) returned 0x0
[0217.042] GetTextColor (hdc=0xa30107a4) returned 0x0
[0217.042] GetCurrentObject (hdc=0xa30107a4, type=0x6) returned 0x8a01c2
[0217.042] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0217.042] SelectObject (hdc=0xa30107a4, h=0x730a066d) returned 0x8a01c2
[0217.042] GetBkMode (hdc=0xa30107a4) returned 2
[0217.043] SetBkMode (hdc=0xa30107a4, mode=1) returned 2
[0217.043] DrawTextExW (in: hdc=0xa30107a4, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x2338c9c | out: lpchText="OK", lprc=0x53df90) returned 13
[0217.043] DrawTextExW (in: hdc=0xa30107a4, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x2338c9c | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0217.043] RestoreDC (hdc=0xa30107a4, nSavedDC=-1) returned 1
[0217.043] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa30107a4) returned 0x0
[0217.043] GetFocus () returned 0x902be
[0217.043] IsAppThemed () returned 0x1
[0217.043] GetThemeAppProperties () returned 0x3
[0217.043] GetThemeAppProperties () returned 0x3
[0217.043] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0217.044] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xa30107a4, x1=0, y1=0, rop=0xcc0020) returned 1
[0217.044] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa30107a4) returned 0x0
[0217.044] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0217.044] SelectObject (hdc=0xa30107a4, h=0x85000f) returned 0x1e0507b9
[0217.044] DeleteDC (hdc=0xa30107a4) returned 1
[0217.044] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0217.044] EndPaint (hWnd=0x1402d6, lpPaint=0x53e2e4) returned 1
[0217.044] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.044] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0217.045] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.045] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.045] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0217.045] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.045] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.046] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.046] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0217.048] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.048] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.048] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.048] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.048] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.049] IsWindowUnicode (hWnd=0x802c0) returned 1
[0217.049] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.049] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.049] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.049] BeginPaint (in: hWnd=0x802c0, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0217.049] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0217.049] CreateCompatibleDC (hdc=0x8b010786) returned 0xa50107a4
[0217.049] SelectObject (hdc=0xa50107a4, h=0x1e0507b9) returned 0x85000f
[0217.049] GdipCreateFromHDC (hdc=0xa50107a4, graphics=0x53e300) returned 0x0
[0217.049] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0217.049] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0217.049] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0217.049] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.049] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0217.050] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0217.050] LocalFree (hMem=0x89ec80) returned 0x0
[0217.050] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.050] GdipCreateRegion (region=0x53e348) returned 0x0
[0217.050] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.050] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0217.050] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0217.050] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc8d0dbd) returned 0x0
[0217.050] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.050] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0217.050] GetCurrentObject (hdc=0xa50107a4, type=0x1) returned 0xb00017
[0217.050] GetCurrentObject (hdc=0xa50107a4, type=0x2) returned 0x900010
[0217.050] GetCurrentObject (hdc=0xa50107a4, type=0x7) returned 0x1e0507b9
[0217.050] GetCurrentObject (hdc=0xa50107a4, type=0x6) returned 0x8a01c2
[0217.050] SaveDC (hdc=0xa50107a4) returned 1
[0217.050] GetNearestColor (hdc=0xa50107a4, color=0xf0f0f0) returned 0xf0f0f0
[0217.050] GetNearestColor (hdc=0xa50107a4, color=0xa0a0a0) returned 0xa0a0a0
[0217.050] GetNearestColor (hdc=0xa50107a4, color=0x696969) returned 0x696969
[0217.050] GetNearestColor (hdc=0xa50107a4, color=0xa0a0a0) returned 0xa0a0a0
[0217.050] GetNearestColor (hdc=0xa50107a4, color=0x0) returned 0x0
[0217.050] GetNearestColor (hdc=0xa50107a4, color=0xffffff) returned 0xffffff
[0217.051] GetNearestColor (hdc=0xa50107a4, color=0xe5e5e5) returned 0xe5e5e5
[0217.051] GetNearestColor (hdc=0xa50107a4, color=0xd7d7d7) returned 0xd7d7d7
[0217.051] GetNearestColor (hdc=0xa50107a4, color=0x0) returned 0x0
[0217.051] RestoreDC (hdc=0xa50107a4, nSavedDC=-1) returned 1
[0217.051] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa50107a4) returned 0x0
[0217.051] IsAppThemed () returned 0x1
[0217.051] GetThemeAppProperties () returned 0x3
[0217.051] GetThemeAppProperties () returned 0x3
[0217.051] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0217.051] SendMessageW (hWnd=0x18013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0217.051] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0217.051] IsAppThemed () returned 0x1
[0217.051] GetThemeAppProperties () returned 0x3
[0217.051] GetThemeAppProperties () returned 0x3
[0217.051] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x23394ac | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0217.051] IsAppThemed () returned 0x1
[0217.052] GetThemeAppProperties () returned 0x3
[0217.052] GetThemeAppProperties () returned 0x3
[0217.052] IsAppThemed () returned 0x1
[0217.052] GetThemeAppProperties () returned 0x3
[0217.052] GetThemeAppProperties () returned 0x3
[0217.052] GetFocus () returned 0x902be
[0217.052] IsAppThemed () returned 0x1
[0217.052] GetThemeAppProperties () returned 0x3
[0217.052] GetThemeAppProperties () returned 0x3
[0217.052] IsAppThemed () returned 0x1
[0217.052] GetThemeAppProperties () returned 0x3
[0217.052] GetThemeAppProperties () returned 0x3
[0217.052] IsThemePartDefined () returned 0x1
[0217.052] IsAppThemed () returned 0x1
[0217.052] GetThemeAppProperties () returned 0x3
[0217.052] GetThemeAppProperties () returned 0x3
[0217.052] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0217.052] IsAppThemed () returned 0x1
[0217.052] GetThemeAppProperties () returned 0x3
[0217.052] GetThemeAppProperties () returned 0x3
[0217.052] IsAppThemed () returned 0x1
[0217.055] GetThemeAppProperties () returned 0x3
[0217.055] GetThemeAppProperties () returned 0x3
[0217.055] IsThemePartDefined () returned 0x1
[0217.055] GdipCreateRegion (region=0x53e070) returned 0x0
[0217.055] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.055] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0217.055] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.055] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0217.055] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0217.055] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0217.055] LocalFree (hMem=0x89eac0) returned 0x0
[0217.055] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0217.055] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0217.056] LocalFree (hMem=0x89ee08) returned 0x0
[0217.056] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.056] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0217.056] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0217.056] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0217.056] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.056] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0217.056] GetCurrentObject (hdc=0xa50107a4, type=0x1) returned 0xb00017
[0217.056] GetCurrentObject (hdc=0xa50107a4, type=0x2) returned 0x900010
[0217.056] GetCurrentObject (hdc=0xa50107a4, type=0x7) returned 0x1e0507b9
[0217.056] GetCurrentObject (hdc=0xa50107a4, type=0x6) returned 0x8a01c2
[0217.056] SaveDC (hdc=0xa50107a4) returned 1
[0217.056] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x73040798
[0217.056] GetClipRgn (hdc=0xa50107a4, hrgn=0x73040798) returned 0
[0217.056] SelectClipRgn (hdc=0xa50107a4, hrgn=0xf504051e) returned 2
[0217.057] DeleteObject (ho=0x73040798) returned 1
[0217.057] DeleteObject (ho=0xf504051e) returned 1
[0217.057] OffsetViewportOrgEx (in: hdc=0xa50107a4, x=0, y=0, lppt=0x2339b5c | out: lppt=0x2339b5c) returned 1
[0217.057] DrawThemeParentBackground () returned 0x0
[0217.057] GetWindowPlacement (in: hWnd=0x18013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0217.057] GetClientRect (in: hWnd=0x18013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0217.057] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0217.057] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.057] GetSystemMetrics (nIndex=42) returned 0
[0217.057] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0217.057] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0217.057] GetClientRect (in: hWnd=0x18013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0217.057] GetCurrentObject (hdc=0xa50107a4, type=0x1) returned 0xb00017
[0217.057] GetCurrentObject (hdc=0xa50107a4, type=0x2) returned 0x900010
[0217.057] GetCurrentObject (hdc=0xa50107a4, type=0x7) returned 0x1e0507b9
[0217.058] GetCurrentObject (hdc=0xa50107a4, type=0x6) returned 0x8a01c2
[0217.058] SaveDC (hdc=0xa50107a4) returned 2
[0217.058] GetNearestColor (hdc=0xa50107a4, color=0xf0f0f0) returned 0xf0f0f0
[0217.058] CreateSolidBrush (color=0xf0f0f0) returned 0x7710078d
[0217.058] FillRect (hDC=0xa50107a4, lprc=0x53dad0, hbr=0x7710078d) returned 1
[0217.058] DeleteObject (ho=0x7710078d) returned 1
[0217.058] RestoreDC (hdc=0xa50107a4, nSavedDC=-1) returned 1
[0217.058] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0217.058] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.058] GetSystemMetrics (nIndex=42) returned 0
[0217.058] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0217.058] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0217.058] GetClientRect (in: hWnd=0x18013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0217.058] GetCurrentObject (hdc=0xa50107a4, type=0x1) returned 0xb00017
[0217.058] GetCurrentObject (hdc=0xa50107a4, type=0x2) returned 0x900010
[0217.059] GetCurrentObject (hdc=0xa50107a4, type=0x7) returned 0x1e0507b9
[0217.059] GetCurrentObject (hdc=0xa50107a4, type=0x6) returned 0x8a01c2
[0217.059] SaveDC (hdc=0xa50107a4) returned 2
[0217.059] GetNearestColor (hdc=0xa50107a4, color=0xf0f0f0) returned 0xf0f0f0
[0217.059] CreateSolidBrush (color=0xf0f0f0) returned 0x7810078d
[0217.059] FillRect (hDC=0xa50107a4, lprc=0x53da70, hbr=0x7810078d) returned 1
[0217.059] DeleteObject (ho=0x7810078d) returned 1
[0217.059] RestoreDC (hdc=0xa50107a4, nSavedDC=-1) returned 1
[0217.059] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0217.059] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.059] GetSystemMetrics (nIndex=42) returned 0
[0217.059] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0217.059] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0217.060] RestoreDC (hdc=0xa50107a4, nSavedDC=-1) returned 1
[0217.060] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa50107a4) returned 0x0
[0217.060] IsAppThemed () returned 0x1
[0217.060] GetThemeAppProperties () returned 0x3
[0217.060] GetThemeAppProperties () returned 0x3
[0217.060] IsAppThemed () returned 0x1
[0217.060] GetThemeAppProperties () returned 0x3
[0217.060] GetThemeAppProperties () returned 0x3
[0217.060] IsThemePartDefined () returned 0x1
[0217.060] GdipCreateRegion (region=0x53dff4) returned 0x0
[0217.060] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.060] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0217.060] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.060] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0217.060] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0217.060] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0217.061] LocalFree (hMem=0x89ec80) returned 0x0
[0217.061] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0217.061] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0217.061] LocalFree (hMem=0x89ec80) returned 0x0
[0217.061] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.061] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0217.061] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0217.061] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0217.061] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.061] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0217.061] GetCurrentObject (hdc=0xa50107a4, type=0x1) returned 0xb00017
[0217.061] GetCurrentObject (hdc=0xa50107a4, type=0x2) returned 0x900010
[0217.061] GetCurrentObject (hdc=0xa50107a4, type=0x7) returned 0x1e0507b9
[0217.061] GetCurrentObject (hdc=0xa50107a4, type=0x6) returned 0x8a01c2
[0217.061] SaveDC (hdc=0xa50107a4) returned 1
[0217.061] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf604051e
[0217.062] GetClipRgn (hdc=0xa50107a4, hrgn=0xf604051e) returned 0
[0217.062] SelectClipRgn (hdc=0xa50107a4, hrgn=0x75040798) returned 2
[0217.062] DeleteObject (ho=0xf604051e) returned 1
[0217.062] DeleteObject (ho=0x75040798) returned 1
[0217.062] OffsetViewportOrgEx (in: hdc=0xa50107a4, x=0, y=0, lppt=0x233a3e4 | out: lppt=0x233a3e4) returned 1
[0217.062] IsAppThemed () returned 0x1
[0217.062] GetThemeAppProperties () returned 0x3
[0217.062] GetThemeAppProperties () returned 0x3
[0217.062] DrawThemeBackground () returned 0x0
[0217.064] RestoreDC (hdc=0xa50107a4, nSavedDC=-1) returned 1
[0217.064] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa50107a4) returned 0x0
[0217.064] GdipCreateRegion (region=0x53dff8) returned 0x0
[0217.064] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.064] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0217.064] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.064] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0217.064] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0217.064] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0217.064] LocalFree (hMem=0x89eac0) returned 0x0
[0217.065] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0217.065] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0217.065] LocalFree (hMem=0x89eee8) returned 0x0
[0217.065] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.065] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0217.065] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0217.065] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0217.065] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.065] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0217.065] GetCurrentObject (hdc=0xa50107a4, type=0x1) returned 0xb00017
[0217.065] GetCurrentObject (hdc=0xa50107a4, type=0x2) returned 0x900010
[0217.065] GetCurrentObject (hdc=0xa50107a4, type=0x7) returned 0x1e0507b9
[0217.065] GetCurrentObject (hdc=0xa50107a4, type=0x6) returned 0x8a01c2
[0217.065] SaveDC (hdc=0xa50107a4) returned 1
[0217.065] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x76040798
[0217.065] GetClipRgn (hdc=0xa50107a4, hrgn=0x76040798) returned 0
[0217.066] SelectClipRgn (hdc=0xa50107a4, hrgn=0xf704051e) returned 2
[0217.066] DeleteObject (ho=0x76040798) returned 1
[0217.066] DeleteObject (ho=0xf704051e) returned 1
[0217.066] OffsetViewportOrgEx (in: hdc=0xa50107a4, x=0, y=0, lppt=0x233a6b8 | out: lppt=0x233a6b8) returned 1
[0217.066] IsAppThemed () returned 0x1
[0217.066] GetThemeAppProperties () returned 0x3
[0217.066] GetThemeAppProperties () returned 0x3
[0217.066] GetThemeBackgroundContentRect () returned 0x0
[0217.066] RestoreDC (hdc=0xa50107a4, nSavedDC=-1) returned 1
[0217.066] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa50107a4) returned 0x0
[0217.066] IsAppThemed () returned 0x1
[0217.066] GetThemeAppProperties () returned 0x3
[0217.066] GetThemeAppProperties () returned 0x3
[0217.066] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0217.066] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0217.066] GetCurrentObject (hdc=0xa50107a4, type=0x1) returned 0xb00017
[0217.066] GetCurrentObject (hdc=0xa50107a4, type=0x2) returned 0x900010
[0217.066] GetCurrentObject (hdc=0xa50107a4, type=0x7) returned 0x1e0507b9
[0217.067] GetCurrentObject (hdc=0xa50107a4, type=0x6) returned 0x8a01c2
[0217.067] SaveDC (hdc=0xa50107a4) returned 1
[0217.067] GetTextAlign (hdc=0xa50107a4) returned 0x0
[0217.067] GetTextColor (hdc=0xa50107a4) returned 0x0
[0217.067] GetCurrentObject (hdc=0xa50107a4, type=0x6) returned 0x8a01c2
[0217.067] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0217.067] SelectObject (hdc=0xa50107a4, h=0x730a066d) returned 0x8a01c2
[0217.067] GetBkMode (hdc=0xa50107a4) returned 2
[0217.067] SetBkMode (hdc=0xa50107a4, mode=1) returned 2
[0217.067] DrawTextExW (in: hdc=0xa50107a4, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x233aa58 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0217.068] DrawTextExW (in: hdc=0xa50107a4, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x233aa58 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0217.111] RestoreDC (hdc=0xa50107a4, nSavedDC=-1) returned 1
[0217.111] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa50107a4) returned 0x0
[0217.111] GetFocus () returned 0x902be
[0217.111] IsAppThemed () returned 0x1
[0217.112] GetThemeAppProperties () returned 0x3
[0217.112] GetThemeAppProperties () returned 0x3
[0217.112] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0217.112] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0xa50107a4, x1=0, y1=0, rop=0xcc0020) returned 1
[0217.112] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa50107a4) returned 0x0
[0217.112] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0217.112] SelectObject (hdc=0xa50107a4, h=0x85000f) returned 0x1e0507b9
[0217.113] DeleteDC (hdc=0xa50107a4) returned 1
[0217.113] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0217.113] EndPaint (hWnd=0x802c0, lpPaint=0x53e2e4) returned 1
[0217.113] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.114] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x84, wParam=0x0, lParam=0x1920353) returned 0x1
[0217.114] IsWindowUnicode (hWnd=0x1402d6) returned 1
[0217.114] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.114] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.114] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.114] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x2a2, wParam=0x0, lParam=0x0) returned 0x0
[0217.114] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.114] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x84, wParam=0x0, lParam=0x1920353) returned 0x1
[0217.114] IsWindowUnicode (hWnd=0x1402d6) returned 1
[0217.115] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.115] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x84, wParam=0x0, lParam=0x1920353) returned 0x1
[0217.115] SetCursor (hCursor=0x10003) returned 0x10003
[0217.117] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.117] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.117] _TrackMouseEvent (in: lpEventTrack=0x233ab54 | out: lpEventTrack=0x233ab54) returned 1
[0217.118] SendMessageW (hWnd=0x1402d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0217.118] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0217.118] InvalidateRect (hWnd=0x1402d6, lpRect=0x0, bErase=0) returned 1
[0217.118] GetKeyState (nVirtKey=1) returned 0
[0217.118] GetKeyState (nVirtKey=2) returned 0
[0217.118] GetKeyState (nVirtKey=4) returned 0
[0217.118] GetKeyState (nVirtKey=5) returned 0
[0217.118] GetKeyState (nVirtKey=6) returned 0
[0217.118] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.118] IsWindowUnicode (hWnd=0x1402d6) returned 1
[0217.118] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.118] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.118] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.118] BeginPaint (in: hWnd=0x1402d6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0217.118] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0217.119] CreateCompatibleDC (hdc=0xf0105ee) returned 0x8f010527
[0217.119] SelectObject (hdc=0x8f010527, h=0x1e0507b9) returned 0x85000f
[0217.119] GdipCreateFromHDC (hdc=0x8f010527, graphics=0x53e300) returned 0x0
[0217.119] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0217.119] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0217.119] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0217.119] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.119] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0217.120] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0217.120] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0217.120] LocalFree (hMem=0x89eac0) returned 0x0
[0217.120] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.120] GdipCreateRegion (region=0x53e348) returned 0x0
[0217.120] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.120] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0217.120] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0217.120] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc8b0dbd) returned 0x0
[0217.120] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.120] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0217.120] GetCurrentObject (hdc=0x8f010527, type=0x1) returned 0xb00017
[0217.120] GetCurrentObject (hdc=0x8f010527, type=0x2) returned 0x900010
[0217.121] GetCurrentObject (hdc=0x8f010527, type=0x7) returned 0x1e0507b9
[0217.121] GetCurrentObject (hdc=0x8f010527, type=0x6) returned 0x8a01c2
[0217.121] SaveDC (hdc=0x8f010527) returned 1
[0217.121] GetNearestColor (hdc=0x8f010527, color=0xf0f0f0) returned 0xf0f0f0
[0217.121] GetNearestColor (hdc=0x8f010527, color=0xa0a0a0) returned 0xa0a0a0
[0217.121] GetNearestColor (hdc=0x8f010527, color=0x696969) returned 0x696969
[0217.121] GetNearestColor (hdc=0x8f010527, color=0xa0a0a0) returned 0xa0a0a0
[0217.121] GetNearestColor (hdc=0x8f010527, color=0x0) returned 0x0
[0217.121] GetNearestColor (hdc=0x8f010527, color=0xffffff) returned 0xffffff
[0217.121] GetNearestColor (hdc=0x8f010527, color=0xe5e5e5) returned 0xe5e5e5
[0217.121] GetNearestColor (hdc=0x8f010527, color=0xd7d7d7) returned 0xd7d7d7
[0217.121] GetNearestColor (hdc=0x8f010527, color=0x0) returned 0x0
[0217.122] RestoreDC (hdc=0x8f010527, nSavedDC=-1) returned 1
[0217.122] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f010527) returned 0x0
[0217.122] IsAppThemed () returned 0x1
[0217.122] GetThemeAppProperties () returned 0x3
[0217.122] GetThemeAppProperties () returned 0x3
[0217.122] IsAppThemed () returned 0x1
[0217.122] GetThemeAppProperties () returned 0x3
[0217.122] GetThemeAppProperties () returned 0x3
[0217.122] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x233b2b4 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0217.123] IsAppThemed () returned 0x1
[0217.123] GetThemeAppProperties () returned 0x3
[0217.123] GetThemeAppProperties () returned 0x3
[0217.123] IsAppThemed () returned 0x1
[0217.123] GetThemeAppProperties () returned 0x3
[0217.123] GetThemeAppProperties () returned 0x3
[0217.123] IsAppThemed () returned 0x1
[0217.123] GetThemeAppProperties () returned 0x3
[0217.123] GetThemeAppProperties () returned 0x3
[0217.123] IsAppThemed () returned 0x1
[0217.123] GetThemeAppProperties () returned 0x3
[0217.123] GetThemeAppProperties () returned 0x3
[0217.123] IsThemePartDefined () returned 0x1
[0217.123] IsAppThemed () returned 0x1
[0217.123] GetThemeAppProperties () returned 0x3
[0217.123] GetThemeAppProperties () returned 0x3
[0217.123] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0217.123] IsAppThemed () returned 0x1
[0217.123] GetThemeAppProperties () returned 0x3
[0217.124] GetThemeAppProperties () returned 0x3
[0217.124] IsAppThemed () returned 0x1
[0217.124] GetThemeAppProperties () returned 0x3
[0217.124] GetThemeAppProperties () returned 0x3
[0217.124] IsThemePartDefined () returned 0x1
[0217.124] GdipCreateRegion (region=0x53e064) returned 0x0
[0217.124] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.124] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0217.124] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.124] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0217.124] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0217.125] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0217.125] LocalFree (hMem=0x89eac0) returned 0x0
[0217.125] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0217.125] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0217.125] LocalFree (hMem=0x89ee08) returned 0x0
[0217.126] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.126] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0217.126] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0217.126] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0217.126] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.126] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0217.126] GetCurrentObject (hdc=0x8f010527, type=0x1) returned 0xb00017
[0217.126] GetCurrentObject (hdc=0x8f010527, type=0x2) returned 0x900010
[0217.126] GetCurrentObject (hdc=0x8f010527, type=0x7) returned 0x1e0507b9
[0217.126] GetCurrentObject (hdc=0x8f010527, type=0x6) returned 0x8a01c2
[0217.126] SaveDC (hdc=0x8f010527) returned 1
[0217.126] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf804051e
[0217.126] GetClipRgn (hdc=0x8f010527, hrgn=0xf804051e) returned 0
[0217.126] SelectClipRgn (hdc=0x8f010527, hrgn=0x7a040798) returned 2
[0217.126] DeleteObject (ho=0xf804051e) returned 1
[0217.127] DeleteObject (ho=0x7a040798) returned 1
[0217.127] OffsetViewportOrgEx (in: hdc=0x8f010527, x=0, y=0, lppt=0x233b964 | out: lppt=0x233b964) returned 1
[0217.127] DrawThemeParentBackground () returned 0x0
[0217.127] GetWindowPlacement (in: hWnd=0x18013e, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0217.127] GetClientRect (in: hWnd=0x18013e, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0217.127] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0217.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.127] GetSystemMetrics (nIndex=42) returned 0
[0217.127] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0217.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0217.127] GetClientRect (in: hWnd=0x18013e, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0217.127] GetCurrentObject (hdc=0x8f010527, type=0x1) returned 0xb00017
[0217.127] GetCurrentObject (hdc=0x8f010527, type=0x2) returned 0x900010
[0217.128] GetCurrentObject (hdc=0x8f010527, type=0x7) returned 0x1e0507b9
[0217.128] GetCurrentObject (hdc=0x8f010527, type=0x6) returned 0x8a01c2
[0217.128] SaveDC (hdc=0x8f010527) returned 2
[0217.128] GetNearestColor (hdc=0x8f010527, color=0xf0f0f0) returned 0xf0f0f0
[0217.128] CreateSolidBrush (color=0xf0f0f0) returned 0x7910078d
[0217.128] FillRect (hDC=0x8f010527, lprc=0x53dac8, hbr=0x7910078d) returned 1
[0217.128] DeleteObject (ho=0x7910078d) returned 1
[0217.128] RestoreDC (hdc=0x8f010527, nSavedDC=-1) returned 1
[0217.128] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0217.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.128] GetSystemMetrics (nIndex=42) returned 0
[0217.128] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0217.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0217.129] GetClientRect (in: hWnd=0x18013e, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0217.129] GetCurrentObject (hdc=0x8f010527, type=0x1) returned 0xb00017
[0217.129] GetCurrentObject (hdc=0x8f010527, type=0x2) returned 0x900010
[0217.129] GetCurrentObject (hdc=0x8f010527, type=0x7) returned 0x1e0507b9
[0217.129] GetCurrentObject (hdc=0x8f010527, type=0x6) returned 0x8a01c2
[0217.129] SaveDC (hdc=0x8f010527) returned 2
[0217.129] GetNearestColor (hdc=0x8f010527, color=0xf0f0f0) returned 0xf0f0f0
[0217.129] CreateSolidBrush (color=0xf0f0f0) returned 0x7a10078d
[0217.129] FillRect (hDC=0x8f010527, lprc=0x53da68, hbr=0x7a10078d) returned 1
[0217.129] DeleteObject (ho=0x7a10078d) returned 1
[0217.129] RestoreDC (hdc=0x8f010527, nSavedDC=-1) returned 1
[0217.129] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0217.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.129] GetSystemMetrics (nIndex=42) returned 0
[0217.129] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0217.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0217.130] RestoreDC (hdc=0x8f010527, nSavedDC=-1) returned 1
[0217.130] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f010527) returned 0x0
[0217.130] IsAppThemed () returned 0x1
[0217.130] GetThemeAppProperties () returned 0x3
[0217.130] GetThemeAppProperties () returned 0x3
[0217.130] IsAppThemed () returned 0x1
[0217.130] GetThemeAppProperties () returned 0x3
[0217.130] GetThemeAppProperties () returned 0x3
[0217.130] IsThemePartDefined () returned 0x1
[0217.130] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0217.130] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.130] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0217.130] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.137] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0217.137] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0217.137] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0217.137] LocalFree (hMem=0x89eac0) returned 0x0
[0217.137] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0217.137] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0217.137] LocalFree (hMem=0x89ee08) returned 0x0
[0217.137] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.137] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0217.137] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0217.137] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0217.137] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.137] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0217.137] GetCurrentObject (hdc=0x8f010527, type=0x1) returned 0xb00017
[0217.138] GetCurrentObject (hdc=0x8f010527, type=0x2) returned 0x900010
[0217.138] GetCurrentObject (hdc=0x8f010527, type=0x7) returned 0x1e0507b9
[0217.138] GetCurrentObject (hdc=0x8f010527, type=0x6) returned 0x8a01c2
[0217.138] SaveDC (hdc=0x8f010527) returned 1
[0217.138] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b040798
[0217.138] GetClipRgn (hdc=0x8f010527, hrgn=0x7b040798) returned 0
[0217.138] SelectClipRgn (hdc=0x8f010527, hrgn=0xfa04051e) returned 2
[0217.138] DeleteObject (ho=0x7b040798) returned 1
[0217.138] DeleteObject (ho=0xfa04051e) returned 1
[0217.138] OffsetViewportOrgEx (in: hdc=0x8f010527, x=0, y=0, lppt=0x233c1ec | out: lppt=0x233c1ec) returned 1
[0217.138] IsAppThemed () returned 0x1
[0217.138] GetThemeAppProperties () returned 0x3
[0217.138] GetThemeAppProperties () returned 0x3
[0217.138] DrawThemeBackground () returned 0x0
[0217.139] RestoreDC (hdc=0x8f010527, nSavedDC=-1) returned 1
[0217.139] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f010527) returned 0x0
[0217.139] GdipCreateRegion (region=0x53dfec) returned 0x0
[0217.139] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.139] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0217.139] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.139] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0217.139] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0217.139] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0217.139] LocalFree (hMem=0x89eac0) returned 0x0
[0217.139] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0217.139] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0217.139] LocalFree (hMem=0x89ee08) returned 0x0
[0217.139] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.139] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0217.139] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0217.140] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0217.140] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.140] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0217.140] GetCurrentObject (hdc=0x8f010527, type=0x1) returned 0xb00017
[0217.140] GetCurrentObject (hdc=0x8f010527, type=0x2) returned 0x900010
[0217.140] GetCurrentObject (hdc=0x8f010527, type=0x7) returned 0x1e0507b9
[0217.140] GetCurrentObject (hdc=0x8f010527, type=0x6) returned 0x8a01c2
[0217.140] SaveDC (hdc=0x8f010527) returned 1
[0217.140] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfb04051e
[0217.140] GetClipRgn (hdc=0x8f010527, hrgn=0xfb04051e) returned 0
[0217.140] SelectClipRgn (hdc=0x8f010527, hrgn=0x7c040798) returned 2
[0217.140] DeleteObject (ho=0xfb04051e) returned 1
[0217.140] DeleteObject (ho=0x7c040798) returned 1
[0217.140] OffsetViewportOrgEx (in: hdc=0x8f010527, x=0, y=0, lppt=0x233c4c0 | out: lppt=0x233c4c0) returned 1
[0217.140] IsAppThemed () returned 0x1
[0217.140] GetThemeAppProperties () returned 0x3
[0217.140] GetThemeAppProperties () returned 0x3
[0217.141] GetThemeBackgroundContentRect () returned 0x0
[0217.141] RestoreDC (hdc=0x8f010527, nSavedDC=-1) returned 1
[0217.141] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f010527) returned 0x0
[0217.141] IsAppThemed () returned 0x1
[0217.141] GetThemeAppProperties () returned 0x3
[0217.141] GetThemeAppProperties () returned 0x3
[0217.141] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0217.141] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0217.141] GetCurrentObject (hdc=0x8f010527, type=0x1) returned 0xb00017
[0217.141] GetCurrentObject (hdc=0x8f010527, type=0x2) returned 0x900010
[0217.141] GetCurrentObject (hdc=0x8f010527, type=0x7) returned 0x1e0507b9
[0217.141] GetCurrentObject (hdc=0x8f010527, type=0x6) returned 0x8a01c2
[0217.141] SaveDC (hdc=0x8f010527) returned 1
[0217.141] GetTextAlign (hdc=0x8f010527) returned 0x0
[0217.141] GetTextColor (hdc=0x8f010527) returned 0x0
[0217.141] GetCurrentObject (hdc=0x8f010527, type=0x6) returned 0x8a01c2
[0217.141] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0217.142] SelectObject (hdc=0x8f010527, h=0x730a066d) returned 0x8a01c2
[0217.142] GetBkMode (hdc=0x8f010527) returned 2
[0217.142] SetBkMode (hdc=0x8f010527, mode=1) returned 2
[0217.142] DrawTextExW (in: hdc=0x8f010527, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x233c860 | out: lpchText="OK", lprc=0x53df84) returned 13
[0217.142] DrawTextExW (in: hdc=0x8f010527, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x233c860 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0217.143] RestoreDC (hdc=0x8f010527, nSavedDC=-1) returned 1
[0217.143] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f010527) returned 0x0
[0217.143] GetFocus () returned 0x902be
[0217.143] IsAppThemed () returned 0x1
[0217.143] GetThemeAppProperties () returned 0x3
[0217.143] GetThemeAppProperties () returned 0x3
[0217.143] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0217.143] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x8f010527, x1=0, y1=0, rop=0xcc0020) returned 1
[0217.143] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f010527) returned 0x0
[0217.143] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0217.143] SelectObject (hdc=0x8f010527, h=0x85000f) returned 0x1e0507b9
[0217.143] DeleteDC (hdc=0x8f010527) returned 1
[0217.144] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0217.144] EndPaint (hWnd=0x1402d6, lpPaint=0x53e2e4) returned 1
[0217.144] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.144] IsWindowUnicode (hWnd=0x202c6) returned 1
[0217.144] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.144] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.144] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.144] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0217.144] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0217.144] CreateCompatibleDC (hdc=0x8b010786) returned 0x91010527
[0217.144] SelectObject (hdc=0x91010527, h=0x1e0507b9) returned 0x85000f
[0217.144] GdipCreateFromHDC (hdc=0x91010527, graphics=0x53e300) returned 0x0
[0217.145] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0217.145] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0217.145] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0217.145] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.145] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0217.145] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0217.145] LocalFree (hMem=0x89ec80) returned 0x0
[0217.145] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.145] GdipCreateRegion (region=0x53e348) returned 0x0
[0217.145] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.145] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0217.145] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0217.145] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc890dbd) returned 0x0
[0217.145] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.145] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0217.145] GetCurrentObject (hdc=0x91010527, type=0x1) returned 0xb00017
[0217.145] GetCurrentObject (hdc=0x91010527, type=0x2) returned 0x900010
[0217.145] GetCurrentObject (hdc=0x91010527, type=0x7) returned 0x1e0507b9
[0217.145] GetCurrentObject (hdc=0x91010527, type=0x6) returned 0x8a01c2
[0217.145] SaveDC (hdc=0x91010527) returned 1
[0217.146] GetNearestColor (hdc=0x91010527, color=0xff) returned 0xff
[0217.146] GetNearestColor (hdc=0x91010527, color=0x55) returned 0x55
[0217.146] GetNearestColor (hdc=0x91010527, color=0x0) returned 0x0
[0217.146] GetNearestColor (hdc=0x91010527, color=0x55) returned 0x55
[0217.146] GetNearestColor (hdc=0x91010527, color=0x0) returned 0x0
[0217.146] GetNearestColor (hdc=0x91010527, color=0x8080ff) returned 0x8080ff
[0217.146] GetNearestColor (hdc=0x91010527, color=0x7373e5) returned 0x7373e5
[0217.146] GetNearestColor (hdc=0x91010527, color=0xe5) returned 0xe5
[0217.146] GetNearestColor (hdc=0x91010527, color=0x0) returned 0x0
[0217.146] RestoreDC (hdc=0x91010527, nSavedDC=-1) returned 1
[0217.147] GdipReleaseDC (graphics=0x5d92c30, hdc=0x91010527) returned 0x0
[0217.147] IsAppThemed () returned 0x1
[0217.147] GetThemeAppProperties () returned 0x3
[0217.147] GetThemeAppProperties () returned 0x3
[0217.147] IsAppThemed () returned 0x1
[0217.147] GetThemeAppProperties () returned 0x3
[0217.147] GetThemeAppProperties () returned 0x3
[0217.147] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0217.147] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x233d044 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0217.147] IsAppThemed () returned 0x1
[0217.147] GetThemeAppProperties () returned 0x3
[0217.147] GetThemeAppProperties () returned 0x3
[0217.147] IsAppThemed () returned 0x1
[0217.148] GetThemeAppProperties () returned 0x3
[0217.148] GetThemeAppProperties () returned 0x3
[0217.148] GetFocus () returned 0x902be
[0217.148] IsAppThemed () returned 0x1
[0217.148] GetThemeAppProperties () returned 0x3
[0217.148] GetThemeAppProperties () returned 0x3
[0217.148] IsAppThemed () returned 0x1
[0217.148] GetThemeAppProperties () returned 0x3
[0217.148] GetThemeAppProperties () returned 0x3
[0217.148] IsThemePartDefined () returned 0x1
[0217.148] IsAppThemed () returned 0x1
[0217.148] GetThemeAppProperties () returned 0x3
[0217.148] GetThemeAppProperties () returned 0x3
[0217.148] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0217.148] IsAppThemed () returned 0x1
[0217.148] GetThemeAppProperties () returned 0x3
[0217.148] GetThemeAppProperties () returned 0x3
[0217.148] IsAppThemed () returned 0x1
[0217.148] GetThemeAppProperties () returned 0x3
[0217.148] GetThemeAppProperties () returned 0x3
[0217.148] IsThemePartDefined () returned 0x1
[0217.148] GdipCreateRegion (region=0x53e070) returned 0x0
[0217.148] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.148] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0217.148] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.148] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0217.148] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0217.149] LocalFree (hMem=0x89eac0) returned 0x0
[0217.149] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0217.149] LocalFree (hMem=0x89eac0) returned 0x0
[0217.149] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.149] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0217.149] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0217.149] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0217.149] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.149] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0217.149] GetCurrentObject (hdc=0x91010527, type=0x1) returned 0xb00017
[0217.149] GetCurrentObject (hdc=0x91010527, type=0x2) returned 0x900010
[0217.149] GetCurrentObject (hdc=0x91010527, type=0x7) returned 0x1e0507b9
[0217.149] GetCurrentObject (hdc=0x91010527, type=0x6) returned 0x8a01c2
[0217.149] SaveDC (hdc=0x91010527) returned 1
[0217.149] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d040798
[0217.149] GetClipRgn (hdc=0x91010527, hrgn=0x7d040798) returned 0
[0217.149] SelectClipRgn (hdc=0x91010527, hrgn=0xff04051e) returned 2
[0217.149] DeleteObject (ho=0x7d040798) returned 1
[0217.149] DeleteObject (ho=0xff04051e) returned 1
[0217.149] OffsetViewportOrgEx (in: hdc=0x91010527, x=0, y=0, lppt=0x233d6f4 | out: lppt=0x233d6f4) returned 1
[0217.149] DrawThemeParentBackground () returned 0x0
[0217.150] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0217.150] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0217.150] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0217.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0217.150] GetSystemMetrics (nIndex=42) returned 0
[0217.150] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0217.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0217.150] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0217.150] GetCurrentObject (hdc=0x91010527, type=0x1) returned 0xb00017
[0217.150] GetCurrentObject (hdc=0x91010527, type=0x2) returned 0x900010
[0217.150] GetCurrentObject (hdc=0x91010527, type=0x7) returned 0x1e0507b9
[0217.150] GetCurrentObject (hdc=0x91010527, type=0x6) returned 0x8a01c2
[0217.150] SaveDC (hdc=0x91010527) returned 2
[0217.150] GetNearestColor (hdc=0x91010527, color=0xff) returned 0xff
[0217.150] CreateSolidBrush (color=0xff) returned 0x7b10078d
[0217.150] FillRect (hDC=0x91010527, lprc=0x53dad0, hbr=0x7b10078d) returned 1
[0217.150] DeleteObject (ho=0x7b10078d) returned 1
[0217.150] RestoreDC (hdc=0x91010527, nSavedDC=-1) returned 1
[0217.150] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0217.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0217.151] GetSystemMetrics (nIndex=42) returned 0
[0217.151] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0217.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0217.151] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0217.151] GetCurrentObject (hdc=0x91010527, type=0x1) returned 0xb00017
[0217.151] GetCurrentObject (hdc=0x91010527, type=0x2) returned 0x900010
[0217.151] GetCurrentObject (hdc=0x91010527, type=0x7) returned 0x1e0507b9
[0217.151] GetCurrentObject (hdc=0x91010527, type=0x6) returned 0x8a01c2
[0217.151] SaveDC (hdc=0x91010527) returned 2
[0217.151] GetNearestColor (hdc=0x91010527, color=0xff) returned 0xff
[0217.151] CreateSolidBrush (color=0xff) returned 0x7c10078d
[0217.151] FillRect (hDC=0x91010527, lprc=0x53da70, hbr=0x7c10078d) returned 1
[0217.151] DeleteObject (ho=0x7c10078d) returned 1
[0217.151] RestoreDC (hdc=0x91010527, nSavedDC=-1) returned 1
[0217.151] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0217.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0217.151] GetSystemMetrics (nIndex=42) returned 0
[0217.151] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0217.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0217.152] RestoreDC (hdc=0x91010527, nSavedDC=-1) returned 1
[0217.152] GdipReleaseDC (graphics=0x5d92c30, hdc=0x91010527) returned 0x0
[0217.152] IsAppThemed () returned 0x1
[0217.152] GetThemeAppProperties () returned 0x3
[0217.152] GetThemeAppProperties () returned 0x3
[0217.152] IsAppThemed () returned 0x1
[0217.152] GetThemeAppProperties () returned 0x3
[0217.152] GetThemeAppProperties () returned 0x3
[0217.152] IsThemePartDefined () returned 0x1
[0217.152] GdipCreateRegion (region=0x53dff4) returned 0x0
[0217.152] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.152] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0217.152] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.152] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0217.152] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0217.152] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0217.152] LocalFree (hMem=0x89eac0) returned 0x0
[0217.152] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0217.152] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0217.152] LocalFree (hMem=0x89eee8) returned 0x0
[0217.152] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.152] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0217.152] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0217.153] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0217.153] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.153] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0217.153] GetCurrentObject (hdc=0x91010527, type=0x1) returned 0xb00017
[0217.153] GetCurrentObject (hdc=0x91010527, type=0x2) returned 0x900010
[0217.153] GetCurrentObject (hdc=0x91010527, type=0x7) returned 0x1e0507b9
[0217.153] GetCurrentObject (hdc=0x91010527, type=0x6) returned 0x8a01c2
[0217.153] SaveDC (hdc=0x91010527) returned 1
[0217.153] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4051e
[0217.153] GetClipRgn (hdc=0x91010527, hrgn=0x4051e) returned 0
[0217.153] SelectClipRgn (hdc=0x91010527, hrgn=0x7f040798) returned 2
[0217.153] DeleteObject (ho=0x4051e) returned 1
[0217.153] DeleteObject (ho=0x7f040798) returned 1
[0217.153] OffsetViewportOrgEx (in: hdc=0x91010527, x=0, y=0, lppt=0x233df58 | out: lppt=0x233df58) returned 1
[0217.153] IsAppThemed () returned 0x1
[0217.153] GetThemeAppProperties () returned 0x3
[0217.153] GetThemeAppProperties () returned 0x3
[0217.153] DrawThemeBackground () returned 0x0
[0217.153] RestoreDC (hdc=0x91010527, nSavedDC=-1) returned 1
[0217.153] GdipReleaseDC (graphics=0x5d92c30, hdc=0x91010527) returned 0x0
[0217.154] GdipCreateRegion (region=0x53dff8) returned 0x0
[0217.154] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.154] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0217.154] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.154] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0217.154] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0217.154] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0217.154] LocalFree (hMem=0x89ec80) returned 0x0
[0217.154] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0217.154] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0217.154] LocalFree (hMem=0x89eac0) returned 0x0
[0217.154] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.154] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0217.154] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0217.154] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0217.154] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.154] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0217.154] GetCurrentObject (hdc=0x91010527, type=0x1) returned 0xb00017
[0217.154] GetCurrentObject (hdc=0x91010527, type=0x2) returned 0x900010
[0217.154] GetCurrentObject (hdc=0x91010527, type=0x7) returned 0x1e0507b9
[0217.154] GetCurrentObject (hdc=0x91010527, type=0x6) returned 0x8a01c2
[0217.154] SaveDC (hdc=0x91010527) returned 1
[0217.155] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x80040798
[0217.155] GetClipRgn (hdc=0x91010527, hrgn=0x80040798) returned 0
[0217.155] SelectClipRgn (hdc=0x91010527, hrgn=0x104051e) returned 2
[0217.155] DeleteObject (ho=0x80040798) returned 1
[0217.155] DeleteObject (ho=0x104051e) returned 1
[0217.155] OffsetViewportOrgEx (in: hdc=0x91010527, x=0, y=0, lppt=0x233e22c | out: lppt=0x233e22c) returned 1
[0217.155] IsAppThemed () returned 0x1
[0217.155] GetThemeAppProperties () returned 0x3
[0217.155] GetThemeAppProperties () returned 0x3
[0217.155] GetThemeBackgroundContentRect () returned 0x0
[0217.155] RestoreDC (hdc=0x91010527, nSavedDC=-1) returned 1
[0217.155] GdipReleaseDC (graphics=0x5d92c30, hdc=0x91010527) returned 0x0
[0217.155] IsAppThemed () returned 0x1
[0217.155] GetThemeAppProperties () returned 0x3
[0217.155] GetThemeAppProperties () returned 0x3
[0217.155] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0217.155] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0217.155] GetCurrentObject (hdc=0x91010527, type=0x1) returned 0xb00017
[0217.155] GetCurrentObject (hdc=0x91010527, type=0x2) returned 0x900010
[0217.156] GetCurrentObject (hdc=0x91010527, type=0x7) returned 0x1e0507b9
[0217.156] GetCurrentObject (hdc=0x91010527, type=0x6) returned 0x8a01c2
[0217.156] SaveDC (hdc=0x91010527) returned 1
[0217.156] GetTextAlign (hdc=0x91010527) returned 0x0
[0217.156] GetTextColor (hdc=0x91010527) returned 0x0
[0217.156] GetCurrentObject (hdc=0x91010527, type=0x6) returned 0x8a01c2
[0217.156] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0217.156] SelectObject (hdc=0x91010527, h=0x450a0799) returned 0x8a01c2
[0217.156] GetBkMode (hdc=0x91010527) returned 2
[0217.156] SetBkMode (hdc=0x91010527, mode=1) returned 2
[0217.156] DrawTextExW (in: hdc=0x91010527, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x233e5cc | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0217.156] DrawTextExW (in: hdc=0x91010527, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x233e5cc | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0217.157] RestoreDC (hdc=0x91010527, nSavedDC=-1) returned 1
[0217.157] GdipReleaseDC (graphics=0x5d92c30, hdc=0x91010527) returned 0x0
[0217.157] GetFocus () returned 0x902be
[0217.157] IsAppThemed () returned 0x1
[0217.157] GetThemeAppProperties () returned 0x3
[0217.157] GetThemeAppProperties () returned 0x3
[0217.157] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0217.157] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x91010527, x1=0, y1=0, rop=0xcc0020) returned 1
[0217.158] GdipReleaseDC (graphics=0x5d92c30, hdc=0x91010527) returned 0x0
[0217.158] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0217.158] SelectObject (hdc=0x91010527, h=0x85000f) returned 0x1e0507b9
[0217.158] DeleteDC (hdc=0x91010527) returned 1
[0217.158] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0217.158] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0217.159] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0217.159] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0217.159] WaitMessage () returned 1
[0217.183] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.183] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.183] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.183] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.183] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.185] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0217.185] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0217.185] WaitMessage () returned 1
[0217.185] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.185] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.185] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.185] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.185] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.186] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.187] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.187] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.187] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.187] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.187] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.187] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.187] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.187] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.187] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.187] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0217.188] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0217.188] WaitMessage () returned 1
[0217.188] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.188] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.188] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.188] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.188] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.189] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.189] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.189] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.189] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.189] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.190] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.190] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.190] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.190] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.190] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.190] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0217.190] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0217.190] WaitMessage () returned 1
[0217.190] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.190] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.191] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.191] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.191] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.192] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.192] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.192] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.192] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.192] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.192] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.192] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.192] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.192] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.193] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.193] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0217.197] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0217.197] WaitMessage () returned 1
[0217.229] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.229] IsWindowUnicode (hWnd=0x1402d6) returned 1
[0217.229] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.229] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.229] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.229] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.229] IsWindowUnicode (hWnd=0x1402d6) returned 1
[0217.229] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.229] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.229] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.229] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x2a1, wParam=0x0, lParam=0x90012) returned 0x0
[0217.229] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.230] IsWindowUnicode (hWnd=0x202d0) returned 1
[0217.230] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.230] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.230] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.230] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0217.230] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0217.230] WaitMessage () returned 1
[0217.295] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.295] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x84, wParam=0x0, lParam=0x1920353) returned 0x1
[0217.295] IsWindowUnicode (hWnd=0x1402d6) returned 1
[0217.295] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.295] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x84, wParam=0x0, lParam=0x1920353) returned 0x1
[0217.295] GetDlgItem (hDlg=0x18013e, nIDDlgItem=0) returned 0x0
[0217.295] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x210, wParam=0x201, lParam=0x150134) returned 0x0
[0217.295] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x21, wParam=0x18013e, lParam=0x2010001) returned 0x1
[0217.295] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x21, wParam=0x18013e, lParam=0x2010001) returned 0x1
[0217.295] SetCursor (hCursor=0x10003) returned 0x10003
[0217.296] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.296] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0217.296] GetKeyState (nVirtKey=1) returned -127
[0217.296] GetKeyState (nVirtKey=2) returned 0
[0217.296] GetKeyState (nVirtKey=4) returned 0
[0217.296] GetKeyState (nVirtKey=5) returned 0
[0217.296] GetKeyState (nVirtKey=6) returned 0
[0217.296] IsWindowVisible (hWnd=0x1402d6) returned 1
[0217.296] IsWindowEnabled (hWnd=0x1402d6) returned 1
[0217.296] SetFocus (hWnd=0x1402d6) returned 0x902be
[0217.296] GetFocus () returned 0x1402d6
[0217.297] IsChild (hWndParent=0x18013e, hWnd=0x1402d6) returned 1
[0217.297] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x8, wParam=0x1402d6, lParam=0x0) returned 0x1
[0217.297] SendMessageW (hWnd=0x902be, Msg=0x2111, wParam=0x20002be, lParam=0x902be) returned 0x0
[0217.298] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0217.300] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0217.301] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0217.301] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0217.302] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0217.302] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0217.305] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0217.305] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x7, wParam=0x902be, lParam=0x0) returned 0x0
[0217.305] GetStockObject (i=5) returned 0x900015
[0217.305] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0217.305] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0xd, wParam=0x3, lParam=0x89e698) returned 0x2
[0217.305] GetDlgItem (hDlg=0x18013e, nIDDlgItem=1311446) returned 0x1402d6
[0217.305] SendMessageW (hWnd=0x1402d6, Msg=0x202b, wParam=0x1402d6, lParam=0x53de74) returned 0x0
[0217.305] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x202b, wParam=0x1402d6, lParam=0x53de74) returned 0x0
[0217.306] InvalidateRect (hWnd=0x1402d6, lpRect=0x0, bErase=0) returned 1
[0217.307] GetFocus () returned 0x1402d6
[0217.308] GetFocus () returned 0x1402d6
[0217.308] GetFocus () returned 0x1402d6
[0217.308] GetKeyState (nVirtKey=1) returned -127
[0217.308] GetKeyState (nVirtKey=2) returned 0
[0217.308] GetKeyState (nVirtKey=4) returned 0
[0217.308] GetKeyState (nVirtKey=5) returned 0
[0217.308] GetKeyState (nVirtKey=6) returned 0
[0217.308] GetCapture () returned 0x0
[0217.308] SetCapture (hWnd=0x1402d6) returned 0x0
[0217.308] GetKeyState (nVirtKey=1) returned -127
[0217.308] GetKeyState (nVirtKey=2) returned 0
[0217.308] GetKeyState (nVirtKey=4) returned 0
[0217.308] GetKeyState (nVirtKey=5) returned 0
[0217.308] GetKeyState (nVirtKey=6) returned 0
[0217.308] NotifyWinEvent (event=0x800a, hwnd=0x1402d6, idObject=-4, idChild=0)
[0217.308] InvalidateRect (hWnd=0x1402d6, lpRect=0x53e4c8, bErase=0) returned 1
[0217.308] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.308] IsWindowUnicode (hWnd=0x1402d6) returned 1
[0217.309] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0217.309] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0217.309] DispatchMessageW (lpMsg=0x53e8a0)
[0217.309] MapWindowPoints (in: hWndFrom=0x1402d6, hWndTo=0x0, lpPoints=0x233e840, cPoints=0x1 | out: lpPoints=0x233e840) returned 25756481
[0217.309] NotifyWinEvent (event=0x800a, hwnd=0x1402d6, idObject=-4, idChild=0)
[0217.309] InvalidateRect (hWnd=0x1402d6, lpRect=0x53e468, bErase=0) returned 1
[0217.309] UpdateWindow (hWnd=0x1402d6)
[0217.309] BeginPaint (in: hWnd=0x1402d6, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x8b010786
[0217.309] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0217.309] CreateCompatibleDC (hdc=0x8b010786) returned 0x1d0107c7
[0217.309] SelectObject (hdc=0x1d0107c7, h=0x1e0507b9) returned 0x85000f
[0217.310] GdipCreateFromHDC (hdc=0x1d0107c7, graphics=0x53df98) returned 0x0
[0217.310] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0217.310] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0217.310] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0217.310] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.310] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0217.310] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0217.310] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0217.310] LocalFree (hMem=0x89ec80) returned 0x0
[0217.310] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.310] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0217.310] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.310] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0217.311] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0217.311] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc870dbd) returned 0x0
[0217.311] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.311] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0217.311] GetCurrentObject (hdc=0x1d0107c7, type=0x1) returned 0xb00017
[0217.311] GetCurrentObject (hdc=0x1d0107c7, type=0x2) returned 0x900010
[0217.311] GetCurrentObject (hdc=0x1d0107c7, type=0x7) returned 0x1e0507b9
[0217.311] GetCurrentObject (hdc=0x1d0107c7, type=0x6) returned 0x8a01c2
[0217.311] SaveDC (hdc=0x1d0107c7) returned 1
[0217.311] GetNearestColor (hdc=0x1d0107c7, color=0xf0f0f0) returned 0xf0f0f0
[0217.311] GetNearestColor (hdc=0x1d0107c7, color=0xa0a0a0) returned 0xa0a0a0
[0217.311] GetNearestColor (hdc=0x1d0107c7, color=0x696969) returned 0x696969
[0217.311] GetNearestColor (hdc=0x1d0107c7, color=0xa0a0a0) returned 0xa0a0a0
[0217.312] GetNearestColor (hdc=0x1d0107c7, color=0x0) returned 0x0
[0217.312] GetNearestColor (hdc=0x1d0107c7, color=0xffffff) returned 0xffffff
[0217.312] GetNearestColor (hdc=0x1d0107c7, color=0xe5e5e5) returned 0xe5e5e5
[0217.312] GetNearestColor (hdc=0x1d0107c7, color=0xd7d7d7) returned 0xd7d7d7
[0217.312] GetNearestColor (hdc=0x1d0107c7, color=0x0) returned 0x0
[0217.312] RestoreDC (hdc=0x1d0107c7, nSavedDC=-1) returned 1
[0217.312] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1d0107c7) returned 0x0
[0217.312] IsAppThemed () returned 0x1
[0217.312] GetThemeAppProperties () returned 0x3
[0217.312] GetThemeAppProperties () returned 0x3
[0217.312] IsAppThemed () returned 0x1
[0217.312] GetThemeAppProperties () returned 0x3
[0217.312] GetThemeAppProperties () returned 0x3
[0217.312] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0217.313] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x233efb4 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0217.313] IsAppThemed () returned 0x1
[0217.313] GetThemeAppProperties () returned 0x3
[0217.313] GetThemeAppProperties () returned 0x3
[0217.313] IsAppThemed () returned 0x1
[0217.313] GetThemeAppProperties () returned 0x3
[0217.313] GetThemeAppProperties () returned 0x3
[0217.313] IsAppThemed () returned 0x1
[0217.313] GetThemeAppProperties () returned 0x3
[0217.313] GetThemeAppProperties () returned 0x3
[0217.313] IsAppThemed () returned 0x1
[0217.313] GetThemeAppProperties () returned 0x3
[0217.314] GetThemeAppProperties () returned 0x3
[0217.314] IsThemePartDefined () returned 0x1
[0217.314] IsAppThemed () returned 0x1
[0217.314] GetThemeAppProperties () returned 0x3
[0217.314] GetThemeAppProperties () returned 0x3
[0217.314] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0217.314] IsAppThemed () returned 0x1
[0217.314] GetThemeAppProperties () returned 0x3
[0217.314] GetThemeAppProperties () returned 0x3
[0217.314] IsAppThemed () returned 0x1
[0217.314] GetThemeAppProperties () returned 0x3
[0217.314] GetThemeAppProperties () returned 0x3
[0217.314] IsThemePartDefined () returned 0x1
[0217.314] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0217.314] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.314] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0217.314] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.314] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0217.314] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0217.315] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0217.315] LocalFree (hMem=0x89ee40) returned 0x0
[0217.315] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0217.315] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0217.315] LocalFree (hMem=0x89ee08) returned 0x0
[0217.315] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.315] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0217.315] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0217.315] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0217.315] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.315] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0217.315] GetCurrentObject (hdc=0x1d0107c7, type=0x1) returned 0xb00017
[0217.315] GetCurrentObject (hdc=0x1d0107c7, type=0x2) returned 0x900010
[0217.315] GetCurrentObject (hdc=0x1d0107c7, type=0x7) returned 0x1e0507b9
[0217.315] GetCurrentObject (hdc=0x1d0107c7, type=0x6) returned 0x8a01c2
[0217.316] SaveDC (hdc=0x1d0107c7) returned 1
[0217.316] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x204051e
[0217.316] GetClipRgn (hdc=0x1d0107c7, hrgn=0x204051e) returned 0
[0217.316] SelectClipRgn (hdc=0x1d0107c7, hrgn=0x84040798) returned 2
[0217.316] DeleteObject (ho=0x204051e) returned 1
[0217.316] DeleteObject (ho=0x84040798) returned 1
[0217.316] OffsetViewportOrgEx (in: hdc=0x1d0107c7, x=0, y=0, lppt=0x233f664 | out: lppt=0x233f664) returned 1
[0217.316] DrawThemeParentBackground ()
[0217.316] GetWindowPlacement (in: hWnd=0x18013e, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0217.316] GetClientRect (in: hWnd=0x18013e, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0217.316] GetWindowTextLengthW (hWnd=0x18013e)
[0217.316] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.317] GetSystemMetrics (nIndex=42) returned 0
[0217.317] GetWindowTextW (hWnd=0x18013e, lpString=0x53d878, nMaxCount=11)
[0217.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0217.317] GetClientRect (in: hWnd=0x18013e, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0217.317] GetCurrentObject (hdc=0x1d0107c7, type=0x1) returned 0xb00017
[0217.317] GetCurrentObject (hdc=0x1d0107c7, type=0x2) returned 0x900010
[0217.317] GetCurrentObject (hdc=0x1d0107c7, type=0x7) returned 0x1e0507b9
[0217.317] GetCurrentObject (hdc=0x1d0107c7, type=0x6) returned 0x8a01c2
[0217.317] SaveDC (hdc=0x1d0107c7) returned 2
[0217.317] GetNearestColor (hdc=0x1d0107c7, color=0xf0f0f0) returned 0xf0f0f0
[0217.317] CreateSolidBrush (color=0xf0f0f0) returned 0x7d10078d
[0217.317] FillRect (hDC=0x1d0107c7, lprc=0x53d760, hbr=0x7d10078d) returned 1
[0217.317] DeleteObject (ho=0x7d10078d) returned 1
[0217.317] RestoreDC (hdc=0x1d0107c7, nSavedDC=-1) returned 1
[0217.318] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.319] GetWindowTextW (hWnd=0x18013e, lpString=0x53d818, nMaxCount=11)
[0217.319] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0217.319] GetClientRect (in: hWnd=0x18013e, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0217.319] GetCurrentObject (hdc=0x1d0107c7, type=0x1) returned 0xb00017
[0217.319] GetCurrentObject (hdc=0x1d0107c7, type=0x2) returned 0x900010
[0217.319] GetCurrentObject (hdc=0x1d0107c7, type=0x7) returned 0x1e0507b9
[0217.319] GetCurrentObject (hdc=0x1d0107c7, type=0x6) returned 0x8a01c2
[0217.320] SaveDC (hdc=0x1d0107c7) returned 2
[0217.320] GetNearestColor (hdc=0x1d0107c7, color=0xf0f0f0) returned 0xf0f0f0
[0217.320] CreateSolidBrush (color=0xf0f0f0) returned 0x7e10078d
[0217.320] FillRect (hDC=0x1d0107c7, lprc=0x53d700, hbr=0x7e10078d) returned 1
[0217.320] DeleteObject (ho=0x7e10078d) returned 1
[0217.320] RestoreDC (hdc=0x1d0107c7, nSavedDC=-1) returned 1
[0217.320] GetWindowTextLengthW (hWnd=0x18013e)
[0217.320] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.320] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0217.321] RestoreDC (hdc=0x1d0107c7, nSavedDC=-1) returned 1
[0217.321] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1d0107c7) returned 0x0
[0217.321] IsAppThemed () returned 0x1
[0217.321] GetThemeAppProperties () returned 0x3
[0217.321] GetThemeAppProperties () returned 0x3
[0217.321] IsAppThemed () returned 0x1
[0217.322] GetThemeAppProperties () returned 0x3
[0217.322] GetThemeAppProperties () returned 0x3
[0217.322] IsThemePartDefined () returned 0x1
[0217.322] GdipCreateRegion (region=0x53dc80) returned 0x0
[0217.322] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.322] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0217.322] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.322] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0217.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0217.322] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0217.322] LocalFree (hMem=0x89ea88) returned 0x0
[0217.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0217.322] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0217.322] LocalFree (hMem=0x89ee08) returned 0x0
[0217.322] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.322] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0217.322] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0217.322] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0217.323] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.323] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0217.323] GetCurrentObject (hdc=0x1d0107c7, type=0x1) returned 0xb00017
[0217.323] GetCurrentObject (hdc=0x1d0107c7, type=0x2) returned 0x900010
[0217.323] GetCurrentObject (hdc=0x1d0107c7, type=0x7) returned 0x1e0507b9
[0217.323] GetCurrentObject (hdc=0x1d0107c7, type=0x6) returned 0x8a01c2
[0217.323] SaveDC (hdc=0x1d0107c7) returned 1
[0217.323] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x85040798
[0217.323] GetClipRgn (hdc=0x1d0107c7, hrgn=0x85040798) returned 0
[0217.323] SelectClipRgn (hdc=0x1d0107c7, hrgn=0x404051e) returned 2
[0217.323] DeleteObject (ho=0x85040798) returned 1
[0217.323] DeleteObject (ho=0x404051e) returned 1
[0217.323] OffsetViewportOrgEx (in: hdc=0x1d0107c7, x=0, y=0, lppt=0x233feec | out: lppt=0x233feec) returned 1
[0217.323] IsAppThemed () returned 0x1
[0217.323] GetThemeAppProperties () returned 0x3
[0217.323] GetThemeAppProperties () returned 0x3
[0217.323] DrawThemeBackground () returned 0x0
[0217.323] RestoreDC (hdc=0x1d0107c7, nSavedDC=-1) returned 1
[0217.323] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1d0107c7) returned 0x0
[0217.324] GdipCreateRegion (region=0x53dc84) returned 0x0
[0217.324] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.324] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0217.324] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.324] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0217.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0217.324] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0217.324] LocalFree (hMem=0x89ec80) returned 0x0
[0217.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0217.324] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0217.324] LocalFree (hMem=0x89ea88) returned 0x0
[0217.324] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.324] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0217.324] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0217.324] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0217.324] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.324] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0217.324] GetCurrentObject (hdc=0x1d0107c7, type=0x1) returned 0xb00017
[0217.324] GetCurrentObject (hdc=0x1d0107c7, type=0x2) returned 0x900010
[0217.324] GetCurrentObject (hdc=0x1d0107c7, type=0x7) returned 0x1e0507b9
[0217.324] GetCurrentObject (hdc=0x1d0107c7, type=0x6) returned 0x8a01c2
[0217.324] SaveDC (hdc=0x1d0107c7) returned 1
[0217.325] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x504051e
[0217.325] GetClipRgn (hdc=0x1d0107c7, hrgn=0x504051e) returned 0
[0217.325] SelectClipRgn (hdc=0x1d0107c7, hrgn=0x86040798) returned 2
[0217.325] DeleteObject (ho=0x504051e) returned 1
[0217.325] DeleteObject (ho=0x86040798) returned 1
[0217.325] OffsetViewportOrgEx (in: hdc=0x1d0107c7, x=0, y=0, lppt=0x23401c0 | out: lppt=0x23401c0) returned 1
[0217.325] IsAppThemed () returned 0x1
[0217.325] GetThemeAppProperties () returned 0x3
[0217.325] GetThemeAppProperties () returned 0x3
[0217.325] GetThemeBackgroundContentRect () returned 0x0
[0217.325] RestoreDC (hdc=0x1d0107c7, nSavedDC=-1) returned 1
[0217.325] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1d0107c7) returned 0x0
[0217.325] IsAppThemed () returned 0x1
[0217.325] GetThemeAppProperties () returned 0x3
[0217.325] GetThemeAppProperties () returned 0x3
[0217.325] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0217.325] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0217.325] GetCurrentObject (hdc=0x1d0107c7, type=0x1) returned 0xb00017
[0217.325] GetCurrentObject (hdc=0x1d0107c7, type=0x2) returned 0x900010
[0217.325] GetCurrentObject (hdc=0x1d0107c7, type=0x7) returned 0x1e0507b9
[0217.326] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0217.326] SelectObject (hdc=0x1d0107c7, h=0x730a066d) returned 0x8a01c2
[0217.326] DrawTextExW (in: hdc=0x1d0107c7, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x2340560 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0217.326] DrawTextExW (in: hdc=0x1d0107c7, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x2340560 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0217.327] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1d0107c7) returned 0x0
[0217.327] GetFocus () returned 0x1402d6
[0217.327] IsAppThemed () returned 0x1
[0217.327] GetThemeAppProperties () returned 0x3
[0217.327] GetThemeAppProperties () returned 0x3
[0217.327] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0217.328] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1d0107c7) returned 0x0
[0217.328] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0217.328] EndPaint (hWnd=0x1402d6, lpPaint=0x53df7c) returned 1
[0217.328] WindowFromPoint (Point=0x353)
[0217.328] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x84, wParam=0x0, lParam=0x1920353) returned 0x1
[0217.329] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0217.329] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0217.329] SendMessageW (hWnd=0x18013e, Msg=0x10, wParam=0x0, lParam=0x0)
[0217.329] GetCapture () returned 0x1402d6
[0217.329] ReleaseCapture ()
[0217.329] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0217.329] LdrStandardizeSystemPath ()
[0217.330] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x84, wParam=0x0, lParam=0x1920353) returned 0x1
[0217.330] EnableWindow (hWnd=0x70036, bEnable=1)
[0217.331] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0217.332] SetActiveWindow (hWnd=0x70036) returned 0x18013e
[0217.332] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x86, wParam=0x0, lParam=0x70036)
[0217.335] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0217.335] LdrStandardizeSystemPath ()
[0217.335] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0217.335] LdrStandardizeSystemPath ()
[0217.335] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0217.336] LdrStandardizeSystemPath ()
[0217.337] LdrStandardizeSystemPath ()
[0217.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0217.337] LdrStandardizeSystemPath ()
[0217.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0217.337] LdrStandardizeSystemPath ()
[0217.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0217.337] LdrStandardizeSystemPath ()
[0217.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x18013e) returned 0x1
[0217.340] LdrStandardizeSystemPath ()
[0217.340] GetFocus () returned 0x1402d6
[0217.340] SetFocus (hWnd=0x202c6) returned 0x1402d6
[0217.341] GetFocus () returned 0x202c6
[0217.341] IsChild (hWndParent=0x18013e, hWnd=0x202c6) returned 0
[0217.341] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0217.341] GetCapture () returned 0x0
[0217.341] InvalidateRect (hWnd=0x1402d6, lpRect=0x0, bErase=0) returned 1
[0217.342] LdrStandardizeSystemPath ()
[0217.342] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0217.343] LdrStandardizeSystemPath ()
[0217.344] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f)
[0217.345] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0217.345] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0217.346] LdrStandardizeSystemPath ()
[0217.346] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0217.346] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x1402d6, lParam=0x0) returned 0x0
[0217.346] GetStockObject (i=5) returned 0x900015
[0217.346] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0217.346] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8daa18) returned 0x7
[0217.346] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0217.346] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0217.346] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0217.347] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0217.357] IsWindow (hWnd=0x202c6) returned 1
[0217.357] SetFocus (hWnd=0x202c6) returned 0x202c6
[0217.357] GetWindowLongW (hWnd=0x18013e, nIndex=-8) returned 458806
[0217.357] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0217.357] GetCurrentThreadId () returned 0x11d0
[0217.357] IsWindow (hWnd=0x70036) returned 1
[0217.357] IsWindow (hWnd=0x70036) returned 1
[0217.357] IsWindowVisible (hWnd=0x70036) returned 1
[0217.357] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0217.357] GetFocus () returned 0x202c6
[0217.357] IsChild (hWndParent=0x18013e, hWnd=0x202c6) returned 0
[0217.357] ShowWindow (hWnd=0x18013e, nCmdShow=0) returned 1
[0217.357] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0217.357] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0217.361] GetWindowPlacement (in: hWnd=0x18013e, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0217.361] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0217.361] GetClientRect (in: hWnd=0x18013e, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0217.361] GetWindowRect (in: hWnd=0x18013e, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0217.361] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0217.362] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0217.362] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0217.362] GetWindowLongW (hWnd=0x18013e, nIndex=-20) returned 327937
[0217.362] DestroyWindow (hWnd=0x18013e) returned 1
[0217.362] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0217.363] GetWindowTextLengthW (hWnd=0x18013e) returned 10
[0217.363] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0217.363] GetSystemMetrics (nIndex=42) returned 0
[0217.363] GetWindowTextW (in: hWnd=0x18013e, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0217.363] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0217.364] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0217.364] SendMessageW (hWnd=0x902be, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0217.364] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0217.364] SendMessageW (hWnd=0x902be, Msg=0xb0, wParam=0x2328688, lParam=0x53e518) returned 0x0
[0217.364] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xb0, wParam=0x2328688, lParam=0x53e518) returned 0x0
[0217.364] GetWindowTextLengthW (hWnd=0x902be) returned 0
[0217.364] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0217.364] GetSystemMetrics (nIndex=42) returned 0
[0217.364] GetWindowTextW (in: hWnd=0x902be, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0217.364] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0217.364] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0217.364] GetWindowThreadProcessId (in: hWnd=0x1502c8, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0217.364] GetWindow (hWnd=0x1502c8, uCmd=0x5) returned 0x0
[0217.364] GetWindowLongW (hWnd=0x1502c8, nIndex=-20) returned 65792
[0217.364] DestroyWindow (hWnd=0x1502c8) returned 1
[0217.364] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1502c8, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0217.364] GetWindowTextLengthW (hWnd=0x1502c8) returned 25
[0217.364] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1502c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0217.364] GetSystemMetrics (nIndex=42) returned 0
[0217.364] GetWindowTextW (in: hWnd=0x1502c8, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0217.364] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1502c8, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0217.365] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1502c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0217.365] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1502c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0217.366] GetWindowTextLengthW (hWnd=0x1502d2) returned 16
[0217.366] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0217.367] GetSystemMetrics (nIndex=42) returned 0
[0217.367] GetWindowTextW (in: hWnd=0x1502d2, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0217.367] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0217.367] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0217.367] InvalidateRect (hWnd=0x1402d6, lpRect=0x0, bErase=0) returned 1
[0217.367] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0217.367] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0217.367] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x902be, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0217.368] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1502d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0217.369] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1402d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0217.370] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802c0, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0217.371] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0217.373] GetProcessWindowStation () returned 0x13c
[0217.373] GetActiveWindow () returned 0x70036
[0217.373] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0217.373] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0217.374] GetCurrentThreadId () returned 0x11d0
[0217.374] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf440e, lParam=0x0) returned 1
[0217.374] IsWindowVisible (hWnd=0x70036) returned 1
[0217.374] IsWindowEnabled (hWnd=0x70036) returned 1
[0217.374] IsWindowVisible (hWnd=0x602b6) returned 0
[0217.374] IsWindowVisible (hWnd=0x901f8) returned 0
[0217.374] IsWindowVisible (hWnd=0x202d0) returned 0
[0217.374] IsWindowVisible (hWnd=0x202d4) returned 0
[0217.374] GetActiveWindow () returned 0x70036
[0217.374] GetFocus () returned 0x202c6
[0217.374] IsWindow (hWnd=0x70036) returned 1
[0217.374] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0217.374] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0217.375] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0217.375] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0217.376] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0217.394] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x19013e) returned 0x1
[0217.396] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0217.396] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0217.400] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x902c0, lParam=0x0) returned 0x0
[0217.400] GetCapture () returned 0x0
[0217.400] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0217.400] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0217.402] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0217.402] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0217.410] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x10105d6
[0217.410] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0217.410] CreateCompatibleDC (hdc=0x10105d6) returned 0x760107b3
[0217.410] SelectObject (hdc=0x760107b3, h=0x1e0507b9) returned 0x85000f
[0217.410] GdipCreateFromHDC (hdc=0x760107b3, graphics=0x53e108) returned 0x0
[0217.410] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0217.410] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0217.410] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0217.410] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.411] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0217.411] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0217.411] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0217.411] LocalFree (hMem=0x89ee08) returned 0x0
[0217.411] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.411] GdipCreateRegion (region=0x53e150) returned 0x0
[0217.411] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.411] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0217.411] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0217.411] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc850dbd) returned 0x0
[0217.411] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.411] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0217.411] GetCurrentObject (hdc=0x760107b3, type=0x1) returned 0xb00017
[0217.411] GetCurrentObject (hdc=0x760107b3, type=0x2) returned 0x900010
[0217.411] GetCurrentObject (hdc=0x760107b3, type=0x7) returned 0x1e0507b9
[0217.411] GetCurrentObject (hdc=0x760107b3, type=0x6) returned 0x8a01c2
[0217.411] SaveDC (hdc=0x760107b3) returned 1
[0217.411] GetNearestColor (hdc=0x760107b3, color=0xff) returned 0xff
[0217.411] GetNearestColor (hdc=0x760107b3, color=0x55) returned 0x55
[0217.412] GetNearestColor (hdc=0x760107b3, color=0x0) returned 0x0
[0217.412] GetNearestColor (hdc=0x760107b3, color=0x55) returned 0x55
[0217.412] GetNearestColor (hdc=0x760107b3, color=0x0) returned 0x0
[0217.418] GetNearestColor (hdc=0x760107b3, color=0x8080ff) returned 0x8080ff
[0217.418] GetNearestColor (hdc=0x760107b3, color=0x7373e5) returned 0x7373e5
[0217.418] GetNearestColor (hdc=0x760107b3, color=0xe5) returned 0xe5
[0217.418] GetNearestColor (hdc=0x760107b3, color=0x0) returned 0x0
[0217.418] RestoreDC (hdc=0x760107b3, nSavedDC=-1) returned 1
[0217.418] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107b3) returned 0x0
[0217.418] IsAppThemed () returned 0x1
[0217.418] GetThemeAppProperties () returned 0x3
[0217.418] GetThemeAppProperties () returned 0x3
[0217.418] IsAppThemed () returned 0x1
[0217.419] GetThemeAppProperties () returned 0x3
[0217.419] GetThemeAppProperties () returned 0x3
[0217.419] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0217.419] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2341954 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0217.419] IsAppThemed () returned 0x1
[0217.419] GetThemeAppProperties () returned 0x3
[0217.419] GetThemeAppProperties () returned 0x3
[0217.419] IsAppThemed () returned 0x1
[0217.419] GetThemeAppProperties () returned 0x3
[0217.419] GetThemeAppProperties () returned 0x3
[0217.419] GetFocus () returned 0x902c0
[0217.419] IsAppThemed () returned 0x1
[0217.419] GetThemeAppProperties () returned 0x3
[0217.419] GetThemeAppProperties () returned 0x3
[0217.419] IsAppThemed () returned 0x1
[0217.419] GetThemeAppProperties () returned 0x3
[0217.419] GetThemeAppProperties () returned 0x3
[0217.419] IsThemePartDefined () returned 0x1
[0217.419] IsAppThemed () returned 0x1
[0217.420] GetThemeAppProperties () returned 0x3
[0217.420] GetThemeAppProperties () returned 0x3
[0217.420] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0217.420] IsAppThemed () returned 0x1
[0217.420] GetThemeAppProperties () returned 0x3
[0217.420] GetThemeAppProperties () returned 0x3
[0217.420] IsAppThemed () returned 0x1
[0217.420] GetThemeAppProperties () returned 0x3
[0217.420] GetThemeAppProperties () returned 0x3
[0217.420] IsThemePartDefined () returned 0x1
[0217.420] GdipCreateRegion (region=0x53de78) returned 0x0
[0217.420] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.420] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0217.420] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.420] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0217.420] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0217.420] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0217.420] LocalFree (hMem=0x89eac0) returned 0x0
[0217.420] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0217.420] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0217.420] LocalFree (hMem=0x89eac0) returned 0x0
[0217.420] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.420] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0217.420] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0217.421] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0217.421] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.421] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0217.421] GetCurrentObject (hdc=0x760107b3, type=0x1) returned 0xb00017
[0217.421] GetCurrentObject (hdc=0x760107b3, type=0x2) returned 0x900010
[0217.421] GetCurrentObject (hdc=0x760107b3, type=0x7) returned 0x1e0507b9
[0217.421] GetCurrentObject (hdc=0x760107b3, type=0x6) returned 0x8a01c2
[0217.421] SaveDC (hdc=0x760107b3) returned 1
[0217.421] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x87040798
[0217.421] GetClipRgn (hdc=0x760107b3, hrgn=0x87040798) returned 0
[0217.421] SelectClipRgn (hdc=0x760107b3, hrgn=0xb04051e) returned 2
[0217.421] DeleteObject (ho=0x87040798) returned 1
[0217.421] DeleteObject (ho=0xb04051e) returned 1
[0217.421] OffsetViewportOrgEx (in: hdc=0x760107b3, x=0, y=0, lppt=0x2342004 | out: lppt=0x2342004) returned 1
[0217.421] DrawThemeParentBackground () returned 0x0
[0217.421] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0217.421] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0217.421] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0217.421] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0217.422] GetSystemMetrics (nIndex=42) returned 0
[0217.422] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0217.422] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0217.422] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0217.422] GetCurrentObject (hdc=0x760107b3, type=0x1) returned 0xb00017
[0217.422] GetCurrentObject (hdc=0x760107b3, type=0x2) returned 0x900010
[0217.422] GetCurrentObject (hdc=0x760107b3, type=0x7) returned 0x1e0507b9
[0217.422] GetCurrentObject (hdc=0x760107b3, type=0x6) returned 0x8a01c2
[0217.422] SaveDC (hdc=0x760107b3) returned 2
[0217.422] GetNearestColor (hdc=0x760107b3, color=0xff) returned 0xff
[0217.422] CreateSolidBrush (color=0xff) returned 0x7f10078d
[0217.422] FillRect (hDC=0x760107b3, lprc=0x53d8d8, hbr=0x7f10078d) returned 1
[0217.422] DeleteObject (ho=0x7f10078d) returned 1
[0217.422] RestoreDC (hdc=0x760107b3, nSavedDC=-1) returned 1
[0217.422] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0217.422] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0217.422] GetSystemMetrics (nIndex=42) returned 0
[0217.422] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0217.422] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0217.422] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0217.422] GetCurrentObject (hdc=0x760107b3, type=0x1) returned 0xb00017
[0217.423] GetCurrentObject (hdc=0x760107b3, type=0x2) returned 0x900010
[0217.423] GetCurrentObject (hdc=0x760107b3, type=0x7) returned 0x1e0507b9
[0217.423] GetCurrentObject (hdc=0x760107b3, type=0x6) returned 0x8a01c2
[0217.423] SaveDC (hdc=0x760107b3) returned 2
[0217.423] GetNearestColor (hdc=0x760107b3, color=0xff) returned 0xff
[0217.423] CreateSolidBrush (color=0xff) returned 0x8010078d
[0217.423] FillRect (hDC=0x760107b3, lprc=0x53d878, hbr=0x8010078d) returned 1
[0217.423] DeleteObject (ho=0x8010078d) returned 1
[0217.423] RestoreDC (hdc=0x760107b3, nSavedDC=-1) returned 1
[0217.423] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0217.423] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0217.423] GetSystemMetrics (nIndex=42) returned 0
[0217.423] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0217.423] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0217.423] RestoreDC (hdc=0x760107b3, nSavedDC=-1) returned 1
[0217.423] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107b3) returned 0x0
[0217.423] IsAppThemed () returned 0x1
[0217.424] GetThemeAppProperties () returned 0x3
[0217.424] GetThemeAppProperties () returned 0x3
[0217.424] IsAppThemed () returned 0x1
[0217.424] GetThemeAppProperties () returned 0x3
[0217.424] GetThemeAppProperties () returned 0x3
[0217.424] IsThemePartDefined () returned 0x1
[0217.424] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0217.424] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.424] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0217.424] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.424] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0217.424] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0217.424] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0217.424] LocalFree (hMem=0x89eac0) returned 0x0
[0217.424] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0217.424] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0217.424] LocalFree (hMem=0x89ec80) returned 0x0
[0217.424] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.424] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0217.424] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0217.424] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0217.424] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.424] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0217.424] GetCurrentObject (hdc=0x760107b3, type=0x1) returned 0xb00017
[0217.425] GetCurrentObject (hdc=0x760107b3, type=0x2) returned 0x900010
[0217.425] GetCurrentObject (hdc=0x760107b3, type=0x7) returned 0x1e0507b9
[0217.425] GetCurrentObject (hdc=0x760107b3, type=0x6) returned 0x8a01c2
[0217.425] SaveDC (hdc=0x760107b3) returned 1
[0217.425] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc04051e
[0217.425] GetClipRgn (hdc=0x760107b3, hrgn=0xc04051e) returned 0
[0217.425] SelectClipRgn (hdc=0x760107b3, hrgn=0x89040798) returned 2
[0217.425] DeleteObject (ho=0xc04051e) returned 1
[0217.425] DeleteObject (ho=0x89040798) returned 1
[0217.425] OffsetViewportOrgEx (in: hdc=0x760107b3, x=0, y=0, lppt=0x2342868 | out: lppt=0x2342868) returned 1
[0217.425] IsAppThemed () returned 0x1
[0217.425] GetThemeAppProperties () returned 0x3
[0217.425] GetThemeAppProperties () returned 0x3
[0217.425] DrawThemeBackground () returned 0x0
[0217.425] RestoreDC (hdc=0x760107b3, nSavedDC=-1) returned 1
[0217.425] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107b3) returned 0x0
[0217.425] GdipCreateRegion (region=0x53de00) returned 0x0
[0217.425] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.425] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0217.425] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.425] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0217.426] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0217.426] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0217.426] LocalFree (hMem=0x89ec80) returned 0x0
[0217.426] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0217.426] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0217.426] LocalFree (hMem=0x89ec80) returned 0x0
[0217.426] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.426] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0217.426] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0217.426] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0217.426] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.426] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0217.426] GetCurrentObject (hdc=0x760107b3, type=0x1) returned 0xb00017
[0217.426] GetCurrentObject (hdc=0x760107b3, type=0x2) returned 0x900010
[0217.426] GetCurrentObject (hdc=0x760107b3, type=0x7) returned 0x1e0507b9
[0217.426] GetCurrentObject (hdc=0x760107b3, type=0x6) returned 0x8a01c2
[0217.426] SaveDC (hdc=0x760107b3) returned 1
[0217.426] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8a040798
[0217.426] GetClipRgn (hdc=0x760107b3, hrgn=0x8a040798) returned 0
[0217.426] SelectClipRgn (hdc=0x760107b3, hrgn=0xd04051e) returned 2
[0217.427] DeleteObject (ho=0x8a040798) returned 1
[0217.427] DeleteObject (ho=0xd04051e) returned 1
[0217.427] OffsetViewportOrgEx (in: hdc=0x760107b3, x=0, y=0, lppt=0x2342b3c | out: lppt=0x2342b3c) returned 1
[0217.427] IsAppThemed () returned 0x1
[0217.427] GetThemeAppProperties () returned 0x3
[0217.427] GetThemeAppProperties () returned 0x3
[0217.427] GetThemeBackgroundContentRect () returned 0x0
[0217.427] RestoreDC (hdc=0x760107b3, nSavedDC=-1) returned 1
[0217.427] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107b3) returned 0x0
[0217.427] IsAppThemed () returned 0x1
[0217.427] GetThemeAppProperties () returned 0x3
[0217.427] GetThemeAppProperties () returned 0x3
[0217.427] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0217.427] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0217.427] GetCurrentObject (hdc=0x760107b3, type=0x1) returned 0xb00017
[0217.427] GetCurrentObject (hdc=0x760107b3, type=0x2) returned 0x900010
[0217.427] GetCurrentObject (hdc=0x760107b3, type=0x7) returned 0x1e0507b9
[0217.427] GetCurrentObject (hdc=0x760107b3, type=0x6) returned 0x8a01c2
[0217.433] SaveDC (hdc=0x760107b3) returned 1
[0217.433] GetTextAlign (hdc=0x760107b3) returned 0x0
[0217.433] GetTextColor (hdc=0x760107b3) returned 0x0
[0217.433] GetCurrentObject (hdc=0x760107b3, type=0x6) returned 0x8a01c2
[0217.433] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0217.433] SelectObject (hdc=0x760107b3, h=0x450a0799) returned 0x8a01c2
[0217.433] GetBkMode (hdc=0x760107b3) returned 2
[0217.433] SetBkMode (hdc=0x760107b3, mode=1) returned 2
[0217.433] DrawTextExW (in: hdc=0x760107b3, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2342edc | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0217.434] DrawTextExW (in: hdc=0x760107b3, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2342edc | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0217.434] RestoreDC (hdc=0x760107b3, nSavedDC=-1) returned 1
[0217.434] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107b3) returned 0x0
[0217.434] GetFocus () returned 0x902c0
[0217.434] IsAppThemed () returned 0x1
[0217.434] GetThemeAppProperties () returned 0x3
[0217.434] GetThemeAppProperties () returned 0x3
[0217.434] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0217.434] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x760107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0217.434] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107b3) returned 0x0
[0217.434] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0217.435] SelectObject (hdc=0x760107b3, h=0x85000f) returned 0x1e0507b9
[0217.435] DeleteDC (hdc=0x760107b3) returned 1
[0217.435] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0217.435] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0217.743] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0217.743] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0217.743] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x19013e) returned 0x1
[0217.746] GetFocus () returned 0x19013e
[0217.746] GetAncestor (hwnd=0x19013e, gaFlags=0x1) returned 0x10010
[0217.746] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0217.746] SetFocus (hWnd=0x202c6) returned 0x0
[0217.748] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0217.749] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0217.749] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0217.750] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0217.750] GetFocus () returned 0x70036
[0217.750] SetFocus (hWnd=0x202c6) returned 0x0
[0217.754] IsWindow (hWnd=0x70036) returned 1
[0217.754] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0217.755] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0217.755] IsWindow (hWnd=0x70036) returned 1
[0217.755] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0217.755] IsWindow (hWnd=0x202c6) returned 1
[0217.755] SetFocus (hWnd=0x202c6) returned 0x70036
[0217.755] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0217.763] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0217.764] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0217.765] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0217.765] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0217.765] GetStockObject (i=5) returned 0x900015
[0217.765] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0217.766] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8daa18) returned 0x7
[0217.766] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0217.766] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0217.766] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0217.766] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0217.767] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0217.767] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0217.767] GetFocus () returned 0x202c6
[0217.767] GetCapture () returned 0x0
[0217.767] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.768] IsWindowUnicode (hWnd=0x202c6) returned 1
[0217.768] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.768] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.768] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.768] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.769] IsWindowUnicode (hWnd=0x202c6) returned 1
[0217.769] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.769] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.769] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.769] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0217.769] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0217.769] CreateCompatibleDC (hdc=0x10105d6) returned 0x8101079c
[0217.769] SelectObject (hdc=0x8101079c, h=0x1e0507b9) returned 0x85000f
[0217.769] GdipCreateFromHDC (hdc=0x8101079c, graphics=0x53e958) returned 0x0
[0217.769] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0217.769] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0217.769] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0217.769] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.769] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0217.769] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0217.769] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0217.770] LocalFree (hMem=0x89ec80) returned 0x0
[0217.770] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.770] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0217.770] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.770] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0217.770] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0217.770] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc830dbd) returned 0x0
[0217.770] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.770] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0217.770] GetCurrentObject (hdc=0x8101079c, type=0x1) returned 0xb00017
[0217.770] GetCurrentObject (hdc=0x8101079c, type=0x2) returned 0x900010
[0217.770] GetCurrentObject (hdc=0x8101079c, type=0x7) returned 0x1e0507b9
[0217.770] GetCurrentObject (hdc=0x8101079c, type=0x6) returned 0x8a01c2
[0217.770] SaveDC (hdc=0x8101079c) returned 1
[0217.770] GetNearestColor (hdc=0x8101079c, color=0xff) returned 0xff
[0217.770] GetNearestColor (hdc=0x8101079c, color=0x55) returned 0x55
[0217.770] GetNearestColor (hdc=0x8101079c, color=0x0) returned 0x0
[0217.770] GetNearestColor (hdc=0x8101079c, color=0x55) returned 0x55
[0217.770] GetNearestColor (hdc=0x8101079c, color=0x0) returned 0x0
[0217.770] GetNearestColor (hdc=0x8101079c, color=0x8080ff) returned 0x8080ff
[0217.771] GetNearestColor (hdc=0x8101079c, color=0x7373e5) returned 0x7373e5
[0217.771] GetNearestColor (hdc=0x8101079c, color=0xe5) returned 0xe5
[0217.771] GetNearestColor (hdc=0x8101079c, color=0x0) returned 0x0
[0217.771] RestoreDC (hdc=0x8101079c, nSavedDC=-1) returned 1
[0217.771] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101079c) returned 0x0
[0217.771] IsAppThemed () returned 0x1
[0217.771] GetThemeAppProperties () returned 0x3
[0217.771] GetThemeAppProperties () returned 0x3
[0217.771] IsAppThemed () returned 0x1
[0217.781] GetThemeAppProperties () returned 0x3
[0217.781] GetThemeAppProperties () returned 0x3
[0217.782] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2343738 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0217.782] IsAppThemed () returned 0x1
[0217.782] GetThemeAppProperties () returned 0x3
[0217.782] GetThemeAppProperties () returned 0x3
[0217.782] IsAppThemed () returned 0x1
[0217.782] GetThemeAppProperties () returned 0x3
[0217.782] GetThemeAppProperties () returned 0x3
[0217.782] GetFocus () returned 0x202c6
[0217.782] IsAppThemed () returned 0x1
[0217.782] GetThemeAppProperties () returned 0x3
[0217.782] GetThemeAppProperties () returned 0x3
[0217.782] IsAppThemed () returned 0x1
[0217.782] GetThemeAppProperties () returned 0x3
[0217.782] GetThemeAppProperties () returned 0x3
[0217.782] IsThemePartDefined () returned 0x1
[0217.782] IsAppThemed () returned 0x1
[0217.782] GetThemeAppProperties () returned 0x3
[0217.782] GetThemeAppProperties () returned 0x3
[0217.782] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0217.782] IsAppThemed () returned 0x1
[0217.783] GetThemeAppProperties () returned 0x3
[0217.783] GetThemeAppProperties () returned 0x3
[0217.783] IsAppThemed () returned 0x1
[0217.783] GetThemeAppProperties () returned 0x3
[0217.783] GetThemeAppProperties () returned 0x3
[0217.783] IsThemePartDefined () returned 0x1
[0217.783] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0217.783] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.783] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0217.783] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.783] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0217.783] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0217.783] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0217.783] LocalFree (hMem=0x89ee08) returned 0x0
[0217.783] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0217.783] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0217.783] LocalFree (hMem=0x89ea88) returned 0x0
[0217.783] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.783] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0217.783] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0217.783] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0217.783] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.783] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0217.784] GetCurrentObject (hdc=0x8101079c, type=0x1) returned 0xb00017
[0217.784] GetCurrentObject (hdc=0x8101079c, type=0x2) returned 0x900010
[0217.784] GetCurrentObject (hdc=0x8101079c, type=0x7) returned 0x1e0507b9
[0217.784] GetCurrentObject (hdc=0x8101079c, type=0x6) returned 0x8a01c2
[0217.784] SaveDC (hdc=0x8101079c) returned 1
[0217.784] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c04053e
[0217.784] GetClipRgn (hdc=0x8101079c, hrgn=0x4c04053e) returned 0
[0217.784] SelectClipRgn (hdc=0x8101079c, hrgn=0x1b04051e) returned 2
[0217.784] DeleteObject (ho=0x4c04053e) returned 1
[0217.784] DeleteObject (ho=0x1b04051e) returned 1
[0217.784] OffsetViewportOrgEx (in: hdc=0x8101079c, x=0, y=0, lppt=0x2343de8 | out: lppt=0x2343de8) returned 1
[0217.784] DrawThemeParentBackground () returned 0x0
[0217.784] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0217.785] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0217.785] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0217.785] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0217.785] GetSystemMetrics (nIndex=42) returned 0
[0217.785] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0217.785] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0217.785] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0217.785] GetCurrentObject (hdc=0x8101079c, type=0x1) returned 0xb00017
[0217.785] GetCurrentObject (hdc=0x8101079c, type=0x2) returned 0x900010
[0217.785] GetCurrentObject (hdc=0x8101079c, type=0x7) returned 0x1e0507b9
[0217.785] GetCurrentObject (hdc=0x8101079c, type=0x6) returned 0x8a01c2
[0217.785] SaveDC (hdc=0x8101079c) returned 2
[0217.785] GetNearestColor (hdc=0x8101079c, color=0xff) returned 0xff
[0217.785] CreateSolidBrush (color=0xff) returned 0x8210078d
[0217.785] FillRect (hDC=0x8101079c, lprc=0x53e128, hbr=0x8210078d) returned 1
[0217.786] DeleteObject (ho=0x8210078d) returned 1
[0217.786] RestoreDC (hdc=0x8101079c, nSavedDC=-1) returned 1
[0217.786] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0217.786] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0217.786] GetSystemMetrics (nIndex=42) returned 0
[0217.786] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0217.786] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0217.786] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0217.786] GetCurrentObject (hdc=0x8101079c, type=0x1) returned 0xb00017
[0217.786] GetCurrentObject (hdc=0x8101079c, type=0x2) returned 0x900010
[0217.786] GetCurrentObject (hdc=0x8101079c, type=0x7) returned 0x1e0507b9
[0217.786] GetCurrentObject (hdc=0x8101079c, type=0x6) returned 0x8a01c2
[0217.786] SaveDC (hdc=0x8101079c) returned 2
[0217.786] GetNearestColor (hdc=0x8101079c, color=0xff) returned 0xff
[0217.786] CreateSolidBrush (color=0xff) returned 0x8310078d
[0217.786] FillRect (hDC=0x8101079c, lprc=0x53e0c8, hbr=0x8310078d) returned 1
[0217.786] DeleteObject (ho=0x8310078d) returned 1
[0217.786] RestoreDC (hdc=0x8101079c, nSavedDC=-1) returned 1
[0217.787] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0217.787] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0217.791] GetSystemMetrics (nIndex=42) returned 0
[0217.791] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0217.791] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0217.791] RestoreDC (hdc=0x8101079c, nSavedDC=-1) returned 1
[0217.791] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101079c) returned 0x0
[0217.791] IsAppThemed () returned 0x1
[0217.791] GetThemeAppProperties () returned 0x3
[0217.791] GetThemeAppProperties () returned 0x3
[0217.791] IsAppThemed () returned 0x1
[0217.791] GetThemeAppProperties () returned 0x3
[0217.792] GetThemeAppProperties () returned 0x3
[0217.792] IsThemePartDefined () returned 0x1
[0217.792] GdipCreateRegion (region=0x53e64c) returned 0x0
[0217.792] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.792] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0217.792] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0217.792] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0217.792] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0217.792] LocalFree (hMem=0x89ec80) returned 0x0
[0217.792] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0217.792] LocalFree (hMem=0x89ea88) returned 0x0
[0217.792] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0217.792] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0217.792] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0217.792] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0217.792] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.792] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0217.792] GetCurrentObject (hdc=0x8101079c, type=0x1) returned 0xb00017
[0217.792] GetCurrentObject (hdc=0x8101079c, type=0x2) returned 0x900010
[0217.792] GetCurrentObject (hdc=0x8101079c, type=0x7) returned 0x1e0507b9
[0217.792] GetCurrentObject (hdc=0x8101079c, type=0x6) returned 0x8a01c2
[0217.792] SaveDC (hdc=0x8101079c) returned 1
[0217.792] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1c04051e
[0217.792] GetClipRgn (hdc=0x8101079c, hrgn=0x1c04051e) returned 0
[0217.793] SelectClipRgn (hdc=0x8101079c, hrgn=0x4e04053e) returned 2
[0217.793] DeleteObject (ho=0x1c04051e) returned 1
[0217.793] DeleteObject (ho=0x4e04053e) returned 1
[0217.793] OffsetViewportOrgEx (in: hdc=0x8101079c, x=0, y=0, lppt=0x234464c | out: lppt=0x234464c) returned 1
[0217.793] IsAppThemed () returned 0x1
[0217.793] GetThemeAppProperties () returned 0x3
[0217.793] GetThemeAppProperties () returned 0x3
[0217.793] DrawThemeBackground () returned 0x0
[0217.793] RestoreDC (hdc=0x8101079c, nSavedDC=-1) returned 1
[0217.793] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101079c) returned 0x0
[0217.793] GdipCreateRegion (region=0x53e650) returned 0x0
[0217.793] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0217.793] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0217.793] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0217.793] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0217.793] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0217.793] LocalFree (hMem=0x89ee08) returned 0x0
[0217.793] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0217.793] LocalFree (hMem=0x89ea88) returned 0x0
[0217.793] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0217.793] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0217.793] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0217.793] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0217.794] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0217.794] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0217.794] GetCurrentObject (hdc=0x8101079c, type=0x1) returned 0xb00017
[0217.794] GetCurrentObject (hdc=0x8101079c, type=0x2) returned 0x900010
[0217.794] GetCurrentObject (hdc=0x8101079c, type=0x7) returned 0x1e0507b9
[0217.794] GetCurrentObject (hdc=0x8101079c, type=0x6) returned 0x8a01c2
[0217.794] SaveDC (hdc=0x8101079c) returned 1
[0217.794] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f04053e
[0217.794] GetClipRgn (hdc=0x8101079c, hrgn=0x4f04053e) returned 0
[0217.794] SelectClipRgn (hdc=0x8101079c, hrgn=0x1d04051e) returned 2
[0217.794] DeleteObject (ho=0x4f04053e) returned 1
[0217.794] DeleteObject (ho=0x1d04051e) returned 1
[0217.794] OffsetViewportOrgEx (in: hdc=0x8101079c, x=0, y=0, lppt=0x2344920 | out: lppt=0x2344920) returned 1
[0217.794] IsAppThemed () returned 0x1
[0217.794] GetThemeAppProperties () returned 0x3
[0217.794] GetThemeAppProperties () returned 0x3
[0217.794] GetThemeBackgroundContentRect () returned 0x0
[0217.794] RestoreDC (hdc=0x8101079c, nSavedDC=-1) returned 1
[0217.794] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101079c) returned 0x0
[0217.794] IsAppThemed () returned 0x1
[0217.794] GetThemeAppProperties () returned 0x3
[0217.795] GetThemeAppProperties () returned 0x3
[0217.795] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0217.795] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0217.795] GetCurrentObject (hdc=0x8101079c, type=0x1) returned 0xb00017
[0217.795] GetCurrentObject (hdc=0x8101079c, type=0x2) returned 0x900010
[0217.795] GetCurrentObject (hdc=0x8101079c, type=0x7) returned 0x1e0507b9
[0217.795] GetCurrentObject (hdc=0x8101079c, type=0x6) returned 0x8a01c2
[0217.795] SaveDC (hdc=0x8101079c) returned 1
[0217.795] GetTextAlign (hdc=0x8101079c) returned 0x0
[0217.795] GetTextColor (hdc=0x8101079c) returned 0x0
[0217.795] GetCurrentObject (hdc=0x8101079c, type=0x6) returned 0x8a01c2
[0217.795] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0217.795] SelectObject (hdc=0x8101079c, h=0x450a0799) returned 0x8a01c2
[0217.795] GetBkMode (hdc=0x8101079c) returned 2
[0217.795] SetBkMode (hdc=0x8101079c, mode=1) returned 2
[0217.795] DrawTextExW (in: hdc=0x8101079c, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2344cc0 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0217.796] DrawTextExW (in: hdc=0x8101079c, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2344cc0 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0217.796] RestoreDC (hdc=0x8101079c, nSavedDC=-1) returned 1
[0217.796] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101079c) returned 0x0
[0217.796] GetFocus () returned 0x202c6
[0217.796] IsAppThemed () returned 0x1
[0217.796] GetThemeAppProperties () returned 0x3
[0217.796] GetThemeAppProperties () returned 0x3
[0217.796] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0217.796] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x8101079c, x1=0, y1=0, rop=0xcc0020) returned 1
[0217.796] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101079c) returned 0x0
[0217.796] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0217.796] SelectObject (hdc=0x8101079c, h=0x85000f) returned 0x1e0507b9
[0217.796] DeleteDC (hdc=0x8101079c) returned 1
[0217.796] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0217.797] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0217.797] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.797] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.797] WaitMessage () returned 1
[0217.800] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.800] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.800] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.801] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.801] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.801] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.801] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.801] WaitMessage () returned 1
[0217.816] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.816] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.816] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.817] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.817] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.817] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.817] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.817] WaitMessage () returned 1
[0217.820] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.820] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.820] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.820] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.820] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.821] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.821] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.821] WaitMessage () returned 1
[0217.822] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.822] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.822] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.822] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.822] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.823] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.823] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.823] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.824] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.824] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.824] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.824] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.824] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.824] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.824] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.824] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.824] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.824] WaitMessage () returned 1
[0217.825] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.825] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.825] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.825] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.825] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.826] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.826] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.826] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.826] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.826] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.826] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.827] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.827] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.827] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.827] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.827] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.827] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.827] WaitMessage () returned 1
[0217.827] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.827] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.827] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.828] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.828] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.829] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.829] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.829] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.829] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.829] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.829] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.829] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.829] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.829] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.829] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.829] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.830] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.830] WaitMessage () returned 1
[0217.830] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.830] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.830] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.830] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.830] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.831] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.832] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.832] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.832] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.832] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.832] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.832] IsWindowUnicode (hWnd=0x102dc) returned 1
[0217.832] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.832] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.832] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0217.832] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.833] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.833] WaitMessage () returned 1
[0217.928] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.928] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0217.928] TranslateMessage (lpMsg=0x53eef8) returned 0
[0217.928] DispatchMessageA (lpMsg=0x53eef8) returned 0x7ee7
[0217.928] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.928] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0217.928] WaitMessage () returned 1
[0218.069] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0218.069] IsWindowUnicode (hWnd=0x202d0) returned 1
[0218.069] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0218.069] TranslateMessage (lpMsg=0x53eef8) returned 0
[0218.069] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0218.069] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0218.069] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0218.069] WaitMessage () returned 1
[0218.928] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0218.928] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0218.928] TranslateMessage (lpMsg=0x53eef8) returned 0
[0218.928] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0218.929] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0218.929] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0218.929] WaitMessage () returned 1
[0219.650] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0219.651] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x193021b) returned 0x1
[0219.651] IsWindowUnicode (hWnd=0x202c6) returned 1
[0219.651] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0219.651] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x193021b) returned 0x1
[0219.651] SetCursor (hCursor=0x10003) returned 0x10003
[0219.651] TranslateMessage (lpMsg=0x53eef8) returned 0
[0219.651] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0219.651] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0219.651] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0219.651] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0219.651] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0219.651] GetKeyState (nVirtKey=1) returned 0
[0219.652] GetKeyState (nVirtKey=2) returned 0
[0219.652] GetKeyState (nVirtKey=4) returned 0
[0219.652] GetKeyState (nVirtKey=5) returned 0
[0219.652] GetKeyState (nVirtKey=6) returned 0
[0219.652] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0219.652] IsWindowUnicode (hWnd=0x202c6) returned 1
[0219.652] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0219.652] TranslateMessage (lpMsg=0x53eef8) returned 0
[0219.652] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0219.652] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0219.652] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0219.652] CreateCompatibleDC (hdc=0x10105d6) returned 0x750107b1
[0219.652] SelectObject (hdc=0x750107b1, h=0x1e0507b9) returned 0x85000f
[0219.652] GdipCreateFromHDC (hdc=0x750107b1, graphics=0x53e958) returned 0x0
[0219.653] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0219.653] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0219.653] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0219.653] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0219.653] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0219.653] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0219.653] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0219.653] LocalFree (hMem=0x89ec80) returned 0x0
[0219.653] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0219.653] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0219.653] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0219.653] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0219.653] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0219.653] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc810dbd) returned 0x0
[0219.653] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0219.653] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0219.653] GetCurrentObject (hdc=0x750107b1, type=0x1) returned 0xb00017
[0219.653] GetCurrentObject (hdc=0x750107b1, type=0x2) returned 0x900010
[0219.654] GetCurrentObject (hdc=0x750107b1, type=0x7) returned 0x1e0507b9
[0219.654] GetCurrentObject (hdc=0x750107b1, type=0x6) returned 0x8a01c2
[0219.654] SaveDC (hdc=0x750107b1) returned 1
[0219.654] GetNearestColor (hdc=0x750107b1, color=0xff) returned 0xff
[0219.654] GetNearestColor (hdc=0x750107b1, color=0x55) returned 0x55
[0219.654] GetNearestColor (hdc=0x750107b1, color=0x0) returned 0x0
[0219.654] GetNearestColor (hdc=0x750107b1, color=0x55) returned 0x55
[0219.654] GetNearestColor (hdc=0x750107b1, color=0x0) returned 0x0
[0219.654] GetNearestColor (hdc=0x750107b1, color=0x8080ff) returned 0x8080ff
[0219.654] GetNearestColor (hdc=0x750107b1, color=0x7373e5) returned 0x7373e5
[0219.654] GetNearestColor (hdc=0x750107b1, color=0xe5) returned 0xe5
[0219.654] GetNearestColor (hdc=0x750107b1, color=0x0) returned 0x0
[0219.654] RestoreDC (hdc=0x750107b1, nSavedDC=-1) returned 1
[0219.654] GdipReleaseDC (graphics=0x5d92c30, hdc=0x750107b1) returned 0x0
[0219.654] IsAppThemed () returned 0x1
[0219.655] GetThemeAppProperties () returned 0x3
[0219.655] GetThemeAppProperties () returned 0x3
[0219.655] IsAppThemed () returned 0x1
[0219.655] GetThemeAppProperties () returned 0x3
[0219.655] GetThemeAppProperties () returned 0x3
[0219.655] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x2345654 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0219.655] IsAppThemed () returned 0x1
[0219.655] GetThemeAppProperties () returned 0x3
[0219.655] GetThemeAppProperties () returned 0x3
[0219.655] IsAppThemed () returned 0x1
[0219.655] GetThemeAppProperties () returned 0x3
[0219.655] GetThemeAppProperties () returned 0x3
[0219.655] IsAppThemed () returned 0x1
[0219.655] GetThemeAppProperties () returned 0x3
[0219.655] GetThemeAppProperties () returned 0x3
[0219.655] IsAppThemed () returned 0x1
[0219.656] GetThemeAppProperties () returned 0x3
[0219.656] GetThemeAppProperties () returned 0x3
[0219.656] IsThemePartDefined () returned 0x1
[0219.656] IsAppThemed () returned 0x1
[0219.656] GetThemeAppProperties () returned 0x3
[0219.656] GetThemeAppProperties () returned 0x3
[0219.656] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0219.656] IsAppThemed () returned 0x1
[0219.656] GetThemeAppProperties () returned 0x3
[0219.656] GetThemeAppProperties () returned 0x3
[0219.656] IsAppThemed () returned 0x1
[0219.656] GetThemeAppProperties () returned 0x3
[0219.656] GetThemeAppProperties () returned 0x3
[0219.656] IsThemePartDefined () returned 0x1
[0219.656] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0219.656] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0219.656] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0219.656] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0219.656] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0219.656] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0219.656] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0219.656] LocalFree (hMem=0x89ee40) returned 0x0
[0219.656] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0219.656] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0219.657] LocalFree (hMem=0x89ea88) returned 0x0
[0219.657] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0219.657] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0219.657] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0219.657] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0219.657] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0219.657] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0219.657] GetCurrentObject (hdc=0x750107b1, type=0x1) returned 0xb00017
[0219.657] GetCurrentObject (hdc=0x750107b1, type=0x2) returned 0x900010
[0219.657] GetCurrentObject (hdc=0x750107b1, type=0x7) returned 0x1e0507b9
[0219.657] GetCurrentObject (hdc=0x750107b1, type=0x6) returned 0x8a01c2
[0219.657] SaveDC (hdc=0x750107b1) returned 1
[0219.657] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1e04051e
[0219.657] GetClipRgn (hdc=0x750107b1, hrgn=0x1e04051e) returned 0
[0219.657] SelectClipRgn (hdc=0x750107b1, hrgn=0x5304053e) returned 2
[0219.657] DeleteObject (ho=0x1e04051e) returned 1
[0219.657] DeleteObject (ho=0x5304053e) returned 1
[0219.658] OffsetViewportOrgEx (in: hdc=0x750107b1, x=0, y=0, lppt=0x2345d04 | out: lppt=0x2345d04) returned 1
[0219.658] DrawThemeParentBackground () returned 0x0
[0219.658] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0219.658] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0219.658] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0219.658] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0219.658] GetSystemMetrics (nIndex=42) returned 0
[0219.658] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0219.658] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0219.658] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0219.658] GetCurrentObject (hdc=0x750107b1, type=0x1) returned 0xb00017
[0219.658] GetCurrentObject (hdc=0x750107b1, type=0x2) returned 0x900010
[0219.658] GetCurrentObject (hdc=0x750107b1, type=0x7) returned 0x1e0507b9
[0219.658] GetCurrentObject (hdc=0x750107b1, type=0x6) returned 0x8a01c2
[0219.658] SaveDC (hdc=0x750107b1) returned 2
[0219.659] GetNearestColor (hdc=0x750107b1, color=0xff) returned 0xff
[0219.659] CreateSolidBrush (color=0xff) returned 0x8410078d
[0219.659] FillRect (hDC=0x750107b1, lprc=0x53e120, hbr=0x8410078d) returned 1
[0219.659] DeleteObject (ho=0x8410078d) returned 1
[0219.659] RestoreDC (hdc=0x750107b1, nSavedDC=-1) returned 1
[0219.659] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0219.659] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0219.659] GetSystemMetrics (nIndex=42) returned 0
[0219.659] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0219.659] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0219.659] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0219.659] GetCurrentObject (hdc=0x750107b1, type=0x1) returned 0xb00017
[0219.659] GetCurrentObject (hdc=0x750107b1, type=0x2) returned 0x900010
[0219.659] GetCurrentObject (hdc=0x750107b1, type=0x7) returned 0x1e0507b9
[0219.659] GetCurrentObject (hdc=0x750107b1, type=0x6) returned 0x8a01c2
[0219.660] SaveDC (hdc=0x750107b1) returned 2
[0219.660] GetNearestColor (hdc=0x750107b1, color=0xff) returned 0xff
[0219.660] CreateSolidBrush (color=0xff) returned 0x8510078d
[0219.660] FillRect (hDC=0x750107b1, lprc=0x53e0c0, hbr=0x8510078d) returned 1
[0219.660] DeleteObject (ho=0x8510078d) returned 1
[0219.660] RestoreDC (hdc=0x750107b1, nSavedDC=-1) returned 1
[0219.660] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0219.660] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0219.660] GetSystemMetrics (nIndex=42) returned 0
[0219.660] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0219.660] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0219.660] RestoreDC (hdc=0x750107b1, nSavedDC=-1) returned 1
[0219.660] GdipReleaseDC (graphics=0x5d92c30, hdc=0x750107b1) returned 0x0
[0219.660] IsAppThemed () returned 0x1
[0219.661] GetThemeAppProperties () returned 0x3
[0219.661] GetThemeAppProperties () returned 0x3
[0219.661] IsAppThemed () returned 0x1
[0219.661] GetThemeAppProperties () returned 0x3
[0219.661] GetThemeAppProperties () returned 0x3
[0219.661] IsThemePartDefined () returned 0x1
[0219.661] GdipCreateRegion (region=0x53e640) returned 0x0
[0219.661] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0219.661] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0219.661] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0219.661] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0219.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0219.661] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0219.661] LocalFree (hMem=0x89eac0) returned 0x0
[0219.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0219.661] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0219.661] LocalFree (hMem=0x89ec80) returned 0x0
[0219.661] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0219.661] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0219.662] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0219.662] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0219.662] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0219.662] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0219.662] GetCurrentObject (hdc=0x750107b1, type=0x1) returned 0xb00017
[0219.662] GetCurrentObject (hdc=0x750107b1, type=0x2) returned 0x900010
[0219.662] GetCurrentObject (hdc=0x750107b1, type=0x7) returned 0x1e0507b9
[0219.662] GetCurrentObject (hdc=0x750107b1, type=0x6) returned 0x8a01c2
[0219.662] SaveDC (hdc=0x750107b1) returned 1
[0219.662] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5404053e
[0219.662] GetClipRgn (hdc=0x750107b1, hrgn=0x5404053e) returned 0
[0219.662] SelectClipRgn (hdc=0x750107b1, hrgn=0x2004051e) returned 2
[0219.663] DeleteObject (ho=0x5404053e) returned 1
[0219.663] DeleteObject (ho=0x2004051e) returned 1
[0219.663] OffsetViewportOrgEx (in: hdc=0x750107b1, x=0, y=0, lppt=0x2346568 | out: lppt=0x2346568) returned 1
[0219.663] IsAppThemed () returned 0x1
[0219.663] GetThemeAppProperties () returned 0x3
[0219.663] GetThemeAppProperties () returned 0x3
[0219.663] DrawThemeBackground () returned 0x0
[0219.663] RestoreDC (hdc=0x750107b1, nSavedDC=-1) returned 1
[0219.663] GdipReleaseDC (graphics=0x5d92c30, hdc=0x750107b1) returned 0x0
[0219.663] GdipCreateRegion (region=0x53e644) returned 0x0
[0219.663] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0219.663] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0219.663] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0219.663] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0219.663] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0219.663] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0219.664] LocalFree (hMem=0x89ea88) returned 0x0
[0219.664] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0219.664] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0219.664] LocalFree (hMem=0x89ee08) returned 0x0
[0219.664] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0219.664] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0219.664] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0219.664] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0219.664] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0219.664] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0219.664] GetCurrentObject (hdc=0x750107b1, type=0x1) returned 0xb00017
[0219.664] GetCurrentObject (hdc=0x750107b1, type=0x2) returned 0x900010
[0219.664] GetCurrentObject (hdc=0x750107b1, type=0x7) returned 0x1e0507b9
[0219.664] GetCurrentObject (hdc=0x750107b1, type=0x6) returned 0x8a01c2
[0219.664] SaveDC (hdc=0x750107b1) returned 1
[0219.664] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2104051e
[0219.664] GetClipRgn (hdc=0x750107b1, hrgn=0x2104051e) returned 0
[0219.664] SelectClipRgn (hdc=0x750107b1, hrgn=0x5504053e) returned 2
[0219.665] DeleteObject (ho=0x2104051e) returned 1
[0219.665] DeleteObject (ho=0x5504053e) returned 1
[0219.665] OffsetViewportOrgEx (in: hdc=0x750107b1, x=0, y=0, lppt=0x234683c | out: lppt=0x234683c) returned 1
[0219.665] IsAppThemed () returned 0x1
[0219.665] GetThemeAppProperties () returned 0x3
[0219.665] GetThemeAppProperties () returned 0x3
[0219.665] GetThemeBackgroundContentRect () returned 0x0
[0219.665] RestoreDC (hdc=0x750107b1, nSavedDC=-1) returned 1
[0219.665] GdipReleaseDC (graphics=0x5d92c30, hdc=0x750107b1) returned 0x0
[0219.665] IsAppThemed () returned 0x1
[0219.665] GetThemeAppProperties () returned 0x3
[0219.665] GetThemeAppProperties () returned 0x3
[0219.665] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0219.665] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0219.665] GetCurrentObject (hdc=0x750107b1, type=0x1) returned 0xb00017
[0219.665] GetCurrentObject (hdc=0x750107b1, type=0x2) returned 0x900010
[0219.665] GetCurrentObject (hdc=0x750107b1, type=0x7) returned 0x1e0507b9
[0219.665] GetCurrentObject (hdc=0x750107b1, type=0x6) returned 0x8a01c2
[0219.666] SaveDC (hdc=0x750107b1) returned 1
[0219.666] GetTextAlign (hdc=0x750107b1) returned 0x0
[0219.666] GetTextColor (hdc=0x750107b1) returned 0x0
[0219.666] GetCurrentObject (hdc=0x750107b1, type=0x6) returned 0x8a01c2
[0219.666] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0219.666] SelectObject (hdc=0x750107b1, h=0x450a0799) returned 0x8a01c2
[0219.666] GetBkMode (hdc=0x750107b1) returned 2
[0219.666] SetBkMode (hdc=0x750107b1, mode=1) returned 2
[0219.666] DrawTextExW (in: hdc=0x750107b1, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2346bdc | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0219.667] DrawTextExW (in: hdc=0x750107b1, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2346bdc | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0219.667] RestoreDC (hdc=0x750107b1, nSavedDC=-1) returned 1
[0219.667] GdipReleaseDC (graphics=0x5d92c30, hdc=0x750107b1) returned 0x0
[0219.667] GetFocus () returned 0x202c6
[0219.667] IsAppThemed () returned 0x1
[0219.667] GetThemeAppProperties () returned 0x3
[0219.667] GetThemeAppProperties () returned 0x3
[0219.667] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0219.667] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x750107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0219.668] GdipReleaseDC (graphics=0x5d92c30, hdc=0x750107b1) returned 0x0
[0219.668] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0219.668] SelectObject (hdc=0x750107b1, h=0x85000f) returned 0x1e0507b9
[0219.668] DeleteDC (hdc=0x750107b1) returned 1
[0219.668] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0219.668] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0219.668] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0219.668] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0219.668] WaitMessage () returned 1
[0219.756] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0219.756] IsWindowUnicode (hWnd=0x202c6) returned 1
[0219.756] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0219.756] TranslateMessage (lpMsg=0x53eef8) returned 0
[0219.756] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0219.756] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0219.757] IsWindowUnicode (hWnd=0x202c6) returned 1
[0219.757] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0219.757] TranslateMessage (lpMsg=0x53eef8) returned 0
[0219.757] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0219.757] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xb002b) returned 0x0
[0219.757] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0219.757] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0219.757] WaitMessage () returned 1
[0219.905] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0219.905] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x193021b) returned 0x1
[0219.906] IsWindowUnicode (hWnd=0x202c6) returned 1
[0219.906] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0219.906] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x193021b) returned 0x1
[0219.906] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0219.906] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12601c5) returned 0x0
[0219.906] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0219.906] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0219.906] SetCursor (hCursor=0x10003) returned 0x10003
[0219.907] TranslateMessage (lpMsg=0x53eef8) returned 0
[0219.907] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0219.907] GetKeyState (nVirtKey=1) returned -127
[0219.907] GetKeyState (nVirtKey=2) returned 0
[0219.907] GetKeyState (nVirtKey=4) returned 0
[0219.907] GetKeyState (nVirtKey=5) returned 0
[0219.907] GetKeyState (nVirtKey=6) returned 0
[0219.907] IsWindowVisible (hWnd=0x202c6) returned 1
[0219.907] IsWindowEnabled (hWnd=0x202c6) returned 1
[0219.907] SetFocus (hWnd=0x202c6) returned 0x202c6
[0219.907] GetFocus () returned 0x202c6
[0219.907] GetFocus () returned 0x202c6
[0219.907] GetFocus () returned 0x202c6
[0219.907] GetKeyState (nVirtKey=1) returned -127
[0219.907] GetKeyState (nVirtKey=2) returned 0
[0219.907] GetKeyState (nVirtKey=4) returned 0
[0219.907] GetKeyState (nVirtKey=5) returned 0
[0219.907] GetKeyState (nVirtKey=6) returned 0
[0219.907] GetCapture () returned 0x0
[0219.907] SetCapture (hWnd=0x202c6) returned 0x0
[0219.908] GetKeyState (nVirtKey=1) returned -127
[0219.908] GetKeyState (nVirtKey=2) returned 0
[0219.908] GetKeyState (nVirtKey=4) returned 0
[0219.908] GetKeyState (nVirtKey=5) returned 0
[0219.908] GetKeyState (nVirtKey=6) returned 0
[0219.908] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0219.908] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0219.908] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0219.908] IsWindowUnicode (hWnd=0x202c6) returned 1
[0219.908] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0219.908] TranslateMessage (lpMsg=0x53eef8) returned 0
[0219.908] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0219.908] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2346d60, cPoints=0x1 | out: lpPoints=0x2346d60) returned 25690608
[0219.908] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0219.908] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0219.908] UpdateWindow (hWnd=0x202c6) returned 1
[0219.908] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x10105d6
[0219.909] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0219.909] CreateCompatibleDC (hdc=0x10105d6) returned 0x760107b1
[0219.909] SelectObject (hdc=0x760107b1, h=0x1e0507b9) returned 0x85000f
[0219.909] GdipCreateFromHDC (hdc=0x760107b1, graphics=0x53e5f0) returned 0x0
[0219.909] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0219.909] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0219.909] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0219.909] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0219.909] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0219.909] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0219.910] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0219.910] LocalFree (hMem=0x89ee40) returned 0x0
[0219.910] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0219.910] GdipCreateRegion (region=0x53e638) returned 0x0
[0219.910] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0219.910] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0219.910] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0219.910] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc7f0dbd) returned 0x0
[0219.910] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0219.910] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0219.910] GetCurrentObject (hdc=0x760107b1, type=0x1) returned 0xb00017
[0219.910] GetCurrentObject (hdc=0x760107b1, type=0x2) returned 0x900010
[0219.910] GetCurrentObject (hdc=0x760107b1, type=0x7) returned 0x1e0507b9
[0219.910] GetCurrentObject (hdc=0x760107b1, type=0x6) returned 0x8a01c2
[0219.910] SaveDC (hdc=0x760107b1) returned 1
[0219.911] GetNearestColor (hdc=0x760107b1, color=0xff) returned 0xff
[0219.911] GetNearestColor (hdc=0x760107b1, color=0x55) returned 0x55
[0219.911] GetNearestColor (hdc=0x760107b1, color=0x0) returned 0x0
[0219.911] GetNearestColor (hdc=0x760107b1, color=0x55) returned 0x55
[0219.911] GetNearestColor (hdc=0x760107b1, color=0x0) returned 0x0
[0219.911] GetNearestColor (hdc=0x760107b1, color=0x8080ff) returned 0x8080ff
[0219.911] GetNearestColor (hdc=0x760107b1, color=0x7373e5) returned 0x7373e5
[0219.911] GetNearestColor (hdc=0x760107b1, color=0xe5) returned 0xe5
[0219.911] GetNearestColor (hdc=0x760107b1, color=0x0) returned 0x0
[0219.911] RestoreDC (hdc=0x760107b1, nSavedDC=-1) returned 1
[0219.911] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107b1) returned 0x0
[0219.911] IsAppThemed () returned 0x1
[0219.911] GetThemeAppProperties () returned 0x3
[0219.911] GetThemeAppProperties () returned 0x3
[0219.911] IsAppThemed () returned 0x1
[0219.911] GetThemeAppProperties () returned 0x3
[0219.911] GetThemeAppProperties () returned 0x3
[0219.911] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x234747c | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0219.912] IsAppThemed () returned 0x1
[0219.912] GetThemeAppProperties () returned 0x3
[0219.912] GetThemeAppProperties () returned 0x3
[0219.912] IsAppThemed () returned 0x1
[0219.912] GetThemeAppProperties () returned 0x3
[0219.912] GetThemeAppProperties () returned 0x3
[0219.912] IsAppThemed () returned 0x1
[0219.912] GetThemeAppProperties () returned 0x3
[0219.912] GetThemeAppProperties () returned 0x3
[0219.912] IsAppThemed () returned 0x1
[0219.912] GetThemeAppProperties () returned 0x3
[0219.912] GetThemeAppProperties () returned 0x3
[0219.912] IsThemePartDefined () returned 0x1
[0219.912] IsAppThemed () returned 0x1
[0219.912] GetThemeAppProperties () returned 0x3
[0219.912] GetThemeAppProperties () returned 0x3
[0219.912] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0219.912] IsAppThemed () returned 0x1
[0219.912] GetThemeAppProperties () returned 0x3
[0219.912] GetThemeAppProperties () returned 0x3
[0219.912] IsAppThemed () returned 0x1
[0219.913] GetThemeAppProperties () returned 0x3
[0219.913] GetThemeAppProperties () returned 0x3
[0219.913] IsThemePartDefined () returned 0x1
[0219.913] GdipCreateRegion (region=0x53e354) returned 0x0
[0219.913] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0219.913] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0219.913] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0219.913] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0219.913] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0219.913] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0219.913] LocalFree (hMem=0x89ec80) returned 0x0
[0219.913] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0219.913] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0219.913] LocalFree (hMem=0x89ea88) returned 0x0
[0219.913] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0219.913] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0219.913] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0219.913] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0219.913] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0219.913] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0219.913] GetCurrentObject (hdc=0x760107b1, type=0x1) returned 0xb00017
[0219.913] GetCurrentObject (hdc=0x760107b1, type=0x2) returned 0x900010
[0219.913] GetCurrentObject (hdc=0x760107b1, type=0x7) returned 0x1e0507b9
[0219.914] GetCurrentObject (hdc=0x760107b1, type=0x6) returned 0x8a01c2
[0219.914] SaveDC (hdc=0x760107b1) returned 1
[0219.914] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5604053e
[0219.914] GetClipRgn (hdc=0x760107b1, hrgn=0x5604053e) returned 0
[0219.914] SelectClipRgn (hdc=0x760107b1, hrgn=0x2504051e) returned 2
[0219.914] DeleteObject (ho=0x5604053e) returned 1
[0219.914] DeleteObject (ho=0x2504051e) returned 1
[0219.914] OffsetViewportOrgEx (in: hdc=0x760107b1, x=0, y=0, lppt=0x2347b2c | out: lppt=0x2347b2c) returned 1
[0219.914] DrawThemeParentBackground () returned 0x0
[0219.914] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0219.914] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0219.914] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0219.914] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0219.914] GetSystemMetrics (nIndex=42) returned 0
[0219.914] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0219.914] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0219.914] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0219.914] GetCurrentObject (hdc=0x760107b1, type=0x1) returned 0xb00017
[0219.914] GetCurrentObject (hdc=0x760107b1, type=0x2) returned 0x900010
[0219.914] GetCurrentObject (hdc=0x760107b1, type=0x7) returned 0x1e0507b9
[0219.915] GetCurrentObject (hdc=0x760107b1, type=0x6) returned 0x8a01c2
[0219.915] SaveDC (hdc=0x760107b1) returned 2
[0219.915] GetNearestColor (hdc=0x760107b1, color=0xff) returned 0xff
[0219.915] CreateSolidBrush (color=0xff) returned 0x8610078d
[0219.915] FillRect (hDC=0x760107b1, lprc=0x53ddb8, hbr=0x8610078d) returned 1
[0219.915] DeleteObject (ho=0x8610078d) returned 1
[0219.915] RestoreDC (hdc=0x760107b1, nSavedDC=-1) returned 1
[0219.915] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0219.915] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0219.915] GetSystemMetrics (nIndex=42) returned 0
[0219.915] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0219.915] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0219.915] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0219.915] GetCurrentObject (hdc=0x760107b1, type=0x1) returned 0xb00017
[0219.915] GetCurrentObject (hdc=0x760107b1, type=0x2) returned 0x900010
[0219.915] GetCurrentObject (hdc=0x760107b1, type=0x7) returned 0x1e0507b9
[0219.915] GetCurrentObject (hdc=0x760107b1, type=0x6) returned 0x8a01c2
[0219.915] SaveDC (hdc=0x760107b1) returned 2
[0219.915] GetNearestColor (hdc=0x760107b1, color=0xff) returned 0xff
[0219.916] CreateSolidBrush (color=0xff) returned 0x8710078d
[0219.916] FillRect (hDC=0x760107b1, lprc=0x53dd58, hbr=0x8710078d) returned 1
[0219.916] DeleteObject (ho=0x8710078d) returned 1
[0219.916] RestoreDC (hdc=0x760107b1, nSavedDC=-1) returned 1
[0219.916] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0219.916] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0219.916] GetSystemMetrics (nIndex=42) returned 0
[0219.916] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0219.916] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0219.916] RestoreDC (hdc=0x760107b1, nSavedDC=-1) returned 1
[0219.916] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107b1) returned 0x0
[0219.916] IsAppThemed () returned 0x1
[0219.916] GetThemeAppProperties () returned 0x3
[0219.916] GetThemeAppProperties () returned 0x3
[0219.916] IsAppThemed () returned 0x1
[0219.916] GetThemeAppProperties () returned 0x3
[0219.916] GetThemeAppProperties () returned 0x3
[0219.916] IsThemePartDefined () returned 0x1
[0219.916] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0219.916] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0219.917] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0219.917] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0219.917] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0219.917] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0219.917] LocalFree (hMem=0x89ee08) returned 0x0
[0219.917] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0219.917] LocalFree (hMem=0x89ea88) returned 0x0
[0219.917] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0219.917] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0219.917] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0219.917] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0219.917] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0219.917] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0219.917] GetCurrentObject (hdc=0x760107b1, type=0x1) returned 0xb00017
[0219.917] GetCurrentObject (hdc=0x760107b1, type=0x2) returned 0x900010
[0219.917] GetCurrentObject (hdc=0x760107b1, type=0x7) returned 0x1e0507b9
[0219.917] GetCurrentObject (hdc=0x760107b1, type=0x6) returned 0x8a01c2
[0219.917] SaveDC (hdc=0x760107b1) returned 1
[0219.917] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2604051e
[0219.917] GetClipRgn (hdc=0x760107b1, hrgn=0x2604051e) returned 0
[0219.917] SelectClipRgn (hdc=0x760107b1, hrgn=0x5804053e) returned 2
[0219.917] DeleteObject (ho=0x2604051e) returned 1
[0219.917] DeleteObject (ho=0x5804053e) returned 1
[0219.917] OffsetViewportOrgEx (in: hdc=0x760107b1, x=0, y=0, lppt=0x2348390 | out: lppt=0x2348390) returned 1
[0219.917] IsAppThemed () returned 0x1
[0219.918] GetThemeAppProperties () returned 0x3
[0219.918] GetThemeAppProperties () returned 0x3
[0219.918] DrawThemeBackground () returned 0x0
[0219.918] RestoreDC (hdc=0x760107b1, nSavedDC=-1) returned 1
[0219.918] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107b1) returned 0x0
[0219.918] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0219.918] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0219.918] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0219.918] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0219.918] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0219.918] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0219.918] LocalFree (hMem=0x89ec80) returned 0x0
[0219.918] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0219.918] LocalFree (hMem=0x89ea88) returned 0x0
[0219.918] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0219.918] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0219.918] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0219.918] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0219.918] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0219.918] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0219.918] GetCurrentObject (hdc=0x760107b1, type=0x1) returned 0xb00017
[0219.918] GetCurrentObject (hdc=0x760107b1, type=0x2) returned 0x900010
[0219.918] GetCurrentObject (hdc=0x760107b1, type=0x7) returned 0x1e0507b9
[0219.918] GetCurrentObject (hdc=0x760107b1, type=0x6) returned 0x8a01c2
[0219.918] SaveDC (hdc=0x760107b1) returned 1
[0219.919] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5904053e
[0219.919] GetClipRgn (hdc=0x760107b1, hrgn=0x5904053e) returned 0
[0219.919] SelectClipRgn (hdc=0x760107b1, hrgn=0x2704051e) returned 2
[0219.919] DeleteObject (ho=0x5904053e) returned 1
[0219.919] DeleteObject (ho=0x2704051e) returned 1
[0219.919] OffsetViewportOrgEx (in: hdc=0x760107b1, x=0, y=0, lppt=0x2348664 | out: lppt=0x2348664) returned 1
[0219.919] IsAppThemed () returned 0x1
[0219.919] GetThemeAppProperties () returned 0x3
[0219.919] GetThemeAppProperties () returned 0x3
[0219.919] GetThemeBackgroundContentRect () returned 0x0
[0219.919] RestoreDC (hdc=0x760107b1, nSavedDC=-1) returned 1
[0219.919] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107b1) returned 0x0
[0219.919] IsAppThemed () returned 0x1
[0219.919] GetThemeAppProperties () returned 0x3
[0219.919] GetThemeAppProperties () returned 0x3
[0219.919] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0219.919] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0219.919] GetCurrentObject (hdc=0x760107b1, type=0x1) returned 0xb00017
[0219.919] GetCurrentObject (hdc=0x760107b1, type=0x2) returned 0x900010
[0219.919] GetCurrentObject (hdc=0x760107b1, type=0x7) returned 0x1e0507b9
[0219.919] GetCurrentObject (hdc=0x760107b1, type=0x6) returned 0x8a01c2
[0219.919] SaveDC (hdc=0x760107b1) returned 1
[0219.919] GetTextAlign (hdc=0x760107b1) returned 0x0
[0219.919] GetTextColor (hdc=0x760107b1) returned 0x0
[0219.920] GetCurrentObject (hdc=0x760107b1, type=0x6) returned 0x8a01c2
[0219.920] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0219.920] SelectObject (hdc=0x760107b1, h=0x450a0799) returned 0x8a01c2
[0219.920] GetBkMode (hdc=0x760107b1) returned 2
[0219.920] SetBkMode (hdc=0x760107b1, mode=1) returned 2
[0219.920] DrawTextExW (in: hdc=0x760107b1, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x2348a04 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0219.920] DrawTextExW (in: hdc=0x760107b1, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x2348a04 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0219.920] RestoreDC (hdc=0x760107b1, nSavedDC=-1) returned 1
[0219.920] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107b1) returned 0x0
[0219.920] GetFocus () returned 0x202c6
[0219.920] IsAppThemed () returned 0x1
[0219.921] GetThemeAppProperties () returned 0x3
[0219.921] GetThemeAppProperties () returned 0x3
[0219.921] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0219.921] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x760107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0219.921] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107b1) returned 0x0
[0219.921] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0219.921] SelectObject (hdc=0x760107b1, h=0x85000f) returned 0x1e0507b9
[0219.921] DeleteDC (hdc=0x760107b1) returned 1
[0219.921] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0219.921] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0219.921] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2348b00, cPoints=0x1 | out: lpPoints=0x2348b00) returned 25690608
[0219.921] WindowFromPoint (Point=0x21b) returned 0x202c6
[0219.921] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x193021b) returned 0x1
[0219.922] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0219.922] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0219.922] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.923] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0219.924] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.924] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0219.924] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.924] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0219.924] GetDC (hWnd=0x0) returned 0xf0105ee
[0219.924] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e888) returned 0x0
[0219.924] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0219.924] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0219.924] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0219.925] GetSystemMetrics (nIndex=5) returned 1
[0219.925] GetSystemMetrics (nIndex=6) returned 1
[0219.925] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.925] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0219.925] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.925] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0219.972] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.972] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0219.973] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.973] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0219.973] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.973] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0219.973] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.973] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0219.973] GetSystemMetrics (nIndex=5) returned 1
[0219.973] GetSystemMetrics (nIndex=6) returned 1
[0219.974] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.974] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0219.974] GetSystemMetrics (nIndex=5) returned 1
[0219.974] GetSystemMetrics (nIndex=6) returned 1
[0219.974] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.974] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0219.974] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.976] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0219.976] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.976] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0219.977] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.977] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0219.977] GetSystemMetrics (nIndex=59) returned 1460
[0219.977] GetSystemMetrics (nIndex=60) returned 920
[0219.977] GetSystemMetrics (nIndex=34) returned 136
[0219.977] GetSystemMetrics (nIndex=35) returned 39
[0219.977] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.977] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0219.977] GetCurrentThreadId () returned 0x11d0
[0219.977] GetCurrentThreadId () returned 0x11d0
[0219.977] GetCurrentThreadId () returned 0x11d0
[0219.977] GetCurrentThreadId () returned 0x11d0
[0219.977] GetCurrentThreadId () returned 0x11d0
[0219.977] GetCurrentThreadId () returned 0x11d0
[0219.977] GetCurrentThreadId () returned 0x11d0
[0219.977] GetCurrentThreadId () returned 0x11d0
[0219.978] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.978] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0219.978] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0219.978] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0219.978] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.978] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0219.978] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.978] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0219.978] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1a013e
[0219.979] SetWindowLongW (hWnd=0x1a013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0219.979] GetWindowLongW (hWnd=0x1a013e, nIndex=-4) returned 1950089536
[0219.979] SetWindowLongW (hWnd=0x1a013e, nIndex=-4, dwNewLong=79643742) returned 1950089536
[0219.979] GetWindowLongW (hWnd=0x1a013e, nIndex=-4) returned 79643742
[0219.979] GetWindowLongW (hWnd=0x1a013e, nIndex=-16) returned 113311744
[0219.980] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a013e, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0219.980] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a013e, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0219.980] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a013e, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0219.981] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a013e, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0219.981] GetClientRect (in: hWnd=0x1a013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0219.981] GetWindowRect (in: hWnd=0x1a013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0219.981] SetWindowTextW (hWnd=0x1a013e, lpString="WindowsFormsParkingWindow") returned 1
[0219.981] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a013e, Msg=0xc, wParam=0x0, lParam=0x2340a4c) returned 0x1
[0219.981] GetParent (hWnd=0x1a013e) returned 0x0
[0219.982] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0219.982] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1a013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1602d6
[0219.982] SetWindowLongW (hWnd=0x1602d6, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0219.982] GetWindowLongW (hWnd=0x1602d6, nIndex=-4) returned 1868147648
[0219.982] SetWindowLongW (hWnd=0x1602d6, nIndex=-4, dwNewLong=79644022) returned 1868147648
[0219.982] GetWindowLongW (hWnd=0x1602d6, nIndex=-4) returned 79644022
[0219.982] GetWindowLongW (hWnd=0x1602d6, nIndex=-16) returned 1174405133
[0219.982] GetWindowLongW (hWnd=0x1602d6, nIndex=-12) returned 0
[0219.982] SetWindowLongW (hWnd=0x1602d6, nIndex=-12, dwNewLong=1442518) returned 0
[0219.983] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0219.983] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0219.983] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0219.984] GetClientRect (in: hWnd=0x1602d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0219.984] GetWindowRect (in: hWnd=0x1602d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0219.984] GetParent (hWnd=0x1602d6) returned 0x1a013e
[0219.984] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1a013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0219.984] SetWindowTextW (hWnd=0x1602d6, lpString="Enter password: ") returned 1
[0219.984] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0219.985] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0219.985] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0219.985] GetClientRect (in: hWnd=0x1602d6, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0219.985] GetWindowRect (in: hWnd=0x1602d6, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0219.985] GetParent (hWnd=0x1602d6) returned 0x1a013e
[0219.985] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1a013e, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0219.985] SendMessageW (hWnd=0x1602d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1602d6) returned 0x0
[0219.985] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1602d6) returned 0x0
[0219.985] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0219.986] GetParent (hWnd=0x1602d6) returned 0x1a013e
[0219.986] GdipCreateFromHWND (hwnd=0x1602d6, graphics=0x53e994) returned 0x0
[0219.986] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0219.986] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0219.986] GetProcessWindowStation () returned 0x13c
[0219.986] GetCapture () returned 0x202c6
[0219.986] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0219.986] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0219.987] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0219.987] ReleaseCapture () returned 1
[0219.987] GetActiveWindow () returned 0x70036
[0219.987] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0219.987] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.988] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0219.988] GetCursorPos (in: lpPoint=0x23558b0 | out: lpPoint=0x23558b0*(x=539, y=403)) returned 1
[0219.988] MonitorFromPoint (pt=0x21b, dwFlags=0x193) returned 0x10001
[0219.988] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0219.988] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x790107b1
[0219.988] GetDeviceCaps (hdc=0x790107b1, index=12) returned 32
[0219.988] GetDeviceCaps (hdc=0x790107b1, index=14) returned 1
[0219.988] DeleteDC (hdc=0x790107b1) returned 1
[0219.988] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0219.989] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0219.989] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xa02c0
[0219.989] SetWindowLongW (hWnd=0xa02c0, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0219.989] GetWindowLongW (hWnd=0xa02c0, nIndex=-4) returned 1950089536
[0219.990] SetWindowLongW (hWnd=0xa02c0, nIndex=-4, dwNewLong=79643782) returned 1950089536
[0219.990] GetWindowLongW (hWnd=0xa02c0, nIndex=-4) returned 79643782
[0219.990] GetWindowLongW (hWnd=0xa02c0, nIndex=-16) returned 113770496
[0219.990] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0219.991] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0219.992] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0219.992] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0219.992] GetWindowRect (in: hWnd=0xa02c0, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0219.992] SetWindowTextW (hWnd=0xa02c0, lpString="Ransomware") returned 1
[0219.992] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xc, wParam=0x0, lParam=0x2348bc8) returned 0x1
[0219.993] GetStartupInfoW (in: lpStartupInfo=0x2355bec | out: lpStartupInfo=0x2355bec*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0219.994] GetParent (hWnd=0xa02c0) returned 0x0
[0219.994] SetWindowLongW (hWnd=0xa02c0, nIndex=-8, dwNewLong=0) returned 0
[0219.996] SendMessageW (hWnd=0xa02c0, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0219.996] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0219.996] SendMessageW (hWnd=0xa02c0, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0219.996] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0219.996] GetSystemMenu (hWnd=0xa02c0, bRevert=0) returned 0x3b021b
[0219.997] GetWindowPlacement (in: hWnd=0xa02c0, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0219.997] EnableMenuItem (hMenu=0x3b021b, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0219.997] EnableMenuItem (hMenu=0x3b021b, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0219.997] EnableMenuItem (hMenu=0x3b021b, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0219.997] EnableMenuItem (hMenu=0x3b021b, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0219.997] EnableMenuItem (hMenu=0x3b021b, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0219.997] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0219.997] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0219.997] GetWindowRect (in: hWnd=0xa02c0, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0219.998] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0219.998] GetWindowLongW (hWnd=0xa02c0, nIndex=-16) returned 113770496
[0219.998] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0219.998] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0219.998] GetSystemMetrics (nIndex=42) returned 0
[0219.998] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0219.998] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0219.998] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0219.998] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0219.998] GetSystemMetrics (nIndex=42) returned 0
[0219.998] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0219.998] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0219.998] GetCursorPos (in: lpPoint=0x2355d60 | out: lpPoint=0x2355d60*(x=539, y=403)) returned 1
[0219.998] MonitorFromPoint (pt=0x219, dwFlags=0x195) returned 0x10001
[0219.999] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0219.999] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x7d0107b1
[0219.999] GetDeviceCaps (hdc=0x7d0107b1, index=12) returned 32
[0219.999] GetDeviceCaps (hdc=0x7d0107b1, index=14) returned 1
[0219.999] DeleteDC (hdc=0x7d0107b1) returned 1
[0219.999] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0219.999] GetWindowLongW (hWnd=0xa02c0, nIndex=-16) returned 113770496
[0219.999] GetWindowLongW (hWnd=0xa02c0, nIndex=-20) returned 327937
[0219.999] SetWindowLongW (hWnd=0xa02c0, nIndex=-16, dwNewLong=46661632) returned 113770496
[0219.999] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0220.000] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0220.000] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0220.000] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0220.001] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0220.001] SetWindowLongW (hWnd=0xa02c0, nIndex=-20, dwNewLong=327681) returned 327937
[0220.001] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0220.001] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0220.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0220.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0220.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0220.003] SetWindowPos (hWnd=0xa02c0, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0220.003] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0220.003] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0220.004] GetWindowPlacement (in: hWnd=0xa02c0, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0220.004] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0220.004] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0220.004] GetWindowRect (in: hWnd=0xa02c0, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0220.004] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0220.005] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0220.005] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0220.005] RedrawWindow (hWnd=0xa02c0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0220.005] GetSystemMenu (hWnd=0xa02c0, bRevert=0) returned 0x3b021b
[0220.016] GetWindowPlacement (in: hWnd=0xa02c0, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0220.016] EnableMenuItem (hMenu=0x3b021b, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0220.016] EnableMenuItem (hMenu=0x3b021b, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0220.016] EnableMenuItem (hMenu=0x3b021b, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0220.016] EnableMenuItem (hMenu=0x3b021b, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0220.016] EnableMenuItem (hMenu=0x3b021b, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0220.016] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0220.016] GetWindowLongW (hWnd=0xa02c0, nIndex=-8) returned 0
[0220.017] SetWindowLongW (hWnd=0xa02c0, nIndex=-8, dwNewLong=458806) returned 0
[0220.019] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0220.019] GetProcessWindowStation () returned 0x13c
[0220.019] GetCurrentThreadId () returned 0x11d0
[0220.019] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf459e, lParam=0x0) returned 1
[0220.019] IsWindowVisible (hWnd=0xa02c0) returned 0
[0220.019] IsWindowVisible (hWnd=0x70036) returned 1
[0220.019] IsWindowEnabled (hWnd=0x70036) returned 1
[0220.019] IsWindowVisible (hWnd=0x602b6) returned 0
[0220.019] IsWindowVisible (hWnd=0x901f8) returned 0
[0220.019] IsWindowVisible (hWnd=0x202d0) returned 0
[0220.019] IsWindowVisible (hWnd=0x202d4) returned 0
[0220.020] GetActiveWindow () returned 0x70036
[0220.020] GetFocus () returned 0x202c6
[0220.020] IsWindow (hWnd=0x70036) returned 1
[0220.020] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0220.020] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0220.021] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0220.021] GetWindowLongW (hWnd=0xa02c0, nIndex=-8) returned 458806
[0220.021] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0220.021] GetCurrentThreadId () returned 0x11d0
[0220.021] GetWindowLongW (hWnd=0xa02c0, nIndex=-8) returned 458806
[0220.021] IsWindowEnabled (hWnd=0x70036) returned 0
[0220.021] IsWindowEnabled (hWnd=0xa02c0) returned 1
[0220.021] ShowWindow (hWnd=0xa02c0, nCmdShow=5) returned 0
[0220.021] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0220.021] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0220.022] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0220.022] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0220.022] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0xa02c0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1602d2
[0220.023] SetWindowLongW (hWnd=0x1602d2, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0220.023] GetWindowLongW (hWnd=0x1602d2, nIndex=-4) returned 1868026976
[0220.023] SetWindowLongW (hWnd=0x1602d2, nIndex=-4, dwNewLong=79644542) returned 1868026976
[0220.023] GetWindowLongW (hWnd=0x1602d2, nIndex=-4) returned 79644542
[0220.023] GetWindowLongW (hWnd=0x1602d2, nIndex=-16) returned 1174470848
[0220.023] GetWindowLongW (hWnd=0x1602d2, nIndex=-12) returned 0
[0220.023] SetWindowLongW (hWnd=0x1602d2, nIndex=-12, dwNewLong=1442514) returned 0
[0220.023] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0220.024] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0220.025] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0220.026] SendMessageW (hWnd=0x1602d2, Msg=0x2055, wParam=0x1602d2, lParam=0x3) returned 0x2
[0220.026] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0220.026] GetWindow (hWnd=0x1602d2, uCmd=0x3) returned 0x0
[0220.026] GetClientRect (in: hWnd=0x1602d2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0220.026] GetWindowRect (in: hWnd=0x1602d2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0220.026] GetParent (hWnd=0x1602d2) returned 0xa02c0
[0220.026] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c0, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0220.026] SendMessageW (hWnd=0x1602d2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0220.026] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0220.026] SendMessageW (hWnd=0x1602d2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0220.026] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0220.027] GetSystemMetrics (nIndex=5) returned 1
[0220.027] GetSystemMetrics (nIndex=6) returned 1
[0220.027] SendMessageW (hWnd=0x1602d2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0220.027] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0220.027] SendMessageW (hWnd=0x1602d2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0220.027] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0220.027] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0220.028] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0220.028] GetClientRect (in: hWnd=0x1602d2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0220.028] GetWindowRect (in: hWnd=0x1602d2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0220.028] GetParent (hWnd=0x1602d2) returned 0xa02c0
[0220.028] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c0, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0220.028] SendMessageW (hWnd=0x1602d2, Msg=0x2210, wParam=0x2d20001, lParam=0x1602d2) returned 0x0
[0220.028] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x2210, wParam=0x2d20001, lParam=0x1602d2) returned 0x0
[0220.028] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0220.028] GetParent (hWnd=0x1602d2) returned 0xa02c0
[0220.028] GetParent (hWnd=0x1602d6) returned 0x1a013e
[0220.028] SetParent (hWndChild=0x1602d6, hWndNewParent=0xa02c0) returned 0x1a013e
[0220.029] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0220.029] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0220.029] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0220.030] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0220.030] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0220.030] GetClientRect (in: hWnd=0x1602d6, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0220.030] GetWindowRect (in: hWnd=0x1602d6, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0220.030] GetParent (hWnd=0x1602d6) returned 0xa02c0
[0220.030] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c0, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0220.030] GetClientRect (in: hWnd=0x1602d6, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0220.030] GetWindowRect (in: hWnd=0x1602d6, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0220.030] GetParent (hWnd=0x1602d6) returned 0xa02c0
[0220.030] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c0, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0220.030] GetParent (hWnd=0x1602d6) returned 0xa02c0
[0220.030] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0220.030] GetWindow (hWnd=0x1602d6, uCmd=0x3) returned 0x0
[0220.030] SetWindowPos (hWnd=0x1602d6, hWndInsertAfter=0x1602d2, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0220.031] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0220.031] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0220.031] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0220.031] GetClientRect (in: hWnd=0x1602d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0220.031] GetWindowRect (in: hWnd=0x1602d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0220.031] GetParent (hWnd=0x1602d6) returned 0xa02c0
[0220.031] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c0, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0220.031] GetParent (hWnd=0x1602d6) returned 0xa02c0
[0220.031] GetWindow (hWnd=0x1602d6, uCmd=0x3) returned 0x1602d2
[0220.032] GetWindowThreadProcessId (in: hWnd=0x1602d6, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0220.032] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0220.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0220.033] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0220.033] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0xa02c0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xa02be
[0220.033] SetWindowLongW (hWnd=0xa02be, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0220.033] GetWindowLongW (hWnd=0xa02be, nIndex=-4) returned 1868032000
[0220.034] SetWindowLongW (hWnd=0xa02be, nIndex=-4, dwNewLong=79643822) returned 1868032000
[0220.034] GetWindowLongW (hWnd=0xa02be, nIndex=-4) returned 79643822
[0220.034] GetWindowLongW (hWnd=0xa02be, nIndex=-16) returned 1174470667
[0220.034] GetWindowLongW (hWnd=0xa02be, nIndex=-12) returned 0
[0220.034] SetWindowLongW (hWnd=0xa02be, nIndex=-12, dwNewLong=656062) returned 0
[0220.034] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0220.035] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0220.035] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0220.036] SendMessageW (hWnd=0xa02be, Msg=0x2055, wParam=0xa02be, lParam=0x3) returned 0x2
[0220.036] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0220.036] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0220.036] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0220.036] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0220.036] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0220.036] RedrawWindow (hWnd=0x1602d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0220.037] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0220.037] RedrawWindow (hWnd=0x1602d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0220.037] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0220.037] RedrawWindow (hWnd=0xa02be, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0220.038] RedrawWindow (hWnd=0xa02c0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0220.038] GetWindow (hWnd=0xa02be, uCmd=0x3) returned 0x1602d6
[0220.038] GetClientRect (in: hWnd=0xa02be, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0220.038] GetWindowRect (in: hWnd=0xa02be, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0220.038] GetParent (hWnd=0xa02be) returned 0xa02c0
[0220.038] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c0, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0220.038] SetWindowTextW (hWnd=0xa02be, lpString="OK") returned 1
[0220.038] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0xc, wParam=0x0, lParam=0x234d088) returned 0x1
[0220.038] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0220.038] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0220.038] GetClientRect (in: hWnd=0xa02be, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0220.039] GetWindowRect (in: hWnd=0xa02be, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0220.039] GetParent (hWnd=0xa02be) returned 0xa02c0
[0220.039] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c0, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0220.039] SendMessageW (hWnd=0xa02be, Msg=0x2210, wParam=0x2be0001, lParam=0xa02be) returned 0x0
[0220.039] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x2210, wParam=0x2be0001, lParam=0xa02be) returned 0x0
[0220.039] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0220.039] GetParent (hWnd=0xa02be) returned 0xa02c0
[0220.039] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0220.039] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0220.040] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0220.040] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0xa02c0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1602c8
[0220.040] SetWindowLongW (hWnd=0x1602c8, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0220.040] GetWindowLongW (hWnd=0x1602c8, nIndex=-4) returned 1868032000
[0220.040] SetWindowLongW (hWnd=0x1602c8, nIndex=-4, dwNewLong=79644102) returned 1868032000
[0220.041] GetWindowLongW (hWnd=0x1602c8, nIndex=-4) returned 79644102
[0220.041] GetWindowLongW (hWnd=0x1602c8, nIndex=-16) returned 1174470667
[0220.041] GetWindowLongW (hWnd=0x1602c8, nIndex=-12) returned 0
[0220.041] SetWindowLongW (hWnd=0x1602c8, nIndex=-12, dwNewLong=1442504) returned 0
[0220.041] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0220.041] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0220.041] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0220.042] SendMessageW (hWnd=0x1602c8, Msg=0x2055, wParam=0x1602c8, lParam=0x3) returned 0x2
[0220.042] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0220.042] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0220.042] GetWindow (hWnd=0x1602c8, uCmd=0x3) returned 0xa02be
[0220.042] GetClientRect (in: hWnd=0x1602c8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0220.042] GetWindowRect (in: hWnd=0x1602c8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0220.042] GetParent (hWnd=0x1602c8) returned 0xa02c0
[0220.042] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c0, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0220.042] SetWindowTextW (hWnd=0x1602c8, lpString="Cancel") returned 1
[0220.042] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0xc, wParam=0x0, lParam=0x2350948) returned 0x1
[0220.043] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0220.043] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0220.043] GetClientRect (in: hWnd=0x1602c8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0220.043] GetWindowRect (in: hWnd=0x1602c8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0220.043] GetParent (hWnd=0x1602c8) returned 0xa02c0
[0220.043] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c0, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0220.043] SendMessageW (hWnd=0x1602c8, Msg=0x2210, wParam=0x2c80001, lParam=0x1602c8) returned 0x0
[0220.043] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0x2210, wParam=0x2c80001, lParam=0x1602c8) returned 0x0
[0220.043] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0220.044] GetParent (hWnd=0x1602c8) returned 0xa02c0
[0220.044] GetDC (hWnd=0x0) returned 0x60100ce
[0220.044] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e320) returned 0x0
[0220.044] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0220.044] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0220.044] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0220.044] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0220.045] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0220.045] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0220.045] GetWindowLongW (hWnd=0xa02c0, nIndex=-8) returned 458806
[0220.045] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0220.045] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0220.045] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x840107b1
[0220.045] GetDeviceCaps (hdc=0x840107b1, index=12) returned 32
[0220.045] GetDeviceCaps (hdc=0x840107b1, index=14) returned 1
[0220.045] DeleteDC (hdc=0x840107b1) returned 1
[0220.045] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0220.046] GetWindowThreadProcessId (in: hWnd=0xa02c0, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0220.046] GetCurrentThreadId () returned 0x11d0
[0220.046] PostMessageW (hWnd=0xa02c0, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0220.046] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.046] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.046] GetSystemMetrics (nIndex=42) returned 0
[0220.046] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.046] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0220.046] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0220.046] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0220.047] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0220.047] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0220.057] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0xa02c0) returned 0x1
[0220.059] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0220.059] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0220.059] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0220.060] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0220.061] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0220.061] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0220.062] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0220.062] GetFocus () returned 0x202c6
[0220.062] IsChild (hWndParent=0xa02c0, hWnd=0x202c6) returned 0
[0220.062] GetFocus () returned 0x202c6
[0220.062] SetFocus (hWnd=0x1602d2) returned 0x202c6
[0220.063] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1602d2, lParam=0x0) returned 0x0
[0220.063] GetCapture () returned 0x0
[0220.063] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0220.064] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0220.065] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0220.066] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.066] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0220.066] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.067] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0220.067] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.067] GetParent (hWnd=0xa02c0) returned 0x0
[0220.067] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0220.068] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.068] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0220.068] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0220.069] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0220.069] GetSysColorBrush (nIndex=5) returned 0x100079
[0220.069] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.069] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0220.070] SendMessageW (hWnd=0x1602d2, Msg=0x2111, wParam=0x10002d2, lParam=0x1602d2) returned 0x0
[0220.070] SendMessageW (hWnd=0x1602d2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0220.070] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0220.070] GetKeyState (nVirtKey=1) returned 1
[0220.071] GetKeyState (nVirtKey=2) returned 0
[0220.071] GetKeyState (nVirtKey=4) returned 0
[0220.071] GetKeyState (nVirtKey=5) returned 0
[0220.071] GetKeyState (nVirtKey=6) returned 0
[0220.071] GetWindowTextLengthW (hWnd=0x1602d2) returned 0
[0220.071] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0220.071] SendMessageW (hWnd=0x1602d2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0220.071] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0220.071] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0220.071] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0220.076] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0220.077] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0220.077] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0220.077] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0220.077] GetWindowPlacement (in: hWnd=0xa02c0, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0220.078] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0220.078] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.078] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.078] GetSystemMetrics (nIndex=42) returned 0
[0220.078] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.078] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0220.078] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0220.078] GetCurrentObject (hdc=0x8b010786, type=0x1) returned 0xb00017
[0220.078] GetCurrentObject (hdc=0x8b010786, type=0x2) returned 0x900010
[0220.078] GetCurrentObject (hdc=0x8b010786, type=0x7) returned 0x6c0507a3
[0220.078] GetCurrentObject (hdc=0x8b010786, type=0x6) returned 0x8a01c2
[0220.078] SaveDC (hdc=0x8b010786) returned 1
[0220.078] GetNearestColor (hdc=0x8b010786, color=0xf0f0f0) returned 0xf0f0f0
[0220.078] CreateSolidBrush (color=0xf0f0f0) returned 0x8810078d
[0220.078] FillRect (hDC=0x8b010786, lprc=0x53e250, hbr=0x8810078d) returned 1
[0220.078] DeleteObject (ho=0x8810078d) returned 1
[0220.078] RestoreDC (hdc=0x8b010786, nSavedDC=-1) returned 1
[0220.079] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0220.079] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0220.079] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0220.080] GetWindowPlacement (in: hWnd=0xa02c0, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0220.080] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0220.080] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.080] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.080] GetSystemMetrics (nIndex=42) returned 0
[0220.080] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.080] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0220.080] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0220.080] GetCurrentObject (hdc=0x9a0107b1, type=0x1) returned 0xb00017
[0220.080] GetCurrentObject (hdc=0x9a0107b1, type=0x2) returned 0x900010
[0220.080] GetCurrentObject (hdc=0x9a0107b1, type=0x7) returned 0x5505065f
[0220.080] GetCurrentObject (hdc=0x9a0107b1, type=0x6) returned 0x8a01c2
[0220.080] SaveDC (hdc=0x9a0107b1) returned 1
[0220.080] GetNearestColor (hdc=0x9a0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0220.080] CreateSolidBrush (color=0xf0f0f0) returned 0x8910078d
[0220.080] FillRect (hDC=0x9a0107b1, lprc=0x53dc18, hbr=0x8910078d) returned 1
[0220.080] DeleteObject (ho=0x8910078d) returned 1
[0220.080] RestoreDC (hdc=0x9a0107b1, nSavedDC=-1) returned 1
[0220.080] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.080] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.081] GetSystemMetrics (nIndex=42) returned 0
[0220.081] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.081] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0220.081] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0220.081] GetCurrentObject (hdc=0x9a0107b1, type=0x1) returned 0xb00017
[0220.081] GetCurrentObject (hdc=0x9a0107b1, type=0x2) returned 0x900010
[0220.081] GetCurrentObject (hdc=0x9a0107b1, type=0x7) returned 0x5505065f
[0220.081] GetCurrentObject (hdc=0x9a0107b1, type=0x6) returned 0x8a01c2
[0220.081] SaveDC (hdc=0x9a0107b1) returned 1
[0220.081] GetNearestColor (hdc=0x9a0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0220.081] CreateSolidBrush (color=0xf0f0f0) returned 0x8a10078d
[0220.081] FillRect (hDC=0x9a0107b1, lprc=0x53dbb8, hbr=0x8a10078d) returned 1
[0220.081] DeleteObject (ho=0x8a10078d) returned 1
[0220.081] RestoreDC (hdc=0x9a0107b1, nSavedDC=-1) returned 1
[0220.081] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.081] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.081] GetSystemMetrics (nIndex=42) returned 0
[0220.081] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.081] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0220.082] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0220.082] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0220.082] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0220.082] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0220.083] GetStockObject (i=5) returned 0x900015
[0220.083] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0220.083] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0220.083] GetStockObject (i=5) returned 0x900015
[0220.083] GetWindowPlacement (in: hWnd=0xa02c0, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0220.083] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0220.083] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0220.083] GetWindowRect (in: hWnd=0xa02c0, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0220.090] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0220.091] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0220.091] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0220.091] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0220.091] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0220.091] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0220.091] GetWindowRect (in: hWnd=0xa02c0, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0220.091] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.091] IsWindowUnicode (hWnd=0xa02c0) returned 1
[0220.091] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.091] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.091] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.091] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0220.092] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.092] IsWindowUnicode (hWnd=0xa02c0) returned 1
[0220.092] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.092] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.092] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.092] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.092] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x84, wParam=0x0, lParam=0x193021b) returned 0x12
[0220.093] IsWindowUnicode (hWnd=0xa02c0) returned 1
[0220.093] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.093] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.093] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.093] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.093] IsWindowUnicode (hWnd=0x202c6) returned 1
[0220.093] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.093] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.093] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.093] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0220.093] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0220.093] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.094] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x84, wParam=0x0, lParam=0x193021b) returned 0x12
[0220.094] IsWindowUnicode (hWnd=0xa02c0) returned 1
[0220.094] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.094] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x84, wParam=0x0, lParam=0x193021b) returned 0x12
[0220.095] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x20, wParam=0xa02c0, lParam=0x2000012) returned 0x0
[0220.095] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.095] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.095] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xa0, wParam=0x12, lParam=0x193021b) returned 0x0
[0220.095] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.095] IsWindowUnicode (hWnd=0xa02c0) returned 1
[0220.095] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.095] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.095] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.095] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.096] IsWindowUnicode (hWnd=0xa02c0) returned 1
[0220.096] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.096] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.096] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.096] BeginPaint (in: hWnd=0xa02c0, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x8b010786
[0220.096] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0220.096] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.096] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.096] GetSystemMetrics (nIndex=42) returned 0
[0220.096] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.097] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0220.097] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0220.097] EndPaint (hWnd=0xa02c0, lpPaint=0x53e30c) returned 1
[0220.097] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.097] IsWindowUnicode (hWnd=0x1602d2) returned 1
[0220.097] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.097] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.097] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0220.097] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0220.098] SetTextColor (hdc=0x9b0107b1, color=0x0) returned 0x0
[0220.098] SetBkColor (hdc=0x9b0107b1, color=0xffffff) returned 0xffffff
[0220.098] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.098] IsWindowUnicode (hWnd=0x1602d6) returned 1
[0220.098] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.098] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.098] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.099] BeginPaint (in: hWnd=0x1602d6, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x60100ce
[0220.099] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0220.099] CreateCompatibleDC (hdc=0x60100ce) returned 0x10792
[0220.099] SelectObject (hdc=0x10792, h=0x1e0507b9) returned 0x85000f
[0220.099] GdipCreateFromHDC (hdc=0x10792, graphics=0x53e30c) returned 0x0
[0220.099] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0220.099] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0220.099] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0220.099] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.106] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0220.106] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0220.106] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0220.106] LocalFree (hMem=0x89ec80) returned 0x0
[0220.106] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.106] GdipCreateRegion (region=0x53e354) returned 0x0
[0220.106] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.106] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0220.106] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0220.106] GetWindowTextLengthW (hWnd=0x1602d6) returned 16
[0220.106] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0220.106] GetSystemMetrics (nIndex=42) returned 0
[0220.106] GetWindowTextW (in: hWnd=0x1602d6, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0220.106] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0220.106] GetClientRect (in: hWnd=0x1602d6, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0220.106] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0220.106] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0220.107] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0220.107] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.107] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0220.107] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.107] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.107] LocalFree (hMem=0x89ea88) returned 0x0
[0220.107] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0220.107] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0220.107] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0220.107] LocalFree (hMem=0x89ee08) returned 0x0
[0220.107] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.107] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0220.107] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0220.107] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0220.107] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0220.107] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0220.107] GetCurrentObject (hdc=0x10792, type=0x1) returned 0xb00017
[0220.107] GetCurrentObject (hdc=0x10792, type=0x2) returned 0x900010
[0220.107] GetCurrentObject (hdc=0x10792, type=0x7) returned 0x1e0507b9
[0220.107] GetCurrentObject (hdc=0x10792, type=0x6) returned 0x8a01c2
[0220.107] SaveDC (hdc=0x10792) returned 1
[0220.108] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcf0407a1
[0220.108] GetClipRgn (hdc=0x10792, hrgn=0xcf0407a1) returned 0
[0220.108] SelectClipRgn (hdc=0x10792, hrgn=0x2c04051e) returned 2
[0220.108] DeleteObject (ho=0xcf0407a1) returned 1
[0220.108] DeleteObject (ho=0x2c04051e) returned 1
[0220.108] OffsetViewportOrgEx (in: hdc=0x10792, x=0, y=0, lppt=0x235778c | out: lppt=0x235778c) returned 1
[0220.108] GetNearestColor (hdc=0x10792, color=0xf0f0f0) returned 0xf0f0f0
[0220.108] CreateSolidBrush (color=0xf0f0f0) returned 0x8b10078d
[0220.108] FillRect (hDC=0x10792, lprc=0x53e1f4, hbr=0x8b10078d) returned 1
[0220.108] DeleteObject (ho=0x8b10078d) returned 1
[0220.108] RestoreDC (hdc=0x10792, nSavedDC=-1) returned 1
[0220.108] GdipReleaseDC (graphics=0x5d92c30, hdc=0x10792) returned 0x0
[0220.108] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc790dbd) returned 0x0
[0220.108] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.108] GetWindowTextLengthW (hWnd=0x1602d6) returned 16
[0220.108] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0220.108] GetSystemMetrics (nIndex=42) returned 0
[0220.108] GetWindowTextW (in: hWnd=0x1602d6, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0220.108] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0220.109] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0220.109] GetCurrentObject (hdc=0x10792, type=0x1) returned 0xb00017
[0220.109] GetCurrentObject (hdc=0x10792, type=0x2) returned 0x900010
[0220.109] GetCurrentObject (hdc=0x10792, type=0x7) returned 0x1e0507b9
[0220.109] GetCurrentObject (hdc=0x10792, type=0x6) returned 0x8a01c2
[0220.109] SaveDC (hdc=0x10792) returned 1
[0220.109] GetNearestColor (hdc=0x10792, color=0x0) returned 0x0
[0220.109] RestoreDC (hdc=0x10792, nSavedDC=-1) returned 1
[0220.109] GdipReleaseDC (graphics=0x5d92c30, hdc=0x10792) returned 0x0
[0220.109] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0220.110] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0220.110] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0220.110] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2357a94 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0220.110] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0220.110] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0220.110] GetCurrentObject (hdc=0x10792, type=0x1) returned 0xb00017
[0220.110] GetCurrentObject (hdc=0x10792, type=0x2) returned 0x900010
[0220.110] GetCurrentObject (hdc=0x10792, type=0x7) returned 0x1e0507b9
[0220.110] GetCurrentObject (hdc=0x10792, type=0x6) returned 0x8a01c2
[0220.110] SaveDC (hdc=0x10792) returned 1
[0220.110] GetTextAlign (hdc=0x10792) returned 0x0
[0220.110] GetTextColor (hdc=0x10792) returned 0x0
[0220.110] GetCurrentObject (hdc=0x10792, type=0x6) returned 0x8a01c2
[0220.110] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0220.110] SelectObject (hdc=0x10792, h=0x730a066d) returned 0x8a01c2
[0220.111] GetBkMode (hdc=0x10792) returned 2
[0220.111] SetBkMode (hdc=0x10792, mode=1) returned 2
[0220.111] DrawTextExW (in: hdc=0x10792, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x2357cb8 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0220.111] RestoreDC (hdc=0x10792, nSavedDC=-1) returned 1
[0220.111] GdipReleaseDC (graphics=0x5d92c30, hdc=0x10792) returned 0x0
[0220.111] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0220.111] BitBlt (hdc=0x60100ce, x=0, y=0, cx=250, cy=70, hdcSrc=0x10792, x1=0, y1=0, rop=0xcc0020) returned 1
[0220.111] GdipReleaseDC (graphics=0x5d92c30, hdc=0x10792) returned 0x0
[0220.111] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0220.111] SelectObject (hdc=0x10792, h=0x85000f) returned 0x1e0507b9
[0220.111] DeleteDC (hdc=0x10792) returned 1
[0220.111] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0220.112] EndPaint (hWnd=0x1602d6, lpPaint=0x53e2f0) returned 1
[0220.112] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.112] IsWindowUnicode (hWnd=0xa02be) returned 1
[0220.112] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.112] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.112] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.112] BeginPaint (in: hWnd=0xa02be, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0220.112] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0220.112] CreateCompatibleDC (hdc=0xf0105ee) returned 0x2010792
[0220.112] SelectObject (hdc=0x2010792, h=0x1e0507b9) returned 0x85000f
[0220.112] GdipCreateFromHDC (hdc=0x2010792, graphics=0x53e300) returned 0x0
[0220.112] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0220.112] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0220.112] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0220.113] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.113] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0220.113] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.113] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0220.113] LocalFree (hMem=0x89ea88) returned 0x0
[0220.113] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.113] GdipCreateRegion (region=0x53e348) returned 0x0
[0220.113] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.113] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0220.113] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0220.113] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc770dbd) returned 0x0
[0220.113] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.113] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0220.113] GetCurrentObject (hdc=0x2010792, type=0x1) returned 0xb00017
[0220.113] GetCurrentObject (hdc=0x2010792, type=0x2) returned 0x900010
[0220.113] GetCurrentObject (hdc=0x2010792, type=0x7) returned 0x1e0507b9
[0220.113] GetCurrentObject (hdc=0x2010792, type=0x6) returned 0x8a01c2
[0220.113] SaveDC (hdc=0x2010792) returned 1
[0220.113] GetNearestColor (hdc=0x2010792, color=0xf0f0f0) returned 0xf0f0f0
[0220.113] GetNearestColor (hdc=0x2010792, color=0xa0a0a0) returned 0xa0a0a0
[0220.113] GetNearestColor (hdc=0x2010792, color=0x696969) returned 0x696969
[0220.114] GetNearestColor (hdc=0x2010792, color=0xa0a0a0) returned 0xa0a0a0
[0220.114] GetNearestColor (hdc=0x2010792, color=0x0) returned 0x0
[0220.114] GetNearestColor (hdc=0x2010792, color=0xffffff) returned 0xffffff
[0220.114] GetNearestColor (hdc=0x2010792, color=0xe5e5e5) returned 0xe5e5e5
[0220.114] GetNearestColor (hdc=0x2010792, color=0xd7d7d7) returned 0xd7d7d7
[0220.114] GetNearestColor (hdc=0x2010792, color=0x0) returned 0x0
[0220.114] RestoreDC (hdc=0x2010792, nSavedDC=-1) returned 1
[0220.114] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2010792) returned 0x0
[0220.114] IsAppThemed () returned 0x1
[0220.114] GetThemeAppProperties () returned 0x3
[0220.114] GetThemeAppProperties () returned 0x3
[0220.114] IsAppThemed () returned 0x1
[0220.114] GetThemeAppProperties () returned 0x3
[0220.114] GetThemeAppProperties () returned 0x3
[0220.114] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x2358424 | out: lpchText="OK", lprc=0x53e028) returned 13
[0220.114] IsAppThemed () returned 0x1
[0220.115] GetThemeAppProperties () returned 0x3
[0220.115] GetThemeAppProperties () returned 0x3
[0220.115] IsAppThemed () returned 0x1
[0220.115] GetThemeAppProperties () returned 0x3
[0220.115] GetThemeAppProperties () returned 0x3
[0220.115] GetFocus () returned 0x1602d2
[0220.115] IsAppThemed () returned 0x1
[0220.121] GetThemeAppProperties () returned 0x3
[0220.121] GetThemeAppProperties () returned 0x3
[0220.121] IsAppThemed () returned 0x1
[0220.121] GetThemeAppProperties () returned 0x3
[0220.121] GetThemeAppProperties () returned 0x3
[0220.121] IsThemePartDefined () returned 0x1
[0220.121] IsAppThemed () returned 0x1
[0220.121] GetThemeAppProperties () returned 0x3
[0220.121] GetThemeAppProperties () returned 0x3
[0220.121] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0220.121] IsAppThemed () returned 0x1
[0220.121] GetThemeAppProperties () returned 0x3
[0220.121] GetThemeAppProperties () returned 0x3
[0220.121] IsAppThemed () returned 0x1
[0220.121] GetThemeAppProperties () returned 0x3
[0220.121] GetThemeAppProperties () returned 0x3
[0220.121] IsThemePartDefined () returned 0x1
[0220.121] GdipCreateRegion (region=0x53e070) returned 0x0
[0220.121] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.121] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0220.121] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.121] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0220.121] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.122] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.122] LocalFree (hMem=0x89ea88) returned 0x0
[0220.122] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0220.122] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0220.122] LocalFree (hMem=0x89ee08) returned 0x0
[0220.122] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.122] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0220.122] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0220.122] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0220.122] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.122] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0220.122] GetCurrentObject (hdc=0x2010792, type=0x1) returned 0xb00017
[0220.122] GetCurrentObject (hdc=0x2010792, type=0x2) returned 0x900010
[0220.122] GetCurrentObject (hdc=0x2010792, type=0x7) returned 0x1e0507b9
[0220.122] GetCurrentObject (hdc=0x2010792, type=0x6) returned 0x8a01c2
[0220.122] SaveDC (hdc=0x2010792) returned 1
[0220.122] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d04051e
[0220.122] GetClipRgn (hdc=0x2010792, hrgn=0x2d04051e) returned 0
[0220.122] SelectClipRgn (hdc=0x2010792, hrgn=0xd30407a1) returned 2
[0220.122] DeleteObject (ho=0x2d04051e) returned 1
[0220.122] DeleteObject (ho=0xd30407a1) returned 1
[0220.123] OffsetViewportOrgEx (in: hdc=0x2010792, x=0, y=0, lppt=0x2358ad4 | out: lppt=0x2358ad4) returned 1
[0220.123] DrawThemeParentBackground () returned 0x0
[0220.123] GetWindowPlacement (in: hWnd=0xa02c0, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0220.123] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0220.123] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.123] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.123] GetSystemMetrics (nIndex=42) returned 0
[0220.123] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.123] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0220.123] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0220.123] GetCurrentObject (hdc=0x2010792, type=0x1) returned 0xb00017
[0220.123] GetCurrentObject (hdc=0x2010792, type=0x2) returned 0x900010
[0220.123] GetCurrentObject (hdc=0x2010792, type=0x7) returned 0x1e0507b9
[0220.123] GetCurrentObject (hdc=0x2010792, type=0x6) returned 0x8a01c2
[0220.123] SaveDC (hdc=0x2010792) returned 2
[0220.123] GetNearestColor (hdc=0x2010792, color=0xf0f0f0) returned 0xf0f0f0
[0220.123] CreateSolidBrush (color=0xf0f0f0) returned 0x8c10078d
[0220.123] FillRect (hDC=0x2010792, lprc=0x53dad0, hbr=0x8c10078d) returned 1
[0220.124] DeleteObject (ho=0x8c10078d) returned 1
[0220.124] RestoreDC (hdc=0x2010792, nSavedDC=-1) returned 1
[0220.124] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.124] GetSystemMetrics (nIndex=42) returned 0
[0220.124] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0220.124] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0220.124] GetCurrentObject (hdc=0x2010792, type=0x1) returned 0xb00017
[0220.124] GetCurrentObject (hdc=0x2010792, type=0x2) returned 0x900010
[0220.124] GetCurrentObject (hdc=0x2010792, type=0x7) returned 0x1e0507b9
[0220.124] GetCurrentObject (hdc=0x2010792, type=0x6) returned 0x8a01c2
[0220.124] SaveDC (hdc=0x2010792) returned 2
[0220.124] GetNearestColor (hdc=0x2010792, color=0xf0f0f0) returned 0xf0f0f0
[0220.124] CreateSolidBrush (color=0xf0f0f0) returned 0x8d10078d
[0220.124] FillRect (hDC=0x2010792, lprc=0x53da70, hbr=0x8d10078d) returned 1
[0220.124] DeleteObject (ho=0x8d10078d) returned 1
[0220.124] RestoreDC (hdc=0x2010792, nSavedDC=-1) returned 1
[0220.124] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.124] GetSystemMetrics (nIndex=42) returned 0
[0220.124] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.125] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0220.125] RestoreDC (hdc=0x2010792, nSavedDC=-1) returned 1
[0220.125] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2010792) returned 0x0
[0220.125] IsAppThemed () returned 0x1
[0220.125] GetThemeAppProperties () returned 0x3
[0220.125] GetThemeAppProperties () returned 0x3
[0220.125] IsAppThemed () returned 0x1
[0220.125] GetThemeAppProperties () returned 0x3
[0220.125] GetThemeAppProperties () returned 0x3
[0220.125] IsThemePartDefined () returned 0x1
[0220.125] GdipCreateRegion (region=0x53dff4) returned 0x0
[0220.125] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.125] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0220.125] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.125] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0220.125] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.125] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0220.125] LocalFree (hMem=0x89ea88) returned 0x0
[0220.125] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0220.125] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0220.125] LocalFree (hMem=0x89ec80) returned 0x0
[0220.126] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.126] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0220.126] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0220.126] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0220.126] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.126] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0220.126] GetCurrentObject (hdc=0x2010792, type=0x1) returned 0xb00017
[0220.126] GetCurrentObject (hdc=0x2010792, type=0x2) returned 0x900010
[0220.126] GetCurrentObject (hdc=0x2010792, type=0x7) returned 0x1e0507b9
[0220.126] GetCurrentObject (hdc=0x2010792, type=0x6) returned 0x8a01c2
[0220.126] SaveDC (hdc=0x2010792) returned 1
[0220.126] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd40407a1
[0220.126] GetClipRgn (hdc=0x2010792, hrgn=0xd40407a1) returned 0
[0220.126] SelectClipRgn (hdc=0x2010792, hrgn=0x2f04051e) returned 2
[0220.126] DeleteObject (ho=0xd40407a1) returned 1
[0220.126] DeleteObject (ho=0x2f04051e) returned 1
[0220.126] OffsetViewportOrgEx (in: hdc=0x2010792, x=0, y=0, lppt=0x235935c | out: lppt=0x235935c) returned 1
[0220.126] IsAppThemed () returned 0x1
[0220.126] GetThemeAppProperties () returned 0x3
[0220.126] GetThemeAppProperties () returned 0x3
[0220.126] DrawThemeBackground () returned 0x0
[0220.126] RestoreDC (hdc=0x2010792, nSavedDC=-1) returned 1
[0220.126] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2010792) returned 0x0
[0220.126] GdipCreateRegion (region=0x53dff8) returned 0x0
[0220.127] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.127] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0220.127] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.127] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0220.127] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.127] LocalFree (hMem=0x89ea88) returned 0x0
[0220.127] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.127] LocalFree (hMem=0x89ea88) returned 0x0
[0220.127] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.127] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0220.127] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0220.127] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0220.127] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.127] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0220.127] GetCurrentObject (hdc=0x2010792, type=0x1) returned 0xb00017
[0220.127] GetCurrentObject (hdc=0x2010792, type=0x2) returned 0x900010
[0220.127] GetCurrentObject (hdc=0x2010792, type=0x7) returned 0x1e0507b9
[0220.127] GetCurrentObject (hdc=0x2010792, type=0x6) returned 0x8a01c2
[0220.127] SaveDC (hdc=0x2010792) returned 1
[0220.127] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3004051e
[0220.127] GetClipRgn (hdc=0x2010792, hrgn=0x3004051e) returned 0
[0220.127] SelectClipRgn (hdc=0x2010792, hrgn=0xd50407a1) returned 2
[0220.127] DeleteObject (ho=0x3004051e) returned 1
[0220.127] DeleteObject (ho=0xd50407a1) returned 1
[0220.127] OffsetViewportOrgEx (in: hdc=0x2010792, x=0, y=0, lppt=0x2359630 | out: lppt=0x2359630) returned 1
[0220.128] IsAppThemed () returned 0x1
[0220.128] GetThemeAppProperties () returned 0x3
[0220.128] GetThemeAppProperties () returned 0x3
[0220.128] GetThemeBackgroundContentRect () returned 0x0
[0220.128] RestoreDC (hdc=0x2010792, nSavedDC=-1) returned 1
[0220.128] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2010792) returned 0x0
[0220.128] IsAppThemed () returned 0x1
[0220.128] GetThemeAppProperties () returned 0x3
[0220.128] GetThemeAppProperties () returned 0x3
[0220.128] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0220.128] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0220.128] GetCurrentObject (hdc=0x2010792, type=0x1) returned 0xb00017
[0220.128] GetCurrentObject (hdc=0x2010792, type=0x2) returned 0x900010
[0220.128] GetCurrentObject (hdc=0x2010792, type=0x7) returned 0x1e0507b9
[0220.128] GetCurrentObject (hdc=0x2010792, type=0x6) returned 0x8a01c2
[0220.128] SaveDC (hdc=0x2010792) returned 1
[0220.128] GetTextAlign (hdc=0x2010792) returned 0x0
[0220.128] GetTextColor (hdc=0x2010792) returned 0x0
[0220.128] GetCurrentObject (hdc=0x2010792, type=0x6) returned 0x8a01c2
[0220.128] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0220.128] SelectObject (hdc=0x2010792, h=0x730a066d) returned 0x8a01c2
[0220.128] GetBkMode (hdc=0x2010792) returned 2
[0220.128] SetBkMode (hdc=0x2010792, mode=1) returned 2
[0220.129] DrawTextExW (in: hdc=0x2010792, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x23599d0 | out: lpchText="OK", lprc=0x53df90) returned 13
[0220.129] DrawTextExW (in: hdc=0x2010792, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x23599d0 | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0220.129] RestoreDC (hdc=0x2010792, nSavedDC=-1) returned 1
[0220.129] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2010792) returned 0x0
[0220.129] GetFocus () returned 0x1602d2
[0220.129] IsAppThemed () returned 0x1
[0220.129] GetThemeAppProperties () returned 0x3
[0220.129] GetThemeAppProperties () returned 0x3
[0220.129] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0220.129] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x2010792, x1=0, y1=0, rop=0xcc0020) returned 1
[0220.129] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2010792) returned 0x0
[0220.129] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0220.130] SelectObject (hdc=0x2010792, h=0x85000f) returned 0x1e0507b9
[0220.130] DeleteDC (hdc=0x2010792) returned 1
[0220.130] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0220.130] EndPaint (hWnd=0xa02be, lpPaint=0x53e2e4) returned 1
[0220.130] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.130] IsWindowUnicode (hWnd=0x1602c8) returned 1
[0220.130] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.130] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.130] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.130] BeginPaint (in: hWnd=0x1602c8, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0220.130] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0220.130] CreateCompatibleDC (hdc=0x8b010786) returned 0x4010792
[0220.130] SelectObject (hdc=0x4010792, h=0x1e0507b9) returned 0x85000f
[0220.130] GdipCreateFromHDC (hdc=0x4010792, graphics=0x53e300) returned 0x0
[0220.131] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0220.131] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0220.131] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0220.131] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.131] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0220.131] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0220.131] LocalFree (hMem=0x89ee08) returned 0x0
[0220.131] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.131] GdipCreateRegion (region=0x53e348) returned 0x0
[0220.131] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.131] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0220.131] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0220.131] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc750dbd) returned 0x0
[0220.131] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.131] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0220.131] GetCurrentObject (hdc=0x4010792, type=0x1) returned 0xb00017
[0220.131] GetCurrentObject (hdc=0x4010792, type=0x2) returned 0x900010
[0220.131] GetCurrentObject (hdc=0x4010792, type=0x7) returned 0x1e0507b9
[0220.131] GetCurrentObject (hdc=0x4010792, type=0x6) returned 0x8a01c2
[0220.131] SaveDC (hdc=0x4010792) returned 1
[0220.131] GetNearestColor (hdc=0x4010792, color=0xf0f0f0) returned 0xf0f0f0
[0220.131] GetNearestColor (hdc=0x4010792, color=0xa0a0a0) returned 0xa0a0a0
[0220.132] GetNearestColor (hdc=0x4010792, color=0x696969) returned 0x696969
[0220.132] GetNearestColor (hdc=0x4010792, color=0xa0a0a0) returned 0xa0a0a0
[0220.132] GetNearestColor (hdc=0x4010792, color=0x0) returned 0x0
[0220.132] GetNearestColor (hdc=0x4010792, color=0xffffff) returned 0xffffff
[0220.132] GetNearestColor (hdc=0x4010792, color=0xe5e5e5) returned 0xe5e5e5
[0220.132] GetNearestColor (hdc=0x4010792, color=0xd7d7d7) returned 0xd7d7d7
[0220.132] GetNearestColor (hdc=0x4010792, color=0x0) returned 0x0
[0220.132] RestoreDC (hdc=0x4010792, nSavedDC=-1) returned 1
[0220.132] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4010792) returned 0x0
[0220.132] IsAppThemed () returned 0x1
[0220.132] GetThemeAppProperties () returned 0x3
[0220.132] GetThemeAppProperties () returned 0x3
[0220.132] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0220.132] SendMessageW (hWnd=0xa02c0, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0220.132] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0220.132] IsAppThemed () returned 0x1
[0220.132] GetThemeAppProperties () returned 0x3
[0220.132] GetThemeAppProperties () returned 0x3
[0220.132] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x235a1e0 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0220.133] IsAppThemed () returned 0x1
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] IsAppThemed () returned 0x1
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] GetFocus () returned 0x1602d2
[0220.133] IsAppThemed () returned 0x1
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] IsAppThemed () returned 0x1
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] IsThemePartDefined () returned 0x1
[0220.133] IsAppThemed () returned 0x1
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0220.133] IsAppThemed () returned 0x1
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] IsAppThemed () returned 0x1
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] GetThemeAppProperties () returned 0x3
[0220.133] IsThemePartDefined () returned 0x1
[0220.133] GdipCreateRegion (region=0x53e070) returned 0x0
[0220.133] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.134] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0220.134] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.134] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0220.134] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0220.134] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0220.134] LocalFree (hMem=0x89ec80) returned 0x0
[0220.134] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0220.134] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0220.134] LocalFree (hMem=0x89ee08) returned 0x0
[0220.134] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.134] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0220.134] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0220.134] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0220.134] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.134] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0220.134] GetCurrentObject (hdc=0x4010792, type=0x1) returned 0xb00017
[0220.134] GetCurrentObject (hdc=0x4010792, type=0x2) returned 0x900010
[0220.134] GetCurrentObject (hdc=0x4010792, type=0x7) returned 0x1e0507b9
[0220.134] GetCurrentObject (hdc=0x4010792, type=0x6) returned 0x8a01c2
[0220.134] SaveDC (hdc=0x4010792) returned 1
[0220.134] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd60407a1
[0220.134] GetClipRgn (hdc=0x4010792, hrgn=0xd60407a1) returned 0
[0220.135] SelectClipRgn (hdc=0x4010792, hrgn=0x3404051e) returned 2
[0220.135] DeleteObject (ho=0xd60407a1) returned 1
[0220.135] DeleteObject (ho=0x3404051e) returned 1
[0220.135] OffsetViewportOrgEx (in: hdc=0x4010792, x=0, y=0, lppt=0x235a890 | out: lppt=0x235a890) returned 1
[0220.135] DrawThemeParentBackground () returned 0x0
[0220.135] GetWindowPlacement (in: hWnd=0xa02c0, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0220.135] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0220.135] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.135] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.135] GetSystemMetrics (nIndex=42) returned 0
[0220.135] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.135] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0220.135] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0220.135] GetCurrentObject (hdc=0x4010792, type=0x1) returned 0xb00017
[0220.135] GetCurrentObject (hdc=0x4010792, type=0x2) returned 0x900010
[0220.135] GetCurrentObject (hdc=0x4010792, type=0x7) returned 0x1e0507b9
[0220.135] GetCurrentObject (hdc=0x4010792, type=0x6) returned 0x8a01c2
[0220.135] SaveDC (hdc=0x4010792) returned 2
[0220.135] GetNearestColor (hdc=0x4010792, color=0xf0f0f0) returned 0xf0f0f0
[0220.136] CreateSolidBrush (color=0xf0f0f0) returned 0x8e10078d
[0220.136] FillRect (hDC=0x4010792, lprc=0x53dad0, hbr=0x8e10078d) returned 1
[0220.136] DeleteObject (ho=0x8e10078d) returned 1
[0220.136] RestoreDC (hdc=0x4010792, nSavedDC=-1) returned 1
[0220.136] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.136] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.136] GetSystemMetrics (nIndex=42) returned 0
[0220.136] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.136] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0220.136] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0220.136] GetCurrentObject (hdc=0x4010792, type=0x1) returned 0xb00017
[0220.136] GetCurrentObject (hdc=0x4010792, type=0x2) returned 0x900010
[0220.136] GetCurrentObject (hdc=0x4010792, type=0x7) returned 0x1e0507b9
[0220.136] GetCurrentObject (hdc=0x4010792, type=0x6) returned 0x8a01c2
[0220.136] SaveDC (hdc=0x4010792) returned 2
[0220.136] GetNearestColor (hdc=0x4010792, color=0xf0f0f0) returned 0xf0f0f0
[0220.136] CreateSolidBrush (color=0xf0f0f0) returned 0x8f10078d
[0220.136] FillRect (hDC=0x4010792, lprc=0x53da70, hbr=0x8f10078d) returned 1
[0220.136] DeleteObject (ho=0x8f10078d) returned 1
[0220.137] RestoreDC (hdc=0x4010792, nSavedDC=-1) returned 1
[0220.137] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.137] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.137] GetSystemMetrics (nIndex=42) returned 0
[0220.137] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.137] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0220.137] RestoreDC (hdc=0x4010792, nSavedDC=-1) returned 1
[0220.137] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4010792) returned 0x0
[0220.137] IsAppThemed () returned 0x1
[0220.137] GetThemeAppProperties () returned 0x3
[0220.137] GetThemeAppProperties () returned 0x3
[0220.137] IsAppThemed () returned 0x1
[0220.137] GetThemeAppProperties () returned 0x3
[0220.137] GetThemeAppProperties () returned 0x3
[0220.137] IsThemePartDefined () returned 0x1
[0220.137] GdipCreateRegion (region=0x53dff4) returned 0x0
[0220.137] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.137] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0220.137] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.137] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0220.138] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0220.138] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0220.138] LocalFree (hMem=0x89ee08) returned 0x0
[0220.138] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.138] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0220.138] LocalFree (hMem=0x89ea88) returned 0x0
[0220.138] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.138] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0220.138] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0220.138] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0220.138] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.138] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0220.138] GetCurrentObject (hdc=0x4010792, type=0x1) returned 0xb00017
[0220.138] GetCurrentObject (hdc=0x4010792, type=0x2) returned 0x900010
[0220.138] GetCurrentObject (hdc=0x4010792, type=0x7) returned 0x1e0507b9
[0220.138] GetCurrentObject (hdc=0x4010792, type=0x6) returned 0x8a01c2
[0220.138] SaveDC (hdc=0x4010792) returned 1
[0220.138] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3504051e
[0220.138] GetClipRgn (hdc=0x4010792, hrgn=0x3504051e) returned 0
[0220.138] SelectClipRgn (hdc=0x4010792, hrgn=0xd80407a1) returned 2
[0220.138] DeleteObject (ho=0x3504051e) returned 1
[0220.139] DeleteObject (ho=0xd80407a1) returned 1
[0220.139] OffsetViewportOrgEx (in: hdc=0x4010792, x=0, y=0, lppt=0x235b118 | out: lppt=0x235b118) returned 1
[0220.139] IsAppThemed () returned 0x1
[0220.139] GetThemeAppProperties () returned 0x3
[0220.139] GetThemeAppProperties () returned 0x3
[0220.139] DrawThemeBackground () returned 0x0
[0220.139] RestoreDC (hdc=0x4010792, nSavedDC=-1) returned 1
[0220.139] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4010792) returned 0x0
[0220.139] GdipCreateRegion (region=0x53dff8) returned 0x0
[0220.139] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.139] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0220.139] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.139] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0220.139] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.139] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.139] LocalFree (hMem=0x89ea88) returned 0x0
[0220.139] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.139] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.139] LocalFree (hMem=0x89ea88) returned 0x0
[0220.139] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.139] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0220.140] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0220.140] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0220.140] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.140] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0220.140] GetCurrentObject (hdc=0x4010792, type=0x1) returned 0xb00017
[0220.140] GetCurrentObject (hdc=0x4010792, type=0x2) returned 0x900010
[0220.140] GetCurrentObject (hdc=0x4010792, type=0x7) returned 0x1e0507b9
[0220.140] GetCurrentObject (hdc=0x4010792, type=0x6) returned 0x8a01c2
[0220.140] SaveDC (hdc=0x4010792) returned 1
[0220.140] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd90407a1
[0220.140] GetClipRgn (hdc=0x4010792, hrgn=0xd90407a1) returned 0
[0220.140] SelectClipRgn (hdc=0x4010792, hrgn=0x3604051e) returned 2
[0220.140] DeleteObject (ho=0xd90407a1) returned 1
[0220.140] DeleteObject (ho=0x3604051e) returned 1
[0220.140] OffsetViewportOrgEx (in: hdc=0x4010792, x=0, y=0, lppt=0x235b3ec | out: lppt=0x235b3ec) returned 1
[0220.140] IsAppThemed () returned 0x1
[0220.140] GetThemeAppProperties () returned 0x3
[0220.140] GetThemeAppProperties () returned 0x3
[0220.140] GetThemeBackgroundContentRect () returned 0x0
[0220.140] RestoreDC (hdc=0x4010792, nSavedDC=-1) returned 1
[0220.140] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4010792) returned 0x0
[0220.141] IsAppThemed () returned 0x1
[0220.141] GetThemeAppProperties () returned 0x3
[0220.141] GetThemeAppProperties () returned 0x3
[0220.141] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0220.141] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0220.141] GetCurrentObject (hdc=0x4010792, type=0x1) returned 0xb00017
[0220.141] GetCurrentObject (hdc=0x4010792, type=0x2) returned 0x900010
[0220.141] GetCurrentObject (hdc=0x4010792, type=0x7) returned 0x1e0507b9
[0220.141] GetCurrentObject (hdc=0x4010792, type=0x6) returned 0x8a01c2
[0220.141] SaveDC (hdc=0x4010792) returned 1
[0220.141] GetTextAlign (hdc=0x4010792) returned 0x0
[0220.141] GetTextColor (hdc=0x4010792) returned 0x0
[0220.141] GetCurrentObject (hdc=0x4010792, type=0x6) returned 0x8a01c2
[0220.141] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0220.141] SelectObject (hdc=0x4010792, h=0x730a066d) returned 0x8a01c2
[0220.141] GetBkMode (hdc=0x4010792) returned 2
[0220.141] SetBkMode (hdc=0x4010792, mode=1) returned 2
[0220.141] DrawTextExW (in: hdc=0x4010792, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x235b78c | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0220.142] DrawTextExW (in: hdc=0x4010792, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x235b78c | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0220.142] RestoreDC (hdc=0x4010792, nSavedDC=-1) returned 1
[0220.142] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4010792) returned 0x0
[0220.142] GetFocus () returned 0x1602d2
[0220.142] IsAppThemed () returned 0x1
[0220.142] GetThemeAppProperties () returned 0x3
[0220.142] GetThemeAppProperties () returned 0x3
[0220.142] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0220.142] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x4010792, x1=0, y1=0, rop=0xcc0020) returned 1
[0220.142] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4010792) returned 0x0
[0220.142] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0220.142] SelectObject (hdc=0x4010792, h=0x85000f) returned 0x1e0507b9
[0220.143] DeleteDC (hdc=0x4010792) returned 1
[0220.143] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0220.143] EndPaint (hWnd=0x1602c8, lpPaint=0x53e2e4) returned 1
[0220.143] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.143] IsWindowUnicode (hWnd=0x202c6) returned 1
[0220.143] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.143] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.143] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.143] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0220.143] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0220.143] CreateCompatibleDC (hdc=0x10105d6) returned 0x6010792
[0220.143] SelectObject (hdc=0x6010792, h=0x1e0507b9) returned 0x85000f
[0220.143] GdipCreateFromHDC (hdc=0x6010792, graphics=0x53e300) returned 0x0
[0220.144] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0220.144] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0220.144] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0220.144] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.144] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0220.144] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0220.144] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0220.144] LocalFree (hMem=0x89ec80) returned 0x0
[0220.144] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.144] GdipCreateRegion (region=0x53e348) returned 0x0
[0220.144] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.144] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0220.144] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0220.144] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc730dbd) returned 0x0
[0220.144] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.144] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0220.144] GetCurrentObject (hdc=0x6010792, type=0x1) returned 0xb00017
[0220.144] GetCurrentObject (hdc=0x6010792, type=0x2) returned 0x900010
[0220.144] GetCurrentObject (hdc=0x6010792, type=0x7) returned 0x1e0507b9
[0220.144] GetCurrentObject (hdc=0x6010792, type=0x6) returned 0x8a01c2
[0220.145] SaveDC (hdc=0x6010792) returned 1
[0220.145] GetNearestColor (hdc=0x6010792, color=0xff) returned 0xff
[0220.145] GetNearestColor (hdc=0x6010792, color=0x55) returned 0x55
[0220.145] GetNearestColor (hdc=0x6010792, color=0x0) returned 0x0
[0220.145] GetNearestColor (hdc=0x6010792, color=0x55) returned 0x55
[0220.145] GetNearestColor (hdc=0x6010792, color=0x0) returned 0x0
[0220.145] GetNearestColor (hdc=0x6010792, color=0x8080ff) returned 0x8080ff
[0220.145] GetNearestColor (hdc=0x6010792, color=0x7373e5) returned 0x7373e5
[0220.145] GetNearestColor (hdc=0x6010792, color=0xe5) returned 0xe5
[0220.145] GetNearestColor (hdc=0x6010792, color=0x0) returned 0x0
[0220.145] RestoreDC (hdc=0x6010792, nSavedDC=-1) returned 1
[0220.145] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6010792) returned 0x0
[0220.145] IsAppThemed () returned 0x1
[0220.145] GetThemeAppProperties () returned 0x3
[0220.145] GetThemeAppProperties () returned 0x3
[0220.145] IsAppThemed () returned 0x1
[0220.145] GetThemeAppProperties () returned 0x3
[0220.145] GetThemeAppProperties () returned 0x3
[0220.146] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0220.146] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x235bf70 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0220.146] IsAppThemed () returned 0x1
[0220.146] GetThemeAppProperties () returned 0x3
[0220.146] GetThemeAppProperties () returned 0x3
[0220.146] IsAppThemed () returned 0x1
[0220.146] GetThemeAppProperties () returned 0x3
[0220.146] GetThemeAppProperties () returned 0x3
[0220.146] GetFocus () returned 0x1602d2
[0220.182] IsAppThemed () returned 0x1
[0220.182] GetThemeAppProperties () returned 0x3
[0220.182] GetThemeAppProperties () returned 0x3
[0220.182] IsAppThemed () returned 0x1
[0220.183] GetThemeAppProperties () returned 0x3
[0220.183] GetThemeAppProperties () returned 0x3
[0220.183] IsThemePartDefined () returned 0x1
[0220.183] IsAppThemed () returned 0x1
[0220.183] GetThemeAppProperties () returned 0x3
[0220.183] GetThemeAppProperties () returned 0x3
[0220.183] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0220.183] IsAppThemed () returned 0x1
[0220.183] GetThemeAppProperties () returned 0x3
[0220.183] GetThemeAppProperties () returned 0x3
[0220.183] IsAppThemed () returned 0x1
[0220.183] GetThemeAppProperties () returned 0x3
[0220.183] GetThemeAppProperties () returned 0x3
[0220.183] IsThemePartDefined () returned 0x1
[0220.183] GdipCreateRegion (region=0x53e070) returned 0x0
[0220.183] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.183] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0220.183] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.183] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0220.183] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0220.183] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0220.183] LocalFree (hMem=0x89ee40) returned 0x0
[0220.183] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.184] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.184] LocalFree (hMem=0x89ea88) returned 0x0
[0220.184] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.184] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0220.184] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0220.184] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0220.184] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.184] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0220.184] GetCurrentObject (hdc=0x6010792, type=0x1) returned 0xb00017
[0220.184] GetCurrentObject (hdc=0x6010792, type=0x2) returned 0x900010
[0220.184] GetCurrentObject (hdc=0x6010792, type=0x7) returned 0x1e0507b9
[0220.184] GetCurrentObject (hdc=0x6010792, type=0x6) returned 0x8a01c2
[0220.184] SaveDC (hdc=0x6010792) returned 1
[0220.184] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3704051e
[0220.184] GetClipRgn (hdc=0x6010792, hrgn=0x3704051e) returned 0
[0220.184] SelectClipRgn (hdc=0x6010792, hrgn=0xdd0407a1) returned 2
[0220.184] DeleteObject (ho=0x3704051e) returned 1
[0220.184] DeleteObject (ho=0xdd0407a1) returned 1
[0220.184] OffsetViewportOrgEx (in: hdc=0x6010792, x=0, y=0, lppt=0x235c620 | out: lppt=0x235c620) returned 1
[0220.185] DrawThemeParentBackground () returned 0x0
[0220.185] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0220.185] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0220.185] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0220.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0220.185] GetSystemMetrics (nIndex=42) returned 0
[0220.185] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0220.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0220.185] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0220.185] GetCurrentObject (hdc=0x6010792, type=0x1) returned 0xb00017
[0220.185] GetCurrentObject (hdc=0x6010792, type=0x2) returned 0x900010
[0220.185] GetCurrentObject (hdc=0x6010792, type=0x7) returned 0x1e0507b9
[0220.185] GetCurrentObject (hdc=0x6010792, type=0x6) returned 0x8a01c2
[0220.185] SaveDC (hdc=0x6010792) returned 2
[0220.185] GetNearestColor (hdc=0x6010792, color=0xff) returned 0xff
[0220.185] CreateSolidBrush (color=0xff) returned 0x9010078d
[0220.185] FillRect (hDC=0x6010792, lprc=0x53dad0, hbr=0x9010078d) returned 1
[0220.186] DeleteObject (ho=0x9010078d) returned 1
[0220.186] RestoreDC (hdc=0x6010792, nSavedDC=-1) returned 1
[0220.186] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0220.186] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0220.186] GetSystemMetrics (nIndex=42) returned 0
[0220.186] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0220.186] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0220.186] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0220.186] GetCurrentObject (hdc=0x6010792, type=0x1) returned 0xb00017
[0220.186] GetCurrentObject (hdc=0x6010792, type=0x2) returned 0x900010
[0220.186] GetCurrentObject (hdc=0x6010792, type=0x7) returned 0x1e0507b9
[0220.186] GetCurrentObject (hdc=0x6010792, type=0x6) returned 0x8a01c2
[0220.186] SaveDC (hdc=0x6010792) returned 2
[0220.186] GetNearestColor (hdc=0x6010792, color=0xff) returned 0xff
[0220.186] CreateSolidBrush (color=0xff) returned 0x9110078d
[0220.186] FillRect (hDC=0x6010792, lprc=0x53da70, hbr=0x9110078d) returned 1
[0220.186] DeleteObject (ho=0x9110078d) returned 1
[0220.186] RestoreDC (hdc=0x6010792, nSavedDC=-1) returned 1
[0220.186] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0220.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0220.187] GetSystemMetrics (nIndex=42) returned 0
[0220.187] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0220.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0220.187] RestoreDC (hdc=0x6010792, nSavedDC=-1) returned 1
[0220.187] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6010792) returned 0x0
[0220.187] IsAppThemed () returned 0x1
[0220.187] GetThemeAppProperties () returned 0x3
[0220.187] GetThemeAppProperties () returned 0x3
[0220.187] IsAppThemed () returned 0x1
[0220.187] GetThemeAppProperties () returned 0x3
[0220.187] GetThemeAppProperties () returned 0x3
[0220.187] IsThemePartDefined () returned 0x1
[0220.187] GdipCreateRegion (region=0x53dff4) returned 0x0
[0220.187] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.187] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0220.187] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.187] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0220.187] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0220.188] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0220.188] LocalFree (hMem=0x89eac0) returned 0x0
[0220.188] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0220.188] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0220.188] LocalFree (hMem=0x89ec80) returned 0x0
[0220.188] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.188] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0220.188] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0220.188] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0220.188] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.188] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0220.188] GetCurrentObject (hdc=0x6010792, type=0x1) returned 0xb00017
[0220.188] GetCurrentObject (hdc=0x6010792, type=0x2) returned 0x900010
[0220.188] GetCurrentObject (hdc=0x6010792, type=0x7) returned 0x1e0507b9
[0220.188] GetCurrentObject (hdc=0x6010792, type=0x6) returned 0x8a01c2
[0220.188] SaveDC (hdc=0x6010792) returned 1
[0220.188] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xde0407a1
[0220.188] GetClipRgn (hdc=0x6010792, hrgn=0xde0407a1) returned 0
[0220.188] SelectClipRgn (hdc=0x6010792, hrgn=0x3904051e) returned 2
[0220.188] DeleteObject (ho=0xde0407a1) returned 1
[0220.189] DeleteObject (ho=0x3904051e) returned 1
[0220.189] OffsetViewportOrgEx (in: hdc=0x6010792, x=0, y=0, lppt=0x235ce84 | out: lppt=0x235ce84) returned 1
[0220.189] IsAppThemed () returned 0x1
[0220.189] GetThemeAppProperties () returned 0x3
[0220.189] GetThemeAppProperties () returned 0x3
[0220.189] DrawThemeBackground () returned 0x0
[0220.189] RestoreDC (hdc=0x6010792, nSavedDC=-1) returned 1
[0220.189] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6010792) returned 0x0
[0220.189] GdipCreateRegion (region=0x53dff8) returned 0x0
[0220.189] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.189] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0220.189] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.189] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0220.189] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.189] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.189] LocalFree (hMem=0x89ea88) returned 0x0
[0220.189] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0220.189] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0220.189] LocalFree (hMem=0x89ee08) returned 0x0
[0220.189] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.189] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0220.190] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0220.190] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0220.190] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.190] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0220.190] GetCurrentObject (hdc=0x6010792, type=0x1) returned 0xb00017
[0220.190] GetCurrentObject (hdc=0x6010792, type=0x2) returned 0x900010
[0220.190] GetCurrentObject (hdc=0x6010792, type=0x7) returned 0x1e0507b9
[0220.190] GetCurrentObject (hdc=0x6010792, type=0x6) returned 0x8a01c2
[0220.190] SaveDC (hdc=0x6010792) returned 1
[0220.190] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a04051e
[0220.190] GetClipRgn (hdc=0x6010792, hrgn=0x3a04051e) returned 0
[0220.190] SelectClipRgn (hdc=0x6010792, hrgn=0xdf0407a1) returned 2
[0220.190] DeleteObject (ho=0x3a04051e) returned 1
[0220.190] DeleteObject (ho=0xdf0407a1) returned 1
[0220.190] OffsetViewportOrgEx (in: hdc=0x6010792, x=0, y=0, lppt=0x235d158 | out: lppt=0x235d158) returned 1
[0220.190] IsAppThemed () returned 0x1
[0220.190] GetThemeAppProperties () returned 0x3
[0220.190] GetThemeAppProperties () returned 0x3
[0220.190] GetThemeBackgroundContentRect () returned 0x0
[0220.190] RestoreDC (hdc=0x6010792, nSavedDC=-1) returned 1
[0220.190] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6010792) returned 0x0
[0220.190] IsAppThemed () returned 0x1
[0220.191] GetThemeAppProperties () returned 0x3
[0220.191] GetThemeAppProperties () returned 0x3
[0220.191] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0220.191] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0220.191] GetCurrentObject (hdc=0x6010792, type=0x1) returned 0xb00017
[0220.191] GetCurrentObject (hdc=0x6010792, type=0x2) returned 0x900010
[0220.191] GetCurrentObject (hdc=0x6010792, type=0x7) returned 0x1e0507b9
[0220.191] GetCurrentObject (hdc=0x6010792, type=0x6) returned 0x8a01c2
[0220.191] SaveDC (hdc=0x6010792) returned 1
[0220.191] GetTextAlign (hdc=0x6010792) returned 0x0
[0220.191] GetTextColor (hdc=0x6010792) returned 0x0
[0220.191] GetCurrentObject (hdc=0x6010792, type=0x6) returned 0x8a01c2
[0220.191] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0220.191] SelectObject (hdc=0x6010792, h=0x450a0799) returned 0x8a01c2
[0220.191] GetBkMode (hdc=0x6010792) returned 2
[0220.191] SetBkMode (hdc=0x6010792, mode=1) returned 2
[0220.191] DrawTextExW (in: hdc=0x6010792, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x235d4f8 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0220.192] DrawTextExW (in: hdc=0x6010792, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x235d4f8 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0220.192] RestoreDC (hdc=0x6010792, nSavedDC=-1) returned 1
[0220.192] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6010792) returned 0x0
[0220.192] GetFocus () returned 0x1602d2
[0220.192] IsAppThemed () returned 0x1
[0220.192] GetThemeAppProperties () returned 0x3
[0220.192] GetThemeAppProperties () returned 0x3
[0220.192] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0220.192] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x6010792, x1=0, y1=0, rop=0xcc0020) returned 1
[0220.192] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6010792) returned 0x0
[0220.192] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0220.192] SelectObject (hdc=0x6010792, h=0x85000f) returned 0x1e0507b9
[0220.193] DeleteDC (hdc=0x6010792) returned 1
[0220.193] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0220.193] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0220.193] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.193] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0220.194] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.194] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.194] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0220.195] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.195] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.195] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.195] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0220.196] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.196] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.196] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.196] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.196] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.197] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x84, wParam=0x0, lParam=0x1970356) returned 0x1
[0220.197] IsWindowUnicode (hWnd=0xa02be) returned 1
[0220.197] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.197] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.197] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.197] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.197] IsWindowUnicode (hWnd=0xa02c0) returned 1
[0220.197] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.197] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.197] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.197] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x2a2, wParam=0x0, lParam=0x0) returned 0x0
[0220.197] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.197] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x84, wParam=0x0, lParam=0x1970356) returned 0x1
[0220.197] IsWindowUnicode (hWnd=0xa02be) returned 1
[0220.198] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.198] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x84, wParam=0x0, lParam=0x1970356) returned 0x1
[0220.198] SetCursor (hCursor=0x10003) returned 0x10003
[0220.198] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.198] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.198] _TrackMouseEvent (in: lpEventTrack=0x235d5f4 | out: lpEventTrack=0x235d5f4) returned 1
[0220.198] SendMessageW (hWnd=0xa02be, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0220.198] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0220.198] InvalidateRect (hWnd=0xa02be, lpRect=0x0, bErase=0) returned 1
[0220.198] GetKeyState (nVirtKey=1) returned 1
[0220.198] GetKeyState (nVirtKey=2) returned 0
[0220.198] GetKeyState (nVirtKey=4) returned 0
[0220.198] GetKeyState (nVirtKey=5) returned 0
[0220.198] GetKeyState (nVirtKey=6) returned 0
[0220.198] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.199] IsWindowUnicode (hWnd=0xa02be) returned 1
[0220.199] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.199] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.199] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.199] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.199] IsWindowUnicode (hWnd=0xa02be) returned 1
[0220.199] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.199] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.199] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.200] BeginPaint (in: hWnd=0xa02be, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0220.200] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0220.200] CreateCompatibleDC (hdc=0x8b010786) returned 0x8010792
[0220.200] SelectObject (hdc=0x8010792, h=0x1e0507b9) returned 0x85000f
[0220.200] GdipCreateFromHDC (hdc=0x8010792, graphics=0x53e300) returned 0x0
[0220.200] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0220.200] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0220.200] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0220.200] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.200] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0220.200] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0220.200] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0220.200] LocalFree (hMem=0x89ec80) returned 0x0
[0220.200] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.200] GdipCreateRegion (region=0x53e348) returned 0x0
[0220.200] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.201] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0220.201] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0220.201] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc710dbd) returned 0x0
[0220.201] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.201] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0220.201] GetCurrentObject (hdc=0x8010792, type=0x1) returned 0xb00017
[0220.201] GetCurrentObject (hdc=0x8010792, type=0x2) returned 0x900010
[0220.201] GetCurrentObject (hdc=0x8010792, type=0x7) returned 0x1e0507b9
[0220.201] GetCurrentObject (hdc=0x8010792, type=0x6) returned 0x8a01c2
[0220.201] SaveDC (hdc=0x8010792) returned 1
[0220.201] GetNearestColor (hdc=0x8010792, color=0xf0f0f0) returned 0xf0f0f0
[0220.201] GetNearestColor (hdc=0x8010792, color=0xa0a0a0) returned 0xa0a0a0
[0220.201] GetNearestColor (hdc=0x8010792, color=0x696969) returned 0x696969
[0220.201] GetNearestColor (hdc=0x8010792, color=0xa0a0a0) returned 0xa0a0a0
[0220.201] GetNearestColor (hdc=0x8010792, color=0x0) returned 0x0
[0220.201] GetNearestColor (hdc=0x8010792, color=0xffffff) returned 0xffffff
[0220.201] GetNearestColor (hdc=0x8010792, color=0xe5e5e5) returned 0xe5e5e5
[0220.201] GetNearestColor (hdc=0x8010792, color=0xd7d7d7) returned 0xd7d7d7
[0220.202] GetNearestColor (hdc=0x8010792, color=0x0) returned 0x0
[0220.202] RestoreDC (hdc=0x8010792, nSavedDC=-1) returned 1
[0220.202] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8010792) returned 0x0
[0220.202] IsAppThemed () returned 0x1
[0220.202] GetThemeAppProperties () returned 0x3
[0220.202] GetThemeAppProperties () returned 0x3
[0220.202] IsAppThemed () returned 0x1
[0220.202] GetThemeAppProperties () returned 0x3
[0220.202] GetThemeAppProperties () returned 0x3
[0220.202] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0220.202] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x235dd70 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0220.202] IsAppThemed () returned 0x1
[0220.202] GetThemeAppProperties () returned 0x3
[0220.202] GetThemeAppProperties () returned 0x3
[0220.202] IsAppThemed () returned 0x1
[0220.202] GetThemeAppProperties () returned 0x3
[0220.202] GetThemeAppProperties () returned 0x3
[0220.203] IsAppThemed () returned 0x1
[0220.203] GetThemeAppProperties () returned 0x3
[0220.203] GetThemeAppProperties () returned 0x3
[0220.203] IsAppThemed () returned 0x1
[0220.203] GetThemeAppProperties () returned 0x3
[0220.203] GetThemeAppProperties () returned 0x3
[0220.203] IsThemePartDefined () returned 0x1
[0220.203] IsAppThemed () returned 0x1
[0220.203] GetThemeAppProperties () returned 0x3
[0220.203] GetThemeAppProperties () returned 0x3
[0220.203] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0220.203] IsAppThemed () returned 0x1
[0220.203] GetThemeAppProperties () returned 0x3
[0220.203] GetThemeAppProperties () returned 0x3
[0220.203] IsAppThemed () returned 0x1
[0220.203] GetThemeAppProperties () returned 0x3
[0220.203] GetThemeAppProperties () returned 0x3
[0220.203] IsThemePartDefined () returned 0x1
[0220.203] GdipCreateRegion (region=0x53e064) returned 0x0
[0220.203] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.203] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0220.203] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.203] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0220.203] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.203] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.204] LocalFree (hMem=0x89ea88) returned 0x0
[0220.204] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0220.204] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0220.204] LocalFree (hMem=0x89ee08) returned 0x0
[0220.204] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.204] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0220.204] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0220.204] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0220.204] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.204] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0220.204] GetCurrentObject (hdc=0x8010792, type=0x1) returned 0xb00017
[0220.204] GetCurrentObject (hdc=0x8010792, type=0x2) returned 0x900010
[0220.204] GetCurrentObject (hdc=0x8010792, type=0x7) returned 0x1e0507b9
[0220.204] GetCurrentObject (hdc=0x8010792, type=0x6) returned 0x8a01c2
[0220.204] SaveDC (hdc=0x8010792) returned 1
[0220.204] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe00407a1
[0220.204] GetClipRgn (hdc=0x8010792, hrgn=0xe00407a1) returned 0
[0220.204] SelectClipRgn (hdc=0x8010792, hrgn=0x3e04051e) returned 2
[0220.204] DeleteObject (ho=0xe00407a1) returned 1
[0220.204] DeleteObject (ho=0x3e04051e) returned 1
[0220.205] OffsetViewportOrgEx (in: hdc=0x8010792, x=0, y=0, lppt=0x235e420 | out: lppt=0x235e420) returned 1
[0220.205] DrawThemeParentBackground () returned 0x0
[0220.205] GetWindowPlacement (in: hWnd=0xa02c0, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0220.205] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0220.205] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.205] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.205] GetSystemMetrics (nIndex=42) returned 0
[0220.205] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.205] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0220.205] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0220.205] GetCurrentObject (hdc=0x8010792, type=0x1) returned 0xb00017
[0220.205] GetCurrentObject (hdc=0x8010792, type=0x2) returned 0x900010
[0220.205] GetCurrentObject (hdc=0x8010792, type=0x7) returned 0x1e0507b9
[0220.205] GetCurrentObject (hdc=0x8010792, type=0x6) returned 0x8a01c2
[0220.205] SaveDC (hdc=0x8010792) returned 2
[0220.205] GetNearestColor (hdc=0x8010792, color=0xf0f0f0) returned 0xf0f0f0
[0220.205] CreateSolidBrush (color=0xf0f0f0) returned 0x9210078d
[0220.205] FillRect (hDC=0x8010792, lprc=0x53dac8, hbr=0x9210078d) returned 1
[0220.206] DeleteObject (ho=0x9210078d) returned 1
[0220.206] RestoreDC (hdc=0x8010792, nSavedDC=-1) returned 1
[0220.206] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.206] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.206] GetSystemMetrics (nIndex=42) returned 0
[0220.206] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.206] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0220.206] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0220.206] GetCurrentObject (hdc=0x8010792, type=0x1) returned 0xb00017
[0220.206] GetCurrentObject (hdc=0x8010792, type=0x2) returned 0x900010
[0220.206] GetCurrentObject (hdc=0x8010792, type=0x7) returned 0x1e0507b9
[0220.206] GetCurrentObject (hdc=0x8010792, type=0x6) returned 0x8a01c2
[0220.206] SaveDC (hdc=0x8010792) returned 2
[0220.206] GetNearestColor (hdc=0x8010792, color=0xf0f0f0) returned 0xf0f0f0
[0220.206] CreateSolidBrush (color=0xf0f0f0) returned 0x9310078d
[0220.206] FillRect (hDC=0x8010792, lprc=0x53da68, hbr=0x9310078d) returned 1
[0220.206] DeleteObject (ho=0x9310078d) returned 1
[0220.206] RestoreDC (hdc=0x8010792, nSavedDC=-1) returned 1
[0220.206] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.206] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.207] GetSystemMetrics (nIndex=42) returned 0
[0220.207] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.207] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0220.207] RestoreDC (hdc=0x8010792, nSavedDC=-1) returned 1
[0220.207] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8010792) returned 0x0
[0220.207] IsAppThemed () returned 0x1
[0220.207] GetThemeAppProperties () returned 0x3
[0220.207] GetThemeAppProperties () returned 0x3
[0220.207] IsAppThemed () returned 0x1
[0220.207] GetThemeAppProperties () returned 0x3
[0220.207] GetThemeAppProperties () returned 0x3
[0220.207] IsThemePartDefined () returned 0x1
[0220.207] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0220.207] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.207] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0220.207] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.207] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0220.207] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.207] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0220.207] LocalFree (hMem=0x89ea88) returned 0x0
[0220.208] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0220.208] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0220.208] LocalFree (hMem=0x89ec80) returned 0x0
[0220.208] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.208] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0220.208] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0220.208] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0220.208] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.208] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0220.208] GetCurrentObject (hdc=0x8010792, type=0x1) returned 0xb00017
[0220.208] GetCurrentObject (hdc=0x8010792, type=0x2) returned 0x900010
[0220.208] GetCurrentObject (hdc=0x8010792, type=0x7) returned 0x1e0507b9
[0220.208] GetCurrentObject (hdc=0x8010792, type=0x6) returned 0x8a01c2
[0220.208] SaveDC (hdc=0x8010792) returned 1
[0220.208] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3f04051e
[0220.208] GetClipRgn (hdc=0x8010792, hrgn=0x3f04051e) returned 0
[0220.208] SelectClipRgn (hdc=0x8010792, hrgn=0xe20407a1) returned 2
[0220.208] DeleteObject (ho=0x3f04051e) returned 1
[0220.208] DeleteObject (ho=0xe20407a1) returned 1
[0220.208] OffsetViewportOrgEx (in: hdc=0x8010792, x=0, y=0, lppt=0x235eca8 | out: lppt=0x235eca8) returned 1
[0220.212] IsAppThemed () returned 0x1
[0220.212] GetThemeAppProperties () returned 0x3
[0220.212] GetThemeAppProperties () returned 0x3
[0220.212] DrawThemeBackground () returned 0x0
[0220.212] RestoreDC (hdc=0x8010792, nSavedDC=-1) returned 1
[0220.212] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8010792) returned 0x0
[0220.212] GdipCreateRegion (region=0x53dfec) returned 0x0
[0220.213] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.213] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0220.213] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.213] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0220.213] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.213] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.213] LocalFree (hMem=0x89ea88) returned 0x0
[0220.213] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0220.213] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0220.213] LocalFree (hMem=0x89ec80) returned 0x0
[0220.213] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.213] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0220.213] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0220.213] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0220.213] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.213] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0220.213] GetCurrentObject (hdc=0x8010792, type=0x1) returned 0xb00017
[0220.213] GetCurrentObject (hdc=0x8010792, type=0x2) returned 0x900010
[0220.213] GetCurrentObject (hdc=0x8010792, type=0x7) returned 0x1e0507b9
[0220.213] GetCurrentObject (hdc=0x8010792, type=0x6) returned 0x8a01c2
[0220.213] SaveDC (hdc=0x8010792) returned 1
[0220.213] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe30407a1
[0220.214] GetClipRgn (hdc=0x8010792, hrgn=0xe30407a1) returned 0
[0220.214] SelectClipRgn (hdc=0x8010792, hrgn=0x4004051e) returned 2
[0220.214] DeleteObject (ho=0xe30407a1) returned 1
[0220.214] DeleteObject (ho=0x4004051e) returned 1
[0220.214] OffsetViewportOrgEx (in: hdc=0x8010792, x=0, y=0, lppt=0x235ef7c | out: lppt=0x235ef7c) returned 1
[0220.214] IsAppThemed () returned 0x1
[0220.214] GetThemeAppProperties () returned 0x3
[0220.214] GetThemeAppProperties () returned 0x3
[0220.214] GetThemeBackgroundContentRect () returned 0x0
[0220.214] RestoreDC (hdc=0x8010792, nSavedDC=-1) returned 1
[0220.214] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8010792) returned 0x0
[0220.214] IsAppThemed () returned 0x1
[0220.214] GetThemeAppProperties () returned 0x3
[0220.214] GetThemeAppProperties () returned 0x3
[0220.214] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0220.214] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0220.214] GetCurrentObject (hdc=0x8010792, type=0x1) returned 0xb00017
[0220.214] GetCurrentObject (hdc=0x8010792, type=0x2) returned 0x900010
[0220.214] GetCurrentObject (hdc=0x8010792, type=0x7) returned 0x1e0507b9
[0220.214] GetCurrentObject (hdc=0x8010792, type=0x6) returned 0x8a01c2
[0220.214] SaveDC (hdc=0x8010792) returned 1
[0220.214] GetTextAlign (hdc=0x8010792) returned 0x0
[0220.215] GetTextColor (hdc=0x8010792) returned 0x0
[0220.215] GetCurrentObject (hdc=0x8010792, type=0x6) returned 0x8a01c2
[0220.215] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0220.215] SelectObject (hdc=0x8010792, h=0x730a066d) returned 0x8a01c2
[0220.215] GetBkMode (hdc=0x8010792) returned 2
[0220.215] SetBkMode (hdc=0x8010792, mode=1) returned 2
[0220.215] DrawTextExW (in: hdc=0x8010792, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x235f31c | out: lpchText="OK", lprc=0x53df84) returned 13
[0220.215] DrawTextExW (in: hdc=0x8010792, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x235f31c | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0220.215] RestoreDC (hdc=0x8010792, nSavedDC=-1) returned 1
[0220.215] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8010792) returned 0x0
[0220.216] GetFocus () returned 0x1602d2
[0220.216] IsAppThemed () returned 0x1
[0220.216] GetThemeAppProperties () returned 0x3
[0220.216] GetThemeAppProperties () returned 0x3
[0220.216] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0220.216] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x8010792, x1=0, y1=0, rop=0xcc0020) returned 1
[0220.216] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8010792) returned 0x0
[0220.216] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0220.216] SelectObject (hdc=0x8010792, h=0x85000f) returned 0x1e0507b9
[0220.216] DeleteDC (hdc=0x8010792) returned 1
[0220.216] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0220.216] EndPaint (hWnd=0xa02be, lpPaint=0x53e2e4) returned 1
[0220.216] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.216] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.216] WaitMessage () returned 1
[0220.226] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.226] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.226] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.226] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.226] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.227] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.227] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.227] WaitMessage () returned 1
[0220.228] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.228] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.228] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.228] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.228] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.229] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.230] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.230] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.230] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.230] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.230] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.230] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.230] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.230] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.230] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.230] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.231] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.231] WaitMessage () returned 1
[0220.231] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.231] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.231] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.231] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.231] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.232] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.232] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.232] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.232] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.232] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.233] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.233] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.233] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.233] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.233] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.233] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.233] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.233] WaitMessage () returned 1
[0220.233] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.233] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.234] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.234] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.234] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.235] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.235] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.235] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.235] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.235] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.235] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.235] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.235] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.235] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.236] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.236] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.236] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.236] WaitMessage () returned 1
[0220.306] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.306] IsWindowUnicode (hWnd=0xa02be) returned 1
[0220.306] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.306] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.306] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.306] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.306] IsWindowUnicode (hWnd=0xa02be) returned 1
[0220.306] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.306] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.306] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.306] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x2a1, wParam=0x0, lParam=0xe0015) returned 0x0
[0220.306] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.306] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.306] WaitMessage () returned 1
[0220.365] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.365] IsWindowUnicode (hWnd=0x202d0) returned 1
[0220.365] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.365] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.365] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.366] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.366] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0220.366] WaitMessage () returned 1
[0220.420] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.420] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x84, wParam=0x0, lParam=0x1970356) returned 0x1
[0220.420] IsWindowUnicode (hWnd=0xa02be) returned 1
[0220.420] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.420] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x84, wParam=0x0, lParam=0x1970356) returned 0x1
[0220.421] GetDlgItem (hDlg=0xa02c0, nIDDlgItem=0) returned 0x0
[0220.421] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x210, wParam=0x201, lParam=0x1a0137) returned 0x0
[0220.421] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x21, wParam=0xa02c0, lParam=0x2010001) returned 0x1
[0220.421] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x21, wParam=0xa02c0, lParam=0x2010001) returned 0x1
[0220.421] SetCursor (hCursor=0x10003) returned 0x10003
[0220.421] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.421] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0220.421] GetKeyState (nVirtKey=1) returned -128
[0220.421] GetKeyState (nVirtKey=2) returned 0
[0220.421] GetKeyState (nVirtKey=4) returned 0
[0220.421] GetKeyState (nVirtKey=5) returned 0
[0220.421] GetKeyState (nVirtKey=6) returned 0
[0220.421] IsWindowVisible (hWnd=0xa02be) returned 1
[0220.421] IsWindowEnabled (hWnd=0xa02be) returned 1
[0220.421] SetFocus (hWnd=0xa02be) returned 0x1602d2
[0220.422] GetFocus () returned 0xa02be
[0220.422] IsChild (hWndParent=0xa02c0, hWnd=0xa02be) returned 1
[0220.422] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x8, wParam=0xa02be, lParam=0x0) returned 0x1
[0220.422] SendMessageW (hWnd=0x1602d2, Msg=0x2111, wParam=0x20002d2, lParam=0x1602d2) returned 0x0
[0220.423] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0220.424] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0220.424] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.425] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0220.425] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.425] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0220.426] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.427] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x7, wParam=0x1602d2, lParam=0x0) returned 0x0
[0220.427] GetStockObject (i=5) returned 0x900015
[0220.427] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0220.427] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0xd, wParam=0x3, lParam=0x89e6e8) returned 0x2
[0220.427] GetDlgItem (hDlg=0xa02c0, nIDDlgItem=656062) returned 0xa02be
[0220.427] SendMessageW (hWnd=0xa02be, Msg=0x202b, wParam=0xa02be, lParam=0x53de74) returned 0x0
[0220.427] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x202b, wParam=0xa02be, lParam=0x53de74) returned 0x0
[0220.427] InvalidateRect (hWnd=0xa02be, lpRect=0x0, bErase=0) returned 1
[0220.429] GetFocus () returned 0xa02be
[0220.429] GetFocus () returned 0xa02be
[0220.429] GetFocus () returned 0xa02be
[0220.429] GetKeyState (nVirtKey=1) returned -128
[0220.429] GetKeyState (nVirtKey=2) returned 0
[0220.429] GetKeyState (nVirtKey=4) returned 0
[0220.429] GetKeyState (nVirtKey=5) returned 0
[0220.429] GetKeyState (nVirtKey=6) returned 0
[0220.429] GetCapture () returned 0x0
[0220.429] SetCapture (hWnd=0xa02be) returned 0x0
[0220.429] GetKeyState (nVirtKey=1) returned -128
[0220.429] GetKeyState (nVirtKey=2) returned 0
[0220.429] GetKeyState (nVirtKey=4) returned 0
[0220.429] GetKeyState (nVirtKey=5) returned 0
[0220.429] GetKeyState (nVirtKey=6) returned 0
[0220.429] NotifyWinEvent (event=0x800a, hwnd=0xa02be, idObject=-4, idChild=0)
[0220.429] InvalidateRect (hWnd=0xa02be, lpRect=0x53e4c8, bErase=0) returned 1
[0220.429] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.429] IsWindowUnicode (hWnd=0xa02be) returned 1
[0220.429] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0220.430] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0220.430] DispatchMessageW (lpMsg=0x53e8a0)
[0220.430] MapWindowPoints (in: hWndFrom=0xa02be, hWndTo=0x0, lpPoints=0x235f5b4, cPoints=0x1 | out: lpPoints=0x235f5b4) returned 25756481
[0220.430] NotifyWinEvent (event=0x800a, hwnd=0xa02be, idObject=-4, idChild=0)
[0220.430] InvalidateRect (hWnd=0xa02be, lpRect=0x53e468, bErase=0) returned 1
[0220.430] UpdateWindow (hWnd=0xa02be)
[0220.430] BeginPaint (in: hWnd=0xa02be, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x8b010786
[0220.430] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0220.430] CreateCompatibleDC (hdc=0x8b010786) returned 0xd00107aa
[0220.430] SelectObject (hdc=0xd00107aa, h=0x1e0507b9) returned 0x85000f
[0220.430] GdipCreateFromHDC (hdc=0xd00107aa, graphics=0x53df98) returned 0x0
[0220.430] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0220.430] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0220.430] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0220.430] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.430] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0220.430] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.431] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0220.431] LocalFree (hMem=0x89ea88) returned 0x0
[0220.431] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.431] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0220.431] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.431] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0220.431] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0220.431] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc6f0dbd) returned 0x0
[0220.431] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.431] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0220.431] GetCurrentObject (hdc=0xd00107aa, type=0x1) returned 0xb00017
[0220.431] GetCurrentObject (hdc=0xd00107aa, type=0x2) returned 0x900010
[0220.431] GetCurrentObject (hdc=0xd00107aa, type=0x7) returned 0x1e0507b9
[0220.431] GetCurrentObject (hdc=0xd00107aa, type=0x6) returned 0x8a01c2
[0220.431] SaveDC (hdc=0xd00107aa) returned 1
[0220.431] GetNearestColor (hdc=0xd00107aa, color=0xf0f0f0) returned 0xf0f0f0
[0220.431] GetNearestColor (hdc=0xd00107aa, color=0xa0a0a0) returned 0xa0a0a0
[0220.431] GetNearestColor (hdc=0xd00107aa, color=0x696969) returned 0x696969
[0220.431] GetNearestColor (hdc=0xd00107aa, color=0xa0a0a0) returned 0xa0a0a0
[0220.432] GetNearestColor (hdc=0xd00107aa, color=0x0) returned 0x0
[0220.432] GetNearestColor (hdc=0xd00107aa, color=0xffffff) returned 0xffffff
[0220.432] GetNearestColor (hdc=0xd00107aa, color=0xe5e5e5) returned 0xe5e5e5
[0220.432] GetNearestColor (hdc=0xd00107aa, color=0xd7d7d7) returned 0xd7d7d7
[0220.432] GetNearestColor (hdc=0xd00107aa, color=0x0) returned 0x0
[0220.432] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0220.432] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107aa) returned 0x0
[0220.432] IsAppThemed () returned 0x1
[0220.432] GetThemeAppProperties () returned 0x3
[0220.432] GetThemeAppProperties () returned 0x3
[0220.432] IsAppThemed () returned 0x1
[0220.432] GetThemeAppProperties () returned 0x3
[0220.432] GetThemeAppProperties () returned 0x3
[0220.432] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x235fd28 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0220.432] IsAppThemed () returned 0x1
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] IsAppThemed () returned 0x1
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] IsAppThemed () returned 0x1
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] IsAppThemed () returned 0x1
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] IsThemePartDefined () returned 0x1
[0220.433] IsAppThemed () returned 0x1
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0220.433] IsAppThemed () returned 0x1
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] IsAppThemed () returned 0x1
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] GetThemeAppProperties () returned 0x3
[0220.433] IsThemePartDefined () returned 0x1
[0220.433] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0220.433] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.433] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0220.433] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.433] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0220.433] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.434] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.434] LocalFree (hMem=0x89ea88) returned 0x0
[0220.434] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0220.434] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0220.434] LocalFree (hMem=0x89eac0) returned 0x0
[0220.434] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.434] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0220.434] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0220.434] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0220.434] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.434] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0220.434] GetCurrentObject (hdc=0xd00107aa, type=0x1) returned 0xb00017
[0220.434] GetCurrentObject (hdc=0xd00107aa, type=0x2) returned 0x900010
[0220.434] GetCurrentObject (hdc=0xd00107aa, type=0x7) returned 0x1e0507b9
[0220.434] GetCurrentObject (hdc=0xd00107aa, type=0x6) returned 0x8a01c2
[0220.434] SaveDC (hdc=0xd00107aa) returned 1
[0220.434] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4104051e
[0220.434] GetClipRgn (hdc=0xd00107aa, hrgn=0x4104051e) returned 0
[0220.434] SelectClipRgn (hdc=0xd00107aa, hrgn=0xe70407a1) returned 2
[0220.434] DeleteObject (ho=0x4104051e) returned 1
[0220.434] DeleteObject (ho=0xe70407a1) returned 1
[0220.435] OffsetViewportOrgEx (in: hdc=0xd00107aa, x=0, y=0, lppt=0x23603d8 | out: lppt=0x23603d8) returned 1
[0220.435] DrawThemeParentBackground ()
[0220.435] GetWindowPlacement (in: hWnd=0xa02c0, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0220.435] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0220.435] GetWindowTextLengthW (hWnd=0xa02c0)
[0220.435] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.435] GetSystemMetrics (nIndex=42) returned 0
[0220.435] GetWindowTextW (hWnd=0xa02c0, lpString=0x53d878, nMaxCount=11)
[0220.435] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0220.435] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0220.435] GetCurrentObject (hdc=0xd00107aa, type=0x1) returned 0xb00017
[0220.435] GetCurrentObject (hdc=0xd00107aa, type=0x2) returned 0x900010
[0220.435] GetCurrentObject (hdc=0xd00107aa, type=0x7) returned 0x1e0507b9
[0220.435] GetCurrentObject (hdc=0xd00107aa, type=0x6) returned 0x8a01c2
[0220.435] SaveDC (hdc=0xd00107aa) returned 2
[0220.435] GetNearestColor (hdc=0xd00107aa, color=0xf0f0f0) returned 0xf0f0f0
[0220.435] CreateSolidBrush (color=0xf0f0f0) returned 0x9410078d
[0220.436] FillRect (hDC=0xd00107aa, lprc=0x53d760, hbr=0x9410078d) returned 1
[0220.436] DeleteObject (ho=0x9410078d) returned 1
[0220.436] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0220.436] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.436] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0220.436] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0220.436] GetCurrentObject (hdc=0xd00107aa, type=0x1) returned 0xb00017
[0220.436] GetCurrentObject (hdc=0xd00107aa, type=0x2) returned 0x900010
[0220.436] GetCurrentObject (hdc=0xd00107aa, type=0x7) returned 0x1e0507b9
[0220.436] GetCurrentObject (hdc=0xd00107aa, type=0x6) returned 0x8a01c2
[0220.436] SaveDC (hdc=0xd00107aa) returned 2
[0220.436] GetNearestColor (hdc=0xd00107aa, color=0xf0f0f0) returned 0xf0f0f0
[0220.436] CreateSolidBrush (color=0xf0f0f0) returned 0x9510078d
[0220.436] FillRect (hDC=0xd00107aa, lprc=0x53d700, hbr=0x9510078d) returned 1
[0220.436] DeleteObject (ho=0x9510078d) returned 1
[0220.436] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0220.437] GetWindowTextLengthW (hWnd=0xa02c0)
[0220.437] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.437] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0220.438] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0220.439] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107aa) returned 0x0
[0220.439] IsAppThemed () returned 0x1
[0220.439] GetThemeAppProperties () returned 0x3
[0220.439] GetThemeAppProperties () returned 0x3
[0220.439] IsAppThemed () returned 0x1
[0220.439] GetThemeAppProperties () returned 0x3
[0220.439] GetThemeAppProperties () returned 0x3
[0220.439] IsThemePartDefined () returned 0x1
[0220.439] GdipCreateRegion (region=0x53dc80) returned 0x0
[0220.439] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.439] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0220.439] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.439] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0220.439] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0220.439] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0220.439] LocalFree (hMem=0x89ec80) returned 0x0
[0220.439] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0220.439] LocalFree (hMem=0x89ec80) returned 0x0
[0220.439] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.439] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0220.439] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0220.439] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0220.440] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.440] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0220.440] GetCurrentObject (hdc=0xd00107aa, type=0x1) returned 0xb00017
[0220.440] IsAppThemed () returned 0x1
[0220.440] GetThemeAppProperties () returned 0x3
[0220.440] GetThemeAppProperties () returned 0x3
[0220.440] DrawThemeBackground () returned 0x0
[0220.440] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0220.440] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107aa) returned 0x0
[0220.440] GdipCreateRegion (region=0x53dc84) returned 0x0
[0220.440] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.440] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0220.440] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.440] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0220.440] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0220.441] LocalFree (hMem=0x89ee08) returned 0x0
[0220.441] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0220.441] LocalFree (hMem=0x89ee08) returned 0x0
[0220.441] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.441] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0220.441] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0220.441] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0220.441] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.441] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0220.441] IsAppThemed () returned 0x1
[0220.441] GetThemeAppProperties () returned 0x3
[0220.441] GetThemeAppProperties () returned 0x3
[0220.441] GetThemeBackgroundContentRect () returned 0x0
[0220.441] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0220.441] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107aa) returned 0x0
[0220.441] IsAppThemed () returned 0x1
[0220.441] GetThemeAppProperties () returned 0x3
[0220.441] GetThemeAppProperties () returned 0x3
[0220.441] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0220.441] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0220.441] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0220.441] SelectObject (hdc=0xd00107aa, h=0x730a066d) returned 0x8a01c2
[0220.442] DrawTextExW (in: hdc=0xd00107aa, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x23612d4 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0220.442] DrawTextExW (in: hdc=0xd00107aa, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x23612d4 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0220.442] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107aa) returned 0x0
[0220.442] GetFocus () returned 0xa02be
[0220.442] IsAppThemed () returned 0x1
[0220.442] GetThemeAppProperties () returned 0x3
[0220.442] GetThemeAppProperties () returned 0x3
[0220.442] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0220.444] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107aa) returned 0x0
[0220.444] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0220.445] EndPaint (hWnd=0xa02be, lpPaint=0x53df7c) returned 1
[0220.445] WindowFromPoint (Point=0x356)
[0220.445] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x84, wParam=0x0, lParam=0x1970356) returned 0x1
[0220.445] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0220.445] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0220.445] SendMessageW (hWnd=0xa02c0, Msg=0x10, wParam=0x0, lParam=0x0)
[0220.445] GetCapture () returned 0xa02be
[0220.445] ReleaseCapture ()
[0220.446] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0220.446] LdrStandardizeSystemPath ()
[0220.446] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x84, wParam=0x0, lParam=0x1970356) returned 0x1
[0220.446] EnableWindow (hWnd=0x70036, bEnable=1)
[0220.447] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0220.447] SetActiveWindow (hWnd=0x70036)
[0220.447] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x86, wParam=0x0, lParam=0x70036)
[0220.449] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0220.449] LdrStandardizeSystemPath ()
[0220.449] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0220.450] LdrStandardizeSystemPath ()
[0220.450] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0220.451] LdrStandardizeSystemPath ()
[0220.451] LdrStandardizeSystemPath ()
[0220.451] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0220.451] LdrStandardizeSystemPath ()
[0220.451] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0220.451] LdrStandardizeSystemPath ()
[0220.451] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0220.451] LdrStandardizeSystemPath ()
[0220.451] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0xa02c0) returned 0x1
[0220.454] LdrStandardizeSystemPath ()
[0220.454] GetFocus () returned 0xa02be
[0220.454] SetFocus (hWnd=0x202c6)
[0220.454] GetFocus () returned 0x202c6
[0220.454] IsChild (hWndParent=0xa02c0, hWnd=0x202c6) returned 0
[0220.454] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0220.454] GetCapture () returned 0x0
[0220.454] InvalidateRect (hWnd=0xa02be, lpRect=0x0, bErase=0) returned 1
[0220.454] LdrStandardizeSystemPath ()
[0220.455] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0220.456] LdrStandardizeSystemPath ()
[0220.456] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f)
[0220.458] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.458] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0220.458] LdrStandardizeSystemPath ()
[0220.458] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.458] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0xa02be, lParam=0x0)
[0220.459] GetStockObject (i=5) returned 0x900015
[0220.525] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0220.526] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0220.526] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0220.526] LdrStandardizeSystemPath ()
[0220.527] IsWindowVisible (hWnd=0x70036) returned 1
[0220.527] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0220.527] GetFocus () returned 0x202c6
[0220.527] IsChild (hWndParent=0xa02c0, hWnd=0x202c6) returned 0
[0220.527] ShowWindow (hWnd=0xa02c0, nCmdShow=0) returned 1
[0220.527] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0220.528] LdrStandardizeSystemPath ()
[0220.528] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0220.529] LdrStandardizeSystemPath ()
[0220.530] GetWindowPlacement (in: hWnd=0xa02c0, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0220.530] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0220.530] GetClientRect (in: hWnd=0xa02c0, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0220.530] GetWindowRect (in: hWnd=0xa02c0, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0220.530] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0220.531] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0220.531] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0220.531] GetWindowLongW (hWnd=0xa02c0, nIndex=-20) returned 327937
[0220.531] DestroyWindow (hWnd=0xa02c0) returned 1
[0220.531] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0220.531] GetWindowTextLengthW (hWnd=0xa02c0) returned 10
[0220.531] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0220.531] GetSystemMetrics (nIndex=42) returned 0
[0220.532] GetWindowTextW (in: hWnd=0xa02c0, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0220.532] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0220.532] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0220.532] SendMessageW (hWnd=0x1602d2, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0220.532] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0220.532] SendMessageW (hWnd=0x1602d2, Msg=0xb0, wParam=0x23493bc, lParam=0x53e518) returned 0x0
[0220.532] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xb0, wParam=0x23493bc, lParam=0x53e518) returned 0x0
[0220.532] GetWindowTextLengthW (hWnd=0x1602d2) returned 0
[0220.532] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0220.532] GetSystemMetrics (nIndex=42) returned 0
[0220.532] GetWindowTextW (in: hWnd=0x1602d2, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0220.532] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0220.532] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0220.532] GetWindowThreadProcessId (in: hWnd=0x1a013e, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0220.532] GetWindow (hWnd=0x1a013e, uCmd=0x5) returned 0x0
[0220.532] GetWindowLongW (hWnd=0x1a013e, nIndex=-20) returned 65792
[0220.532] DestroyWindow (hWnd=0x1a013e) returned 1
[0220.533] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a013e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0220.533] GetWindowTextLengthW (hWnd=0x1a013e) returned 25
[0220.533] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0220.533] GetSystemMetrics (nIndex=42) returned 0
[0220.533] GetWindowTextW (in: hWnd=0x1a013e, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0220.533] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a013e, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0220.533] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0220.533] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0220.534] GetWindowTextLengthW (hWnd=0x1602d6) returned 16
[0220.534] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0220.534] GetSystemMetrics (nIndex=42) returned 0
[0220.534] GetWindowTextW (in: hWnd=0x1602d6, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0220.534] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0220.534] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0220.534] InvalidateRect (hWnd=0xa02be, lpRect=0x0, bErase=0) returned 1
[0220.534] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0220.534] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0220.535] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1602d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0220.536] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1602d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0220.540] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa02be, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0220.541] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1602c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0220.542] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02c0, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0220.543] GetProcessWindowStation () returned 0x13c
[0220.544] GetActiveWindow () returned 0x70036
[0220.544] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0220.544] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0220.544] GetCurrentThreadId () returned 0x11d0
[0220.544] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf47ce, lParam=0x0) returned 1
[0220.544] IsWindowVisible (hWnd=0x70036) returned 1
[0220.544] IsWindowEnabled (hWnd=0x70036) returned 1
[0220.544] IsWindowVisible (hWnd=0x602b6) returned 0
[0220.544] IsWindowVisible (hWnd=0x901f8) returned 0
[0220.545] IsWindowVisible (hWnd=0x202d0) returned 0
[0220.545] IsWindowVisible (hWnd=0x202d4) returned 0
[0220.545] GetActiveWindow () returned 0x70036
[0220.545] GetFocus () returned 0x202c6
[0220.545] IsWindow (hWnd=0x70036) returned 1
[0220.545] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0220.545] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0220.545] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0220.545] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0220.546] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0220.554] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0xb02c0) returned 0x1
[0220.557] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0220.557] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0220.559] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1702c8, lParam=0x0) returned 0x0
[0220.559] GetCapture () returned 0x0
[0220.559] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0220.560] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0220.561] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.561] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0220.563] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x60100ce
[0220.563] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0220.563] CreateCompatibleDC (hdc=0x60100ce) returned 0xe20107aa
[0220.564] SelectObject (hdc=0xe20107aa, h=0x1e0507b9) returned 0x85000f
[0220.564] GdipCreateFromHDC (hdc=0xe20107aa, graphics=0x53e108) returned 0x0
[0220.564] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0220.564] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0220.564] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0220.564] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.564] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0220.564] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.564] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0220.564] LocalFree (hMem=0x89ea88) returned 0x0
[0220.564] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.564] GdipCreateRegion (region=0x53e150) returned 0x0
[0220.564] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.564] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0220.564] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0220.564] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc6d0dbd) returned 0x0
[0220.564] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.564] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0220.565] GetCurrentObject (hdc=0xe20107aa, type=0x1) returned 0xb00017
[0220.565] GetCurrentObject (hdc=0xe20107aa, type=0x2) returned 0x900010
[0220.565] GetCurrentObject (hdc=0xe20107aa, type=0x7) returned 0x1e0507b9
[0220.565] GetCurrentObject (hdc=0xe20107aa, type=0x6) returned 0x8a01c2
[0220.565] SaveDC (hdc=0xe20107aa) returned 1
[0220.565] GetNearestColor (hdc=0xe20107aa, color=0xff) returned 0xff
[0220.565] GetNearestColor (hdc=0xe20107aa, color=0x55) returned 0x55
[0220.565] GetNearestColor (hdc=0xe20107aa, color=0x0) returned 0x0
[0220.565] GetNearestColor (hdc=0xe20107aa, color=0x55) returned 0x55
[0220.565] GetNearestColor (hdc=0xe20107aa, color=0x0) returned 0x0
[0220.565] GetNearestColor (hdc=0xe20107aa, color=0x8080ff) returned 0x8080ff
[0220.565] GetNearestColor (hdc=0xe20107aa, color=0x7373e5) returned 0x7373e5
[0220.565] GetNearestColor (hdc=0xe20107aa, color=0xe5) returned 0xe5
[0220.565] GetNearestColor (hdc=0xe20107aa, color=0x0) returned 0x0
[0220.565] RestoreDC (hdc=0xe20107aa, nSavedDC=-1) returned 1
[0220.565] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe20107aa) returned 0x0
[0220.565] IsAppThemed () returned 0x1
[0220.565] GetThemeAppProperties () returned 0x3
[0220.566] GetThemeAppProperties () returned 0x3
[0220.566] IsAppThemed () returned 0x1
[0220.566] GetThemeAppProperties () returned 0x3
[0220.566] GetThemeAppProperties () returned 0x3
[0220.566] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0220.566] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x23626c8 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0220.566] IsAppThemed () returned 0x1
[0220.566] GetThemeAppProperties () returned 0x3
[0220.566] GetThemeAppProperties () returned 0x3
[0220.566] IsAppThemed () returned 0x1
[0220.566] GetThemeAppProperties () returned 0x3
[0220.566] GetThemeAppProperties () returned 0x3
[0220.566] GetFocus () returned 0x1702c8
[0220.566] IsAppThemed () returned 0x1
[0220.566] GetThemeAppProperties () returned 0x3
[0220.566] GetThemeAppProperties () returned 0x3
[0220.566] IsAppThemed () returned 0x1
[0220.566] GetThemeAppProperties () returned 0x3
[0220.566] GetThemeAppProperties () returned 0x3
[0220.566] IsThemePartDefined () returned 0x1
[0220.567] IsAppThemed () returned 0x1
[0220.567] GetThemeAppProperties () returned 0x3
[0220.567] GetThemeAppProperties () returned 0x3
[0220.567] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0220.567] IsAppThemed () returned 0x1
[0220.567] GetThemeAppProperties () returned 0x3
[0220.567] GetThemeAppProperties () returned 0x3
[0220.567] IsAppThemed () returned 0x1
[0220.567] GetThemeAppProperties () returned 0x3
[0220.567] GetThemeAppProperties () returned 0x3
[0220.567] IsThemePartDefined () returned 0x1
[0220.567] GdipCreateRegion (region=0x53de78) returned 0x0
[0220.567] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.567] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0220.567] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.567] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0220.567] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.567] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.567] LocalFree (hMem=0x89ea88) returned 0x0
[0220.567] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.567] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.567] LocalFree (hMem=0x89ea88) returned 0x0
[0220.567] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.567] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0220.567] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0220.568] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0220.568] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.568] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0220.568] GetCurrentObject (hdc=0xe20107aa, type=0x1) returned 0xb00017
[0220.568] GetCurrentObject (hdc=0xe20107aa, type=0x2) returned 0x900010
[0220.568] GetCurrentObject (hdc=0xe20107aa, type=0x7) returned 0x1e0507b9
[0220.568] GetCurrentObject (hdc=0xe20107aa, type=0x6) returned 0x8a01c2
[0220.568] SaveDC (hdc=0xe20107aa) returned 1
[0220.568] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xea0407a1
[0220.572] GetClipRgn (hdc=0xe20107aa, hrgn=0xea0407a1) returned 0
[0220.572] SelectClipRgn (hdc=0xe20107aa, hrgn=0x4a04051e) returned 2
[0220.572] DeleteObject (ho=0xea0407a1) returned 1
[0220.572] DeleteObject (ho=0x4a04051e) returned 1
[0220.572] OffsetViewportOrgEx (in: hdc=0xe20107aa, x=0, y=0, lppt=0x2362d78 | out: lppt=0x2362d78) returned 1
[0220.572] DrawThemeParentBackground () returned 0x0
[0220.572] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0220.572] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0220.572] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0220.572] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0220.572] GetSystemMetrics (nIndex=42) returned 0
[0220.573] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0220.573] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0220.573] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0220.573] GetCurrentObject (hdc=0xe20107aa, type=0x1) returned 0xb00017
[0220.573] GetCurrentObject (hdc=0xe20107aa, type=0x2) returned 0x900010
[0220.573] GetCurrentObject (hdc=0xe20107aa, type=0x7) returned 0x1e0507b9
[0220.573] GetCurrentObject (hdc=0xe20107aa, type=0x6) returned 0x8a01c2
[0220.573] SaveDC (hdc=0xe20107aa) returned 2
[0220.573] GetNearestColor (hdc=0xe20107aa, color=0xff) returned 0xff
[0220.573] CreateSolidBrush (color=0xff) returned 0x9610078d
[0220.573] FillRect (hDC=0xe20107aa, lprc=0x53d8d8, hbr=0x9610078d) returned 1
[0220.573] DeleteObject (ho=0x9610078d) returned 1
[0220.573] RestoreDC (hdc=0xe20107aa, nSavedDC=-1) returned 1
[0220.573] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0220.573] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0220.573] GetSystemMetrics (nIndex=42) returned 0
[0220.573] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0220.573] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0220.573] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0220.573] GetCurrentObject (hdc=0xe20107aa, type=0x1) returned 0xb00017
[0220.574] GetCurrentObject (hdc=0xe20107aa, type=0x2) returned 0x900010
[0220.574] GetCurrentObject (hdc=0xe20107aa, type=0x7) returned 0x1e0507b9
[0220.574] GetCurrentObject (hdc=0xe20107aa, type=0x6) returned 0x8a01c2
[0220.574] SaveDC (hdc=0xe20107aa) returned 2
[0220.574] GetNearestColor (hdc=0xe20107aa, color=0xff) returned 0xff
[0220.574] CreateSolidBrush (color=0xff) returned 0x9710078d
[0220.574] FillRect (hDC=0xe20107aa, lprc=0x53d878, hbr=0x9710078d) returned 1
[0220.574] DeleteObject (ho=0x9710078d) returned 1
[0220.574] RestoreDC (hdc=0xe20107aa, nSavedDC=-1) returned 1
[0220.574] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0220.574] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0220.574] GetSystemMetrics (nIndex=42) returned 0
[0220.574] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0220.574] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0220.574] RestoreDC (hdc=0xe20107aa, nSavedDC=-1) returned 1
[0220.574] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe20107aa) returned 0x0
[0220.574] IsAppThemed () returned 0x1
[0220.574] GetThemeAppProperties () returned 0x3
[0220.574] GetThemeAppProperties () returned 0x3
[0220.575] IsAppThemed () returned 0x1
[0220.575] GetThemeAppProperties () returned 0x3
[0220.575] GetThemeAppProperties () returned 0x3
[0220.575] IsThemePartDefined () returned 0x1
[0220.575] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0220.575] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.575] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0220.575] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.575] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0220.575] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0220.575] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0220.575] LocalFree (hMem=0x89ec80) returned 0x0
[0220.575] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0220.575] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0220.575] LocalFree (hMem=0x89ec80) returned 0x0
[0220.575] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.575] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0220.575] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0220.575] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0220.575] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.575] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0220.575] GetCurrentObject (hdc=0xe20107aa, type=0x1) returned 0xb00017
[0220.575] GetCurrentObject (hdc=0xe20107aa, type=0x2) returned 0x900010
[0220.575] GetCurrentObject (hdc=0xe20107aa, type=0x7) returned 0x1e0507b9
[0220.576] GetCurrentObject (hdc=0xe20107aa, type=0x6) returned 0x8a01c2
[0220.576] SaveDC (hdc=0xe20107aa) returned 1
[0220.576] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4b04051e
[0220.576] GetClipRgn (hdc=0xe20107aa, hrgn=0x4b04051e) returned 0
[0220.576] SelectClipRgn (hdc=0xe20107aa, hrgn=0xec0407a1) returned 2
[0220.576] DeleteObject (ho=0x4b04051e) returned 1
[0220.576] DeleteObject (ho=0xec0407a1) returned 1
[0220.576] OffsetViewportOrgEx (in: hdc=0xe20107aa, x=0, y=0, lppt=0x23635dc | out: lppt=0x23635dc) returned 1
[0220.576] IsAppThemed () returned 0x1
[0220.576] GetThemeAppProperties () returned 0x3
[0220.576] GetThemeAppProperties () returned 0x3
[0220.576] DrawThemeBackground () returned 0x0
[0220.576] RestoreDC (hdc=0xe20107aa, nSavedDC=-1) returned 1
[0220.576] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe20107aa) returned 0x0
[0220.576] GdipCreateRegion (region=0x53de00) returned 0x0
[0220.576] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.576] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0220.576] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.576] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0220.576] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.576] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.577] LocalFree (hMem=0x89ea88) returned 0x0
[0220.577] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0220.577] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0220.577] LocalFree (hMem=0x89ec80) returned 0x0
[0220.577] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.577] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0220.577] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0220.577] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0220.577] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.577] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0220.577] GetCurrentObject (hdc=0xe20107aa, type=0x1) returned 0xb00017
[0220.577] GetCurrentObject (hdc=0xe20107aa, type=0x2) returned 0x900010
[0220.577] GetCurrentObject (hdc=0xe20107aa, type=0x7) returned 0x1e0507b9
[0220.577] GetCurrentObject (hdc=0xe20107aa, type=0x6) returned 0x8a01c2
[0220.577] SaveDC (hdc=0xe20107aa) returned 1
[0220.577] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xed0407a1
[0220.577] GetClipRgn (hdc=0xe20107aa, hrgn=0xed0407a1) returned 0
[0220.577] SelectClipRgn (hdc=0xe20107aa, hrgn=0x4c04051e) returned 2
[0220.577] DeleteObject (ho=0xed0407a1) returned 1
[0220.577] DeleteObject (ho=0x4c04051e) returned 1
[0220.577] OffsetViewportOrgEx (in: hdc=0xe20107aa, x=0, y=0, lppt=0x23638b0 | out: lppt=0x23638b0) returned 1
[0220.577] IsAppThemed () returned 0x1
[0220.578] GetThemeAppProperties () returned 0x3
[0220.578] GetThemeAppProperties () returned 0x3
[0220.578] GetThemeBackgroundContentRect () returned 0x0
[0220.578] RestoreDC (hdc=0xe20107aa, nSavedDC=-1) returned 1
[0220.578] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe20107aa) returned 0x0
[0220.578] IsAppThemed () returned 0x1
[0220.578] GetThemeAppProperties () returned 0x3
[0220.578] GetThemeAppProperties () returned 0x3
[0220.578] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0220.578] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0220.578] GetCurrentObject (hdc=0xe20107aa, type=0x1) returned 0xb00017
[0220.578] GetCurrentObject (hdc=0xe20107aa, type=0x2) returned 0x900010
[0220.578] GetCurrentObject (hdc=0xe20107aa, type=0x7) returned 0x1e0507b9
[0220.578] GetCurrentObject (hdc=0xe20107aa, type=0x6) returned 0x8a01c2
[0220.578] SaveDC (hdc=0xe20107aa) returned 1
[0220.578] GetTextAlign (hdc=0xe20107aa) returned 0x0
[0220.578] GetTextColor (hdc=0xe20107aa) returned 0x0
[0220.578] GetCurrentObject (hdc=0xe20107aa, type=0x6) returned 0x8a01c2
[0220.578] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0220.578] SelectObject (hdc=0xe20107aa, h=0x450a0799) returned 0x8a01c2
[0220.579] GetBkMode (hdc=0xe20107aa) returned 2
[0220.579] SetBkMode (hdc=0xe20107aa, mode=1) returned 2
[0220.579] DrawTextExW (in: hdc=0xe20107aa, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2363c50 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0220.579] DrawTextExW (in: hdc=0xe20107aa, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2363c50 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0220.579] RestoreDC (hdc=0xe20107aa, nSavedDC=-1) returned 1
[0220.579] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe20107aa) returned 0x0
[0220.579] GetFocus () returned 0x1702c8
[0220.579] IsAppThemed () returned 0x1
[0220.579] GetThemeAppProperties () returned 0x3
[0220.579] GetThemeAppProperties () returned 0x3
[0220.579] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0220.579] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xe20107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0220.580] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe20107aa) returned 0x0
[0220.580] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0220.580] SelectObject (hdc=0xe20107aa, h=0x85000f) returned 0x1e0507b9
[0220.580] DeleteDC (hdc=0xe20107aa) returned 1
[0220.580] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0220.580] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0220.882] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0220.882] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0220.883] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0xb02c0) returned 0x1
[0220.887] GetFocus () returned 0xb02c0
[0220.887] GetAncestor (hwnd=0xb02c0, gaFlags=0x1) returned 0x10010
[0220.887] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0220.887] SetFocus (hWnd=0x202c6) returned 0x0
[0220.890] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0220.892] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.892] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0220.892] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.892] GetFocus () returned 0x70036
[0220.893] SetFocus (hWnd=0x202c6) returned 0x0
[0220.906] IsWindow (hWnd=0x70036) returned 1
[0220.906] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0220.907] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0220.907] IsWindow (hWnd=0x70036) returned 1
[0220.907] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0220.907] IsWindow (hWnd=0x202c6) returned 1
[0220.907] SetFocus (hWnd=0x202c6) returned 0x70036
[0220.907] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0220.908] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0220.910] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0220.911] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.911] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x7
[0220.912] GetStockObject (i=5) returned 0x900015
[0220.912] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0220.924] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8da940) returned 0x7
[0220.924] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0220.924] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0220.924] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0220.925] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0220.926] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0220.926] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0220.926] GetFocus () returned 0x202c6
[0220.927] GetCapture () returned 0x0
[0220.927] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0220.927] IsWindowUnicode (hWnd=0x202c6) returned 1
[0220.927] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0220.928] TranslateMessage (lpMsg=0x53eef8) returned 0
[0220.928] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0220.928] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0220.929] IsWindowUnicode (hWnd=0x202c6) returned 1
[0220.929] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0220.929] TranslateMessage (lpMsg=0x53eef8) returned 0
[0220.929] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0220.929] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0220.929] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0220.929] CreateCompatibleDC (hdc=0xf0105ee) returned 0xfc010511
[0220.929] SelectObject (hdc=0xfc010511, h=0x1e0507b9) returned 0x85000f
[0220.929] GdipCreateFromHDC (hdc=0xfc010511, graphics=0x53e958) returned 0x0
[0220.930] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0220.930] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0220.930] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0220.930] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.930] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0220.930] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.930] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0220.930] LocalFree (hMem=0x89ea88) returned 0x0
[0220.930] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.930] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0220.930] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.930] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0220.930] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0220.930] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc6b0dbd) returned 0x0
[0220.930] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.930] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0220.930] GetCurrentObject (hdc=0xfc010511, type=0x1) returned 0xb00017
[0220.931] GetCurrentObject (hdc=0xfc010511, type=0x2) returned 0x900010
[0220.931] GetCurrentObject (hdc=0xfc010511, type=0x7) returned 0x1e0507b9
[0220.931] GetCurrentObject (hdc=0xfc010511, type=0x6) returned 0x8a01c2
[0220.931] SaveDC (hdc=0xfc010511) returned 1
[0220.931] GetNearestColor (hdc=0xfc010511, color=0xff) returned 0xff
[0220.931] GetNearestColor (hdc=0xfc010511, color=0x55) returned 0x55
[0220.931] GetNearestColor (hdc=0xfc010511, color=0x0) returned 0x0
[0220.931] GetNearestColor (hdc=0xfc010511, color=0x55) returned 0x55
[0220.931] GetNearestColor (hdc=0xfc010511, color=0x0) returned 0x0
[0220.931] GetNearestColor (hdc=0xfc010511, color=0x8080ff) returned 0x8080ff
[0220.931] GetNearestColor (hdc=0xfc010511, color=0x7373e5) returned 0x7373e5
[0220.931] GetNearestColor (hdc=0xfc010511, color=0xe5) returned 0xe5
[0220.932] GetNearestColor (hdc=0xfc010511, color=0x0) returned 0x0
[0220.932] RestoreDC (hdc=0xfc010511, nSavedDC=-1) returned 1
[0220.932] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfc010511) returned 0x0
[0220.932] IsAppThemed () returned 0x1
[0220.932] GetThemeAppProperties () returned 0x3
[0220.932] GetThemeAppProperties () returned 0x3
[0220.932] IsAppThemed () returned 0x1
[0220.932] GetThemeAppProperties () returned 0x3
[0220.932] GetThemeAppProperties () returned 0x3
[0220.932] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x23644ac | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0220.932] IsAppThemed () returned 0x1
[0220.932] GetThemeAppProperties () returned 0x3
[0220.932] GetThemeAppProperties () returned 0x3
[0220.933] IsAppThemed () returned 0x1
[0220.933] GetThemeAppProperties () returned 0x3
[0220.933] GetThemeAppProperties () returned 0x3
[0220.933] GetFocus () returned 0x202c6
[0220.933] IsAppThemed () returned 0x1
[0220.933] GetThemeAppProperties () returned 0x3
[0220.933] GetThemeAppProperties () returned 0x3
[0220.933] IsAppThemed () returned 0x1
[0220.933] GetThemeAppProperties () returned 0x3
[0220.933] GetThemeAppProperties () returned 0x3
[0220.933] IsThemePartDefined () returned 0x1
[0220.933] IsAppThemed () returned 0x1
[0220.933] GetThemeAppProperties () returned 0x3
[0220.933] GetThemeAppProperties () returned 0x3
[0220.933] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0220.933] IsAppThemed () returned 0x1
[0220.933] GetThemeAppProperties () returned 0x3
[0220.933] GetThemeAppProperties () returned 0x3
[0220.933] IsAppThemed () returned 0x1
[0220.933] GetThemeAppProperties () returned 0x3
[0220.933] GetThemeAppProperties () returned 0x3
[0220.933] IsThemePartDefined () returned 0x1
[0220.934] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0220.934] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.934] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0220.934] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.934] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0220.934] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0220.934] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0220.934] LocalFree (hMem=0x89ea88) returned 0x0
[0220.934] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0220.934] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0220.934] LocalFree (hMem=0x89ee08) returned 0x0
[0220.934] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.934] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0220.934] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0220.934] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0220.934] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.934] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0220.934] GetCurrentObject (hdc=0xfc010511, type=0x1) returned 0xb00017
[0220.935] GetCurrentObject (hdc=0xfc010511, type=0x2) returned 0x900010
[0220.935] GetCurrentObject (hdc=0xfc010511, type=0x7) returned 0x1e0507b9
[0220.935] GetCurrentObject (hdc=0xfc010511, type=0x6) returned 0x8a01c2
[0220.935] SaveDC (hdc=0xfc010511) returned 1
[0220.935] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6204053e
[0220.935] GetClipRgn (hdc=0xfc010511, hrgn=0x6204053e) returned 0
[0220.935] SelectClipRgn (hdc=0xfc010511, hrgn=0x5a04051e) returned 2
[0220.935] DeleteObject (ho=0x6204053e) returned 1
[0220.935] DeleteObject (ho=0x5a04051e) returned 1
[0220.935] OffsetViewportOrgEx (in: hdc=0xfc010511, x=0, y=0, lppt=0x2364b5c | out: lppt=0x2364b5c) returned 1
[0220.935] DrawThemeParentBackground () returned 0x0
[0220.935] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0220.936] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0220.936] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0220.936] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0220.936] GetSystemMetrics (nIndex=42) returned 0
[0220.936] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0220.936] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0220.936] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0220.936] GetCurrentObject (hdc=0xfc010511, type=0x1) returned 0xb00017
[0220.936] GetCurrentObject (hdc=0xfc010511, type=0x2) returned 0x900010
[0220.936] GetCurrentObject (hdc=0xfc010511, type=0x7) returned 0x1e0507b9
[0220.936] GetCurrentObject (hdc=0xfc010511, type=0x6) returned 0x8a01c2
[0220.936] SaveDC (hdc=0xfc010511) returned 2
[0220.936] GetNearestColor (hdc=0xfc010511, color=0xff) returned 0xff
[0220.936] CreateSolidBrush (color=0xff) returned 0x9910078d
[0220.936] FillRect (hDC=0xfc010511, lprc=0x53e128, hbr=0x9910078d) returned 1
[0220.936] DeleteObject (ho=0x9910078d) returned 1
[0220.936] RestoreDC (hdc=0xfc010511, nSavedDC=-1) returned 1
[0220.937] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0220.937] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0220.937] GetSystemMetrics (nIndex=42) returned 0
[0220.937] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0220.937] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0220.937] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0220.937] GetCurrentObject (hdc=0xfc010511, type=0x1) returned 0xb00017
[0220.937] GetCurrentObject (hdc=0xfc010511, type=0x2) returned 0x900010
[0220.937] GetCurrentObject (hdc=0xfc010511, type=0x7) returned 0x1e0507b9
[0220.937] GetCurrentObject (hdc=0xfc010511, type=0x6) returned 0x8a01c2
[0220.937] SaveDC (hdc=0xfc010511) returned 2
[0220.937] GetNearestColor (hdc=0xfc010511, color=0xff) returned 0xff
[0220.937] CreateSolidBrush (color=0xff) returned 0x9a10078d
[0220.937] FillRect (hDC=0xfc010511, lprc=0x53e0c8, hbr=0x9a10078d) returned 1
[0220.937] DeleteObject (ho=0x9a10078d) returned 1
[0220.938] RestoreDC (hdc=0xfc010511, nSavedDC=-1) returned 1
[0220.938] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0220.938] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0220.938] GetSystemMetrics (nIndex=42) returned 0
[0220.938] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0220.938] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0220.938] RestoreDC (hdc=0xfc010511, nSavedDC=-1) returned 1
[0220.938] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfc010511) returned 0x0
[0220.938] IsAppThemed () returned 0x1
[0220.938] GetThemeAppProperties () returned 0x3
[0220.938] GetThemeAppProperties () returned 0x3
[0220.938] IsAppThemed () returned 0x1
[0220.938] GetThemeAppProperties () returned 0x3
[0220.938] GetThemeAppProperties () returned 0x3
[0220.938] IsThemePartDefined () returned 0x1
[0220.939] GdipCreateRegion (region=0x53e64c) returned 0x0
[0220.939] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.939] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0220.939] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0220.939] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0220.939] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0220.939] LocalFree (hMem=0x89ea88) returned 0x0
[0220.939] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0220.939] LocalFree (hMem=0x89ee08) returned 0x0
[0220.939] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0220.939] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0220.939] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0220.939] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0220.939] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.939] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0220.939] GetCurrentObject (hdc=0xfc010511, type=0x1) returned 0xb00017
[0220.939] GetCurrentObject (hdc=0xfc010511, type=0x2) returned 0x900010
[0220.939] GetCurrentObject (hdc=0xfc010511, type=0x7) returned 0x1e0507b9
[0220.939] GetCurrentObject (hdc=0xfc010511, type=0x6) returned 0x8a01c2
[0220.940] SaveDC (hdc=0xfc010511) returned 1
[0220.940] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b04051e
[0220.940] GetClipRgn (hdc=0xfc010511, hrgn=0x5b04051e) returned 0
[0220.940] SelectClipRgn (hdc=0xfc010511, hrgn=0x6404053e) returned 2
[0220.940] DeleteObject (ho=0x5b04051e) returned 1
[0220.940] DeleteObject (ho=0x6404053e) returned 1
[0220.940] OffsetViewportOrgEx (in: hdc=0xfc010511, x=0, y=0, lppt=0x23653c0 | out: lppt=0x23653c0) returned 1
[0220.940] IsAppThemed () returned 0x1
[0220.940] GetThemeAppProperties () returned 0x3
[0220.940] GetThemeAppProperties () returned 0x3
[0220.940] DrawThemeBackground () returned 0x0
[0220.940] RestoreDC (hdc=0xfc010511, nSavedDC=-1) returned 1
[0220.940] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfc010511) returned 0x0
[0220.940] GdipCreateRegion (region=0x53e650) returned 0x0
[0220.940] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0220.940] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0220.940] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0220.940] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0220.941] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0220.941] LocalFree (hMem=0x89ee08) returned 0x0
[0220.941] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0220.941] LocalFree (hMem=0x89eac0) returned 0x0
[0220.941] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0220.941] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0220.941] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0220.941] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0220.941] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0220.941] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0220.941] GetCurrentObject (hdc=0xfc010511, type=0x1) returned 0xb00017
[0220.941] GetCurrentObject (hdc=0xfc010511, type=0x2) returned 0x900010
[0220.941] GetCurrentObject (hdc=0xfc010511, type=0x7) returned 0x1e0507b9
[0220.941] GetCurrentObject (hdc=0xfc010511, type=0x6) returned 0x8a01c2
[0220.941] SaveDC (hdc=0xfc010511) returned 1
[0220.941] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6504053e
[0220.941] GetClipRgn (hdc=0xfc010511, hrgn=0x6504053e) returned 0
[0220.941] SelectClipRgn (hdc=0xfc010511, hrgn=0x5c04051e) returned 2
[0220.942] DeleteObject (ho=0x6504053e) returned 1
[0220.942] DeleteObject (ho=0x5c04051e) returned 1
[0220.942] OffsetViewportOrgEx (in: hdc=0xfc010511, x=0, y=0, lppt=0x2365694 | out: lppt=0x2365694) returned 1
[0220.942] IsAppThemed () returned 0x1
[0220.942] GetThemeAppProperties () returned 0x3
[0220.942] GetThemeAppProperties () returned 0x3
[0220.942] GetThemeBackgroundContentRect () returned 0x0
[0220.942] RestoreDC (hdc=0xfc010511, nSavedDC=-1) returned 1
[0220.942] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfc010511) returned 0x0
[0220.942] IsAppThemed () returned 0x1
[0220.942] GetThemeAppProperties () returned 0x3
[0220.942] GetThemeAppProperties () returned 0x3
[0220.942] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0220.942] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0220.942] GetCurrentObject (hdc=0xfc010511, type=0x1) returned 0xb00017
[0220.942] GetCurrentObject (hdc=0xfc010511, type=0x2) returned 0x900010
[0220.942] GetCurrentObject (hdc=0xfc010511, type=0x7) returned 0x1e0507b9
[0220.942] GetCurrentObject (hdc=0xfc010511, type=0x6) returned 0x8a01c2
[0220.942] SaveDC (hdc=0xfc010511) returned 1
[0220.943] GetTextAlign (hdc=0xfc010511) returned 0x0
[0220.943] GetTextColor (hdc=0xfc010511) returned 0x0
[0220.943] GetCurrentObject (hdc=0xfc010511, type=0x6) returned 0x8a01c2
[0220.943] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0220.943] SelectObject (hdc=0xfc010511, h=0x450a0799) returned 0x8a01c2
[0220.943] GetBkMode (hdc=0xfc010511) returned 2
[0220.948] SetBkMode (hdc=0xfc010511, mode=1) returned 2
[0220.948] DrawTextExW (in: hdc=0xfc010511, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2365a34 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0220.948] DrawTextExW (in: hdc=0xfc010511, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2365a34 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0220.948] RestoreDC (hdc=0xfc010511, nSavedDC=-1) returned 1
[0220.949] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfc010511) returned 0x0
[0220.949] GetFocus () returned 0x202c6
[0220.949] IsAppThemed () returned 0x1
[0220.949] GetThemeAppProperties () returned 0x3
[0220.949] GetThemeAppProperties () returned 0x3
[0220.949] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0220.949] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xfc010511, x1=0, y1=0, rop=0xcc0020) returned 1
[0220.949] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfc010511) returned 0x0
[0220.949] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0220.949] SelectObject (hdc=0xfc010511, h=0x85000f) returned 0x1e0507b9
[0220.949] DeleteDC (hdc=0xfc010511) returned 1
[0220.949] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0220.949] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0220.950] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0220.950] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0220.950] WaitMessage () returned 1
[0220.953] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0220.953] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.953] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0220.954] TranslateMessage (lpMsg=0x53eef8) returned 0
[0220.954] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0220.955] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0220.955] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0220.955] WaitMessage () returned 1
[0220.996] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0220.996] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.996] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0220.996] TranslateMessage (lpMsg=0x53eef8) returned 0
[0220.997] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0220.998] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0220.998] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0220.998] WaitMessage () returned 1
[0220.999] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0220.999] IsWindowUnicode (hWnd=0x102dc) returned 1
[0220.999] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0220.999] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.000] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.001] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.001] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.001] WaitMessage () returned 1
[0221.001] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.001] IsWindowUnicode (hWnd=0x102dc) returned 1
[0221.001] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.002] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.002] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.003] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.003] IsWindowUnicode (hWnd=0x102dc) returned 1
[0221.003] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.003] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.003] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.004] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.004] IsWindowUnicode (hWnd=0x102dc) returned 1
[0221.004] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.004] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.004] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.004] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.005] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.005] WaitMessage () returned 1
[0221.005] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.005] IsWindowUnicode (hWnd=0x102dc) returned 1
[0221.005] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.005] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.005] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.031] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.032] IsWindowUnicode (hWnd=0x102dc) returned 1
[0221.032] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.032] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.032] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.032] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.032] IsWindowUnicode (hWnd=0x102dc) returned 1
[0221.032] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.032] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.032] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.032] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.033] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.033] WaitMessage () returned 1
[0221.035] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.035] IsWindowUnicode (hWnd=0x102dc) returned 1
[0221.035] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.035] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.035] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.037] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.038] IsWindowUnicode (hWnd=0x102dc) returned 1
[0221.038] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.038] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.038] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.038] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.038] IsWindowUnicode (hWnd=0x102dc) returned 1
[0221.038] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.038] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.038] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.038] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.039] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.039] WaitMessage () returned 1
[0221.039] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.039] IsWindowUnicode (hWnd=0x102dc) returned 1
[0221.039] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.040] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.040] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.041] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.041] IsWindowUnicode (hWnd=0x102dc) returned 1
[0221.041] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.042] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.042] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.042] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.042] IsWindowUnicode (hWnd=0x102dc) returned 1
[0221.042] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.042] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.042] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.042] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.043] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.043] WaitMessage () returned 1
[0221.068] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.069] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.069] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.069] DispatchMessageA (lpMsg=0x53eef8) returned 0x7ee3
[0221.069] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.069] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.069] WaitMessage () returned 1
[0221.209] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.209] IsWindowUnicode (hWnd=0x202d0) returned 1
[0221.209] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0221.209] TranslateMessage (lpMsg=0x53eef8) returned 0
[0221.210] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0221.210] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.210] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0221.210] WaitMessage () returned 1
[0222.068] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0222.068] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0222.069] TranslateMessage (lpMsg=0x53eef8) returned 0
[0222.069] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0222.069] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0222.069] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0222.069] WaitMessage () returned 1
[0222.745] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0222.746] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a4022e) returned 0x1
[0222.746] IsWindowUnicode (hWnd=0x202c6) returned 1
[0222.746] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0222.746] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a4022e) returned 0x1
[0222.747] SetCursor (hCursor=0x10003) returned 0x10003
[0222.747] TranslateMessage (lpMsg=0x53eef8) returned 0
[0222.747] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0222.747] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0222.747] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0222.747] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0222.747] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0222.747] GetKeyState (nVirtKey=1) returned 1
[0222.747] GetKeyState (nVirtKey=2) returned 0
[0222.747] GetKeyState (nVirtKey=4) returned 0
[0222.747] GetKeyState (nVirtKey=5) returned 0
[0222.747] GetKeyState (nVirtKey=6) returned 0
[0222.747] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0222.747] IsWindowUnicode (hWnd=0x202c6) returned 1
[0222.747] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0222.748] TranslateMessage (lpMsg=0x53eef8) returned 0
[0222.748] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0222.748] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0222.748] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0222.748] CreateCompatibleDC (hdc=0xf0105ee) returned 0xec0104fd
[0222.748] SelectObject (hdc=0xec0104fd, h=0x1e0507b9) returned 0x85000f
[0222.748] GdipCreateFromHDC (hdc=0xec0104fd, graphics=0x53e958) returned 0x0
[0222.752] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0222.752] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0222.752] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0222.752] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0222.752] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0222.752] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0222.752] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0222.752] LocalFree (hMem=0x89ea88) returned 0x0
[0222.752] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0222.752] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0222.752] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0222.752] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0222.752] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0222.752] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc690dbd) returned 0x0
[0222.752] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0222.753] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0222.753] GetCurrentObject (hdc=0xec0104fd, type=0x1) returned 0xb00017
[0222.753] GetCurrentObject (hdc=0xec0104fd, type=0x2) returned 0x900010
[0222.753] GetCurrentObject (hdc=0xec0104fd, type=0x7) returned 0x1e0507b9
[0222.753] GetCurrentObject (hdc=0xec0104fd, type=0x6) returned 0x8a01c2
[0222.753] SaveDC (hdc=0xec0104fd) returned 1
[0222.753] GetNearestColor (hdc=0xec0104fd, color=0xff) returned 0xff
[0222.753] GetNearestColor (hdc=0xec0104fd, color=0x55) returned 0x55
[0222.753] GetNearestColor (hdc=0xec0104fd, color=0x0) returned 0x0
[0222.753] GetNearestColor (hdc=0xec0104fd, color=0x55) returned 0x55
[0222.753] GetNearestColor (hdc=0xec0104fd, color=0x0) returned 0x0
[0222.753] GetNearestColor (hdc=0xec0104fd, color=0x8080ff) returned 0x8080ff
[0222.753] GetNearestColor (hdc=0xec0104fd, color=0x7373e5) returned 0x7373e5
[0222.753] GetNearestColor (hdc=0xec0104fd, color=0xe5) returned 0xe5
[0222.753] GetNearestColor (hdc=0xec0104fd, color=0x0) returned 0x0
[0222.753] RestoreDC (hdc=0xec0104fd, nSavedDC=-1) returned 1
[0222.753] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec0104fd) returned 0x0
[0222.753] IsAppThemed () returned 0x1
[0222.754] GetThemeAppProperties () returned 0x3
[0222.754] GetThemeAppProperties () returned 0x3
[0222.754] IsAppThemed () returned 0x1
[0222.754] GetThemeAppProperties () returned 0x3
[0222.754] GetThemeAppProperties () returned 0x3
[0222.754] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x23663c8 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0222.754] IsAppThemed () returned 0x1
[0222.754] GetThemeAppProperties () returned 0x3
[0222.754] GetThemeAppProperties () returned 0x3
[0222.754] IsAppThemed () returned 0x1
[0222.754] GetThemeAppProperties () returned 0x3
[0222.754] GetThemeAppProperties () returned 0x3
[0222.754] IsAppThemed () returned 0x1
[0222.755] GetThemeAppProperties () returned 0x3
[0222.755] GetThemeAppProperties () returned 0x3
[0222.755] IsAppThemed () returned 0x1
[0222.755] GetThemeAppProperties () returned 0x3
[0222.755] GetThemeAppProperties () returned 0x3
[0222.755] IsThemePartDefined () returned 0x1
[0222.755] IsAppThemed () returned 0x1
[0222.755] GetThemeAppProperties () returned 0x3
[0222.755] GetThemeAppProperties () returned 0x3
[0222.755] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0222.755] IsAppThemed () returned 0x1
[0222.755] GetThemeAppProperties () returned 0x3
[0222.755] GetThemeAppProperties () returned 0x3
[0222.755] IsAppThemed () returned 0x1
[0222.755] GetThemeAppProperties () returned 0x3
[0222.755] GetThemeAppProperties () returned 0x3
[0222.755] IsThemePartDefined () returned 0x1
[0222.755] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0222.755] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0222.755] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0222.755] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0222.755] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0222.755] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0222.755] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0222.756] LocalFree (hMem=0x89ea88) returned 0x0
[0222.756] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0222.756] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0222.756] LocalFree (hMem=0x89eee8) returned 0x0
[0222.756] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0222.756] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0222.756] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0222.756] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0222.757] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0222.757] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0222.757] GetCurrentObject (hdc=0xec0104fd, type=0x1) returned 0xb00017
[0222.757] GetCurrentObject (hdc=0xec0104fd, type=0x2) returned 0x900010
[0222.757] GetCurrentObject (hdc=0xec0104fd, type=0x7) returned 0x1e0507b9
[0222.757] GetCurrentObject (hdc=0xec0104fd, type=0x6) returned 0x8a01c2
[0222.757] SaveDC (hdc=0xec0104fd) returned 1
[0222.757] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d04051e
[0222.757] GetClipRgn (hdc=0xec0104fd, hrgn=0x5d04051e) returned 0
[0222.757] SelectClipRgn (hdc=0xec0104fd, hrgn=0x6904053e) returned 2
[0222.757] DeleteObject (ho=0x5d04051e) returned 1
[0222.757] DeleteObject (ho=0x6904053e) returned 1
[0222.757] OffsetViewportOrgEx (in: hdc=0xec0104fd, x=0, y=0, lppt=0x2366a78 | out: lppt=0x2366a78) returned 1
[0222.757] DrawThemeParentBackground () returned 0x0
[0222.757] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0222.758] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0222.758] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0222.758] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0222.758] GetSystemMetrics (nIndex=42) returned 0
[0222.758] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0222.758] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0222.758] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0222.758] GetCurrentObject (hdc=0xec0104fd, type=0x1) returned 0xb00017
[0222.758] GetCurrentObject (hdc=0xec0104fd, type=0x2) returned 0x900010
[0222.758] GetCurrentObject (hdc=0xec0104fd, type=0x7) returned 0x1e0507b9
[0222.758] GetCurrentObject (hdc=0xec0104fd, type=0x6) returned 0x8a01c2
[0222.758] SaveDC (hdc=0xec0104fd) returned 2
[0222.758] GetNearestColor (hdc=0xec0104fd, color=0xff) returned 0xff
[0222.758] CreateSolidBrush (color=0xff) returned 0x9b10078d
[0222.758] FillRect (hDC=0xec0104fd, lprc=0x53e120, hbr=0x9b10078d) returned 1
[0222.758] DeleteObject (ho=0x9b10078d) returned 1
[0222.758] RestoreDC (hdc=0xec0104fd, nSavedDC=-1) returned 1
[0222.758] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0222.758] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0222.758] GetSystemMetrics (nIndex=42) returned 0
[0222.759] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0222.759] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0222.759] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0222.759] GetCurrentObject (hdc=0xec0104fd, type=0x1) returned 0xb00017
[0222.759] GetCurrentObject (hdc=0xec0104fd, type=0x2) returned 0x900010
[0222.759] GetCurrentObject (hdc=0xec0104fd, type=0x7) returned 0x1e0507b9
[0222.759] GetCurrentObject (hdc=0xec0104fd, type=0x6) returned 0x8a01c2
[0222.759] SaveDC (hdc=0xec0104fd) returned 2
[0222.759] GetNearestColor (hdc=0xec0104fd, color=0xff) returned 0xff
[0222.759] CreateSolidBrush (color=0xff) returned 0x9c10078d
[0222.759] FillRect (hDC=0xec0104fd, lprc=0x53e0c0, hbr=0x9c10078d) returned 1
[0222.759] DeleteObject (ho=0x9c10078d) returned 1
[0222.759] RestoreDC (hdc=0xec0104fd, nSavedDC=-1) returned 1
[0222.759] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0222.759] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0222.759] GetSystemMetrics (nIndex=42) returned 0
[0222.759] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0222.759] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0222.759] RestoreDC (hdc=0xec0104fd, nSavedDC=-1) returned 1
[0222.760] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec0104fd) returned 0x0
[0222.760] IsAppThemed () returned 0x1
[0222.760] GetThemeAppProperties () returned 0x3
[0222.760] GetThemeAppProperties () returned 0x3
[0222.760] IsAppThemed () returned 0x1
[0222.760] GetThemeAppProperties () returned 0x3
[0222.760] GetThemeAppProperties () returned 0x3
[0222.760] IsThemePartDefined () returned 0x1
[0222.760] GdipCreateRegion (region=0x53e640) returned 0x0
[0222.760] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0222.760] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0222.760] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0222.760] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0222.760] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0222.760] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0222.760] LocalFree (hMem=0x89ea88) returned 0x0
[0222.760] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0222.760] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0222.760] LocalFree (hMem=0x89eee8) returned 0x0
[0222.761] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0222.761] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0222.761] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0222.761] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0222.761] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0222.761] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0222.761] GetCurrentObject (hdc=0xec0104fd, type=0x1) returned 0xb00017
[0222.761] GetCurrentObject (hdc=0xec0104fd, type=0x2) returned 0x900010
[0222.761] GetCurrentObject (hdc=0xec0104fd, type=0x7) returned 0x1e0507b9
[0222.761] GetCurrentObject (hdc=0xec0104fd, type=0x6) returned 0x8a01c2
[0222.761] SaveDC (hdc=0xec0104fd) returned 1
[0222.761] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a04053e
[0222.761] GetClipRgn (hdc=0xec0104fd, hrgn=0x6a04053e) returned 0
[0222.761] SelectClipRgn (hdc=0xec0104fd, hrgn=0x5f04051e) returned 2
[0222.761] DeleteObject (ho=0x6a04053e) returned 1
[0222.761] DeleteObject (ho=0x5f04051e) returned 1
[0222.761] OffsetViewportOrgEx (in: hdc=0xec0104fd, x=0, y=0, lppt=0x23672dc | out: lppt=0x23672dc) returned 1
[0222.761] IsAppThemed () returned 0x1
[0222.761] GetThemeAppProperties () returned 0x3
[0222.761] GetThemeAppProperties () returned 0x3
[0222.761] DrawThemeBackground () returned 0x0
[0222.762] RestoreDC (hdc=0xec0104fd, nSavedDC=-1) returned 1
[0222.762] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec0104fd) returned 0x0
[0222.762] GdipCreateRegion (region=0x53e644) returned 0x0
[0222.762] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0222.762] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0222.762] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0222.762] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0222.762] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0222.762] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0222.762] LocalFree (hMem=0x89ec80) returned 0x0
[0222.762] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0222.762] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0222.762] LocalFree (hMem=0x89eee8) returned 0x0
[0222.762] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0222.762] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0222.762] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0222.762] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0222.762] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0222.762] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0222.762] GetCurrentObject (hdc=0xec0104fd, type=0x1) returned 0xb00017
[0222.762] GetCurrentObject (hdc=0xec0104fd, type=0x2) returned 0x900010
[0222.762] GetCurrentObject (hdc=0xec0104fd, type=0x7) returned 0x1e0507b9
[0222.763] GetCurrentObject (hdc=0xec0104fd, type=0x6) returned 0x8a01c2
[0222.763] SaveDC (hdc=0xec0104fd) returned 1
[0222.763] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6004051e
[0222.763] GetClipRgn (hdc=0xec0104fd, hrgn=0x6004051e) returned 0
[0222.763] SelectClipRgn (hdc=0xec0104fd, hrgn=0x6b04053e) returned 2
[0222.763] DeleteObject (ho=0x6004051e) returned 1
[0222.763] DeleteObject (ho=0x6b04053e) returned 1
[0222.763] OffsetViewportOrgEx (in: hdc=0xec0104fd, x=0, y=0, lppt=0x23675b0 | out: lppt=0x23675b0) returned 1
[0222.763] IsAppThemed () returned 0x1
[0222.763] GetThemeAppProperties () returned 0x3
[0222.763] GetThemeAppProperties () returned 0x3
[0222.763] GetThemeBackgroundContentRect () returned 0x0
[0222.763] RestoreDC (hdc=0xec0104fd, nSavedDC=-1) returned 1
[0222.763] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec0104fd) returned 0x0
[0222.763] IsAppThemed () returned 0x1
[0222.763] GetThemeAppProperties () returned 0x3
[0222.763] GetThemeAppProperties () returned 0x3
[0222.763] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0222.763] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0222.763] GetCurrentObject (hdc=0xec0104fd, type=0x1) returned 0xb00017
[0222.763] GetCurrentObject (hdc=0xec0104fd, type=0x2) returned 0x900010
[0222.763] GetCurrentObject (hdc=0xec0104fd, type=0x7) returned 0x1e0507b9
[0222.764] GetCurrentObject (hdc=0xec0104fd, type=0x6) returned 0x8a01c2
[0222.764] SaveDC (hdc=0xec0104fd) returned 1
[0222.764] GetTextAlign (hdc=0xec0104fd) returned 0x0
[0222.764] GetTextColor (hdc=0xec0104fd) returned 0x0
[0222.764] GetCurrentObject (hdc=0xec0104fd, type=0x6) returned 0x8a01c2
[0222.764] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0222.764] SelectObject (hdc=0xec0104fd, h=0x450a0799) returned 0x8a01c2
[0222.764] GetBkMode (hdc=0xec0104fd) returned 2
[0222.764] SetBkMode (hdc=0xec0104fd, mode=1) returned 2
[0222.764] DrawTextExW (in: hdc=0xec0104fd, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2367950 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0222.764] DrawTextExW (in: hdc=0xec0104fd, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2367950 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0222.765] RestoreDC (hdc=0xec0104fd, nSavedDC=-1) returned 1
[0222.765] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec0104fd) returned 0x0
[0222.765] GetFocus () returned 0x202c6
[0222.765] IsAppThemed () returned 0x1
[0222.765] GetThemeAppProperties () returned 0x3
[0222.765] GetThemeAppProperties () returned 0x3
[0222.765] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0222.765] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xec0104fd, x1=0, y1=0, rop=0xcc0020) returned 1
[0222.766] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec0104fd) returned 0x0
[0222.766] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0222.766] SelectObject (hdc=0xec0104fd, h=0x85000f) returned 0x1e0507b9
[0222.766] DeleteDC (hdc=0xec0104fd) returned 1
[0222.766] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0222.766] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0222.766] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0222.766] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0222.766] WaitMessage () returned 1
[0222.850] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0222.850] IsWindowUnicode (hWnd=0x202c6) returned 1
[0222.850] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0222.850] TranslateMessage (lpMsg=0x53eef8) returned 0
[0222.850] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0222.850] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0222.850] IsWindowUnicode (hWnd=0x202c6) returned 1
[0222.850] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0222.850] TranslateMessage (lpMsg=0x53eef8) returned 0
[0222.850] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0222.850] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x1c003e) returned 0x0
[0222.850] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0222.850] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0222.850] WaitMessage () returned 1
[0223.030] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0223.030] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a4022e) returned 0x1
[0223.030] IsWindowUnicode (hWnd=0x202c6) returned 1
[0223.030] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0223.030] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a4022e) returned 0x1
[0223.030] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0223.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13701d8) returned 0x0
[0223.030] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0223.031] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0223.031] SetCursor (hCursor=0x10003) returned 0x10003
[0223.031] TranslateMessage (lpMsg=0x53eef8) returned 0
[0223.031] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0223.031] GetKeyState (nVirtKey=1) returned -128
[0223.031] GetKeyState (nVirtKey=2) returned 0
[0223.031] GetKeyState (nVirtKey=4) returned 0
[0223.031] GetKeyState (nVirtKey=5) returned 0
[0223.031] GetKeyState (nVirtKey=6) returned 0
[0223.031] IsWindowVisible (hWnd=0x202c6) returned 1
[0223.031] IsWindowEnabled (hWnd=0x202c6) returned 1
[0223.031] SetFocus (hWnd=0x202c6) returned 0x202c6
[0223.031] GetFocus () returned 0x202c6
[0223.031] GetFocus () returned 0x202c6
[0223.031] GetFocus () returned 0x202c6
[0223.031] GetKeyState (nVirtKey=1) returned -128
[0223.032] GetKeyState (nVirtKey=2) returned 0
[0223.032] GetKeyState (nVirtKey=4) returned 0
[0223.032] GetKeyState (nVirtKey=5) returned 0
[0223.032] GetKeyState (nVirtKey=6) returned 0
[0223.032] GetCapture () returned 0x0
[0223.032] SetCapture (hWnd=0x202c6) returned 0x0
[0223.032] GetKeyState (nVirtKey=1) returned -128
[0223.032] GetKeyState (nVirtKey=2) returned 0
[0223.032] GetKeyState (nVirtKey=4) returned 0
[0223.032] GetKeyState (nVirtKey=5) returned 0
[0223.032] GetKeyState (nVirtKey=6) returned 0
[0223.032] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0223.032] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0223.032] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0223.032] IsWindowUnicode (hWnd=0x202c6) returned 1
[0223.032] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0223.032] TranslateMessage (lpMsg=0x53eef8) returned 0
[0223.032] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0223.032] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2367ad4, cPoints=0x1 | out: lpPoints=0x2367ad4) returned 25690608
[0223.032] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0223.032] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0223.033] UpdateWindow (hWnd=0x202c6) returned 1
[0223.033] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0223.033] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0223.033] CreateCompatibleDC (hdc=0xf0105ee) returned 0xed0104fd
[0223.033] SelectObject (hdc=0xed0104fd, h=0x1e0507b9) returned 0x85000f
[0223.033] GdipCreateFromHDC (hdc=0xed0104fd, graphics=0x53e5f0) returned 0x0
[0223.033] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0223.033] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0223.033] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0223.033] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.033] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0223.033] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0223.034] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0223.034] LocalFree (hMem=0x89eee8) returned 0x0
[0223.034] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.034] GdipCreateRegion (region=0x53e638) returned 0x0
[0223.034] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.034] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0223.034] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0223.034] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc670dbd) returned 0x0
[0223.034] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.034] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0223.034] GetCurrentObject (hdc=0xed0104fd, type=0x1) returned 0xb00017
[0223.034] GetCurrentObject (hdc=0xed0104fd, type=0x2) returned 0x900010
[0223.034] GetCurrentObject (hdc=0xed0104fd, type=0x7) returned 0x1e0507b9
[0223.034] GetCurrentObject (hdc=0xed0104fd, type=0x6) returned 0x8a01c2
[0223.034] SaveDC (hdc=0xed0104fd) returned 1
[0223.034] GetNearestColor (hdc=0xed0104fd, color=0xff) returned 0xff
[0223.034] GetNearestColor (hdc=0xed0104fd, color=0x55) returned 0x55
[0223.034] GetNearestColor (hdc=0xed0104fd, color=0x0) returned 0x0
[0223.034] GetNearestColor (hdc=0xed0104fd, color=0x55) returned 0x55
[0223.034] GetNearestColor (hdc=0xed0104fd, color=0x0) returned 0x0
[0223.035] GetNearestColor (hdc=0xed0104fd, color=0x8080ff) returned 0x8080ff
[0223.035] GetNearestColor (hdc=0xed0104fd, color=0x7373e5) returned 0x7373e5
[0223.035] GetNearestColor (hdc=0xed0104fd, color=0xe5) returned 0xe5
[0223.035] GetNearestColor (hdc=0xed0104fd, color=0x0) returned 0x0
[0223.035] RestoreDC (hdc=0xed0104fd, nSavedDC=-1) returned 1
[0223.035] GdipReleaseDC (graphics=0x5d92c30, hdc=0xed0104fd) returned 0x0
[0223.035] IsAppThemed () returned 0x1
[0223.035] GetThemeAppProperties () returned 0x3
[0223.035] GetThemeAppProperties () returned 0x3
[0223.035] IsAppThemed () returned 0x1
[0223.035] GetThemeAppProperties () returned 0x3
[0223.035] GetThemeAppProperties () returned 0x3
[0223.035] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x23681f0 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0223.035] IsAppThemed () returned 0x1
[0223.035] GetThemeAppProperties () returned 0x3
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] IsAppThemed () returned 0x1
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] IsAppThemed () returned 0x1
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] IsAppThemed () returned 0x1
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] IsThemePartDefined () returned 0x1
[0223.036] IsAppThemed () returned 0x1
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0223.036] IsAppThemed () returned 0x1
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] IsAppThemed () returned 0x1
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] GetThemeAppProperties () returned 0x3
[0223.036] IsThemePartDefined () returned 0x1
[0223.036] GdipCreateRegion (region=0x53e354) returned 0x0
[0223.036] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.036] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0223.036] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.036] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0223.036] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0223.037] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0223.037] LocalFree (hMem=0x89ee08) returned 0x0
[0223.037] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0223.037] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0223.037] LocalFree (hMem=0x89eee8) returned 0x0
[0223.037] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.037] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0223.037] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0223.037] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0223.037] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.037] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0223.037] GetCurrentObject (hdc=0xed0104fd, type=0x1) returned 0xb00017
[0223.037] GetCurrentObject (hdc=0xed0104fd, type=0x2) returned 0x900010
[0223.037] GetCurrentObject (hdc=0xed0104fd, type=0x7) returned 0x1e0507b9
[0223.037] GetCurrentObject (hdc=0xed0104fd, type=0x6) returned 0x8a01c2
[0223.037] SaveDC (hdc=0xed0104fd) returned 1
[0223.037] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c04053e
[0223.037] GetClipRgn (hdc=0xed0104fd, hrgn=0x6c04053e) returned 0
[0223.037] SelectClipRgn (hdc=0xed0104fd, hrgn=0x6404051e) returned 2
[0223.038] DeleteObject (ho=0x6c04053e) returned 1
[0223.038] DeleteObject (ho=0x6404051e) returned 1
[0223.038] OffsetViewportOrgEx (in: hdc=0xed0104fd, x=0, y=0, lppt=0x23688a0 | out: lppt=0x23688a0) returned 1
[0223.038] DrawThemeParentBackground () returned 0x0
[0223.038] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0223.038] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0223.038] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0223.038] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0223.038] GetSystemMetrics (nIndex=42) returned 0
[0223.038] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0223.038] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0223.038] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0223.038] GetCurrentObject (hdc=0xed0104fd, type=0x1) returned 0xb00017
[0223.038] GetCurrentObject (hdc=0xed0104fd, type=0x2) returned 0x900010
[0223.038] GetCurrentObject (hdc=0xed0104fd, type=0x7) returned 0x1e0507b9
[0223.038] GetCurrentObject (hdc=0xed0104fd, type=0x6) returned 0x8a01c2
[0223.038] SaveDC (hdc=0xed0104fd) returned 2
[0223.038] GetNearestColor (hdc=0xed0104fd, color=0xff) returned 0xff
[0223.038] CreateSolidBrush (color=0xff) returned 0x9d10078d
[0223.039] FillRect (hDC=0xed0104fd, lprc=0x53ddb8, hbr=0x9d10078d) returned 1
[0223.039] DeleteObject (ho=0x9d10078d) returned 1
[0223.039] RestoreDC (hdc=0xed0104fd, nSavedDC=-1) returned 1
[0223.039] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0223.039] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0223.039] GetSystemMetrics (nIndex=42) returned 0
[0223.039] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0223.039] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0223.039] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0223.039] GetCurrentObject (hdc=0xed0104fd, type=0x1) returned 0xb00017
[0223.039] GetCurrentObject (hdc=0xed0104fd, type=0x2) returned 0x900010
[0223.039] GetCurrentObject (hdc=0xed0104fd, type=0x7) returned 0x1e0507b9
[0223.039] GetCurrentObject (hdc=0xed0104fd, type=0x6) returned 0x8a01c2
[0223.039] SaveDC (hdc=0xed0104fd) returned 2
[0223.039] GetNearestColor (hdc=0xed0104fd, color=0xff) returned 0xff
[0223.039] CreateSolidBrush (color=0xff) returned 0x9e10078d
[0223.039] FillRect (hDC=0xed0104fd, lprc=0x53dd58, hbr=0x9e10078d) returned 1
[0223.039] DeleteObject (ho=0x9e10078d) returned 1
[0223.039] RestoreDC (hdc=0xed0104fd, nSavedDC=-1) returned 1
[0223.039] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0223.040] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0223.040] GetSystemMetrics (nIndex=42) returned 0
[0223.040] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0223.040] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0223.040] RestoreDC (hdc=0xed0104fd, nSavedDC=-1) returned 1
[0223.040] GdipReleaseDC (graphics=0x5d92c30, hdc=0xed0104fd) returned 0x0
[0223.040] IsAppThemed () returned 0x1
[0223.040] GetThemeAppProperties () returned 0x3
[0223.040] GetThemeAppProperties () returned 0x3
[0223.040] IsAppThemed () returned 0x1
[0223.040] GetThemeAppProperties () returned 0x3
[0223.040] GetThemeAppProperties () returned 0x3
[0223.040] IsThemePartDefined () returned 0x1
[0223.040] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0223.040] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.040] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0223.040] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.040] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0223.040] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0223.040] LocalFree (hMem=0x89eee8) returned 0x0
[0223.040] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0223.041] LocalFree (hMem=0x89ee08) returned 0x0
[0223.041] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.041] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0223.041] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0223.041] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0223.041] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.041] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0223.041] GetCurrentObject (hdc=0xed0104fd, type=0x1) returned 0xb00017
[0223.041] GetCurrentObject (hdc=0xed0104fd, type=0x2) returned 0x900010
[0223.041] GetCurrentObject (hdc=0xed0104fd, type=0x7) returned 0x1e0507b9
[0223.041] GetCurrentObject (hdc=0xed0104fd, type=0x6) returned 0x8a01c2
[0223.041] SaveDC (hdc=0xed0104fd) returned 1
[0223.041] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6504051e
[0223.041] GetClipRgn (hdc=0xed0104fd, hrgn=0x6504051e) returned 0
[0223.041] SelectClipRgn (hdc=0xed0104fd, hrgn=0x6e04053e) returned 2
[0223.041] DeleteObject (ho=0x6504051e) returned 1
[0223.041] DeleteObject (ho=0x6e04053e) returned 1
[0223.041] OffsetViewportOrgEx (in: hdc=0xed0104fd, x=0, y=0, lppt=0x2369104 | out: lppt=0x2369104) returned 1
[0223.041] IsAppThemed () returned 0x1
[0223.041] GetThemeAppProperties () returned 0x3
[0223.041] GetThemeAppProperties () returned 0x3
[0223.041] DrawThemeBackground () returned 0x0
[0223.041] RestoreDC (hdc=0xed0104fd, nSavedDC=-1) returned 1
[0223.042] GdipReleaseDC (graphics=0x5d92c30, hdc=0xed0104fd) returned 0x0
[0223.042] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0223.042] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.042] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0223.042] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.042] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0223.042] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0223.042] LocalFree (hMem=0x89ec80) returned 0x0
[0223.042] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0223.042] LocalFree (hMem=0x89ee08) returned 0x0
[0223.042] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.042] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0223.042] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0223.042] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0223.042] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.042] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0223.042] GetCurrentObject (hdc=0xed0104fd, type=0x1) returned 0xb00017
[0223.042] GetCurrentObject (hdc=0xed0104fd, type=0x2) returned 0x900010
[0223.042] GetCurrentObject (hdc=0xed0104fd, type=0x7) returned 0x1e0507b9
[0223.042] GetCurrentObject (hdc=0xed0104fd, type=0x6) returned 0x8a01c2
[0223.043] SaveDC (hdc=0xed0104fd) returned 1
[0223.043] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f04053e
[0223.043] GetClipRgn (hdc=0xed0104fd, hrgn=0x6f04053e) returned 0
[0223.043] SelectClipRgn (hdc=0xed0104fd, hrgn=0x6604051e) returned 2
[0223.043] DeleteObject (ho=0x6f04053e) returned 1
[0223.043] DeleteObject (ho=0x6604051e) returned 1
[0223.043] OffsetViewportOrgEx (in: hdc=0xed0104fd, x=0, y=0, lppt=0x23693d8 | out: lppt=0x23693d8) returned 1
[0223.043] IsAppThemed () returned 0x1
[0223.043] GetThemeAppProperties () returned 0x3
[0223.043] GetThemeAppProperties () returned 0x3
[0223.043] GetThemeBackgroundContentRect () returned 0x0
[0223.043] RestoreDC (hdc=0xed0104fd, nSavedDC=-1) returned 1
[0223.043] GdipReleaseDC (graphics=0x5d92c30, hdc=0xed0104fd) returned 0x0
[0223.043] IsAppThemed () returned 0x1
[0223.043] GetThemeAppProperties () returned 0x3
[0223.043] GetThemeAppProperties () returned 0x3
[0223.043] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0223.043] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0223.043] GetCurrentObject (hdc=0xed0104fd, type=0x1) returned 0xb00017
[0223.043] GetCurrentObject (hdc=0xed0104fd, type=0x2) returned 0x900010
[0223.044] GetCurrentObject (hdc=0xed0104fd, type=0x7) returned 0x1e0507b9
[0223.044] GetCurrentObject (hdc=0xed0104fd, type=0x6) returned 0x8a01c2
[0223.044] SaveDC (hdc=0xed0104fd) returned 1
[0223.044] GetTextAlign (hdc=0xed0104fd) returned 0x0
[0223.044] GetTextColor (hdc=0xed0104fd) returned 0x0
[0223.044] GetCurrentObject (hdc=0xed0104fd, type=0x6) returned 0x8a01c2
[0223.044] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0223.044] SelectObject (hdc=0xed0104fd, h=0x450a0799) returned 0x8a01c2
[0223.044] GetBkMode (hdc=0xed0104fd) returned 2
[0223.044] SetBkMode (hdc=0xed0104fd, mode=1) returned 2
[0223.044] DrawTextExW (in: hdc=0xed0104fd, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x2369778 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0223.044] DrawTextExW (in: hdc=0xed0104fd, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x2369778 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0223.045] RestoreDC (hdc=0xed0104fd, nSavedDC=-1) returned 1
[0223.045] GdipReleaseDC (graphics=0x5d92c30, hdc=0xed0104fd) returned 0x0
[0223.045] GetFocus () returned 0x202c6
[0223.045] IsAppThemed () returned 0x1
[0223.045] GetThemeAppProperties () returned 0x3
[0223.045] GetThemeAppProperties () returned 0x3
[0223.045] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0223.045] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xed0104fd, x1=0, y1=0, rop=0xcc0020) returned 1
[0223.046] GdipReleaseDC (graphics=0x5d92c30, hdc=0xed0104fd) returned 0x0
[0223.046] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0223.046] SelectObject (hdc=0xed0104fd, h=0x85000f) returned 0x1e0507b9
[0223.046] DeleteDC (hdc=0xed0104fd) returned 1
[0223.046] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0223.046] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0223.046] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2369874, cPoints=0x1 | out: lpPoints=0x2369874) returned 25690608
[0223.046] WindowFromPoint (Point=0x22e) returned 0x202c6
[0223.046] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a4022e) returned 0x1
[0223.046] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0223.046] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0223.047] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.048] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0223.049] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.049] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0223.049] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.050] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0223.050] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0223.050] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e888) returned 0x0
[0223.050] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0223.050] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0223.050] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0223.050] GetSystemMetrics (nIndex=5) returned 1
[0223.050] GetSystemMetrics (nIndex=6) returned 1
[0223.051] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.051] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0223.051] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.051] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0223.101] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.102] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0223.102] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.102] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0223.102] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.102] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0223.102] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.103] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0223.103] GetSystemMetrics (nIndex=5) returned 1
[0223.103] GetSystemMetrics (nIndex=6) returned 1
[0223.103] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.103] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0223.103] GetSystemMetrics (nIndex=5) returned 1
[0223.103] GetSystemMetrics (nIndex=6) returned 1
[0223.103] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.103] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0223.104] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.104] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0223.104] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.104] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0223.104] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.104] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0223.104] GetSystemMetrics (nIndex=59) returned 1460
[0223.104] GetSystemMetrics (nIndex=60) returned 920
[0223.104] GetSystemMetrics (nIndex=34) returned 136
[0223.104] GetSystemMetrics (nIndex=35) returned 39
[0223.104] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.105] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0223.105] GetCurrentThreadId () returned 0x11d0
[0223.105] GetCurrentThreadId () returned 0x11d0
[0223.105] GetCurrentThreadId () returned 0x11d0
[0223.105] GetCurrentThreadId () returned 0x11d0
[0223.105] GetCurrentThreadId () returned 0x11d0
[0223.105] GetCurrentThreadId () returned 0x11d0
[0223.105] GetCurrentThreadId () returned 0x11d0
[0223.105] GetCurrentThreadId () returned 0x11d0
[0223.105] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.105] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0223.105] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0223.105] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0223.105] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.105] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0223.106] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.106] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0223.106] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xc02c0
[0223.107] SetWindowLongW (hWnd=0xc02c0, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0223.107] GetWindowLongW (hWnd=0xc02c0, nIndex=-4) returned 1950089536
[0223.107] SetWindowLongW (hWnd=0xc02c0, nIndex=-4, dwNewLong=79643862) returned 1950089536
[0223.107] GetWindowLongW (hWnd=0xc02c0, nIndex=-4) returned 79643862
[0223.107] GetWindowLongW (hWnd=0xc02c0, nIndex=-16) returned 113311744
[0223.107] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c0, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0223.107] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c0, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0223.108] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c0, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0223.108] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c0, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0223.108] GetClientRect (in: hWnd=0xc02c0, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0223.108] GetWindowRect (in: hWnd=0xc02c0, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0223.109] SetWindowTextW (hWnd=0xc02c0, lpString="WindowsFormsParkingWindow") returned 1
[0223.109] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c0, Msg=0xc, wParam=0x0, lParam=0x23617c0) returned 0x1
[0223.109] GetParent (hWnd=0xc02c0) returned 0x0
[0223.109] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0223.110] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0xc02c0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xc02be
[0223.110] SetWindowLongW (hWnd=0xc02be, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0223.110] GetWindowLongW (hWnd=0xc02be, nIndex=-4) returned 1868147648
[0223.110] SetWindowLongW (hWnd=0xc02be, nIndex=-4, dwNewLong=79644742) returned 1868147648
[0223.110] GetWindowLongW (hWnd=0xc02be, nIndex=-4) returned 79644742
[0223.110] GetWindowLongW (hWnd=0xc02be, nIndex=-16) returned 1174405133
[0223.110] GetWindowLongW (hWnd=0xc02be, nIndex=-12) returned 0
[0223.110] SetWindowLongW (hWnd=0xc02be, nIndex=-12, dwNewLong=787134) returned 0
[0223.110] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0223.111] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0223.111] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0223.112] GetClientRect (in: hWnd=0xc02be, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0223.112] GetWindowRect (in: hWnd=0xc02be, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0223.112] GetParent (hWnd=0xc02be) returned 0xc02c0
[0223.112] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02c0, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0223.112] SetWindowTextW (hWnd=0xc02be, lpString="Enter password: ") returned 1
[0223.112] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0223.112] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0223.113] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0223.113] GetClientRect (in: hWnd=0xc02be, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0223.113] GetWindowRect (in: hWnd=0xc02be, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0223.113] GetParent (hWnd=0xc02be) returned 0xc02c0
[0223.113] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02c0, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0223.113] SendMessageW (hWnd=0xc02be, Msg=0x2210, wParam=0x2be0001, lParam=0xc02be) returned 0x0
[0223.113] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x2210, wParam=0x2be0001, lParam=0xc02be) returned 0x0
[0223.113] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0223.113] GetParent (hWnd=0xc02be) returned 0xc02c0
[0223.113] GdipCreateFromHWND (hwnd=0xc02be, graphics=0x53e994) returned 0x0
[0223.113] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0223.113] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0223.114] GetProcessWindowStation () returned 0x13c
[0223.114] GetCapture () returned 0x202c6
[0223.114] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0223.114] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0223.114] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0223.114] ReleaseCapture () returned 1
[0223.114] GetActiveWindow () returned 0x70036
[0223.114] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0223.114] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.114] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0223.114] GetCursorPos (in: lpPoint=0x2376624 | out: lpPoint=0x2376624*(x=558, y=420)) returned 1
[0223.115] MonitorFromPoint (pt=0x22e, dwFlags=0x1a4) returned 0x10001
[0223.115] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0223.115] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xf00104fd
[0223.115] GetDeviceCaps (hdc=0xf00104fd, index=12) returned 32
[0223.115] GetDeviceCaps (hdc=0xf00104fd, index=14) returned 1
[0223.115] DeleteDC (hdc=0xf00104fd) returned 1
[0223.115] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0223.115] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0223.115] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1802c8
[0223.116] SetWindowLongW (hWnd=0x1802c8, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0223.116] GetWindowLongW (hWnd=0x1802c8, nIndex=-4) returned 1950089536
[0223.116] SetWindowLongW (hWnd=0x1802c8, nIndex=-4, dwNewLong=79644142) returned 1950089536
[0223.116] GetWindowLongW (hWnd=0x1802c8, nIndex=-4) returned 79644142
[0223.116] GetWindowLongW (hWnd=0x1802c8, nIndex=-16) returned 113770496
[0223.116] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0223.117] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0223.118] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0223.118] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0223.118] GetWindowRect (in: hWnd=0x1802c8, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0223.118] SetWindowTextW (hWnd=0x1802c8, lpString="Ransomware") returned 1
[0223.118] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xc, wParam=0x0, lParam=0x236993c) returned 0x1
[0223.119] GetStartupInfoW (in: lpStartupInfo=0x2376960 | out: lpStartupInfo=0x2376960*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0223.121] GetParent (hWnd=0x1802c8) returned 0x0
[0223.121] SetWindowLongW (hWnd=0x1802c8, nIndex=-8, dwNewLong=0) returned 0
[0223.122] SendMessageW (hWnd=0x1802c8, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0223.122] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0223.122] SendMessageW (hWnd=0x1802c8, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0223.122] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0223.122] GetSystemMenu (hWnd=0x1802c8, bRevert=0) returned 0x270293
[0223.123] GetWindowPlacement (in: hWnd=0x1802c8, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0223.123] EnableMenuItem (hMenu=0x270293, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0223.123] EnableMenuItem (hMenu=0x270293, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0223.123] EnableMenuItem (hMenu=0x270293, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0223.123] EnableMenuItem (hMenu=0x270293, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0223.123] EnableMenuItem (hMenu=0x270293, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0223.123] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0223.123] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0223.123] GetWindowRect (in: hWnd=0x1802c8, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0223.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.124] GetWindowLongW (hWnd=0x1802c8, nIndex=-16) returned 113770496
[0223.124] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.124] GetSystemMetrics (nIndex=42) returned 0
[0223.124] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0223.124] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.124] GetSystemMetrics (nIndex=42) returned 0
[0223.124] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0223.124] GetCursorPos (in: lpPoint=0x2376ad4 | out: lpPoint=0x2376ad4*(x=558, y=420)) returned 1
[0223.124] MonitorFromPoint (pt=0x22e, dwFlags=0x1a4) returned 0x10001
[0223.124] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0223.124] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xf40104fd
[0223.124] GetDeviceCaps (hdc=0xf40104fd, index=12) returned 32
[0223.124] GetDeviceCaps (hdc=0xf40104fd, index=14) returned 1
[0223.124] DeleteDC (hdc=0xf40104fd) returned 1
[0223.125] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0223.125] GetWindowLongW (hWnd=0x1802c8, nIndex=-16) returned 113770496
[0223.125] GetWindowLongW (hWnd=0x1802c8, nIndex=-20) returned 327937
[0223.125] SetWindowLongW (hWnd=0x1802c8, nIndex=-16, dwNewLong=46661632) returned 113770496
[0223.125] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0223.125] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0223.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0223.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0223.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0223.126] SetWindowLongW (hWnd=0x1802c8, nIndex=-20, dwNewLong=327681) returned 327937
[0223.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0223.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0223.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0223.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0223.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0223.128] SetWindowPos (hWnd=0x1802c8, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0223.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0223.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0223.128] GetWindowPlacement (in: hWnd=0x1802c8, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0223.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0223.128] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0223.128] GetWindowRect (in: hWnd=0x1802c8, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0223.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0223.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0223.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0223.129] RedrawWindow (hWnd=0x1802c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0223.130] GetSystemMenu (hWnd=0x1802c8, bRevert=0) returned 0x270293
[0223.130] GetWindowPlacement (in: hWnd=0x1802c8, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0223.130] EnableMenuItem (hMenu=0x270293, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0223.130] EnableMenuItem (hMenu=0x270293, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0223.130] EnableMenuItem (hMenu=0x270293, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0223.130] EnableMenuItem (hMenu=0x270293, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0223.130] EnableMenuItem (hMenu=0x270293, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0223.130] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0223.130] GetWindowLongW (hWnd=0x1802c8, nIndex=-8) returned 0
[0223.130] SetWindowLongW (hWnd=0x1802c8, nIndex=-8, dwNewLong=458806) returned 0
[0223.131] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0223.131] GetProcessWindowStation () returned 0x13c
[0223.131] GetCurrentThreadId () returned 0x11d0
[0223.132] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf46de, lParam=0x0) returned 1
[0223.132] IsWindowVisible (hWnd=0x1802c8) returned 0
[0223.132] IsWindowVisible (hWnd=0x70036) returned 1
[0223.132] IsWindowEnabled (hWnd=0x70036) returned 1
[0223.132] IsWindowVisible (hWnd=0x602b6) returned 0
[0223.132] IsWindowVisible (hWnd=0x901f8) returned 0
[0223.132] IsWindowVisible (hWnd=0x202d0) returned 0
[0223.132] IsWindowVisible (hWnd=0x202d4) returned 0
[0223.132] GetActiveWindow () returned 0x70036
[0223.132] GetFocus () returned 0x202c6
[0223.132] IsWindow (hWnd=0x70036) returned 1
[0223.132] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0223.132] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0223.133] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0223.133] GetWindowLongW (hWnd=0x1802c8, nIndex=-8) returned 458806
[0223.133] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0223.133] GetCurrentThreadId () returned 0x11d0
[0223.133] GetWindowLongW (hWnd=0x1802c8, nIndex=-8) returned 458806
[0223.133] IsWindowEnabled (hWnd=0x70036) returned 0
[0223.133] IsWindowEnabled (hWnd=0x1802c8) returned 1
[0223.133] ShowWindow (hWnd=0x1802c8, nCmdShow=5) returned 0
[0223.133] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0223.133] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0223.134] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.134] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0223.134] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x1802c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1702d6
[0223.134] SetWindowLongW (hWnd=0x1702d6, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0223.134] GetWindowLongW (hWnd=0x1702d6, nIndex=-4) returned 1868026976
[0223.135] SetWindowLongW (hWnd=0x1702d6, nIndex=-4, dwNewLong=79644462) returned 1868026976
[0223.135] GetWindowLongW (hWnd=0x1702d6, nIndex=-4) returned 79644462
[0223.135] GetWindowLongW (hWnd=0x1702d6, nIndex=-16) returned 1174470848
[0223.135] GetWindowLongW (hWnd=0x1702d6, nIndex=-12) returned 0
[0223.135] SetWindowLongW (hWnd=0x1702d6, nIndex=-12, dwNewLong=1508054) returned 0
[0223.135] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0223.136] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0223.136] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0223.137] SendMessageW (hWnd=0x1702d6, Msg=0x2055, wParam=0x1702d6, lParam=0x3) returned 0x2
[0223.137] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0223.137] GetWindow (hWnd=0x1702d6, uCmd=0x3) returned 0x0
[0223.137] GetClientRect (in: hWnd=0x1702d6, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0223.137] GetWindowRect (in: hWnd=0x1702d6, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0223.137] GetParent (hWnd=0x1702d6) returned 0x1802c8
[0223.137] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1802c8, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0223.137] SendMessageW (hWnd=0x1702d6, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0223.137] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0223.138] SendMessageW (hWnd=0x1702d6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0223.138] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0223.138] GetSystemMetrics (nIndex=5) returned 1
[0223.138] GetSystemMetrics (nIndex=6) returned 1
[0223.138] SendMessageW (hWnd=0x1702d6, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0223.138] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0223.138] SendMessageW (hWnd=0x1702d6, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0223.138] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0223.138] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0223.139] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0223.139] GetClientRect (in: hWnd=0x1702d6, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0223.139] GetWindowRect (in: hWnd=0x1702d6, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0223.139] GetParent (hWnd=0x1702d6) returned 0x1802c8
[0223.139] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1802c8, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0223.139] SendMessageW (hWnd=0x1702d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1702d6) returned 0x0
[0223.139] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1702d6) returned 0x0
[0223.139] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0223.139] GetParent (hWnd=0x1702d6) returned 0x1802c8
[0223.139] GetParent (hWnd=0xc02be) returned 0xc02c0
[0223.139] SetParent (hWndChild=0xc02be, hWndNewParent=0x1802c8) returned 0xc02c0
[0223.139] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0223.140] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0223.140] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0223.140] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0223.140] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0223.140] GetClientRect (in: hWnd=0xc02be, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0223.140] GetWindowRect (in: hWnd=0xc02be, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0223.140] GetParent (hWnd=0xc02be) returned 0x1802c8
[0223.140] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1802c8, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0223.140] GetClientRect (in: hWnd=0xc02be, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0223.140] GetWindowRect (in: hWnd=0xc02be, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0223.140] GetParent (hWnd=0xc02be) returned 0x1802c8
[0223.140] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1802c8, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0223.140] GetParent (hWnd=0xc02be) returned 0x1802c8
[0223.141] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0223.141] GetWindow (hWnd=0xc02be, uCmd=0x3) returned 0x0
[0223.141] SetWindowPos (hWnd=0xc02be, hWndInsertAfter=0x1702d6, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0223.141] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0223.141] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0223.141] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0223.141] GetClientRect (in: hWnd=0xc02be, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0223.141] GetWindowRect (in: hWnd=0xc02be, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0223.141] GetParent (hWnd=0xc02be) returned 0x1802c8
[0223.142] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1802c8, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0223.142] GetParent (hWnd=0xc02be) returned 0x1802c8
[0223.142] GetWindow (hWnd=0xc02be, uCmd=0x3) returned 0x1702d6
[0223.142] GetWindowThreadProcessId (in: hWnd=0xc02be, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0223.142] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0223.142] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.142] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0223.142] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x1802c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1702d2
[0223.143] SetWindowLongW (hWnd=0x1702d2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0223.143] GetWindowLongW (hWnd=0x1702d2, nIndex=-4) returned 1868032000
[0223.143] SetWindowLongW (hWnd=0x1702d2, nIndex=-4, dwNewLong=79643582) returned 1868032000
[0223.143] GetWindowLongW (hWnd=0x1702d2, nIndex=-4) returned 79643582
[0223.143] GetWindowLongW (hWnd=0x1702d2, nIndex=-16) returned 1174470667
[0223.143] GetWindowLongW (hWnd=0x1702d2, nIndex=-12) returned 0
[0223.143] SetWindowLongW (hWnd=0x1702d2, nIndex=-12, dwNewLong=1508050) returned 0
[0223.143] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0223.144] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0223.144] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0223.145] SendMessageW (hWnd=0x1702d2, Msg=0x2055, wParam=0x1702d2, lParam=0x3) returned 0x2
[0223.145] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0223.145] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0223.145] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0223.145] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0223.145] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0223.145] RedrawWindow (hWnd=0x1702d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0223.145] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0223.145] RedrawWindow (hWnd=0xc02be, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0223.145] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0223.146] RedrawWindow (hWnd=0x1702d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0223.146] RedrawWindow (hWnd=0x1802c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0223.146] GetWindow (hWnd=0x1702d2, uCmd=0x3) returned 0xc02be
[0223.146] GetClientRect (in: hWnd=0x1702d2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0223.146] GetWindowRect (in: hWnd=0x1702d2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0223.146] GetParent (hWnd=0x1702d2) returned 0x1802c8
[0223.146] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1802c8, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0223.146] SetWindowTextW (hWnd=0x1702d2, lpString="OK") returned 1
[0223.147] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0xc, wParam=0x0, lParam=0x236ddfc) returned 0x1
[0223.148] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0223.148] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0223.148] GetClientRect (in: hWnd=0x1702d2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0223.148] GetWindowRect (in: hWnd=0x1702d2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0223.148] GetParent (hWnd=0x1702d2) returned 0x1802c8
[0223.148] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1802c8, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0223.148] SendMessageW (hWnd=0x1702d2, Msg=0x2210, wParam=0x2d20001, lParam=0x1702d2) returned 0x0
[0223.148] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x2210, wParam=0x2d20001, lParam=0x1702d2) returned 0x0
[0223.148] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0223.148] GetParent (hWnd=0x1702d2) returned 0x1802c8
[0223.148] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0223.149] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.149] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0223.149] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x1802c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1b013e
[0223.149] SetWindowLongW (hWnd=0x1b013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0223.149] GetWindowLongW (hWnd=0x1b013e, nIndex=-4) returned 1868032000
[0223.150] SetWindowLongW (hWnd=0x1b013e, nIndex=-4, dwNewLong=79644182) returned 1868032000
[0223.150] GetWindowLongW (hWnd=0x1b013e, nIndex=-4) returned 79644182
[0223.150] GetWindowLongW (hWnd=0x1b013e, nIndex=-16) returned 1174470667
[0223.150] GetWindowLongW (hWnd=0x1b013e, nIndex=-12) returned 0
[0223.150] SetWindowLongW (hWnd=0x1b013e, nIndex=-12, dwNewLong=1769790) returned 0
[0223.150] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0223.150] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0223.150] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0223.151] SendMessageW (hWnd=0x1b013e, Msg=0x2055, wParam=0x1b013e, lParam=0x3) returned 0x2
[0223.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0223.151] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0223.151] GetWindow (hWnd=0x1b013e, uCmd=0x3) returned 0x1702d2
[0223.151] GetClientRect (in: hWnd=0x1b013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0223.151] GetWindowRect (in: hWnd=0x1b013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0223.151] GetParent (hWnd=0x1b013e) returned 0x1802c8
[0223.151] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1802c8, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0223.152] SetWindowTextW (hWnd=0x1b013e, lpString="Cancel") returned 1
[0223.152] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0xc, wParam=0x0, lParam=0x23716bc) returned 0x1
[0223.152] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0223.152] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0223.152] GetClientRect (in: hWnd=0x1b013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0223.152] GetWindowRect (in: hWnd=0x1b013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0223.152] GetParent (hWnd=0x1b013e) returned 0x1802c8
[0223.152] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1802c8, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0223.152] SendMessageW (hWnd=0x1b013e, Msg=0x2210, wParam=0x13e0001, lParam=0x1b013e) returned 0x0
[0223.152] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0x2210, wParam=0x13e0001, lParam=0x1b013e) returned 0x0
[0223.153] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0223.153] GetParent (hWnd=0x1b013e) returned 0x1802c8
[0223.153] GetDC (hWnd=0x0) returned 0x10105d6
[0223.153] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e320) returned 0x0
[0223.153] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0223.153] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0223.153] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0223.153] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0223.154] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0223.154] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0223.154] GetWindowLongW (hWnd=0x1802c8, nIndex=-8) returned 458806
[0223.154] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0223.154] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0223.154] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xfb0104fd
[0223.154] GetDeviceCaps (hdc=0xfb0104fd, index=12) returned 32
[0223.154] GetDeviceCaps (hdc=0xfb0104fd, index=14) returned 1
[0223.154] DeleteDC (hdc=0xfb0104fd) returned 1
[0223.154] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0223.154] GetWindowThreadProcessId (in: hWnd=0x1802c8, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0223.154] GetCurrentThreadId () returned 0x11d0
[0223.155] PostMessageW (hWnd=0x1802c8, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0223.155] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.155] GetSystemMetrics (nIndex=42) returned 0
[0223.155] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0223.155] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0223.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0223.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0223.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0223.164] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1802c8) returned 0x1
[0223.165] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0223.166] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0223.166] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0223.166] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0223.168] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0223.168] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0223.168] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0223.169] GetFocus () returned 0x202c6
[0223.169] IsChild (hWndParent=0x1802c8, hWnd=0x202c6) returned 0
[0223.169] GetFocus () returned 0x202c6
[0223.169] SetFocus (hWnd=0x1702d6) returned 0x202c6
[0223.170] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1702d6, lParam=0x0) returned 0x0
[0223.170] GetCapture () returned 0x0
[0223.170] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0223.171] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0223.172] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0223.174] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.174] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0223.174] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.174] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0223.174] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.174] GetParent (hWnd=0x1802c8) returned 0x0
[0223.174] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0223.175] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.175] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0223.176] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0223.176] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0223.176] GetSysColorBrush (nIndex=5) returned 0x100079
[0223.176] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.176] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0223.181] SendMessageW (hWnd=0x1702d6, Msg=0x2111, wParam=0x10002d6, lParam=0x1702d6) returned 0x0
[0223.181] SendMessageW (hWnd=0x1702d6, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0223.181] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0223.181] GetKeyState (nVirtKey=1) returned 0
[0223.181] GetKeyState (nVirtKey=2) returned 0
[0223.181] GetKeyState (nVirtKey=4) returned 0
[0223.181] GetKeyState (nVirtKey=5) returned 0
[0223.181] GetKeyState (nVirtKey=6) returned 0
[0223.181] GetWindowTextLengthW (hWnd=0x1702d6) returned 0
[0223.181] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0223.181] SendMessageW (hWnd=0x1702d6, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0223.181] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0223.181] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0223.181] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0223.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0223.186] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0223.186] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0223.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0223.187] GetWindowPlacement (in: hWnd=0x1802c8, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0223.187] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0223.187] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.187] GetSystemMetrics (nIndex=42) returned 0
[0223.187] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0223.187] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0223.187] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017
[0223.187] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010
[0223.187] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0xd0507c5
[0223.187] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2
[0223.187] SaveDC (hdc=0x60100ce) returned 1
[0223.188] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0
[0223.188] CreateSolidBrush (color=0xf0f0f0) returned 0x9f10078d
[0223.188] FillRect (hDC=0x60100ce, lprc=0x53e250, hbr=0x9f10078d) returned 1
[0223.188] DeleteObject (ho=0x9f10078d) returned 1
[0223.188] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1
[0223.188] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0223.188] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0223.188] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0223.189] GetWindowPlacement (in: hWnd=0x1802c8, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0223.189] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0223.189] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.189] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.189] GetSystemMetrics (nIndex=42) returned 0
[0223.189] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.189] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0223.189] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0223.189] GetCurrentObject (hdc=0x110104fd, type=0x1) returned 0xb00017
[0223.189] GetCurrentObject (hdc=0x110104fd, type=0x2) returned 0x900010
[0223.189] GetCurrentObject (hdc=0x110104fd, type=0x7) returned 0xffffffff910507b6
[0223.189] GetCurrentObject (hdc=0x110104fd, type=0x6) returned 0x8a01c2
[0223.190] SaveDC (hdc=0x110104fd) returned 1
[0223.190] GetNearestColor (hdc=0x110104fd, color=0xf0f0f0) returned 0xf0f0f0
[0223.190] CreateSolidBrush (color=0xf0f0f0) returned 0xa010078d
[0223.190] FillRect (hDC=0x110104fd, lprc=0x53dc18, hbr=0xa010078d) returned 1
[0223.190] DeleteObject (ho=0xa010078d) returned 1
[0223.190] RestoreDC (hdc=0x110104fd, nSavedDC=-1) returned 1
[0223.190] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.190] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.190] GetSystemMetrics (nIndex=42) returned 0
[0223.190] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.190] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0223.190] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0223.190] GetCurrentObject (hdc=0x110104fd, type=0x1) returned 0xb00017
[0223.190] GetCurrentObject (hdc=0x110104fd, type=0x2) returned 0x900010
[0223.190] GetCurrentObject (hdc=0x110104fd, type=0x7) returned 0xffffffff910507b6
[0223.190] GetCurrentObject (hdc=0x110104fd, type=0x6) returned 0x8a01c2
[0223.190] SaveDC (hdc=0x110104fd) returned 1
[0223.190] GetNearestColor (hdc=0x110104fd, color=0xf0f0f0) returned 0xf0f0f0
[0223.190] CreateSolidBrush (color=0xf0f0f0) returned 0xa110078d
[0223.190] FillRect (hDC=0x110104fd, lprc=0x53dbb8, hbr=0xa110078d) returned 1
[0223.191] DeleteObject (ho=0xa110078d) returned 1
[0223.191] RestoreDC (hdc=0x110104fd, nSavedDC=-1) returned 1
[0223.191] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.191] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.191] GetSystemMetrics (nIndex=42) returned 0
[0223.191] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.191] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0223.192] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0223.192] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0223.192] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0223.192] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0223.192] GetStockObject (i=5) returned 0x900015
[0223.192] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0223.192] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0223.192] GetStockObject (i=5) returned 0x900015
[0223.193] GetWindowPlacement (in: hWnd=0x1802c8, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0223.193] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0223.193] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0223.193] GetWindowRect (in: hWnd=0x1802c8, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0223.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0223.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0223.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0223.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0223.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0223.204] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0223.204] GetWindowRect (in: hWnd=0x1802c8, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0223.204] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.204] IsWindowUnicode (hWnd=0x1802c8) returned 1
[0223.204] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.204] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.204] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0223.204] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.204] IsWindowUnicode (hWnd=0x1802c8) returned 1
[0223.204] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.204] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.204] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.204] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.205] MapWindowPoints (in: hWndFrom=0xc02be, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0223.205] IsWindowUnicode (hWnd=0xc02be) returned 1
[0223.205] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.205] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.205] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.205] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.205] IsWindowUnicode (hWnd=0x202c6) returned 1
[0223.205] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.205] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.205] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.205] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0223.205] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0223.206] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.206] MapWindowPoints (in: hWndFrom=0xc02be, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0223.206] IsWindowUnicode (hWnd=0xc02be) returned 1
[0223.206] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.206] MapWindowPoints (in: hWndFrom=0xc02be, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0223.206] SetCursor (hCursor=0x10003) returned 0x10003
[0223.206] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.206] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.206] _TrackMouseEvent (in: lpEventTrack=0x2378050 | out: lpEventTrack=0x2378050) returned 1
[0223.206] SendMessageW (hWnd=0xc02be, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0223.206] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0223.206] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x200, wParam=0x0, lParam=0x1d0005) returned 0x0
[0223.206] GetKeyState (nVirtKey=1) returned 0
[0223.206] GetKeyState (nVirtKey=2) returned 0
[0223.206] GetKeyState (nVirtKey=4) returned 0
[0223.206] GetKeyState (nVirtKey=5) returned 0
[0223.206] GetKeyState (nVirtKey=6) returned 0
[0223.206] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.207] IsWindowUnicode (hWnd=0x1802c8) returned 1
[0223.207] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.207] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.207] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.207] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.208] IsWindowUnicode (hWnd=0x1802c8) returned 1
[0223.208] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.208] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.208] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.208] BeginPaint (in: hWnd=0x1802c8, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x8b010786
[0223.208] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0223.208] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.208] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.208] GetSystemMetrics (nIndex=42) returned 0
[0223.208] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.208] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0223.208] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0223.208] EndPaint (hWnd=0x1802c8, lpPaint=0x53e30c) returned 1
[0223.208] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.211] IsWindowUnicode (hWnd=0x1702d6) returned 1
[0223.211] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.211] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.211] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0223.211] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0223.212] SetTextColor (hdc=0x120104fd, color=0x0) returned 0x0
[0223.212] SetBkColor (hdc=0x120104fd, color=0xffffff) returned 0xffffff
[0223.213] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.213] IsWindowUnicode (hWnd=0xc02be) returned 1
[0223.213] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.213] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.213] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.213] BeginPaint (in: hWnd=0xc02be, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0xf0105ee
[0223.213] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0223.213] CreateCompatibleDC (hdc=0xf0105ee) returned 0x9d0107a2
[0223.213] SelectObject (hdc=0x9d0107a2, h=0x1e0507b9) returned 0x85000f
[0223.213] GdipCreateFromHDC (hdc=0x9d0107a2, graphics=0x53e30c) returned 0x0
[0223.213] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0223.213] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0223.213] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0223.214] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.214] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0223.214] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0223.214] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0223.214] LocalFree (hMem=0x89eac0) returned 0x0
[0223.214] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.214] GdipCreateRegion (region=0x53e354) returned 0x0
[0223.214] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.214] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0223.214] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0223.214] GetWindowTextLengthW (hWnd=0xc02be) returned 16
[0223.214] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0223.214] GetSystemMetrics (nIndex=42) returned 0
[0223.214] GetWindowTextW (in: hWnd=0xc02be, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0223.214] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0223.214] GetClientRect (in: hWnd=0xc02be, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0223.214] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0223.214] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0223.214] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0223.214] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.214] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0223.214] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0223.214] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0223.215] LocalFree (hMem=0x89ee08) returned 0x0
[0223.215] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0223.215] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0223.215] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0223.215] LocalFree (hMem=0x89ec80) returned 0x0
[0223.215] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.215] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0223.215] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0223.215] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0223.215] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0223.215] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0223.215] GetCurrentObject (hdc=0x9d0107a2, type=0x1) returned 0xb00017
[0223.215] GetCurrentObject (hdc=0x9d0107a2, type=0x2) returned 0x900010
[0223.215] GetCurrentObject (hdc=0x9d0107a2, type=0x7) returned 0x1e0507b9
[0223.215] GetCurrentObject (hdc=0x9d0107a2, type=0x6) returned 0x8a01c2
[0223.215] SaveDC (hdc=0x9d0107a2) returned 1
[0223.215] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x93040798
[0223.215] GetClipRgn (hdc=0x9d0107a2, hrgn=0x93040798) returned 0
[0223.215] SelectClipRgn (hdc=0x9d0107a2, hrgn=0x6b04051e) returned 2
[0223.215] DeleteObject (ho=0x93040798) returned 1
[0223.216] DeleteObject (ho=0x6b04051e) returned 1
[0223.216] OffsetViewportOrgEx (in: hdc=0x9d0107a2, x=0, y=0, lppt=0x2378534 | out: lppt=0x2378534) returned 1
[0223.216] GetNearestColor (hdc=0x9d0107a2, color=0xf0f0f0) returned 0xf0f0f0
[0223.216] CreateSolidBrush (color=0xf0f0f0) returned 0xa210078d
[0223.216] FillRect (hDC=0x9d0107a2, lprc=0x53e1f4, hbr=0xa210078d) returned 1
[0223.216] DeleteObject (ho=0xa210078d) returned 1
[0223.216] RestoreDC (hdc=0x9d0107a2, nSavedDC=-1) returned 1
[0223.216] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9d0107a2) returned 0x0
[0223.216] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc610dbd) returned 0x0
[0223.216] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.216] GetWindowTextLengthW (hWnd=0xc02be) returned 16
[0223.216] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0223.216] GetSystemMetrics (nIndex=42) returned 0
[0223.216] GetWindowTextW (in: hWnd=0xc02be, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0223.216] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0223.216] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0223.216] GetCurrentObject (hdc=0x9d0107a2, type=0x1) returned 0xb00017
[0223.216] GetCurrentObject (hdc=0x9d0107a2, type=0x2) returned 0x900010
[0223.216] GetCurrentObject (hdc=0x9d0107a2, type=0x7) returned 0x1e0507b9
[0223.216] GetCurrentObject (hdc=0x9d0107a2, type=0x6) returned 0x8a01c2
[0223.216] SaveDC (hdc=0x9d0107a2) returned 1
[0223.217] GetNearestColor (hdc=0x9d0107a2, color=0x0) returned 0x0
[0223.217] RestoreDC (hdc=0x9d0107a2, nSavedDC=-1) returned 1
[0223.217] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9d0107a2) returned 0x0
[0223.217] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0223.217] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0223.217] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0223.217] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x237883c | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0223.218] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0223.218] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0223.218] GetCurrentObject (hdc=0x9d0107a2, type=0x1) returned 0xb00017
[0223.218] GetCurrentObject (hdc=0x9d0107a2, type=0x2) returned 0x900010
[0223.218] GetCurrentObject (hdc=0x9d0107a2, type=0x7) returned 0x1e0507b9
[0223.218] GetCurrentObject (hdc=0x9d0107a2, type=0x6) returned 0x8a01c2
[0223.218] SaveDC (hdc=0x9d0107a2) returned 1
[0223.218] GetTextAlign (hdc=0x9d0107a2) returned 0x0
[0223.218] GetTextColor (hdc=0x9d0107a2) returned 0x0
[0223.218] GetCurrentObject (hdc=0x9d0107a2, type=0x6) returned 0x8a01c2
[0223.218] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0223.218] SelectObject (hdc=0x9d0107a2, h=0x730a066d) returned 0x8a01c2
[0223.218] GetBkMode (hdc=0x9d0107a2) returned 2
[0223.218] SetBkMode (hdc=0x9d0107a2, mode=1) returned 2
[0223.218] DrawTextExW (in: hdc=0x9d0107a2, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x2378a60 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0223.219] RestoreDC (hdc=0x9d0107a2, nSavedDC=-1) returned 1
[0223.219] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9d0107a2) returned 0x0
[0223.219] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0223.219] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=250, cy=70, hdcSrc=0x9d0107a2, x1=0, y1=0, rop=0xcc0020) returned 1
[0223.219] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9d0107a2) returned 0x0
[0223.219] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0223.219] SelectObject (hdc=0x9d0107a2, h=0x85000f) returned 0x1e0507b9
[0223.219] DeleteDC (hdc=0x9d0107a2) returned 1
[0223.219] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0223.219] EndPaint (hWnd=0xc02be, lpPaint=0x53e2f0) returned 1
[0223.219] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.220] IsWindowUnicode (hWnd=0x1702d2) returned 1
[0223.220] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.220] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.220] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.220] BeginPaint (in: hWnd=0x1702d2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0223.220] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0223.220] CreateCompatibleDC (hdc=0x10105d6) returned 0x9f0107a2
[0223.220] SelectObject (hdc=0x9f0107a2, h=0x1e0507b9) returned 0x85000f
[0223.220] GdipCreateFromHDC (hdc=0x9f0107a2, graphics=0x53e300) returned 0x0
[0223.220] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0223.220] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0223.220] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0223.220] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.220] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0223.220] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0223.220] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0223.220] LocalFree (hMem=0x89ec80) returned 0x0
[0223.221] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.221] GdipCreateRegion (region=0x53e348) returned 0x0
[0223.221] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.221] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0223.221] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0223.221] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc5f0dbd) returned 0x0
[0223.221] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.221] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0223.221] GetCurrentObject (hdc=0x9f0107a2, type=0x1) returned 0xb00017
[0223.221] GetCurrentObject (hdc=0x9f0107a2, type=0x2) returned 0x900010
[0223.221] GetCurrentObject (hdc=0x9f0107a2, type=0x7) returned 0x1e0507b9
[0223.221] GetCurrentObject (hdc=0x9f0107a2, type=0x6) returned 0x8a01c2
[0223.221] SaveDC (hdc=0x9f0107a2) returned 1
[0223.221] GetNearestColor (hdc=0x9f0107a2, color=0xf0f0f0) returned 0xf0f0f0
[0223.221] GetNearestColor (hdc=0x9f0107a2, color=0xa0a0a0) returned 0xa0a0a0
[0223.221] GetNearestColor (hdc=0x9f0107a2, color=0x696969) returned 0x696969
[0223.221] GetNearestColor (hdc=0x9f0107a2, color=0xa0a0a0) returned 0xa0a0a0
[0223.221] GetNearestColor (hdc=0x9f0107a2, color=0x0) returned 0x0
[0223.221] GetNearestColor (hdc=0x9f0107a2, color=0xffffff) returned 0xffffff
[0223.221] GetNearestColor (hdc=0x9f0107a2, color=0xe5e5e5) returned 0xe5e5e5
[0223.222] GetNearestColor (hdc=0x9f0107a2, color=0xd7d7d7) returned 0xd7d7d7
[0223.222] GetNearestColor (hdc=0x9f0107a2, color=0x0) returned 0x0
[0223.222] RestoreDC (hdc=0x9f0107a2, nSavedDC=-1) returned 1
[0223.222] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9f0107a2) returned 0x0
[0223.222] IsAppThemed () returned 0x1
[0223.222] GetThemeAppProperties () returned 0x3
[0223.222] GetThemeAppProperties () returned 0x3
[0223.222] IsAppThemed () returned 0x1
[0223.222] GetThemeAppProperties () returned 0x3
[0223.222] GetThemeAppProperties () returned 0x3
[0223.222] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x23791cc | out: lpchText="OK", lprc=0x53e028) returned 13
[0223.222] IsAppThemed () returned 0x1
[0223.222] GetThemeAppProperties () returned 0x3
[0223.222] GetThemeAppProperties () returned 0x3
[0223.222] IsAppThemed () returned 0x1
[0223.222] GetThemeAppProperties () returned 0x3
[0223.222] GetThemeAppProperties () returned 0x3
[0223.222] GetFocus () returned 0x1702d6
[0223.223] IsAppThemed () returned 0x1
[0223.223] GetThemeAppProperties () returned 0x3
[0223.223] GetThemeAppProperties () returned 0x3
[0223.223] IsAppThemed () returned 0x1
[0223.223] GetThemeAppProperties () returned 0x3
[0223.223] GetThemeAppProperties () returned 0x3
[0223.223] IsThemePartDefined () returned 0x1
[0223.223] IsAppThemed () returned 0x1
[0223.223] GetThemeAppProperties () returned 0x3
[0223.223] GetThemeAppProperties () returned 0x3
[0223.223] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0223.223] IsAppThemed () returned 0x1
[0223.223] GetThemeAppProperties () returned 0x3
[0223.223] GetThemeAppProperties () returned 0x3
[0223.223] IsAppThemed () returned 0x1
[0223.223] GetThemeAppProperties () returned 0x3
[0223.223] GetThemeAppProperties () returned 0x3
[0223.223] IsThemePartDefined () returned 0x1
[0223.223] GdipCreateRegion (region=0x53e070) returned 0x0
[0223.223] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.223] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0223.223] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.223] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0223.223] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0223.223] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0223.223] LocalFree (hMem=0x89eee8) returned 0x0
[0223.224] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0223.224] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0223.224] LocalFree (hMem=0x89eee8) returned 0x0
[0223.224] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.224] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0223.224] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0223.224] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0223.224] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.224] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0223.224] GetCurrentObject (hdc=0x9f0107a2, type=0x1) returned 0xb00017
[0223.224] GetCurrentObject (hdc=0x9f0107a2, type=0x2) returned 0x900010
[0223.224] GetCurrentObject (hdc=0x9f0107a2, type=0x7) returned 0x1e0507b9
[0223.224] GetCurrentObject (hdc=0x9f0107a2, type=0x6) returned 0x8a01c2
[0223.224] SaveDC (hdc=0x9f0107a2) returned 1
[0223.224] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c04051e
[0223.224] GetClipRgn (hdc=0x9f0107a2, hrgn=0x6c04051e) returned 0
[0223.224] SelectClipRgn (hdc=0x9f0107a2, hrgn=0x97040798) returned 2
[0223.224] DeleteObject (ho=0x6c04051e) returned 1
[0223.225] DeleteObject (ho=0x97040798) returned 1
[0223.225] OffsetViewportOrgEx (in: hdc=0x9f0107a2, x=0, y=0, lppt=0x237987c | out: lppt=0x237987c) returned 1
[0223.225] DrawThemeParentBackground () returned 0x0
[0223.225] GetWindowPlacement (in: hWnd=0x1802c8, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0223.225] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0223.225] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.225] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.225] GetSystemMetrics (nIndex=42) returned 0
[0223.225] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.225] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0223.225] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0223.225] GetCurrentObject (hdc=0x9f0107a2, type=0x1) returned 0xb00017
[0223.225] GetCurrentObject (hdc=0x9f0107a2, type=0x2) returned 0x900010
[0223.225] GetCurrentObject (hdc=0x9f0107a2, type=0x7) returned 0x1e0507b9
[0223.225] GetCurrentObject (hdc=0x9f0107a2, type=0x6) returned 0x8a01c2
[0223.225] SaveDC (hdc=0x9f0107a2) returned 2
[0223.225] GetNearestColor (hdc=0x9f0107a2, color=0xf0f0f0) returned 0xf0f0f0
[0223.225] CreateSolidBrush (color=0xf0f0f0) returned 0xa310078d
[0223.225] FillRect (hDC=0x9f0107a2, lprc=0x53dad0, hbr=0xa310078d) returned 1
[0223.225] DeleteObject (ho=0xa310078d) returned 1
[0223.226] RestoreDC (hdc=0x9f0107a2, nSavedDC=-1) returned 1
[0223.226] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.226] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.226] GetSystemMetrics (nIndex=42) returned 0
[0223.226] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.226] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0223.226] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0223.226] GetCurrentObject (hdc=0x9f0107a2, type=0x1) returned 0xb00017
[0223.226] GetCurrentObject (hdc=0x9f0107a2, type=0x2) returned 0x900010
[0223.226] GetCurrentObject (hdc=0x9f0107a2, type=0x7) returned 0x1e0507b9
[0223.226] GetCurrentObject (hdc=0x9f0107a2, type=0x6) returned 0x8a01c2
[0223.226] SaveDC (hdc=0x9f0107a2) returned 2
[0223.226] GetNearestColor (hdc=0x9f0107a2, color=0xf0f0f0) returned 0xf0f0f0
[0223.226] CreateSolidBrush (color=0xf0f0f0) returned 0xa410078d
[0223.226] FillRect (hDC=0x9f0107a2, lprc=0x53da70, hbr=0xa410078d) returned 1
[0223.226] DeleteObject (ho=0xa410078d) returned 1
[0223.226] RestoreDC (hdc=0x9f0107a2, nSavedDC=-1) returned 1
[0223.226] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.226] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.226] GetSystemMetrics (nIndex=42) returned 0
[0223.226] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.226] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0223.227] RestoreDC (hdc=0x9f0107a2, nSavedDC=-1) returned 1
[0223.227] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9f0107a2) returned 0x0
[0223.227] IsAppThemed () returned 0x1
[0223.227] GetThemeAppProperties () returned 0x3
[0223.227] GetThemeAppProperties () returned 0x3
[0223.227] IsAppThemed () returned 0x1
[0223.227] GetThemeAppProperties () returned 0x3
[0223.227] GetThemeAppProperties () returned 0x3
[0223.227] IsThemePartDefined () returned 0x1
[0223.227] GdipCreateRegion (region=0x53dff4) returned 0x0
[0223.227] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.227] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0223.227] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.227] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0223.227] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0223.227] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0223.227] LocalFree (hMem=0x89eac0) returned 0x0
[0223.227] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0223.227] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0223.227] LocalFree (hMem=0x89eac0) returned 0x0
[0223.228] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.228] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0223.228] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0223.228] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0223.228] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.228] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0223.228] GetCurrentObject (hdc=0x9f0107a2, type=0x1) returned 0xb00017
[0223.228] GetCurrentObject (hdc=0x9f0107a2, type=0x2) returned 0x900010
[0223.228] GetCurrentObject (hdc=0x9f0107a2, type=0x7) returned 0x1e0507b9
[0223.228] GetCurrentObject (hdc=0x9f0107a2, type=0x6) returned 0x8a01c2
[0223.228] SaveDC (hdc=0x9f0107a2) returned 1
[0223.228] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x98040798
[0223.228] GetClipRgn (hdc=0x9f0107a2, hrgn=0x98040798) returned 0
[0223.228] SelectClipRgn (hdc=0x9f0107a2, hrgn=0x6e04051e) returned 2
[0223.228] DeleteObject (ho=0x98040798) returned 1
[0223.228] DeleteObject (ho=0x6e04051e) returned 1
[0223.228] OffsetViewportOrgEx (in: hdc=0x9f0107a2, x=0, y=0, lppt=0x237a104 | out: lppt=0x237a104) returned 1
[0223.228] IsAppThemed () returned 0x1
[0223.228] GetThemeAppProperties () returned 0x3
[0223.228] GetThemeAppProperties () returned 0x3
[0223.229] DrawThemeBackground () returned 0x0
[0223.229] RestoreDC (hdc=0x9f0107a2, nSavedDC=-1) returned 1
[0223.229] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9f0107a2) returned 0x0
[0223.229] GdipCreateRegion (region=0x53dff8) returned 0x0
[0223.229] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.229] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0223.229] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.229] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0223.229] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0223.229] LocalFree (hMem=0x89eac0) returned 0x0
[0223.229] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0223.229] LocalFree (hMem=0x89eac0) returned 0x0
[0223.229] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.229] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0223.229] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0223.229] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0223.229] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.229] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0223.229] GetCurrentObject (hdc=0x9f0107a2, type=0x1) returned 0xb00017
[0223.229] GetCurrentObject (hdc=0x9f0107a2, type=0x2) returned 0x900010
[0223.229] GetCurrentObject (hdc=0x9f0107a2, type=0x7) returned 0x1e0507b9
[0223.229] GetCurrentObject (hdc=0x9f0107a2, type=0x6) returned 0x8a01c2
[0223.229] SaveDC (hdc=0x9f0107a2) returned 1
[0223.229] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f04051e
[0223.230] GetClipRgn (hdc=0x9f0107a2, hrgn=0x6f04051e) returned 0
[0223.230] SelectClipRgn (hdc=0x9f0107a2, hrgn=0x99040798) returned 2
[0223.230] DeleteObject (ho=0x6f04051e) returned 1
[0223.230] DeleteObject (ho=0x99040798) returned 1
[0223.230] OffsetViewportOrgEx (in: hdc=0x9f0107a2, x=0, y=0, lppt=0x237a3d8 | out: lppt=0x237a3d8) returned 1
[0223.230] IsAppThemed () returned 0x1
[0223.230] GetThemeAppProperties () returned 0x3
[0223.230] GetThemeAppProperties () returned 0x3
[0223.230] GetThemeBackgroundContentRect () returned 0x0
[0223.230] RestoreDC (hdc=0x9f0107a2, nSavedDC=-1) returned 1
[0223.230] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9f0107a2) returned 0x0
[0223.230] IsAppThemed () returned 0x1
[0223.230] GetThemeAppProperties () returned 0x3
[0223.230] GetThemeAppProperties () returned 0x3
[0223.230] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0223.230] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0223.230] GetCurrentObject (hdc=0x9f0107a2, type=0x1) returned 0xb00017
[0223.230] GetCurrentObject (hdc=0x9f0107a2, type=0x2) returned 0x900010
[0223.230] GetCurrentObject (hdc=0x9f0107a2, type=0x7) returned 0x1e0507b9
[0223.230] GetCurrentObject (hdc=0x9f0107a2, type=0x6) returned 0x8a01c2
[0223.230] SaveDC (hdc=0x9f0107a2) returned 1
[0223.230] GetTextAlign (hdc=0x9f0107a2) returned 0x0
[0223.230] GetTextColor (hdc=0x9f0107a2) returned 0x0
[0223.230] GetCurrentObject (hdc=0x9f0107a2, type=0x6) returned 0x8a01c2
[0223.231] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0223.231] SelectObject (hdc=0x9f0107a2, h=0x730a066d) returned 0x8a01c2
[0223.231] GetBkMode (hdc=0x9f0107a2) returned 2
[0223.231] SetBkMode (hdc=0x9f0107a2, mode=1) returned 2
[0223.231] DrawTextExW (in: hdc=0x9f0107a2, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x237a778 | out: lpchText="OK", lprc=0x53df90) returned 13
[0223.231] DrawTextExW (in: hdc=0x9f0107a2, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x237a778 | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0223.231] RestoreDC (hdc=0x9f0107a2, nSavedDC=-1) returned 1
[0223.231] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9f0107a2) returned 0x0
[0223.231] GetFocus () returned 0x1702d6
[0223.231] IsAppThemed () returned 0x1
[0223.231] GetThemeAppProperties () returned 0x3
[0223.232] GetThemeAppProperties () returned 0x3
[0223.232] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0223.232] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x9f0107a2, x1=0, y1=0, rop=0xcc0020) returned 1
[0223.232] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9f0107a2) returned 0x0
[0223.232] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0223.232] SelectObject (hdc=0x9f0107a2, h=0x85000f) returned 0x1e0507b9
[0223.232] DeleteDC (hdc=0x9f0107a2) returned 1
[0223.232] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0223.232] EndPaint (hWnd=0x1702d2, lpPaint=0x53e2e4) returned 1
[0223.232] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.232] IsWindowUnicode (hWnd=0x1b013e) returned 1
[0223.232] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.232] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.232] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.232] BeginPaint (in: hWnd=0x1b013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0223.232] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0223.233] CreateCompatibleDC (hdc=0x8b010786) returned 0xa10107a2
[0223.233] SelectObject (hdc=0xa10107a2, h=0x1e0507b9) returned 0x85000f
[0223.233] GdipCreateFromHDC (hdc=0xa10107a2, graphics=0x53e300) returned 0x0
[0223.233] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0223.233] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0223.233] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0223.233] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.233] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0223.233] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0223.233] LocalFree (hMem=0x89eac0) returned 0x0
[0223.233] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.233] GdipCreateRegion (region=0x53e348) returned 0x0
[0223.233] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.233] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0223.233] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0223.233] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc5d0dbd) returned 0x0
[0223.233] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.233] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0223.233] GetCurrentObject (hdc=0xa10107a2, type=0x1) returned 0xb00017
[0223.233] GetCurrentObject (hdc=0xa10107a2, type=0x2) returned 0x900010
[0223.233] GetCurrentObject (hdc=0xa10107a2, type=0x7) returned 0x1e0507b9
[0223.233] GetCurrentObject (hdc=0xa10107a2, type=0x6) returned 0x8a01c2
[0223.234] SaveDC (hdc=0xa10107a2) returned 1
[0223.234] GetNearestColor (hdc=0xa10107a2, color=0xf0f0f0) returned 0xf0f0f0
[0223.234] GetNearestColor (hdc=0xa10107a2, color=0xa0a0a0) returned 0xa0a0a0
[0223.234] GetNearestColor (hdc=0xa10107a2, color=0x696969) returned 0x696969
[0223.234] GetNearestColor (hdc=0xa10107a2, color=0xa0a0a0) returned 0xa0a0a0
[0223.234] GetNearestColor (hdc=0xa10107a2, color=0x0) returned 0x0
[0223.234] GetNearestColor (hdc=0xa10107a2, color=0xffffff) returned 0xffffff
[0223.234] GetNearestColor (hdc=0xa10107a2, color=0xe5e5e5) returned 0xe5e5e5
[0223.234] GetNearestColor (hdc=0xa10107a2, color=0xd7d7d7) returned 0xd7d7d7
[0223.234] GetNearestColor (hdc=0xa10107a2, color=0x0) returned 0x0
[0223.234] RestoreDC (hdc=0xa10107a2, nSavedDC=-1) returned 1
[0223.234] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107a2) returned 0x0
[0223.234] IsAppThemed () returned 0x1
[0223.234] GetThemeAppProperties () returned 0x3
[0223.234] GetThemeAppProperties () returned 0x3
[0223.234] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0223.234] SendMessageW (hWnd=0x1802c8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0223.234] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0223.234] IsAppThemed () returned 0x1
[0223.235] GetThemeAppProperties () returned 0x3
[0223.235] GetThemeAppProperties () returned 0x3
[0223.235] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x237af88 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0223.235] IsAppThemed () returned 0x1
[0223.235] GetThemeAppProperties () returned 0x3
[0223.235] GetThemeAppProperties () returned 0x3
[0223.235] IsAppThemed () returned 0x1
[0223.235] GetThemeAppProperties () returned 0x3
[0223.235] GetThemeAppProperties () returned 0x3
[0223.235] GetFocus () returned 0x1702d6
[0223.235] IsAppThemed () returned 0x1
[0223.235] GetThemeAppProperties () returned 0x3
[0223.235] GetThemeAppProperties () returned 0x3
[0223.235] IsAppThemed () returned 0x1
[0223.235] GetThemeAppProperties () returned 0x3
[0223.235] GetThemeAppProperties () returned 0x3
[0223.235] IsThemePartDefined () returned 0x1
[0223.235] IsAppThemed () returned 0x1
[0223.235] GetThemeAppProperties () returned 0x3
[0223.235] GetThemeAppProperties () returned 0x3
[0223.235] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0223.235] IsAppThemed () returned 0x1
[0223.235] GetThemeAppProperties () returned 0x3
[0223.236] GetThemeAppProperties () returned 0x3
[0223.236] IsAppThemed () returned 0x1
[0223.236] GetThemeAppProperties () returned 0x3
[0223.236] GetThemeAppProperties () returned 0x3
[0223.236] IsThemePartDefined () returned 0x1
[0223.236] GdipCreateRegion (region=0x53e070) returned 0x0
[0223.236] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.236] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0223.236] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.236] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0223.236] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0223.236] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0223.236] LocalFree (hMem=0x89ec80) returned 0x0
[0223.236] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0223.236] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0223.236] LocalFree (hMem=0x89ec80) returned 0x0
[0223.236] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.236] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0223.236] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0223.236] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0223.236] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.236] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0223.236] GetCurrentObject (hdc=0xa10107a2, type=0x1) returned 0xb00017
[0223.236] GetCurrentObject (hdc=0xa10107a2, type=0x2) returned 0x900010
[0223.236] GetCurrentObject (hdc=0xa10107a2, type=0x7) returned 0x1e0507b9
[0223.237] GetCurrentObject (hdc=0xa10107a2, type=0x6) returned 0x8a01c2
[0223.237] SaveDC (hdc=0xa10107a2) returned 1
[0223.237] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9a040798
[0223.237] GetClipRgn (hdc=0xa10107a2, hrgn=0x9a040798) returned 0
[0223.237] SelectClipRgn (hdc=0xa10107a2, hrgn=0x7304051e) returned 2
[0223.237] DeleteObject (ho=0x9a040798) returned 1
[0223.237] DeleteObject (ho=0x7304051e) returned 1
[0223.237] OffsetViewportOrgEx (in: hdc=0xa10107a2, x=0, y=0, lppt=0x237b638 | out: lppt=0x237b638) returned 1
[0223.237] DrawThemeParentBackground () returned 0x0
[0223.237] GetWindowPlacement (in: hWnd=0x1802c8, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0223.237] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0223.237] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.237] GetSystemMetrics (nIndex=42) returned 0
[0223.237] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0223.237] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0223.237] GetCurrentObject (hdc=0xa10107a2, type=0x1) returned 0xb00017
[0223.237] GetCurrentObject (hdc=0xa10107a2, type=0x2) returned 0x900010
[0223.238] GetCurrentObject (hdc=0xa10107a2, type=0x7) returned 0x1e0507b9
[0223.238] GetCurrentObject (hdc=0xa10107a2, type=0x6) returned 0x8a01c2
[0223.238] SaveDC (hdc=0xa10107a2) returned 2
[0223.238] GetNearestColor (hdc=0xa10107a2, color=0xf0f0f0) returned 0xf0f0f0
[0223.238] CreateSolidBrush (color=0xf0f0f0) returned 0xa510078d
[0223.238] FillRect (hDC=0xa10107a2, lprc=0x53dad0, hbr=0xa510078d) returned 1
[0223.238] DeleteObject (ho=0xa510078d) returned 1
[0223.238] RestoreDC (hdc=0xa10107a2, nSavedDC=-1) returned 1
[0223.238] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.238] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.238] GetSystemMetrics (nIndex=42) returned 0
[0223.238] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.238] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0223.238] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0223.238] GetCurrentObject (hdc=0xa10107a2, type=0x1) returned 0xb00017
[0223.238] GetCurrentObject (hdc=0xa10107a2, type=0x2) returned 0x900010
[0223.238] GetCurrentObject (hdc=0xa10107a2, type=0x7) returned 0x1e0507b9
[0223.238] GetCurrentObject (hdc=0xa10107a2, type=0x6) returned 0x8a01c2
[0223.238] SaveDC (hdc=0xa10107a2) returned 2
[0223.238] GetNearestColor (hdc=0xa10107a2, color=0xf0f0f0) returned 0xf0f0f0
[0223.239] CreateSolidBrush (color=0xf0f0f0) returned 0xa610078d
[0223.239] FillRect (hDC=0xa10107a2, lprc=0x53da70, hbr=0xa610078d) returned 1
[0223.239] DeleteObject (ho=0xa610078d) returned 1
[0223.239] RestoreDC (hdc=0xa10107a2, nSavedDC=-1) returned 1
[0223.239] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.239] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.239] GetSystemMetrics (nIndex=42) returned 0
[0223.239] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.239] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0223.239] RestoreDC (hdc=0xa10107a2, nSavedDC=-1) returned 1
[0223.239] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107a2) returned 0x0
[0223.239] IsAppThemed () returned 0x1
[0223.239] GetThemeAppProperties () returned 0x3
[0223.239] GetThemeAppProperties () returned 0x3
[0223.239] IsAppThemed () returned 0x1
[0223.239] GetThemeAppProperties () returned 0x3
[0223.239] GetThemeAppProperties () returned 0x3
[0223.239] IsThemePartDefined () returned 0x1
[0223.239] GdipCreateRegion (region=0x53dff4) returned 0x0
[0223.239] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.239] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0223.240] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.240] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0223.240] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0223.240] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0223.240] LocalFree (hMem=0x89ec80) returned 0x0
[0223.240] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0223.240] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0223.286] LocalFree (hMem=0x89ec80) returned 0x0
[0223.286] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.287] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0223.287] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0223.287] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0223.287] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.287] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0223.287] GetCurrentObject (hdc=0xa10107a2, type=0x1) returned 0xb00017
[0223.287] GetCurrentObject (hdc=0xa10107a2, type=0x2) returned 0x900010
[0223.287] GetCurrentObject (hdc=0xa10107a2, type=0x7) returned 0x1e0507b9
[0223.287] GetCurrentObject (hdc=0xa10107a2, type=0x6) returned 0x8a01c2
[0223.287] SaveDC (hdc=0xa10107a2) returned 1
[0223.287] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7404051e
[0223.287] GetClipRgn (hdc=0xa10107a2, hrgn=0x7404051e) returned 0
[0223.287] SelectClipRgn (hdc=0xa10107a2, hrgn=0x9c040798) returned 2
[0223.287] DeleteObject (ho=0x7404051e) returned 1
[0223.287] DeleteObject (ho=0x9c040798) returned 1
[0223.287] OffsetViewportOrgEx (in: hdc=0xa10107a2, x=0, y=0, lppt=0x237bec0 | out: lppt=0x237bec0) returned 1
[0223.287] IsAppThemed () returned 0x1
[0223.288] GetThemeAppProperties () returned 0x3
[0223.288] GetThemeAppProperties () returned 0x3
[0223.288] DrawThemeBackground () returned 0x0
[0223.288] RestoreDC (hdc=0xa10107a2, nSavedDC=-1) returned 1
[0223.288] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107a2) returned 0x0
[0223.288] GdipCreateRegion (region=0x53dff8) returned 0x0
[0223.288] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.288] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0223.288] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.288] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0223.288] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0223.288] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0223.288] LocalFree (hMem=0x89eac0) returned 0x0
[0223.288] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0223.288] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0223.288] LocalFree (hMem=0x89ee08) returned 0x0
[0223.288] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.288] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0223.288] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0223.288] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0223.289] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.289] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0223.289] GetCurrentObject (hdc=0xa10107a2, type=0x1) returned 0xb00017
[0223.289] GetCurrentObject (hdc=0xa10107a2, type=0x2) returned 0x900010
[0223.289] GetCurrentObject (hdc=0xa10107a2, type=0x7) returned 0x1e0507b9
[0223.289] GetCurrentObject (hdc=0xa10107a2, type=0x6) returned 0x8a01c2
[0223.289] SaveDC (hdc=0xa10107a2) returned 1
[0223.289] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9d040798
[0223.289] GetClipRgn (hdc=0xa10107a2, hrgn=0x9d040798) returned 0
[0223.289] SelectClipRgn (hdc=0xa10107a2, hrgn=0x7504051e) returned 2
[0223.289] DeleteObject (ho=0x9d040798) returned 1
[0223.289] DeleteObject (ho=0x7504051e) returned 1
[0223.289] OffsetViewportOrgEx (in: hdc=0xa10107a2, x=0, y=0, lppt=0x237c194 | out: lppt=0x237c194) returned 1
[0223.289] IsAppThemed () returned 0x1
[0223.289] GetThemeAppProperties () returned 0x3
[0223.289] GetThemeAppProperties () returned 0x3
[0223.289] GetThemeBackgroundContentRect () returned 0x0
[0223.289] RestoreDC (hdc=0xa10107a2, nSavedDC=-1) returned 1
[0223.289] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107a2) returned 0x0
[0223.289] IsAppThemed () returned 0x1
[0223.289] GetThemeAppProperties () returned 0x3
[0223.290] GetThemeAppProperties () returned 0x3
[0223.290] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0223.290] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0223.290] GetCurrentObject (hdc=0xa10107a2, type=0x1) returned 0xb00017
[0223.290] GetCurrentObject (hdc=0xa10107a2, type=0x2) returned 0x900010
[0223.290] GetCurrentObject (hdc=0xa10107a2, type=0x7) returned 0x1e0507b9
[0223.290] GetCurrentObject (hdc=0xa10107a2, type=0x6) returned 0x8a01c2
[0223.290] SaveDC (hdc=0xa10107a2) returned 1
[0223.290] GetTextAlign (hdc=0xa10107a2) returned 0x0
[0223.290] GetTextColor (hdc=0xa10107a2) returned 0x0
[0223.290] GetCurrentObject (hdc=0xa10107a2, type=0x6) returned 0x8a01c2
[0223.290] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0223.290] SelectObject (hdc=0xa10107a2, h=0x730a066d) returned 0x8a01c2
[0223.290] GetBkMode (hdc=0xa10107a2) returned 2
[0223.290] SetBkMode (hdc=0xa10107a2, mode=1) returned 2
[0223.290] DrawTextExW (in: hdc=0xa10107a2, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x237c534 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0223.291] DrawTextExW (in: hdc=0xa10107a2, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x237c534 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0223.291] RestoreDC (hdc=0xa10107a2, nSavedDC=-1) returned 1
[0223.291] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107a2) returned 0x0
[0223.291] GetFocus () returned 0x1702d6
[0223.291] IsAppThemed () returned 0x1
[0223.291] GetThemeAppProperties () returned 0x3
[0223.291] GetThemeAppProperties () returned 0x3
[0223.291] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0223.291] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0xa10107a2, x1=0, y1=0, rop=0xcc0020) returned 1
[0223.291] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107a2) returned 0x0
[0223.291] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0223.291] SelectObject (hdc=0xa10107a2, h=0x85000f) returned 0x1e0507b9
[0223.292] DeleteDC (hdc=0xa10107a2) returned 1
[0223.292] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0223.292] EndPaint (hWnd=0x1b013e, lpPaint=0x53e2e4) returned 1
[0223.292] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.292] IsWindowUnicode (hWnd=0x102dc) returned 1
[0223.292] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.292] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.292] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.293] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.293] IsWindowUnicode (hWnd=0x202c6) returned 1
[0223.293] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.293] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.293] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.293] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0223.293] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0223.293] CreateCompatibleDC (hdc=0x60100ce) returned 0xa30107a2
[0223.293] SelectObject (hdc=0xa30107a2, h=0x1e0507b9) returned 0x85000f
[0223.293] GdipCreateFromHDC (hdc=0xa30107a2, graphics=0x53e300) returned 0x0
[0223.294] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0223.294] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0223.294] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0223.294] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.294] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0223.294] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0223.294] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0223.294] LocalFree (hMem=0x89eac0) returned 0x0
[0223.294] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.294] GdipCreateRegion (region=0x53e348) returned 0x0
[0223.294] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.294] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0223.294] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0223.294] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc5b0dbd) returned 0x0
[0223.294] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.294] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0223.294] GetCurrentObject (hdc=0xa30107a2, type=0x1) returned 0xb00017
[0223.294] GetCurrentObject (hdc=0xa30107a2, type=0x2) returned 0x900010
[0223.294] GetCurrentObject (hdc=0xa30107a2, type=0x7) returned 0x1e0507b9
[0223.295] GetCurrentObject (hdc=0xa30107a2, type=0x6) returned 0x8a01c2
[0223.295] SaveDC (hdc=0xa30107a2) returned 1
[0223.295] GetNearestColor (hdc=0xa30107a2, color=0xff) returned 0xff
[0223.295] GetNearestColor (hdc=0xa30107a2, color=0x55) returned 0x55
[0223.295] GetNearestColor (hdc=0xa30107a2, color=0x0) returned 0x0
[0223.295] GetNearestColor (hdc=0xa30107a2, color=0x55) returned 0x55
[0223.295] GetNearestColor (hdc=0xa30107a2, color=0x0) returned 0x0
[0223.295] GetNearestColor (hdc=0xa30107a2, color=0x8080ff) returned 0x8080ff
[0223.295] GetNearestColor (hdc=0xa30107a2, color=0x7373e5) returned 0x7373e5
[0223.295] GetNearestColor (hdc=0xa30107a2, color=0xe5) returned 0xe5
[0223.295] GetNearestColor (hdc=0xa30107a2, color=0x0) returned 0x0
[0223.295] RestoreDC (hdc=0xa30107a2, nSavedDC=-1) returned 1
[0223.295] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa30107a2) returned 0x0
[0223.295] IsAppThemed () returned 0x1
[0223.295] GetThemeAppProperties () returned 0x3
[0223.295] GetThemeAppProperties () returned 0x3
[0223.295] IsAppThemed () returned 0x1
[0223.296] GetThemeAppProperties () returned 0x3
[0223.296] GetThemeAppProperties () returned 0x3
[0223.296] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0223.296] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x237cd18 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0223.296] IsAppThemed () returned 0x1
[0223.296] GetThemeAppProperties () returned 0x3
[0223.296] GetThemeAppProperties () returned 0x3
[0223.296] IsAppThemed () returned 0x1
[0223.296] GetThemeAppProperties () returned 0x3
[0223.296] GetThemeAppProperties () returned 0x3
[0223.296] GetFocus () returned 0x1702d6
[0223.296] IsAppThemed () returned 0x1
[0223.296] GetThemeAppProperties () returned 0x3
[0223.296] GetThemeAppProperties () returned 0x3
[0223.296] IsAppThemed () returned 0x1
[0223.296] GetThemeAppProperties () returned 0x3
[0223.296] GetThemeAppProperties () returned 0x3
[0223.296] IsThemePartDefined () returned 0x1
[0223.296] IsAppThemed () returned 0x1
[0223.296] GetThemeAppProperties () returned 0x3
[0223.297] GetThemeAppProperties () returned 0x3
[0223.297] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0223.297] IsAppThemed () returned 0x1
[0223.297] GetThemeAppProperties () returned 0x3
[0223.297] GetThemeAppProperties () returned 0x3
[0223.297] IsAppThemed () returned 0x1
[0223.297] GetThemeAppProperties () returned 0x3
[0223.297] GetThemeAppProperties () returned 0x3
[0223.297] IsThemePartDefined () returned 0x1
[0223.297] GdipCreateRegion (region=0x53e070) returned 0x0
[0223.297] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.297] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0223.297] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.297] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0223.297] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0223.297] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0223.297] LocalFree (hMem=0x89eee8) returned 0x0
[0223.297] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0223.297] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0223.297] LocalFree (hMem=0x89eac0) returned 0x0
[0223.297] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.297] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0223.297] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0223.297] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0223.297] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.298] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0223.298] GetCurrentObject (hdc=0xa30107a2, type=0x1) returned 0xb00017
[0223.298] GetCurrentObject (hdc=0xa30107a2, type=0x2) returned 0x900010
[0223.298] GetCurrentObject (hdc=0xa30107a2, type=0x7) returned 0x1e0507b9
[0223.298] GetCurrentObject (hdc=0xa30107a2, type=0x6) returned 0x8a01c2
[0223.298] SaveDC (hdc=0xa30107a2) returned 1
[0223.298] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7604051e
[0223.298] GetClipRgn (hdc=0xa30107a2, hrgn=0x7604051e) returned 0
[0223.298] SelectClipRgn (hdc=0xa30107a2, hrgn=0xa1040798) returned 2
[0223.298] DeleteObject (ho=0x7604051e) returned 1
[0223.298] DeleteObject (ho=0xa1040798) returned 1
[0223.298] OffsetViewportOrgEx (in: hdc=0xa30107a2, x=0, y=0, lppt=0x237d3c8 | out: lppt=0x237d3c8) returned 1
[0223.298] DrawThemeParentBackground () returned 0x0
[0223.298] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0223.298] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0223.298] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0223.298] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0223.298] GetSystemMetrics (nIndex=42) returned 0
[0223.299] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0223.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0223.299] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0223.299] GetCurrentObject (hdc=0xa30107a2, type=0x1) returned 0xb00017
[0223.299] GetCurrentObject (hdc=0xa30107a2, type=0x2) returned 0x900010
[0223.299] GetCurrentObject (hdc=0xa30107a2, type=0x7) returned 0x1e0507b9
[0223.299] GetCurrentObject (hdc=0xa30107a2, type=0x6) returned 0x8a01c2
[0223.299] SaveDC (hdc=0xa30107a2) returned 2
[0223.299] GetNearestColor (hdc=0xa30107a2, color=0xff) returned 0xff
[0223.299] CreateSolidBrush (color=0xff) returned 0xa710078d
[0223.299] FillRect (hDC=0xa30107a2, lprc=0x53dad0, hbr=0xa710078d) returned 1
[0223.299] DeleteObject (ho=0xa710078d) returned 1
[0223.299] RestoreDC (hdc=0xa30107a2, nSavedDC=-1) returned 1
[0223.299] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0223.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0223.299] GetSystemMetrics (nIndex=42) returned 0
[0223.299] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0223.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0223.299] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0223.299] GetCurrentObject (hdc=0xa30107a2, type=0x1) returned 0xb00017
[0223.300] GetCurrentObject (hdc=0xa30107a2, type=0x2) returned 0x900010
[0223.300] GetCurrentObject (hdc=0xa30107a2, type=0x7) returned 0x1e0507b9
[0223.300] GetCurrentObject (hdc=0xa30107a2, type=0x6) returned 0x8a01c2
[0223.300] SaveDC (hdc=0xa30107a2) returned 2
[0223.300] GetNearestColor (hdc=0xa30107a2, color=0xff) returned 0xff
[0223.300] CreateSolidBrush (color=0xff) returned 0xa810078d
[0223.300] FillRect (hDC=0xa30107a2, lprc=0x53da70, hbr=0xa810078d) returned 1
[0223.300] DeleteObject (ho=0xa810078d) returned 1
[0223.300] RestoreDC (hdc=0xa30107a2, nSavedDC=-1) returned 1
[0223.300] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0223.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0223.300] GetSystemMetrics (nIndex=42) returned 0
[0223.300] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0223.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0223.300] RestoreDC (hdc=0xa30107a2, nSavedDC=-1) returned 1
[0223.300] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa30107a2) returned 0x0
[0223.300] IsAppThemed () returned 0x1
[0223.301] GetThemeAppProperties () returned 0x3
[0223.301] GetThemeAppProperties () returned 0x3
[0223.301] IsAppThemed () returned 0x1
[0223.301] GetThemeAppProperties () returned 0x3
[0223.301] GetThemeAppProperties () returned 0x3
[0223.301] IsThemePartDefined () returned 0x1
[0223.301] GdipCreateRegion (region=0x53dff4) returned 0x0
[0223.301] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.301] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0223.301] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.301] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0223.301] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0223.301] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0223.301] LocalFree (hMem=0x89eee8) returned 0x0
[0223.301] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0223.301] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0223.301] LocalFree (hMem=0x89ec80) returned 0x0
[0223.301] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.301] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0223.301] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0223.301] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0223.301] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.301] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0223.301] GetCurrentObject (hdc=0xa30107a2, type=0x1) returned 0xb00017
[0223.301] GetCurrentObject (hdc=0xa30107a2, type=0x2) returned 0x900010
[0223.302] GetCurrentObject (hdc=0xa30107a2, type=0x7) returned 0x1e0507b9
[0223.302] GetCurrentObject (hdc=0xa30107a2, type=0x6) returned 0x8a01c2
[0223.302] SaveDC (hdc=0xa30107a2) returned 1
[0223.302] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa2040798
[0223.302] GetClipRgn (hdc=0xa30107a2, hrgn=0xa2040798) returned 0
[0223.302] SelectClipRgn (hdc=0xa30107a2, hrgn=0x7804051e) returned 2
[0223.302] DeleteObject (ho=0xa2040798) returned 1
[0223.302] DeleteObject (ho=0x7804051e) returned 1
[0223.302] OffsetViewportOrgEx (in: hdc=0xa30107a2, x=0, y=0, lppt=0x237dc2c | out: lppt=0x237dc2c) returned 1
[0223.302] IsAppThemed () returned 0x1
[0223.307] GetThemeAppProperties () returned 0x3
[0223.307] GetThemeAppProperties () returned 0x3
[0223.307] DrawThemeBackground () returned 0x0
[0223.307] RestoreDC (hdc=0xa30107a2, nSavedDC=-1) returned 1
[0223.307] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa30107a2) returned 0x0
[0223.307] GdipCreateRegion (region=0x53dff8) returned 0x0
[0223.307] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.307] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0223.307] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.308] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0223.308] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0223.308] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0223.308] LocalFree (hMem=0x89eee8) returned 0x0
[0223.308] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0223.308] LocalFree (hMem=0x89eee8) returned 0x0
[0223.308] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.308] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0223.308] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0223.308] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0223.308] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.308] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0223.308] GetCurrentObject (hdc=0xa30107a2, type=0x1) returned 0xb00017
[0223.308] GetCurrentObject (hdc=0xa30107a2, type=0x2) returned 0x900010
[0223.308] GetCurrentObject (hdc=0xa30107a2, type=0x7) returned 0x1e0507b9
[0223.308] GetCurrentObject (hdc=0xa30107a2, type=0x6) returned 0x8a01c2
[0223.308] SaveDC (hdc=0xa30107a2) returned 1
[0223.308] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7904051e
[0223.308] GetClipRgn (hdc=0xa30107a2, hrgn=0x7904051e) returned 0
[0223.308] SelectClipRgn (hdc=0xa30107a2, hrgn=0xa3040798) returned 2
[0223.308] DeleteObject (ho=0x7904051e) returned 1
[0223.308] DeleteObject (ho=0xa3040798) returned 1
[0223.308] OffsetViewportOrgEx (in: hdc=0xa30107a2, x=0, y=0, lppt=0x237df00 | out: lppt=0x237df00) returned 1
[0223.309] IsAppThemed () returned 0x1
[0223.309] GetThemeAppProperties () returned 0x3
[0223.309] GetThemeAppProperties () returned 0x3
[0223.309] GetThemeBackgroundContentRect () returned 0x0
[0223.309] RestoreDC (hdc=0xa30107a2, nSavedDC=-1) returned 1
[0223.309] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa30107a2) returned 0x0
[0223.309] IsAppThemed () returned 0x1
[0223.309] GetThemeAppProperties () returned 0x3
[0223.309] GetThemeAppProperties () returned 0x3
[0223.309] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0223.309] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0223.309] GetCurrentObject (hdc=0xa30107a2, type=0x1) returned 0xb00017
[0223.309] GetCurrentObject (hdc=0xa30107a2, type=0x2) returned 0x900010
[0223.309] GetCurrentObject (hdc=0xa30107a2, type=0x7) returned 0x1e0507b9
[0223.309] GetCurrentObject (hdc=0xa30107a2, type=0x6) returned 0x8a01c2
[0223.309] SaveDC (hdc=0xa30107a2) returned 1
[0223.309] GetTextAlign (hdc=0xa30107a2) returned 0x0
[0223.309] GetTextColor (hdc=0xa30107a2) returned 0x0
[0223.309] GetCurrentObject (hdc=0xa30107a2, type=0x6) returned 0x8a01c2
[0223.309] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0223.309] SelectObject (hdc=0xa30107a2, h=0x450a0799) returned 0x8a01c2
[0223.309] GetBkMode (hdc=0xa30107a2) returned 2
[0223.310] SetBkMode (hdc=0xa30107a2, mode=1) returned 2
[0223.310] DrawTextExW (in: hdc=0xa30107a2, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x237e2a0 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0223.310] DrawTextExW (in: hdc=0xa30107a2, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x237e2a0 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0223.310] RestoreDC (hdc=0xa30107a2, nSavedDC=-1) returned 1
[0223.310] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa30107a2) returned 0x0
[0223.310] GetFocus () returned 0x1702d6
[0223.310] IsAppThemed () returned 0x1
[0223.310] GetThemeAppProperties () returned 0x3
[0223.310] GetThemeAppProperties () returned 0x3
[0223.310] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0223.310] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xa30107a2, x1=0, y1=0, rop=0xcc0020) returned 1
[0223.310] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa30107a2) returned 0x0
[0223.310] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0223.311] SelectObject (hdc=0xa30107a2, h=0x85000f) returned 0x1e0507b9
[0223.311] DeleteDC (hdc=0xa30107a2) returned 1
[0223.311] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0223.311] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0223.311] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.311] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x84, wParam=0x0, lParam=0x18e0354) returned 0x1
[0223.311] IsWindowUnicode (hWnd=0x1702d2) returned 1
[0223.311] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.311] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.311] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.311] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0223.311] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.311] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x84, wParam=0x0, lParam=0x18e0354) returned 0x1
[0223.312] IsWindowUnicode (hWnd=0x1702d2) returned 1
[0223.312] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.312] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x84, wParam=0x0, lParam=0x18e0354) returned 0x1
[0223.312] SetCursor (hCursor=0x10003) returned 0x10003
[0223.312] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.312] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.312] _TrackMouseEvent (in: lpEventTrack=0x237e39c | out: lpEventTrack=0x237e39c) returned 1
[0223.312] SendMessageW (hWnd=0x1702d2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0223.312] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0223.312] InvalidateRect (hWnd=0x1702d2, lpRect=0x0, bErase=0) returned 1
[0223.312] GetKeyState (nVirtKey=1) returned 0
[0223.312] GetKeyState (nVirtKey=2) returned 0
[0223.312] GetKeyState (nVirtKey=4) returned 0
[0223.312] GetKeyState (nVirtKey=5) returned 0
[0223.312] GetKeyState (nVirtKey=6) returned 0
[0223.312] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.312] IsWindowUnicode (hWnd=0x1702d2) returned 1
[0223.313] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.313] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.313] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.313] BeginPaint (in: hWnd=0x1702d2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0223.313] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0223.313] CreateCompatibleDC (hdc=0x10105d6) returned 0xa40107a2
[0223.313] SelectObject (hdc=0xa40107a2, h=0x1e0507b9) returned 0x85000f
[0223.313] GdipCreateFromHDC (hdc=0xa40107a2, graphics=0x53e300) returned 0x0
[0223.313] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0223.313] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0223.313] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0223.313] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.313] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0223.313] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0223.313] LocalFree (hMem=0x89ee08) returned 0x0
[0223.313] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.313] GdipCreateRegion (region=0x53e348) returned 0x0
[0223.313] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.314] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0223.314] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0223.314] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc590dbd) returned 0x0
[0223.314] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.314] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0223.314] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0223.314] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0223.314] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0223.314] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0223.314] SaveDC (hdc=0xa40107a2) returned 1
[0223.314] GetNearestColor (hdc=0xa40107a2, color=0xf0f0f0) returned 0xf0f0f0
[0223.314] GetNearestColor (hdc=0xa40107a2, color=0xa0a0a0) returned 0xa0a0a0
[0223.314] GetNearestColor (hdc=0xa40107a2, color=0x696969) returned 0x696969
[0223.314] GetNearestColor (hdc=0xa40107a2, color=0xa0a0a0) returned 0xa0a0a0
[0223.314] GetNearestColor (hdc=0xa40107a2, color=0x0) returned 0x0
[0223.314] GetNearestColor (hdc=0xa40107a2, color=0xffffff) returned 0xffffff
[0223.314] GetNearestColor (hdc=0xa40107a2, color=0xe5e5e5) returned 0xe5e5e5
[0223.314] GetNearestColor (hdc=0xa40107a2, color=0xd7d7d7) returned 0xd7d7d7
[0223.314] GetNearestColor (hdc=0xa40107a2, color=0x0) returned 0x0
[0223.315] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0223.315] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107a2) returned 0x0
[0223.315] IsAppThemed () returned 0x1
[0223.315] GetThemeAppProperties () returned 0x3
[0223.315] GetThemeAppProperties () returned 0x3
[0223.315] IsAppThemed () returned 0x1
[0223.315] GetThemeAppProperties () returned 0x3
[0223.315] GetThemeAppProperties () returned 0x3
[0223.315] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0223.315] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x237eb18 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0223.315] IsAppThemed () returned 0x1
[0223.315] GetThemeAppProperties () returned 0x3
[0223.315] GetThemeAppProperties () returned 0x3
[0223.315] IsAppThemed () returned 0x1
[0223.315] GetThemeAppProperties () returned 0x3
[0223.315] GetThemeAppProperties () returned 0x3
[0223.315] IsAppThemed () returned 0x1
[0223.316] GetThemeAppProperties () returned 0x3
[0223.316] GetThemeAppProperties () returned 0x3
[0223.316] IsAppThemed () returned 0x1
[0223.316] GetThemeAppProperties () returned 0x3
[0223.316] GetThemeAppProperties () returned 0x3
[0223.316] IsThemePartDefined () returned 0x1
[0223.316] IsAppThemed () returned 0x1
[0223.316] GetThemeAppProperties () returned 0x3
[0223.316] GetThemeAppProperties () returned 0x3
[0223.316] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0223.316] IsAppThemed () returned 0x1
[0223.316] GetThemeAppProperties () returned 0x3
[0223.316] GetThemeAppProperties () returned 0x3
[0223.316] IsAppThemed () returned 0x1
[0223.316] GetThemeAppProperties () returned 0x3
[0223.316] GetThemeAppProperties () returned 0x3
[0223.316] IsThemePartDefined () returned 0x1
[0223.316] GdipCreateRegion (region=0x53e064) returned 0x0
[0223.316] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.316] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0223.316] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.316] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0223.316] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0223.316] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0223.316] LocalFree (hMem=0x89eee8) returned 0x0
[0223.316] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0223.316] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0223.316] LocalFree (hMem=0x89eee8) returned 0x0
[0223.317] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.317] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0223.317] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0223.317] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0223.317] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.317] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0223.317] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0223.317] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0223.317] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0223.317] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0223.317] SaveDC (hdc=0xa40107a2) returned 1
[0223.317] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa4040798
[0223.317] GetClipRgn (hdc=0xa40107a2, hrgn=0xa4040798) returned 0
[0223.317] SelectClipRgn (hdc=0xa40107a2, hrgn=0x7d04051e) returned 2
[0223.317] DeleteObject (ho=0xa4040798) returned 1
[0223.317] DeleteObject (ho=0x7d04051e) returned 1
[0223.317] OffsetViewportOrgEx (in: hdc=0xa40107a2, x=0, y=0, lppt=0x237f1c8 | out: lppt=0x237f1c8) returned 1
[0223.317] DrawThemeParentBackground () returned 0x0
[0223.317] GetWindowPlacement (in: hWnd=0x1802c8, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0223.318] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0223.318] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.318] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.318] GetSystemMetrics (nIndex=42) returned 0
[0223.318] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.318] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0223.318] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0223.318] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0223.318] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0223.318] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0223.318] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0223.318] SaveDC (hdc=0xa40107a2) returned 2
[0223.318] GetNearestColor (hdc=0xa40107a2, color=0xf0f0f0) returned 0xf0f0f0
[0223.318] CreateSolidBrush (color=0xf0f0f0) returned 0xa910078d
[0223.318] FillRect (hDC=0xa40107a2, lprc=0x53dac8, hbr=0xa910078d) returned 1
[0223.318] DeleteObject (ho=0xa910078d) returned 1
[0223.318] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0223.318] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.319] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.319] GetSystemMetrics (nIndex=42) returned 0
[0223.319] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.319] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0223.319] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0223.319] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0223.319] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0223.319] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0223.319] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0223.319] SaveDC (hdc=0xa40107a2) returned 2
[0223.319] GetNearestColor (hdc=0xa40107a2, color=0xf0f0f0) returned 0xf0f0f0
[0223.319] CreateSolidBrush (color=0xf0f0f0) returned 0xaa10078d
[0223.319] FillRect (hDC=0xa40107a2, lprc=0x53da68, hbr=0xaa10078d) returned 1
[0223.319] DeleteObject (ho=0xaa10078d) returned 1
[0223.319] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0223.319] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.319] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.319] GetSystemMetrics (nIndex=42) returned 0
[0223.319] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.319] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0223.320] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0223.320] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107a2) returned 0x0
[0223.320] IsAppThemed () returned 0x1
[0223.320] GetThemeAppProperties () returned 0x3
[0223.320] GetThemeAppProperties () returned 0x3
[0223.320] IsAppThemed () returned 0x1
[0223.320] GetThemeAppProperties () returned 0x3
[0223.320] GetThemeAppProperties () returned 0x3
[0223.320] IsThemePartDefined () returned 0x1
[0223.320] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0223.320] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.320] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0223.320] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.320] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0223.320] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0223.320] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0223.320] LocalFree (hMem=0x89ee08) returned 0x0
[0223.320] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0223.320] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0223.320] LocalFree (hMem=0x89ec80) returned 0x0
[0223.320] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.320] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0223.321] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0223.321] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0223.321] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.321] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0223.321] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0223.321] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0223.321] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0223.321] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0223.321] SaveDC (hdc=0xa40107a2) returned 1
[0223.321] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e04051e
[0223.321] GetClipRgn (hdc=0xa40107a2, hrgn=0x7e04051e) returned 0
[0223.321] SelectClipRgn (hdc=0xa40107a2, hrgn=0xa6040798) returned 2
[0223.321] DeleteObject (ho=0x7e04051e) returned 1
[0223.321] DeleteObject (ho=0xa6040798) returned 1
[0223.321] OffsetViewportOrgEx (in: hdc=0xa40107a2, x=0, y=0, lppt=0x237fa50 | out: lppt=0x237fa50) returned 1
[0223.321] IsAppThemed () returned 0x1
[0223.321] GetThemeAppProperties () returned 0x3
[0223.321] GetThemeAppProperties () returned 0x3
[0223.321] DrawThemeBackground () returned 0x0
[0223.321] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0223.321] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107a2) returned 0x0
[0223.322] GdipCreateRegion (region=0x53dfec) returned 0x0
[0223.322] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.322] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0223.322] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.322] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0223.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0223.322] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0223.322] LocalFree (hMem=0x89ee08) returned 0x0
[0223.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0223.322] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0223.322] LocalFree (hMem=0x89eac0) returned 0x0
[0223.322] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.322] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0223.322] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0223.322] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0223.322] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.322] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0223.322] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0223.322] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0223.322] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0223.322] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0223.322] SaveDC (hdc=0xa40107a2) returned 1
[0223.322] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa7040798
[0223.323] GetClipRgn (hdc=0xa40107a2, hrgn=0xa7040798) returned 0
[0223.323] SelectClipRgn (hdc=0xa40107a2, hrgn=0x7f04051e) returned 2
[0223.323] DeleteObject (ho=0xa7040798) returned 1
[0223.323] DeleteObject (ho=0x7f04051e) returned 1
[0223.323] OffsetViewportOrgEx (in: hdc=0xa40107a2, x=0, y=0, lppt=0x237fd24 | out: lppt=0x237fd24) returned 1
[0223.323] IsAppThemed () returned 0x1
[0223.323] GetThemeAppProperties () returned 0x3
[0223.323] GetThemeAppProperties () returned 0x3
[0223.323] GetThemeBackgroundContentRect () returned 0x0
[0223.323] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0223.323] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107a2) returned 0x0
[0223.323] IsAppThemed () returned 0x1
[0223.323] GetThemeAppProperties () returned 0x3
[0223.323] GetThemeAppProperties () returned 0x3
[0223.323] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0223.323] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0223.323] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0223.323] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0223.323] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0223.323] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0223.323] SaveDC (hdc=0xa40107a2) returned 1
[0223.323] GetTextAlign (hdc=0xa40107a2) returned 0x0
[0223.324] GetTextColor (hdc=0xa40107a2) returned 0x0
[0223.324] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0223.324] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0223.324] SelectObject (hdc=0xa40107a2, h=0x730a066d) returned 0x8a01c2
[0223.324] GetBkMode (hdc=0xa40107a2) returned 2
[0223.324] SetBkMode (hdc=0xa40107a2, mode=1) returned 2
[0223.324] DrawTextExW (in: hdc=0xa40107a2, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x23800c4 | out: lpchText="OK", lprc=0x53df84) returned 13
[0223.324] DrawTextExW (in: hdc=0xa40107a2, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x23800c4 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0223.324] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0223.324] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107a2) returned 0x0
[0223.324] GetFocus () returned 0x1702d6
[0223.325] IsAppThemed () returned 0x1
[0223.325] GetThemeAppProperties () returned 0x3
[0223.325] GetThemeAppProperties () returned 0x3
[0223.325] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0223.325] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0xa40107a2, x1=0, y1=0, rop=0xcc0020) returned 1
[0223.325] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107a2) returned 0x0
[0223.325] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0223.325] SelectObject (hdc=0xa40107a2, h=0x85000f) returned 0x1e0507b9
[0223.325] DeleteDC (hdc=0xa40107a2) returned 1
[0223.325] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0223.325] EndPaint (hWnd=0x1702d2, lpPaint=0x53e2e4) returned 1
[0223.325] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.325] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.325] WaitMessage () returned 1
[0223.341] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.341] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0223.342] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.342] WaitMessage () returned 1
[0223.342] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.342] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0223.343] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.343] WaitMessage () returned 1
[0223.343] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.343] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0223.343] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.343] WaitMessage () returned 1
[0223.372] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.372] IsWindowUnicode (hWnd=0x102dc) returned 1
[0223.372] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.372] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.372] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.373] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.373] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.373] WaitMessage () returned 1
[0223.373] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.373] IsWindowUnicode (hWnd=0x102dc) returned 1
[0223.374] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.374] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.374] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.375] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.375] IsWindowUnicode (hWnd=0x102dc) returned 1
[0223.375] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.375] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.375] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.375] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.375] IsWindowUnicode (hWnd=0x102dc) returned 1
[0223.375] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.375] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.375] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.375] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.376] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.376] WaitMessage () returned 1
[0223.376] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.376] IsWindowUnicode (hWnd=0x102dc) returned 1
[0223.376] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.376] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.376] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.377] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.378] IsWindowUnicode (hWnd=0x102dc) returned 1
[0223.378] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.378] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.378] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.378] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.378] IsWindowUnicode (hWnd=0x102dc) returned 1
[0223.378] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.378] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.378] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.378] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.379] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.379] WaitMessage () returned 1
[0223.379] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.379] IsWindowUnicode (hWnd=0x102dc) returned 1
[0223.379] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.379] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.379] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.380] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.384] IsWindowUnicode (hWnd=0x102dc) returned 1
[0223.384] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.384] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.384] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.384] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.384] IsWindowUnicode (hWnd=0x102dc) returned 1
[0223.384] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.384] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.384] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.384] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.385] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.385] WaitMessage () returned 1
[0223.416] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.416] IsWindowUnicode (hWnd=0x1702d2) returned 1
[0223.416] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.416] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.416] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.417] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.417] IsWindowUnicode (hWnd=0x1702d2) returned 1
[0223.417] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.417] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.417] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.417] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x2a1, wParam=0x0, lParam=0x50013) returned 0x0
[0223.417] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.417] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.417] WaitMessage () returned 1
[0223.512] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.512] IsWindowUnicode (hWnd=0x202d0) returned 1
[0223.512] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.512] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.512] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.513] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.513] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0223.513] WaitMessage () returned 1
[0223.554] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.556] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x84, wParam=0x0, lParam=0x18e0354) returned 0x1
[0223.556] IsWindowUnicode (hWnd=0x1702d2) returned 1
[0223.556] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.556] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x84, wParam=0x0, lParam=0x18e0354) returned 0x1
[0223.556] GetDlgItem (hDlg=0x1802c8, nIDDlgItem=0) returned 0x0
[0223.556] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x210, wParam=0x201, lParam=0x110135) returned 0x0
[0223.556] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x21, wParam=0x1802c8, lParam=0x2010001) returned 0x1
[0223.556] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x21, wParam=0x1802c8, lParam=0x2010001) returned 0x1
[0223.556] SetCursor (hCursor=0x10003) returned 0x10003
[0223.557] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.557] DispatchMessageW (lpMsg=0x53e8a0)
[0223.557] GetKeyState (nVirtKey=1) returned -127
[0223.557] GetKeyState (nVirtKey=2) returned 0
[0223.557] GetKeyState (nVirtKey=4) returned 0
[0223.557] GetKeyState (nVirtKey=5) returned 0
[0223.557] GetKeyState (nVirtKey=6) returned 0
[0223.557] IsWindowVisible (hWnd=0x1702d2) returned 1
[0223.557] IsWindowEnabled (hWnd=0x1702d2) returned 1
[0223.557] SetFocus (hWnd=0x1702d2) returned 0x1702d6
[0223.557] GetFocus () returned 0x1702d2
[0223.557] IsChild (hWndParent=0x1802c8, hWnd=0x1702d2) returned 1
[0223.557] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x8, wParam=0x1702d2, lParam=0x0) returned 0x1
[0223.558] SendMessageW (hWnd=0x1702d6, Msg=0x2111, wParam=0x20002d6, lParam=0x1702d6) returned 0x0
[0223.558] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0223.560] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0223.560] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.560] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0223.561] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.561] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0223.562] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.563] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x7, wParam=0x1702d6, lParam=0x0) returned 0x0
[0223.563] GetStockObject (i=5) returned 0x900015
[0223.563] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0223.563] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0xd, wParam=0x3, lParam=0x89e6e8) returned 0x2
[0223.563] GetDlgItem (hDlg=0x1802c8, nIDDlgItem=1508050) returned 0x1702d2
[0223.563] SendMessageW (hWnd=0x1702d2, Msg=0x202b, wParam=0x1702d2, lParam=0x53de74) returned 0x0
[0223.563] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x202b, wParam=0x1702d2, lParam=0x53de74) returned 0x0
[0223.563] InvalidateRect (hWnd=0x1702d2, lpRect=0x0, bErase=0) returned 1
[0223.564] GetFocus () returned 0x1702d2
[0223.564] GetFocus () returned 0x1702d2
[0223.564] GetFocus () returned 0x1702d2
[0223.564] GetKeyState (nVirtKey=1) returned -127
[0223.565] GetKeyState (nVirtKey=2) returned 0
[0223.565] GetKeyState (nVirtKey=4) returned 0
[0223.565] GetKeyState (nVirtKey=5) returned 0
[0223.565] GetKeyState (nVirtKey=6) returned 0
[0223.565] GetCapture () returned 0x0
[0223.565] SetCapture (hWnd=0x1702d2) returned 0x0
[0223.565] GetKeyState (nVirtKey=1) returned -127
[0223.565] GetKeyState (nVirtKey=2) returned 0
[0223.565] GetKeyState (nVirtKey=4) returned 0
[0223.565] GetKeyState (nVirtKey=5) returned 0
[0223.565] GetKeyState (nVirtKey=6) returned 0
[0223.565] NotifyWinEvent (event=0x800a, hwnd=0x1702d2, idObject=-4, idChild=0)
[0223.565] InvalidateRect (hWnd=0x1702d2, lpRect=0x53e4c8, bErase=0) returned 1
[0223.565] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.565] IsWindowUnicode (hWnd=0x1702d2) returned 1
[0223.565] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.565] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0223.565] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0223.565] MapWindowPoints (in: hWndFrom=0x1702d2, hWndTo=0x0, lpPoints=0x23803c8, cPoints=0x1 | out: lpPoints=0x23803c8) returned 25756481
[0223.565] NotifyWinEvent (event=0x800a, hwnd=0x1702d2, idObject=-4, idChild=0)
[0223.565] InvalidateRect (hWnd=0x1702d2, lpRect=0x53e468, bErase=0) returned 1
[0223.566] UpdateWindow (hWnd=0x1702d2) returned 1
[0223.566] BeginPaint (in: hWnd=0x1702d2, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0223.566] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0223.566] CreateCompatibleDC (hdc=0x10105d6) returned 0x150107cf
[0223.566] SelectObject (hdc=0x150107cf, h=0x1e0507b9) returned 0x85000f
[0223.566] GdipCreateFromHDC (hdc=0x150107cf, graphics=0x53df98) returned 0x0
[0223.566] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0223.566] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0223.566] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0223.566] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.566] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0223.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0223.566] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0223.566] LocalFree (hMem=0x89eac0) returned 0x0
[0223.566] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.567] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0223.567] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.567] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0223.567] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0223.567] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc570dbd) returned 0x0
[0223.567] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.567] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0223.567] GetCurrentObject (hdc=0x150107cf, type=0x1) returned 0xb00017
[0223.567] GetCurrentObject (hdc=0x150107cf, type=0x2) returned 0x900010
[0223.567] GetCurrentObject (hdc=0x150107cf, type=0x7) returned 0x1e0507b9
[0223.567] GetCurrentObject (hdc=0x150107cf, type=0x6) returned 0x8a01c2
[0223.567] SaveDC (hdc=0x150107cf) returned 1
[0223.567] GetNearestColor (hdc=0x150107cf, color=0xf0f0f0) returned 0xf0f0f0
[0223.567] GetNearestColor (hdc=0x150107cf, color=0xa0a0a0) returned 0xa0a0a0
[0223.567] GetNearestColor (hdc=0x150107cf, color=0x696969) returned 0x696969
[0223.567] GetNearestColor (hdc=0x150107cf, color=0xa0a0a0) returned 0xa0a0a0
[0223.567] GetNearestColor (hdc=0x150107cf, color=0x0) returned 0x0
[0223.567] GetNearestColor (hdc=0x150107cf, color=0xffffff) returned 0xffffff
[0223.568] GetNearestColor (hdc=0x150107cf, color=0xe5e5e5) returned 0xe5e5e5
[0223.568] GetNearestColor (hdc=0x150107cf, color=0xd7d7d7) returned 0xd7d7d7
[0223.568] GetNearestColor (hdc=0x150107cf, color=0x0) returned 0x0
[0223.568] RestoreDC (hdc=0x150107cf, nSavedDC=-1) returned 1
[0223.568] GdipReleaseDC (graphics=0x5d92c30, hdc=0x150107cf) returned 0x0
[0223.568] IsAppThemed () returned 0x1
[0223.568] GetThemeAppProperties () returned 0x3
[0223.570] GetThemeAppProperties () returned 0x3
[0223.570] IsAppThemed () returned 0x1
[0223.570] GetThemeAppProperties () returned 0x3
[0223.570] GetThemeAppProperties () returned 0x3
[0223.571] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x2380b3c | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0223.571] IsAppThemed () returned 0x1
[0223.571] GetThemeAppProperties () returned 0x3
[0223.571] GetThemeAppProperties () returned 0x3
[0223.571] IsAppThemed () returned 0x1
[0223.571] GetThemeAppProperties () returned 0x3
[0223.571] GetThemeAppProperties () returned 0x3
[0223.571] IsAppThemed () returned 0x1
[0223.571] GetThemeAppProperties () returned 0x3
[0223.571] GetThemeAppProperties () returned 0x3
[0223.571] IsAppThemed () returned 0x1
[0223.571] GetThemeAppProperties () returned 0x3
[0223.571] GetThemeAppProperties () returned 0x3
[0223.571] IsThemePartDefined () returned 0x1
[0223.571] IsAppThemed () returned 0x1
[0223.571] GetThemeAppProperties () returned 0x3
[0223.571] GetThemeAppProperties () returned 0x3
[0223.571] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0223.571] IsAppThemed () returned 0x1
[0223.572] GetThemeAppProperties () returned 0x3
[0223.572] GetThemeAppProperties () returned 0x3
[0223.572] IsAppThemed () returned 0x1
[0223.572] GetThemeAppProperties () returned 0x3
[0223.572] GetThemeAppProperties () returned 0x3
[0223.572] IsThemePartDefined () returned 0x1
[0223.572] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0223.572] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.572] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0223.572] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.572] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0223.572] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0223.572] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0223.572] LocalFree (hMem=0x89ea88) returned 0x0
[0223.572] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0223.572] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0223.572] LocalFree (hMem=0x89ec80) returned 0x0
[0223.572] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.572] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0223.572] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0223.572] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0223.572] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.573] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0223.573] GetCurrentObject (hdc=0x150107cf, type=0x1) returned 0xb00017
[0223.573] GetCurrentObject (hdc=0x150107cf, type=0x2) returned 0x900010
[0223.573] GetCurrentObject (hdc=0x150107cf, type=0x7) returned 0x1e0507b9
[0223.573] GetCurrentObject (hdc=0x150107cf, type=0x6) returned 0x8a01c2
[0223.573] SaveDC (hdc=0x150107cf) returned 1
[0223.573] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8004051e
[0223.573] GetClipRgn (hdc=0x150107cf, hrgn=0x8004051e) returned 0
[0223.573] SelectClipRgn (hdc=0x150107cf, hrgn=0xab040798) returned 2
[0223.573] DeleteObject (ho=0x8004051e) returned 1
[0223.573] DeleteObject (ho=0xab040798) returned 1
[0223.573] OffsetViewportOrgEx (in: hdc=0x150107cf, x=0, y=0, lppt=0x23811ec | out: lppt=0x23811ec) returned 1
[0223.573] DrawThemeParentBackground ()
[0223.573] GetWindowPlacement (in: hWnd=0x1802c8, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0223.573] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0223.573] GetWindowTextLengthW (hWnd=0x1802c8)
[0223.573] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.574] GetSystemMetrics (nIndex=42) returned 0
[0223.574] GetWindowTextW (hWnd=0x1802c8, lpString=0x53d878, nMaxCount=11)
[0223.574] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0223.574] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0223.574] GetCurrentObject (hdc=0x150107cf, type=0x1) returned 0xb00017
[0223.574] GetCurrentObject (hdc=0x150107cf, type=0x2) returned 0x900010
[0223.574] GetCurrentObject (hdc=0x150107cf, type=0x7) returned 0x1e0507b9
[0223.574] GetCurrentObject (hdc=0x150107cf, type=0x6) returned 0x8a01c2
[0223.574] SaveDC (hdc=0x150107cf) returned 2
[0223.574] GetNearestColor (hdc=0x150107cf, color=0xf0f0f0) returned 0xf0f0f0
[0223.574] CreateSolidBrush (color=0xf0f0f0) returned 0xab10078d
[0223.574] FillRect (hDC=0x150107cf, lprc=0x53d760, hbr=0xab10078d) returned 1
[0223.574] DeleteObject (ho=0xab10078d) returned 1
[0223.574] RestoreDC (hdc=0x150107cf, nSavedDC=-1) returned 1
[0223.574] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.575] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0223.575] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0223.575] GetCurrentObject (hdc=0x150107cf, type=0x1) returned 0xb00017
[0223.575] GetCurrentObject (hdc=0x150107cf, type=0x2) returned 0x900010
[0223.575] GetCurrentObject (hdc=0x150107cf, type=0x7) returned 0x1e0507b9
[0223.575] GetCurrentObject (hdc=0x150107cf, type=0x6) returned 0x8a01c2
[0223.575] SaveDC (hdc=0x150107cf) returned 2
[0223.575] GetNearestColor (hdc=0x150107cf, color=0xf0f0f0) returned 0xf0f0f0
[0223.575] CreateSolidBrush (color=0xf0f0f0) returned 0xac10078d
[0223.575] FillRect (hDC=0x150107cf, lprc=0x53d700, hbr=0xac10078d) returned 1
[0223.575] DeleteObject (ho=0xac10078d) returned 1
[0223.575] RestoreDC (hdc=0x150107cf, nSavedDC=-1) returned 1
[0223.575] GetWindowTextLengthW (hWnd=0x1802c8)
[0223.575] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.575] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0223.576] RestoreDC (hdc=0x150107cf, nSavedDC=-1) returned 1
[0223.576] GdipReleaseDC (graphics=0x5d92c30, hdc=0x150107cf) returned 0x0
[0223.576] IsAppThemed () returned 0x1
[0223.576] GetThemeAppProperties () returned 0x3
[0223.576] GetThemeAppProperties () returned 0x3
[0223.576] IsAppThemed () returned 0x1
[0223.576] GetThemeAppProperties () returned 0x3
[0223.576] GetThemeAppProperties () returned 0x3
[0223.576] IsThemePartDefined () returned 0x1
[0223.577] GdipCreateRegion (region=0x53dc80) returned 0x0
[0223.577] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.577] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0223.577] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.577] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0223.577] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0223.577] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0223.577] LocalFree (hMem=0x89eac0) returned 0x0
[0223.577] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0223.577] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0223.577] LocalFree (hMem=0x89ee08) returned 0x0
[0223.577] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.577] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0223.577] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0223.577] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0223.577] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.577] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0223.578] IsAppThemed () returned 0x1
[0223.578] GetThemeAppProperties () returned 0x3
[0223.578] GetThemeAppProperties () returned 0x3
[0223.578] DrawThemeBackground () returned 0x0
[0223.578] RestoreDC (hdc=0x150107cf, nSavedDC=-1) returned 1
[0223.578] GdipReleaseDC (graphics=0x5d92c30, hdc=0x150107cf) returned 0x0
[0223.578] GdipCreateRegion (region=0x53dc84) returned 0x0
[0223.578] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.578] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0223.578] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.578] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0223.578] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0223.578] LocalFree (hMem=0x89ea88) returned 0x0
[0223.578] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0223.578] LocalFree (hMem=0x89ec80) returned 0x0
[0223.578] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.578] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0223.578] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0223.578] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0223.579] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.579] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0223.579] IsAppThemed () returned 0x1
[0223.579] GetThemeAppProperties () returned 0x3
[0223.579] GetThemeAppProperties () returned 0x3
[0223.579] GetThemeBackgroundContentRect () returned 0x0
[0223.579] RestoreDC (hdc=0x150107cf, nSavedDC=-1) returned 1
[0223.579] GdipReleaseDC (graphics=0x5d92c30, hdc=0x150107cf) returned 0x0
[0223.579] IsAppThemed () returned 0x1
[0223.579] GetThemeAppProperties () returned 0x3
[0223.579] GetThemeAppProperties () returned 0x3
[0223.579] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0223.579] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0223.579] GetCurrentObject (hdc=0x150107cf, type=0x1) returned 0xb00017
[0223.579] GetCurrentObject (hdc=0x150107cf, type=0x2) returned 0x900010
[0223.579] GetCurrentObject (hdc=0x150107cf, type=0x7) returned 0x1e0507b9
[0223.579] GetCurrentObject (hdc=0x150107cf, type=0x6) returned 0x8a01c2
[0223.579] SaveDC (hdc=0x150107cf) returned 1
[0223.579] GetTextAlign (hdc=0x150107cf) returned 0x0
[0223.579] GetTextColor (hdc=0x150107cf) returned 0x0
[0223.579] GetCurrentObject (hdc=0x150107cf, type=0x6) returned 0x8a01c2
[0223.580] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0223.580] SelectObject (hdc=0x150107cf, h=0x730a066d) returned 0x8a01c2
[0223.580] GetBkMode (hdc=0x150107cf) returned 2
[0223.580] SetBkMode (hdc=0x150107cf, mode=1) returned 2
[0223.580] DrawTextExW (in: hdc=0x150107cf, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x23820e8 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0223.580] DrawTextExW (in: hdc=0x150107cf, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x23820e8 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0223.580] RestoreDC (hdc=0x150107cf, nSavedDC=-1) returned 1
[0223.580] GdipReleaseDC (graphics=0x5d92c30, hdc=0x150107cf) returned 0x0
[0223.580] GetFocus () returned 0x1702d2
[0223.580] IsAppThemed () returned 0x1
[0223.580] GetThemeAppProperties () returned 0x3
[0223.581] GetThemeAppProperties () returned 0x3
[0223.581] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0223.581] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x150107cf, x1=0, y1=0, rop=0xcc0020) returned 1
[0223.581] GdipReleaseDC (graphics=0x5d92c30, hdc=0x150107cf) returned 0x0
[0223.581] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0223.581] SelectObject (hdc=0x150107cf, h=0x85000f) returned 0x1e0507b9
[0223.581] DeleteDC (hdc=0x150107cf) returned 1
[0223.581] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0223.581] EndPaint (hWnd=0x1702d2, lpPaint=0x53df7c) returned 1
[0223.581] MapWindowPoints (in: hWndFrom=0x1702d2, hWndTo=0x0, lpPoints=0x23821e4, cPoints=0x1 | out: lpPoints=0x23821e4) returned 25756481
[0223.581] WindowFromPoint (Point=0x354) returned 0x1702d2
[0223.581] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x84, wParam=0x0, lParam=0x18e0354) returned 0x1
[0223.581] NotifyWinEvent (event=0x800a, hwnd=0x1702d2, idObject=-4, idChild=0)
[0223.581] NotifyWinEvent (event=0x800c, hwnd=0x1702d2, idObject=-4, idChild=0)
[0223.581] GetWindowTextLengthW (hWnd=0x1702d6) returned 0
[0223.582] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0223.582] GetSystemMetrics (nIndex=42) returned 0
[0223.582] GetWindowTextW (in: hWnd=0x1702d6, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0223.582] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0223.582] SendMessageW (hWnd=0x1802c8, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0223.582] GetCapture () returned 0x1702d2
[0223.582] ReleaseCapture () returned 1
[0223.582] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0223.582] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0223.582] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x84, wParam=0x0, lParam=0x18e0354) returned 0x1
[0223.583] IsWindow (hWnd=0x70036) returned 1
[0223.583] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0223.583] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0223.583] IsWindow (hWnd=0x70036) returned 1
[0223.583] SetActiveWindow (hWnd=0x70036) returned 0x1802c8
[0223.583] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0223.585] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0223.585] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0223.586] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0223.586] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0223.586] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0223.587] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0223.587] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1802c8) returned 0x1
[0223.589] GetFocus () returned 0x1702d2
[0223.589] SetFocus (hWnd=0x202c6) returned 0x1702d2
[0223.589] GetFocus () returned 0x202c6
[0223.589] IsChild (hWndParent=0x1802c8, hWnd=0x202c6) returned 0
[0223.589] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0223.590] GetCapture () returned 0x0
[0223.590] InvalidateRect (hWnd=0x1702d2, lpRect=0x0, bErase=0) returned 1
[0223.590] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0223.592] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0223.593] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.593] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0223.593] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.593] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0223.594] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.594] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x1702d2, lParam=0x0) returned 0x0
[0223.594] GetStockObject (i=5) returned 0x900015
[0223.594] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0223.594] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8da940) returned 0x7
[0223.594] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0223.594] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0223.594] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0223.594] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0223.596] IsWindow (hWnd=0x202c6) returned 1
[0223.596] SetFocus (hWnd=0x202c6) returned 0x202c6
[0223.596] GetWindowLongW (hWnd=0x1802c8, nIndex=-8) returned 458806
[0223.596] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0223.596] GetCurrentThreadId () returned 0x11d0
[0223.596] IsWindow (hWnd=0x70036) returned 1
[0223.596] IsWindow (hWnd=0x70036) returned 1
[0223.596] IsWindowVisible (hWnd=0x70036) returned 1
[0223.596] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0223.596] GetFocus () returned 0x202c6
[0223.596] IsChild (hWndParent=0x1802c8, hWnd=0x202c6) returned 0
[0223.596] ShowWindow (hWnd=0x1802c8, nCmdShow=0) returned 1
[0223.596] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0223.596] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0223.598] GetWindowPlacement (in: hWnd=0x1802c8, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0223.598] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0223.598] GetClientRect (in: hWnd=0x1802c8, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0223.598] GetWindowRect (in: hWnd=0x1802c8, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0223.598] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0223.598] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0223.599] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0223.599] GetWindowLongW (hWnd=0x1802c8, nIndex=-20) returned 327937
[0223.599] DestroyWindow (hWnd=0x1802c8) returned 1
[0223.599] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0223.604] GetWindowTextLengthW (hWnd=0x1802c8) returned 10
[0223.604] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0223.604] GetSystemMetrics (nIndex=42) returned 0
[0223.604] GetWindowTextW (in: hWnd=0x1802c8, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0223.604] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0223.604] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0223.604] SendMessageW (hWnd=0x1702d6, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0223.604] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0223.604] SendMessageW (hWnd=0x1702d6, Msg=0xb0, wParam=0x236a130, lParam=0x53e518) returned 0x0
[0223.604] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xb0, wParam=0x236a130, lParam=0x53e518) returned 0x0
[0223.605] GetWindowTextLengthW (hWnd=0x1702d6) returned 0
[0223.605] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0223.605] GetSystemMetrics (nIndex=42) returned 0
[0223.605] GetWindowTextW (in: hWnd=0x1702d6, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0223.605] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0223.605] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0223.605] GetWindowThreadProcessId (in: hWnd=0xc02c0, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0223.605] GetWindow (hWnd=0xc02c0, uCmd=0x5) returned 0x0
[0223.605] GetWindowLongW (hWnd=0xc02c0, nIndex=-20) returned 65792
[0223.605] DestroyWindow (hWnd=0xc02c0) returned 1
[0223.605] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c0, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0223.605] GetWindowTextLengthW (hWnd=0xc02c0) returned 25
[0223.605] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0223.605] GetSystemMetrics (nIndex=42) returned 0
[0223.605] GetWindowTextW (in: hWnd=0xc02c0, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0223.605] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c0, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0223.605] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0223.606] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02c0, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0223.607] GetWindowTextLengthW (hWnd=0xc02be) returned 16
[0223.607] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0223.607] GetSystemMetrics (nIndex=42) returned 0
[0223.607] GetWindowTextW (in: hWnd=0xc02be, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0223.607] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0223.607] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0223.607] InvalidateRect (hWnd=0x1702d2, lpRect=0x0, bErase=0) returned 1
[0223.607] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0223.607] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0223.608] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1702d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0223.609] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc02be, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0223.610] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702d2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0223.611] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0223.612] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1802c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0223.614] GetProcessWindowStation () returned 0x13c
[0223.614] GetActiveWindow () returned 0x70036
[0223.614] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0223.614] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0223.614] GetCurrentThreadId () returned 0x11d0
[0223.614] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf47f6, lParam=0x0) returned 1
[0223.615] IsWindowVisible (hWnd=0x70036) returned 1
[0223.615] IsWindowEnabled (hWnd=0x70036) returned 1
[0223.615] IsWindowVisible (hWnd=0x602b6) returned 0
[0223.615] IsWindowVisible (hWnd=0x901f8) returned 0
[0223.615] IsWindowVisible (hWnd=0x202d0) returned 0
[0223.615] IsWindowVisible (hWnd=0x202d4) returned 0
[0223.620] GetActiveWindow () returned 0x70036
[0223.620] GetFocus () returned 0x202c6
[0223.620] IsWindow (hWnd=0x70036) returned 1
[0223.620] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0223.620] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0223.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0223.621] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0223.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0223.630] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1902c8) returned 0x1
[0223.635] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0223.635] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0223.638] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1c013e, lParam=0x0) returned 0x0
[0223.638] GetCapture () returned 0x0
[0223.638] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0223.639] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0223.641] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.641] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0223.643] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0xf0105ee
[0223.643] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0223.643] CreateCompatibleDC (hdc=0xf0105ee) returned 0x270107cf
[0223.643] SelectObject (hdc=0x270107cf, h=0x1e0507b9) returned 0x85000f
[0223.643] GdipCreateFromHDC (hdc=0x270107cf, graphics=0x53e108) returned 0x0
[0223.643] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0223.643] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0223.643] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0223.644] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.644] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0223.644] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0223.644] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0223.644] LocalFree (hMem=0x89ee40) returned 0x0
[0223.644] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.644] GdipCreateRegion (region=0x53e150) returned 0x0
[0223.644] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.644] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0223.644] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0223.644] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc550dbd) returned 0x0
[0223.644] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.644] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0223.644] GetCurrentObject (hdc=0x270107cf, type=0x1) returned 0xb00017
[0223.644] GetCurrentObject (hdc=0x270107cf, type=0x2) returned 0x900010
[0223.644] GetCurrentObject (hdc=0x270107cf, type=0x7) returned 0x1e0507b9
[0223.644] GetCurrentObject (hdc=0x270107cf, type=0x6) returned 0x8a01c2
[0223.644] SaveDC (hdc=0x270107cf) returned 1
[0223.644] GetNearestColor (hdc=0x270107cf, color=0xff) returned 0xff
[0223.645] GetNearestColor (hdc=0x270107cf, color=0x55) returned 0x55
[0223.645] GetNearestColor (hdc=0x270107cf, color=0x0) returned 0x0
[0223.645] GetNearestColor (hdc=0x270107cf, color=0x55) returned 0x55
[0223.645] GetNearestColor (hdc=0x270107cf, color=0x0) returned 0x0
[0223.645] GetNearestColor (hdc=0x270107cf, color=0x8080ff) returned 0x8080ff
[0223.645] GetNearestColor (hdc=0x270107cf, color=0x7373e5) returned 0x7373e5
[0223.645] GetNearestColor (hdc=0x270107cf, color=0xe5) returned 0xe5
[0223.645] GetNearestColor (hdc=0x270107cf, color=0x0) returned 0x0
[0223.645] RestoreDC (hdc=0x270107cf, nSavedDC=-1) returned 1
[0223.645] GdipReleaseDC (graphics=0x5d92c30, hdc=0x270107cf) returned 0x0
[0223.645] IsAppThemed () returned 0x1
[0223.645] GetThemeAppProperties () returned 0x3
[0223.645] GetThemeAppProperties () returned 0x3
[0223.645] IsAppThemed () returned 0x1
[0223.645] GetThemeAppProperties () returned 0x3
[0223.645] GetThemeAppProperties () returned 0x3
[0223.645] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0223.645] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x23834dc | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0223.646] IsAppThemed () returned 0x1
[0223.646] GetThemeAppProperties () returned 0x3
[0223.646] GetThemeAppProperties () returned 0x3
[0223.646] IsAppThemed () returned 0x1
[0223.646] GetThemeAppProperties () returned 0x3
[0223.646] GetThemeAppProperties () returned 0x3
[0223.646] GetFocus () returned 0x1c013e
[0223.650] IsAppThemed () returned 0x1
[0223.650] GetThemeAppProperties () returned 0x3
[0223.650] GetThemeAppProperties () returned 0x3
[0223.650] IsAppThemed () returned 0x1
[0223.650] GetThemeAppProperties () returned 0x3
[0223.650] GetThemeAppProperties () returned 0x3
[0223.650] IsThemePartDefined () returned 0x1
[0223.650] IsAppThemed () returned 0x1
[0223.650] GetThemeAppProperties () returned 0x3
[0223.650] GetThemeAppProperties () returned 0x3
[0223.650] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0223.650] IsAppThemed () returned 0x1
[0223.650] GetThemeAppProperties () returned 0x3
[0223.650] GetThemeAppProperties () returned 0x3
[0223.650] IsAppThemed () returned 0x1
[0223.650] GetThemeAppProperties () returned 0x3
[0223.650] GetThemeAppProperties () returned 0x3
[0223.650] IsThemePartDefined () returned 0x1
[0223.650] GdipCreateRegion (region=0x53de78) returned 0x0
[0223.650] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.650] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0223.650] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.651] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0223.651] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0223.651] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0223.651] LocalFree (hMem=0x89ee08) returned 0x0
[0223.651] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0223.651] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0223.651] LocalFree (hMem=0x89ee08) returned 0x0
[0223.651] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.651] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0223.651] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0223.651] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0223.651] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.651] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0223.651] GetCurrentObject (hdc=0x270107cf, type=0x1) returned 0xb00017
[0223.651] GetCurrentObject (hdc=0x270107cf, type=0x2) returned 0x900010
[0223.651] GetCurrentObject (hdc=0x270107cf, type=0x7) returned 0x1e0507b9
[0223.651] GetCurrentObject (hdc=0x270107cf, type=0x6) returned 0x8a01c2
[0223.651] SaveDC (hdc=0x270107cf) returned 1
[0223.651] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xae040798
[0223.651] GetClipRgn (hdc=0x270107cf, hrgn=0xae040798) returned 0
[0223.652] SelectClipRgn (hdc=0x270107cf, hrgn=0x8904051e) returned 2
[0223.652] DeleteObject (ho=0xae040798) returned 1
[0223.652] DeleteObject (ho=0x8904051e) returned 1
[0223.652] OffsetViewportOrgEx (in: hdc=0x270107cf, x=0, y=0, lppt=0x2383b8c | out: lppt=0x2383b8c) returned 1
[0223.652] DrawThemeParentBackground () returned 0x0
[0223.652] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0223.652] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0223.652] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0223.652] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0223.652] GetSystemMetrics (nIndex=42) returned 0
[0223.652] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0223.652] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0223.652] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0223.652] GetCurrentObject (hdc=0x270107cf, type=0x1) returned 0xb00017
[0223.652] GetCurrentObject (hdc=0x270107cf, type=0x2) returned 0x900010
[0223.652] GetCurrentObject (hdc=0x270107cf, type=0x7) returned 0x1e0507b9
[0223.652] GetCurrentObject (hdc=0x270107cf, type=0x6) returned 0x8a01c2
[0223.652] SaveDC (hdc=0x270107cf) returned 2
[0223.653] GetNearestColor (hdc=0x270107cf, color=0xff) returned 0xff
[0223.653] CreateSolidBrush (color=0xff) returned 0xad10078d
[0223.653] FillRect (hDC=0x270107cf, lprc=0x53d8d8, hbr=0xad10078d) returned 1
[0223.653] DeleteObject (ho=0xad10078d) returned 1
[0223.653] RestoreDC (hdc=0x270107cf, nSavedDC=-1) returned 1
[0223.653] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0223.653] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0223.653] GetSystemMetrics (nIndex=42) returned 0
[0223.653] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0223.653] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0223.653] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0223.653] GetCurrentObject (hdc=0x270107cf, type=0x1) returned 0xb00017
[0223.653] GetCurrentObject (hdc=0x270107cf, type=0x2) returned 0x900010
[0223.653] GetCurrentObject (hdc=0x270107cf, type=0x7) returned 0x1e0507b9
[0223.653] GetCurrentObject (hdc=0x270107cf, type=0x6) returned 0x8a01c2
[0223.653] SaveDC (hdc=0x270107cf) returned 2
[0223.653] GetNearestColor (hdc=0x270107cf, color=0xff) returned 0xff
[0223.653] CreateSolidBrush (color=0xff) returned 0xae10078d
[0223.653] FillRect (hDC=0x270107cf, lprc=0x53d878, hbr=0xae10078d) returned 1
[0223.654] DeleteObject (ho=0xae10078d) returned 1
[0223.654] RestoreDC (hdc=0x270107cf, nSavedDC=-1) returned 1
[0223.654] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0223.654] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0223.654] GetSystemMetrics (nIndex=42) returned 0
[0223.654] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0223.654] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0223.654] RestoreDC (hdc=0x270107cf, nSavedDC=-1) returned 1
[0223.654] GdipReleaseDC (graphics=0x5d92c30, hdc=0x270107cf) returned 0x0
[0223.654] IsAppThemed () returned 0x1
[0223.654] GetThemeAppProperties () returned 0x3
[0223.654] GetThemeAppProperties () returned 0x3
[0223.654] IsAppThemed () returned 0x1
[0223.655] GetThemeAppProperties () returned 0x3
[0223.655] GetThemeAppProperties () returned 0x3
[0223.655] IsThemePartDefined () returned 0x1
[0223.655] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0223.655] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.655] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0223.655] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.655] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0223.655] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0223.655] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0223.655] LocalFree (hMem=0x89ea88) returned 0x0
[0223.655] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0223.655] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0223.655] LocalFree (hMem=0x89ee08) returned 0x0
[0223.655] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.655] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0223.655] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0223.655] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0223.655] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.655] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0223.655] GetCurrentObject (hdc=0x270107cf, type=0x1) returned 0xb00017
[0223.655] GetCurrentObject (hdc=0x270107cf, type=0x2) returned 0x900010
[0223.655] GetCurrentObject (hdc=0x270107cf, type=0x7) returned 0x1e0507b9
[0223.656] GetCurrentObject (hdc=0x270107cf, type=0x6) returned 0x8a01c2
[0223.656] SaveDC (hdc=0x270107cf) returned 1
[0223.656] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8a04051e
[0223.656] GetClipRgn (hdc=0x270107cf, hrgn=0x8a04051e) returned 0
[0223.656] SelectClipRgn (hdc=0x270107cf, hrgn=0xb0040798) returned 2
[0223.656] DeleteObject (ho=0x8a04051e) returned 1
[0223.656] DeleteObject (ho=0xb0040798) returned 1
[0223.656] OffsetViewportOrgEx (in: hdc=0x270107cf, x=0, y=0, lppt=0x23843f0 | out: lppt=0x23843f0) returned 1
[0223.656] IsAppThemed () returned 0x1
[0223.656] GetThemeAppProperties () returned 0x3
[0223.656] GetThemeAppProperties () returned 0x3
[0223.656] DrawThemeBackground () returned 0x0
[0223.656] RestoreDC (hdc=0x270107cf, nSavedDC=-1) returned 1
[0223.656] GdipReleaseDC (graphics=0x5d92c30, hdc=0x270107cf) returned 0x0
[0223.656] GdipCreateRegion (region=0x53de00) returned 0x0
[0223.656] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.656] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0223.656] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.656] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0223.656] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0223.656] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0223.657] LocalFree (hMem=0x89ea88) returned 0x0
[0223.657] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0223.657] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0223.657] LocalFree (hMem=0x89ee08) returned 0x0
[0223.657] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.657] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0223.657] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0223.657] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0223.657] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.657] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0223.657] GetCurrentObject (hdc=0x270107cf, type=0x1) returned 0xb00017
[0223.657] GetCurrentObject (hdc=0x270107cf, type=0x2) returned 0x900010
[0223.657] GetCurrentObject (hdc=0x270107cf, type=0x7) returned 0x1e0507b9
[0223.657] GetCurrentObject (hdc=0x270107cf, type=0x6) returned 0x8a01c2
[0223.657] SaveDC (hdc=0x270107cf) returned 1
[0223.657] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb1040798
[0223.657] GetClipRgn (hdc=0x270107cf, hrgn=0xb1040798) returned 0
[0223.657] SelectClipRgn (hdc=0x270107cf, hrgn=0x8b04051e) returned 2
[0223.657] DeleteObject (ho=0xb1040798) returned 1
[0223.657] DeleteObject (ho=0x8b04051e) returned 1
[0223.657] OffsetViewportOrgEx (in: hdc=0x270107cf, x=0, y=0, lppt=0x23846c4 | out: lppt=0x23846c4) returned 1
[0223.657] IsAppThemed () returned 0x1
[0223.658] GetThemeAppProperties () returned 0x3
[0223.658] GetThemeAppProperties () returned 0x3
[0223.658] GetThemeBackgroundContentRect () returned 0x0
[0223.658] RestoreDC (hdc=0x270107cf, nSavedDC=-1) returned 1
[0223.658] GdipReleaseDC (graphics=0x5d92c30, hdc=0x270107cf) returned 0x0
[0223.658] IsAppThemed () returned 0x1
[0223.658] GetThemeAppProperties () returned 0x3
[0223.658] GetThemeAppProperties () returned 0x3
[0223.658] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0223.658] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0223.658] GetCurrentObject (hdc=0x270107cf, type=0x1) returned 0xb00017
[0223.658] GetCurrentObject (hdc=0x270107cf, type=0x2) returned 0x900010
[0223.658] GetCurrentObject (hdc=0x270107cf, type=0x7) returned 0x1e0507b9
[0223.658] GetCurrentObject (hdc=0x270107cf, type=0x6) returned 0x8a01c2
[0223.658] SaveDC (hdc=0x270107cf) returned 1
[0223.658] GetTextAlign (hdc=0x270107cf) returned 0x0
[0223.658] GetTextColor (hdc=0x270107cf) returned 0x0
[0223.658] GetCurrentObject (hdc=0x270107cf, type=0x6) returned 0x8a01c2
[0223.658] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0223.658] SelectObject (hdc=0x270107cf, h=0x450a0799) returned 0x8a01c2
[0223.659] GetBkMode (hdc=0x270107cf) returned 2
[0223.659] SetBkMode (hdc=0x270107cf, mode=1) returned 2
[0223.659] DrawTextExW (in: hdc=0x270107cf, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2384a64 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0223.659] DrawTextExW (in: hdc=0x270107cf, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2384a64 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0223.659] RestoreDC (hdc=0x270107cf, nSavedDC=-1) returned 1
[0223.659] GdipReleaseDC (graphics=0x5d92c30, hdc=0x270107cf) returned 0x0
[0223.659] GetFocus () returned 0x1c013e
[0223.659] IsAppThemed () returned 0x1
[0223.659] GetThemeAppProperties () returned 0x3
[0223.659] GetThemeAppProperties () returned 0x3
[0223.659] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0223.660] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x270107cf, x1=0, y1=0, rop=0xcc0020) returned 1
[0223.660] GdipReleaseDC (graphics=0x5d92c30, hdc=0x270107cf) returned 0x0
[0223.660] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0223.660] SelectObject (hdc=0x270107cf, h=0x85000f) returned 0x1e0507b9
[0223.660] DeleteDC (hdc=0x270107cf) returned 1
[0223.660] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0223.660] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0223.956] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0223.956] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0223.956] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1902c8) returned 0x1
[0223.965] GetFocus () returned 0x1902c8
[0223.965] GetAncestor (hwnd=0x1902c8, gaFlags=0x1) returned 0x10010
[0223.965] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0223.965] SetFocus (hWnd=0x202c6) returned 0x0
[0223.967] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0223.969] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0223.969] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.969] GetFocus () returned 0x70036
[0223.969] SetFocus (hWnd=0x202c6) returned 0x0
[0223.975] IsWindow (hWnd=0x70036) returned 1
[0223.975] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0223.975] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0223.975] IsWindow (hWnd=0x70036) returned 1
[0223.975] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0223.975] IsWindow (hWnd=0x202c6) returned 1
[0223.975] SetFocus (hWnd=0x202c6) returned 0x70036
[0223.975] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0223.976] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0223.977] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0223.979] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.979] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0223.979] GetStockObject (i=5) returned 0x900015
[0223.979] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0223.979] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8da940) returned 0x7
[0223.979] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0223.979] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0223.979] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0223.979] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0223.980] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0223.980] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0223.981] GetFocus () returned 0x202c6
[0223.981] GetCapture () returned 0x0
[0223.981] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0223.981] IsWindowUnicode (hWnd=0x202c6) returned 1
[0223.981] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0223.981] TranslateMessage (lpMsg=0x53eef8) returned 0
[0223.981] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0223.981] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0223.982] IsWindowUnicode (hWnd=0x202c6) returned 1
[0223.982] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0223.982] TranslateMessage (lpMsg=0x53eef8) returned 0
[0223.982] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0223.982] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0223.982] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0223.982] CreateCompatibleDC (hdc=0x8b010786) returned 0x200107c5
[0223.982] SelectObject (hdc=0x200107c5, h=0x1e0507b9) returned 0x85000f
[0223.982] GdipCreateFromHDC (hdc=0x200107c5, graphics=0x53e958) returned 0x0
[0223.983] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0223.983] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0223.983] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0223.983] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.983] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0223.983] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0223.983] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0223.983] LocalFree (hMem=0x89eac0) returned 0x0
[0223.983] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0223.983] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0223.983] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.983] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0223.983] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0223.983] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc530dbd) returned 0x0
[0223.983] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.983] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0223.983] GetCurrentObject (hdc=0x200107c5, type=0x1) returned 0xb00017
[0223.983] GetCurrentObject (hdc=0x200107c5, type=0x2) returned 0x900010
[0223.983] GetCurrentObject (hdc=0x200107c5, type=0x7) returned 0x1e0507b9
[0223.984] GetCurrentObject (hdc=0x200107c5, type=0x6) returned 0x8a01c2
[0223.984] SaveDC (hdc=0x200107c5) returned 1
[0223.984] GetNearestColor (hdc=0x200107c5, color=0xff) returned 0xff
[0223.984] GetNearestColor (hdc=0x200107c5, color=0x55) returned 0x55
[0223.984] GetNearestColor (hdc=0x200107c5, color=0x0) returned 0x0
[0223.984] GetNearestColor (hdc=0x200107c5, color=0x55) returned 0x55
[0223.984] GetNearestColor (hdc=0x200107c5, color=0x0) returned 0x0
[0223.984] GetNearestColor (hdc=0x200107c5, color=0x8080ff) returned 0x8080ff
[0223.984] GetNearestColor (hdc=0x200107c5, color=0x7373e5) returned 0x7373e5
[0223.984] GetNearestColor (hdc=0x200107c5, color=0xe5) returned 0xe5
[0223.984] GetNearestColor (hdc=0x200107c5, color=0x0) returned 0x0
[0223.984] RestoreDC (hdc=0x200107c5, nSavedDC=-1) returned 1
[0223.984] GdipReleaseDC (graphics=0x5d92c30, hdc=0x200107c5) returned 0x0
[0223.984] IsAppThemed () returned 0x1
[0223.984] GetThemeAppProperties () returned 0x3
[0223.984] GetThemeAppProperties () returned 0x3
[0223.984] IsAppThemed () returned 0x1
[0223.985] GetThemeAppProperties () returned 0x3
[0223.985] GetThemeAppProperties () returned 0x3
[0223.985] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x23852c0 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0223.985] IsAppThemed () returned 0x1
[0223.985] GetThemeAppProperties () returned 0x3
[0223.985] GetThemeAppProperties () returned 0x3
[0223.985] IsAppThemed () returned 0x1
[0223.985] GetThemeAppProperties () returned 0x3
[0223.985] GetThemeAppProperties () returned 0x3
[0223.985] GetFocus () returned 0x202c6
[0223.985] IsAppThemed () returned 0x1
[0223.985] GetThemeAppProperties () returned 0x3
[0223.985] GetThemeAppProperties () returned 0x3
[0223.985] IsAppThemed () returned 0x1
[0223.985] GetThemeAppProperties () returned 0x3
[0223.985] GetThemeAppProperties () returned 0x3
[0223.985] IsThemePartDefined () returned 0x1
[0223.985] IsAppThemed () returned 0x1
[0223.985] GetThemeAppProperties () returned 0x3
[0223.985] GetThemeAppProperties () returned 0x3
[0223.986] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0223.986] IsAppThemed () returned 0x1
[0223.986] GetThemeAppProperties () returned 0x3
[0223.986] GetThemeAppProperties () returned 0x3
[0223.986] IsAppThemed () returned 0x1
[0223.986] GetThemeAppProperties () returned 0x3
[0223.986] GetThemeAppProperties () returned 0x3
[0223.986] IsThemePartDefined () returned 0x1
[0223.986] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0223.986] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.986] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0223.986] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0223.986] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0223.986] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0223.986] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0223.986] LocalFree (hMem=0x89eee8) returned 0x0
[0223.986] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0223.986] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0223.986] LocalFree (hMem=0x89ec80) returned 0x0
[0223.986] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0223.986] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0223.986] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0223.986] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0223.986] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0223.986] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0223.987] GetCurrentObject (hdc=0x200107c5, type=0x1) returned 0xb00017
[0223.987] GetCurrentObject (hdc=0x200107c5, type=0x2) returned 0x900010
[0223.987] GetCurrentObject (hdc=0x200107c5, type=0x7) returned 0x1e0507b9
[0223.987] GetCurrentObject (hdc=0x200107c5, type=0x6) returned 0x8a01c2
[0223.987] SaveDC (hdc=0x200107c5) returned 1
[0223.987] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7804053e
[0223.987] GetClipRgn (hdc=0x200107c5, hrgn=0x7804053e) returned 0
[0223.987] SelectClipRgn (hdc=0x200107c5, hrgn=0x9904051e) returned 2
[0223.987] DeleteObject (ho=0x7804053e) returned 1
[0223.987] DeleteObject (ho=0x9904051e) returned 1
[0223.987] OffsetViewportOrgEx (in: hdc=0x200107c5, x=0, y=0, lppt=0x2385970 | out: lppt=0x2385970) returned 1
[0223.987] DrawThemeParentBackground () returned 0x0
[0223.987] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0223.987] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0223.987] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0223.987] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0223.987] GetSystemMetrics (nIndex=42) returned 0
[0223.987] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0223.987] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0223.988] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0223.988] GetCurrentObject (hdc=0x200107c5, type=0x1) returned 0xb00017
[0223.988] GetCurrentObject (hdc=0x200107c5, type=0x2) returned 0x900010
[0223.988] GetCurrentObject (hdc=0x200107c5, type=0x7) returned 0x1e0507b9
[0223.988] GetCurrentObject (hdc=0x200107c5, type=0x6) returned 0x8a01c2
[0223.988] SaveDC (hdc=0x200107c5) returned 2
[0223.988] GetNearestColor (hdc=0x200107c5, color=0xff) returned 0xff
[0223.988] CreateSolidBrush (color=0xff) returned 0xb010078d
[0223.988] FillRect (hDC=0x200107c5, lprc=0x53e128, hbr=0xb010078d) returned 1
[0223.988] DeleteObject (ho=0xb010078d) returned 1
[0223.988] RestoreDC (hdc=0x200107c5, nSavedDC=-1) returned 1
[0223.988] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0223.988] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0223.988] GetSystemMetrics (nIndex=42) returned 0
[0223.988] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0223.988] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0223.988] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0223.988] GetCurrentObject (hdc=0x200107c5, type=0x1) returned 0xb00017
[0223.988] GetCurrentObject (hdc=0x200107c5, type=0x2) returned 0x900010
[0223.988] GetCurrentObject (hdc=0x200107c5, type=0x7) returned 0x1e0507b9
[0223.989] GetCurrentObject (hdc=0x200107c5, type=0x6) returned 0x8a01c2
[0223.989] SaveDC (hdc=0x200107c5) returned 2
[0223.989] GetNearestColor (hdc=0x200107c5, color=0xff) returned 0xff
[0223.989] CreateSolidBrush (color=0xff) returned 0xb110078d
[0223.989] FillRect (hDC=0x200107c5, lprc=0x53e0c8, hbr=0xb110078d) returned 1
[0223.989] DeleteObject (ho=0xb110078d) returned 1
[0223.989] RestoreDC (hdc=0x200107c5, nSavedDC=-1) returned 1
[0223.989] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0223.989] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0223.989] GetSystemMetrics (nIndex=42) returned 0
[0223.989] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0223.989] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0223.989] RestoreDC (hdc=0x200107c5, nSavedDC=-1) returned 1
[0223.989] GdipReleaseDC (graphics=0x5d92c30, hdc=0x200107c5) returned 0x0
[0223.989] IsAppThemed () returned 0x1
[0223.989] GetThemeAppProperties () returned 0x3
[0223.989] GetThemeAppProperties () returned 0x3
[0223.989] IsAppThemed () returned 0x1
[0223.990] GetThemeAppProperties () returned 0x3
[0223.990] GetThemeAppProperties () returned 0x3
[0223.990] IsThemePartDefined () returned 0x1
[0223.990] GdipCreateRegion (region=0x53e64c) returned 0x0
[0223.990] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0223.990] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0223.990] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0223.990] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0223.990] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0224.000] LocalFree (hMem=0x89eac0) returned 0x0
[0224.000] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0224.000] LocalFree (hMem=0x89eac0) returned 0x0
[0224.000] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0224.000] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0224.000] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0224.000] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0224.000] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0224.001] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0224.001] GetCurrentObject (hdc=0x200107c5, type=0x1) returned 0xb00017
[0224.001] GetCurrentObject (hdc=0x200107c5, type=0x2) returned 0x900010
[0224.001] GetCurrentObject (hdc=0x200107c5, type=0x7) returned 0x1e0507b9
[0224.001] GetCurrentObject (hdc=0x200107c5, type=0x6) returned 0x8a01c2
[0224.001] SaveDC (hdc=0x200107c5) returned 1
[0224.001] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9a04051e
[0224.001] GetClipRgn (hdc=0x200107c5, hrgn=0x9a04051e) returned 0
[0224.001] SelectClipRgn (hdc=0x200107c5, hrgn=0x7a04053e) returned 2
[0224.001] DeleteObject (ho=0x9a04051e) returned 1
[0224.001] DeleteObject (ho=0x7a04053e) returned 1
[0224.001] OffsetViewportOrgEx (in: hdc=0x200107c5, x=0, y=0, lppt=0x23861d4 | out: lppt=0x23861d4) returned 1
[0224.001] IsAppThemed () returned 0x1
[0224.001] GetThemeAppProperties () returned 0x3
[0224.001] GetThemeAppProperties () returned 0x3
[0224.001] DrawThemeBackground () returned 0x0
[0224.001] RestoreDC (hdc=0x200107c5, nSavedDC=-1) returned 1
[0224.001] GdipReleaseDC (graphics=0x5d92c30, hdc=0x200107c5) returned 0x0
[0224.001] GdipCreateRegion (region=0x53e650) returned 0x0
[0224.001] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0224.002] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0224.002] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0224.002] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0224.002] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0224.002] LocalFree (hMem=0x89eee8) returned 0x0
[0224.002] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0224.002] LocalFree (hMem=0x89eac0) returned 0x0
[0224.002] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0224.002] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0224.002] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0224.002] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0224.002] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0224.002] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0224.002] GetCurrentObject (hdc=0x200107c5, type=0x1) returned 0xb00017
[0224.002] GetCurrentObject (hdc=0x200107c5, type=0x2) returned 0x900010
[0224.002] GetCurrentObject (hdc=0x200107c5, type=0x7) returned 0x1e0507b9
[0224.002] GetCurrentObject (hdc=0x200107c5, type=0x6) returned 0x8a01c2
[0224.002] SaveDC (hdc=0x200107c5) returned 1
[0224.002] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b04053e
[0224.002] GetClipRgn (hdc=0x200107c5, hrgn=0x7b04053e) returned 0
[0224.002] SelectClipRgn (hdc=0x200107c5, hrgn=0x9b04051e) returned 2
[0224.002] DeleteObject (ho=0x7b04053e) returned 1
[0224.002] DeleteObject (ho=0x9b04051e) returned 1
[0224.002] OffsetViewportOrgEx (in: hdc=0x200107c5, x=0, y=0, lppt=0x23864a8 | out: lppt=0x23864a8) returned 1
[0224.003] IsAppThemed () returned 0x1
[0224.003] GetThemeAppProperties () returned 0x3
[0224.003] GetThemeAppProperties () returned 0x3
[0224.003] GetThemeBackgroundContentRect () returned 0x0
[0224.003] RestoreDC (hdc=0x200107c5, nSavedDC=-1) returned 1
[0224.003] GdipReleaseDC (graphics=0x5d92c30, hdc=0x200107c5) returned 0x0
[0224.003] IsAppThemed () returned 0x1
[0224.003] GetThemeAppProperties () returned 0x3
[0224.003] GetThemeAppProperties () returned 0x3
[0224.003] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0224.003] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0224.003] GetCurrentObject (hdc=0x200107c5, type=0x1) returned 0xb00017
[0224.003] GetCurrentObject (hdc=0x200107c5, type=0x2) returned 0x900010
[0224.003] GetCurrentObject (hdc=0x200107c5, type=0x7) returned 0x1e0507b9
[0224.003] GetCurrentObject (hdc=0x200107c5, type=0x6) returned 0x8a01c2
[0224.003] SaveDC (hdc=0x200107c5) returned 1
[0224.003] GetTextAlign (hdc=0x200107c5) returned 0x0
[0224.003] GetTextColor (hdc=0x200107c5) returned 0x0
[0224.003] GetCurrentObject (hdc=0x200107c5, type=0x6) returned 0x8a01c2
[0224.003] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0224.003] SelectObject (hdc=0x200107c5, h=0x450a0799) returned 0x8a01c2
[0224.003] GetBkMode (hdc=0x200107c5) returned 2
[0224.004] SetBkMode (hdc=0x200107c5, mode=1) returned 2
[0224.004] DrawTextExW (in: hdc=0x200107c5, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2386848 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0224.004] DrawTextExW (in: hdc=0x200107c5, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2386848 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0224.004] RestoreDC (hdc=0x200107c5, nSavedDC=-1) returned 1
[0224.004] GdipReleaseDC (graphics=0x5d92c30, hdc=0x200107c5) returned 0x0
[0224.004] GetFocus () returned 0x202c6
[0224.004] IsAppThemed () returned 0x1
[0224.004] GetThemeAppProperties () returned 0x3
[0224.004] GetThemeAppProperties () returned 0x3
[0224.004] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0224.004] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x200107c5, x1=0, y1=0, rop=0xcc0020) returned 1
[0224.005] GdipReleaseDC (graphics=0x5d92c30, hdc=0x200107c5) returned 0x0
[0224.005] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0224.005] SelectObject (hdc=0x200107c5, h=0x85000f) returned 0x1e0507b9
[0224.005] DeleteDC (hdc=0x200107c5) returned 1
[0224.005] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0224.005] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0224.005] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.005] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.005] WaitMessage () returned 1
[0224.030] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.030] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.030] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.030] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.030] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.031] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.031] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.031] WaitMessage () returned 1
[0224.045] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.045] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.045] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.045] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.045] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.046] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.046] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.046] WaitMessage () returned 1
[0224.047] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.047] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.047] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.047] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.048] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.048] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.048] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.048] WaitMessage () returned 1
[0224.051] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.051] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.051] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.051] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.051] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.059] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.059] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.059] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.059] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.059] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.060] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.060] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.060] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.060] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.060] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.060] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.061] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.061] WaitMessage () returned 1
[0224.061] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.062] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.062] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.062] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.062] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.063] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.063] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.063] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.064] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.064] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.064] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.064] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.064] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.064] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.064] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.064] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.065] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.065] WaitMessage () returned 1
[0224.065] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.065] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.065] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.065] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.065] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.067] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.067] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.067] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.067] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.067] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.067] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.067] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.067] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.067] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.067] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.068] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.072] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.072] WaitMessage () returned 1
[0224.074] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.074] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.074] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.074] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.074] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.076] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.076] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.076] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.076] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.076] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.077] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.077] IsWindowUnicode (hWnd=0x102dc) returned 1
[0224.077] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.077] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.077] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.077] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.077] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.077] WaitMessage () returned 1
[0224.207] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.207] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.207] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.207] DispatchMessageA (lpMsg=0x53eef8) returned 0x7edf
[0224.207] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.207] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.207] WaitMessage () returned 1
[0224.287] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.287] IsWindowUnicode (hWnd=0x202d0) returned 1
[0224.287] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0224.287] TranslateMessage (lpMsg=0x53eef8) returned 0
[0224.287] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0224.287] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.287] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0224.287] WaitMessage () returned 1
[0225.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0225.194] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0225.194] TranslateMessage (lpMsg=0x53eef8) returned 0
[0225.194] DispatchMessageA (lpMsg=0x53eef8) returned 0x7edd
[0225.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0225.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0225.194] WaitMessage () returned 1
[0225.790] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0225.790] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1980218) returned 0x1
[0225.790] IsWindowUnicode (hWnd=0x202c6) returned 1
[0225.790] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0225.790] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1980218) returned 0x1
[0225.791] SetCursor (hCursor=0x10003) returned 0x10003
[0225.791] TranslateMessage (lpMsg=0x53eef8) returned 0
[0225.791] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0225.791] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0225.791] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0225.791] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0225.791] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0225.791] GetKeyState (nVirtKey=1) returned 0
[0225.791] GetKeyState (nVirtKey=2) returned 0
[0225.791] GetKeyState (nVirtKey=4) returned 0
[0225.791] GetKeyState (nVirtKey=5) returned 0
[0225.791] GetKeyState (nVirtKey=6) returned 0
[0225.791] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0225.791] IsWindowUnicode (hWnd=0x202c6) returned 1
[0225.791] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0225.792] TranslateMessage (lpMsg=0x53eef8) returned 0
[0225.792] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0225.792] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0225.792] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0225.792] CreateCompatibleDC (hdc=0x8b010786) returned 0xb90107b1
[0225.792] SelectObject (hdc=0xb90107b1, h=0x1e0507b9) returned 0x85000f
[0225.792] GdipCreateFromHDC (hdc=0xb90107b1, graphics=0x53e958) returned 0x0
[0225.793] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0225.793] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0225.793] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0225.793] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0225.793] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0225.793] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0225.793] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0225.793] LocalFree (hMem=0x89ea88) returned 0x0
[0225.793] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0225.793] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0225.793] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0225.793] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0225.793] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0225.793] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc510dbd) returned 0x0
[0225.794] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0225.794] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0225.794] GetCurrentObject (hdc=0xb90107b1, type=0x1) returned 0xb00017
[0225.794] GetCurrentObject (hdc=0xb90107b1, type=0x2) returned 0x900010
[0225.794] GetCurrentObject (hdc=0xb90107b1, type=0x7) returned 0x1e0507b9
[0225.794] GetCurrentObject (hdc=0xb90107b1, type=0x6) returned 0x8a01c2
[0225.794] SaveDC (hdc=0xb90107b1) returned 1
[0225.794] GetNearestColor (hdc=0xb90107b1, color=0xff) returned 0xff
[0225.794] GetNearestColor (hdc=0xb90107b1, color=0x55) returned 0x55
[0225.794] GetNearestColor (hdc=0xb90107b1, color=0x0) returned 0x0
[0225.794] GetNearestColor (hdc=0xb90107b1, color=0x55) returned 0x55
[0225.794] GetNearestColor (hdc=0xb90107b1, color=0x0) returned 0x0
[0225.794] GetNearestColor (hdc=0xb90107b1, color=0x8080ff) returned 0x8080ff
[0225.794] GetNearestColor (hdc=0xb90107b1, color=0x7373e5) returned 0x7373e5
[0225.795] GetNearestColor (hdc=0xb90107b1, color=0xe5) returned 0xe5
[0225.795] GetNearestColor (hdc=0xb90107b1, color=0x0) returned 0x0
[0225.795] RestoreDC (hdc=0xb90107b1, nSavedDC=-1) returned 1
[0225.795] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb90107b1) returned 0x0
[0225.795] IsAppThemed () returned 0x1
[0225.795] GetThemeAppProperties () returned 0x3
[0225.795] GetThemeAppProperties () returned 0x3
[0225.795] IsAppThemed () returned 0x1
[0225.795] GetThemeAppProperties () returned 0x3
[0225.795] GetThemeAppProperties () returned 0x3
[0225.795] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x23871dc | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0225.796] IsAppThemed () returned 0x1
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] IsAppThemed () returned 0x1
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] IsAppThemed () returned 0x1
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] IsAppThemed () returned 0x1
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] IsThemePartDefined () returned 0x1
[0225.796] IsAppThemed () returned 0x1
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0225.796] IsAppThemed () returned 0x1
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] IsAppThemed () returned 0x1
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] GetThemeAppProperties () returned 0x3
[0225.796] IsThemePartDefined () returned 0x1
[0225.796] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0225.796] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0225.797] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0225.797] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0225.797] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0225.797] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0225.797] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0225.797] LocalFree (hMem=0x89ec80) returned 0x0
[0225.797] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0225.797] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0225.797] LocalFree (hMem=0x89ea88) returned 0x0
[0225.797] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0225.797] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0225.797] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0225.797] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0225.797] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0225.797] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0225.797] GetCurrentObject (hdc=0xb90107b1, type=0x1) returned 0xb00017
[0225.797] GetCurrentObject (hdc=0xb90107b1, type=0x2) returned 0x900010
[0225.797] GetCurrentObject (hdc=0xb90107b1, type=0x7) returned 0x1e0507b9
[0225.797] GetCurrentObject (hdc=0xb90107b1, type=0x6) returned 0x8a01c2
[0225.797] SaveDC (hdc=0xb90107b1) returned 1
[0225.797] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9c04051e
[0225.797] GetClipRgn (hdc=0xb90107b1, hrgn=0x9c04051e) returned 0
[0225.798] SelectClipRgn (hdc=0xb90107b1, hrgn=0x7f04053e) returned 2
[0225.798] DeleteObject (ho=0x9c04051e) returned 1
[0225.798] DeleteObject (ho=0x7f04053e) returned 1
[0225.798] OffsetViewportOrgEx (in: hdc=0xb90107b1, x=0, y=0, lppt=0x238788c | out: lppt=0x238788c) returned 1
[0225.798] DrawThemeParentBackground () returned 0x0
[0225.798] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0225.798] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0225.798] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0225.798] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0225.798] GetSystemMetrics (nIndex=42) returned 0
[0225.798] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0225.798] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0225.798] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0225.798] GetCurrentObject (hdc=0xb90107b1, type=0x1) returned 0xb00017
[0225.798] GetCurrentObject (hdc=0xb90107b1, type=0x2) returned 0x900010
[0225.798] GetCurrentObject (hdc=0xb90107b1, type=0x7) returned 0x1e0507b9
[0225.798] GetCurrentObject (hdc=0xb90107b1, type=0x6) returned 0x8a01c2
[0225.798] SaveDC (hdc=0xb90107b1) returned 2
[0225.799] GetNearestColor (hdc=0xb90107b1, color=0xff) returned 0xff
[0225.799] CreateSolidBrush (color=0xff) returned 0xb210078d
[0225.799] FillRect (hDC=0xb90107b1, lprc=0x53e120, hbr=0xb210078d) returned 1
[0225.799] DeleteObject (ho=0xb210078d) returned 1
[0225.799] RestoreDC (hdc=0xb90107b1, nSavedDC=-1) returned 1
[0225.799] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0225.799] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0225.799] GetSystemMetrics (nIndex=42) returned 0
[0225.799] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0225.799] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0225.799] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0225.799] GetCurrentObject (hdc=0xb90107b1, type=0x1) returned 0xb00017
[0225.799] GetCurrentObject (hdc=0xb90107b1, type=0x2) returned 0x900010
[0225.799] GetCurrentObject (hdc=0xb90107b1, type=0x7) returned 0x1e0507b9
[0225.799] GetCurrentObject (hdc=0xb90107b1, type=0x6) returned 0x8a01c2
[0225.799] SaveDC (hdc=0xb90107b1) returned 2
[0225.799] GetNearestColor (hdc=0xb90107b1, color=0xff) returned 0xff
[0225.799] CreateSolidBrush (color=0xff) returned 0xb310078d
[0225.799] FillRect (hDC=0xb90107b1, lprc=0x53e0c0, hbr=0xb310078d) returned 1
[0225.800] DeleteObject (ho=0xb310078d) returned 1
[0225.800] RestoreDC (hdc=0xb90107b1, nSavedDC=-1) returned 1
[0225.800] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0225.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0225.800] GetSystemMetrics (nIndex=42) returned 0
[0225.800] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0225.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0225.800] RestoreDC (hdc=0xb90107b1, nSavedDC=-1) returned 1
[0225.800] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb90107b1) returned 0x0
[0225.800] IsAppThemed () returned 0x1
[0225.800] GetThemeAppProperties () returned 0x3
[0225.800] GetThemeAppProperties () returned 0x3
[0225.800] IsAppThemed () returned 0x1
[0225.800] GetThemeAppProperties () returned 0x3
[0225.800] GetThemeAppProperties () returned 0x3
[0225.800] IsThemePartDefined () returned 0x1
[0225.800] GdipCreateRegion (region=0x53e640) returned 0x0
[0225.800] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0225.800] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0225.801] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0225.801] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0225.801] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0225.801] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0225.801] LocalFree (hMem=0x89ec80) returned 0x0
[0225.801] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0225.801] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0225.801] LocalFree (hMem=0x89ea88) returned 0x0
[0225.801] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0225.801] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0225.801] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0225.801] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0225.801] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0225.801] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0225.801] GetCurrentObject (hdc=0xb90107b1, type=0x1) returned 0xb00017
[0225.801] GetCurrentObject (hdc=0xb90107b1, type=0x2) returned 0x900010
[0225.801] GetCurrentObject (hdc=0xb90107b1, type=0x7) returned 0x1e0507b9
[0225.801] GetCurrentObject (hdc=0xb90107b1, type=0x6) returned 0x8a01c2
[0225.801] SaveDC (hdc=0xb90107b1) returned 1
[0225.801] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8004053e
[0225.801] GetClipRgn (hdc=0xb90107b1, hrgn=0x8004053e) returned 0
[0225.801] SelectClipRgn (hdc=0xb90107b1, hrgn=0x9e04051e) returned 2
[0225.802] DeleteObject (ho=0x8004053e) returned 1
[0225.802] DeleteObject (ho=0x9e04051e) returned 1
[0225.802] OffsetViewportOrgEx (in: hdc=0xb90107b1, x=0, y=0, lppt=0x23880f0 | out: lppt=0x23880f0) returned 1
[0225.802] IsAppThemed () returned 0x1
[0225.802] GetThemeAppProperties () returned 0x3
[0225.802] GetThemeAppProperties () returned 0x3
[0225.802] DrawThemeBackground () returned 0x0
[0225.802] RestoreDC (hdc=0xb90107b1, nSavedDC=-1) returned 1
[0225.802] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb90107b1) returned 0x0
[0225.802] GdipCreateRegion (region=0x53e644) returned 0x0
[0225.802] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0225.802] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0225.802] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0225.802] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0225.802] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0225.802] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0225.803] LocalFree (hMem=0x89ec80) returned 0x0
[0225.803] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0225.803] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0225.804] LocalFree (hMem=0x89ea88) returned 0x0
[0225.804] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0225.804] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0225.804] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0225.804] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0225.804] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0225.804] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0225.804] GetCurrentObject (hdc=0xb90107b1, type=0x1) returned 0xb00017
[0225.804] GetCurrentObject (hdc=0xb90107b1, type=0x2) returned 0x900010
[0225.804] GetCurrentObject (hdc=0xb90107b1, type=0x7) returned 0x1e0507b9
[0225.804] GetCurrentObject (hdc=0xb90107b1, type=0x6) returned 0x8a01c2
[0225.804] SaveDC (hdc=0xb90107b1) returned 1
[0225.804] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9f04051e
[0225.804] GetClipRgn (hdc=0xb90107b1, hrgn=0x9f04051e) returned 0
[0225.804] SelectClipRgn (hdc=0xb90107b1, hrgn=0x8104053e) returned 2
[0225.804] DeleteObject (ho=0x9f04051e) returned 1
[0225.804] DeleteObject (ho=0x8104053e) returned 1
[0225.804] OffsetViewportOrgEx (in: hdc=0xb90107b1, x=0, y=0, lppt=0x23883c4 | out: lppt=0x23883c4) returned 1
[0225.804] IsAppThemed () returned 0x1
[0225.804] GetThemeAppProperties () returned 0x3
[0225.804] GetThemeAppProperties () returned 0x3
[0225.805] GetThemeBackgroundContentRect () returned 0x0
[0225.805] RestoreDC (hdc=0xb90107b1, nSavedDC=-1) returned 1
[0225.805] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb90107b1) returned 0x0
[0225.805] IsAppThemed () returned 0x1
[0225.805] GetThemeAppProperties () returned 0x3
[0225.805] GetThemeAppProperties () returned 0x3
[0225.805] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0225.805] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0225.805] GetCurrentObject (hdc=0xb90107b1, type=0x1) returned 0xb00017
[0225.805] GetCurrentObject (hdc=0xb90107b1, type=0x2) returned 0x900010
[0225.805] GetCurrentObject (hdc=0xb90107b1, type=0x7) returned 0x1e0507b9
[0225.805] GetCurrentObject (hdc=0xb90107b1, type=0x6) returned 0x8a01c2
[0225.805] SaveDC (hdc=0xb90107b1) returned 1
[0225.805] GetTextAlign (hdc=0xb90107b1) returned 0x0
[0225.805] GetTextColor (hdc=0xb90107b1) returned 0x0
[0225.805] GetCurrentObject (hdc=0xb90107b1, type=0x6) returned 0x8a01c2
[0225.805] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0225.805] SelectObject (hdc=0xb90107b1, h=0x450a0799) returned 0x8a01c2
[0225.805] GetBkMode (hdc=0xb90107b1) returned 2
[0225.806] SetBkMode (hdc=0xb90107b1, mode=1) returned 2
[0225.806] DrawTextExW (in: hdc=0xb90107b1, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2388764 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0225.806] DrawTextExW (in: hdc=0xb90107b1, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2388764 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0225.806] RestoreDC (hdc=0xb90107b1, nSavedDC=-1) returned 1
[0225.806] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb90107b1) returned 0x0
[0225.806] GetFocus () returned 0x202c6
[0225.806] IsAppThemed () returned 0x1
[0225.806] GetThemeAppProperties () returned 0x3
[0225.806] GetThemeAppProperties () returned 0x3
[0225.806] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0225.807] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xb90107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0225.807] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb90107b1) returned 0x0
[0225.807] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0225.807] SelectObject (hdc=0xb90107b1, h=0x85000f) returned 0x1e0507b9
[0225.807] DeleteDC (hdc=0xb90107b1) returned 1
[0225.807] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0225.807] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0225.807] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0225.807] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0225.807] WaitMessage () returned 1
[0225.918] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0225.919] IsWindowUnicode (hWnd=0x202c6) returned 1
[0225.919] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0225.919] TranslateMessage (lpMsg=0x53eef8) returned 0
[0225.919] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0225.919] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0225.919] IsWindowUnicode (hWnd=0x202c6) returned 1
[0225.919] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0225.919] TranslateMessage (lpMsg=0x53eef8) returned 0
[0225.919] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0225.919] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x100028) returned 0x0
[0225.919] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0225.919] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0225.919] WaitMessage () returned 1
[0226.056] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0226.056] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1980218) returned 0x1
[0226.056] IsWindowUnicode (hWnd=0x202c6) returned 1
[0226.056] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0226.056] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1980218) returned 0x1
[0226.056] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0226.056] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12b01c2) returned 0x0
[0226.056] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0226.056] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0226.057] SetCursor (hCursor=0x10003) returned 0x10003
[0226.057] TranslateMessage (lpMsg=0x53eef8) returned 0
[0226.057] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0226.057] GetKeyState (nVirtKey=1) returned -127
[0226.057] GetKeyState (nVirtKey=2) returned 0
[0226.057] GetKeyState (nVirtKey=4) returned 0
[0226.057] GetKeyState (nVirtKey=5) returned 0
[0226.057] GetKeyState (nVirtKey=6) returned 0
[0226.057] IsWindowVisible (hWnd=0x202c6) returned 1
[0226.057] IsWindowEnabled (hWnd=0x202c6) returned 1
[0226.057] SetFocus (hWnd=0x202c6) returned 0x202c6
[0226.057] GetFocus () returned 0x202c6
[0226.057] GetFocus () returned 0x202c6
[0226.057] GetFocus () returned 0x202c6
[0226.057] GetKeyState (nVirtKey=1) returned -127
[0226.057] GetKeyState (nVirtKey=2) returned 0
[0226.057] GetKeyState (nVirtKey=4) returned 0
[0226.057] GetKeyState (nVirtKey=5) returned 0
[0226.057] GetKeyState (nVirtKey=6) returned 0
[0226.057] GetCapture () returned 0x0
[0226.057] SetCapture (hWnd=0x202c6) returned 0x0
[0226.057] GetKeyState (nVirtKey=1) returned -127
[0226.058] GetKeyState (nVirtKey=2) returned 0
[0226.058] GetKeyState (nVirtKey=4) returned 0
[0226.058] GetKeyState (nVirtKey=5) returned 0
[0226.058] GetKeyState (nVirtKey=6) returned 0
[0226.058] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0226.058] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0226.058] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0226.058] IsWindowUnicode (hWnd=0x202c6) returned 1
[0226.058] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0226.058] TranslateMessage (lpMsg=0x53eef8) returned 0
[0226.058] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0226.058] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23888e8, cPoints=0x1 | out: lpPoints=0x23888e8) returned 25690608
[0226.058] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0226.058] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0226.058] UpdateWindow (hWnd=0x202c6) returned 1
[0226.058] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x8b010786
[0226.058] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0226.058] CreateCompatibleDC (hdc=0x8b010786) returned 0xba0107b1
[0226.058] SelectObject (hdc=0xba0107b1, h=0x1e0507b9) returned 0x85000f
[0226.059] GdipCreateFromHDC (hdc=0xba0107b1, graphics=0x53e5f0) returned 0x0
[0226.059] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0226.059] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0226.059] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0226.059] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.059] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0226.059] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0226.059] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0226.059] LocalFree (hMem=0x89ee40) returned 0x0
[0226.059] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.059] GdipCreateRegion (region=0x53e638) returned 0x0
[0226.059] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.059] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0226.059] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0226.059] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc4f0dbd) returned 0x0
[0226.059] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.059] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0226.060] GetCurrentObject (hdc=0xba0107b1, type=0x1) returned 0xb00017
[0226.060] GetCurrentObject (hdc=0xba0107b1, type=0x2) returned 0x900010
[0226.060] GetCurrentObject (hdc=0xba0107b1, type=0x7) returned 0x1e0507b9
[0226.060] GetCurrentObject (hdc=0xba0107b1, type=0x6) returned 0x8a01c2
[0226.060] SaveDC (hdc=0xba0107b1) returned 1
[0226.060] GetNearestColor (hdc=0xba0107b1, color=0xff) returned 0xff
[0226.060] GetNearestColor (hdc=0xba0107b1, color=0x55) returned 0x55
[0226.060] GetNearestColor (hdc=0xba0107b1, color=0x0) returned 0x0
[0226.060] GetNearestColor (hdc=0xba0107b1, color=0x55) returned 0x55
[0226.060] GetNearestColor (hdc=0xba0107b1, color=0x0) returned 0x0
[0226.060] GetNearestColor (hdc=0xba0107b1, color=0x8080ff) returned 0x8080ff
[0226.060] GetNearestColor (hdc=0xba0107b1, color=0x7373e5) returned 0x7373e5
[0226.060] GetNearestColor (hdc=0xba0107b1, color=0xe5) returned 0xe5
[0226.060] GetNearestColor (hdc=0xba0107b1, color=0x0) returned 0x0
[0226.060] RestoreDC (hdc=0xba0107b1, nSavedDC=-1) returned 1
[0226.060] GdipReleaseDC (graphics=0x5d92c30, hdc=0xba0107b1) returned 0x0
[0226.060] IsAppThemed () returned 0x1
[0226.060] GetThemeAppProperties () returned 0x3
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] IsAppThemed () returned 0x1
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x2389004 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0226.061] IsAppThemed () returned 0x1
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] IsAppThemed () returned 0x1
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] IsAppThemed () returned 0x1
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] IsAppThemed () returned 0x1
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] IsThemePartDefined () returned 0x1
[0226.061] IsAppThemed () returned 0x1
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] GetThemeAppProperties () returned 0x3
[0226.061] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0226.061] IsAppThemed () returned 0x1
[0226.062] GetThemeAppProperties () returned 0x3
[0226.062] GetThemeAppProperties () returned 0x3
[0226.062] IsAppThemed () returned 0x1
[0226.062] GetThemeAppProperties () returned 0x3
[0226.062] GetThemeAppProperties () returned 0x3
[0226.062] IsThemePartDefined () returned 0x1
[0226.062] GdipCreateRegion (region=0x53e354) returned 0x0
[0226.062] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.062] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0226.062] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.062] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0226.062] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0226.062] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0226.062] LocalFree (hMem=0x89ea88) returned 0x0
[0226.062] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0226.062] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0226.062] LocalFree (hMem=0x89ec80) returned 0x0
[0226.062] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.062] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0226.062] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0226.062] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0226.062] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.062] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0226.062] GetCurrentObject (hdc=0xba0107b1, type=0x1) returned 0xb00017
[0226.063] GetCurrentObject (hdc=0xba0107b1, type=0x2) returned 0x900010
[0226.063] GetCurrentObject (hdc=0xba0107b1, type=0x7) returned 0x1e0507b9
[0226.063] GetCurrentObject (hdc=0xba0107b1, type=0x6) returned 0x8a01c2
[0226.063] SaveDC (hdc=0xba0107b1) returned 1
[0226.063] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8204053e
[0226.063] GetClipRgn (hdc=0xba0107b1, hrgn=0x8204053e) returned 0
[0226.063] SelectClipRgn (hdc=0xba0107b1, hrgn=0xa304051e) returned 2
[0226.063] DeleteObject (ho=0x8204053e) returned 1
[0226.063] DeleteObject (ho=0xa304051e) returned 1
[0226.063] OffsetViewportOrgEx (in: hdc=0xba0107b1, x=0, y=0, lppt=0x23896b4 | out: lppt=0x23896b4) returned 1
[0226.063] DrawThemeParentBackground () returned 0x0
[0226.063] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0226.063] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0226.063] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0226.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0226.063] GetSystemMetrics (nIndex=42) returned 0
[0226.063] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0226.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0226.064] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0226.064] GetCurrentObject (hdc=0xba0107b1, type=0x1) returned 0xb00017
[0226.064] GetCurrentObject (hdc=0xba0107b1, type=0x2) returned 0x900010
[0226.064] GetCurrentObject (hdc=0xba0107b1, type=0x7) returned 0x1e0507b9
[0226.064] GetCurrentObject (hdc=0xba0107b1, type=0x6) returned 0x8a01c2
[0226.064] SaveDC (hdc=0xba0107b1) returned 2
[0226.064] GetNearestColor (hdc=0xba0107b1, color=0xff) returned 0xff
[0226.064] CreateSolidBrush (color=0xff) returned 0xb410078d
[0226.064] FillRect (hDC=0xba0107b1, lprc=0x53ddb8, hbr=0xb410078d) returned 1
[0226.064] DeleteObject (ho=0xb410078d) returned 1
[0226.064] RestoreDC (hdc=0xba0107b1, nSavedDC=-1) returned 1
[0226.064] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0226.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0226.064] GetSystemMetrics (nIndex=42) returned 0
[0226.064] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0226.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0226.064] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0226.064] GetCurrentObject (hdc=0xba0107b1, type=0x1) returned 0xb00017
[0226.064] GetCurrentObject (hdc=0xba0107b1, type=0x2) returned 0x900010
[0226.064] GetCurrentObject (hdc=0xba0107b1, type=0x7) returned 0x1e0507b9
[0226.065] GetCurrentObject (hdc=0xba0107b1, type=0x6) returned 0x8a01c2
[0226.065] SaveDC (hdc=0xba0107b1) returned 2
[0226.065] GetNearestColor (hdc=0xba0107b1, color=0xff) returned 0xff
[0226.065] CreateSolidBrush (color=0xff) returned 0xb510078d
[0226.065] FillRect (hDC=0xba0107b1, lprc=0x53dd58, hbr=0xb510078d) returned 1
[0226.065] DeleteObject (ho=0xb510078d) returned 1
[0226.065] RestoreDC (hdc=0xba0107b1, nSavedDC=-1) returned 1
[0226.065] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0226.065] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0226.065] GetSystemMetrics (nIndex=42) returned 0
[0226.065] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0226.065] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0226.065] RestoreDC (hdc=0xba0107b1, nSavedDC=-1) returned 1
[0226.065] GdipReleaseDC (graphics=0x5d92c30, hdc=0xba0107b1) returned 0x0
[0226.065] IsAppThemed () returned 0x1
[0226.065] GetThemeAppProperties () returned 0x3
[0226.065] GetThemeAppProperties () returned 0x3
[0226.065] IsAppThemed () returned 0x1
[0226.065] GetThemeAppProperties () returned 0x3
[0226.066] GetThemeAppProperties () returned 0x3
[0226.066] IsThemePartDefined () returned 0x1
[0226.066] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0226.066] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.066] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0226.066] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.066] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0226.066] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0226.066] LocalFree (hMem=0x89ec80) returned 0x0
[0226.066] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0226.066] LocalFree (hMem=0x89ea88) returned 0x0
[0226.066] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.066] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0226.066] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0226.066] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0226.066] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.066] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0226.066] GetCurrentObject (hdc=0xba0107b1, type=0x1) returned 0xb00017
[0226.066] GetCurrentObject (hdc=0xba0107b1, type=0x2) returned 0x900010
[0226.066] GetCurrentObject (hdc=0xba0107b1, type=0x7) returned 0x1e0507b9
[0226.066] GetCurrentObject (hdc=0xba0107b1, type=0x6) returned 0x8a01c2
[0226.066] SaveDC (hdc=0xba0107b1) returned 1
[0226.066] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa404051e
[0226.066] GetClipRgn (hdc=0xba0107b1, hrgn=0xa404051e) returned 0
[0226.066] SelectClipRgn (hdc=0xba0107b1, hrgn=0x8404053e) returned 2
[0226.067] DeleteObject (ho=0xa404051e) returned 1
[0226.067] DeleteObject (ho=0x8404053e) returned 1
[0226.067] OffsetViewportOrgEx (in: hdc=0xba0107b1, x=0, y=0, lppt=0x2389f18 | out: lppt=0x2389f18) returned 1
[0226.067] IsAppThemed () returned 0x1
[0226.067] GetThemeAppProperties () returned 0x3
[0226.067] GetThemeAppProperties () returned 0x3
[0226.067] DrawThemeBackground () returned 0x0
[0226.067] RestoreDC (hdc=0xba0107b1, nSavedDC=-1) returned 1
[0226.067] GdipReleaseDC (graphics=0x5d92c30, hdc=0xba0107b1) returned 0x0
[0226.067] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0226.067] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.067] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0226.067] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.067] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0226.067] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0226.067] LocalFree (hMem=0x89ea88) returned 0x0
[0226.067] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0226.067] LocalFree (hMem=0x89ec80) returned 0x0
[0226.067] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.067] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0226.067] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0226.067] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0226.067] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.067] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0226.068] GetCurrentObject (hdc=0xba0107b1, type=0x1) returned 0xb00017
[0226.068] GetCurrentObject (hdc=0xba0107b1, type=0x2) returned 0x900010
[0226.068] GetCurrentObject (hdc=0xba0107b1, type=0x7) returned 0x1e0507b9
[0226.068] GetCurrentObject (hdc=0xba0107b1, type=0x6) returned 0x8a01c2
[0226.068] SaveDC (hdc=0xba0107b1) returned 1
[0226.068] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8504053e
[0226.068] GetClipRgn (hdc=0xba0107b1, hrgn=0x8504053e) returned 0
[0226.068] SelectClipRgn (hdc=0xba0107b1, hrgn=0xa504051e) returned 2
[0226.068] DeleteObject (ho=0x8504053e) returned 1
[0226.068] DeleteObject (ho=0xa504051e) returned 1
[0226.068] OffsetViewportOrgEx (in: hdc=0xba0107b1, x=0, y=0, lppt=0x238a1ec | out: lppt=0x238a1ec) returned 1
[0226.068] IsAppThemed () returned 0x1
[0226.068] GetThemeAppProperties () returned 0x3
[0226.068] GetThemeAppProperties () returned 0x3
[0226.068] GetThemeBackgroundContentRect () returned 0x0
[0226.068] RestoreDC (hdc=0xba0107b1, nSavedDC=-1) returned 1
[0226.068] GdipReleaseDC (graphics=0x5d92c30, hdc=0xba0107b1) returned 0x0
[0226.068] IsAppThemed () returned 0x1
[0226.068] GetThemeAppProperties () returned 0x3
[0226.068] GetThemeAppProperties () returned 0x3
[0226.069] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0226.069] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0226.069] GetCurrentObject (hdc=0xba0107b1, type=0x1) returned 0xb00017
[0226.069] GetCurrentObject (hdc=0xba0107b1, type=0x2) returned 0x900010
[0226.069] GetCurrentObject (hdc=0xba0107b1, type=0x7) returned 0x1e0507b9
[0226.069] GetCurrentObject (hdc=0xba0107b1, type=0x6) returned 0x8a01c2
[0226.069] SaveDC (hdc=0xba0107b1) returned 1
[0226.069] GetTextAlign (hdc=0xba0107b1) returned 0x0
[0226.069] GetTextColor (hdc=0xba0107b1) returned 0x0
[0226.069] GetCurrentObject (hdc=0xba0107b1, type=0x6) returned 0x8a01c2
[0226.069] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0226.069] SelectObject (hdc=0xba0107b1, h=0x450a0799) returned 0x8a01c2
[0226.069] GetBkMode (hdc=0xba0107b1) returned 2
[0226.069] SetBkMode (hdc=0xba0107b1, mode=1) returned 2
[0226.069] DrawTextExW (in: hdc=0xba0107b1, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x238a58c | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0226.069] DrawTextExW (in: hdc=0xba0107b1, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x238a58c | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0226.070] RestoreDC (hdc=0xba0107b1, nSavedDC=-1) returned 1
[0226.070] GdipReleaseDC (graphics=0x5d92c30, hdc=0xba0107b1) returned 0x0
[0226.070] GetFocus () returned 0x202c6
[0226.070] IsAppThemed () returned 0x1
[0226.070] GetThemeAppProperties () returned 0x3
[0226.070] GetThemeAppProperties () returned 0x3
[0226.070] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0226.070] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xba0107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0226.070] GdipReleaseDC (graphics=0x5d92c30, hdc=0xba0107b1) returned 0x0
[0226.070] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0226.070] SelectObject (hdc=0xba0107b1, h=0x85000f) returned 0x1e0507b9
[0226.070] DeleteDC (hdc=0xba0107b1) returned 1
[0226.070] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0226.071] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0226.071] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x238a688, cPoints=0x1 | out: lpPoints=0x238a688) returned 25690608
[0226.071] WindowFromPoint (Point=0x218) returned 0x202c6
[0226.071] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1980218) returned 0x1
[0226.071] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0226.071] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0226.072] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.072] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0226.073] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.073] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0226.074] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.074] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0226.074] GetDC (hWnd=0x0) returned 0x60100ce
[0226.074] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e888) returned 0x0
[0226.074] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0226.074] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0226.074] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0226.075] GetSystemMetrics (nIndex=5) returned 1
[0226.075] GetSystemMetrics (nIndex=6) returned 1
[0226.075] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.075] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0226.075] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.075] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0226.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.123] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0226.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.123] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0226.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.124] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0226.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.124] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0226.124] GetSystemMetrics (nIndex=5) returned 1
[0226.124] GetSystemMetrics (nIndex=6) returned 1
[0226.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.124] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0226.124] GetSystemMetrics (nIndex=5) returned 1
[0226.124] GetSystemMetrics (nIndex=6) returned 1
[0226.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.124] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0226.125] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.125] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0226.125] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.125] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0226.125] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.125] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0226.125] GetSystemMetrics (nIndex=59) returned 1460
[0226.125] GetSystemMetrics (nIndex=60) returned 920
[0226.125] GetSystemMetrics (nIndex=34) returned 136
[0226.125] GetSystemMetrics (nIndex=35) returned 39
[0226.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.126] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0226.126] GetCurrentThreadId () returned 0x11d0
[0226.126] GetCurrentThreadId () returned 0x11d0
[0226.126] GetCurrentThreadId () returned 0x11d0
[0226.126] GetCurrentThreadId () returned 0x11d0
[0226.126] GetCurrentThreadId () returned 0x11d0
[0226.126] GetCurrentThreadId () returned 0x11d0
[0226.126] GetCurrentThreadId () returned 0x11d0
[0226.126] GetCurrentThreadId () returned 0x11d0
[0226.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.126] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0226.126] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0226.126] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0226.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.127] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0226.127] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.127] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0226.127] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1a02c8
[0226.128] SetWindowLongW (hWnd=0x1a02c8, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0226.128] GetWindowLongW (hWnd=0x1a02c8, nIndex=-4) returned 1950089536
[0226.128] SetWindowLongW (hWnd=0x1a02c8, nIndex=-4, dwNewLong=79644222) returned 1950089536
[0226.128] GetWindowLongW (hWnd=0x1a02c8, nIndex=-4) returned 79644222
[0226.129] GetWindowLongW (hWnd=0x1a02c8, nIndex=-16) returned 113311744
[0226.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a02c8, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0226.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a02c8, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0226.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a02c8, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0226.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a02c8, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0226.130] GetClientRect (in: hWnd=0x1a02c8, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0226.130] GetWindowRect (in: hWnd=0x1a02c8, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0226.130] SetWindowTextW (hWnd=0x1a02c8, lpString="WindowsFormsParkingWindow") returned 1
[0226.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a02c8, Msg=0xc, wParam=0x0, lParam=0x23825d4) returned 0x1
[0226.130] GetParent (hWnd=0x1a02c8) returned 0x0
[0226.131] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0226.131] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1a02c8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1902d2
[0226.131] SetWindowLongW (hWnd=0x1902d2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0226.131] GetWindowLongW (hWnd=0x1902d2, nIndex=-4) returned 1868147648
[0226.131] SetWindowLongW (hWnd=0x1902d2, nIndex=-4, dwNewLong=79644782) returned 1868147648
[0226.131] GetWindowLongW (hWnd=0x1902d2, nIndex=-4) returned 79644782
[0226.132] GetWindowLongW (hWnd=0x1902d2, nIndex=-16) returned 1174405133
[0226.132] GetWindowLongW (hWnd=0x1902d2, nIndex=-12) returned 0
[0226.132] SetWindowLongW (hWnd=0x1902d2, nIndex=-12, dwNewLong=1639122) returned 0
[0226.132] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0226.132] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0226.132] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0226.133] GetClientRect (in: hWnd=0x1902d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0226.133] GetWindowRect (in: hWnd=0x1902d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0226.133] GetParent (hWnd=0x1902d2) returned 0x1a02c8
[0226.133] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1a02c8, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0226.133] SetWindowTextW (hWnd=0x1902d2, lpString="Enter password: ") returned 1
[0226.133] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0226.134] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0226.134] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0226.134] GetClientRect (in: hWnd=0x1902d2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0226.134] GetWindowRect (in: hWnd=0x1902d2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0226.134] GetParent (hWnd=0x1902d2) returned 0x1a02c8
[0226.134] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1a02c8, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0226.134] SendMessageW (hWnd=0x1902d2, Msg=0x2210, wParam=0x2d20001, lParam=0x1902d2) returned 0x0
[0226.134] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x2210, wParam=0x2d20001, lParam=0x1902d2) returned 0x0
[0226.134] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0226.134] GetParent (hWnd=0x1902d2) returned 0x1a02c8
[0226.134] GdipCreateFromHWND (hwnd=0x1902d2, graphics=0x53e994) returned 0x0
[0226.134] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0226.135] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0226.135] GetProcessWindowStation () returned 0x13c
[0226.135] GetCapture () returned 0x202c6
[0226.135] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0226.135] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0226.135] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0226.135] ReleaseCapture () returned 1
[0226.135] GetActiveWindow () returned 0x70036
[0226.135] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0226.135] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.136] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0226.136] GetCursorPos (in: lpPoint=0x2397438 | out: lpPoint=0x2397438*(x=536, y=408)) returned 1
[0226.136] MonitorFromPoint (pt=0x218, dwFlags=0x198) returned 0x10001
[0226.136] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0226.136] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xbd0107b1
[0226.136] GetDeviceCaps (hdc=0xbd0107b1, index=12) returned 32
[0226.136] GetDeviceCaps (hdc=0xbd0107b1, index=14) returned 1
[0226.136] DeleteDC (hdc=0xbd0107b1) returned 1
[0226.136] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0226.136] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0226.136] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1d013e
[0226.137] SetWindowLongW (hWnd=0x1d013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0226.137] GetWindowLongW (hWnd=0x1d013e, nIndex=-4) returned 1950089536
[0226.137] SetWindowLongW (hWnd=0x1d013e, nIndex=-4, dwNewLong=79644262) returned 1950089536
[0226.137] GetWindowLongW (hWnd=0x1d013e, nIndex=-4) returned 79644262
[0226.137] GetWindowLongW (hWnd=0x1d013e, nIndex=-16) returned 113770496
[0226.137] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0226.138] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0226.139] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0226.139] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0226.139] GetWindowRect (in: hWnd=0x1d013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0226.139] SetWindowTextW (hWnd=0x1d013e, lpString="Ransomware") returned 1
[0226.139] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xc, wParam=0x0, lParam=0x238a750) returned 0x1
[0226.139] GetStartupInfoW (in: lpStartupInfo=0x2397774 | out: lpStartupInfo=0x2397774*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0226.140] GetParent (hWnd=0x1d013e) returned 0x0
[0226.140] SetWindowLongW (hWnd=0x1d013e, nIndex=-8, dwNewLong=0) returned 0
[0226.140] SendMessageW (hWnd=0x1d013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0226.140] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0226.140] SendMessageW (hWnd=0x1d013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0226.140] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0226.140] GetSystemMenu (hWnd=0x1d013e, bRevert=0) returned 0x20111
[0226.141] GetWindowPlacement (in: hWnd=0x1d013e, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0226.141] EnableMenuItem (hMenu=0x20111, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0226.141] EnableMenuItem (hMenu=0x20111, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0226.141] EnableMenuItem (hMenu=0x20111, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0226.141] EnableMenuItem (hMenu=0x20111, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0226.141] EnableMenuItem (hMenu=0x20111, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0226.141] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0226.141] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0226.141] GetWindowRect (in: hWnd=0x1d013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0226.142] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.142] GetWindowLongW (hWnd=0x1d013e, nIndex=-16) returned 113770496
[0226.142] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.142] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.142] GetSystemMetrics (nIndex=42) returned 0
[0226.142] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.142] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0226.142] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.142] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.142] GetSystemMetrics (nIndex=42) returned 0
[0226.142] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.142] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0226.142] GetCursorPos (in: lpPoint=0x23978e8 | out: lpPoint=0x23978e8*(x=536, y=408)) returned 1
[0226.142] MonitorFromPoint (pt=0x21a, dwFlags=0x199) returned 0x10001
[0226.142] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0226.142] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xc10107b1
[0226.142] GetDeviceCaps (hdc=0xc10107b1, index=12) returned 32
[0226.142] GetDeviceCaps (hdc=0xc10107b1, index=14) returned 1
[0226.142] DeleteDC (hdc=0xc10107b1) returned 1
[0226.143] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0226.143] GetWindowLongW (hWnd=0x1d013e, nIndex=-16) returned 113770496
[0226.143] GetWindowLongW (hWnd=0x1d013e, nIndex=-20) returned 327937
[0226.143] SetWindowLongW (hWnd=0x1d013e, nIndex=-16, dwNewLong=46661632) returned 113770496
[0226.143] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0226.143] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0226.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0226.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0226.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0226.144] SetWindowLongW (hWnd=0x1d013e, nIndex=-20, dwNewLong=327681) returned 327937
[0226.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0226.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0226.145] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0226.145] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0226.145] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0226.145] SetWindowPos (hWnd=0x1d013e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0226.146] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0226.146] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0226.146] GetWindowPlacement (in: hWnd=0x1d013e, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0226.146] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0226.146] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0226.146] GetWindowRect (in: hWnd=0x1d013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0226.148] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0226.148] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0226.148] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0226.148] RedrawWindow (hWnd=0x1d013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0226.148] GetSystemMenu (hWnd=0x1d013e, bRevert=0) returned 0x20111
[0226.148] GetWindowPlacement (in: hWnd=0x1d013e, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0226.149] EnableMenuItem (hMenu=0x20111, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0226.149] EnableMenuItem (hMenu=0x20111, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0226.149] EnableMenuItem (hMenu=0x20111, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0226.149] EnableMenuItem (hMenu=0x20111, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0226.149] EnableMenuItem (hMenu=0x20111, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0226.149] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0226.149] GetWindowLongW (hWnd=0x1d013e, nIndex=-8) returned 0
[0226.149] SetWindowLongW (hWnd=0x1d013e, nIndex=-8, dwNewLong=458806) returned 0
[0226.149] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0226.149] GetProcessWindowStation () returned 0x13c
[0226.149] GetCurrentThreadId () returned 0x11d0
[0226.149] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4706, lParam=0x0) returned 1
[0226.149] IsWindowVisible (hWnd=0x1d013e) returned 0
[0226.149] IsWindowVisible (hWnd=0x70036) returned 1
[0226.150] IsWindowEnabled (hWnd=0x70036) returned 1
[0226.150] IsWindowVisible (hWnd=0x602b6) returned 0
[0226.150] IsWindowVisible (hWnd=0x901f8) returned 0
[0226.150] IsWindowVisible (hWnd=0x202d0) returned 0
[0226.150] IsWindowVisible (hWnd=0x202d4) returned 0
[0226.150] GetActiveWindow () returned 0x70036
[0226.150] GetFocus () returned 0x202c6
[0226.150] IsWindow (hWnd=0x70036) returned 1
[0226.150] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0226.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0226.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0226.151] GetWindowLongW (hWnd=0x1d013e, nIndex=-8) returned 458806
[0226.151] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0226.151] GetCurrentThreadId () returned 0x11d0
[0226.151] GetWindowLongW (hWnd=0x1d013e, nIndex=-8) returned 458806
[0226.151] IsWindowEnabled (hWnd=0x70036) returned 0
[0226.151] IsWindowEnabled (hWnd=0x1d013e) returned 1
[0226.151] ShowWindow (hWnd=0x1d013e, nCmdShow=5) returned 0
[0226.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0226.151] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0226.151] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.151] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0226.151] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x1d013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xd02be
[0226.152] SetWindowLongW (hWnd=0xd02be, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0226.152] GetWindowLongW (hWnd=0xd02be, nIndex=-4) returned 1868026976
[0226.152] SetWindowLongW (hWnd=0xd02be, nIndex=-4, dwNewLong=79644702) returned 1868026976
[0226.152] GetWindowLongW (hWnd=0xd02be, nIndex=-4) returned 79644702
[0226.152] GetWindowLongW (hWnd=0xd02be, nIndex=-16) returned 1174470848
[0226.152] GetWindowLongW (hWnd=0xd02be, nIndex=-12) returned 0
[0226.152] SetWindowLongW (hWnd=0xd02be, nIndex=-12, dwNewLong=852670) returned 0
[0226.153] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0226.153] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0226.154] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0226.155] SendMessageW (hWnd=0xd02be, Msg=0x2055, wParam=0xd02be, lParam=0x3) returned 0x2
[0226.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0226.155] GetWindow (hWnd=0xd02be, uCmd=0x3) returned 0x0
[0226.155] GetClientRect (in: hWnd=0xd02be, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0226.155] GetWindowRect (in: hWnd=0xd02be, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0226.155] GetParent (hWnd=0xd02be) returned 0x1d013e
[0226.155] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d013e, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0226.155] SendMessageW (hWnd=0xd02be, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0226.155] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0226.155] SendMessageW (hWnd=0xd02be, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0226.155] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0226.155] GetSystemMetrics (nIndex=5) returned 1
[0226.155] GetSystemMetrics (nIndex=6) returned 1
[0226.155] SendMessageW (hWnd=0xd02be, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0226.155] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0226.155] SendMessageW (hWnd=0xd02be, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0226.155] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0226.156] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0226.156] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0226.156] GetClientRect (in: hWnd=0xd02be, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0226.156] GetWindowRect (in: hWnd=0xd02be, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0226.156] GetParent (hWnd=0xd02be) returned 0x1d013e
[0226.156] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d013e, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0226.156] SendMessageW (hWnd=0xd02be, Msg=0x2210, wParam=0x2be0001, lParam=0xd02be) returned 0x0
[0226.156] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x2210, wParam=0x2be0001, lParam=0xd02be) returned 0x0
[0226.156] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0226.157] GetParent (hWnd=0xd02be) returned 0x1d013e
[0226.157] GetParent (hWnd=0x1902d2) returned 0x1a02c8
[0226.157] SetParent (hWndChild=0x1902d2, hWndNewParent=0x1d013e) returned 0x1a02c8
[0226.157] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0226.157] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0226.157] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0226.158] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0226.158] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0226.158] GetClientRect (in: hWnd=0x1902d2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0226.158] GetWindowRect (in: hWnd=0x1902d2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0226.158] GetParent (hWnd=0x1902d2) returned 0x1d013e
[0226.158] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d013e, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0226.158] GetClientRect (in: hWnd=0x1902d2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0226.158] GetWindowRect (in: hWnd=0x1902d2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0226.158] GetParent (hWnd=0x1902d2) returned 0x1d013e
[0226.158] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d013e, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0226.158] GetParent (hWnd=0x1902d2) returned 0x1d013e
[0226.158] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0226.158] GetWindow (hWnd=0x1902d2, uCmd=0x3) returned 0x0
[0226.158] SetWindowPos (hWnd=0x1902d2, hWndInsertAfter=0xd02be, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0226.158] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0226.159] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0226.159] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0226.159] GetClientRect (in: hWnd=0x1902d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0226.159] GetWindowRect (in: hWnd=0x1902d2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0226.159] GetParent (hWnd=0x1902d2) returned 0x1d013e
[0226.159] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0226.159] GetParent (hWnd=0x1902d2) returned 0x1d013e
[0226.159] GetWindow (hWnd=0x1902d2, uCmd=0x3) returned 0xd02be
[0226.159] GetWindowThreadProcessId (in: hWnd=0x1902d2, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0226.159] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0226.159] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.160] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0226.160] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x1d013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1802d6
[0226.160] SetWindowLongW (hWnd=0x1802d6, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0226.160] GetWindowLongW (hWnd=0x1802d6, nIndex=-4) returned 1868032000
[0226.161] SetWindowLongW (hWnd=0x1802d6, nIndex=-4, dwNewLong=79645958) returned 1868032000
[0226.161] GetWindowLongW (hWnd=0x1802d6, nIndex=-4) returned 79645958
[0226.161] GetWindowLongW (hWnd=0x1802d6, nIndex=-16) returned 1174470667
[0226.161] GetWindowLongW (hWnd=0x1802d6, nIndex=-12) returned 0
[0226.161] SetWindowLongW (hWnd=0x1802d6, nIndex=-12, dwNewLong=1573590) returned 0
[0226.161] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0226.162] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0226.162] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0226.163] SendMessageW (hWnd=0x1802d6, Msg=0x2055, wParam=0x1802d6, lParam=0x3) returned 0x2
[0226.163] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0226.163] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0226.163] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0226.163] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0226.163] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0226.164] RedrawWindow (hWnd=0xd02be, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0226.164] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0226.164] RedrawWindow (hWnd=0x1902d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0226.164] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0226.164] RedrawWindow (hWnd=0x1802d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0226.164] RedrawWindow (hWnd=0x1d013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0226.164] GetWindow (hWnd=0x1802d6, uCmd=0x3) returned 0x1902d2
[0226.164] GetClientRect (in: hWnd=0x1802d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0226.164] GetWindowRect (in: hWnd=0x1802d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0226.164] GetParent (hWnd=0x1802d6) returned 0x1d013e
[0226.164] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0226.164] SetWindowTextW (hWnd=0x1802d6, lpString="OK") returned 1
[0226.165] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0xc, wParam=0x0, lParam=0x238ec10) returned 0x1
[0226.165] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0226.165] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0226.165] GetClientRect (in: hWnd=0x1802d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0226.165] GetWindowRect (in: hWnd=0x1802d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0226.165] GetParent (hWnd=0x1802d6) returned 0x1d013e
[0226.165] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0226.165] SendMessageW (hWnd=0x1802d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1802d6) returned 0x0
[0226.165] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1802d6) returned 0x0
[0226.165] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0226.166] GetParent (hWnd=0x1802d6) returned 0x1d013e
[0226.166] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0226.166] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.166] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0226.166] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x1d013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xd02c0
[0226.167] SetWindowLongW (hWnd=0xd02c0, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0226.167] GetWindowLongW (hWnd=0xd02c0, nIndex=-4) returned 1868032000
[0226.167] SetWindowLongW (hWnd=0xd02c0, nIndex=-4, dwNewLong=79646238) returned 1868032000
[0226.167] GetWindowLongW (hWnd=0xd02c0, nIndex=-4) returned 79646238
[0226.167] GetWindowLongW (hWnd=0xd02c0, nIndex=-16) returned 1174470667
[0226.167] GetWindowLongW (hWnd=0xd02c0, nIndex=-12) returned 0
[0226.167] SetWindowLongW (hWnd=0xd02c0, nIndex=-12, dwNewLong=852672) returned 0
[0226.167] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02c0, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0226.168] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02c0, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0226.168] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02c0, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0226.169] SendMessageW (hWnd=0xd02c0, Msg=0x2055, wParam=0xd02c0, lParam=0x3) returned 0x2
[0226.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0226.169] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02c0, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0226.169] GetWindow (hWnd=0xd02c0, uCmd=0x3) returned 0x1802d6
[0226.169] GetClientRect (in: hWnd=0xd02c0, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0226.169] GetWindowRect (in: hWnd=0xd02c0, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0226.169] GetParent (hWnd=0xd02c0) returned 0x1d013e
[0226.169] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0226.169] SetWindowTextW (hWnd=0xd02c0, lpString="Cancel") returned 1
[0226.169] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02c0, Msg=0xc, wParam=0x0, lParam=0x23924d0) returned 0x1
[0226.169] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02c0, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0226.170] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02c0, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0226.170] GetClientRect (in: hWnd=0xd02c0, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0226.170] GetWindowRect (in: hWnd=0xd02c0, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0226.170] GetParent (hWnd=0xd02c0) returned 0x1d013e
[0226.170] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0226.170] SendMessageW (hWnd=0xd02c0, Msg=0x2210, wParam=0x2c00001, lParam=0xd02c0) returned 0x0
[0226.170] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02c0, Msg=0x2210, wParam=0x2c00001, lParam=0xd02c0) returned 0x0
[0226.170] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02c0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0226.170] GetParent (hWnd=0xd02c0) returned 0x1d013e
[0226.170] GetDC (hWnd=0x0) returned 0xf0105ee
[0226.170] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e320) returned 0x0
[0226.171] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0226.171] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0226.171] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0226.171] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0226.171] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0226.171] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0226.171] GetWindowLongW (hWnd=0x1d013e, nIndex=-8) returned 458806
[0226.171] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0226.171] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0226.171] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xc80107b1
[0226.171] GetDeviceCaps (hdc=0xc80107b1, index=12) returned 32
[0226.172] GetDeviceCaps (hdc=0xc80107b1, index=14) returned 1
[0226.172] DeleteDC (hdc=0xc80107b1) returned 1
[0226.172] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0226.172] GetWindowThreadProcessId (in: hWnd=0x1d013e, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0226.172] GetCurrentThreadId () returned 0x11d0
[0226.172] PostMessageW (hWnd=0x1d013e, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0226.172] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.172] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.172] GetSystemMetrics (nIndex=42) returned 0
[0226.172] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.172] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0226.172] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0226.172] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0226.172] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0226.173] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0226.180] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1d013e) returned 0x1
[0226.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0226.182] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0226.182] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0226.182] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0226.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0226.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0226.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0226.185] GetFocus () returned 0x202c6
[0226.185] IsChild (hWndParent=0x1d013e, hWnd=0x202c6) returned 0
[0226.185] GetFocus () returned 0x202c6
[0226.185] SetFocus (hWnd=0xd02be) returned 0x202c6
[0226.186] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xd02be, lParam=0x0) returned 0x0
[0226.186] GetCapture () returned 0x0
[0226.186] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0226.186] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0226.188] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0226.189] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0226.189] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0226.189] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0226.189] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0226.190] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0226.190] GetParent (hWnd=0x1d013e) returned 0x0
[0226.190] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0226.190] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0226.190] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0226.191] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0226.191] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0226.191] GetSysColorBrush (nIndex=5) returned 0x100079
[0226.192] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0226.192] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0226.193] SendMessageW (hWnd=0xd02be, Msg=0x2111, wParam=0x10002be, lParam=0xd02be) returned 0x0
[0226.193] SendMessageW (hWnd=0xd02be, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0226.193] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0226.193] GetKeyState (nVirtKey=1) returned 1
[0226.193] GetKeyState (nVirtKey=2) returned 0
[0226.193] GetKeyState (nVirtKey=4) returned 0
[0226.193] GetKeyState (nVirtKey=5) returned 0
[0226.193] GetKeyState (nVirtKey=6) returned 0
[0226.193] GetWindowTextLengthW (hWnd=0xd02be) returned 0
[0226.193] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0226.196] SendMessageW (hWnd=0xd02be, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0226.196] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0226.196] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0226.196] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0226.199] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0226.200] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0226.200] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0226.200] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0226.201] GetWindowPlacement (in: hWnd=0x1d013e, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0226.201] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0226.201] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.201] GetSystemMetrics (nIndex=42) returned 0
[0226.201] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0226.201] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0226.201] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0226.201] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0226.201] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x52050734
[0226.201] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0226.201] SaveDC (hdc=0x10105d6) returned 1
[0226.201] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0226.201] CreateSolidBrush (color=0xf0f0f0) returned 0xb610078d
[0226.201] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0xb610078d) returned 1
[0226.201] DeleteObject (ho=0xb610078d) returned 1
[0226.201] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0226.202] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0226.202] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0226.202] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0226.202] GetWindowPlacement (in: hWnd=0x1d013e, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0226.202] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0226.202] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.202] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.203] GetSystemMetrics (nIndex=42) returned 0
[0226.203] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0226.203] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0226.203] GetCurrentObject (hdc=0x940107b6, type=0x1) returned 0xb00017
[0226.203] GetCurrentObject (hdc=0x940107b6, type=0x2) returned 0x900010
[0226.203] GetCurrentObject (hdc=0x940107b6, type=0x7) returned 0x130504fd
[0226.203] GetCurrentObject (hdc=0x940107b6, type=0x6) returned 0x8a01c2
[0226.203] SaveDC (hdc=0x940107b6) returned 1
[0226.203] GetNearestColor (hdc=0x940107b6, color=0xf0f0f0) returned 0xf0f0f0
[0226.203] CreateSolidBrush (color=0xf0f0f0) returned 0xb710078d
[0226.203] FillRect (hDC=0x940107b6, lprc=0x53dc18, hbr=0xb710078d) returned 1
[0226.203] DeleteObject (ho=0xb710078d) returned 1
[0226.203] RestoreDC (hdc=0x940107b6, nSavedDC=-1) returned 1
[0226.203] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.203] GetSystemMetrics (nIndex=42) returned 0
[0226.203] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0226.204] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0226.204] GetCurrentObject (hdc=0x940107b6, type=0x1) returned 0xb00017
[0226.204] GetCurrentObject (hdc=0x940107b6, type=0x2) returned 0x900010
[0226.204] GetCurrentObject (hdc=0x940107b6, type=0x7) returned 0x130504fd
[0226.204] GetCurrentObject (hdc=0x940107b6, type=0x6) returned 0x8a01c2
[0226.204] SaveDC (hdc=0x940107b6) returned 1
[0226.204] GetNearestColor (hdc=0x940107b6, color=0xf0f0f0) returned 0xf0f0f0
[0226.204] CreateSolidBrush (color=0xf0f0f0) returned 0xb810078d
[0226.204] FillRect (hDC=0x940107b6, lprc=0x53dbb8, hbr=0xb810078d) returned 1
[0226.204] DeleteObject (ho=0xb810078d) returned 1
[0226.204] RestoreDC (hdc=0x940107b6, nSavedDC=-1) returned 1
[0226.204] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.204] GetSystemMetrics (nIndex=42) returned 0
[0226.204] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0226.205] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0226.205] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0226.205] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0226.205] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0226.205] GetStockObject (i=5) returned 0x900015
[0226.206] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0226.206] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02c0, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0226.206] GetStockObject (i=5) returned 0x900015
[0226.206] GetWindowPlacement (in: hWnd=0x1d013e, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0226.206] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0226.206] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0226.206] GetWindowRect (in: hWnd=0x1d013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0226.207] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0226.207] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0226.207] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0226.208] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0226.208] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0226.208] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0226.208] GetWindowRect (in: hWnd=0x1d013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0226.208] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.208] IsWindowUnicode (hWnd=0x1d013e) returned 1
[0226.208] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.208] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.208] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.208] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0226.208] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.208] IsWindowUnicode (hWnd=0x1d013e) returned 1
[0226.208] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.208] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.208] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.209] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.216] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x84, wParam=0x0, lParam=0x1980218) returned 0x12
[0226.216] IsWindowUnicode (hWnd=0x1d013e) returned 1
[0226.216] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.216] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.216] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.216] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.216] IsWindowUnicode (hWnd=0x202c6) returned 1
[0226.216] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.216] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.216] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.216] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0226.217] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0226.217] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x84, wParam=0x0, lParam=0x1980218) returned 0x12
[0226.217] IsWindowUnicode (hWnd=0x1d013e) returned 1
[0226.217] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x84, wParam=0x0, lParam=0x1980218) returned 0x12
[0226.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x20, wParam=0x1d013e, lParam=0x2000012) returned 0x0
[0226.218] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.218] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xa0, wParam=0x12, lParam=0x1980218) returned 0x0
[0226.218] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.218] IsWindowUnicode (hWnd=0x1d013e) returned 1
[0226.218] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.219] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.219] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.219] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.219] IsWindowUnicode (hWnd=0x1d013e) returned 1
[0226.219] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.219] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.219] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.220] BeginPaint (in: hWnd=0x1d013e, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x10105d6
[0226.220] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0226.220] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.220] GetSystemMetrics (nIndex=42) returned 0
[0226.220] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0226.220] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0226.220] EndPaint (hWnd=0x1d013e, lpPaint=0x53e30c) returned 1
[0226.220] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.220] IsWindowUnicode (hWnd=0xd02be) returned 1
[0226.220] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.220] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.220] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0226.220] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0226.221] SetTextColor (hdc=0x950107b6, color=0x0) returned 0x0
[0226.221] SetBkColor (hdc=0x950107b6, color=0xffffff) returned 0xffffff
[0226.222] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.222] IsWindowUnicode (hWnd=0x1902d2) returned 1
[0226.222] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.222] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.222] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.222] BeginPaint (in: hWnd=0x1902d2, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0xf0105ee
[0226.222] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0226.222] CreateCompatibleDC (hdc=0xf0105ee) returned 0xc50107bc
[0226.222] SelectObject (hdc=0xc50107bc, h=0x1e0507b9) returned 0x85000f
[0226.222] GdipCreateFromHDC (hdc=0xc50107bc, graphics=0x53e30c) returned 0x0
[0226.222] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0226.222] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0226.222] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0226.222] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.222] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0226.223] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.223] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0226.223] LocalFree (hMem=0x89eac0) returned 0x0
[0226.223] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.223] GdipCreateRegion (region=0x53e354) returned 0x0
[0226.223] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.223] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0226.223] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0226.223] GetWindowTextLengthW (hWnd=0x1902d2) returned 16
[0226.223] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0226.223] GetSystemMetrics (nIndex=42) returned 0
[0226.223] GetWindowTextW (in: hWnd=0x1902d2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0226.223] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0226.223] GetClientRect (in: hWnd=0x1902d2, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0226.223] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0226.223] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0226.223] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0226.223] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.223] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0226.223] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0226.223] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0226.223] LocalFree (hMem=0x89eee8) returned 0x0
[0226.223] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0226.224] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.224] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0226.224] LocalFree (hMem=0x89eac0) returned 0x0
[0226.224] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.224] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0226.224] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0226.224] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0226.224] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0226.224] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0226.224] GetCurrentObject (hdc=0xc50107bc, type=0x1) returned 0xb00017
[0226.224] GetCurrentObject (hdc=0xc50107bc, type=0x2) returned 0x900010
[0226.224] GetCurrentObject (hdc=0xc50107bc, type=0x7) returned 0x1e0507b9
[0226.224] GetCurrentObject (hdc=0xc50107bc, type=0x6) returned 0x8a01c2
[0226.224] SaveDC (hdc=0xc50107bc) returned 1
[0226.233] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa804051e
[0226.234] GetClipRgn (hdc=0xc50107bc, hrgn=0xa804051e) returned 0
[0226.234] SelectClipRgn (hdc=0xc50107bc, hrgn=0x8b04053e) returned 2
[0226.234] DeleteObject (ho=0xa804051e) returned 1
[0226.234] DeleteObject (ho=0x8b04053e) returned 1
[0226.234] OffsetViewportOrgEx (in: hdc=0xc50107bc, x=0, y=0, lppt=0x2399314 | out: lppt=0x2399314) returned 1
[0226.234] GetNearestColor (hdc=0xc50107bc, color=0xf0f0f0) returned 0xf0f0f0
[0226.234] CreateSolidBrush (color=0xf0f0f0) returned 0xb910078d
[0226.234] FillRect (hDC=0xc50107bc, lprc=0x53e1f4, hbr=0xb910078d) returned 1
[0226.234] DeleteObject (ho=0xb910078d) returned 1
[0226.234] RestoreDC (hdc=0xc50107bc, nSavedDC=-1) returned 1
[0226.234] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107bc) returned 0x0
[0226.234] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc490dbd) returned 0x0
[0226.234] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.234] GetWindowTextLengthW (hWnd=0x1902d2) returned 16
[0226.234] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0226.234] GetSystemMetrics (nIndex=42) returned 0
[0226.234] GetWindowTextW (in: hWnd=0x1902d2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0226.234] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0226.234] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0226.235] GetCurrentObject (hdc=0xc50107bc, type=0x1) returned 0xb00017
[0226.235] GetCurrentObject (hdc=0xc50107bc, type=0x2) returned 0x900010
[0226.235] GetCurrentObject (hdc=0xc50107bc, type=0x7) returned 0x1e0507b9
[0226.235] GetCurrentObject (hdc=0xc50107bc, type=0x6) returned 0x8a01c2
[0226.235] SaveDC (hdc=0xc50107bc) returned 1
[0226.235] GetNearestColor (hdc=0xc50107bc, color=0x0) returned 0x0
[0226.235] RestoreDC (hdc=0xc50107bc, nSavedDC=-1) returned 1
[0226.235] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107bc) returned 0x0
[0226.235] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0226.236] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0226.236] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0226.236] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x239961c | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0226.236] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0226.236] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0226.236] GetCurrentObject (hdc=0xc50107bc, type=0x1) returned 0xb00017
[0226.236] GetCurrentObject (hdc=0xc50107bc, type=0x2) returned 0x900010
[0226.236] GetCurrentObject (hdc=0xc50107bc, type=0x7) returned 0x1e0507b9
[0226.236] GetCurrentObject (hdc=0xc50107bc, type=0x6) returned 0x8a01c2
[0226.236] SaveDC (hdc=0xc50107bc) returned 1
[0226.236] GetTextAlign (hdc=0xc50107bc) returned 0x0
[0226.236] GetTextColor (hdc=0xc50107bc) returned 0x0
[0226.236] GetCurrentObject (hdc=0xc50107bc, type=0x6) returned 0x8a01c2
[0226.236] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0226.237] SelectObject (hdc=0xc50107bc, h=0x730a066d) returned 0x8a01c2
[0226.237] GetBkMode (hdc=0xc50107bc) returned 2
[0226.237] SetBkMode (hdc=0xc50107bc, mode=1) returned 2
[0226.237] DrawTextExW (in: hdc=0xc50107bc, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x2399840 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0226.237] RestoreDC (hdc=0xc50107bc, nSavedDC=-1) returned 1
[0226.237] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107bc) returned 0x0
[0226.237] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0226.237] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=250, cy=70, hdcSrc=0xc50107bc, x1=0, y1=0, rop=0xcc0020) returned 1
[0226.237] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107bc) returned 0x0
[0226.237] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0226.237] SelectObject (hdc=0xc50107bc, h=0x85000f) returned 0x1e0507b9
[0226.237] DeleteDC (hdc=0xc50107bc) returned 1
[0226.238] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0226.238] EndPaint (hWnd=0x1902d2, lpPaint=0x53e2f0) returned 1
[0226.238] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.238] IsWindowUnicode (hWnd=0x1802d6) returned 1
[0226.238] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.238] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.238] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.238] BeginPaint (in: hWnd=0x1802d6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0226.238] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0226.238] CreateCompatibleDC (hdc=0x60100ce) returned 0xc70107bc
[0226.238] SelectObject (hdc=0xc70107bc, h=0x1e0507b9) returned 0x85000f
[0226.238] GdipCreateFromHDC (hdc=0xc70107bc, graphics=0x53e300) returned 0x0
[0226.238] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0226.239] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0226.239] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0226.239] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.239] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0226.239] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.239] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0226.239] LocalFree (hMem=0x89eac0) returned 0x0
[0226.239] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.239] GdipCreateRegion (region=0x53e348) returned 0x0
[0226.239] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.239] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0226.239] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0226.239] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc470dbd) returned 0x0
[0226.239] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.239] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0226.239] GetCurrentObject (hdc=0xc70107bc, type=0x1) returned 0xb00017
[0226.239] GetCurrentObject (hdc=0xc70107bc, type=0x2) returned 0x900010
[0226.239] GetCurrentObject (hdc=0xc70107bc, type=0x7) returned 0x1e0507b9
[0226.239] GetCurrentObject (hdc=0xc70107bc, type=0x6) returned 0x8a01c2
[0226.239] SaveDC (hdc=0xc70107bc) returned 1
[0226.239] GetNearestColor (hdc=0xc70107bc, color=0xf0f0f0) returned 0xf0f0f0
[0226.240] GetNearestColor (hdc=0xc70107bc, color=0xa0a0a0) returned 0xa0a0a0
[0226.240] GetNearestColor (hdc=0xc70107bc, color=0x696969) returned 0x696969
[0226.240] GetNearestColor (hdc=0xc70107bc, color=0xa0a0a0) returned 0xa0a0a0
[0226.240] GetNearestColor (hdc=0xc70107bc, color=0x0) returned 0x0
[0226.242] GetNearestColor (hdc=0xc70107bc, color=0xffffff) returned 0xffffff
[0226.242] GetNearestColor (hdc=0xc70107bc, color=0xe5e5e5) returned 0xe5e5e5
[0226.242] GetNearestColor (hdc=0xc70107bc, color=0xd7d7d7) returned 0xd7d7d7
[0226.242] GetNearestColor (hdc=0xc70107bc, color=0x0) returned 0x0
[0226.243] RestoreDC (hdc=0xc70107bc, nSavedDC=-1) returned 1
[0226.243] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107bc) returned 0x0
[0226.243] IsAppThemed () returned 0x1
[0226.243] GetThemeAppProperties () returned 0x3
[0226.243] GetThemeAppProperties () returned 0x3
[0226.243] IsAppThemed () returned 0x1
[0226.243] GetThemeAppProperties () returned 0x3
[0226.243] GetThemeAppProperties () returned 0x3
[0226.243] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x2399fac | out: lpchText="OK", lprc=0x53e028) returned 13
[0226.243] IsAppThemed () returned 0x1
[0226.243] GetThemeAppProperties () returned 0x3
[0226.243] GetThemeAppProperties () returned 0x3
[0226.243] IsAppThemed () returned 0x1
[0226.243] GetThemeAppProperties () returned 0x3
[0226.243] GetThemeAppProperties () returned 0x3
[0226.244] GetFocus () returned 0xd02be
[0226.244] IsAppThemed () returned 0x1
[0226.244] GetThemeAppProperties () returned 0x3
[0226.244] GetThemeAppProperties () returned 0x3
[0226.244] IsAppThemed () returned 0x1
[0226.244] GetThemeAppProperties () returned 0x3
[0226.244] GetThemeAppProperties () returned 0x3
[0226.244] IsThemePartDefined () returned 0x1
[0226.244] IsAppThemed () returned 0x1
[0226.244] GetThemeAppProperties () returned 0x3
[0226.244] GetThemeAppProperties () returned 0x3
[0226.244] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0226.244] IsAppThemed () returned 0x1
[0226.244] GetThemeAppProperties () returned 0x3
[0226.244] GetThemeAppProperties () returned 0x3
[0226.244] IsAppThemed () returned 0x1
[0226.244] GetThemeAppProperties () returned 0x3
[0226.244] GetThemeAppProperties () returned 0x3
[0226.244] IsThemePartDefined () returned 0x1
[0226.244] GdipCreateRegion (region=0x53e070) returned 0x0
[0226.244] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.244] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0226.245] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.245] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0226.245] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.245] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0226.245] LocalFree (hMem=0x89eac0) returned 0x0
[0226.245] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.245] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0226.245] LocalFree (hMem=0x89eac0) returned 0x0
[0226.245] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.245] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0226.245] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0226.245] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0226.245] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.245] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0226.245] GetCurrentObject (hdc=0xc70107bc, type=0x1) returned 0xb00017
[0226.245] GetCurrentObject (hdc=0xc70107bc, type=0x2) returned 0x900010
[0226.245] GetCurrentObject (hdc=0xc70107bc, type=0x7) returned 0x1e0507b9
[0226.245] GetCurrentObject (hdc=0xc70107bc, type=0x6) returned 0x8a01c2
[0226.245] SaveDC (hdc=0xc70107bc) returned 1
[0226.245] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8c04053e
[0226.245] GetClipRgn (hdc=0xc70107bc, hrgn=0x8c04053e) returned 0
[0226.246] SelectClipRgn (hdc=0xc70107bc, hrgn=0xac04051e) returned 2
[0226.246] DeleteObject (ho=0x8c04053e) returned 1
[0226.246] DeleteObject (ho=0xac04051e) returned 1
[0226.246] OffsetViewportOrgEx (in: hdc=0xc70107bc, x=0, y=0, lppt=0x239a65c | out: lppt=0x239a65c) returned 1
[0226.246] DrawThemeParentBackground () returned 0x0
[0226.246] GetWindowPlacement (in: hWnd=0x1d013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0226.246] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0226.246] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.246] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.246] GetSystemMetrics (nIndex=42) returned 0
[0226.246] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.246] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0226.246] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0226.246] GetCurrentObject (hdc=0xc70107bc, type=0x1) returned 0xb00017
[0226.246] GetCurrentObject (hdc=0xc70107bc, type=0x2) returned 0x900010
[0226.246] GetCurrentObject (hdc=0xc70107bc, type=0x7) returned 0x1e0507b9
[0226.246] GetCurrentObject (hdc=0xc70107bc, type=0x6) returned 0x8a01c2
[0226.246] SaveDC (hdc=0xc70107bc) returned 2
[0226.246] GetNearestColor (hdc=0xc70107bc, color=0xf0f0f0) returned 0xf0f0f0
[0226.247] CreateSolidBrush (color=0xf0f0f0) returned 0xba10078d
[0226.247] FillRect (hDC=0xc70107bc, lprc=0x53dad0, hbr=0xba10078d) returned 1
[0226.247] DeleteObject (ho=0xba10078d) returned 1
[0226.247] RestoreDC (hdc=0xc70107bc, nSavedDC=-1) returned 1
[0226.247] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.247] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.247] GetSystemMetrics (nIndex=42) returned 0
[0226.247] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.247] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0226.247] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0226.247] GetCurrentObject (hdc=0xc70107bc, type=0x1) returned 0xb00017
[0226.247] GetCurrentObject (hdc=0xc70107bc, type=0x2) returned 0x900010
[0226.247] GetCurrentObject (hdc=0xc70107bc, type=0x7) returned 0x1e0507b9
[0226.247] GetCurrentObject (hdc=0xc70107bc, type=0x6) returned 0x8a01c2
[0226.247] SaveDC (hdc=0xc70107bc) returned 2
[0226.247] GetNearestColor (hdc=0xc70107bc, color=0xf0f0f0) returned 0xf0f0f0
[0226.247] CreateSolidBrush (color=0xf0f0f0) returned 0xbb10078d
[0226.247] FillRect (hDC=0xc70107bc, lprc=0x53da70, hbr=0xbb10078d) returned 1
[0226.247] DeleteObject (ho=0xbb10078d) returned 1
[0226.247] RestoreDC (hdc=0xc70107bc, nSavedDC=-1) returned 1
[0226.247] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.248] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.248] GetSystemMetrics (nIndex=42) returned 0
[0226.248] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.248] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0226.248] RestoreDC (hdc=0xc70107bc, nSavedDC=-1) returned 1
[0226.248] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107bc) returned 0x0
[0226.248] IsAppThemed () returned 0x1
[0226.248] GetThemeAppProperties () returned 0x3
[0226.248] GetThemeAppProperties () returned 0x3
[0226.248] IsAppThemed () returned 0x1
[0226.248] GetThemeAppProperties () returned 0x3
[0226.248] GetThemeAppProperties () returned 0x3
[0226.248] IsThemePartDefined () returned 0x1
[0226.248] GdipCreateRegion (region=0x53dff4) returned 0x0
[0226.248] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.248] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0226.248] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.248] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0226.248] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0226.248] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0226.249] LocalFree (hMem=0x89ee08) returned 0x0
[0226.249] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.249] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0226.249] LocalFree (hMem=0x89eac0) returned 0x0
[0226.249] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.249] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0226.249] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0226.249] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0226.249] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.249] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0226.249] GetCurrentObject (hdc=0xc70107bc, type=0x1) returned 0xb00017
[0226.249] GetCurrentObject (hdc=0xc70107bc, type=0x2) returned 0x900010
[0226.249] GetCurrentObject (hdc=0xc70107bc, type=0x7) returned 0x1e0507b9
[0226.249] GetCurrentObject (hdc=0xc70107bc, type=0x6) returned 0x8a01c2
[0226.249] SaveDC (hdc=0xc70107bc) returned 1
[0226.249] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xad04051e
[0226.249] GetClipRgn (hdc=0xc70107bc, hrgn=0xad04051e) returned 0
[0226.249] SelectClipRgn (hdc=0xc70107bc, hrgn=0x8e04053e) returned 2
[0226.249] DeleteObject (ho=0xad04051e) returned 1
[0226.249] DeleteObject (ho=0x8e04053e) returned 1
[0226.249] OffsetViewportOrgEx (in: hdc=0xc70107bc, x=0, y=0, lppt=0x239aee4 | out: lppt=0x239aee4) returned 1
[0226.249] IsAppThemed () returned 0x1
[0226.249] GetThemeAppProperties () returned 0x3
[0226.249] GetThemeAppProperties () returned 0x3
[0226.249] DrawThemeBackground () returned 0x0
[0226.250] RestoreDC (hdc=0xc70107bc, nSavedDC=-1) returned 1
[0226.250] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107bc) returned 0x0
[0226.250] GdipCreateRegion (region=0x53dff8) returned 0x0
[0226.250] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.250] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0226.250] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.250] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0226.250] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0226.250] LocalFree (hMem=0x89eac0) returned 0x0
[0226.250] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0226.250] LocalFree (hMem=0x89ec80) returned 0x0
[0226.250] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.250] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0226.250] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0226.250] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0226.250] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.250] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0226.250] GetCurrentObject (hdc=0xc70107bc, type=0x1) returned 0xb00017
[0226.250] GetCurrentObject (hdc=0xc70107bc, type=0x2) returned 0x900010
[0226.250] GetCurrentObject (hdc=0xc70107bc, type=0x7) returned 0x1e0507b9
[0226.250] GetCurrentObject (hdc=0xc70107bc, type=0x6) returned 0x8a01c2
[0226.250] SaveDC (hdc=0xc70107bc) returned 1
[0226.250] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8f04053e
[0226.250] GetClipRgn (hdc=0xc70107bc, hrgn=0x8f04053e) returned 0
[0226.251] SelectClipRgn (hdc=0xc70107bc, hrgn=0xae04051e) returned 2
[0226.251] DeleteObject (ho=0x8f04053e) returned 1
[0226.251] DeleteObject (ho=0xae04051e) returned 1
[0226.251] OffsetViewportOrgEx (in: hdc=0xc70107bc, x=0, y=0, lppt=0x239b1b8 | out: lppt=0x239b1b8) returned 1
[0226.251] IsAppThemed () returned 0x1
[0226.251] GetThemeAppProperties () returned 0x3
[0226.251] GetThemeAppProperties () returned 0x3
[0226.251] GetThemeBackgroundContentRect () returned 0x0
[0226.251] RestoreDC (hdc=0xc70107bc, nSavedDC=-1) returned 1
[0226.251] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107bc) returned 0x0
[0226.251] IsAppThemed () returned 0x1
[0226.251] GetThemeAppProperties () returned 0x3
[0226.251] GetThemeAppProperties () returned 0x3
[0226.251] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0226.251] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0226.251] GetCurrentObject (hdc=0xc70107bc, type=0x1) returned 0xb00017
[0226.251] GetCurrentObject (hdc=0xc70107bc, type=0x2) returned 0x900010
[0226.251] GetCurrentObject (hdc=0xc70107bc, type=0x7) returned 0x1e0507b9
[0226.251] GetCurrentObject (hdc=0xc70107bc, type=0x6) returned 0x8a01c2
[0226.251] SaveDC (hdc=0xc70107bc) returned 1
[0226.251] GetTextAlign (hdc=0xc70107bc) returned 0x0
[0226.251] GetTextColor (hdc=0xc70107bc) returned 0x0
[0226.251] GetCurrentObject (hdc=0xc70107bc, type=0x6) returned 0x8a01c2
[0226.252] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0226.252] SelectObject (hdc=0xc70107bc, h=0x730a066d) returned 0x8a01c2
[0226.252] GetBkMode (hdc=0xc70107bc) returned 2
[0226.252] SetBkMode (hdc=0xc70107bc, mode=1) returned 2
[0226.252] DrawTextExW (in: hdc=0xc70107bc, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x239b558 | out: lpchText="OK", lprc=0x53df90) returned 13
[0226.252] DrawTextExW (in: hdc=0xc70107bc, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x239b558 | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0226.252] RestoreDC (hdc=0xc70107bc, nSavedDC=-1) returned 1
[0226.253] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107bc) returned 0x0
[0226.253] GetFocus () returned 0xd02be
[0226.253] IsAppThemed () returned 0x1
[0226.253] GetThemeAppProperties () returned 0x3
[0226.253] GetThemeAppProperties () returned 0x3
[0226.253] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0226.253] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0xc70107bc, x1=0, y1=0, rop=0xcc0020) returned 1
[0226.253] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107bc) returned 0x0
[0226.253] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0226.253] SelectObject (hdc=0xc70107bc, h=0x85000f) returned 0x1e0507b9
[0226.253] DeleteDC (hdc=0xc70107bc) returned 1
[0226.253] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0226.253] EndPaint (hWnd=0x1802d6, lpPaint=0x53e2e4) returned 1
[0226.253] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.253] IsWindowUnicode (hWnd=0xd02c0) returned 1
[0226.253] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.253] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.253] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.254] BeginPaint (in: hWnd=0xd02c0, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0226.254] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0226.254] CreateCompatibleDC (hdc=0x10105d6) returned 0xc90107bc
[0226.254] SelectObject (hdc=0xc90107bc, h=0x1e0507b9) returned 0x85000f
[0226.254] GdipCreateFromHDC (hdc=0xc90107bc, graphics=0x53e300) returned 0x0
[0226.254] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0226.254] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0226.254] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0226.254] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.254] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0226.254] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0226.254] LocalFree (hMem=0x89eac0) returned 0x0
[0226.254] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.254] GdipCreateRegion (region=0x53e348) returned 0x0
[0226.254] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.254] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0226.254] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0226.254] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc450dbd) returned 0x0
[0226.254] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.255] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0226.255] GetCurrentObject (hdc=0xc90107bc, type=0x1) returned 0xb00017
[0226.255] GetCurrentObject (hdc=0xc90107bc, type=0x2) returned 0x900010
[0226.255] GetCurrentObject (hdc=0xc90107bc, type=0x7) returned 0x1e0507b9
[0226.255] GetCurrentObject (hdc=0xc90107bc, type=0x6) returned 0x8a01c2
[0226.255] SaveDC (hdc=0xc90107bc) returned 1
[0226.255] GetNearestColor (hdc=0xc90107bc, color=0xf0f0f0) returned 0xf0f0f0
[0226.255] GetNearestColor (hdc=0xc90107bc, color=0xa0a0a0) returned 0xa0a0a0
[0226.255] GetNearestColor (hdc=0xc90107bc, color=0x696969) returned 0x696969
[0226.255] GetNearestColor (hdc=0xc90107bc, color=0xa0a0a0) returned 0xa0a0a0
[0226.255] GetNearestColor (hdc=0xc90107bc, color=0x0) returned 0x0
[0226.255] GetNearestColor (hdc=0xc90107bc, color=0xffffff) returned 0xffffff
[0226.255] GetNearestColor (hdc=0xc90107bc, color=0xe5e5e5) returned 0xe5e5e5
[0226.255] GetNearestColor (hdc=0xc90107bc, color=0xd7d7d7) returned 0xd7d7d7
[0226.255] GetNearestColor (hdc=0xc90107bc, color=0x0) returned 0x0
[0226.255] RestoreDC (hdc=0xc90107bc, nSavedDC=-1) returned 1
[0226.255] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107bc) returned 0x0
[0226.255] IsAppThemed () returned 0x1
[0226.256] GetThemeAppProperties () returned 0x3
[0226.256] GetThemeAppProperties () returned 0x3
[0226.256] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0226.256] SendMessageW (hWnd=0x1d013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0226.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0226.256] IsAppThemed () returned 0x1
[0226.256] GetThemeAppProperties () returned 0x3
[0226.256] GetThemeAppProperties () returned 0x3
[0226.256] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x239bd68 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0226.256] IsAppThemed () returned 0x1
[0226.256] GetThemeAppProperties () returned 0x3
[0226.256] GetThemeAppProperties () returned 0x3
[0226.256] IsAppThemed () returned 0x1
[0226.256] GetThemeAppProperties () returned 0x3
[0226.256] GetThemeAppProperties () returned 0x3
[0226.256] GetFocus () returned 0xd02be
[0226.256] IsAppThemed () returned 0x1
[0226.256] GetThemeAppProperties () returned 0x3
[0226.256] GetThemeAppProperties () returned 0x3
[0226.256] IsAppThemed () returned 0x1
[0226.257] GetThemeAppProperties () returned 0x3
[0226.257] GetThemeAppProperties () returned 0x3
[0226.257] IsThemePartDefined () returned 0x1
[0226.257] IsAppThemed () returned 0x1
[0226.257] GetThemeAppProperties () returned 0x3
[0226.257] GetThemeAppProperties () returned 0x3
[0226.257] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0226.257] IsAppThemed () returned 0x1
[0226.257] GetThemeAppProperties () returned 0x3
[0226.257] GetThemeAppProperties () returned 0x3
[0226.257] IsAppThemed () returned 0x1
[0226.257] GetThemeAppProperties () returned 0x3
[0226.257] GetThemeAppProperties () returned 0x3
[0226.257] IsThemePartDefined () returned 0x1
[0226.257] GdipCreateRegion (region=0x53e070) returned 0x0
[0226.257] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.257] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0226.257] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.257] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0226.257] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0226.257] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0226.257] LocalFree (hMem=0x89ec80) returned 0x0
[0226.257] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.257] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0226.257] LocalFree (hMem=0x89eac0) returned 0x0
[0226.257] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.258] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0226.258] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0226.258] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0226.258] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.258] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0226.258] GetCurrentObject (hdc=0xc90107bc, type=0x1) returned 0xb00017
[0226.258] GetCurrentObject (hdc=0xc90107bc, type=0x2) returned 0x900010
[0226.258] GetCurrentObject (hdc=0xc90107bc, type=0x7) returned 0x1e0507b9
[0226.258] GetCurrentObject (hdc=0xc90107bc, type=0x6) returned 0x8a01c2
[0226.258] SaveDC (hdc=0xc90107bc) returned 1
[0226.258] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaf04051e
[0226.258] GetClipRgn (hdc=0xc90107bc, hrgn=0xaf04051e) returned 0
[0226.258] SelectClipRgn (hdc=0xc90107bc, hrgn=0x9304053e) returned 2
[0226.258] DeleteObject (ho=0xaf04051e) returned 1
[0226.258] DeleteObject (ho=0x9304053e) returned 1
[0226.258] OffsetViewportOrgEx (in: hdc=0xc90107bc, x=0, y=0, lppt=0x239c418 | out: lppt=0x239c418) returned 1
[0226.258] DrawThemeParentBackground () returned 0x0
[0226.258] GetWindowPlacement (in: hWnd=0x1d013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0226.258] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0226.259] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.259] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.259] GetSystemMetrics (nIndex=42) returned 0
[0226.259] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.259] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0226.259] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0226.259] GetCurrentObject (hdc=0xc90107bc, type=0x1) returned 0xb00017
[0226.259] GetCurrentObject (hdc=0xc90107bc, type=0x2) returned 0x900010
[0226.259] GetCurrentObject (hdc=0xc90107bc, type=0x7) returned 0x1e0507b9
[0226.259] GetCurrentObject (hdc=0xc90107bc, type=0x6) returned 0x8a01c2
[0226.259] SaveDC (hdc=0xc90107bc) returned 2
[0226.259] GetNearestColor (hdc=0xc90107bc, color=0xf0f0f0) returned 0xf0f0f0
[0226.259] CreateSolidBrush (color=0xf0f0f0) returned 0xbc10078d
[0226.259] FillRect (hDC=0xc90107bc, lprc=0x53dad0, hbr=0xbc10078d) returned 1
[0226.259] DeleteObject (ho=0xbc10078d) returned 1
[0226.259] RestoreDC (hdc=0xc90107bc, nSavedDC=-1) returned 1
[0226.259] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.259] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.259] GetSystemMetrics (nIndex=42) returned 0
[0226.259] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.259] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0226.259] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0226.260] GetCurrentObject (hdc=0xc90107bc, type=0x1) returned 0xb00017
[0226.260] GetCurrentObject (hdc=0xc90107bc, type=0x2) returned 0x900010
[0226.260] GetCurrentObject (hdc=0xc90107bc, type=0x7) returned 0x1e0507b9
[0226.260] GetCurrentObject (hdc=0xc90107bc, type=0x6) returned 0x8a01c2
[0226.260] SaveDC (hdc=0xc90107bc) returned 2
[0226.260] GetNearestColor (hdc=0xc90107bc, color=0xf0f0f0) returned 0xf0f0f0
[0226.260] CreateSolidBrush (color=0xf0f0f0) returned 0xbd10078d
[0226.260] FillRect (hDC=0xc90107bc, lprc=0x53da70, hbr=0xbd10078d) returned 1
[0226.260] DeleteObject (ho=0xbd10078d) returned 1
[0226.260] RestoreDC (hdc=0xc90107bc, nSavedDC=-1) returned 1
[0226.260] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.260] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.260] GetSystemMetrics (nIndex=42) returned 0
[0226.260] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.260] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0226.260] RestoreDC (hdc=0xc90107bc, nSavedDC=-1) returned 1
[0226.260] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107bc) returned 0x0
[0226.260] IsAppThemed () returned 0x1
[0226.261] GetThemeAppProperties () returned 0x3
[0226.261] GetThemeAppProperties () returned 0x3
[0226.261] IsAppThemed () returned 0x1
[0226.261] GetThemeAppProperties () returned 0x3
[0226.261] GetThemeAppProperties () returned 0x3
[0226.261] IsThemePartDefined () returned 0x1
[0226.261] GdipCreateRegion (region=0x53dff4) returned 0x0
[0226.261] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.261] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0226.261] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.261] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0226.261] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0226.261] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0226.261] LocalFree (hMem=0x89ec80) returned 0x0
[0226.261] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.261] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0226.261] LocalFree (hMem=0x89eac0) returned 0x0
[0226.261] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.261] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0226.261] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0226.261] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0226.261] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.261] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0226.261] GetCurrentObject (hdc=0xc90107bc, type=0x1) returned 0xb00017
[0226.262] GetCurrentObject (hdc=0xc90107bc, type=0x2) returned 0x900010
[0226.262] GetCurrentObject (hdc=0xc90107bc, type=0x7) returned 0x1e0507b9
[0226.262] GetCurrentObject (hdc=0xc90107bc, type=0x6) returned 0x8a01c2
[0226.262] SaveDC (hdc=0xc90107bc) returned 1
[0226.262] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9404053e
[0226.262] GetClipRgn (hdc=0xc90107bc, hrgn=0x9404053e) returned 0
[0226.262] SelectClipRgn (hdc=0xc90107bc, hrgn=0xb104051e) returned 2
[0226.262] DeleteObject (ho=0x9404053e) returned 1
[0226.262] DeleteObject (ho=0xb104051e) returned 1
[0226.262] OffsetViewportOrgEx (in: hdc=0xc90107bc, x=0, y=0, lppt=0x239cca0 | out: lppt=0x239cca0) returned 1
[0226.262] IsAppThemed () returned 0x1
[0226.262] GetThemeAppProperties () returned 0x3
[0226.262] GetThemeAppProperties () returned 0x3
[0226.262] DrawThemeBackground () returned 0x0
[0226.262] RestoreDC (hdc=0xc90107bc, nSavedDC=-1) returned 1
[0226.262] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107bc) returned 0x0
[0226.262] GdipCreateRegion (region=0x53dff8) returned 0x0
[0226.262] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.262] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0226.262] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.263] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0226.263] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0226.263] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0226.263] LocalFree (hMem=0x89ee40) returned 0x0
[0226.263] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.263] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0226.263] LocalFree (hMem=0x89eac0) returned 0x0
[0226.263] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.263] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0226.263] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0226.263] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0226.263] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.263] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0226.263] GetCurrentObject (hdc=0xc90107bc, type=0x1) returned 0xb00017
[0226.263] GetCurrentObject (hdc=0xc90107bc, type=0x2) returned 0x900010
[0226.263] GetCurrentObject (hdc=0xc90107bc, type=0x7) returned 0x1e0507b9
[0226.263] GetCurrentObject (hdc=0xc90107bc, type=0x6) returned 0x8a01c2
[0226.263] SaveDC (hdc=0xc90107bc) returned 1
[0226.263] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb204051e
[0226.263] GetClipRgn (hdc=0xc90107bc, hrgn=0xb204051e) returned 0
[0226.264] SelectClipRgn (hdc=0xc90107bc, hrgn=0x9504053e) returned 2
[0226.265] DeleteObject (ho=0xb204051e) returned 1
[0226.265] DeleteObject (ho=0x9504053e) returned 1
[0226.265] OffsetViewportOrgEx (in: hdc=0xc90107bc, x=0, y=0, lppt=0x239cf74 | out: lppt=0x239cf74) returned 1
[0226.265] IsAppThemed () returned 0x1
[0226.265] GetThemeAppProperties () returned 0x3
[0226.265] GetThemeAppProperties () returned 0x3
[0226.265] GetThemeBackgroundContentRect () returned 0x0
[0226.265] RestoreDC (hdc=0xc90107bc, nSavedDC=-1) returned 1
[0226.265] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107bc) returned 0x0
[0226.265] IsAppThemed () returned 0x1
[0226.265] GetThemeAppProperties () returned 0x3
[0226.265] GetThemeAppProperties () returned 0x3
[0226.265] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0226.265] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0226.265] GetCurrentObject (hdc=0xc90107bc, type=0x1) returned 0xb00017
[0226.265] GetCurrentObject (hdc=0xc90107bc, type=0x2) returned 0x900010
[0226.266] GetCurrentObject (hdc=0xc90107bc, type=0x7) returned 0x1e0507b9
[0226.266] GetCurrentObject (hdc=0xc90107bc, type=0x6) returned 0x8a01c2
[0226.266] SaveDC (hdc=0xc90107bc) returned 1
[0226.266] GetTextAlign (hdc=0xc90107bc) returned 0x0
[0226.266] GetTextColor (hdc=0xc90107bc) returned 0x0
[0226.266] GetCurrentObject (hdc=0xc90107bc, type=0x6) returned 0x8a01c2
[0226.266] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0226.266] SelectObject (hdc=0xc90107bc, h=0x730a066d) returned 0x8a01c2
[0226.267] GetBkMode (hdc=0xc90107bc) returned 2
[0226.267] SetBkMode (hdc=0xc90107bc, mode=1) returned 2
[0226.267] DrawTextExW (in: hdc=0xc90107bc, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x239d314 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0226.267] DrawTextExW (in: hdc=0xc90107bc, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x239d314 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0226.267] RestoreDC (hdc=0xc90107bc, nSavedDC=-1) returned 1
[0226.267] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107bc) returned 0x0
[0226.267] GetFocus () returned 0xd02be
[0226.267] IsAppThemed () returned 0x1
[0226.267] GetThemeAppProperties () returned 0x3
[0226.267] GetThemeAppProperties () returned 0x3
[0226.267] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0226.267] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0xc90107bc, x1=0, y1=0, rop=0xcc0020) returned 1
[0226.268] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107bc) returned 0x0
[0226.268] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0226.268] SelectObject (hdc=0xc90107bc, h=0x85000f) returned 0x1e0507b9
[0226.268] DeleteDC (hdc=0xc90107bc) returned 1
[0226.268] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0226.268] EndPaint (hWnd=0xd02c0, lpPaint=0x53e2e4) returned 1
[0226.268] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.268] IsWindowUnicode (hWnd=0x202c6) returned 1
[0226.268] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.268] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.268] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.268] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0226.268] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0226.268] CreateCompatibleDC (hdc=0x8b010786) returned 0xcb0107bc
[0226.269] SelectObject (hdc=0xcb0107bc, h=0x1e0507b9) returned 0x85000f
[0226.269] GdipCreateFromHDC (hdc=0xcb0107bc, graphics=0x53e300) returned 0x0
[0226.269] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0226.269] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0226.269] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0226.269] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.269] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0226.269] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0226.269] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0226.269] LocalFree (hMem=0x89ec80) returned 0x0
[0226.269] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.269] GdipCreateRegion (region=0x53e348) returned 0x0
[0226.269] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.269] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0226.269] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0226.269] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc430dbd) returned 0x0
[0226.269] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.269] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0226.269] GetCurrentObject (hdc=0xcb0107bc, type=0x1) returned 0xb00017
[0226.269] GetCurrentObject (hdc=0xcb0107bc, type=0x2) returned 0x900010
[0226.270] GetCurrentObject (hdc=0xcb0107bc, type=0x7) returned 0x1e0507b9
[0226.270] GetCurrentObject (hdc=0xcb0107bc, type=0x6) returned 0x8a01c2
[0226.270] SaveDC (hdc=0xcb0107bc) returned 1
[0226.270] GetNearestColor (hdc=0xcb0107bc, color=0xff) returned 0xff
[0226.270] GetNearestColor (hdc=0xcb0107bc, color=0x55) returned 0x55
[0226.270] GetNearestColor (hdc=0xcb0107bc, color=0x0) returned 0x0
[0226.270] GetNearestColor (hdc=0xcb0107bc, color=0x55) returned 0x55
[0226.270] GetNearestColor (hdc=0xcb0107bc, color=0x0) returned 0x0
[0226.270] GetNearestColor (hdc=0xcb0107bc, color=0x8080ff) returned 0x8080ff
[0226.270] GetNearestColor (hdc=0xcb0107bc, color=0x7373e5) returned 0x7373e5
[0226.270] GetNearestColor (hdc=0xcb0107bc, color=0xe5) returned 0xe5
[0226.270] GetNearestColor (hdc=0xcb0107bc, color=0x0) returned 0x0
[0226.270] RestoreDC (hdc=0xcb0107bc, nSavedDC=-1) returned 1
[0226.270] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb0107bc) returned 0x0
[0226.270] IsAppThemed () returned 0x1
[0226.270] GetThemeAppProperties () returned 0x3
[0226.270] GetThemeAppProperties () returned 0x3
[0226.270] IsAppThemed () returned 0x1
[0226.270] GetThemeAppProperties () returned 0x3
[0226.271] GetThemeAppProperties () returned 0x3
[0226.278] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0226.278] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x239daf8 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0226.278] IsAppThemed () returned 0x1
[0226.278] GetThemeAppProperties () returned 0x3
[0226.278] GetThemeAppProperties () returned 0x3
[0226.278] IsAppThemed () returned 0x1
[0226.278] GetThemeAppProperties () returned 0x3
[0226.278] GetThemeAppProperties () returned 0x3
[0226.278] GetFocus () returned 0xd02be
[0226.278] IsAppThemed () returned 0x1
[0226.278] GetThemeAppProperties () returned 0x3
[0226.278] GetThemeAppProperties () returned 0x3
[0226.278] IsAppThemed () returned 0x1
[0226.278] GetThemeAppProperties () returned 0x3
[0226.278] GetThemeAppProperties () returned 0x3
[0226.278] IsThemePartDefined () returned 0x1
[0226.278] IsAppThemed () returned 0x1
[0226.278] GetThemeAppProperties () returned 0x3
[0226.278] GetThemeAppProperties () returned 0x3
[0226.279] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0226.279] IsAppThemed () returned 0x1
[0226.279] GetThemeAppProperties () returned 0x3
[0226.279] GetThemeAppProperties () returned 0x3
[0226.279] IsAppThemed () returned 0x1
[0226.279] GetThemeAppProperties () returned 0x3
[0226.279] GetThemeAppProperties () returned 0x3
[0226.279] IsThemePartDefined () returned 0x1
[0226.279] GdipCreateRegion (region=0x53e070) returned 0x0
[0226.279] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.279] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0226.279] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.279] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0226.279] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0226.279] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0226.279] LocalFree (hMem=0x89ec80) returned 0x0
[0226.279] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.279] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0226.279] LocalFree (hMem=0x89eac0) returned 0x0
[0226.279] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.279] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0226.279] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0226.279] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0226.279] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.280] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0226.280] GetCurrentObject (hdc=0xcb0107bc, type=0x1) returned 0xb00017
[0226.280] GetCurrentObject (hdc=0xcb0107bc, type=0x2) returned 0x900010
[0226.280] GetCurrentObject (hdc=0xcb0107bc, type=0x7) returned 0x1e0507b9
[0226.280] GetCurrentObject (hdc=0xcb0107bc, type=0x6) returned 0x8a01c2
[0226.280] SaveDC (hdc=0xcb0107bc) returned 1
[0226.280] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9604053e
[0226.280] GetClipRgn (hdc=0xcb0107bc, hrgn=0x9604053e) returned 0
[0226.280] SelectClipRgn (hdc=0xcb0107bc, hrgn=0xb604051e) returned 2
[0226.280] DeleteObject (ho=0x9604053e) returned 1
[0226.280] DeleteObject (ho=0xb604051e) returned 1
[0226.280] OffsetViewportOrgEx (in: hdc=0xcb0107bc, x=0, y=0, lppt=0x239e1a8 | out: lppt=0x239e1a8) returned 1
[0226.280] DrawThemeParentBackground () returned 0x0
[0226.280] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0226.280] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0226.280] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0226.280] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0226.280] GetSystemMetrics (nIndex=42) returned 0
[0226.280] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0226.280] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0226.281] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0226.281] GetCurrentObject (hdc=0xcb0107bc, type=0x1) returned 0xb00017
[0226.281] GetCurrentObject (hdc=0xcb0107bc, type=0x2) returned 0x900010
[0226.281] GetCurrentObject (hdc=0xcb0107bc, type=0x7) returned 0x1e0507b9
[0226.281] GetCurrentObject (hdc=0xcb0107bc, type=0x6) returned 0x8a01c2
[0226.281] SaveDC (hdc=0xcb0107bc) returned 2
[0226.281] GetNearestColor (hdc=0xcb0107bc, color=0xff) returned 0xff
[0226.281] CreateSolidBrush (color=0xff) returned 0xbe10078d
[0226.281] FillRect (hDC=0xcb0107bc, lprc=0x53dad0, hbr=0xbe10078d) returned 1
[0226.281] DeleteObject (ho=0xbe10078d) returned 1
[0226.281] RestoreDC (hdc=0xcb0107bc, nSavedDC=-1) returned 1
[0226.281] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0226.281] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0226.281] GetSystemMetrics (nIndex=42) returned 0
[0226.281] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0226.281] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0226.281] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0226.281] GetCurrentObject (hdc=0xcb0107bc, type=0x1) returned 0xb00017
[0226.281] GetCurrentObject (hdc=0xcb0107bc, type=0x2) returned 0x900010
[0226.281] GetCurrentObject (hdc=0xcb0107bc, type=0x7) returned 0x1e0507b9
[0226.282] GetCurrentObject (hdc=0xcb0107bc, type=0x6) returned 0x8a01c2
[0226.282] SaveDC (hdc=0xcb0107bc) returned 2
[0226.282] GetNearestColor (hdc=0xcb0107bc, color=0xff) returned 0xff
[0226.282] CreateSolidBrush (color=0xff) returned 0xbf10078d
[0226.282] FillRect (hDC=0xcb0107bc, lprc=0x53da70, hbr=0xbf10078d) returned 1
[0226.282] DeleteObject (ho=0xbf10078d) returned 1
[0226.282] RestoreDC (hdc=0xcb0107bc, nSavedDC=-1) returned 1
[0226.282] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0226.282] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0226.282] GetSystemMetrics (nIndex=42) returned 0
[0226.282] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0226.282] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0226.282] RestoreDC (hdc=0xcb0107bc, nSavedDC=-1) returned 1
[0226.282] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb0107bc) returned 0x0
[0226.282] IsAppThemed () returned 0x1
[0226.282] GetThemeAppProperties () returned 0x3
[0226.282] GetThemeAppProperties () returned 0x3
[0226.282] IsAppThemed () returned 0x1
[0226.283] GetThemeAppProperties () returned 0x3
[0226.283] GetThemeAppProperties () returned 0x3
[0226.283] IsThemePartDefined () returned 0x1
[0226.283] GdipCreateRegion (region=0x53dff4) returned 0x0
[0226.283] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.283] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0226.283] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.283] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0226.283] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.283] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0226.283] LocalFree (hMem=0x89eac0) returned 0x0
[0226.283] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0226.283] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0226.283] LocalFree (hMem=0x89ec80) returned 0x0
[0226.283] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.283] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0226.283] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0226.283] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0226.283] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.283] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0226.283] GetCurrentObject (hdc=0xcb0107bc, type=0x1) returned 0xb00017
[0226.283] GetCurrentObject (hdc=0xcb0107bc, type=0x2) returned 0x900010
[0226.283] GetCurrentObject (hdc=0xcb0107bc, type=0x7) returned 0x1e0507b9
[0226.283] GetCurrentObject (hdc=0xcb0107bc, type=0x6) returned 0x8a01c2
[0226.284] SaveDC (hdc=0xcb0107bc) returned 1
[0226.284] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb704051e
[0226.284] GetClipRgn (hdc=0xcb0107bc, hrgn=0xb704051e) returned 0
[0226.284] SelectClipRgn (hdc=0xcb0107bc, hrgn=0x9804053e) returned 2
[0226.284] DeleteObject (ho=0xb704051e) returned 1
[0226.284] DeleteObject (ho=0x9804053e) returned 1
[0226.284] OffsetViewportOrgEx (in: hdc=0xcb0107bc, x=0, y=0, lppt=0x239ea0c | out: lppt=0x239ea0c) returned 1
[0226.284] IsAppThemed () returned 0x1
[0226.284] GetThemeAppProperties () returned 0x3
[0226.284] GetThemeAppProperties () returned 0x3
[0226.284] DrawThemeBackground () returned 0x0
[0226.284] RestoreDC (hdc=0xcb0107bc, nSavedDC=-1) returned 1
[0226.284] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb0107bc) returned 0x0
[0226.284] GdipCreateRegion (region=0x53dff8) returned 0x0
[0226.284] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.284] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0226.284] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.284] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0226.284] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0226.284] LocalFree (hMem=0x89eac0) returned 0x0
[0226.285] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0226.285] LocalFree (hMem=0x89ee08) returned 0x0
[0226.285] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.285] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0226.285] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0226.285] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0226.285] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.285] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0226.285] GetCurrentObject (hdc=0xcb0107bc, type=0x1) returned 0xb00017
[0226.285] GetCurrentObject (hdc=0xcb0107bc, type=0x2) returned 0x900010
[0226.285] GetCurrentObject (hdc=0xcb0107bc, type=0x7) returned 0x1e0507b9
[0226.285] GetCurrentObject (hdc=0xcb0107bc, type=0x6) returned 0x8a01c2
[0226.285] SaveDC (hdc=0xcb0107bc) returned 1
[0226.285] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9904053e
[0226.285] GetClipRgn (hdc=0xcb0107bc, hrgn=0x9904053e) returned 0
[0226.285] SelectClipRgn (hdc=0xcb0107bc, hrgn=0xb804051e) returned 2
[0226.285] DeleteObject (ho=0x9904053e) returned 1
[0226.285] DeleteObject (ho=0xb804051e) returned 1
[0226.285] OffsetViewportOrgEx (in: hdc=0xcb0107bc, x=0, y=0, lppt=0x239ece0 | out: lppt=0x239ece0) returned 1
[0226.285] IsAppThemed () returned 0x1
[0226.285] GetThemeAppProperties () returned 0x3
[0226.285] GetThemeAppProperties () returned 0x3
[0226.285] GetThemeBackgroundContentRect () returned 0x0
[0226.285] RestoreDC (hdc=0xcb0107bc, nSavedDC=-1) returned 1
[0226.286] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb0107bc) returned 0x0
[0226.286] IsAppThemed () returned 0x1
[0226.286] GetThemeAppProperties () returned 0x3
[0226.286] GetThemeAppProperties () returned 0x3
[0226.286] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0226.286] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0226.286] GetCurrentObject (hdc=0xcb0107bc, type=0x1) returned 0xb00017
[0226.286] GetCurrentObject (hdc=0xcb0107bc, type=0x2) returned 0x900010
[0226.286] GetCurrentObject (hdc=0xcb0107bc, type=0x7) returned 0x1e0507b9
[0226.286] GetCurrentObject (hdc=0xcb0107bc, type=0x6) returned 0x8a01c2
[0226.286] SaveDC (hdc=0xcb0107bc) returned 1
[0226.286] GetTextAlign (hdc=0xcb0107bc) returned 0x0
[0226.286] GetTextColor (hdc=0xcb0107bc) returned 0x0
[0226.286] GetCurrentObject (hdc=0xcb0107bc, type=0x6) returned 0x8a01c2
[0226.286] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0226.286] SelectObject (hdc=0xcb0107bc, h=0x450a0799) returned 0x8a01c2
[0226.286] GetBkMode (hdc=0xcb0107bc) returned 2
[0226.287] SetBkMode (hdc=0xcb0107bc, mode=1) returned 2
[0226.287] DrawTextExW (in: hdc=0xcb0107bc, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x239f080 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0226.287] DrawTextExW (in: hdc=0xcb0107bc, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x239f080 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0226.287] RestoreDC (hdc=0xcb0107bc, nSavedDC=-1) returned 1
[0226.287] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb0107bc) returned 0x0
[0226.287] GetFocus () returned 0xd02be
[0226.287] IsAppThemed () returned 0x1
[0226.288] GetThemeAppProperties () returned 0x3
[0226.288] GetThemeAppProperties () returned 0x3
[0226.288] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0226.288] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xcb0107bc, x1=0, y1=0, rop=0xcc0020) returned 1
[0226.288] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb0107bc) returned 0x0
[0226.288] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0226.288] SelectObject (hdc=0xcb0107bc, h=0x85000f) returned 0x1e0507b9
[0226.288] DeleteDC (hdc=0xcb0107bc) returned 1
[0226.288] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0226.288] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0226.288] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.288] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.289] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.289] DispatchMessageA (lpMsg=0x53e8a0) returned 0x7edc
[0226.289] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.289] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.289] WaitMessage () returned 1
[0226.290] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.290] IsWindowUnicode (hWnd=0x102dc) returned 1
[0226.290] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.290] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.291] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.292] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.292] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.292] WaitMessage () returned 1
[0226.308] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.308] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0226.308] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.308] WaitMessage () returned 1
[0226.309] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.309] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0226.310] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.310] WaitMessage () returned 1
[0226.310] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.310] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0226.310] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.310] WaitMessage () returned 1
[0226.333] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.333] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x84, wParam=0x0, lParam=0x18e035e) returned 0x1
[0226.337] IsWindowUnicode (hWnd=0x1802d6) returned 1
[0226.337] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.338] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.338] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.338] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x2a2, wParam=0x0, lParam=0x0) returned 0x0
[0226.338] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.338] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x84, wParam=0x0, lParam=0x18e035e) returned 0x1
[0226.338] IsWindowUnicode (hWnd=0x1802d6) returned 1
[0226.338] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.338] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x84, wParam=0x0, lParam=0x18e035e) returned 0x1
[0226.338] SetCursor (hCursor=0x10003) returned 0x10003
[0226.338] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.338] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.339] _TrackMouseEvent (in: lpEventTrack=0x239f230 | out: lpEventTrack=0x239f230) returned 1
[0226.339] SendMessageW (hWnd=0x1802d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0226.339] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0226.339] InvalidateRect (hWnd=0x1802d6, lpRect=0x0, bErase=0) returned 1
[0226.339] GetKeyState (nVirtKey=1) returned 1
[0226.339] GetKeyState (nVirtKey=2) returned 0
[0226.339] GetKeyState (nVirtKey=4) returned 0
[0226.339] GetKeyState (nVirtKey=5) returned 0
[0226.339] GetKeyState (nVirtKey=6) returned 0
[0226.339] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.339] IsWindowUnicode (hWnd=0x1802d6) returned 1
[0226.339] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.339] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.339] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.339] BeginPaint (in: hWnd=0x1802d6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0226.339] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0226.340] CreateCompatibleDC (hdc=0x10105d6) returned 0x8e0107bd
[0226.340] SelectObject (hdc=0x8e0107bd, h=0x1e0507b9) returned 0x85000f
[0226.340] GdipCreateFromHDC (hdc=0x8e0107bd, graphics=0x53e300) returned 0x0
[0226.340] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0226.340] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0226.340] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0226.340] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.340] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0226.340] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.340] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0226.340] LocalFree (hMem=0x89eac0) returned 0x0
[0226.340] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.341] GdipCreateRegion (region=0x53e348) returned 0x0
[0226.341] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.341] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0226.341] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0226.341] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc410dbd) returned 0x0
[0226.341] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.341] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0226.341] GetCurrentObject (hdc=0x8e0107bd, type=0x1) returned 0xb00017
[0226.341] GetCurrentObject (hdc=0x8e0107bd, type=0x2) returned 0x900010
[0226.341] GetCurrentObject (hdc=0x8e0107bd, type=0x7) returned 0x1e0507b9
[0226.341] GetCurrentObject (hdc=0x8e0107bd, type=0x6) returned 0x8a01c2
[0226.341] SaveDC (hdc=0x8e0107bd) returned 1
[0226.341] GetNearestColor (hdc=0x8e0107bd, color=0xf0f0f0) returned 0xf0f0f0
[0226.341] GetNearestColor (hdc=0x8e0107bd, color=0xa0a0a0) returned 0xa0a0a0
[0226.341] GetNearestColor (hdc=0x8e0107bd, color=0x696969) returned 0x696969
[0226.342] GetNearestColor (hdc=0x8e0107bd, color=0xa0a0a0) returned 0xa0a0a0
[0226.342] GetNearestColor (hdc=0x8e0107bd, color=0x0) returned 0x0
[0226.342] GetNearestColor (hdc=0x8e0107bd, color=0xffffff) returned 0xffffff
[0226.342] GetNearestColor (hdc=0x8e0107bd, color=0xe5e5e5) returned 0xe5e5e5
[0226.342] GetNearestColor (hdc=0x8e0107bd, color=0xd7d7d7) returned 0xd7d7d7
[0226.342] GetNearestColor (hdc=0x8e0107bd, color=0x0) returned 0x0
[0226.342] RestoreDC (hdc=0x8e0107bd, nSavedDC=-1) returned 1
[0226.342] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8e0107bd) returned 0x0
[0226.342] IsAppThemed () returned 0x1
[0226.342] GetThemeAppProperties () returned 0x3
[0226.342] GetThemeAppProperties () returned 0x3
[0226.342] IsAppThemed () returned 0x1
[0226.342] GetThemeAppProperties () returned 0x3
[0226.342] GetThemeAppProperties () returned 0x3
[0226.343] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0226.343] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x239f9ac | out: lpchText="OK", lprc=0x53e01c) returned 13
[0226.343] IsAppThemed () returned 0x1
[0226.343] GetThemeAppProperties () returned 0x3
[0226.343] GetThemeAppProperties () returned 0x3
[0226.343] IsAppThemed () returned 0x1
[0226.343] GetThemeAppProperties () returned 0x3
[0226.343] GetThemeAppProperties () returned 0x3
[0226.343] IsAppThemed () returned 0x1
[0226.343] GetThemeAppProperties () returned 0x3
[0226.343] GetThemeAppProperties () returned 0x3
[0226.343] IsAppThemed () returned 0x1
[0226.343] GetThemeAppProperties () returned 0x3
[0226.343] GetThemeAppProperties () returned 0x3
[0226.343] IsThemePartDefined () returned 0x1
[0226.343] IsAppThemed () returned 0x1
[0226.343] GetThemeAppProperties () returned 0x3
[0226.343] GetThemeAppProperties () returned 0x3
[0226.343] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0226.343] IsAppThemed () returned 0x1
[0226.344] GetThemeAppProperties () returned 0x3
[0226.344] GetThemeAppProperties () returned 0x3
[0226.344] IsAppThemed () returned 0x1
[0226.344] GetThemeAppProperties () returned 0x3
[0226.344] GetThemeAppProperties () returned 0x3
[0226.344] IsThemePartDefined () returned 0x1
[0226.344] GdipCreateRegion (region=0x53e064) returned 0x0
[0226.344] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.344] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0226.344] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.344] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0226.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.344] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0226.344] LocalFree (hMem=0x89eac0) returned 0x0
[0226.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0226.344] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0226.344] LocalFree (hMem=0x89ec80) returned 0x0
[0226.344] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.344] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0226.344] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0226.344] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0226.344] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.345] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0226.345] GetCurrentObject (hdc=0x8e0107bd, type=0x1) returned 0xb00017
[0226.345] GetCurrentObject (hdc=0x8e0107bd, type=0x2) returned 0x900010
[0226.345] GetCurrentObject (hdc=0x8e0107bd, type=0x7) returned 0x1e0507b9
[0226.345] GetCurrentObject (hdc=0x8e0107bd, type=0x6) returned 0x8a01c2
[0226.345] SaveDC (hdc=0x8e0107bd) returned 1
[0226.345] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb904051e
[0226.345] GetClipRgn (hdc=0x8e0107bd, hrgn=0xb904051e) returned 0
[0226.345] SelectClipRgn (hdc=0x8e0107bd, hrgn=0x9d04053e) returned 2
[0226.345] DeleteObject (ho=0xb904051e) returned 1
[0226.345] DeleteObject (ho=0x9d04053e) returned 1
[0226.345] OffsetViewportOrgEx (in: hdc=0x8e0107bd, x=0, y=0, lppt=0x23a005c | out: lppt=0x23a005c) returned 1
[0226.345] DrawThemeParentBackground () returned 0x0
[0226.345] GetWindowPlacement (in: hWnd=0x1d013e, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0226.346] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0226.346] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.346] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.346] GetSystemMetrics (nIndex=42) returned 0
[0226.346] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.346] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0226.346] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0226.346] GetCurrentObject (hdc=0x8e0107bd, type=0x1) returned 0xb00017
[0226.346] GetCurrentObject (hdc=0x8e0107bd, type=0x2) returned 0x900010
[0226.346] GetCurrentObject (hdc=0x8e0107bd, type=0x7) returned 0x1e0507b9
[0226.346] GetCurrentObject (hdc=0x8e0107bd, type=0x6) returned 0x8a01c2
[0226.346] SaveDC (hdc=0x8e0107bd) returned 2
[0226.346] GetNearestColor (hdc=0x8e0107bd, color=0xf0f0f0) returned 0xf0f0f0
[0226.346] CreateSolidBrush (color=0xf0f0f0) returned 0xc010078d
[0226.346] FillRect (hDC=0x8e0107bd, lprc=0x53dac8, hbr=0xc010078d) returned 1
[0226.346] DeleteObject (ho=0xc010078d) returned 1
[0226.347] RestoreDC (hdc=0x8e0107bd, nSavedDC=-1) returned 1
[0226.347] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.347] GetSystemMetrics (nIndex=42) returned 0
[0226.347] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0226.347] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0226.347] GetCurrentObject (hdc=0x8e0107bd, type=0x1) returned 0xb00017
[0226.347] GetCurrentObject (hdc=0x8e0107bd, type=0x2) returned 0x900010
[0226.347] GetCurrentObject (hdc=0x8e0107bd, type=0x7) returned 0x1e0507b9
[0226.347] GetCurrentObject (hdc=0x8e0107bd, type=0x6) returned 0x8a01c2
[0226.347] SaveDC (hdc=0x8e0107bd) returned 2
[0226.347] GetNearestColor (hdc=0x8e0107bd, color=0xf0f0f0) returned 0xf0f0f0
[0226.347] CreateSolidBrush (color=0xf0f0f0) returned 0xc110078d
[0226.347] FillRect (hDC=0x8e0107bd, lprc=0x53da68, hbr=0xc110078d) returned 1
[0226.347] DeleteObject (ho=0xc110078d) returned 1
[0226.347] RestoreDC (hdc=0x8e0107bd, nSavedDC=-1) returned 1
[0226.347] GetWindowTextLengthW (hWnd=0x1d013e) returned 10
[0226.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.347] GetSystemMetrics (nIndex=42) returned 0
[0226.348] GetWindowTextW (in: hWnd=0x1d013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0226.348] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0226.348] RestoreDC (hdc=0x8e0107bd, nSavedDC=-1) returned 1
[0226.348] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8e0107bd) returned 0x0
[0226.348] IsAppThemed () returned 0x1
[0226.348] GetThemeAppProperties () returned 0x3
[0226.348] GetThemeAppProperties () returned 0x3
[0226.348] IsAppThemed () returned 0x1
[0226.348] GetThemeAppProperties () returned 0x3
[0226.348] GetThemeAppProperties () returned 0x3
[0226.348] IsThemePartDefined () returned 0x1
[0226.348] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0226.348] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.348] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0226.348] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.348] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0226.348] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0226.348] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0226.348] LocalFree (hMem=0x89ec80) returned 0x0
[0226.348] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0226.348] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0226.349] LocalFree (hMem=0x89eee8) returned 0x0
[0226.349] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.349] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0226.349] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0226.349] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0226.349] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.349] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0226.349] GetCurrentObject (hdc=0x8e0107bd, type=0x1) returned 0xb00017
[0226.349] GetCurrentObject (hdc=0x8e0107bd, type=0x2) returned 0x900010
[0226.349] GetCurrentObject (hdc=0x8e0107bd, type=0x7) returned 0x1e0507b9
[0226.349] GetCurrentObject (hdc=0x8e0107bd, type=0x6) returned 0x8a01c2
[0226.349] SaveDC (hdc=0x8e0107bd) returned 1
[0226.349] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9e04053e
[0226.349] GetClipRgn (hdc=0x8e0107bd, hrgn=0x9e04053e) returned 0
[0226.352] SelectClipRgn (hdc=0x8e0107bd, hrgn=0xbb04051e) returned 2
[0226.352] DeleteObject (ho=0x9e04053e) returned 1
[0226.352] DeleteObject (ho=0xbb04051e) returned 1
[0226.352] OffsetViewportOrgEx (in: hdc=0x8e0107bd, x=0, y=0, lppt=0x23a08e4 | out: lppt=0x23a08e4) returned 1
[0226.352] IsAppThemed () returned 0x1
[0226.353] GetThemeAppProperties () returned 0x3
[0226.353] GetThemeAppProperties () returned 0x3
[0226.353] DrawThemeBackground () returned 0x0
[0226.353] RestoreDC (hdc=0x8e0107bd, nSavedDC=-1) returned 1
[0226.353] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8e0107bd) returned 0x0
[0226.353] GdipCreateRegion (region=0x53dfec) returned 0x0
[0226.353] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.353] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0226.353] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.353] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0226.353] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0226.353] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0226.353] LocalFree (hMem=0x89eee8) returned 0x0
[0226.353] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.353] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0226.353] LocalFree (hMem=0x89eac0) returned 0x0
[0226.353] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.353] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0226.353] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0226.353] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0226.354] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.354] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0226.354] GetCurrentObject (hdc=0x8e0107bd, type=0x1) returned 0xb00017
[0226.354] GetCurrentObject (hdc=0x8e0107bd, type=0x2) returned 0x900010
[0226.354] GetCurrentObject (hdc=0x8e0107bd, type=0x7) returned 0x1e0507b9
[0226.354] GetCurrentObject (hdc=0x8e0107bd, type=0x6) returned 0x8a01c2
[0226.354] SaveDC (hdc=0x8e0107bd) returned 1
[0226.354] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbc04051e
[0226.354] GetClipRgn (hdc=0x8e0107bd, hrgn=0xbc04051e) returned 0
[0226.354] SelectClipRgn (hdc=0x8e0107bd, hrgn=0x9f04053e) returned 2
[0226.354] DeleteObject (ho=0xbc04051e) returned 1
[0226.354] DeleteObject (ho=0x9f04053e) returned 1
[0226.354] OffsetViewportOrgEx (in: hdc=0x8e0107bd, x=0, y=0, lppt=0x23a0bb8 | out: lppt=0x23a0bb8) returned 1
[0226.354] IsAppThemed () returned 0x1
[0226.354] GetThemeAppProperties () returned 0x3
[0226.354] GetThemeAppProperties () returned 0x3
[0226.354] GetThemeBackgroundContentRect () returned 0x0
[0226.354] RestoreDC (hdc=0x8e0107bd, nSavedDC=-1) returned 1
[0226.354] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8e0107bd) returned 0x0
[0226.354] IsAppThemed () returned 0x1
[0226.355] GetThemeAppProperties () returned 0x3
[0226.355] GetThemeAppProperties () returned 0x3
[0226.355] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0226.355] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0226.355] GetCurrentObject (hdc=0x8e0107bd, type=0x1) returned 0xb00017
[0226.355] GetCurrentObject (hdc=0x8e0107bd, type=0x2) returned 0x900010
[0226.355] GetCurrentObject (hdc=0x8e0107bd, type=0x7) returned 0x1e0507b9
[0226.355] GetCurrentObject (hdc=0x8e0107bd, type=0x6) returned 0x8a01c2
[0226.355] SaveDC (hdc=0x8e0107bd) returned 1
[0226.356] GetTextAlign (hdc=0x8e0107bd) returned 0x0
[0226.356] GetTextColor (hdc=0x8e0107bd) returned 0x0
[0226.356] GetCurrentObject (hdc=0x8e0107bd, type=0x6) returned 0x8a01c2
[0226.356] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0226.356] SelectObject (hdc=0x8e0107bd, h=0x730a066d) returned 0x8a01c2
[0226.356] GetBkMode (hdc=0x8e0107bd) returned 2
[0226.356] SetBkMode (hdc=0x8e0107bd, mode=1) returned 2
[0226.356] DrawTextExW (in: hdc=0x8e0107bd, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x23a0f58 | out: lpchText="OK", lprc=0x53df84) returned 13
[0226.356] DrawTextExW (in: hdc=0x8e0107bd, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x23a0f58 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0226.356] RestoreDC (hdc=0x8e0107bd, nSavedDC=-1) returned 1
[0226.356] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8e0107bd) returned 0x0
[0226.357] GetFocus () returned 0xd02be
[0226.357] IsAppThemed () returned 0x1
[0226.357] GetThemeAppProperties () returned 0x3
[0226.357] GetThemeAppProperties () returned 0x3
[0226.357] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0226.357] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x8e0107bd, x1=0, y1=0, rop=0xcc0020) returned 1
[0226.357] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8e0107bd) returned 0x0
[0226.357] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0226.357] SelectObject (hdc=0x8e0107bd, h=0x85000f) returned 0x1e0507b9
[0226.357] DeleteDC (hdc=0x8e0107bd) returned 1
[0226.357] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0226.357] EndPaint (hWnd=0x1802d6, lpPaint=0x53e2e4) returned 1
[0226.357] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.357] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.357] WaitMessage () returned 1
[0226.366] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.366] IsWindowUnicode (hWnd=0x102dc) returned 1
[0226.366] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.367] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.367] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.367] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.367] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.367] WaitMessage () returned 1
[0226.368] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.368] IsWindowUnicode (hWnd=0x102dc) returned 1
[0226.368] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.368] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.368] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.369] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.369] IsWindowUnicode (hWnd=0x102dc) returned 1
[0226.369] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.369] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.369] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.370] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.370] IsWindowUnicode (hWnd=0x102dc) returned 1
[0226.370] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.370] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.370] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.370] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.370] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.370] WaitMessage () returned 1
[0226.371] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.371] IsWindowUnicode (hWnd=0x102dc) returned 1
[0226.371] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.371] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.371] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.372] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.372] IsWindowUnicode (hWnd=0x102dc) returned 1
[0226.372] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.372] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.372] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.372] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.372] IsWindowUnicode (hWnd=0x102dc) returned 1
[0226.372] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.372] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.372] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.372] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.373] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.373] WaitMessage () returned 1
[0226.373] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.373] IsWindowUnicode (hWnd=0x102dc) returned 1
[0226.373] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.373] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.373] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.375] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.375] IsWindowUnicode (hWnd=0x102dc) returned 1
[0226.375] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.375] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.375] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.375] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.375] IsWindowUnicode (hWnd=0x102dc) returned 1
[0226.375] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.376] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.376] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.376] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.376] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.376] WaitMessage () returned 1
[0226.447] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.447] IsWindowUnicode (hWnd=0x1802d6) returned 1
[0226.447] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.447] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.447] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.447] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.447] IsWindowUnicode (hWnd=0x1802d6) returned 1
[0226.447] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.447] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.447] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.447] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x2a1, wParam=0x0, lParam=0x5001d) returned 0x0
[0226.447] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.447] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.447] WaitMessage () returned 1
[0226.539] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.539] IsWindowUnicode (hWnd=0x202d0) returned 1
[0226.539] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.539] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.539] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.539] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.539] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0226.539] WaitMessage () returned 1
[0226.593] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.593] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x84, wParam=0x0, lParam=0x18e035e) returned 0x1
[0226.593] IsWindowUnicode (hWnd=0x1802d6) returned 1
[0226.593] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.593] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x84, wParam=0x0, lParam=0x18e035e) returned 0x1
[0226.593] GetDlgItem (hDlg=0x1d013e, nIDDlgItem=0) returned 0x0
[0226.593] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x210, wParam=0x201, lParam=0x11013f) returned 0x0
[0226.593] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x21, wParam=0x1d013e, lParam=0x2010001) returned 0x1
[0226.593] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x21, wParam=0x1d013e, lParam=0x2010001) returned 0x1
[0226.593] SetCursor (hCursor=0x10003) returned 0x10003
[0226.594] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.594] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0226.594] GetKeyState (nVirtKey=1) returned -128
[0226.594] GetKeyState (nVirtKey=2) returned 0
[0226.594] GetKeyState (nVirtKey=4) returned 0
[0226.594] GetKeyState (nVirtKey=5) returned 0
[0226.594] GetKeyState (nVirtKey=6) returned 0
[0226.594] IsWindowVisible (hWnd=0x1802d6) returned 1
[0226.594] IsWindowEnabled (hWnd=0x1802d6) returned 1
[0226.594] SetFocus (hWnd=0x1802d6) returned 0xd02be
[0226.594] GetFocus () returned 0x1802d6
[0226.594] IsChild (hWndParent=0x1d013e, hWnd=0x1802d6) returned 1
[0226.594] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x8, wParam=0x1802d6, lParam=0x0) returned 0x1
[0226.595] SendMessageW (hWnd=0xd02be, Msg=0x2111, wParam=0x20002be, lParam=0xd02be) returned 0x0
[0226.595] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0226.596] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0226.597] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0226.597] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0226.597] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0226.597] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0226.599] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0226.599] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x7, wParam=0xd02be, lParam=0x0) returned 0x0
[0226.599] GetStockObject (i=5) returned 0x900015
[0226.600] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0226.600] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0xd, wParam=0x3, lParam=0x89e628) returned 0x2
[0226.600] GetDlgItem (hDlg=0x1d013e, nIDDlgItem=1573590) returned 0x1802d6
[0226.600] SendMessageW (hWnd=0x1802d6, Msg=0x202b, wParam=0x1802d6, lParam=0x53de74) returned 0x0
[0226.600] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x202b, wParam=0x1802d6, lParam=0x53de74) returned 0x0
[0226.600] InvalidateRect (hWnd=0x1802d6, lpRect=0x0, bErase=0) returned 1
[0226.601] GetFocus () returned 0x1802d6
[0226.601] GetFocus () returned 0x1802d6
[0226.601] GetFocus () returned 0x1802d6
[0226.601] GetKeyState (nVirtKey=1) returned -128
[0226.601] GetKeyState (nVirtKey=2) returned 0
[0226.601] GetKeyState (nVirtKey=4) returned 0
[0226.601] GetKeyState (nVirtKey=5) returned 0
[0226.601] GetKeyState (nVirtKey=6) returned 0
[0226.601] GetCapture () returned 0x0
[0226.601] SetCapture (hWnd=0x1802d6) returned 0x0
[0226.601] GetKeyState (nVirtKey=1) returned -128
[0226.601] GetKeyState (nVirtKey=2) returned 0
[0226.601] GetKeyState (nVirtKey=4) returned 0
[0226.601] GetKeyState (nVirtKey=5) returned 0
[0226.601] GetKeyState (nVirtKey=6) returned 0
[0226.601] NotifyWinEvent (event=0x800a, hwnd=0x1802d6, idObject=-4, idChild=0)
[0226.602] InvalidateRect (hWnd=0x1802d6, lpRect=0x53e4c8, bErase=0) returned 1
[0226.602] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.602] IsWindowUnicode (hWnd=0x1802d6) returned 1
[0226.602] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0226.602] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0226.602] DispatchMessageW (lpMsg=0x53e8a0)
[0226.602] MapWindowPoints (in: hWndFrom=0x1802d6, hWndTo=0x0, lpPoints=0x23a11f0, cPoints=0x1 | out: lpPoints=0x23a11f0) returned 25756481
[0226.602] NotifyWinEvent (event=0x800a, hwnd=0x1802d6, idObject=-4, idChild=0)
[0226.602] InvalidateRect (hWnd=0x1802d6, lpRect=0x53e468, bErase=0) returned 1
[0226.602] UpdateWindow (hWnd=0x1802d6)
[0226.602] BeginPaint (in: hWnd=0x1802d6, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0226.602] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0226.602] CreateCompatibleDC (hdc=0x10105d6) returned 0xa9010790
[0226.602] SelectObject (hdc=0xa9010790, h=0x1e0507b9) returned 0x85000f
[0226.602] GdipCreateFromHDC (hdc=0xa9010790, graphics=0x53df98) returned 0x0
[0226.603] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0226.603] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0226.603] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0226.603] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.603] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0226.603] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0226.603] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0226.603] LocalFree (hMem=0x89ec80) returned 0x0
[0226.603] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.603] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0226.603] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.603] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0226.603] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0226.603] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc3f0dbd) returned 0x0
[0226.603] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.603] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0226.603] GetCurrentObject (hdc=0xa9010790, type=0x1) returned 0xb00017
[0226.603] GetCurrentObject (hdc=0xa9010790, type=0x2) returned 0x900010
[0226.603] GetCurrentObject (hdc=0xa9010790, type=0x7) returned 0x1e0507b9
[0226.603] GetCurrentObject (hdc=0xa9010790, type=0x6) returned 0x8a01c2
[0226.604] SaveDC (hdc=0xa9010790) returned 1
[0226.604] GetNearestColor (hdc=0xa9010790, color=0xf0f0f0) returned 0xf0f0f0
[0226.604] GetNearestColor (hdc=0xa9010790, color=0xa0a0a0) returned 0xa0a0a0
[0226.604] GetNearestColor (hdc=0xa9010790, color=0x696969) returned 0x696969
[0226.604] GetNearestColor (hdc=0xa9010790, color=0xa0a0a0) returned 0xa0a0a0
[0226.604] GetNearestColor (hdc=0xa9010790, color=0x0) returned 0x0
[0226.604] GetNearestColor (hdc=0xa9010790, color=0xffffff) returned 0xffffff
[0226.604] GetNearestColor (hdc=0xa9010790, color=0xe5e5e5) returned 0xe5e5e5
[0226.604] GetNearestColor (hdc=0xa9010790, color=0xd7d7d7) returned 0xd7d7d7
[0226.604] GetNearestColor (hdc=0xa9010790, color=0x0) returned 0x0
[0226.604] RestoreDC (hdc=0xa9010790, nSavedDC=-1) returned 1
[0226.604] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa9010790) returned 0x0
[0226.604] IsAppThemed () returned 0x1
[0226.604] GetThemeAppProperties () returned 0x3
[0226.604] GetThemeAppProperties () returned 0x3
[0226.604] IsAppThemed () returned 0x1
[0226.604] GetThemeAppProperties () returned 0x3
[0226.605] GetThemeAppProperties () returned 0x3
[0226.605] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x23a1964 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0226.605] IsAppThemed () returned 0x1
[0226.605] GetThemeAppProperties () returned 0x3
[0226.605] GetThemeAppProperties () returned 0x3
[0226.605] IsAppThemed () returned 0x1
[0226.605] GetThemeAppProperties () returned 0x3
[0226.605] GetThemeAppProperties () returned 0x3
[0226.605] IsAppThemed () returned 0x1
[0226.605] GetThemeAppProperties () returned 0x3
[0226.605] GetThemeAppProperties () returned 0x3
[0226.605] IsAppThemed () returned 0x1
[0226.605] GetThemeAppProperties () returned 0x3
[0226.605] GetThemeAppProperties () returned 0x3
[0226.605] IsThemePartDefined () returned 0x1
[0226.605] IsAppThemed () returned 0x1
[0226.605] GetThemeAppProperties () returned 0x3
[0226.605] GetThemeAppProperties () returned 0x3
[0226.605] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0226.605] IsAppThemed () returned 0x1
[0226.605] GetThemeAppProperties () returned 0x3
[0226.606] GetThemeAppProperties () returned 0x3
[0226.606] IsAppThemed () returned 0x1
[0226.606] GetThemeAppProperties () returned 0x3
[0226.606] GetThemeAppProperties () returned 0x3
[0226.606] IsThemePartDefined () returned 0x1
[0226.606] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0226.606] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.606] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0226.606] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.606] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0226.606] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0226.606] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0226.606] LocalFree (hMem=0x89ee08) returned 0x0
[0226.606] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0226.606] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0226.606] LocalFree (hMem=0x89ee08) returned 0x0
[0226.606] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.606] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0226.606] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0226.606] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0226.606] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.606] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0226.606] GetCurrentObject (hdc=0xa9010790, type=0x1) returned 0xb00017
[0226.606] GetCurrentObject (hdc=0xa9010790, type=0x2) returned 0x900010
[0226.606] GetCurrentObject (hdc=0xa9010790, type=0x7) returned 0x1e0507b9
[0226.607] GetCurrentObject (hdc=0xa9010790, type=0x6) returned 0x8a01c2
[0226.607] SaveDC (hdc=0xa9010790) returned 1
[0226.607] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa004053e
[0226.607] GetClipRgn (hdc=0xa9010790, hrgn=0xa004053e) returned 0
[0226.607] SelectClipRgn (hdc=0xa9010790, hrgn=0xc004051e) returned 2
[0226.607] DeleteObject (ho=0xa004053e) returned 1
[0226.607] DeleteObject (ho=0xc004051e) returned 1
[0226.607] OffsetViewportOrgEx (in: hdc=0xa9010790, x=0, y=0, lppt=0x23a2014 | out: lppt=0x23a2014) returned 1
[0226.607] DrawThemeParentBackground ()
[0226.607] GetWindowPlacement (in: hWnd=0x1d013e, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0226.607] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0226.607] GetWindowTextLengthW (hWnd=0x1d013e)
[0226.607] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.607] GetSystemMetrics (nIndex=42) returned 0
[0226.607] GetWindowTextW (hWnd=0x1d013e, lpString=0x53d878, nMaxCount=11)
[0226.607] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0226.607] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0226.608] GetCurrentObject (hdc=0xa9010790, type=0x1) returned 0xb00017
[0226.608] GetCurrentObject (hdc=0xa9010790, type=0x2) returned 0x900010
[0226.608] GetCurrentObject (hdc=0xa9010790, type=0x7) returned 0x1e0507b9
[0226.608] GetCurrentObject (hdc=0xa9010790, type=0x6) returned 0x8a01c2
[0226.608] SaveDC (hdc=0xa9010790) returned 2
[0226.608] GetNearestColor (hdc=0xa9010790, color=0xf0f0f0) returned 0xf0f0f0
[0226.608] CreateSolidBrush (color=0xf0f0f0) returned 0xc210078d
[0226.608] FillRect (hDC=0xa9010790, lprc=0x53d760, hbr=0xc210078d) returned 1
[0226.608] DeleteObject (ho=0xc210078d) returned 1
[0226.608] RestoreDC (hdc=0xa9010790, nSavedDC=-1) returned 1
[0226.608] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.608] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0226.608] GetClientRect (in: hWnd=0x1d013e, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0226.608] GetCurrentObject (hdc=0xa9010790, type=0x1) returned 0xb00017
[0226.608] GetCurrentObject (hdc=0xa9010790, type=0x2) returned 0x900010
[0226.608] GetCurrentObject (hdc=0xa9010790, type=0x7) returned 0x1e0507b9
[0226.609] GetCurrentObject (hdc=0xa9010790, type=0x6) returned 0x8a01c2
[0226.609] SaveDC (hdc=0xa9010790) returned 2
[0226.609] GetNearestColor (hdc=0xa9010790, color=0xf0f0f0) returned 0xf0f0f0
[0226.609] CreateSolidBrush (color=0xf0f0f0) returned 0xc310078d
[0226.609] FillRect (hDC=0xa9010790, lprc=0x53d700, hbr=0xc310078d) returned 1
[0226.609] DeleteObject (ho=0xc310078d) returned 1
[0226.609] RestoreDC (hdc=0xa9010790, nSavedDC=-1) returned 1
[0226.609] GetWindowTextLengthW (hWnd=0x1d013e)
[0226.609] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0226.609] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0226.610] RestoreDC (hdc=0xa9010790, nSavedDC=-1) returned 1
[0226.610] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa9010790) returned 0x0
[0226.610] IsAppThemed () returned 0x1
[0226.610] GetThemeAppProperties () returned 0x3
[0226.610] GetThemeAppProperties () returned 0x3
[0226.610] IsAppThemed () returned 0x1
[0226.610] GetThemeAppProperties () returned 0x3
[0226.610] GetThemeAppProperties () returned 0x3
[0226.610] IsThemePartDefined () returned 0x1
[0226.610] GdipCreateRegion (region=0x53dc80) returned 0x0
[0226.610] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.610] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0226.610] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.610] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0226.610] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0226.610] LocalFree (hMem=0x89ea88) returned 0x0
[0226.610] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0226.610] LocalFree (hMem=0x89ea88) returned 0x0
[0226.610] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.610] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0226.610] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0226.611] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0226.611] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.611] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0226.611] IsAppThemed () returned 0x1
[0226.611] GetThemeAppProperties () returned 0x3
[0226.611] GetThemeAppProperties () returned 0x3
[0226.611] DrawThemeBackground () returned 0x0
[0226.611] RestoreDC (hdc=0xa9010790, nSavedDC=-1) returned 1
[0226.611] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa9010790) returned 0x0
[0226.611] GdipCreateRegion (region=0x53dc84) returned 0x0
[0226.611] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.611] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0226.611] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.611] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0226.611] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0226.611] LocalFree (hMem=0x89ea88) returned 0x0
[0226.611] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0226.612] LocalFree (hMem=0x89ec80) returned 0x0
[0226.612] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.612] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0226.612] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0226.612] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0226.612] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.612] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0226.612] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa304053e
[0226.612] IsAppThemed () returned 0x1
[0226.612] GetThemeAppProperties () returned 0x3
[0226.612] GetThemeAppProperties () returned 0x3
[0226.612] GetThemeBackgroundContentRect () returned 0x0
[0226.612] RestoreDC (hdc=0xa9010790, nSavedDC=-1) returned 1
[0226.612] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa9010790) returned 0x0
[0226.612] IsAppThemed () returned 0x1
[0226.612] GetThemeAppProperties () returned 0x3
[0226.612] GetThemeAppProperties () returned 0x3
[0226.612] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0226.612] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0226.612] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0226.612] SelectObject (hdc=0xa9010790, h=0x730a066d) returned 0x8a01c2
[0226.613] DrawTextExW (in: hdc=0xa9010790, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x23a2f10 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0226.613] DrawTextExW (in: hdc=0xa9010790, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x23a2f10 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0226.613] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa9010790) returned 0x0
[0226.613] GetFocus () returned 0x1802d6
[0226.613] IsAppThemed () returned 0x1
[0226.613] GetThemeAppProperties () returned 0x3
[0226.613] GetThemeAppProperties () returned 0x3
[0226.613] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0226.614] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa9010790) returned 0x0
[0226.614] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0226.614] EndPaint (hWnd=0x1802d6, lpPaint=0x53df7c) returned 1
[0226.615] WindowFromPoint (Point=0x35e)
[0226.615] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x84, wParam=0x0, lParam=0x18e035e) returned 0x1
[0226.617] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0226.617] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0226.617] SendMessageW (hWnd=0x1d013e, Msg=0x10, wParam=0x0, lParam=0x0)
[0226.617] GetCapture () returned 0x1802d6
[0226.617] ReleaseCapture ()
[0226.618] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0226.619] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x84, wParam=0x0, lParam=0x18e035e) returned 0x1
[0226.619] EnableWindow (hWnd=0x70036, bEnable=1)
[0226.620] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0226.620] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x86, wParam=0x0, lParam=0x70036)
[0226.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0226.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0226.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0226.628] IsChild (hWndParent=0x1d013e, hWnd=0x202c6) returned 0
[0226.628] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1802d6, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0226.628] GetCapture () returned 0x0
[0226.629] InvalidateRect (hWnd=0x1802d6, lpRect=0x0, bErase=0) returned 1
[0226.632] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0226.632] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0226.632] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0226.638] IsChild (hWndParent=0x1d013e, hWnd=0x202c6) returned 0
[0226.638] ShowWindow (hWnd=0x1d013e, nCmdShow=0)
[0226.638] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0226.643] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0226.644] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02be, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0226.644] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a02c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0226.645] GetWindowTextLengthW (hWnd=0x1902d2)
[0226.645] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0226.645] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1902d2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0226.656] GetProcessWindowStation () returned 0x13c
[0226.656] GetActiveWindow () returned 0x70036
[0226.657] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0226.657] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0226.657] GetCurrentThreadId () returned 0x11d0
[0226.657] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4cb6, lParam=0x0) returned 1
[0226.657] IsWindowVisible (hWnd=0x70036) returned 1
[0226.657] IsWindowEnabled (hWnd=0x70036) returned 1
[0226.657] IsWindowVisible (hWnd=0x602b6) returned 0
[0226.657] IsWindowVisible (hWnd=0x901f8) returned 0
[0226.657] IsWindowVisible (hWnd=0x202d0) returned 0
[0226.657] IsWindowVisible (hWnd=0x202d4) returned 0
[0226.657] GetActiveWindow () returned 0x70036
[0226.657] GetFocus () returned 0x202c6
[0226.657] IsWindow (hWnd=0x70036) returned 1
[0226.658] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0226.658] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0226.658] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0226.658] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0226.659] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0226.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1e013e) returned 0x1
[0226.669] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0226.670] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0226.672] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xe02c0, lParam=0x0) returned 0x0
[0226.672] GetCapture () returned 0x0
[0226.672] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0226.673] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0226.675] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0226.675] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0226.686] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0xf0105ee
[0226.687] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0226.687] CreateCompatibleDC (hdc=0xf0105ee) returned 0x42010792
[0226.687] SelectObject (hdc=0x42010792, h=0x1e0507b9) returned 0x85000f
[0226.687] GdipCreateFromHDC (hdc=0x42010792, graphics=0x53e108) returned 0x0
[0226.687] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0226.687] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0226.687] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0226.687] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.687] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0226.687] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0226.687] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0226.687] LocalFree (hMem=0x89eac0) returned 0x0
[0226.687] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.687] GdipCreateRegion (region=0x53e150) returned 0x0
[0226.687] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.687] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0226.687] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0226.688] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc3d0dbd) returned 0x0
[0226.688] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.688] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0226.688] GetCurrentObject (hdc=0x42010792, type=0x1) returned 0xb00017
[0226.688] GetCurrentObject (hdc=0x42010792, type=0x2) returned 0x900010
[0226.688] GetCurrentObject (hdc=0x42010792, type=0x7) returned 0x1e0507b9
[0226.688] GetCurrentObject (hdc=0x42010792, type=0x6) returned 0x8a01c2
[0226.688] SaveDC (hdc=0x42010792) returned 1
[0226.688] GetNearestColor (hdc=0x42010792, color=0xff) returned 0xff
[0226.688] GetNearestColor (hdc=0x42010792, color=0x55) returned 0x55
[0226.688] GetNearestColor (hdc=0x42010792, color=0x0) returned 0x0
[0226.688] GetNearestColor (hdc=0x42010792, color=0x55) returned 0x55
[0226.688] GetNearestColor (hdc=0x42010792, color=0x0) returned 0x0
[0226.688] GetNearestColor (hdc=0x42010792, color=0x8080ff) returned 0x8080ff
[0226.688] GetNearestColor (hdc=0x42010792, color=0x7373e5) returned 0x7373e5
[0226.688] GetNearestColor (hdc=0x42010792, color=0xe5) returned 0xe5
[0226.688] GetNearestColor (hdc=0x42010792, color=0x0) returned 0x0
[0226.688] RestoreDC (hdc=0x42010792, nSavedDC=-1) returned 1
[0226.689] GdipReleaseDC (graphics=0x5d92c30, hdc=0x42010792) returned 0x0
[0226.689] IsAppThemed () returned 0x1
[0226.689] GetThemeAppProperties () returned 0x3
[0226.689] GetThemeAppProperties () returned 0x3
[0226.689] IsAppThemed () returned 0x1
[0226.689] GetThemeAppProperties () returned 0x3
[0226.689] GetThemeAppProperties () returned 0x3
[0226.689] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0226.689] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x23a4304 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0226.689] IsAppThemed () returned 0x1
[0226.689] GetThemeAppProperties () returned 0x3
[0226.689] GetThemeAppProperties () returned 0x3
[0226.689] IsAppThemed () returned 0x1
[0226.689] GetThemeAppProperties () returned 0x3
[0226.689] GetThemeAppProperties () returned 0x3
[0226.689] GetFocus () returned 0xe02c0
[0226.689] IsAppThemed () returned 0x1
[0226.689] GetThemeAppProperties () returned 0x3
[0226.690] GetThemeAppProperties () returned 0x3
[0226.690] IsAppThemed () returned 0x1
[0226.690] GetThemeAppProperties () returned 0x3
[0226.690] GetThemeAppProperties () returned 0x3
[0226.690] IsThemePartDefined () returned 0x1
[0226.690] IsAppThemed () returned 0x1
[0226.690] GetThemeAppProperties () returned 0x3
[0226.690] GetThemeAppProperties () returned 0x3
[0226.690] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0226.690] IsAppThemed () returned 0x1
[0226.690] GetThemeAppProperties () returned 0x3
[0226.690] GetThemeAppProperties () returned 0x3
[0226.690] IsAppThemed () returned 0x1
[0226.690] GetThemeAppProperties () returned 0x3
[0226.690] GetThemeAppProperties () returned 0x3
[0226.690] IsThemePartDefined () returned 0x1
[0226.690] GdipCreateRegion (region=0x53de78) returned 0x0
[0226.690] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.690] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0226.690] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.690] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0226.690] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0226.690] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0226.690] LocalFree (hMem=0x89ea88) returned 0x0
[0226.690] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0226.690] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0226.690] LocalFree (hMem=0x89ea88) returned 0x0
[0226.691] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.691] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0226.691] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0226.691] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0226.691] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.691] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0226.691] GetCurrentObject (hdc=0x42010792, type=0x1) returned 0xb00017
[0226.691] GetCurrentObject (hdc=0x42010792, type=0x2) returned 0x900010
[0226.691] GetCurrentObject (hdc=0x42010792, type=0x7) returned 0x1e0507b9
[0226.691] GetCurrentObject (hdc=0x42010792, type=0x6) returned 0x8a01c2
[0226.691] SaveDC (hdc=0x42010792) returned 1
[0226.691] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc304051e
[0226.691] GetClipRgn (hdc=0x42010792, hrgn=0xc304051e) returned 0
[0226.691] SelectClipRgn (hdc=0x42010792, hrgn=0xa904053e) returned 2
[0226.691] DeleteObject (ho=0xc304051e) returned 1
[0226.691] DeleteObject (ho=0xa904053e) returned 1
[0226.691] OffsetViewportOrgEx (in: hdc=0x42010792, x=0, y=0, lppt=0x23a49b4 | out: lppt=0x23a49b4) returned 1
[0226.691] DrawThemeParentBackground () returned 0x0
[0226.691] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0226.692] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0226.692] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0226.692] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0226.692] GetSystemMetrics (nIndex=42) returned 0
[0226.692] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0226.692] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0226.692] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0226.692] GetCurrentObject (hdc=0x42010792, type=0x1) returned 0xb00017
[0226.692] GetCurrentObject (hdc=0x42010792, type=0x2) returned 0x900010
[0226.692] GetCurrentObject (hdc=0x42010792, type=0x7) returned 0x1e0507b9
[0226.692] GetCurrentObject (hdc=0x42010792, type=0x6) returned 0x8a01c2
[0226.692] SaveDC (hdc=0x42010792) returned 2
[0226.692] GetNearestColor (hdc=0x42010792, color=0xff) returned 0xff
[0226.692] CreateSolidBrush (color=0xff) returned 0xc410078d
[0226.692] FillRect (hDC=0x42010792, lprc=0x53d8d8, hbr=0xc410078d) returned 1
[0226.692] DeleteObject (ho=0xc410078d) returned 1
[0226.692] RestoreDC (hdc=0x42010792, nSavedDC=-1) returned 1
[0226.692] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0226.692] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0226.692] GetSystemMetrics (nIndex=42) returned 0
[0226.692] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0226.693] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0226.693] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0226.693] GetCurrentObject (hdc=0x42010792, type=0x1) returned 0xb00017
[0226.693] GetCurrentObject (hdc=0x42010792, type=0x2) returned 0x900010
[0226.693] GetCurrentObject (hdc=0x42010792, type=0x7) returned 0x1e0507b9
[0226.693] GetCurrentObject (hdc=0x42010792, type=0x6) returned 0x8a01c2
[0226.693] SaveDC (hdc=0x42010792) returned 2
[0226.693] GetNearestColor (hdc=0x42010792, color=0xff) returned 0xff
[0226.693] CreateSolidBrush (color=0xff) returned 0xc510078d
[0226.693] FillRect (hDC=0x42010792, lprc=0x53d878, hbr=0xc510078d) returned 1
[0226.693] DeleteObject (ho=0xc510078d) returned 1
[0226.693] RestoreDC (hdc=0x42010792, nSavedDC=-1) returned 1
[0226.694] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0226.694] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0226.694] GetSystemMetrics (nIndex=42) returned 0
[0226.694] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0226.694] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0226.694] RestoreDC (hdc=0x42010792, nSavedDC=-1) returned 1
[0226.694] GdipReleaseDC (graphics=0x5d92c30, hdc=0x42010792) returned 0x0
[0226.694] IsAppThemed () returned 0x1
[0226.694] GetThemeAppProperties () returned 0x3
[0226.694] GetThemeAppProperties () returned 0x3
[0226.694] IsAppThemed () returned 0x1
[0226.694] GetThemeAppProperties () returned 0x3
[0226.694] GetThemeAppProperties () returned 0x3
[0226.694] IsThemePartDefined () returned 0x1
[0226.694] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0226.694] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.694] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0226.694] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0226.694] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0226.694] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0226.694] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0226.695] LocalFree (hMem=0x89ee08) returned 0x0
[0226.695] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0226.695] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0226.695] LocalFree (hMem=0x89ec80) returned 0x0
[0226.695] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0226.695] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0226.695] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0226.695] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0226.695] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.695] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0226.695] GetCurrentObject (hdc=0x42010792, type=0x1) returned 0xb00017
[0226.695] GetCurrentObject (hdc=0x42010792, type=0x2) returned 0x900010
[0226.695] GetCurrentObject (hdc=0x42010792, type=0x7) returned 0x1e0507b9
[0226.695] GetCurrentObject (hdc=0x42010792, type=0x6) returned 0x8a01c2
[0226.695] SaveDC (hdc=0x42010792) returned 1
[0226.695] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaa04053e
[0226.695] GetClipRgn (hdc=0x42010792, hrgn=0xaa04053e) returned 0
[0226.695] SelectClipRgn (hdc=0x42010792, hrgn=0xc504051e) returned 2
[0226.695] DeleteObject (ho=0xaa04053e) returned 1
[0226.695] DeleteObject (ho=0xc504051e) returned 1
[0226.695] OffsetViewportOrgEx (in: hdc=0x42010792, x=0, y=0, lppt=0x23a5218 | out: lppt=0x23a5218) returned 1
[0226.695] IsAppThemed () returned 0x1
[0226.696] GetThemeAppProperties () returned 0x3
[0226.696] GetThemeAppProperties () returned 0x3
[0226.696] DrawThemeBackground () returned 0x0
[0226.696] RestoreDC (hdc=0x42010792, nSavedDC=-1) returned 1
[0226.696] GdipReleaseDC (graphics=0x5d92c30, hdc=0x42010792) returned 0x0
[0226.696] GdipCreateRegion (region=0x53de00) returned 0x0
[0226.696] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0226.696] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0226.696] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0226.696] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0226.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0226.696] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0226.696] LocalFree (hMem=0x89ea88) returned 0x0
[0226.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0226.696] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0226.696] LocalFree (hMem=0x89ea88) returned 0x0
[0226.696] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0226.696] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0226.696] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0226.696] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0226.696] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0226.696] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0226.696] GetCurrentObject (hdc=0x42010792, type=0x1) returned 0xb00017
[0226.697] GetCurrentObject (hdc=0x42010792, type=0x2) returned 0x900010
[0226.697] GetCurrentObject (hdc=0x42010792, type=0x7) returned 0x1e0507b9
[0226.697] GetCurrentObject (hdc=0x42010792, type=0x6) returned 0x8a01c2
[0226.697] SaveDC (hdc=0x42010792) returned 1
[0226.697] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc604051e
[0226.697] GetClipRgn (hdc=0x42010792, hrgn=0xc604051e) returned 0
[0226.697] SelectClipRgn (hdc=0x42010792, hrgn=0xab04053e) returned 2
[0226.697] DeleteObject (ho=0xc604051e) returned 1
[0226.697] DeleteObject (ho=0xab04053e) returned 1
[0226.697] OffsetViewportOrgEx (in: hdc=0x42010792, x=0, y=0, lppt=0x23a54ec | out: lppt=0x23a54ec) returned 1
[0226.697] IsAppThemed () returned 0x1
[0226.697] GetThemeAppProperties () returned 0x3
[0226.697] GetThemeAppProperties () returned 0x3
[0226.697] GetThemeBackgroundContentRect () returned 0x0
[0226.697] RestoreDC (hdc=0x42010792, nSavedDC=-1) returned 1
[0226.697] GdipReleaseDC (graphics=0x5d92c30, hdc=0x42010792) returned 0x0
[0226.697] IsAppThemed () returned 0x1
[0226.697] GetThemeAppProperties () returned 0x3
[0226.697] GetThemeAppProperties () returned 0x3
[0226.697] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0226.697] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0226.697] GetCurrentObject (hdc=0x42010792, type=0x1) returned 0xb00017
[0226.698] GetCurrentObject (hdc=0x42010792, type=0x2) returned 0x900010
[0226.698] GetCurrentObject (hdc=0x42010792, type=0x7) returned 0x1e0507b9
[0226.698] GetCurrentObject (hdc=0x42010792, type=0x6) returned 0x8a01c2
[0226.698] SaveDC (hdc=0x42010792) returned 1
[0226.698] GetTextAlign (hdc=0x42010792) returned 0x0
[0226.698] GetTextColor (hdc=0x42010792) returned 0x0
[0226.698] GetCurrentObject (hdc=0x42010792, type=0x6) returned 0x8a01c2
[0226.698] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0226.698] SelectObject (hdc=0x42010792, h=0x450a0799) returned 0x8a01c2
[0226.698] GetBkMode (hdc=0x42010792) returned 2
[0226.698] SetBkMode (hdc=0x42010792, mode=1) returned 2
[0226.698] DrawTextExW (in: hdc=0x42010792, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x23a588c | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0226.698] DrawTextExW (in: hdc=0x42010792, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x23a588c | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0226.699] RestoreDC (hdc=0x42010792, nSavedDC=-1) returned 1
[0226.699] GdipReleaseDC (graphics=0x5d92c30, hdc=0x42010792) returned 0x0
[0226.699] GetFocus () returned 0xe02c0
[0226.699] IsAppThemed () returned 0x1
[0226.699] GetThemeAppProperties () returned 0x3
[0226.699] GetThemeAppProperties () returned 0x3
[0226.699] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0226.699] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x42010792, x1=0, y1=0, rop=0xcc0020) returned 1
[0226.699] GdipReleaseDC (graphics=0x5d92c30, hdc=0x42010792) returned 0x0
[0226.699] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0226.699] SelectObject (hdc=0x42010792, h=0x85000f) returned 0x1e0507b9
[0226.699] DeleteDC (hdc=0x42010792) returned 1
[0226.699] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0226.699] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0227.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0227.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0227.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1e013e) returned 0x1
[0227.032] GetFocus () returned 0x1e013e
[0227.032] GetAncestor (hwnd=0x1e013e, gaFlags=0x1) returned 0x10010
[0227.032] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0227.032] SetFocus (hWnd=0x202c6) returned 0x0
[0227.034] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0227.036] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0227.036] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0227.036] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0227.036] GetFocus () returned 0x70036
[0227.036] SetFocus (hWnd=0x202c6) returned 0x0
[0227.044] IsWindow (hWnd=0x70036) returned 1
[0227.044] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0227.045] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0227.045] IsWindow (hWnd=0x70036) returned 1
[0227.045] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0227.045] IsWindow (hWnd=0x202c6) returned 1
[0227.045] SetFocus (hWnd=0x202c6) returned 0x70036
[0227.045] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0227.046] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0227.047] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0227.048] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0227.048] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0227.048] GetStockObject (i=5) returned 0x900015
[0227.048] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0227.049] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8dac10) returned 0x7
[0227.049] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0227.049] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0227.049] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0227.049] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0227.050] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0227.050] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0227.050] GetFocus () returned 0x202c6
[0227.050] GetCapture () returned 0x0
[0227.050] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.051] IsWindowUnicode (hWnd=0x202c6) returned 1
[0227.051] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.051] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.051] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.051] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.051] IsWindowUnicode (hWnd=0x202c6) returned 1
[0227.051] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.052] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.052] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.052] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0227.052] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0227.052] CreateCompatibleDC (hdc=0x10105d6) returned 0x430107af
[0227.052] SelectObject (hdc=0x430107af, h=0x1e0507b9) returned 0x85000f
[0227.052] GdipCreateFromHDC (hdc=0x430107af, graphics=0x53e958) returned 0x0
[0227.052] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0227.052] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0227.052] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0227.059] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0227.059] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0227.059] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0227.059] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0227.060] LocalFree (hMem=0x89ee08) returned 0x0
[0227.060] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0227.060] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0227.060] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0227.060] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0227.060] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0227.060] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc3b0dbd) returned 0x0
[0227.060] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0227.060] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0227.060] GetCurrentObject (hdc=0x430107af, type=0x1) returned 0xb00017
[0227.060] GetCurrentObject (hdc=0x430107af, type=0x2) returned 0x900010
[0227.060] GetCurrentObject (hdc=0x430107af, type=0x7) returned 0x1e0507b9
[0227.060] GetCurrentObject (hdc=0x430107af, type=0x6) returned 0x8a01c2
[0227.060] SaveDC (hdc=0x430107af) returned 1
[0227.060] GetNearestColor (hdc=0x430107af, color=0xff) returned 0xff
[0227.060] GetNearestColor (hdc=0x430107af, color=0x55) returned 0x55
[0227.060] GetNearestColor (hdc=0x430107af, color=0x0) returned 0x0
[0227.060] GetNearestColor (hdc=0x430107af, color=0x55) returned 0x55
[0227.061] GetNearestColor (hdc=0x430107af, color=0x0) returned 0x0
[0227.061] GetNearestColor (hdc=0x430107af, color=0x8080ff) returned 0x8080ff
[0227.061] GetNearestColor (hdc=0x430107af, color=0x7373e5) returned 0x7373e5
[0227.061] GetNearestColor (hdc=0x430107af, color=0xe5) returned 0xe5
[0227.061] GetNearestColor (hdc=0x430107af, color=0x0) returned 0x0
[0227.061] RestoreDC (hdc=0x430107af, nSavedDC=-1) returned 1
[0227.061] GdipReleaseDC (graphics=0x5d92c30, hdc=0x430107af) returned 0x0
[0227.061] IsAppThemed () returned 0x1
[0227.061] GetThemeAppProperties () returned 0x3
[0227.061] GetThemeAppProperties () returned 0x3
[0227.061] IsAppThemed () returned 0x1
[0227.061] GetThemeAppProperties () returned 0x3
[0227.061] GetThemeAppProperties () returned 0x3
[0227.061] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x23a60e8 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0227.062] IsAppThemed () returned 0x1
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] IsAppThemed () returned 0x1
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] GetFocus () returned 0x202c6
[0227.062] IsAppThemed () returned 0x1
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] IsAppThemed () returned 0x1
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] IsThemePartDefined () returned 0x1
[0227.062] IsAppThemed () returned 0x1
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0227.062] IsAppThemed () returned 0x1
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] IsAppThemed () returned 0x1
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] GetThemeAppProperties () returned 0x3
[0227.062] IsThemePartDefined () returned 0x1
[0227.062] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0227.062] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0227.063] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0227.063] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0227.063] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0227.063] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0227.063] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0227.063] LocalFree (hMem=0x89ee08) returned 0x0
[0227.063] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0227.063] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0227.063] LocalFree (hMem=0x89ea88) returned 0x0
[0227.063] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0227.063] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0227.063] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0227.063] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0227.063] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0227.063] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0227.063] GetCurrentObject (hdc=0x430107af, type=0x1) returned 0xb00017
[0227.063] GetCurrentObject (hdc=0x430107af, type=0x2) returned 0x900010
[0227.063] GetCurrentObject (hdc=0x430107af, type=0x7) returned 0x1e0507b9
[0227.063] GetCurrentObject (hdc=0x430107af, type=0x6) returned 0x8a01c2
[0227.063] SaveDC (hdc=0x430107af) returned 1
[0227.063] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb104053e
[0227.063] GetClipRgn (hdc=0x430107af, hrgn=0xb104053e) returned 0
[0227.064] SelectClipRgn (hdc=0x430107af, hrgn=0xd604051e) returned 2
[0227.064] DeleteObject (ho=0xb104053e) returned 1
[0227.064] DeleteObject (ho=0xd604051e) returned 1
[0227.064] OffsetViewportOrgEx (in: hdc=0x430107af, x=0, y=0, lppt=0x23a6798 | out: lppt=0x23a6798) returned 1
[0227.064] DrawThemeParentBackground () returned 0x0
[0227.064] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0227.064] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0227.064] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0227.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0227.064] GetSystemMetrics (nIndex=42) returned 0
[0227.064] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0227.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0227.064] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0227.064] GetCurrentObject (hdc=0x430107af, type=0x1) returned 0xb00017
[0227.064] GetCurrentObject (hdc=0x430107af, type=0x2) returned 0x900010
[0227.064] GetCurrentObject (hdc=0x430107af, type=0x7) returned 0x1e0507b9
[0227.064] GetCurrentObject (hdc=0x430107af, type=0x6) returned 0x8a01c2
[0227.064] SaveDC (hdc=0x430107af) returned 2
[0227.065] GetNearestColor (hdc=0x430107af, color=0xff) returned 0xff
[0227.065] CreateSolidBrush (color=0xff) returned 0xc710078d
[0227.065] FillRect (hDC=0x430107af, lprc=0x53e128, hbr=0xc710078d) returned 1
[0227.065] DeleteObject (ho=0xc710078d) returned 1
[0227.065] RestoreDC (hdc=0x430107af, nSavedDC=-1) returned 1
[0227.065] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0227.065] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0227.065] GetSystemMetrics (nIndex=42) returned 0
[0227.065] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0227.065] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0227.065] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0227.065] GetCurrentObject (hdc=0x430107af, type=0x1) returned 0xb00017
[0227.065] GetCurrentObject (hdc=0x430107af, type=0x2) returned 0x900010
[0227.065] GetCurrentObject (hdc=0x430107af, type=0x7) returned 0x1e0507b9
[0227.065] GetCurrentObject (hdc=0x430107af, type=0x6) returned 0x8a01c2
[0227.065] SaveDC (hdc=0x430107af) returned 2
[0227.065] GetNearestColor (hdc=0x430107af, color=0xff) returned 0xff
[0227.065] CreateSolidBrush (color=0xff) returned 0xc810078d
[0227.065] FillRect (hDC=0x430107af, lprc=0x53e0c8, hbr=0xc810078d) returned 1
[0227.066] DeleteObject (ho=0xc810078d) returned 1
[0227.066] RestoreDC (hdc=0x430107af, nSavedDC=-1) returned 1
[0227.066] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0227.066] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0227.066] GetSystemMetrics (nIndex=42) returned 0
[0227.066] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0227.066] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0227.066] RestoreDC (hdc=0x430107af, nSavedDC=-1) returned 1
[0227.066] GdipReleaseDC (graphics=0x5d92c30, hdc=0x430107af) returned 0x0
[0227.066] IsAppThemed () returned 0x1
[0227.066] GetThemeAppProperties () returned 0x3
[0227.066] GetThemeAppProperties () returned 0x3
[0227.066] IsAppThemed () returned 0x1
[0227.066] GetThemeAppProperties () returned 0x3
[0227.066] GetThemeAppProperties () returned 0x3
[0227.066] IsThemePartDefined () returned 0x1
[0227.066] GdipCreateRegion (region=0x53e64c) returned 0x0
[0227.066] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0227.066] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0227.066] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0227.066] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0227.067] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0227.067] LocalFree (hMem=0x89ea88) returned 0x0
[0227.067] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0227.067] LocalFree (hMem=0x89ee08) returned 0x0
[0227.067] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0227.067] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0227.067] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0227.067] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0227.067] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0227.067] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0227.067] GetCurrentObject (hdc=0x430107af, type=0x1) returned 0xb00017
[0227.067] GetCurrentObject (hdc=0x430107af, type=0x2) returned 0x900010
[0227.067] GetCurrentObject (hdc=0x430107af, type=0x7) returned 0x1e0507b9
[0227.067] GetCurrentObject (hdc=0x430107af, type=0x6) returned 0x8a01c2
[0227.067] SaveDC (hdc=0x430107af) returned 1
[0227.067] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd704051e
[0227.067] GetClipRgn (hdc=0x430107af, hrgn=0xd704051e) returned 0
[0227.067] SelectClipRgn (hdc=0x430107af, hrgn=0xb304053e) returned 2
[0227.067] DeleteObject (ho=0xd704051e) returned 1
[0227.067] DeleteObject (ho=0xb304053e) returned 1
[0227.067] OffsetViewportOrgEx (in: hdc=0x430107af, x=0, y=0, lppt=0x23a6ffc | out: lppt=0x23a6ffc) returned 1
[0227.067] IsAppThemed () returned 0x1
[0227.067] GetThemeAppProperties () returned 0x3
[0227.068] GetThemeAppProperties () returned 0x3
[0227.068] DrawThemeBackground () returned 0x0
[0227.068] RestoreDC (hdc=0x430107af, nSavedDC=-1) returned 1
[0227.068] GdipReleaseDC (graphics=0x5d92c30, hdc=0x430107af) returned 0x0
[0227.068] GdipCreateRegion (region=0x53e650) returned 0x0
[0227.068] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0227.068] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0227.068] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0227.068] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0227.068] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0227.068] LocalFree (hMem=0x89ee08) returned 0x0
[0227.068] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0227.068] LocalFree (hMem=0x89ea88) returned 0x0
[0227.068] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0227.068] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0227.068] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0227.068] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0227.069] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0227.069] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0227.069] GetCurrentObject (hdc=0x430107af, type=0x1) returned 0xb00017
[0227.069] GetCurrentObject (hdc=0x430107af, type=0x2) returned 0x900010
[0227.069] GetCurrentObject (hdc=0x430107af, type=0x7) returned 0x1e0507b9
[0227.069] GetCurrentObject (hdc=0x430107af, type=0x6) returned 0x8a01c2
[0227.069] SaveDC (hdc=0x430107af) returned 1
[0227.069] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb404053e
[0227.069] GetClipRgn (hdc=0x430107af, hrgn=0xb404053e) returned 0
[0227.069] SelectClipRgn (hdc=0x430107af, hrgn=0xd804051e) returned 2
[0227.069] DeleteObject (ho=0xb404053e) returned 1
[0227.069] DeleteObject (ho=0xd804051e) returned 1
[0227.069] OffsetViewportOrgEx (in: hdc=0x430107af, x=0, y=0, lppt=0x23a72d0 | out: lppt=0x23a72d0) returned 1
[0227.069] IsAppThemed () returned 0x1
[0227.069] GetThemeAppProperties () returned 0x3
[0227.069] GetThemeAppProperties () returned 0x3
[0227.069] GetThemeBackgroundContentRect () returned 0x0
[0227.069] RestoreDC (hdc=0x430107af, nSavedDC=-1) returned 1
[0227.069] GdipReleaseDC (graphics=0x5d92c30, hdc=0x430107af) returned 0x0
[0227.069] IsAppThemed () returned 0x1
[0227.069] GetThemeAppProperties () returned 0x3
[0227.069] GetThemeAppProperties () returned 0x3
[0227.069] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0227.069] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0227.069] GetCurrentObject (hdc=0x430107af, type=0x1) returned 0xb00017
[0227.070] GetCurrentObject (hdc=0x430107af, type=0x2) returned 0x900010
[0227.070] GetCurrentObject (hdc=0x430107af, type=0x7) returned 0x1e0507b9
[0227.070] GetCurrentObject (hdc=0x430107af, type=0x6) returned 0x8a01c2
[0227.070] SaveDC (hdc=0x430107af) returned 1
[0227.070] GetTextAlign (hdc=0x430107af) returned 0x0
[0227.070] GetTextColor (hdc=0x430107af) returned 0x0
[0227.070] GetCurrentObject (hdc=0x430107af, type=0x6) returned 0x8a01c2
[0227.070] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0227.070] SelectObject (hdc=0x430107af, h=0x450a0799) returned 0x8a01c2
[0227.070] GetBkMode (hdc=0x430107af) returned 2
[0227.070] SetBkMode (hdc=0x430107af, mode=1) returned 2
[0227.070] DrawTextExW (in: hdc=0x430107af, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x23a7670 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0227.070] DrawTextExW (in: hdc=0x430107af, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x23a7670 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0227.071] RestoreDC (hdc=0x430107af, nSavedDC=-1) returned 1
[0227.071] GdipReleaseDC (graphics=0x5d92c30, hdc=0x430107af) returned 0x0
[0227.071] GetFocus () returned 0x202c6
[0227.071] IsAppThemed () returned 0x1
[0227.071] GetThemeAppProperties () returned 0x3
[0227.071] GetThemeAppProperties () returned 0x3
[0227.071] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0227.071] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x430107af, x1=0, y1=0, rop=0xcc0020) returned 1
[0227.071] GdipReleaseDC (graphics=0x5d92c30, hdc=0x430107af) returned 0x0
[0227.071] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0227.071] SelectObject (hdc=0x430107af, h=0x85000f) returned 0x1e0507b9
[0227.071] DeleteDC (hdc=0x430107af) returned 1
[0227.071] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0227.071] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0227.071] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.071] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.072] WaitMessage () returned 1
[0227.077] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.077] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.077] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.077] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.077] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.078] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.078] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.078] WaitMessage () returned 1
[0227.089] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.089] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.089] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.089] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.089] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.090] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.090] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.090] WaitMessage () returned 1
[0227.091] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.091] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.091] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.091] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.091] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.092] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.092] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.092] WaitMessage () returned 1
[0227.093] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.093] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.093] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.093] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.093] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.094] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.094] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.094] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.094] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.094] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.095] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.095] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.095] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.095] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.095] WaitMessage () returned 1
[0227.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.096] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.096] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.096] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.096] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.097] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.097] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.097] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.097] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.097] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.097] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.097] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.097] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.097] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.097] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.097] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.098] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.098] WaitMessage () returned 1
[0227.098] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.098] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.098] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.098] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.098] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.103] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.103] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.103] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.103] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.103] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.103] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.103] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.103] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.103] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.103] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.103] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.104] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.104] WaitMessage () returned 1
[0227.105] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.106] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.106] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.106] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.106] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.107] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.107] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.107] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.107] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.107] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.107] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.107] IsWindowUnicode (hWnd=0x102dc) returned 1
[0227.107] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.108] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.108] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.108] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.108] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.108] WaitMessage () returned 1
[0227.287] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.287] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.288] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.288] DispatchMessageA (lpMsg=0x53eef8) returned 0x7eda
[0227.288] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.288] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.288] WaitMessage () returned 1
[0227.350] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.350] IsWindowUnicode (hWnd=0x202d0) returned 1
[0227.350] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0227.350] TranslateMessage (lpMsg=0x53eef8) returned 0
[0227.350] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0227.350] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.350] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0227.350] WaitMessage () returned 1
[0228.303] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0228.303] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0228.303] TranslateMessage (lpMsg=0x53eef8) returned 0
[0228.303] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0228.303] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0228.303] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0228.303] WaitMessage () returned 1
[0228.790] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0228.790] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19f0230) returned 0x1
[0228.790] IsWindowUnicode (hWnd=0x202c6) returned 1
[0228.790] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0228.790] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19f0230) returned 0x1
[0228.790] SetCursor (hCursor=0x10003) returned 0x10003
[0228.791] TranslateMessage (lpMsg=0x53eef8) returned 0
[0228.791] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0228.791] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0228.791] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0228.791] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0228.791] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0228.791] GetKeyState (nVirtKey=1) returned 1
[0228.791] GetKeyState (nVirtKey=2) returned 0
[0228.791] GetKeyState (nVirtKey=4) returned 0
[0228.791] GetKeyState (nVirtKey=5) returned 0
[0228.791] GetKeyState (nVirtKey=6) returned 0
[0228.791] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0228.791] IsWindowUnicode (hWnd=0x202c6) returned 1
[0228.791] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0228.791] TranslateMessage (lpMsg=0x53eef8) returned 0
[0228.791] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0228.792] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0228.792] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0228.792] CreateCompatibleDC (hdc=0x10105d6) returned 0xac0107ba
[0228.792] SelectObject (hdc=0xac0107ba, h=0x1e0507b9) returned 0x85000f
[0228.792] GdipCreateFromHDC (hdc=0xac0107ba, graphics=0x53e958) returned 0x0
[0228.792] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0228.792] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0228.793] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0228.793] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0228.793] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0228.793] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0228.793] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0228.793] LocalFree (hMem=0x89ea88) returned 0x0
[0228.793] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0228.793] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0228.793] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0228.793] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0228.793] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0228.793] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc390dbd) returned 0x0
[0228.793] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0228.793] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0228.793] GetCurrentObject (hdc=0xac0107ba, type=0x1) returned 0xb00017
[0228.793] GetCurrentObject (hdc=0xac0107ba, type=0x2) returned 0x900010
[0228.794] GetCurrentObject (hdc=0xac0107ba, type=0x7) returned 0x1e0507b9
[0228.794] GetCurrentObject (hdc=0xac0107ba, type=0x6) returned 0x8a01c2
[0228.794] SaveDC (hdc=0xac0107ba) returned 1
[0228.794] GetNearestColor (hdc=0xac0107ba, color=0xff) returned 0xff
[0228.794] GetNearestColor (hdc=0xac0107ba, color=0x55) returned 0x55
[0228.794] GetNearestColor (hdc=0xac0107ba, color=0x0) returned 0x0
[0228.794] GetNearestColor (hdc=0xac0107ba, color=0x55) returned 0x55
[0228.794] GetNearestColor (hdc=0xac0107ba, color=0x0) returned 0x0
[0228.794] GetNearestColor (hdc=0xac0107ba, color=0x8080ff) returned 0x8080ff
[0228.794] GetNearestColor (hdc=0xac0107ba, color=0x7373e5) returned 0x7373e5
[0228.794] GetNearestColor (hdc=0xac0107ba, color=0xe5) returned 0xe5
[0228.794] GetNearestColor (hdc=0xac0107ba, color=0x0) returned 0x0
[0228.794] RestoreDC (hdc=0xac0107ba, nSavedDC=-1) returned 1
[0228.794] GdipReleaseDC (graphics=0x5d92c30, hdc=0xac0107ba) returned 0x0
[0228.794] IsAppThemed () returned 0x1
[0228.795] GetThemeAppProperties () returned 0x3
[0228.795] GetThemeAppProperties () returned 0x3
[0228.795] IsAppThemed () returned 0x1
[0228.795] GetThemeAppProperties () returned 0x3
[0228.795] GetThemeAppProperties () returned 0x3
[0228.795] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x23a8004 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0228.795] IsAppThemed () returned 0x1
[0228.795] GetThemeAppProperties () returned 0x3
[0228.795] GetThemeAppProperties () returned 0x3
[0228.795] IsAppThemed () returned 0x1
[0228.796] GetThemeAppProperties () returned 0x3
[0228.796] GetThemeAppProperties () returned 0x3
[0228.796] IsAppThemed () returned 0x1
[0228.796] GetThemeAppProperties () returned 0x3
[0228.796] GetThemeAppProperties () returned 0x3
[0228.796] IsAppThemed () returned 0x1
[0228.796] GetThemeAppProperties () returned 0x3
[0228.796] GetThemeAppProperties () returned 0x3
[0228.796] IsThemePartDefined () returned 0x1
[0228.796] IsAppThemed () returned 0x1
[0228.796] GetThemeAppProperties () returned 0x3
[0228.796] GetThemeAppProperties () returned 0x3
[0228.796] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0228.796] IsAppThemed () returned 0x1
[0228.796] GetThemeAppProperties () returned 0x3
[0228.796] GetThemeAppProperties () returned 0x3
[0228.796] IsAppThemed () returned 0x1
[0228.796] GetThemeAppProperties () returned 0x3
[0228.796] GetThemeAppProperties () returned 0x3
[0228.796] IsThemePartDefined () returned 0x1
[0228.796] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0228.796] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0228.796] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0228.796] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0228.796] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0228.796] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0228.796] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0228.797] LocalFree (hMem=0x89ec80) returned 0x0
[0228.797] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0228.797] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0228.797] LocalFree (hMem=0x89ea88) returned 0x0
[0228.797] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0228.797] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0228.797] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0228.797] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0228.797] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0228.797] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0228.797] GetCurrentObject (hdc=0xac0107ba, type=0x1) returned 0xb00017
[0228.797] GetCurrentObject (hdc=0xac0107ba, type=0x2) returned 0x900010
[0228.797] GetCurrentObject (hdc=0xac0107ba, type=0x7) returned 0x1e0507b9
[0228.797] GetCurrentObject (hdc=0xac0107ba, type=0x6) returned 0x8a01c2
[0228.797] SaveDC (hdc=0xac0107ba) returned 1
[0228.797] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd904051e
[0228.797] GetClipRgn (hdc=0xac0107ba, hrgn=0xd904051e) returned 0
[0228.797] SelectClipRgn (hdc=0xac0107ba, hrgn=0xb804053e) returned 2
[0228.797] DeleteObject (ho=0xd904051e) returned 1
[0228.798] DeleteObject (ho=0xb804053e) returned 1
[0228.798] OffsetViewportOrgEx (in: hdc=0xac0107ba, x=0, y=0, lppt=0x23a86b4 | out: lppt=0x23a86b4) returned 1
[0228.798] DrawThemeParentBackground () returned 0x0
[0228.798] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0228.798] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0228.798] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0228.798] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0228.798] GetSystemMetrics (nIndex=42) returned 0
[0228.798] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0228.798] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0228.798] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0228.798] GetCurrentObject (hdc=0xac0107ba, type=0x1) returned 0xb00017
[0228.798] GetCurrentObject (hdc=0xac0107ba, type=0x2) returned 0x900010
[0228.798] GetCurrentObject (hdc=0xac0107ba, type=0x7) returned 0x1e0507b9
[0228.798] GetCurrentObject (hdc=0xac0107ba, type=0x6) returned 0x8a01c2
[0228.798] SaveDC (hdc=0xac0107ba) returned 2
[0228.799] GetNearestColor (hdc=0xac0107ba, color=0xff) returned 0xff
[0228.799] CreateSolidBrush (color=0xff) returned 0xc910078d
[0228.799] FillRect (hDC=0xac0107ba, lprc=0x53e120, hbr=0xc910078d) returned 1
[0228.799] DeleteObject (ho=0xc910078d) returned 1
[0228.799] RestoreDC (hdc=0xac0107ba, nSavedDC=-1) returned 1
[0228.799] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0228.799] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0228.799] GetSystemMetrics (nIndex=42) returned 0
[0228.799] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0228.799] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0228.799] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0228.799] GetCurrentObject (hdc=0xac0107ba, type=0x1) returned 0xb00017
[0228.799] GetCurrentObject (hdc=0xac0107ba, type=0x2) returned 0x900010
[0228.799] GetCurrentObject (hdc=0xac0107ba, type=0x7) returned 0x1e0507b9
[0228.799] GetCurrentObject (hdc=0xac0107ba, type=0x6) returned 0x8a01c2
[0228.799] SaveDC (hdc=0xac0107ba) returned 2
[0228.799] GetNearestColor (hdc=0xac0107ba, color=0xff) returned 0xff
[0228.799] CreateSolidBrush (color=0xff) returned 0xca10078d
[0228.800] FillRect (hDC=0xac0107ba, lprc=0x53e0c0, hbr=0xca10078d) returned 1
[0228.800] DeleteObject (ho=0xca10078d) returned 1
[0228.800] RestoreDC (hdc=0xac0107ba, nSavedDC=-1) returned 1
[0228.800] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0228.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0228.800] GetSystemMetrics (nIndex=42) returned 0
[0228.800] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0228.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0228.800] RestoreDC (hdc=0xac0107ba, nSavedDC=-1) returned 1
[0228.800] GdipReleaseDC (graphics=0x5d92c30, hdc=0xac0107ba) returned 0x0
[0228.800] IsAppThemed () returned 0x1
[0228.800] GetThemeAppProperties () returned 0x3
[0228.800] GetThemeAppProperties () returned 0x3
[0228.800] IsAppThemed () returned 0x1
[0228.800] GetThemeAppProperties () returned 0x3
[0228.800] GetThemeAppProperties () returned 0x3
[0228.800] IsThemePartDefined () returned 0x1
[0228.800] GdipCreateRegion (region=0x53e640) returned 0x0
[0228.800] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0228.801] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0228.801] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0228.801] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0228.801] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0228.801] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0228.801] LocalFree (hMem=0x89eee8) returned 0x0
[0228.801] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0228.801] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0228.801] LocalFree (hMem=0x89ec80) returned 0x0
[0228.801] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0228.801] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0228.801] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0228.801] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0228.801] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0228.801] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0228.801] GetCurrentObject (hdc=0xac0107ba, type=0x1) returned 0xb00017
[0228.801] GetCurrentObject (hdc=0xac0107ba, type=0x2) returned 0x900010
[0228.801] GetCurrentObject (hdc=0xac0107ba, type=0x7) returned 0x1e0507b9
[0228.801] GetCurrentObject (hdc=0xac0107ba, type=0x6) returned 0x8a01c2
[0228.801] SaveDC (hdc=0xac0107ba) returned 1
[0228.801] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb904053e
[0228.802] GetClipRgn (hdc=0xac0107ba, hrgn=0xb904053e) returned 0
[0228.802] SelectClipRgn (hdc=0xac0107ba, hrgn=0xdb04051e) returned 2
[0228.802] DeleteObject (ho=0xb904053e) returned 1
[0228.802] DeleteObject (ho=0xdb04051e) returned 1
[0228.802] OffsetViewportOrgEx (in: hdc=0xac0107ba, x=0, y=0, lppt=0x23a8f18 | out: lppt=0x23a8f18) returned 1
[0228.802] IsAppThemed () returned 0x1
[0228.802] GetThemeAppProperties () returned 0x3
[0228.802] GetThemeAppProperties () returned 0x3
[0228.802] DrawThemeBackground () returned 0x0
[0228.802] RestoreDC (hdc=0xac0107ba, nSavedDC=-1) returned 1
[0228.802] GdipReleaseDC (graphics=0x5d92c30, hdc=0xac0107ba) returned 0x0
[0228.802] GdipCreateRegion (region=0x53e644) returned 0x0
[0228.802] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0228.802] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0228.802] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0228.802] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0228.803] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0228.803] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0228.803] LocalFree (hMem=0x89ea88) returned 0x0
[0228.803] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0228.803] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0228.803] LocalFree (hMem=0x89ea88) returned 0x0
[0228.803] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0228.803] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0228.803] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0228.803] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0228.803] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0228.803] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0228.803] GetCurrentObject (hdc=0xac0107ba, type=0x1) returned 0xb00017
[0228.803] GetCurrentObject (hdc=0xac0107ba, type=0x2) returned 0x900010
[0228.803] GetCurrentObject (hdc=0xac0107ba, type=0x7) returned 0x1e0507b9
[0228.804] GetCurrentObject (hdc=0xac0107ba, type=0x6) returned 0x8a01c2
[0228.804] SaveDC (hdc=0xac0107ba) returned 1
[0228.804] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdc04051e
[0228.804] GetClipRgn (hdc=0xac0107ba, hrgn=0xdc04051e) returned 0
[0228.804] SelectClipRgn (hdc=0xac0107ba, hrgn=0xba04053e) returned 2
[0228.804] DeleteObject (ho=0xdc04051e) returned 1
[0228.804] DeleteObject (ho=0xba04053e) returned 1
[0228.804] OffsetViewportOrgEx (in: hdc=0xac0107ba, x=0, y=0, lppt=0x23a91ec | out: lppt=0x23a91ec) returned 1
[0228.804] IsAppThemed () returned 0x1
[0228.804] GetThemeAppProperties () returned 0x3
[0228.804] GetThemeAppProperties () returned 0x3
[0228.804] GetThemeBackgroundContentRect () returned 0x0
[0228.804] RestoreDC (hdc=0xac0107ba, nSavedDC=-1) returned 1
[0228.804] GdipReleaseDC (graphics=0x5d92c30, hdc=0xac0107ba) returned 0x0
[0228.804] IsAppThemed () returned 0x1
[0228.804] GetThemeAppProperties () returned 0x3
[0228.804] GetThemeAppProperties () returned 0x3
[0228.805] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0228.805] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0228.805] GetCurrentObject (hdc=0xac0107ba, type=0x1) returned 0xb00017
[0228.805] GetCurrentObject (hdc=0xac0107ba, type=0x2) returned 0x900010
[0228.805] GetCurrentObject (hdc=0xac0107ba, type=0x7) returned 0x1e0507b9
[0228.805] GetCurrentObject (hdc=0xac0107ba, type=0x6) returned 0x8a01c2
[0228.805] SaveDC (hdc=0xac0107ba) returned 1
[0228.805] GetTextAlign (hdc=0xac0107ba) returned 0x0
[0228.805] GetTextColor (hdc=0xac0107ba) returned 0x0
[0228.805] GetCurrentObject (hdc=0xac0107ba, type=0x6) returned 0x8a01c2
[0228.805] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0228.805] SelectObject (hdc=0xac0107ba, h=0x450a0799) returned 0x8a01c2
[0228.805] GetBkMode (hdc=0xac0107ba) returned 2
[0228.805] SetBkMode (hdc=0xac0107ba, mode=1) returned 2
[0228.806] DrawTextExW (in: hdc=0xac0107ba, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x23a958c | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0228.806] DrawTextExW (in: hdc=0xac0107ba, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x23a958c | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0228.806] RestoreDC (hdc=0xac0107ba, nSavedDC=-1) returned 1
[0228.806] GdipReleaseDC (graphics=0x5d92c30, hdc=0xac0107ba) returned 0x0
[0228.806] GetFocus () returned 0x202c6
[0228.806] IsAppThemed () returned 0x1
[0228.806] GetThemeAppProperties () returned 0x3
[0228.806] GetThemeAppProperties () returned 0x3
[0228.807] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0228.807] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xac0107ba, x1=0, y1=0, rop=0xcc0020) returned 1
[0228.807] GdipReleaseDC (graphics=0x5d92c30, hdc=0xac0107ba) returned 0x0
[0228.807] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0228.807] SelectObject (hdc=0xac0107ba, h=0x85000f) returned 0x1e0507b9
[0228.807] DeleteDC (hdc=0xac0107ba) returned 1
[0228.807] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0228.807] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0228.808] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0228.808] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0228.808] WaitMessage () returned 1
[0228.897] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0228.898] IsWindowUnicode (hWnd=0x202c6) returned 1
[0228.898] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0228.898] TranslateMessage (lpMsg=0x53eef8) returned 0
[0228.898] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0228.898] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0228.898] IsWindowUnicode (hWnd=0x202c6) returned 1
[0228.898] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0228.898] TranslateMessage (lpMsg=0x53eef8) returned 0
[0228.898] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0228.898] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x170040) returned 0x0
[0228.898] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0228.898] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0228.898] WaitMessage () returned 1
[0229.029] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0229.030] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19f0230) returned 0x1
[0229.030] IsWindowUnicode (hWnd=0x202c6) returned 1
[0229.030] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0229.030] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19f0230) returned 0x1
[0229.030] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0229.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13201da) returned 0x0
[0229.030] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0229.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0229.031] SetCursor (hCursor=0x10003) returned 0x10003
[0229.031] TranslateMessage (lpMsg=0x53eef8) returned 0
[0229.031] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0229.031] GetKeyState (nVirtKey=1) returned -128
[0229.031] GetKeyState (nVirtKey=2) returned 0
[0229.031] GetKeyState (nVirtKey=4) returned 0
[0229.031] GetKeyState (nVirtKey=5) returned 0
[0229.031] GetKeyState (nVirtKey=6) returned 0
[0229.031] IsWindowVisible (hWnd=0x202c6) returned 1
[0229.031] IsWindowEnabled (hWnd=0x202c6) returned 1
[0229.031] SetFocus (hWnd=0x202c6) returned 0x202c6
[0229.031] GetFocus () returned 0x202c6
[0229.031] GetFocus () returned 0x202c6
[0229.031] GetFocus () returned 0x202c6
[0229.031] GetKeyState (nVirtKey=1) returned -128
[0229.031] GetKeyState (nVirtKey=2) returned 0
[0229.032] GetKeyState (nVirtKey=4) returned 0
[0229.032] GetKeyState (nVirtKey=5) returned 0
[0229.032] GetKeyState (nVirtKey=6) returned 0
[0229.032] GetCapture () returned 0x0
[0229.032] SetCapture (hWnd=0x202c6) returned 0x0
[0229.032] GetKeyState (nVirtKey=1) returned -128
[0229.032] GetKeyState (nVirtKey=2) returned 0
[0229.032] GetKeyState (nVirtKey=4) returned 0
[0229.032] GetKeyState (nVirtKey=5) returned 0
[0229.032] GetKeyState (nVirtKey=6) returned 0
[0229.032] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0229.032] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0229.032] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0229.032] IsWindowUnicode (hWnd=0x202c6) returned 1
[0229.032] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0229.032] TranslateMessage (lpMsg=0x53eef8) returned 0
[0229.032] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0229.032] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23a9710, cPoints=0x1 | out: lpPoints=0x23a9710) returned 25690608
[0229.032] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0229.033] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0229.033] UpdateWindow (hWnd=0x202c6) returned 1
[0229.033] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x10105d6
[0229.033] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0229.033] CreateCompatibleDC (hdc=0x10105d6) returned 0xad0107ba
[0229.033] SelectObject (hdc=0xad0107ba, h=0x1e0507b9) returned 0x85000f
[0229.033] GdipCreateFromHDC (hdc=0xad0107ba, graphics=0x53e5f0) returned 0x0
[0229.033] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0229.033] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0229.033] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0229.034] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.034] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0229.034] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0229.034] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0229.034] LocalFree (hMem=0x89eee8) returned 0x0
[0229.034] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.034] GdipCreateRegion (region=0x53e638) returned 0x0
[0229.034] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.034] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0229.034] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0229.034] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc370dbd) returned 0x0
[0229.034] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.034] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0229.034] GetCurrentObject (hdc=0xad0107ba, type=0x1) returned 0xb00017
[0229.034] GetCurrentObject (hdc=0xad0107ba, type=0x2) returned 0x900010
[0229.034] GetCurrentObject (hdc=0xad0107ba, type=0x7) returned 0x1e0507b9
[0229.034] GetCurrentObject (hdc=0xad0107ba, type=0x6) returned 0x8a01c2
[0229.035] SaveDC (hdc=0xad0107ba) returned 1
[0229.035] GetNearestColor (hdc=0xad0107ba, color=0xff) returned 0xff
[0229.035] GetNearestColor (hdc=0xad0107ba, color=0x55) returned 0x55
[0229.035] GetNearestColor (hdc=0xad0107ba, color=0x0) returned 0x0
[0229.035] GetNearestColor (hdc=0xad0107ba, color=0x55) returned 0x55
[0229.035] GetNearestColor (hdc=0xad0107ba, color=0x0) returned 0x0
[0229.035] GetNearestColor (hdc=0xad0107ba, color=0x8080ff) returned 0x8080ff
[0229.035] GetNearestColor (hdc=0xad0107ba, color=0x7373e5) returned 0x7373e5
[0229.035] GetNearestColor (hdc=0xad0107ba, color=0xe5) returned 0xe5
[0229.035] GetNearestColor (hdc=0xad0107ba, color=0x0) returned 0x0
[0229.035] RestoreDC (hdc=0xad0107ba, nSavedDC=-1) returned 1
[0229.035] GdipReleaseDC (graphics=0x5d92c30, hdc=0xad0107ba) returned 0x0
[0229.035] IsAppThemed () returned 0x1
[0229.036] GetThemeAppProperties () returned 0x3
[0229.036] GetThemeAppProperties () returned 0x3
[0229.036] IsAppThemed () returned 0x1
[0229.036] GetThemeAppProperties () returned 0x3
[0229.036] GetThemeAppProperties () returned 0x3
[0229.036] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x23a9e2c | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0229.036] IsAppThemed () returned 0x1
[0229.036] GetThemeAppProperties () returned 0x3
[0229.036] GetThemeAppProperties () returned 0x3
[0229.036] IsAppThemed () returned 0x1
[0229.036] GetThemeAppProperties () returned 0x3
[0229.036] GetThemeAppProperties () returned 0x3
[0229.036] IsAppThemed () returned 0x1
[0229.036] GetThemeAppProperties () returned 0x3
[0229.036] GetThemeAppProperties () returned 0x3
[0229.037] IsAppThemed () returned 0x1
[0229.037] GetThemeAppProperties () returned 0x3
[0229.037] GetThemeAppProperties () returned 0x3
[0229.037] IsThemePartDefined () returned 0x1
[0229.037] IsAppThemed () returned 0x1
[0229.037] GetThemeAppProperties () returned 0x3
[0229.037] GetThemeAppProperties () returned 0x3
[0229.037] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0229.037] IsAppThemed () returned 0x1
[0229.037] GetThemeAppProperties () returned 0x3
[0229.037] GetThemeAppProperties () returned 0x3
[0229.037] IsAppThemed () returned 0x1
[0229.037] GetThemeAppProperties () returned 0x3
[0229.037] GetThemeAppProperties () returned 0x3
[0229.037] IsThemePartDefined () returned 0x1
[0229.037] GdipCreateRegion (region=0x53e354) returned 0x0
[0229.037] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.037] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0229.037] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.037] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0229.038] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.038] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0229.038] LocalFree (hMem=0x89ea88) returned 0x0
[0229.038] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.038] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0229.038] LocalFree (hMem=0x89ee08) returned 0x0
[0229.038] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.038] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0229.038] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0229.038] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0229.038] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.038] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0229.038] GetCurrentObject (hdc=0xad0107ba, type=0x1) returned 0xb00017
[0229.039] GetCurrentObject (hdc=0xad0107ba, type=0x2) returned 0x900010
[0229.039] GetCurrentObject (hdc=0xad0107ba, type=0x7) returned 0x1e0507b9
[0229.039] GetCurrentObject (hdc=0xad0107ba, type=0x6) returned 0x8a01c2
[0229.039] SaveDC (hdc=0xad0107ba) returned 1
[0229.039] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbb04053e
[0229.039] GetClipRgn (hdc=0xad0107ba, hrgn=0xbb04053e) returned 0
[0229.039] SelectClipRgn (hdc=0xad0107ba, hrgn=0xe004051e) returned 2
[0229.039] DeleteObject (ho=0xbb04053e) returned 1
[0229.039] DeleteObject (ho=0xe004051e) returned 1
[0229.039] OffsetViewportOrgEx (in: hdc=0xad0107ba, x=0, y=0, lppt=0x23aa4dc | out: lppt=0x23aa4dc) returned 1
[0229.039] DrawThemeParentBackground () returned 0x0
[0229.039] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0229.040] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0229.040] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0229.040] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0229.040] GetSystemMetrics (nIndex=42) returned 0
[0229.040] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0229.040] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0229.040] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0229.040] GetCurrentObject (hdc=0xad0107ba, type=0x1) returned 0xb00017
[0229.040] GetCurrentObject (hdc=0xad0107ba, type=0x2) returned 0x900010
[0229.040] GetCurrentObject (hdc=0xad0107ba, type=0x7) returned 0x1e0507b9
[0229.040] GetCurrentObject (hdc=0xad0107ba, type=0x6) returned 0x8a01c2
[0229.040] SaveDC (hdc=0xad0107ba) returned 2
[0229.040] GetNearestColor (hdc=0xad0107ba, color=0xff) returned 0xff
[0229.040] CreateSolidBrush (color=0xff) returned 0xcb10078d
[0229.040] FillRect (hDC=0xad0107ba, lprc=0x53ddb8, hbr=0xcb10078d) returned 1
[0229.040] DeleteObject (ho=0xcb10078d) returned 1
[0229.041] RestoreDC (hdc=0xad0107ba, nSavedDC=-1) returned 1
[0229.041] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0229.041] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0229.041] GetSystemMetrics (nIndex=42) returned 0
[0229.041] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0229.041] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0229.041] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0229.041] GetCurrentObject (hdc=0xad0107ba, type=0x1) returned 0xb00017
[0229.041] GetCurrentObject (hdc=0xad0107ba, type=0x2) returned 0x900010
[0229.041] GetCurrentObject (hdc=0xad0107ba, type=0x7) returned 0x1e0507b9
[0229.041] GetCurrentObject (hdc=0xad0107ba, type=0x6) returned 0x8a01c2
[0229.041] SaveDC (hdc=0xad0107ba) returned 2
[0229.041] GetNearestColor (hdc=0xad0107ba, color=0xff) returned 0xff
[0229.041] CreateSolidBrush (color=0xff) returned 0xcc10078d
[0229.041] FillRect (hDC=0xad0107ba, lprc=0x53dd58, hbr=0xcc10078d) returned 1
[0229.041] DeleteObject (ho=0xcc10078d) returned 1
[0229.042] RestoreDC (hdc=0xad0107ba, nSavedDC=-1) returned 1
[0229.042] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0229.042] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0229.042] GetSystemMetrics (nIndex=42) returned 0
[0229.042] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0229.042] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0229.042] RestoreDC (hdc=0xad0107ba, nSavedDC=-1) returned 1
[0229.042] GdipReleaseDC (graphics=0x5d92c30, hdc=0xad0107ba) returned 0x0
[0229.042] IsAppThemed () returned 0x1
[0229.042] GetThemeAppProperties () returned 0x3
[0229.042] GetThemeAppProperties () returned 0x3
[0229.042] IsAppThemed () returned 0x1
[0229.042] GetThemeAppProperties () returned 0x3
[0229.043] GetThemeAppProperties () returned 0x3
[0229.043] IsThemePartDefined () returned 0x1
[0229.043] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0229.043] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.043] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0229.043] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.043] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0229.043] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0229.043] LocalFree (hMem=0x89ea88) returned 0x0
[0229.043] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0229.043] LocalFree (hMem=0x89eee8) returned 0x0
[0229.043] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.043] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0229.043] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0229.043] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0229.043] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.043] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0229.043] GetCurrentObject (hdc=0xad0107ba, type=0x1) returned 0xb00017
[0229.043] GetCurrentObject (hdc=0xad0107ba, type=0x2) returned 0x900010
[0229.043] GetCurrentObject (hdc=0xad0107ba, type=0x7) returned 0x1e0507b9
[0229.044] GetCurrentObject (hdc=0xad0107ba, type=0x6) returned 0x8a01c2
[0229.044] SaveDC (hdc=0xad0107ba) returned 1
[0229.044] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe104051e
[0229.044] GetClipRgn (hdc=0xad0107ba, hrgn=0xe104051e) returned 0
[0229.044] SelectClipRgn (hdc=0xad0107ba, hrgn=0xbd04053e) returned 2
[0229.044] DeleteObject (ho=0xe104051e) returned 1
[0229.044] DeleteObject (ho=0xbd04053e) returned 1
[0229.044] OffsetViewportOrgEx (in: hdc=0xad0107ba, x=0, y=0, lppt=0x23aad40 | out: lppt=0x23aad40) returned 1
[0229.044] IsAppThemed () returned 0x1
[0229.044] GetThemeAppProperties () returned 0x3
[0229.044] GetThemeAppProperties () returned 0x3
[0229.044] DrawThemeBackground () returned 0x0
[0229.044] RestoreDC (hdc=0xad0107ba, nSavedDC=-1) returned 1
[0229.044] GdipReleaseDC (graphics=0x5d92c30, hdc=0xad0107ba) returned 0x0
[0229.044] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0229.044] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.045] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0229.045] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.045] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0229.045] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0229.045] LocalFree (hMem=0x89ee08) returned 0x0
[0229.045] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0229.045] LocalFree (hMem=0x89ec80) returned 0x0
[0229.045] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.045] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0229.045] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0229.045] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0229.045] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.045] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0229.045] GetCurrentObject (hdc=0xad0107ba, type=0x1) returned 0xb00017
[0229.045] GetCurrentObject (hdc=0xad0107ba, type=0x2) returned 0x900010
[0229.045] GetCurrentObject (hdc=0xad0107ba, type=0x7) returned 0x1e0507b9
[0229.045] GetCurrentObject (hdc=0xad0107ba, type=0x6) returned 0x8a01c2
[0229.045] SaveDC (hdc=0xad0107ba) returned 1
[0229.045] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbe04053e
[0229.046] GetClipRgn (hdc=0xad0107ba, hrgn=0xbe04053e) returned 0
[0229.046] SelectClipRgn (hdc=0xad0107ba, hrgn=0xe204051e) returned 2
[0229.046] DeleteObject (ho=0xbe04053e) returned 1
[0229.046] DeleteObject (ho=0xe204051e) returned 1
[0229.046] OffsetViewportOrgEx (in: hdc=0xad0107ba, x=0, y=0, lppt=0x23ab014 | out: lppt=0x23ab014) returned 1
[0229.046] IsAppThemed () returned 0x1
[0229.046] GetThemeAppProperties () returned 0x3
[0229.046] GetThemeAppProperties () returned 0x3
[0229.046] GetThemeBackgroundContentRect () returned 0x0
[0229.046] RestoreDC (hdc=0xad0107ba, nSavedDC=-1) returned 1
[0229.046] GdipReleaseDC (graphics=0x5d92c30, hdc=0xad0107ba) returned 0x0
[0229.046] IsAppThemed () returned 0x1
[0229.046] GetThemeAppProperties () returned 0x3
[0229.046] GetThemeAppProperties () returned 0x3
[0229.046] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0229.046] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0229.046] GetCurrentObject (hdc=0xad0107ba, type=0x1) returned 0xb00017
[0229.046] GetCurrentObject (hdc=0xad0107ba, type=0x2) returned 0x900010
[0229.046] GetCurrentObject (hdc=0xad0107ba, type=0x7) returned 0x1e0507b9
[0229.046] GetCurrentObject (hdc=0xad0107ba, type=0x6) returned 0x8a01c2
[0229.047] SaveDC (hdc=0xad0107ba) returned 1
[0229.047] GetTextAlign (hdc=0xad0107ba) returned 0x0
[0229.047] GetTextColor (hdc=0xad0107ba) returned 0x0
[0229.047] GetCurrentObject (hdc=0xad0107ba, type=0x6) returned 0x8a01c2
[0229.047] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0229.047] SelectObject (hdc=0xad0107ba, h=0x450a0799) returned 0x8a01c2
[0229.047] GetBkMode (hdc=0xad0107ba) returned 2
[0229.047] SetBkMode (hdc=0xad0107ba, mode=1) returned 2
[0229.047] DrawTextExW (in: hdc=0xad0107ba, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x23ab3b4 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0229.047] DrawTextExW (in: hdc=0xad0107ba, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x23ab3b4 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0229.048] RestoreDC (hdc=0xad0107ba, nSavedDC=-1) returned 1
[0229.048] GdipReleaseDC (graphics=0x5d92c30, hdc=0xad0107ba) returned 0x0
[0229.048] GetFocus () returned 0x202c6
[0229.048] IsAppThemed () returned 0x1
[0229.048] GetThemeAppProperties () returned 0x3
[0229.048] GetThemeAppProperties () returned 0x3
[0229.048] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0229.048] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xad0107ba, x1=0, y1=0, rop=0xcc0020) returned 1
[0229.049] GdipReleaseDC (graphics=0x5d92c30, hdc=0xad0107ba) returned 0x0
[0229.049] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0229.049] SelectObject (hdc=0xad0107ba, h=0x85000f) returned 0x1e0507b9
[0229.049] DeleteDC (hdc=0xad0107ba) returned 1
[0229.049] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0229.049] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0229.049] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23ab4b0, cPoints=0x1 | out: lpPoints=0x23ab4b0) returned 25690608
[0229.049] WindowFromPoint (Point=0x230) returned 0x202c6
[0229.049] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19f0230) returned 0x1
[0229.049] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0229.050] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0229.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.051] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0229.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.052] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0229.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.053] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0229.053] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0229.053] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e888) returned 0x0
[0229.054] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0229.054] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0229.054] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0229.054] GetSystemMetrics (nIndex=5) returned 1
[0229.054] GetSystemMetrics (nIndex=6) returned 1
[0229.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.054] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0229.055] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.055] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0229.121] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.121] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0229.121] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.122] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0229.122] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.122] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0229.122] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.122] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0229.123] GetSystemMetrics (nIndex=5) returned 1
[0229.123] GetSystemMetrics (nIndex=6) returned 1
[0229.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.123] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0229.123] GetSystemMetrics (nIndex=5) returned 1
[0229.123] GetSystemMetrics (nIndex=6) returned 1
[0229.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.123] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0229.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.124] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0229.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.124] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0229.125] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.125] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0229.125] GetSystemMetrics (nIndex=59) returned 1460
[0229.125] GetSystemMetrics (nIndex=60) returned 920
[0229.125] GetSystemMetrics (nIndex=34) returned 136
[0229.125] GetSystemMetrics (nIndex=35) returned 39
[0229.125] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.125] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0229.125] GetCurrentThreadId () returned 0x11d0
[0229.125] GetCurrentThreadId () returned 0x11d0
[0229.125] GetCurrentThreadId () returned 0x11d0
[0229.125] GetCurrentThreadId () returned 0x11d0
[0229.125] GetCurrentThreadId () returned 0x11d0
[0229.125] GetCurrentThreadId () returned 0x11d0
[0229.125] GetCurrentThreadId () returned 0x11d0
[0229.126] GetCurrentThreadId () returned 0x11d0
[0229.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.126] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0229.126] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0229.126] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0229.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.127] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0229.127] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.127] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0229.127] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x401e2
[0229.128] SetWindowLongW (hWnd=0x401e2, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0229.128] GetWindowLongW (hWnd=0x401e2, nIndex=-4) returned 1950089536
[0229.128] SetWindowLongW (hWnd=0x401e2, nIndex=-4, dwNewLong=79645998) returned 1950089536
[0229.128] GetWindowLongW (hWnd=0x401e2, nIndex=-4) returned 79645998
[0229.128] GetWindowLongW (hWnd=0x401e2, nIndex=-16) returned 113311744
[0229.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x401e2, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0229.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x401e2, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0229.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x401e2, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0229.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x401e2, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0229.130] GetClientRect (in: hWnd=0x401e2, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0229.131] GetWindowRect (in: hWnd=0x401e2, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0229.131] SetWindowTextW (hWnd=0x401e2, lpString="WindowsFormsParkingWindow") returned 1
[0229.131] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x401e2, Msg=0xc, wParam=0x0, lParam=0x23a33fc) returned 0x1
[0229.132] GetParent (hWnd=0x401e2) returned 0x0
[0229.132] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0229.132] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x401e2, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x500ea
[0229.133] SetWindowLongW (hWnd=0x500ea, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0229.133] GetWindowLongW (hWnd=0x500ea, nIndex=-4) returned 1868147648
[0229.133] SetWindowLongW (hWnd=0x500ea, nIndex=-4, dwNewLong=79646038) returned 1868147648
[0229.133] GetWindowLongW (hWnd=0x500ea, nIndex=-4) returned 79646038
[0229.133] GetWindowLongW (hWnd=0x500ea, nIndex=-16) returned 1174405133
[0229.133] GetWindowLongW (hWnd=0x500ea, nIndex=-12) returned 0
[0229.133] SetWindowLongW (hWnd=0x500ea, nIndex=-12, dwNewLong=327914) returned 0
[0229.133] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0229.134] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0229.134] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0229.135] GetClientRect (in: hWnd=0x500ea, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0229.135] GetWindowRect (in: hWnd=0x500ea, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0229.135] GetParent (hWnd=0x500ea) returned 0x401e2
[0229.135] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401e2, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0229.135] SetWindowTextW (hWnd=0x500ea, lpString="Enter password: ") returned 1
[0229.135] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0229.136] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0229.136] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0229.136] GetClientRect (in: hWnd=0x500ea, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0229.136] GetWindowRect (in: hWnd=0x500ea, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0229.136] GetParent (hWnd=0x500ea) returned 0x401e2
[0229.136] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401e2, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0229.136] SendMessageW (hWnd=0x500ea, Msg=0x2210, wParam=0xea0001, lParam=0x500ea) returned 0x0
[0229.136] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x2210, wParam=0xea0001, lParam=0x500ea) returned 0x0
[0229.136] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0229.137] GetParent (hWnd=0x500ea) returned 0x401e2
[0229.137] GdipCreateFromHWND (hwnd=0x500ea, graphics=0x53e994) returned 0x0
[0229.137] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0229.137] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0229.137] GetProcessWindowStation () returned 0x13c
[0229.137] GetCapture () returned 0x202c6
[0229.137] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0229.138] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0229.138] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0229.138] ReleaseCapture () returned 1
[0229.138] GetActiveWindow () returned 0x70036
[0229.138] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0229.138] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.139] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0229.139] GetCursorPos (in: lpPoint=0x23b8260 | out: lpPoint=0x23b8260*(x=560, y=415)) returned 1
[0229.139] MonitorFromPoint (pt=0x230, dwFlags=0x19f) returned 0x10001
[0229.139] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0229.139] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xb00107ba
[0229.139] GetDeviceCaps (hdc=0xb00107ba, index=12) returned 32
[0229.139] GetDeviceCaps (hdc=0xb00107ba, index=14) returned 1
[0229.139] DeleteDC (hdc=0xb00107ba) returned 1
[0229.139] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0229.140] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0229.140] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x40122
[0229.140] SetWindowLongW (hWnd=0x40122, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0229.140] GetWindowLongW (hWnd=0x40122, nIndex=-4) returned 1950089536
[0229.141] SetWindowLongW (hWnd=0x40122, nIndex=-4, dwNewLong=79646358) returned 1950089536
[0229.141] GetWindowLongW (hWnd=0x40122, nIndex=-4) returned 79646358
[0229.141] GetWindowLongW (hWnd=0x40122, nIndex=-16) returned 113770496
[0229.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0229.142] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0229.143] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0229.143] GetClientRect (in: hWnd=0x40122, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0229.143] GetWindowRect (in: hWnd=0x40122, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0229.143] SetWindowTextW (hWnd=0x40122, lpString="Ransomware") returned 1
[0229.143] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xc, wParam=0x0, lParam=0x23ab578) returned 0x1
[0229.144] GetStartupInfoW (in: lpStartupInfo=0x23b859c | out: lpStartupInfo=0x23b859c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0229.145] GetParent (hWnd=0x40122) returned 0x0
[0229.145] SetWindowLongW (hWnd=0x40122, nIndex=-8, dwNewLong=0) returned 0
[0229.146] SendMessageW (hWnd=0x40122, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0229.147] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0229.147] SendMessageW (hWnd=0x40122, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0229.147] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0229.147] GetSystemMenu (hWnd=0x40122, bRevert=0) returned 0x42021b
[0229.147] GetWindowPlacement (in: hWnd=0x40122, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0229.148] EnableMenuItem (hMenu=0x42021b, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0229.148] EnableMenuItem (hMenu=0x42021b, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0229.148] EnableMenuItem (hMenu=0x42021b, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0229.148] EnableMenuItem (hMenu=0x42021b, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0229.148] EnableMenuItem (hMenu=0x42021b, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0229.148] GetClientRect (in: hWnd=0x40122, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0229.148] GetClientRect (in: hWnd=0x40122, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0229.148] GetWindowRect (in: hWnd=0x40122, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0229.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.149] GetWindowLongW (hWnd=0x40122, nIndex=-16) returned 113770496
[0229.149] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.149] GetSystemMetrics (nIndex=42) returned 0
[0229.149] GetWindowTextW (in: hWnd=0x40122, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0229.149] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.149] GetSystemMetrics (nIndex=42) returned 0
[0229.149] GetWindowTextW (in: hWnd=0x40122, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0229.149] GetCursorPos (in: lpPoint=0x23b8710 | out: lpPoint=0x23b8710*(x=560, y=415)) returned 1
[0229.149] MonitorFromPoint (pt=0x233, dwFlags=0x1a0) returned 0x10001
[0229.149] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0229.149] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xb40107ba
[0229.150] GetDeviceCaps (hdc=0xb40107ba, index=12) returned 32
[0229.150] GetDeviceCaps (hdc=0xb40107ba, index=14) returned 1
[0229.150] DeleteDC (hdc=0xb40107ba) returned 1
[0229.150] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0229.150] GetWindowLongW (hWnd=0x40122, nIndex=-16) returned 113770496
[0229.150] GetWindowLongW (hWnd=0x40122, nIndex=-20) returned 327937
[0229.150] SetWindowLongW (hWnd=0x40122, nIndex=-16, dwNewLong=46661632) returned 113770496
[0229.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0229.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0229.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0229.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0229.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0229.152] SetWindowLongW (hWnd=0x40122, nIndex=-20, dwNewLong=327681) returned 327937
[0229.152] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0229.152] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0229.153] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0229.153] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0229.153] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0229.153] SetWindowPos (hWnd=0x40122, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0229.154] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0229.154] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0229.154] GetWindowPlacement (in: hWnd=0x40122, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0229.154] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0229.154] GetClientRect (in: hWnd=0x40122, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0229.154] GetWindowRect (in: hWnd=0x40122, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0229.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0229.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0229.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0229.156] RedrawWindow (hWnd=0x40122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0229.156] GetSystemMenu (hWnd=0x40122, bRevert=0) returned 0x42021b
[0229.156] GetWindowPlacement (in: hWnd=0x40122, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0229.156] EnableMenuItem (hMenu=0x42021b, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0229.156] EnableMenuItem (hMenu=0x42021b, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0229.156] EnableMenuItem (hMenu=0x42021b, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0229.156] EnableMenuItem (hMenu=0x42021b, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0229.156] EnableMenuItem (hMenu=0x42021b, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0229.156] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0229.156] GetWindowLongW (hWnd=0x40122, nIndex=-8) returned 0
[0229.156] SetWindowLongW (hWnd=0x40122, nIndex=-8, dwNewLong=458806) returned 0
[0229.158] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0229.158] GetProcessWindowStation () returned 0x13c
[0229.158] GetCurrentThreadId () returned 0x11d0
[0229.158] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4f0e, lParam=0x0) returned 1
[0229.158] IsWindowVisible (hWnd=0x40122) returned 0
[0229.158] IsWindowVisible (hWnd=0x70036) returned 1
[0229.158] IsWindowEnabled (hWnd=0x70036) returned 1
[0229.159] IsWindowVisible (hWnd=0x602b6) returned 0
[0229.159] IsWindowVisible (hWnd=0x901f8) returned 0
[0229.159] IsWindowVisible (hWnd=0x202d0) returned 0
[0229.159] IsWindowVisible (hWnd=0x202d4) returned 0
[0229.159] GetActiveWindow () returned 0x70036
[0229.159] GetFocus () returned 0x202c6
[0229.159] IsWindow (hWnd=0x70036) returned 1
[0229.159] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0229.159] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0229.160] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0229.160] GetWindowLongW (hWnd=0x40122, nIndex=-8) returned 458806
[0229.160] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0229.160] GetCurrentThreadId () returned 0x11d0
[0229.160] GetWindowLongW (hWnd=0x40122, nIndex=-8) returned 458806
[0229.160] IsWindowEnabled (hWnd=0x70036) returned 0
[0229.160] IsWindowEnabled (hWnd=0x40122) returned 1
[0229.160] ShowWindow (hWnd=0x40122, nCmdShow=5) returned 0
[0229.160] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0229.160] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0229.160] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.161] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0229.161] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x40122, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1f013e
[0229.161] SetWindowLongW (hWnd=0x1f013e, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0229.161] GetWindowLongW (hWnd=0x1f013e, nIndex=-4) returned 1868026976
[0229.162] SetWindowLongW (hWnd=0x1f013e, nIndex=-4, dwNewLong=79646078) returned 1868026976
[0229.162] GetWindowLongW (hWnd=0x1f013e, nIndex=-4) returned 79646078
[0229.162] GetWindowLongW (hWnd=0x1f013e, nIndex=-16) returned 1174470848
[0229.162] GetWindowLongW (hWnd=0x1f013e, nIndex=-12) returned 0
[0229.162] SetWindowLongW (hWnd=0x1f013e, nIndex=-12, dwNewLong=2031934) returned 0
[0229.162] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0229.163] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0229.164] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0229.165] SendMessageW (hWnd=0x1f013e, Msg=0x2055, wParam=0x1f013e, lParam=0x3) returned 0x2
[0229.165] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0229.165] GetWindow (hWnd=0x1f013e, uCmd=0x3) returned 0x0
[0229.165] GetClientRect (in: hWnd=0x1f013e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0229.165] GetWindowRect (in: hWnd=0x1f013e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0229.165] GetParent (hWnd=0x1f013e) returned 0x40122
[0229.165] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40122, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0229.165] SendMessageW (hWnd=0x1f013e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0229.165] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0229.165] SendMessageW (hWnd=0x1f013e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0229.165] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0229.166] GetSystemMetrics (nIndex=5) returned 1
[0229.166] GetSystemMetrics (nIndex=6) returned 1
[0229.166] SendMessageW (hWnd=0x1f013e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0229.166] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0229.166] SendMessageW (hWnd=0x1f013e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0229.166] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0229.166] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0229.167] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0229.167] GetClientRect (in: hWnd=0x1f013e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0229.167] GetWindowRect (in: hWnd=0x1f013e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0229.167] GetParent (hWnd=0x1f013e) returned 0x40122
[0229.167] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40122, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0229.167] SendMessageW (hWnd=0x1f013e, Msg=0x2210, wParam=0x13e0001, lParam=0x1f013e) returned 0x0
[0229.167] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x2210, wParam=0x13e0001, lParam=0x1f013e) returned 0x0
[0229.167] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0229.167] GetParent (hWnd=0x1f013e) returned 0x40122
[0229.167] GetParent (hWnd=0x500ea) returned 0x401e2
[0229.167] SetParent (hWndChild=0x500ea, hWndNewParent=0x40122) returned 0x401e2
[0229.167] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0229.168] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0229.168] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0229.168] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0229.169] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0229.169] GetClientRect (in: hWnd=0x500ea, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0229.169] GetWindowRect (in: hWnd=0x500ea, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0229.169] GetParent (hWnd=0x500ea) returned 0x40122
[0229.169] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40122, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0229.169] GetClientRect (in: hWnd=0x500ea, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0229.169] GetWindowRect (in: hWnd=0x500ea, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0229.169] GetParent (hWnd=0x500ea) returned 0x40122
[0229.169] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40122, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0229.169] GetParent (hWnd=0x500ea) returned 0x40122
[0229.169] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0229.169] GetWindow (hWnd=0x500ea, uCmd=0x3) returned 0x0
[0229.169] SetWindowPos (hWnd=0x500ea, hWndInsertAfter=0x1f013e, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0229.169] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0229.170] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0229.170] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0229.170] GetClientRect (in: hWnd=0x500ea, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0229.170] GetWindowRect (in: hWnd=0x500ea, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0229.170] GetParent (hWnd=0x500ea) returned 0x40122
[0229.170] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40122, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0229.170] GetParent (hWnd=0x500ea) returned 0x40122
[0229.170] GetWindow (hWnd=0x500ea, uCmd=0x3) returned 0x1f013e
[0229.170] GetWindowThreadProcessId (in: hWnd=0x500ea, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0229.171] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0229.171] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.171] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0229.172] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x40122, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1a02d6
[0229.172] SetWindowLongW (hWnd=0x1a02d6, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0229.172] GetWindowLongW (hWnd=0x1a02d6, nIndex=-4) returned 1868032000
[0229.172] SetWindowLongW (hWnd=0x1a02d6, nIndex=-4, dwNewLong=79645798) returned 1868032000
[0229.173] GetWindowLongW (hWnd=0x1a02d6, nIndex=-4) returned 79645798
[0229.173] GetWindowLongW (hWnd=0x1a02d6, nIndex=-16) returned 1174470667
[0229.173] GetWindowLongW (hWnd=0x1a02d6, nIndex=-12) returned 0
[0229.173] SetWindowLongW (hWnd=0x1a02d6, nIndex=-12, dwNewLong=1704662) returned 0
[0229.173] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0229.173] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0229.174] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0229.175] SendMessageW (hWnd=0x1a02d6, Msg=0x2055, wParam=0x1a02d6, lParam=0x3) returned 0x2
[0229.175] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0229.175] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0229.175] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0229.175] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0229.175] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0229.175] RedrawWindow (hWnd=0x1f013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0229.175] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0229.175] RedrawWindow (hWnd=0x500ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0229.175] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0229.175] RedrawWindow (hWnd=0x1a02d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0229.176] RedrawWindow (hWnd=0x40122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0229.176] GetWindow (hWnd=0x1a02d6, uCmd=0x3) returned 0x500ea
[0229.176] GetClientRect (in: hWnd=0x1a02d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0229.176] GetWindowRect (in: hWnd=0x1a02d6, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0229.176] GetParent (hWnd=0x1a02d6) returned 0x40122
[0229.176] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40122, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0229.176] SetWindowTextW (hWnd=0x1a02d6, lpString="OK") returned 1
[0229.176] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0xc, wParam=0x0, lParam=0x23afa38) returned 0x1
[0229.177] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0229.177] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0229.177] GetClientRect (in: hWnd=0x1a02d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0229.177] GetWindowRect (in: hWnd=0x1a02d6, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0229.177] GetParent (hWnd=0x1a02d6) returned 0x40122
[0229.177] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40122, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0229.177] SendMessageW (hWnd=0x1a02d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1a02d6) returned 0x0
[0229.177] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1a02d6) returned 0x0
[0229.177] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0229.178] GetParent (hWnd=0x1a02d6) returned 0x40122
[0229.178] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0229.179] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.179] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0229.179] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x40122, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xf02c0
[0229.180] SetWindowLongW (hWnd=0xf02c0, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0229.180] GetWindowLongW (hWnd=0xf02c0, nIndex=-4) returned 1868032000
[0229.180] SetWindowLongW (hWnd=0xf02c0, nIndex=-4, dwNewLong=79646198) returned 1868032000
[0229.180] GetWindowLongW (hWnd=0xf02c0, nIndex=-4) returned 79646198
[0229.180] GetWindowLongW (hWnd=0xf02c0, nIndex=-16) returned 1174470667
[0229.180] GetWindowLongW (hWnd=0xf02c0, nIndex=-12) returned 0
[0229.180] SetWindowLongW (hWnd=0xf02c0, nIndex=-12, dwNewLong=983744) returned 0
[0229.180] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0229.181] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0229.181] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0229.183] SendMessageW (hWnd=0xf02c0, Msg=0x2055, wParam=0xf02c0, lParam=0x3) returned 0x2
[0229.183] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0229.183] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0229.183] GetWindow (hWnd=0xf02c0, uCmd=0x3) returned 0x1a02d6
[0229.183] GetClientRect (in: hWnd=0xf02c0, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0229.183] GetWindowRect (in: hWnd=0xf02c0, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0229.183] GetParent (hWnd=0xf02c0) returned 0x40122
[0229.183] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40122, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0229.183] SetWindowTextW (hWnd=0xf02c0, lpString="Cancel") returned 1
[0229.183] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0xc, wParam=0x0, lParam=0x23b32f8) returned 0x1
[0229.184] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0229.184] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0229.184] GetClientRect (in: hWnd=0xf02c0, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0229.185] GetWindowRect (in: hWnd=0xf02c0, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0229.185] GetParent (hWnd=0xf02c0) returned 0x40122
[0229.185] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40122, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0229.185] SendMessageW (hWnd=0xf02c0, Msg=0x2210, wParam=0x2c00001, lParam=0xf02c0) returned 0x0
[0229.185] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0x2210, wParam=0x2c00001, lParam=0xf02c0) returned 0x0
[0229.185] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0229.185] GetParent (hWnd=0xf02c0) returned 0x40122
[0229.185] GetDC (hWnd=0x0) returned 0x60100ce
[0229.185] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e320) returned 0x0
[0229.186] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0229.186] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0229.186] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0229.186] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0229.186] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0229.187] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0229.187] GetWindowLongW (hWnd=0x40122, nIndex=-8) returned 458806
[0229.187] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0229.187] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0229.187] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xbb0107ba
[0229.187] GetDeviceCaps (hdc=0xbb0107ba, index=12) returned 32
[0229.187] GetDeviceCaps (hdc=0xbb0107ba, index=14) returned 1
[0229.187] DeleteDC (hdc=0xbb0107ba) returned 1
[0229.187] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0229.187] GetWindowThreadProcessId (in: hWnd=0x40122, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0229.187] GetCurrentThreadId () returned 0x11d0
[0229.187] PostMessageW (hWnd=0x40122, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0229.188] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.188] GetSystemMetrics (nIndex=42) returned 0
[0229.188] GetWindowTextW (in: hWnd=0x40122, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0229.188] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0229.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0229.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0229.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0229.200] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x40122) returned 0x1
[0229.202] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0229.202] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0229.202] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0229.202] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0229.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0229.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0229.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0229.205] GetFocus () returned 0x202c6
[0229.205] IsChild (hWndParent=0x40122, hWnd=0x202c6) returned 0
[0229.205] GetFocus () returned 0x202c6
[0229.205] SetFocus (hWnd=0x1f013e) returned 0x202c6
[0229.206] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1f013e, lParam=0x0) returned 0x0
[0229.207] GetCapture () returned 0x0
[0229.207] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0229.207] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0229.208] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0229.210] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0229.210] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0229.210] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0229.210] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0229.211] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0229.211] GetParent (hWnd=0x40122) returned 0x0
[0229.211] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0229.212] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0229.212] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0229.212] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0229.212] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0229.212] GetSysColorBrush (nIndex=5) returned 0x100079
[0229.213] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0229.213] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0229.214] SendMessageW (hWnd=0x1f013e, Msg=0x2111, wParam=0x100013e, lParam=0x1f013e) returned 0x0
[0229.214] SendMessageW (hWnd=0x1f013e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0229.214] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0229.214] GetKeyState (nVirtKey=1) returned 0
[0229.214] GetKeyState (nVirtKey=2) returned 0
[0229.214] GetKeyState (nVirtKey=4) returned 0
[0229.214] GetKeyState (nVirtKey=5) returned 0
[0229.214] GetKeyState (nVirtKey=6) returned 0
[0229.215] GetWindowTextLengthW (hWnd=0x1f013e) returned 0
[0229.215] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0229.215] SendMessageW (hWnd=0x1f013e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0229.215] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0229.215] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0229.215] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0229.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0229.219] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0229.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0229.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0229.220] GetWindowPlacement (in: hWnd=0x40122, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0229.220] GetClientRect (in: hWnd=0x40122, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0229.220] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.220] GetSystemMetrics (nIndex=42) returned 0
[0229.220] GetWindowTextW (in: hWnd=0x40122, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0229.221] GetClientRect (in: hWnd=0x40122, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0229.221] GetCurrentObject (hdc=0xf0105ee, type=0x1) returned 0xb00017
[0229.221] GetCurrentObject (hdc=0xf0105ee, type=0x2) returned 0x900010
[0229.221] GetCurrentObject (hdc=0xf0105ee, type=0x7) returned 0xffffffffff050535
[0229.221] GetCurrentObject (hdc=0xf0105ee, type=0x6) returned 0x8a01c2
[0229.221] SaveDC (hdc=0xf0105ee) returned 1
[0229.221] GetNearestColor (hdc=0xf0105ee, color=0xf0f0f0) returned 0xf0f0f0
[0229.221] CreateSolidBrush (color=0xf0f0f0) returned 0xcd10078d
[0229.221] FillRect (hDC=0xf0105ee, lprc=0x53e250, hbr=0xcd10078d) returned 1
[0229.221] DeleteObject (ho=0xcd10078d) returned 1
[0229.221] RestoreDC (hdc=0xf0105ee, nSavedDC=-1) returned 1
[0229.221] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0229.221] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0229.221] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0229.222] GetWindowPlacement (in: hWnd=0x40122, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0229.222] GetClientRect (in: hWnd=0x40122, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0229.222] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.222] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.222] GetSystemMetrics (nIndex=42) returned 0
[0229.222] GetWindowTextW (in: hWnd=0x40122, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.222] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0229.222] GetClientRect (in: hWnd=0x40122, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0229.222] GetCurrentObject (hdc=0xd10107ba, type=0x1) returned 0xb00017
[0229.223] GetCurrentObject (hdc=0xd10107ba, type=0x2) returned 0x900010
[0229.223] GetCurrentObject (hdc=0xd10107ba, type=0x7) returned 0xfffffffff90507c4
[0229.223] GetCurrentObject (hdc=0xd10107ba, type=0x6) returned 0x8a01c2
[0229.223] SaveDC (hdc=0xd10107ba) returned 1
[0229.223] GetNearestColor (hdc=0xd10107ba, color=0xf0f0f0) returned 0xf0f0f0
[0229.223] CreateSolidBrush (color=0xf0f0f0) returned 0xce10078d
[0229.223] FillRect (hDC=0xd10107ba, lprc=0x53dc18, hbr=0xce10078d) returned 1
[0229.223] DeleteObject (ho=0xce10078d) returned 1
[0229.223] RestoreDC (hdc=0xd10107ba, nSavedDC=-1) returned 1
[0229.223] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.223] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.223] GetSystemMetrics (nIndex=42) returned 0
[0229.223] GetWindowTextW (in: hWnd=0x40122, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.223] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0229.223] GetClientRect (in: hWnd=0x40122, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0229.223] GetCurrentObject (hdc=0xd10107ba, type=0x1) returned 0xb00017
[0229.223] GetCurrentObject (hdc=0xd10107ba, type=0x2) returned 0x900010
[0229.223] GetCurrentObject (hdc=0xd10107ba, type=0x7) returned 0xfffffffff90507c4
[0229.223] GetCurrentObject (hdc=0xd10107ba, type=0x6) returned 0x8a01c2
[0229.223] SaveDC (hdc=0xd10107ba) returned 1
[0229.224] GetNearestColor (hdc=0xd10107ba, color=0xf0f0f0) returned 0xf0f0f0
[0229.224] CreateSolidBrush (color=0xf0f0f0) returned 0xcf10078d
[0229.224] FillRect (hDC=0xd10107ba, lprc=0x53dbb8, hbr=0xcf10078d) returned 1
[0229.224] DeleteObject (ho=0xcf10078d) returned 1
[0229.224] RestoreDC (hdc=0xd10107ba, nSavedDC=-1) returned 1
[0229.224] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.224] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.224] GetSystemMetrics (nIndex=42) returned 0
[0229.224] GetWindowTextW (in: hWnd=0x40122, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.224] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0229.232] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0229.232] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0229.232] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0229.232] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0229.232] GetStockObject (i=5) returned 0x900015
[0229.232] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0229.233] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0229.233] GetStockObject (i=5) returned 0x900015
[0229.233] GetWindowPlacement (in: hWnd=0x40122, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0229.233] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0229.233] GetClientRect (in: hWnd=0x40122, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0229.233] GetWindowRect (in: hWnd=0x40122, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0229.234] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0229.234] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0229.234] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0229.235] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0229.235] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0229.235] GetClientRect (in: hWnd=0x40122, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0229.235] GetWindowRect (in: hWnd=0x40122, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0229.235] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.235] IsWindowUnicode (hWnd=0x40122) returned 1
[0229.235] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.235] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.235] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.235] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0229.235] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.235] IsWindowUnicode (hWnd=0x40122) returned 1
[0229.235] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.235] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.235] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.235] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.236] MapWindowPoints (in: hWndFrom=0x500ea, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0229.236] IsWindowUnicode (hWnd=0x500ea) returned 1
[0229.236] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.236] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.236] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.236] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.236] IsWindowUnicode (hWnd=0x202c6) returned 1
[0229.236] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.236] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.236] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.236] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0229.236] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0229.236] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.237] MapWindowPoints (in: hWndFrom=0x500ea, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0229.237] IsWindowUnicode (hWnd=0x500ea) returned 1
[0229.237] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.237] MapWindowPoints (in: hWndFrom=0x500ea, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0229.237] SetCursor (hCursor=0x10003) returned 0x10003
[0229.237] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.237] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.237] _TrackMouseEvent (in: lpEventTrack=0x23b9c8c | out: lpEventTrack=0x23b9c8c) returned 1
[0229.237] SendMessageW (hWnd=0x500ea, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0229.237] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0229.237] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x200, wParam=0x0, lParam=0x180007) returned 0x0
[0229.237] GetKeyState (nVirtKey=1) returned 0
[0229.237] GetKeyState (nVirtKey=2) returned 0
[0229.237] GetKeyState (nVirtKey=4) returned 0
[0229.237] GetKeyState (nVirtKey=5) returned 0
[0229.237] GetKeyState (nVirtKey=6) returned 0
[0229.237] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.238] IsWindowUnicode (hWnd=0x40122) returned 1
[0229.238] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.238] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.238] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.238] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.239] IsWindowUnicode (hWnd=0x40122) returned 1
[0229.239] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.239] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.239] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.239] BeginPaint (in: hWnd=0x40122, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x8b010786
[0229.239] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0229.239] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.239] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.239] GetSystemMetrics (nIndex=42) returned 0
[0229.239] GetWindowTextW (in: hWnd=0x40122, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.239] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0229.239] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0229.239] EndPaint (hWnd=0x40122, lpPaint=0x53e30c) returned 1
[0229.239] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.239] IsWindowUnicode (hWnd=0x1f013e) returned 1
[0229.239] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.240] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.240] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0229.240] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0229.247] SetTextColor (hdc=0xd20107ba, color=0x0) returned 0x0
[0229.247] SetBkColor (hdc=0xd20107ba, color=0xffffff) returned 0xffffff
[0229.248] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.248] IsWindowUnicode (hWnd=0x500ea) returned 1
[0229.248] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.248] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.248] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.248] BeginPaint (in: hWnd=0x500ea, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x10105d6
[0229.248] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0229.248] CreateCompatibleDC (hdc=0x10105d6) returned 0x2a0107c3
[0229.248] SelectObject (hdc=0x2a0107c3, h=0x1e0507b9) returned 0x85000f
[0229.248] GdipCreateFromHDC (hdc=0x2a0107c3, graphics=0x53e30c) returned 0x0
[0229.249] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0229.249] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0229.249] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0229.249] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.249] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0229.249] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.249] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0229.249] LocalFree (hMem=0x89ee08) returned 0x0
[0229.249] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.249] GdipCreateRegion (region=0x53e354) returned 0x0
[0229.249] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.249] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0229.249] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0229.249] GetWindowTextLengthW (hWnd=0x500ea) returned 16
[0229.249] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0229.249] GetSystemMetrics (nIndex=42) returned 0
[0229.249] GetWindowTextW (in: hWnd=0x500ea, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0229.249] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0229.249] GetClientRect (in: hWnd=0x500ea, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0229.249] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0229.249] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0229.249] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0229.249] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.250] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0229.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.250] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0229.250] LocalFree (hMem=0x89ee08) returned 0x0
[0229.250] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0229.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.250] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0229.250] LocalFree (hMem=0x89ea88) returned 0x0
[0229.250] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.250] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0229.250] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0229.250] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0229.250] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0229.250] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0229.250] GetCurrentObject (hdc=0x2a0107c3, type=0x1) returned 0xb00017
[0229.250] GetCurrentObject (hdc=0x2a0107c3, type=0x2) returned 0x900010
[0229.250] GetCurrentObject (hdc=0x2a0107c3, type=0x7) returned 0x1e0507b9
[0229.250] GetCurrentObject (hdc=0x2a0107c3, type=0x6) returned 0x8a01c2
[0229.250] SaveDC (hdc=0x2a0107c3) returned 1
[0229.250] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfa0407a1
[0229.251] GetClipRgn (hdc=0x2a0107c3, hrgn=0xfa0407a1) returned 0
[0229.251] SelectClipRgn (hdc=0x2a0107c3, hrgn=0xe704051e) returned 2
[0229.251] DeleteObject (ho=0xfa0407a1) returned 1
[0229.251] DeleteObject (ho=0xe704051e) returned 1
[0229.251] OffsetViewportOrgEx (in: hdc=0x2a0107c3, x=0, y=0, lppt=0x23ba170 | out: lppt=0x23ba170) returned 1
[0229.251] GetNearestColor (hdc=0x2a0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0229.251] CreateSolidBrush (color=0xf0f0f0) returned 0xd010078d
[0229.251] FillRect (hDC=0x2a0107c3, lprc=0x53e1f4, hbr=0xd010078d) returned 1
[0229.251] DeleteObject (ho=0xd010078d) returned 1
[0229.251] RestoreDC (hdc=0x2a0107c3, nSavedDC=-1) returned 1
[0229.251] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a0107c3) returned 0x0
[0229.251] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc310dbd) returned 0x0
[0229.251] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.251] GetWindowTextLengthW (hWnd=0x500ea) returned 16
[0229.251] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0229.251] GetSystemMetrics (nIndex=42) returned 0
[0229.251] GetWindowTextW (in: hWnd=0x500ea, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0229.251] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0229.251] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0229.251] GetCurrentObject (hdc=0x2a0107c3, type=0x1) returned 0xb00017
[0229.251] GetCurrentObject (hdc=0x2a0107c3, type=0x2) returned 0x900010
[0229.252] GetCurrentObject (hdc=0x2a0107c3, type=0x7) returned 0x1e0507b9
[0229.252] GetCurrentObject (hdc=0x2a0107c3, type=0x6) returned 0x8a01c2
[0229.252] SaveDC (hdc=0x2a0107c3) returned 1
[0229.252] GetNearestColor (hdc=0x2a0107c3, color=0x0) returned 0x0
[0229.252] RestoreDC (hdc=0x2a0107c3, nSavedDC=-1) returned 1
[0229.252] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a0107c3) returned 0x0
[0229.252] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0229.252] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0229.253] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0229.253] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x23ba478 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0229.253] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0229.253] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0229.253] GetCurrentObject (hdc=0x2a0107c3, type=0x1) returned 0xb00017
[0229.253] GetCurrentObject (hdc=0x2a0107c3, type=0x2) returned 0x900010
[0229.253] GetCurrentObject (hdc=0x2a0107c3, type=0x7) returned 0x1e0507b9
[0229.253] GetCurrentObject (hdc=0x2a0107c3, type=0x6) returned 0x8a01c2
[0229.253] SaveDC (hdc=0x2a0107c3) returned 1
[0229.253] GetTextAlign (hdc=0x2a0107c3) returned 0x0
[0229.253] GetTextColor (hdc=0x2a0107c3) returned 0x0
[0229.253] GetCurrentObject (hdc=0x2a0107c3, type=0x6) returned 0x8a01c2
[0229.253] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0229.253] SelectObject (hdc=0x2a0107c3, h=0x730a066d) returned 0x8a01c2
[0229.253] GetBkMode (hdc=0x2a0107c3) returned 2
[0229.253] SetBkMode (hdc=0x2a0107c3, mode=1) returned 2
[0229.254] DrawTextExW (in: hdc=0x2a0107c3, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x23ba69c | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0229.254] RestoreDC (hdc=0x2a0107c3, nSavedDC=-1) returned 1
[0229.254] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a0107c3) returned 0x0
[0229.254] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0229.254] BitBlt (hdc=0x10105d6, x=0, y=0, cx=250, cy=70, hdcSrc=0x2a0107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0229.254] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a0107c3) returned 0x0
[0229.254] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0229.254] SelectObject (hdc=0x2a0107c3, h=0x85000f) returned 0x1e0507b9
[0229.254] DeleteDC (hdc=0x2a0107c3) returned 1
[0229.254] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0229.254] EndPaint (hWnd=0x500ea, lpPaint=0x53e2f0) returned 1
[0229.255] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.255] IsWindowUnicode (hWnd=0x1a02d6) returned 1
[0229.255] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.255] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.255] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.255] BeginPaint (in: hWnd=0x1a02d6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0229.255] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0229.255] CreateCompatibleDC (hdc=0x60100ce) returned 0x2c0107c3
[0229.255] SelectObject (hdc=0x2c0107c3, h=0x1e0507b9) returned 0x85000f
[0229.255] GdipCreateFromHDC (hdc=0x2c0107c3, graphics=0x53e300) returned 0x0
[0229.255] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0229.255] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0229.255] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0229.261] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.261] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0229.261] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.261] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0229.261] LocalFree (hMem=0x89ee08) returned 0x0
[0229.261] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.261] GdipCreateRegion (region=0x53e348) returned 0x0
[0229.261] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.261] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0229.261] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0229.262] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc2f0dbd) returned 0x0
[0229.262] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.262] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0229.262] GetCurrentObject (hdc=0x2c0107c3, type=0x1) returned 0xb00017
[0229.262] GetCurrentObject (hdc=0x2c0107c3, type=0x2) returned 0x900010
[0229.262] GetCurrentObject (hdc=0x2c0107c3, type=0x7) returned 0x1e0507b9
[0229.262] GetCurrentObject (hdc=0x2c0107c3, type=0x6) returned 0x8a01c2
[0229.262] SaveDC (hdc=0x2c0107c3) returned 1
[0229.262] GetNearestColor (hdc=0x2c0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0229.262] GetNearestColor (hdc=0x2c0107c3, color=0xa0a0a0) returned 0xa0a0a0
[0229.262] GetNearestColor (hdc=0x2c0107c3, color=0x696969) returned 0x696969
[0229.262] GetNearestColor (hdc=0x2c0107c3, color=0xa0a0a0) returned 0xa0a0a0
[0229.262] GetNearestColor (hdc=0x2c0107c3, color=0x0) returned 0x0
[0229.262] GetNearestColor (hdc=0x2c0107c3, color=0xffffff) returned 0xffffff
[0229.262] GetNearestColor (hdc=0x2c0107c3, color=0xe5e5e5) returned 0xe5e5e5
[0229.262] GetNearestColor (hdc=0x2c0107c3, color=0xd7d7d7) returned 0xd7d7d7
[0229.262] GetNearestColor (hdc=0x2c0107c3, color=0x0) returned 0x0
[0229.263] RestoreDC (hdc=0x2c0107c3, nSavedDC=-1) returned 1
[0229.263] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c0107c3) returned 0x0
[0229.263] IsAppThemed () returned 0x1
[0229.263] GetThemeAppProperties () returned 0x3
[0229.263] GetThemeAppProperties () returned 0x3
[0229.263] IsAppThemed () returned 0x1
[0229.263] GetThemeAppProperties () returned 0x3
[0229.263] GetThemeAppProperties () returned 0x3
[0229.263] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x23bae08 | out: lpchText="OK", lprc=0x53e028) returned 13
[0229.263] IsAppThemed () returned 0x1
[0229.263] GetThemeAppProperties () returned 0x3
[0229.263] GetThemeAppProperties () returned 0x3
[0229.263] IsAppThemed () returned 0x1
[0229.264] GetThemeAppProperties () returned 0x3
[0229.264] GetThemeAppProperties () returned 0x3
[0229.264] GetFocus () returned 0x1f013e
[0229.264] IsAppThemed () returned 0x1
[0229.264] GetThemeAppProperties () returned 0x3
[0229.264] GetThemeAppProperties () returned 0x3
[0229.264] IsAppThemed () returned 0x1
[0229.264] GetThemeAppProperties () returned 0x3
[0229.264] GetThemeAppProperties () returned 0x3
[0229.264] IsThemePartDefined () returned 0x1
[0229.264] IsAppThemed () returned 0x1
[0229.264] GetThemeAppProperties () returned 0x3
[0229.264] GetThemeAppProperties () returned 0x3
[0229.264] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0229.264] IsAppThemed () returned 0x1
[0229.264] GetThemeAppProperties () returned 0x3
[0229.264] GetThemeAppProperties () returned 0x3
[0229.264] IsAppThemed () returned 0x1
[0229.264] GetThemeAppProperties () returned 0x3
[0229.264] GetThemeAppProperties () returned 0x3
[0229.264] IsThemePartDefined () returned 0x1
[0229.264] GdipCreateRegion (region=0x53e070) returned 0x0
[0229.264] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.264] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0229.264] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.264] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0229.264] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.264] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0229.265] LocalFree (hMem=0x89ea88) returned 0x0
[0229.265] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.265] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0229.265] LocalFree (hMem=0x89ee08) returned 0x0
[0229.265] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.265] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0229.265] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0229.265] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0229.265] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.265] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0229.265] GetCurrentObject (hdc=0x2c0107c3, type=0x1) returned 0xb00017
[0229.265] GetCurrentObject (hdc=0x2c0107c3, type=0x2) returned 0x900010
[0229.265] GetCurrentObject (hdc=0x2c0107c3, type=0x7) returned 0x1e0507b9
[0229.265] GetCurrentObject (hdc=0x2c0107c3, type=0x6) returned 0x8a01c2
[0229.265] SaveDC (hdc=0x2c0107c3) returned 1
[0229.265] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe804051e
[0229.265] GetClipRgn (hdc=0x2c0107c3, hrgn=0xe804051e) returned 0
[0229.265] SelectClipRgn (hdc=0x2c0107c3, hrgn=0xfe0407a1) returned 2
[0229.265] DeleteObject (ho=0xe804051e) returned 1
[0229.265] DeleteObject (ho=0xfe0407a1) returned 1
[0229.265] OffsetViewportOrgEx (in: hdc=0x2c0107c3, x=0, y=0, lppt=0x23bb4b8 | out: lppt=0x23bb4b8) returned 1
[0229.266] DrawThemeParentBackground () returned 0x0
[0229.266] GetWindowPlacement (in: hWnd=0x40122, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0229.266] GetClientRect (in: hWnd=0x40122, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0229.266] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.266] GetSystemMetrics (nIndex=42) returned 0
[0229.266] GetWindowTextW (in: hWnd=0x40122, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0229.266] GetClientRect (in: hWnd=0x40122, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0229.266] GetCurrentObject (hdc=0x2c0107c3, type=0x1) returned 0xb00017
[0229.266] GetCurrentObject (hdc=0x2c0107c3, type=0x2) returned 0x900010
[0229.266] GetCurrentObject (hdc=0x2c0107c3, type=0x7) returned 0x1e0507b9
[0229.266] GetCurrentObject (hdc=0x2c0107c3, type=0x6) returned 0x8a01c2
[0229.266] SaveDC (hdc=0x2c0107c3) returned 2
[0229.266] GetNearestColor (hdc=0x2c0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0229.266] CreateSolidBrush (color=0xf0f0f0) returned 0xd110078d
[0229.266] FillRect (hDC=0x2c0107c3, lprc=0x53dad0, hbr=0xd110078d) returned 1
[0229.266] DeleteObject (ho=0xd110078d) returned 1
[0229.266] RestoreDC (hdc=0x2c0107c3, nSavedDC=-1) returned 1
[0229.267] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.267] GetSystemMetrics (nIndex=42) returned 0
[0229.267] GetWindowTextW (in: hWnd=0x40122, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0229.267] GetClientRect (in: hWnd=0x40122, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0229.267] GetCurrentObject (hdc=0x2c0107c3, type=0x1) returned 0xb00017
[0229.267] GetCurrentObject (hdc=0x2c0107c3, type=0x2) returned 0x900010
[0229.267] GetCurrentObject (hdc=0x2c0107c3, type=0x7) returned 0x1e0507b9
[0229.267] GetCurrentObject (hdc=0x2c0107c3, type=0x6) returned 0x8a01c2
[0229.267] SaveDC (hdc=0x2c0107c3) returned 2
[0229.267] GetNearestColor (hdc=0x2c0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0229.267] CreateSolidBrush (color=0xf0f0f0) returned 0xd210078d
[0229.267] FillRect (hDC=0x2c0107c3, lprc=0x53da70, hbr=0xd210078d) returned 1
[0229.267] DeleteObject (ho=0xd210078d) returned 1
[0229.267] RestoreDC (hdc=0x2c0107c3, nSavedDC=-1) returned 1
[0229.267] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.267] GetSystemMetrics (nIndex=42) returned 0
[0229.267] GetWindowTextW (in: hWnd=0x40122, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0229.268] RestoreDC (hdc=0x2c0107c3, nSavedDC=-1) returned 1
[0229.268] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c0107c3) returned 0x0
[0229.268] IsAppThemed () returned 0x1
[0229.268] GetThemeAppProperties () returned 0x3
[0229.268] GetThemeAppProperties () returned 0x3
[0229.268] IsAppThemed () returned 0x1
[0229.268] GetThemeAppProperties () returned 0x3
[0229.268] GetThemeAppProperties () returned 0x3
[0229.268] IsThemePartDefined () returned 0x1
[0229.268] GdipCreateRegion (region=0x53dff4) returned 0x0
[0229.268] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.268] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0229.268] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.268] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0229.268] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.268] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0229.268] LocalFree (hMem=0x89ea88) returned 0x0
[0229.268] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.268] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0229.268] LocalFree (hMem=0x89ea88) returned 0x0
[0229.268] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.268] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0229.269] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0229.269] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0229.269] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.269] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0229.269] GetCurrentObject (hdc=0x2c0107c3, type=0x1) returned 0xb00017
[0229.269] GetCurrentObject (hdc=0x2c0107c3, type=0x2) returned 0x900010
[0229.269] GetCurrentObject (hdc=0x2c0107c3, type=0x7) returned 0x1e0507b9
[0229.269] GetCurrentObject (hdc=0x2c0107c3, type=0x6) returned 0x8a01c2
[0229.269] SaveDC (hdc=0x2c0107c3) returned 1
[0229.269] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xff0407a1
[0229.269] GetClipRgn (hdc=0x2c0107c3, hrgn=0xff0407a1) returned 0
[0229.269] SelectClipRgn (hdc=0x2c0107c3, hrgn=0xea04051e) returned 2
[0229.269] DeleteObject (ho=0xff0407a1) returned 1
[0229.269] DeleteObject (ho=0xea04051e) returned 1
[0229.269] OffsetViewportOrgEx (in: hdc=0x2c0107c3, x=0, y=0, lppt=0x23bbd40 | out: lppt=0x23bbd40) returned 1
[0229.269] IsAppThemed () returned 0x1
[0229.269] GetThemeAppProperties () returned 0x3
[0229.269] GetThemeAppProperties () returned 0x3
[0229.269] DrawThemeBackground () returned 0x0
[0229.269] RestoreDC (hdc=0x2c0107c3, nSavedDC=-1) returned 1
[0229.269] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c0107c3) returned 0x0
[0229.269] GdipCreateRegion (region=0x53dff8) returned 0x0
[0229.269] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.269] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0229.270] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.270] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0229.270] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0229.270] LocalFree (hMem=0x89eee8) returned 0x0
[0229.270] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0229.270] LocalFree (hMem=0x89ea88) returned 0x0
[0229.270] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.270] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0229.270] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0229.270] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0229.270] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.270] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0229.270] GetCurrentObject (hdc=0x2c0107c3, type=0x1) returned 0xb00017
[0229.270] GetCurrentObject (hdc=0x2c0107c3, type=0x2) returned 0x900010
[0229.270] GetCurrentObject (hdc=0x2c0107c3, type=0x7) returned 0x1e0507b9
[0229.270] GetCurrentObject (hdc=0x2c0107c3, type=0x6) returned 0x8a01c2
[0229.270] SaveDC (hdc=0x2c0107c3) returned 1
[0229.270] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xeb04051e
[0229.270] GetClipRgn (hdc=0x2c0107c3, hrgn=0xeb04051e) returned 0
[0229.270] SelectClipRgn (hdc=0x2c0107c3, hrgn=0x407a1) returned 2
[0229.270] DeleteObject (ho=0xeb04051e) returned 1
[0229.270] DeleteObject (ho=0x407a1) returned 1
[0229.270] OffsetViewportOrgEx (in: hdc=0x2c0107c3, x=0, y=0, lppt=0x23bc014 | out: lppt=0x23bc014) returned 1
[0229.270] IsAppThemed () returned 0x1
[0229.270] GetThemeAppProperties () returned 0x3
[0229.271] GetThemeAppProperties () returned 0x3
[0229.271] GetThemeBackgroundContentRect () returned 0x0
[0229.271] RestoreDC (hdc=0x2c0107c3, nSavedDC=-1) returned 1
[0229.271] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c0107c3) returned 0x0
[0229.271] IsAppThemed () returned 0x1
[0229.271] GetThemeAppProperties () returned 0x3
[0229.271] GetThemeAppProperties () returned 0x3
[0229.271] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0229.271] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0229.271] GetCurrentObject (hdc=0x2c0107c3, type=0x1) returned 0xb00017
[0229.271] GetCurrentObject (hdc=0x2c0107c3, type=0x2) returned 0x900010
[0229.271] GetCurrentObject (hdc=0x2c0107c3, type=0x7) returned 0x1e0507b9
[0229.271] GetCurrentObject (hdc=0x2c0107c3, type=0x6) returned 0x8a01c2
[0229.271] SaveDC (hdc=0x2c0107c3) returned 1
[0229.303] GetTextAlign (hdc=0x2c0107c3) returned 0x0
[0229.303] GetTextColor (hdc=0x2c0107c3) returned 0x0
[0229.303] GetCurrentObject (hdc=0x2c0107c3, type=0x6) returned 0x8a01c2
[0229.303] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0229.303] SelectObject (hdc=0x2c0107c3, h=0x730a066d) returned 0x8a01c2
[0229.303] GetBkMode (hdc=0x2c0107c3) returned 2
[0229.303] SetBkMode (hdc=0x2c0107c3, mode=1) returned 2
[0229.303] DrawTextExW (in: hdc=0x2c0107c3, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x23bc3b4 | out: lpchText="OK", lprc=0x53df90) returned 13
[0229.304] DrawTextExW (in: hdc=0x2c0107c3, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x23bc3b4 | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0229.304] RestoreDC (hdc=0x2c0107c3, nSavedDC=-1) returned 1
[0229.304] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c0107c3) returned 0x0
[0229.304] GetFocus () returned 0x1f013e
[0229.304] IsAppThemed () returned 0x1
[0229.304] GetThemeAppProperties () returned 0x3
[0229.304] GetThemeAppProperties () returned 0x3
[0229.304] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0229.304] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x2c0107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0229.304] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c0107c3) returned 0x0
[0229.304] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0229.304] SelectObject (hdc=0x2c0107c3, h=0x85000f) returned 0x1e0507b9
[0229.304] DeleteDC (hdc=0x2c0107c3) returned 1
[0229.304] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0229.304] EndPaint (hWnd=0x1a02d6, lpPaint=0x53e2e4) returned 1
[0229.305] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.305] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0229.305] IsWindowUnicode (hWnd=0x102dc) returned 1
[0229.305] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.305] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0229.306] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.306] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.306] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.307] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0229.307] IsWindowUnicode (hWnd=0x102dc) returned 1
[0229.307] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.307] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.307] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.307] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.308] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x84, wParam=0x0, lParam=0x18f0362) returned 0x1
[0229.308] IsWindowUnicode (hWnd=0x1a02d6) returned 1
[0229.308] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.308] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.308] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.308] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.308] IsWindowUnicode (hWnd=0x500ea) returned 1
[0229.308] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.308] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.308] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.308] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0229.308] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.308] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x84, wParam=0x0, lParam=0x18f0362) returned 0x1
[0229.309] IsWindowUnicode (hWnd=0x1a02d6) returned 1
[0229.309] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.309] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x84, wParam=0x0, lParam=0x18f0362) returned 0x1
[0229.309] SetCursor (hCursor=0x10003) returned 0x10003
[0229.309] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.309] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.309] _TrackMouseEvent (in: lpEventTrack=0x23bc4b0 | out: lpEventTrack=0x23bc4b0) returned 1
[0229.309] SendMessageW (hWnd=0x1a02d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0229.309] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0229.309] InvalidateRect (hWnd=0x1a02d6, lpRect=0x0, bErase=0) returned 1
[0229.309] GetKeyState (nVirtKey=1) returned 0
[0229.309] GetKeyState (nVirtKey=2) returned 0
[0229.309] GetKeyState (nVirtKey=4) returned 0
[0229.309] GetKeyState (nVirtKey=5) returned 0
[0229.309] GetKeyState (nVirtKey=6) returned 0
[0229.309] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.310] IsWindowUnicode (hWnd=0x1a02d6) returned 1
[0229.310] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.310] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.310] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.310] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.310] IsWindowUnicode (hWnd=0x1a02d6) returned 1
[0229.310] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.310] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.310] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.311] BeginPaint (in: hWnd=0x1a02d6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0229.311] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0229.311] CreateCompatibleDC (hdc=0x60100ce) returned 0x2d0107c3
[0229.311] SelectObject (hdc=0x2d0107c3, h=0x1e0507b9) returned 0x85000f
[0229.311] GdipCreateFromHDC (hdc=0x2d0107c3, graphics=0x53e300) returned 0x0
[0229.311] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0229.311] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0229.311] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0229.311] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.311] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0229.311] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.311] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0229.311] LocalFree (hMem=0x89ee08) returned 0x0
[0229.311] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.311] GdipCreateRegion (region=0x53e348) returned 0x0
[0229.311] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.311] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0229.312] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0229.312] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc2d0dbd) returned 0x0
[0229.312] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.312] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0229.312] GetCurrentObject (hdc=0x2d0107c3, type=0x1) returned 0xb00017
[0229.312] GetCurrentObject (hdc=0x2d0107c3, type=0x2) returned 0x900010
[0229.312] GetCurrentObject (hdc=0x2d0107c3, type=0x7) returned 0x1e0507b9
[0229.312] GetCurrentObject (hdc=0x2d0107c3, type=0x6) returned 0x8a01c2
[0229.312] SaveDC (hdc=0x2d0107c3) returned 1
[0229.312] GetNearestColor (hdc=0x2d0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0229.312] GetNearestColor (hdc=0x2d0107c3, color=0xa0a0a0) returned 0xa0a0a0
[0229.312] GetNearestColor (hdc=0x2d0107c3, color=0x696969) returned 0x696969
[0229.312] GetNearestColor (hdc=0x2d0107c3, color=0xa0a0a0) returned 0xa0a0a0
[0229.312] GetNearestColor (hdc=0x2d0107c3, color=0x0) returned 0x0
[0229.312] GetNearestColor (hdc=0x2d0107c3, color=0xffffff) returned 0xffffff
[0229.312] GetNearestColor (hdc=0x2d0107c3, color=0xe5e5e5) returned 0xe5e5e5
[0229.312] GetNearestColor (hdc=0x2d0107c3, color=0xd7d7d7) returned 0xd7d7d7
[0229.312] GetNearestColor (hdc=0x2d0107c3, color=0x0) returned 0x0
[0229.313] RestoreDC (hdc=0x2d0107c3, nSavedDC=-1) returned 1
[0229.313] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d0107c3) returned 0x0
[0229.313] IsAppThemed () returned 0x1
[0229.313] GetThemeAppProperties () returned 0x3
[0229.313] GetThemeAppProperties () returned 0x3
[0229.313] IsAppThemed () returned 0x1
[0229.313] GetThemeAppProperties () returned 0x3
[0229.313] GetThemeAppProperties () returned 0x3
[0229.313] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x23bcc10 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0229.313] IsAppThemed () returned 0x1
[0229.313] GetThemeAppProperties () returned 0x3
[0229.313] GetThemeAppProperties () returned 0x3
[0229.313] IsAppThemed () returned 0x1
[0229.313] GetThemeAppProperties () returned 0x3
[0229.313] GetThemeAppProperties () returned 0x3
[0229.313] IsAppThemed () returned 0x1
[0229.314] GetThemeAppProperties () returned 0x3
[0229.314] GetThemeAppProperties () returned 0x3
[0229.314] IsAppThemed () returned 0x1
[0229.314] GetThemeAppProperties () returned 0x3
[0229.314] GetThemeAppProperties () returned 0x3
[0229.314] IsThemePartDefined () returned 0x1
[0229.314] IsAppThemed () returned 0x1
[0229.314] GetThemeAppProperties () returned 0x3
[0229.314] GetThemeAppProperties () returned 0x3
[0229.314] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0229.314] IsAppThemed () returned 0x1
[0229.314] GetThemeAppProperties () returned 0x3
[0229.314] GetThemeAppProperties () returned 0x3
[0229.314] IsAppThemed () returned 0x1
[0229.314] GetThemeAppProperties () returned 0x3
[0229.314] GetThemeAppProperties () returned 0x3
[0229.314] IsThemePartDefined () returned 0x1
[0229.314] GdipCreateRegion (region=0x53e064) returned 0x0
[0229.314] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.314] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0229.314] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.314] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0229.314] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.314] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0229.314] LocalFree (hMem=0x89ea88) returned 0x0
[0229.314] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0229.314] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0229.315] LocalFree (hMem=0x89eee8) returned 0x0
[0229.315] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.315] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0229.315] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0229.315] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0229.315] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.315] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0229.315] GetCurrentObject (hdc=0x2d0107c3, type=0x1) returned 0xb00017
[0229.315] GetCurrentObject (hdc=0x2d0107c3, type=0x2) returned 0x900010
[0229.315] GetCurrentObject (hdc=0x2d0107c3, type=0x7) returned 0x1e0507b9
[0229.315] GetCurrentObject (hdc=0x2d0107c3, type=0x6) returned 0x8a01c2
[0229.315] SaveDC (hdc=0x2d0107c3) returned 1
[0229.315] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x10407a1
[0229.315] GetClipRgn (hdc=0x2d0107c3, hrgn=0x10407a1) returned 0
[0229.315] SelectClipRgn (hdc=0x2d0107c3, hrgn=0xef04051e) returned 2
[0229.315] DeleteObject (ho=0x10407a1) returned 1
[0229.315] DeleteObject (ho=0xef04051e) returned 1
[0229.315] OffsetViewportOrgEx (in: hdc=0x2d0107c3, x=0, y=0, lppt=0x23bd2c0 | out: lppt=0x23bd2c0) returned 1
[0229.315] DrawThemeParentBackground () returned 0x0
[0229.316] GetWindowPlacement (in: hWnd=0x40122, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0229.316] GetClientRect (in: hWnd=0x40122, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0229.316] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.316] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.316] GetSystemMetrics (nIndex=42) returned 0
[0229.316] GetWindowTextW (in: hWnd=0x40122, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.316] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0229.316] GetClientRect (in: hWnd=0x40122, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0229.316] GetCurrentObject (hdc=0x2d0107c3, type=0x1) returned 0xb00017
[0229.316] GetCurrentObject (hdc=0x2d0107c3, type=0x2) returned 0x900010
[0229.316] GetCurrentObject (hdc=0x2d0107c3, type=0x7) returned 0x1e0507b9
[0229.316] GetCurrentObject (hdc=0x2d0107c3, type=0x6) returned 0x8a01c2
[0229.316] SaveDC (hdc=0x2d0107c3) returned 2
[0229.316] GetNearestColor (hdc=0x2d0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0229.316] CreateSolidBrush (color=0xf0f0f0) returned 0xd310078d
[0229.316] FillRect (hDC=0x2d0107c3, lprc=0x53dac8, hbr=0xd310078d) returned 1
[0229.316] DeleteObject (ho=0xd310078d) returned 1
[0229.316] RestoreDC (hdc=0x2d0107c3, nSavedDC=-1) returned 1
[0229.317] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.317] GetSystemMetrics (nIndex=42) returned 0
[0229.317] GetWindowTextW (in: hWnd=0x40122, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0229.317] GetClientRect (in: hWnd=0x40122, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0229.317] GetCurrentObject (hdc=0x2d0107c3, type=0x1) returned 0xb00017
[0229.317] GetCurrentObject (hdc=0x2d0107c3, type=0x2) returned 0x900010
[0229.317] GetCurrentObject (hdc=0x2d0107c3, type=0x7) returned 0x1e0507b9
[0229.317] GetCurrentObject (hdc=0x2d0107c3, type=0x6) returned 0x8a01c2
[0229.317] SaveDC (hdc=0x2d0107c3) returned 2
[0229.317] GetNearestColor (hdc=0x2d0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0229.317] CreateSolidBrush (color=0xf0f0f0) returned 0xd410078d
[0229.317] FillRect (hDC=0x2d0107c3, lprc=0x53da68, hbr=0xd410078d) returned 1
[0229.317] DeleteObject (ho=0xd410078d) returned 1
[0229.317] RestoreDC (hdc=0x2d0107c3, nSavedDC=-1) returned 1
[0229.317] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.317] GetSystemMetrics (nIndex=42) returned 0
[0229.317] GetWindowTextW (in: hWnd=0x40122, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0229.318] RestoreDC (hdc=0x2d0107c3, nSavedDC=-1) returned 1
[0229.318] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d0107c3) returned 0x0
[0229.318] IsAppThemed () returned 0x1
[0229.318] GetThemeAppProperties () returned 0x3
[0229.318] GetThemeAppProperties () returned 0x3
[0229.318] IsAppThemed () returned 0x1
[0229.321] GetThemeAppProperties () returned 0x3
[0229.321] GetThemeAppProperties () returned 0x3
[0229.321] IsThemePartDefined () returned 0x1
[0229.321] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0229.321] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.321] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0229.322] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.322] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0229.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.322] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0229.322] LocalFree (hMem=0x89ee08) returned 0x0
[0229.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.322] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0229.322] LocalFree (hMem=0x89ea88) returned 0x0
[0229.322] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.322] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0229.322] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0229.322] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0229.322] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.322] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0229.322] GetCurrentObject (hdc=0x2d0107c3, type=0x1) returned 0xb00017
[0229.322] GetCurrentObject (hdc=0x2d0107c3, type=0x2) returned 0x900010
[0229.322] GetCurrentObject (hdc=0x2d0107c3, type=0x7) returned 0x1e0507b9
[0229.322] GetCurrentObject (hdc=0x2d0107c3, type=0x6) returned 0x8a01c2
[0229.322] SaveDC (hdc=0x2d0107c3) returned 1
[0229.322] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf004051e
[0229.323] GetClipRgn (hdc=0x2d0107c3, hrgn=0xf004051e) returned 0
[0229.323] SelectClipRgn (hdc=0x2d0107c3, hrgn=0x30407a1) returned 2
[0229.323] DeleteObject (ho=0xf004051e) returned 1
[0229.323] DeleteObject (ho=0x30407a1) returned 1
[0229.323] OffsetViewportOrgEx (in: hdc=0x2d0107c3, x=0, y=0, lppt=0x23bdb48 | out: lppt=0x23bdb48) returned 1
[0229.323] IsAppThemed () returned 0x1
[0229.323] GetThemeAppProperties () returned 0x3
[0229.323] GetThemeAppProperties () returned 0x3
[0229.323] DrawThemeBackground () returned 0x0
[0229.323] RestoreDC (hdc=0x2d0107c3, nSavedDC=-1) returned 1
[0229.323] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d0107c3) returned 0x0
[0229.323] GdipCreateRegion (region=0x53dfec) returned 0x0
[0229.323] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.323] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0229.323] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.323] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0229.323] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.323] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0229.323] LocalFree (hMem=0x89ea88) returned 0x0
[0229.323] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0229.323] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0229.324] LocalFree (hMem=0x89eee8) returned 0x0
[0229.324] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.324] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0229.324] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0229.324] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0229.324] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.324] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0229.324] GetCurrentObject (hdc=0x2d0107c3, type=0x1) returned 0xb00017
[0229.324] GetCurrentObject (hdc=0x2d0107c3, type=0x2) returned 0x900010
[0229.324] GetCurrentObject (hdc=0x2d0107c3, type=0x7) returned 0x1e0507b9
[0229.324] GetCurrentObject (hdc=0x2d0107c3, type=0x6) returned 0x8a01c2
[0229.324] SaveDC (hdc=0x2d0107c3) returned 1
[0229.324] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x40407a1
[0229.324] GetClipRgn (hdc=0x2d0107c3, hrgn=0x40407a1) returned 0
[0229.324] SelectClipRgn (hdc=0x2d0107c3, hrgn=0xf104051e) returned 2
[0229.324] DeleteObject (ho=0x40407a1) returned 1
[0229.324] DeleteObject (ho=0xf104051e) returned 1
[0229.324] OffsetViewportOrgEx (in: hdc=0x2d0107c3, x=0, y=0, lppt=0x23bde1c | out: lppt=0x23bde1c) returned 1
[0229.324] IsAppThemed () returned 0x1
[0229.324] GetThemeAppProperties () returned 0x3
[0229.325] GetThemeAppProperties () returned 0x3
[0229.325] GetThemeBackgroundContentRect () returned 0x0
[0229.325] RestoreDC (hdc=0x2d0107c3, nSavedDC=-1) returned 1
[0229.325] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d0107c3) returned 0x0
[0229.325] IsAppThemed () returned 0x1
[0229.325] GetThemeAppProperties () returned 0x3
[0229.325] GetThemeAppProperties () returned 0x3
[0229.325] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0229.325] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0229.325] GetCurrentObject (hdc=0x2d0107c3, type=0x1) returned 0xb00017
[0229.325] GetCurrentObject (hdc=0x2d0107c3, type=0x2) returned 0x900010
[0229.325] GetCurrentObject (hdc=0x2d0107c3, type=0x7) returned 0x1e0507b9
[0229.325] GetCurrentObject (hdc=0x2d0107c3, type=0x6) returned 0x8a01c2
[0229.325] SaveDC (hdc=0x2d0107c3) returned 1
[0229.325] GetTextAlign (hdc=0x2d0107c3) returned 0x0
[0229.325] GetTextColor (hdc=0x2d0107c3) returned 0x0
[0229.325] GetCurrentObject (hdc=0x2d0107c3, type=0x6) returned 0x8a01c2
[0229.325] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0229.325] SelectObject (hdc=0x2d0107c3, h=0x730a066d) returned 0x8a01c2
[0229.325] GetBkMode (hdc=0x2d0107c3) returned 2
[0229.326] SetBkMode (hdc=0x2d0107c3, mode=1) returned 2
[0229.326] DrawTextExW (in: hdc=0x2d0107c3, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x23be1bc | out: lpchText="OK", lprc=0x53df84) returned 13
[0229.326] DrawTextExW (in: hdc=0x2d0107c3, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x23be1bc | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0229.326] RestoreDC (hdc=0x2d0107c3, nSavedDC=-1) returned 1
[0229.326] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d0107c3) returned 0x0
[0229.326] GetFocus () returned 0x1f013e
[0229.326] IsAppThemed () returned 0x1
[0229.326] GetThemeAppProperties () returned 0x3
[0229.326] GetThemeAppProperties () returned 0x3
[0229.326] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0229.326] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x2d0107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0229.327] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d0107c3) returned 0x0
[0229.327] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0229.327] SelectObject (hdc=0x2d0107c3, h=0x85000f) returned 0x1e0507b9
[0229.327] DeleteDC (hdc=0x2d0107c3) returned 1
[0229.327] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0229.327] EndPaint (hWnd=0x1a02d6, lpPaint=0x53e2e4) returned 1
[0229.327] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.327] IsWindowUnicode (hWnd=0xf02c0) returned 1
[0229.327] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.327] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.327] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.327] BeginPaint (in: hWnd=0xf02c0, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0229.327] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0229.328] CreateCompatibleDC (hdc=0x10105d6) returned 0x2f0107c3
[0229.328] SelectObject (hdc=0x2f0107c3, h=0x1e0507b9) returned 0x85000f
[0229.328] GdipCreateFromHDC (hdc=0x2f0107c3, graphics=0x53e300) returned 0x0
[0229.328] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0229.328] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0229.328] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0229.328] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.328] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0229.328] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.328] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0229.328] LocalFree (hMem=0x89ea88) returned 0x0
[0229.328] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.328] GdipCreateRegion (region=0x53e348) returned 0x0
[0229.328] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.328] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0229.328] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0229.328] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc2b0dbd) returned 0x0
[0229.328] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.328] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0229.328] GetCurrentObject (hdc=0x2f0107c3, type=0x1) returned 0xb00017
[0229.329] GetCurrentObject (hdc=0x2f0107c3, type=0x2) returned 0x900010
[0229.329] GetCurrentObject (hdc=0x2f0107c3, type=0x7) returned 0x1e0507b9
[0229.329] GetCurrentObject (hdc=0x2f0107c3, type=0x6) returned 0x8a01c2
[0229.329] SaveDC (hdc=0x2f0107c3) returned 1
[0229.329] GetNearestColor (hdc=0x2f0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0229.329] GetNearestColor (hdc=0x2f0107c3, color=0xa0a0a0) returned 0xa0a0a0
[0229.329] GetNearestColor (hdc=0x2f0107c3, color=0x696969) returned 0x696969
[0229.329] GetNearestColor (hdc=0x2f0107c3, color=0xa0a0a0) returned 0xa0a0a0
[0229.329] GetNearestColor (hdc=0x2f0107c3, color=0x0) returned 0x0
[0229.329] GetNearestColor (hdc=0x2f0107c3, color=0xffffff) returned 0xffffff
[0229.329] GetNearestColor (hdc=0x2f0107c3, color=0xe5e5e5) returned 0xe5e5e5
[0229.329] GetNearestColor (hdc=0x2f0107c3, color=0xd7d7d7) returned 0xd7d7d7
[0229.329] GetNearestColor (hdc=0x2f0107c3, color=0x0) returned 0x0
[0229.329] RestoreDC (hdc=0x2f0107c3, nSavedDC=-1) returned 1
[0229.329] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2f0107c3) returned 0x0
[0229.329] IsAppThemed () returned 0x1
[0229.329] GetThemeAppProperties () returned 0x3
[0229.329] GetThemeAppProperties () returned 0x3
[0229.329] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0229.330] SendMessageW (hWnd=0x40122, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0229.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0229.330] IsAppThemed () returned 0x1
[0229.330] GetThemeAppProperties () returned 0x3
[0229.330] GetThemeAppProperties () returned 0x3
[0229.330] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x23be9cc | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0229.330] IsAppThemed () returned 0x1
[0229.330] GetThemeAppProperties () returned 0x3
[0229.330] GetThemeAppProperties () returned 0x3
[0229.330] IsAppThemed () returned 0x1
[0229.330] GetThemeAppProperties () returned 0x3
[0229.330] GetThemeAppProperties () returned 0x3
[0229.330] GetFocus () returned 0x1f013e
[0229.330] IsAppThemed () returned 0x1
[0229.330] GetThemeAppProperties () returned 0x3
[0229.330] GetThemeAppProperties () returned 0x3
[0229.330] IsAppThemed () returned 0x1
[0229.330] GetThemeAppProperties () returned 0x3
[0229.331] GetThemeAppProperties () returned 0x3
[0229.331] IsThemePartDefined () returned 0x1
[0229.331] IsAppThemed () returned 0x1
[0229.331] GetThemeAppProperties () returned 0x3
[0229.331] GetThemeAppProperties () returned 0x3
[0229.331] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0229.331] IsAppThemed () returned 0x1
[0229.331] GetThemeAppProperties () returned 0x3
[0229.331] GetThemeAppProperties () returned 0x3
[0229.331] IsAppThemed () returned 0x1
[0229.331] GetThemeAppProperties () returned 0x3
[0229.331] GetThemeAppProperties () returned 0x3
[0229.331] IsThemePartDefined () returned 0x1
[0229.331] GdipCreateRegion (region=0x53e070) returned 0x0
[0229.331] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.331] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0229.331] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.331] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0229.331] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.331] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0229.331] LocalFree (hMem=0x89ee08) returned 0x0
[0229.331] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.331] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0229.331] LocalFree (hMem=0x89ea88) returned 0x0
[0229.331] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.332] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0229.332] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0229.332] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0229.332] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.332] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0229.332] GetCurrentObject (hdc=0x2f0107c3, type=0x1) returned 0xb00017
[0229.332] GetCurrentObject (hdc=0x2f0107c3, type=0x2) returned 0x900010
[0229.332] GetCurrentObject (hdc=0x2f0107c3, type=0x7) returned 0x1e0507b9
[0229.332] GetCurrentObject (hdc=0x2f0107c3, type=0x6) returned 0x8a01c2
[0229.332] SaveDC (hdc=0x2f0107c3) returned 1
[0229.332] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf204051e
[0229.332] GetClipRgn (hdc=0x2f0107c3, hrgn=0xf204051e) returned 0
[0229.332] SelectClipRgn (hdc=0x2f0107c3, hrgn=0x80407a1) returned 2
[0229.332] DeleteObject (ho=0xf204051e) returned 1
[0229.332] DeleteObject (ho=0x80407a1) returned 1
[0229.332] OffsetViewportOrgEx (in: hdc=0x2f0107c3, x=0, y=0, lppt=0x23bf07c | out: lppt=0x23bf07c) returned 1
[0229.332] DrawThemeParentBackground () returned 0x0
[0229.332] GetWindowPlacement (in: hWnd=0x40122, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0229.332] GetClientRect (in: hWnd=0x40122, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0229.333] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.333] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.333] GetSystemMetrics (nIndex=42) returned 0
[0229.333] GetWindowTextW (in: hWnd=0x40122, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.333] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0229.333] GetClientRect (in: hWnd=0x40122, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0229.333] GetCurrentObject (hdc=0x2f0107c3, type=0x1) returned 0xb00017
[0229.333] GetCurrentObject (hdc=0x2f0107c3, type=0x2) returned 0x900010
[0229.333] GetCurrentObject (hdc=0x2f0107c3, type=0x7) returned 0x1e0507b9
[0229.333] GetCurrentObject (hdc=0x2f0107c3, type=0x6) returned 0x8a01c2
[0229.333] SaveDC (hdc=0x2f0107c3) returned 2
[0229.333] GetNearestColor (hdc=0x2f0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0229.333] CreateSolidBrush (color=0xf0f0f0) returned 0xd510078d
[0229.333] FillRect (hDC=0x2f0107c3, lprc=0x53dad0, hbr=0xd510078d) returned 1
[0229.333] DeleteObject (ho=0xd510078d) returned 1
[0229.333] RestoreDC (hdc=0x2f0107c3, nSavedDC=-1) returned 1
[0229.333] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.333] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.333] GetSystemMetrics (nIndex=42) returned 0
[0229.333] GetWindowTextW (in: hWnd=0x40122, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.333] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0229.334] GetClientRect (in: hWnd=0x40122, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0229.337] GetCurrentObject (hdc=0x2f0107c3, type=0x1) returned 0xb00017
[0229.337] GetCurrentObject (hdc=0x2f0107c3, type=0x2) returned 0x900010
[0229.337] GetCurrentObject (hdc=0x2f0107c3, type=0x7) returned 0x1e0507b9
[0229.337] GetCurrentObject (hdc=0x2f0107c3, type=0x6) returned 0x8a01c2
[0229.337] SaveDC (hdc=0x2f0107c3) returned 2
[0229.338] GetNearestColor (hdc=0x2f0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0229.338] CreateSolidBrush (color=0xf0f0f0) returned 0xd610078d
[0229.338] FillRect (hDC=0x2f0107c3, lprc=0x53da70, hbr=0xd610078d) returned 1
[0229.338] DeleteObject (ho=0xd610078d) returned 1
[0229.338] RestoreDC (hdc=0x2f0107c3, nSavedDC=-1) returned 1
[0229.338] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.338] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.338] GetSystemMetrics (nIndex=42) returned 0
[0229.338] GetWindowTextW (in: hWnd=0x40122, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.338] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0229.338] RestoreDC (hdc=0x2f0107c3, nSavedDC=-1) returned 1
[0229.338] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2f0107c3) returned 0x0
[0229.338] IsAppThemed () returned 0x1
[0229.338] GetThemeAppProperties () returned 0x3
[0229.338] GetThemeAppProperties () returned 0x3
[0229.338] IsAppThemed () returned 0x1
[0229.338] GetThemeAppProperties () returned 0x3
[0229.338] GetThemeAppProperties () returned 0x3
[0229.338] IsThemePartDefined () returned 0x1
[0229.339] GdipCreateRegion (region=0x53dff4) returned 0x0
[0229.339] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.339] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0229.339] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.339] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0229.339] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0229.339] LocalFree (hMem=0x89eee8) returned 0x0
[0229.339] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0229.339] LocalFree (hMem=0x89ee08) returned 0x0
[0229.339] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.339] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0229.339] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0229.339] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0229.339] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.339] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0229.339] GetCurrentObject (hdc=0x2f0107c3, type=0x1) returned 0xb00017
[0229.339] GetCurrentObject (hdc=0x2f0107c3, type=0x2) returned 0x900010
[0229.339] GetCurrentObject (hdc=0x2f0107c3, type=0x7) returned 0x1e0507b9
[0229.339] GetCurrentObject (hdc=0x2f0107c3, type=0x6) returned 0x8a01c2
[0229.339] SaveDC (hdc=0x2f0107c3) returned 1
[0229.339] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x90407a1
[0229.339] GetClipRgn (hdc=0x2f0107c3, hrgn=0x90407a1) returned 0
[0229.339] SelectClipRgn (hdc=0x2f0107c3, hrgn=0xf404051e) returned 2
[0229.340] DeleteObject (ho=0x90407a1) returned 1
[0229.340] DeleteObject (ho=0xf404051e) returned 1
[0229.340] OffsetViewportOrgEx (in: hdc=0x2f0107c3, x=0, y=0, lppt=0x23bf904 | out: lppt=0x23bf904) returned 1
[0229.340] IsAppThemed () returned 0x1
[0229.340] GetThemeAppProperties () returned 0x3
[0229.340] GetThemeAppProperties () returned 0x3
[0229.340] DrawThemeBackground () returned 0x0
[0229.340] RestoreDC (hdc=0x2f0107c3, nSavedDC=-1) returned 1
[0229.340] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2f0107c3) returned 0x0
[0229.340] GdipCreateRegion (region=0x53dff8) returned 0x0
[0229.340] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.340] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0229.340] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.340] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0229.340] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0229.340] LocalFree (hMem=0x89ee08) returned 0x0
[0229.340] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0229.340] LocalFree (hMem=0x89ea88) returned 0x0
[0229.340] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.340] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0229.340] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0229.340] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0229.340] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.340] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0229.340] GetCurrentObject (hdc=0x2f0107c3, type=0x1) returned 0xb00017
[0229.341] GetCurrentObject (hdc=0x2f0107c3, type=0x2) returned 0x900010
[0229.341] GetCurrentObject (hdc=0x2f0107c3, type=0x7) returned 0x1e0507b9
[0229.341] GetCurrentObject (hdc=0x2f0107c3, type=0x6) returned 0x8a01c2
[0229.341] SaveDC (hdc=0x2f0107c3) returned 1
[0229.341] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf504051e
[0229.341] GetClipRgn (hdc=0x2f0107c3, hrgn=0xf504051e) returned 0
[0229.341] SelectClipRgn (hdc=0x2f0107c3, hrgn=0xa0407a1) returned 2
[0229.341] DeleteObject (ho=0xf504051e) returned 1
[0229.341] DeleteObject (ho=0xa0407a1) returned 1
[0229.341] OffsetViewportOrgEx (in: hdc=0x2f0107c3, x=0, y=0, lppt=0x23bfbd8 | out: lppt=0x23bfbd8) returned 1
[0229.341] IsAppThemed () returned 0x1
[0229.341] GetThemeAppProperties () returned 0x3
[0229.341] GetThemeAppProperties () returned 0x3
[0229.341] GetThemeBackgroundContentRect () returned 0x0
[0229.341] RestoreDC (hdc=0x2f0107c3, nSavedDC=-1) returned 1
[0229.341] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2f0107c3) returned 0x0
[0229.341] IsAppThemed () returned 0x1
[0229.341] GetThemeAppProperties () returned 0x3
[0229.341] GetThemeAppProperties () returned 0x3
[0229.341] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0229.341] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0229.341] GetCurrentObject (hdc=0x2f0107c3, type=0x1) returned 0xb00017
[0229.341] GetCurrentObject (hdc=0x2f0107c3, type=0x2) returned 0x900010
[0229.341] GetCurrentObject (hdc=0x2f0107c3, type=0x7) returned 0x1e0507b9
[0229.342] GetCurrentObject (hdc=0x2f0107c3, type=0x6) returned 0x8a01c2
[0229.342] SaveDC (hdc=0x2f0107c3) returned 1
[0229.342] GetTextAlign (hdc=0x2f0107c3) returned 0x0
[0229.342] GetTextColor (hdc=0x2f0107c3) returned 0x0
[0229.342] GetCurrentObject (hdc=0x2f0107c3, type=0x6) returned 0x8a01c2
[0229.342] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0229.342] SelectObject (hdc=0x2f0107c3, h=0x730a066d) returned 0x8a01c2
[0229.342] GetBkMode (hdc=0x2f0107c3) returned 2
[0229.342] SetBkMode (hdc=0x2f0107c3, mode=1) returned 2
[0229.342] DrawTextExW (in: hdc=0x2f0107c3, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x23bff78 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0229.342] DrawTextExW (in: hdc=0x2f0107c3, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x23bff78 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0229.342] RestoreDC (hdc=0x2f0107c3, nSavedDC=-1) returned 1
[0229.343] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2f0107c3) returned 0x0
[0229.343] GetFocus () returned 0x1f013e
[0229.343] IsAppThemed () returned 0x1
[0229.343] GetThemeAppProperties () returned 0x3
[0229.343] GetThemeAppProperties () returned 0x3
[0229.343] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0229.343] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x2f0107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0229.343] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2f0107c3) returned 0x0
[0229.343] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0229.343] SelectObject (hdc=0x2f0107c3, h=0x85000f) returned 0x1e0507b9
[0229.343] DeleteDC (hdc=0x2f0107c3) returned 1
[0229.343] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0229.343] EndPaint (hWnd=0xf02c0, lpPaint=0x53e2e4) returned 1
[0229.343] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.343] IsWindowUnicode (hWnd=0x202c6) returned 1
[0229.343] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.344] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.344] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.344] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0229.344] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0229.344] CreateCompatibleDC (hdc=0xf0105ee) returned 0x310107c3
[0229.344] SelectObject (hdc=0x310107c3, h=0x1e0507b9) returned 0x85000f
[0229.344] GdipCreateFromHDC (hdc=0x310107c3, graphics=0x53e300) returned 0x0
[0229.344] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0229.344] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0229.344] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0229.344] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.344] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0229.344] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0229.344] LocalFree (hMem=0x89eee8) returned 0x0
[0229.344] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.344] GdipCreateRegion (region=0x53e348) returned 0x0
[0229.344] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.344] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0229.344] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0229.345] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc290dbd) returned 0x0
[0229.345] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.345] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0229.345] GetCurrentObject (hdc=0x310107c3, type=0x1) returned 0xb00017
[0229.345] GetCurrentObject (hdc=0x310107c3, type=0x2) returned 0x900010
[0229.345] GetCurrentObject (hdc=0x310107c3, type=0x7) returned 0x1e0507b9
[0229.345] GetCurrentObject (hdc=0x310107c3, type=0x6) returned 0x8a01c2
[0229.345] SaveDC (hdc=0x310107c3) returned 1
[0229.345] GetNearestColor (hdc=0x310107c3, color=0xff) returned 0xff
[0229.345] GetNearestColor (hdc=0x310107c3, color=0x55) returned 0x55
[0229.345] GetNearestColor (hdc=0x310107c3, color=0x0) returned 0x0
[0229.345] GetNearestColor (hdc=0x310107c3, color=0x55) returned 0x55
[0229.345] GetNearestColor (hdc=0x310107c3, color=0x0) returned 0x0
[0229.345] GetNearestColor (hdc=0x310107c3, color=0x8080ff) returned 0x8080ff
[0229.345] GetNearestColor (hdc=0x310107c3, color=0x7373e5) returned 0x7373e5
[0229.345] GetNearestColor (hdc=0x310107c3, color=0xe5) returned 0xe5
[0229.345] GetNearestColor (hdc=0x310107c3, color=0x0) returned 0x0
[0229.345] RestoreDC (hdc=0x310107c3, nSavedDC=-1) returned 1
[0229.345] GdipReleaseDC (graphics=0x5d92c30, hdc=0x310107c3) returned 0x0
[0229.345] IsAppThemed () returned 0x1
[0229.346] GetThemeAppProperties () returned 0x3
[0229.346] GetThemeAppProperties () returned 0x3
[0229.346] IsAppThemed () returned 0x1
[0229.346] GetThemeAppProperties () returned 0x3
[0229.346] GetThemeAppProperties () returned 0x3
[0229.346] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0229.346] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x23c075c | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0229.346] IsAppThemed () returned 0x1
[0229.346] GetThemeAppProperties () returned 0x3
[0229.346] GetThemeAppProperties () returned 0x3
[0229.346] IsAppThemed () returned 0x1
[0229.346] GetThemeAppProperties () returned 0x3
[0229.346] GetThemeAppProperties () returned 0x3
[0229.346] GetFocus () returned 0x1f013e
[0229.346] IsAppThemed () returned 0x1
[0229.346] GetThemeAppProperties () returned 0x3
[0229.346] GetThemeAppProperties () returned 0x3
[0229.346] IsAppThemed () returned 0x1
[0229.346] GetThemeAppProperties () returned 0x3
[0229.347] GetThemeAppProperties () returned 0x3
[0229.347] IsThemePartDefined () returned 0x1
[0229.347] IsAppThemed () returned 0x1
[0229.347] GetThemeAppProperties () returned 0x3
[0229.347] GetThemeAppProperties () returned 0x3
[0229.347] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0229.347] IsAppThemed () returned 0x1
[0229.347] GetThemeAppProperties () returned 0x3
[0229.347] GetThemeAppProperties () returned 0x3
[0229.347] IsAppThemed () returned 0x1
[0229.347] GetThemeAppProperties () returned 0x3
[0229.347] GetThemeAppProperties () returned 0x3
[0229.347] IsThemePartDefined () returned 0x1
[0229.347] GdipCreateRegion (region=0x53e070) returned 0x0
[0229.347] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.347] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0229.347] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.347] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0229.347] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0229.347] LocalFree (hMem=0x89ea88) returned 0x0
[0229.347] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0229.347] LocalFree (hMem=0x89ee08) returned 0x0
[0229.348] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.348] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0229.348] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0229.348] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0229.348] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.348] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0229.348] GetCurrentObject (hdc=0x310107c3, type=0x1) returned 0xb00017
[0229.348] GetCurrentObject (hdc=0x310107c3, type=0x2) returned 0x900010
[0229.348] GetCurrentObject (hdc=0x310107c3, type=0x7) returned 0x1e0507b9
[0229.348] GetCurrentObject (hdc=0x310107c3, type=0x6) returned 0x8a01c2
[0229.348] SaveDC (hdc=0x310107c3) returned 1
[0229.348] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb0407a1
[0229.348] GetClipRgn (hdc=0x310107c3, hrgn=0xb0407a1) returned 0
[0229.348] SelectClipRgn (hdc=0x310107c3, hrgn=0xf904051e) returned 2
[0229.348] DeleteObject (ho=0xb0407a1) returned 1
[0229.348] DeleteObject (ho=0xf904051e) returned 1
[0229.348] OffsetViewportOrgEx (in: hdc=0x310107c3, x=0, y=0, lppt=0x23c0e0c | out: lppt=0x23c0e0c) returned 1
[0229.348] DrawThemeParentBackground () returned 0x0
[0229.348] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0229.349] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0229.349] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0229.349] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0229.349] GetSystemMetrics (nIndex=42) returned 0
[0229.349] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0229.349] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0229.349] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0229.349] GetCurrentObject (hdc=0x310107c3, type=0x1) returned 0xb00017
[0229.349] GetCurrentObject (hdc=0x310107c3, type=0x2) returned 0x900010
[0229.349] GetCurrentObject (hdc=0x310107c3, type=0x7) returned 0x1e0507b9
[0229.349] GetCurrentObject (hdc=0x310107c3, type=0x6) returned 0x8a01c2
[0229.350] SaveDC (hdc=0x310107c3) returned 2
[0229.350] GetNearestColor (hdc=0x310107c3, color=0xff) returned 0xff
[0229.350] CreateSolidBrush (color=0xff) returned 0xd710078d
[0229.350] FillRect (hDC=0x310107c3, lprc=0x53dad0, hbr=0xd710078d) returned 1
[0229.350] DeleteObject (ho=0xd710078d) returned 1
[0229.350] RestoreDC (hdc=0x310107c3, nSavedDC=-1) returned 1
[0229.350] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0229.350] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0229.350] GetSystemMetrics (nIndex=42) returned 0
[0229.350] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0229.350] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0229.350] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0229.350] GetCurrentObject (hdc=0x310107c3, type=0x1) returned 0xb00017
[0229.350] GetCurrentObject (hdc=0x310107c3, type=0x2) returned 0x900010
[0229.350] GetCurrentObject (hdc=0x310107c3, type=0x7) returned 0x1e0507b9
[0229.350] GetCurrentObject (hdc=0x310107c3, type=0x6) returned 0x8a01c2
[0229.350] SaveDC (hdc=0x310107c3) returned 2
[0229.351] GetNearestColor (hdc=0x310107c3, color=0xff) returned 0xff
[0229.351] CreateSolidBrush (color=0xff) returned 0xd810078d
[0229.351] FillRect (hDC=0x310107c3, lprc=0x53da70, hbr=0xd810078d) returned 1
[0229.351] DeleteObject (ho=0xd810078d) returned 1
[0229.351] RestoreDC (hdc=0x310107c3, nSavedDC=-1) returned 1
[0229.351] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0229.351] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0229.351] GetSystemMetrics (nIndex=42) returned 0
[0229.351] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0229.351] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0229.351] RestoreDC (hdc=0x310107c3, nSavedDC=-1) returned 1
[0229.351] GdipReleaseDC (graphics=0x5d92c30, hdc=0x310107c3) returned 0x0
[0229.351] IsAppThemed () returned 0x1
[0229.351] GetThemeAppProperties () returned 0x3
[0229.351] GetThemeAppProperties () returned 0x3
[0229.351] IsAppThemed () returned 0x1
[0229.351] GetThemeAppProperties () returned 0x3
[0229.351] GetThemeAppProperties () returned 0x3
[0229.352] IsThemePartDefined () returned 0x1
[0229.352] GdipCreateRegion (region=0x53dff4) returned 0x0
[0229.352] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.352] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0229.352] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.352] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0229.352] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.352] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0229.352] LocalFree (hMem=0x89ea88) returned 0x0
[0229.352] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.352] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0229.352] LocalFree (hMem=0x89ee08) returned 0x0
[0229.352] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.352] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0229.352] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0229.352] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0229.352] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.352] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0229.352] GetCurrentObject (hdc=0x310107c3, type=0x1) returned 0xb00017
[0229.352] GetCurrentObject (hdc=0x310107c3, type=0x2) returned 0x900010
[0229.352] GetCurrentObject (hdc=0x310107c3, type=0x7) returned 0x1e0507b9
[0229.352] GetCurrentObject (hdc=0x310107c3, type=0x6) returned 0x8a01c2
[0229.353] SaveDC (hdc=0x310107c3) returned 1
[0229.353] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfa04051e
[0229.353] GetClipRgn (hdc=0x310107c3, hrgn=0xfa04051e) returned 0
[0229.353] SelectClipRgn (hdc=0x310107c3, hrgn=0xd0407a1) returned 2
[0229.353] DeleteObject (ho=0xfa04051e) returned 1
[0229.353] DeleteObject (ho=0xd0407a1) returned 1
[0229.353] OffsetViewportOrgEx (in: hdc=0x310107c3, x=0, y=0, lppt=0x23c1670 | out: lppt=0x23c1670) returned 1
[0229.353] IsAppThemed () returned 0x1
[0229.353] GetThemeAppProperties () returned 0x3
[0229.353] GetThemeAppProperties () returned 0x3
[0229.353] DrawThemeBackground () returned 0x0
[0229.353] RestoreDC (hdc=0x310107c3, nSavedDC=-1) returned 1
[0229.353] GdipReleaseDC (graphics=0x5d92c30, hdc=0x310107c3) returned 0x0
[0229.353] GdipCreateRegion (region=0x53dff8) returned 0x0
[0229.353] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.353] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0229.353] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.353] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0229.353] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.353] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0229.354] LocalFree (hMem=0x89ea88) returned 0x0
[0229.354] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.354] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0229.354] LocalFree (hMem=0x89ea88) returned 0x0
[0229.354] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.354] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0229.354] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0229.354] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0229.354] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.354] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0229.354] GetCurrentObject (hdc=0x310107c3, type=0x1) returned 0xb00017
[0229.354] GetCurrentObject (hdc=0x310107c3, type=0x2) returned 0x900010
[0229.354] GetCurrentObject (hdc=0x310107c3, type=0x7) returned 0x1e0507b9
[0229.354] GetCurrentObject (hdc=0x310107c3, type=0x6) returned 0x8a01c2
[0229.354] SaveDC (hdc=0x310107c3) returned 1
[0229.354] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe0407a1
[0229.354] GetClipRgn (hdc=0x310107c3, hrgn=0xe0407a1) returned 0
[0229.354] SelectClipRgn (hdc=0x310107c3, hrgn=0xfb04051e) returned 2
[0229.354] DeleteObject (ho=0xe0407a1) returned 1
[0229.354] DeleteObject (ho=0xfb04051e) returned 1
[0229.355] OffsetViewportOrgEx (in: hdc=0x310107c3, x=0, y=0, lppt=0x23c1944 | out: lppt=0x23c1944) returned 1
[0229.355] IsAppThemed () returned 0x1
[0229.355] GetThemeAppProperties () returned 0x3
[0229.355] GetThemeAppProperties () returned 0x3
[0229.355] GetThemeBackgroundContentRect () returned 0x0
[0229.355] RestoreDC (hdc=0x310107c3, nSavedDC=-1) returned 1
[0229.355] GdipReleaseDC (graphics=0x5d92c30, hdc=0x310107c3) returned 0x0
[0229.355] IsAppThemed () returned 0x1
[0229.355] GetThemeAppProperties () returned 0x3
[0229.355] GetThemeAppProperties () returned 0x3
[0229.355] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0229.355] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0229.355] GetCurrentObject (hdc=0x310107c3, type=0x1) returned 0xb00017
[0229.355] GetCurrentObject (hdc=0x310107c3, type=0x2) returned 0x900010
[0229.355] GetCurrentObject (hdc=0x310107c3, type=0x7) returned 0x1e0507b9
[0229.355] GetCurrentObject (hdc=0x310107c3, type=0x6) returned 0x8a01c2
[0229.355] SaveDC (hdc=0x310107c3) returned 1
[0229.355] GetTextAlign (hdc=0x310107c3) returned 0x0
[0229.355] GetTextColor (hdc=0x310107c3) returned 0x0
[0229.355] GetCurrentObject (hdc=0x310107c3, type=0x6) returned 0x8a01c2
[0229.355] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0229.356] SelectObject (hdc=0x310107c3, h=0x450a0799) returned 0x8a01c2
[0229.356] GetBkMode (hdc=0x310107c3) returned 2
[0229.356] SetBkMode (hdc=0x310107c3, mode=1) returned 2
[0229.356] DrawTextExW (in: hdc=0x310107c3, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x23c1ce4 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0229.356] DrawTextExW (in: hdc=0x310107c3, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x23c1ce4 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0229.356] RestoreDC (hdc=0x310107c3, nSavedDC=-1) returned 1
[0229.356] GdipReleaseDC (graphics=0x5d92c30, hdc=0x310107c3) returned 0x0
[0229.356] GetFocus () returned 0x1f013e
[0229.356] IsAppThemed () returned 0x1
[0229.357] GetThemeAppProperties () returned 0x3
[0229.357] GetThemeAppProperties () returned 0x3
[0229.357] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0229.357] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x310107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0229.357] GdipReleaseDC (graphics=0x5d92c30, hdc=0x310107c3) returned 0x0
[0229.357] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0229.357] SelectObject (hdc=0x310107c3, h=0x85000f) returned 0x1e0507b9
[0229.357] DeleteDC (hdc=0x310107c3) returned 1
[0229.357] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0229.357] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0229.357] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.357] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.357] WaitMessage () returned 1
[0229.385] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.385] IsWindowUnicode (hWnd=0x102dc) returned 1
[0229.385] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.385] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.385] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.386] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.386] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.386] WaitMessage () returned 1
[0229.386] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.387] IsWindowUnicode (hWnd=0x102dc) returned 1
[0229.387] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.387] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.387] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.388] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.388] IsWindowUnicode (hWnd=0x102dc) returned 1
[0229.388] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.388] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.388] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.389] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.389] IsWindowUnicode (hWnd=0x102dc) returned 1
[0229.389] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.389] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.389] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.389] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.390] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.390] WaitMessage () returned 1
[0229.390] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.390] IsWindowUnicode (hWnd=0x102dc) returned 1
[0229.390] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.390] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.390] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.392] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.392] IsWindowUnicode (hWnd=0x102dc) returned 1
[0229.392] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.392] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.392] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.392] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.392] IsWindowUnicode (hWnd=0x102dc) returned 1
[0229.392] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.393] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.393] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.393] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.393] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.393] WaitMessage () returned 1
[0229.394] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.394] IsWindowUnicode (hWnd=0x102dc) returned 1
[0229.394] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.394] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.394] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.395] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.396] IsWindowUnicode (hWnd=0x102dc) returned 1
[0229.396] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.396] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.396] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.396] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.396] IsWindowUnicode (hWnd=0x102dc) returned 1
[0229.396] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.396] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.396] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.400] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.401] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.401] WaitMessage () returned 1
[0229.416] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.416] IsWindowUnicode (hWnd=0x1a02d6) returned 1
[0229.416] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.416] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.416] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.416] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.416] IsWindowUnicode (hWnd=0x1a02d6) returned 1
[0229.416] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.416] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.416] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.416] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x2a1, wParam=0x0, lParam=0x60021) returned 0x0
[0229.416] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.416] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.417] WaitMessage () returned 1
[0229.547] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.547] IsWindowUnicode (hWnd=0x202d0) returned 1
[0229.547] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.547] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.547] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.558] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.558] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0229.558] WaitMessage () returned 1
[0229.574] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x84, wParam=0x0, lParam=0x18f0362) returned 0x1
[0229.575] IsWindowUnicode (hWnd=0x1a02d6) returned 1
[0229.575] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x84, wParam=0x0, lParam=0x18f0362) returned 0x1
[0229.576] GetDlgItem (hDlg=0x40122, nIDDlgItem=0) returned 0x0
[0229.576] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x210, wParam=0x201, lParam=0x120143) returned 0x0
[0229.576] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x21, wParam=0x40122, lParam=0x2010001) returned 0x1
[0229.576] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x21, wParam=0x40122, lParam=0x2010001) returned 0x1
[0229.576] SetCursor (hCursor=0x10003) returned 0x10003
[0229.576] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.576] DispatchMessageW (lpMsg=0x53e8a0)
[0229.576] GetKeyState (nVirtKey=1) returned -127
[0229.576] GetKeyState (nVirtKey=2) returned 0
[0229.576] GetKeyState (nVirtKey=4) returned 0
[0229.576] GetKeyState (nVirtKey=5) returned 0
[0229.576] GetKeyState (nVirtKey=6) returned 0
[0229.576] IsWindowVisible (hWnd=0x1a02d6) returned 1
[0229.576] IsWindowEnabled (hWnd=0x1a02d6) returned 1
[0229.576] SetFocus (hWnd=0x1a02d6) returned 0x1f013e
[0229.577] GetFocus () returned 0x1a02d6
[0229.577] IsChild (hWndParent=0x40122, hWnd=0x1a02d6) returned 1
[0229.577] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x8, wParam=0x1a02d6, lParam=0x0) returned 0x1
[0229.577] SendMessageW (hWnd=0x1f013e, Msg=0x2111, wParam=0x200013e, lParam=0x1f013e) returned 0x0
[0229.578] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0229.579] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0229.580] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0229.580] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0229.580] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0229.580] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0229.582] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0229.582] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x7, wParam=0x1f013e, lParam=0x0) returned 0x0
[0229.582] GetStockObject (i=5) returned 0x900015
[0229.582] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0229.582] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0xd, wParam=0x3, lParam=0x89e7a8) returned 0x2
[0229.582] GetDlgItem (hDlg=0x40122, nIDDlgItem=1704662) returned 0x1a02d6
[0229.582] SendMessageW (hWnd=0x1a02d6, Msg=0x202b, wParam=0x1a02d6, lParam=0x53de74) returned 0x0
[0229.582] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x202b, wParam=0x1a02d6, lParam=0x53de74) returned 0x0
[0229.582] InvalidateRect (hWnd=0x1a02d6, lpRect=0x0, bErase=0) returned 1
[0229.583] GetFocus () returned 0x1a02d6
[0229.589] GetFocus () returned 0x1a02d6
[0229.589] GetFocus () returned 0x1a02d6
[0229.589] GetKeyState (nVirtKey=1) returned -127
[0229.589] GetKeyState (nVirtKey=2) returned 0
[0229.589] GetKeyState (nVirtKey=4) returned 0
[0229.589] GetKeyState (nVirtKey=5) returned 0
[0229.589] GetKeyState (nVirtKey=6) returned 0
[0229.589] GetCapture () returned 0x0
[0229.589] SetCapture (hWnd=0x1a02d6) returned 0x0
[0229.590] GetKeyState (nVirtKey=1) returned -127
[0229.590] GetKeyState (nVirtKey=2) returned 0
[0229.590] GetKeyState (nVirtKey=4) returned 0
[0229.590] GetKeyState (nVirtKey=5) returned 0
[0229.590] GetKeyState (nVirtKey=6) returned 0
[0229.590] NotifyWinEvent (event=0x800a, hwnd=0x1a02d6, idObject=-4, idChild=0)
[0229.590] InvalidateRect (hWnd=0x1a02d6, lpRect=0x53e4c8, bErase=0) returned 1
[0229.590] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.590] IsWindowUnicode (hWnd=0x1a02d6) returned 1
[0229.590] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.590] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0229.590] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0229.590] MapWindowPoints (in: hWndFrom=0x1a02d6, hWndTo=0x0, lpPoints=0x23c1f7c, cPoints=0x1 | out: lpPoints=0x23c1f7c) returned 25756481
[0229.590] NotifyWinEvent (event=0x800a, hwnd=0x1a02d6, idObject=-4, idChild=0)
[0229.590] InvalidateRect (hWnd=0x1a02d6, lpRect=0x53e468, bErase=0) returned 1
[0229.590] UpdateWindow (hWnd=0x1a02d6) returned 1
[0229.590] BeginPaint (in: hWnd=0x1a02d6, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0229.591] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0229.591] CreateCompatibleDC (hdc=0x10105d6) returned 0x20107c9
[0229.591] SelectObject (hdc=0x20107c9, h=0x1e0507b9) returned 0x85000f
[0229.591] GdipCreateFromHDC (hdc=0x20107c9, graphics=0x53df98) returned 0x0
[0229.591] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0229.591] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0229.591] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0229.591] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.591] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0229.591] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0229.591] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0229.591] LocalFree (hMem=0x89eee8) returned 0x0
[0229.591] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.591] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0229.591] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.591] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0229.592] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0229.592] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc270dbd) returned 0x0
[0229.592] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.592] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0229.592] GetCurrentObject (hdc=0x20107c9, type=0x1) returned 0xb00017
[0229.592] GetCurrentObject (hdc=0x20107c9, type=0x2) returned 0x900010
[0229.592] GetCurrentObject (hdc=0x20107c9, type=0x7) returned 0x1e0507b9
[0229.592] GetCurrentObject (hdc=0x20107c9, type=0x6) returned 0x8a01c2
[0229.592] SaveDC (hdc=0x20107c9) returned 1
[0229.592] GetNearestColor (hdc=0x20107c9, color=0xf0f0f0) returned 0xf0f0f0
[0229.592] GetNearestColor (hdc=0x20107c9, color=0xa0a0a0) returned 0xa0a0a0
[0229.592] GetNearestColor (hdc=0x20107c9, color=0x696969) returned 0x696969
[0229.592] GetNearestColor (hdc=0x20107c9, color=0xa0a0a0) returned 0xa0a0a0
[0229.592] GetNearestColor (hdc=0x20107c9, color=0x0) returned 0x0
[0229.592] GetNearestColor (hdc=0x20107c9, color=0xffffff) returned 0xffffff
[0229.592] GetNearestColor (hdc=0x20107c9, color=0xe5e5e5) returned 0xe5e5e5
[0229.592] GetNearestColor (hdc=0x20107c9, color=0xd7d7d7) returned 0xd7d7d7
[0229.592] GetNearestColor (hdc=0x20107c9, color=0x0) returned 0x0
[0229.593] RestoreDC (hdc=0x20107c9, nSavedDC=-1) returned 1
[0229.593] GdipReleaseDC (graphics=0x5d92c30, hdc=0x20107c9) returned 0x0
[0229.593] IsAppThemed () returned 0x1
[0229.593] GetThemeAppProperties () returned 0x3
[0229.593] GetThemeAppProperties () returned 0x3
[0229.593] IsAppThemed () returned 0x1
[0229.593] GetThemeAppProperties () returned 0x3
[0229.593] GetThemeAppProperties () returned 0x3
[0229.593] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0229.593] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x23c26f0 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0229.593] IsAppThemed () returned 0x1
[0229.593] GetThemeAppProperties () returned 0x3
[0229.593] GetThemeAppProperties () returned 0x3
[0229.593] IsAppThemed () returned 0x1
[0229.593] GetThemeAppProperties () returned 0x3
[0229.593] GetThemeAppProperties () returned 0x3
[0229.593] IsAppThemed () returned 0x1
[0229.594] GetThemeAppProperties () returned 0x3
[0229.594] GetThemeAppProperties () returned 0x3
[0229.594] IsAppThemed () returned 0x1
[0229.594] GetThemeAppProperties () returned 0x3
[0229.594] GetThemeAppProperties () returned 0x3
[0229.594] IsThemePartDefined () returned 0x1
[0229.594] IsAppThemed () returned 0x1
[0229.594] GetThemeAppProperties () returned 0x3
[0229.594] GetThemeAppProperties () returned 0x3
[0229.594] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0229.594] IsAppThemed () returned 0x1
[0229.594] GetThemeAppProperties () returned 0x3
[0229.594] GetThemeAppProperties () returned 0x3
[0229.594] IsAppThemed () returned 0x1
[0229.594] GetThemeAppProperties () returned 0x3
[0229.594] GetThemeAppProperties () returned 0x3
[0229.594] IsThemePartDefined () returned 0x1
[0229.594] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0229.594] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.594] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0229.594] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.594] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0229.594] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0229.594] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0229.595] LocalFree (hMem=0x89ea88) returned 0x0
[0229.595] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0229.595] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0229.595] LocalFree (hMem=0x89eee8) returned 0x0
[0229.595] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.595] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0229.595] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0229.595] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0229.595] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.595] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0229.595] GetCurrentObject (hdc=0x20107c9, type=0x1) returned 0xb00017
[0229.595] GetCurrentObject (hdc=0x20107c9, type=0x2) returned 0x900010
[0229.595] GetCurrentObject (hdc=0x20107c9, type=0x7) returned 0x1e0507b9
[0229.595] GetCurrentObject (hdc=0x20107c9, type=0x6) returned 0x8a01c2
[0229.595] SaveDC (hdc=0x20107c9) returned 1
[0229.595] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfc04051e
[0229.595] GetClipRgn (hdc=0x20107c9, hrgn=0xfc04051e) returned 0
[0229.595] SelectClipRgn (hdc=0x20107c9, hrgn=0x120407a1) returned 2
[0229.595] DeleteObject (ho=0xfc04051e) returned 1
[0229.596] DeleteObject (ho=0x120407a1) returned 1
[0229.596] OffsetViewportOrgEx (in: hdc=0x20107c9, x=0, y=0, lppt=0x23c2da0 | out: lppt=0x23c2da0) returned 1
[0229.596] DrawThemeParentBackground ()
[0229.596] GetWindowPlacement (in: hWnd=0x40122, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0229.596] GetClientRect (in: hWnd=0x40122, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0229.596] GetWindowTextLengthW (hWnd=0x40122)
[0229.596] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.596] GetSystemMetrics (nIndex=42) returned 0
[0229.596] GetWindowTextW (hWnd=0x40122, lpString=0x53d878, nMaxCount=11)
[0229.596] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0229.596] GetClientRect (in: hWnd=0x40122, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0229.596] GetCurrentObject (hdc=0x20107c9, type=0x1) returned 0xb00017
[0229.596] GetCurrentObject (hdc=0x20107c9, type=0x2) returned 0x900010
[0229.596] GetCurrentObject (hdc=0x20107c9, type=0x7) returned 0x1e0507b9
[0229.596] GetCurrentObject (hdc=0x20107c9, type=0x6) returned 0x8a01c2
[0229.596] SaveDC (hdc=0x20107c9) returned 2
[0229.597] GetNearestColor (hdc=0x20107c9, color=0xf0f0f0) returned 0xf0f0f0
[0229.597] CreateSolidBrush (color=0xf0f0f0) returned 0xd910078d
[0229.597] FillRect (hDC=0x20107c9, lprc=0x53d760, hbr=0xd910078d) returned 1
[0229.597] DeleteObject (ho=0xd910078d) returned 1
[0229.597] RestoreDC (hdc=0x20107c9, nSavedDC=-1) returned 1
[0229.597] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.597] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0229.597] GetClientRect (in: hWnd=0x40122, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0229.597] GetCurrentObject (hdc=0x20107c9, type=0x1) returned 0xb00017
[0229.597] GetCurrentObject (hdc=0x20107c9, type=0x2) returned 0x900010
[0229.597] GetCurrentObject (hdc=0x20107c9, type=0x7) returned 0x1e0507b9
[0229.597] GetCurrentObject (hdc=0x20107c9, type=0x6) returned 0x8a01c2
[0229.597] SaveDC (hdc=0x20107c9) returned 2
[0229.597] GetNearestColor (hdc=0x20107c9, color=0xf0f0f0) returned 0xf0f0f0
[0229.598] CreateSolidBrush (color=0xf0f0f0) returned 0xda10078d
[0229.598] FillRect (hDC=0x20107c9, lprc=0x53d700, hbr=0xda10078d) returned 1
[0229.598] DeleteObject (ho=0xda10078d) returned 1
[0229.598] RestoreDC (hdc=0x20107c9, nSavedDC=-1) returned 1
[0229.598] GetWindowTextLengthW (hWnd=0x40122)
[0229.598] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.598] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0229.599] RestoreDC (hdc=0x20107c9, nSavedDC=-1) returned 1
[0229.599] GdipReleaseDC (graphics=0x5d92c30, hdc=0x20107c9) returned 0x0
[0229.599] IsAppThemed () returned 0x1
[0229.599] GetThemeAppProperties () returned 0x3
[0229.599] GetThemeAppProperties () returned 0x3
[0229.599] IsAppThemed () returned 0x1
[0229.599] GetThemeAppProperties () returned 0x3
[0229.599] GetThemeAppProperties () returned 0x3
[0229.599] IsThemePartDefined () returned 0x1
[0229.599] GdipCreateRegion (region=0x53dc80) returned 0x0
[0229.599] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.599] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0229.599] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.599] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0229.600] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0229.600] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0229.600] LocalFree (hMem=0x89ec80) returned 0x0
[0229.600] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0229.600] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0229.600] LocalFree (hMem=0x89eee8) returned 0x0
[0229.600] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.600] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0229.600] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0229.600] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0229.600] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.600] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0229.600] GetCurrentObject (hdc=0x20107c9, type=0x1) returned 0xb00017
[0229.600] GetCurrentObject (hdc=0x20107c9, type=0x2) returned 0x900010
[0229.600] GetCurrentObject (hdc=0x20107c9, type=0x7) returned 0x1e0507b9
[0229.600] GetCurrentObject (hdc=0x20107c9, type=0x6) returned 0x8a01c2
[0229.600] SaveDC (hdc=0x20107c9) returned 1
[0229.600] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x130407a1
[0229.600] GetClipRgn (hdc=0x20107c9, hrgn=0x130407a1) returned 0
[0229.601] SelectClipRgn (hdc=0x20107c9, hrgn=0xfe04051e) returned 2
[0229.601] DeleteObject (ho=0x130407a1) returned 1
[0229.601] DeleteObject (ho=0xfe04051e) returned 1
[0229.601] OffsetViewportOrgEx (in: hdc=0x20107c9, x=0, y=0, lppt=0x23c3628 | out: lppt=0x23c3628) returned 1
[0229.601] IsAppThemed () returned 0x1
[0229.601] GetThemeAppProperties () returned 0x3
[0229.601] GetThemeAppProperties () returned 0x3
[0229.601] DrawThemeBackground () returned 0x0
[0229.601] RestoreDC (hdc=0x20107c9, nSavedDC=-1) returned 1
[0229.601] GdipReleaseDC (graphics=0x5d92c30, hdc=0x20107c9) returned 0x0
[0229.601] GdipCreateRegion (region=0x53dc84) returned 0x0
[0229.601] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.601] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0229.601] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.601] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0229.601] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0229.601] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0229.601] LocalFree (hMem=0x89eee8) returned 0x0
[0229.601] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.602] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0229.602] LocalFree (hMem=0x89ee08) returned 0x0
[0229.602] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.602] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0229.602] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0229.602] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0229.602] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.602] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0229.602] GetCurrentObject (hdc=0x20107c9, type=0x1) returned 0xb00017
[0229.602] GetCurrentObject (hdc=0x20107c9, type=0x2) returned 0x900010
[0229.602] GetCurrentObject (hdc=0x20107c9, type=0x7) returned 0x1e0507b9
[0229.602] GetCurrentObject (hdc=0x20107c9, type=0x6) returned 0x8a01c2
[0229.602] SaveDC (hdc=0x20107c9) returned 1
[0229.602] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xff04051e
[0229.602] GetClipRgn (hdc=0x20107c9, hrgn=0xff04051e) returned 0
[0229.602] SelectClipRgn (hdc=0x20107c9, hrgn=0x140407a1) returned 2
[0229.602] DeleteObject (ho=0xff04051e) returned 1
[0229.602] DeleteObject (ho=0x140407a1) returned 1
[0229.602] OffsetViewportOrgEx (in: hdc=0x20107c9, x=0, y=0, lppt=0x23c38fc | out: lppt=0x23c38fc) returned 1
[0229.603] IsAppThemed () returned 0x1
[0229.603] GetThemeAppProperties () returned 0x3
[0229.603] GetThemeAppProperties () returned 0x3
[0229.603] GetThemeBackgroundContentRect () returned 0x0
[0229.603] RestoreDC (hdc=0x20107c9, nSavedDC=-1) returned 1
[0229.603] GdipReleaseDC (graphics=0x5d92c30, hdc=0x20107c9) returned 0x0
[0229.603] IsAppThemed () returned 0x1
[0229.603] GetThemeAppProperties () returned 0x3
[0229.603] GetThemeAppProperties () returned 0x3
[0229.603] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0229.603] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0229.603] GetCurrentObject (hdc=0x20107c9, type=0x1) returned 0xb00017
[0229.603] GetCurrentObject (hdc=0x20107c9, type=0x2) returned 0x900010
[0229.603] GetCurrentObject (hdc=0x20107c9, type=0x7) returned 0x1e0507b9
[0229.603] GetCurrentObject (hdc=0x20107c9, type=0x6) returned 0x8a01c2
[0229.603] SaveDC (hdc=0x20107c9) returned 1
[0229.603] GetTextAlign (hdc=0x20107c9) returned 0x0
[0229.603] GetTextColor (hdc=0x20107c9) returned 0x0
[0229.604] GetCurrentObject (hdc=0x20107c9, type=0x6) returned 0x8a01c2
[0229.604] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0229.604] SelectObject (hdc=0x20107c9, h=0x730a066d) returned 0x8a01c2
[0229.604] GetBkMode (hdc=0x20107c9) returned 2
[0229.604] SetBkMode (hdc=0x20107c9, mode=1) returned 2
[0229.604] DrawTextExW (in: hdc=0x20107c9, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x23c3c9c | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0229.604] DrawTextExW (in: hdc=0x20107c9, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x23c3c9c | out: lpchText="OK", lprc=0x53dd80) returned 13
[0229.605] RestoreDC (hdc=0x20107c9, nSavedDC=-1) returned 1
[0229.605] GdipReleaseDC (graphics=0x5d92c30, hdc=0x20107c9) returned 0x0
[0229.605] GetFocus () returned 0x1a02d6
[0229.605] IsAppThemed () returned 0x1
[0229.605] GetThemeAppProperties () returned 0x3
[0229.605] GetThemeAppProperties () returned 0x3
[0229.605] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0229.605] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x20107c9, x1=0, y1=0, rop=0xcc0020) returned 1
[0229.605] GdipReleaseDC (graphics=0x5d92c30, hdc=0x20107c9) returned 0x0
[0229.605] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0229.605] SelectObject (hdc=0x20107c9, h=0x85000f) returned 0x1e0507b9
[0229.605] DeleteDC (hdc=0x20107c9) returned 1
[0229.605] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0229.605] EndPaint (hWnd=0x1a02d6, lpPaint=0x53df7c) returned 1
[0229.606] MapWindowPoints (in: hWndFrom=0x1a02d6, hWndTo=0x0, lpPoints=0x23c3d98, cPoints=0x1 | out: lpPoints=0x23c3d98) returned 25756481
[0229.606] WindowFromPoint (Point=0x362) returned 0x1a02d6
[0229.606] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x84, wParam=0x0, lParam=0x18f0362) returned 0x1
[0229.606] NotifyWinEvent (event=0x800a, hwnd=0x1a02d6, idObject=-4, idChild=0)
[0229.606] NotifyWinEvent (event=0x800c, hwnd=0x1a02d6, idObject=-4, idChild=0)
[0229.606] GetWindowTextLengthW (hWnd=0x1f013e) returned 0
[0229.606] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0229.606] GetSystemMetrics (nIndex=42) returned 0
[0229.606] GetWindowTextW (in: hWnd=0x1f013e, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0229.606] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0229.606] SendMessageW (hWnd=0x40122, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0229.606] GetCapture () returned 0x1a02d6
[0229.606] ReleaseCapture () returned 1
[0229.606] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0229.607] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0229.607] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x84, wParam=0x0, lParam=0x18f0362) returned 0x1
[0229.607] IsWindow (hWnd=0x70036) returned 1
[0229.607] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0229.608] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0229.609] IsWindow (hWnd=0x70036) returned 1
[0229.609] SetActiveWindow (hWnd=0x70036) returned 0x40122
[0229.609] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0229.610] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0229.610] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0229.611] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0229.611] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0229.611] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0229.612] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0229.612] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x40122) returned 0x1
[0229.614] GetFocus () returned 0x1a02d6
[0229.614] SetFocus (hWnd=0x202c6) returned 0x1a02d6
[0229.619] GetFocus () returned 0x202c6
[0229.619] IsChild (hWndParent=0x40122, hWnd=0x202c6) returned 0
[0229.619] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0229.619] GetCapture () returned 0x0
[0229.619] InvalidateRect (hWnd=0x1a02d6, lpRect=0x0, bErase=0) returned 1
[0229.620] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0229.621] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0229.622] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0229.622] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0229.623] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0229.623] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0229.623] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0229.623] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x1a02d6, lParam=0x0) returned 0x0
[0229.623] GetStockObject (i=5) returned 0x900015
[0229.624] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0229.624] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8daa30) returned 0x7
[0229.624] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0229.624] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0229.624] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0229.624] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0229.629] IsWindow (hWnd=0x202c6) returned 1
[0229.629] SetFocus (hWnd=0x202c6) returned 0x202c6
[0229.629] GetWindowLongW (hWnd=0x40122, nIndex=-8) returned 458806
[0229.629] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0229.629] GetCurrentThreadId () returned 0x11d0
[0229.629] IsWindow (hWnd=0x70036) returned 1
[0229.629] IsWindow (hWnd=0x70036) returned 1
[0229.629] IsWindowVisible (hWnd=0x70036) returned 1
[0229.629] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0229.629] GetFocus () returned 0x202c6
[0229.630] IsChild (hWndParent=0x40122, hWnd=0x202c6) returned 0
[0229.630] ShowWindow (hWnd=0x40122, nCmdShow=0) returned 1
[0229.630] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0229.630] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0229.633] GetWindowPlacement (in: hWnd=0x40122, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0229.633] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0229.633] GetClientRect (in: hWnd=0x40122, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0229.633] GetWindowRect (in: hWnd=0x40122, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0229.634] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0229.634] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0229.634] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0229.634] GetWindowLongW (hWnd=0x40122, nIndex=-20) returned 327937
[0229.634] DestroyWindow (hWnd=0x40122) returned 1
[0229.634] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0229.635] GetWindowTextLengthW (hWnd=0x40122) returned 10
[0229.635] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0229.635] GetSystemMetrics (nIndex=42) returned 0
[0229.635] GetWindowTextW (in: hWnd=0x40122, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0229.635] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0229.635] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0229.635] SendMessageW (hWnd=0x1f013e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0229.635] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0229.635] SendMessageW (hWnd=0x1f013e, Msg=0xb0, wParam=0x23abd6c, lParam=0x53e518) returned 0x0
[0229.636] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xb0, wParam=0x23abd6c, lParam=0x53e518) returned 0x0
[0229.636] GetWindowTextLengthW (hWnd=0x1f013e) returned 0
[0229.636] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0229.636] GetSystemMetrics (nIndex=42) returned 0
[0229.636] GetWindowTextW (in: hWnd=0x1f013e, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0229.636] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0229.636] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0229.636] GetWindowThreadProcessId (in: hWnd=0x401e2, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0229.636] GetWindow (hWnd=0x401e2, uCmd=0x5) returned 0x0
[0229.636] GetWindowLongW (hWnd=0x401e2, nIndex=-20) returned 65792
[0229.636] DestroyWindow (hWnd=0x401e2) returned 1
[0229.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x401e2, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0229.636] GetWindowTextLengthW (hWnd=0x401e2) returned 25
[0229.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x401e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0229.636] GetSystemMetrics (nIndex=42) returned 0
[0229.636] GetWindowTextW (in: hWnd=0x401e2, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0229.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x401e2, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0229.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x401e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0229.637] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x401e2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0229.637] GetWindowTextLengthW (hWnd=0x500ea) returned 16
[0229.637] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0229.637] GetSystemMetrics (nIndex=42) returned 0
[0229.637] GetWindowTextW (in: hWnd=0x500ea, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0229.637] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0229.638] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0229.638] InvalidateRect (hWnd=0x1a02d6, lpRect=0x0, bErase=0) returned 1
[0229.638] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0229.638] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0229.638] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1f013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0229.639] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x500ea, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0229.640] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a02d6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0229.641] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf02c0, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0229.642] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40122, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0229.644] GetProcessWindowStation () returned 0x13c
[0229.644] GetActiveWindow () returned 0x70036
[0229.645] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0229.645] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0229.645] GetCurrentThreadId () returned 0x11d0
[0229.645] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4ebe, lParam=0x0) returned 1
[0229.645] IsWindowVisible (hWnd=0x70036) returned 1
[0229.645] IsWindowEnabled (hWnd=0x70036) returned 1
[0229.645] IsWindowVisible (hWnd=0x602b6) returned 0
[0229.645] IsWindowVisible (hWnd=0x901f8) returned 0
[0229.645] IsWindowVisible (hWnd=0x202d0) returned 0
[0229.645] IsWindowVisible (hWnd=0x202d4) returned 0
[0229.645] GetActiveWindow () returned 0x70036
[0229.645] GetFocus () returned 0x202c6
[0229.645] IsWindow (hWnd=0x70036) returned 1
[0229.645] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0229.645] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0229.646] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0229.646] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0229.657] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0229.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x50122) returned 0x1
[0229.669] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0229.669] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0229.687] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1002c0, lParam=0x0) returned 0x0
[0229.687] GetCapture () returned 0x0
[0229.687] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0229.688] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0229.689] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0229.690] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0229.694] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x60100ce
[0229.694] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0229.695] CreateCompatibleDC (hdc=0x60100ce) returned 0x440107c1
[0229.695] SelectObject (hdc=0x440107c1, h=0x1e0507b9) returned 0x85000f
[0229.695] GdipCreateFromHDC (hdc=0x440107c1, graphics=0x53e108) returned 0x0
[0229.695] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0229.695] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0229.695] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0229.695] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.695] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0229.695] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0229.695] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0229.695] LocalFree (hMem=0x89eac0) returned 0x0
[0229.695] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.695] GdipCreateRegion (region=0x53e150) returned 0x0
[0229.695] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.695] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0229.696] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0229.696] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc250dbd) returned 0x0
[0229.696] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.696] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0229.696] GetCurrentObject (hdc=0x440107c1, type=0x1) returned 0xb00017
[0229.696] GetCurrentObject (hdc=0x440107c1, type=0x2) returned 0x900010
[0229.696] GetCurrentObject (hdc=0x440107c1, type=0x7) returned 0x1e0507b9
[0229.696] GetCurrentObject (hdc=0x440107c1, type=0x6) returned 0x8a01c2
[0229.696] SaveDC (hdc=0x440107c1) returned 1
[0229.696] GetNearestColor (hdc=0x440107c1, color=0xff) returned 0xff
[0229.696] GetNearestColor (hdc=0x440107c1, color=0x55) returned 0x55
[0229.696] GetNearestColor (hdc=0x440107c1, color=0x0) returned 0x0
[0229.696] GetNearestColor (hdc=0x440107c1, color=0x55) returned 0x55
[0229.696] GetNearestColor (hdc=0x440107c1, color=0x0) returned 0x0
[0229.696] GetNearestColor (hdc=0x440107c1, color=0x8080ff) returned 0x8080ff
[0229.696] GetNearestColor (hdc=0x440107c1, color=0x7373e5) returned 0x7373e5
[0229.697] GetNearestColor (hdc=0x440107c1, color=0xe5) returned 0xe5
[0229.697] GetNearestColor (hdc=0x440107c1, color=0x0) returned 0x0
[0229.697] RestoreDC (hdc=0x440107c1, nSavedDC=-1) returned 1
[0229.697] GdipReleaseDC (graphics=0x5d92c30, hdc=0x440107c1) returned 0x0
[0229.697] IsAppThemed () returned 0x1
[0229.697] GetThemeAppProperties () returned 0x3
[0229.697] GetThemeAppProperties () returned 0x3
[0229.697] IsAppThemed () returned 0x1
[0229.697] GetThemeAppProperties () returned 0x3
[0229.697] GetThemeAppProperties () returned 0x3
[0229.697] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0229.697] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x23c5090 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0229.697] IsAppThemed () returned 0x1
[0229.697] GetThemeAppProperties () returned 0x3
[0229.697] GetThemeAppProperties () returned 0x3
[0229.697] IsAppThemed () returned 0x1
[0229.698] GetThemeAppProperties () returned 0x3
[0229.698] GetThemeAppProperties () returned 0x3
[0229.698] GetFocus () returned 0x1002c0
[0229.698] IsAppThemed () returned 0x1
[0229.698] GetThemeAppProperties () returned 0x3
[0229.698] GetThemeAppProperties () returned 0x3
[0229.698] IsAppThemed () returned 0x1
[0229.698] GetThemeAppProperties () returned 0x3
[0229.698] GetThemeAppProperties () returned 0x3
[0229.698] IsThemePartDefined () returned 0x1
[0229.698] IsAppThemed () returned 0x1
[0229.698] GetThemeAppProperties () returned 0x3
[0229.698] GetThemeAppProperties () returned 0x3
[0229.698] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0229.698] IsAppThemed () returned 0x1
[0229.698] GetThemeAppProperties () returned 0x3
[0229.698] GetThemeAppProperties () returned 0x3
[0229.698] IsAppThemed () returned 0x1
[0229.698] GetThemeAppProperties () returned 0x3
[0229.698] GetThemeAppProperties () returned 0x3
[0229.698] IsThemePartDefined () returned 0x1
[0229.698] GdipCreateRegion (region=0x53de78) returned 0x0
[0229.698] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.698] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0229.698] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.698] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0229.698] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.698] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0229.699] LocalFree (hMem=0x89ee08) returned 0x0
[0229.699] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0229.699] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0229.699] LocalFree (hMem=0x89eac0) returned 0x0
[0229.699] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.699] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0229.699] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0229.699] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0229.699] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.699] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0229.699] GetCurrentObject (hdc=0x440107c1, type=0x1) returned 0xb00017
[0229.699] GetCurrentObject (hdc=0x440107c1, type=0x2) returned 0x900010
[0229.699] GetCurrentObject (hdc=0x440107c1, type=0x7) returned 0x1e0507b9
[0229.699] GetCurrentObject (hdc=0x440107c1, type=0x6) returned 0x8a01c2
[0229.699] SaveDC (hdc=0x440107c1) returned 1
[0229.699] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x150407a1
[0229.699] GetClipRgn (hdc=0x440107c1, hrgn=0x150407a1) returned 0
[0229.699] SelectClipRgn (hdc=0x440107c1, hrgn=0x504051e) returned 2
[0229.699] DeleteObject (ho=0x150407a1) returned 1
[0229.699] DeleteObject (ho=0x504051e) returned 1
[0229.700] OffsetViewportOrgEx (in: hdc=0x440107c1, x=0, y=0, lppt=0x23c5740 | out: lppt=0x23c5740) returned 1
[0229.700] DrawThemeParentBackground () returned 0x0
[0229.700] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0229.700] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0229.700] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0229.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0229.700] GetSystemMetrics (nIndex=42) returned 0
[0229.700] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0229.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0229.700] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0229.700] GetCurrentObject (hdc=0x440107c1, type=0x1) returned 0xb00017
[0229.700] GetCurrentObject (hdc=0x440107c1, type=0x2) returned 0x900010
[0229.700] GetCurrentObject (hdc=0x440107c1, type=0x7) returned 0x1e0507b9
[0229.700] GetCurrentObject (hdc=0x440107c1, type=0x6) returned 0x8a01c2
[0229.700] SaveDC (hdc=0x440107c1) returned 2
[0229.700] GetNearestColor (hdc=0x440107c1, color=0xff) returned 0xff
[0229.700] CreateSolidBrush (color=0xff) returned 0xdb10078d
[0229.700] FillRect (hDC=0x440107c1, lprc=0x53d8d8, hbr=0xdb10078d) returned 1
[0229.701] DeleteObject (ho=0xdb10078d) returned 1
[0229.701] RestoreDC (hdc=0x440107c1, nSavedDC=-1) returned 1
[0229.701] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0229.701] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0229.701] GetSystemMetrics (nIndex=42) returned 0
[0229.701] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0229.701] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0229.701] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0229.701] GetCurrentObject (hdc=0x440107c1, type=0x1) returned 0xb00017
[0229.701] GetCurrentObject (hdc=0x440107c1, type=0x2) returned 0x900010
[0229.701] GetCurrentObject (hdc=0x440107c1, type=0x7) returned 0x1e0507b9
[0229.701] GetCurrentObject (hdc=0x440107c1, type=0x6) returned 0x8a01c2
[0229.701] SaveDC (hdc=0x440107c1) returned 2
[0229.701] GetNearestColor (hdc=0x440107c1, color=0xff) returned 0xff
[0229.701] CreateSolidBrush (color=0xff) returned 0xdc10078d
[0229.701] FillRect (hDC=0x440107c1, lprc=0x53d878, hbr=0xdc10078d) returned 1
[0229.701] DeleteObject (ho=0xdc10078d) returned 1
[0229.701] RestoreDC (hdc=0x440107c1, nSavedDC=-1) returned 1
[0229.701] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0229.701] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0229.702] GetSystemMetrics (nIndex=42) returned 0
[0229.702] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0229.702] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0229.702] RestoreDC (hdc=0x440107c1, nSavedDC=-1) returned 1
[0229.702] GdipReleaseDC (graphics=0x5d92c30, hdc=0x440107c1) returned 0x0
[0229.702] IsAppThemed () returned 0x1
[0229.702] GetThemeAppProperties () returned 0x3
[0229.702] GetThemeAppProperties () returned 0x3
[0229.702] IsAppThemed () returned 0x1
[0229.702] GetThemeAppProperties () returned 0x3
[0229.702] GetThemeAppProperties () returned 0x3
[0229.702] IsThemePartDefined () returned 0x1
[0229.702] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0229.702] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.702] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0229.702] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0229.702] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0229.702] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0229.702] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0229.702] LocalFree (hMem=0x89ec80) returned 0x0
[0229.702] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.703] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0229.703] LocalFree (hMem=0x89ee08) returned 0x0
[0229.703] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0229.703] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0229.703] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0229.703] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0229.703] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.703] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0229.703] GetCurrentObject (hdc=0x440107c1, type=0x1) returned 0xb00017
[0229.703] GetCurrentObject (hdc=0x440107c1, type=0x2) returned 0x900010
[0229.703] GetCurrentObject (hdc=0x440107c1, type=0x7) returned 0x1e0507b9
[0229.703] GetCurrentObject (hdc=0x440107c1, type=0x6) returned 0x8a01c2
[0229.703] SaveDC (hdc=0x440107c1) returned 1
[0229.703] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x604051e
[0229.703] GetClipRgn (hdc=0x440107c1, hrgn=0x604051e) returned 0
[0229.703] SelectClipRgn (hdc=0x440107c1, hrgn=0x170407a1) returned 2
[0229.703] DeleteObject (ho=0x604051e) returned 1
[0229.703] DeleteObject (ho=0x170407a1) returned 1
[0229.703] OffsetViewportOrgEx (in: hdc=0x440107c1, x=0, y=0, lppt=0x23c5fa4 | out: lppt=0x23c5fa4) returned 1
[0229.703] IsAppThemed () returned 0x1
[0229.704] GetThemeAppProperties () returned 0x3
[0229.704] GetThemeAppProperties () returned 0x3
[0229.704] DrawThemeBackground () returned 0x0
[0229.704] RestoreDC (hdc=0x440107c1, nSavedDC=-1) returned 1
[0229.704] GdipReleaseDC (graphics=0x5d92c30, hdc=0x440107c1) returned 0x0
[0229.704] GdipCreateRegion (region=0x53de00) returned 0x0
[0229.704] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0229.704] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0229.704] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0229.704] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0229.704] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0229.704] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0229.705] LocalFree (hMem=0x89ee08) returned 0x0
[0229.705] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0229.705] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0229.705] LocalFree (hMem=0x89eac0) returned 0x0
[0229.705] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0229.705] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0229.705] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0229.705] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0229.705] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0229.705] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0229.705] GetCurrentObject (hdc=0x440107c1, type=0x1) returned 0xb00017
[0229.705] GetCurrentObject (hdc=0x440107c1, type=0x2) returned 0x900010
[0229.705] GetCurrentObject (hdc=0x440107c1, type=0x7) returned 0x1e0507b9
[0229.705] GetCurrentObject (hdc=0x440107c1, type=0x6) returned 0x8a01c2
[0229.705] SaveDC (hdc=0x440107c1) returned 1
[0229.705] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x180407a1
[0229.705] GetClipRgn (hdc=0x440107c1, hrgn=0x180407a1) returned 0
[0229.705] SelectClipRgn (hdc=0x440107c1, hrgn=0x704051e) returned 2
[0229.705] DeleteObject (ho=0x180407a1) returned 1
[0229.705] DeleteObject (ho=0x704051e) returned 1
[0229.705] OffsetViewportOrgEx (in: hdc=0x440107c1, x=0, y=0, lppt=0x23c6278 | out: lppt=0x23c6278) returned 1
[0229.706] IsAppThemed () returned 0x1
[0229.706] GetThemeAppProperties () returned 0x3
[0229.706] GetThemeAppProperties () returned 0x3
[0229.706] GetThemeBackgroundContentRect () returned 0x0
[0229.706] RestoreDC (hdc=0x440107c1, nSavedDC=-1) returned 1
[0229.706] GdipReleaseDC (graphics=0x5d92c30, hdc=0x440107c1) returned 0x0
[0229.706] IsAppThemed () returned 0x1
[0229.706] GetThemeAppProperties () returned 0x3
[0229.706] GetThemeAppProperties () returned 0x3
[0229.706] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0229.706] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0229.706] GetCurrentObject (hdc=0x440107c1, type=0x1) returned 0xb00017
[0229.706] GetCurrentObject (hdc=0x440107c1, type=0x2) returned 0x900010
[0229.706] GetCurrentObject (hdc=0x440107c1, type=0x7) returned 0x1e0507b9
[0229.706] GetCurrentObject (hdc=0x440107c1, type=0x6) returned 0x8a01c2
[0229.706] SaveDC (hdc=0x440107c1) returned 1
[0229.706] GetTextAlign (hdc=0x440107c1) returned 0x0
[0229.706] GetTextColor (hdc=0x440107c1) returned 0x0
[0229.706] GetCurrentObject (hdc=0x440107c1, type=0x6) returned 0x8a01c2
[0229.706] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0229.707] SelectObject (hdc=0x440107c1, h=0x450a0799) returned 0x8a01c2
[0229.707] GetBkMode (hdc=0x440107c1) returned 2
[0229.707] SetBkMode (hdc=0x440107c1, mode=1) returned 2
[0229.707] DrawTextExW (in: hdc=0x440107c1, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x23c6618 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0229.707] DrawTextExW (in: hdc=0x440107c1, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x23c6618 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0229.707] RestoreDC (hdc=0x440107c1, nSavedDC=-1) returned 1
[0229.707] GdipReleaseDC (graphics=0x5d92c30, hdc=0x440107c1) returned 0x0
[0229.707] GetFocus () returned 0x1002c0
[0229.707] IsAppThemed () returned 0x1
[0229.708] GetThemeAppProperties () returned 0x3
[0229.708] GetThemeAppProperties () returned 0x3
[0229.708] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0229.708] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x440107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0229.708] GdipReleaseDC (graphics=0x5d92c30, hdc=0x440107c1) returned 0x0
[0229.708] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0229.708] SelectObject (hdc=0x440107c1, h=0x85000f) returned 0x1e0507b9
[0229.708] DeleteDC (hdc=0x440107c1) returned 1
[0229.708] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0229.708] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0230.000] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0230.000] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0230.000] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x50122) returned 0x1
[0230.003] GetFocus () returned 0x50122
[0230.003] GetAncestor (hwnd=0x50122, gaFlags=0x1) returned 0x10010
[0230.003] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0230.003] SetFocus (hWnd=0x202c6) returned 0x0
[0230.023] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0230.024] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0230.024] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0230.025] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0230.025] GetFocus () returned 0x70036
[0230.025] SetFocus (hWnd=0x202c6) returned 0x0
[0230.030] IsWindow (hWnd=0x70036) returned 1
[0230.030] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0230.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0230.030] IsWindow (hWnd=0x70036) returned 1
[0230.030] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0230.030] IsWindow (hWnd=0x202c6) returned 1
[0230.030] SetFocus (hWnd=0x202c6) returned 0x70036
[0230.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0230.031] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0230.032] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0230.034] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0230.034] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0230.034] GetStockObject (i=5) returned 0x900015
[0230.034] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0230.034] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8daa30) returned 0x7
[0230.034] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0230.034] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0230.034] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0230.034] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0230.036] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0230.036] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0230.036] GetFocus () returned 0x202c6
[0230.036] GetCapture () returned 0x0
[0230.036] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.036] IsWindowUnicode (hWnd=0x202c6) returned 1
[0230.036] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.037] TranslateMessage (lpMsg=0x53eef8) returned 0
[0230.037] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0230.047] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.048] IsWindowUnicode (hWnd=0x202c6) returned 1
[0230.048] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.048] TranslateMessage (lpMsg=0x53eef8) returned 0
[0230.048] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0230.048] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0230.048] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0230.048] CreateCompatibleDC (hdc=0x8b010786) returned 0x180107b1
[0230.048] SelectObject (hdc=0x180107b1, h=0x1e0507b9) returned 0x85000f
[0230.048] GdipCreateFromHDC (hdc=0x180107b1, graphics=0x53e958) returned 0x0
[0230.048] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0230.048] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0230.048] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0230.048] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0230.049] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0230.049] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0230.049] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0230.049] LocalFree (hMem=0x89ec80) returned 0x0
[0230.049] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0230.049] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0230.049] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0230.049] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0230.049] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0230.049] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc230dbd) returned 0x0
[0230.049] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0230.049] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0230.049] GetCurrentObject (hdc=0x180107b1, type=0x1) returned 0xb00017
[0230.049] GetCurrentObject (hdc=0x180107b1, type=0x2) returned 0x900010
[0230.049] GetCurrentObject (hdc=0x180107b1, type=0x7) returned 0x1e0507b9
[0230.049] GetCurrentObject (hdc=0x180107b1, type=0x6) returned 0x8a01c2
[0230.049] SaveDC (hdc=0x180107b1) returned 1
[0230.049] GetNearestColor (hdc=0x180107b1, color=0xff) returned 0xff
[0230.049] GetNearestColor (hdc=0x180107b1, color=0x55) returned 0x55
[0230.049] GetNearestColor (hdc=0x180107b1, color=0x0) returned 0x0
[0230.050] GetNearestColor (hdc=0x180107b1, color=0x55) returned 0x55
[0230.050] GetNearestColor (hdc=0x180107b1, color=0x0) returned 0x0
[0230.050] GetNearestColor (hdc=0x180107b1, color=0x8080ff) returned 0x8080ff
[0230.050] GetNearestColor (hdc=0x180107b1, color=0x7373e5) returned 0x7373e5
[0230.050] GetNearestColor (hdc=0x180107b1, color=0xe5) returned 0xe5
[0230.050] GetNearestColor (hdc=0x180107b1, color=0x0) returned 0x0
[0230.050] RestoreDC (hdc=0x180107b1, nSavedDC=-1) returned 1
[0230.050] GdipReleaseDC (graphics=0x5d92c30, hdc=0x180107b1) returned 0x0
[0230.050] IsAppThemed () returned 0x1
[0230.050] GetThemeAppProperties () returned 0x3
[0230.050] GetThemeAppProperties () returned 0x3
[0230.050] IsAppThemed () returned 0x1
[0230.050] GetThemeAppProperties () returned 0x3
[0230.050] GetThemeAppProperties () returned 0x3
[0230.050] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x23c6e74 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0230.051] IsAppThemed () returned 0x1
[0230.051] GetThemeAppProperties () returned 0x3
[0230.051] GetThemeAppProperties () returned 0x3
[0230.051] IsAppThemed () returned 0x1
[0230.051] GetThemeAppProperties () returned 0x3
[0230.051] GetThemeAppProperties () returned 0x3
[0230.051] GetFocus () returned 0x202c6
[0230.051] IsAppThemed () returned 0x1
[0230.051] GetThemeAppProperties () returned 0x3
[0230.051] GetThemeAppProperties () returned 0x3
[0230.051] IsAppThemed () returned 0x1
[0230.051] GetThemeAppProperties () returned 0x3
[0230.051] GetThemeAppProperties () returned 0x3
[0230.051] IsThemePartDefined () returned 0x1
[0230.051] IsAppThemed () returned 0x1
[0230.051] GetThemeAppProperties () returned 0x3
[0230.051] GetThemeAppProperties () returned 0x3
[0230.051] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0230.051] IsAppThemed () returned 0x1
[0230.051] GetThemeAppProperties () returned 0x3
[0230.051] GetThemeAppProperties () returned 0x3
[0230.051] IsAppThemed () returned 0x1
[0230.052] GetThemeAppProperties () returned 0x3
[0230.052] GetThemeAppProperties () returned 0x3
[0230.052] IsThemePartDefined () returned 0x1
[0230.052] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0230.052] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0230.052] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0230.052] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0230.052] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0230.052] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0230.052] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0230.052] LocalFree (hMem=0x89ee08) returned 0x0
[0230.052] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0230.052] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0230.052] LocalFree (hMem=0x89eac0) returned 0x0
[0230.052] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0230.052] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0230.052] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0230.052] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0230.053] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0230.053] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0230.053] GetCurrentObject (hdc=0x180107b1, type=0x1) returned 0xb00017
[0230.053] GetCurrentObject (hdc=0x180107b1, type=0x2) returned 0x900010
[0230.053] GetCurrentObject (hdc=0x180107b1, type=0x7) returned 0x1e0507b9
[0230.053] GetCurrentObject (hdc=0x180107b1, type=0x6) returned 0x8a01c2
[0230.053] SaveDC (hdc=0x180107b1) returned 1
[0230.053] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc704053e
[0230.053] GetClipRgn (hdc=0x180107b1, hrgn=0xc704053e) returned 0
[0230.053] SelectClipRgn (hdc=0x180107b1, hrgn=0x1504051e) returned 2
[0230.053] DeleteObject (ho=0xc704053e) returned 1
[0230.054] DeleteObject (ho=0x1504051e) returned 1
[0230.054] OffsetViewportOrgEx (in: hdc=0x180107b1, x=0, y=0, lppt=0x23c7524 | out: lppt=0x23c7524) returned 1
[0230.054] DrawThemeParentBackground () returned 0x0
[0230.054] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0230.054] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0230.054] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0230.054] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0230.054] GetSystemMetrics (nIndex=42) returned 0
[0230.054] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0230.054] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0230.054] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0230.054] GetCurrentObject (hdc=0x180107b1, type=0x1) returned 0xb00017
[0230.054] GetCurrentObject (hdc=0x180107b1, type=0x2) returned 0x900010
[0230.054] GetCurrentObject (hdc=0x180107b1, type=0x7) returned 0x1e0507b9
[0230.054] GetCurrentObject (hdc=0x180107b1, type=0x6) returned 0x8a01c2
[0230.054] SaveDC (hdc=0x180107b1) returned 2
[0230.054] GetNearestColor (hdc=0x180107b1, color=0xff) returned 0xff
[0230.054] CreateSolidBrush (color=0xff) returned 0xde10078d
[0230.055] FillRect (hDC=0x180107b1, lprc=0x53e128, hbr=0xde10078d) returned 1
[0230.055] DeleteObject (ho=0xde10078d) returned 1
[0230.055] RestoreDC (hdc=0x180107b1, nSavedDC=-1) returned 1
[0230.055] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0230.055] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0230.055] GetSystemMetrics (nIndex=42) returned 0
[0230.055] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0230.055] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0230.055] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0230.055] GetCurrentObject (hdc=0x180107b1, type=0x1) returned 0xb00017
[0230.055] GetCurrentObject (hdc=0x180107b1, type=0x2) returned 0x900010
[0230.055] GetCurrentObject (hdc=0x180107b1, type=0x7) returned 0x1e0507b9
[0230.055] GetCurrentObject (hdc=0x180107b1, type=0x6) returned 0x8a01c2
[0230.055] SaveDC (hdc=0x180107b1) returned 2
[0230.055] GetNearestColor (hdc=0x180107b1, color=0xff) returned 0xff
[0230.055] CreateSolidBrush (color=0xff) returned 0xdf10078d
[0230.055] FillRect (hDC=0x180107b1, lprc=0x53e0c8, hbr=0xdf10078d) returned 1
[0230.055] DeleteObject (ho=0xdf10078d) returned 1
[0230.055] RestoreDC (hdc=0x180107b1, nSavedDC=-1) returned 1
[0230.056] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0230.056] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0230.056] GetSystemMetrics (nIndex=42) returned 0
[0230.056] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0230.056] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0230.056] RestoreDC (hdc=0x180107b1, nSavedDC=-1) returned 1
[0230.056] GdipReleaseDC (graphics=0x5d92c30, hdc=0x180107b1) returned 0x0
[0230.056] IsAppThemed () returned 0x1
[0230.056] GetThemeAppProperties () returned 0x3
[0230.056] GetThemeAppProperties () returned 0x3
[0230.056] IsAppThemed () returned 0x1
[0230.056] GetThemeAppProperties () returned 0x3
[0230.056] GetThemeAppProperties () returned 0x3
[0230.056] IsThemePartDefined () returned 0x1
[0230.056] GdipCreateRegion (region=0x53e64c) returned 0x0
[0230.056] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0230.056] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0230.056] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0230.056] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0230.056] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0230.057] LocalFree (hMem=0x89eac0) returned 0x0
[0230.057] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0230.057] LocalFree (hMem=0x89eac0) returned 0x0
[0230.057] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0230.057] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0230.057] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0230.057] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0230.057] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0230.057] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0230.057] GetCurrentObject (hdc=0x180107b1, type=0x1) returned 0xb00017
[0230.057] GetCurrentObject (hdc=0x180107b1, type=0x2) returned 0x900010
[0230.057] GetCurrentObject (hdc=0x180107b1, type=0x7) returned 0x1e0507b9
[0230.057] GetCurrentObject (hdc=0x180107b1, type=0x6) returned 0x8a01c2
[0230.057] SaveDC (hdc=0x180107b1) returned 1
[0230.057] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1604051e
[0230.057] GetClipRgn (hdc=0x180107b1, hrgn=0x1604051e) returned 0
[0230.057] SelectClipRgn (hdc=0x180107b1, hrgn=0xc904053e) returned 2
[0230.057] DeleteObject (ho=0x1604051e) returned 1
[0230.057] DeleteObject (ho=0xc904053e) returned 1
[0230.057] OffsetViewportOrgEx (in: hdc=0x180107b1, x=0, y=0, lppt=0x23c7d88 | out: lppt=0x23c7d88) returned 1
[0230.057] IsAppThemed () returned 0x1
[0230.057] GetThemeAppProperties () returned 0x3
[0230.057] GetThemeAppProperties () returned 0x3
[0230.057] DrawThemeBackground () returned 0x0
[0230.058] RestoreDC (hdc=0x180107b1, nSavedDC=-1) returned 1
[0230.058] GdipReleaseDC (graphics=0x5d92c30, hdc=0x180107b1) returned 0x0
[0230.058] GdipCreateRegion (region=0x53e650) returned 0x0
[0230.058] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0230.058] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0230.058] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0230.058] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0230.058] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0230.058] LocalFree (hMem=0x89ec80) returned 0x0
[0230.058] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0230.058] LocalFree (hMem=0x89ee08) returned 0x0
[0230.058] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0230.058] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0230.058] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0230.058] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0230.058] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0230.058] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0230.058] GetCurrentObject (hdc=0x180107b1, type=0x1) returned 0xb00017
[0230.058] GetCurrentObject (hdc=0x180107b1, type=0x2) returned 0x900010
[0230.058] GetCurrentObject (hdc=0x180107b1, type=0x7) returned 0x1e0507b9
[0230.058] GetCurrentObject (hdc=0x180107b1, type=0x6) returned 0x8a01c2
[0230.058] SaveDC (hdc=0x180107b1) returned 1
[0230.058] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xca04053e
[0230.059] GetClipRgn (hdc=0x180107b1, hrgn=0xca04053e) returned 0
[0230.059] SelectClipRgn (hdc=0x180107b1, hrgn=0x1704051e) returned 2
[0230.059] DeleteObject (ho=0xca04053e) returned 1
[0230.059] DeleteObject (ho=0x1704051e) returned 1
[0230.059] OffsetViewportOrgEx (in: hdc=0x180107b1, x=0, y=0, lppt=0x23c805c | out: lppt=0x23c805c) returned 1
[0230.059] IsAppThemed () returned 0x1
[0230.059] GetThemeAppProperties () returned 0x3
[0230.059] GetThemeAppProperties () returned 0x3
[0230.059] GetThemeBackgroundContentRect () returned 0x0
[0230.059] RestoreDC (hdc=0x180107b1, nSavedDC=-1) returned 1
[0230.059] GdipReleaseDC (graphics=0x5d92c30, hdc=0x180107b1) returned 0x0
[0230.059] IsAppThemed () returned 0x1
[0230.059] GetThemeAppProperties () returned 0x3
[0230.059] GetThemeAppProperties () returned 0x3
[0230.059] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0230.059] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0230.059] GetCurrentObject (hdc=0x180107b1, type=0x1) returned 0xb00017
[0230.059] GetCurrentObject (hdc=0x180107b1, type=0x2) returned 0x900010
[0230.059] GetCurrentObject (hdc=0x180107b1, type=0x7) returned 0x1e0507b9
[0230.059] GetCurrentObject (hdc=0x180107b1, type=0x6) returned 0x8a01c2
[0230.059] SaveDC (hdc=0x180107b1) returned 1
[0230.059] GetTextAlign (hdc=0x180107b1) returned 0x0
[0230.060] GetTextColor (hdc=0x180107b1) returned 0x0
[0230.060] GetCurrentObject (hdc=0x180107b1, type=0x6) returned 0x8a01c2
[0230.060] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0230.060] SelectObject (hdc=0x180107b1, h=0x450a0799) returned 0x8a01c2
[0230.060] GetBkMode (hdc=0x180107b1) returned 2
[0230.060] SetBkMode (hdc=0x180107b1, mode=1) returned 2
[0230.060] DrawTextExW (in: hdc=0x180107b1, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x23c83fc | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0230.060] DrawTextExW (in: hdc=0x180107b1, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x23c83fc | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0230.060] RestoreDC (hdc=0x180107b1, nSavedDC=-1) returned 1
[0230.061] GdipReleaseDC (graphics=0x5d92c30, hdc=0x180107b1) returned 0x0
[0230.061] GetFocus () returned 0x202c6
[0230.061] IsAppThemed () returned 0x1
[0230.061] GetThemeAppProperties () returned 0x3
[0230.061] GetThemeAppProperties () returned 0x3
[0230.061] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0230.061] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x180107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0230.061] GdipReleaseDC (graphics=0x5d92c30, hdc=0x180107b1) returned 0x0
[0230.061] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0230.061] SelectObject (hdc=0x180107b1, h=0x85000f) returned 0x1e0507b9
[0230.061] DeleteDC (hdc=0x180107b1) returned 1
[0230.061] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0230.061] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0230.062] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0230.062] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0230.062] WaitMessage () returned 1
[0230.065] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.065] IsWindowUnicode (hWnd=0x102dc) returned 1
[0230.065] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.065] TranslateMessage (lpMsg=0x53eef8) returned 0
[0230.065] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0230.066] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0230.066] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0230.066] WaitMessage () returned 1
[0230.080] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.080] IsWindowUnicode (hWnd=0x102dc) returned 1
[0230.080] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.081] TranslateMessage (lpMsg=0x53eef8) returned 0
[0230.081] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0230.081] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0230.081] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0230.081] WaitMessage () returned 1
[0230.090] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.090] IsWindowUnicode (hWnd=0x102dc) returned 1
[0230.090] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.090] TranslateMessage (lpMsg=0x53eef8) returned 0
[0230.090] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0230.094] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.094] IsWindowUnicode (hWnd=0x102dc) returned 1
[0230.094] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.094] TranslateMessage (lpMsg=0x53eef8) returned 0
[0230.095] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0230.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.095] IsWindowUnicode (hWnd=0x102dc) returned 1
[0230.095] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.095] TranslateMessage (lpMsg=0x53eef8) returned 0
[0230.095] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0230.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.095] IsWindowUnicode (hWnd=0x102dc) returned 1
[0230.095] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.095] TranslateMessage (lpMsg=0x53eef8) returned 0
[0230.095] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0230.096] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.096] IsWindowUnicode (hWnd=0x102dc) returned 1
[0230.096] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.096] TranslateMessage (lpMsg=0x53eef8) returned 0
[0230.096] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0230.096] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.096] IsWindowUnicode (hWnd=0x102dc) returned 1
[0230.096] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.096] TranslateMessage (lpMsg=0x53eef8) returned 0
[0230.096] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0230.096] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0230.097] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0230.097] WaitMessage () returned 1
[0230.243] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.243] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.243] TranslateMessage (lpMsg=0x53eef8) returned 0
[0230.243] DispatchMessageA (lpMsg=0x53eef8) returned 0x7ed6
[0230.243] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0230.243] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0230.243] WaitMessage () returned 1
[0230.334] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.334] IsWindowUnicode (hWnd=0x202d0) returned 1
[0230.334] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0230.334] TranslateMessage (lpMsg=0x53eef8) returned 0
[0230.334] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0230.334] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0230.334] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0230.334] WaitMessage () returned 1
[0231.256] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0231.256] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0231.256] TranslateMessage (lpMsg=0x53eef8) returned 0
[0231.256] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0231.256] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0231.256] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0231.256] WaitMessage () returned 1
[0231.820] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0231.820] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192021c) returned 0x1
[0231.820] IsWindowUnicode (hWnd=0x202c6) returned 1
[0231.821] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0231.821] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192021c) returned 0x1
[0231.821] SetCursor (hCursor=0x10003) returned 0x10003
[0231.821] TranslateMessage (lpMsg=0x53eef8) returned 0
[0231.821] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0231.821] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0231.821] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0231.821] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0231.821] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0231.821] GetKeyState (nVirtKey=1) returned 0
[0231.821] GetKeyState (nVirtKey=2) returned 0
[0231.821] GetKeyState (nVirtKey=4) returned 0
[0231.821] GetKeyState (nVirtKey=5) returned 0
[0231.821] GetKeyState (nVirtKey=6) returned 0
[0231.821] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0231.821] IsWindowUnicode (hWnd=0x202c6) returned 1
[0231.821] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0231.821] TranslateMessage (lpMsg=0x53eef8) returned 0
[0231.821] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0231.822] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0231.822] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0231.822] CreateCompatibleDC (hdc=0x8b010786) returned 0x9b0107b6
[0231.822] SelectObject (hdc=0x9b0107b6, h=0x1e0507b9) returned 0x85000f
[0231.822] GdipCreateFromHDC (hdc=0x9b0107b6, graphics=0x53e958) returned 0x0
[0231.822] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0231.822] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0231.822] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0231.822] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0231.822] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0231.822] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0231.822] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0231.822] LocalFree (hMem=0x89ea88) returned 0x0
[0231.822] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0231.823] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0231.823] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0231.823] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0231.823] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0231.823] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc210dbd) returned 0x0
[0231.823] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0231.823] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0231.823] GetCurrentObject (hdc=0x9b0107b6, type=0x1) returned 0xb00017
[0231.823] GetCurrentObject (hdc=0x9b0107b6, type=0x2) returned 0x900010
[0231.823] GetCurrentObject (hdc=0x9b0107b6, type=0x7) returned 0x1e0507b9
[0231.823] GetCurrentObject (hdc=0x9b0107b6, type=0x6) returned 0x8a01c2
[0231.823] SaveDC (hdc=0x9b0107b6) returned 1
[0231.823] GetNearestColor (hdc=0x9b0107b6, color=0xff) returned 0xff
[0231.823] GetNearestColor (hdc=0x9b0107b6, color=0x55) returned 0x55
[0231.823] GetNearestColor (hdc=0x9b0107b6, color=0x0) returned 0x0
[0231.823] GetNearestColor (hdc=0x9b0107b6, color=0x55) returned 0x55
[0231.823] GetNearestColor (hdc=0x9b0107b6, color=0x0) returned 0x0
[0231.823] GetNearestColor (hdc=0x9b0107b6, color=0x8080ff) returned 0x8080ff
[0231.823] GetNearestColor (hdc=0x9b0107b6, color=0x7373e5) returned 0x7373e5
[0231.824] GetNearestColor (hdc=0x9b0107b6, color=0xe5) returned 0xe5
[0231.824] GetNearestColor (hdc=0x9b0107b6, color=0x0) returned 0x0
[0231.824] RestoreDC (hdc=0x9b0107b6, nSavedDC=-1) returned 1
[0231.824] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9b0107b6) returned 0x0
[0231.824] IsAppThemed () returned 0x1
[0231.824] GetThemeAppProperties () returned 0x3
[0231.824] GetThemeAppProperties () returned 0x3
[0231.824] IsAppThemed () returned 0x1
[0231.824] GetThemeAppProperties () returned 0x3
[0231.824] GetThemeAppProperties () returned 0x3
[0231.824] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x23c8d00 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0231.824] IsAppThemed () returned 0x1
[0231.824] GetThemeAppProperties () returned 0x3
[0231.824] GetThemeAppProperties () returned 0x3
[0231.824] IsAppThemed () returned 0x1
[0231.824] GetThemeAppProperties () returned 0x3
[0231.825] GetThemeAppProperties () returned 0x3
[0231.825] IsAppThemed () returned 0x1
[0231.825] GetThemeAppProperties () returned 0x3
[0231.825] GetThemeAppProperties () returned 0x3
[0231.825] IsAppThemed () returned 0x1
[0231.825] GetThemeAppProperties () returned 0x3
[0231.825] GetThemeAppProperties () returned 0x3
[0231.825] IsThemePartDefined () returned 0x1
[0231.825] IsAppThemed () returned 0x1
[0231.825] GetThemeAppProperties () returned 0x3
[0231.825] GetThemeAppProperties () returned 0x3
[0231.825] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0231.825] IsAppThemed () returned 0x1
[0231.825] GetThemeAppProperties () returned 0x3
[0231.825] GetThemeAppProperties () returned 0x3
[0231.825] IsAppThemed () returned 0x1
[0231.825] GetThemeAppProperties () returned 0x3
[0231.825] GetThemeAppProperties () returned 0x3
[0231.825] IsThemePartDefined () returned 0x1
[0231.825] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0231.825] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0231.825] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0231.825] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0231.825] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0231.825] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0231.825] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0231.825] LocalFree (hMem=0x89eee8) returned 0x0
[0231.826] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0231.826] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0231.826] LocalFree (hMem=0x89ea88) returned 0x0
[0231.826] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0231.826] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0231.826] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0231.826] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0231.826] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0231.826] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0231.826] GetCurrentObject (hdc=0x9b0107b6, type=0x1) returned 0xb00017
[0231.826] GetCurrentObject (hdc=0x9b0107b6, type=0x2) returned 0x900010
[0231.826] GetCurrentObject (hdc=0x9b0107b6, type=0x7) returned 0x1e0507b9
[0231.826] GetCurrentObject (hdc=0x9b0107b6, type=0x6) returned 0x8a01c2
[0231.826] SaveDC (hdc=0x9b0107b6) returned 1
[0231.826] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1804051e
[0231.826] GetClipRgn (hdc=0x9b0107b6, hrgn=0x1804051e) returned 0
[0231.826] SelectClipRgn (hdc=0x9b0107b6, hrgn=0xce04053e) returned 2
[0231.826] DeleteObject (ho=0x1804051e) returned 1
[0231.826] DeleteObject (ho=0xce04053e) returned 1
[0231.826] OffsetViewportOrgEx (in: hdc=0x9b0107b6, x=0, y=0, lppt=0x23c93b0 | out: lppt=0x23c93b0) returned 1
[0231.826] DrawThemeParentBackground () returned 0x0
[0231.839] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0231.839] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0231.839] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0231.839] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0231.839] GetSystemMetrics (nIndex=42) returned 0
[0231.839] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0231.839] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0231.839] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0231.839] GetCurrentObject (hdc=0x9b0107b6, type=0x1) returned 0xb00017
[0231.840] GetCurrentObject (hdc=0x9b0107b6, type=0x2) returned 0x900010
[0231.840] GetCurrentObject (hdc=0x9b0107b6, type=0x7) returned 0x1e0507b9
[0231.840] GetCurrentObject (hdc=0x9b0107b6, type=0x6) returned 0x8a01c2
[0231.840] SaveDC (hdc=0x9b0107b6) returned 2
[0231.840] GetNearestColor (hdc=0x9b0107b6, color=0xff) returned 0xff
[0231.840] CreateSolidBrush (color=0xff) returned 0xe010078d
[0231.840] FillRect (hDC=0x9b0107b6, lprc=0x53e120, hbr=0xe010078d) returned 1
[0231.840] DeleteObject (ho=0xe010078d) returned 1
[0231.840] RestoreDC (hdc=0x9b0107b6, nSavedDC=-1) returned 1
[0231.840] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0231.840] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0231.840] GetSystemMetrics (nIndex=42) returned 0
[0231.840] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0231.840] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0231.840] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0231.840] GetCurrentObject (hdc=0x9b0107b6, type=0x1) returned 0xb00017
[0231.840] GetCurrentObject (hdc=0x9b0107b6, type=0x2) returned 0x900010
[0231.841] GetCurrentObject (hdc=0x9b0107b6, type=0x7) returned 0x1e0507b9
[0231.841] GetCurrentObject (hdc=0x9b0107b6, type=0x6) returned 0x8a01c2
[0231.841] SaveDC (hdc=0x9b0107b6) returned 2
[0231.841] GetNearestColor (hdc=0x9b0107b6, color=0xff) returned 0xff
[0231.841] CreateSolidBrush (color=0xff) returned 0xe110078d
[0231.841] FillRect (hDC=0x9b0107b6, lprc=0x53e0c0, hbr=0xe110078d) returned 1
[0231.841] DeleteObject (ho=0xe110078d) returned 1
[0231.841] RestoreDC (hdc=0x9b0107b6, nSavedDC=-1) returned 1
[0231.841] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0231.841] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0231.841] GetSystemMetrics (nIndex=42) returned 0
[0231.841] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0231.841] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0231.841] RestoreDC (hdc=0x9b0107b6, nSavedDC=-1) returned 1
[0231.841] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9b0107b6) returned 0x0
[0231.841] IsAppThemed () returned 0x1
[0231.842] GetThemeAppProperties () returned 0x3
[0231.842] GetThemeAppProperties () returned 0x3
[0231.842] IsAppThemed () returned 0x1
[0231.842] GetThemeAppProperties () returned 0x3
[0231.842] GetThemeAppProperties () returned 0x3
[0231.842] IsThemePartDefined () returned 0x1
[0231.842] GdipCreateRegion (region=0x53e640) returned 0x0
[0231.842] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0231.842] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0231.842] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0231.842] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0231.842] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0231.842] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0231.842] LocalFree (hMem=0x89ea88) returned 0x0
[0231.842] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0231.842] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0231.842] LocalFree (hMem=0x89ea88) returned 0x0
[0231.842] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0231.843] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0231.843] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0231.843] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0231.843] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0231.843] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0231.843] GetCurrentObject (hdc=0x9b0107b6, type=0x1) returned 0xb00017
[0231.843] GetCurrentObject (hdc=0x9b0107b6, type=0x2) returned 0x900010
[0231.843] GetCurrentObject (hdc=0x9b0107b6, type=0x7) returned 0x1e0507b9
[0231.843] GetCurrentObject (hdc=0x9b0107b6, type=0x6) returned 0x8a01c2
[0231.843] SaveDC (hdc=0x9b0107b6) returned 1
[0231.843] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcf04053e
[0231.843] GetClipRgn (hdc=0x9b0107b6, hrgn=0xcf04053e) returned 0
[0231.843] SelectClipRgn (hdc=0x9b0107b6, hrgn=0x1a04051e) returned 2
[0231.843] DeleteObject (ho=0xcf04053e) returned 1
[0231.843] DeleteObject (ho=0x1a04051e) returned 1
[0231.843] OffsetViewportOrgEx (in: hdc=0x9b0107b6, x=0, y=0, lppt=0x23c9c14 | out: lppt=0x23c9c14) returned 1
[0231.843] IsAppThemed () returned 0x1
[0231.843] GetThemeAppProperties () returned 0x3
[0231.843] GetThemeAppProperties () returned 0x3
[0231.843] DrawThemeBackground () returned 0x0
[0231.844] RestoreDC (hdc=0x9b0107b6, nSavedDC=-1) returned 1
[0231.844] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9b0107b6) returned 0x0
[0231.844] GdipCreateRegion (region=0x53e644) returned 0x0
[0231.844] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0231.844] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0231.844] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0231.844] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0231.844] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0231.844] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0231.844] LocalFree (hMem=0x89ec80) returned 0x0
[0231.844] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0231.844] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0231.844] LocalFree (hMem=0x89ee40) returned 0x0
[0231.844] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0231.844] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0231.844] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0231.844] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0231.844] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0231.844] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0231.844] GetCurrentObject (hdc=0x9b0107b6, type=0x1) returned 0xb00017
[0231.844] GetCurrentObject (hdc=0x9b0107b6, type=0x2) returned 0x900010
[0231.845] GetCurrentObject (hdc=0x9b0107b6, type=0x7) returned 0x1e0507b9
[0231.845] GetCurrentObject (hdc=0x9b0107b6, type=0x6) returned 0x8a01c2
[0231.845] SaveDC (hdc=0x9b0107b6) returned 1
[0231.845] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1b04051e
[0231.845] GetClipRgn (hdc=0x9b0107b6, hrgn=0x1b04051e) returned 0
[0231.845] SelectClipRgn (hdc=0x9b0107b6, hrgn=0xd004053e) returned 2
[0231.845] DeleteObject (ho=0x1b04051e) returned 1
[0231.845] DeleteObject (ho=0xd004053e) returned 1
[0231.845] OffsetViewportOrgEx (in: hdc=0x9b0107b6, x=0, y=0, lppt=0x23c9ee8 | out: lppt=0x23c9ee8) returned 1
[0231.845] IsAppThemed () returned 0x1
[0231.845] GetThemeAppProperties () returned 0x3
[0231.845] GetThemeAppProperties () returned 0x3
[0231.845] GetThemeBackgroundContentRect () returned 0x0
[0231.845] RestoreDC (hdc=0x9b0107b6, nSavedDC=-1) returned 1
[0231.845] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9b0107b6) returned 0x0
[0231.845] IsAppThemed () returned 0x1
[0231.845] GetThemeAppProperties () returned 0x3
[0231.845] GetThemeAppProperties () returned 0x3
[0231.845] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0231.845] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0231.845] GetCurrentObject (hdc=0x9b0107b6, type=0x1) returned 0xb00017
[0231.846] GetCurrentObject (hdc=0x9b0107b6, type=0x2) returned 0x900010
[0231.846] GetCurrentObject (hdc=0x9b0107b6, type=0x7) returned 0x1e0507b9
[0231.846] GetCurrentObject (hdc=0x9b0107b6, type=0x6) returned 0x8a01c2
[0231.846] SaveDC (hdc=0x9b0107b6) returned 1
[0231.846] GetTextAlign (hdc=0x9b0107b6) returned 0x0
[0231.846] GetTextColor (hdc=0x9b0107b6) returned 0x0
[0231.846] GetCurrentObject (hdc=0x9b0107b6, type=0x6) returned 0x8a01c2
[0231.846] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0231.846] SelectObject (hdc=0x9b0107b6, h=0x450a0799) returned 0x8a01c2
[0231.846] GetBkMode (hdc=0x9b0107b6) returned 2
[0231.846] SetBkMode (hdc=0x9b0107b6, mode=1) returned 2
[0231.846] DrawTextExW (in: hdc=0x9b0107b6, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x23ca288 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0231.847] DrawTextExW (in: hdc=0x9b0107b6, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x23ca288 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0231.847] RestoreDC (hdc=0x9b0107b6, nSavedDC=-1) returned 1
[0231.847] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9b0107b6) returned 0x0
[0231.847] GetFocus () returned 0x202c6
[0231.847] IsAppThemed () returned 0x1
[0231.847] GetThemeAppProperties () returned 0x3
[0231.847] GetThemeAppProperties () returned 0x3
[0231.847] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0231.847] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x9b0107b6, x1=0, y1=0, rop=0xcc0020) returned 1
[0231.848] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9b0107b6) returned 0x0
[0231.848] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0231.848] SelectObject (hdc=0x9b0107b6, h=0x85000f) returned 0x1e0507b9
[0231.848] DeleteDC (hdc=0x9b0107b6) returned 1
[0231.848] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0231.848] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0231.848] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0231.848] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0231.848] WaitMessage () returned 1
[0231.928] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0231.928] IsWindowUnicode (hWnd=0x202c6) returned 1
[0231.928] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0231.928] TranslateMessage (lpMsg=0x53eef8) returned 0
[0231.928] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0231.928] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0231.928] IsWindowUnicode (hWnd=0x202c6) returned 1
[0231.928] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0231.928] TranslateMessage (lpMsg=0x53eef8) returned 0
[0231.928] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0231.928] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xa002c) returned 0x0
[0231.928] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0231.928] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0231.928] WaitMessage () returned 1
[0232.055] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0232.056] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192021c) returned 0x1
[0232.056] IsWindowUnicode (hWnd=0x202c6) returned 1
[0232.056] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0232.056] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192021c) returned 0x1
[0232.056] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0232.056] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12501c6) returned 0x0
[0232.056] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0232.056] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0232.056] SetCursor (hCursor=0x10003) returned 0x10003
[0232.056] TranslateMessage (lpMsg=0x53eef8) returned 0
[0232.057] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0232.057] GetKeyState (nVirtKey=1) returned -127
[0232.057] GetKeyState (nVirtKey=2) returned 0
[0232.057] GetKeyState (nVirtKey=4) returned 0
[0232.057] GetKeyState (nVirtKey=5) returned 0
[0232.057] GetKeyState (nVirtKey=6) returned 0
[0232.057] IsWindowVisible (hWnd=0x202c6) returned 1
[0232.057] IsWindowEnabled (hWnd=0x202c6) returned 1
[0232.057] SetFocus (hWnd=0x202c6) returned 0x202c6
[0232.057] GetFocus () returned 0x202c6
[0232.057] GetFocus () returned 0x202c6
[0232.057] GetFocus () returned 0x202c6
[0232.057] GetKeyState (nVirtKey=1) returned -127
[0232.057] GetKeyState (nVirtKey=2) returned 0
[0232.057] GetKeyState (nVirtKey=4) returned 0
[0232.057] GetKeyState (nVirtKey=5) returned 0
[0232.057] GetKeyState (nVirtKey=6) returned 0
[0232.057] GetCapture () returned 0x0
[0232.057] SetCapture (hWnd=0x202c6) returned 0x0
[0232.057] GetKeyState (nVirtKey=1) returned -127
[0232.057] GetKeyState (nVirtKey=2) returned 0
[0232.057] GetKeyState (nVirtKey=4) returned 0
[0232.057] GetKeyState (nVirtKey=5) returned 0
[0232.057] GetKeyState (nVirtKey=6) returned 0
[0232.057] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0232.057] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0232.058] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0232.058] IsWindowUnicode (hWnd=0x202c6) returned 1
[0232.058] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0232.058] TranslateMessage (lpMsg=0x53eef8) returned 0
[0232.058] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0232.058] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23ca40c, cPoints=0x1 | out: lpPoints=0x23ca40c) returned 25690608
[0232.058] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0232.058] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0232.058] UpdateWindow (hWnd=0x202c6) returned 1
[0232.058] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x8b010786
[0232.058] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0232.058] CreateCompatibleDC (hdc=0x8b010786) returned 0x9c0107b6
[0232.058] SelectObject (hdc=0x9c0107b6, h=0x1e0507b9) returned 0x85000f
[0232.058] GdipCreateFromHDC (hdc=0x9c0107b6, graphics=0x53e5f0) returned 0x0
[0232.059] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0232.059] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0232.059] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0232.059] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.059] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0232.059] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0232.059] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0232.059] LocalFree (hMem=0x89ee08) returned 0x0
[0232.059] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.059] GdipCreateRegion (region=0x53e638) returned 0x0
[0232.059] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.059] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0232.059] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0232.059] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc1f0dbd) returned 0x0
[0232.059] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.059] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0232.059] GetCurrentObject (hdc=0x9c0107b6, type=0x1) returned 0xb00017
[0232.059] GetCurrentObject (hdc=0x9c0107b6, type=0x2) returned 0x900010
[0232.059] GetCurrentObject (hdc=0x9c0107b6, type=0x7) returned 0x1e0507b9
[0232.059] GetCurrentObject (hdc=0x9c0107b6, type=0x6) returned 0x8a01c2
[0232.060] SaveDC (hdc=0x9c0107b6) returned 1
[0232.060] GetNearestColor (hdc=0x9c0107b6, color=0xff) returned 0xff
[0232.060] GetNearestColor (hdc=0x9c0107b6, color=0x55) returned 0x55
[0232.060] GetNearestColor (hdc=0x9c0107b6, color=0x0) returned 0x0
[0232.060] GetNearestColor (hdc=0x9c0107b6, color=0x55) returned 0x55
[0232.060] GetNearestColor (hdc=0x9c0107b6, color=0x0) returned 0x0
[0232.060] GetNearestColor (hdc=0x9c0107b6, color=0x8080ff) returned 0x8080ff
[0232.060] GetNearestColor (hdc=0x9c0107b6, color=0x7373e5) returned 0x7373e5
[0232.060] GetNearestColor (hdc=0x9c0107b6, color=0xe5) returned 0xe5
[0232.060] GetNearestColor (hdc=0x9c0107b6, color=0x0) returned 0x0
[0232.060] RestoreDC (hdc=0x9c0107b6, nSavedDC=-1) returned 1
[0232.060] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9c0107b6) returned 0x0
[0232.060] IsAppThemed () returned 0x1
[0232.060] GetThemeAppProperties () returned 0x3
[0232.060] GetThemeAppProperties () returned 0x3
[0232.060] IsAppThemed () returned 0x1
[0232.060] GetThemeAppProperties () returned 0x3
[0232.060] GetThemeAppProperties () returned 0x3
[0232.060] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x23cab28 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0232.061] IsAppThemed () returned 0x1
[0232.061] GetThemeAppProperties () returned 0x3
[0232.061] GetThemeAppProperties () returned 0x3
[0232.061] IsAppThemed () returned 0x1
[0232.061] GetThemeAppProperties () returned 0x3
[0232.061] GetThemeAppProperties () returned 0x3
[0232.061] IsAppThemed () returned 0x1
[0232.061] GetThemeAppProperties () returned 0x3
[0232.061] GetThemeAppProperties () returned 0x3
[0232.061] IsAppThemed () returned 0x1
[0232.061] GetThemeAppProperties () returned 0x3
[0232.061] GetThemeAppProperties () returned 0x3
[0232.061] IsThemePartDefined () returned 0x1
[0232.061] IsAppThemed () returned 0x1
[0232.061] GetThemeAppProperties () returned 0x3
[0232.061] GetThemeAppProperties () returned 0x3
[0232.061] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0232.061] IsAppThemed () returned 0x1
[0232.061] GetThemeAppProperties () returned 0x3
[0232.061] GetThemeAppProperties () returned 0x3
[0232.061] IsAppThemed () returned 0x1
[0232.061] GetThemeAppProperties () returned 0x3
[0232.062] GetThemeAppProperties () returned 0x3
[0232.062] IsThemePartDefined () returned 0x1
[0232.062] GdipCreateRegion (region=0x53e354) returned 0x0
[0232.062] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.062] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0232.062] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.062] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0232.062] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0232.062] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0232.062] LocalFree (hMem=0x89ee08) returned 0x0
[0232.062] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.062] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.062] LocalFree (hMem=0x89ea88) returned 0x0
[0232.062] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.062] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0232.062] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0232.062] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0232.062] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.062] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0232.062] GetCurrentObject (hdc=0x9c0107b6, type=0x1) returned 0xb00017
[0232.062] GetCurrentObject (hdc=0x9c0107b6, type=0x2) returned 0x900010
[0232.062] GetCurrentObject (hdc=0x9c0107b6, type=0x7) returned 0x1e0507b9
[0232.062] GetCurrentObject (hdc=0x9c0107b6, type=0x6) returned 0x8a01c2
[0232.062] SaveDC (hdc=0x9c0107b6) returned 1
[0232.063] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd104053e
[0232.063] GetClipRgn (hdc=0x9c0107b6, hrgn=0xd104053e) returned 0
[0232.063] SelectClipRgn (hdc=0x9c0107b6, hrgn=0x1f04051e) returned 2
[0232.063] DeleteObject (ho=0xd104053e) returned 1
[0232.063] DeleteObject (ho=0x1f04051e) returned 1
[0232.063] OffsetViewportOrgEx (in: hdc=0x9c0107b6, x=0, y=0, lppt=0x23cb1d8 | out: lppt=0x23cb1d8) returned 1
[0232.063] DrawThemeParentBackground () returned 0x0
[0232.063] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0232.063] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0232.063] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0232.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0232.063] GetSystemMetrics (nIndex=42) returned 0
[0232.063] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0232.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0232.063] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0232.063] GetCurrentObject (hdc=0x9c0107b6, type=0x1) returned 0xb00017
[0232.063] GetCurrentObject (hdc=0x9c0107b6, type=0x2) returned 0x900010
[0232.063] GetCurrentObject (hdc=0x9c0107b6, type=0x7) returned 0x1e0507b9
[0232.063] GetCurrentObject (hdc=0x9c0107b6, type=0x6) returned 0x8a01c2
[0232.064] SaveDC (hdc=0x9c0107b6) returned 2
[0232.064] GetNearestColor (hdc=0x9c0107b6, color=0xff) returned 0xff
[0232.064] CreateSolidBrush (color=0xff) returned 0xe210078d
[0232.064] FillRect (hDC=0x9c0107b6, lprc=0x53ddb8, hbr=0xe210078d) returned 1
[0232.064] DeleteObject (ho=0xe210078d) returned 1
[0232.064] RestoreDC (hdc=0x9c0107b6, nSavedDC=-1) returned 1
[0232.064] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0232.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0232.064] GetSystemMetrics (nIndex=42) returned 0
[0232.064] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0232.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0232.064] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0232.064] GetCurrentObject (hdc=0x9c0107b6, type=0x1) returned 0xb00017
[0232.064] GetCurrentObject (hdc=0x9c0107b6, type=0x2) returned 0x900010
[0232.064] GetCurrentObject (hdc=0x9c0107b6, type=0x7) returned 0x1e0507b9
[0232.064] GetCurrentObject (hdc=0x9c0107b6, type=0x6) returned 0x8a01c2
[0232.064] SaveDC (hdc=0x9c0107b6) returned 2
[0232.064] GetNearestColor (hdc=0x9c0107b6, color=0xff) returned 0xff
[0232.064] CreateSolidBrush (color=0xff) returned 0xe310078d
[0232.064] FillRect (hDC=0x9c0107b6, lprc=0x53dd58, hbr=0xe310078d) returned 1
[0232.065] DeleteObject (ho=0xe310078d) returned 1
[0232.065] RestoreDC (hdc=0x9c0107b6, nSavedDC=-1) returned 1
[0232.065] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0232.065] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0232.065] GetSystemMetrics (nIndex=42) returned 0
[0232.065] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0232.065] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0232.065] RestoreDC (hdc=0x9c0107b6, nSavedDC=-1) returned 1
[0232.065] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9c0107b6) returned 0x0
[0232.065] IsAppThemed () returned 0x1
[0232.065] GetThemeAppProperties () returned 0x3
[0232.065] GetThemeAppProperties () returned 0x3
[0232.065] IsAppThemed () returned 0x1
[0232.065] GetThemeAppProperties () returned 0x3
[0232.065] GetThemeAppProperties () returned 0x3
[0232.065] IsThemePartDefined () returned 0x1
[0232.065] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0232.065] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.065] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0232.065] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.065] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0232.066] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0232.066] LocalFree (hMem=0x89ea88) returned 0x0
[0232.066] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0232.066] LocalFree (hMem=0x89ec80) returned 0x0
[0232.066] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.066] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0232.066] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0232.066] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0232.066] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.066] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0232.066] GetCurrentObject (hdc=0x9c0107b6, type=0x1) returned 0xb00017
[0232.066] GetCurrentObject (hdc=0x9c0107b6, type=0x2) returned 0x900010
[0232.066] GetCurrentObject (hdc=0x9c0107b6, type=0x7) returned 0x1e0507b9
[0232.066] GetCurrentObject (hdc=0x9c0107b6, type=0x6) returned 0x8a01c2
[0232.066] SaveDC (hdc=0x9c0107b6) returned 1
[0232.066] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2004051e
[0232.066] GetClipRgn (hdc=0x9c0107b6, hrgn=0x2004051e) returned 0
[0232.066] SelectClipRgn (hdc=0x9c0107b6, hrgn=0xd304053e) returned 2
[0232.066] DeleteObject (ho=0x2004051e) returned 1
[0232.066] DeleteObject (ho=0xd304053e) returned 1
[0232.066] OffsetViewportOrgEx (in: hdc=0x9c0107b6, x=0, y=0, lppt=0x23cba3c | out: lppt=0x23cba3c) returned 1
[0232.066] IsAppThemed () returned 0x1
[0232.066] GetThemeAppProperties () returned 0x3
[0232.066] GetThemeAppProperties () returned 0x3
[0232.067] DrawThemeBackground () returned 0x0
[0232.067] RestoreDC (hdc=0x9c0107b6, nSavedDC=-1) returned 1
[0232.067] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9c0107b6) returned 0x0
[0232.067] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0232.067] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.067] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0232.067] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.067] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0232.067] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0232.067] LocalFree (hMem=0x89ee08) returned 0x0
[0232.067] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.067] LocalFree (hMem=0x89ea88) returned 0x0
[0232.067] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.067] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0232.067] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0232.067] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0232.067] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.067] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0232.067] GetCurrentObject (hdc=0x9c0107b6, type=0x1) returned 0xb00017
[0232.067] GetCurrentObject (hdc=0x9c0107b6, type=0x2) returned 0x900010
[0232.067] GetCurrentObject (hdc=0x9c0107b6, type=0x7) returned 0x1e0507b9
[0232.067] GetCurrentObject (hdc=0x9c0107b6, type=0x6) returned 0x8a01c2
[0232.067] SaveDC (hdc=0x9c0107b6) returned 1
[0232.067] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd404053e
[0232.068] GetClipRgn (hdc=0x9c0107b6, hrgn=0xd404053e) returned 0
[0232.068] SelectClipRgn (hdc=0x9c0107b6, hrgn=0x2104051e) returned 2
[0232.068] DeleteObject (ho=0xd404053e) returned 1
[0232.068] DeleteObject (ho=0x2104051e) returned 1
[0232.068] OffsetViewportOrgEx (in: hdc=0x9c0107b6, x=0, y=0, lppt=0x23cbd10 | out: lppt=0x23cbd10) returned 1
[0232.068] IsAppThemed () returned 0x1
[0232.068] GetThemeAppProperties () returned 0x3
[0232.068] GetThemeAppProperties () returned 0x3
[0232.068] GetThemeBackgroundContentRect () returned 0x0
[0232.068] RestoreDC (hdc=0x9c0107b6, nSavedDC=-1) returned 1
[0232.068] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9c0107b6) returned 0x0
[0232.068] IsAppThemed () returned 0x1
[0232.068] GetThemeAppProperties () returned 0x3
[0232.068] GetThemeAppProperties () returned 0x3
[0232.068] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0232.068] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0232.068] GetCurrentObject (hdc=0x9c0107b6, type=0x1) returned 0xb00017
[0232.068] GetCurrentObject (hdc=0x9c0107b6, type=0x2) returned 0x900010
[0232.068] GetCurrentObject (hdc=0x9c0107b6, type=0x7) returned 0x1e0507b9
[0232.069] GetCurrentObject (hdc=0x9c0107b6, type=0x6) returned 0x8a01c2
[0232.069] SaveDC (hdc=0x9c0107b6) returned 1
[0232.069] GetTextAlign (hdc=0x9c0107b6) returned 0x0
[0232.069] GetTextColor (hdc=0x9c0107b6) returned 0x0
[0232.069] GetCurrentObject (hdc=0x9c0107b6, type=0x6) returned 0x8a01c2
[0232.069] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0232.069] SelectObject (hdc=0x9c0107b6, h=0x450a0799) returned 0x8a01c2
[0232.069] GetBkMode (hdc=0x9c0107b6) returned 2
[0232.069] SetBkMode (hdc=0x9c0107b6, mode=1) returned 2
[0232.069] DrawTextExW (in: hdc=0x9c0107b6, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x23cc0b0 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0232.069] DrawTextExW (in: hdc=0x9c0107b6, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x23cc0b0 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0232.069] RestoreDC (hdc=0x9c0107b6, nSavedDC=-1) returned 1
[0232.070] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9c0107b6) returned 0x0
[0232.070] GetFocus () returned 0x202c6
[0232.070] IsAppThemed () returned 0x1
[0232.070] GetThemeAppProperties () returned 0x3
[0232.070] GetThemeAppProperties () returned 0x3
[0232.070] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0232.070] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x9c0107b6, x1=0, y1=0, rop=0xcc0020) returned 1
[0232.070] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9c0107b6) returned 0x0
[0232.070] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0232.070] SelectObject (hdc=0x9c0107b6, h=0x85000f) returned 0x1e0507b9
[0232.070] DeleteDC (hdc=0x9c0107b6) returned 1
[0232.070] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0232.070] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0232.070] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23cc1ac, cPoints=0x1 | out: lpPoints=0x23cc1ac) returned 25690608
[0232.071] WindowFromPoint (Point=0x21c) returned 0x202c6
[0232.071] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192021c) returned 0x1
[0232.071] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0232.071] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0232.072] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.072] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0232.073] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.073] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0232.073] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.073] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0232.073] GetDC (hWnd=0x0) returned 0xf0105ee
[0232.074] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e888) returned 0x0
[0232.074] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0232.074] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0232.074] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0232.074] GetSystemMetrics (nIndex=5) returned 1
[0232.074] GetSystemMetrics (nIndex=6) returned 1
[0232.074] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.075] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0232.075] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.075] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0232.120] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.120] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0232.120] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.120] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0232.120] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.120] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0232.121] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.121] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0232.121] GetSystemMetrics (nIndex=5) returned 1
[0232.121] GetSystemMetrics (nIndex=6) returned 1
[0232.121] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.121] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0232.121] GetSystemMetrics (nIndex=5) returned 1
[0232.121] GetSystemMetrics (nIndex=6) returned 1
[0232.121] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.121] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0232.122] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.122] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0232.122] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.122] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0232.122] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.122] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0232.122] GetSystemMetrics (nIndex=59) returned 1460
[0232.122] GetSystemMetrics (nIndex=60) returned 920
[0232.122] GetSystemMetrics (nIndex=34) returned 136
[0232.122] GetSystemMetrics (nIndex=35) returned 39
[0232.122] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.122] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0232.123] GetCurrentThreadId () returned 0x11d0
[0232.123] GetCurrentThreadId () returned 0x11d0
[0232.123] GetCurrentThreadId () returned 0x11d0
[0232.123] GetCurrentThreadId () returned 0x11d0
[0232.123] GetCurrentThreadId () returned 0x11d0
[0232.123] GetCurrentThreadId () returned 0x11d0
[0232.123] GetCurrentThreadId () returned 0x11d0
[0232.123] GetCurrentThreadId () returned 0x11d0
[0232.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.123] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0232.123] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0232.123] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0232.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.123] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0232.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.124] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0232.124] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x60122
[0232.125] SetWindowLongW (hWnd=0x60122, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0232.125] GetWindowLongW (hWnd=0x60122, nIndex=-4) returned 1950089536
[0232.125] SetWindowLongW (hWnd=0x60122, nIndex=-4, dwNewLong=79646758) returned 1950089536
[0232.125] GetWindowLongW (hWnd=0x60122, nIndex=-4) returned 79646758
[0232.125] GetWindowLongW (hWnd=0x60122, nIndex=-16) returned 113311744
[0232.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x60122, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0232.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x60122, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0232.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x60122, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0232.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x60122, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0232.130] GetClientRect (in: hWnd=0x60122, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0232.130] GetWindowRect (in: hWnd=0x60122, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0232.130] SetWindowTextW (hWnd=0x60122, lpString="WindowsFormsParkingWindow") returned 1
[0232.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x60122, Msg=0xc, wParam=0x0, lParam=0x23c4188) returned 0x1
[0232.130] GetParent (hWnd=0x60122) returned 0x0
[0232.131] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0232.132] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x60122, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1c02d6
[0232.133] SetWindowLongW (hWnd=0x1c02d6, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0232.133] GetWindowLongW (hWnd=0x1c02d6, nIndex=-4) returned 1868147648
[0232.133] SetWindowLongW (hWnd=0x1c02d6, nIndex=-4, dwNewLong=79646118) returned 1868147648
[0232.133] GetWindowLongW (hWnd=0x1c02d6, nIndex=-4) returned 79646118
[0232.133] GetWindowLongW (hWnd=0x1c02d6, nIndex=-16) returned 1174405133
[0232.133] GetWindowLongW (hWnd=0x1c02d6, nIndex=-12) returned 0
[0232.133] SetWindowLongW (hWnd=0x1c02d6, nIndex=-12, dwNewLong=1835734) returned 0
[0232.133] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0232.134] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0232.134] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0232.135] GetClientRect (in: hWnd=0x1c02d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0232.135] GetWindowRect (in: hWnd=0x1c02d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0232.135] GetParent (hWnd=0x1c02d6) returned 0x60122
[0232.135] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60122, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0232.135] SetWindowTextW (hWnd=0x1c02d6, lpString="Enter password: ") returned 1
[0232.135] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0232.135] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0232.135] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0232.135] GetClientRect (in: hWnd=0x1c02d6, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0232.136] GetWindowRect (in: hWnd=0x1c02d6, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0232.136] GetParent (hWnd=0x1c02d6) returned 0x60122
[0232.136] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60122, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0232.136] SendMessageW (hWnd=0x1c02d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1c02d6) returned 0x0
[0232.136] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1c02d6) returned 0x0
[0232.136] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0232.136] GetParent (hWnd=0x1c02d6) returned 0x60122
[0232.136] GdipCreateFromHWND (hwnd=0x1c02d6, graphics=0x53e994) returned 0x0
[0232.136] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0232.136] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0232.136] GetProcessWindowStation () returned 0x13c
[0232.136] GetCapture () returned 0x202c6
[0232.137] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0232.137] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0232.137] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0232.137] ReleaseCapture () returned 1
[0232.137] GetActiveWindow () returned 0x70036
[0232.137] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0232.137] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.137] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0232.137] GetCursorPos (in: lpPoint=0x23d8f5c | out: lpPoint=0x23d8f5c*(x=540, y=402)) returned 1
[0232.137] MonitorFromPoint (pt=0x21c, dwFlags=0x192) returned 0x10001
[0232.138] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0232.138] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x9f0107b6
[0232.138] GetDeviceCaps (hdc=0x9f0107b6, index=12) returned 32
[0232.138] GetDeviceCaps (hdc=0x9f0107b6, index=14) returned 1
[0232.138] DeleteDC (hdc=0x9f0107b6) returned 1
[0232.138] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0232.138] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0232.138] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1102c0
[0232.139] SetWindowLongW (hWnd=0x1102c0, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0232.139] GetWindowLongW (hWnd=0x1102c0, nIndex=-4) returned 1950089536
[0232.139] SetWindowLongW (hWnd=0x1102c0, nIndex=-4, dwNewLong=79646438) returned 1950089536
[0232.139] GetWindowLongW (hWnd=0x1102c0, nIndex=-4) returned 79646438
[0232.139] GetWindowLongW (hWnd=0x1102c0, nIndex=-16) returned 113770496
[0232.139] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0232.140] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0232.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0232.141] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0232.141] GetWindowRect (in: hWnd=0x1102c0, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0232.141] SetWindowTextW (hWnd=0x1102c0, lpString="Ransomware") returned 1
[0232.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xc, wParam=0x0, lParam=0x23cc274) returned 0x1
[0232.142] GetStartupInfoW (in: lpStartupInfo=0x23d9298 | out: lpStartupInfo=0x23d9298*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0232.145] GetParent (hWnd=0x1102c0) returned 0x0
[0232.145] SetWindowLongW (hWnd=0x1102c0, nIndex=-8, dwNewLong=0) returned 0
[0232.146] SendMessageW (hWnd=0x1102c0, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0232.146] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0232.147] SendMessageW (hWnd=0x1102c0, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0232.147] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0232.147] GetSystemMenu (hWnd=0x1102c0, bRevert=0) returned 0x1c0217
[0232.147] GetWindowPlacement (in: hWnd=0x1102c0, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0232.147] EnableMenuItem (hMenu=0x1c0217, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0232.147] EnableMenuItem (hMenu=0x1c0217, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0232.147] EnableMenuItem (hMenu=0x1c0217, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0232.147] EnableMenuItem (hMenu=0x1c0217, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0232.147] EnableMenuItem (hMenu=0x1c0217, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0232.148] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0232.148] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0232.148] GetWindowRect (in: hWnd=0x1102c0, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0232.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.148] GetWindowLongW (hWnd=0x1102c0, nIndex=-16) returned 113770496
[0232.148] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.148] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.148] GetSystemMetrics (nIndex=42) returned 0
[0232.148] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.148] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0232.148] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.148] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.148] GetSystemMetrics (nIndex=42) returned 0
[0232.148] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.148] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0232.148] GetCursorPos (in: lpPoint=0x23d940c | out: lpPoint=0x23d940c*(x=540, y=402)) returned 1
[0232.148] MonitorFromPoint (pt=0x21c, dwFlags=0x192) returned 0x10001
[0232.149] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0232.149] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xa30107b6
[0232.149] GetDeviceCaps (hdc=0xa30107b6, index=12) returned 32
[0232.149] GetDeviceCaps (hdc=0xa30107b6, index=14) returned 1
[0232.149] DeleteDC (hdc=0xa30107b6) returned 1
[0232.149] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0232.149] GetWindowLongW (hWnd=0x1102c0, nIndex=-16) returned 113770496
[0232.149] GetWindowLongW (hWnd=0x1102c0, nIndex=-20) returned 327937
[0232.149] SetWindowLongW (hWnd=0x1102c0, nIndex=-16, dwNewLong=46661632) returned 113770496
[0232.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0232.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0232.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0232.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0232.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0232.150] SetWindowLongW (hWnd=0x1102c0, nIndex=-20, dwNewLong=327681) returned 327937
[0232.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0232.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0232.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0232.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0232.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0232.152] SetWindowPos (hWnd=0x1102c0, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0232.152] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0232.152] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0232.152] GetWindowPlacement (in: hWnd=0x1102c0, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0232.153] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0232.153] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0232.153] GetWindowRect (in: hWnd=0x1102c0, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0232.153] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0232.153] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0232.154] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0232.154] RedrawWindow (hWnd=0x1102c0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0232.154] GetSystemMenu (hWnd=0x1102c0, bRevert=0) returned 0x1c0217
[0232.154] GetWindowPlacement (in: hWnd=0x1102c0, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0232.154] EnableMenuItem (hMenu=0x1c0217, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0232.154] EnableMenuItem (hMenu=0x1c0217, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0232.154] EnableMenuItem (hMenu=0x1c0217, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0232.154] EnableMenuItem (hMenu=0x1c0217, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0232.154] EnableMenuItem (hMenu=0x1c0217, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0232.154] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0232.154] GetWindowLongW (hWnd=0x1102c0, nIndex=-8) returned 0
[0232.154] SetWindowLongW (hWnd=0x1102c0, nIndex=-8, dwNewLong=458806) returned 0
[0232.155] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0232.155] GetProcessWindowStation () returned 0x13c
[0232.155] GetCurrentThreadId () returned 0x11d0
[0232.155] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4c8e, lParam=0x0) returned 1
[0232.156] IsWindowVisible (hWnd=0x1102c0) returned 0
[0232.156] IsWindowVisible (hWnd=0x70036) returned 1
[0232.156] IsWindowEnabled (hWnd=0x70036) returned 1
[0232.156] IsWindowVisible (hWnd=0x602b6) returned 0
[0232.156] IsWindowVisible (hWnd=0x901f8) returned 0
[0232.156] IsWindowVisible (hWnd=0x202d0) returned 0
[0232.156] IsWindowVisible (hWnd=0x202d4) returned 0
[0232.156] GetActiveWindow () returned 0x70036
[0232.156] GetFocus () returned 0x202c6
[0232.156] IsWindow (hWnd=0x70036) returned 1
[0232.156] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0232.156] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0232.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0232.157] GetWindowLongW (hWnd=0x1102c0, nIndex=-8) returned 458806
[0232.157] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0232.157] GetCurrentThreadId () returned 0x11d0
[0232.157] GetWindowLongW (hWnd=0x1102c0, nIndex=-8) returned 458806
[0232.157] IsWindowEnabled (hWnd=0x70036) returned 0
[0232.157] IsWindowEnabled (hWnd=0x1102c0) returned 1
[0232.157] ShowWindow (hWnd=0x1102c0, nCmdShow=5) returned 0
[0232.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0232.157] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0232.157] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.157] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0232.157] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x1102c0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x600ea
[0232.158] SetWindowLongW (hWnd=0x600ea, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0232.158] GetWindowLongW (hWnd=0x600ea, nIndex=-4) returned 1868026976
[0232.158] SetWindowLongW (hWnd=0x600ea, nIndex=-4, dwNewLong=79645918) returned 1868026976
[0232.158] GetWindowLongW (hWnd=0x600ea, nIndex=-4) returned 79645918
[0232.158] GetWindowLongW (hWnd=0x600ea, nIndex=-16) returned 1174470848
[0232.158] GetWindowLongW (hWnd=0x600ea, nIndex=-12) returned 0
[0232.158] SetWindowLongW (hWnd=0x600ea, nIndex=-12, dwNewLong=393450) returned 0
[0232.158] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0232.159] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0232.159] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0232.160] SendMessageW (hWnd=0x600ea, Msg=0x2055, wParam=0x600ea, lParam=0x3) returned 0x2
[0232.160] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0232.160] GetWindow (hWnd=0x600ea, uCmd=0x3) returned 0x0
[0232.160] GetClientRect (in: hWnd=0x600ea, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0232.160] GetWindowRect (in: hWnd=0x600ea, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0232.160] GetParent (hWnd=0x600ea) returned 0x1102c0
[0232.161] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c0, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0232.161] SendMessageW (hWnd=0x600ea, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0232.161] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0232.161] SendMessageW (hWnd=0x600ea, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0232.161] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0232.161] GetSystemMetrics (nIndex=5) returned 1
[0232.161] GetSystemMetrics (nIndex=6) returned 1
[0232.161] SendMessageW (hWnd=0x600ea, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0232.161] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0232.161] SendMessageW (hWnd=0x600ea, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0232.161] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0232.162] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0232.163] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0232.163] GetClientRect (in: hWnd=0x600ea, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0232.163] GetWindowRect (in: hWnd=0x600ea, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0232.163] GetParent (hWnd=0x600ea) returned 0x1102c0
[0232.163] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c0, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0232.163] SendMessageW (hWnd=0x600ea, Msg=0x2210, wParam=0xea0001, lParam=0x600ea) returned 0x0
[0232.163] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x2210, wParam=0xea0001, lParam=0x600ea) returned 0x0
[0232.163] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0232.163] GetParent (hWnd=0x600ea) returned 0x1102c0
[0232.163] GetParent (hWnd=0x1c02d6) returned 0x60122
[0232.163] SetParent (hWndChild=0x1c02d6, hWndNewParent=0x1102c0) returned 0x60122
[0232.164] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0232.164] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0232.164] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0232.164] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0232.164] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0232.164] GetClientRect (in: hWnd=0x1c02d6, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0232.164] GetWindowRect (in: hWnd=0x1c02d6, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0232.164] GetParent (hWnd=0x1c02d6) returned 0x1102c0
[0232.164] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c0, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0232.165] GetClientRect (in: hWnd=0x1c02d6, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0232.165] GetWindowRect (in: hWnd=0x1c02d6, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0232.165] GetParent (hWnd=0x1c02d6) returned 0x1102c0
[0232.165] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c0, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0232.165] GetParent (hWnd=0x1c02d6) returned 0x1102c0
[0232.165] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0232.165] GetWindow (hWnd=0x1c02d6, uCmd=0x3) returned 0x0
[0232.165] SetWindowPos (hWnd=0x1c02d6, hWndInsertAfter=0x600ea, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0232.165] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0232.165] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0232.166] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0232.166] GetClientRect (in: hWnd=0x1c02d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0232.166] GetWindowRect (in: hWnd=0x1c02d6, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0232.166] GetParent (hWnd=0x1c02d6) returned 0x1102c0
[0232.166] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c0, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0232.166] GetParent (hWnd=0x1c02d6) returned 0x1102c0
[0232.166] GetWindow (hWnd=0x1c02d6, uCmd=0x3) returned 0x600ea
[0232.166] GetWindowThreadProcessId (in: hWnd=0x1c02d6, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0232.166] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0232.166] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.166] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0232.166] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x1102c0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x20013e
[0232.167] SetWindowLongW (hWnd=0x20013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0232.167] GetWindowLongW (hWnd=0x20013e, nIndex=-4) returned 1868032000
[0232.167] SetWindowLongW (hWnd=0x20013e, nIndex=-4, dwNewLong=79646158) returned 1868032000
[0232.167] GetWindowLongW (hWnd=0x20013e, nIndex=-4) returned 79646158
[0232.167] GetWindowLongW (hWnd=0x20013e, nIndex=-16) returned 1174470667
[0232.167] GetWindowLongW (hWnd=0x20013e, nIndex=-12) returned 0
[0232.167] SetWindowLongW (hWnd=0x20013e, nIndex=-12, dwNewLong=2097470) returned 0
[0232.167] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0232.168] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0232.168] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0232.169] SendMessageW (hWnd=0x20013e, Msg=0x2055, wParam=0x20013e, lParam=0x3) returned 0x2
[0232.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0232.169] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0232.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0232.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0232.169] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0232.169] RedrawWindow (hWnd=0x600ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0232.169] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0232.169] RedrawWindow (hWnd=0x1c02d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0232.169] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0232.169] RedrawWindow (hWnd=0x20013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0232.169] RedrawWindow (hWnd=0x1102c0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0232.170] GetWindow (hWnd=0x20013e, uCmd=0x3) returned 0x1c02d6
[0232.170] GetClientRect (in: hWnd=0x20013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0232.170] GetWindowRect (in: hWnd=0x20013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0232.170] GetParent (hWnd=0x20013e) returned 0x1102c0
[0232.170] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c0, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0232.170] SetWindowTextW (hWnd=0x20013e, lpString="OK") returned 1
[0232.170] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0xc, wParam=0x0, lParam=0x23d0734) returned 0x1
[0232.170] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0232.170] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0232.170] GetClientRect (in: hWnd=0x20013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0232.170] GetWindowRect (in: hWnd=0x20013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0232.170] GetParent (hWnd=0x20013e) returned 0x1102c0
[0232.170] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c0, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0232.171] SendMessageW (hWnd=0x20013e, Msg=0x2210, wParam=0x13e0001, lParam=0x20013e) returned 0x0
[0232.171] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x2210, wParam=0x13e0001, lParam=0x20013e) returned 0x0
[0232.171] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0232.171] GetParent (hWnd=0x20013e) returned 0x1102c0
[0232.171] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0232.171] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.171] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0232.171] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x1102c0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x501e2
[0232.172] SetWindowLongW (hWnd=0x501e2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0232.172] GetWindowLongW (hWnd=0x501e2, nIndex=-4) returned 1868032000
[0232.172] SetWindowLongW (hWnd=0x501e2, nIndex=-4, dwNewLong=79646518) returned 1868032000
[0232.172] GetWindowLongW (hWnd=0x501e2, nIndex=-4) returned 79646518
[0232.172] GetWindowLongW (hWnd=0x501e2, nIndex=-16) returned 1174470667
[0232.172] GetWindowLongW (hWnd=0x501e2, nIndex=-12) returned 0
[0232.172] SetWindowLongW (hWnd=0x501e2, nIndex=-12, dwNewLong=328162) returned 0
[0232.173] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x501e2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0232.173] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x501e2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0232.173] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x501e2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0232.174] SendMessageW (hWnd=0x501e2, Msg=0x2055, wParam=0x501e2, lParam=0x3) returned 0x2
[0232.174] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0232.174] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x501e2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0232.174] GetWindow (hWnd=0x501e2, uCmd=0x3) returned 0x20013e
[0232.174] GetClientRect (in: hWnd=0x501e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0232.174] GetWindowRect (in: hWnd=0x501e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0232.174] GetParent (hWnd=0x501e2) returned 0x1102c0
[0232.174] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c0, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0232.174] SetWindowTextW (hWnd=0x501e2, lpString="Cancel") returned 1
[0232.174] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x501e2, Msg=0xc, wParam=0x0, lParam=0x23d3ff4) returned 0x1
[0232.175] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x501e2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0232.175] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x501e2, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0232.175] GetClientRect (in: hWnd=0x501e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0232.175] GetWindowRect (in: hWnd=0x501e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0232.175] GetParent (hWnd=0x501e2) returned 0x1102c0
[0232.175] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102c0, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0232.175] SendMessageW (hWnd=0x501e2, Msg=0x2210, wParam=0x1e20001, lParam=0x501e2) returned 0x0
[0232.175] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x501e2, Msg=0x2210, wParam=0x1e20001, lParam=0x501e2) returned 0x0
[0232.175] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x501e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0232.175] GetParent (hWnd=0x501e2) returned 0x1102c0
[0232.175] GetDC (hWnd=0x0) returned 0x10105d6
[0232.176] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e320) returned 0x0
[0232.176] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0232.176] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0232.176] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0232.176] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0232.176] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0232.176] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0232.176] GetWindowLongW (hWnd=0x1102c0, nIndex=-8) returned 458806
[0232.176] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0232.176] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0232.177] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xaa0107b6
[0232.177] GetDeviceCaps (hdc=0xaa0107b6, index=12) returned 32
[0232.177] GetDeviceCaps (hdc=0xaa0107b6, index=14) returned 1
[0232.177] DeleteDC (hdc=0xaa0107b6) returned 1
[0232.177] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0232.177] GetWindowThreadProcessId (in: hWnd=0x1102c0, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0232.177] GetCurrentThreadId () returned 0x11d0
[0232.177] PostMessageW (hWnd=0x1102c0, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0232.177] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.177] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.177] GetSystemMetrics (nIndex=42) returned 0
[0232.177] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.177] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0232.178] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0232.178] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0232.178] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0232.178] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0232.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1102c0) returned 0x1
[0232.186] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0232.186] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0232.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0232.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0232.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0232.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0232.189] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0232.190] GetFocus () returned 0x202c6
[0232.190] IsChild (hWndParent=0x1102c0, hWnd=0x202c6) returned 0
[0232.190] GetFocus () returned 0x202c6
[0232.190] SetFocus (hWnd=0x600ea) returned 0x202c6
[0232.191] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x600ea, lParam=0x0) returned 0x0
[0232.191] GetCapture () returned 0x0
[0232.191] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0232.192] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0232.193] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0232.204] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0232.204] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0232.204] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0232.204] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0232.205] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0232.205] GetParent (hWnd=0x1102c0) returned 0x0
[0232.205] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0232.206] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0232.206] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0232.206] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0232.206] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0232.206] GetSysColorBrush (nIndex=5) returned 0x100079
[0232.207] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0232.207] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0232.209] SendMessageW (hWnd=0x600ea, Msg=0x2111, wParam=0x10000ea, lParam=0x600ea) returned 0x0
[0232.209] SendMessageW (hWnd=0x600ea, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0232.209] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0232.209] GetKeyState (nVirtKey=1) returned 1
[0232.209] GetKeyState (nVirtKey=2) returned 0
[0232.209] GetKeyState (nVirtKey=4) returned 0
[0232.209] GetKeyState (nVirtKey=5) returned 0
[0232.209] GetKeyState (nVirtKey=6) returned 0
[0232.209] GetWindowTextLengthW (hWnd=0x600ea) returned 0
[0232.209] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0232.209] SendMessageW (hWnd=0x600ea, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0232.209] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0232.209] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0232.209] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0232.213] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0232.214] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0232.215] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0232.215] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0232.215] GetWindowPlacement (in: hWnd=0x1102c0, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0232.215] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0232.215] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.215] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.215] GetSystemMetrics (nIndex=42) returned 0
[0232.215] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.215] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0232.215] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0232.216] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017
[0232.216] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010
[0232.216] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0xffffffffb50507a2
[0232.216] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2
[0232.216] SaveDC (hdc=0x60100ce) returned 1
[0232.216] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0
[0232.216] CreateSolidBrush (color=0xf0f0f0) returned 0xe410078d
[0232.216] FillRect (hDC=0x60100ce, lprc=0x53e250, hbr=0xe410078d) returned 1
[0232.216] DeleteObject (ho=0xe410078d) returned 1
[0232.216] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1
[0232.216] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0232.216] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0232.216] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0232.217] GetWindowPlacement (in: hWnd=0x1102c0, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0232.217] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0232.217] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.217] GetSystemMetrics (nIndex=42) returned 0
[0232.217] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0232.217] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0232.217] GetCurrentObject (hdc=0xc00107b6, type=0x1) returned 0xb00017
[0232.217] GetCurrentObject (hdc=0xc00107b6, type=0x2) returned 0x900010
[0232.217] GetCurrentObject (hdc=0xc00107b6, type=0x7) returned 0xffffffffec0507cc
[0232.217] GetCurrentObject (hdc=0xc00107b6, type=0x6) returned 0x8a01c2
[0232.218] SaveDC (hdc=0xc00107b6) returned 1
[0232.218] GetNearestColor (hdc=0xc00107b6, color=0xf0f0f0) returned 0xf0f0f0
[0232.218] CreateSolidBrush (color=0xf0f0f0) returned 0xe510078d
[0232.218] FillRect (hDC=0xc00107b6, lprc=0x53dc18, hbr=0xe510078d) returned 1
[0232.218] DeleteObject (ho=0xe510078d) returned 1
[0232.218] RestoreDC (hdc=0xc00107b6, nSavedDC=-1) returned 1
[0232.218] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.218] GetSystemMetrics (nIndex=42) returned 0
[0232.218] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0232.218] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0232.218] GetCurrentObject (hdc=0xc00107b6, type=0x1) returned 0xb00017
[0232.218] GetCurrentObject (hdc=0xc00107b6, type=0x2) returned 0x900010
[0232.218] GetCurrentObject (hdc=0xc00107b6, type=0x7) returned 0xffffffffec0507cc
[0232.218] GetCurrentObject (hdc=0xc00107b6, type=0x6) returned 0x8a01c2
[0232.218] SaveDC (hdc=0xc00107b6) returned 1
[0232.218] GetNearestColor (hdc=0xc00107b6, color=0xf0f0f0) returned 0xf0f0f0
[0232.218] CreateSolidBrush (color=0xf0f0f0) returned 0xe610078d
[0232.218] FillRect (hDC=0xc00107b6, lprc=0x53dbb8, hbr=0xe610078d) returned 1
[0232.219] DeleteObject (ho=0xe610078d) returned 1
[0232.219] RestoreDC (hdc=0xc00107b6, nSavedDC=-1) returned 1
[0232.219] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.219] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.219] GetSystemMetrics (nIndex=42) returned 0
[0232.219] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.219] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0232.219] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0232.220] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0232.220] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0232.220] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0232.220] GetStockObject (i=5) returned 0x900015
[0232.220] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x501e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0232.220] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x501e2, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0232.220] GetStockObject (i=5) returned 0x900015
[0232.220] GetWindowPlacement (in: hWnd=0x1102c0, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0232.221] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0232.221] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0232.221] GetWindowRect (in: hWnd=0x1102c0, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0232.222] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0232.222] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0232.222] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0232.223] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0232.223] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0232.223] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0232.223] GetWindowRect (in: hWnd=0x1102c0, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0232.223] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.223] IsWindowUnicode (hWnd=0x1102c0) returned 1
[0232.223] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.223] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.223] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.223] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0232.223] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.223] IsWindowUnicode (hWnd=0x1102c0) returned 1
[0232.223] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.223] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.223] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.223] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.233] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x84, wParam=0x0, lParam=0x192021c) returned 0x12
[0232.233] IsWindowUnicode (hWnd=0x1102c0) returned 1
[0232.233] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.233] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.233] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.234] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.234] IsWindowUnicode (hWnd=0x202c6) returned 1
[0232.234] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.234] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.234] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.234] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0232.234] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0232.234] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.234] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x84, wParam=0x0, lParam=0x192021c) returned 0x12
[0232.235] IsWindowUnicode (hWnd=0x1102c0) returned 1
[0232.235] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.235] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x84, wParam=0x0, lParam=0x192021c) returned 0x12
[0232.235] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x20, wParam=0x1102c0, lParam=0x2000012) returned 0x0
[0232.235] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.235] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.235] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xa0, wParam=0x12, lParam=0x192021c) returned 0x0
[0232.235] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.236] IsWindowUnicode (hWnd=0x1102c0) returned 1
[0232.236] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.236] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.236] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.236] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.237] IsWindowUnicode (hWnd=0x1102c0) returned 1
[0232.237] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.237] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.237] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.237] BeginPaint (in: hWnd=0x1102c0, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x60100ce
[0232.238] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0232.238] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.238] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.238] GetSystemMetrics (nIndex=42) returned 0
[0232.238] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.238] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0232.238] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0232.238] EndPaint (hWnd=0x1102c0, lpPaint=0x53e30c) returned 1
[0232.238] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.238] IsWindowUnicode (hWnd=0x600ea) returned 1
[0232.238] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.238] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.238] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0232.238] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0232.239] SetTextColor (hdc=0xc10107b6, color=0x0) returned 0x0
[0232.239] SetBkColor (hdc=0xc10107b6, color=0xffffff) returned 0xffffff
[0232.240] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.240] IsWindowUnicode (hWnd=0x1c02d6) returned 1
[0232.240] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.240] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.240] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.240] BeginPaint (in: hWnd=0x1c02d6, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x10105d6
[0232.240] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0232.240] CreateCompatibleDC (hdc=0x10105d6) returned 0xd5010788
[0232.240] SelectObject (hdc=0xd5010788, h=0x1e0507b9) returned 0x85000f
[0232.240] GdipCreateFromHDC (hdc=0xd5010788, graphics=0x53e30c) returned 0x0
[0232.240] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0232.240] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0232.240] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0232.241] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.241] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0232.241] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0232.241] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0232.241] LocalFree (hMem=0x89ec80) returned 0x0
[0232.241] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.241] GdipCreateRegion (region=0x53e354) returned 0x0
[0232.241] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.241] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0232.241] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0232.241] GetWindowTextLengthW (hWnd=0x1c02d6) returned 16
[0232.241] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0232.241] GetSystemMetrics (nIndex=42) returned 0
[0232.241] GetWindowTextW (in: hWnd=0x1c02d6, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0232.241] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0232.241] GetClientRect (in: hWnd=0x1c02d6, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0232.241] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0232.241] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0232.241] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0232.241] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.241] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0232.241] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.242] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.242] LocalFree (hMem=0x89ea88) returned 0x0
[0232.242] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0232.242] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.242] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.242] LocalFree (hMem=0x89ea88) returned 0x0
[0232.242] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.242] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0232.242] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0232.242] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0232.242] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0232.242] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0232.242] GetCurrentObject (hdc=0xd5010788, type=0x1) returned 0xb00017
[0232.242] GetCurrentObject (hdc=0xd5010788, type=0x2) returned 0x900010
[0232.242] GetCurrentObject (hdc=0xd5010788, type=0x7) returned 0x1e0507b9
[0232.242] GetCurrentObject (hdc=0xd5010788, type=0x6) returned 0x8a01c2
[0232.242] SaveDC (hdc=0xd5010788) returned 1
[0232.242] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xba040798
[0232.242] GetClipRgn (hdc=0xd5010788, hrgn=0xba040798) returned 0
[0232.242] SelectClipRgn (hdc=0xd5010788, hrgn=0x2604051e) returned 2
[0232.242] DeleteObject (ho=0xba040798) returned 1
[0232.243] DeleteObject (ho=0x2604051e) returned 1
[0232.243] OffsetViewportOrgEx (in: hdc=0xd5010788, x=0, y=0, lppt=0x23dae38 | out: lppt=0x23dae38) returned 1
[0232.243] GetNearestColor (hdc=0xd5010788, color=0xf0f0f0) returned 0xf0f0f0
[0232.243] CreateSolidBrush (color=0xf0f0f0) returned 0xe710078d
[0232.243] FillRect (hDC=0xd5010788, lprc=0x53e1f4, hbr=0xe710078d) returned 1
[0232.243] DeleteObject (ho=0xe710078d) returned 1
[0232.243] RestoreDC (hdc=0xd5010788, nSavedDC=-1) returned 1
[0232.243] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd5010788) returned 0x0
[0232.243] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc190dbd) returned 0x0
[0232.243] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.243] GetWindowTextLengthW (hWnd=0x1c02d6) returned 16
[0232.243] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0232.243] GetSystemMetrics (nIndex=42) returned 0
[0232.243] GetWindowTextW (in: hWnd=0x1c02d6, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0232.243] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0232.243] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0232.243] GetCurrentObject (hdc=0xd5010788, type=0x1) returned 0xb00017
[0232.243] GetCurrentObject (hdc=0xd5010788, type=0x2) returned 0x900010
[0232.243] GetCurrentObject (hdc=0xd5010788, type=0x7) returned 0x1e0507b9
[0232.243] GetCurrentObject (hdc=0xd5010788, type=0x6) returned 0x8a01c2
[0232.243] SaveDC (hdc=0xd5010788) returned 1
[0232.244] GetNearestColor (hdc=0xd5010788, color=0x0) returned 0x0
[0232.244] RestoreDC (hdc=0xd5010788, nSavedDC=-1) returned 1
[0232.244] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd5010788) returned 0x0
[0232.244] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0232.244] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0232.244] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0232.244] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x23db140 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0232.245] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0232.245] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0232.245] GetCurrentObject (hdc=0xd5010788, type=0x1) returned 0xb00017
[0232.245] GetCurrentObject (hdc=0xd5010788, type=0x2) returned 0x900010
[0232.245] GetCurrentObject (hdc=0xd5010788, type=0x7) returned 0x1e0507b9
[0232.245] GetCurrentObject (hdc=0xd5010788, type=0x6) returned 0x8a01c2
[0232.245] SaveDC (hdc=0xd5010788) returned 1
[0232.245] GetTextAlign (hdc=0xd5010788) returned 0x0
[0232.245] GetTextColor (hdc=0xd5010788) returned 0x0
[0232.245] GetCurrentObject (hdc=0xd5010788, type=0x6) returned 0x8a01c2
[0232.245] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0232.245] SelectObject (hdc=0xd5010788, h=0x730a066d) returned 0x8a01c2
[0232.245] GetBkMode (hdc=0xd5010788) returned 2
[0232.245] SetBkMode (hdc=0xd5010788, mode=1) returned 2
[0232.245] DrawTextExW (in: hdc=0xd5010788, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x23db364 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0232.246] RestoreDC (hdc=0xd5010788, nSavedDC=-1) returned 1
[0232.246] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd5010788) returned 0x0
[0232.246] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0232.246] BitBlt (hdc=0x10105d6, x=0, y=0, cx=250, cy=70, hdcSrc=0xd5010788, x1=0, y1=0, rop=0xcc0020) returned 1
[0232.246] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd5010788) returned 0x0
[0232.246] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0232.246] SelectObject (hdc=0xd5010788, h=0x85000f) returned 0x1e0507b9
[0232.246] DeleteDC (hdc=0xd5010788) returned 1
[0232.246] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0232.246] EndPaint (hWnd=0x1c02d6, lpPaint=0x53e2f0) returned 1
[0232.246] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.246] IsWindowUnicode (hWnd=0x20013e) returned 1
[0232.246] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.246] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.246] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.247] BeginPaint (in: hWnd=0x20013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0232.247] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0232.247] CreateCompatibleDC (hdc=0xf0105ee) returned 0xd7010788
[0232.247] SelectObject (hdc=0xd7010788, h=0x1e0507b9) returned 0x85000f
[0232.247] GdipCreateFromHDC (hdc=0xd7010788, graphics=0x53e300) returned 0x0
[0232.247] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0232.247] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0232.247] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0232.247] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.247] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0232.247] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.247] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0232.247] LocalFree (hMem=0x89ea88) returned 0x0
[0232.247] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.247] GdipCreateRegion (region=0x53e348) returned 0x0
[0232.247] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.247] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0232.248] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0232.248] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc170dbd) returned 0x0
[0232.248] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.248] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0232.248] GetCurrentObject (hdc=0xd7010788, type=0x1) returned 0xb00017
[0232.248] GetCurrentObject (hdc=0xd7010788, type=0x2) returned 0x900010
[0232.248] GetCurrentObject (hdc=0xd7010788, type=0x7) returned 0x1e0507b9
[0232.248] GetCurrentObject (hdc=0xd7010788, type=0x6) returned 0x8a01c2
[0232.248] SaveDC (hdc=0xd7010788) returned 1
[0232.248] GetNearestColor (hdc=0xd7010788, color=0xf0f0f0) returned 0xf0f0f0
[0232.248] GetNearestColor (hdc=0xd7010788, color=0xa0a0a0) returned 0xa0a0a0
[0232.248] GetNearestColor (hdc=0xd7010788, color=0x696969) returned 0x696969
[0232.248] GetNearestColor (hdc=0xd7010788, color=0xa0a0a0) returned 0xa0a0a0
[0232.248] GetNearestColor (hdc=0xd7010788, color=0x0) returned 0x0
[0232.248] GetNearestColor (hdc=0xd7010788, color=0xffffff) returned 0xffffff
[0232.248] GetNearestColor (hdc=0xd7010788, color=0xe5e5e5) returned 0xe5e5e5
[0232.248] GetNearestColor (hdc=0xd7010788, color=0xd7d7d7) returned 0xd7d7d7
[0232.248] GetNearestColor (hdc=0xd7010788, color=0x0) returned 0x0
[0232.248] RestoreDC (hdc=0xd7010788, nSavedDC=-1) returned 1
[0232.249] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010788) returned 0x0
[0232.249] IsAppThemed () returned 0x1
[0232.249] GetThemeAppProperties () returned 0x3
[0232.249] GetThemeAppProperties () returned 0x3
[0232.249] IsAppThemed () returned 0x1
[0232.249] GetThemeAppProperties () returned 0x3
[0232.249] GetThemeAppProperties () returned 0x3
[0232.249] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x23dbad0 | out: lpchText="OK", lprc=0x53e028) returned 13
[0232.249] IsAppThemed () returned 0x1
[0232.249] GetThemeAppProperties () returned 0x3
[0232.249] GetThemeAppProperties () returned 0x3
[0232.249] IsAppThemed () returned 0x1
[0232.249] GetThemeAppProperties () returned 0x3
[0232.249] GetThemeAppProperties () returned 0x3
[0232.249] GetFocus () returned 0x600ea
[0232.249] IsAppThemed () returned 0x1
[0232.249] GetThemeAppProperties () returned 0x3
[0232.249] GetThemeAppProperties () returned 0x3
[0232.249] IsAppThemed () returned 0x1
[0232.249] GetThemeAppProperties () returned 0x3
[0232.249] GetThemeAppProperties () returned 0x3
[0232.250] IsThemePartDefined () returned 0x1
[0232.250] IsAppThemed () returned 0x1
[0232.250] GetThemeAppProperties () returned 0x3
[0232.250] GetThemeAppProperties () returned 0x3
[0232.250] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0232.250] IsAppThemed () returned 0x1
[0232.250] GetThemeAppProperties () returned 0x3
[0232.250] GetThemeAppProperties () returned 0x3
[0232.250] IsAppThemed () returned 0x1
[0232.250] GetThemeAppProperties () returned 0x3
[0232.250] GetThemeAppProperties () returned 0x3
[0232.250] IsThemePartDefined () returned 0x1
[0232.250] GdipCreateRegion (region=0x53e070) returned 0x0
[0232.250] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.250] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0232.250] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.250] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0232.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0232.250] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0232.250] LocalFree (hMem=0x89ec80) returned 0x0
[0232.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0232.250] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0232.250] LocalFree (hMem=0x89ee40) returned 0x0
[0232.250] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.250] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0232.250] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0232.251] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0232.251] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.251] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0232.251] GetCurrentObject (hdc=0xd7010788, type=0x1) returned 0xb00017
[0232.251] GetCurrentObject (hdc=0xd7010788, type=0x2) returned 0x900010
[0232.251] GetCurrentObject (hdc=0xd7010788, type=0x7) returned 0x1e0507b9
[0232.251] GetCurrentObject (hdc=0xd7010788, type=0x6) returned 0x8a01c2
[0232.251] SaveDC (hdc=0xd7010788) returned 1
[0232.251] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2704051e
[0232.251] GetClipRgn (hdc=0xd7010788, hrgn=0x2704051e) returned 0
[0232.251] SelectClipRgn (hdc=0xd7010788, hrgn=0xbe040798) returned 2
[0232.251] DeleteObject (ho=0x2704051e) returned 1
[0232.251] DeleteObject (ho=0xbe040798) returned 1
[0232.251] OffsetViewportOrgEx (in: hdc=0xd7010788, x=0, y=0, lppt=0x23dc180 | out: lppt=0x23dc180) returned 1
[0232.251] DrawThemeParentBackground () returned 0x0
[0232.251] GetWindowPlacement (in: hWnd=0x1102c0, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0232.251] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0232.251] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.251] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.252] GetSystemMetrics (nIndex=42) returned 0
[0232.252] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.252] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0232.252] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0232.252] GetCurrentObject (hdc=0xd7010788, type=0x1) returned 0xb00017
[0232.252] GetCurrentObject (hdc=0xd7010788, type=0x2) returned 0x900010
[0232.252] GetCurrentObject (hdc=0xd7010788, type=0x7) returned 0x1e0507b9
[0232.252] GetCurrentObject (hdc=0xd7010788, type=0x6) returned 0x8a01c2
[0232.252] SaveDC (hdc=0xd7010788) returned 2
[0232.252] GetNearestColor (hdc=0xd7010788, color=0xf0f0f0) returned 0xf0f0f0
[0232.252] CreateSolidBrush (color=0xf0f0f0) returned 0xe810078d
[0232.252] FillRect (hDC=0xd7010788, lprc=0x53dad0, hbr=0xe810078d) returned 1
[0232.252] DeleteObject (ho=0xe810078d) returned 1
[0232.252] RestoreDC (hdc=0xd7010788, nSavedDC=-1) returned 1
[0232.252] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.252] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.252] GetSystemMetrics (nIndex=42) returned 0
[0232.252] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.252] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0232.252] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0232.252] GetCurrentObject (hdc=0xd7010788, type=0x1) returned 0xb00017
[0232.252] GetCurrentObject (hdc=0xd7010788, type=0x2) returned 0x900010
[0232.252] GetCurrentObject (hdc=0xd7010788, type=0x7) returned 0x1e0507b9
[0232.253] GetCurrentObject (hdc=0xd7010788, type=0x6) returned 0x8a01c2
[0232.253] SaveDC (hdc=0xd7010788) returned 2
[0232.253] GetNearestColor (hdc=0xd7010788, color=0xf0f0f0) returned 0xf0f0f0
[0232.253] CreateSolidBrush (color=0xf0f0f0) returned 0xe910078d
[0232.253] FillRect (hDC=0xd7010788, lprc=0x53da70, hbr=0xe910078d) returned 1
[0232.253] DeleteObject (ho=0xe910078d) returned 1
[0232.253] RestoreDC (hdc=0xd7010788, nSavedDC=-1) returned 1
[0232.253] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.253] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.253] GetSystemMetrics (nIndex=42) returned 0
[0232.253] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.253] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0232.253] RestoreDC (hdc=0xd7010788, nSavedDC=-1) returned 1
[0232.253] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010788) returned 0x0
[0232.253] IsAppThemed () returned 0x1
[0232.253] GetThemeAppProperties () returned 0x3
[0232.253] GetThemeAppProperties () returned 0x3
[0232.253] IsAppThemed () returned 0x1
[0232.254] GetThemeAppProperties () returned 0x3
[0232.254] GetThemeAppProperties () returned 0x3
[0232.254] IsThemePartDefined () returned 0x1
[0232.254] GdipCreateRegion (region=0x53dff4) returned 0x0
[0232.254] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.254] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0232.254] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.254] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0232.254] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0232.254] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0232.254] LocalFree (hMem=0x89ee40) returned 0x0
[0232.254] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0232.254] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0232.254] LocalFree (hMem=0x89ee40) returned 0x0
[0232.254] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.254] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0232.254] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0232.254] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0232.254] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.254] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0232.254] GetCurrentObject (hdc=0xd7010788, type=0x1) returned 0xb00017
[0232.254] GetCurrentObject (hdc=0xd7010788, type=0x2) returned 0x900010
[0232.254] GetCurrentObject (hdc=0xd7010788, type=0x7) returned 0x1e0507b9
[0232.254] GetCurrentObject (hdc=0xd7010788, type=0x6) returned 0x8a01c2
[0232.254] SaveDC (hdc=0xd7010788) returned 1
[0232.255] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbf040798
[0232.255] GetClipRgn (hdc=0xd7010788, hrgn=0xbf040798) returned 0
[0232.255] SelectClipRgn (hdc=0xd7010788, hrgn=0x2904051e) returned 2
[0232.255] DeleteObject (ho=0xbf040798) returned 1
[0232.255] DeleteObject (ho=0x2904051e) returned 1
[0232.255] OffsetViewportOrgEx (in: hdc=0xd7010788, x=0, y=0, lppt=0x23dca08 | out: lppt=0x23dca08) returned 1
[0232.255] IsAppThemed () returned 0x1
[0232.255] GetThemeAppProperties () returned 0x3
[0232.255] GetThemeAppProperties () returned 0x3
[0232.255] DrawThemeBackground () returned 0x0
[0232.255] RestoreDC (hdc=0xd7010788, nSavedDC=-1) returned 1
[0232.255] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010788) returned 0x0
[0232.255] GdipCreateRegion (region=0x53dff8) returned 0x0
[0232.255] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.255] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0232.255] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.255] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0232.255] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0232.255] LocalFree (hMem=0x89ee40) returned 0x0
[0232.255] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0232.258] LocalFree (hMem=0x89ee40) returned 0x0
[0232.258] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.258] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0232.258] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0232.258] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0232.258] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.258] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0232.258] GetCurrentObject (hdc=0xd7010788, type=0x1) returned 0xb00017
[0232.258] GetCurrentObject (hdc=0xd7010788, type=0x2) returned 0x900010
[0232.258] GetCurrentObject (hdc=0xd7010788, type=0x7) returned 0x1e0507b9
[0232.258] GetCurrentObject (hdc=0xd7010788, type=0x6) returned 0x8a01c2
[0232.258] SaveDC (hdc=0xd7010788) returned 1
[0232.258] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2a04051e
[0232.258] GetClipRgn (hdc=0xd7010788, hrgn=0x2a04051e) returned 0
[0232.258] SelectClipRgn (hdc=0xd7010788, hrgn=0xc0040798) returned 2
[0232.258] DeleteObject (ho=0x2a04051e) returned 1
[0232.258] DeleteObject (ho=0xc0040798) returned 1
[0232.258] OffsetViewportOrgEx (in: hdc=0xd7010788, x=0, y=0, lppt=0x23dccdc | out: lppt=0x23dccdc) returned 1
[0232.258] IsAppThemed () returned 0x1
[0232.258] GetThemeAppProperties () returned 0x3
[0232.258] GetThemeAppProperties () returned 0x3
[0232.258] GetThemeBackgroundContentRect () returned 0x0
[0232.258] RestoreDC (hdc=0xd7010788, nSavedDC=-1) returned 1
[0232.259] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010788) returned 0x0
[0232.259] IsAppThemed () returned 0x1
[0232.259] GetThemeAppProperties () returned 0x3
[0232.259] GetThemeAppProperties () returned 0x3
[0232.259] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0232.259] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0232.259] GetCurrentObject (hdc=0xd7010788, type=0x1) returned 0xb00017
[0232.259] GetCurrentObject (hdc=0xd7010788, type=0x2) returned 0x900010
[0232.259] GetCurrentObject (hdc=0xd7010788, type=0x7) returned 0x1e0507b9
[0232.259] GetCurrentObject (hdc=0xd7010788, type=0x6) returned 0x8a01c2
[0232.259] SaveDC (hdc=0xd7010788) returned 1
[0232.259] GetTextAlign (hdc=0xd7010788) returned 0x0
[0232.259] GetTextColor (hdc=0xd7010788) returned 0x0
[0232.259] GetCurrentObject (hdc=0xd7010788, type=0x6) returned 0x8a01c2
[0232.259] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0232.259] SelectObject (hdc=0xd7010788, h=0x730a066d) returned 0x8a01c2
[0232.259] GetBkMode (hdc=0xd7010788) returned 2
[0232.259] SetBkMode (hdc=0xd7010788, mode=1) returned 2
[0232.259] DrawTextExW (in: hdc=0xd7010788, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x23dd07c | out: lpchText="OK", lprc=0x53df90) returned 13
[0232.260] DrawTextExW (in: hdc=0xd7010788, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x23dd07c | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0232.260] RestoreDC (hdc=0xd7010788, nSavedDC=-1) returned 1
[0232.260] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010788) returned 0x0
[0232.260] GetFocus () returned 0x600ea
[0232.260] IsAppThemed () returned 0x1
[0232.260] GetThemeAppProperties () returned 0x3
[0232.260] GetThemeAppProperties () returned 0x3
[0232.260] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0232.260] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xd7010788, x1=0, y1=0, rop=0xcc0020) returned 1
[0232.260] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010788) returned 0x0
[0232.260] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0232.260] SelectObject (hdc=0xd7010788, h=0x85000f) returned 0x1e0507b9
[0232.260] DeleteDC (hdc=0xd7010788) returned 1
[0232.260] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0232.260] EndPaint (hWnd=0x20013e, lpPaint=0x53e2e4) returned 1
[0232.261] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.261] IsWindowUnicode (hWnd=0x501e2) returned 1
[0232.261] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.261] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.261] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.261] BeginPaint (in: hWnd=0x501e2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0232.261] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0232.261] CreateCompatibleDC (hdc=0x60100ce) returned 0xd9010788
[0232.261] SelectObject (hdc=0xd9010788, h=0x1e0507b9) returned 0x85000f
[0232.261] GdipCreateFromHDC (hdc=0xd9010788, graphics=0x53e300) returned 0x0
[0232.261] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0232.261] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0232.261] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0232.261] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.261] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0232.261] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0232.262] LocalFree (hMem=0x89ea88) returned 0x0
[0232.262] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.262] GdipCreateRegion (region=0x53e348) returned 0x0
[0232.262] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.262] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0232.262] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0232.262] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc150dbd) returned 0x0
[0232.262] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.262] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0232.262] GetCurrentObject (hdc=0xd9010788, type=0x1) returned 0xb00017
[0232.262] GetCurrentObject (hdc=0xd9010788, type=0x2) returned 0x900010
[0232.262] GetCurrentObject (hdc=0xd9010788, type=0x7) returned 0x1e0507b9
[0232.262] GetCurrentObject (hdc=0xd9010788, type=0x6) returned 0x8a01c2
[0232.262] SaveDC (hdc=0xd9010788) returned 1
[0232.262] GetNearestColor (hdc=0xd9010788, color=0xf0f0f0) returned 0xf0f0f0
[0232.262] GetNearestColor (hdc=0xd9010788, color=0xa0a0a0) returned 0xa0a0a0
[0232.262] GetNearestColor (hdc=0xd9010788, color=0x696969) returned 0x696969
[0232.262] GetNearestColor (hdc=0xd9010788, color=0xa0a0a0) returned 0xa0a0a0
[0232.262] GetNearestColor (hdc=0xd9010788, color=0x0) returned 0x0
[0232.262] GetNearestColor (hdc=0xd9010788, color=0xffffff) returned 0xffffff
[0232.262] GetNearestColor (hdc=0xd9010788, color=0xe5e5e5) returned 0xe5e5e5
[0232.262] GetNearestColor (hdc=0xd9010788, color=0xd7d7d7) returned 0xd7d7d7
[0232.262] GetNearestColor (hdc=0xd9010788, color=0x0) returned 0x0
[0232.263] RestoreDC (hdc=0xd9010788, nSavedDC=-1) returned 1
[0232.263] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd9010788) returned 0x0
[0232.263] IsAppThemed () returned 0x1
[0232.263] GetThemeAppProperties () returned 0x3
[0232.263] GetThemeAppProperties () returned 0x3
[0232.263] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0232.263] SendMessageW (hWnd=0x1102c0, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0232.263] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0232.263] IsAppThemed () returned 0x1
[0232.263] GetThemeAppProperties () returned 0x3
[0232.263] GetThemeAppProperties () returned 0x3
[0232.263] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x23dd88c | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0232.263] IsAppThemed () returned 0x1
[0232.263] GetThemeAppProperties () returned 0x3
[0232.263] GetThemeAppProperties () returned 0x3
[0232.263] IsAppThemed () returned 0x1
[0232.263] GetThemeAppProperties () returned 0x3
[0232.263] GetThemeAppProperties () returned 0x3
[0232.263] GetFocus () returned 0x600ea
[0232.263] IsAppThemed () returned 0x1
[0232.264] GetThemeAppProperties () returned 0x3
[0232.264] GetThemeAppProperties () returned 0x3
[0232.264] IsAppThemed () returned 0x1
[0232.264] GetThemeAppProperties () returned 0x3
[0232.264] GetThemeAppProperties () returned 0x3
[0232.264] IsThemePartDefined () returned 0x1
[0232.264] IsAppThemed () returned 0x1
[0232.264] GetThemeAppProperties () returned 0x3
[0232.264] GetThemeAppProperties () returned 0x3
[0232.264] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0232.264] IsAppThemed () returned 0x1
[0232.264] GetThemeAppProperties () returned 0x3
[0232.264] GetThemeAppProperties () returned 0x3
[0232.264] IsAppThemed () returned 0x1
[0232.264] GetThemeAppProperties () returned 0x3
[0232.264] GetThemeAppProperties () returned 0x3
[0232.264] IsThemePartDefined () returned 0x1
[0232.264] GdipCreateRegion (region=0x53e070) returned 0x0
[0232.264] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.264] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0232.264] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.264] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0232.264] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0232.264] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0232.264] LocalFree (hMem=0x89eee8) returned 0x0
[0232.264] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.264] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.265] LocalFree (hMem=0x89ea88) returned 0x0
[0232.265] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.265] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0232.265] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0232.265] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0232.265] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.265] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0232.265] GetCurrentObject (hdc=0xd9010788, type=0x1) returned 0xb00017
[0232.265] GetCurrentObject (hdc=0xd9010788, type=0x2) returned 0x900010
[0232.265] GetCurrentObject (hdc=0xd9010788, type=0x7) returned 0x1e0507b9
[0232.265] GetCurrentObject (hdc=0xd9010788, type=0x6) returned 0x8a01c2
[0232.265] SaveDC (hdc=0xd9010788) returned 1
[0232.265] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc1040798
[0232.265] GetClipRgn (hdc=0xd9010788, hrgn=0xc1040798) returned 0
[0232.265] SelectClipRgn (hdc=0xd9010788, hrgn=0x2e04051e) returned 2
[0232.265] DeleteObject (ho=0xc1040798) returned 1
[0232.265] DeleteObject (ho=0x2e04051e) returned 1
[0232.265] OffsetViewportOrgEx (in: hdc=0xd9010788, x=0, y=0, lppt=0x23ddf3c | out: lppt=0x23ddf3c) returned 1
[0232.265] DrawThemeParentBackground () returned 0x0
[0232.265] GetWindowPlacement (in: hWnd=0x1102c0, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0232.266] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0232.266] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.266] GetSystemMetrics (nIndex=42) returned 0
[0232.266] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0232.266] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0232.266] GetCurrentObject (hdc=0xd9010788, type=0x1) returned 0xb00017
[0232.266] GetCurrentObject (hdc=0xd9010788, type=0x2) returned 0x900010
[0232.266] GetCurrentObject (hdc=0xd9010788, type=0x7) returned 0x1e0507b9
[0232.266] GetCurrentObject (hdc=0xd9010788, type=0x6) returned 0x8a01c2
[0232.266] SaveDC (hdc=0xd9010788) returned 2
[0232.266] GetNearestColor (hdc=0xd9010788, color=0xf0f0f0) returned 0xf0f0f0
[0232.266] CreateSolidBrush (color=0xf0f0f0) returned 0xea10078d
[0232.266] FillRect (hDC=0xd9010788, lprc=0x53dad0, hbr=0xea10078d) returned 1
[0232.266] DeleteObject (ho=0xea10078d) returned 1
[0232.266] RestoreDC (hdc=0xd9010788, nSavedDC=-1) returned 1
[0232.266] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.266] GetSystemMetrics (nIndex=42) returned 0
[0232.266] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0232.267] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0232.267] GetCurrentObject (hdc=0xd9010788, type=0x1) returned 0xb00017
[0232.267] GetCurrentObject (hdc=0xd9010788, type=0x2) returned 0x900010
[0232.267] GetCurrentObject (hdc=0xd9010788, type=0x7) returned 0x1e0507b9
[0232.267] GetCurrentObject (hdc=0xd9010788, type=0x6) returned 0x8a01c2
[0232.267] SaveDC (hdc=0xd9010788) returned 2
[0232.267] GetNearestColor (hdc=0xd9010788, color=0xf0f0f0) returned 0xf0f0f0
[0232.267] CreateSolidBrush (color=0xf0f0f0) returned 0xeb10078d
[0232.267] FillRect (hDC=0xd9010788, lprc=0x53da70, hbr=0xeb10078d) returned 1
[0232.267] DeleteObject (ho=0xeb10078d) returned 1
[0232.267] RestoreDC (hdc=0xd9010788, nSavedDC=-1) returned 1
[0232.267] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.267] GetSystemMetrics (nIndex=42) returned 0
[0232.267] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0232.267] RestoreDC (hdc=0xd9010788, nSavedDC=-1) returned 1
[0232.267] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd9010788) returned 0x0
[0232.267] IsAppThemed () returned 0x1
[0232.268] GetThemeAppProperties () returned 0x3
[0232.268] GetThemeAppProperties () returned 0x3
[0232.268] IsAppThemed () returned 0x1
[0232.268] GetThemeAppProperties () returned 0x3
[0232.268] GetThemeAppProperties () returned 0x3
[0232.268] IsThemePartDefined () returned 0x1
[0232.268] GdipCreateRegion (region=0x53dff4) returned 0x0
[0232.268] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.268] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0232.268] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.268] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0232.268] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.268] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0232.268] LocalFree (hMem=0x89ea88) returned 0x0
[0232.268] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.268] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0232.268] LocalFree (hMem=0x89ea88) returned 0x0
[0232.268] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.268] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0232.268] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0232.268] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0232.268] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.268] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0232.268] GetCurrentObject (hdc=0xd9010788, type=0x1) returned 0xb00017
[0232.269] GetCurrentObject (hdc=0xd9010788, type=0x2) returned 0x900010
[0232.269] GetCurrentObject (hdc=0xd9010788, type=0x7) returned 0x1e0507b9
[0232.269] GetCurrentObject (hdc=0xd9010788, type=0x6) returned 0x8a01c2
[0232.269] SaveDC (hdc=0xd9010788) returned 1
[0232.269] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f04051e
[0232.269] GetClipRgn (hdc=0xd9010788, hrgn=0x2f04051e) returned 0
[0232.269] SelectClipRgn (hdc=0xd9010788, hrgn=0xc3040798) returned 2
[0232.269] DeleteObject (ho=0x2f04051e) returned 1
[0232.269] DeleteObject (ho=0xc3040798) returned 1
[0232.269] OffsetViewportOrgEx (in: hdc=0xd9010788, x=0, y=0, lppt=0x23de7c4 | out: lppt=0x23de7c4) returned 1
[0232.269] IsAppThemed () returned 0x1
[0232.269] GetThemeAppProperties () returned 0x3
[0232.269] GetThemeAppProperties () returned 0x3
[0232.269] DrawThemeBackground () returned 0x0
[0232.269] RestoreDC (hdc=0xd9010788, nSavedDC=-1) returned 1
[0232.269] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd9010788) returned 0x0
[0232.269] GdipCreateRegion (region=0x53dff8) returned 0x0
[0232.269] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.269] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0232.269] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.269] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0232.269] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0232.270] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0232.270] LocalFree (hMem=0x89ec80) returned 0x0
[0232.270] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0232.270] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0232.270] LocalFree (hMem=0x89ee40) returned 0x0
[0232.270] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.270] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0232.270] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0232.270] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0232.270] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.270] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0232.270] GetCurrentObject (hdc=0xd9010788, type=0x1) returned 0xb00017
[0232.270] GetCurrentObject (hdc=0xd9010788, type=0x2) returned 0x900010
[0232.270] GetCurrentObject (hdc=0xd9010788, type=0x7) returned 0x1e0507b9
[0232.270] GetCurrentObject (hdc=0xd9010788, type=0x6) returned 0x8a01c2
[0232.270] SaveDC (hdc=0xd9010788) returned 1
[0232.270] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc4040798
[0232.270] GetClipRgn (hdc=0xd9010788, hrgn=0xc4040798) returned 0
[0232.270] SelectClipRgn (hdc=0xd9010788, hrgn=0x3004051e) returned 2
[0232.270] DeleteObject (ho=0xc4040798) returned 1
[0232.270] DeleteObject (ho=0x3004051e) returned 1
[0232.270] OffsetViewportOrgEx (in: hdc=0xd9010788, x=0, y=0, lppt=0x23dea98 | out: lppt=0x23dea98) returned 1
[0232.271] IsAppThemed () returned 0x1
[0232.271] GetThemeAppProperties () returned 0x3
[0232.271] GetThemeAppProperties () returned 0x3
[0232.271] GetThemeBackgroundContentRect () returned 0x0
[0232.271] RestoreDC (hdc=0xd9010788, nSavedDC=-1) returned 1
[0232.271] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd9010788) returned 0x0
[0232.271] IsAppThemed () returned 0x1
[0232.271] GetThemeAppProperties () returned 0x3
[0232.271] GetThemeAppProperties () returned 0x3
[0232.271] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0232.271] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0232.271] GetCurrentObject (hdc=0xd9010788, type=0x1) returned 0xb00017
[0232.308] GetCurrentObject (hdc=0xd9010788, type=0x2) returned 0x900010
[0232.308] GetCurrentObject (hdc=0xd9010788, type=0x7) returned 0x1e0507b9
[0232.308] GetCurrentObject (hdc=0xd9010788, type=0x6) returned 0x8a01c2
[0232.308] SaveDC (hdc=0xd9010788) returned 1
[0232.308] GetTextAlign (hdc=0xd9010788) returned 0x0
[0232.308] GetTextColor (hdc=0xd9010788) returned 0x0
[0232.308] GetCurrentObject (hdc=0xd9010788, type=0x6) returned 0x8a01c2
[0232.308] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0232.308] SelectObject (hdc=0xd9010788, h=0x730a066d) returned 0x8a01c2
[0232.308] GetBkMode (hdc=0xd9010788) returned 2
[0232.309] SetBkMode (hdc=0xd9010788, mode=1) returned 2
[0232.309] DrawTextExW (in: hdc=0xd9010788, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x23dee38 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0232.309] DrawTextExW (in: hdc=0xd9010788, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x23dee38 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0232.309] RestoreDC (hdc=0xd9010788, nSavedDC=-1) returned 1
[0232.309] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd9010788) returned 0x0
[0232.309] GetFocus () returned 0x600ea
[0232.309] IsAppThemed () returned 0x1
[0232.309] GetThemeAppProperties () returned 0x3
[0232.309] GetThemeAppProperties () returned 0x3
[0232.309] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0232.309] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0xd9010788, x1=0, y1=0, rop=0xcc0020) returned 1
[0232.310] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd9010788) returned 0x0
[0232.310] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0232.310] SelectObject (hdc=0xd9010788, h=0x85000f) returned 0x1e0507b9
[0232.310] DeleteDC (hdc=0xd9010788) returned 1
[0232.310] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0232.310] EndPaint (hWnd=0x501e2, lpPaint=0x53e2e4) returned 1
[0232.310] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.310] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0232.311] IsWindowUnicode (hWnd=0x102dc) returned 1
[0232.311] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.311] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0232.311] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.311] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.312] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.312] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0232.313] IsWindowUnicode (hWnd=0x102dc) returned 1
[0232.313] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.313] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.313] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.313] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.314] IsWindowUnicode (hWnd=0x202c6) returned 1
[0232.314] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.314] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.314] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.314] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0232.314] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0232.314] CreateCompatibleDC (hdc=0xf0105ee) returned 0xdb010788
[0232.314] SelectObject (hdc=0xdb010788, h=0x1e0507b9) returned 0x85000f
[0232.314] GdipCreateFromHDC (hdc=0xdb010788, graphics=0x53e300) returned 0x0
[0232.314] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0232.314] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0232.314] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0232.314] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.314] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0232.314] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0232.315] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0232.315] LocalFree (hMem=0x89ee40) returned 0x0
[0232.315] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.315] GdipCreateRegion (region=0x53e348) returned 0x0
[0232.315] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.315] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0232.315] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0232.315] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc130dbd) returned 0x0
[0232.315] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.315] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0232.315] GetCurrentObject (hdc=0xdb010788, type=0x1) returned 0xb00017
[0232.315] GetCurrentObject (hdc=0xdb010788, type=0x2) returned 0x900010
[0232.315] GetCurrentObject (hdc=0xdb010788, type=0x7) returned 0x1e0507b9
[0232.315] GetCurrentObject (hdc=0xdb010788, type=0x6) returned 0x8a01c2
[0232.315] SaveDC (hdc=0xdb010788) returned 1
[0232.315] GetNearestColor (hdc=0xdb010788, color=0xff) returned 0xff
[0232.315] GetNearestColor (hdc=0xdb010788, color=0x55) returned 0x55
[0232.315] GetNearestColor (hdc=0xdb010788, color=0x0) returned 0x0
[0232.315] GetNearestColor (hdc=0xdb010788, color=0x55) returned 0x55
[0232.316] GetNearestColor (hdc=0xdb010788, color=0x0) returned 0x0
[0232.316] GetNearestColor (hdc=0xdb010788, color=0x8080ff) returned 0x8080ff
[0232.316] GetNearestColor (hdc=0xdb010788, color=0x7373e5) returned 0x7373e5
[0232.316] GetNearestColor (hdc=0xdb010788, color=0xe5) returned 0xe5
[0232.316] GetNearestColor (hdc=0xdb010788, color=0x0) returned 0x0
[0232.316] RestoreDC (hdc=0xdb010788, nSavedDC=-1) returned 1
[0232.316] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdb010788) returned 0x0
[0232.316] IsAppThemed () returned 0x1
[0232.316] GetThemeAppProperties () returned 0x3
[0232.316] GetThemeAppProperties () returned 0x3
[0232.316] IsAppThemed () returned 0x1
[0232.316] GetThemeAppProperties () returned 0x3
[0232.316] GetThemeAppProperties () returned 0x3
[0232.316] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0232.316] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x23df61c | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0232.316] IsAppThemed () returned 0x1
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] IsAppThemed () returned 0x1
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] GetFocus () returned 0x600ea
[0232.317] IsAppThemed () returned 0x1
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] IsAppThemed () returned 0x1
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] IsThemePartDefined () returned 0x1
[0232.317] IsAppThemed () returned 0x1
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0232.317] IsAppThemed () returned 0x1
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] IsAppThemed () returned 0x1
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] GetThemeAppProperties () returned 0x3
[0232.317] IsThemePartDefined () returned 0x1
[0232.317] GdipCreateRegion (region=0x53e070) returned 0x0
[0232.317] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.317] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0232.317] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.318] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0232.318] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.318] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.318] LocalFree (hMem=0x89ea88) returned 0x0
[0232.318] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.318] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.318] LocalFree (hMem=0x89ea88) returned 0x0
[0232.318] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.318] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0232.318] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0232.318] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0232.318] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.318] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0232.319] GetCurrentObject (hdc=0xdb010788, type=0x1) returned 0xb00017
[0232.319] GetCurrentObject (hdc=0xdb010788, type=0x2) returned 0x900010
[0232.319] GetCurrentObject (hdc=0xdb010788, type=0x7) returned 0x1e0507b9
[0232.319] GetCurrentObject (hdc=0xdb010788, type=0x6) returned 0x8a01c2
[0232.319] SaveDC (hdc=0xdb010788) returned 1
[0232.319] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3104051e
[0232.319] GetClipRgn (hdc=0xdb010788, hrgn=0x3104051e) returned 0
[0232.319] SelectClipRgn (hdc=0xdb010788, hrgn=0xc8040798) returned 2
[0232.319] DeleteObject (ho=0x3104051e) returned 1
[0232.319] DeleteObject (ho=0xc8040798) returned 1
[0232.319] OffsetViewportOrgEx (in: hdc=0xdb010788, x=0, y=0, lppt=0x23dfccc | out: lppt=0x23dfccc) returned 1
[0232.319] DrawThemeParentBackground () returned 0x0
[0232.319] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0232.319] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0232.319] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0232.319] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0232.319] GetSystemMetrics (nIndex=42) returned 0
[0232.319] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0232.320] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0232.320] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0232.320] GetCurrentObject (hdc=0xdb010788, type=0x1) returned 0xb00017
[0232.320] GetCurrentObject (hdc=0xdb010788, type=0x2) returned 0x900010
[0232.320] GetCurrentObject (hdc=0xdb010788, type=0x7) returned 0x1e0507b9
[0232.320] GetCurrentObject (hdc=0xdb010788, type=0x6) returned 0x8a01c2
[0232.320] SaveDC (hdc=0xdb010788) returned 2
[0232.320] GetNearestColor (hdc=0xdb010788, color=0xff) returned 0xff
[0232.320] CreateSolidBrush (color=0xff) returned 0xec10078d
[0232.320] FillRect (hDC=0xdb010788, lprc=0x53dad0, hbr=0xec10078d) returned 1
[0232.320] DeleteObject (ho=0xec10078d) returned 1
[0232.320] RestoreDC (hdc=0xdb010788, nSavedDC=-1) returned 1
[0232.320] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0232.320] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0232.320] GetSystemMetrics (nIndex=42) returned 0
[0232.320] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0232.320] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0232.320] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0232.320] GetCurrentObject (hdc=0xdb010788, type=0x1) returned 0xb00017
[0232.320] GetCurrentObject (hdc=0xdb010788, type=0x2) returned 0x900010
[0232.320] GetCurrentObject (hdc=0xdb010788, type=0x7) returned 0x1e0507b9
[0232.321] GetCurrentObject (hdc=0xdb010788, type=0x6) returned 0x8a01c2
[0232.321] SaveDC (hdc=0xdb010788) returned 2
[0232.321] GetNearestColor (hdc=0xdb010788, color=0xff) returned 0xff
[0232.321] CreateSolidBrush (color=0xff) returned 0xed10078d
[0232.321] FillRect (hDC=0xdb010788, lprc=0x53da70, hbr=0xed10078d) returned 1
[0232.321] DeleteObject (ho=0xed10078d) returned 1
[0232.321] RestoreDC (hdc=0xdb010788, nSavedDC=-1) returned 1
[0232.321] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0232.321] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0232.321] GetSystemMetrics (nIndex=42) returned 0
[0232.321] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0232.321] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0232.321] RestoreDC (hdc=0xdb010788, nSavedDC=-1) returned 1
[0232.321] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdb010788) returned 0x0
[0232.321] IsAppThemed () returned 0x1
[0232.321] GetThemeAppProperties () returned 0x3
[0232.321] GetThemeAppProperties () returned 0x3
[0232.321] IsAppThemed () returned 0x1
[0232.322] GetThemeAppProperties () returned 0x3
[0232.322] GetThemeAppProperties () returned 0x3
[0232.322] IsThemePartDefined () returned 0x1
[0232.322] GdipCreateRegion (region=0x53dff4) returned 0x0
[0232.322] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.322] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0232.322] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.322] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0232.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0232.322] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0232.322] LocalFree (hMem=0x89ec80) returned 0x0
[0232.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0232.322] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0232.322] LocalFree (hMem=0x89ee40) returned 0x0
[0232.322] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.322] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0232.322] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0232.322] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0232.322] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.322] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0232.322] GetCurrentObject (hdc=0xdb010788, type=0x1) returned 0xb00017
[0232.322] GetCurrentObject (hdc=0xdb010788, type=0x2) returned 0x900010
[0232.322] GetCurrentObject (hdc=0xdb010788, type=0x7) returned 0x1e0507b9
[0232.322] GetCurrentObject (hdc=0xdb010788, type=0x6) returned 0x8a01c2
[0232.323] SaveDC (hdc=0xdb010788) returned 1
[0232.323] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc9040798
[0232.323] GetClipRgn (hdc=0xdb010788, hrgn=0xc9040798) returned 0
[0232.323] SelectClipRgn (hdc=0xdb010788, hrgn=0x3304051e) returned 2
[0232.323] DeleteObject (ho=0xc9040798) returned 1
[0232.323] DeleteObject (ho=0x3304051e) returned 1
[0232.323] OffsetViewportOrgEx (in: hdc=0xdb010788, x=0, y=0, lppt=0x23e0530 | out: lppt=0x23e0530) returned 1
[0232.323] IsAppThemed () returned 0x1
[0232.323] GetThemeAppProperties () returned 0x3
[0232.323] GetThemeAppProperties () returned 0x3
[0232.323] DrawThemeBackground () returned 0x0
[0232.323] RestoreDC (hdc=0xdb010788, nSavedDC=-1) returned 1
[0232.323] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdb010788) returned 0x0
[0232.323] GdipCreateRegion (region=0x53dff8) returned 0x0
[0232.323] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.323] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0232.323] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.323] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0232.323] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.323] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.323] LocalFree (hMem=0x89ea88) returned 0x0
[0232.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.324] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.324] LocalFree (hMem=0x89ea88) returned 0x0
[0232.324] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.324] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0232.324] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0232.324] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0232.324] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.324] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0232.324] GetCurrentObject (hdc=0xdb010788, type=0x1) returned 0xb00017
[0232.324] GetCurrentObject (hdc=0xdb010788, type=0x2) returned 0x900010
[0232.324] GetCurrentObject (hdc=0xdb010788, type=0x7) returned 0x1e0507b9
[0232.324] GetCurrentObject (hdc=0xdb010788, type=0x6) returned 0x8a01c2
[0232.324] SaveDC (hdc=0xdb010788) returned 1
[0232.324] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3404051e
[0232.324] GetClipRgn (hdc=0xdb010788, hrgn=0x3404051e) returned 0
[0232.324] SelectClipRgn (hdc=0xdb010788, hrgn=0xca040798) returned 2
[0232.324] DeleteObject (ho=0x3404051e) returned 1
[0232.324] DeleteObject (ho=0xca040798) returned 1
[0232.324] OffsetViewportOrgEx (in: hdc=0xdb010788, x=0, y=0, lppt=0x23e0804 | out: lppt=0x23e0804) returned 1
[0232.324] IsAppThemed () returned 0x1
[0232.324] GetThemeAppProperties () returned 0x3
[0232.324] GetThemeAppProperties () returned 0x3
[0232.324] GetThemeBackgroundContentRect () returned 0x0
[0232.324] RestoreDC (hdc=0xdb010788, nSavedDC=-1) returned 1
[0232.325] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdb010788) returned 0x0
[0232.325] IsAppThemed () returned 0x1
[0232.325] GetThemeAppProperties () returned 0x3
[0232.325] GetThemeAppProperties () returned 0x3
[0232.325] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0232.325] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0232.325] GetCurrentObject (hdc=0xdb010788, type=0x1) returned 0xb00017
[0232.325] GetCurrentObject (hdc=0xdb010788, type=0x2) returned 0x900010
[0232.325] GetCurrentObject (hdc=0xdb010788, type=0x7) returned 0x1e0507b9
[0232.325] GetCurrentObject (hdc=0xdb010788, type=0x6) returned 0x8a01c2
[0232.325] SaveDC (hdc=0xdb010788) returned 1
[0232.325] GetTextAlign (hdc=0xdb010788) returned 0x0
[0232.325] GetTextColor (hdc=0xdb010788) returned 0x0
[0232.325] GetCurrentObject (hdc=0xdb010788, type=0x6) returned 0x8a01c2
[0232.325] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0232.325] SelectObject (hdc=0xdb010788, h=0x450a0799) returned 0x8a01c2
[0232.325] GetBkMode (hdc=0xdb010788) returned 2
[0232.325] SetBkMode (hdc=0xdb010788, mode=1) returned 2
[0232.325] DrawTextExW (in: hdc=0xdb010788, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x23e0ba4 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0232.326] DrawTextExW (in: hdc=0xdb010788, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x23e0ba4 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0232.326] RestoreDC (hdc=0xdb010788, nSavedDC=-1) returned 1
[0232.326] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdb010788) returned 0x0
[0232.326] GetFocus () returned 0x600ea
[0232.326] IsAppThemed () returned 0x1
[0232.326] GetThemeAppProperties () returned 0x3
[0232.326] GetThemeAppProperties () returned 0x3
[0232.326] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0232.326] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xdb010788, x1=0, y1=0, rop=0xcc0020) returned 1
[0232.326] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdb010788) returned 0x0
[0232.326] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0232.326] SelectObject (hdc=0xdb010788, h=0x85000f) returned 0x1e0507b9
[0232.326] DeleteDC (hdc=0xdb010788) returned 1
[0232.326] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0232.327] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0232.328] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.328] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.328] WaitMessage () returned 1
[0232.338] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.338] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x84, wParam=0x0, lParam=0x197035f) returned 0x1
[0232.338] IsWindowUnicode (hWnd=0x20013e) returned 1
[0232.338] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.338] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.338] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.338] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x2a2, wParam=0x0, lParam=0x0) returned 0x0
[0232.339] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.339] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x84, wParam=0x0, lParam=0x197035f) returned 0x1
[0232.339] IsWindowUnicode (hWnd=0x20013e) returned 1
[0232.339] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.339] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x84, wParam=0x0, lParam=0x197035f) returned 0x1
[0232.339] SetCursor (hCursor=0x10003) returned 0x10003
[0232.339] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.339] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.339] _TrackMouseEvent (in: lpEventTrack=0x23e0cc4 | out: lpEventTrack=0x23e0cc4) returned 1
[0232.339] SendMessageW (hWnd=0x20013e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0232.339] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0232.339] InvalidateRect (hWnd=0x20013e, lpRect=0x0, bErase=0) returned 1
[0232.339] GetKeyState (nVirtKey=1) returned 1
[0232.339] GetKeyState (nVirtKey=2) returned 0
[0232.339] GetKeyState (nVirtKey=4) returned 0
[0232.339] GetKeyState (nVirtKey=5) returned 0
[0232.339] GetKeyState (nVirtKey=6) returned 0
[0232.339] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.340] IsWindowUnicode (hWnd=0x20013e) returned 1
[0232.340] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.340] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.340] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.340] BeginPaint (in: hWnd=0x20013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0232.340] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0232.340] CreateCompatibleDC (hdc=0x60100ce) returned 0x2e0107c5
[0232.340] SelectObject (hdc=0x2e0107c5, h=0x1e0507b9) returned 0x85000f
[0232.340] GdipCreateFromHDC (hdc=0x2e0107c5, graphics=0x53e300) returned 0x0
[0232.340] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0232.340] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0232.340] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0232.340] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.340] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0232.340] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0232.340] LocalFree (hMem=0x89ea88) returned 0x0
[0232.340] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.341] GdipCreateRegion (region=0x53e348) returned 0x0
[0232.341] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.341] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0232.341] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0232.341] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc110dbd) returned 0x0
[0232.341] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.341] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0232.341] GetCurrentObject (hdc=0x2e0107c5, type=0x1) returned 0xb00017
[0232.341] GetCurrentObject (hdc=0x2e0107c5, type=0x2) returned 0x900010
[0232.341] GetCurrentObject (hdc=0x2e0107c5, type=0x7) returned 0x1e0507b9
[0232.341] GetCurrentObject (hdc=0x2e0107c5, type=0x6) returned 0x8a01c2
[0232.341] SaveDC (hdc=0x2e0107c5) returned 1
[0232.341] GetNearestColor (hdc=0x2e0107c5, color=0xf0f0f0) returned 0xf0f0f0
[0232.341] GetNearestColor (hdc=0x2e0107c5, color=0xa0a0a0) returned 0xa0a0a0
[0232.341] GetNearestColor (hdc=0x2e0107c5, color=0x696969) returned 0x696969
[0232.341] GetNearestColor (hdc=0x2e0107c5, color=0xa0a0a0) returned 0xa0a0a0
[0232.341] GetNearestColor (hdc=0x2e0107c5, color=0x0) returned 0x0
[0232.341] GetNearestColor (hdc=0x2e0107c5, color=0xffffff) returned 0xffffff
[0232.341] GetNearestColor (hdc=0x2e0107c5, color=0xe5e5e5) returned 0xe5e5e5
[0232.341] GetNearestColor (hdc=0x2e0107c5, color=0xd7d7d7) returned 0xd7d7d7
[0232.342] GetNearestColor (hdc=0x2e0107c5, color=0x0) returned 0x0
[0232.342] RestoreDC (hdc=0x2e0107c5, nSavedDC=-1) returned 1
[0232.342] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2e0107c5) returned 0x0
[0232.342] IsAppThemed () returned 0x1
[0232.342] GetThemeAppProperties () returned 0x3
[0232.342] GetThemeAppProperties () returned 0x3
[0232.342] IsAppThemed () returned 0x1
[0232.342] GetThemeAppProperties () returned 0x3
[0232.342] GetThemeAppProperties () returned 0x3
[0232.342] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0232.342] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x23e1440 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0232.342] IsAppThemed () returned 0x1
[0232.342] GetThemeAppProperties () returned 0x3
[0232.342] GetThemeAppProperties () returned 0x3
[0232.342] IsAppThemed () returned 0x1
[0232.342] GetThemeAppProperties () returned 0x3
[0232.342] GetThemeAppProperties () returned 0x3
[0232.342] IsAppThemed () returned 0x1
[0232.343] GetThemeAppProperties () returned 0x3
[0232.343] GetThemeAppProperties () returned 0x3
[0232.343] IsAppThemed () returned 0x1
[0232.343] GetThemeAppProperties () returned 0x3
[0232.343] GetThemeAppProperties () returned 0x3
[0232.343] IsThemePartDefined () returned 0x1
[0232.343] IsAppThemed () returned 0x1
[0232.343] GetThemeAppProperties () returned 0x3
[0232.343] GetThemeAppProperties () returned 0x3
[0232.343] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0232.343] IsAppThemed () returned 0x1
[0232.343] GetThemeAppProperties () returned 0x3
[0232.343] GetThemeAppProperties () returned 0x3
[0232.343] IsAppThemed () returned 0x1
[0232.343] GetThemeAppProperties () returned 0x3
[0232.343] GetThemeAppProperties () returned 0x3
[0232.343] IsThemePartDefined () returned 0x1
[0232.343] GdipCreateRegion (region=0x53e064) returned 0x0
[0232.343] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.343] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0232.343] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.343] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0232.343] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0232.343] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0232.343] LocalFree (hMem=0x89ec80) returned 0x0
[0232.343] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0232.343] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0232.344] LocalFree (hMem=0x89ec80) returned 0x0
[0232.344] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.344] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0232.344] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0232.344] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0232.344] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.344] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0232.344] GetCurrentObject (hdc=0x2e0107c5, type=0x1) returned 0xb00017
[0232.344] GetCurrentObject (hdc=0x2e0107c5, type=0x2) returned 0x900010
[0232.344] GetCurrentObject (hdc=0x2e0107c5, type=0x7) returned 0x1e0507b9
[0232.344] GetCurrentObject (hdc=0x2e0107c5, type=0x6) returned 0x8a01c2
[0232.344] SaveDC (hdc=0x2e0107c5) returned 1
[0232.344] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcb040798
[0232.344] GetClipRgn (hdc=0x2e0107c5, hrgn=0xcb040798) returned 0
[0232.344] SelectClipRgn (hdc=0x2e0107c5, hrgn=0x3804051e) returned 2
[0232.344] DeleteObject (ho=0xcb040798) returned 1
[0232.344] DeleteObject (ho=0x3804051e) returned 1
[0232.344] OffsetViewportOrgEx (in: hdc=0x2e0107c5, x=0, y=0, lppt=0x23e1af0 | out: lppt=0x23e1af0) returned 1
[0232.344] DrawThemeParentBackground () returned 0x0
[0232.344] GetWindowPlacement (in: hWnd=0x1102c0, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0232.345] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0232.345] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.345] GetSystemMetrics (nIndex=42) returned 0
[0232.345] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0232.345] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0232.345] GetCurrentObject (hdc=0x2e0107c5, type=0x1) returned 0xb00017
[0232.345] GetCurrentObject (hdc=0x2e0107c5, type=0x2) returned 0x900010
[0232.345] GetCurrentObject (hdc=0x2e0107c5, type=0x7) returned 0x1e0507b9
[0232.345] GetCurrentObject (hdc=0x2e0107c5, type=0x6) returned 0x8a01c2
[0232.345] SaveDC (hdc=0x2e0107c5) returned 2
[0232.345] GetNearestColor (hdc=0x2e0107c5, color=0xf0f0f0) returned 0xf0f0f0
[0232.345] CreateSolidBrush (color=0xf0f0f0) returned 0xee10078d
[0232.345] FillRect (hDC=0x2e0107c5, lprc=0x53dac8, hbr=0xee10078d) returned 1
[0232.345] DeleteObject (ho=0xee10078d) returned 1
[0232.345] RestoreDC (hdc=0x2e0107c5, nSavedDC=-1) returned 1
[0232.345] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.345] GetSystemMetrics (nIndex=42) returned 0
[0232.345] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0232.346] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0232.346] GetCurrentObject (hdc=0x2e0107c5, type=0x1) returned 0xb00017
[0232.346] GetCurrentObject (hdc=0x2e0107c5, type=0x2) returned 0x900010
[0232.346] GetCurrentObject (hdc=0x2e0107c5, type=0x7) returned 0x1e0507b9
[0232.346] GetCurrentObject (hdc=0x2e0107c5, type=0x6) returned 0x8a01c2
[0232.346] SaveDC (hdc=0x2e0107c5) returned 2
[0232.346] GetNearestColor (hdc=0x2e0107c5, color=0xf0f0f0) returned 0xf0f0f0
[0232.346] CreateSolidBrush (color=0xf0f0f0) returned 0xef10078d
[0232.346] FillRect (hDC=0x2e0107c5, lprc=0x53da68, hbr=0xef10078d) returned 1
[0232.346] DeleteObject (ho=0xef10078d) returned 1
[0232.346] RestoreDC (hdc=0x2e0107c5, nSavedDC=-1) returned 1
[0232.346] GetWindowTextLengthW (hWnd=0x1102c0) returned 10
[0232.346] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.346] GetSystemMetrics (nIndex=42) returned 0
[0232.346] GetWindowTextW (in: hWnd=0x1102c0, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0232.346] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0232.346] RestoreDC (hdc=0x2e0107c5, nSavedDC=-1) returned 1
[0232.346] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2e0107c5) returned 0x0
[0232.347] IsAppThemed () returned 0x1
[0232.347] GetThemeAppProperties () returned 0x3
[0232.347] GetThemeAppProperties () returned 0x3
[0232.347] IsAppThemed () returned 0x1
[0232.347] GetThemeAppProperties () returned 0x3
[0232.347] GetThemeAppProperties () returned 0x3
[0232.347] IsThemePartDefined () returned 0x1
[0232.347] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0232.347] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.347] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0232.347] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.347] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0232.347] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0232.347] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0232.347] LocalFree (hMem=0x89ec80) returned 0x0
[0232.347] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.347] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0232.347] LocalFree (hMem=0x89ea88) returned 0x0
[0232.347] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.347] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0232.347] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0232.347] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0232.347] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.347] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0232.347] GetCurrentObject (hdc=0x2e0107c5, type=0x1) returned 0xb00017
[0232.348] GetCurrentObject (hdc=0x2e0107c5, type=0x2) returned 0x900010
[0232.348] GetCurrentObject (hdc=0x2e0107c5, type=0x7) returned 0x1e0507b9
[0232.348] GetCurrentObject (hdc=0x2e0107c5, type=0x6) returned 0x8a01c2
[0232.348] SaveDC (hdc=0x2e0107c5) returned 1
[0232.348] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3904051e
[0232.348] GetClipRgn (hdc=0x2e0107c5, hrgn=0x3904051e) returned 0
[0232.348] SelectClipRgn (hdc=0x2e0107c5, hrgn=0xcd040798) returned 2
[0232.348] DeleteObject (ho=0x3904051e) returned 1
[0232.348] DeleteObject (ho=0xcd040798) returned 1
[0232.348] OffsetViewportOrgEx (in: hdc=0x2e0107c5, x=0, y=0, lppt=0x23e2378 | out: lppt=0x23e2378) returned 1
[0232.348] IsAppThemed () returned 0x1
[0232.348] GetThemeAppProperties () returned 0x3
[0232.348] GetThemeAppProperties () returned 0x3
[0232.348] DrawThemeBackground () returned 0x0
[0232.348] RestoreDC (hdc=0x2e0107c5, nSavedDC=-1) returned 1
[0232.348] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2e0107c5) returned 0x0
[0232.348] GdipCreateRegion (region=0x53dfec) returned 0x0
[0232.348] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.348] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0232.348] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.349] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0232.349] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.349] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.349] LocalFree (hMem=0x89ea88) returned 0x0
[0232.349] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0232.349] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0232.349] LocalFree (hMem=0x89ec80) returned 0x0
[0232.349] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.349] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0232.349] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0232.349] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0232.349] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.349] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0232.349] GetCurrentObject (hdc=0x2e0107c5, type=0x1) returned 0xb00017
[0232.349] GetCurrentObject (hdc=0x2e0107c5, type=0x2) returned 0x900010
[0232.350] GetCurrentObject (hdc=0x2e0107c5, type=0x7) returned 0x1e0507b9
[0232.350] GetCurrentObject (hdc=0x2e0107c5, type=0x6) returned 0x8a01c2
[0232.350] SaveDC (hdc=0x2e0107c5) returned 1
[0232.350] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xce040798
[0232.350] GetClipRgn (hdc=0x2e0107c5, hrgn=0xce040798) returned 0
[0232.350] SelectClipRgn (hdc=0x2e0107c5, hrgn=0x3a04051e) returned 2
[0232.350] DeleteObject (ho=0xce040798) returned 1
[0232.350] DeleteObject (ho=0x3a04051e) returned 1
[0232.350] OffsetViewportOrgEx (in: hdc=0x2e0107c5, x=0, y=0, lppt=0x23e264c | out: lppt=0x23e264c) returned 1
[0232.350] IsAppThemed () returned 0x1
[0232.350] GetThemeAppProperties () returned 0x3
[0232.350] GetThemeAppProperties () returned 0x3
[0232.350] GetThemeBackgroundContentRect () returned 0x0
[0232.350] RestoreDC (hdc=0x2e0107c5, nSavedDC=-1) returned 1
[0232.350] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2e0107c5) returned 0x0
[0232.350] IsAppThemed () returned 0x1
[0232.350] GetThemeAppProperties () returned 0x3
[0232.350] GetThemeAppProperties () returned 0x3
[0232.350] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0232.351] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0232.351] GetCurrentObject (hdc=0x2e0107c5, type=0x1) returned 0xb00017
[0232.351] GetCurrentObject (hdc=0x2e0107c5, type=0x2) returned 0x900010
[0232.351] GetCurrentObject (hdc=0x2e0107c5, type=0x7) returned 0x1e0507b9
[0232.351] GetCurrentObject (hdc=0x2e0107c5, type=0x6) returned 0x8a01c2
[0232.351] SaveDC (hdc=0x2e0107c5) returned 1
[0232.351] GetTextAlign (hdc=0x2e0107c5) returned 0x0
[0232.351] GetTextColor (hdc=0x2e0107c5) returned 0x0
[0232.351] GetCurrentObject (hdc=0x2e0107c5, type=0x6) returned 0x8a01c2
[0232.351] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0232.351] SelectObject (hdc=0x2e0107c5, h=0x730a066d) returned 0x8a01c2
[0232.351] GetBkMode (hdc=0x2e0107c5) returned 2
[0232.351] SetBkMode (hdc=0x2e0107c5, mode=1) returned 2
[0232.351] DrawTextExW (in: hdc=0x2e0107c5, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x23e29ec | out: lpchText="OK", lprc=0x53df84) returned 13
[0232.351] DrawTextExW (in: hdc=0x2e0107c5, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x23e29ec | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0232.352] RestoreDC (hdc=0x2e0107c5, nSavedDC=-1) returned 1
[0232.352] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2e0107c5) returned 0x0
[0232.352] GetFocus () returned 0x600ea
[0232.352] IsAppThemed () returned 0x1
[0232.352] GetThemeAppProperties () returned 0x3
[0232.352] GetThemeAppProperties () returned 0x3
[0232.352] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0232.352] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x2e0107c5, x1=0, y1=0, rop=0xcc0020) returned 1
[0232.352] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2e0107c5) returned 0x0
[0232.352] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0232.352] SelectObject (hdc=0x2e0107c5, h=0x85000f) returned 0x1e0507b9
[0232.352] DeleteDC (hdc=0x2e0107c5) returned 1
[0232.352] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0232.352] EndPaint (hWnd=0x20013e, lpPaint=0x53e2e4) returned 1
[0232.353] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.353] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.353] WaitMessage () returned 1
[0232.375] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.375] IsWindowUnicode (hWnd=0x102dc) returned 1
[0232.375] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.375] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.375] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.377] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.377] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.377] WaitMessage () returned 1
[0232.377] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.377] IsWindowUnicode (hWnd=0x102dc) returned 1
[0232.377] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.378] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.378] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.379] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.379] IsWindowUnicode (hWnd=0x102dc) returned 1
[0232.379] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.380] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.380] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.380] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.380] IsWindowUnicode (hWnd=0x102dc) returned 1
[0232.380] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.380] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.380] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.380] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.386] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.386] WaitMessage () returned 1
[0232.388] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.388] IsWindowUnicode (hWnd=0x102dc) returned 1
[0232.388] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.388] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.388] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.390] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.390] IsWindowUnicode (hWnd=0x102dc) returned 1
[0232.390] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.390] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.390] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.390] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.390] IsWindowUnicode (hWnd=0x102dc) returned 1
[0232.390] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.390] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.390] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.391] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.391] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.391] WaitMessage () returned 1
[0232.392] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.392] IsWindowUnicode (hWnd=0x102dc) returned 1
[0232.392] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.392] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.392] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.393] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.394] IsWindowUnicode (hWnd=0x102dc) returned 1
[0232.394] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.394] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.394] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.394] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.394] IsWindowUnicode (hWnd=0x102dc) returned 1
[0232.394] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.394] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.394] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.394] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.395] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.395] WaitMessage () returned 1
[0232.447] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.447] IsWindowUnicode (hWnd=0x20013e) returned 1
[0232.447] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.447] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.447] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.447] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.447] IsWindowUnicode (hWnd=0x20013e) returned 1
[0232.447] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.447] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.447] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.447] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x2a1, wParam=0x0, lParam=0xe001e) returned 0x0
[0232.447] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.447] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.447] WaitMessage () returned 1
[0232.508] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.508] IsWindowUnicode (hWnd=0x202d0) returned 1
[0232.508] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.508] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.508] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.508] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.509] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0232.509] WaitMessage () returned 1
[0232.575] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.576] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x84, wParam=0x0, lParam=0x197035f) returned 0x1
[0232.576] IsWindowUnicode (hWnd=0x20013e) returned 1
[0232.576] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.576] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x84, wParam=0x0, lParam=0x197035f) returned 0x1
[0232.576] GetDlgItem (hDlg=0x1102c0, nIDDlgItem=0) returned 0x0
[0232.576] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x210, wParam=0x201, lParam=0x1a0140) returned 0x0
[0232.576] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x21, wParam=0x1102c0, lParam=0x2010001) returned 0x1
[0232.576] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x21, wParam=0x1102c0, lParam=0x2010001) returned 0x1
[0232.576] SetCursor (hCursor=0x10003) returned 0x10003
[0232.576] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.576] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0232.576] GetKeyState (nVirtKey=1) returned -128
[0232.576] GetKeyState (nVirtKey=2) returned 0
[0232.576] GetKeyState (nVirtKey=4) returned 0
[0232.577] GetKeyState (nVirtKey=5) returned 0
[0232.577] GetKeyState (nVirtKey=6) returned 0
[0232.577] IsWindowVisible (hWnd=0x20013e) returned 1
[0232.577] IsWindowEnabled (hWnd=0x20013e) returned 1
[0232.577] SetFocus (hWnd=0x20013e) returned 0x600ea
[0232.577] GetFocus () returned 0x20013e
[0232.577] IsChild (hWndParent=0x1102c0, hWnd=0x20013e) returned 1
[0232.577] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x8, wParam=0x20013e, lParam=0x0) returned 0x1
[0232.577] SendMessageW (hWnd=0x600ea, Msg=0x2111, wParam=0x20000ea, lParam=0x600ea) returned 0x0
[0232.578] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0232.579] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0232.580] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0232.580] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0232.580] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0232.580] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0232.582] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0232.582] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x7, wParam=0x600ea, lParam=0x0) returned 0x0
[0232.582] GetStockObject (i=5) returned 0x900015
[0232.582] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0232.582] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0xd, wParam=0x3, lParam=0x89e7c8) returned 0x2
[0232.582] GetDlgItem (hDlg=0x1102c0, nIDDlgItem=2097470) returned 0x20013e
[0232.582] SendMessageW (hWnd=0x20013e, Msg=0x202b, wParam=0x20013e, lParam=0x53de74) returned 0x0
[0232.582] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x202b, wParam=0x20013e, lParam=0x53de74) returned 0x0
[0232.582] InvalidateRect (hWnd=0x20013e, lpRect=0x0, bErase=0) returned 1
[0232.584] GetFocus () returned 0x20013e
[0232.584] GetFocus () returned 0x20013e
[0232.584] GetFocus () returned 0x20013e
[0232.584] GetKeyState (nVirtKey=1) returned -128
[0232.584] GetKeyState (nVirtKey=2) returned 0
[0232.584] GetKeyState (nVirtKey=4) returned 0
[0232.584] GetKeyState (nVirtKey=5) returned 0
[0232.584] GetKeyState (nVirtKey=6) returned 0
[0232.584] GetCapture () returned 0x0
[0232.584] SetCapture (hWnd=0x20013e) returned 0x0
[0232.584] GetKeyState (nVirtKey=1) returned -128
[0232.584] GetKeyState (nVirtKey=2) returned 0
[0232.584] GetKeyState (nVirtKey=4) returned 0
[0232.584] GetKeyState (nVirtKey=5) returned 0
[0232.584] GetKeyState (nVirtKey=6) returned 0
[0232.584] NotifyWinEvent (event=0x800a, hwnd=0x20013e, idObject=-4, idChild=0)
[0232.584] InvalidateRect (hWnd=0x20013e, lpRect=0x53e4c8, bErase=0) returned 1
[0232.585] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.585] IsWindowUnicode (hWnd=0x20013e) returned 1
[0232.585] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0232.585] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0232.585] DispatchMessageW (lpMsg=0x53e8a0)
[0232.585] MapWindowPoints (in: hWndFrom=0x20013e, hWndTo=0x0, lpPoints=0x23e2c84, cPoints=0x1 | out: lpPoints=0x23e2c84) returned 25756481
[0232.585] NotifyWinEvent (event=0x800a, hwnd=0x20013e, idObject=-4, idChild=0)
[0232.585] InvalidateRect (hWnd=0x20013e, lpRect=0x53e468, bErase=0) returned 1
[0232.585] UpdateWindow (hWnd=0x20013e)
[0232.585] BeginPaint (in: hWnd=0x20013e, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x60100ce
[0232.585] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0232.585] CreateCompatibleDC (hdc=0x60100ce) returned 0x9a010795
[0232.585] SelectObject (hdc=0x9a010795, h=0x1e0507b9) returned 0x85000f
[0232.585] GdipCreateFromHDC (hdc=0x9a010795, graphics=0x53df98) returned 0x0
[0232.585] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0232.586] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0232.586] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0232.586] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.586] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0232.586] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.586] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0232.586] LocalFree (hMem=0x89ea88) returned 0x0
[0232.586] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.586] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0232.586] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.586] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0232.586] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0232.586] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc0f0dbd) returned 0x0
[0232.586] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.586] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0232.586] GetCurrentObject (hdc=0x9a010795, type=0x1) returned 0xb00017
[0232.586] GetCurrentObject (hdc=0x9a010795, type=0x2) returned 0x900010
[0232.586] GetCurrentObject (hdc=0x9a010795, type=0x7) returned 0x1e0507b9
[0232.586] GetCurrentObject (hdc=0x9a010795, type=0x6) returned 0x8a01c2
[0232.586] SaveDC (hdc=0x9a010795) returned 1
[0232.586] GetNearestColor (hdc=0x9a010795, color=0xf0f0f0) returned 0xf0f0f0
[0232.587] GetNearestColor (hdc=0x9a010795, color=0xa0a0a0) returned 0xa0a0a0
[0232.587] GetNearestColor (hdc=0x9a010795, color=0x696969) returned 0x696969
[0232.587] GetNearestColor (hdc=0x9a010795, color=0xa0a0a0) returned 0xa0a0a0
[0232.587] GetNearestColor (hdc=0x9a010795, color=0x0) returned 0x0
[0232.587] GetNearestColor (hdc=0x9a010795, color=0xffffff) returned 0xffffff
[0232.587] GetNearestColor (hdc=0x9a010795, color=0xe5e5e5) returned 0xe5e5e5
[0232.587] GetNearestColor (hdc=0x9a010795, color=0xd7d7d7) returned 0xd7d7d7
[0232.587] GetNearestColor (hdc=0x9a010795, color=0x0) returned 0x0
[0232.587] RestoreDC (hdc=0x9a010795, nSavedDC=-1) returned 1
[0232.587] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9a010795) returned 0x0
[0232.587] IsAppThemed () returned 0x1
[0232.587] GetThemeAppProperties () returned 0x3
[0232.587] GetThemeAppProperties () returned 0x3
[0232.587] IsAppThemed () returned 0x1
[0232.587] GetThemeAppProperties () returned 0x3
[0232.587] GetThemeAppProperties () returned 0x3
[0232.587] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x23e33f8 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0232.588] IsAppThemed () returned 0x1
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] IsAppThemed () returned 0x1
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] IsAppThemed () returned 0x1
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] IsAppThemed () returned 0x1
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] IsThemePartDefined () returned 0x1
[0232.588] IsAppThemed () returned 0x1
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0232.588] IsAppThemed () returned 0x1
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] IsAppThemed () returned 0x1
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] GetThemeAppProperties () returned 0x3
[0232.588] IsThemePartDefined () returned 0x1
[0232.588] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0232.589] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.589] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0232.589] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.589] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0232.589] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0232.589] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0232.589] LocalFree (hMem=0x89ee40) returned 0x0
[0232.589] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.589] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.589] LocalFree (hMem=0x89ea88) returned 0x0
[0232.589] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.589] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0232.589] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0232.589] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0232.589] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.589] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0232.589] GetCurrentObject (hdc=0x9a010795, type=0x1) returned 0xb00017
[0232.589] GetCurrentObject (hdc=0x9a010795, type=0x2) returned 0x900010
[0232.589] GetCurrentObject (hdc=0x9a010795, type=0x7) returned 0x1e0507b9
[0232.589] GetCurrentObject (hdc=0x9a010795, type=0x6) returned 0x8a01c2
[0232.589] SaveDC (hdc=0x9a010795) returned 1
[0232.589] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b04051e
[0232.589] GetClipRgn (hdc=0x9a010795, hrgn=0x3b04051e) returned 0
[0232.590] SelectClipRgn (hdc=0x9a010795, hrgn=0xd2040798) returned 2
[0232.590] DeleteObject (ho=0x3b04051e) returned 1
[0232.590] DeleteObject (ho=0xd2040798) returned 1
[0232.590] OffsetViewportOrgEx (in: hdc=0x9a010795, x=0, y=0, lppt=0x23e3aa8 | out: lppt=0x23e3aa8) returned 1
[0232.590] DrawThemeParentBackground ()
[0232.590] GetWindowPlacement (in: hWnd=0x1102c0, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0232.590] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0232.590] GetWindowTextLengthW (hWnd=0x1102c0)
[0232.590] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.590] GetSystemMetrics (nIndex=42) returned 0
[0232.590] GetWindowTextW (hWnd=0x1102c0, lpString=0x53d878, nMaxCount=11)
[0232.590] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0232.590] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0232.590] GetCurrentObject (hdc=0x9a010795, type=0x1) returned 0xb00017
[0232.590] GetCurrentObject (hdc=0x9a010795, type=0x2) returned 0x900010
[0232.590] GetCurrentObject (hdc=0x9a010795, type=0x7) returned 0x1e0507b9
[0232.590] GetCurrentObject (hdc=0x9a010795, type=0x6) returned 0x8a01c2
[0232.590] SaveDC (hdc=0x9a010795) returned 2
[0232.591] GetNearestColor (hdc=0x9a010795, color=0xf0f0f0) returned 0xf0f0f0
[0232.591] CreateSolidBrush (color=0xf0f0f0) returned 0xf010078d
[0232.591] FillRect (hDC=0x9a010795, lprc=0x53d760, hbr=0xf010078d) returned 1
[0232.591] DeleteObject (ho=0xf010078d) returned 1
[0232.591] RestoreDC (hdc=0x9a010795, nSavedDC=-1) returned 1
[0232.591] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.591] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0232.591] GetClientRect (in: hWnd=0x1102c0, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0232.591] GetCurrentObject (hdc=0x9a010795, type=0x1) returned 0xb00017
[0232.591] GetCurrentObject (hdc=0x9a010795, type=0x2) returned 0x900010
[0232.591] GetCurrentObject (hdc=0x9a010795, type=0x7) returned 0x1e0507b9
[0232.591] GetCurrentObject (hdc=0x9a010795, type=0x6) returned 0x8a01c2
[0232.591] SaveDC (hdc=0x9a010795) returned 2
[0232.591] GetNearestColor (hdc=0x9a010795, color=0xf0f0f0) returned 0xf0f0f0
[0232.591] CreateSolidBrush (color=0xf0f0f0) returned 0xf110078d
[0232.592] FillRect (hDC=0x9a010795, lprc=0x53d700, hbr=0xf110078d) returned 1
[0232.592] DeleteObject (ho=0xf110078d) returned 1
[0232.592] RestoreDC (hdc=0x9a010795, nSavedDC=-1) returned 1
[0232.592] GetWindowTextLengthW (hWnd=0x1102c0)
[0232.592] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0232.592] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0232.593] RestoreDC (hdc=0x9a010795, nSavedDC=-1) returned 1
[0232.593] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9a010795) returned 0x0
[0232.593] IsAppThemed () returned 0x1
[0232.593] GetThemeAppProperties () returned 0x3
[0232.593] GetThemeAppProperties () returned 0x3
[0232.593] IsAppThemed () returned 0x1
[0232.593] GetThemeAppProperties () returned 0x3
[0232.593] GetThemeAppProperties () returned 0x3
[0232.593] IsThemePartDefined () returned 0x1
[0232.593] GdipCreateRegion (region=0x53dc80) returned 0x0
[0232.593] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.593] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0232.593] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.593] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0232.593] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0232.593] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0232.593] LocalFree (hMem=0x89ec80) returned 0x0
[0232.593] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0232.593] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0232.593] LocalFree (hMem=0x89ec80) returned 0x0
[0232.593] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.593] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0232.593] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0232.593] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0232.593] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.594] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0232.594] IsAppThemed () returned 0x1
[0232.594] GetThemeAppProperties () returned 0x3
[0232.594] GetThemeAppProperties () returned 0x3
[0232.594] DrawThemeBackground () returned 0x0
[0232.594] RestoreDC (hdc=0x9a010795, nSavedDC=-1) returned 1
[0232.594] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9a010795) returned 0x0
[0232.594] GdipCreateRegion (region=0x53dc84) returned 0x0
[0232.594] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.594] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0232.594] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.594] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0232.594] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.594] LocalFree (hMem=0x89ea88) returned 0x0
[0232.594] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.594] LocalFree (hMem=0x89ea88) returned 0x0
[0232.595] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.595] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0232.595] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0232.595] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0232.595] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.595] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0232.595] IsAppThemed () returned 0x1
[0232.595] GetThemeAppProperties () returned 0x3
[0232.595] GetThemeAppProperties () returned 0x3
[0232.595] GetThemeBackgroundContentRect () returned 0x0
[0232.595] RestoreDC (hdc=0x9a010795, nSavedDC=-1) returned 1
[0232.595] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9a010795) returned 0x0
[0232.595] IsAppThemed () returned 0x1
[0232.595] GetThemeAppProperties () returned 0x3
[0232.595] GetThemeAppProperties () returned 0x3
[0232.595] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0232.595] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0232.595] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0232.595] SelectObject (hdc=0x9a010795, h=0x730a066d) returned 0x8a01c2
[0232.595] DrawTextExW (in: hdc=0x9a010795, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x23e49a4 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0232.596] DrawTextExW (in: hdc=0x9a010795, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x23e49a4 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0232.596] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9a010795) returned 0x0
[0232.596] GetFocus () returned 0x20013e
[0232.596] IsAppThemed () returned 0x1
[0232.596] GetThemeAppProperties () returned 0x3
[0232.596] GetThemeAppProperties () returned 0x3
[0232.596] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0232.597] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9a010795) returned 0x0
[0232.597] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0232.597] EndPaint (hWnd=0x20013e, lpPaint=0x53df7c) returned 1
[0232.598] WindowFromPoint (Point=0x35f)
[0232.598] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x84, wParam=0x0, lParam=0x197035f) returned 0x1
[0232.598] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0232.598] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0232.598] SendMessageW (hWnd=0x1102c0, Msg=0x10, wParam=0x0, lParam=0x0)
[0232.598] GetCapture () returned 0x20013e
[0232.598] ReleaseCapture ()
[0232.598] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0232.601] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x84, wParam=0x0, lParam=0x197035f) returned 0x1
[0232.601] EnableWindow (hWnd=0x70036, bEnable=1)
[0232.601] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0232.601] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x86, wParam=0x0, lParam=0x70036)
[0232.603] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0232.603] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0232.603] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0232.609] IsChild (hWndParent=0x1102c0, hWnd=0x202c6) returned 0
[0232.609] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x20013e, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0232.609] GetCapture () returned 0x0
[0232.609] InvalidateRect (hWnd=0x20013e, lpRect=0x0, bErase=0) returned 1
[0232.612] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0232.612] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0232.612] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0232.614] IsChild (hWndParent=0x1102c0, hWnd=0x202c6) returned 0
[0232.614] ShowWindow (hWnd=0x1102c0, nCmdShow=0)
[0232.614] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0232.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102c0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0232.622] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x600ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0232.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x60122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0232.623] GetWindowTextLengthW (hWnd=0x1c02d6)
[0232.623] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0232.623] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c02d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0232.629] GetProcessWindowStation () returned 0x13c
[0232.629] GetActiveWindow () returned 0x70036
[0232.629] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0232.630] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0232.630] GetCurrentThreadId () returned 0x11d0
[0232.630] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf504e, lParam=0x0) returned 1
[0232.630] IsWindowVisible (hWnd=0x70036) returned 1
[0232.630] IsWindowEnabled (hWnd=0x70036) returned 1
[0232.630] IsWindowVisible (hWnd=0x602b6) returned 0
[0232.630] IsWindowVisible (hWnd=0x901f8) returned 0
[0232.630] IsWindowVisible (hWnd=0x202d0) returned 0
[0232.630] IsWindowVisible (hWnd=0x202d4) returned 0
[0232.630] GetActiveWindow () returned 0x70036
[0232.630] GetFocus () returned 0x202c6
[0232.630] IsWindow (hWnd=0x70036) returned 1
[0232.631] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0232.631] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0232.631] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0232.631] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0232.632] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0232.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1202c0) returned 0x1
[0232.641] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0232.642] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0232.644] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x601e2, lParam=0x0) returned 0x0
[0232.644] GetCapture () returned 0x0
[0232.644] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0232.645] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0232.654] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0232.654] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0232.656] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x8b010786
[0232.656] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0232.656] CreateCompatibleDC (hdc=0x8b010786) returned 0xac010795
[0232.656] SelectObject (hdc=0xac010795, h=0x1e0507b9) returned 0x85000f
[0232.656] GdipCreateFromHDC (hdc=0xac010795, graphics=0x53e108) returned 0x0
[0232.657] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0232.657] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0232.657] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0232.657] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.657] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0232.657] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.657] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0232.657] LocalFree (hMem=0x89ea88) returned 0x0
[0232.657] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.657] GdipCreateRegion (region=0x53e150) returned 0x0
[0232.657] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.657] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0232.657] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0232.657] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc0d0dbd) returned 0x0
[0232.657] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.657] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0232.657] GetCurrentObject (hdc=0xac010795, type=0x1) returned 0xb00017
[0232.657] GetCurrentObject (hdc=0xac010795, type=0x2) returned 0x900010
[0232.657] GetCurrentObject (hdc=0xac010795, type=0x7) returned 0x1e0507b9
[0232.658] GetCurrentObject (hdc=0xac010795, type=0x6) returned 0x8a01c2
[0232.658] SaveDC (hdc=0xac010795) returned 1
[0232.658] GetNearestColor (hdc=0xac010795, color=0xff) returned 0xff
[0232.658] GetNearestColor (hdc=0xac010795, color=0x55) returned 0x55
[0232.658] GetNearestColor (hdc=0xac010795, color=0x0) returned 0x0
[0232.658] GetNearestColor (hdc=0xac010795, color=0x55) returned 0x55
[0232.658] GetNearestColor (hdc=0xac010795, color=0x0) returned 0x0
[0232.658] GetNearestColor (hdc=0xac010795, color=0x8080ff) returned 0x8080ff
[0232.658] GetNearestColor (hdc=0xac010795, color=0x7373e5) returned 0x7373e5
[0232.658] GetNearestColor (hdc=0xac010795, color=0xe5) returned 0xe5
[0232.658] GetNearestColor (hdc=0xac010795, color=0x0) returned 0x0
[0232.658] RestoreDC (hdc=0xac010795, nSavedDC=-1) returned 1
[0232.658] GdipReleaseDC (graphics=0x5d92c30, hdc=0xac010795) returned 0x0
[0232.658] IsAppThemed () returned 0x1
[0232.658] GetThemeAppProperties () returned 0x3
[0232.658] GetThemeAppProperties () returned 0x3
[0232.658] IsAppThemed () returned 0x1
[0232.658] GetThemeAppProperties () returned 0x3
[0232.659] GetThemeAppProperties () returned 0x3
[0232.659] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0232.659] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x23e5d98 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0232.659] IsAppThemed () returned 0x1
[0232.659] GetThemeAppProperties () returned 0x3
[0232.659] GetThemeAppProperties () returned 0x3
[0232.659] IsAppThemed () returned 0x1
[0232.659] GetThemeAppProperties () returned 0x3
[0232.659] GetThemeAppProperties () returned 0x3
[0232.659] GetFocus () returned 0x601e2
[0232.659] IsAppThemed () returned 0x1
[0232.659] GetThemeAppProperties () returned 0x3
[0232.659] GetThemeAppProperties () returned 0x3
[0232.659] IsAppThemed () returned 0x1
[0232.659] GetThemeAppProperties () returned 0x3
[0232.659] GetThemeAppProperties () returned 0x3
[0232.659] IsThemePartDefined () returned 0x1
[0232.659] IsAppThemed () returned 0x1
[0232.659] GetThemeAppProperties () returned 0x3
[0232.659] GetThemeAppProperties () returned 0x3
[0232.659] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0232.660] IsAppThemed () returned 0x1
[0232.660] GetThemeAppProperties () returned 0x3
[0232.660] GetThemeAppProperties () returned 0x3
[0232.660] IsAppThemed () returned 0x1
[0232.660] GetThemeAppProperties () returned 0x3
[0232.660] GetThemeAppProperties () returned 0x3
[0232.660] IsThemePartDefined () returned 0x1
[0232.660] GdipCreateRegion (region=0x53de78) returned 0x0
[0232.660] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.660] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0232.660] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.660] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0232.660] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0232.660] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0232.660] LocalFree (hMem=0x89ee08) returned 0x0
[0232.660] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0232.660] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0232.660] LocalFree (hMem=0x89ee08) returned 0x0
[0232.660] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.660] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0232.660] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0232.660] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0232.660] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.660] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0232.660] GetCurrentObject (hdc=0xac010795, type=0x1) returned 0xb00017
[0232.661] GetCurrentObject (hdc=0xac010795, type=0x2) returned 0x900010
[0232.661] GetCurrentObject (hdc=0xac010795, type=0x7) returned 0x1e0507b9
[0232.661] GetCurrentObject (hdc=0xac010795, type=0x6) returned 0x8a01c2
[0232.661] SaveDC (hdc=0xac010795) returned 1
[0232.661] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd5040798
[0232.661] GetClipRgn (hdc=0xac010795, hrgn=0xd5040798) returned 0
[0232.661] SelectClipRgn (hdc=0xac010795, hrgn=0x4404051e) returned 2
[0232.661] DeleteObject (ho=0xd5040798) returned 1
[0232.661] DeleteObject (ho=0x4404051e) returned 1
[0232.661] OffsetViewportOrgEx (in: hdc=0xac010795, x=0, y=0, lppt=0x23e6448 | out: lppt=0x23e6448) returned 1
[0232.661] DrawThemeParentBackground () returned 0x0
[0232.661] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0232.661] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0232.661] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0232.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0232.662] GetSystemMetrics (nIndex=42) returned 0
[0232.662] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0232.662] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0232.665] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0232.665] GetCurrentObject (hdc=0xac010795, type=0x1) returned 0xb00017
[0232.665] GetCurrentObject (hdc=0xac010795, type=0x2) returned 0x900010
[0232.665] GetCurrentObject (hdc=0xac010795, type=0x7) returned 0x1e0507b9
[0232.666] GetCurrentObject (hdc=0xac010795, type=0x6) returned 0x8a01c2
[0232.666] SaveDC (hdc=0xac010795) returned 2
[0232.666] GetNearestColor (hdc=0xac010795, color=0xff) returned 0xff
[0232.666] CreateSolidBrush (color=0xff) returned 0xf210078d
[0232.666] FillRect (hDC=0xac010795, lprc=0x53d8d8, hbr=0xf210078d) returned 1
[0232.666] DeleteObject (ho=0xf210078d) returned 1
[0232.666] RestoreDC (hdc=0xac010795, nSavedDC=-1) returned 1
[0232.666] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0232.666] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0232.666] GetSystemMetrics (nIndex=42) returned 0
[0232.666] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0232.666] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0232.666] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0232.666] GetCurrentObject (hdc=0xac010795, type=0x1) returned 0xb00017
[0232.666] GetCurrentObject (hdc=0xac010795, type=0x2) returned 0x900010
[0232.666] GetCurrentObject (hdc=0xac010795, type=0x7) returned 0x1e0507b9
[0232.667] GetCurrentObject (hdc=0xac010795, type=0x6) returned 0x8a01c2
[0232.667] SaveDC (hdc=0xac010795) returned 2
[0232.667] GetNearestColor (hdc=0xac010795, color=0xff) returned 0xff
[0232.667] CreateSolidBrush (color=0xff) returned 0xf310078d
[0232.667] FillRect (hDC=0xac010795, lprc=0x53d878, hbr=0xf310078d) returned 1
[0232.667] DeleteObject (ho=0xf310078d) returned 1
[0232.667] RestoreDC (hdc=0xac010795, nSavedDC=-1) returned 1
[0232.667] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0232.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0232.667] GetSystemMetrics (nIndex=42) returned 0
[0232.667] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0232.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0232.667] RestoreDC (hdc=0xac010795, nSavedDC=-1) returned 1
[0232.668] GdipReleaseDC (graphics=0x5d92c30, hdc=0xac010795) returned 0x0
[0232.668] IsAppThemed () returned 0x1
[0232.668] GetThemeAppProperties () returned 0x3
[0232.668] GetThemeAppProperties () returned 0x3
[0232.668] IsAppThemed () returned 0x1
[0232.668] GetThemeAppProperties () returned 0x3
[0232.668] GetThemeAppProperties () returned 0x3
[0232.668] IsThemePartDefined () returned 0x1
[0232.668] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0232.668] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.668] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0232.668] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0232.668] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0232.668] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0232.668] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0232.669] LocalFree (hMem=0x89ee08) returned 0x0
[0232.669] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0232.669] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0232.669] LocalFree (hMem=0x89ee08) returned 0x0
[0232.669] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0232.669] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0232.669] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0232.669] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0232.669] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.669] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0232.669] GetCurrentObject (hdc=0xac010795, type=0x1) returned 0xb00017
[0232.669] GetCurrentObject (hdc=0xac010795, type=0x2) returned 0x900010
[0232.669] GetCurrentObject (hdc=0xac010795, type=0x7) returned 0x1e0507b9
[0232.669] GetCurrentObject (hdc=0xac010795, type=0x6) returned 0x8a01c2
[0232.669] SaveDC (hdc=0xac010795) returned 1
[0232.670] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4504051e
[0232.670] GetClipRgn (hdc=0xac010795, hrgn=0x4504051e) returned 0
[0232.670] SelectClipRgn (hdc=0xac010795, hrgn=0xd7040798) returned 2
[0232.670] DeleteObject (ho=0x4504051e) returned 1
[0232.670] DeleteObject (ho=0xd7040798) returned 1
[0232.670] OffsetViewportOrgEx (in: hdc=0xac010795, x=0, y=0, lppt=0x23e6cac | out: lppt=0x23e6cac) returned 1
[0232.670] IsAppThemed () returned 0x1
[0232.670] GetThemeAppProperties () returned 0x3
[0232.670] GetThemeAppProperties () returned 0x3
[0232.670] DrawThemeBackground () returned 0x0
[0232.670] RestoreDC (hdc=0xac010795, nSavedDC=-1) returned 1
[0232.670] GdipReleaseDC (graphics=0x5d92c30, hdc=0xac010795) returned 0x0
[0232.670] GdipCreateRegion (region=0x53de00) returned 0x0
[0232.670] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0232.670] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0232.670] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0232.671] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0232.671] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.671] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.671] LocalFree (hMem=0x89ea88) returned 0x0
[0232.671] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0232.671] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0232.671] LocalFree (hMem=0x89ea88) returned 0x0
[0232.671] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0232.671] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0232.671] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0232.671] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0232.671] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0232.671] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0232.671] GetCurrentObject (hdc=0xac010795, type=0x1) returned 0xb00017
[0232.671] GetCurrentObject (hdc=0xac010795, type=0x2) returned 0x900010
[0232.671] GetCurrentObject (hdc=0xac010795, type=0x7) returned 0x1e0507b9
[0232.671] GetCurrentObject (hdc=0xac010795, type=0x6) returned 0x8a01c2
[0232.672] SaveDC (hdc=0xac010795) returned 1
[0232.672] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd8040798
[0232.672] GetClipRgn (hdc=0xac010795, hrgn=0xd8040798) returned 0
[0232.672] SelectClipRgn (hdc=0xac010795, hrgn=0x4604051e) returned 2
[0232.672] DeleteObject (ho=0xd8040798) returned 1
[0232.672] DeleteObject (ho=0x4604051e) returned 1
[0232.672] OffsetViewportOrgEx (in: hdc=0xac010795, x=0, y=0, lppt=0x23e6f80 | out: lppt=0x23e6f80) returned 1
[0232.672] IsAppThemed () returned 0x1
[0232.672] GetThemeAppProperties () returned 0x3
[0232.672] GetThemeAppProperties () returned 0x3
[0232.672] GetThemeBackgroundContentRect () returned 0x0
[0232.672] RestoreDC (hdc=0xac010795, nSavedDC=-1) returned 1
[0232.672] GdipReleaseDC (graphics=0x5d92c30, hdc=0xac010795) returned 0x0
[0232.672] IsAppThemed () returned 0x1
[0232.672] GetThemeAppProperties () returned 0x3
[0232.672] GetThemeAppProperties () returned 0x3
[0232.672] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0232.672] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0232.672] GetCurrentObject (hdc=0xac010795, type=0x1) returned 0xb00017
[0232.673] GetCurrentObject (hdc=0xac010795, type=0x2) returned 0x900010
[0232.673] GetCurrentObject (hdc=0xac010795, type=0x7) returned 0x1e0507b9
[0232.673] GetCurrentObject (hdc=0xac010795, type=0x6) returned 0x8a01c2
[0232.673] SaveDC (hdc=0xac010795) returned 1
[0232.673] GetTextAlign (hdc=0xac010795) returned 0x0
[0232.673] GetTextColor (hdc=0xac010795) returned 0x0
[0232.673] GetCurrentObject (hdc=0xac010795, type=0x6) returned 0x8a01c2
[0232.673] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0232.673] SelectObject (hdc=0xac010795, h=0x450a0799) returned 0x8a01c2
[0232.673] GetBkMode (hdc=0xac010795) returned 2
[0232.673] SetBkMode (hdc=0xac010795, mode=1) returned 2
[0232.673] DrawTextExW (in: hdc=0xac010795, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x23e7320 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0232.673] DrawTextExW (in: hdc=0xac010795, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x23e7320 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0232.674] RestoreDC (hdc=0xac010795, nSavedDC=-1) returned 1
[0232.674] GdipReleaseDC (graphics=0x5d92c30, hdc=0xac010795) returned 0x0
[0232.674] GetFocus () returned 0x601e2
[0232.674] IsAppThemed () returned 0x1
[0232.674] GetThemeAppProperties () returned 0x3
[0232.674] GetThemeAppProperties () returned 0x3
[0232.674] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0232.674] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xac010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0232.674] GdipReleaseDC (graphics=0x5d92c30, hdc=0xac010795) returned 0x0
[0232.674] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0232.674] SelectObject (hdc=0xac010795, h=0x85000f) returned 0x1e0507b9
[0232.674] DeleteDC (hdc=0xac010795) returned 1
[0232.674] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0232.674] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0232.997] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0232.997] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0232.997] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1202c0) returned 0x1
[0233.000] GetFocus () returned 0x1202c0
[0233.000] GetAncestor (hwnd=0x1202c0, gaFlags=0x1) returned 0x10010
[0233.000] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0233.000] SetFocus (hWnd=0x202c6) returned 0x0
[0233.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0233.003] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0233.003] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0233.004] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0233.004] GetFocus () returned 0x70036
[0233.004] SetFocus (hWnd=0x202c6) returned 0x0
[0233.016] IsWindow (hWnd=0x70036) returned 1
[0233.016] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0233.017] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0233.017] IsWindow (hWnd=0x70036) returned 1
[0233.017] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0233.017] IsWindow (hWnd=0x202c6) returned 1
[0233.017] SetFocus (hWnd=0x202c6) returned 0x70036
[0233.017] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0233.018] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0233.019] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0233.020] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0233.020] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0233.020] GetStockObject (i=5) returned 0x900015
[0233.020] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0233.021] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8dab08) returned 0x7
[0233.021] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0233.021] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0233.021] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0233.021] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0233.033] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0233.033] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0233.033] GetFocus () returned 0x202c6
[0233.033] GetCapture () returned 0x0
[0233.033] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.033] IsWindowUnicode (hWnd=0x202c6) returned 1
[0233.033] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.033] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.033] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.033] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.034] IsWindowUnicode (hWnd=0x202c6) returned 1
[0233.034] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.034] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.034] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.034] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0233.034] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0233.034] CreateCompatibleDC (hdc=0x10105d6) returned 0x8101065f
[0233.035] SelectObject (hdc=0x8101065f, h=0x1e0507b9) returned 0x85000f
[0233.035] GdipCreateFromHDC (hdc=0x8101065f, graphics=0x53e958) returned 0x0
[0233.035] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0233.035] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0233.035] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0233.035] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0233.035] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0233.035] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0233.035] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0233.035] LocalFree (hMem=0x89ea88) returned 0x0
[0233.035] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0233.035] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0233.035] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0233.035] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0233.035] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0233.035] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc0b0dbd) returned 0x0
[0233.035] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0233.036] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0233.036] GetCurrentObject (hdc=0x8101065f, type=0x1) returned 0xb00017
[0233.036] GetCurrentObject (hdc=0x8101065f, type=0x2) returned 0x900010
[0233.036] GetCurrentObject (hdc=0x8101065f, type=0x7) returned 0x1e0507b9
[0233.036] GetCurrentObject (hdc=0x8101065f, type=0x6) returned 0x8a01c2
[0233.036] SaveDC (hdc=0x8101065f) returned 1
[0233.036] GetNearestColor (hdc=0x8101065f, color=0xff) returned 0xff
[0233.036] GetNearestColor (hdc=0x8101065f, color=0x55) returned 0x55
[0233.036] GetNearestColor (hdc=0x8101065f, color=0x0) returned 0x0
[0233.036] GetNearestColor (hdc=0x8101065f, color=0x55) returned 0x55
[0233.036] GetNearestColor (hdc=0x8101065f, color=0x0) returned 0x0
[0233.036] GetNearestColor (hdc=0x8101065f, color=0x8080ff) returned 0x8080ff
[0233.036] GetNearestColor (hdc=0x8101065f, color=0x7373e5) returned 0x7373e5
[0233.036] GetNearestColor (hdc=0x8101065f, color=0xe5) returned 0xe5
[0233.036] GetNearestColor (hdc=0x8101065f, color=0x0) returned 0x0
[0233.036] RestoreDC (hdc=0x8101065f, nSavedDC=-1) returned 1
[0233.036] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101065f) returned 0x0
[0233.036] IsAppThemed () returned 0x1
[0233.037] GetThemeAppProperties () returned 0x3
[0233.037] GetThemeAppProperties () returned 0x3
[0233.037] IsAppThemed () returned 0x1
[0233.037] GetThemeAppProperties () returned 0x3
[0233.049] GetThemeAppProperties () returned 0x3
[0233.049] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x23e7b7c | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0233.049] IsAppThemed () returned 0x1
[0233.049] GetThemeAppProperties () returned 0x3
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] IsAppThemed () returned 0x1
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] GetFocus () returned 0x202c6
[0233.050] IsAppThemed () returned 0x1
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] IsAppThemed () returned 0x1
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] IsThemePartDefined () returned 0x1
[0233.050] IsAppThemed () returned 0x1
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0233.050] IsAppThemed () returned 0x1
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] IsAppThemed () returned 0x1
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] GetThemeAppProperties () returned 0x3
[0233.050] IsThemePartDefined () returned 0x1
[0233.050] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0233.050] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0233.050] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0233.050] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0233.051] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0233.051] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0233.051] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0233.051] LocalFree (hMem=0x89eac0) returned 0x0
[0233.051] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0233.051] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0233.051] LocalFree (hMem=0x89ec80) returned 0x0
[0233.051] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0233.051] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0233.051] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0233.051] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0233.051] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0233.051] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0233.051] GetCurrentObject (hdc=0x8101065f, type=0x1) returned 0xb00017
[0233.051] GetCurrentObject (hdc=0x8101065f, type=0x2) returned 0x900010
[0233.051] GetCurrentObject (hdc=0x8101065f, type=0x7) returned 0x1e0507b9
[0233.051] GetCurrentObject (hdc=0x8101065f, type=0x6) returned 0x8a01c2
[0233.051] SaveDC (hdc=0x8101065f) returned 1
[0233.051] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdd04053e
[0233.051] GetClipRgn (hdc=0x8101065f, hrgn=0xdd04053e) returned 0
[0233.052] SelectClipRgn (hdc=0x8101065f, hrgn=0x5404051e) returned 2
[0233.052] DeleteObject (ho=0xdd04053e) returned 1
[0233.052] DeleteObject (ho=0x5404051e) returned 1
[0233.052] OffsetViewportOrgEx (in: hdc=0x8101065f, x=0, y=0, lppt=0x23e822c | out: lppt=0x23e822c) returned 1
[0233.052] DrawThemeParentBackground () returned 0x0
[0233.052] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0233.052] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0233.052] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0233.052] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0233.052] GetSystemMetrics (nIndex=42) returned 0
[0233.052] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0233.052] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0233.052] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0233.052] GetCurrentObject (hdc=0x8101065f, type=0x1) returned 0xb00017
[0233.052] GetCurrentObject (hdc=0x8101065f, type=0x2) returned 0x900010
[0233.056] GetCurrentObject (hdc=0x8101065f, type=0x7) returned 0x1e0507b9
[0233.056] GetCurrentObject (hdc=0x8101065f, type=0x6) returned 0x8a01c2
[0233.056] SaveDC (hdc=0x8101065f) returned 2
[0233.056] GetNearestColor (hdc=0x8101065f, color=0xff) returned 0xff
[0233.056] CreateSolidBrush (color=0xff) returned 0xf510078d
[0233.056] FillRect (hDC=0x8101065f, lprc=0x53e128, hbr=0xf510078d) returned 1
[0233.056] DeleteObject (ho=0xf510078d) returned 1
[0233.056] RestoreDC (hdc=0x8101065f, nSavedDC=-1) returned 1
[0233.056] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0233.057] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0233.057] GetSystemMetrics (nIndex=42) returned 0
[0233.057] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0233.057] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0233.057] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0233.057] GetCurrentObject (hdc=0x8101065f, type=0x1) returned 0xb00017
[0233.057] GetCurrentObject (hdc=0x8101065f, type=0x2) returned 0x900010
[0233.057] GetCurrentObject (hdc=0x8101065f, type=0x7) returned 0x1e0507b9
[0233.057] GetCurrentObject (hdc=0x8101065f, type=0x6) returned 0x8a01c2
[0233.057] SaveDC (hdc=0x8101065f) returned 2
[0233.057] GetNearestColor (hdc=0x8101065f, color=0xff) returned 0xff
[0233.057] CreateSolidBrush (color=0xff) returned 0xf610078d
[0233.057] FillRect (hDC=0x8101065f, lprc=0x53e0c8, hbr=0xf610078d) returned 1
[0233.057] DeleteObject (ho=0xf610078d) returned 1
[0233.057] RestoreDC (hdc=0x8101065f, nSavedDC=-1) returned 1
[0233.057] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0233.057] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0233.057] GetSystemMetrics (nIndex=42) returned 0
[0233.057] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0233.057] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0233.058] RestoreDC (hdc=0x8101065f, nSavedDC=-1) returned 1
[0233.058] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101065f) returned 0x0
[0233.058] IsAppThemed () returned 0x1
[0233.058] GetThemeAppProperties () returned 0x3
[0233.058] GetThemeAppProperties () returned 0x3
[0233.058] IsAppThemed () returned 0x1
[0233.058] GetThemeAppProperties () returned 0x3
[0233.058] GetThemeAppProperties () returned 0x3
[0233.058] IsThemePartDefined () returned 0x1
[0233.058] GdipCreateRegion (region=0x53e64c) returned 0x0
[0233.058] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0233.058] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0233.058] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0233.058] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0233.058] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0233.058] LocalFree (hMem=0x89ee40) returned 0x0
[0233.058] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0233.058] LocalFree (hMem=0x89ea88) returned 0x0
[0233.058] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0233.058] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0233.058] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0233.058] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0233.058] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0233.059] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0233.059] GetCurrentObject (hdc=0x8101065f, type=0x1) returned 0xb00017
[0233.059] GetCurrentObject (hdc=0x8101065f, type=0x2) returned 0x900010
[0233.059] GetCurrentObject (hdc=0x8101065f, type=0x7) returned 0x1e0507b9
[0233.059] GetCurrentObject (hdc=0x8101065f, type=0x6) returned 0x8a01c2
[0233.059] SaveDC (hdc=0x8101065f) returned 1
[0233.059] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5504051e
[0233.059] GetClipRgn (hdc=0x8101065f, hrgn=0x5504051e) returned 0
[0233.059] SelectClipRgn (hdc=0x8101065f, hrgn=0xdf04053e) returned 2
[0233.059] DeleteObject (ho=0x5504051e) returned 1
[0233.059] DeleteObject (ho=0xdf04053e) returned 1
[0233.059] OffsetViewportOrgEx (in: hdc=0x8101065f, x=0, y=0, lppt=0x23e8a90 | out: lppt=0x23e8a90) returned 1
[0233.059] IsAppThemed () returned 0x1
[0233.059] GetThemeAppProperties () returned 0x3
[0233.059] GetThemeAppProperties () returned 0x3
[0233.059] DrawThemeBackground () returned 0x0
[0233.059] RestoreDC (hdc=0x8101065f, nSavedDC=-1) returned 1
[0233.059] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101065f) returned 0x0
[0233.059] GdipCreateRegion (region=0x53e650) returned 0x0
[0233.059] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0233.059] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0233.060] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0233.060] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0233.060] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0233.060] LocalFree (hMem=0x89ea88) returned 0x0
[0233.060] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0233.060] LocalFree (hMem=0x89ee40) returned 0x0
[0233.060] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0233.060] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0233.060] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0233.060] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0233.060] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0233.060] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0233.060] GetCurrentObject (hdc=0x8101065f, type=0x1) returned 0xb00017
[0233.060] GetCurrentObject (hdc=0x8101065f, type=0x2) returned 0x900010
[0233.060] GetCurrentObject (hdc=0x8101065f, type=0x7) returned 0x1e0507b9
[0233.060] GetCurrentObject (hdc=0x8101065f, type=0x6) returned 0x8a01c2
[0233.060] SaveDC (hdc=0x8101065f) returned 1
[0233.060] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe004053e
[0233.060] GetClipRgn (hdc=0x8101065f, hrgn=0xe004053e) returned 0
[0233.060] SelectClipRgn (hdc=0x8101065f, hrgn=0x5604051e) returned 2
[0233.060] DeleteObject (ho=0xe004053e) returned 1
[0233.060] DeleteObject (ho=0x5604051e) returned 1
[0233.060] OffsetViewportOrgEx (in: hdc=0x8101065f, x=0, y=0, lppt=0x23e8d64 | out: lppt=0x23e8d64) returned 1
[0233.060] IsAppThemed () returned 0x1
[0233.061] GetThemeAppProperties () returned 0x3
[0233.061] GetThemeAppProperties () returned 0x3
[0233.061] GetThemeBackgroundContentRect () returned 0x0
[0233.061] RestoreDC (hdc=0x8101065f, nSavedDC=-1) returned 1
[0233.061] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101065f) returned 0x0
[0233.061] IsAppThemed () returned 0x1
[0233.061] GetThemeAppProperties () returned 0x3
[0233.061] GetThemeAppProperties () returned 0x3
[0233.061] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0233.061] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0233.061] GetCurrentObject (hdc=0x8101065f, type=0x1) returned 0xb00017
[0233.061] GetCurrentObject (hdc=0x8101065f, type=0x2) returned 0x900010
[0233.061] GetCurrentObject (hdc=0x8101065f, type=0x7) returned 0x1e0507b9
[0233.061] GetCurrentObject (hdc=0x8101065f, type=0x6) returned 0x8a01c2
[0233.061] SaveDC (hdc=0x8101065f) returned 1
[0233.061] GetTextAlign (hdc=0x8101065f) returned 0x0
[0233.061] GetTextColor (hdc=0x8101065f) returned 0x0
[0233.061] GetCurrentObject (hdc=0x8101065f, type=0x6) returned 0x8a01c2
[0233.061] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0233.061] SelectObject (hdc=0x8101065f, h=0x450a0799) returned 0x8a01c2
[0233.061] GetBkMode (hdc=0x8101065f) returned 2
[0233.061] SetBkMode (hdc=0x8101065f, mode=1) returned 2
[0233.062] DrawTextExW (in: hdc=0x8101065f, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x23e9104 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0233.062] DrawTextExW (in: hdc=0x8101065f, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x23e9104 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0233.062] RestoreDC (hdc=0x8101065f, nSavedDC=-1) returned 1
[0233.062] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101065f) returned 0x0
[0233.062] GetFocus () returned 0x202c6
[0233.062] IsAppThemed () returned 0x1
[0233.062] GetThemeAppProperties () returned 0x3
[0233.062] GetThemeAppProperties () returned 0x3
[0233.062] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0233.062] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x8101065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0233.062] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101065f) returned 0x0
[0233.062] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0233.062] SelectObject (hdc=0x8101065f, h=0x85000f) returned 0x1e0507b9
[0233.063] DeleteDC (hdc=0x8101065f) returned 1
[0233.063] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0233.063] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0233.063] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.063] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.063] WaitMessage () returned 1
[0233.066] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.066] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.066] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.066] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.066] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.067] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.067] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.067] WaitMessage () returned 1
[0233.077] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.077] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.077] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.077] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.077] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.078] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.078] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.078] WaitMessage () returned 1
[0233.079] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.079] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.079] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.079] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.079] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.080] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.080] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.080] WaitMessage () returned 1
[0233.081] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.081] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.081] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.081] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.081] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.082] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.082] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.082] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.082] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.082] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.083] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.083] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.083] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.083] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.083] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.083] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.083] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.083] WaitMessage () returned 1
[0233.083] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.084] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.086] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.087] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.087] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.088] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.088] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.088] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.088] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.088] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.088] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.088] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.088] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.088] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.088] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.088] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.089] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.089] WaitMessage () returned 1
[0233.091] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.091] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.091] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.091] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.091] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.092] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.092] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.092] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.092] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.092] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.092] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.092] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.092] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.093] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.093] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.093] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.093] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.093] WaitMessage () returned 1
[0233.093] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.094] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.094] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.094] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.094] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.095] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.095] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.095] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.095] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.096] IsWindowUnicode (hWnd=0x102dc) returned 1
[0233.096] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.096] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.096] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.096] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.096] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.096] WaitMessage () returned 1
[0233.211] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.211] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.211] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.211] DispatchMessageA (lpMsg=0x53eef8) returned 0x7ed2
[0233.212] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.212] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.212] WaitMessage () returned 1
[0233.318] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.318] IsWindowUnicode (hWnd=0x202d0) returned 1
[0233.318] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0233.318] TranslateMessage (lpMsg=0x53eef8) returned 0
[0233.319] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0233.319] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.319] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0233.319] WaitMessage () returned 1
[0234.210] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0234.210] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0234.210] TranslateMessage (lpMsg=0x53eef8) returned 0
[0234.210] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0234.212] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0234.212] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0234.212] WaitMessage () returned 1
[0234.885] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0234.885] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940258) returned 0x1
[0234.885] IsWindowUnicode (hWnd=0x202c6) returned 1
[0234.885] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0234.886] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940258) returned 0x1
[0234.886] SetCursor (hCursor=0x10003) returned 0x10003
[0234.886] TranslateMessage (lpMsg=0x53eef8) returned 0
[0234.886] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0234.886] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0234.886] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0234.886] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0234.886] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0234.887] GetKeyState (nVirtKey=1) returned 1
[0234.887] GetKeyState (nVirtKey=2) returned 0
[0234.887] GetKeyState (nVirtKey=4) returned 0
[0234.887] GetKeyState (nVirtKey=5) returned 0
[0234.887] GetKeyState (nVirtKey=6) returned 0
[0234.887] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0234.887] IsWindowUnicode (hWnd=0x202c6) returned 1
[0234.887] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0234.887] TranslateMessage (lpMsg=0x53eef8) returned 0
[0234.887] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0234.887] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0234.887] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0234.888] CreateCompatibleDC (hdc=0x10105d6) returned 0x5d0107c1
[0234.888] SelectObject (hdc=0x5d0107c1, h=0x1e0507b9) returned 0x85000f
[0234.888] GdipCreateFromHDC (hdc=0x5d0107c1, graphics=0x53e958) returned 0x0
[0234.888] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0234.888] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0234.888] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0234.888] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0234.888] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0234.888] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0234.889] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0234.889] LocalFree (hMem=0x89ee08) returned 0x0
[0234.889] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0234.889] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0234.889] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0234.889] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0234.889] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0234.889] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc090dbd) returned 0x0
[0234.889] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0234.889] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0234.889] GetCurrentObject (hdc=0x5d0107c1, type=0x1) returned 0xb00017
[0234.889] GetCurrentObject (hdc=0x5d0107c1, type=0x2) returned 0x900010
[0234.889] GetCurrentObject (hdc=0x5d0107c1, type=0x7) returned 0x1e0507b9
[0234.889] GetCurrentObject (hdc=0x5d0107c1, type=0x6) returned 0x8a01c2
[0234.890] SaveDC (hdc=0x5d0107c1) returned 1
[0234.890] GetNearestColor (hdc=0x5d0107c1, color=0xff) returned 0xff
[0234.890] GetNearestColor (hdc=0x5d0107c1, color=0x55) returned 0x55
[0234.890] GetNearestColor (hdc=0x5d0107c1, color=0x0) returned 0x0
[0234.890] GetNearestColor (hdc=0x5d0107c1, color=0x55) returned 0x55
[0234.890] GetNearestColor (hdc=0x5d0107c1, color=0x0) returned 0x0
[0234.890] GetNearestColor (hdc=0x5d0107c1, color=0x8080ff) returned 0x8080ff
[0234.890] GetNearestColor (hdc=0x5d0107c1, color=0x7373e5) returned 0x7373e5
[0234.890] GetNearestColor (hdc=0x5d0107c1, color=0xe5) returned 0xe5
[0234.890] GetNearestColor (hdc=0x5d0107c1, color=0x0) returned 0x0
[0234.890] RestoreDC (hdc=0x5d0107c1, nSavedDC=-1) returned 1
[0234.890] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5d0107c1) returned 0x0
[0234.891] IsAppThemed () returned 0x1
[0234.891] GetThemeAppProperties () returned 0x3
[0234.891] GetThemeAppProperties () returned 0x3
[0234.891] IsAppThemed () returned 0x1
[0234.891] GetThemeAppProperties () returned 0x3
[0234.891] GetThemeAppProperties () returned 0x3
[0234.891] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x23e9a98 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0234.891] IsAppThemed () returned 0x1
[0234.891] GetThemeAppProperties () returned 0x3
[0234.891] GetThemeAppProperties () returned 0x3
[0234.891] IsAppThemed () returned 0x1
[0234.892] GetThemeAppProperties () returned 0x3
[0234.892] GetThemeAppProperties () returned 0x3
[0234.892] IsAppThemed () returned 0x1
[0234.892] GetThemeAppProperties () returned 0x3
[0234.892] GetThemeAppProperties () returned 0x3
[0234.892] IsAppThemed () returned 0x1
[0234.892] GetThemeAppProperties () returned 0x3
[0234.892] GetThemeAppProperties () returned 0x3
[0234.892] IsThemePartDefined () returned 0x1
[0234.892] IsAppThemed () returned 0x1
[0234.892] GetThemeAppProperties () returned 0x3
[0234.892] GetThemeAppProperties () returned 0x3
[0234.892] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0234.892] IsAppThemed () returned 0x1
[0234.892] GetThemeAppProperties () returned 0x3
[0234.892] GetThemeAppProperties () returned 0x3
[0234.892] IsAppThemed () returned 0x1
[0234.892] GetThemeAppProperties () returned 0x3
[0234.892] GetThemeAppProperties () returned 0x3
[0234.892] IsThemePartDefined () returned 0x1
[0234.892] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0234.893] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0234.893] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0234.893] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0234.893] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0234.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0234.893] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0234.893] LocalFree (hMem=0x89ee08) returned 0x0
[0234.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0234.893] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0234.893] LocalFree (hMem=0x89ec80) returned 0x0
[0234.893] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0234.893] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0234.893] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0234.893] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0234.893] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0234.893] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0234.893] GetCurrentObject (hdc=0x5d0107c1, type=0x1) returned 0xb00017
[0234.894] GetCurrentObject (hdc=0x5d0107c1, type=0x2) returned 0x900010
[0234.894] GetCurrentObject (hdc=0x5d0107c1, type=0x7) returned 0x1e0507b9
[0234.894] GetCurrentObject (hdc=0x5d0107c1, type=0x6) returned 0x8a01c2
[0234.894] SaveDC (hdc=0x5d0107c1) returned 1
[0234.894] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5704051e
[0234.894] GetClipRgn (hdc=0x5d0107c1, hrgn=0x5704051e) returned 0
[0234.894] SelectClipRgn (hdc=0x5d0107c1, hrgn=0xe404053e) returned 2
[0234.894] DeleteObject (ho=0x5704051e) returned 1
[0234.894] DeleteObject (ho=0xe404053e) returned 1
[0234.894] OffsetViewportOrgEx (in: hdc=0x5d0107c1, x=0, y=0, lppt=0x23ea148 | out: lppt=0x23ea148) returned 1
[0234.894] DrawThemeParentBackground () returned 0x0
[0234.894] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0234.895] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0234.895] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0234.895] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0234.895] GetSystemMetrics (nIndex=42) returned 0
[0234.895] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0234.895] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0234.895] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0234.895] GetCurrentObject (hdc=0x5d0107c1, type=0x1) returned 0xb00017
[0234.895] GetCurrentObject (hdc=0x5d0107c1, type=0x2) returned 0x900010
[0234.895] GetCurrentObject (hdc=0x5d0107c1, type=0x7) returned 0x1e0507b9
[0234.895] GetCurrentObject (hdc=0x5d0107c1, type=0x6) returned 0x8a01c2
[0234.895] SaveDC (hdc=0x5d0107c1) returned 2
[0234.895] GetNearestColor (hdc=0x5d0107c1, color=0xff) returned 0xff
[0234.895] CreateSolidBrush (color=0xff) returned 0xf710078d
[0234.895] FillRect (hDC=0x5d0107c1, lprc=0x53e120, hbr=0xf710078d) returned 1
[0234.896] DeleteObject (ho=0xf710078d) returned 1
[0234.896] RestoreDC (hdc=0x5d0107c1, nSavedDC=-1) returned 1
[0234.896] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0234.896] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0234.896] GetSystemMetrics (nIndex=42) returned 0
[0234.896] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0234.896] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0234.896] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0234.896] GetCurrentObject (hdc=0x5d0107c1, type=0x1) returned 0xb00017
[0234.896] GetCurrentObject (hdc=0x5d0107c1, type=0x2) returned 0x900010
[0234.896] GetCurrentObject (hdc=0x5d0107c1, type=0x7) returned 0x1e0507b9
[0234.896] GetCurrentObject (hdc=0x5d0107c1, type=0x6) returned 0x8a01c2
[0234.896] SaveDC (hdc=0x5d0107c1) returned 2
[0234.896] GetNearestColor (hdc=0x5d0107c1, color=0xff) returned 0xff
[0234.896] CreateSolidBrush (color=0xff) returned 0xf810078d
[0234.897] FillRect (hDC=0x5d0107c1, lprc=0x53e0c0, hbr=0xf810078d) returned 1
[0234.897] DeleteObject (ho=0xf810078d) returned 1
[0234.897] RestoreDC (hdc=0x5d0107c1, nSavedDC=-1) returned 1
[0234.897] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0234.897] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0234.897] GetSystemMetrics (nIndex=42) returned 0
[0234.897] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0234.897] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0234.897] RestoreDC (hdc=0x5d0107c1, nSavedDC=-1) returned 1
[0234.897] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5d0107c1) returned 0x0
[0234.897] IsAppThemed () returned 0x1
[0234.897] GetThemeAppProperties () returned 0x3
[0234.898] GetThemeAppProperties () returned 0x3
[0234.898] IsAppThemed () returned 0x1
[0234.898] GetThemeAppProperties () returned 0x3
[0234.898] GetThemeAppProperties () returned 0x3
[0234.898] IsThemePartDefined () returned 0x1
[0234.898] GdipCreateRegion (region=0x53e640) returned 0x0
[0234.898] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0234.898] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0234.898] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0234.898] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0234.898] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0234.898] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0234.898] LocalFree (hMem=0x89ea88) returned 0x0
[0234.898] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0234.898] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0234.898] LocalFree (hMem=0x89ea88) returned 0x0
[0234.898] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0234.898] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0234.898] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0234.899] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0234.899] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0234.899] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0234.899] GetCurrentObject (hdc=0x5d0107c1, type=0x1) returned 0xb00017
[0234.899] GetCurrentObject (hdc=0x5d0107c1, type=0x2) returned 0x900010
[0234.899] GetCurrentObject (hdc=0x5d0107c1, type=0x7) returned 0x1e0507b9
[0234.899] GetCurrentObject (hdc=0x5d0107c1, type=0x6) returned 0x8a01c2
[0234.899] SaveDC (hdc=0x5d0107c1) returned 1
[0234.899] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe504053e
[0234.899] GetClipRgn (hdc=0x5d0107c1, hrgn=0xe504053e) returned 0
[0234.899] SelectClipRgn (hdc=0x5d0107c1, hrgn=0x5904051e) returned 2
[0234.899] DeleteObject (ho=0xe504053e) returned 1
[0234.899] DeleteObject (ho=0x5904051e) returned 1
[0234.899] OffsetViewportOrgEx (in: hdc=0x5d0107c1, x=0, y=0, lppt=0x23ea9ac | out: lppt=0x23ea9ac) returned 1
[0234.899] IsAppThemed () returned 0x1
[0234.899] GetThemeAppProperties () returned 0x3
[0234.900] GetThemeAppProperties () returned 0x3
[0234.900] DrawThemeBackground () returned 0x0
[0234.900] RestoreDC (hdc=0x5d0107c1, nSavedDC=-1) returned 1
[0234.900] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5d0107c1) returned 0x0
[0234.900] GdipCreateRegion (region=0x53e644) returned 0x0
[0234.900] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0234.900] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0234.900] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0234.900] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0234.900] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0234.900] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0234.900] LocalFree (hMem=0x89ea88) returned 0x0
[0234.900] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0234.900] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0234.900] LocalFree (hMem=0x89ec80) returned 0x0
[0234.901] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0234.901] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0234.901] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0234.901] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0234.901] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0234.901] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0234.901] GetCurrentObject (hdc=0x5d0107c1, type=0x1) returned 0xb00017
[0234.901] GetCurrentObject (hdc=0x5d0107c1, type=0x2) returned 0x900010
[0234.901] GetCurrentObject (hdc=0x5d0107c1, type=0x7) returned 0x1e0507b9
[0234.901] GetCurrentObject (hdc=0x5d0107c1, type=0x6) returned 0x8a01c2
[0234.901] SaveDC (hdc=0x5d0107c1) returned 1
[0234.901] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a04051e
[0234.901] GetClipRgn (hdc=0x5d0107c1, hrgn=0x5a04051e) returned 0
[0234.901] SelectClipRgn (hdc=0x5d0107c1, hrgn=0xe604053e) returned 2
[0234.901] DeleteObject (ho=0x5a04051e) returned 1
[0234.901] DeleteObject (ho=0xe604053e) returned 1
[0234.901] OffsetViewportOrgEx (in: hdc=0x5d0107c1, x=0, y=0, lppt=0x23eac80 | out: lppt=0x23eac80) returned 1
[0234.902] IsAppThemed () returned 0x1
[0234.902] GetThemeAppProperties () returned 0x3
[0234.902] GetThemeAppProperties () returned 0x3
[0234.902] GetThemeBackgroundContentRect () returned 0x0
[0234.902] RestoreDC (hdc=0x5d0107c1, nSavedDC=-1) returned 1
[0234.902] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5d0107c1) returned 0x0
[0234.902] IsAppThemed () returned 0x1
[0234.902] GetThemeAppProperties () returned 0x3
[0234.902] GetThemeAppProperties () returned 0x3
[0234.902] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0234.902] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0234.902] GetCurrentObject (hdc=0x5d0107c1, type=0x1) returned 0xb00017
[0234.902] GetCurrentObject (hdc=0x5d0107c1, type=0x2) returned 0x900010
[0234.902] GetCurrentObject (hdc=0x5d0107c1, type=0x7) returned 0x1e0507b9
[0234.902] GetCurrentObject (hdc=0x5d0107c1, type=0x6) returned 0x8a01c2
[0234.902] SaveDC (hdc=0x5d0107c1) returned 1
[0234.902] GetTextAlign (hdc=0x5d0107c1) returned 0x0
[0234.902] GetTextColor (hdc=0x5d0107c1) returned 0x0
[0234.903] GetCurrentObject (hdc=0x5d0107c1, type=0x6) returned 0x8a01c2
[0234.903] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0234.903] SelectObject (hdc=0x5d0107c1, h=0x450a0799) returned 0x8a01c2
[0234.903] GetBkMode (hdc=0x5d0107c1) returned 2
[0234.903] SetBkMode (hdc=0x5d0107c1, mode=1) returned 2
[0234.903] DrawTextExW (in: hdc=0x5d0107c1, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x23eb020 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0234.903] DrawTextExW (in: hdc=0x5d0107c1, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x23eb020 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0234.904] RestoreDC (hdc=0x5d0107c1, nSavedDC=-1) returned 1
[0234.904] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5d0107c1) returned 0x0
[0234.904] GetFocus () returned 0x202c6
[0234.904] IsAppThemed () returned 0x1
[0234.904] GetThemeAppProperties () returned 0x3
[0234.904] GetThemeAppProperties () returned 0x3
[0234.904] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0234.904] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x5d0107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0234.905] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5d0107c1) returned 0x0
[0234.905] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0234.905] SelectObject (hdc=0x5d0107c1, h=0x85000f) returned 0x1e0507b9
[0234.905] DeleteDC (hdc=0x5d0107c1) returned 1
[0234.905] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0234.905] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0234.905] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0234.905] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0234.906] WaitMessage () returned 1
[0234.990] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0234.991] IsWindowUnicode (hWnd=0x202c6) returned 1
[0234.991] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0234.991] TranslateMessage (lpMsg=0x53eef8) returned 0
[0234.991] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0234.991] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0234.991] IsWindowUnicode (hWnd=0x202c6) returned 1
[0234.991] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0234.991] TranslateMessage (lpMsg=0x53eef8) returned 0
[0234.991] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0234.991] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xc0068) returned 0x0
[0234.991] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0234.991] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0234.991] WaitMessage () returned 1
[0235.198] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0235.198] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940258) returned 0x1
[0235.198] IsWindowUnicode (hWnd=0x202c6) returned 1
[0235.198] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0235.198] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940258) returned 0x1
[0235.198] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0235.198] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x1270202) returned 0x0
[0235.198] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0235.199] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0235.199] SetCursor (hCursor=0x10003) returned 0x10003
[0235.199] TranslateMessage (lpMsg=0x53eef8) returned 0
[0235.199] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0235.199] GetKeyState (nVirtKey=1) returned -128
[0235.199] GetKeyState (nVirtKey=2) returned 0
[0235.199] GetKeyState (nVirtKey=4) returned 0
[0235.199] GetKeyState (nVirtKey=5) returned 0
[0235.199] GetKeyState (nVirtKey=6) returned 0
[0235.199] IsWindowVisible (hWnd=0x202c6) returned 1
[0235.199] IsWindowEnabled (hWnd=0x202c6) returned 1
[0235.199] SetFocus (hWnd=0x202c6) returned 0x202c6
[0235.199] GetFocus () returned 0x202c6
[0235.199] GetFocus () returned 0x202c6
[0235.199] GetFocus () returned 0x202c6
[0235.200] GetKeyState (nVirtKey=1) returned -128
[0235.200] GetKeyState (nVirtKey=2) returned 0
[0235.200] GetKeyState (nVirtKey=4) returned 0
[0235.200] GetKeyState (nVirtKey=5) returned 0
[0235.200] GetKeyState (nVirtKey=6) returned 0
[0235.200] GetCapture () returned 0x0
[0235.200] SetCapture (hWnd=0x202c6) returned 0x0
[0235.200] GetKeyState (nVirtKey=1) returned -128
[0235.200] GetKeyState (nVirtKey=2) returned 0
[0235.200] GetKeyState (nVirtKey=4) returned 0
[0235.200] GetKeyState (nVirtKey=5) returned 0
[0235.200] GetKeyState (nVirtKey=6) returned 0
[0235.200] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0235.200] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0235.200] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0235.200] IsWindowUnicode (hWnd=0x202c6) returned 1
[0235.200] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0235.200] TranslateMessage (lpMsg=0x53eef8) returned 0
[0235.200] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0235.200] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23eb1a4, cPoints=0x1 | out: lpPoints=0x23eb1a4) returned 25690608
[0235.201] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0235.201] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0235.201] UpdateWindow (hWnd=0x202c6) returned 1
[0235.201] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x10105d6
[0235.201] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0235.201] CreateCompatibleDC (hdc=0x10105d6) returned 0x5e0107c1
[0235.201] SelectObject (hdc=0x5e0107c1, h=0x1e0507b9) returned 0x85000f
[0235.201] GdipCreateFromHDC (hdc=0x5e0107c1, graphics=0x53e5f0) returned 0x0
[0235.201] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0235.201] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0235.202] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0235.202] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.202] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0235.202] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.202] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0235.202] LocalFree (hMem=0x89ec80) returned 0x0
[0235.202] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.202] GdipCreateRegion (region=0x53e638) returned 0x0
[0235.202] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.202] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0235.202] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0235.202] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc070dbd) returned 0x0
[0235.202] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.202] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0235.202] GetCurrentObject (hdc=0x5e0107c1, type=0x1) returned 0xb00017
[0235.202] GetCurrentObject (hdc=0x5e0107c1, type=0x2) returned 0x900010
[0235.202] GetCurrentObject (hdc=0x5e0107c1, type=0x7) returned 0x1e0507b9
[0235.203] GetCurrentObject (hdc=0x5e0107c1, type=0x6) returned 0x8a01c2
[0235.203] SaveDC (hdc=0x5e0107c1) returned 1
[0235.203] GetNearestColor (hdc=0x5e0107c1, color=0xff) returned 0xff
[0235.203] GetNearestColor (hdc=0x5e0107c1, color=0x55) returned 0x55
[0235.203] GetNearestColor (hdc=0x5e0107c1, color=0x0) returned 0x0
[0235.203] GetNearestColor (hdc=0x5e0107c1, color=0x55) returned 0x55
[0235.203] GetNearestColor (hdc=0x5e0107c1, color=0x0) returned 0x0
[0235.203] GetNearestColor (hdc=0x5e0107c1, color=0x8080ff) returned 0x8080ff
[0235.203] GetNearestColor (hdc=0x5e0107c1, color=0x7373e5) returned 0x7373e5
[0235.203] GetNearestColor (hdc=0x5e0107c1, color=0xe5) returned 0xe5
[0235.203] GetNearestColor (hdc=0x5e0107c1, color=0x0) returned 0x0
[0235.203] RestoreDC (hdc=0x5e0107c1, nSavedDC=-1) returned 1
[0235.203] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5e0107c1) returned 0x0
[0235.203] IsAppThemed () returned 0x1
[0235.203] GetThemeAppProperties () returned 0x3
[0235.203] GetThemeAppProperties () returned 0x3
[0235.204] IsAppThemed () returned 0x1
[0235.204] GetThemeAppProperties () returned 0x3
[0235.204] GetThemeAppProperties () returned 0x3
[0235.204] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x23eb8c0 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0235.204] IsAppThemed () returned 0x1
[0235.204] GetThemeAppProperties () returned 0x3
[0235.204] GetThemeAppProperties () returned 0x3
[0235.204] IsAppThemed () returned 0x1
[0235.204] GetThemeAppProperties () returned 0x3
[0235.204] GetThemeAppProperties () returned 0x3
[0235.204] IsAppThemed () returned 0x1
[0235.204] GetThemeAppProperties () returned 0x3
[0235.204] GetThemeAppProperties () returned 0x3
[0235.204] IsAppThemed () returned 0x1
[0235.204] GetThemeAppProperties () returned 0x3
[0235.204] GetThemeAppProperties () returned 0x3
[0235.204] IsThemePartDefined () returned 0x1
[0235.204] IsAppThemed () returned 0x1
[0235.204] GetThemeAppProperties () returned 0x3
[0235.204] GetThemeAppProperties () returned 0x3
[0235.204] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0235.204] IsAppThemed () returned 0x1
[0235.205] GetThemeAppProperties () returned 0x3
[0235.205] GetThemeAppProperties () returned 0x3
[0235.205] IsAppThemed () returned 0x1
[0235.205] GetThemeAppProperties () returned 0x3
[0235.205] GetThemeAppProperties () returned 0x3
[0235.205] IsThemePartDefined () returned 0x1
[0235.205] GdipCreateRegion (region=0x53e354) returned 0x0
[0235.205] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.205] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0235.205] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.205] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0235.205] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0235.205] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0235.205] LocalFree (hMem=0x89ee08) returned 0x0
[0235.205] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0235.205] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0235.205] LocalFree (hMem=0x89ea88) returned 0x0
[0235.205] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.205] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0235.206] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0235.206] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0235.206] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.206] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0235.206] GetCurrentObject (hdc=0x5e0107c1, type=0x1) returned 0xb00017
[0235.206] GetCurrentObject (hdc=0x5e0107c1, type=0x2) returned 0x900010
[0235.206] GetCurrentObject (hdc=0x5e0107c1, type=0x7) returned 0x1e0507b9
[0235.206] GetCurrentObject (hdc=0x5e0107c1, type=0x6) returned 0x8a01c2
[0235.206] SaveDC (hdc=0x5e0107c1) returned 1
[0235.206] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe704053e
[0235.206] GetClipRgn (hdc=0x5e0107c1, hrgn=0xe704053e) returned 0
[0235.206] SelectClipRgn (hdc=0x5e0107c1, hrgn=0x5e04051e) returned 2
[0235.206] DeleteObject (ho=0xe704053e) returned 1
[0235.207] DeleteObject (ho=0x5e04051e) returned 1
[0235.207] OffsetViewportOrgEx (in: hdc=0x5e0107c1, x=0, y=0, lppt=0x23ebf70 | out: lppt=0x23ebf70) returned 1
[0235.207] DrawThemeParentBackground () returned 0x0
[0235.207] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0235.207] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0235.207] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0235.207] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0235.207] GetSystemMetrics (nIndex=42) returned 0
[0235.207] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0235.207] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0235.207] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0235.207] GetCurrentObject (hdc=0x5e0107c1, type=0x1) returned 0xb00017
[0235.207] GetCurrentObject (hdc=0x5e0107c1, type=0x2) returned 0x900010
[0235.207] GetCurrentObject (hdc=0x5e0107c1, type=0x7) returned 0x1e0507b9
[0235.207] GetCurrentObject (hdc=0x5e0107c1, type=0x6) returned 0x8a01c2
[0235.208] SaveDC (hdc=0x5e0107c1) returned 2
[0235.208] GetNearestColor (hdc=0x5e0107c1, color=0xff) returned 0xff
[0235.208] CreateSolidBrush (color=0xff) returned 0xf910078d
[0235.208] FillRect (hDC=0x5e0107c1, lprc=0x53ddb8, hbr=0xf910078d) returned 1
[0235.208] DeleteObject (ho=0xf910078d) returned 1
[0235.208] RestoreDC (hdc=0x5e0107c1, nSavedDC=-1) returned 1
[0235.208] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0235.208] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0235.208] GetSystemMetrics (nIndex=42) returned 0
[0235.208] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0235.208] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0235.208] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0235.208] GetCurrentObject (hdc=0x5e0107c1, type=0x1) returned 0xb00017
[0235.208] GetCurrentObject (hdc=0x5e0107c1, type=0x2) returned 0x900010
[0235.208] GetCurrentObject (hdc=0x5e0107c1, type=0x7) returned 0x1e0507b9
[0235.208] GetCurrentObject (hdc=0x5e0107c1, type=0x6) returned 0x8a01c2
[0235.208] SaveDC (hdc=0x5e0107c1) returned 2
[0235.208] GetNearestColor (hdc=0x5e0107c1, color=0xff) returned 0xff
[0235.209] CreateSolidBrush (color=0xff) returned 0xfa10078d
[0235.209] FillRect (hDC=0x5e0107c1, lprc=0x53dd58, hbr=0xfa10078d) returned 1
[0235.209] DeleteObject (ho=0xfa10078d) returned 1
[0235.209] RestoreDC (hdc=0x5e0107c1, nSavedDC=-1) returned 1
[0235.209] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0235.209] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0235.209] GetSystemMetrics (nIndex=42) returned 0
[0235.209] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0235.209] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0235.209] RestoreDC (hdc=0x5e0107c1, nSavedDC=-1) returned 1
[0235.210] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5e0107c1) returned 0x0
[0235.210] IsAppThemed () returned 0x1
[0235.210] GetThemeAppProperties () returned 0x3
[0235.210] GetThemeAppProperties () returned 0x3
[0235.210] IsAppThemed () returned 0x1
[0235.210] GetThemeAppProperties () returned 0x3
[0235.210] GetThemeAppProperties () returned 0x3
[0235.210] IsThemePartDefined () returned 0x1
[0235.210] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0235.210] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.210] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0235.210] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.210] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0235.210] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0235.210] LocalFree (hMem=0x89ea88) returned 0x0
[0235.210] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0235.210] LocalFree (hMem=0x89ea88) returned 0x0
[0235.210] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.211] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0235.211] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0235.211] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0235.211] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.211] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0235.211] GetCurrentObject (hdc=0x5e0107c1, type=0x1) returned 0xb00017
[0235.211] GetCurrentObject (hdc=0x5e0107c1, type=0x2) returned 0x900010
[0235.211] GetCurrentObject (hdc=0x5e0107c1, type=0x7) returned 0x1e0507b9
[0235.211] GetCurrentObject (hdc=0x5e0107c1, type=0x6) returned 0x8a01c2
[0235.211] SaveDC (hdc=0x5e0107c1) returned 1
[0235.211] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f04051e
[0235.211] GetClipRgn (hdc=0x5e0107c1, hrgn=0x5f04051e) returned 0
[0235.211] SelectClipRgn (hdc=0x5e0107c1, hrgn=0xe904053e) returned 2
[0235.211] DeleteObject (ho=0x5f04051e) returned 1
[0235.211] DeleteObject (ho=0xe904053e) returned 1
[0235.211] OffsetViewportOrgEx (in: hdc=0x5e0107c1, x=0, y=0, lppt=0x23ec7d4 | out: lppt=0x23ec7d4) returned 1
[0235.211] IsAppThemed () returned 0x1
[0235.212] GetThemeAppProperties () returned 0x3
[0235.212] GetThemeAppProperties () returned 0x3
[0235.212] DrawThemeBackground () returned 0x0
[0235.212] RestoreDC (hdc=0x5e0107c1, nSavedDC=-1) returned 1
[0235.212] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5e0107c1) returned 0x0
[0235.212] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0235.212] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.212] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0235.212] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.212] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0235.212] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.212] LocalFree (hMem=0x89ec80) returned 0x0
[0235.212] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0235.212] LocalFree (hMem=0x89ee08) returned 0x0
[0235.212] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.212] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0235.212] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0235.212] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0235.212] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.212] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0235.212] GetCurrentObject (hdc=0x5e0107c1, type=0x1) returned 0xb00017
[0235.212] GetCurrentObject (hdc=0x5e0107c1, type=0x2) returned 0x900010
[0235.213] GetCurrentObject (hdc=0x5e0107c1, type=0x7) returned 0x1e0507b9
[0235.213] GetCurrentObject (hdc=0x5e0107c1, type=0x6) returned 0x8a01c2
[0235.213] SaveDC (hdc=0x5e0107c1) returned 1
[0235.213] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xea04053e
[0235.213] GetClipRgn (hdc=0x5e0107c1, hrgn=0xea04053e) returned 0
[0235.213] SelectClipRgn (hdc=0x5e0107c1, hrgn=0x6004051e) returned 2
[0235.213] DeleteObject (ho=0xea04053e) returned 1
[0235.213] DeleteObject (ho=0x6004051e) returned 1
[0235.213] OffsetViewportOrgEx (in: hdc=0x5e0107c1, x=0, y=0, lppt=0x23ecaa8 | out: lppt=0x23ecaa8) returned 1
[0235.213] IsAppThemed () returned 0x1
[0235.213] GetThemeAppProperties () returned 0x3
[0235.213] GetThemeAppProperties () returned 0x3
[0235.213] GetThemeBackgroundContentRect () returned 0x0
[0235.213] RestoreDC (hdc=0x5e0107c1, nSavedDC=-1) returned 1
[0235.213] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5e0107c1) returned 0x0
[0235.213] IsAppThemed () returned 0x1
[0235.213] GetThemeAppProperties () returned 0x3
[0235.213] GetThemeAppProperties () returned 0x3
[0235.213] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0235.213] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0235.214] GetCurrentObject (hdc=0x5e0107c1, type=0x1) returned 0xb00017
[0235.214] GetCurrentObject (hdc=0x5e0107c1, type=0x2) returned 0x900010
[0235.214] GetCurrentObject (hdc=0x5e0107c1, type=0x7) returned 0x1e0507b9
[0235.214] GetCurrentObject (hdc=0x5e0107c1, type=0x6) returned 0x8a01c2
[0235.214] SaveDC (hdc=0x5e0107c1) returned 1
[0235.214] GetTextAlign (hdc=0x5e0107c1) returned 0x0
[0235.214] GetTextColor (hdc=0x5e0107c1) returned 0x0
[0235.214] GetCurrentObject (hdc=0x5e0107c1, type=0x6) returned 0x8a01c2
[0235.214] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0235.214] SelectObject (hdc=0x5e0107c1, h=0x450a0799) returned 0x8a01c2
[0235.214] GetBkMode (hdc=0x5e0107c1) returned 2
[0235.214] SetBkMode (hdc=0x5e0107c1, mode=1) returned 2
[0235.214] DrawTextExW (in: hdc=0x5e0107c1, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x23ece48 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0235.214] DrawTextExW (in: hdc=0x5e0107c1, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x23ece48 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0235.215] RestoreDC (hdc=0x5e0107c1, nSavedDC=-1) returned 1
[0235.215] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5e0107c1) returned 0x0
[0235.215] GetFocus () returned 0x202c6
[0235.215] IsAppThemed () returned 0x1
[0235.215] GetThemeAppProperties () returned 0x3
[0235.215] GetThemeAppProperties () returned 0x3
[0235.215] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0235.215] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x5e0107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0235.215] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5e0107c1) returned 0x0
[0235.216] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0235.216] SelectObject (hdc=0x5e0107c1, h=0x85000f) returned 0x1e0507b9
[0235.216] DeleteDC (hdc=0x5e0107c1) returned 1
[0235.216] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0235.216] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0235.216] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23ecf44, cPoints=0x1 | out: lpPoints=0x23ecf44) returned 25690608
[0235.216] WindowFromPoint (Point=0x258) returned 0x202c6
[0235.216] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940258) returned 0x1
[0235.216] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0235.216] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0235.217] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.217] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0235.218] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.218] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0235.219] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.219] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0235.219] GetDC (hWnd=0x0) returned 0x60100ce
[0235.219] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e888) returned 0x0
[0235.219] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0235.219] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0235.220] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0235.220] GetSystemMetrics (nIndex=5) returned 1
[0235.220] GetSystemMetrics (nIndex=6) returned 1
[0235.220] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.220] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0235.220] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.221] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0235.271] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.273] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0235.274] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.274] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0235.274] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.274] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0235.274] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.274] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0235.275] GetSystemMetrics (nIndex=5) returned 1
[0235.275] GetSystemMetrics (nIndex=6) returned 1
[0235.275] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.275] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0235.275] GetSystemMetrics (nIndex=5) returned 1
[0235.275] GetSystemMetrics (nIndex=6) returned 1
[0235.275] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.275] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0235.276] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.276] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0235.276] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.276] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0235.276] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.277] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0235.277] GetSystemMetrics (nIndex=59) returned 1460
[0235.277] GetSystemMetrics (nIndex=60) returned 920
[0235.277] GetSystemMetrics (nIndex=34) returned 136
[0235.277] GetSystemMetrics (nIndex=35) returned 39
[0235.277] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.277] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0235.277] GetCurrentThreadId () returned 0x11d0
[0235.277] GetCurrentThreadId () returned 0x11d0
[0235.277] GetCurrentThreadId () returned 0x11d0
[0235.277] GetCurrentThreadId () returned 0x11d0
[0235.277] GetCurrentThreadId () returned 0x11d0
[0235.277] GetCurrentThreadId () returned 0x11d0
[0235.277] GetCurrentThreadId () returned 0x11d0
[0235.277] GetCurrentThreadId () returned 0x11d0
[0235.278] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.278] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0235.278] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0235.278] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0235.278] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.278] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0235.278] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.279] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0235.279] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1302c0
[0235.280] SetWindowLongW (hWnd=0x1302c0, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0235.280] GetWindowLongW (hWnd=0x1302c0, nIndex=-4) returned 1950089536
[0235.280] SetWindowLongW (hWnd=0x1302c0, nIndex=-4, dwNewLong=79646558) returned 1950089536
[0235.280] GetWindowLongW (hWnd=0x1302c0, nIndex=-4) returned 79646558
[0235.280] GetWindowLongW (hWnd=0x1302c0, nIndex=-16) returned 113311744
[0235.280] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c0, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0235.283] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c0, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0235.284] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c0, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0235.284] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c0, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0235.284] GetClientRect (in: hWnd=0x1302c0, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0235.284] GetWindowRect (in: hWnd=0x1302c0, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0235.285] SetWindowTextW (hWnd=0x1302c0, lpString="WindowsFormsParkingWindow") returned 1
[0235.285] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c0, Msg=0xc, wParam=0x0, lParam=0x23e4e90) returned 0x1
[0235.285] GetParent (hWnd=0x1302c0) returned 0x0
[0235.285] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0235.286] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1302c0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x22013e
[0235.286] SetWindowLongW (hWnd=0x22013e, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0235.286] GetWindowLongW (hWnd=0x22013e, nIndex=-4) returned 1868147648
[0235.286] SetWindowLongW (hWnd=0x22013e, nIndex=-4, dwNewLong=79645758) returned 1868147648
[0235.286] GetWindowLongW (hWnd=0x22013e, nIndex=-4) returned 79645758
[0235.286] GetWindowLongW (hWnd=0x22013e, nIndex=-16) returned 1174405133
[0235.286] GetWindowLongW (hWnd=0x22013e, nIndex=-12) returned 0
[0235.286] SetWindowLongW (hWnd=0x22013e, nIndex=-12, dwNewLong=2228542) returned 0
[0235.286] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0235.287] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0235.288] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0235.288] GetClientRect (in: hWnd=0x22013e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0235.288] GetWindowRect (in: hWnd=0x22013e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0235.288] GetParent (hWnd=0x22013e) returned 0x1302c0
[0235.288] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1302c0, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0235.288] SetWindowTextW (hWnd=0x22013e, lpString="Enter password: ") returned 1
[0235.288] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0235.289] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0235.289] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0235.289] GetClientRect (in: hWnd=0x22013e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0235.289] GetWindowRect (in: hWnd=0x22013e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0235.289] GetParent (hWnd=0x22013e) returned 0x1302c0
[0235.289] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1302c0, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0235.289] SendMessageW (hWnd=0x22013e, Msg=0x2210, wParam=0x13e0001, lParam=0x22013e) returned 0x0
[0235.289] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x2210, wParam=0x13e0001, lParam=0x22013e) returned 0x0
[0235.289] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0235.290] GetParent (hWnd=0x22013e) returned 0x1302c0
[0235.290] GdipCreateFromHWND (hwnd=0x22013e, graphics=0x53e994) returned 0x0
[0235.290] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0235.290] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0235.290] GetProcessWindowStation () returned 0x13c
[0235.290] GetCapture () returned 0x202c6
[0235.290] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0235.290] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0235.290] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0235.291] ReleaseCapture () returned 1
[0235.291] GetActiveWindow () returned 0x70036
[0235.291] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0235.291] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.291] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0235.292] GetCursorPos (in: lpPoint=0x23f9cf4 | out: lpPoint=0x23f9cf4*(x=600, y=404)) returned 1
[0235.292] MonitorFromPoint (pt=0x258, dwFlags=0x194) returned 0x10001
[0235.292] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0235.292] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x610107c1
[0235.292] GetDeviceCaps (hdc=0x610107c1, index=12) returned 32
[0235.292] GetDeviceCaps (hdc=0x610107c1, index=14) returned 1
[0235.292] DeleteDC (hdc=0x610107c1) returned 1
[0235.292] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0235.293] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0235.293] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x701e2
[0235.293] SetWindowLongW (hWnd=0x701e2, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0235.293] GetWindowLongW (hWnd=0x701e2, nIndex=-4) returned 1950089536
[0235.294] SetWindowLongW (hWnd=0x701e2, nIndex=-4, dwNewLong=79646678) returned 1950089536
[0235.294] GetWindowLongW (hWnd=0x701e2, nIndex=-4) returned 79646678
[0235.294] GetWindowLongW (hWnd=0x701e2, nIndex=-16) returned 113770496
[0235.294] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0235.295] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0235.296] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0235.296] GetClientRect (in: hWnd=0x701e2, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0235.296] GetWindowRect (in: hWnd=0x701e2, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0235.296] SetWindowTextW (hWnd=0x701e2, lpString="Ransomware") returned 1
[0235.296] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xc, wParam=0x0, lParam=0x23ed00c) returned 0x1
[0235.296] GetStartupInfoW (in: lpStartupInfo=0x23fa030 | out: lpStartupInfo=0x23fa030*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0235.297] GetParent (hWnd=0x701e2) returned 0x0
[0235.297] SetWindowLongW (hWnd=0x701e2, nIndex=-8, dwNewLong=0) returned 0
[0235.297] SendMessageW (hWnd=0x701e2, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0235.297] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0235.297] SendMessageW (hWnd=0x701e2, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0235.297] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0235.297] GetSystemMenu (hWnd=0x701e2, bRevert=0) returned 0x1102ad
[0235.298] GetWindowPlacement (in: hWnd=0x701e2, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0235.298] EnableMenuItem (hMenu=0x1102ad, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0235.298] EnableMenuItem (hMenu=0x1102ad, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0235.298] EnableMenuItem (hMenu=0x1102ad, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0235.298] EnableMenuItem (hMenu=0x1102ad, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0235.298] EnableMenuItem (hMenu=0x1102ad, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0235.298] GetClientRect (in: hWnd=0x701e2, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0235.298] GetClientRect (in: hWnd=0x701e2, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0235.298] GetWindowRect (in: hWnd=0x701e2, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0235.299] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.299] GetWindowLongW (hWnd=0x701e2, nIndex=-16) returned 113770496
[0235.299] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.299] GetSystemMetrics (nIndex=42) returned 0
[0235.299] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0235.299] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.299] GetSystemMetrics (nIndex=42) returned 0
[0235.299] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0235.300] GetCursorPos (in: lpPoint=0x23fa1a4 | out: lpPoint=0x23fa1a4*(x=600, y=404)) returned 1
[0235.300] MonitorFromPoint (pt=0x257, dwFlags=0x194) returned 0x10001
[0235.300] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0235.300] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x650107c1
[0235.300] GetDeviceCaps (hdc=0x650107c1, index=12) returned 32
[0235.300] GetDeviceCaps (hdc=0x650107c1, index=14) returned 1
[0235.300] DeleteDC (hdc=0x650107c1) returned 1
[0235.300] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0235.300] GetWindowLongW (hWnd=0x701e2, nIndex=-16) returned 113770496
[0235.300] GetWindowLongW (hWnd=0x701e2, nIndex=-20) returned 327937
[0235.300] SetWindowLongW (hWnd=0x701e2, nIndex=-16, dwNewLong=46661632) returned 113770496
[0235.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0235.301] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0235.301] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0235.301] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0235.302] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0235.302] SetWindowLongW (hWnd=0x701e2, nIndex=-20, dwNewLong=327681) returned 327937
[0235.302] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0235.302] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0235.303] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0235.303] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0235.303] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0235.304] SetWindowPos (hWnd=0x701e2, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0235.304] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0235.304] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0235.304] GetWindowPlacement (in: hWnd=0x701e2, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0235.304] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0235.305] GetClientRect (in: hWnd=0x701e2, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0235.305] GetWindowRect (in: hWnd=0x701e2, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0235.305] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0235.305] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0235.305] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0235.306] RedrawWindow (hWnd=0x701e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0235.306] GetSystemMenu (hWnd=0x701e2, bRevert=0) returned 0x1102ad
[0235.306] GetWindowPlacement (in: hWnd=0x701e2, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0235.306] EnableMenuItem (hMenu=0x1102ad, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0235.306] EnableMenuItem (hMenu=0x1102ad, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0235.306] EnableMenuItem (hMenu=0x1102ad, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0235.306] EnableMenuItem (hMenu=0x1102ad, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0235.306] EnableMenuItem (hMenu=0x1102ad, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0235.306] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0235.306] GetWindowLongW (hWnd=0x701e2, nIndex=-8) returned 0
[0235.306] SetWindowLongW (hWnd=0x701e2, nIndex=-8, dwNewLong=458806) returned 0
[0235.306] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0235.306] GetProcessWindowStation () returned 0x13c
[0235.307] GetCurrentThreadId () returned 0x11d0
[0235.307] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4e46, lParam=0x0) returned 1
[0235.307] IsWindowVisible (hWnd=0x701e2) returned 0
[0235.307] IsWindowVisible (hWnd=0x70036) returned 1
[0235.307] IsWindowEnabled (hWnd=0x70036) returned 1
[0235.307] IsWindowVisible (hWnd=0x602b6) returned 0
[0235.307] IsWindowVisible (hWnd=0x901f8) returned 0
[0235.307] IsWindowVisible (hWnd=0x202d0) returned 0
[0235.307] IsWindowVisible (hWnd=0x202d4) returned 0
[0235.307] GetActiveWindow () returned 0x70036
[0235.307] GetFocus () returned 0x202c6
[0235.307] IsWindow (hWnd=0x70036) returned 1
[0235.307] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0235.307] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0235.308] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0235.308] GetWindowLongW (hWnd=0x701e2, nIndex=-8) returned 458806
[0235.308] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0235.308] GetCurrentThreadId () returned 0x11d0
[0235.308] GetWindowLongW (hWnd=0x701e2, nIndex=-8) returned 458806
[0235.308] IsWindowEnabled (hWnd=0x70036) returned 0
[0235.308] IsWindowEnabled (hWnd=0x701e2) returned 1
[0235.308] ShowWindow (hWnd=0x701e2, nCmdShow=5) returned 0
[0235.308] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0235.308] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0235.309] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.309] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0235.309] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x701e2, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1d02d6
[0235.310] SetWindowLongW (hWnd=0x1d02d6, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0235.310] GetWindowLongW (hWnd=0x1d02d6, nIndex=-4) returned 1868026976
[0235.310] SetWindowLongW (hWnd=0x1d02d6, nIndex=-4, dwNewLong=79646598) returned 1868026976
[0235.310] GetWindowLongW (hWnd=0x1d02d6, nIndex=-4) returned 79646598
[0235.310] GetWindowLongW (hWnd=0x1d02d6, nIndex=-16) returned 1174470848
[0235.310] GetWindowLongW (hWnd=0x1d02d6, nIndex=-12) returned 0
[0235.310] SetWindowLongW (hWnd=0x1d02d6, nIndex=-12, dwNewLong=1901270) returned 0
[0235.310] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0235.311] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0235.312] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0235.312] SendMessageW (hWnd=0x1d02d6, Msg=0x2055, wParam=0x1d02d6, lParam=0x3) returned 0x2
[0235.313] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0235.313] GetWindow (hWnd=0x1d02d6, uCmd=0x3) returned 0x0
[0235.313] GetClientRect (in: hWnd=0x1d02d6, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0235.313] GetWindowRect (in: hWnd=0x1d02d6, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0235.313] GetParent (hWnd=0x1d02d6) returned 0x701e2
[0235.313] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x701e2, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0235.313] SendMessageW (hWnd=0x1d02d6, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0235.313] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0235.313] SendMessageW (hWnd=0x1d02d6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0235.313] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0235.313] GetSystemMetrics (nIndex=5) returned 1
[0235.313] GetSystemMetrics (nIndex=6) returned 1
[0235.313] SendMessageW (hWnd=0x1d02d6, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0235.313] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0235.313] SendMessageW (hWnd=0x1d02d6, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0235.313] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0235.314] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0235.314] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0235.314] GetClientRect (in: hWnd=0x1d02d6, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0235.314] GetWindowRect (in: hWnd=0x1d02d6, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0235.314] GetParent (hWnd=0x1d02d6) returned 0x701e2
[0235.314] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x701e2, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0235.314] SendMessageW (hWnd=0x1d02d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1d02d6) returned 0x0
[0235.314] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x2210, wParam=0x2d60001, lParam=0x1d02d6) returned 0x0
[0235.314] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0235.315] GetParent (hWnd=0x1d02d6) returned 0x701e2
[0235.315] GetParent (hWnd=0x22013e) returned 0x1302c0
[0235.315] SetParent (hWndChild=0x22013e, hWndNewParent=0x701e2) returned 0x1302c0
[0235.315] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0235.315] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0235.316] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0235.316] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0235.316] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0235.316] GetClientRect (in: hWnd=0x22013e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0235.316] GetWindowRect (in: hWnd=0x22013e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0235.316] GetParent (hWnd=0x22013e) returned 0x701e2
[0235.316] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x701e2, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0235.316] GetClientRect (in: hWnd=0x22013e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0235.316] GetWindowRect (in: hWnd=0x22013e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0235.316] GetParent (hWnd=0x22013e) returned 0x701e2
[0235.316] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x701e2, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0235.316] GetParent (hWnd=0x22013e) returned 0x701e2
[0235.316] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0235.316] GetWindow (hWnd=0x22013e, uCmd=0x3) returned 0x0
[0235.316] SetWindowPos (hWnd=0x22013e, hWndInsertAfter=0x1d02d6, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0235.316] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0235.317] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0235.317] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0235.317] GetClientRect (in: hWnd=0x22013e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0235.317] GetWindowRect (in: hWnd=0x22013e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0235.317] GetParent (hWnd=0x22013e) returned 0x701e2
[0235.317] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x701e2, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0235.317] GetParent (hWnd=0x22013e) returned 0x701e2
[0235.317] GetWindow (hWnd=0x22013e, uCmd=0x3) returned 0x1d02d6
[0235.317] GetWindowThreadProcessId (in: hWnd=0x22013e, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0235.317] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0235.318] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.318] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0235.319] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x701e2, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x700ea
[0235.319] SetWindowLongW (hWnd=0x700ea, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0235.320] GetWindowLongW (hWnd=0x700ea, nIndex=-4) returned 1868032000
[0235.320] SetWindowLongW (hWnd=0x700ea, nIndex=-4, dwNewLong=79646638) returned 1868032000
[0235.320] GetWindowLongW (hWnd=0x700ea, nIndex=-4) returned 79646638
[0235.320] GetWindowLongW (hWnd=0x700ea, nIndex=-16) returned 1174470667
[0235.320] GetWindowLongW (hWnd=0x700ea, nIndex=-12) returned 0
[0235.320] SetWindowLongW (hWnd=0x700ea, nIndex=-12, dwNewLong=458986) returned 0
[0235.320] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0235.321] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0235.321] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0235.322] SendMessageW (hWnd=0x700ea, Msg=0x2055, wParam=0x700ea, lParam=0x3) returned 0x2
[0235.322] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0235.322] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0235.322] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0235.322] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0235.323] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0235.323] RedrawWindow (hWnd=0x1d02d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0235.323] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0235.323] RedrawWindow (hWnd=0x22013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0235.323] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0235.323] RedrawWindow (hWnd=0x700ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0235.323] RedrawWindow (hWnd=0x701e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0235.324] GetWindow (hWnd=0x700ea, uCmd=0x3) returned 0x22013e
[0235.324] GetClientRect (in: hWnd=0x700ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0235.324] GetWindowRect (in: hWnd=0x700ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0235.324] GetParent (hWnd=0x700ea) returned 0x701e2
[0235.324] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x701e2, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0235.324] SetWindowTextW (hWnd=0x700ea, lpString="OK") returned 1
[0235.324] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0xc, wParam=0x0, lParam=0x23f14cc) returned 0x1
[0235.325] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0235.325] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0235.325] GetClientRect (in: hWnd=0x700ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0235.325] GetWindowRect (in: hWnd=0x700ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0235.325] GetParent (hWnd=0x700ea) returned 0x701e2
[0235.325] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x701e2, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0235.325] SendMessageW (hWnd=0x700ea, Msg=0x2210, wParam=0xea0001, lParam=0x700ea) returned 0x0
[0235.325] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x2210, wParam=0xea0001, lParam=0x700ea) returned 0x0
[0235.326] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0235.326] GetParent (hWnd=0x700ea) returned 0x701e2
[0235.326] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0235.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.327] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0235.327] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x701e2, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x70122
[0235.328] SetWindowLongW (hWnd=0x70122, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0235.328] GetWindowLongW (hWnd=0x70122, nIndex=-4) returned 1868032000
[0235.328] SetWindowLongW (hWnd=0x70122, nIndex=-4, dwNewLong=79646838) returned 1868032000
[0235.328] GetWindowLongW (hWnd=0x70122, nIndex=-4) returned 79646838
[0235.328] GetWindowLongW (hWnd=0x70122, nIndex=-16) returned 1174470667
[0235.328] GetWindowLongW (hWnd=0x70122, nIndex=-12) returned 0
[0235.328] SetWindowLongW (hWnd=0x70122, nIndex=-12, dwNewLong=459042) returned 0
[0235.328] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x70122, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0235.329] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x70122, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0235.329] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x70122, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0235.330] SendMessageW (hWnd=0x70122, Msg=0x2055, wParam=0x70122, lParam=0x3) returned 0x2
[0235.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0235.330] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x70122, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0235.330] GetWindow (hWnd=0x70122, uCmd=0x3) returned 0x700ea
[0235.330] GetClientRect (in: hWnd=0x70122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0235.330] GetWindowRect (in: hWnd=0x70122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0235.330] GetParent (hWnd=0x70122) returned 0x701e2
[0235.330] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x701e2, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0235.331] SetWindowTextW (hWnd=0x70122, lpString="Cancel") returned 1
[0235.331] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x70122, Msg=0xc, wParam=0x0, lParam=0x23f4d8c) returned 0x1
[0235.331] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x70122, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0235.331] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x70122, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0235.331] GetClientRect (in: hWnd=0x70122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0235.332] GetWindowRect (in: hWnd=0x70122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0235.332] GetParent (hWnd=0x70122) returned 0x701e2
[0235.332] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x701e2, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0235.332] SendMessageW (hWnd=0x70122, Msg=0x2210, wParam=0x1220001, lParam=0x70122) returned 0x0
[0235.332] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x70122, Msg=0x2210, wParam=0x1220001, lParam=0x70122) returned 0x0
[0235.332] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x70122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0235.332] GetParent (hWnd=0x70122) returned 0x701e2
[0235.332] GetDC (hWnd=0x0) returned 0xf0105ee
[0235.332] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e320) returned 0x0
[0235.333] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0235.333] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0235.333] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0235.333] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0235.333] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0235.333] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0235.334] GetWindowLongW (hWnd=0x701e2, nIndex=-8) returned 458806
[0235.334] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0235.334] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0235.334] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x6c0107c1
[0235.334] GetDeviceCaps (hdc=0x6c0107c1, index=12) returned 32
[0235.334] GetDeviceCaps (hdc=0x6c0107c1, index=14) returned 1
[0235.334] DeleteDC (hdc=0x6c0107c1) returned 1
[0235.335] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0235.335] GetWindowThreadProcessId (in: hWnd=0x701e2, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0235.335] GetCurrentThreadId () returned 0x11d0
[0235.335] PostMessageW (hWnd=0x701e2, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0235.335] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.335] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.335] GetSystemMetrics (nIndex=42) returned 0
[0235.335] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.335] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0235.335] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0235.336] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0235.336] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0235.336] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0235.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x701e2) returned 0x1
[0235.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0235.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0235.348] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0235.348] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0235.360] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0235.360] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0235.361] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0235.362] GetFocus () returned 0x202c6
[0235.362] IsChild (hWndParent=0x701e2, hWnd=0x202c6) returned 0
[0235.362] GetFocus () returned 0x202c6
[0235.362] SetFocus (hWnd=0x1d02d6) returned 0x202c6
[0235.363] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1d02d6, lParam=0x0) returned 0x0
[0235.363] GetCapture () returned 0x0
[0235.363] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0235.364] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0235.383] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0235.387] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0235.387] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0235.387] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0235.387] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0235.388] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0235.388] GetParent (hWnd=0x701e2) returned 0x0
[0235.388] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0235.389] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0235.389] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0235.390] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0235.390] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0235.390] GetSysColorBrush (nIndex=5) returned 0x100079
[0235.391] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0235.391] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0235.392] SendMessageW (hWnd=0x1d02d6, Msg=0x2111, wParam=0x10002d6, lParam=0x1d02d6) returned 0x0
[0235.393] SendMessageW (hWnd=0x1d02d6, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0235.393] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0235.393] GetKeyState (nVirtKey=1) returned 0
[0235.393] GetKeyState (nVirtKey=2) returned 0
[0235.393] GetKeyState (nVirtKey=4) returned 0
[0235.393] GetKeyState (nVirtKey=5) returned 0
[0235.393] GetKeyState (nVirtKey=6) returned 0
[0235.393] GetWindowTextLengthW (hWnd=0x1d02d6) returned 0
[0235.393] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0235.393] SendMessageW (hWnd=0x1d02d6, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0235.393] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0235.393] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0235.393] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0235.397] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0235.398] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0235.398] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0235.399] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0235.399] GetWindowPlacement (in: hWnd=0x701e2, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0235.399] GetClientRect (in: hWnd=0x701e2, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0235.399] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.399] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.399] GetSystemMetrics (nIndex=42) returned 0
[0235.399] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.400] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0235.400] GetClientRect (in: hWnd=0x701e2, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0235.400] GetCurrentObject (hdc=0x8b010786, type=0x1) returned 0xb00017
[0235.400] GetCurrentObject (hdc=0x8b010786, type=0x2) returned 0x900010
[0235.400] GetCurrentObject (hdc=0x8b010786, type=0x7) returned 0xffffffffdd05079c
[0235.400] GetCurrentObject (hdc=0x8b010786, type=0x6) returned 0x8a01c2
[0235.400] SaveDC (hdc=0x8b010786) returned 1
[0235.400] GetNearestColor (hdc=0x8b010786, color=0xf0f0f0) returned 0xf0f0f0
[0235.400] CreateSolidBrush (color=0xf0f0f0) returned 0xfb10078d
[0235.400] FillRect (hDC=0x8b010786, lprc=0x53e250, hbr=0xfb10078d) returned 1
[0235.400] DeleteObject (ho=0xfb10078d) returned 1
[0235.400] RestoreDC (hdc=0x8b010786, nSavedDC=-1) returned 1
[0235.401] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0235.401] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0235.401] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0235.402] GetWindowPlacement (in: hWnd=0x701e2, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0235.402] GetClientRect (in: hWnd=0x701e2, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0235.402] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.402] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.402] GetSystemMetrics (nIndex=42) returned 0
[0235.402] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.402] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0235.402] GetClientRect (in: hWnd=0x701e2, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0235.402] GetCurrentObject (hdc=0x820107c1, type=0x1) returned 0xb00017
[0235.402] GetCurrentObject (hdc=0x820107c1, type=0x2) returned 0x900010
[0235.402] GetCurrentObject (hdc=0x820107c1, type=0x7) returned 0xffffffff800507c3
[0235.402] GetCurrentObject (hdc=0x820107c1, type=0x6) returned 0x8a01c2
[0235.402] SaveDC (hdc=0x820107c1) returned 1
[0235.403] GetNearestColor (hdc=0x820107c1, color=0xf0f0f0) returned 0xf0f0f0
[0235.403] CreateSolidBrush (color=0xf0f0f0) returned 0xfc10078d
[0235.403] FillRect (hDC=0x820107c1, lprc=0x53dc18, hbr=0xfc10078d) returned 1
[0235.403] DeleteObject (ho=0xfc10078d) returned 1
[0235.403] RestoreDC (hdc=0x820107c1, nSavedDC=-1) returned 1
[0235.403] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.403] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.403] GetSystemMetrics (nIndex=42) returned 0
[0235.403] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.403] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0235.403] GetClientRect (in: hWnd=0x701e2, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0235.403] GetCurrentObject (hdc=0x820107c1, type=0x1) returned 0xb00017
[0235.403] GetCurrentObject (hdc=0x820107c1, type=0x2) returned 0x900010
[0235.403] GetCurrentObject (hdc=0x820107c1, type=0x7) returned 0xffffffff800507c3
[0235.403] GetCurrentObject (hdc=0x820107c1, type=0x6) returned 0x8a01c2
[0235.404] SaveDC (hdc=0x820107c1) returned 1
[0235.404] GetNearestColor (hdc=0x820107c1, color=0xf0f0f0) returned 0xf0f0f0
[0235.404] CreateSolidBrush (color=0xf0f0f0) returned 0xfd10078d
[0235.404] FillRect (hDC=0x820107c1, lprc=0x53dbb8, hbr=0xfd10078d) returned 1
[0235.404] DeleteObject (ho=0xfd10078d) returned 1
[0235.404] RestoreDC (hdc=0x820107c1, nSavedDC=-1) returned 1
[0235.404] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.404] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.404] GetSystemMetrics (nIndex=42) returned 0
[0235.404] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.404] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0235.405] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0235.405] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0235.406] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0235.406] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0235.406] GetStockObject (i=5) returned 0x900015
[0235.406] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x70122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0235.406] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x70122, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0235.406] GetStockObject (i=5) returned 0x900015
[0235.407] GetWindowPlacement (in: hWnd=0x701e2, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0235.407] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0235.407] GetClientRect (in: hWnd=0x701e2, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0235.407] GetWindowRect (in: hWnd=0x701e2, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0235.408] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0235.408] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0235.409] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0235.409] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0235.409] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0235.409] GetClientRect (in: hWnd=0x701e2, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0235.409] GetWindowRect (in: hWnd=0x701e2, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0235.409] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.410] IsWindowUnicode (hWnd=0x701e2) returned 1
[0235.410] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.410] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.410] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.410] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0235.410] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.410] IsWindowUnicode (hWnd=0x701e2) returned 1
[0235.410] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.410] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.410] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.410] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.411] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x84, wParam=0x0, lParam=0x1900368) returned 0x1
[0235.411] IsWindowUnicode (hWnd=0x700ea) returned 1
[0235.411] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.411] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.411] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.412] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.430] IsWindowUnicode (hWnd=0x202c6) returned 1
[0235.430] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.430] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.430] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.430] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0235.430] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0235.430] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.431] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x84, wParam=0x0, lParam=0x1900368) returned 0x1
[0235.431] IsWindowUnicode (hWnd=0x700ea) returned 1
[0235.431] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.431] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x84, wParam=0x0, lParam=0x1900368) returned 0x1
[0235.431] SetCursor (hCursor=0x10003) returned 0x10003
[0235.431] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.431] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.431] _TrackMouseEvent (in: lpEventTrack=0x23fb720 | out: lpEventTrack=0x23fb720) returned 1
[0235.431] SendMessageW (hWnd=0x700ea, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0235.432] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0235.432] InvalidateRect (hWnd=0x700ea, lpRect=0x0, bErase=0) returned 1
[0235.432] GetKeyState (nVirtKey=1) returned 0
[0235.432] GetKeyState (nVirtKey=2) returned 0
[0235.432] GetKeyState (nVirtKey=4) returned 0
[0235.432] GetKeyState (nVirtKey=5) returned 0
[0235.432] GetKeyState (nVirtKey=6) returned 0
[0235.432] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.432] IsWindowUnicode (hWnd=0x701e2) returned 1
[0235.432] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.433] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.433] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.433] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.438] IsWindowUnicode (hWnd=0x701e2) returned 1
[0235.438] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.438] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.438] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.438] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.438] IsWindowUnicode (hWnd=0x102dc) returned 1
[0235.438] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.438] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.438] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.439] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.439] IsWindowUnicode (hWnd=0x701e2) returned 1
[0235.439] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.440] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.440] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.440] BeginPaint (in: hWnd=0x701e2, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x60100ce
[0235.440] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0235.440] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.440] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.440] GetSystemMetrics (nIndex=42) returned 0
[0235.440] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.440] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0235.440] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0235.440] EndPaint (hWnd=0x701e2, lpPaint=0x53e30c) returned 1
[0235.441] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.441] IsWindowUnicode (hWnd=0x1d02d6) returned 1
[0235.441] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.441] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.441] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0235.441] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0235.442] SetTextColor (hdc=0x830107c1, color=0x0) returned 0x0
[0235.442] SetBkColor (hdc=0x830107c1, color=0xffffff) returned 0xffffff
[0235.443] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.448] IsWindowUnicode (hWnd=0x22013e) returned 1
[0235.448] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.448] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.448] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.448] BeginPaint (in: hWnd=0x22013e, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x10105d6
[0235.448] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0235.448] CreateCompatibleDC (hdc=0x10105d6) returned 0x50107bc
[0235.448] SelectObject (hdc=0x50107bc, h=0x1e0507b9) returned 0x85000f
[0235.448] GdipCreateFromHDC (hdc=0x50107bc, graphics=0x53e30c) returned 0x0
[0235.449] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0235.449] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0235.449] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0235.449] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.449] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0235.449] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0235.449] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0235.449] LocalFree (hMem=0x89ee08) returned 0x0
[0235.449] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.449] GdipCreateRegion (region=0x53e354) returned 0x0
[0235.449] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.449] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0235.449] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0235.449] GetWindowTextLengthW (hWnd=0x22013e) returned 16
[0235.449] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0235.450] GetSystemMetrics (nIndex=42) returned 0
[0235.450] GetWindowTextW (in: hWnd=0x22013e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0235.450] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0235.450] GetClientRect (in: hWnd=0x22013e, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0235.450] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0235.450] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0235.450] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0235.450] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.450] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0235.450] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.450] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.450] LocalFree (hMem=0x89ec80) returned 0x0
[0235.450] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0235.450] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.450] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0235.450] LocalFree (hMem=0x89eac0) returned 0x0
[0235.451] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.451] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0235.451] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0235.451] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0235.451] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0235.451] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0235.451] GetCurrentObject (hdc=0x50107bc, type=0x1) returned 0xb00017
[0235.451] GetCurrentObject (hdc=0x50107bc, type=0x2) returned 0x900010
[0235.451] GetCurrentObject (hdc=0x50107bc, type=0x7) returned 0x1e0507b9
[0235.451] GetCurrentObject (hdc=0x50107bc, type=0x6) returned 0x8a01c2
[0235.451] SaveDC (hdc=0x50107bc) returned 1
[0235.451] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x210407a1
[0235.451] GetClipRgn (hdc=0x50107bc, hrgn=0x210407a1) returned 0
[0235.451] SelectClipRgn (hdc=0x50107bc, hrgn=0x6504051e) returned 2
[0235.451] DeleteObject (ho=0x210407a1) returned 1
[0235.452] DeleteObject (ho=0x6504051e) returned 1
[0235.452] OffsetViewportOrgEx (in: hdc=0x50107bc, x=0, y=0, lppt=0x23fbc28 | out: lppt=0x23fbc28) returned 1
[0235.452] GetNearestColor (hdc=0x50107bc, color=0xf0f0f0) returned 0xf0f0f0
[0235.452] CreateSolidBrush (color=0xf0f0f0) returned 0xfe10078d
[0235.452] FillRect (hDC=0x50107bc, lprc=0x53e1f4, hbr=0xfe10078d) returned 1
[0235.452] DeleteObject (ho=0xfe10078d) returned 1
[0235.452] RestoreDC (hdc=0x50107bc, nSavedDC=-1) returned 1
[0235.452] GdipReleaseDC (graphics=0x5d92c30, hdc=0x50107bc) returned 0x0
[0235.452] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfc010dbd) returned 0x0
[0235.452] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.452] GetWindowTextLengthW (hWnd=0x22013e) returned 16
[0235.452] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0235.452] GetSystemMetrics (nIndex=42) returned 0
[0235.452] GetWindowTextW (in: hWnd=0x22013e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0235.452] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0235.453] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0235.453] GetCurrentObject (hdc=0x50107bc, type=0x1) returned 0xb00017
[0235.453] GetCurrentObject (hdc=0x50107bc, type=0x2) returned 0x900010
[0235.453] GetCurrentObject (hdc=0x50107bc, type=0x7) returned 0x1e0507b9
[0235.453] GetCurrentObject (hdc=0x50107bc, type=0x6) returned 0x8a01c2
[0235.453] SaveDC (hdc=0x50107bc) returned 1
[0235.453] GetNearestColor (hdc=0x50107bc, color=0x0) returned 0x0
[0235.453] RestoreDC (hdc=0x50107bc, nSavedDC=-1) returned 1
[0235.453] GdipReleaseDC (graphics=0x5d92c30, hdc=0x50107bc) returned 0x0
[0235.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0235.454] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0235.454] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0235.454] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x23fbf30 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0235.454] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0235.454] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0235.454] GetCurrentObject (hdc=0x50107bc, type=0x1) returned 0xb00017
[0235.455] GetCurrentObject (hdc=0x50107bc, type=0x2) returned 0x900010
[0235.455] GetCurrentObject (hdc=0x50107bc, type=0x7) returned 0x1e0507b9
[0235.455] GetCurrentObject (hdc=0x50107bc, type=0x6) returned 0x8a01c2
[0235.455] SaveDC (hdc=0x50107bc) returned 1
[0235.455] GetTextAlign (hdc=0x50107bc) returned 0x0
[0235.455] GetTextColor (hdc=0x50107bc) returned 0x0
[0235.455] GetCurrentObject (hdc=0x50107bc, type=0x6) returned 0x8a01c2
[0235.455] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0235.455] SelectObject (hdc=0x50107bc, h=0x730a066d) returned 0x8a01c2
[0235.455] GetBkMode (hdc=0x50107bc) returned 2
[0235.455] SetBkMode (hdc=0x50107bc, mode=1) returned 2
[0235.455] DrawTextExW (in: hdc=0x50107bc, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x23fc154 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0235.456] RestoreDC (hdc=0x50107bc, nSavedDC=-1) returned 1
[0235.456] GdipReleaseDC (graphics=0x5d92c30, hdc=0x50107bc) returned 0x0
[0235.456] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0235.456] BitBlt (hdc=0x10105d6, x=0, y=0, cx=250, cy=70, hdcSrc=0x50107bc, x1=0, y1=0, rop=0xcc0020) returned 1
[0235.456] GdipReleaseDC (graphics=0x5d92c30, hdc=0x50107bc) returned 0x0
[0235.456] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0235.456] SelectObject (hdc=0x50107bc, h=0x85000f) returned 0x1e0507b9
[0235.456] DeleteDC (hdc=0x50107bc) returned 1
[0235.457] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0235.457] EndPaint (hWnd=0x22013e, lpPaint=0x53e2f0) returned 1
[0235.457] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.457] IsWindowUnicode (hWnd=0x700ea) returned 1
[0235.457] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.457] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.457] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.457] BeginPaint (in: hWnd=0x700ea, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0235.457] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0235.457] CreateCompatibleDC (hdc=0xf0105ee) returned 0x70107bc
[0235.458] SelectObject (hdc=0x70107bc, h=0x1e0507b9) returned 0x85000f
[0235.458] GdipCreateFromHDC (hdc=0x70107bc, graphics=0x53e300) returned 0x0
[0235.458] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0235.458] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0235.458] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0235.458] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.458] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0235.458] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.458] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0235.458] LocalFree (hMem=0x89eac0) returned 0x0
[0235.458] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.458] GdipCreateRegion (region=0x53e348) returned 0x0
[0235.458] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.458] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0235.459] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0235.459] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbff0dbd) returned 0x0
[0235.459] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.459] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0235.459] GetCurrentObject (hdc=0x70107bc, type=0x1) returned 0xb00017
[0235.459] GetCurrentObject (hdc=0x70107bc, type=0x2) returned 0x900010
[0235.459] GetCurrentObject (hdc=0x70107bc, type=0x7) returned 0x1e0507b9
[0235.459] GetCurrentObject (hdc=0x70107bc, type=0x6) returned 0x8a01c2
[0235.459] SaveDC (hdc=0x70107bc) returned 1
[0235.460] GetNearestColor (hdc=0x70107bc, color=0xf0f0f0) returned 0xf0f0f0
[0235.460] GetNearestColor (hdc=0x70107bc, color=0xa0a0a0) returned 0xa0a0a0
[0235.460] GetNearestColor (hdc=0x70107bc, color=0x696969) returned 0x696969
[0235.460] GetNearestColor (hdc=0x70107bc, color=0xa0a0a0) returned 0xa0a0a0
[0235.460] GetNearestColor (hdc=0x70107bc, color=0x0) returned 0x0
[0235.460] GetNearestColor (hdc=0x70107bc, color=0xffffff) returned 0xffffff
[0235.460] GetNearestColor (hdc=0x70107bc, color=0xe5e5e5) returned 0xe5e5e5
[0235.460] GetNearestColor (hdc=0x70107bc, color=0xd7d7d7) returned 0xd7d7d7
[0235.460] GetNearestColor (hdc=0x70107bc, color=0x0) returned 0x0
[0235.460] RestoreDC (hdc=0x70107bc, nSavedDC=-1) returned 1
[0235.460] GdipReleaseDC (graphics=0x5d92c30, hdc=0x70107bc) returned 0x0
[0235.460] IsAppThemed () returned 0x1
[0235.460] GetThemeAppProperties () returned 0x3
[0235.460] GetThemeAppProperties () returned 0x3
[0235.461] IsAppThemed () returned 0x1
[0235.461] GetThemeAppProperties () returned 0x3
[0235.461] GetThemeAppProperties () returned 0x3
[0235.461] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x23fc8c0 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0235.461] IsAppThemed () returned 0x1
[0235.461] GetThemeAppProperties () returned 0x3
[0235.461] GetThemeAppProperties () returned 0x3
[0235.461] IsAppThemed () returned 0x1
[0235.461] GetThemeAppProperties () returned 0x3
[0235.461] GetThemeAppProperties () returned 0x3
[0235.461] IsAppThemed () returned 0x1
[0235.461] GetThemeAppProperties () returned 0x3
[0235.461] GetThemeAppProperties () returned 0x3
[0235.461] IsAppThemed () returned 0x1
[0235.462] GetThemeAppProperties () returned 0x3
[0235.462] GetThemeAppProperties () returned 0x3
[0235.462] IsThemePartDefined () returned 0x1
[0235.462] IsAppThemed () returned 0x1
[0235.462] GetThemeAppProperties () returned 0x3
[0235.462] GetThemeAppProperties () returned 0x3
[0235.462] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0235.462] IsAppThemed () returned 0x1
[0235.462] GetThemeAppProperties () returned 0x3
[0235.462] GetThemeAppProperties () returned 0x3
[0235.462] IsAppThemed () returned 0x1
[0235.462] GetThemeAppProperties () returned 0x3
[0235.462] GetThemeAppProperties () returned 0x3
[0235.462] IsThemePartDefined () returned 0x1
[0235.462] GdipCreateRegion (region=0x53e064) returned 0x0
[0235.462] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.462] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0235.462] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.462] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0235.462] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.462] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0235.463] LocalFree (hMem=0x89eac0) returned 0x0
[0235.463] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.463] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.463] LocalFree (hMem=0x89ec80) returned 0x0
[0235.463] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.463] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0235.463] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0235.463] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0235.463] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.463] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0235.463] GetCurrentObject (hdc=0x70107bc, type=0x1) returned 0xb00017
[0235.463] GetCurrentObject (hdc=0x70107bc, type=0x2) returned 0x900010
[0235.463] GetCurrentObject (hdc=0x70107bc, type=0x7) returned 0x1e0507b9
[0235.463] GetCurrentObject (hdc=0x70107bc, type=0x6) returned 0x8a01c2
[0235.463] SaveDC (hdc=0x70107bc) returned 1
[0235.464] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6604051e
[0235.464] GetClipRgn (hdc=0x70107bc, hrgn=0x6604051e) returned 0
[0235.464] SelectClipRgn (hdc=0x70107bc, hrgn=0x250407a1) returned 2
[0235.464] DeleteObject (ho=0x6604051e) returned 1
[0235.464] DeleteObject (ho=0x250407a1) returned 1
[0235.464] OffsetViewportOrgEx (in: hdc=0x70107bc, x=0, y=0, lppt=0x23fcf70 | out: lppt=0x23fcf70) returned 1
[0235.464] DrawThemeParentBackground () returned 0x0
[0235.464] GetWindowPlacement (in: hWnd=0x701e2, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0235.464] GetClientRect (in: hWnd=0x701e2, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0235.464] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.464] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.464] GetSystemMetrics (nIndex=42) returned 0
[0235.464] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.464] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0235.465] GetClientRect (in: hWnd=0x701e2, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0235.465] GetCurrentObject (hdc=0x70107bc, type=0x1) returned 0xb00017
[0235.465] GetCurrentObject (hdc=0x70107bc, type=0x2) returned 0x900010
[0235.465] GetCurrentObject (hdc=0x70107bc, type=0x7) returned 0x1e0507b9
[0235.465] GetCurrentObject (hdc=0x70107bc, type=0x6) returned 0x8a01c2
[0235.465] SaveDC (hdc=0x70107bc) returned 2
[0235.465] GetNearestColor (hdc=0x70107bc, color=0xf0f0f0) returned 0xf0f0f0
[0235.465] CreateSolidBrush (color=0xf0f0f0) returned 0xff10078d
[0235.465] FillRect (hDC=0x70107bc, lprc=0x53dac8, hbr=0xff10078d) returned 1
[0235.465] DeleteObject (ho=0xff10078d) returned 1
[0235.465] RestoreDC (hdc=0x70107bc, nSavedDC=-1) returned 1
[0235.465] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.465] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.465] GetSystemMetrics (nIndex=42) returned 0
[0235.465] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0235.466] GetClientRect (in: hWnd=0x701e2, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0235.466] GetCurrentObject (hdc=0x70107bc, type=0x1) returned 0xb00017
[0235.466] GetCurrentObject (hdc=0x70107bc, type=0x2) returned 0x900010
[0235.466] GetCurrentObject (hdc=0x70107bc, type=0x7) returned 0x1e0507b9
[0235.466] GetCurrentObject (hdc=0x70107bc, type=0x6) returned 0x8a01c2
[0235.466] SaveDC (hdc=0x70107bc) returned 2
[0235.466] GetNearestColor (hdc=0x70107bc, color=0xf0f0f0) returned 0xf0f0f0
[0235.466] CreateSolidBrush (color=0xf0f0f0) returned 0x10078d
[0235.466] FillRect (hDC=0x70107bc, lprc=0x53da68, hbr=0x10078d) returned 1
[0235.466] DeleteObject (ho=0x10078d) returned 1
[0235.466] RestoreDC (hdc=0x70107bc, nSavedDC=-1) returned 1
[0235.466] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.466] GetSystemMetrics (nIndex=42) returned 0
[0235.466] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0235.467] RestoreDC (hdc=0x70107bc, nSavedDC=-1) returned 1
[0235.467] GdipReleaseDC (graphics=0x5d92c30, hdc=0x70107bc) returned 0x0
[0235.467] IsAppThemed () returned 0x1
[0235.467] GetThemeAppProperties () returned 0x3
[0235.467] GetThemeAppProperties () returned 0x3
[0235.467] IsAppThemed () returned 0x1
[0235.467] GetThemeAppProperties () returned 0x3
[0235.467] GetThemeAppProperties () returned 0x3
[0235.467] IsThemePartDefined () returned 0x1
[0235.467] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0235.467] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.467] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0235.467] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.467] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0235.468] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.468] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0235.468] LocalFree (hMem=0x89eac0) returned 0x0
[0235.468] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0235.468] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0235.468] LocalFree (hMem=0x89ee08) returned 0x0
[0235.468] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.468] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0235.468] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0235.468] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0235.468] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.468] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0235.468] GetCurrentObject (hdc=0x70107bc, type=0x1) returned 0xb00017
[0235.468] GetCurrentObject (hdc=0x70107bc, type=0x2) returned 0x900010
[0235.468] GetCurrentObject (hdc=0x70107bc, type=0x7) returned 0x1e0507b9
[0235.468] GetCurrentObject (hdc=0x70107bc, type=0x6) returned 0x8a01c2
[0235.468] SaveDC (hdc=0x70107bc) returned 1
[0235.469] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x260407a1
[0235.469] GetClipRgn (hdc=0x70107bc, hrgn=0x260407a1) returned 0
[0235.469] SelectClipRgn (hdc=0x70107bc, hrgn=0x6804051e) returned 2
[0235.469] DeleteObject (ho=0x260407a1) returned 1
[0235.469] DeleteObject (ho=0x6804051e) returned 1
[0235.469] OffsetViewportOrgEx (in: hdc=0x70107bc, x=0, y=0, lppt=0x23fd7f8 | out: lppt=0x23fd7f8) returned 1
[0235.469] IsAppThemed () returned 0x1
[0235.469] GetThemeAppProperties () returned 0x3
[0235.469] GetThemeAppProperties () returned 0x3
[0235.469] DrawThemeBackground () returned 0x0
[0235.469] RestoreDC (hdc=0x70107bc, nSavedDC=-1) returned 1
[0235.469] GdipReleaseDC (graphics=0x5d92c30, hdc=0x70107bc) returned 0x0
[0235.469] GdipCreateRegion (region=0x53dfec) returned 0x0
[0235.469] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.469] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0235.469] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.469] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0235.469] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.470] LocalFree (hMem=0x89ec80) returned 0x0
[0235.470] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0235.470] LocalFree (hMem=0x89ee08) returned 0x0
[0235.470] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.470] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0235.470] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0235.470] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0235.470] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.470] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0235.470] GetCurrentObject (hdc=0x70107bc, type=0x1) returned 0xb00017
[0235.470] GetCurrentObject (hdc=0x70107bc, type=0x2) returned 0x900010
[0235.470] GetCurrentObject (hdc=0x70107bc, type=0x7) returned 0x1e0507b9
[0235.470] GetCurrentObject (hdc=0x70107bc, type=0x6) returned 0x8a01c2
[0235.470] SaveDC (hdc=0x70107bc) returned 1
[0235.470] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6904051e
[0235.470] GetClipRgn (hdc=0x70107bc, hrgn=0x6904051e) returned 0
[0235.470] SelectClipRgn (hdc=0x70107bc, hrgn=0x270407a1) returned 2
[0235.470] DeleteObject (ho=0x6904051e) returned 1
[0235.471] DeleteObject (ho=0x270407a1) returned 1
[0235.471] OffsetViewportOrgEx (in: hdc=0x70107bc, x=0, y=0, lppt=0x23fdacc | out: lppt=0x23fdacc) returned 1
[0235.471] IsAppThemed () returned 0x1
[0235.471] GetThemeAppProperties () returned 0x3
[0235.471] GetThemeAppProperties () returned 0x3
[0235.471] GetThemeBackgroundContentRect () returned 0x0
[0235.471] RestoreDC (hdc=0x70107bc, nSavedDC=-1) returned 1
[0235.471] GdipReleaseDC (graphics=0x5d92c30, hdc=0x70107bc) returned 0x0
[0235.471] IsAppThemed () returned 0x1
[0235.471] GetThemeAppProperties () returned 0x3
[0235.471] GetThemeAppProperties () returned 0x3
[0235.471] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0235.471] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0235.471] GetCurrentObject (hdc=0x70107bc, type=0x1) returned 0xb00017
[0235.471] GetCurrentObject (hdc=0x70107bc, type=0x2) returned 0x900010
[0235.471] GetCurrentObject (hdc=0x70107bc, type=0x7) returned 0x1e0507b9
[0235.471] GetCurrentObject (hdc=0x70107bc, type=0x6) returned 0x8a01c2
[0235.471] SaveDC (hdc=0x70107bc) returned 1
[0235.472] GetTextAlign (hdc=0x70107bc) returned 0x0
[0235.472] GetTextColor (hdc=0x70107bc) returned 0x0
[0235.472] GetCurrentObject (hdc=0x70107bc, type=0x6) returned 0x8a01c2
[0235.472] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0235.472] SelectObject (hdc=0x70107bc, h=0x730a066d) returned 0x8a01c2
[0235.472] GetBkMode (hdc=0x70107bc) returned 2
[0235.472] SetBkMode (hdc=0x70107bc, mode=1) returned 2
[0235.472] DrawTextExW (in: hdc=0x70107bc, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x23fde6c | out: lpchText="OK", lprc=0x53df84) returned 13
[0235.472] DrawTextExW (in: hdc=0x70107bc, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x23fde6c | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0235.473] RestoreDC (hdc=0x70107bc, nSavedDC=-1) returned 1
[0235.473] GdipReleaseDC (graphics=0x5d92c30, hdc=0x70107bc) returned 0x0
[0235.473] GetFocus () returned 0x1d02d6
[0235.473] IsAppThemed () returned 0x1
[0235.473] GetThemeAppProperties () returned 0x3
[0235.473] GetThemeAppProperties () returned 0x3
[0235.473] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0235.473] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x70107bc, x1=0, y1=0, rop=0xcc0020) returned 1
[0235.473] GdipReleaseDC (graphics=0x5d92c30, hdc=0x70107bc) returned 0x0
[0235.473] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0235.473] SelectObject (hdc=0x70107bc, h=0x85000f) returned 0x1e0507b9
[0235.473] DeleteDC (hdc=0x70107bc) returned 1
[0235.473] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0235.474] EndPaint (hWnd=0x700ea, lpPaint=0x53e2e4) returned 1
[0235.474] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.478] IsWindowUnicode (hWnd=0x70122) returned 1
[0235.479] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.479] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.479] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.479] BeginPaint (in: hWnd=0x70122, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0235.479] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0235.479] CreateCompatibleDC (hdc=0x60100ce) returned 0x90107bc
[0235.479] SelectObject (hdc=0x90107bc, h=0x1e0507b9) returned 0x85000f
[0235.479] GdipCreateFromHDC (hdc=0x90107bc, graphics=0x53e300) returned 0x0
[0235.479] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0235.479] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0235.480] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0235.480] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.480] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0235.480] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0235.480] LocalFree (hMem=0x89ee08) returned 0x0
[0235.480] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.480] GdipCreateRegion (region=0x53e348) returned 0x0
[0235.480] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.480] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0235.480] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0235.480] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbfd0dbd) returned 0x0
[0235.480] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.480] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0235.480] GetCurrentObject (hdc=0x90107bc, type=0x1) returned 0xb00017
[0235.480] GetCurrentObject (hdc=0x90107bc, type=0x2) returned 0x900010
[0235.480] GetCurrentObject (hdc=0x90107bc, type=0x7) returned 0x1e0507b9
[0235.480] GetCurrentObject (hdc=0x90107bc, type=0x6) returned 0x8a01c2
[0235.480] SaveDC (hdc=0x90107bc) returned 1
[0235.481] GetNearestColor (hdc=0x90107bc, color=0xf0f0f0) returned 0xf0f0f0
[0235.481] GetNearestColor (hdc=0x90107bc, color=0xa0a0a0) returned 0xa0a0a0
[0235.481] GetNearestColor (hdc=0x90107bc, color=0x696969) returned 0x696969
[0235.481] GetNearestColor (hdc=0x90107bc, color=0xa0a0a0) returned 0xa0a0a0
[0235.481] GetNearestColor (hdc=0x90107bc, color=0x0) returned 0x0
[0235.481] GetNearestColor (hdc=0x90107bc, color=0xffffff) returned 0xffffff
[0235.481] GetNearestColor (hdc=0x90107bc, color=0xe5e5e5) returned 0xe5e5e5
[0235.481] GetNearestColor (hdc=0x90107bc, color=0xd7d7d7) returned 0xd7d7d7
[0235.481] GetNearestColor (hdc=0x90107bc, color=0x0) returned 0x0
[0235.481] RestoreDC (hdc=0x90107bc, nSavedDC=-1) returned 1
[0235.481] GdipReleaseDC (graphics=0x5d92c30, hdc=0x90107bc) returned 0x0
[0235.481] IsAppThemed () returned 0x1
[0235.481] GetThemeAppProperties () returned 0x3
[0235.481] GetThemeAppProperties () returned 0x3
[0235.481] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0235.482] SendMessageW (hWnd=0x701e2, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0235.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0235.482] IsAppThemed () returned 0x1
[0235.482] GetThemeAppProperties () returned 0x3
[0235.482] GetThemeAppProperties () returned 0x3
[0235.482] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x23fe67c | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0235.482] IsAppThemed () returned 0x1
[0235.482] GetThemeAppProperties () returned 0x3
[0235.482] GetThemeAppProperties () returned 0x3
[0235.482] IsAppThemed () returned 0x1
[0235.482] GetThemeAppProperties () returned 0x3
[0235.482] GetThemeAppProperties () returned 0x3
[0235.482] GetFocus () returned 0x1d02d6
[0235.482] IsAppThemed () returned 0x1
[0235.483] GetThemeAppProperties () returned 0x3
[0235.483] GetThemeAppProperties () returned 0x3
[0235.483] IsAppThemed () returned 0x1
[0235.483] GetThemeAppProperties () returned 0x3
[0235.483] GetThemeAppProperties () returned 0x3
[0235.483] IsThemePartDefined () returned 0x1
[0235.483] IsAppThemed () returned 0x1
[0235.483] GetThemeAppProperties () returned 0x3
[0235.483] GetThemeAppProperties () returned 0x3
[0235.483] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0235.483] IsAppThemed () returned 0x1
[0235.483] GetThemeAppProperties () returned 0x3
[0235.483] GetThemeAppProperties () returned 0x3
[0235.483] IsAppThemed () returned 0x1
[0235.483] GetThemeAppProperties () returned 0x3
[0235.483] GetThemeAppProperties () returned 0x3
[0235.483] IsThemePartDefined () returned 0x1
[0235.483] GdipCreateRegion (region=0x53e070) returned 0x0
[0235.483] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.483] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0235.484] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.484] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0235.484] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.484] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.484] LocalFree (hMem=0x89ec80) returned 0x0
[0235.484] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.484] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0235.484] LocalFree (hMem=0x89eac0) returned 0x0
[0235.484] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.484] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0235.484] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0235.484] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0235.484] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.484] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0235.484] GetCurrentObject (hdc=0x90107bc, type=0x1) returned 0xb00017
[0235.484] GetCurrentObject (hdc=0x90107bc, type=0x2) returned 0x900010
[0235.484] GetCurrentObject (hdc=0x90107bc, type=0x7) returned 0x1e0507b9
[0235.485] GetCurrentObject (hdc=0x90107bc, type=0x6) returned 0x8a01c2
[0235.485] SaveDC (hdc=0x90107bc) returned 1
[0235.485] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x280407a1
[0235.485] GetClipRgn (hdc=0x90107bc, hrgn=0x280407a1) returned 0
[0235.485] SelectClipRgn (hdc=0x90107bc, hrgn=0x6d04051e) returned 2
[0235.485] DeleteObject (ho=0x280407a1) returned 1
[0235.485] DeleteObject (ho=0x6d04051e) returned 1
[0235.485] OffsetViewportOrgEx (in: hdc=0x90107bc, x=0, y=0, lppt=0x23fed2c | out: lppt=0x23fed2c) returned 1
[0235.485] DrawThemeParentBackground () returned 0x0
[0235.485] GetWindowPlacement (in: hWnd=0x701e2, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0235.485] GetClientRect (in: hWnd=0x701e2, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0235.485] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.485] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.485] GetSystemMetrics (nIndex=42) returned 0
[0235.486] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.486] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0235.486] GetClientRect (in: hWnd=0x701e2, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0235.486] GetCurrentObject (hdc=0x90107bc, type=0x1) returned 0xb00017
[0235.486] GetCurrentObject (hdc=0x90107bc, type=0x2) returned 0x900010
[0235.486] GetCurrentObject (hdc=0x90107bc, type=0x7) returned 0x1e0507b9
[0235.486] GetCurrentObject (hdc=0x90107bc, type=0x6) returned 0x8a01c2
[0235.486] SaveDC (hdc=0x90107bc) returned 2
[0235.486] GetNearestColor (hdc=0x90107bc, color=0xf0f0f0) returned 0xf0f0f0
[0235.486] CreateSolidBrush (color=0xf0f0f0) returned 0x110078d
[0235.486] FillRect (hDC=0x90107bc, lprc=0x53dad0, hbr=0x110078d) returned 1
[0235.486] DeleteObject (ho=0x110078d) returned 1
[0235.486] RestoreDC (hdc=0x90107bc, nSavedDC=-1) returned 1
[0235.486] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.487] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.487] GetSystemMetrics (nIndex=42) returned 0
[0235.487] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.487] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0235.487] GetClientRect (in: hWnd=0x701e2, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0235.487] GetCurrentObject (hdc=0x90107bc, type=0x1) returned 0xb00017
[0235.487] GetCurrentObject (hdc=0x90107bc, type=0x2) returned 0x900010
[0235.487] GetCurrentObject (hdc=0x90107bc, type=0x7) returned 0x1e0507b9
[0235.487] GetCurrentObject (hdc=0x90107bc, type=0x6) returned 0x8a01c2
[0235.487] SaveDC (hdc=0x90107bc) returned 2
[0235.487] GetNearestColor (hdc=0x90107bc, color=0xf0f0f0) returned 0xf0f0f0
[0235.487] CreateSolidBrush (color=0xf0f0f0) returned 0x210078d
[0235.487] FillRect (hDC=0x90107bc, lprc=0x53da70, hbr=0x210078d) returned 1
[0235.487] DeleteObject (ho=0x210078d) returned 1
[0235.487] RestoreDC (hdc=0x90107bc, nSavedDC=-1) returned 1
[0235.488] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.488] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.488] GetSystemMetrics (nIndex=42) returned 0
[0235.488] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.488] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0235.488] RestoreDC (hdc=0x90107bc, nSavedDC=-1) returned 1
[0235.488] GdipReleaseDC (graphics=0x5d92c30, hdc=0x90107bc) returned 0x0
[0235.488] IsAppThemed () returned 0x1
[0235.488] GetThemeAppProperties () returned 0x3
[0235.488] GetThemeAppProperties () returned 0x3
[0235.488] IsAppThemed () returned 0x1
[0235.488] GetThemeAppProperties () returned 0x3
[0235.488] GetThemeAppProperties () returned 0x3
[0235.488] IsThemePartDefined () returned 0x1
[0235.488] GdipCreateRegion (region=0x53dff4) returned 0x0
[0235.488] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.489] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0235.489] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.489] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0235.489] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.489] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0235.489] LocalFree (hMem=0x89eac0) returned 0x0
[0235.489] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.489] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0235.489] LocalFree (hMem=0x89eac0) returned 0x0
[0235.489] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.489] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0235.489] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0235.489] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0235.489] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.489] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0235.489] GetCurrentObject (hdc=0x90107bc, type=0x1) returned 0xb00017
[0235.489] GetCurrentObject (hdc=0x90107bc, type=0x2) returned 0x900010
[0235.490] GetCurrentObject (hdc=0x90107bc, type=0x7) returned 0x1e0507b9
[0235.490] GetCurrentObject (hdc=0x90107bc, type=0x6) returned 0x8a01c2
[0235.490] SaveDC (hdc=0x90107bc) returned 1
[0235.490] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e04051e
[0235.535] GetClipRgn (hdc=0x90107bc, hrgn=0x6e04051e) returned 0
[0235.535] SelectClipRgn (hdc=0x90107bc, hrgn=0x2a0407a1) returned 2
[0235.535] DeleteObject (ho=0x6e04051e) returned 1
[0235.535] DeleteObject (ho=0x2a0407a1) returned 1
[0235.535] OffsetViewportOrgEx (in: hdc=0x90107bc, x=0, y=0, lppt=0x23ff5b4 | out: lppt=0x23ff5b4) returned 1
[0235.535] IsAppThemed () returned 0x1
[0235.535] GetThemeAppProperties () returned 0x3
[0235.535] GetThemeAppProperties () returned 0x3
[0235.535] DrawThemeBackground () returned 0x0
[0235.536] RestoreDC (hdc=0x90107bc, nSavedDC=-1) returned 1
[0235.536] GdipReleaseDC (graphics=0x5d92c30, hdc=0x90107bc) returned 0x0
[0235.536] GdipCreateRegion (region=0x53dff8) returned 0x0
[0235.536] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.536] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0235.536] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.536] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0235.536] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.536] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.536] LocalFree (hMem=0x89ec80) returned 0x0
[0235.536] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.536] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.536] LocalFree (hMem=0x89ec80) returned 0x0
[0235.536] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.536] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0235.536] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0235.537] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0235.537] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.537] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0235.537] GetCurrentObject (hdc=0x90107bc, type=0x1) returned 0xb00017
[0235.537] GetCurrentObject (hdc=0x90107bc, type=0x2) returned 0x900010
[0235.537] GetCurrentObject (hdc=0x90107bc, type=0x7) returned 0x1e0507b9
[0235.537] GetCurrentObject (hdc=0x90107bc, type=0x6) returned 0x8a01c2
[0235.537] SaveDC (hdc=0x90107bc) returned 1
[0235.537] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2b0407a1
[0235.537] GetClipRgn (hdc=0x90107bc, hrgn=0x2b0407a1) returned 0
[0235.537] SelectClipRgn (hdc=0x90107bc, hrgn=0x6f04051e) returned 2
[0235.537] DeleteObject (ho=0x2b0407a1) returned 1
[0235.538] DeleteObject (ho=0x6f04051e) returned 1
[0235.538] OffsetViewportOrgEx (in: hdc=0x90107bc, x=0, y=0, lppt=0x23ff888 | out: lppt=0x23ff888) returned 1
[0235.538] IsAppThemed () returned 0x1
[0235.538] GetThemeAppProperties () returned 0x3
[0235.538] GetThemeAppProperties () returned 0x3
[0235.538] GetThemeBackgroundContentRect () returned 0x0
[0235.538] RestoreDC (hdc=0x90107bc, nSavedDC=-1) returned 1
[0235.538] GdipReleaseDC (graphics=0x5d92c30, hdc=0x90107bc) returned 0x0
[0235.538] IsAppThemed () returned 0x1
[0235.538] GetThemeAppProperties () returned 0x3
[0235.538] GetThemeAppProperties () returned 0x3
[0235.538] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0235.538] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0235.538] GetCurrentObject (hdc=0x90107bc, type=0x1) returned 0xb00017
[0235.538] GetCurrentObject (hdc=0x90107bc, type=0x2) returned 0x900010
[0235.538] GetCurrentObject (hdc=0x90107bc, type=0x7) returned 0x1e0507b9
[0235.538] GetCurrentObject (hdc=0x90107bc, type=0x6) returned 0x8a01c2
[0235.538] SaveDC (hdc=0x90107bc) returned 1
[0235.538] GetTextAlign (hdc=0x90107bc) returned 0x0
[0235.538] GetTextColor (hdc=0x90107bc) returned 0x0
[0235.538] GetCurrentObject (hdc=0x90107bc, type=0x6) returned 0x8a01c2
[0235.539] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0235.539] SelectObject (hdc=0x90107bc, h=0x730a066d) returned 0x8a01c2
[0235.539] GetBkMode (hdc=0x90107bc) returned 2
[0235.539] SetBkMode (hdc=0x90107bc, mode=1) returned 2
[0235.539] DrawTextExW (in: hdc=0x90107bc, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x23ffc28 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0235.539] DrawTextExW (in: hdc=0x90107bc, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x23ffc28 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0235.539] RestoreDC (hdc=0x90107bc, nSavedDC=-1) returned 1
[0235.540] GdipReleaseDC (graphics=0x5d92c30, hdc=0x90107bc) returned 0x0
[0235.540] GetFocus () returned 0x1d02d6
[0235.540] IsAppThemed () returned 0x1
[0235.540] GetThemeAppProperties () returned 0x3
[0235.540] GetThemeAppProperties () returned 0x3
[0235.540] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0235.540] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x90107bc, x1=0, y1=0, rop=0xcc0020) returned 1
[0235.540] GdipReleaseDC (graphics=0x5d92c30, hdc=0x90107bc) returned 0x0
[0235.540] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0235.540] SelectObject (hdc=0x90107bc, h=0x85000f) returned 0x1e0507b9
[0235.540] DeleteDC (hdc=0x90107bc) returned 1
[0235.540] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0235.540] EndPaint (hWnd=0x70122, lpPaint=0x53e2e4) returned 1
[0235.541] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.541] IsWindowUnicode (hWnd=0x202c6) returned 1
[0235.541] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.541] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.541] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.541] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0235.541] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0235.541] CreateCompatibleDC (hdc=0x8b010786) returned 0xb0107bc
[0235.541] SelectObject (hdc=0xb0107bc, h=0x1e0507b9) returned 0x85000f
[0235.541] GdipCreateFromHDC (hdc=0xb0107bc, graphics=0x53e300) returned 0x0
[0235.542] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0235.542] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0235.542] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0235.542] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.542] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0235.542] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0235.542] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0235.542] LocalFree (hMem=0x89ee08) returned 0x0
[0235.542] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.542] GdipCreateRegion (region=0x53e348) returned 0x0
[0235.542] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.542] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0235.542] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0235.542] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbfb0dbd) returned 0x0
[0235.542] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.542] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0235.543] GetCurrentObject (hdc=0xb0107bc, type=0x1) returned 0xb00017
[0235.543] GetCurrentObject (hdc=0xb0107bc, type=0x2) returned 0x900010
[0235.543] GetCurrentObject (hdc=0xb0107bc, type=0x7) returned 0x1e0507b9
[0235.543] GetCurrentObject (hdc=0xb0107bc, type=0x6) returned 0x8a01c2
[0235.543] SaveDC (hdc=0xb0107bc) returned 1
[0235.543] GetNearestColor (hdc=0xb0107bc, color=0xff) returned 0xff
[0235.543] GetNearestColor (hdc=0xb0107bc, color=0x55) returned 0x55
[0235.543] GetNearestColor (hdc=0xb0107bc, color=0x0) returned 0x0
[0235.543] GetNearestColor (hdc=0xb0107bc, color=0x55) returned 0x55
[0235.543] GetNearestColor (hdc=0xb0107bc, color=0x0) returned 0x0
[0235.543] GetNearestColor (hdc=0xb0107bc, color=0x8080ff) returned 0x8080ff
[0235.543] GetNearestColor (hdc=0xb0107bc, color=0x7373e5) returned 0x7373e5
[0235.543] GetNearestColor (hdc=0xb0107bc, color=0xe5) returned 0xe5
[0235.543] GetNearestColor (hdc=0xb0107bc, color=0x0) returned 0x0
[0235.544] RestoreDC (hdc=0xb0107bc, nSavedDC=-1) returned 1
[0235.544] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb0107bc) returned 0x0
[0235.544] IsAppThemed () returned 0x1
[0235.544] GetThemeAppProperties () returned 0x3
[0235.544] GetThemeAppProperties () returned 0x3
[0235.544] IsAppThemed () returned 0x1
[0235.544] GetThemeAppProperties () returned 0x3
[0235.544] GetThemeAppProperties () returned 0x3
[0235.544] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0235.544] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x240040c | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0235.544] IsAppThemed () returned 0x1
[0235.545] GetThemeAppProperties () returned 0x3
[0235.545] GetThemeAppProperties () returned 0x3
[0235.545] IsAppThemed () returned 0x1
[0235.545] GetThemeAppProperties () returned 0x3
[0235.545] GetThemeAppProperties () returned 0x3
[0235.545] GetFocus () returned 0x1d02d6
[0235.545] IsAppThemed () returned 0x1
[0235.545] GetThemeAppProperties () returned 0x3
[0235.545] GetThemeAppProperties () returned 0x3
[0235.545] IsAppThemed () returned 0x1
[0235.545] GetThemeAppProperties () returned 0x3
[0235.545] GetThemeAppProperties () returned 0x3
[0235.545] IsThemePartDefined () returned 0x1
[0235.545] IsAppThemed () returned 0x1
[0235.545] GetThemeAppProperties () returned 0x3
[0235.545] GetThemeAppProperties () returned 0x3
[0235.545] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0235.545] IsAppThemed () returned 0x1
[0235.545] GetThemeAppProperties () returned 0x3
[0235.545] GetThemeAppProperties () returned 0x3
[0235.545] IsAppThemed () returned 0x1
[0235.546] GetThemeAppProperties () returned 0x3
[0235.546] GetThemeAppProperties () returned 0x3
[0235.546] IsThemePartDefined () returned 0x1
[0235.546] GdipCreateRegion (region=0x53e070) returned 0x0
[0235.546] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.546] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0235.546] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.546] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0235.546] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.546] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0235.546] LocalFree (hMem=0x89eac0) returned 0x0
[0235.546] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.546] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0235.546] LocalFree (hMem=0x89eac0) returned 0x0
[0235.546] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.546] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0235.546] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0235.546] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0235.547] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.547] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0235.547] GetCurrentObject (hdc=0xb0107bc, type=0x1) returned 0xb00017
[0235.547] GetCurrentObject (hdc=0xb0107bc, type=0x2) returned 0x900010
[0235.547] GetCurrentObject (hdc=0xb0107bc, type=0x7) returned 0x1e0507b9
[0235.547] GetCurrentObject (hdc=0xb0107bc, type=0x6) returned 0x8a01c2
[0235.547] SaveDC (hdc=0xb0107bc) returned 1
[0235.547] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7004051e
[0235.547] GetClipRgn (hdc=0xb0107bc, hrgn=0x7004051e) returned 0
[0235.547] SelectClipRgn (hdc=0xb0107bc, hrgn=0x2f0407a1) returned 2
[0235.547] DeleteObject (ho=0x7004051e) returned 1
[0235.547] DeleteObject (ho=0x2f0407a1) returned 1
[0235.547] OffsetViewportOrgEx (in: hdc=0xb0107bc, x=0, y=0, lppt=0x2400abc | out: lppt=0x2400abc) returned 1
[0235.547] DrawThemeParentBackground () returned 0x0
[0235.548] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0235.548] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0235.548] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0235.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0235.548] GetSystemMetrics (nIndex=42) returned 0
[0235.548] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0235.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0235.548] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0235.548] GetCurrentObject (hdc=0xb0107bc, type=0x1) returned 0xb00017
[0235.548] GetCurrentObject (hdc=0xb0107bc, type=0x2) returned 0x900010
[0235.548] GetCurrentObject (hdc=0xb0107bc, type=0x7) returned 0x1e0507b9
[0235.548] GetCurrentObject (hdc=0xb0107bc, type=0x6) returned 0x8a01c2
[0235.548] SaveDC (hdc=0xb0107bc) returned 2
[0235.548] GetNearestColor (hdc=0xb0107bc, color=0xff) returned 0xff
[0235.549] CreateSolidBrush (color=0xff) returned 0x310078d
[0235.549] FillRect (hDC=0xb0107bc, lprc=0x53dad0, hbr=0x310078d) returned 1
[0235.549] DeleteObject (ho=0x310078d) returned 1
[0235.549] RestoreDC (hdc=0xb0107bc, nSavedDC=-1) returned 1
[0235.549] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0235.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0235.549] GetSystemMetrics (nIndex=42) returned 0
[0235.549] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0235.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0235.549] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0235.549] GetCurrentObject (hdc=0xb0107bc, type=0x1) returned 0xb00017
[0235.549] GetCurrentObject (hdc=0xb0107bc, type=0x2) returned 0x900010
[0235.549] GetCurrentObject (hdc=0xb0107bc, type=0x7) returned 0x1e0507b9
[0235.549] GetCurrentObject (hdc=0xb0107bc, type=0x6) returned 0x8a01c2
[0235.549] SaveDC (hdc=0xb0107bc) returned 2
[0235.550] GetNearestColor (hdc=0xb0107bc, color=0xff) returned 0xff
[0235.550] CreateSolidBrush (color=0xff) returned 0x410078d
[0235.550] FillRect (hDC=0xb0107bc, lprc=0x53da70, hbr=0x410078d) returned 1
[0235.550] DeleteObject (ho=0x410078d) returned 1
[0235.550] RestoreDC (hdc=0xb0107bc, nSavedDC=-1) returned 1
[0235.550] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0235.550] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0235.550] GetSystemMetrics (nIndex=42) returned 0
[0235.550] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0235.550] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0235.550] RestoreDC (hdc=0xb0107bc, nSavedDC=-1) returned 1
[0235.550] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb0107bc) returned 0x0
[0235.551] IsAppThemed () returned 0x1
[0235.551] GetThemeAppProperties () returned 0x3
[0235.551] GetThemeAppProperties () returned 0x3
[0235.551] IsAppThemed () returned 0x1
[0235.551] GetThemeAppProperties () returned 0x3
[0235.551] GetThemeAppProperties () returned 0x3
[0235.551] IsThemePartDefined () returned 0x1
[0235.551] GdipCreateRegion (region=0x53dff4) returned 0x0
[0235.551] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.551] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0235.551] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.551] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0235.551] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.551] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0235.551] LocalFree (hMem=0x89eac0) returned 0x0
[0235.551] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.551] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0235.551] LocalFree (hMem=0x89ec80) returned 0x0
[0235.552] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.552] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0235.552] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0235.552] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0235.552] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.552] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0235.552] GetCurrentObject (hdc=0xb0107bc, type=0x1) returned 0xb00017
[0235.552] GetCurrentObject (hdc=0xb0107bc, type=0x2) returned 0x900010
[0235.552] GetCurrentObject (hdc=0xb0107bc, type=0x7) returned 0x1e0507b9
[0235.552] GetCurrentObject (hdc=0xb0107bc, type=0x6) returned 0x8a01c2
[0235.552] SaveDC (hdc=0xb0107bc) returned 1
[0235.552] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x300407a1
[0235.552] GetClipRgn (hdc=0xb0107bc, hrgn=0x300407a1) returned 0
[0235.556] SelectClipRgn (hdc=0xb0107bc, hrgn=0x7204051e) returned 2
[0235.556] DeleteObject (ho=0x300407a1) returned 1
[0235.556] DeleteObject (ho=0x7204051e) returned 1
[0235.556] OffsetViewportOrgEx (in: hdc=0xb0107bc, x=0, y=0, lppt=0x2401320 | out: lppt=0x2401320) returned 1
[0235.556] IsAppThemed () returned 0x1
[0235.556] GetThemeAppProperties () returned 0x3
[0235.556] GetThemeAppProperties () returned 0x3
[0235.556] DrawThemeBackground () returned 0x0
[0235.556] RestoreDC (hdc=0xb0107bc, nSavedDC=-1) returned 1
[0235.556] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb0107bc) returned 0x0
[0235.557] GdipCreateRegion (region=0x53dff8) returned 0x0
[0235.557] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.557] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0235.557] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.557] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0235.557] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0235.557] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0235.557] LocalFree (hMem=0x89ee08) returned 0x0
[0235.557] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.557] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.557] LocalFree (hMem=0x89ec80) returned 0x0
[0235.557] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.557] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0235.557] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0235.557] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0235.557] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.557] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0235.557] GetCurrentObject (hdc=0xb0107bc, type=0x1) returned 0xb00017
[0235.558] GetCurrentObject (hdc=0xb0107bc, type=0x2) returned 0x900010
[0235.558] GetCurrentObject (hdc=0xb0107bc, type=0x7) returned 0x1e0507b9
[0235.558] GetCurrentObject (hdc=0xb0107bc, type=0x6) returned 0x8a01c2
[0235.558] SaveDC (hdc=0xb0107bc) returned 1
[0235.558] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7304051e
[0235.558] GetClipRgn (hdc=0xb0107bc, hrgn=0x7304051e) returned 0
[0235.558] SelectClipRgn (hdc=0xb0107bc, hrgn=0x310407a1) returned 2
[0235.558] DeleteObject (ho=0x7304051e) returned 1
[0235.558] DeleteObject (ho=0x310407a1) returned 1
[0235.558] OffsetViewportOrgEx (in: hdc=0xb0107bc, x=0, y=0, lppt=0x24015f4 | out: lppt=0x24015f4) returned 1
[0235.558] IsAppThemed () returned 0x1
[0235.558] GetThemeAppProperties () returned 0x3
[0235.558] GetThemeAppProperties () returned 0x3
[0235.558] GetThemeBackgroundContentRect () returned 0x0
[0235.558] RestoreDC (hdc=0xb0107bc, nSavedDC=-1) returned 1
[0235.558] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb0107bc) returned 0x0
[0235.558] IsAppThemed () returned 0x1
[0235.559] GetThemeAppProperties () returned 0x3
[0235.559] GetThemeAppProperties () returned 0x3
[0235.559] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0235.559] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0235.559] GetCurrentObject (hdc=0xb0107bc, type=0x1) returned 0xb00017
[0235.559] GetCurrentObject (hdc=0xb0107bc, type=0x2) returned 0x900010
[0235.559] GetCurrentObject (hdc=0xb0107bc, type=0x7) returned 0x1e0507b9
[0235.559] GetCurrentObject (hdc=0xb0107bc, type=0x6) returned 0x8a01c2
[0235.559] SaveDC (hdc=0xb0107bc) returned 1
[0235.559] GetTextAlign (hdc=0xb0107bc) returned 0x0
[0235.559] GetTextColor (hdc=0xb0107bc) returned 0x0
[0235.559] GetCurrentObject (hdc=0xb0107bc, type=0x6) returned 0x8a01c2
[0235.559] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0235.559] SelectObject (hdc=0xb0107bc, h=0x450a0799) returned 0x8a01c2
[0235.559] GetBkMode (hdc=0xb0107bc) returned 2
[0235.559] SetBkMode (hdc=0xb0107bc, mode=1) returned 2
[0235.560] DrawTextExW (in: hdc=0xb0107bc, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x2401994 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0235.560] DrawTextExW (in: hdc=0xb0107bc, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x2401994 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0235.560] RestoreDC (hdc=0xb0107bc, nSavedDC=-1) returned 1
[0235.560] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb0107bc) returned 0x0
[0235.560] GetFocus () returned 0x1d02d6
[0235.560] IsAppThemed () returned 0x1
[0235.561] GetThemeAppProperties () returned 0x3
[0235.561] GetThemeAppProperties () returned 0x3
[0235.561] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0235.561] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xb0107bc, x1=0, y1=0, rop=0xcc0020) returned 1
[0235.561] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb0107bc) returned 0x0
[0235.561] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0235.561] SelectObject (hdc=0xb0107bc, h=0x85000f) returned 0x1e0507b9
[0235.561] DeleteDC (hdc=0xb0107bc) returned 1
[0235.561] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0235.561] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0235.561] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.562] IsWindowUnicode (hWnd=0x700ea) returned 1
[0235.562] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.562] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.562] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.562] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.562] IsWindowUnicode (hWnd=0x700ea) returned 1
[0235.562] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.562] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.562] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.562] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x2a1, wParam=0x0, lParam=0x70027) returned 0x0
[0235.562] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0235.562] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0235.562] WaitMessage () returned 1
[0235.576] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0235.592] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0235.592] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0235.592] WaitMessage () returned 1
[0235.594] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0235.594] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0235.594] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0235.594] WaitMessage () returned 1
[0235.594] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0235.594] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0235.595] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0235.595] WaitMessage () returned 1
[0235.613] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.613] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x84, wParam=0x0, lParam=0x1900368) returned 0x1
[0235.613] IsWindowUnicode (hWnd=0x700ea) returned 1
[0235.613] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.613] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x84, wParam=0x0, lParam=0x1900368) returned 0x1
[0235.614] GetDlgItem (hDlg=0x701e2, nIDDlgItem=0) returned 0x0
[0235.614] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x210, wParam=0x201, lParam=0x130149) returned 0x0
[0235.614] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x21, wParam=0x701e2, lParam=0x2010001) returned 0x1
[0235.614] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x21, wParam=0x701e2, lParam=0x2010001) returned 0x1
[0235.614] SetCursor (hCursor=0x10003) returned 0x10003
[0235.614] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.614] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.614] GetKeyState (nVirtKey=1) returned -127
[0235.614] GetKeyState (nVirtKey=2) returned 0
[0235.614] GetKeyState (nVirtKey=4) returned 0
[0235.614] GetKeyState (nVirtKey=5) returned 0
[0235.614] GetKeyState (nVirtKey=6) returned 0
[0235.614] IsWindowVisible (hWnd=0x700ea) returned 1
[0235.614] IsWindowEnabled (hWnd=0x700ea) returned 1
[0235.614] SetFocus (hWnd=0x700ea) returned 0x1d02d6
[0235.619] GetFocus () returned 0x700ea
[0235.619] IsChild (hWndParent=0x701e2, hWnd=0x700ea) returned 1
[0235.619] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x8, wParam=0x700ea, lParam=0x0) returned 0x1
[0235.619] SendMessageW (hWnd=0x1d02d6, Msg=0x2111, wParam=0x20002d6, lParam=0x1d02d6) returned 0x0
[0235.620] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0235.622] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0235.623] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0235.623] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0235.623] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0235.623] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0235.625] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0235.625] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x7, wParam=0x1d02d6, lParam=0x0) returned 0x0
[0235.625] GetStockObject (i=5) returned 0x900015
[0235.626] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0235.626] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0xd, wParam=0x3, lParam=0x89e6c8) returned 0x2
[0235.626] GetDlgItem (hDlg=0x701e2, nIDDlgItem=458986) returned 0x700ea
[0235.626] SendMessageW (hWnd=0x700ea, Msg=0x202b, wParam=0x700ea, lParam=0x53de74) returned 0x0
[0235.626] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x202b, wParam=0x700ea, lParam=0x53de74) returned 0x0
[0235.626] InvalidateRect (hWnd=0x700ea, lpRect=0x0, bErase=0) returned 1
[0235.628] GetFocus () returned 0x700ea
[0235.628] GetFocus () returned 0x700ea
[0235.628] GetFocus () returned 0x700ea
[0235.628] GetKeyState (nVirtKey=1) returned -127
[0235.628] GetKeyState (nVirtKey=2) returned 0
[0235.628] GetKeyState (nVirtKey=4) returned 0
[0235.628] GetKeyState (nVirtKey=5) returned 0
[0235.628] GetKeyState (nVirtKey=6) returned 0
[0235.628] GetCapture () returned 0x0
[0235.628] SetCapture (hWnd=0x700ea) returned 0x0
[0235.628] GetKeyState (nVirtKey=1) returned -127
[0235.628] GetKeyState (nVirtKey=2) returned 0
[0235.628] GetKeyState (nVirtKey=4) returned 0
[0235.628] GetKeyState (nVirtKey=5) returned 0
[0235.628] GetKeyState (nVirtKey=6) returned 0
[0235.628] NotifyWinEvent (event=0x800a, hwnd=0x700ea, idObject=-4, idChild=0)
[0235.628] InvalidateRect (hWnd=0x700ea, lpRect=0x53e4c8, bErase=0) returned 1
[0235.628] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.629] IsWindowUnicode (hWnd=0x700ea) returned 1
[0235.629] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0235.629] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0235.629] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0235.629] MapWindowPoints (in: hWndFrom=0x700ea, hWndTo=0x0, lpPoints=0x2401bc0, cPoints=0x1 | out: lpPoints=0x2401bc0) returned 25756481
[0235.629] NotifyWinEvent (event=0x800a, hwnd=0x700ea, idObject=-4, idChild=0)
[0235.629] InvalidateRect (hWnd=0x700ea, lpRect=0x53e468, bErase=0) returned 1
[0235.629] UpdateWindow (hWnd=0x700ea) returned 1
[0235.629] BeginPaint (in: hWnd=0x700ea, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x8b010786
[0235.629] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0235.629] CreateCompatibleDC (hdc=0x8b010786) returned 0xf20107b3
[0235.629] SelectObject (hdc=0xf20107b3, h=0x1e0507b9) returned 0x85000f
[0235.630] GdipCreateFromHDC (hdc=0xf20107b3, graphics=0x53df98) returned 0x0
[0235.630] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0235.630] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0235.630] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0235.630] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.630] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0235.630] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.630] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0235.630] LocalFree (hMem=0x89ec80) returned 0x0
[0235.630] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.630] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0235.630] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.630] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0235.631] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0235.631] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbf90dbd) returned 0x0
[0235.631] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.631] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0235.631] GetCurrentObject (hdc=0xf20107b3, type=0x1) returned 0xb00017
[0235.631] GetCurrentObject (hdc=0xf20107b3, type=0x2) returned 0x900010
[0235.631] GetCurrentObject (hdc=0xf20107b3, type=0x7) returned 0x1e0507b9
[0235.631] GetCurrentObject (hdc=0xf20107b3, type=0x6) returned 0x8a01c2
[0235.631] SaveDC (hdc=0xf20107b3) returned 1
[0235.631] GetNearestColor (hdc=0xf20107b3, color=0xf0f0f0) returned 0xf0f0f0
[0235.631] GetNearestColor (hdc=0xf20107b3, color=0xa0a0a0) returned 0xa0a0a0
[0235.631] GetNearestColor (hdc=0xf20107b3, color=0x696969) returned 0x696969
[0235.632] GetNearestColor (hdc=0xf20107b3, color=0xa0a0a0) returned 0xa0a0a0
[0235.632] GetNearestColor (hdc=0xf20107b3, color=0x0) returned 0x0
[0235.632] GetNearestColor (hdc=0xf20107b3, color=0xffffff) returned 0xffffff
[0235.632] GetNearestColor (hdc=0xf20107b3, color=0xe5e5e5) returned 0xe5e5e5
[0235.632] GetNearestColor (hdc=0xf20107b3, color=0xd7d7d7) returned 0xd7d7d7
[0235.632] GetNearestColor (hdc=0xf20107b3, color=0x0) returned 0x0
[0235.632] RestoreDC (hdc=0xf20107b3, nSavedDC=-1) returned 1
[0235.632] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf20107b3) returned 0x0
[0235.632] IsAppThemed () returned 0x1
[0235.632] GetThemeAppProperties () returned 0x3
[0235.632] GetThemeAppProperties () returned 0x3
[0235.632] IsAppThemed () returned 0x1
[0235.632] GetThemeAppProperties () returned 0x3
[0235.632] GetThemeAppProperties () returned 0x3
[0235.633] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0235.633] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x2402334 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0235.633] IsAppThemed () returned 0x1
[0235.633] GetThemeAppProperties () returned 0x3
[0235.633] GetThemeAppProperties () returned 0x3
[0235.633] IsAppThemed () returned 0x1
[0235.633] GetThemeAppProperties () returned 0x3
[0235.633] GetThemeAppProperties () returned 0x3
[0235.633] IsAppThemed () returned 0x1
[0235.633] GetThemeAppProperties () returned 0x3
[0235.633] GetThemeAppProperties () returned 0x3
[0235.633] IsAppThemed () returned 0x1
[0235.633] GetThemeAppProperties () returned 0x3
[0235.633] GetThemeAppProperties () returned 0x3
[0235.633] IsThemePartDefined () returned 0x1
[0235.634] IsAppThemed () returned 0x1
[0235.634] GetThemeAppProperties () returned 0x3
[0235.634] GetThemeAppProperties () returned 0x3
[0235.634] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0235.634] IsAppThemed () returned 0x1
[0235.634] GetThemeAppProperties () returned 0x3
[0235.634] GetThemeAppProperties () returned 0x3
[0235.634] IsAppThemed () returned 0x1
[0235.634] GetThemeAppProperties () returned 0x3
[0235.634] GetThemeAppProperties () returned 0x3
[0235.634] IsThemePartDefined () returned 0x1
[0235.634] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0235.634] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.634] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0235.634] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.634] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0235.634] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.634] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.634] LocalFree (hMem=0x89ec80) returned 0x0
[0235.634] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.634] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.635] LocalFree (hMem=0x89ec80) returned 0x0
[0235.635] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.635] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0235.635] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0235.635] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0235.635] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.635] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0235.635] GetCurrentObject (hdc=0xf20107b3, type=0x1) returned 0xb00017
[0235.635] GetCurrentObject (hdc=0xf20107b3, type=0x2) returned 0x900010
[0235.635] GetCurrentObject (hdc=0xf20107b3, type=0x7) returned 0x1e0507b9
[0235.635] GetCurrentObject (hdc=0xf20107b3, type=0x6) returned 0x8a01c2
[0235.636] SaveDC (hdc=0xf20107b3) returned 1
[0235.636] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x320407a1
[0235.636] GetClipRgn (hdc=0xf20107b3, hrgn=0x320407a1) returned 0
[0235.636] SelectClipRgn (hdc=0xf20107b3, hrgn=0x7704051e) returned 2
[0235.636] DeleteObject (ho=0x320407a1) returned 1
[0235.636] DeleteObject (ho=0x7704051e) returned 1
[0235.636] OffsetViewportOrgEx (in: hdc=0xf20107b3, x=0, y=0, lppt=0x24029e4 | out: lppt=0x24029e4) returned 1
[0235.636] DrawThemeParentBackground () returned 0x0
[0235.636] GetWindowPlacement (in: hWnd=0x701e2, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0235.636] GetClientRect (in: hWnd=0x701e2, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0235.636] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.636] GetSystemMetrics (nIndex=42) returned 0
[0235.636] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0235.637] GetClientRect (in: hWnd=0x701e2, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0235.637] GetCurrentObject (hdc=0xf20107b3, type=0x1) returned 0xb00017
[0235.637] GetCurrentObject (hdc=0xf20107b3, type=0x2) returned 0x900010
[0235.637] GetCurrentObject (hdc=0xf20107b3, type=0x7) returned 0x1e0507b9
[0235.637] GetCurrentObject (hdc=0xf20107b3, type=0x6) returned 0x8a01c2
[0235.637] SaveDC (hdc=0xf20107b3) returned 2
[0235.637] GetNearestColor (hdc=0xf20107b3, color=0xf0f0f0) returned 0xf0f0f0
[0235.637] CreateSolidBrush (color=0xf0f0f0) returned 0x510078d
[0235.637] FillRect (hDC=0xf20107b3, lprc=0x53d760, hbr=0x510078d) returned 1
[0235.637] DeleteObject (ho=0x510078d) returned 1
[0235.637] RestoreDC (hdc=0xf20107b3, nSavedDC=-1) returned 1
[0235.637] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.638] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.638] GetSystemMetrics (nIndex=42) returned 0
[0235.638] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.638] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0235.638] GetClientRect (in: hWnd=0x701e2, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0235.638] GetCurrentObject (hdc=0xf20107b3, type=0x1) returned 0xb00017
[0235.638] GetCurrentObject (hdc=0xf20107b3, type=0x2) returned 0x900010
[0235.638] GetCurrentObject (hdc=0xf20107b3, type=0x7) returned 0x1e0507b9
[0235.638] GetCurrentObject (hdc=0xf20107b3, type=0x6) returned 0x8a01c2
[0235.638] SaveDC (hdc=0xf20107b3) returned 2
[0235.638] GetNearestColor (hdc=0xf20107b3, color=0xf0f0f0) returned 0xf0f0f0
[0235.638] CreateSolidBrush (color=0xf0f0f0) returned 0x610078d
[0235.638] FillRect (hDC=0xf20107b3, lprc=0x53d700, hbr=0x610078d) returned 1
[0235.638] DeleteObject (ho=0x610078d) returned 1
[0235.638] RestoreDC (hdc=0xf20107b3, nSavedDC=-1) returned 1
[0235.638] GetWindowTextLengthW (hWnd=0x701e2) returned 10
[0235.638] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0235.639] GetSystemMetrics (nIndex=42) returned 0
[0235.639] GetWindowTextW (in: hWnd=0x701e2, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0235.639] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0235.639] RestoreDC (hdc=0xf20107b3, nSavedDC=-1) returned 1
[0235.639] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf20107b3) returned 0x0
[0235.639] IsAppThemed () returned 0x1
[0235.639] GetThemeAppProperties () returned 0x3
[0235.639] GetThemeAppProperties () returned 0x3
[0235.639] IsAppThemed () returned 0x1
[0235.639] GetThemeAppProperties () returned 0x3
[0235.639] GetThemeAppProperties () returned 0x3
[0235.639] IsThemePartDefined () returned 0x1
[0235.639] GdipCreateRegion (region=0x53dc80) returned 0x0
[0235.639] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.639] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0235.640] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.640] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0235.640] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.640] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0235.640] LocalFree (hMem=0x89eac0) returned 0x0
[0235.640] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.640] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0235.640] LocalFree (hMem=0x89eac0) returned 0x0
[0235.640] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.640] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0235.640] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0235.640] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0235.640] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.640] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0235.640] GetCurrentObject (hdc=0xf20107b3, type=0x1) returned 0xb00017
[0235.640] GetCurrentObject (hdc=0xf20107b3, type=0x2) returned 0x900010
[0235.640] GetCurrentObject (hdc=0xf20107b3, type=0x7) returned 0x1e0507b9
[0235.640] GetCurrentObject (hdc=0xf20107b3, type=0x6) returned 0x8a01c2
[0235.641] SaveDC (hdc=0xf20107b3) returned 1
[0235.641] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7804051e
[0235.641] GetClipRgn (hdc=0xf20107b3, hrgn=0x7804051e) returned 0
[0235.641] SelectClipRgn (hdc=0xf20107b3, hrgn=0x340407a1) returned 2
[0235.641] DeleteObject (ho=0x7804051e) returned 1
[0235.641] DeleteObject (ho=0x340407a1) returned 1
[0235.641] OffsetViewportOrgEx (in: hdc=0xf20107b3, x=0, y=0, lppt=0x240326c | out: lppt=0x240326c) returned 1
[0235.641] IsAppThemed () returned 0x1
[0235.641] GetThemeAppProperties () returned 0x3
[0235.641] GetThemeAppProperties () returned 0x3
[0235.641] DrawThemeBackground () returned 0x0
[0235.641] RestoreDC (hdc=0xf20107b3, nSavedDC=-1) returned 1
[0235.641] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf20107b3) returned 0x0
[0235.641] GdipCreateRegion (region=0x53dc84) returned 0x0
[0235.641] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.642] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0235.642] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.642] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0235.642] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.642] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.642] LocalFree (hMem=0x89ec80) returned 0x0
[0235.642] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.642] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.642] LocalFree (hMem=0x89ec80) returned 0x0
[0235.642] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.642] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0235.642] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0235.642] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0235.642] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.642] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0235.642] GetCurrentObject (hdc=0xf20107b3, type=0x1) returned 0xb00017
[0235.643] GetCurrentObject (hdc=0xf20107b3, type=0x2) returned 0x900010
[0235.643] GetCurrentObject (hdc=0xf20107b3, type=0x7) returned 0x1e0507b9
[0235.643] GetCurrentObject (hdc=0xf20107b3, type=0x6) returned 0x8a01c2
[0235.643] SaveDC (hdc=0xf20107b3) returned 1
[0235.643] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x350407a1
[0235.643] GetClipRgn (hdc=0xf20107b3, hrgn=0x350407a1) returned 0
[0235.643] SelectClipRgn (hdc=0xf20107b3, hrgn=0x7904051e) returned 2
[0235.643] DeleteObject (ho=0x350407a1) returned 1
[0235.643] DeleteObject (ho=0x7904051e) returned 1
[0235.643] OffsetViewportOrgEx (in: hdc=0xf20107b3, x=0, y=0, lppt=0x2403540 | out: lppt=0x2403540) returned 1
[0235.643] IsAppThemed () returned 0x1
[0235.644] GetThemeAppProperties () returned 0x3
[0235.644] GetThemeAppProperties () returned 0x3
[0235.644] GetThemeBackgroundContentRect () returned 0x0
[0235.644] RestoreDC (hdc=0xf20107b3, nSavedDC=-1) returned 1
[0235.644] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf20107b3) returned 0x0
[0235.644] IsAppThemed () returned 0x1
[0235.644] GetThemeAppProperties () returned 0x3
[0235.644] GetThemeAppProperties () returned 0x3
[0235.644] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0235.644] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0235.644] GetCurrentObject (hdc=0xf20107b3, type=0x1) returned 0xb00017
[0235.644] GetCurrentObject (hdc=0xf20107b3, type=0x2) returned 0x900010
[0235.644] GetCurrentObject (hdc=0xf20107b3, type=0x7) returned 0x1e0507b9
[0235.644] GetCurrentObject (hdc=0xf20107b3, type=0x6) returned 0x8a01c2
[0235.644] SaveDC (hdc=0xf20107b3) returned 1
[0235.644] GetTextAlign (hdc=0xf20107b3) returned 0x0
[0235.645] GetTextColor (hdc=0xf20107b3) returned 0x0
[0235.645] GetCurrentObject (hdc=0xf20107b3, type=0x6) returned 0x8a01c2
[0235.645] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0235.645] SelectObject (hdc=0xf20107b3, h=0x730a066d) returned 0x8a01c2
[0235.645] GetBkMode (hdc=0xf20107b3) returned 2
[0235.645] SetBkMode (hdc=0xf20107b3, mode=1) returned 2
[0235.645] DrawTextExW (in: hdc=0xf20107b3, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x24038e0 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0235.645] DrawTextExW (in: hdc=0xf20107b3, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x24038e0 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0235.646] RestoreDC (hdc=0xf20107b3, nSavedDC=-1) returned 1
[0235.646] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf20107b3) returned 0x0
[0235.646] GetFocus () returned 0x700ea
[0235.646] IsAppThemed () returned 0x1
[0235.660] GetThemeAppProperties () returned 0x3
[0235.660] GetThemeAppProperties () returned 0x3
[0235.660] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0235.660] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0xf20107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0235.660] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf20107b3) returned 0x0
[0235.660] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0235.660] SelectObject (hdc=0xf20107b3, h=0x85000f) returned 0x1e0507b9
[0235.660] DeleteDC (hdc=0xf20107b3) returned 1
[0235.660] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0235.661] EndPaint (hWnd=0x700ea, lpPaint=0x53df7c) returned 1
[0235.661] MapWindowPoints (in: hWndFrom=0x700ea, hWndTo=0x0, lpPoints=0x24039dc, cPoints=0x1 | out: lpPoints=0x24039dc) returned 25756481
[0235.661] WindowFromPoint (Point=0x368) returned 0x700ea
[0235.661] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x84, wParam=0x0, lParam=0x1900368) returned 0x1
[0235.661] NotifyWinEvent (event=0x800a, hwnd=0x700ea, idObject=-4, idChild=0)
[0235.661] NotifyWinEvent (event=0x800c, hwnd=0x700ea, idObject=-4, idChild=0)
[0235.661] GetWindowTextLengthW (hWnd=0x1d02d6) returned 0
[0235.661] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0235.661] GetSystemMetrics (nIndex=42) returned 0
[0235.661] GetWindowTextW (in: hWnd=0x1d02d6, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0235.661] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0235.661] SendMessageW (hWnd=0x701e2, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0235.661] GetCapture () returned 0x700ea
[0235.662] ReleaseCapture () returned 1
[0235.662] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0235.662] PeekMessageW (lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0)
[0235.663] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x84, wParam=0x0, lParam=0x1900368) returned 0x1
[0235.664] IsWindow (hWnd=0x70036) returned 1
[0235.664] EnableWindow (hWnd=0x70036, bEnable=1)
[0235.664] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0235.665] IsWindow (hWnd=0x70036) returned 1
[0235.665] SetActiveWindow (hWnd=0x70036)
[0235.665] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x86, wParam=0x0, lParam=0x70036)
[0235.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0235.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0235.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0235.677] IsChild (hWndParent=0x701e2, hWnd=0x202c6) returned 0
[0235.677] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x700ea, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0235.677] GetCapture () returned 0x0
[0235.677] InvalidateRect (hWnd=0x700ea, lpRect=0x0, bErase=0) returned 1
[0235.691] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0235.691] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0235.691] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0235.698] IsChild (hWndParent=0x701e2, hWnd=0x202c6) returned 0
[0235.698] ShowWindow (hWnd=0x701e2, nCmdShow=0)
[0235.698] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0235.703] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x701e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0235.704] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d02d6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0235.704] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1302c0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0235.705] GetWindowTextLengthW (hWnd=0x22013e)
[0235.705] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0235.706] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x22013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0235.726] GetProcessWindowStation () returned 0x13c
[0235.726] GetActiveWindow () returned 0x70036
[0235.726] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0235.726] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0235.726] GetCurrentThreadId () returned 0x11d0
[0235.727] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4ffe, lParam=0x0) returned 1
[0235.727] IsWindowVisible (hWnd=0x70036) returned 1
[0235.727] IsWindowEnabled (hWnd=0x70036) returned 1
[0235.727] IsWindowVisible (hWnd=0x602b6) returned 0
[0235.727] IsWindowVisible (hWnd=0x901f8) returned 0
[0235.727] IsWindowVisible (hWnd=0x202d0) returned 0
[0235.727] IsWindowVisible (hWnd=0x202d4) returned 0
[0235.727] GetActiveWindow () returned 0x70036
[0235.727] GetFocus () returned 0x202c6
[0235.727] IsWindow (hWnd=0x70036) returned 1
[0235.727] EnableWindow (hWnd=0x70036, bEnable=0)
[0235.727] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0235.728] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0235.729] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0235.757] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x10105d6
[0235.757] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0235.758] CreateCompatibleDC (hdc=0x10105d6) returned 0xab01065f
[0235.758] SelectObject (hdc=0xab01065f, h=0x1e0507b9) returned 0x85000f
[0235.758] GdipCreateFromHDC (hdc=0xab01065f, graphics=0x53e108) returned 0x0
[0235.758] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0235.758] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0235.758] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0235.758] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.758] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0235.758] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0235.758] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0235.758] LocalFree (hMem=0x89ee08) returned 0x0
[0235.758] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.759] GdipCreateRegion (region=0x53e150) returned 0x0
[0235.759] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.759] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0235.759] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0235.759] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbf70dbd) returned 0x0
[0235.759] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.759] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0235.759] GetCurrentObject (hdc=0xab01065f, type=0x1) returned 0xb00017
[0235.759] GetCurrentObject (hdc=0xab01065f, type=0x2) returned 0x900010
[0235.759] GetCurrentObject (hdc=0xab01065f, type=0x7) returned 0x1e0507b9
[0235.759] GetCurrentObject (hdc=0xab01065f, type=0x6) returned 0x8a01c2
[0235.760] SaveDC (hdc=0xab01065f) returned 1
[0235.760] GetNearestColor (hdc=0xab01065f, color=0xff) returned 0xff
[0235.760] GetNearestColor (hdc=0xab01065f, color=0x55) returned 0x55
[0235.760] GetNearestColor (hdc=0xab01065f, color=0x0) returned 0x0
[0235.760] GetNearestColor (hdc=0xab01065f, color=0x55) returned 0x55
[0235.760] GetNearestColor (hdc=0xab01065f, color=0x0) returned 0x0
[0235.760] GetNearestColor (hdc=0xab01065f, color=0x8080ff) returned 0x8080ff
[0235.760] GetNearestColor (hdc=0xab01065f, color=0x7373e5) returned 0x7373e5
[0235.760] GetNearestColor (hdc=0xab01065f, color=0xe5) returned 0xe5
[0235.760] GetNearestColor (hdc=0xab01065f, color=0x0) returned 0x0
[0235.761] RestoreDC (hdc=0xab01065f, nSavedDC=-1) returned 1
[0235.761] GdipReleaseDC (graphics=0x5d92c30, hdc=0xab01065f) returned 0x0
[0235.761] IsAppThemed () returned 0x1
[0235.761] GetThemeAppProperties () returned 0x3
[0235.761] GetThemeAppProperties () returned 0x3
[0235.761] IsAppThemed () returned 0x1
[0235.761] GetThemeAppProperties () returned 0x3
[0235.761] GetThemeAppProperties () returned 0x3
[0235.761] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0235.761] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2404cd4 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0235.762] IsAppThemed () returned 0x1
[0235.762] GetThemeAppProperties () returned 0x3
[0235.762] GetThemeAppProperties () returned 0x3
[0235.762] IsAppThemed () returned 0x1
[0235.762] GetThemeAppProperties () returned 0x3
[0235.762] GetThemeAppProperties () returned 0x3
[0235.762] GetFocus () returned 0x80122
[0235.762] IsAppThemed () returned 0x1
[0235.762] GetThemeAppProperties () returned 0x3
[0235.762] GetThemeAppProperties () returned 0x3
[0235.762] IsAppThemed () returned 0x1
[0235.762] GetThemeAppProperties () returned 0x3
[0235.762] GetThemeAppProperties () returned 0x3
[0235.762] IsThemePartDefined () returned 0x1
[0235.762] IsAppThemed () returned 0x1
[0235.762] GetThemeAppProperties () returned 0x3
[0235.762] GetThemeAppProperties () returned 0x3
[0235.762] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0235.762] IsAppThemed () returned 0x1
[0235.762] GetThemeAppProperties () returned 0x3
[0235.762] GetThemeAppProperties () returned 0x3
[0235.762] IsAppThemed () returned 0x1
[0235.763] GetThemeAppProperties () returned 0x3
[0235.763] GetThemeAppProperties () returned 0x3
[0235.763] IsThemePartDefined () returned 0x1
[0235.763] GdipCreateRegion (region=0x53de78) returned 0x0
[0235.763] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.763] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0235.763] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.763] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0235.763] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0235.763] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.763] LocalFree (hMem=0x89ec80) returned 0x0
[0235.763] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0235.763] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0235.763] LocalFree (hMem=0x89eac0) returned 0x0
[0235.763] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.763] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0235.763] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0235.764] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0235.764] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.764] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0235.764] GetCurrentObject (hdc=0xab01065f, type=0x1) returned 0xb00017
[0235.764] GetCurrentObject (hdc=0xab01065f, type=0x2) returned 0x900010
[0235.764] GetCurrentObject (hdc=0xab01065f, type=0x7) returned 0x1e0507b9
[0235.764] GetCurrentObject (hdc=0xab01065f, type=0x6) returned 0x8a01c2
[0235.764] SaveDC (hdc=0xab01065f) returned 1
[0235.764] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a04051e
[0235.764] GetClipRgn (hdc=0xab01065f, hrgn=0x7a04051e) returned 0
[0235.764] SelectClipRgn (hdc=0xab01065f, hrgn=0x3b0407a1) returned 2
[0235.764] DeleteObject (ho=0x7a04051e) returned 1
[0235.764] DeleteObject (ho=0x3b0407a1) returned 1
[0235.764] OffsetViewportOrgEx (in: hdc=0xab01065f, x=0, y=0, lppt=0x2405384 | out: lppt=0x2405384) returned 1
[0235.764] DrawThemeParentBackground () returned 0x0
[0235.765] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0235.765] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0235.765] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0235.765] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0235.765] GetSystemMetrics (nIndex=42) returned 0
[0235.765] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0235.765] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0235.765] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0235.765] GetCurrentObject (hdc=0xab01065f, type=0x1) returned 0xb00017
[0235.765] GetCurrentObject (hdc=0xab01065f, type=0x2) returned 0x900010
[0235.765] GetCurrentObject (hdc=0xab01065f, type=0x7) returned 0x1e0507b9
[0235.765] GetCurrentObject (hdc=0xab01065f, type=0x6) returned 0x8a01c2
[0235.765] SaveDC (hdc=0xab01065f) returned 2
[0235.765] GetNearestColor (hdc=0xab01065f, color=0xff) returned 0xff
[0235.765] CreateSolidBrush (color=0xff) returned 0x710078d
[0235.766] FillRect (hDC=0xab01065f, lprc=0x53d8d8, hbr=0x710078d) returned 1
[0235.766] DeleteObject (ho=0x710078d) returned 1
[0235.766] RestoreDC (hdc=0xab01065f, nSavedDC=-1) returned 1
[0235.766] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0235.766] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0235.766] GetSystemMetrics (nIndex=42) returned 0
[0235.766] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0235.766] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0235.766] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0235.766] GetCurrentObject (hdc=0xab01065f, type=0x1) returned 0xb00017
[0235.766] GetCurrentObject (hdc=0xab01065f, type=0x2) returned 0x900010
[0235.766] GetCurrentObject (hdc=0xab01065f, type=0x7) returned 0x1e0507b9
[0235.766] GetCurrentObject (hdc=0xab01065f, type=0x6) returned 0x8a01c2
[0235.766] SaveDC (hdc=0xab01065f) returned 2
[0235.766] GetNearestColor (hdc=0xab01065f, color=0xff) returned 0xff
[0235.767] CreateSolidBrush (color=0xff) returned 0x810078d
[0235.767] FillRect (hDC=0xab01065f, lprc=0x53d878, hbr=0x810078d) returned 1
[0235.767] DeleteObject (ho=0x810078d) returned 1
[0235.767] RestoreDC (hdc=0xab01065f, nSavedDC=-1) returned 1
[0235.767] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0235.767] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0235.767] GetSystemMetrics (nIndex=42) returned 0
[0235.767] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0235.767] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0235.767] RestoreDC (hdc=0xab01065f, nSavedDC=-1) returned 1
[0235.767] GdipReleaseDC (graphics=0x5d92c30, hdc=0xab01065f) returned 0x0
[0235.767] IsAppThemed () returned 0x1
[0235.768] GetThemeAppProperties () returned 0x3
[0235.768] GetThemeAppProperties () returned 0x3
[0235.768] IsAppThemed () returned 0x1
[0235.768] GetThemeAppProperties () returned 0x3
[0235.768] GetThemeAppProperties () returned 0x3
[0235.768] IsThemePartDefined () returned 0x1
[0235.768] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0235.768] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.768] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0235.768] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0235.768] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0235.768] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0235.768] LocalFree (hMem=0x89eac0) returned 0x0
[0235.768] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0235.768] LocalFree (hMem=0x89ec80) returned 0x0
[0235.768] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0235.768] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0235.768] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0235.768] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0235.769] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.769] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0235.769] GetCurrentObject (hdc=0xab01065f, type=0x1) returned 0xb00017
[0235.769] GetCurrentObject (hdc=0xab01065f, type=0x2) returned 0x900010
[0235.769] GetCurrentObject (hdc=0xab01065f, type=0x7) returned 0x1e0507b9
[0235.769] GetCurrentObject (hdc=0xab01065f, type=0x6) returned 0x8a01c2
[0235.769] SaveDC (hdc=0xab01065f) returned 1
[0235.769] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3c0407a1
[0235.769] GetClipRgn (hdc=0xab01065f, hrgn=0x3c0407a1) returned 0
[0235.769] SelectClipRgn (hdc=0xab01065f, hrgn=0x7c04051e) returned 2
[0235.769] DeleteObject (ho=0x3c0407a1) returned 1
[0235.769] DeleteObject (ho=0x7c04051e) returned 1
[0235.769] OffsetViewportOrgEx (in: hdc=0xab01065f, x=0, y=0, lppt=0x2405be8 | out: lppt=0x2405be8) returned 1
[0235.769] IsAppThemed () returned 0x1
[0235.769] GetThemeAppProperties () returned 0x3
[0235.769] GetThemeAppProperties () returned 0x3
[0235.769] DrawThemeBackground () returned 0x0
[0235.769] RestoreDC (hdc=0xab01065f, nSavedDC=-1) returned 1
[0235.770] GdipReleaseDC (graphics=0x5d92c30, hdc=0xab01065f) returned 0x0
[0235.770] GdipCreateRegion (region=0x53de00) returned 0x0
[0235.770] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0235.770] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0235.770] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0235.770] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0235.770] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0235.770] LocalFree (hMem=0x89ec80) returned 0x0
[0235.770] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0235.770] LocalFree (hMem=0x89eee8) returned 0x0
[0235.770] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0235.770] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0235.770] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0235.770] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0235.770] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0235.770] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0235.770] GetCurrentObject (hdc=0xab01065f, type=0x1) returned 0xb00017
[0235.770] GetCurrentObject (hdc=0xab01065f, type=0x2) returned 0x900010
[0235.770] GetCurrentObject (hdc=0xab01065f, type=0x7) returned 0x1e0507b9
[0235.771] GetCurrentObject (hdc=0xab01065f, type=0x6) returned 0x8a01c2
[0235.771] SaveDC (hdc=0xab01065f) returned 1
[0235.771] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d04051e
[0235.771] GetClipRgn (hdc=0xab01065f, hrgn=0x7d04051e) returned 0
[0235.771] SelectClipRgn (hdc=0xab01065f, hrgn=0x3d0407a1) returned 2
[0235.771] DeleteObject (ho=0x7d04051e) returned 1
[0235.771] DeleteObject (ho=0x3d0407a1) returned 1
[0235.771] OffsetViewportOrgEx (in: hdc=0xab01065f, x=0, y=0, lppt=0x2405ebc | out: lppt=0x2405ebc) returned 1
[0235.771] IsAppThemed () returned 0x1
[0235.780] GetThemeAppProperties () returned 0x3
[0235.780] GetThemeAppProperties () returned 0x3
[0235.780] GetThemeBackgroundContentRect () returned 0x0
[0235.780] RestoreDC (hdc=0xab01065f, nSavedDC=-1) returned 1
[0235.781] GdipReleaseDC (graphics=0x5d92c30, hdc=0xab01065f) returned 0x0
[0235.781] IsAppThemed () returned 0x1
[0235.781] GetThemeAppProperties () returned 0x3
[0235.781] GetThemeAppProperties () returned 0x3
[0235.781] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0235.781] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0235.781] GetCurrentObject (hdc=0xab01065f, type=0x1) returned 0xb00017
[0235.781] GetCurrentObject (hdc=0xab01065f, type=0x2) returned 0x900010
[0235.781] GetCurrentObject (hdc=0xab01065f, type=0x7) returned 0x1e0507b9
[0235.781] GetCurrentObject (hdc=0xab01065f, type=0x6) returned 0x8a01c2
[0235.781] SaveDC (hdc=0xab01065f) returned 1
[0235.781] GetTextAlign (hdc=0xab01065f) returned 0x0
[0235.781] GetTextColor (hdc=0xab01065f) returned 0x0
[0235.781] GetCurrentObject (hdc=0xab01065f, type=0x6) returned 0x8a01c2
[0235.782] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0235.782] SelectObject (hdc=0xab01065f, h=0x450a0799) returned 0x8a01c2
[0235.782] GetBkMode (hdc=0xab01065f) returned 2
[0235.782] SetBkMode (hdc=0xab01065f, mode=1) returned 2
[0235.782] DrawTextExW (in: hdc=0xab01065f, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x240625c | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0235.782] DrawTextExW (in: hdc=0xab01065f, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x240625c | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0235.783] RestoreDC (hdc=0xab01065f, nSavedDC=-1) returned 1
[0235.783] GdipReleaseDC (graphics=0x5d92c30, hdc=0xab01065f) returned 0x0
[0235.783] GetFocus () returned 0x80122
[0235.783] IsAppThemed () returned 0x1
[0235.783] GetThemeAppProperties () returned 0x3
[0235.783] GetThemeAppProperties () returned 0x3
[0235.783] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0235.783] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xab01065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0235.783] GdipReleaseDC (graphics=0x5d92c30, hdc=0xab01065f) returned 0x0
[0235.783] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0235.783] SelectObject (hdc=0xab01065f, h=0x85000f) returned 0x1e0507b9
[0235.783] DeleteDC (hdc=0xab01065f) returned 1
[0235.783] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0235.784] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0236.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0236.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0236.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x801e2) returned 0x1
[0236.134] GetFocus () returned 0x801e2
[0236.135] GetAncestor (hwnd=0x801e2, gaFlags=0x1) returned 0x10010
[0236.135] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0236.135] SetFocus (hWnd=0x202c6) returned 0x0
[0236.138] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0236.140] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0236.140] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0236.140] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0236.140] GetFocus () returned 0x70036
[0236.140] SetFocus (hWnd=0x202c6) returned 0x0
[0236.160] IsWindow (hWnd=0x70036) returned 1
[0236.160] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0236.161] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0236.161] IsWindow (hWnd=0x70036) returned 1
[0236.161] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0236.161] IsWindow (hWnd=0x202c6) returned 1
[0236.161] SetFocus (hWnd=0x202c6) returned 0x70036
[0236.161] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0236.177] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0236.188] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0236.190] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0236.190] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0236.190] GetStockObject (i=5) returned 0x900015
[0236.190] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0236.190] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8dad30) returned 0x7
[0236.190] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0236.190] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0236.190] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0236.191] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0236.192] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0236.192] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0236.192] GetFocus () returned 0x202c6
[0236.193] GetCapture () returned 0x0
[0236.193] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.196] IsWindowUnicode (hWnd=0x202c6) returned 1
[0236.197] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.197] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.197] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.197] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.198] IsWindowUnicode (hWnd=0x202c6) returned 1
[0236.198] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.198] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.198] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.198] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0236.198] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0236.198] CreateCompatibleDC (hdc=0xf0105ee) returned 0xf501079c
[0236.198] SelectObject (hdc=0xf501079c, h=0x1e0507b9) returned 0x85000f
[0236.199] GdipCreateFromHDC (hdc=0xf501079c, graphics=0x53e958) returned 0x0
[0236.199] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0236.199] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0236.199] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0236.199] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0236.199] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0236.199] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0236.199] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0236.199] LocalFree (hMem=0x89ee40) returned 0x0
[0236.199] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0236.199] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0236.200] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0236.200] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0236.200] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0236.200] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbf50dbd) returned 0x0
[0236.200] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0236.200] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0236.200] GetCurrentObject (hdc=0xf501079c, type=0x1) returned 0xb00017
[0236.200] GetCurrentObject (hdc=0xf501079c, type=0x2) returned 0x900010
[0236.200] GetCurrentObject (hdc=0xf501079c, type=0x7) returned 0x1e0507b9
[0236.200] GetCurrentObject (hdc=0xf501079c, type=0x6) returned 0x8a01c2
[0236.200] SaveDC (hdc=0xf501079c) returned 1
[0236.200] GetNearestColor (hdc=0xf501079c, color=0xff) returned 0xff
[0236.201] GetNearestColor (hdc=0xf501079c, color=0x55) returned 0x55
[0236.201] GetNearestColor (hdc=0xf501079c, color=0x0) returned 0x0
[0236.201] GetNearestColor (hdc=0xf501079c, color=0x55) returned 0x55
[0236.201] GetNearestColor (hdc=0xf501079c, color=0x0) returned 0x0
[0236.201] GetNearestColor (hdc=0xf501079c, color=0x8080ff) returned 0x8080ff
[0236.201] GetNearestColor (hdc=0xf501079c, color=0x7373e5) returned 0x7373e5
[0236.201] GetNearestColor (hdc=0xf501079c, color=0xe5) returned 0xe5
[0236.201] GetNearestColor (hdc=0xf501079c, color=0x0) returned 0x0
[0236.201] RestoreDC (hdc=0xf501079c, nSavedDC=-1) returned 1
[0236.201] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf501079c) returned 0x0
[0236.201] IsAppThemed () returned 0x1
[0236.202] GetThemeAppProperties () returned 0x3
[0236.202] GetThemeAppProperties () returned 0x3
[0236.202] IsAppThemed () returned 0x1
[0236.202] GetThemeAppProperties () returned 0x3
[0236.202] GetThemeAppProperties () returned 0x3
[0236.202] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2406ab8 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0236.202] IsAppThemed () returned 0x1
[0236.202] GetThemeAppProperties () returned 0x3
[0236.202] GetThemeAppProperties () returned 0x3
[0236.203] IsAppThemed () returned 0x1
[0236.203] GetThemeAppProperties () returned 0x3
[0236.203] GetThemeAppProperties () returned 0x3
[0236.203] GetFocus () returned 0x202c6
[0236.203] IsAppThemed () returned 0x1
[0236.203] GetThemeAppProperties () returned 0x3
[0236.203] GetThemeAppProperties () returned 0x3
[0236.203] IsAppThemed () returned 0x1
[0236.203] GetThemeAppProperties () returned 0x3
[0236.203] GetThemeAppProperties () returned 0x3
[0236.203] IsThemePartDefined () returned 0x1
[0236.203] IsAppThemed () returned 0x1
[0236.203] GetThemeAppProperties () returned 0x3
[0236.203] GetThemeAppProperties () returned 0x3
[0236.203] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0236.203] IsAppThemed () returned 0x1
[0236.203] GetThemeAppProperties () returned 0x3
[0236.203] GetThemeAppProperties () returned 0x3
[0236.203] IsAppThemed () returned 0x1
[0236.204] GetThemeAppProperties () returned 0x3
[0236.204] GetThemeAppProperties () returned 0x3
[0236.204] IsThemePartDefined () returned 0x1
[0236.204] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0236.204] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0236.204] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0236.204] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0236.204] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0236.204] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0236.204] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0236.204] LocalFree (hMem=0x89ea88) returned 0x0
[0236.204] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0236.204] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0236.204] LocalFree (hMem=0x89ee40) returned 0x0
[0236.204] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0236.204] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0236.205] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0236.205] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0236.205] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0236.205] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0236.205] GetCurrentObject (hdc=0xf501079c, type=0x1) returned 0xb00017
[0236.205] GetCurrentObject (hdc=0xf501079c, type=0x2) returned 0x900010
[0236.205] GetCurrentObject (hdc=0xf501079c, type=0x7) returned 0x1e0507b9
[0236.205] GetCurrentObject (hdc=0xf501079c, type=0x6) returned 0x8a01c2
[0236.205] SaveDC (hdc=0xf501079c) returned 1
[0236.205] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf304053e
[0236.205] GetClipRgn (hdc=0xf501079c, hrgn=0xf304053e) returned 0
[0236.205] SelectClipRgn (hdc=0xf501079c, hrgn=0x4b0407a1) returned 2
[0236.205] DeleteObject (ho=0xf304053e) returned 1
[0236.205] DeleteObject (ho=0x4b0407a1) returned 1
[0236.205] OffsetViewportOrgEx (in: hdc=0xf501079c, x=0, y=0, lppt=0x2407168 | out: lppt=0x2407168) returned 1
[0236.206] DrawThemeParentBackground () returned 0x0
[0236.206] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0236.206] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0236.206] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0236.206] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0236.206] GetSystemMetrics (nIndex=42) returned 0
[0236.206] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0236.206] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0236.206] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0236.206] GetCurrentObject (hdc=0xf501079c, type=0x1) returned 0xb00017
[0236.206] GetCurrentObject (hdc=0xf501079c, type=0x2) returned 0x900010
[0236.206] GetCurrentObject (hdc=0xf501079c, type=0x7) returned 0x1e0507b9
[0236.206] GetCurrentObject (hdc=0xf501079c, type=0x6) returned 0x8a01c2
[0236.207] SaveDC (hdc=0xf501079c) returned 2
[0236.207] GetNearestColor (hdc=0xf501079c, color=0xff) returned 0xff
[0236.207] CreateSolidBrush (color=0xff) returned 0xa10078d
[0236.207] FillRect (hDC=0xf501079c, lprc=0x53e128, hbr=0xa10078d) returned 1
[0236.207] DeleteObject (ho=0xa10078d) returned 1
[0236.207] RestoreDC (hdc=0xf501079c, nSavedDC=-1) returned 1
[0236.207] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0236.207] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0236.207] GetSystemMetrics (nIndex=42) returned 0
[0236.207] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0236.207] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0236.207] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0236.207] GetCurrentObject (hdc=0xf501079c, type=0x1) returned 0xb00017
[0236.207] GetCurrentObject (hdc=0xf501079c, type=0x2) returned 0x900010
[0236.208] GetCurrentObject (hdc=0xf501079c, type=0x7) returned 0x1e0507b9
[0236.208] GetCurrentObject (hdc=0xf501079c, type=0x6) returned 0x8a01c2
[0236.208] SaveDC (hdc=0xf501079c) returned 2
[0236.208] GetNearestColor (hdc=0xf501079c, color=0xff) returned 0xff
[0236.208] CreateSolidBrush (color=0xff) returned 0xb10078d
[0236.208] FillRect (hDC=0xf501079c, lprc=0x53e0c8, hbr=0xb10078d) returned 1
[0236.208] DeleteObject (ho=0xb10078d) returned 1
[0236.208] RestoreDC (hdc=0xf501079c, nSavedDC=-1) returned 1
[0236.208] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0236.208] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0236.208] GetSystemMetrics (nIndex=42) returned 0
[0236.208] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0236.208] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0236.212] RestoreDC (hdc=0xf501079c, nSavedDC=-1) returned 1
[0236.212] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf501079c) returned 0x0
[0236.212] IsAppThemed () returned 0x1
[0236.213] GetThemeAppProperties () returned 0x3
[0236.213] GetThemeAppProperties () returned 0x3
[0236.213] IsAppThemed () returned 0x1
[0236.213] GetThemeAppProperties () returned 0x3
[0236.213] GetThemeAppProperties () returned 0x3
[0236.213] IsThemePartDefined () returned 0x1
[0236.213] GdipCreateRegion (region=0x53e64c) returned 0x0
[0236.213] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0236.213] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0236.213] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0236.213] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0236.213] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0236.213] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0236.213] LocalFree (hMem=0x89ec80) returned 0x0
[0236.213] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0236.213] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0236.214] LocalFree (hMem=0x89ea88) returned 0x0
[0236.214] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0236.214] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0236.214] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0236.214] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0236.214] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0236.214] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0236.214] GetCurrentObject (hdc=0xf501079c, type=0x1) returned 0xb00017
[0236.214] GetCurrentObject (hdc=0xf501079c, type=0x2) returned 0x900010
[0236.214] GetCurrentObject (hdc=0xf501079c, type=0x7) returned 0x1e0507b9
[0236.214] GetCurrentObject (hdc=0xf501079c, type=0x6) returned 0x8a01c2
[0236.214] SaveDC (hdc=0xf501079c) returned 1
[0236.214] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c0407a1
[0236.215] GetClipRgn (hdc=0xf501079c, hrgn=0x4c0407a1) returned 0
[0236.215] SelectClipRgn (hdc=0xf501079c, hrgn=0xf504053e) returned 2
[0236.215] DeleteObject (ho=0x4c0407a1) returned 1
[0236.215] DeleteObject (ho=0xf504053e) returned 1
[0236.215] OffsetViewportOrgEx (in: hdc=0xf501079c, x=0, y=0, lppt=0x24079cc | out: lppt=0x24079cc) returned 1
[0236.215] IsAppThemed () returned 0x1
[0236.215] GetThemeAppProperties () returned 0x3
[0236.215] GetThemeAppProperties () returned 0x3
[0236.215] DrawThemeBackground () returned 0x0
[0236.215] RestoreDC (hdc=0xf501079c, nSavedDC=-1) returned 1
[0236.215] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf501079c) returned 0x0
[0236.215] GdipCreateRegion (region=0x53e650) returned 0x0
[0236.216] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0236.216] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0236.216] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0236.216] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0236.216] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0236.216] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0236.216] LocalFree (hMem=0x89ea88) returned 0x0
[0236.216] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0236.216] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0236.216] LocalFree (hMem=0x89ea88) returned 0x0
[0236.216] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0236.216] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0236.216] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0236.216] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0236.216] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0236.217] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0236.217] GetCurrentObject (hdc=0xf501079c, type=0x1) returned 0xb00017
[0236.217] GetCurrentObject (hdc=0xf501079c, type=0x2) returned 0x900010
[0236.217] GetCurrentObject (hdc=0xf501079c, type=0x7) returned 0x1e0507b9
[0236.217] GetCurrentObject (hdc=0xf501079c, type=0x6) returned 0x8a01c2
[0236.217] SaveDC (hdc=0xf501079c) returned 1
[0236.217] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf604053e
[0236.217] GetClipRgn (hdc=0xf501079c, hrgn=0xf604053e) returned 0
[0236.217] SelectClipRgn (hdc=0xf501079c, hrgn=0x4d0407a1) returned 2
[0236.217] DeleteObject (ho=0xf604053e) returned 1
[0236.217] DeleteObject (ho=0x4d0407a1) returned 1
[0236.217] OffsetViewportOrgEx (in: hdc=0xf501079c, x=0, y=0, lppt=0x2407ca0 | out: lppt=0x2407ca0) returned 1
[0236.217] IsAppThemed () returned 0x1
[0236.218] GetThemeAppProperties () returned 0x3
[0236.218] GetThemeAppProperties () returned 0x3
[0236.218] GetThemeBackgroundContentRect () returned 0x0
[0236.218] RestoreDC (hdc=0xf501079c, nSavedDC=-1) returned 1
[0236.218] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf501079c) returned 0x0
[0236.218] IsAppThemed () returned 0x1
[0236.218] GetThemeAppProperties () returned 0x3
[0236.218] GetThemeAppProperties () returned 0x3
[0236.218] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0236.218] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0236.218] GetCurrentObject (hdc=0xf501079c, type=0x1) returned 0xb00017
[0236.218] GetCurrentObject (hdc=0xf501079c, type=0x2) returned 0x900010
[0236.218] GetCurrentObject (hdc=0xf501079c, type=0x7) returned 0x1e0507b9
[0236.218] GetCurrentObject (hdc=0xf501079c, type=0x6) returned 0x8a01c2
[0236.218] SaveDC (hdc=0xf501079c) returned 1
[0236.218] GetTextAlign (hdc=0xf501079c) returned 0x0
[0236.218] GetTextColor (hdc=0xf501079c) returned 0x0
[0236.219] GetCurrentObject (hdc=0xf501079c, type=0x6) returned 0x8a01c2
[0236.219] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0236.219] SelectObject (hdc=0xf501079c, h=0x450a0799) returned 0x8a01c2
[0236.219] GetBkMode (hdc=0xf501079c) returned 2
[0236.219] SetBkMode (hdc=0xf501079c, mode=1) returned 2
[0236.219] DrawTextExW (in: hdc=0xf501079c, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2408040 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0236.219] DrawTextExW (in: hdc=0xf501079c, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2408040 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0236.220] RestoreDC (hdc=0xf501079c, nSavedDC=-1) returned 1
[0236.220] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf501079c) returned 0x0
[0236.220] GetFocus () returned 0x202c6
[0236.220] IsAppThemed () returned 0x1
[0236.220] GetThemeAppProperties () returned 0x3
[0236.220] GetThemeAppProperties () returned 0x3
[0236.220] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0236.220] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xf501079c, x1=0, y1=0, rop=0xcc0020) returned 1
[0236.231] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf501079c) returned 0x0
[0236.231] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0236.231] SelectObject (hdc=0xf501079c, h=0x85000f) returned 0x1e0507b9
[0236.232] DeleteDC (hdc=0xf501079c) returned 1
[0236.232] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0236.232] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0236.232] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.232] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.232] WaitMessage () returned 1
[0236.232] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.232] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.232] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.232] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.233] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.234] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.234] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.234] WaitMessage () returned 1
[0236.249] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.249] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.249] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.249] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.249] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.250] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.250] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.250] WaitMessage () returned 1
[0236.251] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.252] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.252] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.252] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.252] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.253] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.253] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.253] WaitMessage () returned 1
[0236.254] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.254] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.254] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.254] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.254] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.259] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.260] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.260] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.260] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.260] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.260] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.260] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.260] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.260] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.260] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.260] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.261] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.261] WaitMessage () returned 1
[0236.261] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.261] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.261] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.262] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.262] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.263] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.263] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.263] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.263] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.263] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.264] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.264] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.264] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.264] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.264] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.264] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.265] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.265] WaitMessage () returned 1
[0236.265] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.265] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.265] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.265] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.265] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.267] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.267] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.267] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.267] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.267] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.267] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.267] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.267] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.267] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.268] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.268] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.268] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.268] WaitMessage () returned 1
[0236.268] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.269] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.269] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.269] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.269] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.270] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.271] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.271] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.271] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.271] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.271] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.271] IsWindowUnicode (hWnd=0x102dc) returned 1
[0236.271] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.275] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.275] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.275] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.276] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.276] WaitMessage () returned 1
[0236.399] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.399] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.399] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.399] DispatchMessageA (lpMsg=0x53eef8) returned 0x7ece
[0236.399] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.399] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.399] WaitMessage () returned 1
[0236.522] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.522] IsWindowUnicode (hWnd=0x202d0) returned 1
[0236.522] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0236.522] TranslateMessage (lpMsg=0x53eef8) returned 0
[0236.522] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0236.522] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.523] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0236.523] WaitMessage () returned 1
[0237.397] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0237.397] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0237.397] TranslateMessage (lpMsg=0x53eef8) returned 0
[0237.397] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0237.399] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0237.399] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0237.399] WaitMessage () returned 1
[0237.919] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0237.919] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a2024f) returned 0x1
[0237.920] IsWindowUnicode (hWnd=0x202c6) returned 1
[0237.920] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0237.920] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a2024f) returned 0x1
[0237.920] SetCursor (hCursor=0x10003) returned 0x10003
[0237.921] TranslateMessage (lpMsg=0x53eef8) returned 0
[0237.921] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0237.921] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0237.921] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0237.921] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0237.921] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0237.921] GetKeyState (nVirtKey=1) returned 0
[0237.922] GetKeyState (nVirtKey=2) returned 0
[0237.922] GetKeyState (nVirtKey=4) returned 0
[0237.922] GetKeyState (nVirtKey=5) returned 0
[0237.922] GetKeyState (nVirtKey=6) returned 0
[0237.922] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0237.922] IsWindowUnicode (hWnd=0x202c6) returned 1
[0237.922] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0237.922] TranslateMessage (lpMsg=0x53eef8) returned 0
[0237.922] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0237.923] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0237.923] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0237.923] CreateCompatibleDC (hdc=0xf0105ee) returned 0x490107aa
[0237.923] SelectObject (hdc=0x490107aa, h=0x1e0507b9) returned 0x85000f
[0237.923] GdipCreateFromHDC (hdc=0x490107aa, graphics=0x53e958) returned 0x0
[0237.924] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0237.924] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0237.924] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0237.924] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0237.924] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0237.924] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0237.925] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0237.925] LocalFree (hMem=0x89ea88) returned 0x0
[0237.925] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0237.925] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0237.925] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0237.925] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0237.925] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0237.925] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbf30dbd) returned 0x0
[0237.925] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0237.926] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0237.926] GetCurrentObject (hdc=0x490107aa, type=0x1) returned 0xb00017
[0237.926] GetCurrentObject (hdc=0x490107aa, type=0x2) returned 0x900010
[0237.926] GetCurrentObject (hdc=0x490107aa, type=0x7) returned 0x1e0507b9
[0237.926] GetCurrentObject (hdc=0x490107aa, type=0x6) returned 0x8a01c2
[0237.926] SaveDC (hdc=0x490107aa) returned 1
[0237.926] GetNearestColor (hdc=0x490107aa, color=0xff) returned 0xff
[0237.926] GetNearestColor (hdc=0x490107aa, color=0x55) returned 0x55
[0237.926] GetNearestColor (hdc=0x490107aa, color=0x0) returned 0x0
[0237.927] GetNearestColor (hdc=0x490107aa, color=0x55) returned 0x55
[0237.927] GetNearestColor (hdc=0x490107aa, color=0x0) returned 0x0
[0237.927] GetNearestColor (hdc=0x490107aa, color=0x8080ff) returned 0x8080ff
[0237.927] GetNearestColor (hdc=0x490107aa, color=0x7373e5) returned 0x7373e5
[0237.927] GetNearestColor (hdc=0x490107aa, color=0xe5) returned 0xe5
[0237.927] GetNearestColor (hdc=0x490107aa, color=0x0) returned 0x0
[0237.927] RestoreDC (hdc=0x490107aa, nSavedDC=-1) returned 1
[0237.927] GdipReleaseDC (graphics=0x5d92c30, hdc=0x490107aa) returned 0x0
[0237.928] IsAppThemed () returned 0x1
[0237.928] GetThemeAppProperties () returned 0x3
[0237.928] GetThemeAppProperties () returned 0x3
[0237.928] IsAppThemed () returned 0x1
[0237.928] GetThemeAppProperties () returned 0x3
[0237.928] GetThemeAppProperties () returned 0x3
[0237.928] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x24089d4 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0237.929] IsAppThemed () returned 0x1
[0237.929] GetThemeAppProperties () returned 0x3
[0237.929] GetThemeAppProperties () returned 0x3
[0237.929] IsAppThemed () returned 0x1
[0237.929] GetThemeAppProperties () returned 0x3
[0237.929] GetThemeAppProperties () returned 0x3
[0237.929] IsAppThemed () returned 0x1
[0237.929] GetThemeAppProperties () returned 0x3
[0237.929] GetThemeAppProperties () returned 0x3
[0237.929] IsAppThemed () returned 0x1
[0237.929] GetThemeAppProperties () returned 0x3
[0237.929] GetThemeAppProperties () returned 0x3
[0237.929] IsThemePartDefined () returned 0x1
[0237.929] IsAppThemed () returned 0x1
[0237.930] GetThemeAppProperties () returned 0x3
[0237.930] GetThemeAppProperties () returned 0x3
[0237.930] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0237.930] IsAppThemed () returned 0x1
[0237.930] GetThemeAppProperties () returned 0x3
[0237.930] GetThemeAppProperties () returned 0x3
[0237.930] IsAppThemed () returned 0x1
[0237.930] GetThemeAppProperties () returned 0x3
[0237.930] GetThemeAppProperties () returned 0x3
[0237.930] IsThemePartDefined () returned 0x1
[0237.930] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0237.930] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0237.930] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0237.930] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0237.930] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0237.930] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0237.930] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0237.930] LocalFree (hMem=0x89ee08) returned 0x0
[0237.930] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0237.931] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0237.931] LocalFree (hMem=0x89ec80) returned 0x0
[0237.931] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0237.931] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0237.931] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0237.931] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0237.931] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0237.931] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0237.931] GetCurrentObject (hdc=0x490107aa, type=0x1) returned 0xb00017
[0237.931] GetCurrentObject (hdc=0x490107aa, type=0x2) returned 0x900010
[0237.931] GetCurrentObject (hdc=0x490107aa, type=0x7) returned 0x1e0507b9
[0237.931] GetCurrentObject (hdc=0x490107aa, type=0x6) returned 0x8a01c2
[0237.931] SaveDC (hdc=0x490107aa) returned 1
[0237.931] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4e0407a1
[0237.931] GetClipRgn (hdc=0x490107aa, hrgn=0x4e0407a1) returned 0
[0237.931] SelectClipRgn (hdc=0x490107aa, hrgn=0xfa04053e) returned 2
[0237.932] DeleteObject (ho=0x4e0407a1) returned 1
[0237.932] DeleteObject (ho=0xfa04053e) returned 1
[0237.932] OffsetViewportOrgEx (in: hdc=0x490107aa, x=0, y=0, lppt=0x2409084 | out: lppt=0x2409084) returned 1
[0237.932] DrawThemeParentBackground () returned 0x0
[0237.932] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0237.932] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0237.932] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0237.932] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0237.932] GetSystemMetrics (nIndex=42) returned 0
[0237.932] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0237.933] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0237.933] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0237.933] GetCurrentObject (hdc=0x490107aa, type=0x1) returned 0xb00017
[0237.933] GetCurrentObject (hdc=0x490107aa, type=0x2) returned 0x900010
[0237.933] GetCurrentObject (hdc=0x490107aa, type=0x7) returned 0x1e0507b9
[0237.933] GetCurrentObject (hdc=0x490107aa, type=0x6) returned 0x8a01c2
[0237.933] SaveDC (hdc=0x490107aa) returned 2
[0237.933] GetNearestColor (hdc=0x490107aa, color=0xff) returned 0xff
[0237.933] CreateSolidBrush (color=0xff) returned 0xc10078d
[0237.933] FillRect (hDC=0x490107aa, lprc=0x53e120, hbr=0xc10078d) returned 1
[0237.933] DeleteObject (ho=0xc10078d) returned 1
[0237.933] RestoreDC (hdc=0x490107aa, nSavedDC=-1) returned 1
[0237.934] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0237.934] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0237.934] GetSystemMetrics (nIndex=42) returned 0
[0237.934] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0237.934] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0237.934] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0237.934] GetCurrentObject (hdc=0x490107aa, type=0x1) returned 0xb00017
[0237.934] GetCurrentObject (hdc=0x490107aa, type=0x2) returned 0x900010
[0237.934] GetCurrentObject (hdc=0x490107aa, type=0x7) returned 0x1e0507b9
[0237.934] GetCurrentObject (hdc=0x490107aa, type=0x6) returned 0x8a01c2
[0237.934] SaveDC (hdc=0x490107aa) returned 2
[0237.934] GetNearestColor (hdc=0x490107aa, color=0xff) returned 0xff
[0237.934] CreateSolidBrush (color=0xff) returned 0xd10078d
[0237.934] FillRect (hDC=0x490107aa, lprc=0x53e0c0, hbr=0xd10078d) returned 1
[0237.934] DeleteObject (ho=0xd10078d) returned 1
[0237.934] RestoreDC (hdc=0x490107aa, nSavedDC=-1) returned 1
[0237.935] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0237.935] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0237.935] GetSystemMetrics (nIndex=42) returned 0
[0237.935] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0237.935] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0237.935] RestoreDC (hdc=0x490107aa, nSavedDC=-1) returned 1
[0237.935] GdipReleaseDC (graphics=0x5d92c30, hdc=0x490107aa) returned 0x0
[0237.935] IsAppThemed () returned 0x1
[0237.935] GetThemeAppProperties () returned 0x3
[0237.935] GetThemeAppProperties () returned 0x3
[0237.935] IsAppThemed () returned 0x1
[0237.935] GetThemeAppProperties () returned 0x3
[0237.935] GetThemeAppProperties () returned 0x3
[0237.935] IsThemePartDefined () returned 0x1
[0237.935] GdipCreateRegion (region=0x53e640) returned 0x0
[0237.936] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0237.936] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0237.936] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0237.936] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0237.936] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0237.936] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0237.936] LocalFree (hMem=0x89ea88) returned 0x0
[0237.936] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0237.936] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0237.936] LocalFree (hMem=0x89ea88) returned 0x0
[0237.936] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0237.936] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0237.936] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0237.936] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0237.936] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0237.936] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0237.936] GetCurrentObject (hdc=0x490107aa, type=0x1) returned 0xb00017
[0237.936] GetCurrentObject (hdc=0x490107aa, type=0x2) returned 0x900010
[0237.937] GetCurrentObject (hdc=0x490107aa, type=0x7) returned 0x1e0507b9
[0237.937] GetCurrentObject (hdc=0x490107aa, type=0x6) returned 0x8a01c2
[0237.937] SaveDC (hdc=0x490107aa) returned 1
[0237.937] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfb04053e
[0237.937] GetClipRgn (hdc=0x490107aa, hrgn=0xfb04053e) returned 0
[0237.937] SelectClipRgn (hdc=0x490107aa, hrgn=0x500407a1) returned 2
[0237.937] DeleteObject (ho=0xfb04053e) returned 1
[0237.937] DeleteObject (ho=0x500407a1) returned 1
[0237.937] OffsetViewportOrgEx (in: hdc=0x490107aa, x=0, y=0, lppt=0x24098e8 | out: lppt=0x24098e8) returned 1
[0237.937] IsAppThemed () returned 0x1
[0237.937] GetThemeAppProperties () returned 0x3
[0237.937] GetThemeAppProperties () returned 0x3
[0237.937] DrawThemeBackground () returned 0x0
[0237.938] RestoreDC (hdc=0x490107aa, nSavedDC=-1) returned 1
[0237.938] GdipReleaseDC (graphics=0x5d92c30, hdc=0x490107aa) returned 0x0
[0237.938] GdipCreateRegion (region=0x53e644) returned 0x0
[0237.938] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0237.938] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0237.938] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0237.938] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0237.938] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0237.938] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0237.938] LocalFree (hMem=0x89ea88) returned 0x0
[0237.938] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0237.938] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0237.938] LocalFree (hMem=0x89ec80) returned 0x0
[0237.938] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0237.938] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0237.938] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0237.938] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0237.939] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0237.939] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0237.939] GetCurrentObject (hdc=0x490107aa, type=0x1) returned 0xb00017
[0237.939] GetCurrentObject (hdc=0x490107aa, type=0x2) returned 0x900010
[0237.939] GetCurrentObject (hdc=0x490107aa, type=0x7) returned 0x1e0507b9
[0237.939] GetCurrentObject (hdc=0x490107aa, type=0x6) returned 0x8a01c2
[0237.939] SaveDC (hdc=0x490107aa) returned 1
[0237.939] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x510407a1
[0237.939] GetClipRgn (hdc=0x490107aa, hrgn=0x510407a1) returned 0
[0237.939] SelectClipRgn (hdc=0x490107aa, hrgn=0xfc04053e) returned 2
[0237.939] DeleteObject (ho=0x510407a1) returned 1
[0237.939] DeleteObject (ho=0xfc04053e) returned 1
[0237.939] OffsetViewportOrgEx (in: hdc=0x490107aa, x=0, y=0, lppt=0x2409bbc | out: lppt=0x2409bbc) returned 1
[0237.939] IsAppThemed () returned 0x1
[0237.940] GetThemeAppProperties () returned 0x3
[0237.940] GetThemeAppProperties () returned 0x3
[0237.940] GetThemeBackgroundContentRect () returned 0x0
[0237.940] RestoreDC (hdc=0x490107aa, nSavedDC=-1) returned 1
[0237.940] GdipReleaseDC (graphics=0x5d92c30, hdc=0x490107aa) returned 0x0
[0237.940] IsAppThemed () returned 0x1
[0237.940] GetThemeAppProperties () returned 0x3
[0237.940] GetThemeAppProperties () returned 0x3
[0237.940] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0237.940] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0237.940] GetCurrentObject (hdc=0x490107aa, type=0x1) returned 0xb00017
[0237.940] GetCurrentObject (hdc=0x490107aa, type=0x2) returned 0x900010
[0237.940] GetCurrentObject (hdc=0x490107aa, type=0x7) returned 0x1e0507b9
[0237.940] GetCurrentObject (hdc=0x490107aa, type=0x6) returned 0x8a01c2
[0237.940] SaveDC (hdc=0x490107aa) returned 1
[0237.940] GetTextAlign (hdc=0x490107aa) returned 0x0
[0237.941] GetTextColor (hdc=0x490107aa) returned 0x0
[0237.941] GetCurrentObject (hdc=0x490107aa, type=0x6) returned 0x8a01c2
[0237.941] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0237.941] SelectObject (hdc=0x490107aa, h=0x450a0799) returned 0x8a01c2
[0237.941] GetBkMode (hdc=0x490107aa) returned 2
[0237.941] SetBkMode (hdc=0x490107aa, mode=1) returned 2
[0237.941] DrawTextExW (in: hdc=0x490107aa, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2409f5c | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0237.941] DrawTextExW (in: hdc=0x490107aa, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2409f5c | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0237.942] RestoreDC (hdc=0x490107aa, nSavedDC=-1) returned 1
[0237.942] GdipReleaseDC (graphics=0x5d92c30, hdc=0x490107aa) returned 0x0
[0237.942] GetFocus () returned 0x202c6
[0237.942] IsAppThemed () returned 0x1
[0237.942] GetThemeAppProperties () returned 0x3
[0237.942] GetThemeAppProperties () returned 0x3
[0237.942] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0237.942] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x490107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0237.943] GdipReleaseDC (graphics=0x5d92c30, hdc=0x490107aa) returned 0x0
[0237.943] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0237.943] SelectObject (hdc=0x490107aa, h=0x85000f) returned 0x1e0507b9
[0237.943] DeleteDC (hdc=0x490107aa) returned 1
[0237.943] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0237.943] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0237.945] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0237.945] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0237.945] WaitMessage () returned 1
[0238.022] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0238.022] IsWindowUnicode (hWnd=0x202c6) returned 1
[0238.022] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0238.022] TranslateMessage (lpMsg=0x53eef8) returned 0
[0238.022] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0238.022] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0238.022] IsWindowUnicode (hWnd=0x202c6) returned 1
[0238.022] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0238.022] TranslateMessage (lpMsg=0x53eef8) returned 0
[0238.022] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0238.022] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x1a005f) returned 0x0
[0238.023] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0238.023] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0238.023] WaitMessage () returned 1
[0238.171] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0238.171] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a2024f) returned 0x1
[0238.171] IsWindowUnicode (hWnd=0x202c6) returned 1
[0238.171] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0238.171] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a2024f) returned 0x1
[0238.171] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0238.171] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13501f9) returned 0x0
[0238.172] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0238.172] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0238.172] SetCursor (hCursor=0x10003) returned 0x10003
[0238.172] TranslateMessage (lpMsg=0x53eef8) returned 0
[0238.172] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0238.172] GetKeyState (nVirtKey=1) returned -127
[0238.172] GetKeyState (nVirtKey=2) returned 0
[0238.172] GetKeyState (nVirtKey=4) returned 0
[0238.172] GetKeyState (nVirtKey=5) returned 0
[0238.172] GetKeyState (nVirtKey=6) returned 0
[0238.172] IsWindowVisible (hWnd=0x202c6) returned 1
[0238.172] IsWindowEnabled (hWnd=0x202c6) returned 1
[0238.172] SetFocus (hWnd=0x202c6) returned 0x202c6
[0238.172] GetFocus () returned 0x202c6
[0238.172] GetFocus () returned 0x202c6
[0238.173] GetFocus () returned 0x202c6
[0238.173] GetKeyState (nVirtKey=1) returned -127
[0238.173] GetKeyState (nVirtKey=2) returned 0
[0238.173] GetKeyState (nVirtKey=4) returned 0
[0238.173] GetKeyState (nVirtKey=5) returned 0
[0238.173] GetKeyState (nVirtKey=6) returned 0
[0238.173] GetCapture () returned 0x0
[0238.173] SetCapture (hWnd=0x202c6) returned 0x0
[0238.173] GetKeyState (nVirtKey=1) returned -127
[0238.173] GetKeyState (nVirtKey=2) returned 0
[0238.173] GetKeyState (nVirtKey=4) returned 0
[0238.173] GetKeyState (nVirtKey=5) returned 0
[0238.173] GetKeyState (nVirtKey=6) returned 0
[0238.173] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0238.173] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0238.173] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0238.173] IsWindowUnicode (hWnd=0x202c6) returned 1
[0238.173] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0238.174] TranslateMessage (lpMsg=0x53eef8) returned 0
[0238.174] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0238.174] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x240a0e0, cPoints=0x1 | out: lpPoints=0x240a0e0) returned 25690608
[0238.174] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0238.174] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0238.174] UpdateWindow (hWnd=0x202c6) returned 1
[0238.174] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0238.174] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0238.174] CreateCompatibleDC (hdc=0xf0105ee) returned 0x4a0107aa
[0238.174] SelectObject (hdc=0x4a0107aa, h=0x1e0507b9) returned 0x85000f
[0238.174] GdipCreateFromHDC (hdc=0x4a0107aa, graphics=0x53e5f0) returned 0x0
[0238.175] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0238.175] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0238.175] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0238.175] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.175] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0238.175] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0238.175] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0238.175] LocalFree (hMem=0x89ee08) returned 0x0
[0238.175] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.175] GdipCreateRegion (region=0x53e638) returned 0x0
[0238.175] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.175] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0238.175] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0238.175] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbf10dbd) returned 0x0
[0238.175] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.175] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0238.176] GetCurrentObject (hdc=0x4a0107aa, type=0x1) returned 0xb00017
[0238.176] GetCurrentObject (hdc=0x4a0107aa, type=0x2) returned 0x900010
[0238.176] GetCurrentObject (hdc=0x4a0107aa, type=0x7) returned 0x1e0507b9
[0238.176] GetCurrentObject (hdc=0x4a0107aa, type=0x6) returned 0x8a01c2
[0238.176] SaveDC (hdc=0x4a0107aa) returned 1
[0238.176] GetNearestColor (hdc=0x4a0107aa, color=0xff) returned 0xff
[0238.176] GetNearestColor (hdc=0x4a0107aa, color=0x55) returned 0x55
[0238.176] GetNearestColor (hdc=0x4a0107aa, color=0x0) returned 0x0
[0238.176] GetNearestColor (hdc=0x4a0107aa, color=0x55) returned 0x55
[0238.176] GetNearestColor (hdc=0x4a0107aa, color=0x0) returned 0x0
[0238.176] GetNearestColor (hdc=0x4a0107aa, color=0x8080ff) returned 0x8080ff
[0238.176] GetNearestColor (hdc=0x4a0107aa, color=0x7373e5) returned 0x7373e5
[0238.176] GetNearestColor (hdc=0x4a0107aa, color=0xe5) returned 0xe5
[0238.177] GetNearestColor (hdc=0x4a0107aa, color=0x0) returned 0x0
[0238.177] RestoreDC (hdc=0x4a0107aa, nSavedDC=-1) returned 1
[0238.177] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4a0107aa) returned 0x0
[0238.177] IsAppThemed () returned 0x1
[0238.177] GetThemeAppProperties () returned 0x3
[0238.177] GetThemeAppProperties () returned 0x3
[0238.177] IsAppThemed () returned 0x1
[0238.177] GetThemeAppProperties () returned 0x3
[0238.177] GetThemeAppProperties () returned 0x3
[0238.177] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x240a7fc | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0238.178] IsAppThemed () returned 0x1
[0238.178] GetThemeAppProperties () returned 0x3
[0238.178] GetThemeAppProperties () returned 0x3
[0238.178] IsAppThemed () returned 0x1
[0238.178] GetThemeAppProperties () returned 0x3
[0238.178] GetThemeAppProperties () returned 0x3
[0238.178] IsAppThemed () returned 0x1
[0238.178] GetThemeAppProperties () returned 0x3
[0238.178] GetThemeAppProperties () returned 0x3
[0238.178] IsAppThemed () returned 0x1
[0238.178] GetThemeAppProperties () returned 0x3
[0238.178] GetThemeAppProperties () returned 0x3
[0238.178] IsThemePartDefined () returned 0x1
[0238.178] IsAppThemed () returned 0x1
[0238.178] GetThemeAppProperties () returned 0x3
[0238.178] GetThemeAppProperties () returned 0x3
[0238.178] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0238.178] IsAppThemed () returned 0x1
[0238.179] GetThemeAppProperties () returned 0x3
[0238.179] GetThemeAppProperties () returned 0x3
[0238.179] IsAppThemed () returned 0x1
[0238.179] GetThemeAppProperties () returned 0x3
[0238.179] GetThemeAppProperties () returned 0x3
[0238.179] IsThemePartDefined () returned 0x1
[0238.179] GdipCreateRegion (region=0x53e354) returned 0x0
[0238.179] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.179] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0238.179] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.179] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0238.179] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0238.179] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0238.179] LocalFree (hMem=0x89ee08) returned 0x0
[0238.179] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0238.179] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0238.179] LocalFree (hMem=0x89ec80) returned 0x0
[0238.179] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.180] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0238.180] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0238.180] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0238.180] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.180] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0238.180] GetCurrentObject (hdc=0x4a0107aa, type=0x1) returned 0xb00017
[0238.180] GetCurrentObject (hdc=0x4a0107aa, type=0x2) returned 0x900010
[0238.180] GetCurrentObject (hdc=0x4a0107aa, type=0x7) returned 0x1e0507b9
[0238.180] GetCurrentObject (hdc=0x4a0107aa, type=0x6) returned 0x8a01c2
[0238.180] SaveDC (hdc=0x4a0107aa) returned 1
[0238.180] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfd04053e
[0238.180] GetClipRgn (hdc=0x4a0107aa, hrgn=0xfd04053e) returned 0
[0238.180] SelectClipRgn (hdc=0x4a0107aa, hrgn=0x550407a1) returned 2
[0238.180] DeleteObject (ho=0xfd04053e) returned 1
[0238.180] DeleteObject (ho=0x550407a1) returned 1
[0238.181] OffsetViewportOrgEx (in: hdc=0x4a0107aa, x=0, y=0, lppt=0x240aeac | out: lppt=0x240aeac) returned 1
[0238.181] DrawThemeParentBackground () returned 0x0
[0238.181] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0238.181] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0238.181] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0238.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0238.181] GetSystemMetrics (nIndex=42) returned 0
[0238.181] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0238.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0238.181] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0238.181] GetCurrentObject (hdc=0x4a0107aa, type=0x1) returned 0xb00017
[0238.181] GetCurrentObject (hdc=0x4a0107aa, type=0x2) returned 0x900010
[0238.181] GetCurrentObject (hdc=0x4a0107aa, type=0x7) returned 0x1e0507b9
[0238.181] GetCurrentObject (hdc=0x4a0107aa, type=0x6) returned 0x8a01c2
[0238.182] SaveDC (hdc=0x4a0107aa) returned 2
[0238.182] GetNearestColor (hdc=0x4a0107aa, color=0xff) returned 0xff
[0238.182] CreateSolidBrush (color=0xff) returned 0xe10078d
[0238.182] FillRect (hDC=0x4a0107aa, lprc=0x53ddb8, hbr=0xe10078d) returned 1
[0238.182] DeleteObject (ho=0xe10078d) returned 1
[0238.182] RestoreDC (hdc=0x4a0107aa, nSavedDC=-1) returned 1
[0238.182] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0238.182] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0238.182] GetSystemMetrics (nIndex=42) returned 0
[0238.182] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0238.182] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0238.182] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0238.182] GetCurrentObject (hdc=0x4a0107aa, type=0x1) returned 0xb00017
[0238.182] GetCurrentObject (hdc=0x4a0107aa, type=0x2) returned 0x900010
[0238.182] GetCurrentObject (hdc=0x4a0107aa, type=0x7) returned 0x1e0507b9
[0238.182] GetCurrentObject (hdc=0x4a0107aa, type=0x6) returned 0x8a01c2
[0238.183] SaveDC (hdc=0x4a0107aa) returned 2
[0238.183] GetNearestColor (hdc=0x4a0107aa, color=0xff) returned 0xff
[0238.183] CreateSolidBrush (color=0xff) returned 0xf10078d
[0238.183] FillRect (hDC=0x4a0107aa, lprc=0x53dd58, hbr=0xf10078d) returned 1
[0238.183] DeleteObject (ho=0xf10078d) returned 1
[0238.183] RestoreDC (hdc=0x4a0107aa, nSavedDC=-1) returned 1
[0238.183] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0238.183] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0238.183] GetSystemMetrics (nIndex=42) returned 0
[0238.183] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0238.183] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0238.183] RestoreDC (hdc=0x4a0107aa, nSavedDC=-1) returned 1
[0238.184] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4a0107aa) returned 0x0
[0238.184] IsAppThemed () returned 0x1
[0238.184] GetThemeAppProperties () returned 0x3
[0238.184] GetThemeAppProperties () returned 0x3
[0238.184] IsAppThemed () returned 0x1
[0238.184] GetThemeAppProperties () returned 0x3
[0238.184] GetThemeAppProperties () returned 0x3
[0238.184] IsThemePartDefined () returned 0x1
[0238.184] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0238.184] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.184] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0238.184] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.184] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0238.184] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0238.184] LocalFree (hMem=0x89ec80) returned 0x0
[0238.184] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0238.184] LocalFree (hMem=0x89ee40) returned 0x0
[0238.185] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.185] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0238.185] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0238.185] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0238.185] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.185] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0238.185] GetCurrentObject (hdc=0x4a0107aa, type=0x1) returned 0xb00017
[0238.185] GetCurrentObject (hdc=0x4a0107aa, type=0x2) returned 0x900010
[0238.185] GetCurrentObject (hdc=0x4a0107aa, type=0x7) returned 0x1e0507b9
[0238.185] GetCurrentObject (hdc=0x4a0107aa, type=0x6) returned 0x8a01c2
[0238.185] SaveDC (hdc=0x4a0107aa) returned 1
[0238.185] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x560407a1
[0238.185] GetClipRgn (hdc=0x4a0107aa, hrgn=0x560407a1) returned 0
[0238.185] SelectClipRgn (hdc=0x4a0107aa, hrgn=0xff04053e) returned 2
[0238.185] DeleteObject (ho=0x560407a1) returned 1
[0238.185] DeleteObject (ho=0xff04053e) returned 1
[0238.185] OffsetViewportOrgEx (in: hdc=0x4a0107aa, x=0, y=0, lppt=0x240b710 | out: lppt=0x240b710) returned 1
[0238.185] IsAppThemed () returned 0x1
[0238.186] GetThemeAppProperties () returned 0x3
[0238.186] GetThemeAppProperties () returned 0x3
[0238.186] DrawThemeBackground () returned 0x0
[0238.186] RestoreDC (hdc=0x4a0107aa, nSavedDC=-1) returned 1
[0238.186] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4a0107aa) returned 0x0
[0238.186] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0238.186] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.186] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0238.186] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.186] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0238.186] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0238.186] LocalFree (hMem=0x89ec80) returned 0x0
[0238.186] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0238.186] LocalFree (hMem=0x89ee08) returned 0x0
[0238.186] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.186] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0238.186] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0238.186] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0238.187] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.187] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0238.187] GetCurrentObject (hdc=0x4a0107aa, type=0x1) returned 0xb00017
[0238.187] GetCurrentObject (hdc=0x4a0107aa, type=0x2) returned 0x900010
[0238.187] GetCurrentObject (hdc=0x4a0107aa, type=0x7) returned 0x1e0507b9
[0238.187] GetCurrentObject (hdc=0x4a0107aa, type=0x6) returned 0x8a01c2
[0238.187] SaveDC (hdc=0x4a0107aa) returned 1
[0238.187] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4053e
[0238.187] GetClipRgn (hdc=0x4a0107aa, hrgn=0x4053e) returned 0
[0238.187] SelectClipRgn (hdc=0x4a0107aa, hrgn=0x570407a1) returned 2
[0238.187] DeleteObject (ho=0x4053e) returned 1
[0238.187] DeleteObject (ho=0x570407a1) returned 1
[0238.187] OffsetViewportOrgEx (in: hdc=0x4a0107aa, x=0, y=0, lppt=0x240b9e4 | out: lppt=0x240b9e4) returned 1
[0238.187] IsAppThemed () returned 0x1
[0238.187] GetThemeAppProperties () returned 0x3
[0238.188] GetThemeAppProperties () returned 0x3
[0238.188] GetThemeBackgroundContentRect () returned 0x0
[0238.188] RestoreDC (hdc=0x4a0107aa, nSavedDC=-1) returned 1
[0238.188] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4a0107aa) returned 0x0
[0238.188] IsAppThemed () returned 0x1
[0238.188] GetThemeAppProperties () returned 0x3
[0238.188] GetThemeAppProperties () returned 0x3
[0238.188] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0238.188] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0238.188] GetCurrentObject (hdc=0x4a0107aa, type=0x1) returned 0xb00017
[0238.188] GetCurrentObject (hdc=0x4a0107aa, type=0x2) returned 0x900010
[0238.188] GetCurrentObject (hdc=0x4a0107aa, type=0x7) returned 0x1e0507b9
[0238.188] GetCurrentObject (hdc=0x4a0107aa, type=0x6) returned 0x8a01c2
[0238.188] SaveDC (hdc=0x4a0107aa) returned 1
[0238.188] GetTextAlign (hdc=0x4a0107aa) returned 0x0
[0238.188] GetTextColor (hdc=0x4a0107aa) returned 0x0
[0238.188] GetCurrentObject (hdc=0x4a0107aa, type=0x6) returned 0x8a01c2
[0238.188] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0238.189] SelectObject (hdc=0x4a0107aa, h=0x450a0799) returned 0x8a01c2
[0238.189] GetBkMode (hdc=0x4a0107aa) returned 2
[0238.189] SetBkMode (hdc=0x4a0107aa, mode=1) returned 2
[0238.189] DrawTextExW (in: hdc=0x4a0107aa, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x240bd84 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0238.189] DrawTextExW (in: hdc=0x4a0107aa, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x240bd84 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0238.189] RestoreDC (hdc=0x4a0107aa, nSavedDC=-1) returned 1
[0238.189] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4a0107aa) returned 0x0
[0238.190] GetFocus () returned 0x202c6
[0238.190] IsAppThemed () returned 0x1
[0238.190] GetThemeAppProperties () returned 0x3
[0238.190] GetThemeAppProperties () returned 0x3
[0238.190] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0238.190] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x4a0107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0238.190] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4a0107aa) returned 0x0
[0238.190] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0238.190] SelectObject (hdc=0x4a0107aa, h=0x85000f) returned 0x1e0507b9
[0238.190] DeleteDC (hdc=0x4a0107aa) returned 1
[0238.191] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0238.191] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0238.191] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x240be80, cPoints=0x1 | out: lpPoints=0x240be80) returned 25690608
[0238.191] WindowFromPoint (Point=0x24f) returned 0x202c6
[0238.191] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a2024f) returned 0x1
[0238.191] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0238.191] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0238.193] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.194] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0238.195] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.195] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0238.195] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.196] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0238.196] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0238.196] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e888) returned 0x0
[0238.196] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0238.196] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0238.196] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0238.197] GetSystemMetrics (nIndex=5) returned 1
[0238.197] GetSystemMetrics (nIndex=6) returned 1
[0238.197] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.197] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0238.197] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.197] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0238.267] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.267] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0238.267] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.268] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0238.268] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.268] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0238.268] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.269] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0238.269] GetSystemMetrics (nIndex=5) returned 1
[0238.269] GetSystemMetrics (nIndex=6) returned 1
[0238.269] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.269] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0238.269] GetSystemMetrics (nIndex=5) returned 1
[0238.269] GetSystemMetrics (nIndex=6) returned 1
[0238.270] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.270] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0238.270] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.270] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0238.270] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.270] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0238.271] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.271] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0238.271] GetSystemMetrics (nIndex=59) returned 1460
[0238.272] GetSystemMetrics (nIndex=60) returned 920
[0238.272] GetSystemMetrics (nIndex=34) returned 136
[0238.272] GetSystemMetrics (nIndex=35) returned 39
[0238.272] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.272] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0238.272] GetCurrentThreadId () returned 0x11d0
[0238.272] GetCurrentThreadId () returned 0x11d0
[0238.272] GetCurrentThreadId () returned 0x11d0
[0238.272] GetCurrentThreadId () returned 0x11d0
[0238.272] GetCurrentThreadId () returned 0x11d0
[0238.272] GetCurrentThreadId () returned 0x11d0
[0238.272] GetCurrentThreadId () returned 0x11d0
[0238.272] GetCurrentThreadId () returned 0x11d0
[0238.273] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.273] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0238.273] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0238.273] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0238.273] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.273] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0238.274] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.274] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0238.274] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x202ca
[0238.275] SetWindowLongW (hWnd=0x202ca, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0238.275] GetWindowLongW (hWnd=0x202ca, nIndex=-4) returned 1950089536
[0238.276] SetWindowLongW (hWnd=0x202ca, nIndex=-4, dwNewLong=79646318) returned 1950089536
[0238.276] GetWindowLongW (hWnd=0x202ca, nIndex=-4) returned 79646318
[0238.276] GetWindowLongW (hWnd=0x202ca, nIndex=-16) returned 113311744
[0238.276] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202ca, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0238.276] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202ca, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0238.277] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202ca, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0238.278] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202ca, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0238.278] GetClientRect (in: hWnd=0x202ca, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0238.278] GetWindowRect (in: hWnd=0x202ca, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0238.278] SetWindowTextW (hWnd=0x202ca, lpString="WindowsFormsParkingWindow") returned 1
[0238.278] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202ca, Msg=0xc, wParam=0x0, lParam=0x2403dcc) returned 0x1
[0238.279] GetParent (hWnd=0x202ca) returned 0x0
[0238.279] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0238.279] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x202ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x901e2
[0238.280] SetWindowLongW (hWnd=0x901e2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0238.280] GetWindowLongW (hWnd=0x901e2, nIndex=-4) returned 1868147648
[0238.280] SetWindowLongW (hWnd=0x901e2, nIndex=-4, dwNewLong=79646878) returned 1868147648
[0238.280] GetWindowLongW (hWnd=0x901e2, nIndex=-4) returned 79646878
[0238.280] GetWindowLongW (hWnd=0x901e2, nIndex=-16) returned 1174405133
[0238.280] GetWindowLongW (hWnd=0x901e2, nIndex=-12) returned 0
[0238.280] SetWindowLongW (hWnd=0x901e2, nIndex=-12, dwNewLong=590306) returned 0
[0238.280] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0238.281] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0238.281] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0238.282] GetClientRect (in: hWnd=0x901e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0238.282] GetWindowRect (in: hWnd=0x901e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0238.282] GetParent (hWnd=0x901e2) returned 0x202ca
[0238.283] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202ca, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0238.283] SetWindowTextW (hWnd=0x901e2, lpString="Enter password: ") returned 1
[0238.283] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0238.283] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0238.284] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0238.284] GetClientRect (in: hWnd=0x901e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0238.284] GetWindowRect (in: hWnd=0x901e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0238.284] GetParent (hWnd=0x901e2) returned 0x202ca
[0238.284] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202ca, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0238.284] SendMessageW (hWnd=0x901e2, Msg=0x2210, wParam=0x1e20001, lParam=0x901e2) returned 0x0
[0238.284] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x2210, wParam=0x1e20001, lParam=0x901e2) returned 0x0
[0238.284] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0238.285] GetParent (hWnd=0x901e2) returned 0x202ca
[0238.285] GdipCreateFromHWND (hwnd=0x901e2, graphics=0x53e994) returned 0x0
[0238.285] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0238.285] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0238.285] GetProcessWindowStation () returned 0x13c
[0238.285] GetCapture () returned 0x202c6
[0238.285] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0238.285] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0238.286] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0238.286] ReleaseCapture () returned 1
[0238.286] GetActiveWindow () returned 0x70036
[0238.286] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0238.287] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.287] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0238.287] GetCursorPos (in: lpPoint=0x2418c30 | out: lpPoint=0x2418c30*(x=591, y=418)) returned 1
[0238.287] MonitorFromPoint (pt=0x24f, dwFlags=0x1a2) returned 0x10001
[0238.287] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0238.287] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x4d0107aa
[0238.287] GetDeviceCaps (hdc=0x4d0107aa, index=12) returned 32
[0238.287] GetDeviceCaps (hdc=0x4d0107aa, index=14) returned 1
[0238.287] DeleteDC (hdc=0x4d0107aa) returned 1
[0238.288] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0238.288] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0238.288] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x900ea
[0238.289] SetWindowLongW (hWnd=0x900ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0238.289] GetWindowLongW (hWnd=0x900ea, nIndex=-4) returned 1950089536
[0238.289] SetWindowLongW (hWnd=0x900ea, nIndex=-4, dwNewLong=79645638) returned 1950089536
[0238.289] GetWindowLongW (hWnd=0x900ea, nIndex=-4) returned 79645638
[0238.289] GetWindowLongW (hWnd=0x900ea, nIndex=-16) returned 113770496
[0238.290] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0238.291] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0238.292] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0238.292] GetClientRect (in: hWnd=0x900ea, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0238.292] GetWindowRect (in: hWnd=0x900ea, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0238.292] SetWindowTextW (hWnd=0x900ea, lpString="Ransomware") returned 1
[0238.292] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xc, wParam=0x0, lParam=0x240bf48) returned 0x1
[0238.293] GetStartupInfoW (in: lpStartupInfo=0x2418f6c | out: lpStartupInfo=0x2418f6c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0238.294] GetParent (hWnd=0x900ea) returned 0x0
[0238.294] SetWindowLongW (hWnd=0x900ea, nIndex=-8, dwNewLong=0) returned 0
[0238.295] SendMessageW (hWnd=0x900ea, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0238.295] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0238.295] SendMessageW (hWnd=0x900ea, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0238.295] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0238.296] GetSystemMenu (hWnd=0x900ea, bRevert=0) returned 0x30087
[0238.296] GetWindowPlacement (in: hWnd=0x900ea, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0238.296] EnableMenuItem (hMenu=0x30087, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0238.297] EnableMenuItem (hMenu=0x30087, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0238.297] EnableMenuItem (hMenu=0x30087, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0238.297] EnableMenuItem (hMenu=0x30087, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0238.297] EnableMenuItem (hMenu=0x30087, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0238.297] GetClientRect (in: hWnd=0x900ea, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0238.297] GetClientRect (in: hWnd=0x900ea, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0238.297] GetWindowRect (in: hWnd=0x900ea, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0238.297] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.298] GetWindowLongW (hWnd=0x900ea, nIndex=-16) returned 113770496
[0238.298] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.298] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.298] GetSystemMetrics (nIndex=42) returned 0
[0238.298] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.298] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0238.298] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.298] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.298] GetSystemMetrics (nIndex=42) returned 0
[0238.298] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.298] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0238.298] GetCursorPos (in: lpPoint=0x24190e0 | out: lpPoint=0x24190e0*(x=591, y=418)) returned 1
[0238.298] MonitorFromPoint (pt=0x24f, dwFlags=0x1a2) returned 0x10001
[0238.299] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0238.299] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x510107aa
[0238.299] GetDeviceCaps (hdc=0x510107aa, index=12) returned 32
[0238.299] GetDeviceCaps (hdc=0x510107aa, index=14) returned 1
[0238.299] DeleteDC (hdc=0x510107aa) returned 1
[0238.299] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0238.299] GetWindowLongW (hWnd=0x900ea, nIndex=-16) returned 113770496
[0238.299] GetWindowLongW (hWnd=0x900ea, nIndex=-20) returned 327937
[0238.299] SetWindowLongW (hWnd=0x900ea, nIndex=-16, dwNewLong=46661632) returned 113770496
[0238.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0238.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0238.301] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0238.301] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0238.301] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0238.301] SetWindowLongW (hWnd=0x900ea, nIndex=-20, dwNewLong=327681) returned 327937
[0238.301] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0238.302] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0238.303] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0238.303] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0238.303] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0238.303] SetWindowPos (hWnd=0x900ea, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0238.304] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0238.304] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0238.304] GetWindowPlacement (in: hWnd=0x900ea, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0238.304] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0238.304] GetClientRect (in: hWnd=0x900ea, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0238.304] GetWindowRect (in: hWnd=0x900ea, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0238.305] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0238.305] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0238.306] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0238.306] RedrawWindow (hWnd=0x900ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0238.306] GetSystemMenu (hWnd=0x900ea, bRevert=0) returned 0x30087
[0238.306] GetWindowPlacement (in: hWnd=0x900ea, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0238.306] EnableMenuItem (hMenu=0x30087, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0238.306] EnableMenuItem (hMenu=0x30087, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0238.306] EnableMenuItem (hMenu=0x30087, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0238.306] EnableMenuItem (hMenu=0x30087, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0238.306] EnableMenuItem (hMenu=0x30087, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0238.306] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0238.306] GetWindowLongW (hWnd=0x900ea, nIndex=-8) returned 0
[0238.306] SetWindowLongW (hWnd=0x900ea, nIndex=-8, dwNewLong=458806) returned 0
[0238.308] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0238.308] GetProcessWindowStation () returned 0x13c
[0238.308] GetCurrentThreadId () returned 0x11d0
[0238.308] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4bee, lParam=0x0) returned 1
[0238.308] IsWindowVisible (hWnd=0x900ea) returned 0
[0238.309] IsWindowVisible (hWnd=0x70036) returned 1
[0238.309] IsWindowEnabled (hWnd=0x70036) returned 1
[0238.309] IsWindowVisible (hWnd=0x602b6) returned 0
[0238.309] IsWindowVisible (hWnd=0x901f8) returned 0
[0238.309] IsWindowVisible (hWnd=0x202d0) returned 0
[0238.309] IsWindowVisible (hWnd=0x202d4) returned 0
[0238.309] GetActiveWindow () returned 0x70036
[0238.309] GetFocus () returned 0x202c6
[0238.309] IsWindow (hWnd=0x70036) returned 1
[0238.309] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0238.309] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0238.311] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0238.311] GetWindowLongW (hWnd=0x900ea, nIndex=-8) returned 458806
[0238.311] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0238.311] GetCurrentThreadId () returned 0x11d0
[0238.311] GetWindowLongW (hWnd=0x900ea, nIndex=-8) returned 458806
[0238.311] IsWindowEnabled (hWnd=0x70036) returned 0
[0238.311] IsWindowEnabled (hWnd=0x900ea) returned 1
[0238.311] ShowWindow (hWnd=0x900ea, nCmdShow=5) returned 0
[0238.311] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0238.311] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0238.312] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.312] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0238.312] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x900ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x90122
[0238.313] SetWindowLongW (hWnd=0x90122, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0238.313] GetWindowLongW (hWnd=0x90122, nIndex=-4) returned 1868026976
[0238.313] SetWindowLongW (hWnd=0x90122, nIndex=-4, dwNewLong=79645718) returned 1868026976
[0238.313] GetWindowLongW (hWnd=0x90122, nIndex=-4) returned 79645718
[0238.313] GetWindowLongW (hWnd=0x90122, nIndex=-16) returned 1174470848
[0238.313] GetWindowLongW (hWnd=0x90122, nIndex=-12) returned 0
[0238.313] SetWindowLongW (hWnd=0x90122, nIndex=-12, dwNewLong=590114) returned 0
[0238.314] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0238.315] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0238.315] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0238.316] SendMessageW (hWnd=0x90122, Msg=0x2055, wParam=0x90122, lParam=0x3) returned 0x2
[0238.316] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0238.316] GetWindow (hWnd=0x90122, uCmd=0x3) returned 0x0
[0238.316] GetClientRect (in: hWnd=0x90122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0238.316] GetWindowRect (in: hWnd=0x90122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0238.317] GetParent (hWnd=0x90122) returned 0x900ea
[0238.317] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x900ea, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0238.317] SendMessageW (hWnd=0x90122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0238.317] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0238.317] SendMessageW (hWnd=0x90122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0238.317] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0238.317] GetSystemMetrics (nIndex=5) returned 1
[0238.317] GetSystemMetrics (nIndex=6) returned 1
[0238.317] SendMessageW (hWnd=0x90122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0238.317] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0238.317] SendMessageW (hWnd=0x90122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0238.317] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0238.318] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0238.318] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0238.318] GetClientRect (in: hWnd=0x90122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0238.318] GetWindowRect (in: hWnd=0x90122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0238.318] GetParent (hWnd=0x90122) returned 0x900ea
[0238.318] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x900ea, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0238.318] SendMessageW (hWnd=0x90122, Msg=0x2210, wParam=0x1220001, lParam=0x90122) returned 0x0
[0238.319] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x2210, wParam=0x1220001, lParam=0x90122) returned 0x0
[0238.319] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0238.319] GetParent (hWnd=0x90122) returned 0x900ea
[0238.319] GetParent (hWnd=0x901e2) returned 0x202ca
[0238.319] SetParent (hWndChild=0x901e2, hWndNewParent=0x900ea) returned 0x202ca
[0238.319] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0238.320] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0238.320] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0238.320] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0238.320] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0238.320] GetClientRect (in: hWnd=0x901e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0238.320] GetWindowRect (in: hWnd=0x901e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0238.320] GetParent (hWnd=0x901e2) returned 0x900ea
[0238.320] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x900ea, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0238.321] GetClientRect (in: hWnd=0x901e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0238.321] GetWindowRect (in: hWnd=0x901e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0238.321] GetParent (hWnd=0x901e2) returned 0x900ea
[0238.321] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x900ea, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0238.321] GetParent (hWnd=0x901e2) returned 0x900ea
[0238.321] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0238.321] GetWindow (hWnd=0x901e2, uCmd=0x3) returned 0x0
[0238.321] SetWindowPos (hWnd=0x901e2, hWndInsertAfter=0x90122, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0238.321] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0238.322] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0238.322] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0238.322] GetClientRect (in: hWnd=0x901e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0238.322] GetWindowRect (in: hWnd=0x901e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0238.322] GetParent (hWnd=0x901e2) returned 0x900ea
[0238.322] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x900ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0238.322] GetParent (hWnd=0x901e2) returned 0x900ea
[0238.322] GetWindow (hWnd=0x901e2, uCmd=0x3) returned 0x90122
[0238.323] GetWindowThreadProcessId (in: hWnd=0x901e2, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0238.323] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0238.323] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.324] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0238.324] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x900ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x5004e
[0238.324] SetWindowLongW (hWnd=0x5004e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0238.324] GetWindowLongW (hWnd=0x5004e, nIndex=-4) returned 1868032000
[0238.325] SetWindowLongW (hWnd=0x5004e, nIndex=-4, dwNewLong=79647318) returned 1868032000
[0238.325] GetWindowLongW (hWnd=0x5004e, nIndex=-4) returned 79647318
[0238.325] GetWindowLongW (hWnd=0x5004e, nIndex=-16) returned 1174470667
[0238.325] GetWindowLongW (hWnd=0x5004e, nIndex=-12) returned 0
[0238.325] SetWindowLongW (hWnd=0x5004e, nIndex=-12, dwNewLong=327758) returned 0
[0238.325] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0238.326] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0238.326] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0238.327] SendMessageW (hWnd=0x5004e, Msg=0x2055, wParam=0x5004e, lParam=0x3) returned 0x2
[0238.327] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0238.327] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0238.327] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0238.327] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0238.327] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0238.327] RedrawWindow (hWnd=0x90122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0238.327] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0238.328] RedrawWindow (hWnd=0x901e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0238.328] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0238.328] RedrawWindow (hWnd=0x5004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0238.328] RedrawWindow (hWnd=0x900ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0238.328] GetWindow (hWnd=0x5004e, uCmd=0x3) returned 0x901e2
[0238.328] GetClientRect (in: hWnd=0x5004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0238.328] GetWindowRect (in: hWnd=0x5004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0238.328] GetParent (hWnd=0x5004e) returned 0x900ea
[0238.328] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x900ea, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0238.328] SetWindowTextW (hWnd=0x5004e, lpString="OK") returned 1
[0238.328] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0xc, wParam=0x0, lParam=0x2410408) returned 0x1
[0238.329] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0238.329] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0238.329] GetClientRect (in: hWnd=0x5004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0238.329] GetWindowRect (in: hWnd=0x5004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0238.329] GetParent (hWnd=0x5004e) returned 0x900ea
[0238.329] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x900ea, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0238.329] SendMessageW (hWnd=0x5004e, Msg=0x2210, wParam=0x4e0001, lParam=0x5004e) returned 0x0
[0238.329] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x2210, wParam=0x4e0001, lParam=0x5004e) returned 0x0
[0238.330] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0238.330] GetParent (hWnd=0x5004e) returned 0x900ea
[0238.330] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0238.330] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.331] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0238.331] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x900ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x23013e
[0238.331] SetWindowLongW (hWnd=0x23013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0238.332] GetWindowLongW (hWnd=0x23013e, nIndex=-4) returned 1868032000
[0238.332] SetWindowLongW (hWnd=0x23013e, nIndex=-4, dwNewLong=79647598) returned 1868032000
[0238.332] GetWindowLongW (hWnd=0x23013e, nIndex=-4) returned 79647598
[0238.332] GetWindowLongW (hWnd=0x23013e, nIndex=-16) returned 1174470667
[0238.332] GetWindowLongW (hWnd=0x23013e, nIndex=-12) returned 0
[0238.332] SetWindowLongW (hWnd=0x23013e, nIndex=-12, dwNewLong=2294078) returned 0
[0238.332] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x23013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0238.333] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x23013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0238.333] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x23013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0238.335] SendMessageW (hWnd=0x23013e, Msg=0x2055, wParam=0x23013e, lParam=0x3) returned 0x2
[0238.335] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0238.335] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x23013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0238.335] GetWindow (hWnd=0x23013e, uCmd=0x3) returned 0x5004e
[0238.335] GetClientRect (in: hWnd=0x23013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0238.335] GetWindowRect (in: hWnd=0x23013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0238.335] GetParent (hWnd=0x23013e) returned 0x900ea
[0238.335] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x900ea, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0238.336] SetWindowTextW (hWnd=0x23013e, lpString="Cancel") returned 1
[0238.336] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x23013e, Msg=0xc, wParam=0x0, lParam=0x2413cc8) returned 0x1
[0238.336] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x23013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0238.336] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x23013e, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0238.336] GetClientRect (in: hWnd=0x23013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0238.337] GetWindowRect (in: hWnd=0x23013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0238.337] GetParent (hWnd=0x23013e) returned 0x900ea
[0238.337] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x900ea, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0238.337] SendMessageW (hWnd=0x23013e, Msg=0x2210, wParam=0x13e0001, lParam=0x23013e) returned 0x0
[0238.337] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x23013e, Msg=0x2210, wParam=0x13e0001, lParam=0x23013e) returned 0x0
[0238.337] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x23013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0238.337] GetParent (hWnd=0x23013e) returned 0x900ea
[0238.337] GetDC (hWnd=0x0) returned 0x10105d6
[0238.337] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e320) returned 0x0
[0238.338] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0238.338] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0238.338] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0238.338] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0238.338] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0238.339] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0238.339] GetWindowLongW (hWnd=0x900ea, nIndex=-8) returned 458806
[0238.339] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0238.339] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0238.339] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x580107aa
[0238.339] GetDeviceCaps (hdc=0x580107aa, index=12) returned 32
[0238.339] GetDeviceCaps (hdc=0x580107aa, index=14) returned 1
[0238.339] DeleteDC (hdc=0x580107aa) returned 1
[0238.339] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0238.339] GetWindowThreadProcessId (in: hWnd=0x900ea, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0238.339] GetCurrentThreadId () returned 0x11d0
[0238.339] PostMessageW (hWnd=0x900ea, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0238.340] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.340] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.340] GetSystemMetrics (nIndex=42) returned 0
[0238.340] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.340] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0238.340] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0238.340] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0238.341] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0238.341] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0238.352] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x900ea) returned 0x1
[0238.355] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0238.355] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0238.355] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0238.355] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0238.358] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0238.358] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0238.358] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0238.359] GetFocus () returned 0x202c6
[0238.359] IsChild (hWndParent=0x900ea, hWnd=0x202c6) returned 0
[0238.359] GetFocus () returned 0x202c6
[0238.359] SetFocus (hWnd=0x90122) returned 0x202c6
[0238.361] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x90122, lParam=0x0) returned 0x0
[0238.361] GetCapture () returned 0x0
[0238.361] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0238.362] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0238.363] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0238.371] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0238.372] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0238.372] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0238.372] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0238.373] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0238.373] GetParent (hWnd=0x900ea) returned 0x0
[0238.373] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0238.373] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0238.374] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0238.374] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0238.374] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0238.374] GetSysColorBrush (nIndex=5) returned 0x100079
[0238.375] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0238.375] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0238.377] SendMessageW (hWnd=0x90122, Msg=0x2111, wParam=0x1000122, lParam=0x90122) returned 0x0
[0238.377] SendMessageW (hWnd=0x90122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0238.377] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0238.377] GetKeyState (nVirtKey=1) returned 1
[0238.377] GetKeyState (nVirtKey=2) returned 0
[0238.377] GetKeyState (nVirtKey=4) returned 0
[0238.377] GetKeyState (nVirtKey=5) returned 0
[0238.377] GetKeyState (nVirtKey=6) returned 0
[0238.377] GetWindowTextLengthW (hWnd=0x90122) returned 0
[0238.377] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0238.377] SendMessageW (hWnd=0x90122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0238.377] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0238.378] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0238.378] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0238.382] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0238.384] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0238.384] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0238.384] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0238.385] GetWindowPlacement (in: hWnd=0x900ea, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0238.385] GetClientRect (in: hWnd=0x900ea, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0238.385] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.385] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.385] GetSystemMetrics (nIndex=42) returned 0
[0238.385] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.385] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0238.385] GetClientRect (in: hWnd=0x900ea, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0238.386] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017
[0238.386] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010
[0238.386] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x80507ba
[0238.386] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2
[0238.386] SaveDC (hdc=0x60100ce) returned 1
[0238.386] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0
[0238.386] CreateSolidBrush (color=0xf0f0f0) returned 0x1010078d
[0238.386] FillRect (hDC=0x60100ce, lprc=0x53e250, hbr=0x1010078d) returned 1
[0238.386] DeleteObject (ho=0x1010078d) returned 1
[0238.386] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1
[0238.386] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0238.387] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0238.387] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0238.388] GetWindowPlacement (in: hWnd=0x900ea, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0238.388] GetClientRect (in: hWnd=0x900ea, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0238.388] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.388] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.388] GetSystemMetrics (nIndex=42) returned 0
[0238.388] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.388] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0238.388] GetClientRect (in: hWnd=0x900ea, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0238.388] GetCurrentObject (hdc=0x6e0107aa, type=0x1) returned 0xb00017
[0238.388] GetCurrentObject (hdc=0x6e0107aa, type=0x2) returned 0x900010
[0238.388] GetCurrentObject (hdc=0x6e0107aa, type=0x7) returned 0x130507b3
[0238.388] GetCurrentObject (hdc=0x6e0107aa, type=0x6) returned 0x8a01c2
[0238.388] SaveDC (hdc=0x6e0107aa) returned 1
[0238.388] GetNearestColor (hdc=0x6e0107aa, color=0xf0f0f0) returned 0xf0f0f0
[0238.389] CreateSolidBrush (color=0xf0f0f0) returned 0x1110078d
[0238.389] FillRect (hDC=0x6e0107aa, lprc=0x53dc18, hbr=0x1110078d) returned 1
[0238.389] DeleteObject (ho=0x1110078d) returned 1
[0238.389] RestoreDC (hdc=0x6e0107aa, nSavedDC=-1) returned 1
[0238.389] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.389] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.389] GetSystemMetrics (nIndex=42) returned 0
[0238.389] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.389] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0238.389] GetClientRect (in: hWnd=0x900ea, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0238.389] GetCurrentObject (hdc=0x6e0107aa, type=0x1) returned 0xb00017
[0238.389] GetCurrentObject (hdc=0x6e0107aa, type=0x2) returned 0x900010
[0238.389] GetCurrentObject (hdc=0x6e0107aa, type=0x7) returned 0x130507b3
[0238.389] GetCurrentObject (hdc=0x6e0107aa, type=0x6) returned 0x8a01c2
[0238.389] SaveDC (hdc=0x6e0107aa) returned 1
[0238.390] GetNearestColor (hdc=0x6e0107aa, color=0xf0f0f0) returned 0xf0f0f0
[0238.390] CreateSolidBrush (color=0xf0f0f0) returned 0x1210078d
[0238.390] FillRect (hDC=0x6e0107aa, lprc=0x53dbb8, hbr=0x1210078d) returned 1
[0238.390] DeleteObject (ho=0x1210078d) returned 1
[0238.390] RestoreDC (hdc=0x6e0107aa, nSavedDC=-1) returned 1
[0238.390] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.390] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.390] GetSystemMetrics (nIndex=42) returned 0
[0238.390] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.390] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0238.391] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0238.391] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0238.391] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0238.392] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0238.392] GetStockObject (i=5) returned 0x900015
[0238.392] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x23013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0238.392] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x23013e, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0238.392] GetStockObject (i=5) returned 0x900015
[0238.392] GetWindowPlacement (in: hWnd=0x900ea, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0238.392] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0238.392] GetClientRect (in: hWnd=0x900ea, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0238.392] GetWindowRect (in: hWnd=0x900ea, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0238.394] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0238.394] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0238.394] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0238.394] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0238.394] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0238.395] GetClientRect (in: hWnd=0x900ea, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0238.395] GetWindowRect (in: hWnd=0x900ea, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0238.395] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.395] IsWindowUnicode (hWnd=0x900ea) returned 1
[0238.395] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.395] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.395] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.395] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0238.395] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.395] IsWindowUnicode (hWnd=0x900ea) returned 1
[0238.395] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.395] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.395] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.395] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.396] MapWindowPoints (in: hWndFrom=0x901e2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0238.408] IsWindowUnicode (hWnd=0x901e2) returned 1
[0238.408] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.408] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.408] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.408] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.408] IsWindowUnicode (hWnd=0x202c6) returned 1
[0238.408] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.408] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.408] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.408] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0238.408] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0238.409] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.409] MapWindowPoints (in: hWndFrom=0x901e2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0238.409] IsWindowUnicode (hWnd=0x901e2) returned 1
[0238.409] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.409] MapWindowPoints (in: hWndFrom=0x901e2, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0238.409] SetCursor (hCursor=0x10003) returned 0x10003
[0238.409] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.409] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.409] _TrackMouseEvent (in: lpEventTrack=0x241a65c | out: lpEventTrack=0x241a65c) returned 1
[0238.409] SendMessageW (hWnd=0x901e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0238.410] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0238.410] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x200, wParam=0x0, lParam=0x1b0026) returned 0x0
[0238.410] GetKeyState (nVirtKey=1) returned 1
[0238.410] GetKeyState (nVirtKey=2) returned 0
[0238.410] GetKeyState (nVirtKey=4) returned 0
[0238.410] GetKeyState (nVirtKey=5) returned 0
[0238.410] GetKeyState (nVirtKey=6) returned 0
[0238.410] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.410] IsWindowUnicode (hWnd=0x900ea) returned 1
[0238.410] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.410] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.410] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.410] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.411] IsWindowUnicode (hWnd=0x900ea) returned 1
[0238.411] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.411] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.411] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.411] BeginPaint (in: hWnd=0x900ea, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x8b010786
[0238.412] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0238.412] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.412] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.412] GetSystemMetrics (nIndex=42) returned 0
[0238.455] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.455] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0238.455] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0238.455] EndPaint (hWnd=0x900ea, lpPaint=0x53e30c) returned 1
[0238.456] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.456] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0238.456] IsWindowUnicode (hWnd=0x102dc) returned 1
[0238.456] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.456] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0238.457] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.457] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.458] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.458] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0238.463] IsWindowUnicode (hWnd=0x102dc) returned 1
[0238.463] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.463] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.463] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.464] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.464] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x84, wParam=0x0, lParam=0x1910353) returned 0x1
[0238.465] IsWindowUnicode (hWnd=0x5004e) returned 1
[0238.465] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.465] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.465] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.465] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.465] IsWindowUnicode (hWnd=0x901e2) returned 1
[0238.465] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.465] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.465] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.465] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0238.465] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.465] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x84, wParam=0x0, lParam=0x1910353) returned 0x1
[0238.466] IsWindowUnicode (hWnd=0x5004e) returned 1
[0238.466] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.466] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x84, wParam=0x0, lParam=0x1910353) returned 0x1
[0238.466] SetCursor (hCursor=0x10003) returned 0x10003
[0238.466] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.466] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.466] _TrackMouseEvent (in: lpEventTrack=0x241a74c | out: lpEventTrack=0x241a74c) returned 1
[0238.466] SendMessageW (hWnd=0x5004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0238.466] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0238.466] InvalidateRect (hWnd=0x5004e, lpRect=0x0, bErase=0) returned 1
[0238.466] GetKeyState (nVirtKey=1) returned 1
[0238.466] GetKeyState (nVirtKey=2) returned 0
[0238.466] GetKeyState (nVirtKey=4) returned 0
[0238.467] GetKeyState (nVirtKey=5) returned 0
[0238.467] GetKeyState (nVirtKey=6) returned 0
[0238.467] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.467] IsWindowUnicode (hWnd=0x90122) returned 1
[0238.467] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.467] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.467] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.467] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.468] IsWindowUnicode (hWnd=0x90122) returned 1
[0238.468] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.468] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.468] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0238.468] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0238.469] SetTextColor (hdc=0x6f0107aa, color=0x0) returned 0x0
[0238.469] SetBkColor (hdc=0x6f0107aa, color=0xffffff) returned 0xffffff
[0238.470] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.470] IsWindowUnicode (hWnd=0x901e2) returned 1
[0238.470] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.470] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.470] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.470] BeginPaint (in: hWnd=0x901e2, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x8b010786
[0238.470] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0238.471] CreateCompatibleDC (hdc=0x8b010786) returned 0x420107b1
[0238.471] SelectObject (hdc=0x420107b1, h=0x1e0507b9) returned 0x85000f
[0238.471] GdipCreateFromHDC (hdc=0x420107b1, graphics=0x53e30c) returned 0x0
[0238.471] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0238.471] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0238.471] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0238.471] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.471] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0238.471] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0238.471] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0238.471] LocalFree (hMem=0x89eac0) returned 0x0
[0238.472] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.472] GdipCreateRegion (region=0x53e354) returned 0x0
[0238.472] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.472] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0238.472] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0238.472] GetWindowTextLengthW (hWnd=0x901e2) returned 16
[0238.472] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0238.472] GetSystemMetrics (nIndex=42) returned 0
[0238.472] GetWindowTextW (in: hWnd=0x901e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0238.472] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0238.472] GetClientRect (in: hWnd=0x901e2, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0238.472] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0238.472] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0238.472] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0238.472] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.472] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0238.472] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0238.473] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0238.473] LocalFree (hMem=0x89ee08) returned 0x0
[0238.473] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0238.473] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0238.473] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0238.473] LocalFree (hMem=0x89ec80) returned 0x0
[0238.473] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.473] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0238.473] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0238.473] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0238.473] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0238.473] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0238.473] GetCurrentObject (hdc=0x420107b1, type=0x1) returned 0xb00017
[0238.473] GetCurrentObject (hdc=0x420107b1, type=0x2) returned 0x900010
[0238.473] GetCurrentObject (hdc=0x420107b1, type=0x7) returned 0x1e0507b9
[0238.473] GetCurrentObject (hdc=0x420107b1, type=0x6) returned 0x8a01c2
[0238.473] SaveDC (hdc=0x420107b1) returned 1
[0238.474] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe1040798
[0238.474] GetClipRgn (hdc=0x420107b1, hrgn=0xe1040798) returned 0
[0238.474] SelectClipRgn (hdc=0x420107b1, hrgn=0x5c0407a1) returned 2
[0238.474] DeleteObject (ho=0xe1040798) returned 1
[0238.474] DeleteObject (ho=0x5c0407a1) returned 1
[0238.474] OffsetViewportOrgEx (in: hdc=0x420107b1, x=0, y=0, lppt=0x241ab98 | out: lppt=0x241ab98) returned 1
[0238.474] GetNearestColor (hdc=0x420107b1, color=0xf0f0f0) returned 0xf0f0f0
[0238.481] CreateSolidBrush (color=0xf0f0f0) returned 0x1310078d
[0238.481] FillRect (hDC=0x420107b1, lprc=0x53e1f4, hbr=0x1310078d) returned 1
[0238.481] DeleteObject (ho=0x1310078d) returned 1
[0238.481] RestoreDC (hdc=0x420107b1, nSavedDC=-1) returned 1
[0238.481] GdipReleaseDC (graphics=0x5d92c30, hdc=0x420107b1) returned 0x0
[0238.481] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbeb0dbd) returned 0x0
[0238.481] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.481] GetWindowTextLengthW (hWnd=0x901e2) returned 16
[0238.481] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0238.481] GetSystemMetrics (nIndex=42) returned 0
[0238.481] GetWindowTextW (in: hWnd=0x901e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0238.482] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0238.482] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0238.482] GetCurrentObject (hdc=0x420107b1, type=0x1) returned 0xb00017
[0238.482] GetCurrentObject (hdc=0x420107b1, type=0x2) returned 0x900010
[0238.482] GetCurrentObject (hdc=0x420107b1, type=0x7) returned 0x1e0507b9
[0238.482] GetCurrentObject (hdc=0x420107b1, type=0x6) returned 0x8a01c2
[0238.482] SaveDC (hdc=0x420107b1) returned 1
[0238.482] GetNearestColor (hdc=0x420107b1, color=0x0) returned 0x0
[0238.482] RestoreDC (hdc=0x420107b1, nSavedDC=-1) returned 1
[0238.482] GdipReleaseDC (graphics=0x5d92c30, hdc=0x420107b1) returned 0x0
[0238.483] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0238.483] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0238.483] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0238.483] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x241aea0 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0238.483] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0238.483] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0238.483] GetCurrentObject (hdc=0x420107b1, type=0x1) returned 0xb00017
[0238.484] GetCurrentObject (hdc=0x420107b1, type=0x2) returned 0x900010
[0238.484] GetCurrentObject (hdc=0x420107b1, type=0x7) returned 0x1e0507b9
[0238.484] GetCurrentObject (hdc=0x420107b1, type=0x6) returned 0x8a01c2
[0238.484] SaveDC (hdc=0x420107b1) returned 1
[0238.484] GetTextAlign (hdc=0x420107b1) returned 0x0
[0238.484] GetTextColor (hdc=0x420107b1) returned 0x0
[0238.484] GetCurrentObject (hdc=0x420107b1, type=0x6) returned 0x8a01c2
[0238.484] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0238.484] SelectObject (hdc=0x420107b1, h=0x730a066d) returned 0x8a01c2
[0238.484] GetBkMode (hdc=0x420107b1) returned 2
[0238.484] SetBkMode (hdc=0x420107b1, mode=1) returned 2
[0238.484] DrawTextExW (in: hdc=0x420107b1, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x241b0c4 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0238.485] RestoreDC (hdc=0x420107b1, nSavedDC=-1) returned 1
[0238.485] GdipReleaseDC (graphics=0x5d92c30, hdc=0x420107b1) returned 0x0
[0238.485] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0238.485] BitBlt (hdc=0x8b010786, x=0, y=0, cx=250, cy=70, hdcSrc=0x420107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0238.485] GdipReleaseDC (graphics=0x5d92c30, hdc=0x420107b1) returned 0x0
[0238.485] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0238.485] SelectObject (hdc=0x420107b1, h=0x85000f) returned 0x1e0507b9
[0238.485] DeleteDC (hdc=0x420107b1) returned 1
[0238.486] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0238.486] EndPaint (hWnd=0x901e2, lpPaint=0x53e2f0) returned 1
[0238.486] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.486] IsWindowUnicode (hWnd=0x5004e) returned 1
[0238.486] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.486] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.486] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.486] BeginPaint (in: hWnd=0x5004e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0238.486] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0238.486] CreateCompatibleDC (hdc=0x10105d6) returned 0x440107b1
[0238.487] SelectObject (hdc=0x440107b1, h=0x1e0507b9) returned 0x85000f
[0238.487] GdipCreateFromHDC (hdc=0x440107b1, graphics=0x53e300) returned 0x0
[0238.487] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0238.487] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0238.487] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0238.487] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.487] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0238.487] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0238.487] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0238.487] LocalFree (hMem=0x89ec80) returned 0x0
[0238.487] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.487] GdipCreateRegion (region=0x53e348) returned 0x0
[0238.487] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.487] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0238.488] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0238.488] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbe90dbd) returned 0x0
[0238.488] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.488] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0238.488] GetCurrentObject (hdc=0x440107b1, type=0x1) returned 0xb00017
[0238.488] GetCurrentObject (hdc=0x440107b1, type=0x2) returned 0x900010
[0238.488] GetCurrentObject (hdc=0x440107b1, type=0x7) returned 0x1e0507b9
[0238.488] GetCurrentObject (hdc=0x440107b1, type=0x6) returned 0x8a01c2
[0238.488] SaveDC (hdc=0x440107b1) returned 1
[0238.488] GetNearestColor (hdc=0x440107b1, color=0xf0f0f0) returned 0xf0f0f0
[0238.488] GetNearestColor (hdc=0x440107b1, color=0xa0a0a0) returned 0xa0a0a0
[0238.488] GetNearestColor (hdc=0x440107b1, color=0x696969) returned 0x696969
[0238.488] GetNearestColor (hdc=0x440107b1, color=0xa0a0a0) returned 0xa0a0a0
[0238.488] GetNearestColor (hdc=0x440107b1, color=0x0) returned 0x0
[0238.488] GetNearestColor (hdc=0x440107b1, color=0xffffff) returned 0xffffff
[0238.489] GetNearestColor (hdc=0x440107b1, color=0xe5e5e5) returned 0xe5e5e5
[0238.489] GetNearestColor (hdc=0x440107b1, color=0xd7d7d7) returned 0xd7d7d7
[0238.489] GetNearestColor (hdc=0x440107b1, color=0x0) returned 0x0
[0238.489] RestoreDC (hdc=0x440107b1, nSavedDC=-1) returned 1
[0238.489] GdipReleaseDC (graphics=0x5d92c30, hdc=0x440107b1) returned 0x0
[0238.489] IsAppThemed () returned 0x1
[0238.489] GetThemeAppProperties () returned 0x3
[0238.489] GetThemeAppProperties () returned 0x3
[0238.489] IsAppThemed () returned 0x1
[0238.489] GetThemeAppProperties () returned 0x3
[0238.489] GetThemeAppProperties () returned 0x3
[0238.489] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x241b830 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0238.490] IsAppThemed () returned 0x1
[0238.490] GetThemeAppProperties () returned 0x3
[0238.490] GetThemeAppProperties () returned 0x3
[0238.490] IsAppThemed () returned 0x1
[0238.491] GetThemeAppProperties () returned 0x3
[0238.491] GetThemeAppProperties () returned 0x3
[0238.491] IsAppThemed () returned 0x1
[0238.491] GetThemeAppProperties () returned 0x3
[0238.491] GetThemeAppProperties () returned 0x3
[0238.491] IsAppThemed () returned 0x1
[0238.491] GetThemeAppProperties () returned 0x3
[0238.491] GetThemeAppProperties () returned 0x3
[0238.491] IsThemePartDefined () returned 0x1
[0238.491] IsAppThemed () returned 0x1
[0238.491] GetThemeAppProperties () returned 0x3
[0238.491] GetThemeAppProperties () returned 0x3
[0238.491] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0238.491] IsAppThemed () returned 0x1
[0238.491] GetThemeAppProperties () returned 0x3
[0238.491] GetThemeAppProperties () returned 0x3
[0238.491] IsAppThemed () returned 0x1
[0238.491] GetThemeAppProperties () returned 0x3
[0238.491] GetThemeAppProperties () returned 0x3
[0238.491] IsThemePartDefined () returned 0x1
[0238.491] GdipCreateRegion (region=0x53e064) returned 0x0
[0238.491] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.492] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0238.492] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.492] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0238.492] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0238.492] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0238.492] LocalFree (hMem=0x89ec80) returned 0x0
[0238.492] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0238.492] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0238.492] LocalFree (hMem=0x89ee08) returned 0x0
[0238.492] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.492] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0238.492] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0238.492] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0238.492] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.492] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0238.492] GetCurrentObject (hdc=0x440107b1, type=0x1) returned 0xb00017
[0238.492] GetCurrentObject (hdc=0x440107b1, type=0x2) returned 0x900010
[0238.493] GetCurrentObject (hdc=0x440107b1, type=0x7) returned 0x1e0507b9
[0238.493] GetCurrentObject (hdc=0x440107b1, type=0x6) returned 0x8a01c2
[0238.493] SaveDC (hdc=0x440107b1) returned 1
[0238.493] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d0407a1
[0238.493] GetClipRgn (hdc=0x440107b1, hrgn=0x5d0407a1) returned 0
[0238.493] SelectClipRgn (hdc=0x440107b1, hrgn=0xe5040798) returned 2
[0238.493] DeleteObject (ho=0x5d0407a1) returned 1
[0238.493] DeleteObject (ho=0xe5040798) returned 1
[0238.493] OffsetViewportOrgEx (in: hdc=0x440107b1, x=0, y=0, lppt=0x241bee0 | out: lppt=0x241bee0) returned 1
[0238.493] DrawThemeParentBackground () returned 0x0
[0238.493] GetWindowPlacement (in: hWnd=0x900ea, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0238.493] GetClientRect (in: hWnd=0x900ea, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0238.493] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.494] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.494] GetSystemMetrics (nIndex=42) returned 0
[0238.494] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.494] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0238.494] GetClientRect (in: hWnd=0x900ea, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0238.494] GetCurrentObject (hdc=0x440107b1, type=0x1) returned 0xb00017
[0238.494] GetCurrentObject (hdc=0x440107b1, type=0x2) returned 0x900010
[0238.494] GetCurrentObject (hdc=0x440107b1, type=0x7) returned 0x1e0507b9
[0238.494] GetCurrentObject (hdc=0x440107b1, type=0x6) returned 0x8a01c2
[0238.494] SaveDC (hdc=0x440107b1) returned 2
[0238.494] GetNearestColor (hdc=0x440107b1, color=0xf0f0f0) returned 0xf0f0f0
[0238.494] CreateSolidBrush (color=0xf0f0f0) returned 0x1410078d
[0238.494] FillRect (hDC=0x440107b1, lprc=0x53dac8, hbr=0x1410078d) returned 1
[0238.494] DeleteObject (ho=0x1410078d) returned 1
[0238.494] RestoreDC (hdc=0x440107b1, nSavedDC=-1) returned 1
[0238.495] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.495] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.495] GetSystemMetrics (nIndex=42) returned 0
[0238.495] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.495] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0238.495] GetClientRect (in: hWnd=0x900ea, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0238.495] GetCurrentObject (hdc=0x440107b1, type=0x1) returned 0xb00017
[0238.495] GetCurrentObject (hdc=0x440107b1, type=0x2) returned 0x900010
[0238.495] GetCurrentObject (hdc=0x440107b1, type=0x7) returned 0x1e0507b9
[0238.495] GetCurrentObject (hdc=0x440107b1, type=0x6) returned 0x8a01c2
[0238.495] SaveDC (hdc=0x440107b1) returned 2
[0238.495] GetNearestColor (hdc=0x440107b1, color=0xf0f0f0) returned 0xf0f0f0
[0238.495] CreateSolidBrush (color=0xf0f0f0) returned 0x1510078d
[0238.495] FillRect (hDC=0x440107b1, lprc=0x53da68, hbr=0x1510078d) returned 1
[0238.495] DeleteObject (ho=0x1510078d) returned 1
[0238.495] RestoreDC (hdc=0x440107b1, nSavedDC=-1) returned 1
[0238.496] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.496] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.496] GetSystemMetrics (nIndex=42) returned 0
[0238.496] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.496] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0238.496] RestoreDC (hdc=0x440107b1, nSavedDC=-1) returned 1
[0238.497] GdipReleaseDC (graphics=0x5d92c30, hdc=0x440107b1) returned 0x0
[0238.497] IsAppThemed () returned 0x1
[0238.497] GetThemeAppProperties () returned 0x3
[0238.497] GetThemeAppProperties () returned 0x3
[0238.497] IsAppThemed () returned 0x1
[0238.497] GetThemeAppProperties () returned 0x3
[0238.497] GetThemeAppProperties () returned 0x3
[0238.497] IsThemePartDefined () returned 0x1
[0238.497] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0238.497] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.497] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0238.497] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.497] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0238.497] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0238.498] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0238.498] LocalFree (hMem=0x89ee08) returned 0x0
[0238.498] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0238.498] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0238.498] LocalFree (hMem=0x89ec80) returned 0x0
[0238.498] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.498] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0238.498] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0238.498] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0238.498] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.498] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0238.498] GetCurrentObject (hdc=0x440107b1, type=0x1) returned 0xb00017
[0238.498] GetCurrentObject (hdc=0x440107b1, type=0x2) returned 0x900010
[0238.498] GetCurrentObject (hdc=0x440107b1, type=0x7) returned 0x1e0507b9
[0238.498] GetCurrentObject (hdc=0x440107b1, type=0x6) returned 0x8a01c2
[0238.498] SaveDC (hdc=0x440107b1) returned 1
[0238.498] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe6040798
[0238.499] GetClipRgn (hdc=0x440107b1, hrgn=0xe6040798) returned 0
[0238.499] SelectClipRgn (hdc=0x440107b1, hrgn=0x5f0407a1) returned 2
[0238.499] DeleteObject (ho=0xe6040798) returned 1
[0238.499] DeleteObject (ho=0x5f0407a1) returned 1
[0238.499] OffsetViewportOrgEx (in: hdc=0x440107b1, x=0, y=0, lppt=0x241c768 | out: lppt=0x241c768) returned 1
[0238.499] IsAppThemed () returned 0x1
[0238.499] GetThemeAppProperties () returned 0x3
[0238.499] GetThemeAppProperties () returned 0x3
[0238.499] DrawThemeBackground () returned 0x0
[0238.499] RestoreDC (hdc=0x440107b1, nSavedDC=-1) returned 1
[0238.499] GdipReleaseDC (graphics=0x5d92c30, hdc=0x440107b1) returned 0x0
[0238.499] GdipCreateRegion (region=0x53dfec) returned 0x0
[0238.499] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.499] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0238.499] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.499] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0238.499] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0238.500] LocalFree (hMem=0x89ec80) returned 0x0
[0238.500] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0238.500] LocalFree (hMem=0x89eac0) returned 0x0
[0238.500] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.500] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0238.500] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0238.500] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0238.500] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.500] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0238.500] GetCurrentObject (hdc=0x440107b1, type=0x1) returned 0xb00017
[0238.500] GetCurrentObject (hdc=0x440107b1, type=0x2) returned 0x900010
[0238.500] GetCurrentObject (hdc=0x440107b1, type=0x7) returned 0x1e0507b9
[0238.500] GetCurrentObject (hdc=0x440107b1, type=0x6) returned 0x8a01c2
[0238.500] SaveDC (hdc=0x440107b1) returned 1
[0238.500] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x600407a1
[0238.500] GetClipRgn (hdc=0x440107b1, hrgn=0x600407a1) returned 0
[0238.500] SelectClipRgn (hdc=0x440107b1, hrgn=0xe7040798) returned 2
[0238.501] DeleteObject (ho=0x600407a1) returned 1
[0238.501] DeleteObject (ho=0xe7040798) returned 1
[0238.501] OffsetViewportOrgEx (in: hdc=0x440107b1, x=0, y=0, lppt=0x241ca3c | out: lppt=0x241ca3c) returned 1
[0238.501] IsAppThemed () returned 0x1
[0238.501] GetThemeAppProperties () returned 0x3
[0238.501] GetThemeAppProperties () returned 0x3
[0238.501] GetThemeBackgroundContentRect () returned 0x0
[0238.501] RestoreDC (hdc=0x440107b1, nSavedDC=-1) returned 1
[0238.501] GdipReleaseDC (graphics=0x5d92c30, hdc=0x440107b1) returned 0x0
[0238.501] IsAppThemed () returned 0x1
[0238.501] GetThemeAppProperties () returned 0x3
[0238.501] GetThemeAppProperties () returned 0x3
[0238.501] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0238.501] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0238.501] GetCurrentObject (hdc=0x440107b1, type=0x1) returned 0xb00017
[0238.501] GetCurrentObject (hdc=0x440107b1, type=0x2) returned 0x900010
[0238.501] GetCurrentObject (hdc=0x440107b1, type=0x7) returned 0x1e0507b9
[0238.502] GetCurrentObject (hdc=0x440107b1, type=0x6) returned 0x8a01c2
[0238.502] SaveDC (hdc=0x440107b1) returned 1
[0238.502] GetTextAlign (hdc=0x440107b1) returned 0x0
[0238.502] GetTextColor (hdc=0x440107b1) returned 0x0
[0238.502] GetCurrentObject (hdc=0x440107b1, type=0x6) returned 0x8a01c2
[0238.502] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0238.502] SelectObject (hdc=0x440107b1, h=0x730a066d) returned 0x8a01c2
[0238.502] GetBkMode (hdc=0x440107b1) returned 2
[0238.502] SetBkMode (hdc=0x440107b1, mode=1) returned 2
[0238.502] DrawTextExW (in: hdc=0x440107b1, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x241cddc | out: lpchText="OK", lprc=0x53df84) returned 13
[0238.503] DrawTextExW (in: hdc=0x440107b1, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x241cddc | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0238.503] RestoreDC (hdc=0x440107b1, nSavedDC=-1) returned 1
[0238.503] GdipReleaseDC (graphics=0x5d92c30, hdc=0x440107b1) returned 0x0
[0238.503] GetFocus () returned 0x90122
[0238.503] IsAppThemed () returned 0x1
[0238.503] GetThemeAppProperties () returned 0x3
[0238.503] GetThemeAppProperties () returned 0x3
[0238.503] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0238.503] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x440107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0238.503] GdipReleaseDC (graphics=0x5d92c30, hdc=0x440107b1) returned 0x0
[0238.503] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0238.504] SelectObject (hdc=0x440107b1, h=0x85000f) returned 0x1e0507b9
[0238.504] DeleteDC (hdc=0x440107b1) returned 1
[0238.504] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0238.504] EndPaint (hWnd=0x5004e, lpPaint=0x53e2e4) returned 1
[0238.504] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.504] IsWindowUnicode (hWnd=0x23013e) returned 1
[0238.504] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.504] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.504] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.505] BeginPaint (in: hWnd=0x23013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0238.505] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0238.505] CreateCompatibleDC (hdc=0x8b010786) returned 0x460107b1
[0238.505] SelectObject (hdc=0x460107b1, h=0x1e0507b9) returned 0x85000f
[0238.505] GdipCreateFromHDC (hdc=0x460107b1, graphics=0x53e300) returned 0x0
[0238.505] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0238.505] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0238.505] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0238.505] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.505] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0238.505] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0238.547] LocalFree (hMem=0x89ee08) returned 0x0
[0238.547] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.547] GdipCreateRegion (region=0x53e348) returned 0x0
[0238.547] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.547] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0238.547] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0238.547] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbe70dbd) returned 0x0
[0238.547] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.547] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0238.547] GetCurrentObject (hdc=0x460107b1, type=0x1) returned 0xb00017
[0238.547] GetCurrentObject (hdc=0x460107b1, type=0x2) returned 0x900010
[0238.547] GetCurrentObject (hdc=0x460107b1, type=0x7) returned 0x1e0507b9
[0238.547] GetCurrentObject (hdc=0x460107b1, type=0x6) returned 0x8a01c2
[0238.548] SaveDC (hdc=0x460107b1) returned 1
[0238.548] GetNearestColor (hdc=0x460107b1, color=0xf0f0f0) returned 0xf0f0f0
[0238.548] GetNearestColor (hdc=0x460107b1, color=0xa0a0a0) returned 0xa0a0a0
[0238.548] GetNearestColor (hdc=0x460107b1, color=0x696969) returned 0x696969
[0238.548] GetNearestColor (hdc=0x460107b1, color=0xa0a0a0) returned 0xa0a0a0
[0238.548] GetNearestColor (hdc=0x460107b1, color=0x0) returned 0x0
[0238.548] GetNearestColor (hdc=0x460107b1, color=0xffffff) returned 0xffffff
[0238.548] GetNearestColor (hdc=0x460107b1, color=0xe5e5e5) returned 0xe5e5e5
[0238.548] GetNearestColor (hdc=0x460107b1, color=0xd7d7d7) returned 0xd7d7d7
[0238.548] GetNearestColor (hdc=0x460107b1, color=0x0) returned 0x0
[0238.548] RestoreDC (hdc=0x460107b1, nSavedDC=-1) returned 1
[0238.548] GdipReleaseDC (graphics=0x5d92c30, hdc=0x460107b1) returned 0x0
[0238.548] IsAppThemed () returned 0x1
[0238.548] GetThemeAppProperties () returned 0x3
[0238.549] GetThemeAppProperties () returned 0x3
[0238.549] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0238.549] SendMessageW (hWnd=0x900ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0238.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0238.549] IsAppThemed () returned 0x1
[0238.549] GetThemeAppProperties () returned 0x3
[0238.549] GetThemeAppProperties () returned 0x3
[0238.549] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x241d5ec | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0238.549] IsAppThemed () returned 0x1
[0238.549] GetThemeAppProperties () returned 0x3
[0238.549] GetThemeAppProperties () returned 0x3
[0238.549] IsAppThemed () returned 0x1
[0238.549] GetThemeAppProperties () returned 0x3
[0238.550] GetThemeAppProperties () returned 0x3
[0238.550] GetFocus () returned 0x90122
[0238.550] IsAppThemed () returned 0x1
[0238.550] GetThemeAppProperties () returned 0x3
[0238.550] GetThemeAppProperties () returned 0x3
[0238.550] IsAppThemed () returned 0x1
[0238.550] GetThemeAppProperties () returned 0x3
[0238.550] GetThemeAppProperties () returned 0x3
[0238.550] IsThemePartDefined () returned 0x1
[0238.550] IsAppThemed () returned 0x1
[0238.550] GetThemeAppProperties () returned 0x3
[0238.550] GetThemeAppProperties () returned 0x3
[0238.550] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0238.550] IsAppThemed () returned 0x1
[0238.550] GetThemeAppProperties () returned 0x3
[0238.550] GetThemeAppProperties () returned 0x3
[0238.550] IsAppThemed () returned 0x1
[0238.550] GetThemeAppProperties () returned 0x3
[0238.550] GetThemeAppProperties () returned 0x3
[0238.550] IsThemePartDefined () returned 0x1
[0238.550] GdipCreateRegion (region=0x53e070) returned 0x0
[0238.551] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.551] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0238.551] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.551] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0238.551] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0238.551] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0238.551] LocalFree (hMem=0x89ec80) returned 0x0
[0238.551] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0238.551] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0238.551] LocalFree (hMem=0x89eac0) returned 0x0
[0238.551] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.551] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0238.551] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0238.551] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0238.551] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.551] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0238.552] GetCurrentObject (hdc=0x460107b1, type=0x1) returned 0xb00017
[0238.552] GetCurrentObject (hdc=0x460107b1, type=0x2) returned 0x900010
[0238.552] GetCurrentObject (hdc=0x460107b1, type=0x7) returned 0x1e0507b9
[0238.552] GetCurrentObject (hdc=0x460107b1, type=0x6) returned 0x8a01c2
[0238.552] SaveDC (hdc=0x460107b1) returned 1
[0238.552] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe8040798
[0238.552] GetClipRgn (hdc=0x460107b1, hrgn=0xe8040798) returned 0
[0238.552] SelectClipRgn (hdc=0x460107b1, hrgn=0x640407a1) returned 2
[0238.552] DeleteObject (ho=0xe8040798) returned 1
[0238.552] DeleteObject (ho=0x640407a1) returned 1
[0238.552] OffsetViewportOrgEx (in: hdc=0x460107b1, x=0, y=0, lppt=0x241dc9c | out: lppt=0x241dc9c) returned 1
[0238.553] DrawThemeParentBackground () returned 0x0
[0238.553] GetWindowPlacement (in: hWnd=0x900ea, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0238.553] GetClientRect (in: hWnd=0x900ea, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0238.553] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.553] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.553] GetSystemMetrics (nIndex=42) returned 0
[0238.554] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.554] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0238.554] GetClientRect (in: hWnd=0x900ea, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0238.554] GetCurrentObject (hdc=0x460107b1, type=0x1) returned 0xb00017
[0238.554] GetCurrentObject (hdc=0x460107b1, type=0x2) returned 0x900010
[0238.554] GetCurrentObject (hdc=0x460107b1, type=0x7) returned 0x1e0507b9
[0238.554] GetCurrentObject (hdc=0x460107b1, type=0x6) returned 0x8a01c2
[0238.554] SaveDC (hdc=0x460107b1) returned 2
[0238.554] GetNearestColor (hdc=0x460107b1, color=0xf0f0f0) returned 0xf0f0f0
[0238.554] CreateSolidBrush (color=0xf0f0f0) returned 0x1610078d
[0238.554] FillRect (hDC=0x460107b1, lprc=0x53dad0, hbr=0x1610078d) returned 1
[0238.554] DeleteObject (ho=0x1610078d) returned 1
[0238.554] RestoreDC (hdc=0x460107b1, nSavedDC=-1) returned 1
[0238.555] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.555] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.555] GetSystemMetrics (nIndex=42) returned 0
[0238.555] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.555] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0238.555] GetClientRect (in: hWnd=0x900ea, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0238.555] GetCurrentObject (hdc=0x460107b1, type=0x1) returned 0xb00017
[0238.555] GetCurrentObject (hdc=0x460107b1, type=0x2) returned 0x900010
[0238.555] GetCurrentObject (hdc=0x460107b1, type=0x7) returned 0x1e0507b9
[0238.555] GetCurrentObject (hdc=0x460107b1, type=0x6) returned 0x8a01c2
[0238.555] SaveDC (hdc=0x460107b1) returned 2
[0238.555] GetNearestColor (hdc=0x460107b1, color=0xf0f0f0) returned 0xf0f0f0
[0238.555] CreateSolidBrush (color=0xf0f0f0) returned 0x1710078d
[0238.555] FillRect (hDC=0x460107b1, lprc=0x53da70, hbr=0x1710078d) returned 1
[0238.555] DeleteObject (ho=0x1710078d) returned 1
[0238.555] RestoreDC (hdc=0x460107b1, nSavedDC=-1) returned 1
[0238.556] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.556] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.556] GetSystemMetrics (nIndex=42) returned 0
[0238.556] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.556] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0238.556] RestoreDC (hdc=0x460107b1, nSavedDC=-1) returned 1
[0238.556] GdipReleaseDC (graphics=0x5d92c30, hdc=0x460107b1) returned 0x0
[0238.556] IsAppThemed () returned 0x1
[0238.556] GetThemeAppProperties () returned 0x3
[0238.556] GetThemeAppProperties () returned 0x3
[0238.556] IsAppThemed () returned 0x1
[0238.556] GetThemeAppProperties () returned 0x3
[0238.556] GetThemeAppProperties () returned 0x3
[0238.556] IsThemePartDefined () returned 0x1
[0238.556] GdipCreateRegion (region=0x53dff4) returned 0x0
[0238.557] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.557] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0238.557] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.557] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0238.557] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0238.557] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0238.557] LocalFree (hMem=0x89eac0) returned 0x0
[0238.557] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0238.557] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0238.557] LocalFree (hMem=0x89eac0) returned 0x0
[0238.557] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.557] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0238.557] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0238.557] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0238.557] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.557] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0238.558] GetCurrentObject (hdc=0x460107b1, type=0x1) returned 0xb00017
[0238.558] GetCurrentObject (hdc=0x460107b1, type=0x2) returned 0x900010
[0238.558] GetCurrentObject (hdc=0x460107b1, type=0x7) returned 0x1e0507b9
[0238.558] GetCurrentObject (hdc=0x460107b1, type=0x6) returned 0x8a01c2
[0238.558] SaveDC (hdc=0x460107b1) returned 1
[0238.558] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x650407a1
[0238.558] GetClipRgn (hdc=0x460107b1, hrgn=0x650407a1) returned 0
[0238.558] SelectClipRgn (hdc=0x460107b1, hrgn=0xea040798) returned 2
[0238.558] DeleteObject (ho=0x650407a1) returned 1
[0238.558] DeleteObject (ho=0xea040798) returned 1
[0238.558] OffsetViewportOrgEx (in: hdc=0x460107b1, x=0, y=0, lppt=0x241e524 | out: lppt=0x241e524) returned 1
[0238.558] IsAppThemed () returned 0x1
[0238.558] GetThemeAppProperties () returned 0x3
[0238.558] GetThemeAppProperties () returned 0x3
[0238.558] DrawThemeBackground () returned 0x0
[0238.559] RestoreDC (hdc=0x460107b1, nSavedDC=-1) returned 1
[0238.559] GdipReleaseDC (graphics=0x5d92c30, hdc=0x460107b1) returned 0x0
[0238.559] GdipCreateRegion (region=0x53dff8) returned 0x0
[0238.559] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.559] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0238.559] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.559] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0238.559] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0238.559] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0238.559] LocalFree (hMem=0x89ec80) returned 0x0
[0238.559] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0238.559] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0238.559] LocalFree (hMem=0x89ee08) returned 0x0
[0238.559] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.559] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0238.560] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0238.560] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0238.560] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.560] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0238.560] GetCurrentObject (hdc=0x460107b1, type=0x1) returned 0xb00017
[0238.560] GetCurrentObject (hdc=0x460107b1, type=0x2) returned 0x900010
[0238.560] GetCurrentObject (hdc=0x460107b1, type=0x7) returned 0x1e0507b9
[0238.560] GetCurrentObject (hdc=0x460107b1, type=0x6) returned 0x8a01c2
[0238.560] SaveDC (hdc=0x460107b1) returned 1
[0238.560] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xeb040798
[0238.560] GetClipRgn (hdc=0x460107b1, hrgn=0xeb040798) returned 0
[0238.560] SelectClipRgn (hdc=0x460107b1, hrgn=0x660407a1) returned 2
[0238.560] DeleteObject (ho=0xeb040798) returned 1
[0238.560] DeleteObject (ho=0x660407a1) returned 1
[0238.560] OffsetViewportOrgEx (in: hdc=0x460107b1, x=0, y=0, lppt=0x241e7f8 | out: lppt=0x241e7f8) returned 1
[0238.560] IsAppThemed () returned 0x1
[0238.561] GetThemeAppProperties () returned 0x3
[0238.561] GetThemeAppProperties () returned 0x3
[0238.561] GetThemeBackgroundContentRect () returned 0x0
[0238.561] RestoreDC (hdc=0x460107b1, nSavedDC=-1) returned 1
[0238.561] GdipReleaseDC (graphics=0x5d92c30, hdc=0x460107b1) returned 0x0
[0238.561] IsAppThemed () returned 0x1
[0238.561] GetThemeAppProperties () returned 0x3
[0238.561] GetThemeAppProperties () returned 0x3
[0238.561] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0238.561] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0238.561] GetCurrentObject (hdc=0x460107b1, type=0x1) returned 0xb00017
[0238.561] GetCurrentObject (hdc=0x460107b1, type=0x2) returned 0x900010
[0238.562] GetCurrentObject (hdc=0x460107b1, type=0x7) returned 0x1e0507b9
[0238.562] GetCurrentObject (hdc=0x460107b1, type=0x6) returned 0x8a01c2
[0238.562] SaveDC (hdc=0x460107b1) returned 1
[0238.562] GetTextAlign (hdc=0x460107b1) returned 0x0
[0238.562] GetTextColor (hdc=0x460107b1) returned 0x0
[0238.562] GetCurrentObject (hdc=0x460107b1, type=0x6) returned 0x8a01c2
[0238.562] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0238.562] SelectObject (hdc=0x460107b1, h=0x730a066d) returned 0x8a01c2
[0238.562] GetBkMode (hdc=0x460107b1) returned 2
[0238.562] SetBkMode (hdc=0x460107b1, mode=1) returned 2
[0238.563] DrawTextExW (in: hdc=0x460107b1, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x241eb98 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0238.563] DrawTextExW (in: hdc=0x460107b1, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x241eb98 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0238.563] RestoreDC (hdc=0x460107b1, nSavedDC=-1) returned 1
[0238.563] GdipReleaseDC (graphics=0x5d92c30, hdc=0x460107b1) returned 0x0
[0238.563] GetFocus () returned 0x90122
[0238.563] IsAppThemed () returned 0x1
[0238.563] GetThemeAppProperties () returned 0x3
[0238.564] GetThemeAppProperties () returned 0x3
[0238.564] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0238.564] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x460107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0238.564] GdipReleaseDC (graphics=0x5d92c30, hdc=0x460107b1) returned 0x0
[0238.564] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0238.564] SelectObject (hdc=0x460107b1, h=0x85000f) returned 0x1e0507b9
[0238.564] DeleteDC (hdc=0x460107b1) returned 1
[0238.564] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0238.564] EndPaint (hWnd=0x23013e, lpPaint=0x53e2e4) returned 1
[0238.564] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.565] IsWindowUnicode (hWnd=0x202c6) returned 1
[0238.565] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.565] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.565] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.565] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0238.565] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0238.565] CreateCompatibleDC (hdc=0x10105d6) returned 0x480107b1
[0238.565] SelectObject (hdc=0x480107b1, h=0x1e0507b9) returned 0x85000f
[0238.565] GdipCreateFromHDC (hdc=0x480107b1, graphics=0x53e300) returned 0x0
[0238.565] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0238.565] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0238.566] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0238.566] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.566] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0238.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0238.566] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0238.566] LocalFree (hMem=0x89ee08) returned 0x0
[0238.566] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.566] GdipCreateRegion (region=0x53e348) returned 0x0
[0238.566] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.566] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0238.566] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0238.566] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbe50dbd) returned 0x0
[0238.566] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.566] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0238.566] GetCurrentObject (hdc=0x480107b1, type=0x1) returned 0xb00017
[0238.567] GetCurrentObject (hdc=0x480107b1, type=0x2) returned 0x900010
[0238.567] GetCurrentObject (hdc=0x480107b1, type=0x7) returned 0x1e0507b9
[0238.567] GetCurrentObject (hdc=0x480107b1, type=0x6) returned 0x8a01c2
[0238.567] SaveDC (hdc=0x480107b1) returned 1
[0238.567] GetNearestColor (hdc=0x480107b1, color=0xff) returned 0xff
[0238.567] GetNearestColor (hdc=0x480107b1, color=0x55) returned 0x55
[0238.567] GetNearestColor (hdc=0x480107b1, color=0x0) returned 0x0
[0238.567] GetNearestColor (hdc=0x480107b1, color=0x55) returned 0x55
[0238.567] GetNearestColor (hdc=0x480107b1, color=0x0) returned 0x0
[0238.567] GetNearestColor (hdc=0x480107b1, color=0x8080ff) returned 0x8080ff
[0238.567] GetNearestColor (hdc=0x480107b1, color=0x7373e5) returned 0x7373e5
[0238.567] GetNearestColor (hdc=0x480107b1, color=0xe5) returned 0xe5
[0238.568] GetNearestColor (hdc=0x480107b1, color=0x0) returned 0x0
[0238.568] RestoreDC (hdc=0x480107b1, nSavedDC=-1) returned 1
[0238.568] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107b1) returned 0x0
[0238.568] IsAppThemed () returned 0x1
[0238.575] GetThemeAppProperties () returned 0x3
[0238.575] GetThemeAppProperties () returned 0x3
[0238.575] IsAppThemed () returned 0x1
[0238.575] GetThemeAppProperties () returned 0x3
[0238.575] GetThemeAppProperties () returned 0x3
[0238.576] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0238.576] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x241f37c | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0238.576] IsAppThemed () returned 0x1
[0238.576] GetThemeAppProperties () returned 0x3
[0238.576] GetThemeAppProperties () returned 0x3
[0238.576] IsAppThemed () returned 0x1
[0238.576] GetThemeAppProperties () returned 0x3
[0238.576] GetThemeAppProperties () returned 0x3
[0238.576] GetFocus () returned 0x90122
[0238.576] IsAppThemed () returned 0x1
[0238.576] GetThemeAppProperties () returned 0x3
[0238.576] GetThemeAppProperties () returned 0x3
[0238.576] IsAppThemed () returned 0x1
[0238.577] GetThemeAppProperties () returned 0x3
[0238.577] GetThemeAppProperties () returned 0x3
[0238.577] IsThemePartDefined () returned 0x1
[0238.577] IsAppThemed () returned 0x1
[0238.577] GetThemeAppProperties () returned 0x3
[0238.577] GetThemeAppProperties () returned 0x3
[0238.577] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0238.577] IsAppThemed () returned 0x1
[0238.577] GetThemeAppProperties () returned 0x3
[0238.577] GetThemeAppProperties () returned 0x3
[0238.577] IsAppThemed () returned 0x1
[0238.577] GetThemeAppProperties () returned 0x3
[0238.577] GetThemeAppProperties () returned 0x3
[0238.577] IsThemePartDefined () returned 0x1
[0238.577] GdipCreateRegion (region=0x53e070) returned 0x0
[0238.577] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.577] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0238.577] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.577] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0238.577] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0238.578] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0238.578] LocalFree (hMem=0x89ec80) returned 0x0
[0238.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0238.578] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0238.578] LocalFree (hMem=0x89ec80) returned 0x0
[0238.578] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.578] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0238.578] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0238.578] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0238.578] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.578] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0238.578] GetCurrentObject (hdc=0x480107b1, type=0x1) returned 0xb00017
[0238.578] GetCurrentObject (hdc=0x480107b1, type=0x2) returned 0x900010
[0238.578] GetCurrentObject (hdc=0x480107b1, type=0x7) returned 0x1e0507b9
[0238.578] GetCurrentObject (hdc=0x480107b1, type=0x6) returned 0x8a01c2
[0238.578] SaveDC (hdc=0x480107b1) returned 1
[0238.579] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x670407a1
[0238.579] GetClipRgn (hdc=0x480107b1, hrgn=0x670407a1) returned 0
[0238.579] SelectClipRgn (hdc=0x480107b1, hrgn=0xef040798) returned 2
[0238.579] DeleteObject (ho=0x670407a1) returned 1
[0238.579] DeleteObject (ho=0xef040798) returned 1
[0238.579] OffsetViewportOrgEx (in: hdc=0x480107b1, x=0, y=0, lppt=0x241fa2c | out: lppt=0x241fa2c) returned 1
[0238.579] DrawThemeParentBackground () returned 0x0
[0238.579] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0238.579] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0238.579] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0238.579] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0238.579] GetSystemMetrics (nIndex=42) returned 0
[0238.579] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0238.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0238.580] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0238.580] GetCurrentObject (hdc=0x480107b1, type=0x1) returned 0xb00017
[0238.580] GetCurrentObject (hdc=0x480107b1, type=0x2) returned 0x900010
[0238.580] GetCurrentObject (hdc=0x480107b1, type=0x7) returned 0x1e0507b9
[0238.580] GetCurrentObject (hdc=0x480107b1, type=0x6) returned 0x8a01c2
[0238.580] SaveDC (hdc=0x480107b1) returned 2
[0238.580] GetNearestColor (hdc=0x480107b1, color=0xff) returned 0xff
[0238.580] CreateSolidBrush (color=0xff) returned 0x1810078d
[0238.580] FillRect (hDC=0x480107b1, lprc=0x53dad0, hbr=0x1810078d) returned 1
[0238.580] DeleteObject (ho=0x1810078d) returned 1
[0238.580] RestoreDC (hdc=0x480107b1, nSavedDC=-1) returned 1
[0238.580] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0238.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0238.581] GetSystemMetrics (nIndex=42) returned 0
[0238.581] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0238.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0238.581] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0238.581] GetCurrentObject (hdc=0x480107b1, type=0x1) returned 0xb00017
[0238.581] GetCurrentObject (hdc=0x480107b1, type=0x2) returned 0x900010
[0238.581] GetCurrentObject (hdc=0x480107b1, type=0x7) returned 0x1e0507b9
[0238.581] GetCurrentObject (hdc=0x480107b1, type=0x6) returned 0x8a01c2
[0238.581] SaveDC (hdc=0x480107b1) returned 2
[0238.581] GetNearestColor (hdc=0x480107b1, color=0xff) returned 0xff
[0238.581] CreateSolidBrush (color=0xff) returned 0x1910078d
[0238.581] FillRect (hDC=0x480107b1, lprc=0x53da70, hbr=0x1910078d) returned 1
[0238.581] DeleteObject (ho=0x1910078d) returned 1
[0238.581] RestoreDC (hdc=0x480107b1, nSavedDC=-1) returned 1
[0238.582] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0238.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0238.582] GetSystemMetrics (nIndex=42) returned 0
[0238.582] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0238.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0238.582] RestoreDC (hdc=0x480107b1, nSavedDC=-1) returned 1
[0238.582] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107b1) returned 0x0
[0238.582] IsAppThemed () returned 0x1
[0238.582] GetThemeAppProperties () returned 0x3
[0238.582] GetThemeAppProperties () returned 0x3
[0238.582] IsAppThemed () returned 0x1
[0238.582] GetThemeAppProperties () returned 0x3
[0238.582] GetThemeAppProperties () returned 0x3
[0238.582] IsThemePartDefined () returned 0x1
[0238.582] GdipCreateRegion (region=0x53dff4) returned 0x0
[0238.582] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.583] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0238.583] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.583] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0238.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0238.583] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0238.583] LocalFree (hMem=0x89ee40) returned 0x0
[0238.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0238.583] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0238.583] LocalFree (hMem=0x89ec80) returned 0x0
[0238.583] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.583] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0238.583] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0238.583] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0238.583] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.583] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0238.583] GetCurrentObject (hdc=0x480107b1, type=0x1) returned 0xb00017
[0238.584] GetCurrentObject (hdc=0x480107b1, type=0x2) returned 0x900010
[0238.584] GetCurrentObject (hdc=0x480107b1, type=0x7) returned 0x1e0507b9
[0238.584] GetCurrentObject (hdc=0x480107b1, type=0x6) returned 0x8a01c2
[0238.584] SaveDC (hdc=0x480107b1) returned 1
[0238.584] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf0040798
[0238.584] GetClipRgn (hdc=0x480107b1, hrgn=0xf0040798) returned 0
[0238.584] SelectClipRgn (hdc=0x480107b1, hrgn=0x690407a1) returned 2
[0238.591] DeleteObject (ho=0xf0040798) returned 1
[0238.591] DeleteObject (ho=0x690407a1) returned 1
[0238.591] OffsetViewportOrgEx (in: hdc=0x480107b1, x=0, y=0, lppt=0x2420290 | out: lppt=0x2420290) returned 1
[0238.591] IsAppThemed () returned 0x1
[0238.591] GetThemeAppProperties () returned 0x3
[0238.591] GetThemeAppProperties () returned 0x3
[0238.592] DrawThemeBackground () returned 0x0
[0238.592] RestoreDC (hdc=0x480107b1, nSavedDC=-1) returned 1
[0238.592] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107b1) returned 0x0
[0238.592] GdipCreateRegion (region=0x53dff8) returned 0x0
[0238.592] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.592] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0238.592] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.592] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0238.592] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0238.592] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0238.592] LocalFree (hMem=0x89ee08) returned 0x0
[0238.592] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0238.592] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0238.592] LocalFree (hMem=0x89eac0) returned 0x0
[0238.592] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.593] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0238.593] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0238.593] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0238.593] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.593] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0238.593] GetCurrentObject (hdc=0x480107b1, type=0x1) returned 0xb00017
[0238.593] GetCurrentObject (hdc=0x480107b1, type=0x2) returned 0x900010
[0238.593] GetCurrentObject (hdc=0x480107b1, type=0x7) returned 0x1e0507b9
[0238.593] GetCurrentObject (hdc=0x480107b1, type=0x6) returned 0x8a01c2
[0238.593] SaveDC (hdc=0x480107b1) returned 1
[0238.593] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a0407a1
[0238.593] GetClipRgn (hdc=0x480107b1, hrgn=0x6a0407a1) returned 0
[0238.593] SelectClipRgn (hdc=0x480107b1, hrgn=0xf1040798) returned 2
[0238.593] DeleteObject (ho=0x6a0407a1) returned 1
[0238.593] DeleteObject (ho=0xf1040798) returned 1
[0238.593] OffsetViewportOrgEx (in: hdc=0x480107b1, x=0, y=0, lppt=0x2420564 | out: lppt=0x2420564) returned 1
[0238.593] IsAppThemed () returned 0x1
[0238.594] GetThemeAppProperties () returned 0x3
[0238.594] GetThemeAppProperties () returned 0x3
[0238.594] GetThemeBackgroundContentRect () returned 0x0
[0238.594] RestoreDC (hdc=0x480107b1, nSavedDC=-1) returned 1
[0238.594] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107b1) returned 0x0
[0238.594] IsAppThemed () returned 0x1
[0238.594] GetThemeAppProperties () returned 0x3
[0238.594] GetThemeAppProperties () returned 0x3
[0238.594] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0238.594] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0238.594] GetCurrentObject (hdc=0x480107b1, type=0x1) returned 0xb00017
[0238.594] GetCurrentObject (hdc=0x480107b1, type=0x2) returned 0x900010
[0238.594] GetCurrentObject (hdc=0x480107b1, type=0x7) returned 0x1e0507b9
[0238.594] GetCurrentObject (hdc=0x480107b1, type=0x6) returned 0x8a01c2
[0238.594] SaveDC (hdc=0x480107b1) returned 1
[0238.594] GetTextAlign (hdc=0x480107b1) returned 0x0
[0238.594] GetTextColor (hdc=0x480107b1) returned 0x0
[0238.594] GetCurrentObject (hdc=0x480107b1, type=0x6) returned 0x8a01c2
[0238.595] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0238.595] SelectObject (hdc=0x480107b1, h=0x450a0799) returned 0x8a01c2
[0238.595] GetBkMode (hdc=0x480107b1) returned 2
[0238.595] SetBkMode (hdc=0x480107b1, mode=1) returned 2
[0238.595] DrawTextExW (in: hdc=0x480107b1, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x2420904 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0238.595] DrawTextExW (in: hdc=0x480107b1, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x2420904 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0238.596] RestoreDC (hdc=0x480107b1, nSavedDC=-1) returned 1
[0238.596] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107b1) returned 0x0
[0238.596] GetFocus () returned 0x90122
[0238.596] IsAppThemed () returned 0x1
[0238.596] GetThemeAppProperties () returned 0x3
[0238.596] GetThemeAppProperties () returned 0x3
[0238.596] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0238.596] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x480107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0238.596] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107b1) returned 0x0
[0238.596] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0238.596] SelectObject (hdc=0x480107b1, h=0x85000f) returned 0x1e0507b9
[0238.596] DeleteDC (hdc=0x480107b1) returned 1
[0238.596] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0238.596] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0238.597] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.597] IsWindowUnicode (hWnd=0x5004e) returned 1
[0238.597] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.597] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.598] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.598] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.598] IsWindowUnicode (hWnd=0x5004e) returned 1
[0238.598] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.598] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.598] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.598] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x2a1, wParam=0x0, lParam=0x80012) returned 0x0
[0238.598] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0238.598] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0238.598] WaitMessage () returned 1
[0238.664] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.664] IsWindowUnicode (hWnd=0x102dc) returned 1
[0238.664] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.664] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.664] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.665] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0238.665] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0238.666] WaitMessage () returned 1
[0238.666] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.666] IsWindowUnicode (hWnd=0x102dc) returned 1
[0238.666] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.666] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.667] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.668] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.668] IsWindowUnicode (hWnd=0x102dc) returned 1
[0238.668] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.668] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.668] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.669] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.669] IsWindowUnicode (hWnd=0x102dc) returned 1
[0238.669] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.669] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.669] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.669] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0238.670] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0238.670] WaitMessage () returned 1
[0238.670] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.670] IsWindowUnicode (hWnd=0x102dc) returned 1
[0238.670] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.670] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.670] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.672] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.672] IsWindowUnicode (hWnd=0x102dc) returned 1
[0238.672] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.672] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.672] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.672] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.672] IsWindowUnicode (hWnd=0x102dc) returned 1
[0238.672] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.672] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.672] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.673] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0238.673] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0238.673] WaitMessage () returned 1
[0238.673] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.682] IsWindowUnicode (hWnd=0x102dc) returned 1
[0238.682] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.682] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.682] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.683] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.683] IsWindowUnicode (hWnd=0x102dc) returned 1
[0238.683] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.683] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.683] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.684] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.684] IsWindowUnicode (hWnd=0x102dc) returned 1
[0238.684] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.684] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.684] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.685] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x84, wParam=0x0, lParam=0x1910353) returned 0x1
[0238.685] IsWindowUnicode (hWnd=0x5004e) returned 1
[0238.685] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x84, wParam=0x0, lParam=0x1910353) returned 0x1
[0238.685] GetDlgItem (hDlg=0x900ea, nIDDlgItem=0) returned 0x0
[0238.685] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x210, wParam=0x201, lParam=0x140134) returned 0x0
[0238.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x21, wParam=0x900ea, lParam=0x2010001) returned 0x1
[0238.685] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x21, wParam=0x900ea, lParam=0x2010001) returned 0x1
[0238.686] SetCursor (hCursor=0x10003) returned 0x10003
[0238.686] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.686] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0238.686] GetKeyState (nVirtKey=1) returned -128
[0238.686] GetKeyState (nVirtKey=2) returned 0
[0238.686] GetKeyState (nVirtKey=4) returned 0
[0238.686] GetKeyState (nVirtKey=5) returned 0
[0238.686] GetKeyState (nVirtKey=6) returned 0
[0238.686] IsWindowVisible (hWnd=0x5004e) returned 1
[0238.686] IsWindowEnabled (hWnd=0x5004e) returned 1
[0238.686] SetFocus (hWnd=0x5004e) returned 0x90122
[0238.686] GetFocus () returned 0x5004e
[0238.687] IsChild (hWndParent=0x900ea, hWnd=0x5004e) returned 1
[0238.687] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x8, wParam=0x5004e, lParam=0x0) returned 0x1
[0238.687] SendMessageW (hWnd=0x90122, Msg=0x2111, wParam=0x2000122, lParam=0x90122) returned 0x0
[0238.688] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0238.690] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0238.690] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0238.691] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0238.691] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0238.691] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0238.699] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0238.699] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x7, wParam=0x90122, lParam=0x0) returned 0x0
[0238.699] GetStockObject (i=5) returned 0x900015
[0238.699] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0238.699] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0xd, wParam=0x3, lParam=0x89e748) returned 0x2
[0238.699] GetDlgItem (hDlg=0x900ea, nIDDlgItem=327758) returned 0x5004e
[0238.699] SendMessageW (hWnd=0x5004e, Msg=0x202b, wParam=0x5004e, lParam=0x53de74) returned 0x0
[0238.699] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x202b, wParam=0x5004e, lParam=0x53de74) returned 0x0
[0238.699] InvalidateRect (hWnd=0x5004e, lpRect=0x0, bErase=0) returned 1
[0238.703] GetFocus () returned 0x5004e
[0238.703] GetFocus () returned 0x5004e
[0238.703] GetFocus () returned 0x5004e
[0238.703] GetKeyState (nVirtKey=1) returned -128
[0238.703] GetKeyState (nVirtKey=2) returned 0
[0238.703] GetKeyState (nVirtKey=4) returned 0
[0238.703] GetKeyState (nVirtKey=5) returned 0
[0238.703] GetKeyState (nVirtKey=6) returned 0
[0238.703] GetCapture () returned 0x0
[0238.703] SetCapture (hWnd=0x5004e) returned 0x0
[0238.703] GetKeyState (nVirtKey=1) returned -128
[0238.703] GetKeyState (nVirtKey=2) returned 0
[0238.703] GetKeyState (nVirtKey=4) returned 0
[0238.703] GetKeyState (nVirtKey=5) returned 0
[0238.703] GetKeyState (nVirtKey=6) returned 0
[0238.703] NotifyWinEvent (event=0x800a, hwnd=0x5004e, idObject=-4, idChild=0)
[0238.703] InvalidateRect (hWnd=0x5004e, lpRect=0x53e4c8, bErase=0) returned 1
[0238.704] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.704] IsWindowUnicode (hWnd=0x5004e) returned 1
[0238.704] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0238.704] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0238.704] DispatchMessageW (lpMsg=0x53e8a0)
[0238.704] MapWindowPoints (in: hWndFrom=0x5004e, hWndTo=0x0, lpPoints=0x2420b30, cPoints=0x1 | out: lpPoints=0x2420b30) returned 25756481
[0238.704] NotifyWinEvent (event=0x800a, hwnd=0x5004e, idObject=-4, idChild=0)
[0238.704] InvalidateRect (hWnd=0x5004e, lpRect=0x53e468, bErase=0) returned 1
[0238.704] UpdateWindow (hWnd=0x5004e)
[0238.704] BeginPaint (in: hWnd=0x5004e, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0238.704] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0238.705] CreateCompatibleDC (hdc=0x10105d6) returned 0xf5010790
[0238.705] SelectObject (hdc=0xf5010790, h=0x1e0507b9) returned 0x85000f
[0238.705] GdipCreateFromHDC (hdc=0xf5010790, graphics=0x53df98) returned 0x0
[0238.705] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0238.705] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0238.705] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0238.705] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.705] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0238.705] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0238.705] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0238.705] LocalFree (hMem=0x89ec80) returned 0x0
[0238.706] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.706] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0238.706] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.706] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0238.706] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0238.706] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbe30dbd) returned 0x0
[0238.706] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.706] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0238.706] GetCurrentObject (hdc=0xf5010790, type=0x1) returned 0xb00017
[0238.706] GetCurrentObject (hdc=0xf5010790, type=0x2) returned 0x900010
[0238.706] GetCurrentObject (hdc=0xf5010790, type=0x7) returned 0x1e0507b9
[0238.706] GetCurrentObject (hdc=0xf5010790, type=0x6) returned 0x8a01c2
[0238.706] SaveDC (hdc=0xf5010790) returned 1
[0238.706] GetNearestColor (hdc=0xf5010790, color=0xf0f0f0) returned 0xf0f0f0
[0238.706] GetNearestColor (hdc=0xf5010790, color=0xa0a0a0) returned 0xa0a0a0
[0238.707] GetNearestColor (hdc=0xf5010790, color=0x696969) returned 0x696969
[0238.707] GetNearestColor (hdc=0xf5010790, color=0xa0a0a0) returned 0xa0a0a0
[0238.707] GetNearestColor (hdc=0xf5010790, color=0x0) returned 0x0
[0238.707] GetNearestColor (hdc=0xf5010790, color=0xffffff) returned 0xffffff
[0238.707] GetNearestColor (hdc=0xf5010790, color=0xe5e5e5) returned 0xe5e5e5
[0238.707] GetNearestColor (hdc=0xf5010790, color=0xd7d7d7) returned 0xd7d7d7
[0238.707] GetNearestColor (hdc=0xf5010790, color=0x0) returned 0x0
[0238.707] RestoreDC (hdc=0xf5010790, nSavedDC=-1) returned 1
[0238.707] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf5010790) returned 0x0
[0238.707] IsAppThemed () returned 0x1
[0238.707] GetThemeAppProperties () returned 0x3
[0238.707] GetThemeAppProperties () returned 0x3
[0238.708] IsAppThemed () returned 0x1
[0238.708] GetThemeAppProperties () returned 0x3
[0238.708] GetThemeAppProperties () returned 0x3
[0238.708] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0238.708] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x24212a4 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0238.708] IsAppThemed () returned 0x1
[0238.708] GetThemeAppProperties () returned 0x3
[0238.708] GetThemeAppProperties () returned 0x3
[0238.708] IsAppThemed () returned 0x1
[0238.708] GetThemeAppProperties () returned 0x3
[0238.708] GetThemeAppProperties () returned 0x3
[0238.708] IsAppThemed () returned 0x1
[0238.708] GetThemeAppProperties () returned 0x3
[0238.709] GetThemeAppProperties () returned 0x3
[0238.709] IsAppThemed () returned 0x1
[0238.711] GetThemeAppProperties () returned 0x3
[0238.711] GetThemeAppProperties () returned 0x3
[0238.711] IsThemePartDefined () returned 0x1
[0238.711] IsAppThemed () returned 0x1
[0238.712] GetThemeAppProperties () returned 0x3
[0238.712] GetThemeAppProperties () returned 0x3
[0238.712] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0238.712] IsAppThemed () returned 0x1
[0238.712] GetThemeAppProperties () returned 0x3
[0238.712] GetThemeAppProperties () returned 0x3
[0238.712] IsAppThemed () returned 0x1
[0238.712] GetThemeAppProperties () returned 0x3
[0238.712] GetThemeAppProperties () returned 0x3
[0238.712] IsThemePartDefined () returned 0x1
[0238.712] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0238.712] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.712] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0238.712] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.712] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0238.712] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0238.712] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0238.712] LocalFree (hMem=0x89ee08) returned 0x0
[0238.713] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0238.713] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0238.713] LocalFree (hMem=0x89ec80) returned 0x0
[0238.713] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.713] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0238.713] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0238.713] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0238.713] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.713] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0238.713] GetCurrentObject (hdc=0xf5010790, type=0x1) returned 0xb00017
[0238.713] GetCurrentObject (hdc=0xf5010790, type=0x2) returned 0x900010
[0238.713] GetCurrentObject (hdc=0xf5010790, type=0x7) returned 0x1e0507b9
[0238.713] GetCurrentObject (hdc=0xf5010790, type=0x6) returned 0x8a01c2
[0238.713] SaveDC (hdc=0xf5010790) returned 1
[0238.713] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf2040798
[0238.714] GetClipRgn (hdc=0xf5010790, hrgn=0xf2040798) returned 0
[0238.714] SelectClipRgn (hdc=0xf5010790, hrgn=0x6e0407a1) returned 2
[0238.714] DeleteObject (ho=0xf2040798) returned 1
[0238.714] DeleteObject (ho=0x6e0407a1) returned 1
[0238.714] OffsetViewportOrgEx (in: hdc=0xf5010790, x=0, y=0, lppt=0x2421954 | out: lppt=0x2421954) returned 1
[0238.714] DrawThemeParentBackground () returned 0x0
[0238.714] GetWindowPlacement (in: hWnd=0x900ea, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0238.714] GetClientRect (in: hWnd=0x900ea, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0238.714] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.714] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.714] GetSystemMetrics (nIndex=42) returned 0
[0238.714] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.714] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0238.714] GetClientRect (in: hWnd=0x900ea, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0238.714] GetCurrentObject (hdc=0xf5010790, type=0x1) returned 0xb00017
[0238.715] GetCurrentObject (hdc=0xf5010790, type=0x2) returned 0x900010
[0238.715] GetCurrentObject (hdc=0xf5010790, type=0x7) returned 0x1e0507b9
[0238.715] GetCurrentObject (hdc=0xf5010790, type=0x6) returned 0x8a01c2
[0238.715] SaveDC (hdc=0xf5010790) returned 2
[0238.715] GetNearestColor (hdc=0xf5010790, color=0xf0f0f0) returned 0xf0f0f0
[0238.715] CreateSolidBrush (color=0xf0f0f0) returned 0x1a10078d
[0238.715] FillRect (hDC=0xf5010790, lprc=0x53d760, hbr=0x1a10078d) returned 1
[0238.715] DeleteObject (ho=0x1a10078d) returned 1
[0238.715] RestoreDC (hdc=0xf5010790, nSavedDC=-1) returned 1
[0238.715] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.715] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.715] GetSystemMetrics (nIndex=42) returned 0
[0238.715] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.715] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0238.716] GetClientRect (in: hWnd=0x900ea, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0238.716] GetCurrentObject (hdc=0xf5010790, type=0x1) returned 0xb00017
[0238.716] GetCurrentObject (hdc=0xf5010790, type=0x2) returned 0x900010
[0238.716] GetCurrentObject (hdc=0xf5010790, type=0x7) returned 0x1e0507b9
[0238.716] GetCurrentObject (hdc=0xf5010790, type=0x6) returned 0x8a01c2
[0238.716] SaveDC (hdc=0xf5010790) returned 2
[0238.716] GetNearestColor (hdc=0xf5010790, color=0xf0f0f0) returned 0xf0f0f0
[0238.716] CreateSolidBrush (color=0xf0f0f0) returned 0x1b10078d
[0238.716] FillRect (hDC=0xf5010790, lprc=0x53d700, hbr=0x1b10078d) returned 1
[0238.716] DeleteObject (ho=0x1b10078d) returned 1
[0238.716] RestoreDC (hdc=0xf5010790, nSavedDC=-1) returned 1
[0238.716] GetWindowTextLengthW (hWnd=0x900ea) returned 10
[0238.716] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0238.716] GetSystemMetrics (nIndex=42) returned 0
[0238.716] GetWindowTextW (in: hWnd=0x900ea, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0238.716] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0238.717] RestoreDC (hdc=0xf5010790, nSavedDC=-1) returned 1
[0238.717] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf5010790) returned 0x0
[0238.717] IsAppThemed () returned 0x1
[0238.717] GetThemeAppProperties () returned 0x3
[0238.717] GetThemeAppProperties () returned 0x3
[0238.717] IsAppThemed () returned 0x1
[0238.717] GetThemeAppProperties () returned 0x3
[0238.717] GetThemeAppProperties () returned 0x3
[0238.717] IsThemePartDefined () returned 0x1
[0238.717] GdipCreateRegion (region=0x53dc80) returned 0x0
[0238.717] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.717] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0238.717] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.717] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0238.717] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0238.718] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0238.718] LocalFree (hMem=0x89ea88) returned 0x0
[0238.718] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0238.718] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0238.718] LocalFree (hMem=0x89ea88) returned 0x0
[0238.718] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.718] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0238.718] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0238.718] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0238.718] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.718] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0238.718] GetCurrentObject (hdc=0xf5010790, type=0x1) returned 0xb00017
[0238.718] GetCurrentObject (hdc=0xf5010790, type=0x2) returned 0x900010
[0238.718] GetCurrentObject (hdc=0xf5010790, type=0x7) returned 0x1e0507b9
[0238.718] GetCurrentObject (hdc=0xf5010790, type=0x6) returned 0x8a01c2
[0238.719] SaveDC (hdc=0xf5010790) returned 1
[0238.719] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f0407a1
[0238.719] GetClipRgn (hdc=0xf5010790, hrgn=0x6f0407a1) returned 0
[0238.719] SelectClipRgn (hdc=0xf5010790, hrgn=0xf4040798) returned 2
[0238.719] DeleteObject (ho=0x6f0407a1) returned 1
[0238.719] DeleteObject (ho=0xf4040798) returned 1
[0238.719] OffsetViewportOrgEx (in: hdc=0xf5010790, x=0, y=0, lppt=0x24221dc | out: lppt=0x24221dc) returned 1
[0238.719] IsAppThemed () returned 0x1
[0238.719] GetThemeAppProperties () returned 0x3
[0238.719] GetThemeAppProperties () returned 0x3
[0238.719] DrawThemeBackground () returned 0x0
[0238.719] RestoreDC (hdc=0xf5010790, nSavedDC=-1) returned 1
[0238.719] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf5010790) returned 0x0
[0238.719] GdipCreateRegion (region=0x53dc84) returned 0x0
[0238.720] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.720] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0238.720] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.720] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0238.720] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0238.720] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0238.720] LocalFree (hMem=0x89ee08) returned 0x0
[0238.720] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0238.720] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0238.720] LocalFree (hMem=0x89ea88) returned 0x0
[0238.720] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.720] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0238.720] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0238.720] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0238.720] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.720] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0238.720] GetCurrentObject (hdc=0xf5010790, type=0x1) returned 0xb00017
[0238.721] GetCurrentObject (hdc=0xf5010790, type=0x2) returned 0x900010
[0238.721] GetCurrentObject (hdc=0xf5010790, type=0x7) returned 0x1e0507b9
[0238.721] GetCurrentObject (hdc=0xf5010790, type=0x6) returned 0x8a01c2
[0238.721] SaveDC (hdc=0xf5010790) returned 1
[0238.721] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf5040798
[0238.721] GetClipRgn (hdc=0xf5010790, hrgn=0xf5040798) returned 0
[0238.721] SelectClipRgn (hdc=0xf5010790, hrgn=0x700407a1) returned 2
[0238.721] DeleteObject (ho=0xf5040798) returned 1
[0238.721] DeleteObject (ho=0x700407a1) returned 1
[0238.721] OffsetViewportOrgEx (in: hdc=0xf5010790, x=0, y=0, lppt=0x24224b0 | out: lppt=0x24224b0) returned 1
[0238.721] IsAppThemed () returned 0x1
[0238.721] GetThemeAppProperties () returned 0x3
[0238.721] GetThemeAppProperties () returned 0x3
[0238.721] GetThemeBackgroundContentRect () returned 0x0
[0238.721] RestoreDC (hdc=0xf5010790, nSavedDC=-1) returned 1
[0238.721] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf5010790) returned 0x0
[0238.722] IsAppThemed () returned 0x1
[0238.722] GetThemeAppProperties () returned 0x3
[0238.722] GetThemeAppProperties () returned 0x3
[0238.722] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0238.722] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0238.722] GetCurrentObject (hdc=0xf5010790, type=0x1) returned 0xb00017
[0238.722] GetCurrentObject (hdc=0xf5010790, type=0x2) returned 0x900010
[0238.722] GetCurrentObject (hdc=0xf5010790, type=0x7) returned 0x1e0507b9
[0238.722] GetCurrentObject (hdc=0xf5010790, type=0x6) returned 0x8a01c2
[0238.722] SaveDC (hdc=0xf5010790) returned 1
[0238.722] GetTextAlign (hdc=0xf5010790) returned 0x0
[0238.722] GetTextColor (hdc=0xf5010790) returned 0x0
[0238.722] GetCurrentObject (hdc=0xf5010790, type=0x6) returned 0x8a01c2
[0238.722] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0238.723] SelectObject (hdc=0xf5010790, h=0x730a066d) returned 0x8a01c2
[0238.723] GetBkMode (hdc=0xf5010790) returned 2
[0238.723] SetBkMode (hdc=0xf5010790, mode=1) returned 2
[0238.723] DrawTextExW (in: hdc=0xf5010790, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x2422850 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0238.723] DrawTextExW (in: hdc=0xf5010790, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x2422850 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0238.723] RestoreDC (hdc=0xf5010790, nSavedDC=-1) returned 1
[0238.723] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf5010790) returned 0x0
[0238.724] GetFocus () returned 0x5004e
[0238.724] IsAppThemed () returned 0x1
[0238.724] GetThemeAppProperties () returned 0x3
[0238.724] GetThemeAppProperties () returned 0x3
[0238.724] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0238.724] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0xf5010790, x1=0, y1=0, rop=0xcc0020) returned 1
[0238.724] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf5010790) returned 0x0
[0238.724] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0238.724] SelectObject (hdc=0xf5010790, h=0x85000f) returned 0x1e0507b9
[0238.726] DeleteDC (hdc=0xf5010790) returned 1
[0238.726] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0238.726] EndPaint (hWnd=0x5004e, lpPaint=0x53df7c) returned 1
[0238.727] WindowFromPoint (Point=0x353)
[0238.727] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x84, wParam=0x0, lParam=0x1910353) returned 0x1
[0238.727] GetWindowTextLengthW (hWnd=0x90122)
[0238.727] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0238.727] GetWindowTextW (hWnd=0x90122, lpString=0x53e3e4, nMaxCount=1)
[0238.727] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0238.728] SendMessageW (hWnd=0x900ea, Msg=0x10, wParam=0x0, lParam=0x0)
[0238.728] GetCapture () returned 0x5004e
[0238.728] ReleaseCapture ()
[0238.728] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0238.730] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x84, wParam=0x0, lParam=0x1910353) returned 0x1
[0238.730] EnableWindow (hWnd=0x70036, bEnable=1)
[0238.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0238.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x86, wParam=0x0, lParam=0x70036)
[0238.733] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0238.733] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0238.734] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0238.744] IsChild (hWndParent=0x900ea, hWnd=0x202c6) returned 0
[0238.744] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x5004e, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0238.744] GetCapture () returned 0x0
[0238.744] InvalidateRect (hWnd=0x5004e, lpRect=0x0, bErase=0) returned 1
[0238.749] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0238.749] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0238.749] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0238.755] IsChild (hWndParent=0x900ea, hWnd=0x202c6) returned 0
[0238.755] ShowWindow (hWnd=0x900ea, nCmdShow=0)
[0238.755] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0238.766] GetWindowLongW (hWnd=0x900ea, nIndex=-20) returned 327937
[0238.766] DestroyWindow (hWnd=0x900ea)
[0238.766] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0238.767] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x900ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0238.768] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x90122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0238.768] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x202ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0238.770] GetWindowTextLengthW (hWnd=0x901e2)
[0238.770] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0238.770] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x901e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0238.778] GetProcessWindowStation () returned 0x13c
[0238.778] GetActiveWindow () returned 0x70036
[0238.779] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0238.779] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0238.779] GetCurrentThreadId () returned 0x11d0
[0238.779] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf50c6, lParam=0x0) returned 1
[0238.780] IsWindowVisible (hWnd=0x70036) returned 1
[0238.780] IsWindowEnabled (hWnd=0x70036) returned 1
[0238.780] IsWindowVisible (hWnd=0x602b6) returned 0
[0238.780] IsWindowVisible (hWnd=0x901f8) returned 0
[0238.780] IsWindowVisible (hWnd=0x202d0) returned 0
[0238.780] IsWindowVisible (hWnd=0x202d4) returned 0
[0238.780] GetActiveWindow () returned 0x70036
[0238.780] GetFocus () returned 0x202c6
[0238.780] IsWindow (hWnd=0x70036) returned 1
[0238.780] EnableWindow (hWnd=0x70036, bEnable=0)
[0238.780] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0238.781] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0238.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0238.821] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x60100ce
[0238.821] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0238.821] CreateCompatibleDC (hdc=0x60100ce) returned 0xa70107bf
[0238.821] SelectObject (hdc=0xa70107bf, h=0x1e0507b9) returned 0x85000f
[0238.821] GdipCreateFromHDC (hdc=0xa70107bf, graphics=0x53e108) returned 0x0
[0238.821] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0238.821] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0238.822] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0238.822] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.822] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0238.822] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0238.822] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0238.822] LocalFree (hMem=0x89eac0) returned 0x0
[0238.822] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.822] GdipCreateRegion (region=0x53e150) returned 0x0
[0238.822] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.822] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0238.822] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0238.823] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbe10dbd) returned 0x0
[0238.823] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.823] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0238.823] GetCurrentObject (hdc=0xa70107bf, type=0x1) returned 0xb00017
[0238.823] GetCurrentObject (hdc=0xa70107bf, type=0x2) returned 0x900010
[0238.823] GetCurrentObject (hdc=0xa70107bf, type=0x7) returned 0x1e0507b9
[0238.823] GetCurrentObject (hdc=0xa70107bf, type=0x6) returned 0x8a01c2
[0238.823] SaveDC (hdc=0xa70107bf) returned 1
[0238.823] GetNearestColor (hdc=0xa70107bf, color=0xff) returned 0xff
[0238.823] GetNearestColor (hdc=0xa70107bf, color=0x55) returned 0x55
[0238.823] GetNearestColor (hdc=0xa70107bf, color=0x0) returned 0x0
[0238.823] GetNearestColor (hdc=0xa70107bf, color=0x55) returned 0x55
[0238.824] GetNearestColor (hdc=0xa70107bf, color=0x0) returned 0x0
[0238.824] GetNearestColor (hdc=0xa70107bf, color=0x8080ff) returned 0x8080ff
[0238.824] GetNearestColor (hdc=0xa70107bf, color=0x7373e5) returned 0x7373e5
[0238.824] GetNearestColor (hdc=0xa70107bf, color=0xe5) returned 0xe5
[0238.824] GetNearestColor (hdc=0xa70107bf, color=0x0) returned 0x0
[0238.824] RestoreDC (hdc=0xa70107bf, nSavedDC=-1) returned 1
[0238.824] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa70107bf) returned 0x0
[0238.824] IsAppThemed () returned 0x1
[0238.824] GetThemeAppProperties () returned 0x3
[0238.824] GetThemeAppProperties () returned 0x3
[0238.824] IsAppThemed () returned 0x1
[0238.824] GetThemeAppProperties () returned 0x3
[0238.824] GetThemeAppProperties () returned 0x3
[0238.824] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0238.825] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2423c44 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0238.825] IsAppThemed () returned 0x1
[0238.825] GetThemeAppProperties () returned 0x3
[0238.825] GetThemeAppProperties () returned 0x3
[0238.825] IsAppThemed () returned 0x1
[0238.825] GetThemeAppProperties () returned 0x3
[0238.825] GetThemeAppProperties () returned 0x3
[0238.825] GetFocus () returned 0x24013e
[0238.825] IsAppThemed () returned 0x1
[0238.825] GetThemeAppProperties () returned 0x3
[0238.825] GetThemeAppProperties () returned 0x3
[0238.825] IsAppThemed () returned 0x1
[0238.825] GetThemeAppProperties () returned 0x3
[0238.826] GetThemeAppProperties () returned 0x3
[0238.826] IsThemePartDefined () returned 0x1
[0238.826] IsAppThemed () returned 0x1
[0238.826] GetThemeAppProperties () returned 0x3
[0238.826] GetThemeAppProperties () returned 0x3
[0238.826] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0238.826] IsAppThemed () returned 0x1
[0238.826] GetThemeAppProperties () returned 0x3
[0238.826] GetThemeAppProperties () returned 0x3
[0238.826] IsAppThemed () returned 0x1
[0238.826] GetThemeAppProperties () returned 0x3
[0238.826] GetThemeAppProperties () returned 0x3
[0238.826] IsThemePartDefined () returned 0x1
[0238.826] GdipCreateRegion (region=0x53de78) returned 0x0
[0238.826] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.826] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0238.826] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.826] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0238.826] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0238.826] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0238.827] LocalFree (hMem=0x89eee8) returned 0x0
[0238.827] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0238.827] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0238.827] LocalFree (hMem=0x89ee08) returned 0x0
[0238.827] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.827] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0238.827] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0238.827] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0238.827] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.827] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0238.827] GetCurrentObject (hdc=0xa70107bf, type=0x1) returned 0xb00017
[0238.827] GetCurrentObject (hdc=0xa70107bf, type=0x2) returned 0x900010
[0238.827] GetCurrentObject (hdc=0xa70107bf, type=0x7) returned 0x1e0507b9
[0238.827] GetCurrentObject (hdc=0xa70107bf, type=0x6) returned 0x8a01c2
[0238.827] SaveDC (hdc=0xa70107bf) returned 1
[0238.828] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x710407a1
[0238.828] GetClipRgn (hdc=0xa70107bf, hrgn=0x710407a1) returned 0
[0238.828] SelectClipRgn (hdc=0xa70107bf, hrgn=0xfb040798) returned 2
[0238.828] DeleteObject (ho=0x710407a1) returned 1
[0238.828] DeleteObject (ho=0xfb040798) returned 1
[0238.828] OffsetViewportOrgEx (in: hdc=0xa70107bf, x=0, y=0, lppt=0x24242f4 | out: lppt=0x24242f4) returned 1
[0238.828] DrawThemeParentBackground () returned 0x0
[0238.828] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0238.828] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0238.828] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0238.828] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0238.828] GetSystemMetrics (nIndex=42) returned 0
[0238.828] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0238.828] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0238.829] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0238.829] GetCurrentObject (hdc=0xa70107bf, type=0x1) returned 0xb00017
[0238.829] GetCurrentObject (hdc=0xa70107bf, type=0x2) returned 0x900010
[0238.829] GetCurrentObject (hdc=0xa70107bf, type=0x7) returned 0x1e0507b9
[0238.829] GetCurrentObject (hdc=0xa70107bf, type=0x6) returned 0x8a01c2
[0238.829] SaveDC (hdc=0xa70107bf) returned 2
[0238.829] GetNearestColor (hdc=0xa70107bf, color=0xff) returned 0xff
[0238.829] CreateSolidBrush (color=0xff) returned 0x1c10078d
[0238.829] FillRect (hDC=0xa70107bf, lprc=0x53d8d8, hbr=0x1c10078d) returned 1
[0238.829] DeleteObject (ho=0x1c10078d) returned 1
[0238.829] RestoreDC (hdc=0xa70107bf, nSavedDC=-1) returned 1
[0238.829] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0238.829] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0238.829] GetSystemMetrics (nIndex=42) returned 0
[0238.829] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0238.829] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0238.830] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0238.830] GetCurrentObject (hdc=0xa70107bf, type=0x1) returned 0xb00017
[0238.830] GetCurrentObject (hdc=0xa70107bf, type=0x2) returned 0x900010
[0238.830] GetCurrentObject (hdc=0xa70107bf, type=0x7) returned 0x1e0507b9
[0238.830] GetCurrentObject (hdc=0xa70107bf, type=0x6) returned 0x8a01c2
[0238.830] SaveDC (hdc=0xa70107bf) returned 2
[0238.830] GetNearestColor (hdc=0xa70107bf, color=0xff) returned 0xff
[0238.830] CreateSolidBrush (color=0xff) returned 0x1d10078d
[0238.830] FillRect (hDC=0xa70107bf, lprc=0x53d878, hbr=0x1d10078d) returned 1
[0238.830] DeleteObject (ho=0x1d10078d) returned 1
[0238.830] RestoreDC (hdc=0xa70107bf, nSavedDC=-1) returned 1
[0238.830] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0238.830] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0238.830] GetSystemMetrics (nIndex=42) returned 0
[0238.830] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0238.830] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0238.831] RestoreDC (hdc=0xa70107bf, nSavedDC=-1) returned 1
[0238.831] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa70107bf) returned 0x0
[0238.831] IsAppThemed () returned 0x1
[0238.831] GetThemeAppProperties () returned 0x3
[0238.831] GetThemeAppProperties () returned 0x3
[0238.831] IsAppThemed () returned 0x1
[0238.831] GetThemeAppProperties () returned 0x3
[0238.831] GetThemeAppProperties () returned 0x3
[0238.831] IsThemePartDefined () returned 0x1
[0238.831] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0238.831] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.831] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0238.831] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0238.831] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0238.831] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0238.832] LocalFree (hMem=0x89ec80) returned 0x0
[0238.832] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0238.832] LocalFree (hMem=0x89eac0) returned 0x0
[0238.832] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0238.832] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0238.832] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0238.832] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0238.832] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.832] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0238.832] GetCurrentObject (hdc=0xa70107bf, type=0x1) returned 0xb00017
[0238.832] GetCurrentObject (hdc=0xa70107bf, type=0x2) returned 0x900010
[0238.832] GetCurrentObject (hdc=0xa70107bf, type=0x7) returned 0x1e0507b9
[0238.832] GetCurrentObject (hdc=0xa70107bf, type=0x6) returned 0x8a01c2
[0238.832] SaveDC (hdc=0xa70107bf) returned 1
[0238.833] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfc040798
[0238.833] GetClipRgn (hdc=0xa70107bf, hrgn=0xfc040798) returned 0
[0238.833] SelectClipRgn (hdc=0xa70107bf, hrgn=0x730407a1) returned 2
[0238.833] DeleteObject (ho=0xfc040798) returned 1
[0238.833] DeleteObject (ho=0x730407a1) returned 1
[0238.833] OffsetViewportOrgEx (in: hdc=0xa70107bf, x=0, y=0, lppt=0x2424b58 | out: lppt=0x2424b58) returned 1
[0238.833] IsAppThemed () returned 0x1
[0238.833] GetThemeAppProperties () returned 0x3
[0238.833] GetThemeAppProperties () returned 0x3
[0238.833] DrawThemeBackground () returned 0x0
[0238.833] RestoreDC (hdc=0xa70107bf, nSavedDC=-1) returned 1
[0238.833] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa70107bf) returned 0x0
[0238.833] GdipCreateRegion (region=0x53de00) returned 0x0
[0238.833] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0238.833] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0238.833] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0238.833] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0238.834] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0238.841] LocalFree (hMem=0x89eee8) returned 0x0
[0238.841] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0238.841] LocalFree (hMem=0x89eac0) returned 0x0
[0238.842] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0238.842] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0238.842] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0238.842] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0238.842] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0238.842] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0238.842] GetCurrentObject (hdc=0xa70107bf, type=0x1) returned 0xb00017
[0238.842] GetCurrentObject (hdc=0xa70107bf, type=0x2) returned 0x900010
[0238.842] GetCurrentObject (hdc=0xa70107bf, type=0x7) returned 0x1e0507b9
[0238.842] GetCurrentObject (hdc=0xa70107bf, type=0x6) returned 0x8a01c2
[0238.842] SaveDC (hdc=0xa70107bf) returned 1
[0238.842] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x740407a1
[0238.842] GetClipRgn (hdc=0xa70107bf, hrgn=0x740407a1) returned 0
[0238.842] SelectClipRgn (hdc=0xa70107bf, hrgn=0xfd040798) returned 2
[0238.842] DeleteObject (ho=0x740407a1) returned 1
[0238.842] DeleteObject (ho=0xfd040798) returned 1
[0238.842] OffsetViewportOrgEx (in: hdc=0xa70107bf, x=0, y=0, lppt=0x2424e2c | out: lppt=0x2424e2c) returned 1
[0238.842] IsAppThemed () returned 0x1
[0238.843] GetThemeAppProperties () returned 0x3
[0238.843] GetThemeAppProperties () returned 0x3
[0238.843] GetThemeBackgroundContentRect () returned 0x0
[0238.843] RestoreDC (hdc=0xa70107bf, nSavedDC=-1) returned 1
[0238.843] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa70107bf) returned 0x0
[0238.843] IsAppThemed () returned 0x1
[0238.843] GetThemeAppProperties () returned 0x3
[0238.843] GetThemeAppProperties () returned 0x3
[0238.843] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0238.843] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0238.843] GetCurrentObject (hdc=0xa70107bf, type=0x1) returned 0xb00017
[0238.843] GetCurrentObject (hdc=0xa70107bf, type=0x2) returned 0x900010
[0238.843] GetCurrentObject (hdc=0xa70107bf, type=0x7) returned 0x1e0507b9
[0238.843] GetCurrentObject (hdc=0xa70107bf, type=0x6) returned 0x8a01c2
[0238.843] SaveDC (hdc=0xa70107bf) returned 1
[0238.843] GetTextAlign (hdc=0xa70107bf) returned 0x0
[0238.843] GetTextColor (hdc=0xa70107bf) returned 0x0
[0238.844] GetCurrentObject (hdc=0xa70107bf, type=0x6) returned 0x8a01c2
[0238.844] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0238.844] SelectObject (hdc=0xa70107bf, h=0x450a0799) returned 0x8a01c2
[0238.844] GetBkMode (hdc=0xa70107bf) returned 2
[0238.844] SetBkMode (hdc=0xa70107bf, mode=1) returned 2
[0238.844] DrawTextExW (in: hdc=0xa70107bf, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x24251cc | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0238.844] DrawTextExW (in: hdc=0xa70107bf, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x24251cc | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0238.845] RestoreDC (hdc=0xa70107bf, nSavedDC=-1) returned 1
[0238.845] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa70107bf) returned 0x0
[0238.845] GetFocus () returned 0x24013e
[0238.845] IsAppThemed () returned 0x1
[0238.845] GetThemeAppProperties () returned 0x3
[0238.845] GetThemeAppProperties () returned 0x3
[0238.845] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0238.845] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xa70107bf, x1=0, y1=0, rop=0xcc0020) returned 1
[0238.845] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa70107bf) returned 0x0
[0238.845] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0238.845] SelectObject (hdc=0xa70107bf, h=0x85000f) returned 0x1e0507b9
[0238.845] DeleteDC (hdc=0xa70107bf) returned 1
[0238.845] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0238.846] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0239.202] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0239.202] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0239.202] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0xa00ea) returned 0x1
[0239.205] GetFocus () returned 0xa00ea
[0239.205] GetAncestor (hwnd=0xa00ea, gaFlags=0x1) returned 0x10010
[0239.206] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0239.206] SetFocus (hWnd=0x202c6) returned 0x0
[0239.209] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0239.211] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0239.211] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0239.211] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0239.211] GetFocus () returned 0x70036
[0239.212] SetFocus (hWnd=0x202c6) returned 0x0
[0239.217] IsWindow (hWnd=0x70036) returned 1
[0239.218] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0239.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0239.218] IsWindow (hWnd=0x70036) returned 1
[0239.218] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0239.218] IsWindow (hWnd=0x202c6) returned 1
[0239.218] SetFocus (hWnd=0x202c6) returned 0x70036
[0239.219] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0239.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0239.221] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0239.223] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0239.223] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0239.223] GetStockObject (i=5) returned 0x900015
[0239.223] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0239.223] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8dae50) returned 0x7
[0239.223] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0239.223] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0239.223] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0239.223] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0239.235] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0239.236] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0239.236] GetFocus () returned 0x202c6
[0239.236] GetCapture () returned 0x0
[0239.236] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.237] IsWindowUnicode (hWnd=0x202c6) returned 1
[0239.237] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.237] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.237] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.237] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.238] IsWindowUnicode (hWnd=0x202c6) returned 1
[0239.238] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.238] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.238] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.239] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0239.239] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0239.239] CreateCompatibleDC (hdc=0x10105d6) returned 0x1b0107ba
[0239.239] SelectObject (hdc=0x1b0107ba, h=0x1e0507b9) returned 0x85000f
[0239.239] GdipCreateFromHDC (hdc=0x1b0107ba, graphics=0x53e958) returned 0x0
[0239.239] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0239.239] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0239.240] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0239.240] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0239.240] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0239.240] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0239.247] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0239.247] LocalFree (hMem=0x89ec80) returned 0x0
[0239.247] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0239.247] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0239.248] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0239.248] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0239.248] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0239.248] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbdf0dbd) returned 0x0
[0239.248] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0239.248] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0239.248] GetCurrentObject (hdc=0x1b0107ba, type=0x1) returned 0xb00017
[0239.248] GetCurrentObject (hdc=0x1b0107ba, type=0x2) returned 0x900010
[0239.248] GetCurrentObject (hdc=0x1b0107ba, type=0x7) returned 0x1e0507b9
[0239.248] GetCurrentObject (hdc=0x1b0107ba, type=0x6) returned 0x8a01c2
[0239.248] SaveDC (hdc=0x1b0107ba) returned 1
[0239.248] GetNearestColor (hdc=0x1b0107ba, color=0xff) returned 0xff
[0239.249] GetNearestColor (hdc=0x1b0107ba, color=0x55) returned 0x55
[0239.249] GetNearestColor (hdc=0x1b0107ba, color=0x0) returned 0x0
[0239.249] GetNearestColor (hdc=0x1b0107ba, color=0x55) returned 0x55
[0239.249] GetNearestColor (hdc=0x1b0107ba, color=0x0) returned 0x0
[0239.249] GetNearestColor (hdc=0x1b0107ba, color=0x8080ff) returned 0x8080ff
[0239.249] GetNearestColor (hdc=0x1b0107ba, color=0x7373e5) returned 0x7373e5
[0239.249] GetNearestColor (hdc=0x1b0107ba, color=0xe5) returned 0xe5
[0239.249] GetNearestColor (hdc=0x1b0107ba, color=0x0) returned 0x0
[0239.249] RestoreDC (hdc=0x1b0107ba, nSavedDC=-1) returned 1
[0239.249] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1b0107ba) returned 0x0
[0239.249] IsAppThemed () returned 0x1
[0239.249] GetThemeAppProperties () returned 0x3
[0239.249] GetThemeAppProperties () returned 0x3
[0239.250] IsAppThemed () returned 0x1
[0239.250] GetThemeAppProperties () returned 0x3
[0239.250] GetThemeAppProperties () returned 0x3
[0239.250] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2425a28 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0239.250] IsAppThemed () returned 0x1
[0239.250] GetThemeAppProperties () returned 0x3
[0239.250] GetThemeAppProperties () returned 0x3
[0239.250] IsAppThemed () returned 0x1
[0239.250] GetThemeAppProperties () returned 0x3
[0239.250] GetThemeAppProperties () returned 0x3
[0239.250] GetFocus () returned 0x202c6
[0239.251] IsAppThemed () returned 0x1
[0239.251] GetThemeAppProperties () returned 0x3
[0239.251] GetThemeAppProperties () returned 0x3
[0239.251] IsAppThemed () returned 0x1
[0239.251] GetThemeAppProperties () returned 0x3
[0239.251] GetThemeAppProperties () returned 0x3
[0239.251] IsThemePartDefined () returned 0x1
[0239.251] IsAppThemed () returned 0x1
[0239.251] GetThemeAppProperties () returned 0x3
[0239.251] GetThemeAppProperties () returned 0x3
[0239.251] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0239.251] IsAppThemed () returned 0x1
[0239.251] GetThemeAppProperties () returned 0x3
[0239.251] GetThemeAppProperties () returned 0x3
[0239.251] IsAppThemed () returned 0x1
[0239.251] GetThemeAppProperties () returned 0x3
[0239.251] GetThemeAppProperties () returned 0x3
[0239.251] IsThemePartDefined () returned 0x1
[0239.252] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0239.252] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0239.252] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0239.252] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0239.252] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0239.252] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0239.252] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0239.252] LocalFree (hMem=0x89eac0) returned 0x0
[0239.252] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0239.252] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0239.252] LocalFree (hMem=0x89ee08) returned 0x0
[0239.252] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0239.252] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0239.252] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0239.252] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0239.252] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0239.253] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0239.253] GetCurrentObject (hdc=0x1b0107ba, type=0x1) returned 0xb00017
[0239.253] GetCurrentObject (hdc=0x1b0107ba, type=0x2) returned 0x900010
[0239.253] GetCurrentObject (hdc=0x1b0107ba, type=0x7) returned 0x1e0507b9
[0239.253] GetCurrentObject (hdc=0x1b0107ba, type=0x6) returned 0x8a01c2
[0239.253] SaveDC (hdc=0x1b0107ba) returned 1
[0239.253] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8040798
[0239.253] GetClipRgn (hdc=0x1b0107ba, hrgn=0x8040798) returned 0
[0239.253] SelectClipRgn (hdc=0x1b0107ba, hrgn=0x8504051e) returned 2
[0239.253] DeleteObject (ho=0x8040798) returned 1
[0239.253] DeleteObject (ho=0x8504051e) returned 1
[0239.253] OffsetViewportOrgEx (in: hdc=0x1b0107ba, x=0, y=0, lppt=0x24260d8 | out: lppt=0x24260d8) returned 1
[0239.253] DrawThemeParentBackground () returned 0x0
[0239.254] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0239.254] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0239.254] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0239.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0239.254] GetSystemMetrics (nIndex=42) returned 0
[0239.254] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0239.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0239.254] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0239.254] GetCurrentObject (hdc=0x1b0107ba, type=0x1) returned 0xb00017
[0239.254] GetCurrentObject (hdc=0x1b0107ba, type=0x2) returned 0x900010
[0239.254] GetCurrentObject (hdc=0x1b0107ba, type=0x7) returned 0x1e0507b9
[0239.254] GetCurrentObject (hdc=0x1b0107ba, type=0x6) returned 0x8a01c2
[0239.254] SaveDC (hdc=0x1b0107ba) returned 2
[0239.254] GetNearestColor (hdc=0x1b0107ba, color=0xff) returned 0xff
[0239.255] CreateSolidBrush (color=0xff) returned 0x1f10078d
[0239.255] FillRect (hDC=0x1b0107ba, lprc=0x53e128, hbr=0x1f10078d) returned 1
[0239.255] DeleteObject (ho=0x1f10078d) returned 1
[0239.255] RestoreDC (hdc=0x1b0107ba, nSavedDC=-1) returned 1
[0239.255] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0239.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0239.256] GetSystemMetrics (nIndex=42) returned 0
[0239.256] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0239.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0239.257] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0239.257] GetCurrentObject (hdc=0x1b0107ba, type=0x1) returned 0xb00017
[0239.257] GetCurrentObject (hdc=0x1b0107ba, type=0x2) returned 0x900010
[0239.257] GetCurrentObject (hdc=0x1b0107ba, type=0x7) returned 0x1e0507b9
[0239.257] GetCurrentObject (hdc=0x1b0107ba, type=0x6) returned 0x8a01c2
[0239.257] SaveDC (hdc=0x1b0107ba) returned 2
[0239.257] GetNearestColor (hdc=0x1b0107ba, color=0xff) returned 0xff
[0239.257] CreateSolidBrush (color=0xff) returned 0x2010078d
[0239.257] FillRect (hDC=0x1b0107ba, lprc=0x53e0c8, hbr=0x2010078d) returned 1
[0239.257] DeleteObject (ho=0x2010078d) returned 1
[0239.257] RestoreDC (hdc=0x1b0107ba, nSavedDC=-1) returned 1
[0239.257] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0239.257] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0239.257] GetSystemMetrics (nIndex=42) returned 0
[0239.257] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0239.258] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0239.258] RestoreDC (hdc=0x1b0107ba, nSavedDC=-1) returned 1
[0239.258] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1b0107ba) returned 0x0
[0239.258] IsAppThemed () returned 0x1
[0239.258] GetThemeAppProperties () returned 0x3
[0239.258] GetThemeAppProperties () returned 0x3
[0239.258] IsAppThemed () returned 0x1
[0239.258] GetThemeAppProperties () returned 0x3
[0239.258] GetThemeAppProperties () returned 0x3
[0239.258] IsThemePartDefined () returned 0x1
[0239.258] GdipCreateRegion (region=0x53e64c) returned 0x0
[0239.258] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0239.258] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0239.258] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0239.259] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0239.259] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0239.259] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0239.259] LocalFree (hMem=0x89ee40) returned 0x0
[0239.259] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0239.259] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0239.259] LocalFree (hMem=0x89ec80) returned 0x0
[0239.259] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0239.259] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0239.259] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0239.259] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0239.259] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0239.259] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0239.259] GetCurrentObject (hdc=0x1b0107ba, type=0x1) returned 0xb00017
[0239.259] GetCurrentObject (hdc=0x1b0107ba, type=0x2) returned 0x900010
[0239.259] GetCurrentObject (hdc=0x1b0107ba, type=0x7) returned 0x1e0507b9
[0239.259] GetCurrentObject (hdc=0x1b0107ba, type=0x6) returned 0x8a01c2
[0239.260] SaveDC (hdc=0x1b0107ba) returned 1
[0239.260] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8604051e
[0239.260] GetClipRgn (hdc=0x1b0107ba, hrgn=0x8604051e) returned 0
[0239.260] SelectClipRgn (hdc=0x1b0107ba, hrgn=0xa040798) returned 2
[0239.260] DeleteObject (ho=0x8604051e) returned 1
[0239.260] DeleteObject (ho=0xa040798) returned 1
[0239.260] OffsetViewportOrgEx (in: hdc=0x1b0107ba, x=0, y=0, lppt=0x242693c | out: lppt=0x242693c) returned 1
[0239.260] IsAppThemed () returned 0x1
[0239.260] GetThemeAppProperties () returned 0x3
[0239.260] GetThemeAppProperties () returned 0x3
[0239.260] DrawThemeBackground () returned 0x0
[0239.260] RestoreDC (hdc=0x1b0107ba, nSavedDC=-1) returned 1
[0239.260] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1b0107ba) returned 0x0
[0239.261] GdipCreateRegion (region=0x53e650) returned 0x0
[0239.261] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0239.261] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0239.261] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0239.261] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0239.261] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0239.261] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0239.261] LocalFree (hMem=0x89eac0) returned 0x0
[0239.261] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0239.261] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0239.261] LocalFree (hMem=0x89ee08) returned 0x0
[0239.261] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0239.261] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0239.261] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0239.261] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0239.261] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0239.261] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0239.261] GetCurrentObject (hdc=0x1b0107ba, type=0x1) returned 0xb00017
[0239.262] GetCurrentObject (hdc=0x1b0107ba, type=0x2) returned 0x900010
[0239.262] GetCurrentObject (hdc=0x1b0107ba, type=0x7) returned 0x1e0507b9
[0239.262] GetCurrentObject (hdc=0x1b0107ba, type=0x6) returned 0x8a01c2
[0239.262] SaveDC (hdc=0x1b0107ba) returned 1
[0239.262] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb040798
[0239.262] GetClipRgn (hdc=0x1b0107ba, hrgn=0xb040798) returned 0
[0239.262] SelectClipRgn (hdc=0x1b0107ba, hrgn=0x8704051e) returned 2
[0239.262] DeleteObject (ho=0xb040798) returned 1
[0239.262] DeleteObject (ho=0x8704051e) returned 1
[0239.262] OffsetViewportOrgEx (in: hdc=0x1b0107ba, x=0, y=0, lppt=0x2426c10 | out: lppt=0x2426c10) returned 1
[0239.262] IsAppThemed () returned 0x1
[0239.263] GetThemeAppProperties () returned 0x3
[0239.263] GetThemeAppProperties () returned 0x3
[0239.263] GetThemeBackgroundContentRect () returned 0x0
[0239.263] RestoreDC (hdc=0x1b0107ba, nSavedDC=-1) returned 1
[0239.263] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1b0107ba) returned 0x0
[0239.263] IsAppThemed () returned 0x1
[0239.263] GetThemeAppProperties () returned 0x3
[0239.263] GetThemeAppProperties () returned 0x3
[0239.263] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0239.263] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0239.263] GetCurrentObject (hdc=0x1b0107ba, type=0x1) returned 0xb00017
[0239.263] GetCurrentObject (hdc=0x1b0107ba, type=0x2) returned 0x900010
[0239.263] GetCurrentObject (hdc=0x1b0107ba, type=0x7) returned 0x1e0507b9
[0239.263] GetCurrentObject (hdc=0x1b0107ba, type=0x6) returned 0x8a01c2
[0239.263] SaveDC (hdc=0x1b0107ba) returned 1
[0239.263] GetTextAlign (hdc=0x1b0107ba) returned 0x0
[0239.263] GetTextColor (hdc=0x1b0107ba) returned 0x0
[0239.264] GetCurrentObject (hdc=0x1b0107ba, type=0x6) returned 0x8a01c2
[0239.264] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0239.264] SelectObject (hdc=0x1b0107ba, h=0x450a0799) returned 0x8a01c2
[0239.264] GetBkMode (hdc=0x1b0107ba) returned 2
[0239.264] SetBkMode (hdc=0x1b0107ba, mode=1) returned 2
[0239.264] DrawTextExW (in: hdc=0x1b0107ba, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2426fb0 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0239.264] DrawTextExW (in: hdc=0x1b0107ba, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2426fb0 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0239.265] RestoreDC (hdc=0x1b0107ba, nSavedDC=-1) returned 1
[0239.265] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1b0107ba) returned 0x0
[0239.265] GetFocus () returned 0x202c6
[0239.265] IsAppThemed () returned 0x1
[0239.265] GetThemeAppProperties () returned 0x3
[0239.265] GetThemeAppProperties () returned 0x3
[0239.265] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0239.265] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x1b0107ba, x1=0, y1=0, rop=0xcc0020) returned 1
[0239.266] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1b0107ba) returned 0x0
[0239.266] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0239.266] SelectObject (hdc=0x1b0107ba, h=0x85000f) returned 0x1e0507b9
[0239.266] DeleteDC (hdc=0x1b0107ba) returned 1
[0239.266] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0239.266] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0239.266] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.266] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.266] WaitMessage () returned 1
[0239.276] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.276] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.276] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.276] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.276] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.277] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.277] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.277] WaitMessage () returned 1
[0239.296] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.296] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.296] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.296] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.296] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.297] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.297] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.297] WaitMessage () returned 1
[0239.299] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.299] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.299] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.299] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.299] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.300] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.300] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.300] WaitMessage () returned 1
[0239.301] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.301] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.301] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.301] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.301] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.307] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.307] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.307] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.307] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.307] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.308] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.308] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.308] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.308] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.308] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.308] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.308] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.309] WaitMessage () returned 1
[0239.311] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.311] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.311] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.311] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.311] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.312] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.313] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.313] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.313] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.313] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.313] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.313] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.313] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.313] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.313] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.313] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.314] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.314] WaitMessage () returned 1
[0239.314] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.314] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.314] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.315] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.315] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.316] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.316] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.316] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.316] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.316] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.317] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.317] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.317] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.317] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.317] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.317] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.317] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.317] WaitMessage () returned 1
[0239.318] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.318] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.318] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.318] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.319] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.320] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.320] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.320] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.320] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.320] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.321] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.321] IsWindowUnicode (hWnd=0x102dc) returned 1
[0239.321] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.321] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.321] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.321] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.322] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.322] WaitMessage () returned 1
[0239.397] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.397] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.397] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.397] DispatchMessageA (lpMsg=0x53eef8) returned 0x7ec9
[0239.397] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.397] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.398] WaitMessage () returned 1
[0239.563] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.564] IsWindowUnicode (hWnd=0x202d0) returned 1
[0239.564] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0239.564] TranslateMessage (lpMsg=0x53eef8) returned 0
[0239.564] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0239.564] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.564] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0239.564] WaitMessage () returned 1
[0240.397] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0240.397] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0240.397] TranslateMessage (lpMsg=0x53eef8) returned 0
[0240.397] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0240.397] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0240.397] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0240.397] WaitMessage () returned 1
[0240.991] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0240.991] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a20215) returned 0x1
[0240.991] IsWindowUnicode (hWnd=0x202c6) returned 1
[0240.991] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0240.991] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a20215) returned 0x1
[0240.991] SetCursor (hCursor=0x10003) returned 0x10003
[0240.991] TranslateMessage (lpMsg=0x53eef8) returned 0
[0240.991] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0240.991] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0240.992] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0240.992] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0240.992] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0240.992] GetKeyState (nVirtKey=1) returned 1
[0240.992] GetKeyState (nVirtKey=2) returned 0
[0240.992] GetKeyState (nVirtKey=4) returned 0
[0240.992] GetKeyState (nVirtKey=5) returned 0
[0240.992] GetKeyState (nVirtKey=6) returned 0
[0240.992] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0240.992] IsWindowUnicode (hWnd=0x202c6) returned 1
[0240.992] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0240.992] TranslateMessage (lpMsg=0x53eef8) returned 0
[0240.992] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0240.992] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0240.992] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0240.992] CreateCompatibleDC (hdc=0x10105d6) returned 0xda0107b6
[0240.992] SelectObject (hdc=0xda0107b6, h=0x1e0507b9) returned 0x85000f
[0240.993] GdipCreateFromHDC (hdc=0xda0107b6, graphics=0x53e958) returned 0x0
[0240.993] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0240.993] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0240.993] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0240.993] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0240.993] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0240.993] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0240.993] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0240.993] LocalFree (hMem=0x89ee08) returned 0x0
[0240.993] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0240.993] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0240.993] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0240.993] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0240.993] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0240.993] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbdd0dbd) returned 0x0
[0240.993] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0240.993] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0240.993] GetCurrentObject (hdc=0xda0107b6, type=0x1) returned 0xb00017
[0240.993] GetCurrentObject (hdc=0xda0107b6, type=0x2) returned 0x900010
[0240.994] GetCurrentObject (hdc=0xda0107b6, type=0x7) returned 0x1e0507b9
[0240.994] GetCurrentObject (hdc=0xda0107b6, type=0x6) returned 0x8a01c2
[0240.994] SaveDC (hdc=0xda0107b6) returned 1
[0240.994] GetNearestColor (hdc=0xda0107b6, color=0xff) returned 0xff
[0240.994] GetNearestColor (hdc=0xda0107b6, color=0x55) returned 0x55
[0240.994] GetNearestColor (hdc=0xda0107b6, color=0x0) returned 0x0
[0240.994] GetNearestColor (hdc=0xda0107b6, color=0x55) returned 0x55
[0240.994] GetNearestColor (hdc=0xda0107b6, color=0x0) returned 0x0
[0240.994] GetNearestColor (hdc=0xda0107b6, color=0x8080ff) returned 0x8080ff
[0240.994] GetNearestColor (hdc=0xda0107b6, color=0x7373e5) returned 0x7373e5
[0240.994] GetNearestColor (hdc=0xda0107b6, color=0xe5) returned 0xe5
[0240.994] GetNearestColor (hdc=0xda0107b6, color=0x0) returned 0x0
[0240.994] RestoreDC (hdc=0xda0107b6, nSavedDC=-1) returned 1
[0240.994] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107b6) returned 0x0
[0240.994] IsAppThemed () returned 0x1
[0240.994] GetThemeAppProperties () returned 0x3
[0240.994] GetThemeAppProperties () returned 0x3
[0240.994] IsAppThemed () returned 0x1
[0240.995] GetThemeAppProperties () returned 0x3
[0240.995] GetThemeAppProperties () returned 0x3
[0240.995] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x2427944 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0240.995] IsAppThemed () returned 0x1
[0240.995] GetThemeAppProperties () returned 0x3
[0240.995] GetThemeAppProperties () returned 0x3
[0240.995] IsAppThemed () returned 0x1
[0240.995] GetThemeAppProperties () returned 0x3
[0240.995] GetThemeAppProperties () returned 0x3
[0240.995] IsAppThemed () returned 0x1
[0240.995] GetThemeAppProperties () returned 0x3
[0240.995] GetThemeAppProperties () returned 0x3
[0240.995] IsAppThemed () returned 0x1
[0240.996] GetThemeAppProperties () returned 0x3
[0240.996] GetThemeAppProperties () returned 0x3
[0240.996] IsThemePartDefined () returned 0x1
[0240.996] IsAppThemed () returned 0x1
[0240.996] GetThemeAppProperties () returned 0x3
[0240.996] GetThemeAppProperties () returned 0x3
[0240.996] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0240.996] IsAppThemed () returned 0x1
[0240.996] GetThemeAppProperties () returned 0x3
[0240.996] GetThemeAppProperties () returned 0x3
[0240.996] IsAppThemed () returned 0x1
[0240.996] GetThemeAppProperties () returned 0x3
[0240.996] GetThemeAppProperties () returned 0x3
[0240.996] IsThemePartDefined () returned 0x1
[0240.996] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0240.996] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0240.996] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0240.996] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0240.996] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0240.996] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0240.996] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0240.997] LocalFree (hMem=0x89ea88) returned 0x0
[0240.997] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0240.997] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0240.997] LocalFree (hMem=0x89ec80) returned 0x0
[0240.997] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0240.997] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0240.997] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0240.997] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0240.997] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0240.997] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0240.997] GetCurrentObject (hdc=0xda0107b6, type=0x1) returned 0xb00017
[0240.997] GetCurrentObject (hdc=0xda0107b6, type=0x2) returned 0x900010
[0240.997] GetCurrentObject (hdc=0xda0107b6, type=0x7) returned 0x1e0507b9
[0240.997] GetCurrentObject (hdc=0xda0107b6, type=0x6) returned 0x8a01c2
[0240.997] SaveDC (hdc=0xda0107b6) returned 1
[0240.997] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8804051e
[0240.997] GetClipRgn (hdc=0xda0107b6, hrgn=0x8804051e) returned 0
[0240.997] SelectClipRgn (hdc=0xda0107b6, hrgn=0xf040798) returned 2
[0240.998] DeleteObject (ho=0x8804051e) returned 1
[0240.998] DeleteObject (ho=0xf040798) returned 1
[0240.998] OffsetViewportOrgEx (in: hdc=0xda0107b6, x=0, y=0, lppt=0x2427ff4 | out: lppt=0x2427ff4) returned 1
[0240.998] DrawThemeParentBackground () returned 0x0
[0240.998] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0240.998] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0240.998] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0240.998] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0240.998] GetSystemMetrics (nIndex=42) returned 0
[0240.998] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0240.998] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0240.998] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0240.998] GetCurrentObject (hdc=0xda0107b6, type=0x1) returned 0xb00017
[0240.998] GetCurrentObject (hdc=0xda0107b6, type=0x2) returned 0x900010
[0240.998] GetCurrentObject (hdc=0xda0107b6, type=0x7) returned 0x1e0507b9
[0240.999] GetCurrentObject (hdc=0xda0107b6, type=0x6) returned 0x8a01c2
[0240.999] SaveDC (hdc=0xda0107b6) returned 2
[0240.999] GetNearestColor (hdc=0xda0107b6, color=0xff) returned 0xff
[0240.999] CreateSolidBrush (color=0xff) returned 0x2110078d
[0240.999] FillRect (hDC=0xda0107b6, lprc=0x53e120, hbr=0x2110078d) returned 1
[0240.999] DeleteObject (ho=0x2110078d) returned 1
[0240.999] RestoreDC (hdc=0xda0107b6, nSavedDC=-1) returned 1
[0240.999] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0240.999] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0240.999] GetSystemMetrics (nIndex=42) returned 0
[0240.999] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0240.999] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0240.999] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0240.999] GetCurrentObject (hdc=0xda0107b6, type=0x1) returned 0xb00017
[0240.999] GetCurrentObject (hdc=0xda0107b6, type=0x2) returned 0x900010
[0240.999] GetCurrentObject (hdc=0xda0107b6, type=0x7) returned 0x1e0507b9
[0241.000] GetCurrentObject (hdc=0xda0107b6, type=0x6) returned 0x8a01c2
[0241.000] SaveDC (hdc=0xda0107b6) returned 2
[0241.000] GetNearestColor (hdc=0xda0107b6, color=0xff) returned 0xff
[0241.000] CreateSolidBrush (color=0xff) returned 0x2210078d
[0241.000] FillRect (hDC=0xda0107b6, lprc=0x53e0c0, hbr=0x2210078d) returned 1
[0241.000] DeleteObject (ho=0x2210078d) returned 1
[0241.000] RestoreDC (hdc=0xda0107b6, nSavedDC=-1) returned 1
[0241.000] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0241.000] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0241.000] GetSystemMetrics (nIndex=42) returned 0
[0241.000] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0241.000] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0241.000] RestoreDC (hdc=0xda0107b6, nSavedDC=-1) returned 1
[0241.000] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107b6) returned 0x0
[0241.000] IsAppThemed () returned 0x1
[0241.000] GetThemeAppProperties () returned 0x3
[0241.001] GetThemeAppProperties () returned 0x3
[0241.001] IsAppThemed () returned 0x1
[0241.001] GetThemeAppProperties () returned 0x3
[0241.001] GetThemeAppProperties () returned 0x3
[0241.001] IsThemePartDefined () returned 0x1
[0241.001] GdipCreateRegion (region=0x53e640) returned 0x0
[0241.001] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.001] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0241.001] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0241.001] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0241.001] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0241.001] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0241.001] LocalFree (hMem=0x89ea88) returned 0x0
[0241.001] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0241.001] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0241.001] LocalFree (hMem=0x89ee08) returned 0x0
[0241.001] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0241.001] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0241.001] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0241.001] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0241.001] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.001] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0241.001] GetCurrentObject (hdc=0xda0107b6, type=0x1) returned 0xb00017
[0241.002] GetCurrentObject (hdc=0xda0107b6, type=0x2) returned 0x900010
[0241.002] GetCurrentObject (hdc=0xda0107b6, type=0x7) returned 0x1e0507b9
[0241.002] GetCurrentObject (hdc=0xda0107b6, type=0x6) returned 0x8a01c2
[0241.002] SaveDC (hdc=0xda0107b6) returned 1
[0241.002] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x10040798
[0241.002] GetClipRgn (hdc=0xda0107b6, hrgn=0x10040798) returned 0
[0241.002] SelectClipRgn (hdc=0xda0107b6, hrgn=0x8a04051e) returned 2
[0241.002] DeleteObject (ho=0x10040798) returned 1
[0241.002] DeleteObject (ho=0x8a04051e) returned 1
[0241.002] OffsetViewportOrgEx (in: hdc=0xda0107b6, x=0, y=0, lppt=0x2428858 | out: lppt=0x2428858) returned 1
[0241.002] IsAppThemed () returned 0x1
[0241.002] GetThemeAppProperties () returned 0x3
[0241.002] GetThemeAppProperties () returned 0x3
[0241.002] DrawThemeBackground () returned 0x0
[0241.002] RestoreDC (hdc=0xda0107b6, nSavedDC=-1) returned 1
[0241.002] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107b6) returned 0x0
[0241.002] GdipCreateRegion (region=0x53e644) returned 0x0
[0241.002] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.002] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0241.002] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0241.003] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0241.003] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0241.003] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0241.003] LocalFree (hMem=0x89ec80) returned 0x0
[0241.003] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0241.003] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0241.003] LocalFree (hMem=0x89ec80) returned 0x0
[0241.003] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0241.003] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0241.003] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0241.003] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0241.003] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.003] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0241.003] GetCurrentObject (hdc=0xda0107b6, type=0x1) returned 0xb00017
[0241.003] GetCurrentObject (hdc=0xda0107b6, type=0x2) returned 0x900010
[0241.003] GetCurrentObject (hdc=0xda0107b6, type=0x7) returned 0x1e0507b9
[0241.003] GetCurrentObject (hdc=0xda0107b6, type=0x6) returned 0x8a01c2
[0241.003] SaveDC (hdc=0xda0107b6) returned 1
[0241.003] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8b04051e
[0241.003] GetClipRgn (hdc=0xda0107b6, hrgn=0x8b04051e) returned 0
[0241.004] SelectClipRgn (hdc=0xda0107b6, hrgn=0x11040798) returned 2
[0241.004] DeleteObject (ho=0x8b04051e) returned 1
[0241.004] DeleteObject (ho=0x11040798) returned 1
[0241.004] OffsetViewportOrgEx (in: hdc=0xda0107b6, x=0, y=0, lppt=0x2428b2c | out: lppt=0x2428b2c) returned 1
[0241.004] IsAppThemed () returned 0x1
[0241.004] GetThemeAppProperties () returned 0x3
[0241.004] GetThemeAppProperties () returned 0x3
[0241.004] GetThemeBackgroundContentRect () returned 0x0
[0241.004] RestoreDC (hdc=0xda0107b6, nSavedDC=-1) returned 1
[0241.004] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107b6) returned 0x0
[0241.004] IsAppThemed () returned 0x1
[0241.004] GetThemeAppProperties () returned 0x3
[0241.004] GetThemeAppProperties () returned 0x3
[0241.004] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0241.004] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0241.004] GetCurrentObject (hdc=0xda0107b6, type=0x1) returned 0xb00017
[0241.004] GetCurrentObject (hdc=0xda0107b6, type=0x2) returned 0x900010
[0241.004] GetCurrentObject (hdc=0xda0107b6, type=0x7) returned 0x1e0507b9
[0241.004] GetCurrentObject (hdc=0xda0107b6, type=0x6) returned 0x8a01c2
[0241.004] SaveDC (hdc=0xda0107b6) returned 1
[0241.004] GetTextAlign (hdc=0xda0107b6) returned 0x0
[0241.005] GetTextColor (hdc=0xda0107b6) returned 0x0
[0241.005] GetCurrentObject (hdc=0xda0107b6, type=0x6) returned 0x8a01c2
[0241.005] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0241.005] SelectObject (hdc=0xda0107b6, h=0x450a0799) returned 0x8a01c2
[0241.005] GetBkMode (hdc=0xda0107b6) returned 2
[0241.005] SetBkMode (hdc=0xda0107b6, mode=1) returned 2
[0241.005] DrawTextExW (in: hdc=0xda0107b6, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2428ecc | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0241.005] DrawTextExW (in: hdc=0xda0107b6, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2428ecc | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0241.021] RestoreDC (hdc=0xda0107b6, nSavedDC=-1) returned 1
[0241.021] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107b6) returned 0x0
[0241.021] GetFocus () returned 0x202c6
[0241.021] IsAppThemed () returned 0x1
[0241.021] GetThemeAppProperties () returned 0x3
[0241.021] GetThemeAppProperties () returned 0x3
[0241.021] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0241.021] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xda0107b6, x1=0, y1=0, rop=0xcc0020) returned 1
[0241.022] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107b6) returned 0x0
[0241.022] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0241.022] SelectObject (hdc=0xda0107b6, h=0x85000f) returned 0x1e0507b9
[0241.022] DeleteDC (hdc=0xda0107b6) returned 1
[0241.022] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0241.022] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0241.022] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0241.022] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0241.022] WaitMessage () returned 1
[0241.101] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0241.101] IsWindowUnicode (hWnd=0x202c6) returned 1
[0241.101] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0241.101] TranslateMessage (lpMsg=0x53eef8) returned 0
[0241.101] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0241.101] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0241.101] IsWindowUnicode (hWnd=0x202c6) returned 1
[0241.101] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0241.101] TranslateMessage (lpMsg=0x53eef8) returned 0
[0241.101] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0241.101] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x1a0025) returned 0x0
[0241.101] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0241.101] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0241.101] WaitMessage () returned 1
[0241.228] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0241.228] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a20215) returned 0x1
[0241.229] IsWindowUnicode (hWnd=0x202c6) returned 1
[0241.229] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0241.229] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a20215) returned 0x1
[0241.229] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0241.229] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13501bf) returned 0x0
[0241.229] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0241.229] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0241.229] SetCursor (hCursor=0x10003) returned 0x10003
[0241.229] TranslateMessage (lpMsg=0x53eef8) returned 0
[0241.229] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0241.229] GetKeyState (nVirtKey=1) returned -128
[0241.229] GetKeyState (nVirtKey=2) returned 0
[0241.229] GetKeyState (nVirtKey=4) returned 0
[0241.229] GetKeyState (nVirtKey=5) returned 0
[0241.229] GetKeyState (nVirtKey=6) returned 0
[0241.229] IsWindowVisible (hWnd=0x202c6) returned 1
[0241.229] IsWindowEnabled (hWnd=0x202c6) returned 1
[0241.230] SetFocus (hWnd=0x202c6) returned 0x202c6
[0241.230] GetFocus () returned 0x202c6
[0241.230] GetFocus () returned 0x202c6
[0241.230] GetFocus () returned 0x202c6
[0241.230] GetKeyState (nVirtKey=1) returned -128
[0241.230] GetKeyState (nVirtKey=2) returned 0
[0241.230] GetKeyState (nVirtKey=4) returned 0
[0241.230] GetKeyState (nVirtKey=5) returned 0
[0241.230] GetKeyState (nVirtKey=6) returned 0
[0241.230] GetCapture () returned 0x0
[0241.230] SetCapture (hWnd=0x202c6) returned 0x0
[0241.230] GetKeyState (nVirtKey=1) returned -128
[0241.230] GetKeyState (nVirtKey=2) returned 0
[0241.230] GetKeyState (nVirtKey=4) returned 0
[0241.230] GetKeyState (nVirtKey=5) returned 0
[0241.230] GetKeyState (nVirtKey=6) returned 0
[0241.230] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0241.230] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0241.230] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0241.230] IsWindowUnicode (hWnd=0x202c6) returned 1
[0241.230] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0241.230] TranslateMessage (lpMsg=0x53eef8) returned 0
[0241.231] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0241.231] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2429050, cPoints=0x1 | out: lpPoints=0x2429050) returned 25690608
[0241.231] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0241.231] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0241.231] UpdateWindow (hWnd=0x202c6) returned 1
[0241.231] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x10105d6
[0241.231] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0241.231] CreateCompatibleDC (hdc=0x10105d6) returned 0xdb0107b6
[0241.231] SelectObject (hdc=0xdb0107b6, h=0x1e0507b9) returned 0x85000f
[0241.231] GdipCreateFromHDC (hdc=0xdb0107b6, graphics=0x53e5f0) returned 0x0
[0241.231] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0241.231] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0241.231] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0241.231] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0241.231] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0241.231] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0241.232] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0241.232] LocalFree (hMem=0x89ea88) returned 0x0
[0241.232] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0241.232] GdipCreateRegion (region=0x53e638) returned 0x0
[0241.232] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.232] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0241.232] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0241.232] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbdb0dbd) returned 0x0
[0241.232] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.232] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0241.232] GetCurrentObject (hdc=0xdb0107b6, type=0x1) returned 0xb00017
[0241.232] GetCurrentObject (hdc=0xdb0107b6, type=0x2) returned 0x900010
[0241.232] GetCurrentObject (hdc=0xdb0107b6, type=0x7) returned 0x1e0507b9
[0241.232] GetCurrentObject (hdc=0xdb0107b6, type=0x6) returned 0x8a01c2
[0241.232] SaveDC (hdc=0xdb0107b6) returned 1
[0241.232] GetNearestColor (hdc=0xdb0107b6, color=0xff) returned 0xff
[0241.232] GetNearestColor (hdc=0xdb0107b6, color=0x55) returned 0x55
[0241.232] GetNearestColor (hdc=0xdb0107b6, color=0x0) returned 0x0
[0241.233] GetNearestColor (hdc=0xdb0107b6, color=0x55) returned 0x55
[0241.233] GetNearestColor (hdc=0xdb0107b6, color=0x0) returned 0x0
[0241.233] GetNearestColor (hdc=0xdb0107b6, color=0x8080ff) returned 0x8080ff
[0241.233] GetNearestColor (hdc=0xdb0107b6, color=0x7373e5) returned 0x7373e5
[0241.233] GetNearestColor (hdc=0xdb0107b6, color=0xe5) returned 0xe5
[0241.233] GetNearestColor (hdc=0xdb0107b6, color=0x0) returned 0x0
[0241.233] RestoreDC (hdc=0xdb0107b6, nSavedDC=-1) returned 1
[0241.233] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdb0107b6) returned 0x0
[0241.233] IsAppThemed () returned 0x1
[0241.233] GetThemeAppProperties () returned 0x3
[0241.233] GetThemeAppProperties () returned 0x3
[0241.233] IsAppThemed () returned 0x1
[0241.233] GetThemeAppProperties () returned 0x3
[0241.233] GetThemeAppProperties () returned 0x3
[0241.233] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x242976c | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0241.234] IsAppThemed () returned 0x1
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] IsAppThemed () returned 0x1
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] IsAppThemed () returned 0x1
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] IsAppThemed () returned 0x1
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] IsThemePartDefined () returned 0x1
[0241.234] IsAppThemed () returned 0x1
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0241.234] IsAppThemed () returned 0x1
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] IsAppThemed () returned 0x1
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] GetThemeAppProperties () returned 0x3
[0241.234] IsThemePartDefined () returned 0x1
[0241.234] GdipCreateRegion (region=0x53e354) returned 0x0
[0241.235] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.235] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0241.235] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0241.235] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0241.235] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0241.235] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0241.235] LocalFree (hMem=0x89eee8) returned 0x0
[0241.235] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0241.235] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0241.235] LocalFree (hMem=0x89ea88) returned 0x0
[0241.235] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0241.235] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0241.235] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0241.235] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0241.235] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.235] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0241.235] GetCurrentObject (hdc=0xdb0107b6, type=0x1) returned 0xb00017
[0241.235] GetCurrentObject (hdc=0xdb0107b6, type=0x2) returned 0x900010
[0241.235] GetCurrentObject (hdc=0xdb0107b6, type=0x7) returned 0x1e0507b9
[0241.235] GetCurrentObject (hdc=0xdb0107b6, type=0x6) returned 0x8a01c2
[0241.236] SaveDC (hdc=0xdb0107b6) returned 1
[0241.236] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x12040798
[0241.236] GetClipRgn (hdc=0xdb0107b6, hrgn=0x12040798) returned 0
[0241.236] SelectClipRgn (hdc=0xdb0107b6, hrgn=0x8f04051e) returned 2
[0241.237] DeleteObject (ho=0x12040798) returned 1
[0241.237] DeleteObject (ho=0x8f04051e) returned 1
[0241.237] OffsetViewportOrgEx (in: hdc=0xdb0107b6, x=0, y=0, lppt=0x2429e1c | out: lppt=0x2429e1c) returned 1
[0241.237] DrawThemeParentBackground () returned 0x0
[0241.237] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0241.237] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0241.237] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0241.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0241.237] GetSystemMetrics (nIndex=42) returned 0
[0241.238] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0241.238] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0241.238] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0241.238] GetCurrentObject (hdc=0xdb0107b6, type=0x1) returned 0xb00017
[0241.238] GetCurrentObject (hdc=0xdb0107b6, type=0x2) returned 0x900010
[0241.238] GetCurrentObject (hdc=0xdb0107b6, type=0x7) returned 0x1e0507b9
[0241.238] GetCurrentObject (hdc=0xdb0107b6, type=0x6) returned 0x8a01c2
[0241.238] SaveDC (hdc=0xdb0107b6) returned 2
[0241.238] GetNearestColor (hdc=0xdb0107b6, color=0xff) returned 0xff
[0241.238] CreateSolidBrush (color=0xff) returned 0x2310078d
[0241.238] FillRect (hDC=0xdb0107b6, lprc=0x53ddb8, hbr=0x2310078d) returned 1
[0241.238] DeleteObject (ho=0x2310078d) returned 1
[0241.238] RestoreDC (hdc=0xdb0107b6, nSavedDC=-1) returned 1
[0241.238] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0241.238] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0241.239] GetSystemMetrics (nIndex=42) returned 0
[0241.239] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0241.239] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0241.239] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0241.239] GetCurrentObject (hdc=0xdb0107b6, type=0x1) returned 0xb00017
[0241.239] GetCurrentObject (hdc=0xdb0107b6, type=0x2) returned 0x900010
[0241.239] GetCurrentObject (hdc=0xdb0107b6, type=0x7) returned 0x1e0507b9
[0241.239] GetCurrentObject (hdc=0xdb0107b6, type=0x6) returned 0x8a01c2
[0241.239] SaveDC (hdc=0xdb0107b6) returned 2
[0241.239] GetNearestColor (hdc=0xdb0107b6, color=0xff) returned 0xff
[0241.239] CreateSolidBrush (color=0xff) returned 0x2410078d
[0241.239] FillRect (hDC=0xdb0107b6, lprc=0x53dd58, hbr=0x2410078d) returned 1
[0241.239] DeleteObject (ho=0x2410078d) returned 1
[0241.239] RestoreDC (hdc=0xdb0107b6, nSavedDC=-1) returned 1
[0241.239] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0241.239] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0241.239] GetSystemMetrics (nIndex=42) returned 0
[0241.239] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0241.239] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0241.240] RestoreDC (hdc=0xdb0107b6, nSavedDC=-1) returned 1
[0241.240] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdb0107b6) returned 0x0
[0241.240] IsAppThemed () returned 0x1
[0241.241] GetThemeAppProperties () returned 0x3
[0241.241] GetThemeAppProperties () returned 0x3
[0241.241] IsAppThemed () returned 0x1
[0241.241] GetThemeAppProperties () returned 0x3
[0241.241] GetThemeAppProperties () returned 0x3
[0241.242] IsThemePartDefined () returned 0x1
[0241.242] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0241.242] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.242] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0241.242] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0241.242] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0241.242] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0241.242] LocalFree (hMem=0x89ea88) returned 0x0
[0241.242] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0241.242] LocalFree (hMem=0x89ee08) returned 0x0
[0241.242] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0241.243] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0241.243] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0241.243] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0241.243] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.243] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0241.243] GetCurrentObject (hdc=0xdb0107b6, type=0x1) returned 0xb00017
[0241.243] GetCurrentObject (hdc=0xdb0107b6, type=0x2) returned 0x900010
[0241.243] GetCurrentObject (hdc=0xdb0107b6, type=0x7) returned 0x1e0507b9
[0241.243] GetCurrentObject (hdc=0xdb0107b6, type=0x6) returned 0x8a01c2
[0241.243] SaveDC (hdc=0xdb0107b6) returned 1
[0241.243] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9004051e
[0241.243] GetClipRgn (hdc=0xdb0107b6, hrgn=0x9004051e) returned 0
[0241.243] SelectClipRgn (hdc=0xdb0107b6, hrgn=0x14040798) returned 2
[0241.243] DeleteObject (ho=0x9004051e) returned 1
[0241.243] DeleteObject (ho=0x14040798) returned 1
[0241.243] OffsetViewportOrgEx (in: hdc=0xdb0107b6, x=0, y=0, lppt=0x242a680 | out: lppt=0x242a680) returned 1
[0241.244] IsAppThemed () returned 0x1
[0241.244] GetThemeAppProperties () returned 0x3
[0241.244] GetThemeAppProperties () returned 0x3
[0241.244] DrawThemeBackground () returned 0x0
[0241.244] RestoreDC (hdc=0xdb0107b6, nSavedDC=-1) returned 1
[0241.244] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdb0107b6) returned 0x0
[0241.244] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0241.244] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.244] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0241.244] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0241.244] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0241.244] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0241.244] LocalFree (hMem=0x89ea88) returned 0x0
[0241.244] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0241.244] LocalFree (hMem=0x89ee08) returned 0x0
[0241.245] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0241.245] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0241.245] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0241.245] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0241.245] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.245] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0241.245] GetCurrentObject (hdc=0xdb0107b6, type=0x1) returned 0xb00017
[0241.245] GetCurrentObject (hdc=0xdb0107b6, type=0x2) returned 0x900010
[0241.245] GetCurrentObject (hdc=0xdb0107b6, type=0x7) returned 0x1e0507b9
[0241.245] GetCurrentObject (hdc=0xdb0107b6, type=0x6) returned 0x8a01c2
[0241.245] SaveDC (hdc=0xdb0107b6) returned 1
[0241.245] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x15040798
[0241.245] GetClipRgn (hdc=0xdb0107b6, hrgn=0x15040798) returned 0
[0241.245] SelectClipRgn (hdc=0xdb0107b6, hrgn=0x9104051e) returned 2
[0241.245] DeleteObject (ho=0x15040798) returned 1
[0241.245] DeleteObject (ho=0x9104051e) returned 1
[0241.245] OffsetViewportOrgEx (in: hdc=0xdb0107b6, x=0, y=0, lppt=0x242a954 | out: lppt=0x242a954) returned 1
[0241.246] IsAppThemed () returned 0x1
[0241.246] GetThemeAppProperties () returned 0x3
[0241.246] GetThemeAppProperties () returned 0x3
[0241.246] GetThemeBackgroundContentRect () returned 0x0
[0241.246] RestoreDC (hdc=0xdb0107b6, nSavedDC=-1) returned 1
[0241.246] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdb0107b6) returned 0x0
[0241.246] IsAppThemed () returned 0x1
[0241.246] GetThemeAppProperties () returned 0x3
[0241.246] GetThemeAppProperties () returned 0x3
[0241.246] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0241.246] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0241.246] GetCurrentObject (hdc=0xdb0107b6, type=0x1) returned 0xb00017
[0241.246] GetCurrentObject (hdc=0xdb0107b6, type=0x2) returned 0x900010
[0241.246] GetCurrentObject (hdc=0xdb0107b6, type=0x7) returned 0x1e0507b9
[0241.246] GetCurrentObject (hdc=0xdb0107b6, type=0x6) returned 0x8a01c2
[0241.246] SaveDC (hdc=0xdb0107b6) returned 1
[0241.246] GetTextAlign (hdc=0xdb0107b6) returned 0x0
[0241.247] GetTextColor (hdc=0xdb0107b6) returned 0x0
[0241.247] GetCurrentObject (hdc=0xdb0107b6, type=0x6) returned 0x8a01c2
[0241.247] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0241.247] SelectObject (hdc=0xdb0107b6, h=0x450a0799) returned 0x8a01c2
[0241.247] GetBkMode (hdc=0xdb0107b6) returned 2
[0241.247] SetBkMode (hdc=0xdb0107b6, mode=1) returned 2
[0241.247] DrawTextExW (in: hdc=0xdb0107b6, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x242acf4 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0241.247] DrawTextExW (in: hdc=0xdb0107b6, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x242acf4 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0241.248] RestoreDC (hdc=0xdb0107b6, nSavedDC=-1) returned 1
[0241.248] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdb0107b6) returned 0x0
[0241.248] GetFocus () returned 0x202c6
[0241.248] IsAppThemed () returned 0x1
[0241.248] GetThemeAppProperties () returned 0x3
[0241.248] GetThemeAppProperties () returned 0x3
[0241.248] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0241.248] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xdb0107b6, x1=0, y1=0, rop=0xcc0020) returned 1
[0241.248] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdb0107b6) returned 0x0
[0241.248] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0241.249] SelectObject (hdc=0xdb0107b6, h=0x85000f) returned 0x1e0507b9
[0241.249] DeleteDC (hdc=0xdb0107b6) returned 1
[0241.249] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0241.249] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0241.249] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x242adf0, cPoints=0x1 | out: lpPoints=0x242adf0) returned 25690608
[0241.249] WindowFromPoint (Point=0x215) returned 0x202c6
[0241.249] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a20215) returned 0x1
[0241.249] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0241.249] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0241.250] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.250] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0241.251] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.251] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0241.252] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.252] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0241.252] GetDC (hWnd=0x0) returned 0xf0105ee
[0241.252] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e888) returned 0x0
[0241.252] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0241.252] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0241.252] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0241.252] GetSystemMetrics (nIndex=5) returned 1
[0241.252] GetSystemMetrics (nIndex=6) returned 1
[0241.253] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.253] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0241.253] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.253] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0241.320] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.321] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0241.321] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.321] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0241.321] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.322] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0241.322] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.322] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0241.322] GetSystemMetrics (nIndex=5) returned 1
[0241.322] GetSystemMetrics (nIndex=6) returned 1
[0241.322] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.323] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0241.323] GetSystemMetrics (nIndex=5) returned 1
[0241.323] GetSystemMetrics (nIndex=6) returned 1
[0241.323] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.323] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0241.323] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.323] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0241.324] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.324] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0241.324] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.324] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0241.324] GetSystemMetrics (nIndex=59) returned 1460
[0241.324] GetSystemMetrics (nIndex=60) returned 920
[0241.324] GetSystemMetrics (nIndex=34) returned 136
[0241.324] GetSystemMetrics (nIndex=35) returned 39
[0241.325] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.325] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0241.325] GetCurrentThreadId () returned 0x11d0
[0241.325] GetCurrentThreadId () returned 0x11d0
[0241.325] GetCurrentThreadId () returned 0x11d0
[0241.325] GetCurrentThreadId () returned 0x11d0
[0241.325] GetCurrentThreadId () returned 0x11d0
[0241.325] GetCurrentThreadId () returned 0x11d0
[0241.325] GetCurrentThreadId () returned 0x11d0
[0241.325] GetCurrentThreadId () returned 0x11d0
[0241.325] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.325] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0241.325] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0241.325] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0241.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.326] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0241.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.327] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0241.327] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xb00ea
[0241.327] SetWindowLongW (hWnd=0xb00ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0241.327] GetWindowLongW (hWnd=0xb00ea, nIndex=-4) returned 1950089536
[0241.328] SetWindowLongW (hWnd=0xb00ea, nIndex=-4, dwNewLong=79647398) returned 1950089536
[0241.328] GetWindowLongW (hWnd=0xb00ea, nIndex=-4) returned 79647398
[0241.328] GetWindowLongW (hWnd=0xb00ea, nIndex=-16) returned 113311744
[0241.328] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb00ea, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0241.328] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb00ea, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0241.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb00ea, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0241.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb00ea, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0241.329] GetClientRect (in: hWnd=0xb00ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0241.330] GetWindowRect (in: hWnd=0xb00ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0241.330] SetWindowTextW (hWnd=0xb00ea, lpString="WindowsFormsParkingWindow") returned 1
[0241.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb00ea, Msg=0xc, wParam=0x0, lParam=0x2422d3c) returned 0x1
[0241.330] GetParent (hWnd=0xb00ea) returned 0x0
[0241.331] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0241.331] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0xb00ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x7004e
[0241.331] SetWindowLongW (hWnd=0x7004e, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0241.331] GetWindowLongW (hWnd=0x7004e, nIndex=-4) returned 1868147648
[0241.332] SetWindowLongW (hWnd=0x7004e, nIndex=-4, dwNewLong=79646958) returned 1868147648
[0241.332] GetWindowLongW (hWnd=0x7004e, nIndex=-4) returned 79646958
[0241.332] GetWindowLongW (hWnd=0x7004e, nIndex=-16) returned 1174405133
[0241.332] GetWindowLongW (hWnd=0x7004e, nIndex=-12) returned 0
[0241.332] SetWindowLongW (hWnd=0x7004e, nIndex=-12, dwNewLong=458830) returned 0
[0241.332] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0241.333] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0241.333] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0241.334] GetClientRect (in: hWnd=0x7004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0241.334] GetWindowRect (in: hWnd=0x7004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0241.334] GetParent (hWnd=0x7004e) returned 0xb00ea
[0241.334] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xb00ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0241.334] SetWindowTextW (hWnd=0x7004e, lpString="Enter password: ") returned 1
[0241.335] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0241.335] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0241.335] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0241.335] GetClientRect (in: hWnd=0x7004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0241.336] GetWindowRect (in: hWnd=0x7004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0241.336] GetParent (hWnd=0x7004e) returned 0xb00ea
[0241.336] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xb00ea, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0241.336] SendMessageW (hWnd=0x7004e, Msg=0x2210, wParam=0x4e0001, lParam=0x7004e) returned 0x0
[0241.336] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x2210, wParam=0x4e0001, lParam=0x7004e) returned 0x0
[0241.336] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0241.336] GetParent (hWnd=0x7004e) returned 0xb00ea
[0241.336] GdipCreateFromHWND (hwnd=0x7004e, graphics=0x53e994) returned 0x0
[0241.337] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0241.337] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0241.337] GetProcessWindowStation () returned 0x13c
[0241.337] GetCapture () returned 0x202c6
[0241.337] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0241.337] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0241.337] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0241.337] ReleaseCapture () returned 1
[0241.337] GetActiveWindow () returned 0x70036
[0241.338] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0241.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.338] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0241.338] GetCursorPos (in: lpPoint=0x2437ba0 | out: lpPoint=0x2437ba0*(x=533, y=418)) returned 1
[0241.338] MonitorFromPoint (pt=0x215, dwFlags=0x1a2) returned 0x10001
[0241.338] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0241.338] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xde0107b6
[0241.339] GetDeviceCaps (hdc=0xde0107b6, index=12) returned 32
[0241.339] GetDeviceCaps (hdc=0xde0107b6, index=14) returned 1
[0241.339] DeleteDC (hdc=0xde0107b6) returned 1
[0241.339] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0241.339] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0241.339] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x25013e
[0241.340] SetWindowLongW (hWnd=0x25013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0241.340] GetWindowLongW (hWnd=0x25013e, nIndex=-4) returned 1950089536
[0241.340] SetWindowLongW (hWnd=0x25013e, nIndex=-4, dwNewLong=79646998) returned 1950089536
[0241.341] GetWindowLongW (hWnd=0x25013e, nIndex=-4) returned 79646998
[0241.341] GetWindowLongW (hWnd=0x25013e, nIndex=-16) returned 113770496
[0241.341] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0241.342] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0241.342] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0241.343] GetClientRect (in: hWnd=0x25013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0241.343] GetWindowRect (in: hWnd=0x25013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0241.343] SetWindowTextW (hWnd=0x25013e, lpString="Ransomware") returned 1
[0241.343] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xc, wParam=0x0, lParam=0x242aeb8) returned 0x1
[0241.343] GetStartupInfoW (in: lpStartupInfo=0x2437edc | out: lpStartupInfo=0x2437edc*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0241.344] GetParent (hWnd=0x25013e) returned 0x0
[0241.344] SetWindowLongW (hWnd=0x25013e, nIndex=-8, dwNewLong=0) returned 0
[0241.345] SendMessageW (hWnd=0x25013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0241.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0241.345] SendMessageW (hWnd=0x25013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0241.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0241.345] GetSystemMenu (hWnd=0x25013e, bRevert=0) returned 0x7a0291
[0241.346] GetWindowPlacement (in: hWnd=0x25013e, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0241.346] EnableMenuItem (hMenu=0x7a0291, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0241.346] EnableMenuItem (hMenu=0x7a0291, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0241.346] EnableMenuItem (hMenu=0x7a0291, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0241.346] EnableMenuItem (hMenu=0x7a0291, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0241.346] EnableMenuItem (hMenu=0x7a0291, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0241.346] GetClientRect (in: hWnd=0x25013e, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0241.346] GetClientRect (in: hWnd=0x25013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0241.346] GetWindowRect (in: hWnd=0x25013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0241.347] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.347] GetWindowLongW (hWnd=0x25013e, nIndex=-16) returned 113770496
[0241.347] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.347] GetSystemMetrics (nIndex=42) returned 0
[0241.347] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0241.347] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.347] GetSystemMetrics (nIndex=42) returned 0
[0241.347] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0241.348] GetCursorPos (in: lpPoint=0x2438050 | out: lpPoint=0x2438050*(x=533, y=418)) returned 1
[0241.348] MonitorFromPoint (pt=0x216, dwFlags=0x1a4) returned 0x10001
[0241.348] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0241.348] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xe20107b6
[0241.348] GetDeviceCaps (hdc=0xe20107b6, index=12) returned 32
[0241.348] GetDeviceCaps (hdc=0xe20107b6, index=14) returned 1
[0241.348] DeleteDC (hdc=0xe20107b6) returned 1
[0241.348] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0241.348] GetWindowLongW (hWnd=0x25013e, nIndex=-16) returned 113770496
[0241.348] GetWindowLongW (hWnd=0x25013e, nIndex=-20) returned 327937
[0241.348] SetWindowLongW (hWnd=0x25013e, nIndex=-16, dwNewLong=46661632) returned 113770496
[0241.349] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0241.349] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0241.350] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0241.350] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0241.350] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0241.350] SetWindowLongW (hWnd=0x25013e, nIndex=-20, dwNewLong=327681) returned 327937
[0241.350] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0241.351] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0241.351] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0241.351] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0241.352] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0241.352] SetWindowPos (hWnd=0x25013e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0241.352] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0241.352] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0241.353] GetWindowPlacement (in: hWnd=0x25013e, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0241.353] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0241.353] GetClientRect (in: hWnd=0x25013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0241.353] GetWindowRect (in: hWnd=0x25013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0241.354] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0241.354] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0241.354] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0241.355] RedrawWindow (hWnd=0x25013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0241.355] GetSystemMenu (hWnd=0x25013e, bRevert=0) returned 0x7a0291
[0241.355] GetWindowPlacement (in: hWnd=0x25013e, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0241.356] EnableMenuItem (hMenu=0x7a0291, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0241.356] EnableMenuItem (hMenu=0x7a0291, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0241.356] EnableMenuItem (hMenu=0x7a0291, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0241.356] EnableMenuItem (hMenu=0x7a0291, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0241.356] EnableMenuItem (hMenu=0x7a0291, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0241.356] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0241.356] GetWindowLongW (hWnd=0x25013e, nIndex=-8) returned 0
[0241.356] SetWindowLongW (hWnd=0x25013e, nIndex=-8, dwNewLong=458806) returned 0
[0241.357] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0241.357] GetProcessWindowStation () returned 0x13c
[0241.357] GetCurrentThreadId () returned 0x11d0
[0241.357] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf51de, lParam=0x0) returned 1
[0241.357] IsWindowVisible (hWnd=0x25013e) returned 0
[0241.357] IsWindowVisible (hWnd=0x70036) returned 1
[0241.357] IsWindowEnabled (hWnd=0x70036) returned 1
[0241.357] IsWindowVisible (hWnd=0x602b6) returned 0
[0241.357] IsWindowVisible (hWnd=0x901f8) returned 0
[0241.357] IsWindowVisible (hWnd=0x202d0) returned 0
[0241.357] IsWindowVisible (hWnd=0x202d4) returned 0
[0241.358] GetActiveWindow () returned 0x70036
[0241.358] GetFocus () returned 0x202c6
[0241.358] IsWindow (hWnd=0x70036) returned 1
[0241.358] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0241.358] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0241.359] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0241.359] GetWindowLongW (hWnd=0x25013e, nIndex=-8) returned 458806
[0241.359] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0241.359] GetCurrentThreadId () returned 0x11d0
[0241.359] GetWindowLongW (hWnd=0x25013e, nIndex=-8) returned 458806
[0241.359] IsWindowEnabled (hWnd=0x70036) returned 0
[0241.359] IsWindowEnabled (hWnd=0x25013e) returned 1
[0241.359] ShowWindow (hWnd=0x25013e, nCmdShow=5) returned 0
[0241.359] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0241.359] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0241.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.360] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0241.360] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x25013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xa01e2
[0241.361] SetWindowLongW (hWnd=0xa01e2, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0241.361] GetWindowLongW (hWnd=0xa01e2, nIndex=-4) returned 1868026976
[0241.361] SetWindowLongW (hWnd=0xa01e2, nIndex=-4, dwNewLong=79647038) returned 1868026976
[0241.361] GetWindowLongW (hWnd=0xa01e2, nIndex=-4) returned 79647038
[0241.361] GetWindowLongW (hWnd=0xa01e2, nIndex=-16) returned 1174470848
[0241.361] GetWindowLongW (hWnd=0xa01e2, nIndex=-12) returned 0
[0241.361] SetWindowLongW (hWnd=0xa01e2, nIndex=-12, dwNewLong=655842) returned 0
[0241.361] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0241.363] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0241.363] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0241.364] SendMessageW (hWnd=0xa01e2, Msg=0x2055, wParam=0xa01e2, lParam=0x3) returned 0x2
[0241.364] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0241.364] GetWindow (hWnd=0xa01e2, uCmd=0x3) returned 0x0
[0241.364] GetClientRect (in: hWnd=0xa01e2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0241.364] GetWindowRect (in: hWnd=0xa01e2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0241.364] GetParent (hWnd=0xa01e2) returned 0x25013e
[0241.364] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x25013e, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0241.364] SendMessageW (hWnd=0xa01e2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0241.364] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0241.365] SendMessageW (hWnd=0xa01e2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0241.365] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0241.366] GetSystemMetrics (nIndex=5) returned 1
[0241.366] GetSystemMetrics (nIndex=6) returned 1
[0241.366] SendMessageW (hWnd=0xa01e2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0241.366] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0241.366] SendMessageW (hWnd=0xa01e2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0241.366] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0241.367] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0241.367] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0241.367] GetClientRect (in: hWnd=0xa01e2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0241.367] GetWindowRect (in: hWnd=0xa01e2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0241.367] GetParent (hWnd=0xa01e2) returned 0x25013e
[0241.367] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x25013e, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0241.367] SendMessageW (hWnd=0xa01e2, Msg=0x2210, wParam=0x1e20001, lParam=0xa01e2) returned 0x0
[0241.367] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x2210, wParam=0x1e20001, lParam=0xa01e2) returned 0x0
[0241.367] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0241.368] GetParent (hWnd=0xa01e2) returned 0x25013e
[0241.368] GetParent (hWnd=0x7004e) returned 0xb00ea
[0241.368] SetParent (hWndChild=0x7004e, hWndNewParent=0x25013e) returned 0xb00ea
[0241.368] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0241.369] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0241.369] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0241.370] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0241.370] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0241.370] GetClientRect (in: hWnd=0x7004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0241.370] GetWindowRect (in: hWnd=0x7004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0241.370] GetParent (hWnd=0x7004e) returned 0x25013e
[0241.370] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x25013e, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0241.370] GetClientRect (in: hWnd=0x7004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0241.370] GetWindowRect (in: hWnd=0x7004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0241.370] GetParent (hWnd=0x7004e) returned 0x25013e
[0241.370] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x25013e, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0241.370] GetParent (hWnd=0x7004e) returned 0x25013e
[0241.370] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0241.370] GetWindow (hWnd=0x7004e, uCmd=0x3) returned 0x0
[0241.370] SetWindowPos (hWnd=0x7004e, hWndInsertAfter=0xa01e2, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0241.371] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0241.371] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0241.371] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0241.371] GetClientRect (in: hWnd=0x7004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0241.371] GetWindowRect (in: hWnd=0x7004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0241.371] GetParent (hWnd=0x7004e) returned 0x25013e
[0241.371] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x25013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0241.371] GetParent (hWnd=0x7004e) returned 0x25013e
[0241.372] GetWindow (hWnd=0x7004e, uCmd=0x3) returned 0xa01e2
[0241.372] GetWindowThreadProcessId (in: hWnd=0x7004e, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0241.372] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0241.372] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.373] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0241.373] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x25013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xa0122
[0241.373] SetWindowLongW (hWnd=0xa0122, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0241.373] GetWindowLongW (hWnd=0xa0122, nIndex=-4) returned 1868032000
[0241.374] SetWindowLongW (hWnd=0xa0122, nIndex=-4, dwNewLong=79647158) returned 1868032000
[0241.374] GetWindowLongW (hWnd=0xa0122, nIndex=-4) returned 79647158
[0241.374] GetWindowLongW (hWnd=0xa0122, nIndex=-16) returned 1174470667
[0241.374] GetWindowLongW (hWnd=0xa0122, nIndex=-12) returned 0
[0241.374] SetWindowLongW (hWnd=0xa0122, nIndex=-12, dwNewLong=655650) returned 0
[0241.374] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0241.375] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0241.375] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0241.376] SendMessageW (hWnd=0xa0122, Msg=0x2055, wParam=0xa0122, lParam=0x3) returned 0x2
[0241.376] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0241.376] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0241.376] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0241.376] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0241.376] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0241.376] RedrawWindow (hWnd=0xa01e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0241.376] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0241.376] RedrawWindow (hWnd=0x7004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0241.377] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0241.377] RedrawWindow (hWnd=0xa0122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0241.377] RedrawWindow (hWnd=0x25013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0241.377] GetWindow (hWnd=0xa0122, uCmd=0x3) returned 0x7004e
[0241.377] GetClientRect (in: hWnd=0xa0122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0241.377] GetWindowRect (in: hWnd=0xa0122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0241.377] GetParent (hWnd=0xa0122) returned 0x25013e
[0241.377] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x25013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0241.377] SetWindowTextW (hWnd=0xa0122, lpString="OK") returned 1
[0241.377] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0xc, wParam=0x0, lParam=0x242f378) returned 0x1
[0241.378] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0241.378] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0241.378] GetClientRect (in: hWnd=0xa0122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0241.378] GetWindowRect (in: hWnd=0xa0122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0241.378] GetParent (hWnd=0xa0122) returned 0x25013e
[0241.378] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x25013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0241.378] SendMessageW (hWnd=0xa0122, Msg=0x2210, wParam=0x1220001, lParam=0xa0122) returned 0x0
[0241.378] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x2210, wParam=0x1220001, lParam=0xa0122) returned 0x0
[0241.378] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0241.378] GetParent (hWnd=0xa0122) returned 0x25013e
[0241.378] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0241.379] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.379] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0241.379] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x25013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x302ca
[0241.380] SetWindowLongW (hWnd=0x302ca, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0241.380] GetWindowLongW (hWnd=0x302ca, nIndex=-4) returned 1868032000
[0241.380] SetWindowLongW (hWnd=0x302ca, nIndex=-4, dwNewLong=79647078) returned 1868032000
[0241.380] GetWindowLongW (hWnd=0x302ca, nIndex=-4) returned 79647078
[0241.380] GetWindowLongW (hWnd=0x302ca, nIndex=-16) returned 1174470667
[0241.381] GetWindowLongW (hWnd=0x302ca, nIndex=-12) returned 0
[0241.381] SetWindowLongW (hWnd=0x302ca, nIndex=-12, dwNewLong=197322) returned 0
[0241.382] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0241.382] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0241.382] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0241.383] SendMessageW (hWnd=0x302ca, Msg=0x2055, wParam=0x302ca, lParam=0x3) returned 0x2
[0241.383] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0241.384] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0241.384] GetWindow (hWnd=0x302ca, uCmd=0x3) returned 0xa0122
[0241.384] GetClientRect (in: hWnd=0x302ca, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0241.384] GetWindowRect (in: hWnd=0x302ca, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0241.384] GetParent (hWnd=0x302ca) returned 0x25013e
[0241.384] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x25013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0241.384] SetWindowTextW (hWnd=0x302ca, lpString="Cancel") returned 1
[0241.384] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0xc, wParam=0x0, lParam=0x2432c38) returned 0x1
[0241.385] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0241.385] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0241.385] GetClientRect (in: hWnd=0x302ca, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0241.385] GetWindowRect (in: hWnd=0x302ca, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0241.385] GetParent (hWnd=0x302ca) returned 0x25013e
[0241.385] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x25013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0241.385] SendMessageW (hWnd=0x302ca, Msg=0x2210, wParam=0x2ca0001, lParam=0x302ca) returned 0x0
[0241.385] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0x2210, wParam=0x2ca0001, lParam=0x302ca) returned 0x0
[0241.385] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0241.385] GetParent (hWnd=0x302ca) returned 0x25013e
[0241.385] GetDC (hWnd=0x0) returned 0x60100ce
[0241.386] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e320) returned 0x0
[0241.386] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0241.386] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0241.386] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0241.386] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0241.387] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0241.387] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0241.387] GetWindowLongW (hWnd=0x25013e, nIndex=-8) returned 458806
[0241.387] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0241.387] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0241.387] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xe90107b6
[0241.387] GetDeviceCaps (hdc=0xe90107b6, index=12) returned 32
[0241.387] GetDeviceCaps (hdc=0xe90107b6, index=14) returned 1
[0241.387] DeleteDC (hdc=0xe90107b6) returned 1
[0241.387] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0241.388] GetWindowThreadProcessId (in: hWnd=0x25013e, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0241.388] GetCurrentThreadId () returned 0x11d0
[0241.388] PostMessageW (hWnd=0x25013e, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0241.388] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.388] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.388] GetSystemMetrics (nIndex=42) returned 0
[0241.388] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.388] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0241.388] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0241.388] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0241.389] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0241.389] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0241.397] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x25013e) returned 0x1
[0241.399] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0241.400] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0241.400] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0241.400] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0241.402] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0241.403] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0241.403] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0241.404] GetFocus () returned 0x202c6
[0241.404] IsChild (hWndParent=0x25013e, hWnd=0x202c6) returned 0
[0241.404] GetFocus () returned 0x202c6
[0241.404] SetFocus (hWnd=0xa01e2) returned 0x202c6
[0241.405] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xa01e2, lParam=0x0) returned 0x0
[0241.405] GetCapture () returned 0x0
[0241.405] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0241.408] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0241.409] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0241.411] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0241.411] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0241.412] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0241.412] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0241.417] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0241.417] GetParent (hWnd=0x25013e) returned 0x0
[0241.417] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0241.418] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0241.418] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0241.419] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0241.419] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0241.419] GetSysColorBrush (nIndex=5) returned 0x100079
[0241.420] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0241.420] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0241.423] SendMessageW (hWnd=0xa01e2, Msg=0x2111, wParam=0x10001e2, lParam=0xa01e2) returned 0x0
[0241.423] SendMessageW (hWnd=0xa01e2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0241.423] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0241.423] GetKeyState (nVirtKey=1) returned 0
[0241.423] GetKeyState (nVirtKey=2) returned 0
[0241.423] GetKeyState (nVirtKey=4) returned 0
[0241.423] GetKeyState (nVirtKey=5) returned 0
[0241.423] GetKeyState (nVirtKey=6) returned 0
[0241.423] GetWindowTextLengthW (hWnd=0xa01e2) returned 0
[0241.423] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0241.423] SendMessageW (hWnd=0xa01e2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0241.423] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0241.424] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0241.424] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0241.427] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0241.429] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0241.429] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0241.429] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0241.430] GetWindowPlacement (in: hWnd=0x25013e, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0241.430] GetClientRect (in: hWnd=0x25013e, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0241.430] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.430] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.430] GetSystemMetrics (nIndex=42) returned 0
[0241.430] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.430] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0241.430] GetClientRect (in: hWnd=0x25013e, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0241.430] GetCurrentObject (hdc=0x8b010786, type=0x1) returned 0xb00017
[0241.430] GetCurrentObject (hdc=0x8b010786, type=0x2) returned 0x900010
[0241.430] GetCurrentObject (hdc=0x8b010786, type=0x7) returned 0xffffffff930507c0
[0241.430] GetCurrentObject (hdc=0x8b010786, type=0x6) returned 0x8a01c2
[0241.430] SaveDC (hdc=0x8b010786) returned 1
[0241.431] GetNearestColor (hdc=0x8b010786, color=0xf0f0f0) returned 0xf0f0f0
[0241.431] CreateSolidBrush (color=0xf0f0f0) returned 0x2510078d
[0241.431] FillRect (hDC=0x8b010786, lprc=0x53e250, hbr=0x2510078d) returned 1
[0241.431] DeleteObject (ho=0x2510078d) returned 1
[0241.431] RestoreDC (hdc=0x8b010786, nSavedDC=-1) returned 1
[0241.431] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0241.431] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0241.431] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0241.432] GetWindowPlacement (in: hWnd=0x25013e, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0241.432] GetClientRect (in: hWnd=0x25013e, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0241.432] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.432] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.432] GetSystemMetrics (nIndex=42) returned 0
[0241.432] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.432] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0241.432] GetClientRect (in: hWnd=0x25013e, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0241.433] GetCurrentObject (hdc=0xff0107b6, type=0x1) returned 0xb00017
[0241.433] GetCurrentObject (hdc=0xff0107b6, type=0x2) returned 0x900010
[0241.433] GetCurrentObject (hdc=0xff0107b6, type=0x7) returned 0x6005079b
[0241.433] GetCurrentObject (hdc=0xff0107b6, type=0x6) returned 0x8a01c2
[0241.433] SaveDC (hdc=0xff0107b6) returned 1
[0241.433] GetNearestColor (hdc=0xff0107b6, color=0xf0f0f0) returned 0xf0f0f0
[0241.433] CreateSolidBrush (color=0xf0f0f0) returned 0x2610078d
[0241.433] FillRect (hDC=0xff0107b6, lprc=0x53dc18, hbr=0x2610078d) returned 1
[0241.433] DeleteObject (ho=0x2610078d) returned 1
[0241.433] RestoreDC (hdc=0xff0107b6, nSavedDC=-1) returned 1
[0241.433] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.433] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.433] GetSystemMetrics (nIndex=42) returned 0
[0241.433] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.433] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0241.433] GetClientRect (in: hWnd=0x25013e, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0241.433] GetCurrentObject (hdc=0xff0107b6, type=0x1) returned 0xb00017
[0241.434] GetCurrentObject (hdc=0xff0107b6, type=0x2) returned 0x900010
[0241.434] GetCurrentObject (hdc=0xff0107b6, type=0x7) returned 0x6005079b
[0241.434] GetCurrentObject (hdc=0xff0107b6, type=0x6) returned 0x8a01c2
[0241.434] SaveDC (hdc=0xff0107b6) returned 1
[0241.434] GetNearestColor (hdc=0xff0107b6, color=0xf0f0f0) returned 0xf0f0f0
[0241.434] CreateSolidBrush (color=0xf0f0f0) returned 0x2710078d
[0241.434] FillRect (hDC=0xff0107b6, lprc=0x53dbb8, hbr=0x2710078d) returned 1
[0241.434] DeleteObject (ho=0x2710078d) returned 1
[0241.434] RestoreDC (hdc=0xff0107b6, nSavedDC=-1) returned 1
[0241.434] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.434] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.434] GetSystemMetrics (nIndex=42) returned 0
[0241.434] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.434] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0241.435] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0241.435] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0241.436] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0241.436] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0241.436] GetStockObject (i=5) returned 0x900015
[0241.436] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0241.436] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0241.436] GetStockObject (i=5) returned 0x900015
[0241.437] GetWindowPlacement (in: hWnd=0x25013e, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0241.437] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0241.437] GetClientRect (in: hWnd=0x25013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0241.437] GetWindowRect (in: hWnd=0x25013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0241.438] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0241.438] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0241.438] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0241.438] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0241.439] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0241.439] GetClientRect (in: hWnd=0x25013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0241.439] GetWindowRect (in: hWnd=0x25013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0241.439] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.439] IsWindowUnicode (hWnd=0x25013e) returned 1
[0241.439] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.439] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.439] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.439] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0241.439] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.439] IsWindowUnicode (hWnd=0x25013e) returned 1
[0241.439] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.439] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.439] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.439] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.440] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x84, wParam=0x0, lParam=0x1960356) returned 0x1
[0241.440] IsWindowUnicode (hWnd=0xa0122) returned 1
[0241.440] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.440] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.440] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.440] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.440] IsWindowUnicode (hWnd=0x202c6) returned 1
[0241.440] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.440] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.440] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.440] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0241.440] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0241.440] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.441] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x84, wParam=0x0, lParam=0x1960356) returned 0x1
[0241.441] IsWindowUnicode (hWnd=0xa0122) returned 1
[0241.441] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.441] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x84, wParam=0x0, lParam=0x1960356) returned 0x1
[0241.441] SetCursor (hCursor=0x10003) returned 0x10003
[0241.441] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.441] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.441] _TrackMouseEvent (in: lpEventTrack=0x24395cc | out: lpEventTrack=0x24395cc) returned 1
[0241.441] SendMessageW (hWnd=0xa0122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0241.441] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0241.441] InvalidateRect (hWnd=0xa0122, lpRect=0x0, bErase=0) returned 1
[0241.441] GetKeyState (nVirtKey=1) returned 0
[0241.441] GetKeyState (nVirtKey=2) returned 0
[0241.441] GetKeyState (nVirtKey=4) returned 0
[0241.441] GetKeyState (nVirtKey=5) returned 0
[0241.441] GetKeyState (nVirtKey=6) returned 0
[0241.441] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.442] IsWindowUnicode (hWnd=0xa0122) returned 1
[0241.442] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.442] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.442] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.442] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0241.442] InvalidateRect (hWnd=0xa0122, lpRect=0x0, bErase=0) returned 1
[0241.442] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.442] IsWindowUnicode (hWnd=0x25013e) returned 1
[0241.442] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.442] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.442] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.442] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.465] IsWindowUnicode (hWnd=0x25013e) returned 1
[0241.465] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.465] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.465] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.466] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.466] IsWindowUnicode (hWnd=0x102dc) returned 1
[0241.466] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.466] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.466] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.466] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.467] IsWindowUnicode (hWnd=0x25013e) returned 1
[0241.467] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.467] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.467] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.467] BeginPaint (in: hWnd=0x25013e, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0xf0105ee
[0241.467] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0241.468] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.468] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.468] GetSystemMetrics (nIndex=42) returned 0
[0241.468] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.468] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0241.468] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0241.468] EndPaint (hWnd=0x25013e, lpPaint=0x53e30c) returned 1
[0241.468] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.468] IsWindowUnicode (hWnd=0xa01e2) returned 1
[0241.468] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.469] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.469] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0241.469] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0241.469] SetTextColor (hdc=0x107b6, color=0x0) returned 0x0
[0241.469] SetBkColor (hdc=0x107b6, color=0xffffff) returned 0xffffff
[0241.470] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.470] IsWindowUnicode (hWnd=0x7004e) returned 1
[0241.470] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.471] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.471] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.471] BeginPaint (in: hWnd=0x7004e, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x10105d6
[0241.471] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0241.471] CreateCompatibleDC (hdc=0x10105d6) returned 0xc50107bf
[0241.471] SelectObject (hdc=0xc50107bf, h=0x1e0507b9) returned 0x85000f
[0241.471] GdipCreateFromHDC (hdc=0xc50107bf, graphics=0x53e30c) returned 0x0
[0241.471] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0241.471] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0241.471] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0241.471] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0241.472] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0241.472] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0241.472] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0241.472] LocalFree (hMem=0x89ea88) returned 0x0
[0241.472] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0241.472] GdipCreateRegion (region=0x53e354) returned 0x0
[0241.472] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.472] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0241.472] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0241.472] GetWindowTextLengthW (hWnd=0x7004e) returned 16
[0241.472] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0241.472] GetSystemMetrics (nIndex=42) returned 0
[0241.472] GetWindowTextW (in: hWnd=0x7004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0241.472] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0241.472] GetClientRect (in: hWnd=0x7004e, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0241.472] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0241.472] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0241.473] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0241.473] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0241.473] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0241.473] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0241.473] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0241.473] LocalFree (hMem=0x89ee08) returned 0x0
[0241.473] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0241.473] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0241.473] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0241.473] LocalFree (hMem=0x89ee08) returned 0x0
[0241.473] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0241.473] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0241.473] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0241.473] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0241.473] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0241.473] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0241.473] GetCurrentObject (hdc=0xc50107bf, type=0x1) returned 0xb00017
[0241.473] GetCurrentObject (hdc=0xc50107bf, type=0x2) returned 0x900010
[0241.474] GetCurrentObject (hdc=0xc50107bf, type=0x7) returned 0x1e0507b9
[0241.474] GetCurrentObject (hdc=0xc50107bf, type=0x6) returned 0x8a01c2
[0241.474] SaveDC (hdc=0xc50107bf) returned 1
[0241.474] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa04053e
[0241.474] GetClipRgn (hdc=0xc50107bf, hrgn=0xa04053e) returned 0
[0241.474] SelectClipRgn (hdc=0xc50107bf, hrgn=0x9604051e) returned 2
[0241.474] DeleteObject (ho=0xa04053e) returned 1
[0241.474] DeleteObject (ho=0x9604051e) returned 1
[0241.474] OffsetViewportOrgEx (in: hdc=0xc50107bf, x=0, y=0, lppt=0x2439af8 | out: lppt=0x2439af8) returned 1
[0241.474] GetNearestColor (hdc=0xc50107bf, color=0xf0f0f0) returned 0xf0f0f0
[0241.477] CreateSolidBrush (color=0xf0f0f0) returned 0x2810078d
[0241.477] FillRect (hDC=0xc50107bf, lprc=0x53e1f4, hbr=0x2810078d) returned 1
[0241.478] DeleteObject (ho=0x2810078d) returned 1
[0241.478] RestoreDC (hdc=0xc50107bf, nSavedDC=-1) returned 1
[0241.478] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107bf) returned 0x0
[0241.478] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbd50dbd) returned 0x0
[0241.478] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.478] GetWindowTextLengthW (hWnd=0x7004e) returned 16
[0241.478] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0241.478] GetSystemMetrics (nIndex=42) returned 0
[0241.478] GetWindowTextW (in: hWnd=0x7004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0241.478] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0241.478] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0241.478] GetCurrentObject (hdc=0xc50107bf, type=0x1) returned 0xb00017
[0241.478] GetCurrentObject (hdc=0xc50107bf, type=0x2) returned 0x900010
[0241.478] GetCurrentObject (hdc=0xc50107bf, type=0x7) returned 0x1e0507b9
[0241.478] GetCurrentObject (hdc=0xc50107bf, type=0x6) returned 0x8a01c2
[0241.478] SaveDC (hdc=0xc50107bf) returned 1
[0241.479] GetNearestColor (hdc=0xc50107bf, color=0x0) returned 0x0
[0241.479] RestoreDC (hdc=0xc50107bf, nSavedDC=-1) returned 1
[0241.479] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107bf) returned 0x0
[0241.479] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0241.480] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0241.480] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0241.480] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2439e00 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0241.480] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0241.480] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0241.480] GetCurrentObject (hdc=0xc50107bf, type=0x1) returned 0xb00017
[0241.480] GetCurrentObject (hdc=0xc50107bf, type=0x2) returned 0x900010
[0241.480] GetCurrentObject (hdc=0xc50107bf, type=0x7) returned 0x1e0507b9
[0241.480] GetCurrentObject (hdc=0xc50107bf, type=0x6) returned 0x8a01c2
[0241.480] SaveDC (hdc=0xc50107bf) returned 1
[0241.480] GetTextAlign (hdc=0xc50107bf) returned 0x0
[0241.480] GetTextColor (hdc=0xc50107bf) returned 0x0
[0241.481] GetCurrentObject (hdc=0xc50107bf, type=0x6) returned 0x8a01c2
[0241.481] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0241.481] SelectObject (hdc=0xc50107bf, h=0x730a066d) returned 0x8a01c2
[0241.481] GetBkMode (hdc=0xc50107bf) returned 2
[0241.481] SetBkMode (hdc=0xc50107bf, mode=1) returned 2
[0241.481] DrawTextExW (in: hdc=0xc50107bf, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x243a024 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0241.481] RestoreDC (hdc=0xc50107bf, nSavedDC=-1) returned 1
[0241.482] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107bf) returned 0x0
[0241.482] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0241.482] BitBlt (hdc=0x10105d6, x=0, y=0, cx=250, cy=70, hdcSrc=0xc50107bf, x1=0, y1=0, rop=0xcc0020) returned 1
[0241.482] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107bf) returned 0x0
[0241.482] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0241.482] SelectObject (hdc=0xc50107bf, h=0x85000f) returned 0x1e0507b9
[0241.482] DeleteDC (hdc=0xc50107bf) returned 1
[0241.482] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0241.482] EndPaint (hWnd=0x7004e, lpPaint=0x53e2f0) returned 1
[0241.482] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.483] IsWindowUnicode (hWnd=0xa0122) returned 1
[0241.483] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.483] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.483] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.483] BeginPaint (in: hWnd=0xa0122, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0241.483] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0241.483] CreateCompatibleDC (hdc=0x60100ce) returned 0xc70107bf
[0241.483] SelectObject (hdc=0xc70107bf, h=0x1e0507b9) returned 0x85000f
[0241.483] GdipCreateFromHDC (hdc=0xc70107bf, graphics=0x53e300) returned 0x0
[0241.483] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0241.483] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0241.483] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0241.484] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0241.484] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0241.484] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0241.484] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0241.484] LocalFree (hMem=0x89ee08) returned 0x0
[0241.484] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0241.484] GdipCreateRegion (region=0x53e348) returned 0x0
[0241.484] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.484] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0241.484] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0241.484] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbd30dbd) returned 0x0
[0241.484] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.484] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0241.484] GetCurrentObject (hdc=0xc70107bf, type=0x1) returned 0xb00017
[0241.484] GetCurrentObject (hdc=0xc70107bf, type=0x2) returned 0x900010
[0241.484] GetCurrentObject (hdc=0xc70107bf, type=0x7) returned 0x1e0507b9
[0241.484] GetCurrentObject (hdc=0xc70107bf, type=0x6) returned 0x8a01c2
[0241.485] SaveDC (hdc=0xc70107bf) returned 1
[0241.485] GetNearestColor (hdc=0xc70107bf, color=0xf0f0f0) returned 0xf0f0f0
[0241.485] GetNearestColor (hdc=0xc70107bf, color=0xa0a0a0) returned 0xa0a0a0
[0241.485] GetNearestColor (hdc=0xc70107bf, color=0x696969) returned 0x696969
[0241.485] GetNearestColor (hdc=0xc70107bf, color=0xa0a0a0) returned 0xa0a0a0
[0241.485] GetNearestColor (hdc=0xc70107bf, color=0x0) returned 0x0
[0241.485] GetNearestColor (hdc=0xc70107bf, color=0xffffff) returned 0xffffff
[0241.485] GetNearestColor (hdc=0xc70107bf, color=0xe5e5e5) returned 0xe5e5e5
[0241.485] GetNearestColor (hdc=0xc70107bf, color=0xd7d7d7) returned 0xd7d7d7
[0241.485] GetNearestColor (hdc=0xc70107bf, color=0x0) returned 0x0
[0241.485] RestoreDC (hdc=0xc70107bf, nSavedDC=-1) returned 1
[0241.485] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107bf) returned 0x0
[0241.485] IsAppThemed () returned 0x1
[0241.486] GetThemeAppProperties () returned 0x3
[0241.486] GetThemeAppProperties () returned 0x3
[0241.486] IsAppThemed () returned 0x1
[0241.486] GetThemeAppProperties () returned 0x3
[0241.486] GetThemeAppProperties () returned 0x3
[0241.486] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x243a790 | out: lpchText="OK", lprc=0x53e028) returned 13
[0241.486] IsAppThemed () returned 0x1
[0241.486] GetThemeAppProperties () returned 0x3
[0241.486] GetThemeAppProperties () returned 0x3
[0241.486] IsAppThemed () returned 0x1
[0241.486] GetThemeAppProperties () returned 0x3
[0241.486] GetThemeAppProperties () returned 0x3
[0241.486] GetFocus () returned 0xa01e2
[0241.487] IsAppThemed () returned 0x1
[0241.487] GetThemeAppProperties () returned 0x3
[0241.487] GetThemeAppProperties () returned 0x3
[0241.487] IsAppThemed () returned 0x1
[0241.487] GetThemeAppProperties () returned 0x3
[0241.487] GetThemeAppProperties () returned 0x3
[0241.487] IsThemePartDefined () returned 0x1
[0241.487] IsAppThemed () returned 0x1
[0241.487] GetThemeAppProperties () returned 0x3
[0241.487] GetThemeAppProperties () returned 0x3
[0241.487] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0241.487] IsAppThemed () returned 0x1
[0241.487] GetThemeAppProperties () returned 0x3
[0241.488] GetThemeAppProperties () returned 0x3
[0241.488] IsAppThemed () returned 0x1
[0241.488] GetThemeAppProperties () returned 0x3
[0241.488] GetThemeAppProperties () returned 0x3
[0241.488] IsThemePartDefined () returned 0x1
[0241.488] GdipCreateRegion (region=0x53e070) returned 0x0
[0241.488] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.488] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0241.488] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0241.488] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0241.488] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0241.488] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0241.488] LocalFree (hMem=0x89eac0) returned 0x0
[0241.488] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0241.488] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0241.488] LocalFree (hMem=0x89ee08) returned 0x0
[0241.488] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0241.488] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0241.489] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0241.489] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0241.489] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.489] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0241.489] GetCurrentObject (hdc=0xc70107bf, type=0x1) returned 0xb00017
[0241.489] GetCurrentObject (hdc=0xc70107bf, type=0x2) returned 0x900010
[0241.489] GetCurrentObject (hdc=0xc70107bf, type=0x7) returned 0x1e0507b9
[0241.489] GetCurrentObject (hdc=0xc70107bf, type=0x6) returned 0x8a01c2
[0241.489] SaveDC (hdc=0xc70107bf) returned 1
[0241.489] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9704051e
[0241.489] GetClipRgn (hdc=0xc70107bf, hrgn=0x9704051e) returned 0
[0241.489] SelectClipRgn (hdc=0xc70107bf, hrgn=0xe04053e) returned 2
[0241.489] DeleteObject (ho=0x9704051e) returned 1
[0241.489] DeleteObject (ho=0xe04053e) returned 1
[0241.489] OffsetViewportOrgEx (in: hdc=0xc70107bf, x=0, y=0, lppt=0x243ae40 | out: lppt=0x243ae40) returned 1
[0241.489] DrawThemeParentBackground () returned 0x0
[0241.490] GetWindowPlacement (in: hWnd=0x25013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0241.490] GetClientRect (in: hWnd=0x25013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0241.498] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.498] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.498] GetSystemMetrics (nIndex=42) returned 0
[0241.498] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.498] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0241.498] GetClientRect (in: hWnd=0x25013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0241.498] GetCurrentObject (hdc=0xc70107bf, type=0x1) returned 0xb00017
[0241.498] GetCurrentObject (hdc=0xc70107bf, type=0x2) returned 0x900010
[0241.498] GetCurrentObject (hdc=0xc70107bf, type=0x7) returned 0x1e0507b9
[0241.498] GetCurrentObject (hdc=0xc70107bf, type=0x6) returned 0x8a01c2
[0241.498] SaveDC (hdc=0xc70107bf) returned 2
[0241.499] GetNearestColor (hdc=0xc70107bf, color=0xf0f0f0) returned 0xf0f0f0
[0241.499] CreateSolidBrush (color=0xf0f0f0) returned 0x2910078d
[0241.499] FillRect (hDC=0xc70107bf, lprc=0x53dad0, hbr=0x2910078d) returned 1
[0241.499] DeleteObject (ho=0x2910078d) returned 1
[0241.499] RestoreDC (hdc=0xc70107bf, nSavedDC=-1) returned 1
[0241.499] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.499] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.499] GetSystemMetrics (nIndex=42) returned 0
[0241.499] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.499] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0241.499] GetClientRect (in: hWnd=0x25013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0241.499] GetCurrentObject (hdc=0xc70107bf, type=0x1) returned 0xb00017
[0241.499] GetCurrentObject (hdc=0xc70107bf, type=0x2) returned 0x900010
[0241.499] GetCurrentObject (hdc=0xc70107bf, type=0x7) returned 0x1e0507b9
[0241.499] GetCurrentObject (hdc=0xc70107bf, type=0x6) returned 0x8a01c2
[0241.499] SaveDC (hdc=0xc70107bf) returned 2
[0241.499] GetNearestColor (hdc=0xc70107bf, color=0xf0f0f0) returned 0xf0f0f0
[0241.500] CreateSolidBrush (color=0xf0f0f0) returned 0x2a10078d
[0241.500] FillRect (hDC=0xc70107bf, lprc=0x53da70, hbr=0x2a10078d) returned 1
[0241.500] DeleteObject (ho=0x2a10078d) returned 1
[0241.500] RestoreDC (hdc=0xc70107bf, nSavedDC=-1) returned 1
[0241.500] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.500] GetSystemMetrics (nIndex=42) returned 0
[0241.500] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0241.500] RestoreDC (hdc=0xc70107bf, nSavedDC=-1) returned 1
[0241.500] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107bf) returned 0x0
[0241.500] IsAppThemed () returned 0x1
[0241.500] GetThemeAppProperties () returned 0x3
[0241.500] GetThemeAppProperties () returned 0x3
[0241.500] IsAppThemed () returned 0x1
[0241.500] GetThemeAppProperties () returned 0x3
[0241.500] GetThemeAppProperties () returned 0x3
[0241.500] IsThemePartDefined () returned 0x1
[0241.501] GdipCreateRegion (region=0x53dff4) returned 0x0
[0241.501] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.501] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0241.501] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0241.501] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0241.501] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0241.501] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0241.501] LocalFree (hMem=0x89ea88) returned 0x0
[0241.501] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0241.501] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0241.501] LocalFree (hMem=0x89ee08) returned 0x0
[0241.501] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0241.501] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0241.501] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0241.501] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0241.501] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.501] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0241.501] GetCurrentObject (hdc=0xc70107bf, type=0x1) returned 0xb00017
[0241.501] GetCurrentObject (hdc=0xc70107bf, type=0x2) returned 0x900010
[0241.502] GetCurrentObject (hdc=0xc70107bf, type=0x7) returned 0x1e0507b9
[0241.502] GetCurrentObject (hdc=0xc70107bf, type=0x6) returned 0x8a01c2
[0241.502] SaveDC (hdc=0xc70107bf) returned 1
[0241.502] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf04053e
[0241.502] GetClipRgn (hdc=0xc70107bf, hrgn=0xf04053e) returned 0
[0241.502] SelectClipRgn (hdc=0xc70107bf, hrgn=0x9904051e) returned 2
[0241.502] DeleteObject (ho=0xf04053e) returned 1
[0241.502] DeleteObject (ho=0x9904051e) returned 1
[0241.502] OffsetViewportOrgEx (in: hdc=0xc70107bf, x=0, y=0, lppt=0x243b6c8 | out: lppt=0x243b6c8) returned 1
[0241.502] IsAppThemed () returned 0x1
[0241.502] GetThemeAppProperties () returned 0x3
[0241.502] GetThemeAppProperties () returned 0x3
[0241.502] DrawThemeBackground () returned 0x0
[0241.502] RestoreDC (hdc=0xc70107bf, nSavedDC=-1) returned 1
[0241.502] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107bf) returned 0x0
[0241.502] GdipCreateRegion (region=0x53dff8) returned 0x0
[0241.503] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.503] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0241.503] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0241.503] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0241.503] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0241.503] LocalFree (hMem=0x89ee08) returned 0x0
[0241.503] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0241.503] LocalFree (hMem=0x89ee08) returned 0x0
[0241.503] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0241.503] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0241.503] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0241.503] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0241.503] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.503] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0241.503] GetCurrentObject (hdc=0xc70107bf, type=0x1) returned 0xb00017
[0241.503] GetCurrentObject (hdc=0xc70107bf, type=0x2) returned 0x900010
[0241.503] GetCurrentObject (hdc=0xc70107bf, type=0x7) returned 0x1e0507b9
[0241.503] GetCurrentObject (hdc=0xc70107bf, type=0x6) returned 0x8a01c2
[0241.504] SaveDC (hdc=0xc70107bf) returned 1
[0241.504] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9a04051e
[0241.504] GetClipRgn (hdc=0xc70107bf, hrgn=0x9a04051e) returned 0
[0241.504] SelectClipRgn (hdc=0xc70107bf, hrgn=0x1004053e) returned 2
[0241.504] DeleteObject (ho=0x9a04051e) returned 1
[0241.504] DeleteObject (ho=0x1004053e) returned 1
[0241.504] OffsetViewportOrgEx (in: hdc=0xc70107bf, x=0, y=0, lppt=0x243b99c | out: lppt=0x243b99c) returned 1
[0241.504] IsAppThemed () returned 0x1
[0241.504] GetThemeAppProperties () returned 0x3
[0241.504] GetThemeAppProperties () returned 0x3
[0241.504] GetThemeBackgroundContentRect () returned 0x0
[0241.504] RestoreDC (hdc=0xc70107bf, nSavedDC=-1) returned 1
[0241.504] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107bf) returned 0x0
[0241.504] IsAppThemed () returned 0x1
[0241.504] GetThemeAppProperties () returned 0x3
[0241.504] GetThemeAppProperties () returned 0x3
[0241.504] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0241.504] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0241.504] GetCurrentObject (hdc=0xc70107bf, type=0x1) returned 0xb00017
[0241.505] GetCurrentObject (hdc=0xc70107bf, type=0x2) returned 0x900010
[0241.505] GetCurrentObject (hdc=0xc70107bf, type=0x7) returned 0x1e0507b9
[0241.505] GetCurrentObject (hdc=0xc70107bf, type=0x6) returned 0x8a01c2
[0241.505] SaveDC (hdc=0xc70107bf) returned 1
[0241.505] GetTextAlign (hdc=0xc70107bf) returned 0x0
[0241.505] GetTextColor (hdc=0xc70107bf) returned 0x0
[0241.505] GetCurrentObject (hdc=0xc70107bf, type=0x6) returned 0x8a01c2
[0241.505] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0241.505] SelectObject (hdc=0xc70107bf, h=0x730a066d) returned 0x8a01c2
[0241.505] GetBkMode (hdc=0xc70107bf) returned 2
[0241.505] SetBkMode (hdc=0xc70107bf, mode=1) returned 2
[0241.505] DrawTextExW (in: hdc=0xc70107bf, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x243bd3c | out: lpchText="OK", lprc=0x53df90) returned 13
[0241.506] DrawTextExW (in: hdc=0xc70107bf, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x243bd3c | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0241.507] RestoreDC (hdc=0xc70107bf, nSavedDC=-1) returned 1
[0241.507] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107bf) returned 0x0
[0241.507] GetFocus () returned 0xa01e2
[0241.507] IsAppThemed () returned 0x1
[0241.507] GetThemeAppProperties () returned 0x3
[0241.507] GetThemeAppProperties () returned 0x3
[0241.507] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0241.507] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0xc70107bf, x1=0, y1=0, rop=0xcc0020) returned 1
[0241.507] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107bf) returned 0x0
[0241.507] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0241.508] SelectObject (hdc=0xc70107bf, h=0x85000f) returned 0x1e0507b9
[0241.508] DeleteDC (hdc=0xc70107bf) returned 1
[0241.508] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0241.508] EndPaint (hWnd=0xa0122, lpPaint=0x53e2e4) returned 1
[0241.508] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.508] IsWindowUnicode (hWnd=0x302ca) returned 1
[0241.508] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.508] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.508] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.508] BeginPaint (in: hWnd=0x302ca, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0241.509] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0241.509] CreateCompatibleDC (hdc=0xf0105ee) returned 0xc90107bf
[0241.509] SelectObject (hdc=0xc90107bf, h=0x1e0507b9) returned 0x85000f
[0241.509] GdipCreateFromHDC (hdc=0xc90107bf, graphics=0x53e300) returned 0x0
[0241.509] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0241.509] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0241.509] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0241.509] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0241.509] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0241.509] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0241.509] LocalFree (hMem=0x89ea88) returned 0x0
[0241.509] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0241.509] GdipCreateRegion (region=0x53e348) returned 0x0
[0241.509] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.509] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0241.510] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0241.510] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbd10dbd) returned 0x0
[0241.510] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.510] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0241.510] GetCurrentObject (hdc=0xc90107bf, type=0x1) returned 0xb00017
[0241.510] GetCurrentObject (hdc=0xc90107bf, type=0x2) returned 0x900010
[0241.510] GetCurrentObject (hdc=0xc90107bf, type=0x7) returned 0x1e0507b9
[0241.510] GetCurrentObject (hdc=0xc90107bf, type=0x6) returned 0x8a01c2
[0241.510] SaveDC (hdc=0xc90107bf) returned 1
[0241.510] GetNearestColor (hdc=0xc90107bf, color=0xf0f0f0) returned 0xf0f0f0
[0241.510] GetNearestColor (hdc=0xc90107bf, color=0xa0a0a0) returned 0xa0a0a0
[0241.510] GetNearestColor (hdc=0xc90107bf, color=0x696969) returned 0x696969
[0241.510] GetNearestColor (hdc=0xc90107bf, color=0xa0a0a0) returned 0xa0a0a0
[0241.510] GetNearestColor (hdc=0xc90107bf, color=0x0) returned 0x0
[0241.510] GetNearestColor (hdc=0xc90107bf, color=0xffffff) returned 0xffffff
[0241.510] GetNearestColor (hdc=0xc90107bf, color=0xe5e5e5) returned 0xe5e5e5
[0241.511] GetNearestColor (hdc=0xc90107bf, color=0xd7d7d7) returned 0xd7d7d7
[0241.511] GetNearestColor (hdc=0xc90107bf, color=0x0) returned 0x0
[0241.511] RestoreDC (hdc=0xc90107bf, nSavedDC=-1) returned 1
[0241.511] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107bf) returned 0x0
[0241.511] IsAppThemed () returned 0x1
[0241.511] GetThemeAppProperties () returned 0x3
[0241.511] GetThemeAppProperties () returned 0x3
[0241.511] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0241.511] SendMessageW (hWnd=0x25013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0241.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0241.511] IsAppThemed () returned 0x1
[0241.511] GetThemeAppProperties () returned 0x3
[0241.511] GetThemeAppProperties () returned 0x3
[0241.511] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x243c54c | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0241.512] IsAppThemed () returned 0x1
[0241.512] GetThemeAppProperties () returned 0x3
[0241.512] GetThemeAppProperties () returned 0x3
[0241.512] IsAppThemed () returned 0x1
[0241.512] GetThemeAppProperties () returned 0x3
[0241.512] GetThemeAppProperties () returned 0x3
[0241.512] GetFocus () returned 0xa01e2
[0241.512] IsAppThemed () returned 0x1
[0241.512] GetThemeAppProperties () returned 0x3
[0241.512] GetThemeAppProperties () returned 0x3
[0241.512] IsAppThemed () returned 0x1
[0241.512] GetThemeAppProperties () returned 0x3
[0241.512] GetThemeAppProperties () returned 0x3
[0241.512] IsThemePartDefined () returned 0x1
[0241.512] IsAppThemed () returned 0x1
[0241.512] GetThemeAppProperties () returned 0x3
[0241.512] GetThemeAppProperties () returned 0x3
[0241.512] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0241.513] IsAppThemed () returned 0x1
[0241.513] GetThemeAppProperties () returned 0x3
[0241.513] GetThemeAppProperties () returned 0x3
[0241.513] IsAppThemed () returned 0x1
[0241.513] GetThemeAppProperties () returned 0x3
[0241.513] GetThemeAppProperties () returned 0x3
[0241.513] IsThemePartDefined () returned 0x1
[0241.513] GdipCreateRegion (region=0x53e070) returned 0x0
[0241.513] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.513] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0241.513] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0241.513] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0241.513] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0241.513] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0241.513] LocalFree (hMem=0x89ee08) returned 0x0
[0241.513] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0241.513] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0241.513] LocalFree (hMem=0x89ea88) returned 0x0
[0241.513] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0241.514] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0241.514] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0241.514] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0241.514] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.514] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0241.514] GetCurrentObject (hdc=0xc90107bf, type=0x1) returned 0xb00017
[0241.514] GetCurrentObject (hdc=0xc90107bf, type=0x2) returned 0x900010
[0241.514] GetCurrentObject (hdc=0xc90107bf, type=0x7) returned 0x1e0507b9
[0241.514] GetCurrentObject (hdc=0xc90107bf, type=0x6) returned 0x8a01c2
[0241.514] SaveDC (hdc=0xc90107bf) returned 1
[0241.514] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1104053e
[0241.514] GetClipRgn (hdc=0xc90107bf, hrgn=0x1104053e) returned 0
[0241.514] SelectClipRgn (hdc=0xc90107bf, hrgn=0x9e04051e) returned 2
[0241.514] DeleteObject (ho=0x1104053e) returned 1
[0241.515] DeleteObject (ho=0x9e04051e) returned 1
[0241.515] OffsetViewportOrgEx (in: hdc=0xc90107bf, x=0, y=0, lppt=0x243cbfc | out: lppt=0x243cbfc) returned 1
[0241.515] DrawThemeParentBackground () returned 0x0
[0241.515] GetWindowPlacement (in: hWnd=0x25013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0241.515] GetClientRect (in: hWnd=0x25013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0241.515] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.515] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.515] GetSystemMetrics (nIndex=42) returned 0
[0241.515] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.515] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0241.515] GetClientRect (in: hWnd=0x25013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0241.515] GetCurrentObject (hdc=0xc90107bf, type=0x1) returned 0xb00017
[0241.515] GetCurrentObject (hdc=0xc90107bf, type=0x2) returned 0x900010
[0241.515] GetCurrentObject (hdc=0xc90107bf, type=0x7) returned 0x1e0507b9
[0241.516] GetCurrentObject (hdc=0xc90107bf, type=0x6) returned 0x8a01c2
[0241.516] SaveDC (hdc=0xc90107bf) returned 2
[0241.516] GetNearestColor (hdc=0xc90107bf, color=0xf0f0f0) returned 0xf0f0f0
[0241.516] CreateSolidBrush (color=0xf0f0f0) returned 0x2b10078d
[0241.516] FillRect (hDC=0xc90107bf, lprc=0x53dad0, hbr=0x2b10078d) returned 1
[0241.516] DeleteObject (ho=0x2b10078d) returned 1
[0241.516] RestoreDC (hdc=0xc90107bf, nSavedDC=-1) returned 1
[0241.516] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.516] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.516] GetSystemMetrics (nIndex=42) returned 0
[0241.516] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.516] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0241.516] GetClientRect (in: hWnd=0x25013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0241.516] GetCurrentObject (hdc=0xc90107bf, type=0x1) returned 0xb00017
[0241.516] GetCurrentObject (hdc=0xc90107bf, type=0x2) returned 0x900010
[0241.516] GetCurrentObject (hdc=0xc90107bf, type=0x7) returned 0x1e0507b9
[0241.517] GetCurrentObject (hdc=0xc90107bf, type=0x6) returned 0x8a01c2
[0241.517] SaveDC (hdc=0xc90107bf) returned 2
[0241.517] GetNearestColor (hdc=0xc90107bf, color=0xf0f0f0) returned 0xf0f0f0
[0241.517] CreateSolidBrush (color=0xf0f0f0) returned 0x2c10078d
[0241.517] FillRect (hDC=0xc90107bf, lprc=0x53da70, hbr=0x2c10078d) returned 1
[0241.517] DeleteObject (ho=0x2c10078d) returned 1
[0241.517] RestoreDC (hdc=0xc90107bf, nSavedDC=-1) returned 1
[0241.517] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0241.517] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0241.517] GetSystemMetrics (nIndex=42) returned 0
[0241.517] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0241.517] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0241.518] RestoreDC (hdc=0xc90107bf, nSavedDC=-1) returned 1
[0241.518] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107bf) returned 0x0
[0241.518] IsAppThemed () returned 0x1
[0241.518] GetThemeAppProperties () returned 0x3
[0241.518] GetThemeAppProperties () returned 0x3
[0241.518] IsAppThemed () returned 0x1
[0241.518] GetThemeAppProperties () returned 0x3
[0241.518] GetThemeAppProperties () returned 0x3
[0241.518] IsThemePartDefined () returned 0x1
[0241.518] GdipCreateRegion (region=0x53dff4) returned 0x0
[0241.518] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.518] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0241.518] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0241.518] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0241.518] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0241.518] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0241.518] LocalFree (hMem=0x89ee08) returned 0x0
[0241.518] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0241.518] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0241.519] LocalFree (hMem=0x89ee08) returned 0x0
[0241.519] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0241.519] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0241.519] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0241.519] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0241.519] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.519] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0241.519] GetCurrentObject (hdc=0xc90107bf, type=0x1) returned 0xb00017
[0241.519] GetCurrentObject (hdc=0xc90107bf, type=0x2) returned 0x900010
[0241.519] GetCurrentObject (hdc=0xc90107bf, type=0x7) returned 0x1e0507b9
[0241.519] GetCurrentObject (hdc=0xc90107bf, type=0x6) returned 0x8a01c2
[0241.519] SaveDC (hdc=0xc90107bf) returned 1
[0241.519] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9f04051e
[0241.519] GetClipRgn (hdc=0xc90107bf, hrgn=0x9f04051e) returned 0
[0241.519] SelectClipRgn (hdc=0xc90107bf, hrgn=0x1304053e) returned 2
[0241.520] DeleteObject (ho=0x9f04051e) returned 1
[0241.520] DeleteObject (ho=0x1304053e) returned 1
[0241.520] OffsetViewportOrgEx (in: hdc=0xc90107bf, x=0, y=0, lppt=0x243d484 | out: lppt=0x243d484) returned 1
[0241.520] IsAppThemed () returned 0x1
[0241.520] GetThemeAppProperties () returned 0x3
[0241.520] GetThemeAppProperties () returned 0x3
[0241.520] DrawThemeBackground () returned 0x0
[0241.520] RestoreDC (hdc=0xc90107bf, nSavedDC=-1) returned 1
[0241.520] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107bf) returned 0x0
[0241.520] GdipCreateRegion (region=0x53dff8) returned 0x0
[0241.520] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.520] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0241.520] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0241.520] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0241.520] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0241.520] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0241.521] LocalFree (hMem=0x89ee08) returned 0x0
[0241.521] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0241.521] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0241.521] LocalFree (hMem=0x89ea88) returned 0x0
[0241.521] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0241.521] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0241.521] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0241.521] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0241.521] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.521] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0241.521] GetCurrentObject (hdc=0xc90107bf, type=0x1) returned 0xb00017
[0241.521] GetCurrentObject (hdc=0xc90107bf, type=0x2) returned 0x900010
[0241.521] GetCurrentObject (hdc=0xc90107bf, type=0x7) returned 0x1e0507b9
[0241.521] GetCurrentObject (hdc=0xc90107bf, type=0x6) returned 0x8a01c2
[0241.521] SaveDC (hdc=0xc90107bf) returned 1
[0241.521] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1404053e
[0241.522] GetClipRgn (hdc=0xc90107bf, hrgn=0x1404053e) returned 0
[0241.526] SelectClipRgn (hdc=0xc90107bf, hrgn=0xa004051e) returned 2
[0241.526] DeleteObject (ho=0x1404053e) returned 1
[0241.526] DeleteObject (ho=0xa004051e) returned 1
[0241.526] OffsetViewportOrgEx (in: hdc=0xc90107bf, x=0, y=0, lppt=0x243d758 | out: lppt=0x243d758) returned 1
[0241.526] IsAppThemed () returned 0x1
[0241.526] GetThemeAppProperties () returned 0x3
[0241.526] GetThemeAppProperties () returned 0x3
[0241.526] GetThemeBackgroundContentRect () returned 0x0
[0241.526] RestoreDC (hdc=0xc90107bf, nSavedDC=-1) returned 1
[0241.527] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107bf) returned 0x0
[0241.527] IsAppThemed () returned 0x1
[0241.527] GetThemeAppProperties () returned 0x3
[0241.527] GetThemeAppProperties () returned 0x3
[0241.527] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0241.527] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0241.527] GetCurrentObject (hdc=0xc90107bf, type=0x1) returned 0xb00017
[0241.527] GetCurrentObject (hdc=0xc90107bf, type=0x2) returned 0x900010
[0241.527] GetCurrentObject (hdc=0xc90107bf, type=0x7) returned 0x1e0507b9
[0241.527] GetCurrentObject (hdc=0xc90107bf, type=0x6) returned 0x8a01c2
[0241.527] SaveDC (hdc=0xc90107bf) returned 1
[0241.527] GetTextAlign (hdc=0xc90107bf) returned 0x0
[0241.527] GetTextColor (hdc=0xc90107bf) returned 0x0
[0241.527] GetCurrentObject (hdc=0xc90107bf, type=0x6) returned 0x8a01c2
[0241.527] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0241.528] SelectObject (hdc=0xc90107bf, h=0x730a066d) returned 0x8a01c2
[0241.528] GetBkMode (hdc=0xc90107bf) returned 2
[0241.528] SetBkMode (hdc=0xc90107bf, mode=1) returned 2
[0241.528] DrawTextExW (in: hdc=0xc90107bf, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x243daf8 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0241.528] DrawTextExW (in: hdc=0xc90107bf, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x243daf8 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0241.528] RestoreDC (hdc=0xc90107bf, nSavedDC=-1) returned 1
[0241.529] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107bf) returned 0x0
[0241.529] GetFocus () returned 0xa01e2
[0241.529] IsAppThemed () returned 0x1
[0241.529] GetThemeAppProperties () returned 0x3
[0241.529] GetThemeAppProperties () returned 0x3
[0241.529] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0241.529] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xc90107bf, x1=0, y1=0, rop=0xcc0020) returned 1
[0241.529] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107bf) returned 0x0
[0241.529] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0241.529] SelectObject (hdc=0xc90107bf, h=0x85000f) returned 0x1e0507b9
[0241.529] DeleteDC (hdc=0xc90107bf) returned 1
[0241.529] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0241.529] EndPaint (hWnd=0x302ca, lpPaint=0x53e2e4) returned 1
[0241.530] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.530] IsWindowUnicode (hWnd=0x202c6) returned 1
[0241.530] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.530] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.530] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.530] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0241.530] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0241.530] CreateCompatibleDC (hdc=0x8b010786) returned 0xcb0107bf
[0241.530] SelectObject (hdc=0xcb0107bf, h=0x1e0507b9) returned 0x85000f
[0241.530] GdipCreateFromHDC (hdc=0xcb0107bf, graphics=0x53e300) returned 0x0
[0241.531] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0241.531] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0241.531] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0241.531] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0241.531] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0241.531] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0241.531] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0241.531] LocalFree (hMem=0x89eee8) returned 0x0
[0241.531] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0241.531] GdipCreateRegion (region=0x53e348) returned 0x0
[0241.531] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.531] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0241.531] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0241.531] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbcf0dbd) returned 0x0
[0241.532] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.532] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0241.532] GetCurrentObject (hdc=0xcb0107bf, type=0x1) returned 0xb00017
[0241.532] GetCurrentObject (hdc=0xcb0107bf, type=0x2) returned 0x900010
[0241.532] GetCurrentObject (hdc=0xcb0107bf, type=0x7) returned 0x1e0507b9
[0241.532] GetCurrentObject (hdc=0xcb0107bf, type=0x6) returned 0x8a01c2
[0241.532] SaveDC (hdc=0xcb0107bf) returned 1
[0241.532] GetNearestColor (hdc=0xcb0107bf, color=0xff) returned 0xff
[0241.532] GetNearestColor (hdc=0xcb0107bf, color=0x55) returned 0x55
[0241.532] GetNearestColor (hdc=0xcb0107bf, color=0x0) returned 0x0
[0241.532] GetNearestColor (hdc=0xcb0107bf, color=0x55) returned 0x55
[0241.532] GetNearestColor (hdc=0xcb0107bf, color=0x0) returned 0x0
[0241.532] GetNearestColor (hdc=0xcb0107bf, color=0x8080ff) returned 0x8080ff
[0241.532] GetNearestColor (hdc=0xcb0107bf, color=0x7373e5) returned 0x7373e5
[0241.533] GetNearestColor (hdc=0xcb0107bf, color=0xe5) returned 0xe5
[0241.533] GetNearestColor (hdc=0xcb0107bf, color=0x0) returned 0x0
[0241.533] RestoreDC (hdc=0xcb0107bf, nSavedDC=-1) returned 1
[0241.533] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb0107bf) returned 0x0
[0241.533] IsAppThemed () returned 0x1
[0241.533] GetThemeAppProperties () returned 0x3
[0241.533] GetThemeAppProperties () returned 0x3
[0241.533] IsAppThemed () returned 0x1
[0241.533] GetThemeAppProperties () returned 0x3
[0241.533] GetThemeAppProperties () returned 0x3
[0241.533] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0241.533] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x243e2dc | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0241.534] IsAppThemed () returned 0x1
[0241.534] GetThemeAppProperties () returned 0x3
[0241.534] GetThemeAppProperties () returned 0x3
[0241.534] IsAppThemed () returned 0x1
[0241.534] GetThemeAppProperties () returned 0x3
[0241.534] GetThemeAppProperties () returned 0x3
[0241.534] GetFocus () returned 0xa01e2
[0241.534] IsAppThemed () returned 0x1
[0241.534] GetThemeAppProperties () returned 0x3
[0241.534] GetThemeAppProperties () returned 0x3
[0241.534] IsAppThemed () returned 0x1
[0241.534] GetThemeAppProperties () returned 0x3
[0241.534] GetThemeAppProperties () returned 0x3
[0241.534] IsThemePartDefined () returned 0x1
[0241.534] IsAppThemed () returned 0x1
[0241.534] GetThemeAppProperties () returned 0x3
[0241.534] GetThemeAppProperties () returned 0x3
[0241.534] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0241.534] IsAppThemed () returned 0x1
[0241.535] GetThemeAppProperties () returned 0x3
[0241.535] GetThemeAppProperties () returned 0x3
[0241.535] IsAppThemed () returned 0x1
[0241.535] GetThemeAppProperties () returned 0x3
[0241.535] GetThemeAppProperties () returned 0x3
[0241.535] IsThemePartDefined () returned 0x1
[0241.535] GdipCreateRegion (region=0x53e070) returned 0x0
[0241.535] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.535] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0241.535] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0241.535] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0241.535] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0241.535] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0241.535] LocalFree (hMem=0x89ea88) returned 0x0
[0241.535] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0241.535] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0241.535] LocalFree (hMem=0x89ea88) returned 0x0
[0241.535] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0241.536] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0241.536] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0241.536] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0241.536] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.536] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0241.536] GetCurrentObject (hdc=0xcb0107bf, type=0x1) returned 0xb00017
[0241.536] GetCurrentObject (hdc=0xcb0107bf, type=0x2) returned 0x900010
[0241.536] GetCurrentObject (hdc=0xcb0107bf, type=0x7) returned 0x1e0507b9
[0241.536] GetCurrentObject (hdc=0xcb0107bf, type=0x6) returned 0x8a01c2
[0241.536] SaveDC (hdc=0xcb0107bf) returned 1
[0241.536] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa104051e
[0241.536] GetClipRgn (hdc=0xcb0107bf, hrgn=0xa104051e) returned 0
[0241.536] SelectClipRgn (hdc=0xcb0107bf, hrgn=0x1804053e) returned 2
[0241.536] DeleteObject (ho=0xa104051e) returned 1
[0241.536] DeleteObject (ho=0x1804053e) returned 1
[0241.537] OffsetViewportOrgEx (in: hdc=0xcb0107bf, x=0, y=0, lppt=0x243e98c | out: lppt=0x243e98c) returned 1
[0241.537] DrawThemeParentBackground () returned 0x0
[0241.576] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0241.576] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0241.576] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0241.576] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0241.577] GetSystemMetrics (nIndex=42) returned 0
[0241.577] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0241.577] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0241.577] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0241.577] GetCurrentObject (hdc=0xcb0107bf, type=0x1) returned 0xb00017
[0241.577] GetCurrentObject (hdc=0xcb0107bf, type=0x2) returned 0x900010
[0241.577] GetCurrentObject (hdc=0xcb0107bf, type=0x7) returned 0x1e0507b9
[0241.577] GetCurrentObject (hdc=0xcb0107bf, type=0x6) returned 0x8a01c2
[0241.577] SaveDC (hdc=0xcb0107bf) returned 2
[0241.577] GetNearestColor (hdc=0xcb0107bf, color=0xff) returned 0xff
[0241.577] CreateSolidBrush (color=0xff) returned 0x2d10078d
[0241.577] FillRect (hDC=0xcb0107bf, lprc=0x53dad0, hbr=0x2d10078d) returned 1
[0241.577] DeleteObject (ho=0x2d10078d) returned 1
[0241.578] RestoreDC (hdc=0xcb0107bf, nSavedDC=-1) returned 1
[0241.578] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0241.578] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0241.578] GetSystemMetrics (nIndex=42) returned 0
[0241.578] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0241.578] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0241.578] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0241.578] GetCurrentObject (hdc=0xcb0107bf, type=0x1) returned 0xb00017
[0241.578] GetCurrentObject (hdc=0xcb0107bf, type=0x2) returned 0x900010
[0241.578] GetCurrentObject (hdc=0xcb0107bf, type=0x7) returned 0x1e0507b9
[0241.578] GetCurrentObject (hdc=0xcb0107bf, type=0x6) returned 0x8a01c2
[0241.578] SaveDC (hdc=0xcb0107bf) returned 2
[0241.578] GetNearestColor (hdc=0xcb0107bf, color=0xff) returned 0xff
[0241.578] CreateSolidBrush (color=0xff) returned 0x2e10078d
[0241.578] FillRect (hDC=0xcb0107bf, lprc=0x53da70, hbr=0x2e10078d) returned 1
[0241.579] DeleteObject (ho=0x2e10078d) returned 1
[0241.579] RestoreDC (hdc=0xcb0107bf, nSavedDC=-1) returned 1
[0241.579] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0241.579] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0241.579] GetSystemMetrics (nIndex=42) returned 0
[0241.579] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0241.579] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0241.580] RestoreDC (hdc=0xcb0107bf, nSavedDC=-1) returned 1
[0241.580] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb0107bf) returned 0x0
[0241.580] IsAppThemed () returned 0x1
[0241.580] GetThemeAppProperties () returned 0x3
[0241.580] GetThemeAppProperties () returned 0x3
[0241.580] IsAppThemed () returned 0x1
[0241.580] GetThemeAppProperties () returned 0x3
[0241.580] GetThemeAppProperties () returned 0x3
[0241.580] IsThemePartDefined () returned 0x1
[0241.580] GdipCreateRegion (region=0x53dff4) returned 0x0
[0241.580] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.580] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0241.580] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0241.580] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0241.580] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0241.580] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0241.580] LocalFree (hMem=0x89ee08) returned 0x0
[0241.581] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0241.581] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0241.581] LocalFree (hMem=0x89ea88) returned 0x0
[0241.581] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0241.581] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0241.581] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0241.581] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0241.581] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.581] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0241.581] GetCurrentObject (hdc=0xcb0107bf, type=0x1) returned 0xb00017
[0241.581] GetCurrentObject (hdc=0xcb0107bf, type=0x2) returned 0x900010
[0241.581] GetCurrentObject (hdc=0xcb0107bf, type=0x7) returned 0x1e0507b9
[0241.581] GetCurrentObject (hdc=0xcb0107bf, type=0x6) returned 0x8a01c2
[0241.581] SaveDC (hdc=0xcb0107bf) returned 1
[0241.581] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1904053e
[0241.581] GetClipRgn (hdc=0xcb0107bf, hrgn=0x1904053e) returned 0
[0241.582] SelectClipRgn (hdc=0xcb0107bf, hrgn=0xa304051e) returned 2
[0241.582] DeleteObject (ho=0x1904053e) returned 1
[0241.582] DeleteObject (ho=0xa304051e) returned 1
[0241.582] OffsetViewportOrgEx (in: hdc=0xcb0107bf, x=0, y=0, lppt=0x243f1f0 | out: lppt=0x243f1f0) returned 1
[0241.582] IsAppThemed () returned 0x1
[0241.582] GetThemeAppProperties () returned 0x3
[0241.582] GetThemeAppProperties () returned 0x3
[0241.582] DrawThemeBackground () returned 0x0
[0241.582] RestoreDC (hdc=0xcb0107bf, nSavedDC=-1) returned 1
[0241.582] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb0107bf) returned 0x0
[0241.582] GdipCreateRegion (region=0x53dff8) returned 0x0
[0241.582] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0241.582] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0241.582] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0241.582] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0241.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0241.583] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0241.583] LocalFree (hMem=0x89ee08) returned 0x0
[0241.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0241.583] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0241.583] LocalFree (hMem=0x89ea88) returned 0x0
[0241.583] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0241.583] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0241.583] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0241.583] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0241.583] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0241.583] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0241.583] GetCurrentObject (hdc=0xcb0107bf, type=0x1) returned 0xb00017
[0241.583] GetCurrentObject (hdc=0xcb0107bf, type=0x2) returned 0x900010
[0241.583] GetCurrentObject (hdc=0xcb0107bf, type=0x7) returned 0x1e0507b9
[0241.583] GetCurrentObject (hdc=0xcb0107bf, type=0x6) returned 0x8a01c2
[0241.583] SaveDC (hdc=0xcb0107bf) returned 1
[0241.583] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa404051e
[0241.583] GetClipRgn (hdc=0xcb0107bf, hrgn=0xa404051e) returned 0
[0241.584] SelectClipRgn (hdc=0xcb0107bf, hrgn=0x1a04053e) returned 2
[0241.584] DeleteObject (ho=0xa404051e) returned 1
[0241.584] DeleteObject (ho=0x1a04053e) returned 1
[0241.584] OffsetViewportOrgEx (in: hdc=0xcb0107bf, x=0, y=0, lppt=0x243f4c4 | out: lppt=0x243f4c4) returned 1
[0241.584] IsAppThemed () returned 0x1
[0241.584] GetThemeAppProperties () returned 0x3
[0241.584] GetThemeAppProperties () returned 0x3
[0241.584] GetThemeBackgroundContentRect () returned 0x0
[0241.584] RestoreDC (hdc=0xcb0107bf, nSavedDC=-1) returned 1
[0241.584] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb0107bf) returned 0x0
[0241.584] IsAppThemed () returned 0x1
[0241.584] GetThemeAppProperties () returned 0x3
[0241.584] GetThemeAppProperties () returned 0x3
[0241.584] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0241.584] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0241.584] GetCurrentObject (hdc=0xcb0107bf, type=0x1) returned 0xb00017
[0241.584] GetCurrentObject (hdc=0xcb0107bf, type=0x2) returned 0x900010
[0241.585] GetCurrentObject (hdc=0xcb0107bf, type=0x7) returned 0x1e0507b9
[0241.585] GetCurrentObject (hdc=0xcb0107bf, type=0x6) returned 0x8a01c2
[0241.585] SaveDC (hdc=0xcb0107bf) returned 1
[0241.585] GetTextAlign (hdc=0xcb0107bf) returned 0x0
[0241.585] GetTextColor (hdc=0xcb0107bf) returned 0x0
[0241.585] GetCurrentObject (hdc=0xcb0107bf, type=0x6) returned 0x8a01c2
[0241.585] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0241.585] SelectObject (hdc=0xcb0107bf, h=0x450a0799) returned 0x8a01c2
[0241.585] GetBkMode (hdc=0xcb0107bf) returned 2
[0241.585] SetBkMode (hdc=0xcb0107bf, mode=1) returned 2
[0241.585] DrawTextExW (in: hdc=0xcb0107bf, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x243f864 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0241.586] DrawTextExW (in: hdc=0xcb0107bf, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x243f864 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0241.586] RestoreDC (hdc=0xcb0107bf, nSavedDC=-1) returned 1
[0241.586] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb0107bf) returned 0x0
[0241.586] GetFocus () returned 0xa01e2
[0241.586] IsAppThemed () returned 0x1
[0241.586] GetThemeAppProperties () returned 0x3
[0241.586] GetThemeAppProperties () returned 0x3
[0241.586] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0241.586] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xcb0107bf, x1=0, y1=0, rop=0xcc0020) returned 1
[0241.586] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcb0107bf) returned 0x0
[0241.586] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0241.587] SelectObject (hdc=0xcb0107bf, h=0x85000f) returned 0x1e0507b9
[0241.587] DeleteDC (hdc=0xcb0107bf) returned 1
[0241.587] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0241.587] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0241.587] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.587] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.587] WaitMessage () returned 1
[0241.613] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.614] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0241.614] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.614] WaitMessage () returned 1
[0241.616] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.616] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0241.617] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.617] WaitMessage () returned 1
[0241.617] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.617] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0241.617] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.617] WaitMessage () returned 1
[0241.686] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.686] IsWindowUnicode (hWnd=0x102dc) returned 1
[0241.686] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.687] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.687] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.688] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.688] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.688] WaitMessage () returned 1
[0241.688] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.688] IsWindowUnicode (hWnd=0x102dc) returned 1
[0241.689] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.689] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.689] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.690] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.690] IsWindowUnicode (hWnd=0x102dc) returned 1
[0241.690] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.691] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.691] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.691] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.691] IsWindowUnicode (hWnd=0x102dc) returned 1
[0241.691] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.691] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.691] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.691] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.692] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.692] WaitMessage () returned 1
[0241.692] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.692] IsWindowUnicode (hWnd=0x102dc) returned 1
[0241.692] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.693] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.693] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.699] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.699] IsWindowUnicode (hWnd=0x102dc) returned 1
[0241.699] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.699] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.699] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.699] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.699] IsWindowUnicode (hWnd=0x102dc) returned 1
[0241.700] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.700] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.700] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.700] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.700] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.700] WaitMessage () returned 1
[0241.703] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.703] IsWindowUnicode (hWnd=0x102dc) returned 1
[0241.703] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.703] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.703] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.705] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.705] IsWindowUnicode (hWnd=0x102dc) returned 1
[0241.705] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.705] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.705] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.705] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.705] IsWindowUnicode (hWnd=0x102dc) returned 1
[0241.705] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.705] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.705] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.706] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.706] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.706] WaitMessage () returned 1
[0241.709] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.709] IsWindowUnicode (hWnd=0x202d0) returned 1
[0241.709] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.709] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.709] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.710] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.710] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.710] WaitMessage () returned 1
[0241.991] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.991] IsWindowUnicode (hWnd=0xa01e2) returned 1
[0241.991] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0241.991] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0241.991] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0241.992] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.992] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0241.992] WaitMessage () returned 1
[0242.444] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0242.444] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0242.444] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0242.444] DispatchMessageA (lpMsg=0x53e8a0) returned 0x7ec5
[0242.444] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0242.444] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0242.444] WaitMessage () returned 1
[0242.522] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0242.522] IsWindowUnicode (hWnd=0xa01e2) returned 1
[0242.522] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0242.522] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0242.522] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0242.522] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0242.522] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0242.522] WaitMessage () returned 1
[0243.053] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0243.053] IsWindowUnicode (hWnd=0xa01e2) returned 1
[0243.053] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0243.053] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0243.053] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0243.054] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0243.054] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0243.054] WaitMessage () returned 1
[0243.443] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0243.444] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0243.444] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0243.444] DispatchMessageA (lpMsg=0x53e8a0) returned 0x7ec3
[0243.444] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0243.444] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0243.444] WaitMessage () returned 1
[0243.584] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0243.584] IsWindowUnicode (hWnd=0xa01e2) returned 1
[0243.585] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0243.585] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0243.585] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0243.585] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0243.585] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0243.585] WaitMessage () returned 1
[0244.016] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.017] MapWindowPoints (in: hWndFrom=0x7004e, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0244.017] IsWindowUnicode (hWnd=0x7004e) returned 1
[0244.017] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.017] MapWindowPoints (in: hWndFrom=0x7004e, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0244.017] SetCursor (hCursor=0x10003) returned 0x10003
[0244.017] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0244.017] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0244.017] _TrackMouseEvent (in: lpEventTrack=0x243fb7c | out: lpEventTrack=0x243fb7c) returned 1
[0244.018] SendMessageW (hWnd=0x7004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0244.018] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0244.018] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x200, wParam=0x0, lParam=0x13002f) returned 0x0
[0244.018] GetKeyState (nVirtKey=1) returned 0
[0244.018] GetKeyState (nVirtKey=2) returned 0
[0244.018] GetKeyState (nVirtKey=4) returned 0
[0244.018] GetKeyState (nVirtKey=5) returned 0
[0244.018] GetKeyState (nVirtKey=6) returned 0
[0244.018] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0244.018] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0244.018] WaitMessage () returned 1
[0244.075] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.075] MapWindowPoints (in: hWndFrom=0x7004e, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0244.075] IsWindowUnicode (hWnd=0x7004e) returned 1
[0244.076] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.076] MapWindowPoints (in: hWndFrom=0x7004e, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0244.076] GetDlgItem (hDlg=0x25013e, nIDDlgItem=0) returned 0x0
[0244.076] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x210, wParam=0x201, lParam=0x1d0039) returned 0x0
[0244.076] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x21, wParam=0x25013e, lParam=0x2010001) returned 0x1
[0244.076] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x21, wParam=0x25013e, lParam=0x2010001) returned 0x1
[0244.076] SetCursor (hCursor=0x10003) returned 0x10003
[0244.076] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0244.076] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0244.076] GetKeyState (nVirtKey=1) returned -127
[0244.076] GetKeyState (nVirtKey=2) returned 0
[0244.076] GetKeyState (nVirtKey=4) returned 0
[0244.077] GetKeyState (nVirtKey=5) returned 0
[0244.077] GetKeyState (nVirtKey=6) returned 0
[0244.077] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x201, wParam=0x1, lParam=0x13002f) returned 0x0
[0244.077] GetKeyState (nVirtKey=1) returned -127
[0244.077] GetKeyState (nVirtKey=2) returned 0
[0244.077] GetKeyState (nVirtKey=4) returned 0
[0244.077] GetKeyState (nVirtKey=5) returned 0
[0244.077] GetKeyState (nVirtKey=6) returned 0
[0244.077] GetCapture () returned 0x0
[0244.077] SetCapture (hWnd=0x7004e) returned 0x0
[0244.077] GetKeyState (nVirtKey=1) returned -127
[0244.077] GetKeyState (nVirtKey=2) returned 0
[0244.077] GetKeyState (nVirtKey=4) returned 0
[0244.077] GetKeyState (nVirtKey=5) returned 0
[0244.077] GetKeyState (nVirtKey=6) returned 0
[0244.077] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.077] IsWindowUnicode (hWnd=0x7004e) returned 1
[0244.077] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.077] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0244.077] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0244.077] MapWindowPoints (in: hWndFrom=0x7004e, hWndTo=0x0, lpPoints=0x243fbf0, cPoints=0x1 | out: lpPoints=0x243fbf0) returned 25625129
[0244.077] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x202, wParam=0x0, lParam=0x13002f) returned 0x0
[0244.078] WindowFromPoint (Point=0x258) returned 0x7004e
[0244.078] MapWindowPoints (in: hWndFrom=0x7004e, hWndTo=0x0, lpPoints=0x53e1c8, cPoints=0x2 | out: lpPoints=0x53e1c8) returned 25625129
[0244.078] GetCapture () returned 0x7004e
[0244.078] ReleaseCapture () returned 1
[0244.078] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0244.078] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.078] MapWindowPoints (in: hWndFrom=0x7004e, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0244.078] IsWindowUnicode (hWnd=0x7004e) returned 1
[0244.078] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.078] MapWindowPoints (in: hWndFrom=0x7004e, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0244.079] SetCursor (hCursor=0x10003) returned 0x10003
[0244.079] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0244.079] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0244.079] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x200, wParam=0x0, lParam=0x13002f) returned 0x0
[0244.079] GetKeyState (nVirtKey=1) returned 1
[0244.079] GetKeyState (nVirtKey=2) returned 0
[0244.079] GetKeyState (nVirtKey=4) returned 0
[0244.079] GetKeyState (nVirtKey=5) returned 0
[0244.079] GetKeyState (nVirtKey=6) returned 0
[0244.079] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0244.079] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0244.079] WaitMessage () returned 1
[0244.115] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.116] IsWindowUnicode (hWnd=0xa01e2) returned 1
[0244.116] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.116] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0244.116] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0244.116] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0244.116] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0244.116] WaitMessage () returned 1
[0244.180] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.180] IsWindowUnicode (hWnd=0x7004e) returned 1
[0244.180] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.180] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0244.180] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0244.180] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.180] IsWindowUnicode (hWnd=0x7004e) returned 1
[0244.180] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.181] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0244.181] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0244.181] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x2a1, wParam=0x0, lParam=0x13002f) returned 0x0
[0244.181] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0244.181] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0244.181] WaitMessage () returned 1
[0244.443] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.444] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.444] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0244.444] DispatchMessageA (lpMsg=0x53e8a0) returned 0x1
[0244.444] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0244.444] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0244.444] WaitMessage () returned 1
[0244.647] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.647] IsWindowUnicode (hWnd=0xa01e2) returned 1
[0244.647] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0244.647] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0244.648] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0244.648] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0244.648] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0244.648] WaitMessage () returned 1
[0245.178] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0245.178] IsWindowUnicode (hWnd=0xa01e2) returned 1
[0245.178] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0245.178] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0245.179] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0245.179] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0245.179] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0245.179] WaitMessage () returned 1
[0245.710] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0245.710] IsWindowUnicode (hWnd=0xa01e2) returned 1
[0245.710] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0245.710] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0245.710] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0245.711] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0245.711] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0245.711] WaitMessage () returned 1
[0246.240] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.241] IsWindowUnicode (hWnd=0xa01e2) returned 1
[0246.241] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.241] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0246.241] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0246.241] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0246.241] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0246.241] WaitMessage () returned 1
[0246.542] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.542] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x84, wParam=0x0, lParam=0x1920369) returned 0x1
[0246.542] IsWindowUnicode (hWnd=0xa0122) returned 1
[0246.542] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.542] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0246.542] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0246.542] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0246.542] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.543] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x84, wParam=0x0, lParam=0x1920369) returned 0x1
[0246.543] IsWindowUnicode (hWnd=0xa0122) returned 1
[0246.543] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.543] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x84, wParam=0x0, lParam=0x1920369) returned 0x1
[0246.543] SetCursor (hCursor=0x10003) returned 0x10003
[0246.543] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0246.543] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0246.543] _TrackMouseEvent (in: lpEventTrack=0x24395cc | out: lpEventTrack=0x24395cc) returned 1
[0246.543] SendMessageW (hWnd=0xa0122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0246.543] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0246.544] InvalidateRect (hWnd=0xa0122, lpRect=0x0, bErase=0) returned 1
[0246.544] GetKeyState (nVirtKey=1) returned 1
[0246.544] GetKeyState (nVirtKey=2) returned 0
[0246.544] GetKeyState (nVirtKey=4) returned 0
[0246.544] GetKeyState (nVirtKey=5) returned 0
[0246.544] GetKeyState (nVirtKey=6) returned 0
[0246.544] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.544] IsWindowUnicode (hWnd=0xa0122) returned 1
[0246.544] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.544] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0246.544] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0246.544] BeginPaint (in: hWnd=0xa0122, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0246.544] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0246.545] CreateCompatibleDC (hdc=0x8b010786) returned 0x6201079b
[0246.545] SelectObject (hdc=0x6201079b, h=0x1e0507b9) returned 0x85000f
[0246.545] GdipCreateFromHDC (hdc=0x6201079b, graphics=0x53e300) returned 0x0
[0246.545] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0246.545] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0246.545] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0246.545] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0246.545] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0246.545] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0246.545] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0246.545] LocalFree (hMem=0x89ec80) returned 0x0
[0246.546] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0246.546] GdipCreateRegion (region=0x53e348) returned 0x0
[0246.546] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0246.546] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0246.546] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0246.546] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbcd0dbd) returned 0x0
[0246.546] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0246.546] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0246.546] GetCurrentObject (hdc=0x6201079b, type=0x1) returned 0xb00017
[0246.546] GetCurrentObject (hdc=0x6201079b, type=0x2) returned 0x900010
[0246.546] GetCurrentObject (hdc=0x6201079b, type=0x7) returned 0x1e0507b9
[0246.546] GetCurrentObject (hdc=0x6201079b, type=0x6) returned 0x8a01c2
[0246.546] SaveDC (hdc=0x6201079b) returned 1
[0246.546] GetNearestColor (hdc=0x6201079b, color=0xf0f0f0) returned 0xf0f0f0
[0246.547] GetNearestColor (hdc=0x6201079b, color=0xa0a0a0) returned 0xa0a0a0
[0246.547] GetNearestColor (hdc=0x6201079b, color=0x696969) returned 0x696969
[0246.547] GetNearestColor (hdc=0x6201079b, color=0xa0a0a0) returned 0xa0a0a0
[0246.547] GetNearestColor (hdc=0x6201079b, color=0x0) returned 0x0
[0246.547] GetNearestColor (hdc=0x6201079b, color=0xffffff) returned 0xffffff
[0246.547] GetNearestColor (hdc=0x6201079b, color=0xe5e5e5) returned 0xe5e5e5
[0246.547] GetNearestColor (hdc=0x6201079b, color=0xd7d7d7) returned 0xd7d7d7
[0246.547] GetNearestColor (hdc=0x6201079b, color=0x0) returned 0x0
[0246.547] RestoreDC (hdc=0x6201079b, nSavedDC=-1) returned 1
[0246.547] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6201079b) returned 0x0
[0246.547] IsAppThemed () returned 0x1
[0246.547] GetThemeAppProperties () returned 0x3
[0246.547] GetThemeAppProperties () returned 0x3
[0246.548] IsAppThemed () returned 0x1
[0246.548] GetThemeAppProperties () returned 0x3
[0246.548] GetThemeAppProperties () returned 0x3
[0246.548] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0246.548] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x24404f4 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0246.548] IsAppThemed () returned 0x1
[0246.548] GetThemeAppProperties () returned 0x3
[0246.548] GetThemeAppProperties () returned 0x3
[0246.548] IsAppThemed () returned 0x1
[0246.548] GetThemeAppProperties () returned 0x3
[0246.548] GetThemeAppProperties () returned 0x3
[0246.548] IsAppThemed () returned 0x1
[0246.549] GetThemeAppProperties () returned 0x3
[0246.549] GetThemeAppProperties () returned 0x3
[0246.549] IsAppThemed () returned 0x1
[0246.549] GetThemeAppProperties () returned 0x3
[0246.549] GetThemeAppProperties () returned 0x3
[0246.549] IsThemePartDefined () returned 0x1
[0246.549] IsAppThemed () returned 0x1
[0246.549] GetThemeAppProperties () returned 0x3
[0246.549] GetThemeAppProperties () returned 0x3
[0246.549] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0246.549] IsAppThemed () returned 0x1
[0246.549] GetThemeAppProperties () returned 0x3
[0246.549] GetThemeAppProperties () returned 0x3
[0246.549] IsAppThemed () returned 0x1
[0246.549] GetThemeAppProperties () returned 0x3
[0246.549] GetThemeAppProperties () returned 0x3
[0246.549] IsThemePartDefined () returned 0x1
[0246.549] GdipCreateRegion (region=0x53e064) returned 0x0
[0246.549] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0246.549] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0246.550] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0246.550] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0246.550] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0246.550] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0246.550] LocalFree (hMem=0x89ea88) returned 0x0
[0246.550] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0246.550] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0246.550] LocalFree (hMem=0x89ea88) returned 0x0
[0246.550] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0246.550] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0246.550] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0246.550] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0246.550] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0246.550] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0246.550] GetCurrentObject (hdc=0x6201079b, type=0x1) returned 0xb00017
[0246.550] GetCurrentObject (hdc=0x6201079b, type=0x2) returned 0x900010
[0246.551] GetCurrentObject (hdc=0x6201079b, type=0x7) returned 0x1e0507b9
[0246.551] GetCurrentObject (hdc=0x6201079b, type=0x6) returned 0x8a01c2
[0246.551] SaveDC (hdc=0x6201079b) returned 1
[0246.551] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1b04053e
[0246.551] GetClipRgn (hdc=0x6201079b, hrgn=0x1b04053e) returned 0
[0246.551] SelectClipRgn (hdc=0x6201079b, hrgn=0xa804051e) returned 2
[0246.551] DeleteObject (ho=0x1b04053e) returned 1
[0246.551] DeleteObject (ho=0xa804051e) returned 1
[0246.551] OffsetViewportOrgEx (in: hdc=0x6201079b, x=0, y=0, lppt=0x2440ba4 | out: lppt=0x2440ba4) returned 1
[0246.551] DrawThemeParentBackground () returned 0x0
[0246.552] GetWindowPlacement (in: hWnd=0x25013e, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0246.552] GetClientRect (in: hWnd=0x25013e, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0246.552] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0246.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0246.552] GetSystemMetrics (nIndex=42) returned 0
[0246.552] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0246.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0246.552] GetClientRect (in: hWnd=0x25013e, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0246.552] GetCurrentObject (hdc=0x6201079b, type=0x1) returned 0xb00017
[0246.552] GetCurrentObject (hdc=0x6201079b, type=0x2) returned 0x900010
[0246.552] GetCurrentObject (hdc=0x6201079b, type=0x7) returned 0x1e0507b9
[0246.552] GetCurrentObject (hdc=0x6201079b, type=0x6) returned 0x8a01c2
[0246.552] SaveDC (hdc=0x6201079b) returned 2
[0246.553] GetNearestColor (hdc=0x6201079b, color=0xf0f0f0) returned 0xf0f0f0
[0246.553] CreateSolidBrush (color=0xf0f0f0) returned 0x2f10078d
[0246.553] FillRect (hDC=0x6201079b, lprc=0x53dac8, hbr=0x2f10078d) returned 1
[0246.553] DeleteObject (ho=0x2f10078d) returned 1
[0246.553] RestoreDC (hdc=0x6201079b, nSavedDC=-1) returned 1
[0246.553] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0246.553] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0246.553] GetSystemMetrics (nIndex=42) returned 0
[0246.553] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0246.553] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0246.553] GetClientRect (in: hWnd=0x25013e, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0246.553] GetCurrentObject (hdc=0x6201079b, type=0x1) returned 0xb00017
[0246.553] GetCurrentObject (hdc=0x6201079b, type=0x2) returned 0x900010
[0246.554] GetCurrentObject (hdc=0x6201079b, type=0x7) returned 0x1e0507b9
[0246.554] GetCurrentObject (hdc=0x6201079b, type=0x6) returned 0x8a01c2
[0246.554] SaveDC (hdc=0x6201079b) returned 2
[0246.554] GetNearestColor (hdc=0x6201079b, color=0xf0f0f0) returned 0xf0f0f0
[0246.554] CreateSolidBrush (color=0xf0f0f0) returned 0x3010078d
[0246.554] FillRect (hDC=0x6201079b, lprc=0x53da68, hbr=0x3010078d) returned 1
[0246.554] DeleteObject (ho=0x3010078d) returned 1
[0246.554] RestoreDC (hdc=0x6201079b, nSavedDC=-1) returned 1
[0246.554] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0246.554] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0246.554] GetSystemMetrics (nIndex=42) returned 0
[0246.554] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0246.554] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0246.555] RestoreDC (hdc=0x6201079b, nSavedDC=-1) returned 1
[0246.555] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6201079b) returned 0x0
[0246.555] IsAppThemed () returned 0x1
[0246.555] GetThemeAppProperties () returned 0x3
[0246.555] GetThemeAppProperties () returned 0x3
[0246.555] IsAppThemed () returned 0x1
[0246.555] GetThemeAppProperties () returned 0x3
[0246.555] GetThemeAppProperties () returned 0x3
[0246.555] IsThemePartDefined () returned 0x1
[0246.555] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0246.555] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0246.555] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0246.555] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0246.555] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0246.555] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0246.555] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0246.556] LocalFree (hMem=0x89eac0) returned 0x0
[0246.556] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0246.556] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0246.556] LocalFree (hMem=0x89ec80) returned 0x0
[0246.556] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0246.556] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0246.556] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0246.556] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0246.556] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0246.556] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0246.556] GetCurrentObject (hdc=0x6201079b, type=0x1) returned 0xb00017
[0246.556] GetCurrentObject (hdc=0x6201079b, type=0x2) returned 0x900010
[0246.556] GetCurrentObject (hdc=0x6201079b, type=0x7) returned 0x1e0507b9
[0246.556] GetCurrentObject (hdc=0x6201079b, type=0x6) returned 0x8a01c2
[0246.556] SaveDC (hdc=0x6201079b) returned 1
[0246.556] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa904051e
[0246.557] GetClipRgn (hdc=0x6201079b, hrgn=0xa904051e) returned 0
[0246.557] SelectClipRgn (hdc=0x6201079b, hrgn=0x1d04053e) returned 2
[0246.557] DeleteObject (ho=0xa904051e) returned 1
[0246.557] DeleteObject (ho=0x1d04053e) returned 1
[0246.557] OffsetViewportOrgEx (in: hdc=0x6201079b, x=0, y=0, lppt=0x244142c | out: lppt=0x244142c) returned 1
[0246.557] IsAppThemed () returned 0x1
[0246.557] GetThemeAppProperties () returned 0x3
[0246.557] GetThemeAppProperties () returned 0x3
[0246.557] DrawThemeBackground () returned 0x0
[0246.557] RestoreDC (hdc=0x6201079b, nSavedDC=-1) returned 1
[0246.557] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6201079b) returned 0x0
[0246.557] GdipCreateRegion (region=0x53dfec) returned 0x0
[0246.557] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0246.557] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0246.557] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0246.557] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0246.558] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0246.558] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0246.558] LocalFree (hMem=0x89ec80) returned 0x0
[0246.558] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0246.558] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0246.558] LocalFree (hMem=0x89ee08) returned 0x0
[0246.558] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0246.558] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0246.558] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0246.558] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0246.558] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0246.558] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0246.558] GetCurrentObject (hdc=0x6201079b, type=0x1) returned 0xb00017
[0246.558] GetCurrentObject (hdc=0x6201079b, type=0x2) returned 0x900010
[0246.558] GetCurrentObject (hdc=0x6201079b, type=0x7) returned 0x1e0507b9
[0246.558] GetCurrentObject (hdc=0x6201079b, type=0x6) returned 0x8a01c2
[0246.559] SaveDC (hdc=0x6201079b) returned 1
[0246.559] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1e04053e
[0246.559] GetClipRgn (hdc=0x6201079b, hrgn=0x1e04053e) returned 0
[0246.559] SelectClipRgn (hdc=0x6201079b, hrgn=0xaa04051e) returned 2
[0246.559] DeleteObject (ho=0x1e04053e) returned 1
[0246.559] DeleteObject (ho=0xaa04051e) returned 1
[0246.559] OffsetViewportOrgEx (in: hdc=0x6201079b, x=0, y=0, lppt=0x2441700 | out: lppt=0x2441700) returned 1
[0246.559] IsAppThemed () returned 0x1
[0246.559] GetThemeAppProperties () returned 0x3
[0246.559] GetThemeAppProperties () returned 0x3
[0246.559] GetThemeBackgroundContentRect () returned 0x0
[0246.559] RestoreDC (hdc=0x6201079b, nSavedDC=-1) returned 1
[0246.559] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6201079b) returned 0x0
[0246.559] IsAppThemed () returned 0x1
[0246.559] GetThemeAppProperties () returned 0x3
[0246.560] GetThemeAppProperties () returned 0x3
[0246.560] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0246.560] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0246.560] GetCurrentObject (hdc=0x6201079b, type=0x1) returned 0xb00017
[0246.560] GetCurrentObject (hdc=0x6201079b, type=0x2) returned 0x900010
[0246.560] GetCurrentObject (hdc=0x6201079b, type=0x7) returned 0x1e0507b9
[0246.560] GetCurrentObject (hdc=0x6201079b, type=0x6) returned 0x8a01c2
[0246.560] SaveDC (hdc=0x6201079b) returned 1
[0246.560] GetTextAlign (hdc=0x6201079b) returned 0x0
[0246.560] GetTextColor (hdc=0x6201079b) returned 0x0
[0246.560] GetCurrentObject (hdc=0x6201079b, type=0x6) returned 0x8a01c2
[0246.560] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0246.560] SelectObject (hdc=0x6201079b, h=0x730a066d) returned 0x8a01c2
[0246.560] GetBkMode (hdc=0x6201079b) returned 2
[0246.561] SetBkMode (hdc=0x6201079b, mode=1) returned 2
[0246.561] DrawTextExW (in: hdc=0x6201079b, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x2441aa0 | out: lpchText="OK", lprc=0x53df84) returned 13
[0246.561] DrawTextExW (in: hdc=0x6201079b, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x2441aa0 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0246.561] RestoreDC (hdc=0x6201079b, nSavedDC=-1) returned 1
[0246.561] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6201079b) returned 0x0
[0246.561] GetFocus () returned 0xa01e2
[0246.562] IsAppThemed () returned 0x1
[0246.562] GetThemeAppProperties () returned 0x3
[0246.562] GetThemeAppProperties () returned 0x3
[0246.562] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0246.562] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x6201079b, x1=0, y1=0, rop=0xcc0020) returned 1
[0246.562] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6201079b) returned 0x0
[0246.562] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0246.562] SelectObject (hdc=0x6201079b, h=0x85000f) returned 0x1e0507b9
[0246.563] DeleteDC (hdc=0x6201079b) returned 1
[0246.563] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0246.563] EndPaint (hWnd=0xa0122, lpPaint=0x53e2e4) returned 1
[0246.563] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0246.563] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0246.563] WaitMessage () returned 1
[0246.687] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.687] IsWindowUnicode (hWnd=0xa0122) returned 1
[0246.687] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.687] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0246.687] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0246.687] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.688] IsWindowUnicode (hWnd=0xa0122) returned 1
[0246.688] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.688] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0246.688] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0246.688] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x2a1, wParam=0x0, lParam=0x90028) returned 0x0
[0246.688] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0246.688] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0246.688] WaitMessage () returned 1
[0246.775] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.775] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x84, wParam=0x0, lParam=0x1920369) returned 0x1
[0246.775] IsWindowUnicode (hWnd=0xa0122) returned 1
[0246.775] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.775] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x84, wParam=0x0, lParam=0x1920369) returned 0x1
[0246.776] GetDlgItem (hDlg=0x25013e, nIDDlgItem=0) returned 0x0
[0246.776] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x210, wParam=0x201, lParam=0x15014a) returned 0x0
[0246.776] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x21, wParam=0x25013e, lParam=0x2010001) returned 0x1
[0246.776] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x21, wParam=0x25013e, lParam=0x2010001) returned 0x1
[0246.776] SetCursor (hCursor=0x10003) returned 0x10003
[0246.776] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0246.776] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0246.776] GetKeyState (nVirtKey=1) returned -128
[0246.776] GetKeyState (nVirtKey=2) returned 0
[0246.776] GetKeyState (nVirtKey=4) returned 0
[0246.776] GetKeyState (nVirtKey=5) returned 0
[0246.776] GetKeyState (nVirtKey=6) returned 0
[0246.776] IsWindowVisible (hWnd=0xa0122) returned 1
[0246.776] IsWindowEnabled (hWnd=0xa0122) returned 1
[0246.776] SetFocus (hWnd=0xa0122) returned 0xa01e2
[0246.777] GetFocus () returned 0xa0122
[0246.777] IsChild (hWndParent=0x25013e, hWnd=0xa0122) returned 1
[0246.777] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x8, wParam=0xa0122, lParam=0x0) returned 0x1
[0246.777] SendMessageW (hWnd=0xa01e2, Msg=0x2111, wParam=0x20001e2, lParam=0xa01e2) returned 0x0
[0246.778] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0246.779] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0246.780] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0246.780] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0246.780] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0246.780] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0246.782] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0246.782] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x7, wParam=0xa01e2, lParam=0x0) returned 0x0
[0246.782] GetStockObject (i=5) returned 0x900015
[0246.782] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0246.782] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0xd, wParam=0x3, lParam=0x89e628) returned 0x2
[0246.782] GetDlgItem (hDlg=0x25013e, nIDDlgItem=655650) returned 0xa0122
[0246.782] SendMessageW (hWnd=0xa0122, Msg=0x202b, wParam=0xa0122, lParam=0x53de74) returned 0x0
[0246.782] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x202b, wParam=0xa0122, lParam=0x53de74) returned 0x0
[0246.782] InvalidateRect (hWnd=0xa0122, lpRect=0x0, bErase=0) returned 1
[0246.784] GetFocus () returned 0xa0122
[0246.784] GetFocus () returned 0xa0122
[0246.784] GetFocus () returned 0xa0122
[0246.784] GetKeyState (nVirtKey=1) returned -128
[0246.784] GetKeyState (nVirtKey=2) returned 0
[0246.784] GetKeyState (nVirtKey=4) returned 0
[0246.784] GetKeyState (nVirtKey=5) returned 0
[0246.784] GetKeyState (nVirtKey=6) returned 0
[0246.784] GetCapture () returned 0x0
[0246.784] SetCapture (hWnd=0xa0122) returned 0x0
[0246.784] GetKeyState (nVirtKey=1) returned -128
[0246.784] GetKeyState (nVirtKey=2) returned 0
[0246.784] GetKeyState (nVirtKey=4) returned 0
[0246.784] GetKeyState (nVirtKey=5) returned 0
[0246.785] GetKeyState (nVirtKey=6) returned 0
[0246.785] NotifyWinEvent (event=0x800a, hwnd=0xa0122, idObject=-4, idChild=0)
[0246.785] InvalidateRect (hWnd=0xa0122, lpRect=0x53e4c8, bErase=0) returned 1
[0246.785] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.785] IsWindowUnicode (hWnd=0xa0122) returned 1
[0246.785] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.785] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0246.785] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0246.785] MapWindowPoints (in: hWndFrom=0xa0122, hWndTo=0x0, lpPoints=0x2441c84, cPoints=0x1 | out: lpPoints=0x2441c84) returned 25756481
[0246.785] NotifyWinEvent (event=0x800a, hwnd=0xa0122, idObject=-4, idChild=0)
[0246.785] InvalidateRect (hWnd=0xa0122, lpRect=0x53e468, bErase=0) returned 1
[0246.785] UpdateWindow (hWnd=0xa0122) returned 1
[0246.785] BeginPaint (in: hWnd=0xa0122, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x8b010786
[0246.785] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0246.786] CreateCompatibleDC (hdc=0x8b010786) returned 0x6301079b
[0246.786] SelectObject (hdc=0x6301079b, h=0x1e0507b9) returned 0x85000f
[0246.786] GdipCreateFromHDC (hdc=0x6301079b, graphics=0x53df98) returned 0x0
[0246.786] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0246.786] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0246.786] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0246.786] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0246.786] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0246.786] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0246.786] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0246.786] LocalFree (hMem=0x89ee08) returned 0x0
[0246.786] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0246.786] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0246.786] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0246.786] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0246.786] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0246.787] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbcb0dbd) returned 0x0
[0246.787] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0246.787] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0246.787] GetCurrentObject (hdc=0x6301079b, type=0x1) returned 0xb00017
[0246.787] GetCurrentObject (hdc=0x6301079b, type=0x2) returned 0x900010
[0246.787] GetCurrentObject (hdc=0x6301079b, type=0x7) returned 0x1e0507b9
[0246.787] GetCurrentObject (hdc=0x6301079b, type=0x6) returned 0x8a01c2
[0246.787] SaveDC (hdc=0x6301079b) returned 1
[0246.787] GetNearestColor (hdc=0x6301079b, color=0xf0f0f0) returned 0xf0f0f0
[0246.787] GetNearestColor (hdc=0x6301079b, color=0xa0a0a0) returned 0xa0a0a0
[0246.787] GetNearestColor (hdc=0x6301079b, color=0x696969) returned 0x696969
[0246.787] GetNearestColor (hdc=0x6301079b, color=0xa0a0a0) returned 0xa0a0a0
[0246.788] GetNearestColor (hdc=0x6301079b, color=0x0) returned 0x0
[0246.788] GetNearestColor (hdc=0x6301079b, color=0xffffff) returned 0xffffff
[0246.788] GetNearestColor (hdc=0x6301079b, color=0xe5e5e5) returned 0xe5e5e5
[0246.788] GetNearestColor (hdc=0x6301079b, color=0xd7d7d7) returned 0xd7d7d7
[0246.788] GetNearestColor (hdc=0x6301079b, color=0x0) returned 0x0
[0246.788] RestoreDC (hdc=0x6301079b, nSavedDC=-1) returned 1
[0246.788] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6301079b) returned 0x0
[0246.788] IsAppThemed () returned 0x1
[0246.788] GetThemeAppProperties () returned 0x3
[0246.788] GetThemeAppProperties () returned 0x3
[0246.788] IsAppThemed () returned 0x1
[0246.788] GetThemeAppProperties () returned 0x3
[0246.788] GetThemeAppProperties () returned 0x3
[0246.788] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x24423f8 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0246.789] IsAppThemed () returned 0x1
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] IsAppThemed () returned 0x1
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] IsAppThemed () returned 0x1
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] IsAppThemed () returned 0x1
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] IsThemePartDefined () returned 0x1
[0246.789] IsAppThemed () returned 0x1
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0246.789] IsAppThemed () returned 0x1
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] IsAppThemed () returned 0x1
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] GetThemeAppProperties () returned 0x3
[0246.789] IsThemePartDefined () returned 0x1
[0246.790] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0246.790] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0246.790] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0246.790] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0246.790] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0246.790] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0246.790] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0246.790] LocalFree (hMem=0x89ec80) returned 0x0
[0246.790] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0246.790] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0246.790] LocalFree (hMem=0x89ee40) returned 0x0
[0246.790] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0246.790] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0246.790] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0246.790] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0246.790] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0246.790] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0246.790] GetCurrentObject (hdc=0x6301079b, type=0x1) returned 0xb00017
[0246.790] GetCurrentObject (hdc=0x6301079b, type=0x2) returned 0x900010
[0246.790] GetCurrentObject (hdc=0x6301079b, type=0x7) returned 0x1e0507b9
[0246.791] GetCurrentObject (hdc=0x6301079b, type=0x6) returned 0x8a01c2
[0246.791] SaveDC (hdc=0x6301079b) returned 1
[0246.791] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xab04051e
[0246.791] GetClipRgn (hdc=0x6301079b, hrgn=0xab04051e) returned 0
[0246.791] SelectClipRgn (hdc=0x6301079b, hrgn=0x2204053e) returned 2
[0246.791] DeleteObject (ho=0xab04051e) returned 1
[0246.791] DeleteObject (ho=0x2204053e) returned 1
[0246.791] OffsetViewportOrgEx (in: hdc=0x6301079b, x=0, y=0, lppt=0x2442aa8 | out: lppt=0x2442aa8) returned 1
[0246.791] DrawThemeParentBackground () returned 0x0
[0246.791] GetWindowPlacement (in: hWnd=0x25013e, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0246.791] GetClientRect (in: hWnd=0x25013e, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0246.791] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0246.791] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0246.791] GetSystemMetrics (nIndex=42) returned 0
[0246.792] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0246.792] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0246.792] GetClientRect (in: hWnd=0x25013e, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0246.792] GetCurrentObject (hdc=0x6301079b, type=0x1) returned 0xb00017
[0246.792] GetCurrentObject (hdc=0x6301079b, type=0x2) returned 0x900010
[0246.792] GetCurrentObject (hdc=0x6301079b, type=0x7) returned 0x1e0507b9
[0246.792] GetCurrentObject (hdc=0x6301079b, type=0x6) returned 0x8a01c2
[0246.792] SaveDC (hdc=0x6301079b) returned 2
[0246.792] GetNearestColor (hdc=0x6301079b, color=0xf0f0f0) returned 0xf0f0f0
[0246.792] CreateSolidBrush (color=0xf0f0f0) returned 0x3110078d
[0246.792] FillRect (hDC=0x6301079b, lprc=0x53d760, hbr=0x3110078d) returned 1
[0246.792] DeleteObject (ho=0x3110078d) returned 1
[0246.792] RestoreDC (hdc=0x6301079b, nSavedDC=-1) returned 1
[0246.792] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0246.792] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0246.792] GetSystemMetrics (nIndex=42) returned 0
[0246.793] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0246.793] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0246.793] GetClientRect (in: hWnd=0x25013e, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0246.793] GetCurrentObject (hdc=0x6301079b, type=0x1) returned 0xb00017
[0246.793] GetCurrentObject (hdc=0x6301079b, type=0x2) returned 0x900010
[0246.793] GetCurrentObject (hdc=0x6301079b, type=0x7) returned 0x1e0507b9
[0246.793] GetCurrentObject (hdc=0x6301079b, type=0x6) returned 0x8a01c2
[0246.793] SaveDC (hdc=0x6301079b) returned 2
[0246.793] GetNearestColor (hdc=0x6301079b, color=0xf0f0f0) returned 0xf0f0f0
[0246.793] CreateSolidBrush (color=0xf0f0f0) returned 0x3210078d
[0246.793] FillRect (hDC=0x6301079b, lprc=0x53d700, hbr=0x3210078d) returned 1
[0246.793] DeleteObject (ho=0x3210078d) returned 1
[0246.793] RestoreDC (hdc=0x6301079b, nSavedDC=-1) returned 1
[0246.793] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0246.793] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0246.793] GetSystemMetrics (nIndex=42) returned 0
[0246.793] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0246.793] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0246.794] RestoreDC (hdc=0x6301079b, nSavedDC=-1) returned 1
[0246.794] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6301079b) returned 0x0
[0246.794] IsAppThemed () returned 0x1
[0246.794] GetThemeAppProperties () returned 0x3
[0246.794] GetThemeAppProperties () returned 0x3
[0246.794] IsAppThemed () returned 0x1
[0246.794] GetThemeAppProperties () returned 0x3
[0246.794] GetThemeAppProperties () returned 0x3
[0246.794] IsThemePartDefined () returned 0x1
[0246.794] GdipCreateRegion (region=0x53dc80) returned 0x0
[0246.794] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0246.794] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0246.794] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0246.794] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0246.794] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0246.794] LocalFree (hMem=0x89ee08) returned 0x0
[0246.794] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0246.794] LocalFree (hMem=0x89ea88) returned 0x0
[0246.794] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0246.794] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0246.794] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0246.794] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0246.795] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0246.795] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0246.795] GetCurrentObject (hdc=0x6301079b, type=0x1) returned 0xb00017
[0246.795] GetCurrentObject (hdc=0x6301079b, type=0x2) returned 0x900010
[0246.795] GetCurrentObject (hdc=0x6301079b, type=0x7) returned 0x1e0507b9
[0246.795] GetCurrentObject (hdc=0x6301079b, type=0x6) returned 0x8a01c2
[0246.795] SaveDC (hdc=0x6301079b) returned 1
[0246.795] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2304053e
[0246.795] GetClipRgn (hdc=0x6301079b, hrgn=0x2304053e) returned 0
[0246.795] SelectClipRgn (hdc=0x6301079b, hrgn=0xad04051e) returned 2
[0246.795] DeleteObject (ho=0x2304053e) returned 1
[0246.795] DeleteObject (ho=0xad04051e) returned 1
[0246.795] OffsetViewportOrgEx (in: hdc=0x6301079b, x=0, y=0, lppt=0x2443330 | out: lppt=0x2443330) returned 1
[0246.795] IsAppThemed () returned 0x1
[0246.795] GetThemeAppProperties () returned 0x3
[0246.795] GetThemeAppProperties () returned 0x3
[0246.795] DrawThemeBackground () returned 0x0
[0246.795] RestoreDC (hdc=0x6301079b, nSavedDC=-1) returned 1
[0246.795] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6301079b) returned 0x0
[0246.795] GdipCreateRegion (region=0x53dc84) returned 0x0
[0246.796] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0246.796] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0246.796] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0246.796] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0246.796] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0246.796] LocalFree (hMem=0x89ee08) returned 0x0
[0246.796] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0246.796] LocalFree (hMem=0x89ec80) returned 0x0
[0246.796] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0246.796] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0246.796] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0246.796] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0246.796] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0246.796] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0246.796] GetCurrentObject (hdc=0x6301079b, type=0x1) returned 0xb00017
[0246.796] GetCurrentObject (hdc=0x6301079b, type=0x2) returned 0x900010
[0246.796] GetCurrentObject (hdc=0x6301079b, type=0x7) returned 0x1e0507b9
[0246.796] GetCurrentObject (hdc=0x6301079b, type=0x6) returned 0x8a01c2
[0246.796] SaveDC (hdc=0x6301079b) returned 1
[0246.796] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xae04051e
[0246.796] GetClipRgn (hdc=0x6301079b, hrgn=0xae04051e) returned 0
[0246.796] SelectClipRgn (hdc=0x6301079b, hrgn=0x2404053e) returned 2
[0246.796] DeleteObject (ho=0xae04051e) returned 1
[0246.797] DeleteObject (ho=0x2404053e) returned 1
[0246.797] OffsetViewportOrgEx (in: hdc=0x6301079b, x=0, y=0, lppt=0x2443604 | out: lppt=0x2443604) returned 1
[0246.797] IsAppThemed () returned 0x1
[0246.797] GetThemeAppProperties () returned 0x3
[0246.797] GetThemeAppProperties () returned 0x3
[0246.797] GetThemeBackgroundContentRect () returned 0x0
[0246.797] RestoreDC (hdc=0x6301079b, nSavedDC=-1) returned 1
[0246.797] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6301079b) returned 0x0
[0246.797] IsAppThemed () returned 0x1
[0246.797] GetThemeAppProperties () returned 0x3
[0246.797] GetThemeAppProperties () returned 0x3
[0246.797] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0246.797] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0246.797] GetCurrentObject (hdc=0x6301079b, type=0x1) returned 0xb00017
[0246.797] GetCurrentObject (hdc=0x6301079b, type=0x2) returned 0x900010
[0246.797] GetCurrentObject (hdc=0x6301079b, type=0x7) returned 0x1e0507b9
[0246.797] GetCurrentObject (hdc=0x6301079b, type=0x6) returned 0x8a01c2
[0246.797] SaveDC (hdc=0x6301079b) returned 1
[0246.797] GetTextAlign (hdc=0x6301079b) returned 0x0
[0246.797] GetTextColor (hdc=0x6301079b) returned 0x0
[0246.797] GetCurrentObject (hdc=0x6301079b, type=0x6) returned 0x8a01c2
[0246.797] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0246.798] SelectObject (hdc=0x6301079b, h=0x730a066d) returned 0x8a01c2
[0246.798] GetBkMode (hdc=0x6301079b) returned 2
[0246.798] SetBkMode (hdc=0x6301079b, mode=1) returned 2
[0246.798] DrawTextExW (in: hdc=0x6301079b, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x24439a4 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0246.798] DrawTextExW (in: hdc=0x6301079b, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x24439a4 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0246.798] RestoreDC (hdc=0x6301079b, nSavedDC=-1) returned 1
[0246.798] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6301079b) returned 0x0
[0246.798] GetFocus () returned 0xa0122
[0246.798] IsAppThemed () returned 0x1
[0246.798] GetThemeAppProperties () returned 0x3
[0246.798] GetThemeAppProperties () returned 0x3
[0246.798] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0246.799] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x6301079b, x1=0, y1=0, rop=0xcc0020) returned 1
[0246.799] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6301079b) returned 0x0
[0246.799] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0246.799] SelectObject (hdc=0x6301079b, h=0x85000f) returned 0x1e0507b9
[0246.799] DeleteDC (hdc=0x6301079b) returned 1
[0246.799] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0246.799] EndPaint (hWnd=0xa0122, lpPaint=0x53df7c) returned 1
[0246.799] MapWindowPoints (in: hWndFrom=0xa0122, hWndTo=0x0, lpPoints=0x2443aa0, cPoints=0x1 | out: lpPoints=0x2443aa0) returned 25756481
[0246.799] WindowFromPoint (Point=0x369) returned 0xa0122
[0246.799] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x84, wParam=0x0, lParam=0x1920369) returned 0x1
[0246.800] NotifyWinEvent (event=0x800a, hwnd=0xa0122, idObject=-4, idChild=0)
[0246.800] NotifyWinEvent (event=0x800c, hwnd=0xa0122, idObject=-4, idChild=0)
[0246.800] GetWindowTextLengthW (hWnd=0xa01e2) returned 0
[0246.800] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0246.800] GetSystemMetrics (nIndex=42) returned 0
[0246.800] GetWindowTextW (in: hWnd=0xa01e2, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0246.800] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0246.800] SendMessageW (hWnd=0x25013e, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0246.800] GetCapture () returned 0xa0122
[0246.800] ReleaseCapture () returned 1
[0246.800] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0246.800] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0246.801] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x84, wParam=0x0, lParam=0x1920369) returned 0x1
[0246.801] IsWindow (hWnd=0x70036) returned 1
[0246.801] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0246.801] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0246.801] IsWindow (hWnd=0x70036) returned 1
[0246.801] SetActiveWindow (hWnd=0x70036) returned 0x25013e
[0246.802] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0246.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0246.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0246.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0246.807] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0246.807] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0246.807] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0246.807] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x25013e) returned 0x1
[0246.810] GetFocus () returned 0xa0122
[0246.810] SetFocus (hWnd=0x202c6) returned 0xa0122
[0246.810] GetFocus () returned 0x202c6
[0246.810] IsChild (hWndParent=0x25013e, hWnd=0x202c6) returned 0
[0246.810] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0246.810] GetCapture () returned 0x0
[0246.810] InvalidateRect (hWnd=0xa0122, lpRect=0x0, bErase=0) returned 1
[0246.811] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0246.812] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0246.814] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0246.814] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0246.814] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0246.814] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0246.814] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0246.814] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0xa0122, lParam=0x0) returned 0x0
[0246.815] GetStockObject (i=5) returned 0x900015
[0246.815] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0246.815] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8dae08) returned 0x7
[0246.815] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0246.815] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0246.815] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0246.815] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0246.816] IsWindow (hWnd=0x202c6) returned 1
[0246.816] SetFocus (hWnd=0x202c6) returned 0x202c6
[0246.816] GetWindowLongW (hWnd=0x25013e, nIndex=-8) returned 458806
[0246.816] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0246.817] GetCurrentThreadId () returned 0x11d0
[0246.817] IsWindow (hWnd=0x70036) returned 1
[0246.817] IsWindow (hWnd=0x70036) returned 1
[0246.817] IsWindowVisible (hWnd=0x70036) returned 1
[0246.817] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0246.817] GetFocus () returned 0x202c6
[0246.817] IsChild (hWndParent=0x25013e, hWnd=0x202c6) returned 0
[0246.817] ShowWindow (hWnd=0x25013e, nCmdShow=0) returned 1
[0246.817] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0246.817] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0246.819] GetWindowPlacement (in: hWnd=0x25013e, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0246.819] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0246.819] GetClientRect (in: hWnd=0x25013e, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0246.819] GetWindowRect (in: hWnd=0x25013e, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0246.819] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0246.819] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0246.820] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0246.820] GetWindowLongW (hWnd=0x25013e, nIndex=-20) returned 327937
[0246.820] DestroyWindow (hWnd=0x25013e) returned 1
[0246.820] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0246.820] GetWindowTextLengthW (hWnd=0x25013e) returned 10
[0246.820] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0246.820] GetSystemMetrics (nIndex=42) returned 0
[0246.820] GetWindowTextW (in: hWnd=0x25013e, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0246.820] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0246.821] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0246.821] SendMessageW (hWnd=0xa01e2, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0246.821] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0246.821] SendMessageW (hWnd=0xa01e2, Msg=0xb0, wParam=0x242b6ac, lParam=0x53e518) returned 0x0
[0246.821] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xb0, wParam=0x242b6ac, lParam=0x53e518) returned 0x0
[0246.821] GetWindowTextLengthW (hWnd=0xa01e2) returned 0
[0246.821] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0246.821] GetSystemMetrics (nIndex=42) returned 0
[0246.821] GetWindowTextW (in: hWnd=0xa01e2, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0246.821] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0246.821] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0246.821] GetWindowThreadProcessId (in: hWnd=0xb00ea, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0246.821] GetWindow (hWnd=0xb00ea, uCmd=0x5) returned 0x0
[0246.821] GetWindowLongW (hWnd=0xb00ea, nIndex=-20) returned 65792
[0246.821] DestroyWindow (hWnd=0xb00ea) returned 1
[0246.821] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb00ea, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0246.821] GetWindowTextLengthW (hWnd=0xb00ea) returned 25
[0246.821] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0246.821] GetSystemMetrics (nIndex=42) returned 0
[0246.821] GetWindowTextW (in: hWnd=0xb00ea, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0246.821] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb00ea, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0246.821] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb00ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0246.822] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xb00ea, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0246.823] GetWindowTextLengthW (hWnd=0x7004e) returned 16
[0246.823] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0246.823] GetSystemMetrics (nIndex=42) returned 0
[0246.823] GetWindowTextW (in: hWnd=0x7004e, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0246.823] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0246.823] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0246.823] InvalidateRect (hWnd=0xa0122, lpRect=0x0, bErase=0) returned 1
[0246.823] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0246.823] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0246.823] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xa01e2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0246.824] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x7004e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0246.825] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xa0122, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0246.826] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x302ca, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0246.827] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x25013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0246.828] GetProcessWindowStation () returned 0x13c
[0246.828] GetActiveWindow () returned 0x70036
[0246.829] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0246.829] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0246.829] GetCurrentThreadId () returned 0x11d0
[0246.829] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf5206, lParam=0x0) returned 1
[0246.829] IsWindowVisible (hWnd=0x70036) returned 1
[0246.829] IsWindowEnabled (hWnd=0x70036) returned 1
[0246.829] IsWindowVisible (hWnd=0x602b6) returned 0
[0246.829] IsWindowVisible (hWnd=0x901f8) returned 0
[0246.830] IsWindowVisible (hWnd=0x202d0) returned 0
[0246.830] IsWindowVisible (hWnd=0x202d4) returned 0
[0246.830] GetActiveWindow () returned 0x70036
[0246.830] GetFocus () returned 0x202c6
[0246.830] IsWindow (hWnd=0x70036) returned 1
[0246.830] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0246.830] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0246.830] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0246.830] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0246.832] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0246.847] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x26013e) returned 0x1
[0246.860] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0246.860] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0246.863] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x402ca, lParam=0x0) returned 0x0
[0246.863] GetCapture () returned 0x0
[0246.863] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0246.864] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0246.870] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0246.870] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0246.873] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x10105d6
[0246.873] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0246.873] CreateCompatibleDC (hdc=0x10105d6) returned 0x7501079b
[0246.873] SelectObject (hdc=0x7501079b, h=0x1e0507b9) returned 0x85000f
[0246.873] GdipCreateFromHDC (hdc=0x7501079b, graphics=0x53e108) returned 0x0
[0246.873] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0246.873] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0246.874] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0246.874] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0246.874] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0246.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0246.874] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0246.874] LocalFree (hMem=0x89ec80) returned 0x0
[0246.874] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0246.874] GdipCreateRegion (region=0x53e150) returned 0x0
[0246.874] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0246.874] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0246.874] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0246.874] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbc90dbd) returned 0x0
[0246.874] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0246.874] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0246.874] GetCurrentObject (hdc=0x7501079b, type=0x1) returned 0xb00017
[0246.874] GetCurrentObject (hdc=0x7501079b, type=0x2) returned 0x900010
[0246.874] GetCurrentObject (hdc=0x7501079b, type=0x7) returned 0x1e0507b9
[0246.875] GetCurrentObject (hdc=0x7501079b, type=0x6) returned 0x8a01c2
[0246.875] SaveDC (hdc=0x7501079b) returned 1
[0246.875] GetNearestColor (hdc=0x7501079b, color=0xff) returned 0xff
[0246.875] GetNearestColor (hdc=0x7501079b, color=0x55) returned 0x55
[0246.875] GetNearestColor (hdc=0x7501079b, color=0x0) returned 0x0
[0246.875] GetNearestColor (hdc=0x7501079b, color=0x55) returned 0x55
[0246.875] GetNearestColor (hdc=0x7501079b, color=0x0) returned 0x0
[0246.875] GetNearestColor (hdc=0x7501079b, color=0x8080ff) returned 0x8080ff
[0246.875] GetNearestColor (hdc=0x7501079b, color=0x7373e5) returned 0x7373e5
[0246.875] GetNearestColor (hdc=0x7501079b, color=0xe5) returned 0xe5
[0246.875] GetNearestColor (hdc=0x7501079b, color=0x0) returned 0x0
[0246.875] RestoreDC (hdc=0x7501079b, nSavedDC=-1) returned 1
[0246.876] GdipReleaseDC (graphics=0x5d92c30, hdc=0x7501079b) returned 0x0
[0246.876] IsAppThemed () returned 0x1
[0246.876] GetThemeAppProperties () returned 0x3
[0246.876] GetThemeAppProperties () returned 0x3
[0246.876] IsAppThemed () returned 0x1
[0246.876] GetThemeAppProperties () returned 0x3
[0246.876] GetThemeAppProperties () returned 0x3
[0246.876] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0246.876] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2444d98 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0246.876] IsAppThemed () returned 0x1
[0246.877] GetThemeAppProperties () returned 0x3
[0246.877] GetThemeAppProperties () returned 0x3
[0246.877] IsAppThemed () returned 0x1
[0246.877] GetThemeAppProperties () returned 0x3
[0246.877] GetThemeAppProperties () returned 0x3
[0246.877] GetFocus () returned 0x402ca
[0246.877] IsAppThemed () returned 0x1
[0246.877] GetThemeAppProperties () returned 0x3
[0246.877] GetThemeAppProperties () returned 0x3
[0246.877] IsAppThemed () returned 0x1
[0246.877] GetThemeAppProperties () returned 0x3
[0246.877] GetThemeAppProperties () returned 0x3
[0246.877] IsThemePartDefined () returned 0x1
[0246.877] IsAppThemed () returned 0x1
[0246.877] GetThemeAppProperties () returned 0x3
[0246.877] GetThemeAppProperties () returned 0x3
[0246.877] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0246.877] IsAppThemed () returned 0x1
[0246.877] GetThemeAppProperties () returned 0x3
[0246.877] GetThemeAppProperties () returned 0x3
[0246.877] IsAppThemed () returned 0x1
[0246.878] GetThemeAppProperties () returned 0x3
[0246.878] GetThemeAppProperties () returned 0x3
[0246.878] IsThemePartDefined () returned 0x1
[0246.878] GdipCreateRegion (region=0x53de78) returned 0x0
[0246.878] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0246.878] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0246.878] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0246.878] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0246.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0246.878] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0246.878] LocalFree (hMem=0x89ee08) returned 0x0
[0246.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0246.878] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0246.878] LocalFree (hMem=0x89eac0) returned 0x0
[0246.878] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0246.878] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0246.878] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0246.878] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0246.878] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0246.879] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0246.879] GetCurrentObject (hdc=0x7501079b, type=0x1) returned 0xb00017
[0246.879] GetCurrentObject (hdc=0x7501079b, type=0x2) returned 0x900010
[0246.879] GetCurrentObject (hdc=0x7501079b, type=0x7) returned 0x1e0507b9
[0246.879] GetCurrentObject (hdc=0x7501079b, type=0x6) returned 0x8a01c2
[0246.879] SaveDC (hdc=0x7501079b) returned 1
[0246.879] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2504053e
[0246.879] GetClipRgn (hdc=0x7501079b, hrgn=0x2504053e) returned 0
[0246.879] SelectClipRgn (hdc=0x7501079b, hrgn=0xb404051e) returned 2
[0246.879] DeleteObject (ho=0x2504053e) returned 1
[0246.879] DeleteObject (ho=0xb404051e) returned 1
[0246.879] OffsetViewportOrgEx (in: hdc=0x7501079b, x=0, y=0, lppt=0x2445448 | out: lppt=0x2445448) returned 1
[0246.879] DrawThemeParentBackground () returned 0x0
[0246.880] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0246.880] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0246.880] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0246.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0246.880] GetSystemMetrics (nIndex=42) returned 0
[0246.880] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0246.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0246.880] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0246.880] GetCurrentObject (hdc=0x7501079b, type=0x1) returned 0xb00017
[0246.880] GetCurrentObject (hdc=0x7501079b, type=0x2) returned 0x900010
[0246.880] GetCurrentObject (hdc=0x7501079b, type=0x7) returned 0x1e0507b9
[0246.880] GetCurrentObject (hdc=0x7501079b, type=0x6) returned 0x8a01c2
[0246.880] SaveDC (hdc=0x7501079b) returned 2
[0246.880] GetNearestColor (hdc=0x7501079b, color=0xff) returned 0xff
[0246.880] CreateSolidBrush (color=0xff) returned 0x3310078d
[0246.881] FillRect (hDC=0x7501079b, lprc=0x53d8d8, hbr=0x3310078d) returned 1
[0246.881] DeleteObject (ho=0x3310078d) returned 1
[0246.881] RestoreDC (hdc=0x7501079b, nSavedDC=-1) returned 1
[0246.881] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0246.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0246.881] GetSystemMetrics (nIndex=42) returned 0
[0246.881] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0246.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0246.881] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0246.881] GetCurrentObject (hdc=0x7501079b, type=0x1) returned 0xb00017
[0246.882] GetCurrentObject (hdc=0x7501079b, type=0x2) returned 0x900010
[0246.882] GetCurrentObject (hdc=0x7501079b, type=0x7) returned 0x1e0507b9
[0246.882] GetCurrentObject (hdc=0x7501079b, type=0x6) returned 0x8a01c2
[0246.882] SaveDC (hdc=0x7501079b) returned 2
[0246.882] GetNearestColor (hdc=0x7501079b, color=0xff) returned 0xff
[0246.882] CreateSolidBrush (color=0xff) returned 0x3410078d
[0246.882] FillRect (hDC=0x7501079b, lprc=0x53d878, hbr=0x3410078d) returned 1
[0246.882] DeleteObject (ho=0x3410078d) returned 1
[0246.882] RestoreDC (hdc=0x7501079b, nSavedDC=-1) returned 1
[0246.882] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0246.882] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0246.882] GetSystemMetrics (nIndex=42) returned 0
[0246.882] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0246.883] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0246.884] RestoreDC (hdc=0x7501079b, nSavedDC=-1) returned 1
[0246.884] GdipReleaseDC (graphics=0x5d92c30, hdc=0x7501079b) returned 0x0
[0246.884] IsAppThemed () returned 0x1
[0246.884] GetThemeAppProperties () returned 0x3
[0246.884] GetThemeAppProperties () returned 0x3
[0246.884] IsAppThemed () returned 0x1
[0246.884] GetThemeAppProperties () returned 0x3
[0246.884] GetThemeAppProperties () returned 0x3
[0246.884] IsThemePartDefined () returned 0x1
[0246.884] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0246.884] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0246.884] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0246.884] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0246.884] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0246.884] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0246.885] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0246.885] LocalFree (hMem=0x89eac0) returned 0x0
[0246.885] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0246.885] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0246.885] LocalFree (hMem=0x89eac0) returned 0x0
[0246.885] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0246.885] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0246.885] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0246.885] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0246.885] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0246.885] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0246.885] GetCurrentObject (hdc=0x7501079b, type=0x1) returned 0xb00017
[0246.885] GetCurrentObject (hdc=0x7501079b, type=0x2) returned 0x900010
[0246.885] GetCurrentObject (hdc=0x7501079b, type=0x7) returned 0x1e0507b9
[0246.885] GetCurrentObject (hdc=0x7501079b, type=0x6) returned 0x8a01c2
[0246.885] SaveDC (hdc=0x7501079b) returned 1
[0246.886] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb504051e
[0246.886] GetClipRgn (hdc=0x7501079b, hrgn=0xb504051e) returned 0
[0246.886] SelectClipRgn (hdc=0x7501079b, hrgn=0x2704053e) returned 2
[0246.886] DeleteObject (ho=0xb504051e) returned 1
[0246.886] DeleteObject (ho=0x2704053e) returned 1
[0246.886] OffsetViewportOrgEx (in: hdc=0x7501079b, x=0, y=0, lppt=0x2445cac | out: lppt=0x2445cac) returned 1
[0246.886] IsAppThemed () returned 0x1
[0246.886] GetThemeAppProperties () returned 0x3
[0246.886] GetThemeAppProperties () returned 0x3
[0246.886] DrawThemeBackground () returned 0x0
[0246.886] RestoreDC (hdc=0x7501079b, nSavedDC=-1) returned 1
[0246.886] GdipReleaseDC (graphics=0x5d92c30, hdc=0x7501079b) returned 0x0
[0246.886] GdipCreateRegion (region=0x53de00) returned 0x0
[0246.886] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0246.886] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0246.887] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0246.887] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0246.887] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0246.887] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0246.887] LocalFree (hMem=0x89ec80) returned 0x0
[0246.887] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0246.887] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0246.887] LocalFree (hMem=0x89ec80) returned 0x0
[0246.887] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0246.887] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0246.887] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0246.887] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0246.887] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0246.887] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0246.887] GetCurrentObject (hdc=0x7501079b, type=0x1) returned 0xb00017
[0246.887] GetCurrentObject (hdc=0x7501079b, type=0x2) returned 0x900010
[0246.887] GetCurrentObject (hdc=0x7501079b, type=0x7) returned 0x1e0507b9
[0246.888] GetCurrentObject (hdc=0x7501079b, type=0x6) returned 0x8a01c2
[0246.888] SaveDC (hdc=0x7501079b) returned 1
[0246.888] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2804053e
[0246.888] GetClipRgn (hdc=0x7501079b, hrgn=0x2804053e) returned 0
[0246.888] SelectClipRgn (hdc=0x7501079b, hrgn=0xb604051e) returned 2
[0246.888] DeleteObject (ho=0x2804053e) returned 1
[0246.888] DeleteObject (ho=0xb604051e) returned 1
[0246.888] OffsetViewportOrgEx (in: hdc=0x7501079b, x=0, y=0, lppt=0x2445f80 | out: lppt=0x2445f80) returned 1
[0246.888] IsAppThemed () returned 0x1
[0246.888] GetThemeAppProperties () returned 0x3
[0246.888] GetThemeAppProperties () returned 0x3
[0246.888] GetThemeBackgroundContentRect () returned 0x0
[0246.888] RestoreDC (hdc=0x7501079b, nSavedDC=-1) returned 1
[0246.888] GdipReleaseDC (graphics=0x5d92c30, hdc=0x7501079b) returned 0x0
[0246.888] IsAppThemed () returned 0x1
[0246.889] GetThemeAppProperties () returned 0x3
[0246.889] GetThemeAppProperties () returned 0x3
[0246.889] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0246.889] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0246.889] GetCurrentObject (hdc=0x7501079b, type=0x1) returned 0xb00017
[0246.889] GetCurrentObject (hdc=0x7501079b, type=0x2) returned 0x900010
[0246.889] GetCurrentObject (hdc=0x7501079b, type=0x7) returned 0x1e0507b9
[0246.889] GetCurrentObject (hdc=0x7501079b, type=0x6) returned 0x8a01c2
[0246.889] SaveDC (hdc=0x7501079b) returned 1
[0246.889] GetTextAlign (hdc=0x7501079b) returned 0x0
[0246.889] GetTextColor (hdc=0x7501079b) returned 0x0
[0246.889] GetCurrentObject (hdc=0x7501079b, type=0x6) returned 0x8a01c2
[0246.889] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0246.889] SelectObject (hdc=0x7501079b, h=0x450a0799) returned 0x8a01c2
[0246.890] GetBkMode (hdc=0x7501079b) returned 2
[0246.890] SetBkMode (hdc=0x7501079b, mode=1) returned 2
[0246.890] DrawTextExW (in: hdc=0x7501079b, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2446320 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0246.890] DrawTextExW (in: hdc=0x7501079b, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2446320 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0246.890] RestoreDC (hdc=0x7501079b, nSavedDC=-1) returned 1
[0246.890] GdipReleaseDC (graphics=0x5d92c30, hdc=0x7501079b) returned 0x0
[0246.890] GetFocus () returned 0x402ca
[0246.891] IsAppThemed () returned 0x1
[0246.891] GetThemeAppProperties () returned 0x3
[0246.891] GetThemeAppProperties () returned 0x3
[0246.891] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0246.891] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x7501079b, x1=0, y1=0, rop=0xcc0020) returned 1
[0246.891] GdipReleaseDC (graphics=0x5d92c30, hdc=0x7501079b) returned 0x0
[0246.891] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0246.891] SelectObject (hdc=0x7501079b, h=0x85000f) returned 0x1e0507b9
[0246.891] DeleteDC (hdc=0x7501079b) returned 1
[0246.891] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0246.891] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0247.211] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0247.211] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0247.211] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x26013e) returned 0x1
[0247.215] GetFocus () returned 0x26013e
[0247.215] GetAncestor (hwnd=0x26013e, gaFlags=0x1) returned 0x10010
[0247.215] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0247.215] SetFocus (hWnd=0x202c6) returned 0x0
[0247.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0247.219] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0247.219] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0247.220] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0247.220] GetFocus () returned 0x70036
[0247.220] SetFocus (hWnd=0x202c6) returned 0x0
[0247.234] IsWindow (hWnd=0x70036) returned 1
[0247.234] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0247.235] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0247.235] IsWindow (hWnd=0x70036) returned 1
[0247.235] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0247.235] IsWindow (hWnd=0x202c6) returned 1
[0247.235] SetFocus (hWnd=0x202c6) returned 0x70036
[0247.236] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0247.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0247.238] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0247.240] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0247.240] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0247.240] GetStockObject (i=5) returned 0x900015
[0247.241] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0247.241] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8daf70) returned 0x7
[0247.241] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0247.241] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0247.241] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0247.241] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0247.242] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0247.243] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0247.243] GetFocus () returned 0x202c6
[0247.243] GetCapture () returned 0x0
[0247.243] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.243] IsWindowUnicode (hWnd=0x202c6) returned 1
[0247.243] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.243] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.244] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.244] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.244] IsWindowUnicode (hWnd=0x202c6) returned 1
[0247.244] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.245] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.245] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.245] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0247.245] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0247.245] CreateCompatibleDC (hdc=0x60100ce) returned 0xaa0107c0
[0247.245] SelectObject (hdc=0xaa0107c0, h=0x1e0507b9) returned 0x85000f
[0247.245] GdipCreateFromHDC (hdc=0xaa0107c0, graphics=0x53e958) returned 0x0
[0247.245] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0247.245] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0247.245] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0247.245] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.246] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0247.246] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0247.246] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0247.246] LocalFree (hMem=0x89ec80) returned 0x0
[0247.246] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.246] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0247.246] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.246] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0247.246] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0247.246] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbc70dbd) returned 0x0
[0247.246] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.246] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0247.246] GetCurrentObject (hdc=0xaa0107c0, type=0x1) returned 0xb00017
[0247.246] GetCurrentObject (hdc=0xaa0107c0, type=0x2) returned 0x900010
[0247.246] GetCurrentObject (hdc=0xaa0107c0, type=0x7) returned 0x1e0507b9
[0247.246] GetCurrentObject (hdc=0xaa0107c0, type=0x6) returned 0x8a01c2
[0247.247] SaveDC (hdc=0xaa0107c0) returned 1
[0247.247] GetNearestColor (hdc=0xaa0107c0, color=0xff) returned 0xff
[0247.247] GetNearestColor (hdc=0xaa0107c0, color=0x55) returned 0x55
[0247.247] GetNearestColor (hdc=0xaa0107c0, color=0x0) returned 0x0
[0247.247] GetNearestColor (hdc=0xaa0107c0, color=0x55) returned 0x55
[0247.247] GetNearestColor (hdc=0xaa0107c0, color=0x0) returned 0x0
[0247.247] GetNearestColor (hdc=0xaa0107c0, color=0x8080ff) returned 0x8080ff
[0247.247] GetNearestColor (hdc=0xaa0107c0, color=0x7373e5) returned 0x7373e5
[0247.247] GetNearestColor (hdc=0xaa0107c0, color=0xe5) returned 0xe5
[0247.247] GetNearestColor (hdc=0xaa0107c0, color=0x0) returned 0x0
[0247.247] RestoreDC (hdc=0xaa0107c0, nSavedDC=-1) returned 1
[0247.247] GdipReleaseDC (graphics=0x5d92c30, hdc=0xaa0107c0) returned 0x0
[0247.247] IsAppThemed () returned 0x1
[0247.248] GetThemeAppProperties () returned 0x3
[0247.248] GetThemeAppProperties () returned 0x3
[0247.248] IsAppThemed () returned 0x1
[0247.248] GetThemeAppProperties () returned 0x3
[0247.248] GetThemeAppProperties () returned 0x3
[0247.248] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2446b7c | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0247.248] IsAppThemed () returned 0x1
[0247.248] GetThemeAppProperties () returned 0x3
[0247.248] GetThemeAppProperties () returned 0x3
[0247.248] IsAppThemed () returned 0x1
[0247.248] GetThemeAppProperties () returned 0x3
[0247.249] GetThemeAppProperties () returned 0x3
[0247.249] GetFocus () returned 0x202c6
[0247.249] IsAppThemed () returned 0x1
[0247.249] GetThemeAppProperties () returned 0x3
[0247.249] GetThemeAppProperties () returned 0x3
[0247.249] IsAppThemed () returned 0x1
[0247.249] GetThemeAppProperties () returned 0x3
[0247.249] GetThemeAppProperties () returned 0x3
[0247.249] IsThemePartDefined () returned 0x1
[0247.249] IsAppThemed () returned 0x1
[0247.249] GetThemeAppProperties () returned 0x3
[0247.249] GetThemeAppProperties () returned 0x3
[0247.249] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0247.249] IsAppThemed () returned 0x1
[0247.249] GetThemeAppProperties () returned 0x3
[0247.249] GetThemeAppProperties () returned 0x3
[0247.249] IsAppThemed () returned 0x1
[0247.249] GetThemeAppProperties () returned 0x3
[0247.249] GetThemeAppProperties () returned 0x3
[0247.249] IsThemePartDefined () returned 0x1
[0247.249] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0247.249] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.250] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0247.250] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.250] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0247.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0247.250] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0247.250] LocalFree (hMem=0x89ee08) returned 0x0
[0247.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0247.250] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0247.250] LocalFree (hMem=0x89ea88) returned 0x0
[0247.250] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.250] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0247.250] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0247.250] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0247.250] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.250] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0247.250] GetCurrentObject (hdc=0xaa0107c0, type=0x1) returned 0xb00017
[0247.250] GetCurrentObject (hdc=0xaa0107c0, type=0x2) returned 0x900010
[0247.250] GetCurrentObject (hdc=0xaa0107c0, type=0x7) returned 0x1e0507b9
[0247.251] GetCurrentObject (hdc=0xaa0107c0, type=0x6) returned 0x8a01c2
[0247.251] SaveDC (hdc=0xaa0107c0) returned 1
[0247.251] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1e040798
[0247.251] GetClipRgn (hdc=0xaa0107c0, hrgn=0x1e040798) returned 0
[0247.251] SelectClipRgn (hdc=0xaa0107c0, hrgn=0xc404051e) returned 2
[0247.251] DeleteObject (ho=0x1e040798) returned 1
[0247.251] DeleteObject (ho=0xc404051e) returned 1
[0247.251] OffsetViewportOrgEx (in: hdc=0xaa0107c0, x=0, y=0, lppt=0x244722c | out: lppt=0x244722c) returned 1
[0247.251] DrawThemeParentBackground () returned 0x0
[0247.251] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0247.251] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0247.251] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0247.251] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0247.252] GetSystemMetrics (nIndex=42) returned 0
[0247.252] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0247.252] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0247.252] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0247.252] GetCurrentObject (hdc=0xaa0107c0, type=0x1) returned 0xb00017
[0247.252] GetCurrentObject (hdc=0xaa0107c0, type=0x2) returned 0x900010
[0247.252] GetCurrentObject (hdc=0xaa0107c0, type=0x7) returned 0x1e0507b9
[0247.252] GetCurrentObject (hdc=0xaa0107c0, type=0x6) returned 0x8a01c2
[0247.252] SaveDC (hdc=0xaa0107c0) returned 2
[0247.252] GetNearestColor (hdc=0xaa0107c0, color=0xff) returned 0xff
[0247.252] CreateSolidBrush (color=0xff) returned 0x3610078d
[0247.252] FillRect (hDC=0xaa0107c0, lprc=0x53e128, hbr=0x3610078d) returned 1
[0247.252] DeleteObject (ho=0x3610078d) returned 1
[0247.252] RestoreDC (hdc=0xaa0107c0, nSavedDC=-1) returned 1
[0247.253] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0247.253] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0247.253] GetSystemMetrics (nIndex=42) returned 0
[0247.253] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0247.253] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0247.253] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0247.253] GetCurrentObject (hdc=0xaa0107c0, type=0x1) returned 0xb00017
[0247.253] GetCurrentObject (hdc=0xaa0107c0, type=0x2) returned 0x900010
[0247.253] GetCurrentObject (hdc=0xaa0107c0, type=0x7) returned 0x1e0507b9
[0247.253] GetCurrentObject (hdc=0xaa0107c0, type=0x6) returned 0x8a01c2
[0247.253] SaveDC (hdc=0xaa0107c0) returned 2
[0247.253] GetNearestColor (hdc=0xaa0107c0, color=0xff) returned 0xff
[0247.253] CreateSolidBrush (color=0xff) returned 0x3710078d
[0247.253] FillRect (hDC=0xaa0107c0, lprc=0x53e0c8, hbr=0x3710078d) returned 1
[0247.253] DeleteObject (ho=0x3710078d) returned 1
[0247.253] RestoreDC (hdc=0xaa0107c0, nSavedDC=-1) returned 1
[0247.254] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0247.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0247.254] GetSystemMetrics (nIndex=42) returned 0
[0247.254] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0247.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0247.254] RestoreDC (hdc=0xaa0107c0, nSavedDC=-1) returned 1
[0247.254] GdipReleaseDC (graphics=0x5d92c30, hdc=0xaa0107c0) returned 0x0
[0247.254] IsAppThemed () returned 0x1
[0247.254] GetThemeAppProperties () returned 0x3
[0247.254] GetThemeAppProperties () returned 0x3
[0247.254] IsAppThemed () returned 0x1
[0247.254] GetThemeAppProperties () returned 0x3
[0247.254] GetThemeAppProperties () returned 0x3
[0247.254] IsThemePartDefined () returned 0x1
[0247.254] GdipCreateRegion (region=0x53e64c) returned 0x0
[0247.255] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.255] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0247.255] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.255] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0247.255] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0247.255] LocalFree (hMem=0x89ec80) returned 0x0
[0247.255] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0247.255] LocalFree (hMem=0x89ea88) returned 0x0
[0247.255] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.255] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0247.255] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0247.255] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0247.255] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.255] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0247.255] GetCurrentObject (hdc=0xaa0107c0, type=0x1) returned 0xb00017
[0247.255] GetCurrentObject (hdc=0xaa0107c0, type=0x2) returned 0x900010
[0247.255] GetCurrentObject (hdc=0xaa0107c0, type=0x7) returned 0x1e0507b9
[0247.272] GetCurrentObject (hdc=0xaa0107c0, type=0x6) returned 0x8a01c2
[0247.272] SaveDC (hdc=0xaa0107c0) returned 1
[0247.272] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc504051e
[0247.272] GetClipRgn (hdc=0xaa0107c0, hrgn=0xc504051e) returned 0
[0247.272] SelectClipRgn (hdc=0xaa0107c0, hrgn=0x20040798) returned 2
[0247.272] DeleteObject (ho=0xc504051e) returned 1
[0247.273] DeleteObject (ho=0x20040798) returned 1
[0247.273] OffsetViewportOrgEx (in: hdc=0xaa0107c0, x=0, y=0, lppt=0x2447a90 | out: lppt=0x2447a90) returned 1
[0247.273] IsAppThemed () returned 0x1
[0247.273] GetThemeAppProperties () returned 0x3
[0247.273] GetThemeAppProperties () returned 0x3
[0247.273] DrawThemeBackground () returned 0x0
[0247.273] RestoreDC (hdc=0xaa0107c0, nSavedDC=-1) returned 1
[0247.273] GdipReleaseDC (graphics=0x5d92c30, hdc=0xaa0107c0) returned 0x0
[0247.273] GdipCreateRegion (region=0x53e650) returned 0x0
[0247.273] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.273] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0247.273] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.273] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0247.273] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0247.273] LocalFree (hMem=0x89ee08) returned 0x0
[0247.274] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0247.274] LocalFree (hMem=0x89ea88) returned 0x0
[0247.274] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.274] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0247.274] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0247.274] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0247.274] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.274] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0247.274] GetCurrentObject (hdc=0xaa0107c0, type=0x1) returned 0xb00017
[0247.274] GetCurrentObject (hdc=0xaa0107c0, type=0x2) returned 0x900010
[0247.274] GetCurrentObject (hdc=0xaa0107c0, type=0x7) returned 0x1e0507b9
[0247.274] GetCurrentObject (hdc=0xaa0107c0, type=0x6) returned 0x8a01c2
[0247.274] SaveDC (hdc=0xaa0107c0) returned 1
[0247.274] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x21040798
[0247.274] GetClipRgn (hdc=0xaa0107c0, hrgn=0x21040798) returned 0
[0247.274] SelectClipRgn (hdc=0xaa0107c0, hrgn=0xc604051e) returned 2
[0247.274] DeleteObject (ho=0x21040798) returned 1
[0247.275] DeleteObject (ho=0xc604051e) returned 1
[0247.275] OffsetViewportOrgEx (in: hdc=0xaa0107c0, x=0, y=0, lppt=0x2447d64 | out: lppt=0x2447d64) returned 1
[0247.275] IsAppThemed () returned 0x1
[0247.275] GetThemeAppProperties () returned 0x3
[0247.275] GetThemeAppProperties () returned 0x3
[0247.275] GetThemeBackgroundContentRect () returned 0x0
[0247.275] RestoreDC (hdc=0xaa0107c0, nSavedDC=-1) returned 1
[0247.275] GdipReleaseDC (graphics=0x5d92c30, hdc=0xaa0107c0) returned 0x0
[0247.275] IsAppThemed () returned 0x1
[0247.275] GetThemeAppProperties () returned 0x3
[0247.275] GetThemeAppProperties () returned 0x3
[0247.275] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0247.275] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0247.275] GetCurrentObject (hdc=0xaa0107c0, type=0x1) returned 0xb00017
[0247.275] GetCurrentObject (hdc=0xaa0107c0, type=0x2) returned 0x900010
[0247.275] GetCurrentObject (hdc=0xaa0107c0, type=0x7) returned 0x1e0507b9
[0247.275] GetCurrentObject (hdc=0xaa0107c0, type=0x6) returned 0x8a01c2
[0247.275] SaveDC (hdc=0xaa0107c0) returned 1
[0247.276] GetTextAlign (hdc=0xaa0107c0) returned 0x0
[0247.276] GetTextColor (hdc=0xaa0107c0) returned 0x0
[0247.276] GetCurrentObject (hdc=0xaa0107c0, type=0x6) returned 0x8a01c2
[0247.276] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0247.276] SelectObject (hdc=0xaa0107c0, h=0x450a0799) returned 0x8a01c2
[0247.276] GetBkMode (hdc=0xaa0107c0) returned 2
[0247.276] SetBkMode (hdc=0xaa0107c0, mode=1) returned 2
[0247.276] DrawTextExW (in: hdc=0xaa0107c0, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2448104 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0247.276] DrawTextExW (in: hdc=0xaa0107c0, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2448104 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0247.277] RestoreDC (hdc=0xaa0107c0, nSavedDC=-1) returned 1
[0247.277] GdipReleaseDC (graphics=0x5d92c30, hdc=0xaa0107c0) returned 0x0
[0247.277] GetFocus () returned 0x202c6
[0247.277] IsAppThemed () returned 0x1
[0247.277] GetThemeAppProperties () returned 0x3
[0247.277] GetThemeAppProperties () returned 0x3
[0247.277] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0247.277] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xaa0107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0247.277] GdipReleaseDC (graphics=0x5d92c30, hdc=0xaa0107c0) returned 0x0
[0247.277] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0247.278] SelectObject (hdc=0xaa0107c0, h=0x85000f) returned 0x1e0507b9
[0247.278] DeleteDC (hdc=0xaa0107c0) returned 1
[0247.278] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0247.278] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0247.278] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.278] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a0024b) returned 0x1
[0247.278] IsWindowUnicode (hWnd=0x202c6) returned 1
[0247.278] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.278] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a0024b) returned 0x1
[0247.279] SetCursor (hCursor=0x10003) returned 0x10003
[0247.279] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.279] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.279] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0247.279] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0247.279] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0247.279] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0247.279] GetKeyState (nVirtKey=1) returned 1
[0247.279] GetKeyState (nVirtKey=2) returned 0
[0247.279] GetKeyState (nVirtKey=4) returned 0
[0247.279] GetKeyState (nVirtKey=5) returned 0
[0247.279] GetKeyState (nVirtKey=6) returned 0
[0247.279] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.280] IsWindowUnicode (hWnd=0x202c6) returned 1
[0247.280] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.280] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.280] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.280] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0247.280] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0247.280] CreateCompatibleDC (hdc=0x60100ce) returned 0xab0107c0
[0247.280] SelectObject (hdc=0xab0107c0, h=0x1e0507b9) returned 0x85000f
[0247.280] GdipCreateFromHDC (hdc=0xab0107c0, graphics=0x53e958) returned 0x0
[0247.280] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0247.280] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0247.281] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0247.281] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.281] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0247.281] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0247.281] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0247.281] LocalFree (hMem=0x89ea88) returned 0x0
[0247.281] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.281] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0247.281] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.281] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0247.281] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0247.281] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbc50dbd) returned 0x0
[0247.281] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.281] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0247.281] GetCurrentObject (hdc=0xab0107c0, type=0x1) returned 0xb00017
[0247.281] GetCurrentObject (hdc=0xab0107c0, type=0x2) returned 0x900010
[0247.281] GetCurrentObject (hdc=0xab0107c0, type=0x7) returned 0x1e0507b9
[0247.282] GetCurrentObject (hdc=0xab0107c0, type=0x6) returned 0x8a01c2
[0247.282] SaveDC (hdc=0xab0107c0) returned 1
[0247.282] GetNearestColor (hdc=0xab0107c0, color=0xff) returned 0xff
[0247.282] GetNearestColor (hdc=0xab0107c0, color=0x55) returned 0x55
[0247.282] GetNearestColor (hdc=0xab0107c0, color=0x0) returned 0x0
[0247.282] GetNearestColor (hdc=0xab0107c0, color=0x55) returned 0x55
[0247.282] GetNearestColor (hdc=0xab0107c0, color=0x0) returned 0x0
[0247.282] GetNearestColor (hdc=0xab0107c0, color=0x8080ff) returned 0x8080ff
[0247.282] GetNearestColor (hdc=0xab0107c0, color=0x7373e5) returned 0x7373e5
[0247.282] GetNearestColor (hdc=0xab0107c0, color=0xe5) returned 0xe5
[0247.282] GetNearestColor (hdc=0xab0107c0, color=0x0) returned 0x0
[0247.282] RestoreDC (hdc=0xab0107c0, nSavedDC=-1) returned 1
[0247.282] GdipReleaseDC (graphics=0x5d92c30, hdc=0xab0107c0) returned 0x0
[0247.282] IsAppThemed () returned 0x1
[0247.283] GetThemeAppProperties () returned 0x3
[0247.283] GetThemeAppProperties () returned 0x3
[0247.283] IsAppThemed () returned 0x1
[0247.283] GetThemeAppProperties () returned 0x3
[0247.283] GetThemeAppProperties () returned 0x3
[0247.283] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x244890c | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0247.283] IsAppThemed () returned 0x1
[0247.283] GetThemeAppProperties () returned 0x3
[0247.283] GetThemeAppProperties () returned 0x3
[0247.283] IsAppThemed () returned 0x1
[0247.283] GetThemeAppProperties () returned 0x3
[0247.283] GetThemeAppProperties () returned 0x3
[0247.283] IsAppThemed () returned 0x1
[0247.284] GetThemeAppProperties () returned 0x3
[0247.284] GetThemeAppProperties () returned 0x3
[0247.284] IsAppThemed () returned 0x1
[0247.284] GetThemeAppProperties () returned 0x3
[0247.284] GetThemeAppProperties () returned 0x3
[0247.284] IsThemePartDefined () returned 0x1
[0247.284] IsAppThemed () returned 0x1
[0247.284] GetThemeAppProperties () returned 0x3
[0247.284] GetThemeAppProperties () returned 0x3
[0247.284] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0247.284] IsAppThemed () returned 0x1
[0247.284] GetThemeAppProperties () returned 0x3
[0247.284] GetThemeAppProperties () returned 0x3
[0247.284] IsAppThemed () returned 0x1
[0247.284] GetThemeAppProperties () returned 0x3
[0247.284] GetThemeAppProperties () returned 0x3
[0247.284] IsThemePartDefined () returned 0x1
[0247.284] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0247.284] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.284] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0247.285] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.285] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0247.285] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0247.285] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0247.285] LocalFree (hMem=0x89ea88) returned 0x0
[0247.285] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0247.285] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0247.285] LocalFree (hMem=0x89ea88) returned 0x0
[0247.285] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.285] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0247.285] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0247.285] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0247.285] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.285] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0247.285] GetCurrentObject (hdc=0xab0107c0, type=0x1) returned 0xb00017
[0247.285] GetCurrentObject (hdc=0xab0107c0, type=0x2) returned 0x900010
[0247.285] GetCurrentObject (hdc=0xab0107c0, type=0x7) returned 0x1e0507b9
[0247.286] GetCurrentObject (hdc=0xab0107c0, type=0x6) returned 0x8a01c2
[0247.286] SaveDC (hdc=0xab0107c0) returned 1
[0247.286] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc704051e
[0247.286] GetClipRgn (hdc=0xab0107c0, hrgn=0xc704051e) returned 0
[0247.286] SelectClipRgn (hdc=0xab0107c0, hrgn=0x25040798) returned 2
[0247.286] DeleteObject (ho=0xc704051e) returned 1
[0247.286] DeleteObject (ho=0x25040798) returned 1
[0247.286] OffsetViewportOrgEx (in: hdc=0xab0107c0, x=0, y=0, lppt=0x2448fbc | out: lppt=0x2448fbc) returned 1
[0247.286] DrawThemeParentBackground () returned 0x0
[0247.286] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0247.286] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0247.286] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0247.286] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0247.286] GetSystemMetrics (nIndex=42) returned 0
[0247.287] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0247.287] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0247.292] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0247.292] GetCurrentObject (hdc=0xab0107c0, type=0x1) returned 0xb00017
[0247.292] GetCurrentObject (hdc=0xab0107c0, type=0x2) returned 0x900010
[0247.292] GetCurrentObject (hdc=0xab0107c0, type=0x7) returned 0x1e0507b9
[0247.292] GetCurrentObject (hdc=0xab0107c0, type=0x6) returned 0x8a01c2
[0247.292] SaveDC (hdc=0xab0107c0) returned 2
[0247.292] GetNearestColor (hdc=0xab0107c0, color=0xff) returned 0xff
[0247.292] CreateSolidBrush (color=0xff) returned 0x3810078d
[0247.292] FillRect (hDC=0xab0107c0, lprc=0x53e120, hbr=0x3810078d) returned 1
[0247.292] DeleteObject (ho=0x3810078d) returned 1
[0247.292] RestoreDC (hdc=0xab0107c0, nSavedDC=-1) returned 1
[0247.293] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0247.293] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0247.293] GetSystemMetrics (nIndex=42) returned 0
[0247.293] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0247.293] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0247.293] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0247.293] GetCurrentObject (hdc=0xab0107c0, type=0x1) returned 0xb00017
[0247.293] GetCurrentObject (hdc=0xab0107c0, type=0x2) returned 0x900010
[0247.293] GetCurrentObject (hdc=0xab0107c0, type=0x7) returned 0x1e0507b9
[0247.293] GetCurrentObject (hdc=0xab0107c0, type=0x6) returned 0x8a01c2
[0247.293] SaveDC (hdc=0xab0107c0) returned 2
[0247.293] GetNearestColor (hdc=0xab0107c0, color=0xff) returned 0xff
[0247.293] CreateSolidBrush (color=0xff) returned 0x3910078d
[0247.293] FillRect (hDC=0xab0107c0, lprc=0x53e0c0, hbr=0x3910078d) returned 1
[0247.293] DeleteObject (ho=0x3910078d) returned 1
[0247.294] RestoreDC (hdc=0xab0107c0, nSavedDC=-1) returned 1
[0247.294] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0247.294] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0247.294] GetSystemMetrics (nIndex=42) returned 0
[0247.294] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0247.294] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0247.294] RestoreDC (hdc=0xab0107c0, nSavedDC=-1) returned 1
[0247.294] GdipReleaseDC (graphics=0x5d92c30, hdc=0xab0107c0) returned 0x0
[0247.294] IsAppThemed () returned 0x1
[0247.294] GetThemeAppProperties () returned 0x3
[0247.294] GetThemeAppProperties () returned 0x3
[0247.294] IsAppThemed () returned 0x1
[0247.294] GetThemeAppProperties () returned 0x3
[0247.294] GetThemeAppProperties () returned 0x3
[0247.295] IsThemePartDefined () returned 0x1
[0247.295] GdipCreateRegion (region=0x53e640) returned 0x0
[0247.295] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.295] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0247.295] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.295] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0247.295] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0247.295] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0247.295] LocalFree (hMem=0x89ea88) returned 0x0
[0247.295] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0247.295] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0247.295] LocalFree (hMem=0x89ee08) returned 0x0
[0247.295] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.295] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0247.295] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0247.295] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0247.295] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.296] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0247.296] GetCurrentObject (hdc=0xab0107c0, type=0x1) returned 0xb00017
[0247.296] GetCurrentObject (hdc=0xab0107c0, type=0x2) returned 0x900010
[0247.296] GetCurrentObject (hdc=0xab0107c0, type=0x7) returned 0x1e0507b9
[0247.296] GetCurrentObject (hdc=0xab0107c0, type=0x6) returned 0x8a01c2
[0247.296] SaveDC (hdc=0xab0107c0) returned 1
[0247.296] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x26040798
[0247.296] GetClipRgn (hdc=0xab0107c0, hrgn=0x26040798) returned 0
[0247.296] SelectClipRgn (hdc=0xab0107c0, hrgn=0xc904051e) returned 2
[0247.296] DeleteObject (ho=0x26040798) returned 1
[0247.296] DeleteObject (ho=0xc904051e) returned 1
[0247.296] OffsetViewportOrgEx (in: hdc=0xab0107c0, x=0, y=0, lppt=0x2449820 | out: lppt=0x2449820) returned 1
[0247.296] IsAppThemed () returned 0x1
[0247.296] GetThemeAppProperties () returned 0x3
[0247.296] GetThemeAppProperties () returned 0x3
[0247.297] DrawThemeBackground () returned 0x0
[0247.297] RestoreDC (hdc=0xab0107c0, nSavedDC=-1) returned 1
[0247.297] GdipReleaseDC (graphics=0x5d92c30, hdc=0xab0107c0) returned 0x0
[0247.297] GdipCreateRegion (region=0x53e644) returned 0x0
[0247.297] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.297] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0247.297] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.297] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0247.297] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0247.297] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0247.297] LocalFree (hMem=0x89ea88) returned 0x0
[0247.297] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0247.297] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0247.297] LocalFree (hMem=0x89ec80) returned 0x0
[0247.297] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.297] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0247.298] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0247.298] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0247.298] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.298] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0247.298] GetCurrentObject (hdc=0xab0107c0, type=0x1) returned 0xb00017
[0247.298] GetCurrentObject (hdc=0xab0107c0, type=0x2) returned 0x900010
[0247.298] GetCurrentObject (hdc=0xab0107c0, type=0x7) returned 0x1e0507b9
[0247.298] GetCurrentObject (hdc=0xab0107c0, type=0x6) returned 0x8a01c2
[0247.298] SaveDC (hdc=0xab0107c0) returned 1
[0247.298] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xca04051e
[0247.298] GetClipRgn (hdc=0xab0107c0, hrgn=0xca04051e) returned 0
[0247.298] SelectClipRgn (hdc=0xab0107c0, hrgn=0x27040798) returned 2
[0247.298] DeleteObject (ho=0xca04051e) returned 1
[0247.298] DeleteObject (ho=0x27040798) returned 1
[0247.298] OffsetViewportOrgEx (in: hdc=0xab0107c0, x=0, y=0, lppt=0x2449af4 | out: lppt=0x2449af4) returned 1
[0247.299] IsAppThemed () returned 0x1
[0247.299] GetThemeAppProperties () returned 0x3
[0247.299] GetThemeAppProperties () returned 0x3
[0247.299] GetThemeBackgroundContentRect () returned 0x0
[0247.299] RestoreDC (hdc=0xab0107c0, nSavedDC=-1) returned 1
[0247.299] GdipReleaseDC (graphics=0x5d92c30, hdc=0xab0107c0) returned 0x0
[0247.299] IsAppThemed () returned 0x1
[0247.299] GetThemeAppProperties () returned 0x3
[0247.299] GetThemeAppProperties () returned 0x3
[0247.299] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0247.299] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0247.299] GetCurrentObject (hdc=0xab0107c0, type=0x1) returned 0xb00017
[0247.299] GetCurrentObject (hdc=0xab0107c0, type=0x2) returned 0x900010
[0247.299] GetCurrentObject (hdc=0xab0107c0, type=0x7) returned 0x1e0507b9
[0247.299] GetCurrentObject (hdc=0xab0107c0, type=0x6) returned 0x8a01c2
[0247.300] SaveDC (hdc=0xab0107c0) returned 1
[0247.300] GetTextAlign (hdc=0xab0107c0) returned 0x0
[0247.300] GetTextColor (hdc=0xab0107c0) returned 0x0
[0247.300] GetCurrentObject (hdc=0xab0107c0, type=0x6) returned 0x8a01c2
[0247.300] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0247.300] SelectObject (hdc=0xab0107c0, h=0x450a0799) returned 0x8a01c2
[0247.300] GetBkMode (hdc=0xab0107c0) returned 2
[0247.300] SetBkMode (hdc=0xab0107c0, mode=1) returned 2
[0247.300] DrawTextExW (in: hdc=0xab0107c0, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2449e94 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0247.301] DrawTextExW (in: hdc=0xab0107c0, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2449e94 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0247.301] RestoreDC (hdc=0xab0107c0, nSavedDC=-1) returned 1
[0247.301] GdipReleaseDC (graphics=0x5d92c30, hdc=0xab0107c0) returned 0x0
[0247.301] GetFocus () returned 0x202c6
[0247.301] IsAppThemed () returned 0x1
[0247.301] GetThemeAppProperties () returned 0x3
[0247.301] GetThemeAppProperties () returned 0x3
[0247.301] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0247.301] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xab0107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0247.301] GdipReleaseDC (graphics=0x5d92c30, hdc=0xab0107c0) returned 0x0
[0247.302] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0247.302] SelectObject (hdc=0xab0107c0, h=0x85000f) returned 0x1e0507b9
[0247.302] DeleteDC (hdc=0xab0107c0) returned 1
[0247.302] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0247.302] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0247.302] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.302] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.302] WaitMessage () returned 1
[0247.312] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.312] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.312] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.312] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.312] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.313] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.313] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.313] WaitMessage () returned 1
[0247.324] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.324] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.324] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.324] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.324] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.326] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.326] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.326] WaitMessage () returned 1
[0247.327] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.327] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.327] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.327] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.327] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.328] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.328] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.328] WaitMessage () returned 1
[0247.329] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.329] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.329] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.329] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.329] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.331] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.331] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.331] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.331] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.331] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.331] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.332] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.332] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.332] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.332] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.332] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.332] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.332] WaitMessage () returned 1
[0247.333] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.333] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.333] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.333] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.333] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.338] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.338] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.338] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.338] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.338] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.339] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.339] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.339] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.339] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.339] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.339] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.339] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.339] WaitMessage () returned 1
[0247.341] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.341] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.341] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.341] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.341] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.343] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.343] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.343] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.344] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.344] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.344] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.344] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.344] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.344] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.344] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.344] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.345] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.345] WaitMessage () returned 1
[0247.345] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.345] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.345] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.345] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.345] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.347] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.347] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.347] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.347] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.347] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.347] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.348] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.348] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.348] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.348] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.348] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.349] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.349] WaitMessage () returned 1
[0247.384] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.384] IsWindowUnicode (hWnd=0x202c6) returned 1
[0247.384] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.384] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.384] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.385] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.385] IsWindowUnicode (hWnd=0x202c6) returned 1
[0247.385] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.385] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.385] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.385] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x18005b) returned 0x0
[0247.385] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.385] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0247.385] WaitMessage () returned 1
[0247.499] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.499] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a0024b) returned 0x1
[0247.499] IsWindowUnicode (hWnd=0x202c6) returned 1
[0247.499] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.499] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a0024b) returned 0x1
[0247.499] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0247.499] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13301f5) returned 0x0
[0247.499] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0247.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0247.500] SetCursor (hCursor=0x10003) returned 0x10003
[0247.500] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.500] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.500] GetKeyState (nVirtKey=1) returned -128
[0247.500] GetKeyState (nVirtKey=2) returned 0
[0247.500] GetKeyState (nVirtKey=4) returned 0
[0247.500] GetKeyState (nVirtKey=5) returned 0
[0247.500] GetKeyState (nVirtKey=6) returned 0
[0247.500] IsWindowVisible (hWnd=0x202c6) returned 1
[0247.500] IsWindowEnabled (hWnd=0x202c6) returned 1
[0247.500] SetFocus (hWnd=0x202c6) returned 0x202c6
[0247.500] GetFocus () returned 0x202c6
[0247.500] GetFocus () returned 0x202c6
[0247.500] GetFocus () returned 0x202c6
[0247.501] GetKeyState (nVirtKey=1) returned -128
[0247.501] GetKeyState (nVirtKey=2) returned 0
[0247.501] GetKeyState (nVirtKey=4) returned 0
[0247.501] GetKeyState (nVirtKey=5) returned 0
[0247.501] GetKeyState (nVirtKey=6) returned 0
[0247.501] GetCapture () returned 0x0
[0247.501] SetCapture (hWnd=0x202c6) returned 0x0
[0247.501] GetKeyState (nVirtKey=1) returned -128
[0247.501] GetKeyState (nVirtKey=2) returned 0
[0247.501] GetKeyState (nVirtKey=4) returned 0
[0247.501] GetKeyState (nVirtKey=5) returned 0
[0247.501] GetKeyState (nVirtKey=6) returned 0
[0247.501] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0247.501] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0247.501] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.501] IsWindowUnicode (hWnd=0x202c6) returned 1
[0247.501] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0247.501] TranslateMessage (lpMsg=0x53eef8) returned 0
[0247.501] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0247.501] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x244a114, cPoints=0x1 | out: lpPoints=0x244a114) returned 25690608
[0247.501] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0247.502] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0247.502] UpdateWindow (hWnd=0x202c6) returned 1
[0247.502] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x60100ce
[0247.502] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0247.502] CreateCompatibleDC (hdc=0x60100ce) returned 0x8f0107aa
[0247.502] SelectObject (hdc=0x8f0107aa, h=0x1e0507b9) returned 0x85000f
[0247.502] GdipCreateFromHDC (hdc=0x8f0107aa, graphics=0x53e5f0) returned 0x0
[0247.502] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0247.502] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0247.502] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0247.503] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.503] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0247.503] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0247.503] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0247.503] LocalFree (hMem=0x89ee40) returned 0x0
[0247.503] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.503] GdipCreateRegion (region=0x53e638) returned 0x0
[0247.503] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.503] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0247.503] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0247.503] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbc30dbd) returned 0x0
[0247.503] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.503] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0247.503] GetCurrentObject (hdc=0x8f0107aa, type=0x1) returned 0xb00017
[0247.503] GetCurrentObject (hdc=0x8f0107aa, type=0x2) returned 0x900010
[0247.503] GetCurrentObject (hdc=0x8f0107aa, type=0x7) returned 0x1e0507b9
[0247.504] GetCurrentObject (hdc=0x8f0107aa, type=0x6) returned 0x8a01c2
[0247.504] SaveDC (hdc=0x8f0107aa) returned 1
[0247.504] GetNearestColor (hdc=0x8f0107aa, color=0xff) returned 0xff
[0247.504] GetNearestColor (hdc=0x8f0107aa, color=0x55) returned 0x55
[0247.504] GetNearestColor (hdc=0x8f0107aa, color=0x0) returned 0x0
[0247.504] GetNearestColor (hdc=0x8f0107aa, color=0x55) returned 0x55
[0247.504] GetNearestColor (hdc=0x8f0107aa, color=0x0) returned 0x0
[0247.504] GetNearestColor (hdc=0x8f0107aa, color=0x8080ff) returned 0x8080ff
[0247.504] GetNearestColor (hdc=0x8f0107aa, color=0x7373e5) returned 0x7373e5
[0247.504] GetNearestColor (hdc=0x8f0107aa, color=0xe5) returned 0xe5
[0247.504] GetNearestColor (hdc=0x8f0107aa, color=0x0) returned 0x0
[0247.504] RestoreDC (hdc=0x8f0107aa, nSavedDC=-1) returned 1
[0247.504] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107aa) returned 0x0
[0247.505] IsAppThemed () returned 0x1
[0247.505] GetThemeAppProperties () returned 0x3
[0247.505] GetThemeAppProperties () returned 0x3
[0247.505] IsAppThemed () returned 0x1
[0247.505] GetThemeAppProperties () returned 0x3
[0247.505] GetThemeAppProperties () returned 0x3
[0247.505] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x244a830 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0247.505] IsAppThemed () returned 0x1
[0247.505] GetThemeAppProperties () returned 0x3
[0247.505] GetThemeAppProperties () returned 0x3
[0247.505] IsAppThemed () returned 0x1
[0247.505] GetThemeAppProperties () returned 0x3
[0247.505] GetThemeAppProperties () returned 0x3
[0247.506] IsAppThemed () returned 0x1
[0247.506] GetThemeAppProperties () returned 0x3
[0247.506] GetThemeAppProperties () returned 0x3
[0247.506] IsAppThemed () returned 0x1
[0247.506] GetThemeAppProperties () returned 0x3
[0247.506] GetThemeAppProperties () returned 0x3
[0247.506] IsThemePartDefined () returned 0x1
[0247.506] IsAppThemed () returned 0x1
[0247.506] GetThemeAppProperties () returned 0x3
[0247.506] GetThemeAppProperties () returned 0x3
[0247.506] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0247.506] IsAppThemed () returned 0x1
[0247.506] GetThemeAppProperties () returned 0x3
[0247.506] GetThemeAppProperties () returned 0x3
[0247.506] IsAppThemed () returned 0x1
[0247.506] GetThemeAppProperties () returned 0x3
[0247.506] GetThemeAppProperties () returned 0x3
[0247.506] IsThemePartDefined () returned 0x1
[0247.507] GdipCreateRegion (region=0x53e354) returned 0x0
[0247.507] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.507] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0247.507] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.507] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0247.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0247.507] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0247.507] LocalFree (hMem=0x89ec80) returned 0x0
[0247.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0247.507] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0247.507] LocalFree (hMem=0x89ea88) returned 0x0
[0247.507] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.507] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0247.507] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0247.507] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0247.507] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.507] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0247.508] GetCurrentObject (hdc=0x8f0107aa, type=0x1) returned 0xb00017
[0247.508] GetCurrentObject (hdc=0x8f0107aa, type=0x2) returned 0x900010
[0247.508] GetCurrentObject (hdc=0x8f0107aa, type=0x7) returned 0x1e0507b9
[0247.508] GetCurrentObject (hdc=0x8f0107aa, type=0x6) returned 0x8a01c2
[0247.508] SaveDC (hdc=0x8f0107aa) returned 1
[0247.508] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x28040798
[0247.508] GetClipRgn (hdc=0x8f0107aa, hrgn=0x28040798) returned 0
[0247.508] SelectClipRgn (hdc=0x8f0107aa, hrgn=0xce04051e) returned 2
[0247.508] DeleteObject (ho=0x28040798) returned 1
[0247.508] DeleteObject (ho=0xce04051e) returned 1
[0247.508] OffsetViewportOrgEx (in: hdc=0x8f0107aa, x=0, y=0, lppt=0x244aee0 | out: lppt=0x244aee0) returned 1
[0247.508] DrawThemeParentBackground () returned 0x0
[0247.509] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0247.509] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0247.509] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0247.509] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0247.509] GetSystemMetrics (nIndex=42) returned 0
[0247.509] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0247.509] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0247.509] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0247.509] GetCurrentObject (hdc=0x8f0107aa, type=0x1) returned 0xb00017
[0247.509] GetCurrentObject (hdc=0x8f0107aa, type=0x2) returned 0x900010
[0247.509] GetCurrentObject (hdc=0x8f0107aa, type=0x7) returned 0x1e0507b9
[0247.509] GetCurrentObject (hdc=0x8f0107aa, type=0x6) returned 0x8a01c2
[0247.509] SaveDC (hdc=0x8f0107aa) returned 2
[0247.510] GetNearestColor (hdc=0x8f0107aa, color=0xff) returned 0xff
[0247.510] CreateSolidBrush (color=0xff) returned 0x3a10078d
[0247.510] FillRect (hDC=0x8f0107aa, lprc=0x53ddb8, hbr=0x3a10078d) returned 1
[0247.510] DeleteObject (ho=0x3a10078d) returned 1
[0247.510] RestoreDC (hdc=0x8f0107aa, nSavedDC=-1) returned 1
[0247.510] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0247.510] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0247.510] GetSystemMetrics (nIndex=42) returned 0
[0247.510] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0247.510] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0247.511] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0247.511] GetCurrentObject (hdc=0x8f0107aa, type=0x1) returned 0xb00017
[0247.511] GetCurrentObject (hdc=0x8f0107aa, type=0x2) returned 0x900010
[0247.511] GetCurrentObject (hdc=0x8f0107aa, type=0x7) returned 0x1e0507b9
[0247.511] GetCurrentObject (hdc=0x8f0107aa, type=0x6) returned 0x8a01c2
[0247.511] SaveDC (hdc=0x8f0107aa) returned 2
[0247.511] GetNearestColor (hdc=0x8f0107aa, color=0xff) returned 0xff
[0247.511] CreateSolidBrush (color=0xff) returned 0x3b10078d
[0247.511] FillRect (hDC=0x8f0107aa, lprc=0x53dd58, hbr=0x3b10078d) returned 1
[0247.511] DeleteObject (ho=0x3b10078d) returned 1
[0247.511] RestoreDC (hdc=0x8f0107aa, nSavedDC=-1) returned 1
[0247.511] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0247.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0247.511] GetSystemMetrics (nIndex=42) returned 0
[0247.511] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0247.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0247.512] RestoreDC (hdc=0x8f0107aa, nSavedDC=-1) returned 1
[0247.512] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107aa) returned 0x0
[0247.512] IsAppThemed () returned 0x1
[0247.512] GetThemeAppProperties () returned 0x3
[0247.512] GetThemeAppProperties () returned 0x3
[0247.512] IsAppThemed () returned 0x1
[0247.512] GetThemeAppProperties () returned 0x3
[0247.512] GetThemeAppProperties () returned 0x3
[0247.512] IsThemePartDefined () returned 0x1
[0247.512] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0247.512] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.512] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0247.512] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.512] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0247.512] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0247.513] LocalFree (hMem=0x89ee08) returned 0x0
[0247.513] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0247.513] LocalFree (hMem=0x89ea88) returned 0x0
[0247.513] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.513] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0247.513] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0247.513] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0247.513] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.513] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0247.513] GetCurrentObject (hdc=0x8f0107aa, type=0x1) returned 0xb00017
[0247.513] GetCurrentObject (hdc=0x8f0107aa, type=0x2) returned 0x900010
[0247.513] GetCurrentObject (hdc=0x8f0107aa, type=0x7) returned 0x1e0507b9
[0247.513] GetCurrentObject (hdc=0x8f0107aa, type=0x6) returned 0x8a01c2
[0247.513] SaveDC (hdc=0x8f0107aa) returned 1
[0247.513] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcf04051e
[0247.513] GetClipRgn (hdc=0x8f0107aa, hrgn=0xcf04051e) returned 0
[0247.513] SelectClipRgn (hdc=0x8f0107aa, hrgn=0x2a040798) returned 2
[0247.513] DeleteObject (ho=0xcf04051e) returned 1
[0247.514] DeleteObject (ho=0x2a040798) returned 1
[0247.514] OffsetViewportOrgEx (in: hdc=0x8f0107aa, x=0, y=0, lppt=0x244b744 | out: lppt=0x244b744) returned 1
[0247.514] IsAppThemed () returned 0x1
[0247.514] GetThemeAppProperties () returned 0x3
[0247.514] GetThemeAppProperties () returned 0x3
[0247.514] DrawThemeBackground () returned 0x0
[0247.514] RestoreDC (hdc=0x8f0107aa, nSavedDC=-1) returned 1
[0247.514] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107aa) returned 0x0
[0247.514] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0247.514] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.514] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0247.514] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.514] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0247.514] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0247.514] LocalFree (hMem=0x89ec80) returned 0x0
[0247.514] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0247.514] LocalFree (hMem=0x89ea88) returned 0x0
[0247.515] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.515] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0247.515] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0247.515] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0247.515] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.515] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0247.515] GetCurrentObject (hdc=0x8f0107aa, type=0x1) returned 0xb00017
[0247.515] GetCurrentObject (hdc=0x8f0107aa, type=0x2) returned 0x900010
[0247.515] GetCurrentObject (hdc=0x8f0107aa, type=0x7) returned 0x1e0507b9
[0247.515] GetCurrentObject (hdc=0x8f0107aa, type=0x6) returned 0x8a01c2
[0247.515] SaveDC (hdc=0x8f0107aa) returned 1
[0247.515] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2b040798
[0247.515] GetClipRgn (hdc=0x8f0107aa, hrgn=0x2b040798) returned 0
[0247.515] SelectClipRgn (hdc=0x8f0107aa, hrgn=0xd004051e) returned 2
[0247.515] DeleteObject (ho=0x2b040798) returned 1
[0247.515] DeleteObject (ho=0xd004051e) returned 1
[0247.515] OffsetViewportOrgEx (in: hdc=0x8f0107aa, x=0, y=0, lppt=0x244ba18 | out: lppt=0x244ba18) returned 1
[0247.515] IsAppThemed () returned 0x1
[0247.516] GetThemeAppProperties () returned 0x3
[0247.516] GetThemeAppProperties () returned 0x3
[0247.516] GetThemeBackgroundContentRect () returned 0x0
[0247.516] RestoreDC (hdc=0x8f0107aa, nSavedDC=-1) returned 1
[0247.516] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107aa) returned 0x0
[0247.516] IsAppThemed () returned 0x1
[0247.516] GetThemeAppProperties () returned 0x3
[0247.516] GetThemeAppProperties () returned 0x3
[0247.516] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0247.516] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0247.516] GetCurrentObject (hdc=0x8f0107aa, type=0x1) returned 0xb00017
[0247.516] GetCurrentObject (hdc=0x8f0107aa, type=0x2) returned 0x900010
[0247.516] GetCurrentObject (hdc=0x8f0107aa, type=0x7) returned 0x1e0507b9
[0247.516] GetCurrentObject (hdc=0x8f0107aa, type=0x6) returned 0x8a01c2
[0247.516] SaveDC (hdc=0x8f0107aa) returned 1
[0247.516] GetTextAlign (hdc=0x8f0107aa) returned 0x0
[0247.516] GetTextColor (hdc=0x8f0107aa) returned 0x0
[0247.516] GetCurrentObject (hdc=0x8f0107aa, type=0x6) returned 0x8a01c2
[0247.517] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0247.517] SelectObject (hdc=0x8f0107aa, h=0x450a0799) returned 0x8a01c2
[0247.517] GetBkMode (hdc=0x8f0107aa) returned 2
[0247.517] SetBkMode (hdc=0x8f0107aa, mode=1) returned 2
[0247.517] DrawTextExW (in: hdc=0x8f0107aa, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x244bdb8 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0247.517] DrawTextExW (in: hdc=0x8f0107aa, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x244bdb8 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0247.517] RestoreDC (hdc=0x8f0107aa, nSavedDC=-1) returned 1
[0247.518] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107aa) returned 0x0
[0247.518] GetFocus () returned 0x202c6
[0247.518] IsAppThemed () returned 0x1
[0247.518] GetThemeAppProperties () returned 0x3
[0247.518] GetThemeAppProperties () returned 0x3
[0247.518] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0247.518] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x8f0107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0247.518] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107aa) returned 0x0
[0247.518] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0247.518] SelectObject (hdc=0x8f0107aa, h=0x85000f) returned 0x1e0507b9
[0247.518] DeleteDC (hdc=0x8f0107aa) returned 1
[0247.519] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0247.519] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0247.519] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x244beb4, cPoints=0x1 | out: lpPoints=0x244beb4) returned 25690608
[0247.519] WindowFromPoint (Point=0x24b) returned 0x202c6
[0247.519] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a0024b) returned 0x1
[0247.519] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0247.519] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0247.520] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.520] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0247.521] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.522] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0247.522] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.523] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0247.523] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0247.523] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e888) returned 0x0
[0247.523] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0247.523] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0247.523] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0247.523] GetSystemMetrics (nIndex=5) returned 1
[0247.523] GetSystemMetrics (nIndex=6) returned 1
[0247.524] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.524] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0247.524] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.524] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0247.588] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.588] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0247.588] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.588] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0247.589] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.589] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0247.589] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.589] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0247.589] GetSystemMetrics (nIndex=5) returned 1
[0247.589] GetSystemMetrics (nIndex=6) returned 1
[0247.589] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.590] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0247.590] GetSystemMetrics (nIndex=5) returned 1
[0247.590] GetSystemMetrics (nIndex=6) returned 1
[0247.590] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.590] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0247.590] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.590] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0247.591] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.591] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0247.591] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.591] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0247.591] GetSystemMetrics (nIndex=59) returned 1460
[0247.591] GetSystemMetrics (nIndex=60) returned 920
[0247.591] GetSystemMetrics (nIndex=34) returned 136
[0247.591] GetSystemMetrics (nIndex=35) returned 39
[0247.592] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.592] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0247.592] GetCurrentThreadId () returned 0x11d0
[0247.592] GetCurrentThreadId () returned 0x11d0
[0247.592] GetCurrentThreadId () returned 0x11d0
[0247.592] GetCurrentThreadId () returned 0x11d0
[0247.592] GetCurrentThreadId () returned 0x11d0
[0247.592] GetCurrentThreadId () returned 0x11d0
[0247.592] GetCurrentThreadId () returned 0x11d0
[0247.592] GetCurrentThreadId () returned 0x11d0
[0247.592] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.592] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0247.593] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0247.593] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0247.593] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.593] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0247.593] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.594] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0247.594] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x27013e
[0247.594] SetWindowLongW (hWnd=0x27013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0247.594] GetWindowLongW (hWnd=0x27013e, nIndex=-4) returned 1950089536
[0247.595] SetWindowLongW (hWnd=0x27013e, nIndex=-4, dwNewLong=79647118) returned 1950089536
[0247.605] GetWindowLongW (hWnd=0x27013e, nIndex=-4) returned 79647118
[0247.605] GetWindowLongW (hWnd=0x27013e, nIndex=-16) returned 113311744
[0247.605] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x27013e, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0247.606] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x27013e, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0247.607] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x27013e, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0247.608] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x27013e, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0247.608] GetClientRect (in: hWnd=0x27013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0247.608] GetWindowRect (in: hWnd=0x27013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0247.608] SetWindowTextW (hWnd=0x27013e, lpString="WindowsFormsParkingWindow") returned 1
[0247.608] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x27013e, Msg=0xc, wParam=0x0, lParam=0x2443e90) returned 0x1
[0247.609] GetParent (hWnd=0x27013e) returned 0x0
[0247.610] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0247.610] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x27013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xc0122
[0247.611] SetWindowLongW (hWnd=0xc0122, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0247.611] GetWindowLongW (hWnd=0xc0122, nIndex=-4) returned 1868147648
[0247.611] SetWindowLongW (hWnd=0xc0122, nIndex=-4, dwNewLong=79647358) returned 1868147648
[0247.611] GetWindowLongW (hWnd=0xc0122, nIndex=-4) returned 79647358
[0247.611] GetWindowLongW (hWnd=0xc0122, nIndex=-16) returned 1174405133
[0247.611] GetWindowLongW (hWnd=0xc0122, nIndex=-12) returned 0
[0247.611] SetWindowLongW (hWnd=0xc0122, nIndex=-12, dwNewLong=786722) returned 0
[0247.612] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0247.613] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0247.613] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0247.614] GetClientRect (in: hWnd=0xc0122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0247.614] GetWindowRect (in: hWnd=0xc0122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0247.614] GetParent (hWnd=0xc0122) returned 0x27013e
[0247.614] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x27013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0247.614] SetWindowTextW (hWnd=0xc0122, lpString="Enter password: ") returned 1
[0247.614] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0247.615] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0247.615] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0247.615] GetClientRect (in: hWnd=0xc0122, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0247.615] GetWindowRect (in: hWnd=0xc0122, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0247.615] GetParent (hWnd=0xc0122) returned 0x27013e
[0247.615] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x27013e, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0247.615] SendMessageW (hWnd=0xc0122, Msg=0x2210, wParam=0x1220001, lParam=0xc0122) returned 0x0
[0247.615] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x2210, wParam=0x1220001, lParam=0xc0122) returned 0x0
[0247.616] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0247.616] GetParent (hWnd=0xc0122) returned 0x27013e
[0247.616] GdipCreateFromHWND (hwnd=0xc0122, graphics=0x53e994) returned 0x0
[0247.616] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0247.617] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0247.617] GetProcessWindowStation () returned 0x13c
[0247.617] GetCapture () returned 0x202c6
[0247.617] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0247.617] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0247.617] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0247.617] ReleaseCapture () returned 1
[0247.617] GetActiveWindow () returned 0x70036
[0247.617] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0247.618] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.619] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0247.619] GetCursorPos (in: lpPoint=0x2458c64 | out: lpPoint=0x2458c64*(x=587, y=416)) returned 1
[0247.620] MonitorFromPoint (pt=0x24b, dwFlags=0x1a0) returned 0x10001
[0247.620] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0247.620] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x920107aa
[0247.620] GetDeviceCaps (hdc=0x920107aa, index=12) returned 32
[0247.620] GetDeviceCaps (hdc=0x920107aa, index=14) returned 1
[0247.620] DeleteDC (hdc=0x920107aa) returned 1
[0247.620] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0247.621] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0247.621] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x502ca
[0247.621] SetWindowLongW (hWnd=0x502ca, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0247.621] GetWindowLongW (hWnd=0x502ca, nIndex=-4) returned 1950089536
[0247.622] SetWindowLongW (hWnd=0x502ca, nIndex=-4, dwNewLong=79647438) returned 1950089536
[0247.622] GetWindowLongW (hWnd=0x502ca, nIndex=-4) returned 79647438
[0247.622] GetWindowLongW (hWnd=0x502ca, nIndex=-16) returned 113770496
[0247.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0247.623] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0247.624] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0247.624] GetClientRect (in: hWnd=0x502ca, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0247.624] GetWindowRect (in: hWnd=0x502ca, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0247.625] SetWindowTextW (hWnd=0x502ca, lpString="Ransomware") returned 1
[0247.625] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xc, wParam=0x0, lParam=0x244bf7c) returned 0x1
[0247.626] GetStartupInfoW (in: lpStartupInfo=0x2458fa0 | out: lpStartupInfo=0x2458fa0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0247.629] GetParent (hWnd=0x502ca) returned 0x0
[0247.629] SetWindowLongW (hWnd=0x502ca, nIndex=-8, dwNewLong=0) returned 0
[0247.630] SendMessageW (hWnd=0x502ca, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0247.630] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0247.631] SendMessageW (hWnd=0x502ca, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0247.631] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0247.631] GetSystemMenu (hWnd=0x502ca, bRevert=0) returned 0xe0111
[0247.632] GetWindowPlacement (in: hWnd=0x502ca, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0247.632] EnableMenuItem (hMenu=0xe0111, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0247.632] EnableMenuItem (hMenu=0xe0111, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0247.632] EnableMenuItem (hMenu=0xe0111, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0247.633] EnableMenuItem (hMenu=0xe0111, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0247.633] EnableMenuItem (hMenu=0xe0111, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0247.633] GetClientRect (in: hWnd=0x502ca, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0247.633] GetClientRect (in: hWnd=0x502ca, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0247.633] GetWindowRect (in: hWnd=0x502ca, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0247.633] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.633] GetWindowLongW (hWnd=0x502ca, nIndex=-16) returned 113770496
[0247.633] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.634] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.634] GetSystemMetrics (nIndex=42) returned 0
[0247.634] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.634] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0247.634] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.634] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.634] GetSystemMetrics (nIndex=42) returned 0
[0247.634] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.634] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0247.634] GetCursorPos (in: lpPoint=0x2459114 | out: lpPoint=0x2459114*(x=587, y=416)) returned 1
[0247.634] MonitorFromPoint (pt=0x24e, dwFlags=0x1a3) returned 0x10001
[0247.634] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0247.634] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x960107aa
[0247.635] GetDeviceCaps (hdc=0x960107aa, index=12) returned 32
[0247.635] GetDeviceCaps (hdc=0x960107aa, index=14) returned 1
[0247.635] DeleteDC (hdc=0x960107aa) returned 1
[0247.635] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0247.635] GetWindowLongW (hWnd=0x502ca, nIndex=-16) returned 113770496
[0247.635] GetWindowLongW (hWnd=0x502ca, nIndex=-20) returned 327937
[0247.635] SetWindowLongW (hWnd=0x502ca, nIndex=-16, dwNewLong=46661632) returned 113770496
[0247.635] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0247.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0247.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0247.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0247.637] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0247.637] SetWindowLongW (hWnd=0x502ca, nIndex=-20, dwNewLong=327681) returned 327937
[0247.637] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0247.637] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0247.638] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0247.638] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0247.638] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0247.639] SetWindowPos (hWnd=0x502ca, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0247.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0247.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0247.640] GetWindowPlacement (in: hWnd=0x502ca, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0247.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0247.640] GetClientRect (in: hWnd=0x502ca, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0247.640] GetWindowRect (in: hWnd=0x502ca, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0247.641] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0247.641] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0247.641] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0247.642] RedrawWindow (hWnd=0x502ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0247.642] GetSystemMenu (hWnd=0x502ca, bRevert=0) returned 0xe0111
[0247.642] GetWindowPlacement (in: hWnd=0x502ca, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0247.642] EnableMenuItem (hMenu=0xe0111, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0247.642] EnableMenuItem (hMenu=0xe0111, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0247.642] EnableMenuItem (hMenu=0xe0111, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0247.642] EnableMenuItem (hMenu=0xe0111, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0247.642] EnableMenuItem (hMenu=0xe0111, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0247.642] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0247.642] GetWindowLongW (hWnd=0x502ca, nIndex=-8) returned 0
[0247.642] SetWindowLongW (hWnd=0x502ca, nIndex=-8, dwNewLong=458806) returned 0
[0247.644] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0247.644] GetProcessWindowStation () returned 0x13c
[0247.644] GetCurrentThreadId () returned 0x11d0
[0247.645] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf52f6, lParam=0x0) returned 1
[0247.645] IsWindowVisible (hWnd=0x502ca) returned 0
[0247.645] IsWindowVisible (hWnd=0x70036) returned 1
[0247.645] IsWindowEnabled (hWnd=0x70036) returned 1
[0247.645] IsWindowVisible (hWnd=0x602b6) returned 0
[0247.645] IsWindowVisible (hWnd=0x901f8) returned 0
[0247.645] IsWindowVisible (hWnd=0x202d0) returned 0
[0247.645] IsWindowVisible (hWnd=0x202d4) returned 0
[0247.645] GetActiveWindow () returned 0x70036
[0247.645] GetFocus () returned 0x202c6
[0247.645] IsWindow (hWnd=0x70036) returned 1
[0247.645] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0247.645] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0247.682] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0247.682] GetWindowLongW (hWnd=0x502ca, nIndex=-8) returned 458806
[0247.682] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0247.682] GetCurrentThreadId () returned 0x11d0
[0247.683] GetWindowLongW (hWnd=0x502ca, nIndex=-8) returned 458806
[0247.683] IsWindowEnabled (hWnd=0x70036) returned 0
[0247.683] IsWindowEnabled (hWnd=0x502ca) returned 1
[0247.683] ShowWindow (hWnd=0x502ca, nCmdShow=5) returned 0
[0247.683] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0247.683] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0247.683] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.684] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0247.684] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x502ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x8004e
[0247.684] SetWindowLongW (hWnd=0x8004e, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0247.685] GetWindowLongW (hWnd=0x8004e, nIndex=-4) returned 1868026976
[0247.685] SetWindowLongW (hWnd=0x8004e, nIndex=-4, dwNewLong=79647278) returned 1868026976
[0247.685] GetWindowLongW (hWnd=0x8004e, nIndex=-4) returned 79647278
[0247.685] GetWindowLongW (hWnd=0x8004e, nIndex=-16) returned 1174470848
[0247.685] GetWindowLongW (hWnd=0x8004e, nIndex=-12) returned 0
[0247.685] SetWindowLongW (hWnd=0x8004e, nIndex=-12, dwNewLong=524366) returned 0
[0247.685] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0247.687] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0247.687] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0247.688] SendMessageW (hWnd=0x8004e, Msg=0x2055, wParam=0x8004e, lParam=0x3) returned 0x2
[0247.688] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0247.688] GetWindow (hWnd=0x8004e, uCmd=0x3) returned 0x0
[0247.688] GetClientRect (in: hWnd=0x8004e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0247.688] GetWindowRect (in: hWnd=0x8004e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0247.688] GetParent (hWnd=0x8004e) returned 0x502ca
[0247.688] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502ca, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0247.688] SendMessageW (hWnd=0x8004e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0247.688] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0247.689] SendMessageW (hWnd=0x8004e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0247.689] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0247.689] GetSystemMetrics (nIndex=5) returned 1
[0247.689] GetSystemMetrics (nIndex=6) returned 1
[0247.689] SendMessageW (hWnd=0x8004e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0247.689] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0247.689] SendMessageW (hWnd=0x8004e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0247.689] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0247.690] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0247.690] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0247.690] GetClientRect (in: hWnd=0x8004e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0247.690] GetWindowRect (in: hWnd=0x8004e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0247.690] GetParent (hWnd=0x8004e) returned 0x502ca
[0247.690] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502ca, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0247.690] SendMessageW (hWnd=0x8004e, Msg=0x2210, wParam=0x4e0001, lParam=0x8004e) returned 0x0
[0247.690] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x2210, wParam=0x4e0001, lParam=0x8004e) returned 0x0
[0247.691] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0247.691] GetParent (hWnd=0x8004e) returned 0x502ca
[0247.691] GetParent (hWnd=0xc0122) returned 0x27013e
[0247.691] SetParent (hWndChild=0xc0122, hWndNewParent=0x502ca) returned 0x27013e
[0247.691] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0247.692] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0247.692] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0247.692] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0247.692] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0247.692] GetClientRect (in: hWnd=0xc0122, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0247.692] GetWindowRect (in: hWnd=0xc0122, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0247.693] GetParent (hWnd=0xc0122) returned 0x502ca
[0247.693] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502ca, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0247.693] GetClientRect (in: hWnd=0xc0122, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0247.693] GetWindowRect (in: hWnd=0xc0122, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0247.693] GetParent (hWnd=0xc0122) returned 0x502ca
[0247.693] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502ca, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0247.693] GetParent (hWnd=0xc0122) returned 0x502ca
[0247.694] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0247.694] GetWindow (hWnd=0xc0122, uCmd=0x3) returned 0x0
[0247.694] SetWindowPos (hWnd=0xc0122, hWndInsertAfter=0x8004e, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0247.694] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0247.695] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0247.695] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0247.695] GetClientRect (in: hWnd=0xc0122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0247.695] GetWindowRect (in: hWnd=0xc0122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0247.695] GetParent (hWnd=0xc0122) returned 0x502ca
[0247.695] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502ca, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0247.695] GetParent (hWnd=0xc0122) returned 0x502ca
[0247.695] GetWindow (hWnd=0xc0122, uCmd=0x3) returned 0x8004e
[0247.695] GetWindowThreadProcessId (in: hWnd=0xc0122, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0247.695] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0247.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.696] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0247.696] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x502ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xb01e2
[0247.697] SetWindowLongW (hWnd=0xb01e2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0247.697] GetWindowLongW (hWnd=0xb01e2, nIndex=-4) returned 1868032000
[0247.697] SetWindowLongW (hWnd=0xb01e2, nIndex=-4, dwNewLong=79647518) returned 1868032000
[0247.698] GetWindowLongW (hWnd=0xb01e2, nIndex=-4) returned 79647518
[0247.698] GetWindowLongW (hWnd=0xb01e2, nIndex=-16) returned 1174470667
[0247.698] GetWindowLongW (hWnd=0xb01e2, nIndex=-12) returned 0
[0247.698] SetWindowLongW (hWnd=0xb01e2, nIndex=-12, dwNewLong=721378) returned 0
[0247.698] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0247.698] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0247.699] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0247.700] SendMessageW (hWnd=0xb01e2, Msg=0x2055, wParam=0xb01e2, lParam=0x3) returned 0x2
[0247.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0247.700] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0247.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0247.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0247.700] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0247.700] RedrawWindow (hWnd=0x8004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0247.700] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0247.701] RedrawWindow (hWnd=0xc0122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0247.701] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0247.701] RedrawWindow (hWnd=0xb01e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0247.701] RedrawWindow (hWnd=0x502ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0247.701] GetWindow (hWnd=0xb01e2, uCmd=0x3) returned 0xc0122
[0247.701] GetClientRect (in: hWnd=0xb01e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0247.701] GetWindowRect (in: hWnd=0xb01e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0247.701] GetParent (hWnd=0xb01e2) returned 0x502ca
[0247.701] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502ca, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0247.701] SetWindowTextW (hWnd=0xb01e2, lpString="OK") returned 1
[0247.701] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0xc, wParam=0x0, lParam=0x245043c) returned 0x1
[0247.702] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0247.703] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0247.703] GetClientRect (in: hWnd=0xb01e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0247.703] GetWindowRect (in: hWnd=0xb01e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0247.703] GetParent (hWnd=0xb01e2) returned 0x502ca
[0247.703] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502ca, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0247.703] SendMessageW (hWnd=0xb01e2, Msg=0x2210, wParam=0x1e20001, lParam=0xb01e2) returned 0x0
[0247.703] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x2210, wParam=0x1e20001, lParam=0xb01e2) returned 0x0
[0247.703] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0247.703] GetParent (hWnd=0xb01e2) returned 0x502ca
[0247.703] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0247.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.704] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0247.704] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x502ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xc00ea
[0247.705] SetWindowLongW (hWnd=0xc00ea, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0247.705] GetWindowLongW (hWnd=0xc00ea, nIndex=-4) returned 1868032000
[0247.706] SetWindowLongW (hWnd=0xc00ea, nIndex=-4, dwNewLong=79647558) returned 1868032000
[0247.706] GetWindowLongW (hWnd=0xc00ea, nIndex=-4) returned 79647558
[0247.706] GetWindowLongW (hWnd=0xc00ea, nIndex=-16) returned 1174470667
[0247.706] GetWindowLongW (hWnd=0xc00ea, nIndex=-12) returned 0
[0247.706] SetWindowLongW (hWnd=0xc00ea, nIndex=-12, dwNewLong=786666) returned 0
[0247.706] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc00ea, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0247.707] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc00ea, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0247.707] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc00ea, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0247.708] SendMessageW (hWnd=0xc00ea, Msg=0x2055, wParam=0xc00ea, lParam=0x3) returned 0x2
[0247.708] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0247.708] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc00ea, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0247.708] GetWindow (hWnd=0xc00ea, uCmd=0x3) returned 0xb01e2
[0247.708] GetClientRect (in: hWnd=0xc00ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0247.708] GetWindowRect (in: hWnd=0xc00ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0247.708] GetParent (hWnd=0xc00ea) returned 0x502ca
[0247.708] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502ca, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0247.709] SetWindowTextW (hWnd=0xc00ea, lpString="Cancel") returned 1
[0247.709] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc00ea, Msg=0xc, wParam=0x0, lParam=0x2453cfc) returned 0x1
[0247.709] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc00ea, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0247.709] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc00ea, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0247.710] GetClientRect (in: hWnd=0xc00ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0247.710] GetWindowRect (in: hWnd=0xc00ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0247.710] GetParent (hWnd=0xc00ea) returned 0x502ca
[0247.710] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x502ca, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0247.710] SendMessageW (hWnd=0xc00ea, Msg=0x2210, wParam=0xea0001, lParam=0xc00ea) returned 0x0
[0247.710] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc00ea, Msg=0x2210, wParam=0xea0001, lParam=0xc00ea) returned 0x0
[0247.710] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc00ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0247.711] GetParent (hWnd=0xc00ea) returned 0x502ca
[0247.711] GetDC (hWnd=0x0) returned 0xf0105ee
[0247.711] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e320) returned 0x0
[0247.711] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0247.711] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0247.712] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0247.712] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0247.712] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0247.712] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0247.712] GetWindowLongW (hWnd=0x502ca, nIndex=-8) returned 458806
[0247.712] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0247.712] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0247.712] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x9d0107aa
[0247.713] GetDeviceCaps (hdc=0x9d0107aa, index=12) returned 32
[0247.713] GetDeviceCaps (hdc=0x9d0107aa, index=14) returned 1
[0247.713] DeleteDC (hdc=0x9d0107aa) returned 1
[0247.713] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0247.713] GetWindowThreadProcessId (in: hWnd=0x502ca, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0247.713] GetCurrentThreadId () returned 0x11d0
[0247.713] PostMessageW (hWnd=0x502ca, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0247.713] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.713] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.713] GetSystemMetrics (nIndex=42) returned 0
[0247.713] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.713] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0247.713] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0247.714] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0247.714] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0247.714] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0247.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x502ca) returned 0x1
[0247.733] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0247.733] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0247.733] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0247.733] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0247.736] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0247.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0247.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0247.738] GetFocus () returned 0x202c6
[0247.738] IsChild (hWndParent=0x502ca, hWnd=0x202c6) returned 0
[0247.738] GetFocus () returned 0x202c6
[0247.738] SetFocus (hWnd=0x8004e) returned 0x202c6
[0247.739] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x8004e, lParam=0x0) returned 0x0
[0247.739] GetCapture () returned 0x0
[0247.739] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0247.746] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0247.747] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0247.749] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0247.749] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0247.750] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0247.750] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0247.750] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0247.750] GetParent (hWnd=0x502ca) returned 0x0
[0247.750] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0247.751] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0247.751] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0247.752] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0247.752] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0247.752] GetSysColorBrush (nIndex=5) returned 0x100079
[0247.753] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0247.753] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0247.754] SendMessageW (hWnd=0x8004e, Msg=0x2111, wParam=0x100004e, lParam=0x8004e) returned 0x0
[0247.754] SendMessageW (hWnd=0x8004e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0247.754] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0247.755] GetKeyState (nVirtKey=1) returned 0
[0247.755] GetKeyState (nVirtKey=2) returned 0
[0247.755] GetKeyState (nVirtKey=4) returned 0
[0247.755] GetKeyState (nVirtKey=5) returned 0
[0247.755] GetKeyState (nVirtKey=6) returned 0
[0247.755] GetWindowTextLengthW (hWnd=0x8004e) returned 0
[0247.755] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0247.755] SendMessageW (hWnd=0x8004e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0247.755] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0247.755] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0247.755] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0247.761] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0247.763] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0247.763] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0247.763] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0247.764] GetWindowPlacement (in: hWnd=0x502ca, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0247.764] GetClientRect (in: hWnd=0x502ca, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0247.764] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.764] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.764] GetSystemMetrics (nIndex=42) returned 0
[0247.764] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.764] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0247.764] GetClientRect (in: hWnd=0x502ca, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0247.764] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0247.764] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0247.764] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x5b050535
[0247.764] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0247.764] SaveDC (hdc=0x10105d6) returned 1
[0247.765] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0247.765] CreateSolidBrush (color=0xf0f0f0) returned 0x3c10078d
[0247.765] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0x3c10078d) returned 1
[0247.765] DeleteObject (ho=0x3c10078d) returned 1
[0247.765] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0247.765] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0247.765] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0247.765] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0247.767] GetWindowPlacement (in: hWnd=0x502ca, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0247.768] GetClientRect (in: hWnd=0x502ca, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0247.768] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.768] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.768] GetSystemMetrics (nIndex=42) returned 0
[0247.768] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.768] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0247.768] GetClientRect (in: hWnd=0x502ca, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0247.768] GetCurrentObject (hdc=0x5d0107c9, type=0x1) returned 0xb00017
[0247.768] GetCurrentObject (hdc=0x5d0107c9, type=0x2) returned 0x900010
[0247.768] GetCurrentObject (hdc=0x5d0107c9, type=0x7) returned 0x44050788
[0247.768] GetCurrentObject (hdc=0x5d0107c9, type=0x6) returned 0x8a01c2
[0247.768] SaveDC (hdc=0x5d0107c9) returned 1
[0247.768] GetNearestColor (hdc=0x5d0107c9, color=0xf0f0f0) returned 0xf0f0f0
[0247.768] CreateSolidBrush (color=0xf0f0f0) returned 0x3d10078d
[0247.768] FillRect (hDC=0x5d0107c9, lprc=0x53dc18, hbr=0x3d10078d) returned 1
[0247.768] DeleteObject (ho=0x3d10078d) returned 1
[0247.768] RestoreDC (hdc=0x5d0107c9, nSavedDC=-1) returned 1
[0247.769] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.769] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.769] GetSystemMetrics (nIndex=42) returned 0
[0247.769] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.769] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0247.769] GetClientRect (in: hWnd=0x502ca, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0247.769] GetCurrentObject (hdc=0x5d0107c9, type=0x1) returned 0xb00017
[0247.769] GetCurrentObject (hdc=0x5d0107c9, type=0x2) returned 0x900010
[0247.769] GetCurrentObject (hdc=0x5d0107c9, type=0x7) returned 0x44050788
[0247.769] GetCurrentObject (hdc=0x5d0107c9, type=0x6) returned 0x8a01c2
[0247.769] SaveDC (hdc=0x5d0107c9) returned 1
[0247.769] GetNearestColor (hdc=0x5d0107c9, color=0xf0f0f0) returned 0xf0f0f0
[0247.769] CreateSolidBrush (color=0xf0f0f0) returned 0x3e10078d
[0247.769] FillRect (hDC=0x5d0107c9, lprc=0x53dbb8, hbr=0x3e10078d) returned 1
[0247.769] DeleteObject (ho=0x3e10078d) returned 1
[0247.770] RestoreDC (hdc=0x5d0107c9, nSavedDC=-1) returned 1
[0247.770] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.770] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.770] GetSystemMetrics (nIndex=42) returned 0
[0247.770] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.770] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0247.771] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0247.771] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0247.777] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0247.778] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0247.778] GetStockObject (i=5) returned 0x900015
[0247.778] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc00ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0247.778] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xc00ea, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0247.778] GetStockObject (i=5) returned 0x900015
[0247.778] GetWindowPlacement (in: hWnd=0x502ca, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0247.778] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0247.778] GetClientRect (in: hWnd=0x502ca, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0247.778] GetWindowRect (in: hWnd=0x502ca, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0247.780] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0247.781] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0247.781] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0247.781] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0247.781] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0247.781] GetClientRect (in: hWnd=0x502ca, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0247.781] GetWindowRect (in: hWnd=0x502ca, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0247.781] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.782] IsWindowUnicode (hWnd=0x502ca) returned 1
[0247.782] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.782] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.782] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0247.782] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.782] IsWindowUnicode (hWnd=0x502ca) returned 1
[0247.782] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.782] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.782] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.782] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.783] MapWindowPoints (in: hWndFrom=0xc0122, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0247.783] IsWindowUnicode (hWnd=0xc0122) returned 1
[0247.783] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.783] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.783] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.783] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.783] IsWindowUnicode (hWnd=0x202c6) returned 1
[0247.783] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.783] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.783] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.784] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0247.784] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0247.784] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.784] MapWindowPoints (in: hWndFrom=0xc0122, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0247.784] IsWindowUnicode (hWnd=0xc0122) returned 1
[0247.784] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.784] MapWindowPoints (in: hWndFrom=0xc0122, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0247.784] SetCursor (hCursor=0x10003) returned 0x10003
[0247.784] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.784] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.784] _TrackMouseEvent (in: lpEventTrack=0x245a690 | out: lpEventTrack=0x245a690) returned 1
[0247.784] SendMessageW (hWnd=0xc0122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0247.785] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0247.785] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x200, wParam=0x0, lParam=0x190022) returned 0x0
[0247.785] GetKeyState (nVirtKey=1) returned 0
[0247.785] GetKeyState (nVirtKey=2) returned 0
[0247.785] GetKeyState (nVirtKey=4) returned 0
[0247.785] GetKeyState (nVirtKey=5) returned 0
[0247.785] GetKeyState (nVirtKey=6) returned 0
[0247.785] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.785] IsWindowUnicode (hWnd=0x502ca) returned 1
[0247.785] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.785] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.785] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.786] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.786] IsWindowUnicode (hWnd=0x502ca) returned 1
[0247.786] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.820] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.820] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.820] BeginPaint (in: hWnd=0x502ca, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x60100ce
[0247.820] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0247.820] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.820] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.820] GetSystemMetrics (nIndex=42) returned 0
[0247.820] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.820] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0247.821] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0247.821] EndPaint (hWnd=0x502ca, lpPaint=0x53e30c) returned 1
[0247.821] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.821] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0247.822] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.822] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.822] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0247.822] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.823] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.823] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.823] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0247.825] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.825] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.825] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.825] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.826] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.826] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x84, wParam=0x0, lParam=0x1940365) returned 0x1
[0247.826] IsWindowUnicode (hWnd=0xb01e2) returned 1
[0247.826] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.826] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.826] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.827] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.827] IsWindowUnicode (hWnd=0xc0122) returned 1
[0247.827] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.827] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.827] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.827] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0247.827] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.827] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x84, wParam=0x0, lParam=0x1940365) returned 0x1
[0247.827] IsWindowUnicode (hWnd=0xb01e2) returned 1
[0247.827] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.827] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x84, wParam=0x0, lParam=0x1940365) returned 0x1
[0247.827] SetCursor (hCursor=0x10003) returned 0x10003
[0247.828] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.828] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.828] _TrackMouseEvent (in: lpEventTrack=0x245a780 | out: lpEventTrack=0x245a780) returned 1
[0247.828] SendMessageW (hWnd=0xb01e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0247.828] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0247.828] InvalidateRect (hWnd=0xb01e2, lpRect=0x0, bErase=0) returned 1
[0247.828] GetKeyState (nVirtKey=1) returned 0
[0247.828] GetKeyState (nVirtKey=2) returned 0
[0247.828] GetKeyState (nVirtKey=4) returned 0
[0247.828] GetKeyState (nVirtKey=5) returned 0
[0247.828] GetKeyState (nVirtKey=6) returned 0
[0247.828] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.829] IsWindowUnicode (hWnd=0x8004e) returned 1
[0247.829] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.829] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.829] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.829] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.829] IsWindowUnicode (hWnd=0x8004e) returned 1
[0247.830] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.830] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.830] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0247.830] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0247.830] SetTextColor (hdc=0x5e0107c9, color=0x0) returned 0x0
[0247.830] SetBkColor (hdc=0x5e0107c9, color=0xffffff) returned 0xffffff
[0247.832] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.832] IsWindowUnicode (hWnd=0xc0122) returned 1
[0247.832] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.832] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.832] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.832] BeginPaint (in: hWnd=0xc0122, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x10105d6
[0247.832] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0247.832] CreateCompatibleDC (hdc=0x10105d6) returned 0xd40107c7
[0247.832] SelectObject (hdc=0xd40107c7, h=0x1e0507b9) returned 0x85000f
[0247.832] GdipCreateFromHDC (hdc=0xd40107c7, graphics=0x53e30c) returned 0x0
[0247.833] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0247.833] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0247.833] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0247.833] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.833] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0247.833] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0247.833] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0247.833] LocalFree (hMem=0x89ee08) returned 0x0
[0247.833] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.833] GdipCreateRegion (region=0x53e354) returned 0x0
[0247.833] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.833] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0247.833] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0247.833] GetWindowTextLengthW (hWnd=0xc0122) returned 16
[0247.833] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0247.833] GetSystemMetrics (nIndex=42) returned 0
[0247.833] GetWindowTextW (in: hWnd=0xc0122, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0247.834] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0247.840] GetClientRect (in: hWnd=0xc0122, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0247.840] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0247.840] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0247.840] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0247.840] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.840] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0247.840] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0247.840] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0247.840] LocalFree (hMem=0x89eac0) returned 0x0
[0247.840] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0247.840] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0247.840] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0247.840] LocalFree (hMem=0x89ec80) returned 0x0
[0247.841] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.841] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0247.841] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0247.841] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0247.841] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0247.841] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0247.841] GetCurrentObject (hdc=0xd40107c7, type=0x1) returned 0xb00017
[0247.841] GetCurrentObject (hdc=0xd40107c7, type=0x2) returned 0x900010
[0247.841] GetCurrentObject (hdc=0xd40107c7, type=0x7) returned 0x1e0507b9
[0247.841] GetCurrentObject (hdc=0xd40107c7, type=0x6) returned 0x8a01c2
[0247.841] SaveDC (hdc=0xd40107c7) returned 1
[0247.841] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d0407a1
[0247.841] GetClipRgn (hdc=0xd40107c7, hrgn=0x7d0407a1) returned 0
[0247.842] SelectClipRgn (hdc=0xd40107c7, hrgn=0xd404051e) returned 2
[0247.842] DeleteObject (ho=0x7d0407a1) returned 1
[0247.842] DeleteObject (ho=0xd404051e) returned 1
[0247.842] OffsetViewportOrgEx (in: hdc=0xd40107c7, x=0, y=0, lppt=0x245abcc | out: lppt=0x245abcc) returned 1
[0247.842] GetNearestColor (hdc=0xd40107c7, color=0xf0f0f0) returned 0xf0f0f0
[0247.842] CreateSolidBrush (color=0xf0f0f0) returned 0x3f10078d
[0247.842] FillRect (hDC=0xd40107c7, lprc=0x53e1f4, hbr=0x3f10078d) returned 1
[0247.842] DeleteObject (ho=0x3f10078d) returned 1
[0247.842] RestoreDC (hdc=0xd40107c7, nSavedDC=-1) returned 1
[0247.842] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd40107c7) returned 0x0
[0247.842] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbbd0dbd) returned 0x0
[0247.842] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.842] GetWindowTextLengthW (hWnd=0xc0122) returned 16
[0247.842] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0247.843] GetSystemMetrics (nIndex=42) returned 0
[0247.843] GetWindowTextW (in: hWnd=0xc0122, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0247.843] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0247.843] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0247.843] GetCurrentObject (hdc=0xd40107c7, type=0x1) returned 0xb00017
[0247.843] GetCurrentObject (hdc=0xd40107c7, type=0x2) returned 0x900010
[0247.843] GetCurrentObject (hdc=0xd40107c7, type=0x7) returned 0x1e0507b9
[0247.843] GetCurrentObject (hdc=0xd40107c7, type=0x6) returned 0x8a01c2
[0247.843] SaveDC (hdc=0xd40107c7) returned 1
[0247.843] GetNearestColor (hdc=0xd40107c7, color=0x0) returned 0x0
[0247.843] RestoreDC (hdc=0xd40107c7, nSavedDC=-1) returned 1
[0247.843] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd40107c7) returned 0x0
[0247.844] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0247.844] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0247.844] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0247.844] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x245aed4 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0247.844] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0247.845] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0247.845] GetCurrentObject (hdc=0xd40107c7, type=0x1) returned 0xb00017
[0247.845] GetCurrentObject (hdc=0xd40107c7, type=0x2) returned 0x900010
[0247.845] GetCurrentObject (hdc=0xd40107c7, type=0x7) returned 0x1e0507b9
[0247.845] GetCurrentObject (hdc=0xd40107c7, type=0x6) returned 0x8a01c2
[0247.845] SaveDC (hdc=0xd40107c7) returned 1
[0247.845] GetTextAlign (hdc=0xd40107c7) returned 0x0
[0247.845] GetTextColor (hdc=0xd40107c7) returned 0x0
[0247.845] GetCurrentObject (hdc=0xd40107c7, type=0x6) returned 0x8a01c2
[0247.845] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0247.845] SelectObject (hdc=0xd40107c7, h=0x730a066d) returned 0x8a01c2
[0247.845] GetBkMode (hdc=0xd40107c7) returned 2
[0247.845] SetBkMode (hdc=0xd40107c7, mode=1) returned 2
[0247.846] DrawTextExW (in: hdc=0xd40107c7, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x245b0f8 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0247.846] RestoreDC (hdc=0xd40107c7, nSavedDC=-1) returned 1
[0247.846] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd40107c7) returned 0x0
[0247.846] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0247.846] BitBlt (hdc=0x10105d6, x=0, y=0, cx=250, cy=70, hdcSrc=0xd40107c7, x1=0, y1=0, rop=0xcc0020) returned 1
[0247.846] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd40107c7) returned 0x0
[0247.846] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0247.847] SelectObject (hdc=0xd40107c7, h=0x85000f) returned 0x1e0507b9
[0247.847] DeleteDC (hdc=0xd40107c7) returned 1
[0247.847] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0247.847] EndPaint (hWnd=0xc0122, lpPaint=0x53e2f0) returned 1
[0247.847] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.847] IsWindowUnicode (hWnd=0xb01e2) returned 1
[0247.847] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.847] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.847] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.847] BeginPaint (in: hWnd=0xb01e2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0247.848] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0247.848] CreateCompatibleDC (hdc=0xf0105ee) returned 0xd60107c7
[0247.848] SelectObject (hdc=0xd60107c7, h=0x1e0507b9) returned 0x85000f
[0247.848] GdipCreateFromHDC (hdc=0xd60107c7, graphics=0x53e300) returned 0x0
[0247.848] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0247.848] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0247.848] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0247.848] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.848] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0247.848] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0247.848] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0247.848] LocalFree (hMem=0x89ec80) returned 0x0
[0247.848] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.849] GdipCreateRegion (region=0x53e348) returned 0x0
[0247.849] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.849] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0247.849] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0247.849] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbbb0dbd) returned 0x0
[0247.849] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.849] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0247.849] GetCurrentObject (hdc=0xd60107c7, type=0x1) returned 0xb00017
[0247.849] GetCurrentObject (hdc=0xd60107c7, type=0x2) returned 0x900010
[0247.849] GetCurrentObject (hdc=0xd60107c7, type=0x7) returned 0x1e0507b9
[0247.849] GetCurrentObject (hdc=0xd60107c7, type=0x6) returned 0x8a01c2
[0247.857] SaveDC (hdc=0xd60107c7) returned 1
[0247.857] GetNearestColor (hdc=0xd60107c7, color=0xf0f0f0) returned 0xf0f0f0
[0247.857] GetNearestColor (hdc=0xd60107c7, color=0xa0a0a0) returned 0xa0a0a0
[0247.857] GetNearestColor (hdc=0xd60107c7, color=0x696969) returned 0x696969
[0247.857] GetNearestColor (hdc=0xd60107c7, color=0xa0a0a0) returned 0xa0a0a0
[0247.857] GetNearestColor (hdc=0xd60107c7, color=0x0) returned 0x0
[0247.857] GetNearestColor (hdc=0xd60107c7, color=0xffffff) returned 0xffffff
[0247.857] GetNearestColor (hdc=0xd60107c7, color=0xe5e5e5) returned 0xe5e5e5
[0247.857] GetNearestColor (hdc=0xd60107c7, color=0xd7d7d7) returned 0xd7d7d7
[0247.857] GetNearestColor (hdc=0xd60107c7, color=0x0) returned 0x0
[0247.857] RestoreDC (hdc=0xd60107c7, nSavedDC=-1) returned 1
[0247.857] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd60107c7) returned 0x0
[0247.857] IsAppThemed () returned 0x1
[0247.858] GetThemeAppProperties () returned 0x3
[0247.858] GetThemeAppProperties () returned 0x3
[0247.858] IsAppThemed () returned 0x1
[0247.858] GetThemeAppProperties () returned 0x3
[0247.858] GetThemeAppProperties () returned 0x3
[0247.858] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x245b864 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0247.858] IsAppThemed () returned 0x1
[0247.858] GetThemeAppProperties () returned 0x3
[0247.858] GetThemeAppProperties () returned 0x3
[0247.858] IsAppThemed () returned 0x1
[0247.858] GetThemeAppProperties () returned 0x3
[0247.859] GetThemeAppProperties () returned 0x3
[0247.859] IsAppThemed () returned 0x1
[0247.859] GetThemeAppProperties () returned 0x3
[0247.859] GetThemeAppProperties () returned 0x3
[0247.859] IsAppThemed () returned 0x1
[0247.859] GetThemeAppProperties () returned 0x3
[0247.859] GetThemeAppProperties () returned 0x3
[0247.859] IsThemePartDefined () returned 0x1
[0247.859] IsAppThemed () returned 0x1
[0247.859] GetThemeAppProperties () returned 0x3
[0247.859] GetThemeAppProperties () returned 0x3
[0247.859] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0247.859] IsAppThemed () returned 0x1
[0247.859] GetThemeAppProperties () returned 0x3
[0247.859] GetThemeAppProperties () returned 0x3
[0247.860] IsAppThemed () returned 0x1
[0247.860] GetThemeAppProperties () returned 0x3
[0247.860] GetThemeAppProperties () returned 0x3
[0247.860] IsThemePartDefined () returned 0x1
[0247.860] GdipCreateRegion (region=0x53e064) returned 0x0
[0247.860] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.860] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0247.860] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.860] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0247.860] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0247.860] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0247.860] LocalFree (hMem=0x89ee08) returned 0x0
[0247.860] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0247.860] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0247.860] LocalFree (hMem=0x89ee08) returned 0x0
[0247.860] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.860] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0247.860] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0247.861] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0247.861] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.861] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0247.861] GetCurrentObject (hdc=0xd60107c7, type=0x1) returned 0xb00017
[0247.861] GetCurrentObject (hdc=0xd60107c7, type=0x2) returned 0x900010
[0247.861] GetCurrentObject (hdc=0xd60107c7, type=0x7) returned 0x1e0507b9
[0247.861] GetCurrentObject (hdc=0xd60107c7, type=0x6) returned 0x8a01c2
[0247.861] SaveDC (hdc=0xd60107c7) returned 1
[0247.861] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd504051e
[0247.861] GetClipRgn (hdc=0xd60107c7, hrgn=0xd504051e) returned 0
[0247.861] SelectClipRgn (hdc=0xd60107c7, hrgn=0x810407a1) returned 2
[0247.861] DeleteObject (ho=0xd504051e) returned 1
[0247.861] DeleteObject (ho=0x810407a1) returned 1
[0247.861] OffsetViewportOrgEx (in: hdc=0xd60107c7, x=0, y=0, lppt=0x245bf14 | out: lppt=0x245bf14) returned 1
[0247.861] DrawThemeParentBackground () returned 0x0
[0247.862] GetWindowPlacement (in: hWnd=0x502ca, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0247.862] GetClientRect (in: hWnd=0x502ca, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0247.862] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.862] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.862] GetSystemMetrics (nIndex=42) returned 0
[0247.862] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.862] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0247.862] GetClientRect (in: hWnd=0x502ca, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0247.862] GetCurrentObject (hdc=0xd60107c7, type=0x1) returned 0xb00017
[0247.862] GetCurrentObject (hdc=0xd60107c7, type=0x2) returned 0x900010
[0247.862] GetCurrentObject (hdc=0xd60107c7, type=0x7) returned 0x1e0507b9
[0247.862] GetCurrentObject (hdc=0xd60107c7, type=0x6) returned 0x8a01c2
[0247.862] SaveDC (hdc=0xd60107c7) returned 2
[0247.862] GetNearestColor (hdc=0xd60107c7, color=0xf0f0f0) returned 0xf0f0f0
[0247.863] CreateSolidBrush (color=0xf0f0f0) returned 0x4010078d
[0247.863] FillRect (hDC=0xd60107c7, lprc=0x53dac8, hbr=0x4010078d) returned 1
[0247.863] DeleteObject (ho=0x4010078d) returned 1
[0247.863] RestoreDC (hdc=0xd60107c7, nSavedDC=-1) returned 1
[0247.863] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.863] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.863] GetSystemMetrics (nIndex=42) returned 0
[0247.863] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.863] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0247.863] GetClientRect (in: hWnd=0x502ca, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0247.863] GetCurrentObject (hdc=0xd60107c7, type=0x1) returned 0xb00017
[0247.863] GetCurrentObject (hdc=0xd60107c7, type=0x2) returned 0x900010
[0247.863] GetCurrentObject (hdc=0xd60107c7, type=0x7) returned 0x1e0507b9
[0247.863] GetCurrentObject (hdc=0xd60107c7, type=0x6) returned 0x8a01c2
[0247.863] SaveDC (hdc=0xd60107c7) returned 2
[0247.864] GetNearestColor (hdc=0xd60107c7, color=0xf0f0f0) returned 0xf0f0f0
[0247.864] CreateSolidBrush (color=0xf0f0f0) returned 0x4110078d
[0247.864] FillRect (hDC=0xd60107c7, lprc=0x53da68, hbr=0x4110078d) returned 1
[0247.864] DeleteObject (ho=0x4110078d) returned 1
[0247.864] RestoreDC (hdc=0xd60107c7, nSavedDC=-1) returned 1
[0247.864] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.864] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.864] GetSystemMetrics (nIndex=42) returned 0
[0247.864] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.864] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0247.864] RestoreDC (hdc=0xd60107c7, nSavedDC=-1) returned 1
[0247.864] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd60107c7) returned 0x0
[0247.865] IsAppThemed () returned 0x1
[0247.865] GetThemeAppProperties () returned 0x3
[0247.865] GetThemeAppProperties () returned 0x3
[0247.865] IsAppThemed () returned 0x1
[0247.865] GetThemeAppProperties () returned 0x3
[0247.865] GetThemeAppProperties () returned 0x3
[0247.866] IsThemePartDefined () returned 0x1
[0247.866] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0247.866] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.866] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0247.866] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.866] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0247.866] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0247.866] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0247.866] LocalFree (hMem=0x89eac0) returned 0x0
[0247.866] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0247.866] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0247.866] LocalFree (hMem=0x89eac0) returned 0x0
[0247.866] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.866] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0247.866] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0247.867] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0247.867] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.867] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0247.867] GetCurrentObject (hdc=0xd60107c7, type=0x1) returned 0xb00017
[0247.867] GetCurrentObject (hdc=0xd60107c7, type=0x2) returned 0x900010
[0247.867] GetCurrentObject (hdc=0xd60107c7, type=0x7) returned 0x1e0507b9
[0247.867] GetCurrentObject (hdc=0xd60107c7, type=0x6) returned 0x8a01c2
[0247.867] SaveDC (hdc=0xd60107c7) returned 1
[0247.867] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x820407a1
[0247.867] GetClipRgn (hdc=0xd60107c7, hrgn=0x820407a1) returned 0
[0247.867] SelectClipRgn (hdc=0xd60107c7, hrgn=0xd704051e) returned 2
[0247.867] DeleteObject (ho=0x820407a1) returned 1
[0247.867] DeleteObject (ho=0xd704051e) returned 1
[0247.867] OffsetViewportOrgEx (in: hdc=0xd60107c7, x=0, y=0, lppt=0x245c79c | out: lppt=0x245c79c) returned 1
[0247.867] IsAppThemed () returned 0x1
[0247.867] GetThemeAppProperties () returned 0x3
[0247.868] GetThemeAppProperties () returned 0x3
[0247.868] DrawThemeBackground () returned 0x0
[0247.868] RestoreDC (hdc=0xd60107c7, nSavedDC=-1) returned 1
[0247.868] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd60107c7) returned 0x0
[0247.868] GdipCreateRegion (region=0x53dfec) returned 0x0
[0247.868] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.868] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0247.868] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.868] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0247.868] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0247.868] LocalFree (hMem=0x89eac0) returned 0x0
[0247.868] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0247.868] LocalFree (hMem=0x89ec80) returned 0x0
[0247.868] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.868] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0247.868] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0247.868] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0247.868] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.869] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0247.869] GetCurrentObject (hdc=0xd60107c7, type=0x1) returned 0xb00017
[0247.869] GetCurrentObject (hdc=0xd60107c7, type=0x2) returned 0x900010
[0247.869] GetCurrentObject (hdc=0xd60107c7, type=0x7) returned 0x1e0507b9
[0247.869] GetCurrentObject (hdc=0xd60107c7, type=0x6) returned 0x8a01c2
[0247.869] SaveDC (hdc=0xd60107c7) returned 1
[0247.869] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd804051e
[0247.869] GetClipRgn (hdc=0xd60107c7, hrgn=0xd804051e) returned 0
[0247.869] SelectClipRgn (hdc=0xd60107c7, hrgn=0x830407a1) returned 2
[0247.869] DeleteObject (ho=0xd804051e) returned 1
[0247.869] DeleteObject (ho=0x830407a1) returned 1
[0247.869] OffsetViewportOrgEx (in: hdc=0xd60107c7, x=0, y=0, lppt=0x245ca70 | out: lppt=0x245ca70) returned 1
[0247.869] IsAppThemed () returned 0x1
[0247.869] GetThemeAppProperties () returned 0x3
[0247.869] GetThemeAppProperties () returned 0x3
[0247.869] GetThemeBackgroundContentRect () returned 0x0
[0247.869] RestoreDC (hdc=0xd60107c7, nSavedDC=-1) returned 1
[0247.870] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd60107c7) returned 0x0
[0247.870] IsAppThemed () returned 0x1
[0247.870] GetThemeAppProperties () returned 0x3
[0247.870] GetThemeAppProperties () returned 0x3
[0247.870] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0247.870] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0247.870] GetCurrentObject (hdc=0xd60107c7, type=0x1) returned 0xb00017
[0247.870] GetCurrentObject (hdc=0xd60107c7, type=0x2) returned 0x900010
[0247.870] GetCurrentObject (hdc=0xd60107c7, type=0x7) returned 0x1e0507b9
[0247.870] GetCurrentObject (hdc=0xd60107c7, type=0x6) returned 0x8a01c2
[0247.870] SaveDC (hdc=0xd60107c7) returned 1
[0247.870] GetTextAlign (hdc=0xd60107c7) returned 0x0
[0247.870] GetTextColor (hdc=0xd60107c7) returned 0x0
[0247.870] GetCurrentObject (hdc=0xd60107c7, type=0x6) returned 0x8a01c2
[0247.870] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0247.870] SelectObject (hdc=0xd60107c7, h=0x730a066d) returned 0x8a01c2
[0247.871] GetBkMode (hdc=0xd60107c7) returned 2
[0247.871] SetBkMode (hdc=0xd60107c7, mode=1) returned 2
[0247.871] DrawTextExW (in: hdc=0xd60107c7, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x245ce10 | out: lpchText="OK", lprc=0x53df84) returned 13
[0247.871] DrawTextExW (in: hdc=0xd60107c7, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x245ce10 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0247.871] RestoreDC (hdc=0xd60107c7, nSavedDC=-1) returned 1
[0247.871] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd60107c7) returned 0x0
[0247.871] GetFocus () returned 0x8004e
[0247.872] IsAppThemed () returned 0x1
[0247.872] GetThemeAppProperties () returned 0x3
[0247.872] GetThemeAppProperties () returned 0x3
[0247.872] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0247.872] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xd60107c7, x1=0, y1=0, rop=0xcc0020) returned 1
[0247.872] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd60107c7) returned 0x0
[0247.872] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0247.872] SelectObject (hdc=0xd60107c7, h=0x85000f) returned 0x1e0507b9
[0247.872] DeleteDC (hdc=0xd60107c7) returned 1
[0247.872] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0247.872] EndPaint (hWnd=0xb01e2, lpPaint=0x53e2e4) returned 1
[0247.873] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.873] IsWindowUnicode (hWnd=0xc00ea) returned 1
[0247.873] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.873] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.873] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.873] BeginPaint (in: hWnd=0xc00ea, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0247.873] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0247.873] CreateCompatibleDC (hdc=0x10105d6) returned 0xd80107c7
[0247.873] SelectObject (hdc=0xd80107c7, h=0x1e0507b9) returned 0x85000f
[0247.873] GdipCreateFromHDC (hdc=0xd80107c7, graphics=0x53e300) returned 0x0
[0247.873] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0247.873] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0247.874] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0247.874] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.874] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0247.874] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0247.874] LocalFree (hMem=0x89ee40) returned 0x0
[0247.874] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.874] GdipCreateRegion (region=0x53e348) returned 0x0
[0247.874] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.874] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0247.874] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0247.874] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbb90dbd) returned 0x0
[0247.874] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.874] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0247.874] GetCurrentObject (hdc=0xd80107c7, type=0x1) returned 0xb00017
[0247.874] GetCurrentObject (hdc=0xd80107c7, type=0x2) returned 0x900010
[0247.874] GetCurrentObject (hdc=0xd80107c7, type=0x7) returned 0x1e0507b9
[0247.874] GetCurrentObject (hdc=0xd80107c7, type=0x6) returned 0x8a01c2
[0247.874] SaveDC (hdc=0xd80107c7) returned 1
[0247.875] GetNearestColor (hdc=0xd80107c7, color=0xf0f0f0) returned 0xf0f0f0
[0247.875] GetNearestColor (hdc=0xd80107c7, color=0xa0a0a0) returned 0xa0a0a0
[0247.875] GetNearestColor (hdc=0xd80107c7, color=0x696969) returned 0x696969
[0247.875] GetNearestColor (hdc=0xd80107c7, color=0xa0a0a0) returned 0xa0a0a0
[0247.875] GetNearestColor (hdc=0xd80107c7, color=0x0) returned 0x0
[0247.875] GetNearestColor (hdc=0xd80107c7, color=0xffffff) returned 0xffffff
[0247.875] GetNearestColor (hdc=0xd80107c7, color=0xe5e5e5) returned 0xe5e5e5
[0247.875] GetNearestColor (hdc=0xd80107c7, color=0xd7d7d7) returned 0xd7d7d7
[0247.875] GetNearestColor (hdc=0xd80107c7, color=0x0) returned 0x0
[0247.875] RestoreDC (hdc=0xd80107c7, nSavedDC=-1) returned 1
[0247.875] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd80107c7) returned 0x0
[0247.875] IsAppThemed () returned 0x1
[0247.875] GetThemeAppProperties () returned 0x3
[0247.875] GetThemeAppProperties () returned 0x3
[0247.875] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0247.876] SendMessageW (hWnd=0x502ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0247.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0247.876] IsAppThemed () returned 0x1
[0247.876] GetThemeAppProperties () returned 0x3
[0247.876] GetThemeAppProperties () returned 0x3
[0247.876] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x245d620 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0247.876] IsAppThemed () returned 0x1
[0247.876] GetThemeAppProperties () returned 0x3
[0247.876] GetThemeAppProperties () returned 0x3
[0247.876] IsAppThemed () returned 0x1
[0247.876] GetThemeAppProperties () returned 0x3
[0247.876] GetThemeAppProperties () returned 0x3
[0247.877] GetFocus () returned 0x8004e
[0247.877] IsAppThemed () returned 0x1
[0247.877] GetThemeAppProperties () returned 0x3
[0247.877] GetThemeAppProperties () returned 0x3
[0247.877] IsAppThemed () returned 0x1
[0247.877] GetThemeAppProperties () returned 0x3
[0247.877] GetThemeAppProperties () returned 0x3
[0247.877] IsThemePartDefined () returned 0x1
[0247.877] IsAppThemed () returned 0x1
[0247.877] GetThemeAppProperties () returned 0x3
[0247.877] GetThemeAppProperties () returned 0x3
[0247.877] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0247.877] IsAppThemed () returned 0x1
[0247.877] GetThemeAppProperties () returned 0x3
[0247.877] GetThemeAppProperties () returned 0x3
[0247.877] IsAppThemed () returned 0x1
[0247.877] GetThemeAppProperties () returned 0x3
[0247.877] GetThemeAppProperties () returned 0x3
[0247.877] IsThemePartDefined () returned 0x1
[0247.877] GdipCreateRegion (region=0x53e070) returned 0x0
[0247.877] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.878] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0247.878] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.878] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0247.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0247.878] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0247.878] LocalFree (hMem=0x89eac0) returned 0x0
[0247.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0247.878] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0247.878] LocalFree (hMem=0x89eac0) returned 0x0
[0247.878] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.878] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0247.878] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0247.878] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0247.878] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.878] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0247.878] GetCurrentObject (hdc=0xd80107c7, type=0x1) returned 0xb00017
[0247.878] GetCurrentObject (hdc=0xd80107c7, type=0x2) returned 0x900010
[0247.878] GetCurrentObject (hdc=0xd80107c7, type=0x7) returned 0x1e0507b9
[0247.879] GetCurrentObject (hdc=0xd80107c7, type=0x6) returned 0x8a01c2
[0247.879] SaveDC (hdc=0xd80107c7) returned 1
[0247.879] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x840407a1
[0247.879] GetClipRgn (hdc=0xd80107c7, hrgn=0x840407a1) returned 0
[0247.879] SelectClipRgn (hdc=0xd80107c7, hrgn=0xdc04051e) returned 2
[0247.879] DeleteObject (ho=0x840407a1) returned 1
[0247.879] DeleteObject (ho=0xdc04051e) returned 1
[0247.879] OffsetViewportOrgEx (in: hdc=0xd80107c7, x=0, y=0, lppt=0x245dcd0 | out: lppt=0x245dcd0) returned 1
[0247.879] DrawThemeParentBackground () returned 0x0
[0247.879] GetWindowPlacement (in: hWnd=0x502ca, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0247.879] GetClientRect (in: hWnd=0x502ca, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0247.879] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.880] GetSystemMetrics (nIndex=42) returned 0
[0247.880] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0247.880] GetClientRect (in: hWnd=0x502ca, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0247.880] GetCurrentObject (hdc=0xd80107c7, type=0x1) returned 0xb00017
[0247.880] GetCurrentObject (hdc=0xd80107c7, type=0x2) returned 0x900010
[0247.880] GetCurrentObject (hdc=0xd80107c7, type=0x7) returned 0x1e0507b9
[0247.880] GetCurrentObject (hdc=0xd80107c7, type=0x6) returned 0x8a01c2
[0247.880] SaveDC (hdc=0xd80107c7) returned 2
[0247.880] GetNearestColor (hdc=0xd80107c7, color=0xf0f0f0) returned 0xf0f0f0
[0247.880] CreateSolidBrush (color=0xf0f0f0) returned 0x4210078d
[0247.880] FillRect (hDC=0xd80107c7, lprc=0x53dad0, hbr=0x4210078d) returned 1
[0247.880] DeleteObject (ho=0x4210078d) returned 1
[0247.880] RestoreDC (hdc=0xd80107c7, nSavedDC=-1) returned 1
[0247.890] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.890] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.891] GetSystemMetrics (nIndex=42) returned 0
[0247.891] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.891] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0247.891] GetClientRect (in: hWnd=0x502ca, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0247.891] GetCurrentObject (hdc=0xd80107c7, type=0x1) returned 0xb00017
[0247.891] GetCurrentObject (hdc=0xd80107c7, type=0x2) returned 0x900010
[0247.891] GetCurrentObject (hdc=0xd80107c7, type=0x7) returned 0x1e0507b9
[0247.891] GetCurrentObject (hdc=0xd80107c7, type=0x6) returned 0x8a01c2
[0247.891] SaveDC (hdc=0xd80107c7) returned 2
[0247.891] GetNearestColor (hdc=0xd80107c7, color=0xf0f0f0) returned 0xf0f0f0
[0247.891] CreateSolidBrush (color=0xf0f0f0) returned 0x4310078d
[0247.891] FillRect (hDC=0xd80107c7, lprc=0x53da70, hbr=0x4310078d) returned 1
[0247.891] DeleteObject (ho=0x4310078d) returned 1
[0247.892] RestoreDC (hdc=0xd80107c7, nSavedDC=-1) returned 1
[0247.892] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0247.892] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0247.892] GetSystemMetrics (nIndex=42) returned 0
[0247.892] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0247.892] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0247.892] RestoreDC (hdc=0xd80107c7, nSavedDC=-1) returned 1
[0247.892] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd80107c7) returned 0x0
[0247.892] IsAppThemed () returned 0x1
[0247.892] GetThemeAppProperties () returned 0x3
[0247.892] GetThemeAppProperties () returned 0x3
[0247.892] IsAppThemed () returned 0x1
[0247.892] GetThemeAppProperties () returned 0x3
[0247.892] GetThemeAppProperties () returned 0x3
[0247.893] IsThemePartDefined () returned 0x1
[0247.893] GdipCreateRegion (region=0x53dff4) returned 0x0
[0247.893] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.893] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0247.893] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.893] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0247.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0247.893] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0247.893] LocalFree (hMem=0x89ec80) returned 0x0
[0247.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0247.893] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0247.893] LocalFree (hMem=0x89eac0) returned 0x0
[0247.893] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.893] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0247.893] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0247.893] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0247.894] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.894] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0247.894] GetCurrentObject (hdc=0xd80107c7, type=0x1) returned 0xb00017
[0247.894] GetCurrentObject (hdc=0xd80107c7, type=0x2) returned 0x900010
[0247.894] GetCurrentObject (hdc=0xd80107c7, type=0x7) returned 0x1e0507b9
[0247.894] GetCurrentObject (hdc=0xd80107c7, type=0x6) returned 0x8a01c2
[0247.894] SaveDC (hdc=0xd80107c7) returned 1
[0247.894] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdd04051e
[0247.894] GetClipRgn (hdc=0xd80107c7, hrgn=0xdd04051e) returned 0
[0247.894] SelectClipRgn (hdc=0xd80107c7, hrgn=0x860407a1) returned 2
[0247.894] DeleteObject (ho=0xdd04051e) returned 1
[0247.894] DeleteObject (ho=0x860407a1) returned 1
[0247.894] OffsetViewportOrgEx (in: hdc=0xd80107c7, x=0, y=0, lppt=0x245e558 | out: lppt=0x245e558) returned 1
[0247.894] IsAppThemed () returned 0x1
[0247.894] GetThemeAppProperties () returned 0x3
[0247.895] GetThemeAppProperties () returned 0x3
[0247.895] DrawThemeBackground () returned 0x0
[0247.895] RestoreDC (hdc=0xd80107c7, nSavedDC=-1) returned 1
[0247.895] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd80107c7) returned 0x0
[0247.895] GdipCreateRegion (region=0x53dff8) returned 0x0
[0247.895] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.895] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0247.895] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.895] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0247.895] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0247.895] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0247.895] LocalFree (hMem=0x89ee08) returned 0x0
[0247.895] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0247.895] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0247.895] LocalFree (hMem=0x89ee40) returned 0x0
[0247.895] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.896] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0247.896] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0247.896] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0247.896] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.896] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0247.896] GetCurrentObject (hdc=0xd80107c7, type=0x1) returned 0xb00017
[0247.896] GetCurrentObject (hdc=0xd80107c7, type=0x2) returned 0x900010
[0247.896] GetCurrentObject (hdc=0xd80107c7, type=0x7) returned 0x1e0507b9
[0247.896] GetCurrentObject (hdc=0xd80107c7, type=0x6) returned 0x8a01c2
[0247.896] SaveDC (hdc=0xd80107c7) returned 1
[0247.902] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x870407a1
[0247.902] GetClipRgn (hdc=0xd80107c7, hrgn=0x870407a1) returned 0
[0247.902] SelectClipRgn (hdc=0xd80107c7, hrgn=0xde04051e) returned 2
[0247.902] DeleteObject (ho=0x870407a1) returned 1
[0247.902] DeleteObject (ho=0xde04051e) returned 1
[0247.902] OffsetViewportOrgEx (in: hdc=0xd80107c7, x=0, y=0, lppt=0x245e82c | out: lppt=0x245e82c) returned 1
[0247.902] IsAppThemed () returned 0x1
[0247.902] GetThemeAppProperties () returned 0x3
[0247.902] GetThemeAppProperties () returned 0x3
[0247.902] GetThemeBackgroundContentRect () returned 0x0
[0247.902] RestoreDC (hdc=0xd80107c7, nSavedDC=-1) returned 1
[0247.903] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd80107c7) returned 0x0
[0247.903] IsAppThemed () returned 0x1
[0247.903] GetThemeAppProperties () returned 0x3
[0247.903] GetThemeAppProperties () returned 0x3
[0247.903] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0247.903] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0247.903] GetCurrentObject (hdc=0xd80107c7, type=0x1) returned 0xb00017
[0247.903] GetCurrentObject (hdc=0xd80107c7, type=0x2) returned 0x900010
[0247.903] GetCurrentObject (hdc=0xd80107c7, type=0x7) returned 0x1e0507b9
[0247.903] GetCurrentObject (hdc=0xd80107c7, type=0x6) returned 0x8a01c2
[0247.903] SaveDC (hdc=0xd80107c7) returned 1
[0247.903] GetTextAlign (hdc=0xd80107c7) returned 0x0
[0247.903] GetTextColor (hdc=0xd80107c7) returned 0x0
[0247.903] GetCurrentObject (hdc=0xd80107c7, type=0x6) returned 0x8a01c2
[0247.904] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0247.904] SelectObject (hdc=0xd80107c7, h=0x730a066d) returned 0x8a01c2
[0247.904] GetBkMode (hdc=0xd80107c7) returned 2
[0247.904] SetBkMode (hdc=0xd80107c7, mode=1) returned 2
[0247.904] DrawTextExW (in: hdc=0xd80107c7, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x245ebcc | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0247.904] DrawTextExW (in: hdc=0xd80107c7, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x245ebcc | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0247.905] RestoreDC (hdc=0xd80107c7, nSavedDC=-1) returned 1
[0247.905] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd80107c7) returned 0x0
[0247.905] GetFocus () returned 0x8004e
[0247.905] IsAppThemed () returned 0x1
[0247.905] GetThemeAppProperties () returned 0x3
[0247.905] GetThemeAppProperties () returned 0x3
[0247.905] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0247.905] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0xd80107c7, x1=0, y1=0, rop=0xcc0020) returned 1
[0247.905] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd80107c7) returned 0x0
[0247.905] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0247.905] SelectObject (hdc=0xd80107c7, h=0x85000f) returned 0x1e0507b9
[0247.905] DeleteDC (hdc=0xd80107c7) returned 1
[0247.905] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0247.906] EndPaint (hWnd=0xc00ea, lpPaint=0x53e2e4) returned 1
[0247.906] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.906] IsWindowUnicode (hWnd=0x202c6) returned 1
[0247.906] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.906] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.906] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.906] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0247.906] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0247.906] CreateCompatibleDC (hdc=0xf0105ee) returned 0xda0107c7
[0247.907] SelectObject (hdc=0xda0107c7, h=0x1e0507b9) returned 0x85000f
[0247.907] GdipCreateFromHDC (hdc=0xda0107c7, graphics=0x53e300) returned 0x0
[0247.907] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0247.907] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0247.907] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0247.907] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.907] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0247.907] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0247.907] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0247.907] LocalFree (hMem=0x89ec80) returned 0x0
[0247.907] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.907] GdipCreateRegion (region=0x53e348) returned 0x0
[0247.907] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.907] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0247.907] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0247.908] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbb70dbd) returned 0x0
[0247.908] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.908] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0247.908] GetCurrentObject (hdc=0xda0107c7, type=0x1) returned 0xb00017
[0247.908] GetCurrentObject (hdc=0xda0107c7, type=0x2) returned 0x900010
[0247.908] GetCurrentObject (hdc=0xda0107c7, type=0x7) returned 0x1e0507b9
[0247.908] GetCurrentObject (hdc=0xda0107c7, type=0x6) returned 0x8a01c2
[0247.908] SaveDC (hdc=0xda0107c7) returned 1
[0247.908] GetNearestColor (hdc=0xda0107c7, color=0xff) returned 0xff
[0247.908] GetNearestColor (hdc=0xda0107c7, color=0x55) returned 0x55
[0247.908] GetNearestColor (hdc=0xda0107c7, color=0x0) returned 0x0
[0247.908] GetNearestColor (hdc=0xda0107c7, color=0x55) returned 0x55
[0247.908] GetNearestColor (hdc=0xda0107c7, color=0x0) returned 0x0
[0247.908] GetNearestColor (hdc=0xda0107c7, color=0x8080ff) returned 0x8080ff
[0247.909] GetNearestColor (hdc=0xda0107c7, color=0x7373e5) returned 0x7373e5
[0247.909] GetNearestColor (hdc=0xda0107c7, color=0xe5) returned 0xe5
[0247.909] GetNearestColor (hdc=0xda0107c7, color=0x0) returned 0x0
[0247.909] RestoreDC (hdc=0xda0107c7, nSavedDC=-1) returned 1
[0247.909] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107c7) returned 0x0
[0247.909] IsAppThemed () returned 0x1
[0247.909] GetThemeAppProperties () returned 0x3
[0247.909] GetThemeAppProperties () returned 0x3
[0247.909] IsAppThemed () returned 0x1
[0247.909] GetThemeAppProperties () returned 0x3
[0247.909] GetThemeAppProperties () returned 0x3
[0247.909] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0247.909] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x245f3b0 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0247.910] IsAppThemed () returned 0x1
[0247.910] GetThemeAppProperties () returned 0x3
[0247.910] GetThemeAppProperties () returned 0x3
[0247.910] IsAppThemed () returned 0x1
[0247.910] GetThemeAppProperties () returned 0x3
[0247.910] GetThemeAppProperties () returned 0x3
[0247.910] GetFocus () returned 0x8004e
[0247.910] IsAppThemed () returned 0x1
[0247.910] GetThemeAppProperties () returned 0x3
[0247.910] GetThemeAppProperties () returned 0x3
[0247.910] IsAppThemed () returned 0x1
[0247.910] GetThemeAppProperties () returned 0x3
[0247.910] GetThemeAppProperties () returned 0x3
[0247.910] IsThemePartDefined () returned 0x1
[0247.910] IsAppThemed () returned 0x1
[0247.910] GetThemeAppProperties () returned 0x3
[0247.911] GetThemeAppProperties () returned 0x3
[0247.911] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0247.911] IsAppThemed () returned 0x1
[0247.911] GetThemeAppProperties () returned 0x3
[0247.911] GetThemeAppProperties () returned 0x3
[0247.911] IsAppThemed () returned 0x1
[0247.911] GetThemeAppProperties () returned 0x3
[0247.911] GetThemeAppProperties () returned 0x3
[0247.911] IsThemePartDefined () returned 0x1
[0247.911] GdipCreateRegion (region=0x53e070) returned 0x0
[0247.911] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.911] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0247.911] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.911] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0247.911] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0247.911] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0247.911] LocalFree (hMem=0x89eac0) returned 0x0
[0247.911] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0247.911] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0247.911] LocalFree (hMem=0x89ee08) returned 0x0
[0247.911] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.911] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0247.912] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0247.912] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0247.912] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.912] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0247.917] GetCurrentObject (hdc=0xda0107c7, type=0x1) returned 0xb00017
[0247.917] GetCurrentObject (hdc=0xda0107c7, type=0x2) returned 0x900010
[0247.917] GetCurrentObject (hdc=0xda0107c7, type=0x7) returned 0x1e0507b9
[0247.918] GetCurrentObject (hdc=0xda0107c7, type=0x6) returned 0x8a01c2
[0247.918] SaveDC (hdc=0xda0107c7) returned 1
[0247.918] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdf04051e
[0247.918] GetClipRgn (hdc=0xda0107c7, hrgn=0xdf04051e) returned 0
[0247.918] SelectClipRgn (hdc=0xda0107c7, hrgn=0x8b0407a1) returned 2
[0247.918] DeleteObject (ho=0xdf04051e) returned 1
[0247.918] DeleteObject (ho=0x8b0407a1) returned 1
[0247.918] OffsetViewportOrgEx (in: hdc=0xda0107c7, x=0, y=0, lppt=0x245fa60 | out: lppt=0x245fa60) returned 1
[0247.918] DrawThemeParentBackground () returned 0x0
[0247.918] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0247.918] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0247.918] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0247.918] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0247.918] GetSystemMetrics (nIndex=42) returned 0
[0247.918] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0247.918] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0247.919] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0247.919] GetCurrentObject (hdc=0xda0107c7, type=0x1) returned 0xb00017
[0247.919] GetCurrentObject (hdc=0xda0107c7, type=0x2) returned 0x900010
[0247.919] GetCurrentObject (hdc=0xda0107c7, type=0x7) returned 0x1e0507b9
[0247.919] GetCurrentObject (hdc=0xda0107c7, type=0x6) returned 0x8a01c2
[0247.919] SaveDC (hdc=0xda0107c7) returned 2
[0247.919] GetNearestColor (hdc=0xda0107c7, color=0xff) returned 0xff
[0247.919] CreateSolidBrush (color=0xff) returned 0x4410078d
[0247.919] FillRect (hDC=0xda0107c7, lprc=0x53dad0, hbr=0x4410078d) returned 1
[0247.919] DeleteObject (ho=0x4410078d) returned 1
[0247.919] RestoreDC (hdc=0xda0107c7, nSavedDC=-1) returned 1
[0247.919] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0247.919] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0247.919] GetSystemMetrics (nIndex=42) returned 0
[0247.919] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0247.919] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0247.919] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0247.919] GetCurrentObject (hdc=0xda0107c7, type=0x1) returned 0xb00017
[0247.920] GetCurrentObject (hdc=0xda0107c7, type=0x2) returned 0x900010
[0247.920] GetCurrentObject (hdc=0xda0107c7, type=0x7) returned 0x1e0507b9
[0247.920] GetCurrentObject (hdc=0xda0107c7, type=0x6) returned 0x8a01c2
[0247.920] SaveDC (hdc=0xda0107c7) returned 2
[0247.920] GetNearestColor (hdc=0xda0107c7, color=0xff) returned 0xff
[0247.920] CreateSolidBrush (color=0xff) returned 0x4510078d
[0247.920] FillRect (hDC=0xda0107c7, lprc=0x53da70, hbr=0x4510078d) returned 1
[0247.920] DeleteObject (ho=0x4510078d) returned 1
[0247.920] RestoreDC (hdc=0xda0107c7, nSavedDC=-1) returned 1
[0247.920] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0247.920] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0247.920] GetSystemMetrics (nIndex=42) returned 0
[0247.920] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0247.920] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0247.920] RestoreDC (hdc=0xda0107c7, nSavedDC=-1) returned 1
[0247.920] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107c7) returned 0x0
[0247.920] IsAppThemed () returned 0x1
[0247.921] GetThemeAppProperties () returned 0x3
[0247.921] GetThemeAppProperties () returned 0x3
[0247.921] IsAppThemed () returned 0x1
[0247.921] GetThemeAppProperties () returned 0x3
[0247.921] GetThemeAppProperties () returned 0x3
[0247.921] IsThemePartDefined () returned 0x1
[0247.921] GdipCreateRegion (region=0x53dff4) returned 0x0
[0247.921] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.921] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0247.921] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0247.921] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0247.921] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0247.921] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0247.921] LocalFree (hMem=0x89eac0) returned 0x0
[0247.921] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0247.921] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0247.921] LocalFree (hMem=0x89ec80) returned 0x0
[0247.921] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0247.921] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0247.921] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0247.921] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0247.921] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.921] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0247.921] GetCurrentObject (hdc=0xda0107c7, type=0x1) returned 0xb00017
[0247.922] GetCurrentObject (hdc=0xda0107c7, type=0x2) returned 0x900010
[0247.922] GetCurrentObject (hdc=0xda0107c7, type=0x7) returned 0x1e0507b9
[0247.922] GetCurrentObject (hdc=0xda0107c7, type=0x6) returned 0x8a01c2
[0247.922] SaveDC (hdc=0xda0107c7) returned 1
[0247.922] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8c0407a1
[0247.922] GetClipRgn (hdc=0xda0107c7, hrgn=0x8c0407a1) returned 0
[0247.922] SelectClipRgn (hdc=0xda0107c7, hrgn=0xe104051e) returned 2
[0247.922] DeleteObject (ho=0x8c0407a1) returned 1
[0247.923] DeleteObject (ho=0xe104051e) returned 1
[0247.923] OffsetViewportOrgEx (in: hdc=0xda0107c7, x=0, y=0, lppt=0x24602c4 | out: lppt=0x24602c4) returned 1
[0247.923] IsAppThemed () returned 0x1
[0247.923] GetThemeAppProperties () returned 0x3
[0247.923] GetThemeAppProperties () returned 0x3
[0247.923] DrawThemeBackground () returned 0x0
[0247.923] RestoreDC (hdc=0xda0107c7, nSavedDC=-1) returned 1
[0247.923] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107c7) returned 0x0
[0247.924] GdipCreateRegion (region=0x53dff8) returned 0x0
[0247.924] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0247.924] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0247.924] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0247.924] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0247.924] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0247.924] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0247.924] LocalFree (hMem=0x89eac0) returned 0x0
[0247.924] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0247.924] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0247.924] LocalFree (hMem=0x89ec80) returned 0x0
[0247.924] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0247.924] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0247.924] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0247.924] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0247.924] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0247.924] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0247.924] GetCurrentObject (hdc=0xda0107c7, type=0x1) returned 0xb00017
[0247.924] GetCurrentObject (hdc=0xda0107c7, type=0x2) returned 0x900010
[0247.924] GetCurrentObject (hdc=0xda0107c7, type=0x7) returned 0x1e0507b9
[0247.924] GetCurrentObject (hdc=0xda0107c7, type=0x6) returned 0x8a01c2
[0247.925] SaveDC (hdc=0xda0107c7) returned 1
[0247.925] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe204051e
[0247.925] GetClipRgn (hdc=0xda0107c7, hrgn=0xe204051e) returned 0
[0247.925] SelectClipRgn (hdc=0xda0107c7, hrgn=0x8d0407a1) returned 2
[0247.925] DeleteObject (ho=0xe204051e) returned 1
[0247.925] DeleteObject (ho=0x8d0407a1) returned 1
[0247.925] OffsetViewportOrgEx (in: hdc=0xda0107c7, x=0, y=0, lppt=0x2460598 | out: lppt=0x2460598) returned 1
[0247.925] IsAppThemed () returned 0x1
[0247.925] GetThemeAppProperties () returned 0x3
[0247.925] GetThemeAppProperties () returned 0x3
[0247.925] GetThemeBackgroundContentRect () returned 0x0
[0247.925] RestoreDC (hdc=0xda0107c7, nSavedDC=-1) returned 1
[0247.925] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107c7) returned 0x0
[0247.925] IsAppThemed () returned 0x1
[0247.925] GetThemeAppProperties () returned 0x3
[0247.925] GetThemeAppProperties () returned 0x3
[0247.925] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0247.926] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0247.926] GetCurrentObject (hdc=0xda0107c7, type=0x1) returned 0xb00017
[0247.926] GetCurrentObject (hdc=0xda0107c7, type=0x2) returned 0x900010
[0247.926] GetCurrentObject (hdc=0xda0107c7, type=0x7) returned 0x1e0507b9
[0247.926] GetCurrentObject (hdc=0xda0107c7, type=0x6) returned 0x8a01c2
[0247.926] SaveDC (hdc=0xda0107c7) returned 1
[0247.926] GetTextAlign (hdc=0xda0107c7) returned 0x0
[0247.926] GetTextColor (hdc=0xda0107c7) returned 0x0
[0247.926] GetCurrentObject (hdc=0xda0107c7, type=0x6) returned 0x8a01c2
[0247.926] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0247.926] SelectObject (hdc=0xda0107c7, h=0x450a0799) returned 0x8a01c2
[0247.926] GetBkMode (hdc=0xda0107c7) returned 2
[0247.926] SetBkMode (hdc=0xda0107c7, mode=1) returned 2
[0247.926] DrawTextExW (in: hdc=0xda0107c7, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x2460938 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0247.926] DrawTextExW (in: hdc=0xda0107c7, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x2460938 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0247.927] RestoreDC (hdc=0xda0107c7, nSavedDC=-1) returned 1
[0247.927] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107c7) returned 0x0
[0247.927] GetFocus () returned 0x8004e
[0247.927] IsAppThemed () returned 0x1
[0247.927] GetThemeAppProperties () returned 0x3
[0247.927] GetThemeAppProperties () returned 0x3
[0247.927] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0247.927] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xda0107c7, x1=0, y1=0, rop=0xcc0020) returned 1
[0247.927] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107c7) returned 0x0
[0247.927] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0247.927] SelectObject (hdc=0xda0107c7, h=0x85000f) returned 0x1e0507b9
[0247.927] DeleteDC (hdc=0xda0107c7) returned 1
[0247.928] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0247.928] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0247.928] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.928] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.928] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.928] DispatchMessageA (lpMsg=0x53e8a0) returned 0x7ebf
[0247.929] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.929] IsWindowUnicode (hWnd=0xb01e2) returned 1
[0247.929] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.929] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.929] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.929] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.929] IsWindowUnicode (hWnd=0xb01e2) returned 1
[0247.929] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.929] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.929] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.929] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x2a1, wParam=0x0, lParam=0xb0024) returned 0x0
[0247.929] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0247.929] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0247.929] WaitMessage () returned 1
[0247.952] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.952] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.952] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.952] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.952] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.953] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0247.953] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0247.953] WaitMessage () returned 1
[0247.954] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.954] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.954] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.954] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.954] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.955] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.956] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.956] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.956] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.956] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.956] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.956] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.956] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.956] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.956] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.956] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0247.957] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0247.957] WaitMessage () returned 1
[0247.958] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.958] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.958] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.958] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.958] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.963] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.964] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.964] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.964] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.964] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.964] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.964] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.964] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.964] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.964] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.964] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0247.965] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0247.965] WaitMessage () returned 1
[0247.967] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.967] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.967] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.967] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.967] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.969] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.969] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.969] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.969] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.970] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.970] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.970] IsWindowUnicode (hWnd=0x102dc) returned 1
[0247.970] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0247.970] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0247.970] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0247.970] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0247.971] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0247.971] WaitMessage () returned 1
[0248.044] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0248.044] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x84, wParam=0x0, lParam=0x1940365) returned 0x1
[0248.044] IsWindowUnicode (hWnd=0xb01e2) returned 1
[0248.044] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0248.044] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x84, wParam=0x0, lParam=0x1940365) returned 0x1
[0248.044] GetDlgItem (hDlg=0x502ca, nIDDlgItem=0) returned 0x0
[0248.044] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x210, wParam=0x201, lParam=0x170146) returned 0x0
[0248.045] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x21, wParam=0x502ca, lParam=0x2010001) returned 0x1
[0248.045] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x21, wParam=0x502ca, lParam=0x2010001) returned 0x1
[0248.045] SetCursor (hCursor=0x10003) returned 0x10003
[0248.045] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0248.045] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0248.045] GetKeyState (nVirtKey=1) returned -127
[0248.045] GetKeyState (nVirtKey=2) returned 0
[0248.045] GetKeyState (nVirtKey=4) returned 0
[0248.045] GetKeyState (nVirtKey=5) returned 0
[0248.045] GetKeyState (nVirtKey=6) returned 0
[0248.045] IsWindowVisible (hWnd=0xb01e2) returned 1
[0248.045] IsWindowEnabled (hWnd=0xb01e2) returned 1
[0248.045] SetFocus (hWnd=0xb01e2) returned 0x8004e
[0248.046] GetFocus () returned 0xb01e2
[0248.046] IsChild (hWndParent=0x502ca, hWnd=0xb01e2) returned 1
[0248.046] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x8, wParam=0xb01e2, lParam=0x0) returned 0x1
[0248.046] SendMessageW (hWnd=0x8004e, Msg=0x2111, wParam=0x200004e, lParam=0x8004e) returned 0x0
[0248.047] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0248.049] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0248.050] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0248.050] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0248.050] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0248.050] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0248.056] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0248.056] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x7, wParam=0x8004e, lParam=0x0) returned 0x0
[0248.057] GetStockObject (i=5) returned 0x900015
[0248.057] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0248.057] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0xd, wParam=0x3, lParam=0x89e6e8) returned 0x2
[0248.057] GetDlgItem (hDlg=0x502ca, nIDDlgItem=721378) returned 0xb01e2
[0248.057] SendMessageW (hWnd=0xb01e2, Msg=0x202b, wParam=0xb01e2, lParam=0x53de74) returned 0x0
[0248.057] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x202b, wParam=0xb01e2, lParam=0x53de74) returned 0x0
[0248.057] InvalidateRect (hWnd=0xb01e2, lpRect=0x0, bErase=0) returned 1
[0248.059] GetFocus () returned 0xb01e2
[0248.059] GetFocus () returned 0xb01e2
[0248.059] GetFocus () returned 0xb01e2
[0248.059] GetKeyState (nVirtKey=1) returned -127
[0248.059] GetKeyState (nVirtKey=2) returned 0
[0248.059] GetKeyState (nVirtKey=4) returned 0
[0248.059] GetKeyState (nVirtKey=5) returned 0
[0248.059] GetKeyState (nVirtKey=6) returned 0
[0248.059] GetCapture () returned 0x0
[0248.059] SetCapture (hWnd=0xb01e2) returned 0x0
[0248.059] GetKeyState (nVirtKey=1) returned -127
[0248.059] GetKeyState (nVirtKey=2) returned 0
[0248.059] GetKeyState (nVirtKey=4) returned 0
[0248.059] GetKeyState (nVirtKey=5) returned 0
[0248.059] GetKeyState (nVirtKey=6) returned 0
[0248.060] NotifyWinEvent (event=0x800a, hwnd=0xb01e2, idObject=-4, idChild=0)
[0248.060] InvalidateRect (hWnd=0xb01e2, lpRect=0x53e4c8, bErase=0) returned 1
[0248.060] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0248.060] IsWindowUnicode (hWnd=0xb01e2) returned 1
[0248.060] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0248.060] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0248.060] DispatchMessageW (lpMsg=0x53e8a0)
[0248.060] MapWindowPoints (in: hWndFrom=0xb01e2, hWndTo=0x0, lpPoints=0x2460b88, cPoints=0x1 | out: lpPoints=0x2460b88) returned 25756481
[0248.060] NotifyWinEvent (event=0x800a, hwnd=0xb01e2, idObject=-4, idChild=0)
[0248.060] InvalidateRect (hWnd=0xb01e2, lpRect=0x53e468, bErase=0) returned 1
[0248.060] UpdateWindow (hWnd=0xb01e2)
[0248.060] BeginPaint (in: hWnd=0xb01e2, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0xf0105ee
[0248.061] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0248.061] CreateCompatibleDC (hdc=0xf0105ee) returned 0x9f0107c3
[0248.061] SelectObject (hdc=0x9f0107c3, h=0x1e0507b9) returned 0x85000f
[0248.061] GdipCreateFromHDC (hdc=0x9f0107c3, graphics=0x53df98) returned 0x0
[0248.061] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0248.061] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0248.061] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0248.061] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0248.061] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0248.061] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0248.061] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0248.061] LocalFree (hMem=0x89ea88) returned 0x0
[0248.062] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0248.062] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0248.062] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0248.062] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0248.062] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0248.062] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbb50dbd) returned 0x0
[0248.062] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0248.062] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0248.062] GetCurrentObject (hdc=0x9f0107c3, type=0x1) returned 0xb00017
[0248.062] GetCurrentObject (hdc=0x9f0107c3, type=0x2) returned 0x900010
[0248.062] GetCurrentObject (hdc=0x9f0107c3, type=0x7) returned 0x1e0507b9
[0248.062] GetCurrentObject (hdc=0x9f0107c3, type=0x6) returned 0x8a01c2
[0248.062] SaveDC (hdc=0x9f0107c3) returned 1
[0248.062] GetNearestColor (hdc=0x9f0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0248.062] GetNearestColor (hdc=0x9f0107c3, color=0xa0a0a0) returned 0xa0a0a0
[0248.063] GetNearestColor (hdc=0x9f0107c3, color=0x696969) returned 0x696969
[0248.063] GetNearestColor (hdc=0x9f0107c3, color=0xa0a0a0) returned 0xa0a0a0
[0248.063] GetNearestColor (hdc=0x9f0107c3, color=0x0) returned 0x0
[0248.063] GetNearestColor (hdc=0x9f0107c3, color=0xffffff) returned 0xffffff
[0248.063] GetNearestColor (hdc=0x9f0107c3, color=0xe5e5e5) returned 0xe5e5e5
[0248.063] GetNearestColor (hdc=0x9f0107c3, color=0xd7d7d7) returned 0xd7d7d7
[0248.063] GetNearestColor (hdc=0x9f0107c3, color=0x0) returned 0x0
[0248.063] RestoreDC (hdc=0x9f0107c3, nSavedDC=-1) returned 1
[0248.063] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9f0107c3) returned 0x0
[0248.063] IsAppThemed () returned 0x1
[0248.063] GetThemeAppProperties () returned 0x3
[0248.063] GetThemeAppProperties () returned 0x3
[0248.063] IsAppThemed () returned 0x1
[0248.063] GetThemeAppProperties () returned 0x3
[0248.064] GetThemeAppProperties () returned 0x3
[0248.064] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0248.064] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x24612fc | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0248.064] IsAppThemed () returned 0x1
[0248.064] GetThemeAppProperties () returned 0x3
[0248.064] GetThemeAppProperties () returned 0x3
[0248.064] IsAppThemed () returned 0x1
[0248.064] GetThemeAppProperties () returned 0x3
[0248.064] GetThemeAppProperties () returned 0x3
[0248.064] IsAppThemed () returned 0x1
[0248.064] GetThemeAppProperties () returned 0x3
[0248.064] GetThemeAppProperties () returned 0x3
[0248.064] IsAppThemed () returned 0x1
[0248.064] GetThemeAppProperties () returned 0x3
[0248.064] GetThemeAppProperties () returned 0x3
[0248.065] IsThemePartDefined () returned 0x1
[0248.065] IsAppThemed () returned 0x1
[0248.065] GetThemeAppProperties () returned 0x3
[0248.065] GetThemeAppProperties () returned 0x3
[0248.065] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0248.065] IsAppThemed () returned 0x1
[0248.065] GetThemeAppProperties () returned 0x3
[0248.065] GetThemeAppProperties () returned 0x3
[0248.065] IsAppThemed () returned 0x1
[0248.065] GetThemeAppProperties () returned 0x3
[0248.065] GetThemeAppProperties () returned 0x3
[0248.065] IsThemePartDefined () returned 0x1
[0248.065] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0248.065] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0248.065] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0248.065] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0248.065] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0248.065] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0248.065] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0248.065] LocalFree (hMem=0x89ea88) returned 0x0
[0248.065] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0248.065] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0248.066] LocalFree (hMem=0x89eac0) returned 0x0
[0248.066] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0248.066] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0248.066] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0248.066] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0248.066] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0248.066] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0248.066] GetCurrentObject (hdc=0x9f0107c3, type=0x1) returned 0xb00017
[0248.066] GetCurrentObject (hdc=0x9f0107c3, type=0x2) returned 0x900010
[0248.066] GetCurrentObject (hdc=0x9f0107c3, type=0x7) returned 0x1e0507b9
[0248.066] GetCurrentObject (hdc=0x9f0107c3, type=0x6) returned 0x8a01c2
[0248.066] SaveDC (hdc=0x9f0107c3) returned 1
[0248.066] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8e0407a1
[0248.066] GetClipRgn (hdc=0x9f0107c3, hrgn=0x8e0407a1) returned 0
[0248.066] SelectClipRgn (hdc=0x9f0107c3, hrgn=0xe604051e) returned 2
[0248.066] DeleteObject (ho=0x8e0407a1) returned 1
[0248.066] DeleteObject (ho=0xe604051e) returned 1
[0248.067] OffsetViewportOrgEx (in: hdc=0x9f0107c3, x=0, y=0, lppt=0x24619ac | out: lppt=0x24619ac) returned 1
[0248.067] DrawThemeParentBackground () returned 0x0
[0248.067] GetWindowPlacement (in: hWnd=0x502ca, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0248.067] GetClientRect (in: hWnd=0x502ca, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0248.067] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0248.067] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0248.067] GetSystemMetrics (nIndex=42) returned 0
[0248.067] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0248.067] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0248.067] GetClientRect (in: hWnd=0x502ca, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0248.067] GetCurrentObject (hdc=0x9f0107c3, type=0x1) returned 0xb00017
[0248.067] GetCurrentObject (hdc=0x9f0107c3, type=0x2) returned 0x900010
[0248.067] GetCurrentObject (hdc=0x9f0107c3, type=0x7) returned 0x1e0507b9
[0248.067] GetCurrentObject (hdc=0x9f0107c3, type=0x6) returned 0x8a01c2
[0248.067] SaveDC (hdc=0x9f0107c3) returned 2
[0248.068] GetNearestColor (hdc=0x9f0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0248.068] CreateSolidBrush (color=0xf0f0f0) returned 0x4610078d
[0248.068] FillRect (hDC=0x9f0107c3, lprc=0x53d760, hbr=0x4610078d) returned 1
[0248.068] DeleteObject (ho=0x4610078d) returned 1
[0248.068] RestoreDC (hdc=0x9f0107c3, nSavedDC=-1) returned 1
[0248.068] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0248.071] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0248.071] GetSystemMetrics (nIndex=42) returned 0
[0248.071] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0248.071] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0248.071] GetClientRect (in: hWnd=0x502ca, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0248.071] GetCurrentObject (hdc=0x9f0107c3, type=0x1) returned 0xb00017
[0248.071] GetCurrentObject (hdc=0x9f0107c3, type=0x2) returned 0x900010
[0248.071] GetCurrentObject (hdc=0x9f0107c3, type=0x7) returned 0x1e0507b9
[0248.071] GetCurrentObject (hdc=0x9f0107c3, type=0x6) returned 0x8a01c2
[0248.071] SaveDC (hdc=0x9f0107c3) returned 2
[0248.072] GetNearestColor (hdc=0x9f0107c3, color=0xf0f0f0) returned 0xf0f0f0
[0248.072] CreateSolidBrush (color=0xf0f0f0) returned 0x4710078d
[0248.072] FillRect (hDC=0x9f0107c3, lprc=0x53d700, hbr=0x4710078d) returned 1
[0248.072] DeleteObject (ho=0x4710078d) returned 1
[0248.072] RestoreDC (hdc=0x9f0107c3, nSavedDC=-1) returned 1
[0248.072] GetWindowTextLengthW (hWnd=0x502ca) returned 10
[0248.072] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0248.072] GetSystemMetrics (nIndex=42) returned 0
[0248.072] GetWindowTextW (in: hWnd=0x502ca, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0248.072] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0248.072] RestoreDC (hdc=0x9f0107c3, nSavedDC=-1) returned 1
[0248.072] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9f0107c3) returned 0x0
[0248.072] IsAppThemed () returned 0x1
[0248.072] GetThemeAppProperties () returned 0x3
[0248.072] GetThemeAppProperties () returned 0x3
[0248.073] IsAppThemed () returned 0x1
[0248.073] GetThemeAppProperties () returned 0x3
[0248.073] GetThemeAppProperties () returned 0x3
[0248.073] IsThemePartDefined () returned 0x1
[0248.073] GdipCreateRegion (region=0x53dc80) returned 0x0
[0248.073] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0248.073] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0248.073] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0248.073] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0248.073] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0248.073] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0248.073] LocalFree (hMem=0x89ec80) returned 0x0
[0248.073] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0248.073] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0248.073] LocalFree (hMem=0x89ec80) returned 0x0
[0248.073] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0248.073] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0248.073] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0248.073] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0248.073] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0248.074] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0248.074] GetCurrentObject (hdc=0x9f0107c3, type=0x1) returned 0xb00017
[0248.074] GetCurrentObject (hdc=0x9f0107c3, type=0x2) returned 0x900010
[0248.074] GetCurrentObject (hdc=0x9f0107c3, type=0x7) returned 0x1e0507b9
[0248.074] GetCurrentObject (hdc=0x9f0107c3, type=0x6) returned 0x8a01c2
[0248.074] SaveDC (hdc=0x9f0107c3) returned 1
[0248.074] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe704051e
[0248.074] GetClipRgn (hdc=0x9f0107c3, hrgn=0xe704051e) returned 0
[0248.074] SelectClipRgn (hdc=0x9f0107c3, hrgn=0x900407a1) returned 2
[0248.074] DeleteObject (ho=0xe704051e) returned 1
[0248.074] DeleteObject (ho=0x900407a1) returned 1
[0248.074] OffsetViewportOrgEx (in: hdc=0x9f0107c3, x=0, y=0, lppt=0x2462234 | out: lppt=0x2462234) returned 1
[0248.074] IsAppThemed () returned 0x1
[0248.074] GetThemeAppProperties () returned 0x3
[0248.074] GetThemeAppProperties () returned 0x3
[0248.074] DrawThemeBackground () returned 0x0
[0248.075] RestoreDC (hdc=0x9f0107c3, nSavedDC=-1) returned 1
[0248.075] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9f0107c3) returned 0x0
[0248.075] GdipCreateRegion (region=0x53dc84) returned 0x0
[0248.075] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0248.075] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0248.075] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0248.075] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0248.075] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0248.075] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0248.075] LocalFree (hMem=0x89ee08) returned 0x0
[0248.075] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0248.075] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0248.075] LocalFree (hMem=0x89ee08) returned 0x0
[0248.075] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0248.075] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0248.075] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0248.075] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0248.075] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0248.075] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0248.076] GetCurrentObject (hdc=0x9f0107c3, type=0x1) returned 0xb00017
[0248.076] GetCurrentObject (hdc=0x9f0107c3, type=0x2) returned 0x900010
[0248.076] GetCurrentObject (hdc=0x9f0107c3, type=0x7) returned 0x1e0507b9
[0248.076] GetCurrentObject (hdc=0x9f0107c3, type=0x6) returned 0x8a01c2
[0248.076] SaveDC (hdc=0x9f0107c3) returned 1
[0248.076] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x910407a1
[0248.076] GetClipRgn (hdc=0x9f0107c3, hrgn=0x910407a1) returned 0
[0248.076] SelectClipRgn (hdc=0x9f0107c3, hrgn=0xe804051e) returned 2
[0248.076] DeleteObject (ho=0x910407a1) returned 1
[0248.076] DeleteObject (ho=0xe804051e) returned 1
[0248.076] OffsetViewportOrgEx (in: hdc=0x9f0107c3, x=0, y=0, lppt=0x2462508 | out: lppt=0x2462508) returned 1
[0248.076] IsAppThemed () returned 0x1
[0248.076] GetThemeAppProperties () returned 0x3
[0248.076] GetThemeAppProperties () returned 0x3
[0248.076] GetThemeBackgroundContentRect () returned 0x0
[0248.076] RestoreDC (hdc=0x9f0107c3, nSavedDC=-1) returned 1
[0248.076] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9f0107c3) returned 0x0
[0248.077] IsAppThemed () returned 0x1
[0248.077] GetThemeAppProperties () returned 0x3
[0248.077] GetThemeAppProperties () returned 0x3
[0248.077] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0248.077] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0248.077] GetCurrentObject (hdc=0x9f0107c3, type=0x1) returned 0xb00017
[0248.077] GetCurrentObject (hdc=0x9f0107c3, type=0x2) returned 0x900010
[0248.077] GetCurrentObject (hdc=0x9f0107c3, type=0x7) returned 0x1e0507b9
[0248.077] GetCurrentObject (hdc=0x9f0107c3, type=0x6) returned 0x8a01c2
[0248.077] SaveDC (hdc=0x9f0107c3) returned 1
[0248.077] GetTextAlign (hdc=0x9f0107c3) returned 0x0
[0248.077] GetTextColor (hdc=0x9f0107c3) returned 0x0
[0248.077] GetCurrentObject (hdc=0x9f0107c3, type=0x6) returned 0x8a01c2
[0248.077] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0248.077] SelectObject (hdc=0x9f0107c3, h=0x730a066d) returned 0x8a01c2
[0248.078] GetBkMode (hdc=0x9f0107c3) returned 2
[0248.078] SetBkMode (hdc=0x9f0107c3, mode=1) returned 2
[0248.078] DrawTextExW (in: hdc=0x9f0107c3, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x24628a8 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0248.078] DrawTextExW (in: hdc=0x9f0107c3, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x24628a8 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0248.078] RestoreDC (hdc=0x9f0107c3, nSavedDC=-1) returned 1
[0248.078] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9f0107c3) returned 0x0
[0248.078] GetFocus () returned 0xb01e2
[0248.078] IsAppThemed () returned 0x1
[0248.079] GetThemeAppProperties () returned 0x3
[0248.079] GetThemeAppProperties () returned 0x3
[0248.079] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0248.079] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x9f0107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0248.079] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9f0107c3) returned 0x0
[0248.079] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0248.079] SelectObject (hdc=0x9f0107c3, h=0x85000f) returned 0x1e0507b9
[0248.079] DeleteDC (hdc=0x9f0107c3) returned 1
[0248.079] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0248.079] EndPaint (hWnd=0xb01e2, lpPaint=0x53df7c) returned 1
[0248.080] WindowFromPoint (Point=0x365)
[0248.080] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x84, wParam=0x0, lParam=0x1940365) returned 0x1
[0248.080] GetWindowTextLengthW (hWnd=0x8004e)
[0248.081] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0248.081] GetWindowTextW (hWnd=0x8004e, lpString=0x53e3e4, nMaxCount=1)
[0248.081] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0248.081] SendMessageW (hWnd=0x502ca, Msg=0x10, wParam=0x0, lParam=0x0)
[0248.081] GetCapture () returned 0xb01e2
[0248.081] ReleaseCapture ()
[0248.081] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0248.083] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x84, wParam=0x0, lParam=0x1940365) returned 0x1
[0248.083] EnableWindow (hWnd=0x70036, bEnable=1)
[0248.085] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0248.085] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x86, wParam=0x0, lParam=0x70036)
[0248.087] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0248.088] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0248.088] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0248.099] IsChild (hWndParent=0x502ca, hWnd=0x202c6) returned 0
[0248.099] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xb01e2, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0248.104] GetCapture () returned 0x0
[0248.104] InvalidateRect (hWnd=0xb01e2, lpRect=0x0, bErase=0) returned 1
[0248.108] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0248.108] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0248.108] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0248.124] IsChild (hWndParent=0x502ca, hWnd=0x202c6) returned 0
[0248.124] ShowWindow (hWnd=0x502ca, nCmdShow=0)
[0248.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0248.129] GetWindowLongW (hWnd=0x502ca, nIndex=-20) returned 327937
[0248.129] DestroyWindow (hWnd=0x502ca)
[0248.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0248.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0248.130] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x8004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0248.135] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x27013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0248.137] GetWindowTextLengthW (hWnd=0xc0122)
[0248.137] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0248.137] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xc0122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0248.144] GetProcessWindowStation () returned 0x13c
[0248.144] GetActiveWindow () returned 0x70036
[0248.144] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0248.144] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0248.144] GetCurrentThreadId () returned 0x11d0
[0248.145] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf56ee, lParam=0x0) returned 1
[0248.145] IsWindowVisible (hWnd=0x70036) returned 1
[0248.145] IsWindowEnabled (hWnd=0x70036) returned 1
[0248.145] IsWindowVisible (hWnd=0x602b6) returned 0
[0248.145] IsWindowVisible (hWnd=0x901f8) returned 0
[0248.145] IsWindowVisible (hWnd=0x202d0) returned 0
[0248.145] IsWindowVisible (hWnd=0x202d4) returned 0
[0248.145] GetActiveWindow () returned 0x70036
[0248.145] GetFocus () returned 0x202c6
[0248.145] IsWindow (hWnd=0x70036) returned 1
[0248.145] EnableWindow (hWnd=0x70036, bEnable=0)
[0248.146] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0248.149] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0248.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0248.176] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x60100ce
[0248.176] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0248.177] CreateCompatibleDC (hdc=0x60100ce) returned 0x470107b3
[0248.177] SelectObject (hdc=0x470107b3, h=0x1e0507b9) returned 0x85000f
[0248.177] GdipCreateFromHDC (hdc=0x470107b3, graphics=0x53e108) returned 0x0
[0248.177] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0248.177] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0248.177] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0248.177] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0248.177] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0248.177] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0248.177] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0248.177] LocalFree (hMem=0x89ec80) returned 0x0
[0248.178] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0248.178] GdipCreateRegion (region=0x53e150) returned 0x0
[0248.178] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0248.178] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0248.178] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0248.179] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbb30dbd) returned 0x0
[0248.179] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0248.179] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0248.179] GetCurrentObject (hdc=0x470107b3, type=0x1) returned 0xb00017
[0248.179] GetCurrentObject (hdc=0x470107b3, type=0x2) returned 0x900010
[0248.179] GetCurrentObject (hdc=0x470107b3, type=0x7) returned 0x1e0507b9
[0248.179] GetCurrentObject (hdc=0x470107b3, type=0x6) returned 0x8a01c2
[0248.179] SaveDC (hdc=0x470107b3) returned 1
[0248.179] GetNearestColor (hdc=0x470107b3, color=0xff) returned 0xff
[0248.179] GetNearestColor (hdc=0x470107b3, color=0x55) returned 0x55
[0248.179] GetNearestColor (hdc=0x470107b3, color=0x0) returned 0x0
[0248.179] GetNearestColor (hdc=0x470107b3, color=0x55) returned 0x55
[0248.179] GetNearestColor (hdc=0x470107b3, color=0x0) returned 0x0
[0248.179] GetNearestColor (hdc=0x470107b3, color=0x8080ff) returned 0x8080ff
[0248.180] GetNearestColor (hdc=0x470107b3, color=0x7373e5) returned 0x7373e5
[0248.180] GetNearestColor (hdc=0x470107b3, color=0xe5) returned 0xe5
[0248.180] GetNearestColor (hdc=0x470107b3, color=0x0) returned 0x0
[0248.180] RestoreDC (hdc=0x470107b3, nSavedDC=-1) returned 1
[0248.180] GdipReleaseDC (graphics=0x5d92c30, hdc=0x470107b3) returned 0x0
[0248.180] IsAppThemed () returned 0x1
[0248.180] GetThemeAppProperties () returned 0x3
[0248.180] GetThemeAppProperties () returned 0x3
[0248.180] IsAppThemed () returned 0x1
[0248.180] GetThemeAppProperties () returned 0x3
[0248.180] GetThemeAppProperties () returned 0x3
[0248.180] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0248.180] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2463c9c | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0248.181] IsAppThemed () returned 0x1
[0248.181] GetThemeAppProperties () returned 0x3
[0248.181] GetThemeAppProperties () returned 0x3
[0248.181] IsAppThemed () returned 0x1
[0248.181] GetThemeAppProperties () returned 0x3
[0248.181] GetThemeAppProperties () returned 0x3
[0248.181] GetFocus () returned 0xd00ea
[0248.181] IsAppThemed () returned 0x1
[0248.181] GetThemeAppProperties () returned 0x3
[0248.181] GetThemeAppProperties () returned 0x3
[0248.181] IsAppThemed () returned 0x1
[0248.181] GetThemeAppProperties () returned 0x3
[0248.181] GetThemeAppProperties () returned 0x3
[0248.181] IsThemePartDefined () returned 0x1
[0248.181] IsAppThemed () returned 0x1
[0248.181] GetThemeAppProperties () returned 0x3
[0248.181] GetThemeAppProperties () returned 0x3
[0248.181] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0248.181] IsAppThemed () returned 0x1
[0248.181] GetThemeAppProperties () returned 0x3
[0248.181] GetThemeAppProperties () returned 0x3
[0248.181] IsAppThemed () returned 0x1
[0248.182] GetThemeAppProperties () returned 0x3
[0248.182] GetThemeAppProperties () returned 0x3
[0248.182] IsThemePartDefined () returned 0x1
[0248.182] GdipCreateRegion (region=0x53de78) returned 0x0
[0248.182] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0248.182] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0248.182] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0248.182] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0248.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0248.182] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0248.182] LocalFree (hMem=0x89ec80) returned 0x0
[0248.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0248.182] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0248.182] LocalFree (hMem=0x89ee08) returned 0x0
[0248.182] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0248.182] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0248.182] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0248.182] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0248.182] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0248.182] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0248.182] GetCurrentObject (hdc=0x470107b3, type=0x1) returned 0xb00017
[0248.183] GetCurrentObject (hdc=0x470107b3, type=0x2) returned 0x900010
[0248.183] GetCurrentObject (hdc=0x470107b3, type=0x7) returned 0x1e0507b9
[0248.183] GetCurrentObject (hdc=0x470107b3, type=0x6) returned 0x8a01c2
[0248.183] SaveDC (hdc=0x470107b3) returned 1
[0248.183] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe904051e
[0248.183] GetClipRgn (hdc=0x470107b3, hrgn=0xe904051e) returned 0
[0248.183] SelectClipRgn (hdc=0x470107b3, hrgn=0x970407a1) returned 2
[0248.183] DeleteObject (ho=0xe904051e) returned 1
[0248.183] DeleteObject (ho=0x970407a1) returned 1
[0248.183] OffsetViewportOrgEx (in: hdc=0x470107b3, x=0, y=0, lppt=0x246434c | out: lppt=0x246434c) returned 1
[0248.183] DrawThemeParentBackground () returned 0x0
[0248.183] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0248.183] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0248.183] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0248.183] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0248.184] GetSystemMetrics (nIndex=42) returned 0
[0248.184] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0248.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0248.184] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0248.184] GetCurrentObject (hdc=0x470107b3, type=0x1) returned 0xb00017
[0248.184] GetCurrentObject (hdc=0x470107b3, type=0x2) returned 0x900010
[0248.184] GetCurrentObject (hdc=0x470107b3, type=0x7) returned 0x1e0507b9
[0248.184] GetCurrentObject (hdc=0x470107b3, type=0x6) returned 0x8a01c2
[0248.184] SaveDC (hdc=0x470107b3) returned 2
[0248.184] GetNearestColor (hdc=0x470107b3, color=0xff) returned 0xff
[0248.184] CreateSolidBrush (color=0xff) returned 0x4810078d
[0248.184] FillRect (hDC=0x470107b3, lprc=0x53d8d8, hbr=0x4810078d) returned 1
[0248.184] DeleteObject (ho=0x4810078d) returned 1
[0248.184] RestoreDC (hdc=0x470107b3, nSavedDC=-1) returned 1
[0248.184] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0248.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0248.184] GetSystemMetrics (nIndex=42) returned 0
[0248.184] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0248.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0248.185] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0248.185] GetCurrentObject (hdc=0x470107b3, type=0x1) returned 0xb00017
[0248.185] GetCurrentObject (hdc=0x470107b3, type=0x2) returned 0x900010
[0248.185] GetCurrentObject (hdc=0x470107b3, type=0x7) returned 0x1e0507b9
[0248.185] GetCurrentObject (hdc=0x470107b3, type=0x6) returned 0x8a01c2
[0248.185] SaveDC (hdc=0x470107b3) returned 2
[0248.185] GetNearestColor (hdc=0x470107b3, color=0xff) returned 0xff
[0248.185] CreateSolidBrush (color=0xff) returned 0x4910078d
[0248.185] FillRect (hDC=0x470107b3, lprc=0x53d878, hbr=0x4910078d) returned 1
[0248.185] DeleteObject (ho=0x4910078d) returned 1
[0248.185] RestoreDC (hdc=0x470107b3, nSavedDC=-1) returned 1
[0248.185] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0248.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0248.185] GetSystemMetrics (nIndex=42) returned 0
[0248.185] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0248.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0248.186] RestoreDC (hdc=0x470107b3, nSavedDC=-1) returned 1
[0248.186] GdipReleaseDC (graphics=0x5d92c30, hdc=0x470107b3) returned 0x0
[0248.186] IsAppThemed () returned 0x1
[0248.186] GetThemeAppProperties () returned 0x3
[0248.186] GetThemeAppProperties () returned 0x3
[0248.186] IsAppThemed () returned 0x1
[0248.186] GetThemeAppProperties () returned 0x3
[0248.186] GetThemeAppProperties () returned 0x3
[0248.186] IsThemePartDefined () returned 0x1
[0248.186] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0248.186] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0248.186] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0248.186] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0248.186] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0248.186] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0248.186] LocalFree (hMem=0x89eac0) returned 0x0
[0248.186] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0248.187] LocalFree (hMem=0x89eac0) returned 0x0
[0248.187] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0248.187] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0248.187] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0248.187] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0248.187] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0248.187] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0248.187] GetCurrentObject (hdc=0x470107b3, type=0x1) returned 0xb00017
[0248.187] GetCurrentObject (hdc=0x470107b3, type=0x2) returned 0x900010
[0248.187] GetCurrentObject (hdc=0x470107b3, type=0x7) returned 0x1e0507b9
[0248.187] GetCurrentObject (hdc=0x470107b3, type=0x6) returned 0x8a01c2
[0248.187] SaveDC (hdc=0x470107b3) returned 1
[0248.187] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x980407a1
[0248.187] GetClipRgn (hdc=0x470107b3, hrgn=0x980407a1) returned 0
[0248.187] SelectClipRgn (hdc=0x470107b3, hrgn=0xeb04051e) returned 2
[0248.187] DeleteObject (ho=0x980407a1) returned 1
[0248.187] DeleteObject (ho=0xeb04051e) returned 1
[0248.187] OffsetViewportOrgEx (in: hdc=0x470107b3, x=0, y=0, lppt=0x2464bb0 | out: lppt=0x2464bb0) returned 1
[0248.188] IsAppThemed () returned 0x1
[0248.188] GetThemeAppProperties () returned 0x3
[0248.188] GetThemeAppProperties () returned 0x3
[0248.188] DrawThemeBackground () returned 0x0
[0248.188] RestoreDC (hdc=0x470107b3, nSavedDC=-1) returned 1
[0248.188] GdipReleaseDC (graphics=0x5d92c30, hdc=0x470107b3) returned 0x0
[0248.188] GdipCreateRegion (region=0x53de00) returned 0x0
[0248.188] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0248.188] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0248.188] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0248.188] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0248.188] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0248.188] LocalFree (hMem=0x89eac0) returned 0x0
[0248.188] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0248.188] LocalFree (hMem=0x89ec80) returned 0x0
[0248.188] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0248.188] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0248.188] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0248.188] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0248.188] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0248.188] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0248.189] GetCurrentObject (hdc=0x470107b3, type=0x1) returned 0xb00017
[0248.189] GetCurrentObject (hdc=0x470107b3, type=0x2) returned 0x900010
[0248.189] GetCurrentObject (hdc=0x470107b3, type=0x7) returned 0x1e0507b9
[0248.189] GetCurrentObject (hdc=0x470107b3, type=0x6) returned 0x8a01c2
[0248.189] SaveDC (hdc=0x470107b3) returned 1
[0248.189] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xec04051e
[0248.189] GetClipRgn (hdc=0x470107b3, hrgn=0xec04051e) returned 0
[0248.189] SelectClipRgn (hdc=0x470107b3, hrgn=0x990407a1) returned 2
[0248.189] DeleteObject (ho=0xec04051e) returned 1
[0248.189] DeleteObject (ho=0x990407a1) returned 1
[0248.189] OffsetViewportOrgEx (in: hdc=0x470107b3, x=0, y=0, lppt=0x2464e84 | out: lppt=0x2464e84) returned 1
[0248.189] IsAppThemed () returned 0x1
[0248.189] GetThemeAppProperties () returned 0x3
[0248.189] GetThemeAppProperties () returned 0x3
[0248.189] GetThemeBackgroundContentRect () returned 0x0
[0248.189] RestoreDC (hdc=0x470107b3, nSavedDC=-1) returned 1
[0248.189] GdipReleaseDC (graphics=0x5d92c30, hdc=0x470107b3) returned 0x0
[0248.189] IsAppThemed () returned 0x1
[0248.189] GetThemeAppProperties () returned 0x3
[0248.189] GetThemeAppProperties () returned 0x3
[0248.190] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0248.190] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0248.190] GetCurrentObject (hdc=0x470107b3, type=0x1) returned 0xb00017
[0248.190] GetCurrentObject (hdc=0x470107b3, type=0x2) returned 0x900010
[0248.190] GetCurrentObject (hdc=0x470107b3, type=0x7) returned 0x1e0507b9
[0248.190] GetCurrentObject (hdc=0x470107b3, type=0x6) returned 0x8a01c2
[0248.190] SaveDC (hdc=0x470107b3) returned 1
[0248.190] GetTextAlign (hdc=0x470107b3) returned 0x0
[0248.190] GetTextColor (hdc=0x470107b3) returned 0x0
[0248.190] GetCurrentObject (hdc=0x470107b3, type=0x6) returned 0x8a01c2
[0248.190] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0248.190] SelectObject (hdc=0x470107b3, h=0x450a0799) returned 0x8a01c2
[0248.190] GetBkMode (hdc=0x470107b3) returned 2
[0248.190] SetBkMode (hdc=0x470107b3, mode=1) returned 2
[0248.190] DrawTextExW (in: hdc=0x470107b3, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2465224 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0248.191] DrawTextExW (in: hdc=0x470107b3, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2465224 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0248.191] RestoreDC (hdc=0x470107b3, nSavedDC=-1) returned 1
[0248.191] GdipReleaseDC (graphics=0x5d92c30, hdc=0x470107b3) returned 0x0
[0248.191] GetFocus () returned 0xd00ea
[0248.191] IsAppThemed () returned 0x1
[0248.191] GetThemeAppProperties () returned 0x3
[0248.191] GetThemeAppProperties () returned 0x3
[0248.191] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0248.191] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x470107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0248.191] GdipReleaseDC (graphics=0x5d92c30, hdc=0x470107b3) returned 0x0
[0248.191] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0248.192] SelectObject (hdc=0x470107b3, h=0x85000f) returned 0x1e0507b9
[0248.192] DeleteDC (hdc=0x470107b3) returned 1
[0248.192] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0248.192] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0248.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0248.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0248.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x602ca) returned 0x1
[0248.550] GetFocus () returned 0x602ca
[0248.550] GetAncestor (hwnd=0x602ca, gaFlags=0x1) returned 0x10010
[0248.550] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0248.550] SetFocus (hWnd=0x202c6) returned 0x0
[0248.553] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0248.554] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0248.554] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0248.555] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0248.555] GetFocus () returned 0x70036
[0248.555] SetFocus (hWnd=0x202c6) returned 0x0
[0248.561] IsWindow (hWnd=0x70036) returned 1
[0248.561] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0248.561] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0248.561] IsWindow (hWnd=0x70036) returned 1
[0248.561] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0248.561] IsWindow (hWnd=0x202c6) returned 1
[0248.561] SetFocus (hWnd=0x202c6) returned 0x70036
[0248.562] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0248.563] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0248.564] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0248.566] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0248.566] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0248.566] GetStockObject (i=5) returned 0x900015
[0248.566] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0248.566] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8dad30) returned 0x7
[0248.566] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0248.566] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0248.566] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0248.566] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0248.568] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0248.568] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0248.568] GetFocus () returned 0x202c6
[0248.576] GetCapture () returned 0x0
[0248.576] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.576] IsWindowUnicode (hWnd=0x202c6) returned 1
[0248.576] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.577] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.577] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.577] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.578] IsWindowUnicode (hWnd=0x202c6) returned 1
[0248.578] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.578] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.578] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.578] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0248.578] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0248.578] CreateCompatibleDC (hdc=0x8b010786) returned 0xc70107c0
[0248.578] SelectObject (hdc=0xc70107c0, h=0x1e0507b9) returned 0x85000f
[0248.578] GdipCreateFromHDC (hdc=0xc70107c0, graphics=0x53e958) returned 0x0
[0248.578] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0248.578] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0248.579] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0248.579] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0248.579] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0248.579] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0248.579] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0248.579] LocalFree (hMem=0x89eac0) returned 0x0
[0248.579] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0248.579] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0248.579] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0248.579] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0248.579] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0248.579] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbb10dbd) returned 0x0
[0248.579] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0248.579] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0248.579] GetCurrentObject (hdc=0xc70107c0, type=0x1) returned 0xb00017
[0248.579] GetCurrentObject (hdc=0xc70107c0, type=0x2) returned 0x900010
[0248.579] GetCurrentObject (hdc=0xc70107c0, type=0x7) returned 0x1e0507b9
[0248.580] GetCurrentObject (hdc=0xc70107c0, type=0x6) returned 0x8a01c2
[0248.580] SaveDC (hdc=0xc70107c0) returned 1
[0248.580] GetNearestColor (hdc=0xc70107c0, color=0xff) returned 0xff
[0248.580] GetNearestColor (hdc=0xc70107c0, color=0x55) returned 0x55
[0248.580] GetNearestColor (hdc=0xc70107c0, color=0x0) returned 0x0
[0248.580] GetNearestColor (hdc=0xc70107c0, color=0x55) returned 0x55
[0248.580] GetNearestColor (hdc=0xc70107c0, color=0x0) returned 0x0
[0248.580] GetNearestColor (hdc=0xc70107c0, color=0x8080ff) returned 0x8080ff
[0248.580] GetNearestColor (hdc=0xc70107c0, color=0x7373e5) returned 0x7373e5
[0248.580] GetNearestColor (hdc=0xc70107c0, color=0xe5) returned 0xe5
[0248.580] GetNearestColor (hdc=0xc70107c0, color=0x0) returned 0x0
[0248.580] RestoreDC (hdc=0xc70107c0, nSavedDC=-1) returned 1
[0248.580] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107c0) returned 0x0
[0248.580] IsAppThemed () returned 0x1
[0248.581] GetThemeAppProperties () returned 0x3
[0248.581] GetThemeAppProperties () returned 0x3
[0248.581] IsAppThemed () returned 0x1
[0248.581] GetThemeAppProperties () returned 0x3
[0248.581] GetThemeAppProperties () returned 0x3
[0248.581] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2465a80 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0248.581] IsAppThemed () returned 0x1
[0248.581] GetThemeAppProperties () returned 0x3
[0248.581] GetThemeAppProperties () returned 0x3
[0248.581] IsAppThemed () returned 0x1
[0248.581] GetThemeAppProperties () returned 0x3
[0248.581] GetThemeAppProperties () returned 0x3
[0248.581] GetFocus () returned 0x202c6
[0248.581] IsAppThemed () returned 0x1
[0248.582] GetThemeAppProperties () returned 0x3
[0248.582] GetThemeAppProperties () returned 0x3
[0248.582] IsAppThemed () returned 0x1
[0248.582] GetThemeAppProperties () returned 0x3
[0248.582] GetThemeAppProperties () returned 0x3
[0248.582] IsThemePartDefined () returned 0x1
[0248.582] IsAppThemed () returned 0x1
[0248.582] GetThemeAppProperties () returned 0x3
[0248.582] GetThemeAppProperties () returned 0x3
[0248.582] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0248.582] IsAppThemed () returned 0x1
[0248.582] GetThemeAppProperties () returned 0x3
[0248.582] GetThemeAppProperties () returned 0x3
[0248.582] IsAppThemed () returned 0x1
[0248.582] GetThemeAppProperties () returned 0x3
[0248.582] GetThemeAppProperties () returned 0x3
[0248.582] IsThemePartDefined () returned 0x1
[0248.582] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0248.582] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0248.582] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0248.582] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0248.582] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0248.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0248.583] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0248.583] LocalFree (hMem=0x89ee08) returned 0x0
[0248.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0248.583] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0248.583] LocalFree (hMem=0x89ec80) returned 0x0
[0248.583] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0248.583] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0248.583] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0248.583] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0248.583] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0248.583] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0248.583] GetCurrentObject (hdc=0xc70107c0, type=0x1) returned 0xb00017
[0248.583] GetCurrentObject (hdc=0xc70107c0, type=0x2) returned 0x900010
[0248.583] GetCurrentObject (hdc=0xc70107c0, type=0x7) returned 0x1e0507b9
[0248.583] GetCurrentObject (hdc=0xc70107c0, type=0x6) returned 0x8a01c2
[0248.584] SaveDC (hdc=0xc70107c0) returned 1
[0248.584] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9f0407a1
[0248.584] GetClipRgn (hdc=0xc70107c0, hrgn=0x9f0407a1) returned 0
[0248.584] SelectClipRgn (hdc=0xc70107c0, hrgn=0xfc04051e) returned 2
[0248.584] DeleteObject (ho=0x9f0407a1) returned 1
[0248.584] DeleteObject (ho=0xfc04051e) returned 1
[0248.584] OffsetViewportOrgEx (in: hdc=0xc70107c0, x=0, y=0, lppt=0x2466130 | out: lppt=0x2466130) returned 1
[0248.584] DrawThemeParentBackground () returned 0x0
[0248.585] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0248.585] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0248.585] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0248.585] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0248.585] GetSystemMetrics (nIndex=42) returned 0
[0248.585] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0248.585] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0248.585] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0248.585] GetCurrentObject (hdc=0xc70107c0, type=0x1) returned 0xb00017
[0248.585] GetCurrentObject (hdc=0xc70107c0, type=0x2) returned 0x900010
[0248.585] GetCurrentObject (hdc=0xc70107c0, type=0x7) returned 0x1e0507b9
[0248.585] GetCurrentObject (hdc=0xc70107c0, type=0x6) returned 0x8a01c2
[0248.585] SaveDC (hdc=0xc70107c0) returned 2
[0248.585] GetNearestColor (hdc=0xc70107c0, color=0xff) returned 0xff
[0248.585] CreateSolidBrush (color=0xff) returned 0x4b10078d
[0248.585] FillRect (hDC=0xc70107c0, lprc=0x53e128, hbr=0x4b10078d) returned 1
[0248.586] DeleteObject (ho=0x4b10078d) returned 1
[0248.586] RestoreDC (hdc=0xc70107c0, nSavedDC=-1) returned 1
[0248.586] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0248.586] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0248.586] GetSystemMetrics (nIndex=42) returned 0
[0248.586] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0248.586] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0248.586] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0248.586] GetCurrentObject (hdc=0xc70107c0, type=0x1) returned 0xb00017
[0248.586] GetCurrentObject (hdc=0xc70107c0, type=0x2) returned 0x900010
[0248.586] GetCurrentObject (hdc=0xc70107c0, type=0x7) returned 0x1e0507b9
[0248.586] GetCurrentObject (hdc=0xc70107c0, type=0x6) returned 0x8a01c2
[0248.586] SaveDC (hdc=0xc70107c0) returned 2
[0248.586] GetNearestColor (hdc=0xc70107c0, color=0xff) returned 0xff
[0248.586] CreateSolidBrush (color=0xff) returned 0x4c10078d
[0248.586] FillRect (hDC=0xc70107c0, lprc=0x53e0c8, hbr=0x4c10078d) returned 1
[0248.587] DeleteObject (ho=0x4c10078d) returned 1
[0248.587] RestoreDC (hdc=0xc70107c0, nSavedDC=-1) returned 1
[0248.587] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0248.587] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0248.587] GetSystemMetrics (nIndex=42) returned 0
[0248.587] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0248.587] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0248.587] RestoreDC (hdc=0xc70107c0, nSavedDC=-1) returned 1
[0248.587] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107c0) returned 0x0
[0248.587] IsAppThemed () returned 0x1
[0248.587] GetThemeAppProperties () returned 0x3
[0248.587] GetThemeAppProperties () returned 0x3
[0248.587] IsAppThemed () returned 0x1
[0248.587] GetThemeAppProperties () returned 0x3
[0248.587] GetThemeAppProperties () returned 0x3
[0248.587] IsThemePartDefined () returned 0x1
[0248.588] GdipCreateRegion (region=0x53e64c) returned 0x0
[0248.588] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0248.588] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0248.588] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0248.588] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0248.588] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0248.588] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0248.588] LocalFree (hMem=0x89eac0) returned 0x0
[0248.588] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0248.588] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0248.588] LocalFree (hMem=0x89eac0) returned 0x0
[0248.588] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0248.588] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0248.588] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0248.588] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0248.588] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0248.588] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0248.588] GetCurrentObject (hdc=0xc70107c0, type=0x1) returned 0xb00017
[0248.589] GetCurrentObject (hdc=0xc70107c0, type=0x2) returned 0x900010
[0248.589] GetCurrentObject (hdc=0xc70107c0, type=0x7) returned 0x1e0507b9
[0248.589] GetCurrentObject (hdc=0xc70107c0, type=0x6) returned 0x8a01c2
[0248.589] SaveDC (hdc=0xc70107c0) returned 1
[0248.589] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfd04051e
[0248.589] GetClipRgn (hdc=0xc70107c0, hrgn=0xfd04051e) returned 0
[0248.589] SelectClipRgn (hdc=0xc70107c0, hrgn=0xa10407a1) returned 2
[0248.589] DeleteObject (ho=0xfd04051e) returned 1
[0248.589] DeleteObject (ho=0xa10407a1) returned 1
[0248.589] OffsetViewportOrgEx (in: hdc=0xc70107c0, x=0, y=0, lppt=0x2466994 | out: lppt=0x2466994) returned 1
[0248.589] IsAppThemed () returned 0x1
[0248.589] GetThemeAppProperties () returned 0x3
[0248.589] GetThemeAppProperties () returned 0x3
[0248.589] DrawThemeBackground () returned 0x0
[0248.589] RestoreDC (hdc=0xc70107c0, nSavedDC=-1) returned 1
[0248.590] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107c0) returned 0x0
[0248.590] GdipCreateRegion (region=0x53e650) returned 0x0
[0248.590] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0248.590] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0248.590] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0248.590] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0248.590] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0248.590] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0248.590] LocalFree (hMem=0x89ec80) returned 0x0
[0248.590] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0248.590] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0248.590] LocalFree (hMem=0x89ec80) returned 0x0
[0248.590] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0248.590] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0248.590] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0248.590] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0248.590] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0248.591] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0248.591] GetCurrentObject (hdc=0xc70107c0, type=0x1) returned 0xb00017
[0248.591] GetCurrentObject (hdc=0xc70107c0, type=0x2) returned 0x900010
[0248.591] GetCurrentObject (hdc=0xc70107c0, type=0x7) returned 0x1e0507b9
[0248.591] GetCurrentObject (hdc=0xc70107c0, type=0x6) returned 0x8a01c2
[0248.591] SaveDC (hdc=0xc70107c0) returned 1
[0248.591] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa20407a1
[0248.591] GetClipRgn (hdc=0xc70107c0, hrgn=0xa20407a1) returned 0
[0248.591] SelectClipRgn (hdc=0xc70107c0, hrgn=0xfe04051e) returned 2
[0248.591] DeleteObject (ho=0xa20407a1) returned 1
[0248.591] DeleteObject (ho=0xfe04051e) returned 1
[0248.591] OffsetViewportOrgEx (in: hdc=0xc70107c0, x=0, y=0, lppt=0x2466c68 | out: lppt=0x2466c68) returned 1
[0248.591] IsAppThemed () returned 0x1
[0248.591] GetThemeAppProperties () returned 0x3
[0248.591] GetThemeAppProperties () returned 0x3
[0248.591] GetThemeBackgroundContentRect () returned 0x0
[0248.591] RestoreDC (hdc=0xc70107c0, nSavedDC=-1) returned 1
[0248.592] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107c0) returned 0x0
[0248.592] IsAppThemed () returned 0x1
[0248.592] GetThemeAppProperties () returned 0x3
[0248.592] GetThemeAppProperties () returned 0x3
[0248.592] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0248.592] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0248.592] GetCurrentObject (hdc=0xc70107c0, type=0x1) returned 0xb00017
[0248.592] GetCurrentObject (hdc=0xc70107c0, type=0x2) returned 0x900010
[0248.592] GetCurrentObject (hdc=0xc70107c0, type=0x7) returned 0x1e0507b9
[0248.592] GetCurrentObject (hdc=0xc70107c0, type=0x6) returned 0x8a01c2
[0248.592] SaveDC (hdc=0xc70107c0) returned 1
[0248.592] GetTextAlign (hdc=0xc70107c0) returned 0x0
[0248.592] GetTextColor (hdc=0xc70107c0) returned 0x0
[0248.592] GetCurrentObject (hdc=0xc70107c0, type=0x6) returned 0x8a01c2
[0248.592] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0248.592] SelectObject (hdc=0xc70107c0, h=0x450a0799) returned 0x8a01c2
[0248.593] GetBkMode (hdc=0xc70107c0) returned 2
[0248.593] SetBkMode (hdc=0xc70107c0, mode=1) returned 2
[0248.593] DrawTextExW (in: hdc=0xc70107c0, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2467008 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0248.593] DrawTextExW (in: hdc=0xc70107c0, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2467008 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0248.593] RestoreDC (hdc=0xc70107c0, nSavedDC=-1) returned 1
[0248.593] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107c0) returned 0x0
[0248.593] GetFocus () returned 0x202c6
[0248.594] IsAppThemed () returned 0x1
[0248.594] GetThemeAppProperties () returned 0x3
[0248.594] GetThemeAppProperties () returned 0x3
[0248.594] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0248.594] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xc70107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0248.594] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc70107c0) returned 0x0
[0248.594] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0248.594] SelectObject (hdc=0xc70107c0, h=0x85000f) returned 0x1e0507b9
[0248.594] DeleteDC (hdc=0xc70107c0) returned 1
[0248.594] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0248.594] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0248.595] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.595] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.595] WaitMessage () returned 1
[0248.616] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.616] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.616] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.616] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.616] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.617] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.617] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.617] WaitMessage () returned 1
[0248.640] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.641] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.641] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.641] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.641] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.642] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.642] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.642] WaitMessage () returned 1
[0248.643] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.643] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.643] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.643] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.643] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.644] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.644] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.644] WaitMessage () returned 1
[0248.645] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.645] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.645] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.646] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.646] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.683] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.683] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.683] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.683] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.683] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.683] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.683] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.683] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.683] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.684] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.684] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.684] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.684] WaitMessage () returned 1
[0248.686] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.686] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.686] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.686] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.687] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.688] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.688] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.688] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.689] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.689] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.689] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.689] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.689] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.689] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.689] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.689] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.690] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.690] WaitMessage () returned 1
[0248.690] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.690] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.690] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.690] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.690] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.691] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.692] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.692] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.692] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.692] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.692] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.692] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.692] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.692] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.692] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.692] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.693] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.693] WaitMessage () returned 1
[0248.696] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.697] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.697] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.697] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.697] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.698] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.699] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.699] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.699] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.699] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.699] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.699] IsWindowUnicode (hWnd=0x102dc) returned 1
[0248.700] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.700] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.700] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.700] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.700] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.700] WaitMessage () returned 1
[0248.865] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.866] IsWindowUnicode (hWnd=0x202d0) returned 1
[0248.866] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.866] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.866] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0248.866] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.866] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.866] WaitMessage () returned 1
[0248.943] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.944] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0248.944] TranslateMessage (lpMsg=0x53eef8) returned 0
[0248.944] DispatchMessageA (lpMsg=0x53eef8) returned 0x7ebd
[0248.944] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.944] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0248.944] WaitMessage () returned 1
[0249.959] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0249.959] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0249.959] TranslateMessage (lpMsg=0x53eef8) returned 0
[0249.959] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0249.960] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0249.960] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0249.960] WaitMessage () returned 1
[0250.400] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0250.401] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x199024d) returned 0x1
[0250.401] IsWindowUnicode (hWnd=0x202c6) returned 1
[0250.401] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0250.401] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x199024d) returned 0x1
[0250.401] SetCursor (hCursor=0x10003) returned 0x10003
[0250.401] TranslateMessage (lpMsg=0x53eef8) returned 0
[0250.401] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0250.401] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0250.402] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0250.402] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0250.402] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0250.402] GetKeyState (nVirtKey=1) returned 0
[0250.402] GetKeyState (nVirtKey=2) returned 0
[0250.402] GetKeyState (nVirtKey=4) returned 0
[0250.402] GetKeyState (nVirtKey=5) returned 0
[0250.402] GetKeyState (nVirtKey=6) returned 0
[0250.402] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0250.402] IsWindowUnicode (hWnd=0x202c6) returned 1
[0250.402] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0250.402] TranslateMessage (lpMsg=0x53eef8) returned 0
[0250.402] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0250.402] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0250.403] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0250.403] CreateCompatibleDC (hdc=0x8b010786) returned 0x5f0107c4
[0250.403] SelectObject (hdc=0x5f0107c4, h=0x1e0507b9) returned 0x85000f
[0250.403] GdipCreateFromHDC (hdc=0x5f0107c4, graphics=0x53e958) returned 0x0
[0250.403] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0250.403] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0250.403] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0250.403] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0250.403] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0250.404] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0250.404] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0250.404] LocalFree (hMem=0x89ea88) returned 0x0
[0250.404] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0250.404] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0250.404] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.404] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0250.404] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0250.404] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbaf0dbd) returned 0x0
[0250.404] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.404] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0250.404] GetCurrentObject (hdc=0x5f0107c4, type=0x1) returned 0xb00017
[0250.404] GetCurrentObject (hdc=0x5f0107c4, type=0x2) returned 0x900010
[0250.404] GetCurrentObject (hdc=0x5f0107c4, type=0x7) returned 0x1e0507b9
[0250.404] GetCurrentObject (hdc=0x5f0107c4, type=0x6) returned 0x8a01c2
[0250.404] SaveDC (hdc=0x5f0107c4) returned 1
[0250.405] GetNearestColor (hdc=0x5f0107c4, color=0xff) returned 0xff
[0250.405] GetNearestColor (hdc=0x5f0107c4, color=0x55) returned 0x55
[0250.405] GetNearestColor (hdc=0x5f0107c4, color=0x0) returned 0x0
[0250.405] GetNearestColor (hdc=0x5f0107c4, color=0x55) returned 0x55
[0250.405] GetNearestColor (hdc=0x5f0107c4, color=0x0) returned 0x0
[0250.405] GetNearestColor (hdc=0x5f0107c4, color=0x8080ff) returned 0x8080ff
[0250.405] GetNearestColor (hdc=0x5f0107c4, color=0x7373e5) returned 0x7373e5
[0250.405] GetNearestColor (hdc=0x5f0107c4, color=0xe5) returned 0xe5
[0250.405] GetNearestColor (hdc=0x5f0107c4, color=0x0) returned 0x0
[0250.405] RestoreDC (hdc=0x5f0107c4, nSavedDC=-1) returned 1
[0250.405] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107c4) returned 0x0
[0250.405] IsAppThemed () returned 0x1
[0250.405] GetThemeAppProperties () returned 0x3
[0250.406] GetThemeAppProperties () returned 0x3
[0250.406] IsAppThemed () returned 0x1
[0250.406] GetThemeAppProperties () returned 0x3
[0250.406] GetThemeAppProperties () returned 0x3
[0250.406] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x246799c | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0250.406] IsAppThemed () returned 0x1
[0250.406] GetThemeAppProperties () returned 0x3
[0250.406] GetThemeAppProperties () returned 0x3
[0250.406] IsAppThemed () returned 0x1
[0250.406] GetThemeAppProperties () returned 0x3
[0250.406] GetThemeAppProperties () returned 0x3
[0250.406] IsAppThemed () returned 0x1
[0250.406] GetThemeAppProperties () returned 0x3
[0250.406] GetThemeAppProperties () returned 0x3
[0250.406] IsAppThemed () returned 0x1
[0250.407] GetThemeAppProperties () returned 0x3
[0250.407] GetThemeAppProperties () returned 0x3
[0250.407] IsThemePartDefined () returned 0x1
[0250.407] IsAppThemed () returned 0x1
[0250.407] GetThemeAppProperties () returned 0x3
[0250.407] GetThemeAppProperties () returned 0x3
[0250.407] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0250.407] IsAppThemed () returned 0x1
[0250.407] GetThemeAppProperties () returned 0x3
[0250.407] GetThemeAppProperties () returned 0x3
[0250.407] IsAppThemed () returned 0x1
[0250.407] GetThemeAppProperties () returned 0x3
[0250.407] GetThemeAppProperties () returned 0x3
[0250.407] IsThemePartDefined () returned 0x1
[0250.407] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0250.407] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.407] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0250.407] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0250.407] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0250.407] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0250.408] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0250.408] LocalFree (hMem=0x89eee8) returned 0x0
[0250.408] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0250.408] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0250.408] LocalFree (hMem=0x89ec80) returned 0x0
[0250.408] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0250.408] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0250.408] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0250.408] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0250.408] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.408] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0250.408] GetCurrentObject (hdc=0x5f0107c4, type=0x1) returned 0xb00017
[0250.408] GetCurrentObject (hdc=0x5f0107c4, type=0x2) returned 0x900010
[0250.408] GetCurrentObject (hdc=0x5f0107c4, type=0x7) returned 0x1e0507b9
[0250.408] GetCurrentObject (hdc=0x5f0107c4, type=0x6) returned 0x8a01c2
[0250.409] SaveDC (hdc=0x5f0107c4) returned 1
[0250.409] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xff04051e
[0250.409] GetClipRgn (hdc=0x5f0107c4, hrgn=0xff04051e) returned 0
[0250.409] SelectClipRgn (hdc=0x5f0107c4, hrgn=0xa60407a1) returned 2
[0250.409] DeleteObject (ho=0xff04051e) returned 1
[0250.409] DeleteObject (ho=0xa60407a1) returned 1
[0250.409] OffsetViewportOrgEx (in: hdc=0x5f0107c4, x=0, y=0, lppt=0x246804c | out: lppt=0x246804c) returned 1
[0250.409] DrawThemeParentBackground () returned 0x0
[0250.409] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0250.409] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0250.409] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0250.409] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0250.409] GetSystemMetrics (nIndex=42) returned 0
[0250.409] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0250.410] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0250.410] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0250.410] GetCurrentObject (hdc=0x5f0107c4, type=0x1) returned 0xb00017
[0250.410] GetCurrentObject (hdc=0x5f0107c4, type=0x2) returned 0x900010
[0250.410] GetCurrentObject (hdc=0x5f0107c4, type=0x7) returned 0x1e0507b9
[0250.410] GetCurrentObject (hdc=0x5f0107c4, type=0x6) returned 0x8a01c2
[0250.410] SaveDC (hdc=0x5f0107c4) returned 2
[0250.410] GetNearestColor (hdc=0x5f0107c4, color=0xff) returned 0xff
[0250.410] CreateSolidBrush (color=0xff) returned 0x4d10078d
[0250.410] FillRect (hDC=0x5f0107c4, lprc=0x53e120, hbr=0x4d10078d) returned 1
[0250.410] DeleteObject (ho=0x4d10078d) returned 1
[0250.410] RestoreDC (hdc=0x5f0107c4, nSavedDC=-1) returned 1
[0250.410] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0250.410] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0250.411] GetSystemMetrics (nIndex=42) returned 0
[0250.411] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0250.411] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0250.411] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0250.411] GetCurrentObject (hdc=0x5f0107c4, type=0x1) returned 0xb00017
[0250.411] GetCurrentObject (hdc=0x5f0107c4, type=0x2) returned 0x900010
[0250.411] GetCurrentObject (hdc=0x5f0107c4, type=0x7) returned 0x1e0507b9
[0250.411] GetCurrentObject (hdc=0x5f0107c4, type=0x6) returned 0x8a01c2
[0250.411] SaveDC (hdc=0x5f0107c4) returned 2
[0250.411] GetNearestColor (hdc=0x5f0107c4, color=0xff) returned 0xff
[0250.411] CreateSolidBrush (color=0xff) returned 0x4e10078d
[0250.411] FillRect (hDC=0x5f0107c4, lprc=0x53e0c0, hbr=0x4e10078d) returned 1
[0250.411] DeleteObject (ho=0x4e10078d) returned 1
[0250.411] RestoreDC (hdc=0x5f0107c4, nSavedDC=-1) returned 1
[0250.411] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0250.412] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0250.412] GetSystemMetrics (nIndex=42) returned 0
[0250.412] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0250.412] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0250.412] RestoreDC (hdc=0x5f0107c4, nSavedDC=-1) returned 1
[0250.412] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107c4) returned 0x0
[0250.412] IsAppThemed () returned 0x1
[0250.412] GetThemeAppProperties () returned 0x3
[0250.412] GetThemeAppProperties () returned 0x3
[0250.412] IsAppThemed () returned 0x1
[0250.412] GetThemeAppProperties () returned 0x3
[0250.412] GetThemeAppProperties () returned 0x3
[0250.412] IsThemePartDefined () returned 0x1
[0250.412] GdipCreateRegion (region=0x53e640) returned 0x0
[0250.413] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.413] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0250.413] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0250.413] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0250.413] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0250.413] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0250.413] LocalFree (hMem=0x89eee8) returned 0x0
[0250.413] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0250.413] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0250.413] LocalFree (hMem=0x89eee8) returned 0x0
[0250.413] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0250.413] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0250.413] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0250.413] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0250.413] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.413] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0250.413] GetCurrentObject (hdc=0x5f0107c4, type=0x1) returned 0xb00017
[0250.414] GetCurrentObject (hdc=0x5f0107c4, type=0x2) returned 0x900010
[0250.414] GetCurrentObject (hdc=0x5f0107c4, type=0x7) returned 0x1e0507b9
[0250.414] GetCurrentObject (hdc=0x5f0107c4, type=0x6) returned 0x8a01c2
[0250.414] SaveDC (hdc=0x5f0107c4) returned 1
[0250.414] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa70407a1
[0250.414] GetClipRgn (hdc=0x5f0107c4, hrgn=0xa70407a1) returned 0
[0250.414] SelectClipRgn (hdc=0x5f0107c4, hrgn=0x104051e) returned 2
[0250.414] DeleteObject (ho=0xa70407a1) returned 1
[0250.414] DeleteObject (ho=0x104051e) returned 1
[0250.414] OffsetViewportOrgEx (in: hdc=0x5f0107c4, x=0, y=0, lppt=0x24688b0 | out: lppt=0x24688b0) returned 1
[0250.414] IsAppThemed () returned 0x1
[0250.414] GetThemeAppProperties () returned 0x3
[0250.414] GetThemeAppProperties () returned 0x3
[0250.414] DrawThemeBackground () returned 0x0
[0250.415] RestoreDC (hdc=0x5f0107c4, nSavedDC=-1) returned 1
[0250.415] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107c4) returned 0x0
[0250.415] GdipCreateRegion (region=0x53e644) returned 0x0
[0250.415] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.415] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0250.415] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0250.415] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0250.415] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0250.415] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0250.415] LocalFree (hMem=0x89ee08) returned 0x0
[0250.415] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0250.415] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0250.415] LocalFree (hMem=0x89eee8) returned 0x0
[0250.415] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0250.415] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0250.415] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0250.415] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0250.416] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.416] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0250.416] GetCurrentObject (hdc=0x5f0107c4, type=0x1) returned 0xb00017
[0250.416] GetCurrentObject (hdc=0x5f0107c4, type=0x2) returned 0x900010
[0250.416] GetCurrentObject (hdc=0x5f0107c4, type=0x7) returned 0x1e0507b9
[0250.416] GetCurrentObject (hdc=0x5f0107c4, type=0x6) returned 0x8a01c2
[0250.416] SaveDC (hdc=0x5f0107c4) returned 1
[0250.416] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x204051e
[0250.416] GetClipRgn (hdc=0x5f0107c4, hrgn=0x204051e) returned 0
[0250.416] SelectClipRgn (hdc=0x5f0107c4, hrgn=0xa80407a1) returned 2
[0250.416] DeleteObject (ho=0x204051e) returned 1
[0250.416] DeleteObject (ho=0xa80407a1) returned 1
[0250.416] OffsetViewportOrgEx (in: hdc=0x5f0107c4, x=0, y=0, lppt=0x2468b84 | out: lppt=0x2468b84) returned 1
[0250.416] IsAppThemed () returned 0x1
[0250.417] GetThemeAppProperties () returned 0x3
[0250.417] GetThemeAppProperties () returned 0x3
[0250.417] GetThemeBackgroundContentRect () returned 0x0
[0250.417] RestoreDC (hdc=0x5f0107c4, nSavedDC=-1) returned 1
[0250.417] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107c4) returned 0x0
[0250.417] IsAppThemed () returned 0x1
[0250.417] GetThemeAppProperties () returned 0x3
[0250.417] GetThemeAppProperties () returned 0x3
[0250.417] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0250.417] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0250.417] GetCurrentObject (hdc=0x5f0107c4, type=0x1) returned 0xb00017
[0250.417] GetCurrentObject (hdc=0x5f0107c4, type=0x2) returned 0x900010
[0250.417] GetCurrentObject (hdc=0x5f0107c4, type=0x7) returned 0x1e0507b9
[0250.417] GetCurrentObject (hdc=0x5f0107c4, type=0x6) returned 0x8a01c2
[0250.418] SaveDC (hdc=0x5f0107c4) returned 1
[0250.418] GetTextAlign (hdc=0x5f0107c4) returned 0x0
[0250.418] GetTextColor (hdc=0x5f0107c4) returned 0x0
[0250.418] GetCurrentObject (hdc=0x5f0107c4, type=0x6) returned 0x8a01c2
[0250.418] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0250.419] SelectObject (hdc=0x5f0107c4, h=0x450a0799) returned 0x8a01c2
[0250.419] GetBkMode (hdc=0x5f0107c4) returned 2
[0250.419] SetBkMode (hdc=0x5f0107c4, mode=1) returned 2
[0250.420] DrawTextExW (in: hdc=0x5f0107c4, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2468f24 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0250.420] DrawTextExW (in: hdc=0x5f0107c4, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2468f24 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0250.420] RestoreDC (hdc=0x5f0107c4, nSavedDC=-1) returned 1
[0250.420] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107c4) returned 0x0
[0250.420] GetFocus () returned 0x202c6
[0250.420] IsAppThemed () returned 0x1
[0250.421] GetThemeAppProperties () returned 0x3
[0250.421] GetThemeAppProperties () returned 0x3
[0250.421] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0250.421] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x5f0107c4, x1=0, y1=0, rop=0xcc0020) returned 1
[0250.421] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107c4) returned 0x0
[0250.421] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0250.421] SelectObject (hdc=0x5f0107c4, h=0x85000f) returned 0x1e0507b9
[0250.421] DeleteDC (hdc=0x5f0107c4) returned 1
[0250.421] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0250.422] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0250.422] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0250.422] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0250.422] WaitMessage () returned 1
[0250.506] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0250.506] IsWindowUnicode (hWnd=0x202c6) returned 1
[0250.506] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0250.507] TranslateMessage (lpMsg=0x53eef8) returned 0
[0250.507] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0250.507] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0250.507] IsWindowUnicode (hWnd=0x202c6) returned 1
[0250.507] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0250.507] TranslateMessage (lpMsg=0x53eef8) returned 0
[0250.507] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0250.507] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x11005d) returned 0x0
[0250.507] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0250.507] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0250.507] WaitMessage () returned 1
[0250.639] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0250.639] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x199024d) returned 0x1
[0250.640] IsWindowUnicode (hWnd=0x202c6) returned 1
[0250.640] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0250.640] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x199024d) returned 0x1
[0250.640] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0250.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12c01f7) returned 0x0
[0250.640] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0250.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0250.640] SetCursor (hCursor=0x10003) returned 0x10003
[0250.641] TranslateMessage (lpMsg=0x53eef8) returned 0
[0250.641] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0250.641] GetKeyState (nVirtKey=1) returned -127
[0250.641] GetKeyState (nVirtKey=2) returned 0
[0250.641] GetKeyState (nVirtKey=4) returned 0
[0250.641] GetKeyState (nVirtKey=5) returned 0
[0250.641] GetKeyState (nVirtKey=6) returned 0
[0250.641] IsWindowVisible (hWnd=0x202c6) returned 1
[0250.641] IsWindowEnabled (hWnd=0x202c6) returned 1
[0250.641] SetFocus (hWnd=0x202c6) returned 0x202c6
[0250.641] GetFocus () returned 0x202c6
[0250.641] GetFocus () returned 0x202c6
[0250.641] GetFocus () returned 0x202c6
[0250.641] GetKeyState (nVirtKey=1) returned -127
[0250.641] GetKeyState (nVirtKey=2) returned 0
[0250.641] GetKeyState (nVirtKey=4) returned 0
[0250.641] GetKeyState (nVirtKey=5) returned 0
[0250.641] GetKeyState (nVirtKey=6) returned 0
[0250.641] GetCapture () returned 0x0
[0250.641] SetCapture (hWnd=0x202c6) returned 0x0
[0250.642] GetKeyState (nVirtKey=1) returned -127
[0250.642] GetKeyState (nVirtKey=2) returned 0
[0250.642] GetKeyState (nVirtKey=4) returned 0
[0250.642] GetKeyState (nVirtKey=5) returned 0
[0250.642] GetKeyState (nVirtKey=6) returned 0
[0250.642] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0250.642] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0250.642] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0250.642] IsWindowUnicode (hWnd=0x202c6) returned 1
[0250.642] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0250.642] TranslateMessage (lpMsg=0x53eef8) returned 0
[0250.642] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0250.642] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x24690a8, cPoints=0x1 | out: lpPoints=0x24690a8) returned 25690608
[0250.642] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0250.642] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0250.642] UpdateWindow (hWnd=0x202c6) returned 1
[0250.642] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x8b010786
[0250.643] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0250.643] CreateCompatibleDC (hdc=0x8b010786) returned 0x600107c4
[0250.643] SelectObject (hdc=0x600107c4, h=0x1e0507b9) returned 0x85000f
[0250.643] GdipCreateFromHDC (hdc=0x600107c4, graphics=0x53e5f0) returned 0x0
[0250.643] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0250.643] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0250.643] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0250.643] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0250.643] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0250.643] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0250.643] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0250.644] LocalFree (hMem=0x89eee8) returned 0x0
[0250.644] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0250.644] GdipCreateRegion (region=0x53e638) returned 0x0
[0250.644] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.644] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0250.644] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0250.644] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfbad0dbd) returned 0x0
[0250.644] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.644] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0250.644] GetCurrentObject (hdc=0x600107c4, type=0x1) returned 0xb00017
[0250.644] GetCurrentObject (hdc=0x600107c4, type=0x2) returned 0x900010
[0250.644] GetCurrentObject (hdc=0x600107c4, type=0x7) returned 0x1e0507b9
[0250.644] GetCurrentObject (hdc=0x600107c4, type=0x6) returned 0x8a01c2
[0250.644] SaveDC (hdc=0x600107c4) returned 1
[0250.644] GetNearestColor (hdc=0x600107c4, color=0xff) returned 0xff
[0250.645] GetNearestColor (hdc=0x600107c4, color=0x55) returned 0x55
[0250.645] GetNearestColor (hdc=0x600107c4, color=0x0) returned 0x0
[0250.645] GetNearestColor (hdc=0x600107c4, color=0x55) returned 0x55
[0250.645] GetNearestColor (hdc=0x600107c4, color=0x0) returned 0x0
[0250.645] GetNearestColor (hdc=0x600107c4, color=0x8080ff) returned 0x8080ff
[0250.645] GetNearestColor (hdc=0x600107c4, color=0x7373e5) returned 0x7373e5
[0250.645] GetNearestColor (hdc=0x600107c4, color=0xe5) returned 0xe5
[0250.645] GetNearestColor (hdc=0x600107c4, color=0x0) returned 0x0
[0250.645] RestoreDC (hdc=0x600107c4, nSavedDC=-1) returned 1
[0250.645] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107c4) returned 0x0
[0250.645] IsAppThemed () returned 0x1
[0250.645] GetThemeAppProperties () returned 0x3
[0250.645] GetThemeAppProperties () returned 0x3
[0250.645] IsAppThemed () returned 0x1
[0250.646] GetThemeAppProperties () returned 0x3
[0250.646] GetThemeAppProperties () returned 0x3
[0250.646] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x24697c4 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0250.646] IsAppThemed () returned 0x1
[0250.682] GetThemeAppProperties () returned 0x3
[0250.682] GetThemeAppProperties () returned 0x3
[0250.682] IsAppThemed () returned 0x1
[0250.682] GetThemeAppProperties () returned 0x3
[0250.682] GetThemeAppProperties () returned 0x3
[0250.682] IsAppThemed () returned 0x1
[0250.682] GetThemeAppProperties () returned 0x3
[0250.682] GetThemeAppProperties () returned 0x3
[0250.682] IsAppThemed () returned 0x1
[0250.682] GetThemeAppProperties () returned 0x3
[0250.682] GetThemeAppProperties () returned 0x3
[0250.682] IsThemePartDefined () returned 0x1
[0250.682] IsAppThemed () returned 0x1
[0250.682] GetThemeAppProperties () returned 0x3
[0250.682] GetThemeAppProperties () returned 0x3
[0250.682] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0250.683] IsAppThemed () returned 0x1
[0250.683] GetThemeAppProperties () returned 0x3
[0250.683] GetThemeAppProperties () returned 0x3
[0250.683] IsAppThemed () returned 0x1
[0250.683] GetThemeAppProperties () returned 0x3
[0250.683] GetThemeAppProperties () returned 0x3
[0250.683] IsThemePartDefined () returned 0x1
[0250.683] GdipCreateRegion (region=0x53e354) returned 0x0
[0250.683] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.683] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0250.683] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0250.683] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0250.683] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0250.683] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0250.683] LocalFree (hMem=0x89ee08) returned 0x0
[0250.683] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0250.683] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0250.684] LocalFree (hMem=0x89ec80) returned 0x0
[0250.684] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0250.684] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0250.684] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0250.684] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0250.684] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.684] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0250.684] GetCurrentObject (hdc=0x600107c4, type=0x1) returned 0xb00017
[0250.684] GetCurrentObject (hdc=0x600107c4, type=0x2) returned 0x900010
[0250.684] GetCurrentObject (hdc=0x600107c4, type=0x7) returned 0x1e0507b9
[0250.684] GetCurrentObject (hdc=0x600107c4, type=0x6) returned 0x8a01c2
[0250.684] SaveDC (hdc=0x600107c4) returned 1
[0250.684] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa90407a1
[0250.684] GetClipRgn (hdc=0x600107c4, hrgn=0xa90407a1) returned 0
[0250.684] SelectClipRgn (hdc=0x600107c4, hrgn=0x604051e) returned 2
[0250.685] DeleteObject (ho=0xa90407a1) returned 1
[0250.685] DeleteObject (ho=0x604051e) returned 1
[0250.685] OffsetViewportOrgEx (in: hdc=0x600107c4, x=0, y=0, lppt=0x2469e74 | out: lppt=0x2469e74) returned 1
[0250.685] DrawThemeParentBackground () returned 0x0
[0250.685] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0250.685] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0250.685] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0250.685] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0250.685] GetSystemMetrics (nIndex=42) returned 0
[0250.685] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0250.685] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0250.685] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0250.685] GetCurrentObject (hdc=0x600107c4, type=0x1) returned 0xb00017
[0250.685] GetCurrentObject (hdc=0x600107c4, type=0x2) returned 0x900010
[0250.686] GetCurrentObject (hdc=0x600107c4, type=0x7) returned 0x1e0507b9
[0250.686] GetCurrentObject (hdc=0x600107c4, type=0x6) returned 0x8a01c2
[0250.686] SaveDC (hdc=0x600107c4) returned 2
[0250.686] GetNearestColor (hdc=0x600107c4, color=0xff) returned 0xff
[0250.686] CreateSolidBrush (color=0xff) returned 0x4f10078d
[0250.686] FillRect (hDC=0x600107c4, lprc=0x53ddb8, hbr=0x4f10078d) returned 1
[0250.686] DeleteObject (ho=0x4f10078d) returned 1
[0250.686] RestoreDC (hdc=0x600107c4, nSavedDC=-1) returned 1
[0250.686] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0250.686] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0250.686] GetSystemMetrics (nIndex=42) returned 0
[0250.686] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0250.686] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0250.686] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0250.686] GetCurrentObject (hdc=0x600107c4, type=0x1) returned 0xb00017
[0250.687] GetCurrentObject (hdc=0x600107c4, type=0x2) returned 0x900010
[0250.687] GetCurrentObject (hdc=0x600107c4, type=0x7) returned 0x1e0507b9
[0250.687] GetCurrentObject (hdc=0x600107c4, type=0x6) returned 0x8a01c2
[0250.687] SaveDC (hdc=0x600107c4) returned 2
[0250.687] GetNearestColor (hdc=0x600107c4, color=0xff) returned 0xff
[0250.687] CreateSolidBrush (color=0xff) returned 0x5010078d
[0250.687] FillRect (hDC=0x600107c4, lprc=0x53dd58, hbr=0x5010078d) returned 1
[0250.687] DeleteObject (ho=0x5010078d) returned 1
[0250.687] RestoreDC (hdc=0x600107c4, nSavedDC=-1) returned 1
[0250.687] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0250.687] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0250.687] GetSystemMetrics (nIndex=42) returned 0
[0250.687] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0250.687] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0250.688] RestoreDC (hdc=0x600107c4, nSavedDC=-1) returned 1
[0250.688] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107c4) returned 0x0
[0250.688] IsAppThemed () returned 0x1
[0250.688] GetThemeAppProperties () returned 0x3
[0250.688] GetThemeAppProperties () returned 0x3
[0250.688] IsAppThemed () returned 0x1
[0250.688] GetThemeAppProperties () returned 0x3
[0250.688] GetThemeAppProperties () returned 0x3
[0250.688] IsThemePartDefined () returned 0x1
[0250.688] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0250.688] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.688] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0250.688] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0250.688] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0250.688] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0250.688] LocalFree (hMem=0x89ee08) returned 0x0
[0250.689] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0250.689] LocalFree (hMem=0x89ea88) returned 0x0
[0250.689] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0250.689] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0250.689] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0250.689] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0250.689] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.689] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0250.689] GetCurrentObject (hdc=0x600107c4, type=0x1) returned 0xb00017
[0250.689] GetCurrentObject (hdc=0x600107c4, type=0x2) returned 0x900010
[0250.689] GetCurrentObject (hdc=0x600107c4, type=0x7) returned 0x1e0507b9
[0250.689] GetCurrentObject (hdc=0x600107c4, type=0x6) returned 0x8a01c2
[0250.689] SaveDC (hdc=0x600107c4) returned 1
[0250.689] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x704051e
[0250.689] GetClipRgn (hdc=0x600107c4, hrgn=0x704051e) returned 0
[0250.689] SelectClipRgn (hdc=0x600107c4, hrgn=0xab0407a1) returned 2
[0250.689] DeleteObject (ho=0x704051e) returned 1
[0250.690] DeleteObject (ho=0xab0407a1) returned 1
[0250.690] OffsetViewportOrgEx (in: hdc=0x600107c4, x=0, y=0, lppt=0x246a6d8 | out: lppt=0x246a6d8) returned 1
[0250.690] IsAppThemed () returned 0x1
[0250.690] GetThemeAppProperties () returned 0x3
[0250.690] GetThemeAppProperties () returned 0x3
[0250.690] DrawThemeBackground () returned 0x0
[0250.690] RestoreDC (hdc=0x600107c4, nSavedDC=-1) returned 1
[0250.690] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107c4) returned 0x0
[0250.690] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0250.690] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.690] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0250.690] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0250.690] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0250.690] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0250.690] LocalFree (hMem=0x89ec80) returned 0x0
[0250.690] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0250.690] LocalFree (hMem=0x89ea88) returned 0x0
[0250.691] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0250.691] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0250.691] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0250.691] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0250.691] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.691] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0250.691] GetCurrentObject (hdc=0x600107c4, type=0x1) returned 0xb00017
[0250.691] GetCurrentObject (hdc=0x600107c4, type=0x2) returned 0x900010
[0250.691] GetCurrentObject (hdc=0x600107c4, type=0x7) returned 0x1e0507b9
[0250.691] GetCurrentObject (hdc=0x600107c4, type=0x6) returned 0x8a01c2
[0250.691] SaveDC (hdc=0x600107c4) returned 1
[0250.691] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xac0407a1
[0250.691] GetClipRgn (hdc=0x600107c4, hrgn=0xac0407a1) returned 0
[0250.691] SelectClipRgn (hdc=0x600107c4, hrgn=0x804051e) returned 2
[0250.691] DeleteObject (ho=0xac0407a1) returned 1
[0250.691] DeleteObject (ho=0x804051e) returned 1
[0250.691] OffsetViewportOrgEx (in: hdc=0x600107c4, x=0, y=0, lppt=0x246a9ac | out: lppt=0x246a9ac) returned 1
[0250.691] IsAppThemed () returned 0x1
[0250.692] GetThemeAppProperties () returned 0x3
[0250.692] GetThemeAppProperties () returned 0x3
[0250.692] GetThemeBackgroundContentRect () returned 0x0
[0250.692] RestoreDC (hdc=0x600107c4, nSavedDC=-1) returned 1
[0250.692] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107c4) returned 0x0
[0250.692] IsAppThemed () returned 0x1
[0250.692] GetThemeAppProperties () returned 0x3
[0250.692] GetThemeAppProperties () returned 0x3
[0250.692] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0250.692] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0250.692] GetCurrentObject (hdc=0x600107c4, type=0x1) returned 0xb00017
[0250.692] GetCurrentObject (hdc=0x600107c4, type=0x2) returned 0x900010
[0250.692] GetCurrentObject (hdc=0x600107c4, type=0x7) returned 0x1e0507b9
[0250.692] GetCurrentObject (hdc=0x600107c4, type=0x6) returned 0x8a01c2
[0250.692] SaveDC (hdc=0x600107c4) returned 1
[0250.692] GetTextAlign (hdc=0x600107c4) returned 0x0
[0250.692] GetTextColor (hdc=0x600107c4) returned 0x0
[0250.693] GetCurrentObject (hdc=0x600107c4, type=0x6) returned 0x8a01c2
[0250.693] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0250.693] SelectObject (hdc=0x600107c4, h=0x450a0799) returned 0x8a01c2
[0250.693] GetBkMode (hdc=0x600107c4) returned 2
[0250.693] SetBkMode (hdc=0x600107c4, mode=1) returned 2
[0250.694] DrawTextExW (in: hdc=0x600107c4, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x246ad4c | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0250.694] DrawTextExW (in: hdc=0x600107c4, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x246ad4c | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0250.694] RestoreDC (hdc=0x600107c4, nSavedDC=-1) returned 1
[0250.694] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107c4) returned 0x0
[0250.694] GetFocus () returned 0x202c6
[0250.695] IsAppThemed () returned 0x1
[0250.695] GetThemeAppProperties () returned 0x3
[0250.695] GetThemeAppProperties () returned 0x3
[0250.695] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0250.695] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x600107c4, x1=0, y1=0, rop=0xcc0020) returned 1
[0250.695] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107c4) returned 0x0
[0250.695] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0250.695] SelectObject (hdc=0x600107c4, h=0x85000f) returned 0x1e0507b9
[0250.695] DeleteDC (hdc=0x600107c4) returned 1
[0250.695] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0250.696] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0250.696] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x246ae48, cPoints=0x1 | out: lpPoints=0x246ae48) returned 25690608
[0250.696] WindowFromPoint (Point=0x24d) returned 0x202c6
[0250.696] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x199024d) returned 0x1
[0250.696] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0250.696] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0250.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.697] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0250.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.698] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0250.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.698] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0250.698] GetDC (hWnd=0x0) returned 0x10105d6
[0250.698] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e888) returned 0x0
[0250.699] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0250.699] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0250.699] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0250.699] GetSystemMetrics (nIndex=5) returned 1
[0250.699] GetSystemMetrics (nIndex=6) returned 1
[0250.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.699] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0250.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.699] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0250.751] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.751] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0250.751] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.751] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0250.751] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.751] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0250.752] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.752] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0250.752] GetSystemMetrics (nIndex=5) returned 1
[0250.752] GetSystemMetrics (nIndex=6) returned 1
[0250.752] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.752] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0250.752] GetSystemMetrics (nIndex=5) returned 1
[0250.752] GetSystemMetrics (nIndex=6) returned 1
[0250.752] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.752] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0250.753] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.753] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0250.753] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.753] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0250.753] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.753] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0250.753] GetSystemMetrics (nIndex=59) returned 1460
[0250.753] GetSystemMetrics (nIndex=60) returned 920
[0250.753] GetSystemMetrics (nIndex=34) returned 136
[0250.753] GetSystemMetrics (nIndex=35) returned 39
[0250.754] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.754] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0250.754] GetCurrentThreadId () returned 0x11d0
[0250.754] GetCurrentThreadId () returned 0x11d0
[0250.754] GetCurrentThreadId () returned 0x11d0
[0250.754] GetCurrentThreadId () returned 0x11d0
[0250.754] GetCurrentThreadId () returned 0x11d0
[0250.754] GetCurrentThreadId () returned 0x11d0
[0250.754] GetCurrentThreadId () returned 0x11d0
[0250.754] GetCurrentThreadId () returned 0x11d0
[0250.754] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.754] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0250.754] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0250.754] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0250.754] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.755] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0250.755] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.755] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0250.755] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x702ca
[0250.757] SetWindowLongW (hWnd=0x702ca, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0250.757] GetWindowLongW (hWnd=0x702ca, nIndex=-4) returned 1950089536
[0250.757] SetWindowLongW (hWnd=0x702ca, nIndex=-4, dwNewLong=79647854) returned 1950089536
[0250.757] GetWindowLongW (hWnd=0x702ca, nIndex=-4) returned 79647854
[0250.757] GetWindowLongW (hWnd=0x702ca, nIndex=-16) returned 113311744
[0250.757] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702ca, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0250.757] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702ca, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0250.758] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702ca, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0250.758] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702ca, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0250.758] GetClientRect (in: hWnd=0x702ca, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0250.758] GetWindowRect (in: hWnd=0x702ca, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0250.758] SetWindowTextW (hWnd=0x702ca, lpString="WindowsFormsParkingWindow") returned 1
[0250.759] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702ca, Msg=0xc, wParam=0x0, lParam=0x2462d94) returned 0x1
[0250.759] GetParent (hWnd=0x702ca) returned 0x0
[0250.759] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0250.759] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x702ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xd01e2
[0250.760] SetWindowLongW (hWnd=0xd01e2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0250.760] GetWindowLongW (hWnd=0xd01e2, nIndex=-4) returned 1868147648
[0250.760] SetWindowLongW (hWnd=0xd01e2, nIndex=-4, dwNewLong=79648894) returned 1868147648
[0250.760] GetWindowLongW (hWnd=0xd01e2, nIndex=-4) returned 79648894
[0250.760] GetWindowLongW (hWnd=0xd01e2, nIndex=-16) returned 1174405133
[0250.760] GetWindowLongW (hWnd=0xd01e2, nIndex=-12) returned 0
[0250.760] SetWindowLongW (hWnd=0xd01e2, nIndex=-12, dwNewLong=852450) returned 0
[0250.760] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0250.761] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0250.761] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0250.761] GetClientRect (in: hWnd=0xd01e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0250.761] GetWindowRect (in: hWnd=0xd01e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0250.761] GetParent (hWnd=0xd01e2) returned 0x702ca
[0250.762] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702ca, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0250.762] SetWindowTextW (hWnd=0xd01e2, lpString="Enter password: ") returned 1
[0250.762] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0250.762] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0250.762] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0250.762] GetClientRect (in: hWnd=0xd01e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0250.762] GetWindowRect (in: hWnd=0xd01e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0250.762] GetParent (hWnd=0xd01e2) returned 0x702ca
[0250.762] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702ca, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0250.762] SendMessageW (hWnd=0xd01e2, Msg=0x2210, wParam=0x1e20001, lParam=0xd01e2) returned 0x0
[0250.762] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x2210, wParam=0x1e20001, lParam=0xd01e2) returned 0x0
[0250.763] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0250.763] GetParent (hWnd=0xd01e2) returned 0x702ca
[0250.763] GdipCreateFromHWND (hwnd=0xd01e2, graphics=0x53e994) returned 0x0
[0250.763] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0250.763] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0250.763] GetProcessWindowStation () returned 0x13c
[0250.763] GetCapture () returned 0x202c6
[0250.763] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0250.763] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0250.764] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0250.764] ReleaseCapture () returned 1
[0250.764] GetActiveWindow () returned 0x70036
[0250.764] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0250.764] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.764] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0250.764] GetCursorPos (in: lpPoint=0x2477bf8 | out: lpPoint=0x2477bf8*(x=589, y=409)) returned 1
[0250.764] MonitorFromPoint (pt=0x24d, dwFlags=0x199) returned 0x10001
[0250.764] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0250.765] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x630107c4
[0250.765] GetDeviceCaps (hdc=0x630107c4, index=12) returned 32
[0250.765] GetDeviceCaps (hdc=0x630107c4, index=14) returned 1
[0250.765] DeleteDC (hdc=0x630107c4) returned 1
[0250.765] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0250.765] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0250.765] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xe00ea
[0250.766] SetWindowLongW (hWnd=0xe00ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0250.766] GetWindowLongW (hWnd=0xe00ea, nIndex=-4) returned 1950089536
[0250.766] SetWindowLongW (hWnd=0xe00ea, nIndex=-4, dwNewLong=79647814) returned 1950089536
[0250.766] GetWindowLongW (hWnd=0xe00ea, nIndex=-4) returned 79647814
[0250.766] GetWindowLongW (hWnd=0xe00ea, nIndex=-16) returned 113770496
[0250.766] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0250.767] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0250.768] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0250.768] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0250.768] GetWindowRect (in: hWnd=0xe00ea, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0250.768] SetWindowTextW (hWnd=0xe00ea, lpString="Ransomware") returned 1
[0250.768] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xc, wParam=0x0, lParam=0x246af10) returned 0x1
[0250.769] GetStartupInfoW (in: lpStartupInfo=0x2477f34 | out: lpStartupInfo=0x2477f34*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0250.770] GetParent (hWnd=0xe00ea) returned 0x0
[0250.770] SetWindowLongW (hWnd=0xe00ea, nIndex=-8, dwNewLong=0) returned 0
[0250.772] SendMessageW (hWnd=0xe00ea, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0250.772] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0250.772] SendMessageW (hWnd=0xe00ea, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0250.772] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0250.772] GetSystemMenu (hWnd=0xe00ea, bRevert=0) returned 0x7e0291
[0250.772] GetWindowPlacement (in: hWnd=0xe00ea, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0250.772] EnableMenuItem (hMenu=0x7e0291, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0250.773] EnableMenuItem (hMenu=0x7e0291, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0250.773] EnableMenuItem (hMenu=0x7e0291, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0250.773] EnableMenuItem (hMenu=0x7e0291, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0250.773] EnableMenuItem (hMenu=0x7e0291, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0250.773] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0250.773] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0250.773] GetWindowRect (in: hWnd=0xe00ea, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0250.773] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.773] GetWindowLongW (hWnd=0xe00ea, nIndex=-16) returned 113770496
[0250.773] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.773] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.773] GetSystemMetrics (nIndex=42) returned 0
[0250.773] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.773] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0250.774] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.774] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.774] GetSystemMetrics (nIndex=42) returned 0
[0250.774] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.774] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0250.774] GetCursorPos (in: lpPoint=0x24780a8 | out: lpPoint=0x24780a8*(x=589, y=409)) returned 1
[0250.774] MonitorFromPoint (pt=0x24d, dwFlags=0x199) returned 0x10001
[0250.774] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0250.774] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x670107c4
[0250.774] GetDeviceCaps (hdc=0x670107c4, index=12) returned 32
[0250.774] GetDeviceCaps (hdc=0x670107c4, index=14) returned 1
[0250.774] DeleteDC (hdc=0x670107c4) returned 1
[0250.774] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0250.774] GetWindowLongW (hWnd=0xe00ea, nIndex=-16) returned 113770496
[0250.775] GetWindowLongW (hWnd=0xe00ea, nIndex=-20) returned 327937
[0250.775] SetWindowLongW (hWnd=0xe00ea, nIndex=-16, dwNewLong=46661632) returned 113770496
[0250.775] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0250.775] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0250.775] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0250.776] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0250.776] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0250.776] SetWindowLongW (hWnd=0xe00ea, nIndex=-20, dwNewLong=327681) returned 327937
[0250.776] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0250.776] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0250.777] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0250.777] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0250.777] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0250.777] SetWindowPos (hWnd=0xe00ea, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0250.777] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0250.778] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0250.778] GetWindowPlacement (in: hWnd=0xe00ea, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0250.778] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0250.778] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0250.778] GetWindowRect (in: hWnd=0xe00ea, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0250.778] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0250.779] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0250.779] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0250.780] RedrawWindow (hWnd=0xe00ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0250.780] GetSystemMenu (hWnd=0xe00ea, bRevert=0) returned 0x7e0291
[0250.780] GetWindowPlacement (in: hWnd=0xe00ea, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0250.780] EnableMenuItem (hMenu=0x7e0291, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0250.780] EnableMenuItem (hMenu=0x7e0291, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0250.780] EnableMenuItem (hMenu=0x7e0291, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0250.780] EnableMenuItem (hMenu=0x7e0291, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0250.780] EnableMenuItem (hMenu=0x7e0291, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0250.780] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0250.780] GetWindowLongW (hWnd=0xe00ea, nIndex=-8) returned 0
[0250.780] SetWindowLongW (hWnd=0xe00ea, nIndex=-8, dwNewLong=458806) returned 0
[0250.781] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0250.781] GetProcessWindowStation () returned 0x13c
[0250.781] GetCurrentThreadId () returned 0x11d0
[0250.781] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf573e, lParam=0x0) returned 1
[0250.781] IsWindowVisible (hWnd=0xe00ea) returned 0
[0250.781] IsWindowVisible (hWnd=0x70036) returned 1
[0250.781] IsWindowEnabled (hWnd=0x70036) returned 1
[0250.781] IsWindowVisible (hWnd=0x602b6) returned 0
[0250.782] IsWindowVisible (hWnd=0x901f8) returned 0
[0250.782] IsWindowVisible (hWnd=0x202d0) returned 0
[0250.782] IsWindowVisible (hWnd=0x202d4) returned 0
[0250.782] GetActiveWindow () returned 0x70036
[0250.782] GetFocus () returned 0x202c6
[0250.782] IsWindow (hWnd=0x70036) returned 1
[0250.782] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0250.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0250.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0250.783] GetWindowLongW (hWnd=0xe00ea, nIndex=-8) returned 458806
[0250.783] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0250.783] GetCurrentThreadId () returned 0x11d0
[0250.783] GetWindowLongW (hWnd=0xe00ea, nIndex=-8) returned 458806
[0250.783] IsWindowEnabled (hWnd=0x70036) returned 0
[0250.783] IsWindowEnabled (hWnd=0xe00ea) returned 1
[0250.783] ShowWindow (hWnd=0xe00ea, nCmdShow=5) returned 0
[0250.783] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0250.783] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0250.783] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.783] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0250.784] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0xe00ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xd0122
[0250.784] SetWindowLongW (hWnd=0xd0122, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0250.784] GetWindowLongW (hWnd=0xd0122, nIndex=-4) returned 1868026976
[0250.784] SetWindowLongW (hWnd=0xd0122, nIndex=-4, dwNewLong=79648814) returned 1868026976
[0250.784] GetWindowLongW (hWnd=0xd0122, nIndex=-4) returned 79648814
[0250.784] GetWindowLongW (hWnd=0xd0122, nIndex=-16) returned 1174470848
[0250.784] GetWindowLongW (hWnd=0xd0122, nIndex=-12) returned 0
[0250.784] SetWindowLongW (hWnd=0xd0122, nIndex=-12, dwNewLong=852258) returned 0
[0250.784] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0250.785] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0250.786] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0250.786] SendMessageW (hWnd=0xd0122, Msg=0x2055, wParam=0xd0122, lParam=0x3) returned 0x2
[0250.786] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0250.787] GetWindow (hWnd=0xd0122, uCmd=0x3) returned 0x0
[0250.787] GetClientRect (in: hWnd=0xd0122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0250.787] GetWindowRect (in: hWnd=0xd0122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0250.787] GetParent (hWnd=0xd0122) returned 0xe00ea
[0250.787] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe00ea, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0250.787] SendMessageW (hWnd=0xd0122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0250.787] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0250.787] SendMessageW (hWnd=0xd0122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0250.787] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0250.787] GetSystemMetrics (nIndex=5) returned 1
[0250.787] GetSystemMetrics (nIndex=6) returned 1
[0250.787] SendMessageW (hWnd=0xd0122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0250.787] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0250.787] SendMessageW (hWnd=0xd0122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0250.787] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0250.788] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0250.788] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0250.788] GetClientRect (in: hWnd=0xd0122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0250.788] GetWindowRect (in: hWnd=0xd0122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0250.788] GetParent (hWnd=0xd0122) returned 0xe00ea
[0250.788] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe00ea, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0250.788] SendMessageW (hWnd=0xd0122, Msg=0x2210, wParam=0x1220001, lParam=0xd0122) returned 0x0
[0250.788] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x2210, wParam=0x1220001, lParam=0xd0122) returned 0x0
[0250.788] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0250.788] GetParent (hWnd=0xd0122) returned 0xe00ea
[0250.789] GetParent (hWnd=0xd01e2) returned 0x702ca
[0250.789] SetParent (hWndChild=0xd01e2, hWndNewParent=0xe00ea) returned 0x702ca
[0250.789] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0250.789] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0250.789] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0250.789] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0250.789] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0250.789] GetClientRect (in: hWnd=0xd01e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0250.790] GetWindowRect (in: hWnd=0xd01e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0250.790] GetParent (hWnd=0xd01e2) returned 0xe00ea
[0250.790] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe00ea, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0250.790] GetClientRect (in: hWnd=0xd01e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0250.790] GetWindowRect (in: hWnd=0xd01e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0250.790] GetParent (hWnd=0xd01e2) returned 0xe00ea
[0250.790] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe00ea, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0250.790] GetParent (hWnd=0xd01e2) returned 0xe00ea
[0250.790] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0250.790] GetWindow (hWnd=0xd01e2, uCmd=0x3) returned 0x0
[0250.790] SetWindowPos (hWnd=0xd01e2, hWndInsertAfter=0xd0122, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0250.790] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0250.791] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0250.791] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0250.791] GetClientRect (in: hWnd=0xd01e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0250.791] GetWindowRect (in: hWnd=0xd01e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0250.791] GetParent (hWnd=0xd01e2) returned 0xe00ea
[0250.791] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe00ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0250.791] GetParent (hWnd=0xd01e2) returned 0xe00ea
[0250.791] GetWindow (hWnd=0xd01e2, uCmd=0x3) returned 0xd0122
[0250.791] GetWindowThreadProcessId (in: hWnd=0xd01e2, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0250.791] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0250.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.792] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0250.792] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0xe00ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x9004e
[0250.793] SetWindowLongW (hWnd=0x9004e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0250.793] GetWindowLongW (hWnd=0x9004e, nIndex=-4) returned 1868032000
[0250.793] SetWindowLongW (hWnd=0x9004e, nIndex=-4, dwNewLong=79648134) returned 1868032000
[0250.793] GetWindowLongW (hWnd=0x9004e, nIndex=-4) returned 79648134
[0250.793] GetWindowLongW (hWnd=0x9004e, nIndex=-16) returned 1174470667
[0250.793] GetWindowLongW (hWnd=0x9004e, nIndex=-12) returned 0
[0250.793] SetWindowLongW (hWnd=0x9004e, nIndex=-12, dwNewLong=589902) returned 0
[0250.793] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0250.794] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0250.794] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0250.795] SendMessageW (hWnd=0x9004e, Msg=0x2055, wParam=0x9004e, lParam=0x3) returned 0x2
[0250.795] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0250.795] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0250.795] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0250.795] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0250.795] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0250.795] RedrawWindow (hWnd=0xd0122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0250.795] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0250.795] RedrawWindow (hWnd=0xd01e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0250.796] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0250.796] RedrawWindow (hWnd=0x9004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0250.796] RedrawWindow (hWnd=0xe00ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0250.796] GetWindow (hWnd=0x9004e, uCmd=0x3) returned 0xd01e2
[0250.796] GetClientRect (in: hWnd=0x9004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0250.796] GetWindowRect (in: hWnd=0x9004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0250.796] GetParent (hWnd=0x9004e) returned 0xe00ea
[0250.796] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe00ea, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0250.796] SetWindowTextW (hWnd=0x9004e, lpString="OK") returned 1
[0250.796] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0xc, wParam=0x0, lParam=0x246f3d0) returned 0x1
[0250.797] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0250.797] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0250.797] GetClientRect (in: hWnd=0x9004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0250.797] GetWindowRect (in: hWnd=0x9004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0250.797] GetParent (hWnd=0x9004e) returned 0xe00ea
[0250.797] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe00ea, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0250.797] SendMessageW (hWnd=0x9004e, Msg=0x2210, wParam=0x4e0001, lParam=0x9004e) returned 0x0
[0250.797] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x2210, wParam=0x4e0001, lParam=0x9004e) returned 0x0
[0250.797] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0250.797] GetParent (hWnd=0x9004e) returned 0xe00ea
[0250.797] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0250.798] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.798] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0250.798] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0xe00ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x28013e
[0250.798] SetWindowLongW (hWnd=0x28013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0250.798] GetWindowLongW (hWnd=0x28013e, nIndex=-4) returned 1868032000
[0250.799] SetWindowLongW (hWnd=0x28013e, nIndex=-4, dwNewLong=79648014) returned 1868032000
[0250.799] GetWindowLongW (hWnd=0x28013e, nIndex=-4) returned 79648014
[0250.799] GetWindowLongW (hWnd=0x28013e, nIndex=-16) returned 1174470667
[0250.799] GetWindowLongW (hWnd=0x28013e, nIndex=-12) returned 0
[0250.799] SetWindowLongW (hWnd=0x28013e, nIndex=-12, dwNewLong=2621758) returned 0
[0250.799] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0250.799] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0250.800] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0250.800] SendMessageW (hWnd=0x28013e, Msg=0x2055, wParam=0x28013e, lParam=0x3) returned 0x2
[0250.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0250.800] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0250.801] GetWindow (hWnd=0x28013e, uCmd=0x3) returned 0x9004e
[0250.801] GetClientRect (in: hWnd=0x28013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0250.801] GetWindowRect (in: hWnd=0x28013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0250.801] GetParent (hWnd=0x28013e) returned 0xe00ea
[0250.801] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe00ea, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0250.801] SetWindowTextW (hWnd=0x28013e, lpString="Cancel") returned 1
[0250.801] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0xc, wParam=0x0, lParam=0x2472c90) returned 0x1
[0250.801] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0250.801] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0250.801] GetClientRect (in: hWnd=0x28013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0250.801] GetWindowRect (in: hWnd=0x28013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0250.802] GetParent (hWnd=0x28013e) returned 0xe00ea
[0250.802] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xe00ea, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0250.802] SendMessageW (hWnd=0x28013e, Msg=0x2210, wParam=0x13e0001, lParam=0x28013e) returned 0x0
[0250.802] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0x2210, wParam=0x13e0001, lParam=0x28013e) returned 0x0
[0250.802] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0250.802] GetParent (hWnd=0x28013e) returned 0xe00ea
[0250.802] GetDC (hWnd=0x0) returned 0xf0105ee
[0250.802] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e320) returned 0x0
[0250.803] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0250.803] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0250.803] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0250.803] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0250.804] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0250.804] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0250.804] GetWindowLongW (hWnd=0xe00ea, nIndex=-8) returned 458806
[0250.804] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0250.804] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0250.804] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x6e0107c4
[0250.804] GetDeviceCaps (hdc=0x6e0107c4, index=12) returned 32
[0250.804] GetDeviceCaps (hdc=0x6e0107c4, index=14) returned 1
[0250.804] DeleteDC (hdc=0x6e0107c4) returned 1
[0250.804] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0250.804] GetWindowThreadProcessId (in: hWnd=0xe00ea, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0250.804] GetCurrentThreadId () returned 0x11d0
[0250.805] PostMessageW (hWnd=0xe00ea, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0250.805] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.805] GetSystemMetrics (nIndex=42) returned 0
[0250.805] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0250.805] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0250.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0250.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0250.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0250.814] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0xe00ea) returned 0x1
[0250.816] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0250.816] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0250.816] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0250.816] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0250.818] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0250.819] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0250.819] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0250.820] GetFocus () returned 0x202c6
[0250.820] IsChild (hWndParent=0xe00ea, hWnd=0x202c6) returned 0
[0250.820] GetFocus () returned 0x202c6
[0250.820] SetFocus (hWnd=0xd0122) returned 0x202c6
[0250.820] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xd0122, lParam=0x0) returned 0x0
[0250.821] GetCapture () returned 0x0
[0250.821] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0250.821] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0250.822] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0250.824] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0250.824] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0250.824] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0250.824] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0250.825] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0250.825] GetParent (hWnd=0xe00ea) returned 0x0
[0250.825] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0250.825] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0250.825] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0250.826] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0250.826] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0250.826] GetSysColorBrush (nIndex=5) returned 0x100079
[0250.827] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0250.827] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0250.828] SendMessageW (hWnd=0xd0122, Msg=0x2111, wParam=0x1000122, lParam=0xd0122) returned 0x0
[0250.828] SendMessageW (hWnd=0xd0122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0250.828] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0250.828] GetKeyState (nVirtKey=1) returned 1
[0250.828] GetKeyState (nVirtKey=2) returned 0
[0250.828] GetKeyState (nVirtKey=4) returned 0
[0250.828] GetKeyState (nVirtKey=5) returned 0
[0250.828] GetKeyState (nVirtKey=6) returned 0
[0250.828] GetWindowTextLengthW (hWnd=0xd0122) returned 0
[0250.828] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0250.828] SendMessageW (hWnd=0xd0122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0250.828] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0250.829] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0250.829] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0250.833] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0250.837] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0250.838] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0250.838] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0250.838] GetWindowPlacement (in: hWnd=0xe00ea, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0250.838] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0250.838] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.838] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.838] GetSystemMetrics (nIndex=42) returned 0
[0250.838] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.838] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0250.839] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0250.839] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017
[0250.839] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010
[0250.839] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0xfffffffffe0507ce
[0250.839] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2
[0250.839] SaveDC (hdc=0x60100ce) returned 1
[0250.839] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0
[0250.839] CreateSolidBrush (color=0xf0f0f0) returned 0x5110078d
[0250.839] FillRect (hDC=0x60100ce, lprc=0x53e250, hbr=0x5110078d) returned 1
[0250.839] DeleteObject (ho=0x5110078d) returned 1
[0250.839] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1
[0250.839] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0250.839] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0250.840] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0250.840] GetWindowPlacement (in: hWnd=0xe00ea, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0250.840] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0250.841] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.841] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.841] GetSystemMetrics (nIndex=42) returned 0
[0250.841] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.841] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0250.841] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0250.841] GetCurrentObject (hdc=0x840107c4, type=0x1) returned 0xb00017
[0250.841] GetCurrentObject (hdc=0x840107c4, type=0x2) returned 0x900010
[0250.841] GetCurrentObject (hdc=0x840107c4, type=0x7) returned 0x570507ba
[0250.841] GetCurrentObject (hdc=0x840107c4, type=0x6) returned 0x8a01c2
[0250.841] SaveDC (hdc=0x840107c4) returned 1
[0250.841] GetNearestColor (hdc=0x840107c4, color=0xf0f0f0) returned 0xf0f0f0
[0250.841] CreateSolidBrush (color=0xf0f0f0) returned 0x5210078d
[0250.841] FillRect (hDC=0x840107c4, lprc=0x53dc18, hbr=0x5210078d) returned 1
[0250.841] DeleteObject (ho=0x5210078d) returned 1
[0250.841] RestoreDC (hdc=0x840107c4, nSavedDC=-1) returned 1
[0250.841] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.841] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.841] GetSystemMetrics (nIndex=42) returned 0
[0250.841] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.841] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0250.842] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0250.842] GetCurrentObject (hdc=0x840107c4, type=0x1) returned 0xb00017
[0250.842] GetCurrentObject (hdc=0x840107c4, type=0x2) returned 0x900010
[0250.842] GetCurrentObject (hdc=0x840107c4, type=0x7) returned 0x570507ba
[0250.842] GetCurrentObject (hdc=0x840107c4, type=0x6) returned 0x8a01c2
[0250.842] SaveDC (hdc=0x840107c4) returned 1
[0250.842] GetNearestColor (hdc=0x840107c4, color=0xf0f0f0) returned 0xf0f0f0
[0250.842] CreateSolidBrush (color=0xf0f0f0) returned 0x5310078d
[0250.842] FillRect (hDC=0x840107c4, lprc=0x53dbb8, hbr=0x5310078d) returned 1
[0250.842] DeleteObject (ho=0x5310078d) returned 1
[0250.842] RestoreDC (hdc=0x840107c4, nSavedDC=-1) returned 1
[0250.842] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.842] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.842] GetSystemMetrics (nIndex=42) returned 0
[0250.842] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.842] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0250.843] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0250.843] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0250.843] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0250.844] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0250.844] GetStockObject (i=5) returned 0x900015
[0250.844] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0250.844] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0250.844] GetStockObject (i=5) returned 0x900015
[0250.844] GetWindowPlacement (in: hWnd=0xe00ea, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0250.844] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0250.844] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0250.844] GetWindowRect (in: hWnd=0xe00ea, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0250.845] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0250.846] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0250.846] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0250.846] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0250.846] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0250.846] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0250.846] GetWindowRect (in: hWnd=0xe00ea, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0250.846] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.846] IsWindowUnicode (hWnd=0xe00ea) returned 1
[0250.846] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.847] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.847] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.847] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0250.847] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.847] IsWindowUnicode (hWnd=0xe00ea) returned 1
[0250.847] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.847] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.847] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.847] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.847] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x84, wParam=0x0, lParam=0x1920357) returned 0x1
[0250.847] IsWindowUnicode (hWnd=0x9004e) returned 1
[0250.847] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.848] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.848] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.848] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0250.848] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0250.848] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.848] IsWindowUnicode (hWnd=0x102dc) returned 1
[0250.848] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.848] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.848] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.848] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.848] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x84, wParam=0x0, lParam=0x1920357) returned 0x1
[0250.848] IsWindowUnicode (hWnd=0x9004e) returned 1
[0250.848] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.848] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x84, wParam=0x0, lParam=0x1920357) returned 0x1
[0250.848] SetCursor (hCursor=0x10003) returned 0x10003
[0250.849] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.849] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.849] _TrackMouseEvent (in: lpEventTrack=0x2479624 | out: lpEventTrack=0x2479624) returned 1
[0250.849] SendMessageW (hWnd=0x9004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0250.849] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0250.849] InvalidateRect (hWnd=0x9004e, lpRect=0x0, bErase=0) returned 1
[0250.849] GetKeyState (nVirtKey=1) returned 1
[0250.849] GetKeyState (nVirtKey=2) returned 0
[0250.849] GetKeyState (nVirtKey=4) returned 0
[0250.849] GetKeyState (nVirtKey=5) returned 0
[0250.849] GetKeyState (nVirtKey=6) returned 0
[0250.849] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.849] IsWindowUnicode (hWnd=0x9004e) returned 1
[0250.849] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.849] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.858] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.858] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0250.858] InvalidateRect (hWnd=0x9004e, lpRect=0x0, bErase=0) returned 1
[0250.858] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.859] IsWindowUnicode (hWnd=0xe00ea) returned 1
[0250.859] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.859] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.859] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.859] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.860] IsWindowUnicode (hWnd=0xe00ea) returned 1
[0250.860] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.860] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.860] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.860] BeginPaint (in: hWnd=0xe00ea, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x10105d6
[0250.860] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0250.860] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.860] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.860] GetSystemMetrics (nIndex=42) returned 0
[0250.860] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.861] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0250.861] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0250.861] EndPaint (hWnd=0xe00ea, lpPaint=0x53e30c) returned 1
[0250.861] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.861] IsWindowUnicode (hWnd=0xd0122) returned 1
[0250.861] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.861] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.861] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0250.861] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0250.862] SetTextColor (hdc=0x850107c4, color=0x0) returned 0x0
[0250.862] SetBkColor (hdc=0x850107c4, color=0xffffff) returned 0xffffff
[0250.862] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.863] IsWindowUnicode (hWnd=0xd01e2) returned 1
[0250.863] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.863] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.863] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.863] BeginPaint (in: hWnd=0xd01e2, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x8b010786
[0250.863] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0250.863] CreateCompatibleDC (hdc=0x8b010786) returned 0x2701079c
[0250.863] SelectObject (hdc=0x2701079c, h=0x1e0507b9) returned 0x85000f
[0250.863] GdipCreateFromHDC (hdc=0x2701079c, graphics=0x53e30c) returned 0x0
[0250.863] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0250.863] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0250.863] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0250.863] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0250.863] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0250.864] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0250.864] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0250.864] LocalFree (hMem=0x89eac0) returned 0x0
[0250.864] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0250.864] GdipCreateRegion (region=0x53e354) returned 0x0
[0250.864] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.864] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0250.864] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0250.864] GetWindowTextLengthW (hWnd=0xd01e2) returned 16
[0250.864] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0250.864] GetSystemMetrics (nIndex=42) returned 0
[0250.864] GetWindowTextW (in: hWnd=0xd01e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0250.864] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0250.864] GetClientRect (in: hWnd=0xd01e2, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0250.864] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0250.864] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0250.864] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0250.864] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0250.864] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0250.864] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0250.864] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0250.865] LocalFree (hMem=0x89eac0) returned 0x0
[0250.865] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0250.865] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0250.865] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0250.865] LocalFree (hMem=0x89eac0) returned 0x0
[0250.865] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0250.865] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0250.865] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0250.865] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0250.865] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0250.865] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0250.865] GetCurrentObject (hdc=0x2701079c, type=0x1) returned 0xb00017
[0250.865] GetCurrentObject (hdc=0x2701079c, type=0x2) returned 0x900010
[0250.865] GetCurrentObject (hdc=0x2701079c, type=0x7) returned 0x1e0507b9
[0250.865] GetCurrentObject (hdc=0x2701079c, type=0x6) returned 0x8a01c2
[0250.866] SaveDC (hdc=0x2701079c) returned 1
[0250.866] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3204053e
[0250.866] GetClipRgn (hdc=0x2701079c, hrgn=0x3204053e) returned 0
[0250.866] SelectClipRgn (hdc=0x2701079c, hrgn=0xd04051e) returned 2
[0250.866] DeleteObject (ho=0x3204053e) returned 1
[0250.866] DeleteObject (ho=0xd04051e) returned 1
[0250.866] OffsetViewportOrgEx (in: hdc=0x2701079c, x=0, y=0, lppt=0x2479b50 | out: lppt=0x2479b50) returned 1
[0250.866] GetNearestColor (hdc=0x2701079c, color=0xf0f0f0) returned 0xf0f0f0
[0250.866] CreateSolidBrush (color=0xf0f0f0) returned 0x5410078d
[0250.866] FillRect (hDC=0x2701079c, lprc=0x53e1f4, hbr=0x5410078d) returned 1
[0250.866] DeleteObject (ho=0x5410078d) returned 1
[0250.866] RestoreDC (hdc=0x2701079c, nSavedDC=-1) returned 1
[0250.866] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2701079c) returned 0x0
[0250.866] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfba70dbd) returned 0x0
[0250.866] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.866] GetWindowTextLengthW (hWnd=0xd01e2) returned 16
[0250.866] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0250.866] GetSystemMetrics (nIndex=42) returned 0
[0250.866] GetWindowTextW (in: hWnd=0xd01e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0250.867] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0250.867] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0250.867] GetCurrentObject (hdc=0x2701079c, type=0x1) returned 0xb00017
[0250.867] GetCurrentObject (hdc=0x2701079c, type=0x2) returned 0x900010
[0250.867] GetCurrentObject (hdc=0x2701079c, type=0x7) returned 0x1e0507b9
[0250.867] GetCurrentObject (hdc=0x2701079c, type=0x6) returned 0x8a01c2
[0250.867] SaveDC (hdc=0x2701079c) returned 1
[0250.867] GetNearestColor (hdc=0x2701079c, color=0x0) returned 0x0
[0250.867] RestoreDC (hdc=0x2701079c, nSavedDC=-1) returned 1
[0250.867] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2701079c) returned 0x0
[0250.867] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0250.868] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0250.868] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0250.868] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2479e58 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0250.868] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0250.868] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0250.868] GetCurrentObject (hdc=0x2701079c, type=0x1) returned 0xb00017
[0250.868] GetCurrentObject (hdc=0x2701079c, type=0x2) returned 0x900010
[0250.868] GetCurrentObject (hdc=0x2701079c, type=0x7) returned 0x1e0507b9
[0250.868] GetCurrentObject (hdc=0x2701079c, type=0x6) returned 0x8a01c2
[0250.868] SaveDC (hdc=0x2701079c) returned 1
[0250.868] GetTextAlign (hdc=0x2701079c) returned 0x0
[0250.868] GetTextColor (hdc=0x2701079c) returned 0x0
[0250.868] GetCurrentObject (hdc=0x2701079c, type=0x6) returned 0x8a01c2
[0250.869] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0250.869] SelectObject (hdc=0x2701079c, h=0x730a066d) returned 0x8a01c2
[0250.869] GetBkMode (hdc=0x2701079c) returned 2
[0250.869] SetBkMode (hdc=0x2701079c, mode=1) returned 2
[0250.869] DrawTextExW (in: hdc=0x2701079c, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x247a07c | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0250.869] RestoreDC (hdc=0x2701079c, nSavedDC=-1) returned 1
[0250.869] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2701079c) returned 0x0
[0250.869] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0250.869] BitBlt (hdc=0x8b010786, x=0, y=0, cx=250, cy=70, hdcSrc=0x2701079c, x1=0, y1=0, rop=0xcc0020) returned 1
[0250.869] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2701079c) returned 0x0
[0250.869] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0250.870] SelectObject (hdc=0x2701079c, h=0x85000f) returned 0x1e0507b9
[0250.870] DeleteDC (hdc=0x2701079c) returned 1
[0250.870] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0250.870] EndPaint (hWnd=0xd01e2, lpPaint=0x53e2f0) returned 1
[0250.870] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.870] IsWindowUnicode (hWnd=0x9004e) returned 1
[0250.870] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.870] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.870] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.870] BeginPaint (in: hWnd=0x9004e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0250.870] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0250.870] CreateCompatibleDC (hdc=0xf0105ee) returned 0x2901079c
[0250.870] SelectObject (hdc=0x2901079c, h=0x1e0507b9) returned 0x85000f
[0250.871] GdipCreateFromHDC (hdc=0x2901079c, graphics=0x53e300) returned 0x0
[0250.871] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0250.871] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0250.871] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0250.871] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0250.871] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0250.871] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0250.871] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0250.871] LocalFree (hMem=0x89ec80) returned 0x0
[0250.871] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0250.871] GdipCreateRegion (region=0x53e348) returned 0x0
[0250.871] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.871] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0250.871] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0250.871] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfba50dbd) returned 0x0
[0250.871] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.871] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0250.871] GetCurrentObject (hdc=0x2901079c, type=0x1) returned 0xb00017
[0250.871] GetCurrentObject (hdc=0x2901079c, type=0x2) returned 0x900010
[0250.872] GetCurrentObject (hdc=0x2901079c, type=0x7) returned 0x1e0507b9
[0250.872] GetCurrentObject (hdc=0x2901079c, type=0x6) returned 0x8a01c2
[0250.872] SaveDC (hdc=0x2901079c) returned 1
[0250.872] GetNearestColor (hdc=0x2901079c, color=0xf0f0f0) returned 0xf0f0f0
[0250.872] GetNearestColor (hdc=0x2901079c, color=0xa0a0a0) returned 0xa0a0a0
[0250.872] GetNearestColor (hdc=0x2901079c, color=0x696969) returned 0x696969
[0250.872] GetNearestColor (hdc=0x2901079c, color=0xa0a0a0) returned 0xa0a0a0
[0250.872] GetNearestColor (hdc=0x2901079c, color=0x0) returned 0x0
[0250.872] GetNearestColor (hdc=0x2901079c, color=0xffffff) returned 0xffffff
[0250.872] GetNearestColor (hdc=0x2901079c, color=0xe5e5e5) returned 0xe5e5e5
[0250.872] GetNearestColor (hdc=0x2901079c, color=0xd7d7d7) returned 0xd7d7d7
[0250.872] GetNearestColor (hdc=0x2901079c, color=0x0) returned 0x0
[0250.872] RestoreDC (hdc=0x2901079c, nSavedDC=-1) returned 1
[0250.873] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2901079c) returned 0x0
[0250.873] IsAppThemed () returned 0x1
[0250.873] GetThemeAppProperties () returned 0x3
[0250.873] GetThemeAppProperties () returned 0x3
[0250.873] IsAppThemed () returned 0x1
[0250.873] GetThemeAppProperties () returned 0x3
[0250.873] GetThemeAppProperties () returned 0x3
[0250.873] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x247a7e8 | out: lpchText="OK", lprc=0x53e028) returned 13
[0250.873] IsAppThemed () returned 0x1
[0250.873] GetThemeAppProperties () returned 0x3
[0250.873] GetThemeAppProperties () returned 0x3
[0250.873] IsAppThemed () returned 0x1
[0250.873] GetThemeAppProperties () returned 0x3
[0250.873] GetThemeAppProperties () returned 0x3
[0250.873] GetFocus () returned 0xd0122
[0250.873] IsAppThemed () returned 0x1
[0250.873] GetThemeAppProperties () returned 0x3
[0250.873] GetThemeAppProperties () returned 0x3
[0250.873] IsAppThemed () returned 0x1
[0250.874] GetThemeAppProperties () returned 0x3
[0250.874] GetThemeAppProperties () returned 0x3
[0250.874] IsThemePartDefined () returned 0x1
[0250.874] IsAppThemed () returned 0x1
[0250.874] GetThemeAppProperties () returned 0x3
[0250.874] GetThemeAppProperties () returned 0x3
[0250.874] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0250.874] IsAppThemed () returned 0x1
[0250.874] GetThemeAppProperties () returned 0x3
[0250.874] GetThemeAppProperties () returned 0x3
[0250.874] IsAppThemed () returned 0x1
[0250.874] GetThemeAppProperties () returned 0x3
[0250.874] GetThemeAppProperties () returned 0x3
[0250.874] IsThemePartDefined () returned 0x1
[0250.874] GdipCreateRegion (region=0x53e070) returned 0x0
[0250.874] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.874] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0250.874] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0250.874] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0250.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0250.874] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0250.874] LocalFree (hMem=0x89ec80) returned 0x0
[0250.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0250.874] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0250.874] LocalFree (hMem=0x89eac0) returned 0x0
[0250.875] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0250.875] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0250.875] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0250.875] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0250.875] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.875] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0250.875] GetCurrentObject (hdc=0x2901079c, type=0x1) returned 0xb00017
[0250.875] GetCurrentObject (hdc=0x2901079c, type=0x2) returned 0x900010
[0250.875] GetCurrentObject (hdc=0x2901079c, type=0x7) returned 0x1e0507b9
[0250.875] GetCurrentObject (hdc=0x2901079c, type=0x6) returned 0x8a01c2
[0250.875] SaveDC (hdc=0x2901079c) returned 1
[0250.875] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe04051e
[0250.875] GetClipRgn (hdc=0x2901079c, hrgn=0xe04051e) returned 0
[0250.875] SelectClipRgn (hdc=0x2901079c, hrgn=0x3604053e) returned 2
[0250.875] DeleteObject (ho=0xe04051e) returned 1
[0250.875] DeleteObject (ho=0x3604053e) returned 1
[0250.875] OffsetViewportOrgEx (in: hdc=0x2901079c, x=0, y=0, lppt=0x247ae98 | out: lppt=0x247ae98) returned 1
[0250.875] DrawThemeParentBackground () returned 0x0
[0250.876] GetWindowPlacement (in: hWnd=0xe00ea, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0250.876] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0250.876] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.876] GetSystemMetrics (nIndex=42) returned 0
[0250.876] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0250.876] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0250.876] GetCurrentObject (hdc=0x2901079c, type=0x1) returned 0xb00017
[0250.876] GetCurrentObject (hdc=0x2901079c, type=0x2) returned 0x900010
[0250.876] GetCurrentObject (hdc=0x2901079c, type=0x7) returned 0x1e0507b9
[0250.876] GetCurrentObject (hdc=0x2901079c, type=0x6) returned 0x8a01c2
[0250.876] SaveDC (hdc=0x2901079c) returned 2
[0250.876] GetNearestColor (hdc=0x2901079c, color=0xf0f0f0) returned 0xf0f0f0
[0250.876] CreateSolidBrush (color=0xf0f0f0) returned 0x5510078d
[0250.876] FillRect (hDC=0x2901079c, lprc=0x53dad0, hbr=0x5510078d) returned 1
[0250.876] DeleteObject (ho=0x5510078d) returned 1
[0250.876] RestoreDC (hdc=0x2901079c, nSavedDC=-1) returned 1
[0250.876] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.877] GetSystemMetrics (nIndex=42) returned 0
[0250.877] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.877] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0250.877] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0250.877] GetCurrentObject (hdc=0x2901079c, type=0x1) returned 0xb00017
[0250.877] GetCurrentObject (hdc=0x2901079c, type=0x2) returned 0x900010
[0250.877] GetCurrentObject (hdc=0x2901079c, type=0x7) returned 0x1e0507b9
[0250.877] GetCurrentObject (hdc=0x2901079c, type=0x6) returned 0x8a01c2
[0250.877] SaveDC (hdc=0x2901079c) returned 2
[0250.877] GetNearestColor (hdc=0x2901079c, color=0xf0f0f0) returned 0xf0f0f0
[0250.877] CreateSolidBrush (color=0xf0f0f0) returned 0x5610078d
[0250.877] FillRect (hDC=0x2901079c, lprc=0x53da70, hbr=0x5610078d) returned 1
[0250.877] DeleteObject (ho=0x5610078d) returned 1
[0250.877] RestoreDC (hdc=0x2901079c, nSavedDC=-1) returned 1
[0250.877] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.877] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.877] GetSystemMetrics (nIndex=42) returned 0
[0250.877] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.877] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0250.878] RestoreDC (hdc=0x2901079c, nSavedDC=-1) returned 1
[0250.878] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2901079c) returned 0x0
[0250.878] IsAppThemed () returned 0x1
[0250.878] GetThemeAppProperties () returned 0x3
[0250.878] GetThemeAppProperties () returned 0x3
[0250.878] IsAppThemed () returned 0x1
[0250.878] GetThemeAppProperties () returned 0x3
[0250.878] GetThemeAppProperties () returned 0x3
[0250.878] IsThemePartDefined () returned 0x1
[0250.878] GdipCreateRegion (region=0x53dff4) returned 0x0
[0250.878] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.878] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0250.878] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0250.878] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0250.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0250.878] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0250.878] LocalFree (hMem=0x89ee08) returned 0x0
[0250.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0250.878] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0250.878] LocalFree (hMem=0x89eac0) returned 0x0
[0250.878] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0250.878] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0250.879] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0250.879] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0250.879] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.879] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0250.879] GetCurrentObject (hdc=0x2901079c, type=0x1) returned 0xb00017
[0250.879] GetCurrentObject (hdc=0x2901079c, type=0x2) returned 0x900010
[0250.879] GetCurrentObject (hdc=0x2901079c, type=0x7) returned 0x1e0507b9
[0250.879] GetCurrentObject (hdc=0x2901079c, type=0x6) returned 0x8a01c2
[0250.879] SaveDC (hdc=0x2901079c) returned 1
[0250.879] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3704053e
[0250.879] GetClipRgn (hdc=0x2901079c, hrgn=0x3704053e) returned 0
[0250.879] SelectClipRgn (hdc=0x2901079c, hrgn=0x1004051e) returned 2
[0250.879] DeleteObject (ho=0x3704053e) returned 1
[0250.879] DeleteObject (ho=0x1004051e) returned 1
[0250.879] OffsetViewportOrgEx (in: hdc=0x2901079c, x=0, y=0, lppt=0x247b720 | out: lppt=0x247b720) returned 1
[0250.879] IsAppThemed () returned 0x1
[0250.879] GetThemeAppProperties () returned 0x3
[0250.879] GetThemeAppProperties () returned 0x3
[0250.879] DrawThemeBackground () returned 0x0
[0250.879] RestoreDC (hdc=0x2901079c, nSavedDC=-1) returned 1
[0250.879] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2901079c) returned 0x0
[0250.879] GdipCreateRegion (region=0x53dff8) returned 0x0
[0250.879] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.880] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0250.880] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0250.880] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0250.880] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0250.880] LocalFree (hMem=0x89eac0) returned 0x0
[0250.880] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0250.880] LocalFree (hMem=0x89eee8) returned 0x0
[0250.880] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0250.880] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0250.880] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0250.880] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0250.880] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.880] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0250.880] GetCurrentObject (hdc=0x2901079c, type=0x1) returned 0xb00017
[0250.880] GetCurrentObject (hdc=0x2901079c, type=0x2) returned 0x900010
[0250.880] GetCurrentObject (hdc=0x2901079c, type=0x7) returned 0x1e0507b9
[0250.880] GetCurrentObject (hdc=0x2901079c, type=0x6) returned 0x8a01c2
[0250.880] SaveDC (hdc=0x2901079c) returned 1
[0250.880] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1104051e
[0250.880] GetClipRgn (hdc=0x2901079c, hrgn=0x1104051e) returned 0
[0250.880] SelectClipRgn (hdc=0x2901079c, hrgn=0x3804053e) returned 2
[0250.880] DeleteObject (ho=0x1104051e) returned 1
[0250.918] DeleteObject (ho=0x3804053e) returned 1
[0250.918] OffsetViewportOrgEx (in: hdc=0x2901079c, x=0, y=0, lppt=0x247b9f4 | out: lppt=0x247b9f4) returned 1
[0250.918] IsAppThemed () returned 0x1
[0250.918] GetThemeAppProperties () returned 0x3
[0250.918] GetThemeAppProperties () returned 0x3
[0250.918] GetThemeBackgroundContentRect () returned 0x0
[0250.918] RestoreDC (hdc=0x2901079c, nSavedDC=-1) returned 1
[0250.919] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2901079c) returned 0x0
[0250.919] IsAppThemed () returned 0x1
[0250.919] GetThemeAppProperties () returned 0x3
[0250.919] GetThemeAppProperties () returned 0x3
[0250.919] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0250.919] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0250.919] GetCurrentObject (hdc=0x2901079c, type=0x1) returned 0xb00017
[0250.919] GetCurrentObject (hdc=0x2901079c, type=0x2) returned 0x900010
[0250.919] GetCurrentObject (hdc=0x2901079c, type=0x7) returned 0x1e0507b9
[0250.919] GetCurrentObject (hdc=0x2901079c, type=0x6) returned 0x8a01c2
[0250.919] SaveDC (hdc=0x2901079c) returned 1
[0250.919] GetTextAlign (hdc=0x2901079c) returned 0x0
[0250.919] GetTextColor (hdc=0x2901079c) returned 0x0
[0250.919] GetCurrentObject (hdc=0x2901079c, type=0x6) returned 0x8a01c2
[0250.919] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0250.920] SelectObject (hdc=0x2901079c, h=0x730a066d) returned 0x8a01c2
[0250.920] GetBkMode (hdc=0x2901079c) returned 2
[0250.920] SetBkMode (hdc=0x2901079c, mode=1) returned 2
[0250.920] DrawTextExW (in: hdc=0x2901079c, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x247bd94 | out: lpchText="OK", lprc=0x53df90) returned 13
[0250.920] DrawTextExW (in: hdc=0x2901079c, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x247bd94 | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0250.920] RestoreDC (hdc=0x2901079c, nSavedDC=-1) returned 1
[0250.920] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2901079c) returned 0x0
[0250.921] GetFocus () returned 0xd0122
[0250.921] IsAppThemed () returned 0x1
[0250.921] GetThemeAppProperties () returned 0x3
[0250.921] GetThemeAppProperties () returned 0x3
[0250.921] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0250.921] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x2901079c, x1=0, y1=0, rop=0xcc0020) returned 1
[0250.921] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2901079c) returned 0x0
[0250.921] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0250.921] SelectObject (hdc=0x2901079c, h=0x85000f) returned 0x1e0507b9
[0250.921] DeleteDC (hdc=0x2901079c) returned 1
[0250.921] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0250.921] EndPaint (hWnd=0x9004e, lpPaint=0x53e2e4) returned 1
[0250.922] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.922] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0250.922] IsWindowUnicode (hWnd=0x102dc) returned 1
[0250.922] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.923] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0250.923] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.923] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.924] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.924] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0250.925] IsWindowUnicode (hWnd=0x102dc) returned 1
[0250.925] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.925] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.925] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.925] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.926] IsWindowUnicode (hWnd=0x28013e) returned 1
[0250.926] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.926] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.926] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.927] BeginPaint (in: hWnd=0x28013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0250.927] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0250.927] CreateCompatibleDC (hdc=0x8b010786) returned 0x2b01079c
[0250.927] SelectObject (hdc=0x2b01079c, h=0x1e0507b9) returned 0x85000f
[0250.927] GdipCreateFromHDC (hdc=0x2b01079c, graphics=0x53e300) returned 0x0
[0250.927] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0250.927] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0250.927] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0250.931] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0250.931] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0250.932] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0250.932] LocalFree (hMem=0x89eee8) returned 0x0
[0250.932] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0250.932] GdipCreateRegion (region=0x53e348) returned 0x0
[0250.932] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.932] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0250.932] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0250.932] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfba30dbd) returned 0x0
[0250.932] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.932] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0250.932] GetCurrentObject (hdc=0x2b01079c, type=0x1) returned 0xb00017
[0250.932] GetCurrentObject (hdc=0x2b01079c, type=0x2) returned 0x900010
[0250.932] GetCurrentObject (hdc=0x2b01079c, type=0x7) returned 0x1e0507b9
[0250.932] GetCurrentObject (hdc=0x2b01079c, type=0x6) returned 0x8a01c2
[0250.932] SaveDC (hdc=0x2b01079c) returned 1
[0250.932] GetNearestColor (hdc=0x2b01079c, color=0xf0f0f0) returned 0xf0f0f0
[0250.933] GetNearestColor (hdc=0x2b01079c, color=0xa0a0a0) returned 0xa0a0a0
[0250.933] GetNearestColor (hdc=0x2b01079c, color=0x696969) returned 0x696969
[0250.933] GetNearestColor (hdc=0x2b01079c, color=0xa0a0a0) returned 0xa0a0a0
[0250.933] GetNearestColor (hdc=0x2b01079c, color=0x0) returned 0x0
[0250.933] GetNearestColor (hdc=0x2b01079c, color=0xffffff) returned 0xffffff
[0250.933] GetNearestColor (hdc=0x2b01079c, color=0xe5e5e5) returned 0xe5e5e5
[0250.933] GetNearestColor (hdc=0x2b01079c, color=0xd7d7d7) returned 0xd7d7d7
[0250.933] GetNearestColor (hdc=0x2b01079c, color=0x0) returned 0x0
[0250.933] RestoreDC (hdc=0x2b01079c, nSavedDC=-1) returned 1
[0250.933] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b01079c) returned 0x0
[0250.933] IsAppThemed () returned 0x1
[0250.933] GetThemeAppProperties () returned 0x3
[0250.933] GetThemeAppProperties () returned 0x3
[0250.933] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0250.933] SendMessageW (hWnd=0xe00ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0250.934] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0250.934] IsAppThemed () returned 0x1
[0250.934] GetThemeAppProperties () returned 0x3
[0250.934] GetThemeAppProperties () returned 0x3
[0250.934] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x247c5a4 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0250.934] IsAppThemed () returned 0x1
[0250.934] GetThemeAppProperties () returned 0x3
[0250.934] GetThemeAppProperties () returned 0x3
[0250.934] IsAppThemed () returned 0x1
[0250.934] GetThemeAppProperties () returned 0x3
[0250.934] GetThemeAppProperties () returned 0x3
[0250.934] GetFocus () returned 0xd0122
[0250.934] IsAppThemed () returned 0x1
[0250.934] GetThemeAppProperties () returned 0x3
[0250.935] GetThemeAppProperties () returned 0x3
[0250.935] IsAppThemed () returned 0x1
[0250.935] GetThemeAppProperties () returned 0x3
[0250.935] GetThemeAppProperties () returned 0x3
[0250.935] IsThemePartDefined () returned 0x1
[0250.935] IsAppThemed () returned 0x1
[0250.935] GetThemeAppProperties () returned 0x3
[0250.935] GetThemeAppProperties () returned 0x3
[0250.935] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0250.935] IsAppThemed () returned 0x1
[0250.935] GetThemeAppProperties () returned 0x3
[0250.935] GetThemeAppProperties () returned 0x3
[0250.935] IsAppThemed () returned 0x1
[0250.935] GetThemeAppProperties () returned 0x3
[0250.935] GetThemeAppProperties () returned 0x3
[0250.935] IsThemePartDefined () returned 0x1
[0250.935] GdipCreateRegion (region=0x53e070) returned 0x0
[0250.935] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.935] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0250.935] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0250.935] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0250.936] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0250.936] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0250.936] LocalFree (hMem=0x89ec80) returned 0x0
[0250.936] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0250.936] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0250.936] LocalFree (hMem=0x89eee8) returned 0x0
[0250.936] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0250.936] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0250.936] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0250.936] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0250.936] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.936] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0250.936] GetCurrentObject (hdc=0x2b01079c, type=0x1) returned 0xb00017
[0250.936] GetCurrentObject (hdc=0x2b01079c, type=0x2) returned 0x900010
[0250.936] GetCurrentObject (hdc=0x2b01079c, type=0x7) returned 0x1e0507b9
[0250.937] GetCurrentObject (hdc=0x2b01079c, type=0x6) returned 0x8a01c2
[0250.937] SaveDC (hdc=0x2b01079c) returned 1
[0250.937] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3904053e
[0250.937] GetClipRgn (hdc=0x2b01079c, hrgn=0x3904053e) returned 0
[0250.937] SelectClipRgn (hdc=0x2b01079c, hrgn=0x1504051e) returned 2
[0250.937] DeleteObject (ho=0x3904053e) returned 1
[0250.937] DeleteObject (ho=0x1504051e) returned 1
[0250.937] OffsetViewportOrgEx (in: hdc=0x2b01079c, x=0, y=0, lppt=0x247cc54 | out: lppt=0x247cc54) returned 1
[0250.937] DrawThemeParentBackground () returned 0x0
[0250.937] GetWindowPlacement (in: hWnd=0xe00ea, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0250.937] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0250.937] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.937] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.938] GetSystemMetrics (nIndex=42) returned 0
[0250.938] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.938] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0250.938] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0250.938] GetCurrentObject (hdc=0x2b01079c, type=0x1) returned 0xb00017
[0250.938] GetCurrentObject (hdc=0x2b01079c, type=0x2) returned 0x900010
[0250.938] GetCurrentObject (hdc=0x2b01079c, type=0x7) returned 0x1e0507b9
[0250.938] GetCurrentObject (hdc=0x2b01079c, type=0x6) returned 0x8a01c2
[0250.938] SaveDC (hdc=0x2b01079c) returned 2
[0250.938] GetNearestColor (hdc=0x2b01079c, color=0xf0f0f0) returned 0xf0f0f0
[0250.938] CreateSolidBrush (color=0xf0f0f0) returned 0x5710078d
[0250.938] FillRect (hDC=0x2b01079c, lprc=0x53dad0, hbr=0x5710078d) returned 1
[0250.938] DeleteObject (ho=0x5710078d) returned 1
[0250.938] RestoreDC (hdc=0x2b01079c, nSavedDC=-1) returned 1
[0250.939] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.939] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.939] GetSystemMetrics (nIndex=42) returned 0
[0250.939] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.939] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0250.939] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0250.939] GetCurrentObject (hdc=0x2b01079c, type=0x1) returned 0xb00017
[0250.939] GetCurrentObject (hdc=0x2b01079c, type=0x2) returned 0x900010
[0250.939] GetCurrentObject (hdc=0x2b01079c, type=0x7) returned 0x1e0507b9
[0250.939] GetCurrentObject (hdc=0x2b01079c, type=0x6) returned 0x8a01c2
[0250.939] SaveDC (hdc=0x2b01079c) returned 2
[0250.939] GetNearestColor (hdc=0x2b01079c, color=0xf0f0f0) returned 0xf0f0f0
[0250.939] CreateSolidBrush (color=0xf0f0f0) returned 0x5810078d
[0250.939] FillRect (hDC=0x2b01079c, lprc=0x53da70, hbr=0x5810078d) returned 1
[0250.939] DeleteObject (ho=0x5810078d) returned 1
[0250.939] RestoreDC (hdc=0x2b01079c, nSavedDC=-1) returned 1
[0250.940] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0250.940] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0250.940] GetSystemMetrics (nIndex=42) returned 0
[0250.940] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0250.940] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0250.940] RestoreDC (hdc=0x2b01079c, nSavedDC=-1) returned 1
[0250.940] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b01079c) returned 0x0
[0250.940] IsAppThemed () returned 0x1
[0250.940] GetThemeAppProperties () returned 0x3
[0250.940] GetThemeAppProperties () returned 0x3
[0250.940] IsAppThemed () returned 0x1
[0250.940] GetThemeAppProperties () returned 0x3
[0250.940] GetThemeAppProperties () returned 0x3
[0250.940] IsThemePartDefined () returned 0x1
[0250.940] GdipCreateRegion (region=0x53dff4) returned 0x0
[0250.941] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.941] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0250.941] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0250.941] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0250.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0250.941] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0250.941] LocalFree (hMem=0x89eee8) returned 0x0
[0250.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0250.941] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0250.941] LocalFree (hMem=0x89ee08) returned 0x0
[0250.941] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0250.941] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0250.941] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0250.941] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0250.941] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.941] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0250.942] GetCurrentObject (hdc=0x2b01079c, type=0x1) returned 0xb00017
[0250.942] GetCurrentObject (hdc=0x2b01079c, type=0x2) returned 0x900010
[0250.942] GetCurrentObject (hdc=0x2b01079c, type=0x7) returned 0x1e0507b9
[0250.942] GetCurrentObject (hdc=0x2b01079c, type=0x6) returned 0x8a01c2
[0250.942] SaveDC (hdc=0x2b01079c) returned 1
[0250.942] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1604051e
[0250.942] GetClipRgn (hdc=0x2b01079c, hrgn=0x1604051e) returned 0
[0250.942] SelectClipRgn (hdc=0x2b01079c, hrgn=0x3b04053e) returned 2
[0250.942] DeleteObject (ho=0x1604051e) returned 1
[0250.942] DeleteObject (ho=0x3b04053e) returned 1
[0250.942] OffsetViewportOrgEx (in: hdc=0x2b01079c, x=0, y=0, lppt=0x247d4dc | out: lppt=0x247d4dc) returned 1
[0250.942] IsAppThemed () returned 0x1
[0250.942] GetThemeAppProperties () returned 0x3
[0250.942] GetThemeAppProperties () returned 0x3
[0250.942] DrawThemeBackground () returned 0x0
[0250.943] RestoreDC (hdc=0x2b01079c, nSavedDC=-1) returned 1
[0250.943] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b01079c) returned 0x0
[0250.943] GdipCreateRegion (region=0x53dff8) returned 0x0
[0250.943] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.943] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0250.943] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0250.943] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0250.950] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0250.950] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0250.950] LocalFree (hMem=0x89eee8) returned 0x0
[0250.950] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0250.950] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0250.950] LocalFree (hMem=0x89eee8) returned 0x0
[0250.950] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0250.950] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0250.950] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0250.951] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0250.951] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.951] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0250.951] GetCurrentObject (hdc=0x2b01079c, type=0x1) returned 0xb00017
[0250.951] GetCurrentObject (hdc=0x2b01079c, type=0x2) returned 0x900010
[0250.951] GetCurrentObject (hdc=0x2b01079c, type=0x7) returned 0x1e0507b9
[0250.951] GetCurrentObject (hdc=0x2b01079c, type=0x6) returned 0x8a01c2
[0250.951] SaveDC (hdc=0x2b01079c) returned 1
[0250.951] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3c04053e
[0250.951] GetClipRgn (hdc=0x2b01079c, hrgn=0x3c04053e) returned 0
[0250.951] SelectClipRgn (hdc=0x2b01079c, hrgn=0x1704051e) returned 2
[0250.951] DeleteObject (ho=0x3c04053e) returned 1
[0250.951] DeleteObject (ho=0x1704051e) returned 1
[0250.951] OffsetViewportOrgEx (in: hdc=0x2b01079c, x=0, y=0, lppt=0x247d7b0 | out: lppt=0x247d7b0) returned 1
[0250.952] IsAppThemed () returned 0x1
[0250.952] GetThemeAppProperties () returned 0x3
[0250.952] GetThemeAppProperties () returned 0x3
[0250.952] GetThemeBackgroundContentRect () returned 0x0
[0250.952] RestoreDC (hdc=0x2b01079c, nSavedDC=-1) returned 1
[0250.952] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b01079c) returned 0x0
[0250.952] IsAppThemed () returned 0x1
[0250.952] GetThemeAppProperties () returned 0x3
[0250.952] GetThemeAppProperties () returned 0x3
[0250.952] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0250.952] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0250.952] GetCurrentObject (hdc=0x2b01079c, type=0x1) returned 0xb00017
[0250.952] GetCurrentObject (hdc=0x2b01079c, type=0x2) returned 0x900010
[0250.952] GetCurrentObject (hdc=0x2b01079c, type=0x7) returned 0x1e0507b9
[0250.952] GetCurrentObject (hdc=0x2b01079c, type=0x6) returned 0x8a01c2
[0250.952] SaveDC (hdc=0x2b01079c) returned 1
[0250.953] GetTextAlign (hdc=0x2b01079c) returned 0x0
[0250.953] GetTextColor (hdc=0x2b01079c) returned 0x0
[0250.953] GetCurrentObject (hdc=0x2b01079c, type=0x6) returned 0x8a01c2
[0250.953] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0250.953] SelectObject (hdc=0x2b01079c, h=0x730a066d) returned 0x8a01c2
[0250.953] GetBkMode (hdc=0x2b01079c) returned 2
[0250.953] SetBkMode (hdc=0x2b01079c, mode=1) returned 2
[0250.953] DrawTextExW (in: hdc=0x2b01079c, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x247db50 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0250.953] DrawTextExW (in: hdc=0x2b01079c, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x247db50 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0250.954] RestoreDC (hdc=0x2b01079c, nSavedDC=-1) returned 1
[0250.954] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b01079c) returned 0x0
[0250.954] GetFocus () returned 0xd0122
[0250.954] IsAppThemed () returned 0x1
[0250.954] GetThemeAppProperties () returned 0x3
[0250.954] GetThemeAppProperties () returned 0x3
[0250.954] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0250.954] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x2b01079c, x1=0, y1=0, rop=0xcc0020) returned 1
[0250.954] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b01079c) returned 0x0
[0250.954] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0250.955] SelectObject (hdc=0x2b01079c, h=0x85000f) returned 0x1e0507b9
[0250.955] DeleteDC (hdc=0x2b01079c) returned 1
[0250.955] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0250.955] EndPaint (hWnd=0x28013e, lpPaint=0x53e2e4) returned 1
[0250.955] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.955] IsWindowUnicode (hWnd=0x202c6) returned 1
[0250.955] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0250.955] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0250.955] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0250.955] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0250.956] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0250.956] CreateCompatibleDC (hdc=0xf0105ee) returned 0x2d01079c
[0250.956] SelectObject (hdc=0x2d01079c, h=0x1e0507b9) returned 0x85000f
[0250.956] GdipCreateFromHDC (hdc=0x2d01079c, graphics=0x53e300) returned 0x0
[0250.956] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0250.956] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0250.956] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0250.956] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0250.956] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0250.956] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0250.956] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0250.956] LocalFree (hMem=0x89ee08) returned 0x0
[0250.956] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0250.957] GdipCreateRegion (region=0x53e348) returned 0x0
[0250.957] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.957] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0250.957] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0250.957] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfba10dbd) returned 0x0
[0250.957] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.957] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0250.957] GetCurrentObject (hdc=0x2d01079c, type=0x1) returned 0xb00017
[0250.957] GetCurrentObject (hdc=0x2d01079c, type=0x2) returned 0x900010
[0250.957] GetCurrentObject (hdc=0x2d01079c, type=0x7) returned 0x1e0507b9
[0250.957] GetCurrentObject (hdc=0x2d01079c, type=0x6) returned 0x8a01c2
[0250.957] SaveDC (hdc=0x2d01079c) returned 1
[0250.957] GetNearestColor (hdc=0x2d01079c, color=0xff) returned 0xff
[0250.957] GetNearestColor (hdc=0x2d01079c, color=0x55) returned 0x55
[0250.957] GetNearestColor (hdc=0x2d01079c, color=0x0) returned 0x0
[0250.957] GetNearestColor (hdc=0x2d01079c, color=0x55) returned 0x55
[0250.958] GetNearestColor (hdc=0x2d01079c, color=0x0) returned 0x0
[0250.958] GetNearestColor (hdc=0x2d01079c, color=0x8080ff) returned 0x8080ff
[0250.958] GetNearestColor (hdc=0x2d01079c, color=0x7373e5) returned 0x7373e5
[0250.958] GetNearestColor (hdc=0x2d01079c, color=0xe5) returned 0xe5
[0250.958] GetNearestColor (hdc=0x2d01079c, color=0x0) returned 0x0
[0250.958] RestoreDC (hdc=0x2d01079c, nSavedDC=-1) returned 1
[0250.958] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d01079c) returned 0x0
[0250.958] IsAppThemed () returned 0x1
[0250.958] GetThemeAppProperties () returned 0x3
[0250.958] GetThemeAppProperties () returned 0x3
[0250.958] IsAppThemed () returned 0x1
[0250.958] GetThemeAppProperties () returned 0x3
[0250.958] GetThemeAppProperties () returned 0x3
[0250.958] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0250.959] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x247e334 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0250.959] IsAppThemed () returned 0x1
[0250.960] GetThemeAppProperties () returned 0x3
[0250.960] GetThemeAppProperties () returned 0x3
[0250.960] IsAppThemed () returned 0x1
[0250.960] GetThemeAppProperties () returned 0x3
[0250.960] GetThemeAppProperties () returned 0x3
[0250.960] GetFocus () returned 0xd0122
[0250.960] IsAppThemed () returned 0x1
[0250.960] GetThemeAppProperties () returned 0x3
[0250.960] GetThemeAppProperties () returned 0x3
[0250.960] IsAppThemed () returned 0x1
[0250.960] GetThemeAppProperties () returned 0x3
[0250.960] GetThemeAppProperties () returned 0x3
[0250.960] IsThemePartDefined () returned 0x1
[0250.960] IsAppThemed () returned 0x1
[0250.960] GetThemeAppProperties () returned 0x3
[0250.960] GetThemeAppProperties () returned 0x3
[0250.960] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0250.960] IsAppThemed () returned 0x1
[0250.960] GetThemeAppProperties () returned 0x3
[0250.960] GetThemeAppProperties () returned 0x3
[0250.960] IsAppThemed () returned 0x1
[0250.961] GetThemeAppProperties () returned 0x3
[0250.961] GetThemeAppProperties () returned 0x3
[0250.961] IsThemePartDefined () returned 0x1
[0250.961] GdipCreateRegion (region=0x53e070) returned 0x0
[0250.961] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.961] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0250.961] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0250.961] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0250.961] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0250.961] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0250.961] LocalFree (hMem=0x89ec80) returned 0x0
[0250.961] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0250.961] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0250.961] LocalFree (hMem=0x89ee08) returned 0x0
[0250.961] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0250.961] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0250.961] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0250.961] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0250.962] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.962] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0250.962] GetCurrentObject (hdc=0x2d01079c, type=0x1) returned 0xb00017
[0250.962] GetCurrentObject (hdc=0x2d01079c, type=0x2) returned 0x900010
[0250.962] GetCurrentObject (hdc=0x2d01079c, type=0x7) returned 0x1e0507b9
[0250.962] GetCurrentObject (hdc=0x2d01079c, type=0x6) returned 0x8a01c2
[0250.963] SaveDC (hdc=0x2d01079c) returned 1
[0250.963] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1804051e
[0250.963] GetClipRgn (hdc=0x2d01079c, hrgn=0x1804051e) returned 0
[0250.963] SelectClipRgn (hdc=0x2d01079c, hrgn=0x4004053e) returned 2
[0250.963] DeleteObject (ho=0x1804051e) returned 1
[0250.963] DeleteObject (ho=0x4004053e) returned 1
[0250.963] OffsetViewportOrgEx (in: hdc=0x2d01079c, x=0, y=0, lppt=0x247e9e4 | out: lppt=0x247e9e4) returned 1
[0250.963] DrawThemeParentBackground () returned 0x0
[0250.963] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0250.963] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0250.963] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0250.963] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0250.963] GetSystemMetrics (nIndex=42) returned 0
[0250.963] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0250.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0250.964] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0250.964] GetCurrentObject (hdc=0x2d01079c, type=0x1) returned 0xb00017
[0250.964] GetCurrentObject (hdc=0x2d01079c, type=0x2) returned 0x900010
[0250.964] GetCurrentObject (hdc=0x2d01079c, type=0x7) returned 0x1e0507b9
[0250.964] GetCurrentObject (hdc=0x2d01079c, type=0x6) returned 0x8a01c2
[0250.964] SaveDC (hdc=0x2d01079c) returned 2
[0250.964] GetNearestColor (hdc=0x2d01079c, color=0xff) returned 0xff
[0250.964] CreateSolidBrush (color=0xff) returned 0x5910078d
[0250.964] FillRect (hDC=0x2d01079c, lprc=0x53dad0, hbr=0x5910078d) returned 1
[0250.964] DeleteObject (ho=0x5910078d) returned 1
[0250.964] RestoreDC (hdc=0x2d01079c, nSavedDC=-1) returned 1
[0250.965] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0250.965] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0250.965] GetSystemMetrics (nIndex=42) returned 0
[0250.965] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0250.965] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0250.965] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0250.965] GetCurrentObject (hdc=0x2d01079c, type=0x1) returned 0xb00017
[0250.965] GetCurrentObject (hdc=0x2d01079c, type=0x2) returned 0x900010
[0250.965] GetCurrentObject (hdc=0x2d01079c, type=0x7) returned 0x1e0507b9
[0250.965] GetCurrentObject (hdc=0x2d01079c, type=0x6) returned 0x8a01c2
[0250.965] SaveDC (hdc=0x2d01079c) returned 2
[0250.965] GetNearestColor (hdc=0x2d01079c, color=0xff) returned 0xff
[0250.965] CreateSolidBrush (color=0xff) returned 0x5a10078d
[0250.965] FillRect (hDC=0x2d01079c, lprc=0x53da70, hbr=0x5a10078d) returned 1
[0250.965] DeleteObject (ho=0x5a10078d) returned 1
[0250.965] RestoreDC (hdc=0x2d01079c, nSavedDC=-1) returned 1
[0250.966] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0250.966] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0250.966] GetSystemMetrics (nIndex=42) returned 0
[0250.966] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0250.966] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0250.966] RestoreDC (hdc=0x2d01079c, nSavedDC=-1) returned 1
[0250.966] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d01079c) returned 0x0
[0250.966] IsAppThemed () returned 0x1
[0250.966] GetThemeAppProperties () returned 0x3
[0250.966] GetThemeAppProperties () returned 0x3
[0250.966] IsAppThemed () returned 0x1
[0250.966] GetThemeAppProperties () returned 0x3
[0250.966] GetThemeAppProperties () returned 0x3
[0250.966] IsThemePartDefined () returned 0x1
[0250.966] GdipCreateRegion (region=0x53dff4) returned 0x0
[0250.967] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.967] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0250.967] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0250.967] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0250.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0250.967] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0250.967] LocalFree (hMem=0x89eac0) returned 0x0
[0250.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0250.967] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0250.967] LocalFree (hMem=0x89ec80) returned 0x0
[0250.967] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0250.967] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0250.967] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0250.967] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0250.967] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.967] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0250.967] GetCurrentObject (hdc=0x2d01079c, type=0x1) returned 0xb00017
[0250.967] GetCurrentObject (hdc=0x2d01079c, type=0x2) returned 0x900010
[0250.968] GetCurrentObject (hdc=0x2d01079c, type=0x7) returned 0x1e0507b9
[0250.968] GetCurrentObject (hdc=0x2d01079c, type=0x6) returned 0x8a01c2
[0250.968] SaveDC (hdc=0x2d01079c) returned 1
[0250.968] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4104053e
[0250.968] GetClipRgn (hdc=0x2d01079c, hrgn=0x4104053e) returned 0
[0250.968] SelectClipRgn (hdc=0x2d01079c, hrgn=0x1a04051e) returned 2
[0250.968] DeleteObject (ho=0x4104053e) returned 1
[0250.968] DeleteObject (ho=0x1a04051e) returned 1
[0250.968] OffsetViewportOrgEx (in: hdc=0x2d01079c, x=0, y=0, lppt=0x247f248 | out: lppt=0x247f248) returned 1
[0250.968] IsAppThemed () returned 0x1
[0250.968] GetThemeAppProperties () returned 0x3
[0250.968] GetThemeAppProperties () returned 0x3
[0250.968] DrawThemeBackground () returned 0x0
[0250.968] RestoreDC (hdc=0x2d01079c, nSavedDC=-1) returned 1
[0250.969] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d01079c) returned 0x0
[0250.969] GdipCreateRegion (region=0x53dff8) returned 0x0
[0250.969] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0250.969] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0250.969] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0250.969] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0250.969] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0250.969] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0250.969] LocalFree (hMem=0x89eac0) returned 0x0
[0250.969] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0250.969] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0250.969] LocalFree (hMem=0x89ee08) returned 0x0
[0250.969] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0250.969] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0250.969] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0250.969] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0250.969] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0250.969] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0250.970] GetCurrentObject (hdc=0x2d01079c, type=0x1) returned 0xb00017
[0250.970] GetCurrentObject (hdc=0x2d01079c, type=0x2) returned 0x900010
[0250.970] GetCurrentObject (hdc=0x2d01079c, type=0x7) returned 0x1e0507b9
[0250.970] GetCurrentObject (hdc=0x2d01079c, type=0x6) returned 0x8a01c2
[0250.970] SaveDC (hdc=0x2d01079c) returned 1
[0250.970] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1b04051e
[0250.970] GetClipRgn (hdc=0x2d01079c, hrgn=0x1b04051e) returned 0
[0250.970] SelectClipRgn (hdc=0x2d01079c, hrgn=0x4204053e) returned 2
[0250.970] DeleteObject (ho=0x1b04051e) returned 1
[0250.970] DeleteObject (ho=0x4204053e) returned 1
[0250.970] OffsetViewportOrgEx (in: hdc=0x2d01079c, x=0, y=0, lppt=0x247f51c | out: lppt=0x247f51c) returned 1
[0250.970] IsAppThemed () returned 0x1
[0250.970] GetThemeAppProperties () returned 0x3
[0250.970] GetThemeAppProperties () returned 0x3
[0250.970] GetThemeBackgroundContentRect () returned 0x0
[0250.970] RestoreDC (hdc=0x2d01079c, nSavedDC=-1) returned 1
[0250.970] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d01079c) returned 0x0
[0250.970] IsAppThemed () returned 0x1
[0250.971] GetThemeAppProperties () returned 0x3
[0250.971] GetThemeAppProperties () returned 0x3
[0250.971] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0250.971] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0250.971] GetCurrentObject (hdc=0x2d01079c, type=0x1) returned 0xb00017
[0250.971] GetCurrentObject (hdc=0x2d01079c, type=0x2) returned 0x900010
[0250.971] GetCurrentObject (hdc=0x2d01079c, type=0x7) returned 0x1e0507b9
[0250.971] GetCurrentObject (hdc=0x2d01079c, type=0x6) returned 0x8a01c2
[0250.971] SaveDC (hdc=0x2d01079c) returned 1
[0250.971] GetTextAlign (hdc=0x2d01079c) returned 0x0
[0250.971] GetTextColor (hdc=0x2d01079c) returned 0x0
[0250.971] GetCurrentObject (hdc=0x2d01079c, type=0x6) returned 0x8a01c2
[0250.971] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0250.971] SelectObject (hdc=0x2d01079c, h=0x450a0799) returned 0x8a01c2
[0250.971] GetBkMode (hdc=0x2d01079c) returned 2
[0250.971] SetBkMode (hdc=0x2d01079c, mode=1) returned 2
[0250.972] DrawTextExW (in: hdc=0x2d01079c, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x247f8bc | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0250.972] DrawTextExW (in: hdc=0x2d01079c, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x247f8bc | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0250.972] RestoreDC (hdc=0x2d01079c, nSavedDC=-1) returned 1
[0250.972] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d01079c) returned 0x0
[0250.972] GetFocus () returned 0xd0122
[0250.972] IsAppThemed () returned 0x1
[0250.972] GetThemeAppProperties () returned 0x3
[0250.972] GetThemeAppProperties () returned 0x3
[0250.973] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0250.973] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x2d01079c, x1=0, y1=0, rop=0xcc0020) returned 1
[0250.973] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d01079c) returned 0x0
[0250.973] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0250.973] SelectObject (hdc=0x2d01079c, h=0x85000f) returned 0x1e0507b9
[0250.973] DeleteDC (hdc=0x2d01079c) returned 1
[0250.973] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0250.973] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0250.973] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0250.973] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0250.973] WaitMessage () returned 1
[0251.009] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.009] IsWindowUnicode (hWnd=0x102dc) returned 1
[0251.009] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.009] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.009] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.011] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.011] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.011] WaitMessage () returned 1
[0251.012] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.012] IsWindowUnicode (hWnd=0x102dc) returned 1
[0251.012] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.012] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.012] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.013] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.015] IsWindowUnicode (hWnd=0x102dc) returned 1
[0251.015] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.015] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.015] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.015] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.015] IsWindowUnicode (hWnd=0x102dc) returned 1
[0251.016] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.016] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.016] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.016] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.016] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.016] WaitMessage () returned 1
[0251.017] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.017] IsWindowUnicode (hWnd=0x102dc) returned 1
[0251.017] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.017] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.017] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.018] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.019] IsWindowUnicode (hWnd=0x102dc) returned 1
[0251.019] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.019] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.019] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.019] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.019] IsWindowUnicode (hWnd=0x102dc) returned 1
[0251.019] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.019] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.019] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.019] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.020] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.020] WaitMessage () returned 1
[0251.020] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.020] IsWindowUnicode (hWnd=0x102dc) returned 1
[0251.020] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.021] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.021] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.027] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.027] IsWindowUnicode (hWnd=0x102dc) returned 1
[0251.027] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.027] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.027] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.028] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.028] IsWindowUnicode (hWnd=0x102dc) returned 1
[0251.028] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.028] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.028] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.028] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.029] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.029] WaitMessage () returned 1
[0251.134] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.134] IsWindowUnicode (hWnd=0x202d0) returned 1
[0251.134] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.134] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.135] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.135] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.135] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.135] WaitMessage () returned 1
[0251.381] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.381] IsWindowUnicode (hWnd=0xd0122) returned 1
[0251.381] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.381] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.381] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.382] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.382] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.382] WaitMessage () returned 1
[0251.851] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.851] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.851] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.851] DispatchMessageA (lpMsg=0x53e8a0) returned 0x1
[0251.851] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.851] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.851] WaitMessage () returned 1
[0251.913] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.913] IsWindowUnicode (hWnd=0xd0122) returned 1
[0251.913] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0251.913] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0251.913] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0251.914] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.914] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0251.914] WaitMessage () returned 1
[0252.444] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0252.444] IsWindowUnicode (hWnd=0xd0122) returned 1
[0252.444] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0252.444] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0252.444] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0252.444] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0252.445] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0252.445] WaitMessage () returned 1
[0252.975] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0252.975] IsWindowUnicode (hWnd=0xd0122) returned 1
[0252.975] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0252.975] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0252.975] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0252.975] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0252.975] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0252.975] WaitMessage () returned 1
[0253.507] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.507] IsWindowUnicode (hWnd=0xd0122) returned 1
[0253.507] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.507] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0253.507] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0253.508] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0253.508] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0253.508] WaitMessage () returned 1
[0253.526] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.527] MapWindowPoints (in: hWndFrom=0xd01e2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0253.527] IsWindowUnicode (hWnd=0xd01e2) returned 1
[0253.527] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.527] MapWindowPoints (in: hWndFrom=0xd01e2, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0253.527] SetCursor (hCursor=0x10003) returned 0x10003
[0253.527] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0253.527] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0253.527] _TrackMouseEvent (in: lpEventTrack=0x247fb68 | out: lpEventTrack=0x247fb68) returned 1
[0253.528] SendMessageW (hWnd=0xd01e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0253.528] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0253.528] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x200, wParam=0x0, lParam=0x100011) returned 0x0
[0253.528] GetKeyState (nVirtKey=1) returned 1
[0253.528] GetKeyState (nVirtKey=2) returned 0
[0253.528] GetKeyState (nVirtKey=4) returned 0
[0253.528] GetKeyState (nVirtKey=5) returned 0
[0253.528] GetKeyState (nVirtKey=6) returned 0
[0253.528] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0253.528] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0253.528] WaitMessage () returned 1
[0253.593] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.593] MapWindowPoints (in: hWndFrom=0xd01e2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0253.593] IsWindowUnicode (hWnd=0xd01e2) returned 1
[0253.593] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.593] MapWindowPoints (in: hWndFrom=0xd01e2, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0253.593] GetDlgItem (hDlg=0xe00ea, nIDDlgItem=0) returned 0x0
[0253.593] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x210, wParam=0x201, lParam=0x1a001b) returned 0x0
[0253.594] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x21, wParam=0xe00ea, lParam=0x2010001) returned 0x1
[0253.594] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x21, wParam=0xe00ea, lParam=0x2010001) returned 0x1
[0253.594] SetCursor (hCursor=0x10003) returned 0x10003
[0253.594] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0253.594] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0253.594] GetKeyState (nVirtKey=1) returned -128
[0253.594] GetKeyState (nVirtKey=2) returned 0
[0253.594] GetKeyState (nVirtKey=4) returned 0
[0253.594] GetKeyState (nVirtKey=5) returned 0
[0253.594] GetKeyState (nVirtKey=6) returned 0
[0253.594] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x201, wParam=0x1, lParam=0x100011) returned 0x0
[0253.594] GetKeyState (nVirtKey=1) returned -128
[0253.594] GetKeyState (nVirtKey=2) returned 0
[0253.594] GetKeyState (nVirtKey=4) returned 0
[0253.594] GetKeyState (nVirtKey=5) returned 0
[0253.594] GetKeyState (nVirtKey=6) returned 0
[0253.594] GetCapture () returned 0x0
[0253.595] SetCapture (hWnd=0xd01e2) returned 0x0
[0253.595] GetKeyState (nVirtKey=1) returned -128
[0253.595] GetKeyState (nVirtKey=2) returned 0
[0253.595] GetKeyState (nVirtKey=4) returned 0
[0253.595] GetKeyState (nVirtKey=5) returned 0
[0253.595] GetKeyState (nVirtKey=6) returned 0
[0253.595] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.595] IsWindowUnicode (hWnd=0xd01e2) returned 1
[0253.595] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.595] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0253.595] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0253.595] MapWindowPoints (in: hWndFrom=0xd01e2, hWndTo=0x0, lpPoints=0x247fbdc, cPoints=0x1 | out: lpPoints=0x247fbdc) returned 25625129
[0253.595] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x202, wParam=0x0, lParam=0x100011) returned 0x0
[0253.595] WindowFromPoint (Point=0x23a) returned 0xd01e2
[0253.596] MapWindowPoints (in: hWndFrom=0xd01e2, hWndTo=0x0, lpPoints=0x53e1c8, cPoints=0x2 | out: lpPoints=0x53e1c8) returned 25625129
[0253.596] GetCapture () returned 0xd01e2
[0253.596] ReleaseCapture () returned 1
[0253.596] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0253.596] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.596] MapWindowPoints (in: hWndFrom=0xd01e2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0253.596] IsWindowUnicode (hWnd=0xd01e2) returned 1
[0253.596] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.597] MapWindowPoints (in: hWndFrom=0xd01e2, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0253.597] SetCursor (hCursor=0x10003) returned 0x10003
[0253.597] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0253.597] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0253.597] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x200, wParam=0x0, lParam=0x100011) returned 0x0
[0253.597] GetKeyState (nVirtKey=1) returned 0
[0253.597] GetKeyState (nVirtKey=2) returned 0
[0253.597] GetKeyState (nVirtKey=4) returned 0
[0253.597] GetKeyState (nVirtKey=5) returned 0
[0253.597] GetKeyState (nVirtKey=6) returned 0
[0253.597] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0253.597] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0253.597] WaitMessage () returned 1
[0253.694] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.694] IsWindowUnicode (hWnd=0xd01e2) returned 1
[0253.694] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.694] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0253.694] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0253.694] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.694] IsWindowUnicode (hWnd=0xd01e2) returned 1
[0253.694] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0253.694] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0253.694] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0253.694] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x2a1, wParam=0x0, lParam=0x100011) returned 0x0
[0253.694] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0253.694] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0253.694] WaitMessage () returned 1
[0254.044] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0254.044] IsWindowUnicode (hWnd=0xd0122) returned 1
[0254.044] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0254.044] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0254.044] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0254.045] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0254.045] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0254.045] WaitMessage () returned 1
[0254.569] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0254.569] IsWindowUnicode (hWnd=0xd0122) returned 1
[0254.569] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0254.569] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0254.569] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0254.569] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0254.569] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0254.569] WaitMessage () returned 1
[0255.100] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.100] IsWindowUnicode (hWnd=0xd0122) returned 1
[0255.100] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.100] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0255.100] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0255.101] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0255.101] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0255.101] WaitMessage () returned 1
[0255.631] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.632] IsWindowUnicode (hWnd=0xd0122) returned 1
[0255.632] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.632] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0255.632] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0255.632] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0255.632] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0255.632] WaitMessage () returned 1
[0255.879] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.879] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x84, wParam=0x0, lParam=0x18d0363) returned 0x1
[0255.879] IsWindowUnicode (hWnd=0x9004e) returned 1
[0255.880] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.880] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0255.880] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0255.880] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0255.880] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.880] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x84, wParam=0x0, lParam=0x18d0363) returned 0x1
[0255.880] IsWindowUnicode (hWnd=0x9004e) returned 1
[0255.880] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.880] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x84, wParam=0x0, lParam=0x18d0363) returned 0x1
[0255.880] SetCursor (hCursor=0x10003) returned 0x10003
[0255.881] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0255.881] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0255.881] _TrackMouseEvent (in: lpEventTrack=0x2479624 | out: lpEventTrack=0x2479624) returned 1
[0255.881] SendMessageW (hWnd=0x9004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0255.881] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0255.881] InvalidateRect (hWnd=0x9004e, lpRect=0x0, bErase=0) returned 1
[0255.881] GetKeyState (nVirtKey=1) returned 0
[0255.881] GetKeyState (nVirtKey=2) returned 0
[0255.881] GetKeyState (nVirtKey=4) returned 0
[0255.881] GetKeyState (nVirtKey=5) returned 0
[0255.881] GetKeyState (nVirtKey=6) returned 0
[0255.881] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.881] IsWindowUnicode (hWnd=0x9004e) returned 1
[0255.881] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.881] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0255.881] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0255.882] BeginPaint (in: hWnd=0x9004e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0255.882] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0255.882] CreateCompatibleDC (hdc=0xf0105ee) returned 0xbf0107af
[0255.882] SelectObject (hdc=0xbf0107af, h=0x1e0507b9) returned 0x85000f
[0255.882] GdipCreateFromHDC (hdc=0xbf0107af, graphics=0x53e300) returned 0x0
[0255.884] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0255.884] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0255.884] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0255.884] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0255.884] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0255.884] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0255.884] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0255.884] LocalFree (hMem=0x89ec80) returned 0x0
[0255.884] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0255.884] GdipCreateRegion (region=0x53e348) returned 0x0
[0255.885] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0255.885] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0255.885] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0255.885] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb9f0dbd) returned 0x0
[0255.885] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0255.885] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0255.885] GetCurrentObject (hdc=0xbf0107af, type=0x1) returned 0xb00017
[0255.885] GetCurrentObject (hdc=0xbf0107af, type=0x2) returned 0x900010
[0255.885] GetCurrentObject (hdc=0xbf0107af, type=0x7) returned 0x1e0507b9
[0255.885] GetCurrentObject (hdc=0xbf0107af, type=0x6) returned 0x8a01c2
[0255.885] SaveDC (hdc=0xbf0107af) returned 1
[0255.885] GetNearestColor (hdc=0xbf0107af, color=0xf0f0f0) returned 0xf0f0f0
[0255.886] GetNearestColor (hdc=0xbf0107af, color=0xa0a0a0) returned 0xa0a0a0
[0255.886] GetNearestColor (hdc=0xbf0107af, color=0x696969) returned 0x696969
[0255.886] GetNearestColor (hdc=0xbf0107af, color=0xa0a0a0) returned 0xa0a0a0
[0255.886] GetNearestColor (hdc=0xbf0107af, color=0x0) returned 0x0
[0255.886] GetNearestColor (hdc=0xbf0107af, color=0xffffff) returned 0xffffff
[0255.886] GetNearestColor (hdc=0xbf0107af, color=0xe5e5e5) returned 0xe5e5e5
[0255.886] GetNearestColor (hdc=0xbf0107af, color=0xd7d7d7) returned 0xd7d7d7
[0255.886] GetNearestColor (hdc=0xbf0107af, color=0x0) returned 0x0
[0255.886] RestoreDC (hdc=0xbf0107af, nSavedDC=-1) returned 1
[0255.886] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbf0107af) returned 0x0
[0255.886] IsAppThemed () returned 0x1
[0255.886] GetThemeAppProperties () returned 0x3
[0255.886] GetThemeAppProperties () returned 0x3
[0255.886] IsAppThemed () returned 0x1
[0255.887] GetThemeAppProperties () returned 0x3
[0255.887] GetThemeAppProperties () returned 0x3
[0255.887] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0255.887] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x2480498 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0255.887] IsAppThemed () returned 0x1
[0255.887] GetThemeAppProperties () returned 0x3
[0255.887] GetThemeAppProperties () returned 0x3
[0255.887] IsAppThemed () returned 0x1
[0255.888] GetThemeAppProperties () returned 0x3
[0255.888] GetThemeAppProperties () returned 0x3
[0255.888] IsAppThemed () returned 0x1
[0255.888] GetThemeAppProperties () returned 0x3
[0255.888] GetThemeAppProperties () returned 0x3
[0255.888] IsAppThemed () returned 0x1
[0255.888] GetThemeAppProperties () returned 0x3
[0255.888] GetThemeAppProperties () returned 0x3
[0255.888] IsThemePartDefined () returned 0x1
[0255.888] IsAppThemed () returned 0x1
[0255.888] GetThemeAppProperties () returned 0x3
[0255.888] GetThemeAppProperties () returned 0x3
[0255.888] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0255.888] IsAppThemed () returned 0x1
[0255.888] GetThemeAppProperties () returned 0x3
[0255.888] GetThemeAppProperties () returned 0x3
[0255.888] IsAppThemed () returned 0x1
[0255.888] GetThemeAppProperties () returned 0x3
[0255.888] GetThemeAppProperties () returned 0x3
[0255.888] IsThemePartDefined () returned 0x1
[0255.888] GdipCreateRegion (region=0x53e064) returned 0x0
[0255.888] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0255.888] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0255.889] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0255.889] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0255.889] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0255.889] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0255.889] LocalFree (hMem=0x89ee08) returned 0x0
[0255.889] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0255.889] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0255.889] LocalFree (hMem=0x89ee08) returned 0x0
[0255.889] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0255.889] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0255.889] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0255.889] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0255.889] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0255.889] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0255.889] GetCurrentObject (hdc=0xbf0107af, type=0x1) returned 0xb00017
[0255.889] GetCurrentObject (hdc=0xbf0107af, type=0x2) returned 0x900010
[0255.889] GetCurrentObject (hdc=0xbf0107af, type=0x7) returned 0x1e0507b9
[0255.889] GetCurrentObject (hdc=0xbf0107af, type=0x6) returned 0x8a01c2
[0255.890] SaveDC (hdc=0xbf0107af) returned 1
[0255.890] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4304053e
[0255.890] GetClipRgn (hdc=0xbf0107af, hrgn=0x4304053e) returned 0
[0255.890] SelectClipRgn (hdc=0xbf0107af, hrgn=0x1f04051e) returned 2
[0255.890] DeleteObject (ho=0x4304053e) returned 1
[0255.890] DeleteObject (ho=0x1f04051e) returned 1
[0255.890] OffsetViewportOrgEx (in: hdc=0xbf0107af, x=0, y=0, lppt=0x2480b48 | out: lppt=0x2480b48) returned 1
[0255.890] DrawThemeParentBackground () returned 0x0
[0255.890] GetWindowPlacement (in: hWnd=0xe00ea, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0255.890] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0255.890] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0255.890] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0255.891] GetSystemMetrics (nIndex=42) returned 0
[0255.891] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0255.891] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0255.891] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0255.891] GetCurrentObject (hdc=0xbf0107af, type=0x1) returned 0xb00017
[0255.891] GetCurrentObject (hdc=0xbf0107af, type=0x2) returned 0x900010
[0255.891] GetCurrentObject (hdc=0xbf0107af, type=0x7) returned 0x1e0507b9
[0255.891] GetCurrentObject (hdc=0xbf0107af, type=0x6) returned 0x8a01c2
[0255.891] SaveDC (hdc=0xbf0107af) returned 2
[0255.891] GetNearestColor (hdc=0xbf0107af, color=0xf0f0f0) returned 0xf0f0f0
[0255.891] CreateSolidBrush (color=0xf0f0f0) returned 0x5b10078d
[0255.891] FillRect (hDC=0xbf0107af, lprc=0x53dac8, hbr=0x5b10078d) returned 1
[0255.891] DeleteObject (ho=0x5b10078d) returned 1
[0255.891] RestoreDC (hdc=0xbf0107af, nSavedDC=-1) returned 1
[0255.892] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0255.892] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0255.892] GetSystemMetrics (nIndex=42) returned 0
[0255.892] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0255.892] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0255.892] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0255.892] GetCurrentObject (hdc=0xbf0107af, type=0x1) returned 0xb00017
[0255.892] GetCurrentObject (hdc=0xbf0107af, type=0x2) returned 0x900010
[0255.892] GetCurrentObject (hdc=0xbf0107af, type=0x7) returned 0x1e0507b9
[0255.892] GetCurrentObject (hdc=0xbf0107af, type=0x6) returned 0x8a01c2
[0255.892] SaveDC (hdc=0xbf0107af) returned 2
[0255.892] GetNearestColor (hdc=0xbf0107af, color=0xf0f0f0) returned 0xf0f0f0
[0255.892] CreateSolidBrush (color=0xf0f0f0) returned 0x5c10078d
[0255.892] FillRect (hDC=0xbf0107af, lprc=0x53da68, hbr=0x5c10078d) returned 1
[0255.892] DeleteObject (ho=0x5c10078d) returned 1
[0255.892] RestoreDC (hdc=0xbf0107af, nSavedDC=-1) returned 1
[0255.892] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0255.892] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0255.893] GetSystemMetrics (nIndex=42) returned 0
[0255.893] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0255.893] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0255.893] RestoreDC (hdc=0xbf0107af, nSavedDC=-1) returned 1
[0255.893] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbf0107af) returned 0x0
[0255.893] IsAppThemed () returned 0x1
[0255.893] GetThemeAppProperties () returned 0x3
[0255.893] GetThemeAppProperties () returned 0x3
[0255.893] IsAppThemed () returned 0x1
[0255.893] GetThemeAppProperties () returned 0x3
[0255.893] GetThemeAppProperties () returned 0x3
[0255.893] IsThemePartDefined () returned 0x1
[0255.893] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0255.893] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0255.893] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0255.893] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0255.893] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0255.894] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0255.894] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0255.894] LocalFree (hMem=0x89ea88) returned 0x0
[0255.894] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0255.894] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0255.894] LocalFree (hMem=0x89ea88) returned 0x0
[0255.894] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0255.894] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0255.894] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0255.894] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0255.894] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0255.894] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0255.894] GetCurrentObject (hdc=0xbf0107af, type=0x1) returned 0xb00017
[0255.894] GetCurrentObject (hdc=0xbf0107af, type=0x2) returned 0x900010
[0255.894] GetCurrentObject (hdc=0xbf0107af, type=0x7) returned 0x1e0507b9
[0255.894] GetCurrentObject (hdc=0xbf0107af, type=0x6) returned 0x8a01c2
[0255.894] SaveDC (hdc=0xbf0107af) returned 1
[0255.894] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2004051e
[0255.895] GetClipRgn (hdc=0xbf0107af, hrgn=0x2004051e) returned 0
[0255.895] SelectClipRgn (hdc=0xbf0107af, hrgn=0x4504053e) returned 2
[0255.895] DeleteObject (ho=0x2004051e) returned 1
[0255.895] DeleteObject (ho=0x4504053e) returned 1
[0255.895] OffsetViewportOrgEx (in: hdc=0xbf0107af, x=0, y=0, lppt=0x24813d0 | out: lppt=0x24813d0) returned 1
[0255.895] IsAppThemed () returned 0x1
[0255.895] GetThemeAppProperties () returned 0x3
[0255.895] GetThemeAppProperties () returned 0x3
[0255.895] DrawThemeBackground () returned 0x0
[0255.895] RestoreDC (hdc=0xbf0107af, nSavedDC=-1) returned 1
[0255.895] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbf0107af) returned 0x0
[0255.895] GdipCreateRegion (region=0x53dfec) returned 0x0
[0255.895] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0255.895] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0255.895] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0255.895] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0255.895] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0255.895] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0255.896] LocalFree (hMem=0x89ea88) returned 0x0
[0255.896] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0255.896] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0255.896] LocalFree (hMem=0x89ec80) returned 0x0
[0255.896] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0255.896] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0255.896] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0255.896] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0255.896] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0255.896] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0255.896] GetCurrentObject (hdc=0xbf0107af, type=0x1) returned 0xb00017
[0255.896] GetCurrentObject (hdc=0xbf0107af, type=0x2) returned 0x900010
[0255.897] GetCurrentObject (hdc=0xbf0107af, type=0x7) returned 0x1e0507b9
[0255.897] GetCurrentObject (hdc=0xbf0107af, type=0x6) returned 0x8a01c2
[0255.897] SaveDC (hdc=0xbf0107af) returned 1
[0255.897] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4604053e
[0255.897] GetClipRgn (hdc=0xbf0107af, hrgn=0x4604053e) returned 0
[0255.897] SelectClipRgn (hdc=0xbf0107af, hrgn=0x2104051e) returned 2
[0255.897] DeleteObject (ho=0x4604053e) returned 1
[0255.897] DeleteObject (ho=0x2104051e) returned 1
[0255.897] OffsetViewportOrgEx (in: hdc=0xbf0107af, x=0, y=0, lppt=0x24816a4 | out: lppt=0x24816a4) returned 1
[0255.897] IsAppThemed () returned 0x1
[0255.897] GetThemeAppProperties () returned 0x3
[0255.897] GetThemeAppProperties () returned 0x3
[0255.897] GetThemeBackgroundContentRect () returned 0x0
[0255.897] RestoreDC (hdc=0xbf0107af, nSavedDC=-1) returned 1
[0255.897] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbf0107af) returned 0x0
[0255.897] IsAppThemed () returned 0x1
[0255.898] GetThemeAppProperties () returned 0x3
[0255.898] GetThemeAppProperties () returned 0x3
[0255.898] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0255.898] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0255.898] GetCurrentObject (hdc=0xbf0107af, type=0x1) returned 0xb00017
[0255.898] GetCurrentObject (hdc=0xbf0107af, type=0x2) returned 0x900010
[0255.898] GetCurrentObject (hdc=0xbf0107af, type=0x7) returned 0x1e0507b9
[0255.898] GetCurrentObject (hdc=0xbf0107af, type=0x6) returned 0x8a01c2
[0255.898] SaveDC (hdc=0xbf0107af) returned 1
[0255.898] GetTextAlign (hdc=0xbf0107af) returned 0x0
[0255.898] GetTextColor (hdc=0xbf0107af) returned 0x0
[0255.898] GetCurrentObject (hdc=0xbf0107af, type=0x6) returned 0x8a01c2
[0255.898] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0255.898] SelectObject (hdc=0xbf0107af, h=0x730a066d) returned 0x8a01c2
[0255.899] GetBkMode (hdc=0xbf0107af) returned 2
[0255.899] SetBkMode (hdc=0xbf0107af, mode=1) returned 2
[0255.899] DrawTextExW (in: hdc=0xbf0107af, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x2481a44 | out: lpchText="OK", lprc=0x53df84) returned 13
[0255.899] DrawTextExW (in: hdc=0xbf0107af, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x2481a44 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0255.899] RestoreDC (hdc=0xbf0107af, nSavedDC=-1) returned 1
[0255.899] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbf0107af) returned 0x0
[0255.899] GetFocus () returned 0xd0122
[0255.900] IsAppThemed () returned 0x1
[0255.900] GetThemeAppProperties () returned 0x3
[0255.900] GetThemeAppProperties () returned 0x3
[0255.900] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0255.900] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xbf0107af, x1=0, y1=0, rop=0xcc0020) returned 1
[0255.902] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbf0107af) returned 0x0
[0255.902] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0255.902] SelectObject (hdc=0xbf0107af, h=0x85000f) returned 0x1e0507b9
[0255.902] DeleteDC (hdc=0xbf0107af) returned 1
[0255.902] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0255.902] EndPaint (hWnd=0x9004e, lpPaint=0x53e2e4) returned 1
[0255.902] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0255.903] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0255.903] WaitMessage () returned 1
[0255.991] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.991] IsWindowUnicode (hWnd=0x9004e) returned 1
[0255.991] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.991] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0255.991] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0255.991] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.991] IsWindowUnicode (hWnd=0x9004e) returned 1
[0255.991] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0255.991] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0255.991] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0255.993] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x2a1, wParam=0x0, lParam=0x40022) returned 0x0
[0255.993] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0255.993] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0255.993] WaitMessage () returned 1
[0256.137] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0256.137] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x84, wParam=0x0, lParam=0x18d0363) returned 0x1
[0256.137] IsWindowUnicode (hWnd=0x9004e) returned 1
[0256.137] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0256.137] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x84, wParam=0x0, lParam=0x18d0363) returned 0x1
[0256.137] GetDlgItem (hDlg=0xe00ea, nIDDlgItem=0) returned 0x0
[0256.137] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x210, wParam=0x201, lParam=0x100144) returned 0x0
[0256.138] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x21, wParam=0xe00ea, lParam=0x2010001) returned 0x1
[0256.138] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x21, wParam=0xe00ea, lParam=0x2010001) returned 0x1
[0256.138] SetCursor (hCursor=0x10003) returned 0x10003
[0256.138] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0256.138] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0256.138] GetKeyState (nVirtKey=1) returned -127
[0256.138] GetKeyState (nVirtKey=2) returned 0
[0256.138] GetKeyState (nVirtKey=4) returned 0
[0256.138] GetKeyState (nVirtKey=5) returned 0
[0256.138] GetKeyState (nVirtKey=6) returned 0
[0256.138] IsWindowVisible (hWnd=0x9004e) returned 1
[0256.138] IsWindowEnabled (hWnd=0x9004e) returned 1
[0256.138] SetFocus (hWnd=0x9004e) returned 0xd0122
[0256.140] GetFocus () returned 0x9004e
[0256.140] IsChild (hWndParent=0xe00ea, hWnd=0x9004e) returned 1
[0256.140] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x8, wParam=0x9004e, lParam=0x0) returned 0x1
[0256.140] SendMessageW (hWnd=0xd0122, Msg=0x2111, wParam=0x2000122, lParam=0xd0122) returned 0x0
[0256.142] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0256.143] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0256.144] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0256.144] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0256.144] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0256.144] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0256.146] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0256.146] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x7, wParam=0xd0122, lParam=0x0) returned 0x0
[0256.147] GetStockObject (i=5) returned 0x900015
[0256.147] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0256.147] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0xd, wParam=0x3, lParam=0x89e688) returned 0x2
[0256.147] GetDlgItem (hDlg=0xe00ea, nIDDlgItem=589902) returned 0x9004e
[0256.147] SendMessageW (hWnd=0x9004e, Msg=0x202b, wParam=0x9004e, lParam=0x53de74) returned 0x0
[0256.147] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x202b, wParam=0x9004e, lParam=0x53de74) returned 0x0
[0256.147] InvalidateRect (hWnd=0x9004e, lpRect=0x0, bErase=0) returned 1
[0256.149] GetFocus () returned 0x9004e
[0256.149] GetFocus () returned 0x9004e
[0256.149] GetFocus () returned 0x9004e
[0256.149] GetKeyState (nVirtKey=1) returned -127
[0256.149] GetKeyState (nVirtKey=2) returned 0
[0256.149] GetKeyState (nVirtKey=4) returned 0
[0256.149] GetKeyState (nVirtKey=5) returned 0
[0256.149] GetKeyState (nVirtKey=6) returned 0
[0256.149] GetCapture () returned 0x0
[0256.149] SetCapture (hWnd=0x9004e) returned 0x0
[0256.149] GetKeyState (nVirtKey=1) returned -127
[0256.149] GetKeyState (nVirtKey=2) returned 0
[0256.149] GetKeyState (nVirtKey=4) returned 0
[0256.149] GetKeyState (nVirtKey=5) returned 0
[0256.149] GetKeyState (nVirtKey=6) returned 0
[0256.149] NotifyWinEvent (event=0x800a, hwnd=0x9004e, idObject=-4, idChild=0)
[0256.149] InvalidateRect (hWnd=0x9004e, lpRect=0x53e4c8, bErase=0) returned 1
[0256.150] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0256.150] IsWindowUnicode (hWnd=0x9004e) returned 1
[0256.150] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0256.150] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0256.150] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0256.150] MapWindowPoints (in: hWndFrom=0x9004e, hWndTo=0x0, lpPoints=0x2481c28, cPoints=0x1 | out: lpPoints=0x2481c28) returned 25756481
[0256.150] NotifyWinEvent (event=0x800a, hwnd=0x9004e, idObject=-4, idChild=0)
[0256.150] InvalidateRect (hWnd=0x9004e, lpRect=0x53e468, bErase=0) returned 1
[0256.150] UpdateWindow (hWnd=0x9004e) returned 1
[0256.150] BeginPaint (in: hWnd=0x9004e, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0xf0105ee
[0256.150] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0256.150] CreateCompatibleDC (hdc=0xf0105ee) returned 0xc00107af
[0256.151] SelectObject (hdc=0xc00107af, h=0x1e0507b9) returned 0x85000f
[0256.151] GdipCreateFromHDC (hdc=0xc00107af, graphics=0x53df98) returned 0x0
[0256.151] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0256.151] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0256.151] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0256.151] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0256.151] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0256.151] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0256.151] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0256.151] LocalFree (hMem=0x89ec80) returned 0x0
[0256.152] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0256.152] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0256.152] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.152] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0256.152] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0256.152] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb9d0dbd) returned 0x0
[0256.152] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.152] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0256.152] GetCurrentObject (hdc=0xc00107af, type=0x1) returned 0xb00017
[0256.152] GetCurrentObject (hdc=0xc00107af, type=0x2) returned 0x900010
[0256.152] GetCurrentObject (hdc=0xc00107af, type=0x7) returned 0x1e0507b9
[0256.152] GetCurrentObject (hdc=0xc00107af, type=0x6) returned 0x8a01c2
[0256.152] SaveDC (hdc=0xc00107af) returned 1
[0256.152] GetNearestColor (hdc=0xc00107af, color=0xf0f0f0) returned 0xf0f0f0
[0256.153] GetNearestColor (hdc=0xc00107af, color=0xa0a0a0) returned 0xa0a0a0
[0256.153] GetNearestColor (hdc=0xc00107af, color=0x696969) returned 0x696969
[0256.153] GetNearestColor (hdc=0xc00107af, color=0xa0a0a0) returned 0xa0a0a0
[0256.153] GetNearestColor (hdc=0xc00107af, color=0x0) returned 0x0
[0256.153] GetNearestColor (hdc=0xc00107af, color=0xffffff) returned 0xffffff
[0256.153] GetNearestColor (hdc=0xc00107af, color=0xe5e5e5) returned 0xe5e5e5
[0256.153] GetNearestColor (hdc=0xc00107af, color=0xd7d7d7) returned 0xd7d7d7
[0256.153] GetNearestColor (hdc=0xc00107af, color=0x0) returned 0x0
[0256.153] RestoreDC (hdc=0xc00107af, nSavedDC=-1) returned 1
[0256.153] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc00107af) returned 0x0
[0256.153] IsAppThemed () returned 0x1
[0256.153] GetThemeAppProperties () returned 0x3
[0256.153] GetThemeAppProperties () returned 0x3
[0256.153] IsAppThemed () returned 0x1
[0256.153] GetThemeAppProperties () returned 0x3
[0256.154] GetThemeAppProperties () returned 0x3
[0256.154] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x248239c | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0256.154] IsAppThemed () returned 0x1
[0256.154] GetThemeAppProperties () returned 0x3
[0256.154] GetThemeAppProperties () returned 0x3
[0256.154] IsAppThemed () returned 0x1
[0256.154] GetThemeAppProperties () returned 0x3
[0256.154] GetThemeAppProperties () returned 0x3
[0256.154] IsAppThemed () returned 0x1
[0256.155] GetThemeAppProperties () returned 0x3
[0256.155] GetThemeAppProperties () returned 0x3
[0256.155] IsAppThemed () returned 0x1
[0256.155] GetThemeAppProperties () returned 0x3
[0256.155] GetThemeAppProperties () returned 0x3
[0256.155] IsThemePartDefined () returned 0x1
[0256.155] IsAppThemed () returned 0x1
[0256.155] GetThemeAppProperties () returned 0x3
[0256.155] GetThemeAppProperties () returned 0x3
[0256.155] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0256.155] IsAppThemed () returned 0x1
[0256.155] GetThemeAppProperties () returned 0x3
[0256.155] GetThemeAppProperties () returned 0x3
[0256.155] IsAppThemed () returned 0x1
[0256.155] GetThemeAppProperties () returned 0x3
[0256.155] GetThemeAppProperties () returned 0x3
[0256.155] IsThemePartDefined () returned 0x1
[0256.155] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0256.155] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.155] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0256.155] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0256.155] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0256.156] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0256.156] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0256.156] LocalFree (hMem=0x89ea88) returned 0x0
[0256.156] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0256.156] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0256.156] LocalFree (hMem=0x89ee08) returned 0x0
[0256.156] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0256.156] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0256.156] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0256.156] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0256.156] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.156] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0256.156] GetCurrentObject (hdc=0xc00107af, type=0x1) returned 0xb00017
[0256.156] GetCurrentObject (hdc=0xc00107af, type=0x2) returned 0x900010
[0256.156] GetCurrentObject (hdc=0xc00107af, type=0x7) returned 0x1e0507b9
[0256.156] GetCurrentObject (hdc=0xc00107af, type=0x6) returned 0x8a01c2
[0256.156] SaveDC (hdc=0xc00107af) returned 1
[0256.157] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2204051e
[0256.157] GetClipRgn (hdc=0xc00107af, hrgn=0x2204051e) returned 0
[0256.157] SelectClipRgn (hdc=0xc00107af, hrgn=0x4a04053e) returned 2
[0256.157] DeleteObject (ho=0x2204051e) returned 1
[0256.157] DeleteObject (ho=0x4a04053e) returned 1
[0256.157] OffsetViewportOrgEx (in: hdc=0xc00107af, x=0, y=0, lppt=0x2482a4c | out: lppt=0x2482a4c) returned 1
[0256.157] DrawThemeParentBackground () returned 0x0
[0256.157] GetWindowPlacement (in: hWnd=0xe00ea, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0256.157] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0256.157] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0256.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0256.157] GetSystemMetrics (nIndex=42) returned 0
[0256.157] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0256.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0256.158] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0256.158] GetCurrentObject (hdc=0xc00107af, type=0x1) returned 0xb00017
[0256.158] GetCurrentObject (hdc=0xc00107af, type=0x2) returned 0x900010
[0256.158] GetCurrentObject (hdc=0xc00107af, type=0x7) returned 0x1e0507b9
[0256.158] GetCurrentObject (hdc=0xc00107af, type=0x6) returned 0x8a01c2
[0256.158] SaveDC (hdc=0xc00107af) returned 2
[0256.158] GetNearestColor (hdc=0xc00107af, color=0xf0f0f0) returned 0xf0f0f0
[0256.158] CreateSolidBrush (color=0xf0f0f0) returned 0x5d10078d
[0256.158] FillRect (hDC=0xc00107af, lprc=0x53d760, hbr=0x5d10078d) returned 1
[0256.158] DeleteObject (ho=0x5d10078d) returned 1
[0256.158] RestoreDC (hdc=0xc00107af, nSavedDC=-1) returned 1
[0256.158] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0256.158] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0256.158] GetSystemMetrics (nIndex=42) returned 0
[0256.158] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0256.158] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0256.158] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0256.159] GetCurrentObject (hdc=0xc00107af, type=0x1) returned 0xb00017
[0256.159] GetCurrentObject (hdc=0xc00107af, type=0x2) returned 0x900010
[0256.159] GetCurrentObject (hdc=0xc00107af, type=0x7) returned 0x1e0507b9
[0256.159] GetCurrentObject (hdc=0xc00107af, type=0x6) returned 0x8a01c2
[0256.159] SaveDC (hdc=0xc00107af) returned 2
[0256.159] GetNearestColor (hdc=0xc00107af, color=0xf0f0f0) returned 0xf0f0f0
[0256.159] CreateSolidBrush (color=0xf0f0f0) returned 0x5e10078d
[0256.159] FillRect (hDC=0xc00107af, lprc=0x53d700, hbr=0x5e10078d) returned 1
[0256.159] DeleteObject (ho=0x5e10078d) returned 1
[0256.159] RestoreDC (hdc=0xc00107af, nSavedDC=-1) returned 1
[0256.159] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0256.159] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0256.159] GetSystemMetrics (nIndex=42) returned 0
[0256.159] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0256.159] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0256.160] RestoreDC (hdc=0xc00107af, nSavedDC=-1) returned 1
[0256.160] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc00107af) returned 0x0
[0256.160] IsAppThemed () returned 0x1
[0256.160] GetThemeAppProperties () returned 0x3
[0256.160] GetThemeAppProperties () returned 0x3
[0256.160] IsAppThemed () returned 0x1
[0256.160] GetThemeAppProperties () returned 0x3
[0256.160] GetThemeAppProperties () returned 0x3
[0256.160] IsThemePartDefined () returned 0x1
[0256.160] GdipCreateRegion (region=0x53dc80) returned 0x0
[0256.160] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.160] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0256.160] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0256.160] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0256.160] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0256.160] LocalFree (hMem=0x89ec80) returned 0x0
[0256.160] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0256.160] LocalFree (hMem=0x89ec80) returned 0x0
[0256.160] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0256.160] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0256.161] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0256.161] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0256.161] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.161] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0256.161] GetCurrentObject (hdc=0xc00107af, type=0x1) returned 0xb00017
[0256.161] GetCurrentObject (hdc=0xc00107af, type=0x2) returned 0x900010
[0256.161] GetCurrentObject (hdc=0xc00107af, type=0x7) returned 0x1e0507b9
[0256.161] GetCurrentObject (hdc=0xc00107af, type=0x6) returned 0x8a01c2
[0256.161] SaveDC (hdc=0xc00107af) returned 1
[0256.161] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4b04053e
[0256.161] GetClipRgn (hdc=0xc00107af, hrgn=0x4b04053e) returned 0
[0256.161] SelectClipRgn (hdc=0xc00107af, hrgn=0x2404051e) returned 2
[0256.161] DeleteObject (ho=0x4b04053e) returned 1
[0256.161] DeleteObject (ho=0x2404051e) returned 1
[0256.161] OffsetViewportOrgEx (in: hdc=0xc00107af, x=0, y=0, lppt=0x24832d4 | out: lppt=0x24832d4) returned 1
[0256.161] IsAppThemed () returned 0x1
[0256.161] GetThemeAppProperties () returned 0x3
[0256.161] GetThemeAppProperties () returned 0x3
[0256.161] DrawThemeBackground () returned 0x0
[0256.161] RestoreDC (hdc=0xc00107af, nSavedDC=-1) returned 1
[0256.162] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc00107af) returned 0x0
[0256.162] GdipCreateRegion (region=0x53dc84) returned 0x0
[0256.162] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.162] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0256.162] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0256.162] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0256.162] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0256.162] LocalFree (hMem=0x89ea88) returned 0x0
[0256.162] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0256.162] LocalFree (hMem=0x89eee8) returned 0x0
[0256.162] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0256.162] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0256.163] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0256.163] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0256.163] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.163] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0256.163] GetCurrentObject (hdc=0xc00107af, type=0x1) returned 0xb00017
[0256.163] GetCurrentObject (hdc=0xc00107af, type=0x2) returned 0x900010
[0256.163] GetCurrentObject (hdc=0xc00107af, type=0x7) returned 0x1e0507b9
[0256.163] GetCurrentObject (hdc=0xc00107af, type=0x6) returned 0x8a01c2
[0256.163] SaveDC (hdc=0xc00107af) returned 1
[0256.163] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2504051e
[0256.163] GetClipRgn (hdc=0xc00107af, hrgn=0x2504051e) returned 0
[0256.163] SelectClipRgn (hdc=0xc00107af, hrgn=0x4c04053e) returned 2
[0256.163] DeleteObject (ho=0x2504051e) returned 1
[0256.163] DeleteObject (ho=0x4c04053e) returned 1
[0256.163] OffsetViewportOrgEx (in: hdc=0xc00107af, x=0, y=0, lppt=0x24835a8 | out: lppt=0x24835a8) returned 1
[0256.163] IsAppThemed () returned 0x1
[0256.163] GetThemeAppProperties () returned 0x3
[0256.163] GetThemeAppProperties () returned 0x3
[0256.163] GetThemeBackgroundContentRect () returned 0x0
[0256.163] RestoreDC (hdc=0xc00107af, nSavedDC=-1) returned 1
[0256.164] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc00107af) returned 0x0
[0256.164] IsAppThemed () returned 0x1
[0256.164] GetThemeAppProperties () returned 0x3
[0256.164] GetThemeAppProperties () returned 0x3
[0256.164] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0256.164] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0256.164] GetCurrentObject (hdc=0xc00107af, type=0x1) returned 0xb00017
[0256.164] GetCurrentObject (hdc=0xc00107af, type=0x2) returned 0x900010
[0256.164] GetCurrentObject (hdc=0xc00107af, type=0x7) returned 0x1e0507b9
[0256.164] GetCurrentObject (hdc=0xc00107af, type=0x6) returned 0x8a01c2
[0256.164] SaveDC (hdc=0xc00107af) returned 1
[0256.164] GetTextAlign (hdc=0xc00107af) returned 0x0
[0256.164] GetTextColor (hdc=0xc00107af) returned 0x0
[0256.164] GetCurrentObject (hdc=0xc00107af, type=0x6) returned 0x8a01c2
[0256.164] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0256.164] SelectObject (hdc=0xc00107af, h=0x730a066d) returned 0x8a01c2
[0256.164] GetBkMode (hdc=0xc00107af) returned 2
[0256.165] SetBkMode (hdc=0xc00107af, mode=1) returned 2
[0256.165] DrawTextExW (in: hdc=0xc00107af, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x2483948 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0256.165] DrawTextExW (in: hdc=0xc00107af, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x2483948 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0256.165] RestoreDC (hdc=0xc00107af, nSavedDC=-1) returned 1
[0256.165] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc00107af) returned 0x0
[0256.165] GetFocus () returned 0x9004e
[0256.165] IsAppThemed () returned 0x1
[0256.165] GetThemeAppProperties () returned 0x3
[0256.165] GetThemeAppProperties () returned 0x3
[0256.165] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0256.166] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xc00107af, x1=0, y1=0, rop=0xcc0020) returned 1
[0256.166] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc00107af) returned 0x0
[0256.166] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0256.166] SelectObject (hdc=0xc00107af, h=0x85000f) returned 0x1e0507b9
[0256.166] DeleteDC (hdc=0xc00107af) returned 1
[0256.166] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0256.166] EndPaint (hWnd=0x9004e, lpPaint=0x53df7c) returned 1
[0256.166] MapWindowPoints (in: hWndFrom=0x9004e, hWndTo=0x0, lpPoints=0x2483a44, cPoints=0x1 | out: lpPoints=0x2483a44) returned 25756481
[0256.166] WindowFromPoint (Point=0x363) returned 0x9004e
[0256.167] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x84, wParam=0x0, lParam=0x18d0363) returned 0x1
[0256.167] NotifyWinEvent (event=0x800a, hwnd=0x9004e, idObject=-4, idChild=0)
[0256.167] NotifyWinEvent (event=0x800c, hwnd=0x9004e, idObject=-4, idChild=0)
[0256.167] GetWindowTextLengthW (hWnd=0xd0122) returned 0
[0256.167] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0256.167] GetSystemMetrics (nIndex=42) returned 0
[0256.167] GetWindowTextW (in: hWnd=0xd0122, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0256.167] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0256.167] SendMessageW (hWnd=0xe00ea, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0256.167] GetCapture () returned 0x9004e
[0256.167] ReleaseCapture () returned 1
[0256.167] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0256.168] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0256.168] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x84, wParam=0x0, lParam=0x18d0363) returned 0x1
[0256.168] IsWindow (hWnd=0x70036) returned 1
[0256.168] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0256.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0256.169] IsWindow (hWnd=0x70036) returned 1
[0256.169] SetActiveWindow (hWnd=0x70036) returned 0xe00ea
[0256.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0256.171] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0256.172] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0256.172] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0256.173] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0256.173] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0256.173] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0256.173] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0xe00ea) returned 0x1
[0256.176] GetFocus () returned 0x9004e
[0256.176] SetFocus (hWnd=0x202c6) returned 0x9004e
[0256.176] GetFocus () returned 0x202c6
[0256.176] IsChild (hWndParent=0xe00ea, hWnd=0x202c6) returned 0
[0256.176] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0256.176] GetCapture () returned 0x0
[0256.177] InvalidateRect (hWnd=0x9004e, lpRect=0x0, bErase=0) returned 1
[0256.178] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0256.179] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0256.180] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0256.180] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0256.181] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0256.181] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0256.181] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0256.181] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x9004e, lParam=0x0) returned 0x0
[0256.182] GetStockObject (i=5) returned 0x900015
[0256.182] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0256.182] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8ccbe0) returned 0x7
[0256.182] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0256.182] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0256.182] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0256.182] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0256.184] IsWindow (hWnd=0x202c6) returned 1
[0256.184] SetFocus (hWnd=0x202c6) returned 0x202c6
[0256.184] GetWindowLongW (hWnd=0xe00ea, nIndex=-8) returned 458806
[0256.184] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0256.184] GetCurrentThreadId () returned 0x11d0
[0256.184] IsWindow (hWnd=0x70036) returned 1
[0256.184] IsWindow (hWnd=0x70036) returned 1
[0256.184] IsWindowVisible (hWnd=0x70036) returned 1
[0256.184] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0256.184] GetFocus () returned 0x202c6
[0256.184] IsChild (hWndParent=0xe00ea, hWnd=0x202c6) returned 0
[0256.184] ShowWindow (hWnd=0xe00ea, nCmdShow=0) returned 1
[0256.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0256.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0256.186] GetWindowPlacement (in: hWnd=0xe00ea, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0256.186] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0256.186] GetClientRect (in: hWnd=0xe00ea, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0256.186] GetWindowRect (in: hWnd=0xe00ea, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0256.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0256.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0256.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0256.188] GetWindowLongW (hWnd=0xe00ea, nIndex=-20) returned 327937
[0256.188] DestroyWindow (hWnd=0xe00ea) returned 1
[0256.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0256.188] GetWindowTextLengthW (hWnd=0xe00ea) returned 10
[0256.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0256.189] GetSystemMetrics (nIndex=42) returned 0
[0256.189] GetWindowTextW (in: hWnd=0xe00ea, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0256.189] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0256.189] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0256.189] SendMessageW (hWnd=0xd0122, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0256.189] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0256.189] SendMessageW (hWnd=0xd0122, Msg=0xb0, wParam=0x246b704, lParam=0x53e518) returned 0x0
[0256.189] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xb0, wParam=0x246b704, lParam=0x53e518) returned 0x0
[0256.189] GetWindowTextLengthW (hWnd=0xd0122) returned 0
[0256.189] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0256.189] GetSystemMetrics (nIndex=42) returned 0
[0256.189] GetWindowTextW (in: hWnd=0xd0122, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0256.189] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0256.189] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0256.189] GetWindowThreadProcessId (in: hWnd=0x702ca, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0256.189] GetWindow (hWnd=0x702ca, uCmd=0x5) returned 0x0
[0256.189] GetWindowLongW (hWnd=0x702ca, nIndex=-20) returned 65792
[0256.189] DestroyWindow (hWnd=0x702ca) returned 1
[0256.190] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702ca, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0256.190] GetWindowTextLengthW (hWnd=0x702ca) returned 25
[0256.190] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0256.190] GetSystemMetrics (nIndex=42) returned 0
[0256.190] GetWindowTextW (in: hWnd=0x702ca, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0256.190] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702ca, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0256.190] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0256.190] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x702ca, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0256.191] GetWindowTextLengthW (hWnd=0xd01e2) returned 16
[0256.191] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0256.191] GetSystemMetrics (nIndex=42) returned 0
[0256.191] GetWindowTextW (in: hWnd=0xd01e2, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0256.192] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0256.192] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0256.192] InvalidateRect (hWnd=0x9004e, lpRect=0x0, bErase=0) returned 1
[0256.192] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0256.192] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0256.192] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd0122, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0256.202] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xd01e2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0256.203] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x9004e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0256.204] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x28013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0256.205] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xe00ea, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0256.207] GetProcessWindowStation () returned 0x13c
[0256.208] GetActiveWindow () returned 0x70036
[0256.208] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0256.208] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0256.208] GetCurrentThreadId () returned 0x11d0
[0256.209] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf54e6, lParam=0x0) returned 1
[0256.217] IsWindowVisible (hWnd=0x70036) returned 1
[0256.217] IsWindowEnabled (hWnd=0x70036) returned 1
[0256.217] IsWindowVisible (hWnd=0x602b6) returned 0
[0256.217] IsWindowVisible (hWnd=0x901f8) returned 0
[0256.217] IsWindowVisible (hWnd=0x202d0) returned 0
[0256.217] IsWindowVisible (hWnd=0x202d4) returned 0
[0256.217] GetActiveWindow () returned 0x70036
[0256.217] GetFocus () returned 0x202c6
[0256.218] IsWindow (hWnd=0x70036) returned 1
[0256.218] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0256.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0256.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0256.218] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0256.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0256.232] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0xf00ea) returned 0x1
[0256.234] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0256.234] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0256.237] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x29013e, lParam=0x0) returned 0x0
[0256.237] GetCapture () returned 0x0
[0256.237] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0256.238] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0256.240] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0256.240] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0256.247] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x10105d6
[0256.247] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0256.247] CreateCompatibleDC (hdc=0x10105d6) returned 0xd20107af
[0256.247] SelectObject (hdc=0xd20107af, h=0x1e0507b9) returned 0x85000f
[0256.247] GdipCreateFromHDC (hdc=0xd20107af, graphics=0x53e108) returned 0x0
[0256.247] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0256.247] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0256.247] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0256.247] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0256.247] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0256.247] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0256.248] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0256.248] LocalFree (hMem=0x89ee08) returned 0x0
[0256.248] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0256.248] GdipCreateRegion (region=0x53e150) returned 0x0
[0256.248] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.248] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0256.248] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0256.248] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb9b0dbd) returned 0x0
[0256.248] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.248] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0256.248] GetCurrentObject (hdc=0xd20107af, type=0x1) returned 0xb00017
[0256.248] GetCurrentObject (hdc=0xd20107af, type=0x2) returned 0x900010
[0256.248] GetCurrentObject (hdc=0xd20107af, type=0x7) returned 0x1e0507b9
[0256.248] GetCurrentObject (hdc=0xd20107af, type=0x6) returned 0x8a01c2
[0256.248] SaveDC (hdc=0xd20107af) returned 1
[0256.249] GetNearestColor (hdc=0xd20107af, color=0xff) returned 0xff
[0256.249] GetNearestColor (hdc=0xd20107af, color=0x55) returned 0x55
[0256.249] GetNearestColor (hdc=0xd20107af, color=0x0) returned 0x0
[0256.249] GetNearestColor (hdc=0xd20107af, color=0x55) returned 0x55
[0256.249] GetNearestColor (hdc=0xd20107af, color=0x0) returned 0x0
[0256.249] GetNearestColor (hdc=0xd20107af, color=0x8080ff) returned 0x8080ff
[0256.249] GetNearestColor (hdc=0xd20107af, color=0x7373e5) returned 0x7373e5
[0256.249] GetNearestColor (hdc=0xd20107af, color=0xe5) returned 0xe5
[0256.249] GetNearestColor (hdc=0xd20107af, color=0x0) returned 0x0
[0256.249] RestoreDC (hdc=0xd20107af, nSavedDC=-1) returned 1
[0256.249] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd20107af) returned 0x0
[0256.249] IsAppThemed () returned 0x1
[0256.249] GetThemeAppProperties () returned 0x3
[0256.249] GetThemeAppProperties () returned 0x3
[0256.249] IsAppThemed () returned 0x1
[0256.250] GetThemeAppProperties () returned 0x3
[0256.250] GetThemeAppProperties () returned 0x3
[0256.250] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0256.250] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2484d3c | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0256.250] IsAppThemed () returned 0x1
[0256.250] GetThemeAppProperties () returned 0x3
[0256.250] GetThemeAppProperties () returned 0x3
[0256.250] IsAppThemed () returned 0x1
[0256.250] GetThemeAppProperties () returned 0x3
[0256.250] GetThemeAppProperties () returned 0x3
[0256.250] GetFocus () returned 0x29013e
[0256.250] IsAppThemed () returned 0x1
[0256.251] GetThemeAppProperties () returned 0x3
[0256.251] GetThemeAppProperties () returned 0x3
[0256.251] IsAppThemed () returned 0x1
[0256.251] GetThemeAppProperties () returned 0x3
[0256.251] GetThemeAppProperties () returned 0x3
[0256.251] IsThemePartDefined () returned 0x1
[0256.251] IsAppThemed () returned 0x1
[0256.251] GetThemeAppProperties () returned 0x3
[0256.251] GetThemeAppProperties () returned 0x3
[0256.251] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0256.251] IsAppThemed () returned 0x1
[0256.251] GetThemeAppProperties () returned 0x3
[0256.251] GetThemeAppProperties () returned 0x3
[0256.251] IsAppThemed () returned 0x1
[0256.251] GetThemeAppProperties () returned 0x3
[0256.251] GetThemeAppProperties () returned 0x3
[0256.251] IsThemePartDefined () returned 0x1
[0256.251] GdipCreateRegion (region=0x53de78) returned 0x0
[0256.251] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.251] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0256.251] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0256.251] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0256.251] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0256.252] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0256.252] LocalFree (hMem=0x89ee08) returned 0x0
[0256.252] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0256.252] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0256.252] LocalFree (hMem=0x89ee08) returned 0x0
[0256.252] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0256.252] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0256.252] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0256.252] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0256.252] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.252] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0256.252] GetCurrentObject (hdc=0xd20107af, type=0x1) returned 0xb00017
[0256.252] GetCurrentObject (hdc=0xd20107af, type=0x2) returned 0x900010
[0256.252] GetCurrentObject (hdc=0xd20107af, type=0x7) returned 0x1e0507b9
[0256.252] GetCurrentObject (hdc=0xd20107af, type=0x6) returned 0x8a01c2
[0256.252] SaveDC (hdc=0xd20107af) returned 1
[0256.252] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4d04053e
[0256.252] GetClipRgn (hdc=0xd20107af, hrgn=0x4d04053e) returned 0
[0256.253] SelectClipRgn (hdc=0xd20107af, hrgn=0x2b04051e) returned 2
[0256.253] DeleteObject (ho=0x4d04053e) returned 1
[0256.253] DeleteObject (ho=0x2b04051e) returned 1
[0256.253] OffsetViewportOrgEx (in: hdc=0xd20107af, x=0, y=0, lppt=0x24853ec | out: lppt=0x24853ec) returned 1
[0256.253] DrawThemeParentBackground () returned 0x0
[0256.253] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0256.253] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0256.253] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0256.253] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0256.253] GetSystemMetrics (nIndex=42) returned 0
[0256.253] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0256.253] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0256.253] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0256.253] GetCurrentObject (hdc=0xd20107af, type=0x1) returned 0xb00017
[0256.253] GetCurrentObject (hdc=0xd20107af, type=0x2) returned 0x900010
[0256.253] GetCurrentObject (hdc=0xd20107af, type=0x7) returned 0x1e0507b9
[0256.254] GetCurrentObject (hdc=0xd20107af, type=0x6) returned 0x8a01c2
[0256.254] SaveDC (hdc=0xd20107af) returned 2
[0256.254] GetNearestColor (hdc=0xd20107af, color=0xff) returned 0xff
[0256.254] CreateSolidBrush (color=0xff) returned 0x5f10078d
[0256.254] FillRect (hDC=0xd20107af, lprc=0x53d8d8, hbr=0x5f10078d) returned 1
[0256.254] DeleteObject (ho=0x5f10078d) returned 1
[0256.254] RestoreDC (hdc=0xd20107af, nSavedDC=-1) returned 1
[0256.254] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0256.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0256.254] GetSystemMetrics (nIndex=42) returned 0
[0256.254] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0256.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0256.254] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0256.254] GetCurrentObject (hdc=0xd20107af, type=0x1) returned 0xb00017
[0256.254] GetCurrentObject (hdc=0xd20107af, type=0x2) returned 0x900010
[0256.254] GetCurrentObject (hdc=0xd20107af, type=0x7) returned 0x1e0507b9
[0256.254] GetCurrentObject (hdc=0xd20107af, type=0x6) returned 0x8a01c2
[0256.255] SaveDC (hdc=0xd20107af) returned 2
[0256.255] GetNearestColor (hdc=0xd20107af, color=0xff) returned 0xff
[0256.255] CreateSolidBrush (color=0xff) returned 0x6010078d
[0256.255] FillRect (hDC=0xd20107af, lprc=0x53d878, hbr=0x6010078d) returned 1
[0256.255] DeleteObject (ho=0x6010078d) returned 1
[0256.255] RestoreDC (hdc=0xd20107af, nSavedDC=-1) returned 1
[0256.255] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0256.255] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0256.255] GetSystemMetrics (nIndex=42) returned 0
[0256.255] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0256.255] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0256.255] RestoreDC (hdc=0xd20107af, nSavedDC=-1) returned 1
[0256.255] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd20107af) returned 0x0
[0256.256] IsAppThemed () returned 0x1
[0256.256] GetThemeAppProperties () returned 0x3
[0256.256] GetThemeAppProperties () returned 0x3
[0256.256] IsAppThemed () returned 0x1
[0256.256] GetThemeAppProperties () returned 0x3
[0256.256] GetThemeAppProperties () returned 0x3
[0256.256] IsThemePartDefined () returned 0x1
[0256.256] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0256.256] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.256] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0256.256] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0256.256] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0256.256] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0256.256] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0256.256] LocalFree (hMem=0x89ea88) returned 0x0
[0256.256] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0256.257] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0256.257] LocalFree (hMem=0x89ee08) returned 0x0
[0256.257] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0256.257] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0256.257] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0256.257] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0256.257] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.257] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0256.257] GetCurrentObject (hdc=0xd20107af, type=0x1) returned 0xb00017
[0256.257] GetCurrentObject (hdc=0xd20107af, type=0x2) returned 0x900010
[0256.257] GetCurrentObject (hdc=0xd20107af, type=0x7) returned 0x1e0507b9
[0256.257] GetCurrentObject (hdc=0xd20107af, type=0x6) returned 0x8a01c2
[0256.257] SaveDC (hdc=0xd20107af) returned 1
[0256.257] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2c04051e
[0256.257] GetClipRgn (hdc=0xd20107af, hrgn=0x2c04051e) returned 0
[0256.257] SelectClipRgn (hdc=0xd20107af, hrgn=0x4f04053e) returned 2
[0256.257] DeleteObject (ho=0x2c04051e) returned 1
[0256.257] DeleteObject (ho=0x4f04053e) returned 1
[0256.258] OffsetViewportOrgEx (in: hdc=0xd20107af, x=0, y=0, lppt=0x2485c50 | out: lppt=0x2485c50) returned 1
[0256.258] IsAppThemed () returned 0x1
[0256.258] GetThemeAppProperties () returned 0x3
[0256.258] GetThemeAppProperties () returned 0x3
[0256.258] DrawThemeBackground () returned 0x0
[0256.258] RestoreDC (hdc=0xd20107af, nSavedDC=-1) returned 1
[0256.258] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd20107af) returned 0x0
[0256.258] GdipCreateRegion (region=0x53de00) returned 0x0
[0256.258] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.258] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0256.258] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0256.258] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0256.258] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0256.258] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0256.258] LocalFree (hMem=0x89ee08) returned 0x0
[0256.258] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0256.258] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0256.258] LocalFree (hMem=0x89ee40) returned 0x0
[0256.259] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0256.259] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0256.259] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0256.259] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0256.259] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.259] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0256.259] GetCurrentObject (hdc=0xd20107af, type=0x1) returned 0xb00017
[0256.259] GetCurrentObject (hdc=0xd20107af, type=0x2) returned 0x900010
[0256.259] GetCurrentObject (hdc=0xd20107af, type=0x7) returned 0x1e0507b9
[0256.259] GetCurrentObject (hdc=0xd20107af, type=0x6) returned 0x8a01c2
[0256.259] SaveDC (hdc=0xd20107af) returned 1
[0256.259] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5004053e
[0256.259] GetClipRgn (hdc=0xd20107af, hrgn=0x5004053e) returned 0
[0256.259] SelectClipRgn (hdc=0xd20107af, hrgn=0x2d04051e) returned 2
[0256.259] DeleteObject (ho=0x5004053e) returned 1
[0256.259] DeleteObject (ho=0x2d04051e) returned 1
[0256.259] OffsetViewportOrgEx (in: hdc=0xd20107af, x=0, y=0, lppt=0x2485f24 | out: lppt=0x2485f24) returned 1
[0256.259] IsAppThemed () returned 0x1
[0256.260] GetThemeAppProperties () returned 0x3
[0256.260] GetThemeAppProperties () returned 0x3
[0256.260] GetThemeBackgroundContentRect () returned 0x0
[0256.260] RestoreDC (hdc=0xd20107af, nSavedDC=-1) returned 1
[0256.260] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd20107af) returned 0x0
[0256.260] IsAppThemed () returned 0x1
[0256.260] GetThemeAppProperties () returned 0x3
[0256.260] GetThemeAppProperties () returned 0x3
[0256.260] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0256.260] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0256.260] GetCurrentObject (hdc=0xd20107af, type=0x1) returned 0xb00017
[0256.260] GetCurrentObject (hdc=0xd20107af, type=0x2) returned 0x900010
[0256.260] GetCurrentObject (hdc=0xd20107af, type=0x7) returned 0x1e0507b9
[0256.260] GetCurrentObject (hdc=0xd20107af, type=0x6) returned 0x8a01c2
[0256.260] SaveDC (hdc=0xd20107af) returned 1
[0256.260] GetTextAlign (hdc=0xd20107af) returned 0x0
[0256.260] GetTextColor (hdc=0xd20107af) returned 0x0
[0256.260] GetCurrentObject (hdc=0xd20107af, type=0x6) returned 0x8a01c2
[0256.261] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0256.261] SelectObject (hdc=0xd20107af, h=0x450a0799) returned 0x8a01c2
[0256.261] GetBkMode (hdc=0xd20107af) returned 2
[0256.261] SetBkMode (hdc=0xd20107af, mode=1) returned 2
[0256.261] DrawTextExW (in: hdc=0xd20107af, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x24862c4 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0256.261] DrawTextExW (in: hdc=0xd20107af, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x24862c4 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0256.261] RestoreDC (hdc=0xd20107af, nSavedDC=-1) returned 1
[0256.262] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd20107af) returned 0x0
[0256.262] GetFocus () returned 0x29013e
[0256.262] IsAppThemed () returned 0x1
[0256.262] GetThemeAppProperties () returned 0x3
[0256.262] GetThemeAppProperties () returned 0x3
[0256.262] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0256.262] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xd20107af, x1=0, y1=0, rop=0xcc0020) returned 1
[0256.262] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd20107af) returned 0x0
[0256.262] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0256.262] SelectObject (hdc=0xd20107af, h=0x85000f) returned 0x1e0507b9
[0256.262] DeleteDC (hdc=0xd20107af) returned 1
[0256.262] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0256.262] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0256.546] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0256.546] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0256.546] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0xf00ea) returned 0x1
[0256.549] GetFocus () returned 0xf00ea
[0256.549] GetAncestor (hwnd=0xf00ea, gaFlags=0x1) returned 0x10010
[0256.549] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0256.549] SetFocus (hWnd=0x202c6) returned 0x0
[0256.551] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0256.559] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0256.559] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0256.560] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0256.560] GetFocus () returned 0x70036
[0256.560] SetFocus (hWnd=0x202c6) returned 0x0
[0256.565] IsWindow (hWnd=0x70036) returned 1
[0256.565] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0256.565] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0256.565] IsWindow (hWnd=0x70036) returned 1
[0256.565] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0256.565] IsWindow (hWnd=0x202c6) returned 1
[0256.565] SetFocus (hWnd=0x202c6) returned 0x70036
[0256.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0256.567] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0256.579] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0256.580] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0256.580] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0256.580] GetStockObject (i=5) returned 0x900015
[0256.580] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0256.580] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8ccc58) returned 0x7
[0256.580] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0256.580] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0256.580] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0256.581] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0256.582] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0256.582] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0256.582] GetFocus () returned 0x202c6
[0256.582] GetCapture () returned 0x0
[0256.582] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.583] IsWindowUnicode (hWnd=0x202c6) returned 1
[0256.583] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.583] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.583] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.583] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.583] IsWindowUnicode (hWnd=0x202c6) returned 1
[0256.584] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.584] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.584] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.584] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0256.584] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0256.584] CreateCompatibleDC (hdc=0x60100ce) returned 0x5b010788
[0256.584] SelectObject (hdc=0x5b010788, h=0x1e0507b9) returned 0x85000f
[0256.584] GdipCreateFromHDC (hdc=0x5b010788, graphics=0x53e958) returned 0x0
[0256.584] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0256.585] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0256.585] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0256.585] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0256.585] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0256.585] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0256.585] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0256.585] LocalFree (hMem=0x89ee08) returned 0x0
[0256.585] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0256.585] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0256.585] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.585] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0256.585] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0256.585] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb990dbd) returned 0x0
[0256.585] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.585] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0256.585] GetCurrentObject (hdc=0x5b010788, type=0x1) returned 0xb00017
[0256.585] GetCurrentObject (hdc=0x5b010788, type=0x2) returned 0x900010
[0256.585] GetCurrentObject (hdc=0x5b010788, type=0x7) returned 0x1e0507b9
[0256.585] GetCurrentObject (hdc=0x5b010788, type=0x6) returned 0x8a01c2
[0256.586] SaveDC (hdc=0x5b010788) returned 1
[0256.586] GetNearestColor (hdc=0x5b010788, color=0xff) returned 0xff
[0256.586] GetNearestColor (hdc=0x5b010788, color=0x55) returned 0x55
[0256.586] GetNearestColor (hdc=0x5b010788, color=0x0) returned 0x0
[0256.586] GetNearestColor (hdc=0x5b010788, color=0x55) returned 0x55
[0256.586] GetNearestColor (hdc=0x5b010788, color=0x0) returned 0x0
[0256.586] GetNearestColor (hdc=0x5b010788, color=0x8080ff) returned 0x8080ff
[0256.586] GetNearestColor (hdc=0x5b010788, color=0x7373e5) returned 0x7373e5
[0256.586] GetNearestColor (hdc=0x5b010788, color=0xe5) returned 0xe5
[0256.586] GetNearestColor (hdc=0x5b010788, color=0x0) returned 0x0
[0256.586] RestoreDC (hdc=0x5b010788, nSavedDC=-1) returned 1
[0256.586] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5b010788) returned 0x0
[0256.586] IsAppThemed () returned 0x1
[0256.586] GetThemeAppProperties () returned 0x3
[0256.586] GetThemeAppProperties () returned 0x3
[0256.586] IsAppThemed () returned 0x1
[0256.587] GetThemeAppProperties () returned 0x3
[0256.587] GetThemeAppProperties () returned 0x3
[0256.587] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2486b20 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0256.587] IsAppThemed () returned 0x1
[0256.587] GetThemeAppProperties () returned 0x3
[0256.587] GetThemeAppProperties () returned 0x3
[0256.587] IsAppThemed () returned 0x1
[0256.587] GetThemeAppProperties () returned 0x3
[0256.587] GetThemeAppProperties () returned 0x3
[0256.587] GetFocus () returned 0x202c6
[0256.587] IsAppThemed () returned 0x1
[0256.587] GetThemeAppProperties () returned 0x3
[0256.587] GetThemeAppProperties () returned 0x3
[0256.587] IsAppThemed () returned 0x1
[0256.587] GetThemeAppProperties () returned 0x3
[0256.587] GetThemeAppProperties () returned 0x3
[0256.587] IsThemePartDefined () returned 0x1
[0256.587] IsAppThemed () returned 0x1
[0256.588] GetThemeAppProperties () returned 0x3
[0256.588] GetThemeAppProperties () returned 0x3
[0256.588] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0256.588] IsAppThemed () returned 0x1
[0256.588] GetThemeAppProperties () returned 0x3
[0256.588] GetThemeAppProperties () returned 0x3
[0256.588] IsAppThemed () returned 0x1
[0256.588] GetThemeAppProperties () returned 0x3
[0256.588] GetThemeAppProperties () returned 0x3
[0256.588] IsThemePartDefined () returned 0x1
[0256.588] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0256.588] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.588] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0256.588] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0256.588] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0256.588] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0256.588] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0256.588] LocalFree (hMem=0x89ec80) returned 0x0
[0256.588] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0256.588] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0256.588] LocalFree (hMem=0x89eac0) returned 0x0
[0256.589] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0256.589] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0256.589] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0256.589] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0256.589] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.589] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0256.589] GetCurrentObject (hdc=0x5b010788, type=0x1) returned 0xb00017
[0256.589] GetCurrentObject (hdc=0x5b010788, type=0x2) returned 0x900010
[0256.589] GetCurrentObject (hdc=0x5b010788, type=0x7) returned 0x1e0507b9
[0256.589] GetCurrentObject (hdc=0x5b010788, type=0x6) returned 0x8a01c2
[0256.589] SaveDC (hdc=0x5b010788) returned 1
[0256.589] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb50407a1
[0256.589] GetClipRgn (hdc=0x5b010788, hrgn=0xb50407a1) returned 0
[0256.589] SelectClipRgn (hdc=0x5b010788, hrgn=0x3b04051e) returned 2
[0256.589] DeleteObject (ho=0xb50407a1) returned 1
[0256.589] DeleteObject (ho=0x3b04051e) returned 1
[0256.589] OffsetViewportOrgEx (in: hdc=0x5b010788, x=0, y=0, lppt=0x24871d0 | out: lppt=0x24871d0) returned 1
[0256.590] DrawThemeParentBackground () returned 0x0
[0256.590] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0256.590] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0256.590] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0256.590] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0256.590] GetSystemMetrics (nIndex=42) returned 0
[0256.590] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0256.590] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0256.590] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0256.590] GetCurrentObject (hdc=0x5b010788, type=0x1) returned 0xb00017
[0256.590] GetCurrentObject (hdc=0x5b010788, type=0x2) returned 0x900010
[0256.590] GetCurrentObject (hdc=0x5b010788, type=0x7) returned 0x1e0507b9
[0256.590] GetCurrentObject (hdc=0x5b010788, type=0x6) returned 0x8a01c2
[0256.590] SaveDC (hdc=0x5b010788) returned 2
[0256.590] GetNearestColor (hdc=0x5b010788, color=0xff) returned 0xff
[0256.591] CreateSolidBrush (color=0xff) returned 0x6210078d
[0256.591] FillRect (hDC=0x5b010788, lprc=0x53e128, hbr=0x6210078d) returned 1
[0256.591] DeleteObject (ho=0x6210078d) returned 1
[0256.591] RestoreDC (hdc=0x5b010788, nSavedDC=-1) returned 1
[0256.591] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0256.591] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0256.591] GetSystemMetrics (nIndex=42) returned 0
[0256.591] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0256.591] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0256.591] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0256.591] GetCurrentObject (hdc=0x5b010788, type=0x1) returned 0xb00017
[0256.591] GetCurrentObject (hdc=0x5b010788, type=0x2) returned 0x900010
[0256.591] GetCurrentObject (hdc=0x5b010788, type=0x7) returned 0x1e0507b9
[0256.591] GetCurrentObject (hdc=0x5b010788, type=0x6) returned 0x8a01c2
[0256.591] SaveDC (hdc=0x5b010788) returned 2
[0256.591] GetNearestColor (hdc=0x5b010788, color=0xff) returned 0xff
[0256.591] CreateSolidBrush (color=0xff) returned 0x6310078d
[0256.591] FillRect (hDC=0x5b010788, lprc=0x53e0c8, hbr=0x6310078d) returned 1
[0256.592] DeleteObject (ho=0x6310078d) returned 1
[0256.592] RestoreDC (hdc=0x5b010788, nSavedDC=-1) returned 1
[0256.592] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0256.592] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0256.592] GetSystemMetrics (nIndex=42) returned 0
[0256.592] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0256.592] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0256.592] RestoreDC (hdc=0x5b010788, nSavedDC=-1) returned 1
[0256.592] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5b010788) returned 0x0
[0256.592] IsAppThemed () returned 0x1
[0256.592] GetThemeAppProperties () returned 0x3
[0256.592] GetThemeAppProperties () returned 0x3
[0256.592] IsAppThemed () returned 0x1
[0256.592] GetThemeAppProperties () returned 0x3
[0256.592] GetThemeAppProperties () returned 0x3
[0256.592] IsThemePartDefined () returned 0x1
[0256.592] GdipCreateRegion (region=0x53e64c) returned 0x0
[0256.593] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.593] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0256.593] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0256.593] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0256.593] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0256.593] LocalFree (hMem=0x89eee8) returned 0x0
[0256.593] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0256.593] LocalFree (hMem=0x89eac0) returned 0x0
[0256.593] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0256.593] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0256.593] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0256.593] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0256.593] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.593] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0256.593] GetCurrentObject (hdc=0x5b010788, type=0x1) returned 0xb00017
[0256.593] GetCurrentObject (hdc=0x5b010788, type=0x2) returned 0x900010
[0256.593] GetCurrentObject (hdc=0x5b010788, type=0x7) returned 0x1e0507b9
[0256.593] GetCurrentObject (hdc=0x5b010788, type=0x6) returned 0x8a01c2
[0256.593] SaveDC (hdc=0x5b010788) returned 1
[0256.593] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3c04051e
[0256.593] GetClipRgn (hdc=0x5b010788, hrgn=0x3c04051e) returned 0
[0256.594] SelectClipRgn (hdc=0x5b010788, hrgn=0xb70407a1) returned 2
[0256.594] DeleteObject (ho=0x3c04051e) returned 1
[0256.594] DeleteObject (ho=0xb70407a1) returned 1
[0256.594] OffsetViewportOrgEx (in: hdc=0x5b010788, x=0, y=0, lppt=0x2487a34 | out: lppt=0x2487a34) returned 1
[0256.594] IsAppThemed () returned 0x1
[0256.594] GetThemeAppProperties () returned 0x3
[0256.594] GetThemeAppProperties () returned 0x3
[0256.594] DrawThemeBackground () returned 0x0
[0256.594] RestoreDC (hdc=0x5b010788, nSavedDC=-1) returned 1
[0256.594] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5b010788) returned 0x0
[0256.594] GdipCreateRegion (region=0x53e650) returned 0x0
[0256.594] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.594] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0256.594] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0256.594] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0256.594] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0256.594] LocalFree (hMem=0x89ee08) returned 0x0
[0256.594] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0256.594] LocalFree (hMem=0x89eac0) returned 0x0
[0256.594] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0256.594] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0256.595] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0256.595] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0256.595] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.595] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0256.595] GetCurrentObject (hdc=0x5b010788, type=0x1) returned 0xb00017
[0256.595] GetCurrentObject (hdc=0x5b010788, type=0x2) returned 0x900010
[0256.595] GetCurrentObject (hdc=0x5b010788, type=0x7) returned 0x1e0507b9
[0256.595] GetCurrentObject (hdc=0x5b010788, type=0x6) returned 0x8a01c2
[0256.595] SaveDC (hdc=0x5b010788) returned 1
[0256.595] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb80407a1
[0256.595] GetClipRgn (hdc=0x5b010788, hrgn=0xb80407a1) returned 0
[0256.595] SelectClipRgn (hdc=0x5b010788, hrgn=0x3d04051e) returned 2
[0256.595] DeleteObject (ho=0xb80407a1) returned 1
[0256.595] DeleteObject (ho=0x3d04051e) returned 1
[0256.595] OffsetViewportOrgEx (in: hdc=0x5b010788, x=0, y=0, lppt=0x2487d08 | out: lppt=0x2487d08) returned 1
[0256.595] IsAppThemed () returned 0x1
[0256.595] GetThemeAppProperties () returned 0x3
[0256.595] GetThemeAppProperties () returned 0x3
[0256.595] GetThemeBackgroundContentRect () returned 0x0
[0256.595] RestoreDC (hdc=0x5b010788, nSavedDC=-1) returned 1
[0256.595] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5b010788) returned 0x0
[0256.595] IsAppThemed () returned 0x1
[0256.596] GetThemeAppProperties () returned 0x3
[0256.596] GetThemeAppProperties () returned 0x3
[0256.596] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0256.596] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0256.596] GetCurrentObject (hdc=0x5b010788, type=0x1) returned 0xb00017
[0256.596] GetCurrentObject (hdc=0x5b010788, type=0x2) returned 0x900010
[0256.596] GetCurrentObject (hdc=0x5b010788, type=0x7) returned 0x1e0507b9
[0256.596] GetCurrentObject (hdc=0x5b010788, type=0x6) returned 0x8a01c2
[0256.596] SaveDC (hdc=0x5b010788) returned 1
[0256.596] GetTextAlign (hdc=0x5b010788) returned 0x0
[0256.596] GetTextColor (hdc=0x5b010788) returned 0x0
[0256.596] GetCurrentObject (hdc=0x5b010788, type=0x6) returned 0x8a01c2
[0256.596] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0256.596] SelectObject (hdc=0x5b010788, h=0x450a0799) returned 0x8a01c2
[0256.596] GetBkMode (hdc=0x5b010788) returned 2
[0256.596] SetBkMode (hdc=0x5b010788, mode=1) returned 2
[0256.596] DrawTextExW (in: hdc=0x5b010788, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x24880a8 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0256.597] DrawTextExW (in: hdc=0x5b010788, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x24880a8 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0256.597] RestoreDC (hdc=0x5b010788, nSavedDC=-1) returned 1
[0256.597] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5b010788) returned 0x0
[0256.597] GetFocus () returned 0x202c6
[0256.597] IsAppThemed () returned 0x1
[0256.597] GetThemeAppProperties () returned 0x3
[0256.597] GetThemeAppProperties () returned 0x3
[0256.597] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0256.597] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x5b010788, x1=0, y1=0, rop=0xcc0020) returned 1
[0256.597] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5b010788) returned 0x0
[0256.597] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0256.597] SelectObject (hdc=0x5b010788, h=0x85000f) returned 0x1e0507b9
[0256.597] DeleteDC (hdc=0x5b010788) returned 1
[0256.598] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0256.598] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0256.598] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.598] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.598] WaitMessage () returned 1
[0256.605] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.605] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.605] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.605] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.605] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.606] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.606] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.606] WaitMessage () returned 1
[0256.611] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.611] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930241) returned 0x1
[0256.611] IsWindowUnicode (hWnd=0x202c6) returned 1
[0256.611] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.611] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930241) returned 0x1
[0256.611] SetCursor (hCursor=0x10003) returned 0x10003
[0256.611] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.611] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.611] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0256.612] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0256.612] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0256.612] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0256.612] GetKeyState (nVirtKey=1) returned 0
[0256.612] GetKeyState (nVirtKey=2) returned 0
[0256.612] GetKeyState (nVirtKey=4) returned 0
[0256.612] GetKeyState (nVirtKey=5) returned 0
[0256.612] GetKeyState (nVirtKey=6) returned 0
[0256.612] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.612] IsWindowUnicode (hWnd=0x202c6) returned 1
[0256.612] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.612] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.612] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.612] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0256.612] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0256.612] CreateCompatibleDC (hdc=0x60100ce) returned 0x5e010788
[0256.613] SelectObject (hdc=0x5e010788, h=0x1e0507b9) returned 0x85000f
[0256.613] GdipCreateFromHDC (hdc=0x5e010788, graphics=0x53e958) returned 0x0
[0256.613] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0256.613] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0256.613] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0256.613] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0256.613] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0256.613] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0256.613] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0256.613] LocalFree (hMem=0x89eac0) returned 0x0
[0256.613] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0256.613] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0256.613] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.613] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0256.613] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0256.613] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb970dbd) returned 0x0
[0256.613] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.614] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0256.614] GetCurrentObject (hdc=0x5e010788, type=0x1) returned 0xb00017
[0256.614] GetCurrentObject (hdc=0x5e010788, type=0x2) returned 0x900010
[0256.614] GetCurrentObject (hdc=0x5e010788, type=0x7) returned 0x1e0507b9
[0256.614] GetCurrentObject (hdc=0x5e010788, type=0x6) returned 0x8a01c2
[0256.614] SaveDC (hdc=0x5e010788) returned 1
[0256.614] GetNearestColor (hdc=0x5e010788, color=0xff) returned 0xff
[0256.614] GetNearestColor (hdc=0x5e010788, color=0x55) returned 0x55
[0256.614] GetNearestColor (hdc=0x5e010788, color=0x0) returned 0x0
[0256.614] GetNearestColor (hdc=0x5e010788, color=0x55) returned 0x55
[0256.614] GetNearestColor (hdc=0x5e010788, color=0x0) returned 0x0
[0256.614] GetNearestColor (hdc=0x5e010788, color=0x8080ff) returned 0x8080ff
[0256.614] GetNearestColor (hdc=0x5e010788, color=0x7373e5) returned 0x7373e5
[0256.614] GetNearestColor (hdc=0x5e010788, color=0xe5) returned 0xe5
[0256.614] GetNearestColor (hdc=0x5e010788, color=0x0) returned 0x0
[0256.614] RestoreDC (hdc=0x5e010788, nSavedDC=-1) returned 1
[0256.614] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5e010788) returned 0x0
[0256.614] IsAppThemed () returned 0x1
[0256.615] GetThemeAppProperties () returned 0x3
[0256.615] GetThemeAppProperties () returned 0x3
[0256.615] IsAppThemed () returned 0x1
[0256.615] GetThemeAppProperties () returned 0x3
[0256.615] GetThemeAppProperties () returned 0x3
[0256.615] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x24888f8 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0256.618] IsAppThemed () returned 0x1
[0256.618] GetThemeAppProperties () returned 0x3
[0256.618] GetThemeAppProperties () returned 0x3
[0256.618] IsAppThemed () returned 0x1
[0256.618] GetThemeAppProperties () returned 0x3
[0256.618] GetThemeAppProperties () returned 0x3
[0256.618] IsAppThemed () returned 0x1
[0256.618] GetThemeAppProperties () returned 0x3
[0256.618] GetThemeAppProperties () returned 0x3
[0256.618] IsAppThemed () returned 0x1
[0256.618] GetThemeAppProperties () returned 0x3
[0256.618] GetThemeAppProperties () returned 0x3
[0256.618] IsThemePartDefined () returned 0x1
[0256.618] IsAppThemed () returned 0x1
[0256.619] GetThemeAppProperties () returned 0x3
[0256.619] GetThemeAppProperties () returned 0x3
[0256.619] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0256.619] IsAppThemed () returned 0x1
[0256.619] GetThemeAppProperties () returned 0x3
[0256.619] GetThemeAppProperties () returned 0x3
[0256.619] IsAppThemed () returned 0x1
[0256.619] GetThemeAppProperties () returned 0x3
[0256.619] GetThemeAppProperties () returned 0x3
[0256.619] IsThemePartDefined () returned 0x1
[0256.619] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0256.619] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.619] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0256.619] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0256.619] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0256.619] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0256.619] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0256.619] LocalFree (hMem=0x89eac0) returned 0x0
[0256.619] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0256.619] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0256.619] LocalFree (hMem=0x89eac0) returned 0x0
[0256.619] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0256.619] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0256.620] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0256.620] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0256.620] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.620] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0256.620] GetCurrentObject (hdc=0x5e010788, type=0x1) returned 0xb00017
[0256.620] GetCurrentObject (hdc=0x5e010788, type=0x2) returned 0x900010
[0256.620] GetCurrentObject (hdc=0x5e010788, type=0x7) returned 0x1e0507b9
[0256.620] GetCurrentObject (hdc=0x5e010788, type=0x6) returned 0x8a01c2
[0256.620] SaveDC (hdc=0x5e010788) returned 1
[0256.620] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3e04051e
[0256.620] GetClipRgn (hdc=0x5e010788, hrgn=0x3e04051e) returned 0
[0256.620] SelectClipRgn (hdc=0x5e010788, hrgn=0xbc0407a1) returned 2
[0256.620] DeleteObject (ho=0x3e04051e) returned 1
[0256.620] DeleteObject (ho=0xbc0407a1) returned 1
[0256.620] OffsetViewportOrgEx (in: hdc=0x5e010788, x=0, y=0, lppt=0x2488fa8 | out: lppt=0x2488fa8) returned 1
[0256.620] DrawThemeParentBackground () returned 0x0
[0256.621] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0256.621] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0256.621] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0256.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0256.621] GetSystemMetrics (nIndex=42) returned 0
[0256.621] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0256.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0256.621] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0256.621] GetCurrentObject (hdc=0x5e010788, type=0x1) returned 0xb00017
[0256.621] GetCurrentObject (hdc=0x5e010788, type=0x2) returned 0x900010
[0256.621] GetCurrentObject (hdc=0x5e010788, type=0x7) returned 0x1e0507b9
[0256.621] GetCurrentObject (hdc=0x5e010788, type=0x6) returned 0x8a01c2
[0256.621] SaveDC (hdc=0x5e010788) returned 2
[0256.621] GetNearestColor (hdc=0x5e010788, color=0xff) returned 0xff
[0256.621] CreateSolidBrush (color=0xff) returned 0x6410078d
[0256.621] FillRect (hDC=0x5e010788, lprc=0x53e120, hbr=0x6410078d) returned 1
[0256.621] DeleteObject (ho=0x6410078d) returned 1
[0256.622] RestoreDC (hdc=0x5e010788, nSavedDC=-1) returned 1
[0256.622] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0256.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0256.622] GetSystemMetrics (nIndex=42) returned 0
[0256.622] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0256.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0256.622] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0256.622] GetCurrentObject (hdc=0x5e010788, type=0x1) returned 0xb00017
[0256.622] GetCurrentObject (hdc=0x5e010788, type=0x2) returned 0x900010
[0256.622] GetCurrentObject (hdc=0x5e010788, type=0x7) returned 0x1e0507b9
[0256.622] GetCurrentObject (hdc=0x5e010788, type=0x6) returned 0x8a01c2
[0256.622] SaveDC (hdc=0x5e010788) returned 2
[0256.622] GetNearestColor (hdc=0x5e010788, color=0xff) returned 0xff
[0256.622] CreateSolidBrush (color=0xff) returned 0x6510078d
[0256.622] FillRect (hDC=0x5e010788, lprc=0x53e0c0, hbr=0x6510078d) returned 1
[0256.622] DeleteObject (ho=0x6510078d) returned 1
[0256.622] RestoreDC (hdc=0x5e010788, nSavedDC=-1) returned 1
[0256.622] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0256.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0256.623] GetSystemMetrics (nIndex=42) returned 0
[0256.623] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0256.623] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0256.623] RestoreDC (hdc=0x5e010788, nSavedDC=-1) returned 1
[0256.623] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5e010788) returned 0x0
[0256.623] IsAppThemed () returned 0x1
[0256.623] GetThemeAppProperties () returned 0x3
[0256.623] GetThemeAppProperties () returned 0x3
[0256.623] IsAppThemed () returned 0x1
[0256.623] GetThemeAppProperties () returned 0x3
[0256.623] GetThemeAppProperties () returned 0x3
[0256.623] IsThemePartDefined () returned 0x1
[0256.623] GdipCreateRegion (region=0x53e640) returned 0x0
[0256.623] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.623] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0256.623] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0256.623] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0256.623] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0256.623] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0256.624] LocalFree (hMem=0x89ee08) returned 0x0
[0256.624] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0256.624] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0256.624] LocalFree (hMem=0x89eac0) returned 0x0
[0256.624] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0256.624] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0256.624] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0256.624] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0256.624] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.624] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0256.624] GetCurrentObject (hdc=0x5e010788, type=0x1) returned 0xb00017
[0256.624] GetCurrentObject (hdc=0x5e010788, type=0x2) returned 0x900010
[0256.624] GetCurrentObject (hdc=0x5e010788, type=0x7) returned 0x1e0507b9
[0256.624] GetCurrentObject (hdc=0x5e010788, type=0x6) returned 0x8a01c2
[0256.624] SaveDC (hdc=0x5e010788) returned 1
[0256.624] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbd0407a1
[0256.624] GetClipRgn (hdc=0x5e010788, hrgn=0xbd0407a1) returned 0
[0256.624] SelectClipRgn (hdc=0x5e010788, hrgn=0x4004051e) returned 2
[0256.624] DeleteObject (ho=0xbd0407a1) returned 1
[0256.624] DeleteObject (ho=0x4004051e) returned 1
[0256.625] OffsetViewportOrgEx (in: hdc=0x5e010788, x=0, y=0, lppt=0x248980c | out: lppt=0x248980c) returned 1
[0256.625] IsAppThemed () returned 0x1
[0256.625] GetThemeAppProperties () returned 0x3
[0256.625] GetThemeAppProperties () returned 0x3
[0256.625] DrawThemeBackground () returned 0x0
[0256.625] RestoreDC (hdc=0x5e010788, nSavedDC=-1) returned 1
[0256.625] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5e010788) returned 0x0
[0256.625] GdipCreateRegion (region=0x53e644) returned 0x0
[0256.625] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.625] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0256.625] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0256.625] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0256.625] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0256.625] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0256.625] LocalFree (hMem=0x89eac0) returned 0x0
[0256.625] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0256.625] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0256.625] LocalFree (hMem=0x89ec80) returned 0x0
[0256.625] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0256.625] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0256.625] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0256.626] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0256.626] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.626] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0256.626] GetCurrentObject (hdc=0x5e010788, type=0x1) returned 0xb00017
[0256.626] GetCurrentObject (hdc=0x5e010788, type=0x2) returned 0x900010
[0256.626] GetCurrentObject (hdc=0x5e010788, type=0x7) returned 0x1e0507b9
[0256.626] GetCurrentObject (hdc=0x5e010788, type=0x6) returned 0x8a01c2
[0256.626] SaveDC (hdc=0x5e010788) returned 1
[0256.626] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4104051e
[0256.626] GetClipRgn (hdc=0x5e010788, hrgn=0x4104051e) returned 0
[0256.626] SelectClipRgn (hdc=0x5e010788, hrgn=0xbe0407a1) returned 2
[0256.626] DeleteObject (ho=0x4104051e) returned 1
[0256.626] DeleteObject (ho=0xbe0407a1) returned 1
[0256.626] OffsetViewportOrgEx (in: hdc=0x5e010788, x=0, y=0, lppt=0x2489ae0 | out: lppt=0x2489ae0) returned 1
[0256.626] IsAppThemed () returned 0x1
[0256.626] GetThemeAppProperties () returned 0x3
[0256.626] GetThemeAppProperties () returned 0x3
[0256.626] GetThemeBackgroundContentRect () returned 0x0
[0256.626] RestoreDC (hdc=0x5e010788, nSavedDC=-1) returned 1
[0256.626] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5e010788) returned 0x0
[0256.626] IsAppThemed () returned 0x1
[0256.627] GetThemeAppProperties () returned 0x3
[0256.627] GetThemeAppProperties () returned 0x3
[0256.627] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0256.627] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0256.627] GetCurrentObject (hdc=0x5e010788, type=0x1) returned 0xb00017
[0256.627] GetCurrentObject (hdc=0x5e010788, type=0x2) returned 0x900010
[0256.627] GetCurrentObject (hdc=0x5e010788, type=0x7) returned 0x1e0507b9
[0256.627] GetCurrentObject (hdc=0x5e010788, type=0x6) returned 0x8a01c2
[0256.627] SaveDC (hdc=0x5e010788) returned 1
[0256.627] GetTextAlign (hdc=0x5e010788) returned 0x0
[0256.627] GetTextColor (hdc=0x5e010788) returned 0x0
[0256.627] GetCurrentObject (hdc=0x5e010788, type=0x6) returned 0x8a01c2
[0256.627] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0256.627] SelectObject (hdc=0x5e010788, h=0x450a0799) returned 0x8a01c2
[0256.627] GetBkMode (hdc=0x5e010788) returned 2
[0256.627] SetBkMode (hdc=0x5e010788, mode=1) returned 2
[0256.627] DrawTextExW (in: hdc=0x5e010788, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2489e80 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0256.628] DrawTextExW (in: hdc=0x5e010788, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2489e80 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0256.628] RestoreDC (hdc=0x5e010788, nSavedDC=-1) returned 1
[0256.628] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5e010788) returned 0x0
[0256.628] GetFocus () returned 0x202c6
[0256.628] IsAppThemed () returned 0x1
[0256.628] GetThemeAppProperties () returned 0x3
[0256.628] GetThemeAppProperties () returned 0x3
[0256.628] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0256.628] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x5e010788, x1=0, y1=0, rop=0xcc0020) returned 1
[0256.628] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5e010788) returned 0x0
[0256.628] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0256.628] SelectObject (hdc=0x5e010788, h=0x85000f) returned 0x1e0507b9
[0256.629] DeleteDC (hdc=0x5e010788) returned 1
[0256.629] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0256.629] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0256.629] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.629] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.629] WaitMessage () returned 1
[0256.679] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.679] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.679] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.679] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.679] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.680] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.680] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.680] WaitMessage () returned 1
[0256.682] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.682] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.682] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.682] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.682] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.683] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.683] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.683] WaitMessage () returned 1
[0256.684] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.684] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.684] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.684] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.684] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.685] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.685] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.685] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.685] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.685] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.685] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.685] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.685] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.686] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.686] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.686] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.686] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.686] WaitMessage () returned 1
[0256.687] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.687] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.687] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.687] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.687] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.688] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.688] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.688] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.688] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.688] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.688] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.688] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.689] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.689] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.689] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.689] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.689] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.689] WaitMessage () returned 1
[0256.689] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.689] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.690] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.690] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.690] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.691] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.691] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.691] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.691] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.691] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.691] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.691] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.691] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.691] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.691] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.692] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.692] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.692] WaitMessage () returned 1
[0256.699] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.699] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.699] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.699] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.699] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.701] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.701] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.701] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.701] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.701] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.701] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.701] IsWindowUnicode (hWnd=0x102dc) returned 1
[0256.701] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.701] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.701] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.701] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.702] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.702] WaitMessage () returned 1
[0256.709] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.709] IsWindowUnicode (hWnd=0x202c6) returned 1
[0256.709] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.709] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.709] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.710] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.710] IsWindowUnicode (hWnd=0x202c6) returned 1
[0256.710] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.710] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.710] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.710] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xb0051) returned 0x0
[0256.710] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.710] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0256.710] WaitMessage () returned 1
[0256.853] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.853] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930241) returned 0x1
[0256.853] IsWindowUnicode (hWnd=0x202c6) returned 1
[0256.853] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.853] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930241) returned 0x1
[0256.853] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0256.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12601eb) returned 0x0
[0256.854] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0256.854] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0256.854] SetCursor (hCursor=0x10003) returned 0x10003
[0256.854] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.854] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.854] GetKeyState (nVirtKey=1) returned -127
[0256.854] GetKeyState (nVirtKey=2) returned 0
[0256.854] GetKeyState (nVirtKey=4) returned 0
[0256.854] GetKeyState (nVirtKey=5) returned 0
[0256.854] GetKeyState (nVirtKey=6) returned 0
[0256.854] IsWindowVisible (hWnd=0x202c6) returned 1
[0256.854] IsWindowEnabled (hWnd=0x202c6) returned 1
[0256.854] SetFocus (hWnd=0x202c6) returned 0x202c6
[0256.854] GetFocus () returned 0x202c6
[0256.854] GetFocus () returned 0x202c6
[0256.854] GetFocus () returned 0x202c6
[0256.854] GetKeyState (nVirtKey=1) returned -127
[0256.854] GetKeyState (nVirtKey=2) returned 0
[0256.854] GetKeyState (nVirtKey=4) returned 0
[0256.854] GetKeyState (nVirtKey=5) returned 0
[0256.854] GetKeyState (nVirtKey=6) returned 0
[0256.855] GetCapture () returned 0x0
[0256.855] SetCapture (hWnd=0x202c6) returned 0x0
[0256.855] GetKeyState (nVirtKey=1) returned -127
[0256.855] GetKeyState (nVirtKey=2) returned 0
[0256.855] GetKeyState (nVirtKey=4) returned 0
[0256.855] GetKeyState (nVirtKey=5) returned 0
[0256.855] GetKeyState (nVirtKey=6) returned 0
[0256.855] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0256.855] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0256.855] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.855] IsWindowUnicode (hWnd=0x202c6) returned 1
[0256.855] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0256.855] TranslateMessage (lpMsg=0x53eef8) returned 0
[0256.855] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0256.855] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x248a0dc, cPoints=0x1 | out: lpPoints=0x248a0dc) returned 25690608
[0256.855] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0256.855] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0256.855] UpdateWindow (hWnd=0x202c6) returned 1
[0256.855] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x60100ce
[0256.856] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0256.856] CreateCompatibleDC (hdc=0x60100ce) returned 0x600107ba
[0256.856] SelectObject (hdc=0x600107ba, h=0x1e0507b9) returned 0x85000f
[0256.856] GdipCreateFromHDC (hdc=0x600107ba, graphics=0x53e5f0) returned 0x0
[0256.856] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0256.856] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0256.856] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0256.856] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0256.856] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0256.856] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0256.856] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0256.856] LocalFree (hMem=0x89eac0) returned 0x0
[0256.856] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0256.856] GdipCreateRegion (region=0x53e638) returned 0x0
[0256.856] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.857] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0256.857] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0256.857] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb950dbd) returned 0x0
[0256.857] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.857] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0256.857] GetCurrentObject (hdc=0x600107ba, type=0x1) returned 0xb00017
[0256.857] GetCurrentObject (hdc=0x600107ba, type=0x2) returned 0x900010
[0256.857] GetCurrentObject (hdc=0x600107ba, type=0x7) returned 0x1e0507b9
[0256.857] GetCurrentObject (hdc=0x600107ba, type=0x6) returned 0x8a01c2
[0256.857] SaveDC (hdc=0x600107ba) returned 1
[0256.857] GetNearestColor (hdc=0x600107ba, color=0xff) returned 0xff
[0256.857] GetNearestColor (hdc=0x600107ba, color=0x55) returned 0x55
[0256.857] GetNearestColor (hdc=0x600107ba, color=0x0) returned 0x0
[0256.857] GetNearestColor (hdc=0x600107ba, color=0x55) returned 0x55
[0256.857] GetNearestColor (hdc=0x600107ba, color=0x0) returned 0x0
[0256.857] GetNearestColor (hdc=0x600107ba, color=0x8080ff) returned 0x8080ff
[0256.857] GetNearestColor (hdc=0x600107ba, color=0x7373e5) returned 0x7373e5
[0256.858] GetNearestColor (hdc=0x600107ba, color=0xe5) returned 0xe5
[0256.858] GetNearestColor (hdc=0x600107ba, color=0x0) returned 0x0
[0256.858] RestoreDC (hdc=0x600107ba, nSavedDC=-1) returned 1
[0256.858] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107ba) returned 0x0
[0256.858] IsAppThemed () returned 0x1
[0256.858] GetThemeAppProperties () returned 0x3
[0256.858] GetThemeAppProperties () returned 0x3
[0256.858] IsAppThemed () returned 0x1
[0256.858] GetThemeAppProperties () returned 0x3
[0256.858] GetThemeAppProperties () returned 0x3
[0256.858] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x248a7f8 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0256.858] IsAppThemed () returned 0x1
[0256.858] GetThemeAppProperties () returned 0x3
[0256.858] GetThemeAppProperties () returned 0x3
[0256.858] IsAppThemed () returned 0x1
[0256.858] GetThemeAppProperties () returned 0x3
[0256.858] GetThemeAppProperties () returned 0x3
[0256.858] IsAppThemed () returned 0x1
[0256.859] GetThemeAppProperties () returned 0x3
[0256.859] GetThemeAppProperties () returned 0x3
[0256.859] IsAppThemed () returned 0x1
[0256.859] GetThemeAppProperties () returned 0x3
[0256.859] GetThemeAppProperties () returned 0x3
[0256.859] IsThemePartDefined () returned 0x1
[0256.859] IsAppThemed () returned 0x1
[0256.859] GetThemeAppProperties () returned 0x3
[0256.859] GetThemeAppProperties () returned 0x3
[0256.859] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0256.859] IsAppThemed () returned 0x1
[0256.859] GetThemeAppProperties () returned 0x3
[0256.859] GetThemeAppProperties () returned 0x3
[0256.859] IsAppThemed () returned 0x1
[0256.859] GetThemeAppProperties () returned 0x3
[0256.859] GetThemeAppProperties () returned 0x3
[0256.859] IsThemePartDefined () returned 0x1
[0256.859] GdipCreateRegion (region=0x53e354) returned 0x0
[0256.859] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.859] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0256.859] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0256.859] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0256.860] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0256.860] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0256.860] LocalFree (hMem=0x89ea88) returned 0x0
[0256.860] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0256.860] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0256.860] LocalFree (hMem=0x89ec80) returned 0x0
[0256.860] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0256.860] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0256.860] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0256.860] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0256.860] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.860] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0256.860] GetCurrentObject (hdc=0x600107ba, type=0x1) returned 0xb00017
[0256.860] GetCurrentObject (hdc=0x600107ba, type=0x2) returned 0x900010
[0256.860] GetCurrentObject (hdc=0x600107ba, type=0x7) returned 0x1e0507b9
[0256.860] GetCurrentObject (hdc=0x600107ba, type=0x6) returned 0x8a01c2
[0256.860] SaveDC (hdc=0x600107ba) returned 1
[0256.860] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbf0407a1
[0256.860] GetClipRgn (hdc=0x600107ba, hrgn=0xbf0407a1) returned 0
[0256.860] SelectClipRgn (hdc=0x600107ba, hrgn=0x4504051e) returned 2
[0256.861] DeleteObject (ho=0xbf0407a1) returned 1
[0256.861] DeleteObject (ho=0x4504051e) returned 1
[0256.861] OffsetViewportOrgEx (in: hdc=0x600107ba, x=0, y=0, lppt=0x248aea8 | out: lppt=0x248aea8) returned 1
[0256.861] DrawThemeParentBackground () returned 0x0
[0256.861] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0256.861] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0256.861] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0256.861] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0256.861] GetSystemMetrics (nIndex=42) returned 0
[0256.861] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0256.861] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0256.861] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0256.861] GetCurrentObject (hdc=0x600107ba, type=0x1) returned 0xb00017
[0256.861] GetCurrentObject (hdc=0x600107ba, type=0x2) returned 0x900010
[0256.861] GetCurrentObject (hdc=0x600107ba, type=0x7) returned 0x1e0507b9
[0256.861] GetCurrentObject (hdc=0x600107ba, type=0x6) returned 0x8a01c2
[0256.861] SaveDC (hdc=0x600107ba) returned 2
[0256.862] GetNearestColor (hdc=0x600107ba, color=0xff) returned 0xff
[0256.862] CreateSolidBrush (color=0xff) returned 0x6610078d
[0256.862] FillRect (hDC=0x600107ba, lprc=0x53ddb8, hbr=0x6610078d) returned 1
[0256.862] DeleteObject (ho=0x6610078d) returned 1
[0256.862] RestoreDC (hdc=0x600107ba, nSavedDC=-1) returned 1
[0256.862] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0256.862] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0256.862] GetSystemMetrics (nIndex=42) returned 0
[0256.862] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0256.862] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0256.862] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0256.862] GetCurrentObject (hdc=0x600107ba, type=0x1) returned 0xb00017
[0256.862] GetCurrentObject (hdc=0x600107ba, type=0x2) returned 0x900010
[0256.862] GetCurrentObject (hdc=0x600107ba, type=0x7) returned 0x1e0507b9
[0256.862] GetCurrentObject (hdc=0x600107ba, type=0x6) returned 0x8a01c2
[0256.862] SaveDC (hdc=0x600107ba) returned 2
[0256.862] GetNearestColor (hdc=0x600107ba, color=0xff) returned 0xff
[0256.862] CreateSolidBrush (color=0xff) returned 0x6710078d
[0256.862] FillRect (hDC=0x600107ba, lprc=0x53dd58, hbr=0x6710078d) returned 1
[0256.862] DeleteObject (ho=0x6710078d) returned 1
[0256.863] RestoreDC (hdc=0x600107ba, nSavedDC=-1) returned 1
[0256.863] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0256.863] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0256.863] GetSystemMetrics (nIndex=42) returned 0
[0256.863] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0256.863] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0256.863] RestoreDC (hdc=0x600107ba, nSavedDC=-1) returned 1
[0256.863] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107ba) returned 0x0
[0256.863] IsAppThemed () returned 0x1
[0256.863] GetThemeAppProperties () returned 0x3
[0256.863] GetThemeAppProperties () returned 0x3
[0256.863] IsAppThemed () returned 0x1
[0256.863] GetThemeAppProperties () returned 0x3
[0256.863] GetThemeAppProperties () returned 0x3
[0256.863] IsThemePartDefined () returned 0x1
[0256.863] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0256.863] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.864] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0256.864] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0256.864] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0256.864] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0256.864] LocalFree (hMem=0x89ec80) returned 0x0
[0256.864] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0256.864] LocalFree (hMem=0x89eee8) returned 0x0
[0256.864] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0256.864] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0256.864] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0256.864] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0256.864] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.864] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0256.864] GetCurrentObject (hdc=0x600107ba, type=0x1) returned 0xb00017
[0256.864] GetCurrentObject (hdc=0x600107ba, type=0x2) returned 0x900010
[0256.864] GetCurrentObject (hdc=0x600107ba, type=0x7) returned 0x1e0507b9
[0256.864] GetCurrentObject (hdc=0x600107ba, type=0x6) returned 0x8a01c2
[0256.864] SaveDC (hdc=0x600107ba) returned 1
[0256.864] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4604051e
[0256.864] GetClipRgn (hdc=0x600107ba, hrgn=0x4604051e) returned 0
[0256.864] SelectClipRgn (hdc=0x600107ba, hrgn=0xc10407a1) returned 2
[0256.864] DeleteObject (ho=0x4604051e) returned 1
[0256.864] DeleteObject (ho=0xc10407a1) returned 1
[0256.865] OffsetViewportOrgEx (in: hdc=0x600107ba, x=0, y=0, lppt=0x248b70c | out: lppt=0x248b70c) returned 1
[0256.865] IsAppThemed () returned 0x1
[0256.865] GetThemeAppProperties () returned 0x3
[0256.865] GetThemeAppProperties () returned 0x3
[0256.865] DrawThemeBackground () returned 0x0
[0256.865] RestoreDC (hdc=0x600107ba, nSavedDC=-1) returned 1
[0256.865] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107ba) returned 0x0
[0256.865] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0256.865] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0256.865] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0256.865] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0256.865] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0256.865] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0256.865] LocalFree (hMem=0x89eee8) returned 0x0
[0256.865] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0256.865] LocalFree (hMem=0x89ea88) returned 0x0
[0256.865] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0256.865] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0256.865] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0256.866] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0256.866] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0256.866] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0256.866] GetCurrentObject (hdc=0x600107ba, type=0x1) returned 0xb00017
[0256.866] GetCurrentObject (hdc=0x600107ba, type=0x2) returned 0x900010
[0256.866] GetCurrentObject (hdc=0x600107ba, type=0x7) returned 0x1e0507b9
[0256.866] GetCurrentObject (hdc=0x600107ba, type=0x6) returned 0x8a01c2
[0256.866] SaveDC (hdc=0x600107ba) returned 1
[0256.866] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc20407a1
[0256.866] GetClipRgn (hdc=0x600107ba, hrgn=0xc20407a1) returned 0
[0256.866] SelectClipRgn (hdc=0x600107ba, hrgn=0x4704051e) returned 2
[0256.866] DeleteObject (ho=0xc20407a1) returned 1
[0256.866] DeleteObject (ho=0x4704051e) returned 1
[0256.866] OffsetViewportOrgEx (in: hdc=0x600107ba, x=0, y=0, lppt=0x248b9e0 | out: lppt=0x248b9e0) returned 1
[0256.866] IsAppThemed () returned 0x1
[0256.866] GetThemeAppProperties () returned 0x3
[0256.866] GetThemeAppProperties () returned 0x3
[0256.866] GetThemeBackgroundContentRect () returned 0x0
[0256.866] RestoreDC (hdc=0x600107ba, nSavedDC=-1) returned 1
[0256.866] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107ba) returned 0x0
[0256.866] IsAppThemed () returned 0x1
[0256.866] GetThemeAppProperties () returned 0x3
[0256.867] GetThemeAppProperties () returned 0x3
[0256.867] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0256.867] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0256.867] GetCurrentObject (hdc=0x600107ba, type=0x1) returned 0xb00017
[0256.867] GetCurrentObject (hdc=0x600107ba, type=0x2) returned 0x900010
[0256.867] GetCurrentObject (hdc=0x600107ba, type=0x7) returned 0x1e0507b9
[0256.867] GetCurrentObject (hdc=0x600107ba, type=0x6) returned 0x8a01c2
[0256.867] SaveDC (hdc=0x600107ba) returned 1
[0256.867] GetTextAlign (hdc=0x600107ba) returned 0x0
[0256.867] GetTextColor (hdc=0x600107ba) returned 0x0
[0256.867] GetCurrentObject (hdc=0x600107ba, type=0x6) returned 0x8a01c2
[0256.867] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0256.867] SelectObject (hdc=0x600107ba, h=0x450a0799) returned 0x8a01c2
[0256.867] GetBkMode (hdc=0x600107ba) returned 2
[0256.867] SetBkMode (hdc=0x600107ba, mode=1) returned 2
[0256.867] DrawTextExW (in: hdc=0x600107ba, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x248bd80 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0256.868] DrawTextExW (in: hdc=0x600107ba, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x248bd80 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0256.868] RestoreDC (hdc=0x600107ba, nSavedDC=-1) returned 1
[0256.868] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107ba) returned 0x0
[0256.868] GetFocus () returned 0x202c6
[0256.868] IsAppThemed () returned 0x1
[0256.868] GetThemeAppProperties () returned 0x3
[0256.868] GetThemeAppProperties () returned 0x3
[0256.868] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0256.868] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x600107ba, x1=0, y1=0, rop=0xcc0020) returned 1
[0256.868] GdipReleaseDC (graphics=0x5d92c30, hdc=0x600107ba) returned 0x0
[0256.869] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0256.869] SelectObject (hdc=0x600107ba, h=0x85000f) returned 0x1e0507b9
[0256.869] DeleteDC (hdc=0x600107ba) returned 1
[0256.869] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0256.869] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0256.869] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x248be7c, cPoints=0x1 | out: lpPoints=0x248be7c) returned 25690608
[0256.869] WindowFromPoint (Point=0x241) returned 0x202c6
[0256.869] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930241) returned 0x1
[0256.869] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0256.869] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0256.870] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.870] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0256.871] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.871] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0256.871] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.871] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0256.871] GetDC (hWnd=0x0) returned 0xf0105ee
[0256.871] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e888) returned 0x0
[0256.872] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0256.872] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0256.872] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0256.872] GetSystemMetrics (nIndex=5) returned 1
[0256.872] GetSystemMetrics (nIndex=6) returned 1
[0256.872] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.872] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0256.873] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.873] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0256.940] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.940] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0256.941] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.941] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0256.941] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.941] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0256.942] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.942] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0256.942] GetSystemMetrics (nIndex=5) returned 1
[0256.942] GetSystemMetrics (nIndex=6) returned 1
[0256.942] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.942] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0256.942] GetSystemMetrics (nIndex=5) returned 1
[0256.942] GetSystemMetrics (nIndex=6) returned 1
[0256.943] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.943] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0256.943] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.944] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0256.944] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.944] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0256.945] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.945] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0256.945] GetSystemMetrics (nIndex=59) returned 1460
[0256.945] GetSystemMetrics (nIndex=60) returned 920
[0256.945] GetSystemMetrics (nIndex=34) returned 136
[0256.945] GetSystemMetrics (nIndex=35) returned 39
[0256.945] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.945] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0256.945] GetCurrentThreadId () returned 0x11d0
[0256.945] GetCurrentThreadId () returned 0x11d0
[0256.945] GetCurrentThreadId () returned 0x11d0
[0256.945] GetCurrentThreadId () returned 0x11d0
[0256.945] GetCurrentThreadId () returned 0x11d0
[0256.946] GetCurrentThreadId () returned 0x11d0
[0256.946] GetCurrentThreadId () returned 0x11d0
[0256.946] GetCurrentThreadId () returned 0x11d0
[0256.946] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.946] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0256.946] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0256.946] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0256.946] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.947] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0256.947] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.948] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0256.948] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1000ea
[0256.948] SetWindowLongW (hWnd=0x1000ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0256.948] GetWindowLongW (hWnd=0x1000ea, nIndex=-4) returned 1950089536
[0256.949] SetWindowLongW (hWnd=0x1000ea, nIndex=-4, dwNewLong=79648414) returned 1950089536
[0256.949] GetWindowLongW (hWnd=0x1000ea, nIndex=-4) returned 79648414
[0256.949] GetWindowLongW (hWnd=0x1000ea, nIndex=-16) returned 113311744
[0256.949] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1000ea, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0256.949] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1000ea, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0256.950] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1000ea, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0256.950] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1000ea, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0256.950] GetClientRect (in: hWnd=0x1000ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0256.950] GetWindowRect (in: hWnd=0x1000ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0256.951] SetWindowTextW (hWnd=0x1000ea, lpString="WindowsFormsParkingWindow") returned 1
[0256.951] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1000ea, Msg=0xc, wParam=0x0, lParam=0x2483e34) returned 0x1
[0256.951] GetParent (hWnd=0x1000ea) returned 0x0
[0256.952] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0256.952] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1000ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xb004e
[0256.952] SetWindowLongW (hWnd=0xb004e, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0256.952] GetWindowLongW (hWnd=0xb004e, nIndex=-4) returned 1868147648
[0256.953] SetWindowLongW (hWnd=0xb004e, nIndex=-4, dwNewLong=79648614) returned 1868147648
[0256.953] GetWindowLongW (hWnd=0xb004e, nIndex=-4) returned 79648614
[0256.953] GetWindowLongW (hWnd=0xb004e, nIndex=-16) returned 1174405133
[0256.953] GetWindowLongW (hWnd=0xb004e, nIndex=-12) returned 0
[0256.953] SetWindowLongW (hWnd=0xb004e, nIndex=-12, dwNewLong=720974) returned 0
[0256.953] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0256.954] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0256.954] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0256.955] GetClientRect (in: hWnd=0xb004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0256.955] GetWindowRect (in: hWnd=0xb004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0256.955] GetParent (hWnd=0xb004e) returned 0x1000ea
[0256.955] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1000ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0256.955] SetWindowTextW (hWnd=0xb004e, lpString="Enter password: ") returned 1
[0256.955] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0256.956] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0256.956] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0256.956] GetClientRect (in: hWnd=0xb004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0256.956] GetWindowRect (in: hWnd=0xb004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0256.956] GetParent (hWnd=0xb004e) returned 0x1000ea
[0256.956] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1000ea, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0256.956] SendMessageW (hWnd=0xb004e, Msg=0x2210, wParam=0x4e0001, lParam=0xb004e) returned 0x0
[0256.956] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x2210, wParam=0x4e0001, lParam=0xb004e) returned 0x0
[0256.956] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0256.957] GetParent (hWnd=0xb004e) returned 0x1000ea
[0256.957] GdipCreateFromHWND (hwnd=0xb004e, graphics=0x53e994) returned 0x0
[0256.957] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0256.957] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0256.957] GetProcessWindowStation () returned 0x13c
[0256.957] GetCapture () returned 0x202c6
[0256.957] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0256.958] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0256.958] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0256.958] ReleaseCapture () returned 1
[0256.958] GetActiveWindow () returned 0x70036
[0256.958] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0256.958] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.959] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0256.959] GetCursorPos (in: lpPoint=0x2498c2c | out: lpPoint=0x2498c2c*(x=577, y=403)) returned 1
[0256.959] MonitorFromPoint (pt=0x241, dwFlags=0x193) returned 0x10001
[0256.959] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0256.959] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x630107ba
[0256.960] GetDeviceCaps (hdc=0x630107ba, index=12) returned 32
[0256.960] GetDeviceCaps (hdc=0x630107ba, index=14) returned 1
[0256.960] DeleteDC (hdc=0x630107ba) returned 1
[0256.960] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0256.960] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0256.960] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2a013e
[0256.961] SetWindowLongW (hWnd=0x2a013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0256.961] GetWindowLongW (hWnd=0x2a013e, nIndex=-4) returned 1950089536
[0256.961] SetWindowLongW (hWnd=0x2a013e, nIndex=-4, dwNewLong=79648454) returned 1950089536
[0256.962] GetWindowLongW (hWnd=0x2a013e, nIndex=-4) returned 79648454
[0256.962] GetWindowLongW (hWnd=0x2a013e, nIndex=-16) returned 113770496
[0256.962] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0256.963] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0256.963] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0256.963] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0256.963] GetWindowRect (in: hWnd=0x2a013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0256.964] SetWindowTextW (hWnd=0x2a013e, lpString="Ransomware") returned 1
[0256.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xc, wParam=0x0, lParam=0x248bf44) returned 0x1
[0256.964] GetStartupInfoW (in: lpStartupInfo=0x2498f68 | out: lpStartupInfo=0x2498f68*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0256.965] GetParent (hWnd=0x2a013e) returned 0x0
[0256.965] SetWindowLongW (hWnd=0x2a013e, nIndex=-8, dwNewLong=0) returned 0
[0256.965] SendMessageW (hWnd=0x2a013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0256.965] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0256.965] SendMessageW (hWnd=0x2a013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0256.965] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0256.965] GetSystemMenu (hWnd=0x2a013e, bRevert=0) returned 0x5d0095
[0256.966] GetWindowPlacement (in: hWnd=0x2a013e, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0256.966] EnableMenuItem (hMenu=0x5d0095, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0256.966] EnableMenuItem (hMenu=0x5d0095, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0256.966] EnableMenuItem (hMenu=0x5d0095, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0256.966] EnableMenuItem (hMenu=0x5d0095, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0256.966] EnableMenuItem (hMenu=0x5d0095, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0256.966] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0256.966] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0256.966] GetWindowRect (in: hWnd=0x2a013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0256.967] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.967] GetWindowLongW (hWnd=0x2a013e, nIndex=-16) returned 113770496
[0256.967] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0256.967] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0256.967] GetSystemMetrics (nIndex=42) returned 0
[0256.967] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0256.967] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0256.967] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0256.967] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0256.967] GetSystemMetrics (nIndex=42) returned 0
[0256.967] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0256.967] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0256.967] GetCursorPos (in: lpPoint=0x24990dc | out: lpPoint=0x24990dc*(x=577, y=403)) returned 1
[0256.967] MonitorFromPoint (pt=0x243, dwFlags=0x190) returned 0x10001
[0256.967] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0256.968] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x670107ba
[0256.968] GetDeviceCaps (hdc=0x670107ba, index=12) returned 32
[0256.968] GetDeviceCaps (hdc=0x670107ba, index=14) returned 1
[0256.968] DeleteDC (hdc=0x670107ba) returned 1
[0256.968] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0256.968] GetWindowLongW (hWnd=0x2a013e, nIndex=-16) returned 113770496
[0256.968] GetWindowLongW (hWnd=0x2a013e, nIndex=-20) returned 327937
[0256.968] SetWindowLongW (hWnd=0x2a013e, nIndex=-16, dwNewLong=46661632) returned 113770496
[0256.968] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0256.968] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0256.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0256.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0256.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0256.970] SetWindowLongW (hWnd=0x2a013e, nIndex=-20, dwNewLong=327681) returned 327937
[0256.970] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0256.970] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0256.971] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0256.971] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0256.971] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0256.972] SetWindowPos (hWnd=0x2a013e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0256.972] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0256.972] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0256.972] GetWindowPlacement (in: hWnd=0x2a013e, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0256.972] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0256.972] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0256.972] GetWindowRect (in: hWnd=0x2a013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0256.973] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0256.973] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0256.973] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0256.974] RedrawWindow (hWnd=0x2a013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0256.974] GetSystemMenu (hWnd=0x2a013e, bRevert=0) returned 0x5d0095
[0256.974] GetWindowPlacement (in: hWnd=0x2a013e, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0256.974] EnableMenuItem (hMenu=0x5d0095, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0256.974] EnableMenuItem (hMenu=0x5d0095, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0256.974] EnableMenuItem (hMenu=0x5d0095, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0256.974] EnableMenuItem (hMenu=0x5d0095, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0256.974] EnableMenuItem (hMenu=0x5d0095, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0256.974] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0256.974] GetWindowLongW (hWnd=0x2a013e, nIndex=-8) returned 0
[0256.974] SetWindowLongW (hWnd=0x2a013e, nIndex=-8, dwNewLong=458806) returned 0
[0256.975] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0256.975] GetProcessWindowStation () returned 0x13c
[0256.975] GetCurrentThreadId () returned 0x11d0
[0256.975] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf55ae, lParam=0x0) returned 1
[0256.975] IsWindowVisible (hWnd=0x2a013e) returned 0
[0256.975] IsWindowVisible (hWnd=0x70036) returned 1
[0256.975] IsWindowEnabled (hWnd=0x70036) returned 1
[0256.975] IsWindowVisible (hWnd=0x602b6) returned 0
[0256.975] IsWindowVisible (hWnd=0x901f8) returned 0
[0256.975] IsWindowVisible (hWnd=0x202d0) returned 0
[0256.975] IsWindowVisible (hWnd=0x202d4) returned 0
[0256.975] GetActiveWindow () returned 0x70036
[0256.976] GetFocus () returned 0x202c6
[0256.976] IsWindow (hWnd=0x70036) returned 1
[0256.976] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0256.976] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0256.976] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0256.976] GetWindowLongW (hWnd=0x2a013e, nIndex=-8) returned 458806
[0256.977] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0256.977] GetCurrentThreadId () returned 0x11d0
[0256.977] GetWindowLongW (hWnd=0x2a013e, nIndex=-8) returned 458806
[0256.977] IsWindowEnabled (hWnd=0x70036) returned 0
[0256.977] IsWindowEnabled (hWnd=0x2a013e) returned 1
[0256.977] ShowWindow (hWnd=0x2a013e, nCmdShow=5) returned 0
[0256.977] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0256.977] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0256.977] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.978] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0256.978] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x2a013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xe01e2
[0256.978] SetWindowLongW (hWnd=0xe01e2, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0256.978] GetWindowLongW (hWnd=0xe01e2, nIndex=-4) returned 1868026976
[0256.978] SetWindowLongW (hWnd=0xe01e2, nIndex=-4, dwNewLong=79648054) returned 1868026976
[0256.979] GetWindowLongW (hWnd=0xe01e2, nIndex=-4) returned 79648054
[0256.979] GetWindowLongW (hWnd=0xe01e2, nIndex=-16) returned 1174470848
[0256.979] GetWindowLongW (hWnd=0xe01e2, nIndex=-12) returned 0
[0256.979] SetWindowLongW (hWnd=0xe01e2, nIndex=-12, dwNewLong=917986) returned 0
[0256.979] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0256.980] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0256.980] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0256.981] SendMessageW (hWnd=0xe01e2, Msg=0x2055, wParam=0xe01e2, lParam=0x3) returned 0x2
[0256.981] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0256.981] GetWindow (hWnd=0xe01e2, uCmd=0x3) returned 0x0
[0256.981] GetClientRect (in: hWnd=0xe01e2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0256.981] GetWindowRect (in: hWnd=0xe01e2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0256.981] GetParent (hWnd=0xe01e2) returned 0x2a013e
[0256.981] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2a013e, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0256.981] SendMessageW (hWnd=0xe01e2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0256.982] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0256.982] SendMessageW (hWnd=0xe01e2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0256.982] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0256.982] GetSystemMetrics (nIndex=5) returned 1
[0256.982] GetSystemMetrics (nIndex=6) returned 1
[0256.982] SendMessageW (hWnd=0xe01e2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0256.982] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0256.982] SendMessageW (hWnd=0xe01e2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0256.982] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0256.983] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0256.983] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0256.983] GetClientRect (in: hWnd=0xe01e2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0256.983] GetWindowRect (in: hWnd=0xe01e2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0256.983] GetParent (hWnd=0xe01e2) returned 0x2a013e
[0256.983] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2a013e, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0256.983] SendMessageW (hWnd=0xe01e2, Msg=0x2210, wParam=0x1e20001, lParam=0xe01e2) returned 0x0
[0256.983] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x2210, wParam=0x1e20001, lParam=0xe01e2) returned 0x0
[0256.983] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0256.983] GetParent (hWnd=0xe01e2) returned 0x2a013e
[0256.983] GetParent (hWnd=0xb004e) returned 0x1000ea
[0256.983] SetParent (hWndChild=0xb004e, hWndNewParent=0x2a013e) returned 0x1000ea
[0256.984] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0256.984] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0256.984] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0256.984] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0256.984] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0256.984] GetClientRect (in: hWnd=0xb004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0256.984] GetWindowRect (in: hWnd=0xb004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0256.985] GetParent (hWnd=0xb004e) returned 0x2a013e
[0256.985] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2a013e, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0256.985] GetClientRect (in: hWnd=0xb004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0256.985] GetWindowRect (in: hWnd=0xb004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0256.985] GetParent (hWnd=0xb004e) returned 0x2a013e
[0256.985] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2a013e, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0256.985] GetParent (hWnd=0xb004e) returned 0x2a013e
[0256.985] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0256.985] GetWindow (hWnd=0xb004e, uCmd=0x3) returned 0x0
[0256.985] SetWindowPos (hWnd=0xb004e, hWndInsertAfter=0xe01e2, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0256.985] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0256.986] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0256.986] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0256.986] GetClientRect (in: hWnd=0xb004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0256.986] GetWindowRect (in: hWnd=0xb004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0256.986] GetParent (hWnd=0xb004e) returned 0x2a013e
[0256.986] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2a013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0256.986] GetParent (hWnd=0xb004e) returned 0x2a013e
[0256.986] GetWindow (hWnd=0xb004e, uCmd=0x3) returned 0xe01e2
[0256.986] GetWindowThreadProcessId (in: hWnd=0xb004e, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0256.986] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0256.986] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.987] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0256.987] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x2a013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xe0122
[0256.987] SetWindowLongW (hWnd=0xe0122, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0256.987] GetWindowLongW (hWnd=0xe0122, nIndex=-4) returned 1868032000
[0256.988] SetWindowLongW (hWnd=0xe0122, nIndex=-4, dwNewLong=79648294) returned 1868032000
[0256.988] GetWindowLongW (hWnd=0xe0122, nIndex=-4) returned 79648294
[0256.988] GetWindowLongW (hWnd=0xe0122, nIndex=-16) returned 1174470667
[0256.988] GetWindowLongW (hWnd=0xe0122, nIndex=-12) returned 0
[0256.988] SetWindowLongW (hWnd=0xe0122, nIndex=-12, dwNewLong=917794) returned 0
[0256.988] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0256.988] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0256.989] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0256.989] SendMessageW (hWnd=0xe0122, Msg=0x2055, wParam=0xe0122, lParam=0x3) returned 0x2
[0256.991] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0256.991] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0256.991] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0256.991] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0256.991] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0256.991] RedrawWindow (hWnd=0xe01e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0256.991] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0256.991] RedrawWindow (hWnd=0xb004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0256.992] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0256.992] RedrawWindow (hWnd=0xe0122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0256.992] RedrawWindow (hWnd=0x2a013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0256.992] GetWindow (hWnd=0xe0122, uCmd=0x3) returned 0xb004e
[0256.992] GetClientRect (in: hWnd=0xe0122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0256.992] GetWindowRect (in: hWnd=0xe0122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0256.992] GetParent (hWnd=0xe0122) returned 0x2a013e
[0256.992] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2a013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0256.992] SetWindowTextW (hWnd=0xe0122, lpString="OK") returned 1
[0256.992] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0xc, wParam=0x0, lParam=0x2490404) returned 0x1
[0256.993] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0256.993] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0256.993] GetClientRect (in: hWnd=0xe0122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0256.993] GetWindowRect (in: hWnd=0xe0122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0256.993] GetParent (hWnd=0xe0122) returned 0x2a013e
[0256.993] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2a013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0256.993] SendMessageW (hWnd=0xe0122, Msg=0x2210, wParam=0x1220001, lParam=0xe0122) returned 0x0
[0256.993] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x2210, wParam=0x1220001, lParam=0xe0122) returned 0x0
[0256.993] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0256.993] GetParent (hWnd=0xe0122) returned 0x2a013e
[0256.993] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0256.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0256.994] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0256.994] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x2a013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x802ca
[0256.994] SetWindowLongW (hWnd=0x802ca, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0256.995] GetWindowLongW (hWnd=0x802ca, nIndex=-4) returned 1868032000
[0256.995] SetWindowLongW (hWnd=0x802ca, nIndex=-4, dwNewLong=79648934) returned 1868032000
[0256.995] GetWindowLongW (hWnd=0x802ca, nIndex=-4) returned 79648934
[0256.995] GetWindowLongW (hWnd=0x802ca, nIndex=-16) returned 1174470667
[0256.995] GetWindowLongW (hWnd=0x802ca, nIndex=-12) returned 0
[0256.995] SetWindowLongW (hWnd=0x802ca, nIndex=-12, dwNewLong=525002) returned 0
[0256.995] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802ca, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0256.996] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802ca, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0256.996] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802ca, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0256.997] SendMessageW (hWnd=0x802ca, Msg=0x2055, wParam=0x802ca, lParam=0x3) returned 0x2
[0256.997] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0256.997] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802ca, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0256.997] GetWindow (hWnd=0x802ca, uCmd=0x3) returned 0xe0122
[0256.997] GetClientRect (in: hWnd=0x802ca, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0256.997] GetWindowRect (in: hWnd=0x802ca, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0256.997] GetParent (hWnd=0x802ca) returned 0x2a013e
[0256.997] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2a013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0256.998] SetWindowTextW (hWnd=0x802ca, lpString="Cancel") returned 1
[0256.998] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802ca, Msg=0xc, wParam=0x0, lParam=0x2493cc4) returned 0x1
[0256.998] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802ca, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0256.998] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802ca, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0256.998] GetClientRect (in: hWnd=0x802ca, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0256.998] GetWindowRect (in: hWnd=0x802ca, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0256.998] GetParent (hWnd=0x802ca) returned 0x2a013e
[0256.998] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2a013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0256.998] SendMessageW (hWnd=0x802ca, Msg=0x2210, wParam=0x2ca0001, lParam=0x802ca) returned 0x0
[0256.998] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802ca, Msg=0x2210, wParam=0x2ca0001, lParam=0x802ca) returned 0x0
[0256.999] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0256.999] GetParent (hWnd=0x802ca) returned 0x2a013e
[0256.999] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0256.999] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e320) returned 0x0
[0256.999] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0257.000] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0257.000] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0257.000] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0257.000] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0257.000] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0257.000] GetWindowLongW (hWnd=0x2a013e, nIndex=-8) returned 458806
[0257.000] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0257.000] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0257.001] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x6e0107ba
[0257.001] GetDeviceCaps (hdc=0x6e0107ba, index=12) returned 32
[0257.001] GetDeviceCaps (hdc=0x6e0107ba, index=14) returned 1
[0257.001] DeleteDC (hdc=0x6e0107ba) returned 1
[0257.001] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0257.001] GetWindowThreadProcessId (in: hWnd=0x2a013e, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0257.001] GetCurrentThreadId () returned 0x11d0
[0257.001] PostMessageW (hWnd=0x2a013e, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0257.001] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.001] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.001] GetSystemMetrics (nIndex=42) returned 0
[0257.001] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.001] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0257.002] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0257.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0257.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0257.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0257.009] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x2a013e) returned 0x1
[0257.011] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0257.011] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0257.012] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0257.012] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0257.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0257.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0257.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0257.015] GetFocus () returned 0x202c6
[0257.015] IsChild (hWndParent=0x2a013e, hWnd=0x202c6) returned 0
[0257.015] GetFocus () returned 0x202c6
[0257.015] SetFocus (hWnd=0xe01e2) returned 0x202c6
[0257.015] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xe01e2, lParam=0x0) returned 0x0
[0257.015] GetCapture () returned 0x0
[0257.015] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0257.016] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0257.017] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0257.019] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0257.019] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0257.019] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0257.019] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0257.019] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0257.019] GetParent (hWnd=0x2a013e) returned 0x0
[0257.020] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0257.020] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0257.020] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0257.024] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0257.025] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0257.025] GetSysColorBrush (nIndex=5) returned 0x100079
[0257.025] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0257.026] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0257.026] SendMessageW (hWnd=0xe01e2, Msg=0x2111, wParam=0x10001e2, lParam=0xe01e2) returned 0x0
[0257.027] SendMessageW (hWnd=0xe01e2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0257.027] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0257.027] GetKeyState (nVirtKey=1) returned 1
[0257.027] GetKeyState (nVirtKey=2) returned 0
[0257.027] GetKeyState (nVirtKey=4) returned 0
[0257.027] GetKeyState (nVirtKey=5) returned 0
[0257.027] GetKeyState (nVirtKey=6) returned 0
[0257.027] GetWindowTextLengthW (hWnd=0xe01e2) returned 0
[0257.027] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0257.027] SendMessageW (hWnd=0xe01e2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0257.027] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0257.027] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0257.027] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0257.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0257.033] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0257.033] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0257.033] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0257.034] GetWindowPlacement (in: hWnd=0x2a013e, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0257.034] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0257.034] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.034] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.034] GetSystemMetrics (nIndex=42) returned 0
[0257.034] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.034] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0257.034] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0257.034] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0257.034] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0257.034] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x71050527
[0257.034] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0257.034] SaveDC (hdc=0x10105d6) returned 1
[0257.035] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0257.035] CreateSolidBrush (color=0xf0f0f0) returned 0x6810078d
[0257.035] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0x6810078d) returned 1
[0257.035] DeleteObject (ho=0x6810078d) returned 1
[0257.035] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0257.035] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0257.035] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0257.035] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0257.036] GetWindowPlacement (in: hWnd=0x2a013e, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0257.055] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0257.055] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.055] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.056] GetSystemMetrics (nIndex=42) returned 0
[0257.056] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.056] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0257.056] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0257.056] GetCurrentObject (hdc=0xcc010734, type=0x1) returned 0xb00017
[0257.056] GetCurrentObject (hdc=0xcc010734, type=0x2) returned 0x900010
[0257.056] GetCurrentObject (hdc=0xcc010734, type=0x7) returned 0x1105065f
[0257.056] GetCurrentObject (hdc=0xcc010734, type=0x6) returned 0x8a01c2
[0257.057] SaveDC (hdc=0xcc010734) returned 1
[0257.057] GetNearestColor (hdc=0xcc010734, color=0xf0f0f0) returned 0xf0f0f0
[0257.057] CreateSolidBrush (color=0xf0f0f0) returned 0x6910078d
[0257.057] FillRect (hDC=0xcc010734, lprc=0x53dc18, hbr=0x6910078d) returned 1
[0257.057] DeleteObject (ho=0x6910078d) returned 1
[0257.057] RestoreDC (hdc=0xcc010734, nSavedDC=-1) returned 1
[0257.058] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.058] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.058] GetSystemMetrics (nIndex=42) returned 0
[0257.058] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.058] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0257.058] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0257.058] GetCurrentObject (hdc=0xcc010734, type=0x1) returned 0xb00017
[0257.058] GetCurrentObject (hdc=0xcc010734, type=0x2) returned 0x900010
[0257.058] GetCurrentObject (hdc=0xcc010734, type=0x7) returned 0x1105065f
[0257.058] GetCurrentObject (hdc=0xcc010734, type=0x6) returned 0x8a01c2
[0257.059] SaveDC (hdc=0xcc010734) returned 1
[0257.059] GetNearestColor (hdc=0xcc010734, color=0xf0f0f0) returned 0xf0f0f0
[0257.059] CreateSolidBrush (color=0xf0f0f0) returned 0x6a10078d
[0257.059] FillRect (hDC=0xcc010734, lprc=0x53dbb8, hbr=0x6a10078d) returned 1
[0257.059] DeleteObject (ho=0x6a10078d) returned 1
[0257.059] RestoreDC (hdc=0xcc010734, nSavedDC=-1) returned 1
[0257.060] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.060] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.060] GetSystemMetrics (nIndex=42) returned 0
[0257.060] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.060] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0257.061] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0257.061] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0257.062] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0257.062] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0257.062] GetStockObject (i=5) returned 0x900015
[0257.062] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0257.063] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x802ca, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0257.063] GetStockObject (i=5) returned 0x900015
[0257.063] GetWindowPlacement (in: hWnd=0x2a013e, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0257.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0257.063] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0257.063] GetWindowRect (in: hWnd=0x2a013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0257.065] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0257.065] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0257.065] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0257.066] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0257.066] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0257.066] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0257.066] GetWindowRect (in: hWnd=0x2a013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0257.066] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.066] IsWindowUnicode (hWnd=0x2a013e) returned 1
[0257.066] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.066] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.067] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.067] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0257.067] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.067] IsWindowUnicode (hWnd=0x2a013e) returned 1
[0257.067] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.067] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.067] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.067] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.080] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x84, wParam=0x0, lParam=0x18f0369) returned 0x1
[0257.081] IsWindowUnicode (hWnd=0xe0122) returned 1
[0257.081] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.081] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.081] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.081] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.081] IsWindowUnicode (hWnd=0x202c6) returned 1
[0257.081] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.081] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.081] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.081] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0257.082] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0257.082] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.082] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x84, wParam=0x0, lParam=0x18f0369) returned 0x1
[0257.082] IsWindowUnicode (hWnd=0xe0122) returned 1
[0257.082] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.082] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x84, wParam=0x0, lParam=0x18f0369) returned 0x1
[0257.082] SetCursor (hCursor=0x10003) returned 0x10003
[0257.083] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.083] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.083] _TrackMouseEvent (in: lpEventTrack=0x249a658 | out: lpEventTrack=0x249a658) returned 1
[0257.083] SendMessageW (hWnd=0xe0122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0257.083] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0257.083] InvalidateRect (hWnd=0xe0122, lpRect=0x0, bErase=0) returned 1
[0257.083] GetKeyState (nVirtKey=1) returned 1
[0257.083] GetKeyState (nVirtKey=2) returned 0
[0257.083] GetKeyState (nVirtKey=4) returned 0
[0257.083] GetKeyState (nVirtKey=5) returned 0
[0257.083] GetKeyState (nVirtKey=6) returned 0
[0257.083] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.091] IsWindowUnicode (hWnd=0x2a013e) returned 1
[0257.091] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.091] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.091] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.092] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.092] IsWindowUnicode (hWnd=0x2a013e) returned 1
[0257.093] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.093] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.093] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.093] BeginPaint (in: hWnd=0x2a013e, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0xf0105ee
[0257.093] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0257.093] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.093] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.093] GetSystemMetrics (nIndex=42) returned 0
[0257.093] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.093] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0257.094] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0257.094] EndPaint (hWnd=0x2a013e, lpPaint=0x53e30c) returned 1
[0257.094] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.094] IsWindowUnicode (hWnd=0xe01e2) returned 1
[0257.094] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.094] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.094] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0257.094] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0257.095] SetTextColor (hdc=0xcd010734, color=0x0) returned 0x0
[0257.095] SetBkColor (hdc=0xcd010734, color=0xffffff) returned 0xffffff
[0257.096] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.096] IsWindowUnicode (hWnd=0xb004e) returned 1
[0257.096] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.096] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.096] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.096] BeginPaint (in: hWnd=0xb004e, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x60100ce
[0257.097] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0257.097] CreateCompatibleDC (hdc=0x60100ce) returned 0x8d0107c9
[0257.097] SelectObject (hdc=0x8d0107c9, h=0x1e0507b9) returned 0x85000f
[0257.097] GdipCreateFromHDC (hdc=0x8d0107c9, graphics=0x53e30c) returned 0x0
[0257.097] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0257.097] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0257.097] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0257.097] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.098] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0257.098] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.098] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0257.098] LocalFree (hMem=0x89eac0) returned 0x0
[0257.098] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.098] GdipCreateRegion (region=0x53e354) returned 0x0
[0257.098] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.098] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0257.098] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0257.098] GetWindowTextLengthW (hWnd=0xb004e) returned 16
[0257.098] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0257.099] GetSystemMetrics (nIndex=42) returned 0
[0257.099] GetWindowTextW (in: hWnd=0xb004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0257.099] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0257.099] GetClientRect (in: hWnd=0xb004e, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0257.099] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0257.099] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0257.099] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0257.100] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.100] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0257.100] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0257.100] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0257.100] LocalFree (hMem=0x89ee08) returned 0x0
[0257.100] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0257.100] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.100] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0257.100] LocalFree (hMem=0x89eac0) returned 0x0
[0257.101] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.101] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0257.101] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0257.101] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0257.101] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0257.101] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0257.101] GetCurrentObject (hdc=0x8d0107c9, type=0x1) returned 0xb00017
[0257.101] GetCurrentObject (hdc=0x8d0107c9, type=0x2) returned 0x900010
[0257.101] GetCurrentObject (hdc=0x8d0107c9, type=0x7) returned 0x1e0507b9
[0257.101] GetCurrentObject (hdc=0x8d0107c9, type=0x6) returned 0x8a01c2
[0257.101] SaveDC (hdc=0x8d0107c9) returned 1
[0257.102] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x34040798
[0257.102] GetClipRgn (hdc=0x8d0107c9, hrgn=0x34040798) returned 0
[0257.102] SelectClipRgn (hdc=0x8d0107c9, hrgn=0x4b04051e) returned 2
[0257.102] DeleteObject (ho=0x34040798) returned 1
[0257.102] DeleteObject (ho=0x4b04051e) returned 1
[0257.102] OffsetViewportOrgEx (in: hdc=0x8d0107c9, x=0, y=0, lppt=0x249ab60 | out: lppt=0x249ab60) returned 1
[0257.102] GetNearestColor (hdc=0x8d0107c9, color=0xf0f0f0) returned 0xf0f0f0
[0257.102] CreateSolidBrush (color=0xf0f0f0) returned 0x6b10078d
[0257.102] FillRect (hDC=0x8d0107c9, lprc=0x53e1f4, hbr=0x6b10078d) returned 1
[0257.102] DeleteObject (ho=0x6b10078d) returned 1
[0257.103] RestoreDC (hdc=0x8d0107c9, nSavedDC=-1) returned 1
[0257.103] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c9) returned 0x0
[0257.103] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb8f0dbd) returned 0x0
[0257.103] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.103] GetWindowTextLengthW (hWnd=0xb004e) returned 16
[0257.103] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0257.103] GetSystemMetrics (nIndex=42) returned 0
[0257.103] GetWindowTextW (in: hWnd=0xb004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0257.103] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0257.103] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0257.104] GetCurrentObject (hdc=0x8d0107c9, type=0x1) returned 0xb00017
[0257.104] GetCurrentObject (hdc=0x8d0107c9, type=0x2) returned 0x900010
[0257.104] GetCurrentObject (hdc=0x8d0107c9, type=0x7) returned 0x1e0507b9
[0257.104] GetCurrentObject (hdc=0x8d0107c9, type=0x6) returned 0x8a01c2
[0257.104] SaveDC (hdc=0x8d0107c9) returned 1
[0257.104] GetNearestColor (hdc=0x8d0107c9, color=0x0) returned 0x0
[0257.104] RestoreDC (hdc=0x8d0107c9, nSavedDC=-1) returned 1
[0257.104] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c9) returned 0x0
[0257.105] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0257.105] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0257.105] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0257.105] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x249ae68 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0257.106] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0257.106] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0257.106] GetCurrentObject (hdc=0x8d0107c9, type=0x1) returned 0xb00017
[0257.106] GetCurrentObject (hdc=0x8d0107c9, type=0x2) returned 0x900010
[0257.106] GetCurrentObject (hdc=0x8d0107c9, type=0x7) returned 0x1e0507b9
[0257.106] GetCurrentObject (hdc=0x8d0107c9, type=0x6) returned 0x8a01c2
[0257.106] SaveDC (hdc=0x8d0107c9) returned 1
[0257.106] GetTextAlign (hdc=0x8d0107c9) returned 0x0
[0257.107] GetTextColor (hdc=0x8d0107c9) returned 0x0
[0257.107] GetCurrentObject (hdc=0x8d0107c9, type=0x6) returned 0x8a01c2
[0257.107] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0257.107] SelectObject (hdc=0x8d0107c9, h=0x730a066d) returned 0x8a01c2
[0257.107] GetBkMode (hdc=0x8d0107c9) returned 2
[0257.107] SetBkMode (hdc=0x8d0107c9, mode=1) returned 2
[0257.108] DrawTextExW (in: hdc=0x8d0107c9, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x249b08c | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0257.108] RestoreDC (hdc=0x8d0107c9, nSavedDC=-1) returned 1
[0257.108] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c9) returned 0x0
[0257.108] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0257.108] BitBlt (hdc=0x60100ce, x=0, y=0, cx=250, cy=70, hdcSrc=0x8d0107c9, x1=0, y1=0, rop=0xcc0020) returned 1
[0257.109] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c9) returned 0x0
[0257.109] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0257.109] SelectObject (hdc=0x8d0107c9, h=0x85000f) returned 0x1e0507b9
[0257.109] DeleteDC (hdc=0x8d0107c9) returned 1
[0257.109] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0257.109] EndPaint (hWnd=0xb004e, lpPaint=0x53e2f0) returned 1
[0257.109] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.110] IsWindowUnicode (hWnd=0xe0122) returned 1
[0257.110] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.110] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.110] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.110] BeginPaint (in: hWnd=0xe0122, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0257.110] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0257.110] CreateCompatibleDC (hdc=0x8b010786) returned 0x8f0107c9
[0257.110] SelectObject (hdc=0x8f0107c9, h=0x1e0507b9) returned 0x85000f
[0257.110] GdipCreateFromHDC (hdc=0x8f0107c9, graphics=0x53e300) returned 0x0
[0257.110] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0257.111] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0257.111] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0257.111] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.111] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0257.111] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0257.111] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0257.111] LocalFree (hMem=0x89ec80) returned 0x0
[0257.111] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.111] GdipCreateRegion (region=0x53e348) returned 0x0
[0257.111] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.111] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0257.111] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0257.111] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb8d0dbd) returned 0x0
[0257.111] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.112] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0257.112] GetCurrentObject (hdc=0x8f0107c9, type=0x1) returned 0xb00017
[0257.112] GetCurrentObject (hdc=0x8f0107c9, type=0x2) returned 0x900010
[0257.112] GetCurrentObject (hdc=0x8f0107c9, type=0x7) returned 0x1e0507b9
[0257.112] GetCurrentObject (hdc=0x8f0107c9, type=0x6) returned 0x8a01c2
[0257.112] SaveDC (hdc=0x8f0107c9) returned 1
[0257.112] GetNearestColor (hdc=0x8f0107c9, color=0xf0f0f0) returned 0xf0f0f0
[0257.112] GetNearestColor (hdc=0x8f0107c9, color=0xa0a0a0) returned 0xa0a0a0
[0257.112] GetNearestColor (hdc=0x8f0107c9, color=0x696969) returned 0x696969
[0257.112] GetNearestColor (hdc=0x8f0107c9, color=0xa0a0a0) returned 0xa0a0a0
[0257.112] GetNearestColor (hdc=0x8f0107c9, color=0x0) returned 0x0
[0257.113] GetNearestColor (hdc=0x8f0107c9, color=0xffffff) returned 0xffffff
[0257.113] GetNearestColor (hdc=0x8f0107c9, color=0xe5e5e5) returned 0xe5e5e5
[0257.113] GetNearestColor (hdc=0x8f0107c9, color=0xd7d7d7) returned 0xd7d7d7
[0257.113] GetNearestColor (hdc=0x8f0107c9, color=0x0) returned 0x0
[0257.113] RestoreDC (hdc=0x8f0107c9, nSavedDC=-1) returned 1
[0257.113] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c9) returned 0x0
[0257.113] IsAppThemed () returned 0x1
[0257.113] GetThemeAppProperties () returned 0x3
[0257.113] GetThemeAppProperties () returned 0x3
[0257.113] IsAppThemed () returned 0x1
[0257.113] GetThemeAppProperties () returned 0x3
[0257.113] GetThemeAppProperties () returned 0x3
[0257.114] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x249b7f8 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0257.114] IsAppThemed () returned 0x1
[0257.114] GetThemeAppProperties () returned 0x3
[0257.114] GetThemeAppProperties () returned 0x3
[0257.114] IsAppThemed () returned 0x1
[0257.114] GetThemeAppProperties () returned 0x3
[0257.114] GetThemeAppProperties () returned 0x3
[0257.114] IsAppThemed () returned 0x1
[0257.114] GetThemeAppProperties () returned 0x3
[0257.114] GetThemeAppProperties () returned 0x3
[0257.114] IsAppThemed () returned 0x1
[0257.114] GetThemeAppProperties () returned 0x3
[0257.114] GetThemeAppProperties () returned 0x3
[0257.114] IsThemePartDefined () returned 0x1
[0257.115] IsAppThemed () returned 0x1
[0257.119] GetThemeAppProperties () returned 0x3
[0257.119] GetThemeAppProperties () returned 0x3
[0257.119] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0257.119] IsAppThemed () returned 0x1
[0257.119] GetThemeAppProperties () returned 0x3
[0257.119] GetThemeAppProperties () returned 0x3
[0257.119] IsAppThemed () returned 0x1
[0257.119] GetThemeAppProperties () returned 0x3
[0257.119] GetThemeAppProperties () returned 0x3
[0257.119] IsThemePartDefined () returned 0x1
[0257.119] GdipCreateRegion (region=0x53e064) returned 0x0
[0257.119] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.119] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0257.119] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.119] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0257.120] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.120] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0257.120] LocalFree (hMem=0x89eac0) returned 0x0
[0257.120] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0257.120] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0257.120] LocalFree (hMem=0x89ec80) returned 0x0
[0257.120] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.120] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0257.120] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0257.120] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0257.120] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.120] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0257.120] GetCurrentObject (hdc=0x8f0107c9, type=0x1) returned 0xb00017
[0257.120] GetCurrentObject (hdc=0x8f0107c9, type=0x2) returned 0x900010
[0257.120] GetCurrentObject (hdc=0x8f0107c9, type=0x7) returned 0x1e0507b9
[0257.120] GetCurrentObject (hdc=0x8f0107c9, type=0x6) returned 0x8a01c2
[0257.121] SaveDC (hdc=0x8f0107c9) returned 1
[0257.121] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c04051e
[0257.121] GetClipRgn (hdc=0x8f0107c9, hrgn=0x4c04051e) returned 0
[0257.121] SelectClipRgn (hdc=0x8f0107c9, hrgn=0x38040798) returned 2
[0257.121] DeleteObject (ho=0x4c04051e) returned 1
[0257.121] DeleteObject (ho=0x38040798) returned 1
[0257.121] OffsetViewportOrgEx (in: hdc=0x8f0107c9, x=0, y=0, lppt=0x249bea8 | out: lppt=0x249bea8) returned 1
[0257.121] DrawThemeParentBackground () returned 0x0
[0257.121] GetWindowPlacement (in: hWnd=0x2a013e, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0257.121] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0257.121] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.121] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.122] GetSystemMetrics (nIndex=42) returned 0
[0257.122] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.122] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0257.122] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0257.122] GetCurrentObject (hdc=0x8f0107c9, type=0x1) returned 0xb00017
[0257.122] GetCurrentObject (hdc=0x8f0107c9, type=0x2) returned 0x900010
[0257.122] GetCurrentObject (hdc=0x8f0107c9, type=0x7) returned 0x1e0507b9
[0257.122] GetCurrentObject (hdc=0x8f0107c9, type=0x6) returned 0x8a01c2
[0257.122] SaveDC (hdc=0x8f0107c9) returned 2
[0257.122] GetNearestColor (hdc=0x8f0107c9, color=0xf0f0f0) returned 0xf0f0f0
[0257.122] CreateSolidBrush (color=0xf0f0f0) returned 0x6c10078d
[0257.122] FillRect (hDC=0x8f0107c9, lprc=0x53dac8, hbr=0x6c10078d) returned 1
[0257.122] DeleteObject (ho=0x6c10078d) returned 1
[0257.122] RestoreDC (hdc=0x8f0107c9, nSavedDC=-1) returned 1
[0257.123] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.123] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.123] GetSystemMetrics (nIndex=42) returned 0
[0257.123] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.123] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0257.123] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0257.123] GetCurrentObject (hdc=0x8f0107c9, type=0x1) returned 0xb00017
[0257.123] GetCurrentObject (hdc=0x8f0107c9, type=0x2) returned 0x900010
[0257.123] GetCurrentObject (hdc=0x8f0107c9, type=0x7) returned 0x1e0507b9
[0257.123] GetCurrentObject (hdc=0x8f0107c9, type=0x6) returned 0x8a01c2
[0257.123] SaveDC (hdc=0x8f0107c9) returned 2
[0257.123] GetNearestColor (hdc=0x8f0107c9, color=0xf0f0f0) returned 0xf0f0f0
[0257.123] CreateSolidBrush (color=0xf0f0f0) returned 0x6d10078d
[0257.123] FillRect (hDC=0x8f0107c9, lprc=0x53da68, hbr=0x6d10078d) returned 1
[0257.123] DeleteObject (ho=0x6d10078d) returned 1
[0257.124] RestoreDC (hdc=0x8f0107c9, nSavedDC=-1) returned 1
[0257.124] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.124] GetSystemMetrics (nIndex=42) returned 0
[0257.124] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0257.124] RestoreDC (hdc=0x8f0107c9, nSavedDC=-1) returned 1
[0257.124] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c9) returned 0x0
[0257.124] IsAppThemed () returned 0x1
[0257.124] GetThemeAppProperties () returned 0x3
[0257.124] GetThemeAppProperties () returned 0x3
[0257.124] IsAppThemed () returned 0x1
[0257.124] GetThemeAppProperties () returned 0x3
[0257.125] GetThemeAppProperties () returned 0x3
[0257.125] IsThemePartDefined () returned 0x1
[0257.125] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0257.125] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.125] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0257.125] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.125] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0257.125] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.125] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0257.125] LocalFree (hMem=0x89eac0) returned 0x0
[0257.125] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0257.125] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0257.125] LocalFree (hMem=0x89ee40) returned 0x0
[0257.125] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.125] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0257.125] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0257.125] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0257.126] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.126] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0257.126] GetCurrentObject (hdc=0x8f0107c9, type=0x1) returned 0xb00017
[0257.126] GetCurrentObject (hdc=0x8f0107c9, type=0x2) returned 0x900010
[0257.126] GetCurrentObject (hdc=0x8f0107c9, type=0x7) returned 0x1e0507b9
[0257.126] GetCurrentObject (hdc=0x8f0107c9, type=0x6) returned 0x8a01c2
[0257.126] SaveDC (hdc=0x8f0107c9) returned 1
[0257.126] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x39040798
[0257.126] GetClipRgn (hdc=0x8f0107c9, hrgn=0x39040798) returned 0
[0257.126] SelectClipRgn (hdc=0x8f0107c9, hrgn=0x4e04051e) returned 2
[0257.126] DeleteObject (ho=0x39040798) returned 1
[0257.126] DeleteObject (ho=0x4e04051e) returned 1
[0257.126] OffsetViewportOrgEx (in: hdc=0x8f0107c9, x=0, y=0, lppt=0x249c730 | out: lppt=0x249c730) returned 1
[0257.126] IsAppThemed () returned 0x1
[0257.126] GetThemeAppProperties () returned 0x3
[0257.126] GetThemeAppProperties () returned 0x3
[0257.126] DrawThemeBackground () returned 0x0
[0257.127] RestoreDC (hdc=0x8f0107c9, nSavedDC=-1) returned 1
[0257.127] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c9) returned 0x0
[0257.127] GdipCreateRegion (region=0x53dfec) returned 0x0
[0257.127] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.127] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0257.127] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.127] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0257.127] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0257.127] LocalFree (hMem=0x89eac0) returned 0x0
[0257.127] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0257.127] LocalFree (hMem=0x89ec80) returned 0x0
[0257.127] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.127] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0257.127] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0257.127] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0257.127] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.127] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0257.128] GetCurrentObject (hdc=0x8f0107c9, type=0x1) returned 0xb00017
[0257.128] GetCurrentObject (hdc=0x8f0107c9, type=0x2) returned 0x900010
[0257.128] GetCurrentObject (hdc=0x8f0107c9, type=0x7) returned 0x1e0507b9
[0257.128] GetCurrentObject (hdc=0x8f0107c9, type=0x6) returned 0x8a01c2
[0257.128] SaveDC (hdc=0x8f0107c9) returned 1
[0257.128] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f04051e
[0257.128] GetClipRgn (hdc=0x8f0107c9, hrgn=0x4f04051e) returned 0
[0257.128] SelectClipRgn (hdc=0x8f0107c9, hrgn=0x3a040798) returned 2
[0257.128] DeleteObject (ho=0x4f04051e) returned 1
[0257.128] DeleteObject (ho=0x3a040798) returned 1
[0257.128] OffsetViewportOrgEx (in: hdc=0x8f0107c9, x=0, y=0, lppt=0x249ca04 | out: lppt=0x249ca04) returned 1
[0257.128] IsAppThemed () returned 0x1
[0257.128] GetThemeAppProperties () returned 0x3
[0257.128] GetThemeAppProperties () returned 0x3
[0257.128] GetThemeBackgroundContentRect () returned 0x0
[0257.128] RestoreDC (hdc=0x8f0107c9, nSavedDC=-1) returned 1
[0257.128] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c9) returned 0x0
[0257.129] IsAppThemed () returned 0x1
[0257.129] GetThemeAppProperties () returned 0x3
[0257.129] GetThemeAppProperties () returned 0x3
[0257.129] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0257.129] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0257.129] GetCurrentObject (hdc=0x8f0107c9, type=0x1) returned 0xb00017
[0257.129] GetCurrentObject (hdc=0x8f0107c9, type=0x2) returned 0x900010
[0257.129] GetCurrentObject (hdc=0x8f0107c9, type=0x7) returned 0x1e0507b9
[0257.129] GetCurrentObject (hdc=0x8f0107c9, type=0x6) returned 0x8a01c2
[0257.129] SaveDC (hdc=0x8f0107c9) returned 1
[0257.129] GetTextAlign (hdc=0x8f0107c9) returned 0x0
[0257.129] GetTextColor (hdc=0x8f0107c9) returned 0x0
[0257.129] GetCurrentObject (hdc=0x8f0107c9, type=0x6) returned 0x8a01c2
[0257.129] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0257.129] SelectObject (hdc=0x8f0107c9, h=0x730a066d) returned 0x8a01c2
[0257.130] GetBkMode (hdc=0x8f0107c9) returned 2
[0257.130] SetBkMode (hdc=0x8f0107c9, mode=1) returned 2
[0257.130] DrawTextExW (in: hdc=0x8f0107c9, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x249cda4 | out: lpchText="OK", lprc=0x53df84) returned 13
[0257.130] DrawTextExW (in: hdc=0x8f0107c9, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x249cda4 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0257.130] RestoreDC (hdc=0x8f0107c9, nSavedDC=-1) returned 1
[0257.130] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c9) returned 0x0
[0257.131] GetFocus () returned 0xe01e2
[0257.131] IsAppThemed () returned 0x1
[0257.131] GetThemeAppProperties () returned 0x3
[0257.131] GetThemeAppProperties () returned 0x3
[0257.131] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0257.131] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x8f0107c9, x1=0, y1=0, rop=0xcc0020) returned 1
[0257.131] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c9) returned 0x0
[0257.131] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0257.131] SelectObject (hdc=0x8f0107c9, h=0x85000f) returned 0x1e0507b9
[0257.131] DeleteDC (hdc=0x8f0107c9) returned 1
[0257.131] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0257.131] EndPaint (hWnd=0xe0122, lpPaint=0x53e2e4) returned 1
[0257.132] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.132] IsWindowUnicode (hWnd=0x802ca) returned 1
[0257.132] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.132] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.132] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.133] BeginPaint (in: hWnd=0x802ca, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0257.133] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0257.133] CreateCompatibleDC (hdc=0xf0105ee) returned 0x910107c9
[0257.133] SelectObject (hdc=0x910107c9, h=0x1e0507b9) returned 0x85000f
[0257.133] GdipCreateFromHDC (hdc=0x910107c9, graphics=0x53e300) returned 0x0
[0257.133] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0257.133] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0257.133] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0257.133] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.133] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0257.133] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0257.133] LocalFree (hMem=0x89ec80) returned 0x0
[0257.133] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.133] GdipCreateRegion (region=0x53e348) returned 0x0
[0257.134] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.134] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0257.134] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0257.134] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb8b0dbd) returned 0x0
[0257.134] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.134] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0257.134] GetCurrentObject (hdc=0x910107c9, type=0x1) returned 0xb00017
[0257.134] GetCurrentObject (hdc=0x910107c9, type=0x2) returned 0x900010
[0257.134] GetCurrentObject (hdc=0x910107c9, type=0x7) returned 0x1e0507b9
[0257.134] GetCurrentObject (hdc=0x910107c9, type=0x6) returned 0x8a01c2
[0257.134] SaveDC (hdc=0x910107c9) returned 1
[0257.134] GetNearestColor (hdc=0x910107c9, color=0xf0f0f0) returned 0xf0f0f0
[0257.134] GetNearestColor (hdc=0x910107c9, color=0xa0a0a0) returned 0xa0a0a0
[0257.134] GetNearestColor (hdc=0x910107c9, color=0x696969) returned 0x696969
[0257.134] GetNearestColor (hdc=0x910107c9, color=0xa0a0a0) returned 0xa0a0a0
[0257.134] GetNearestColor (hdc=0x910107c9, color=0x0) returned 0x0
[0257.135] GetNearestColor (hdc=0x910107c9, color=0xffffff) returned 0xffffff
[0257.135] GetNearestColor (hdc=0x910107c9, color=0xe5e5e5) returned 0xe5e5e5
[0257.135] GetNearestColor (hdc=0x910107c9, color=0xd7d7d7) returned 0xd7d7d7
[0257.135] GetNearestColor (hdc=0x910107c9, color=0x0) returned 0x0
[0257.135] RestoreDC (hdc=0x910107c9, nSavedDC=-1) returned 1
[0257.135] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107c9) returned 0x0
[0257.135] IsAppThemed () returned 0x1
[0257.135] GetThemeAppProperties () returned 0x3
[0257.135] GetThemeAppProperties () returned 0x3
[0257.135] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0257.135] SendMessageW (hWnd=0x2a013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0257.135] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0257.135] IsAppThemed () returned 0x1
[0257.135] GetThemeAppProperties () returned 0x3
[0257.135] GetThemeAppProperties () returned 0x3
[0257.135] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x249d5b4 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0257.136] IsAppThemed () returned 0x1
[0257.136] GetThemeAppProperties () returned 0x3
[0257.136] GetThemeAppProperties () returned 0x3
[0257.136] IsAppThemed () returned 0x1
[0257.136] GetThemeAppProperties () returned 0x3
[0257.136] GetThemeAppProperties () returned 0x3
[0257.136] GetFocus () returned 0xe01e2
[0257.136] IsAppThemed () returned 0x1
[0257.136] GetThemeAppProperties () returned 0x3
[0257.136] GetThemeAppProperties () returned 0x3
[0257.136] IsAppThemed () returned 0x1
[0257.136] GetThemeAppProperties () returned 0x3
[0257.136] GetThemeAppProperties () returned 0x3
[0257.136] IsThemePartDefined () returned 0x1
[0257.136] IsAppThemed () returned 0x1
[0257.137] GetThemeAppProperties () returned 0x3
[0257.137] GetThemeAppProperties () returned 0x3
[0257.137] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0257.137] IsAppThemed () returned 0x1
[0257.137] GetThemeAppProperties () returned 0x3
[0257.137] GetThemeAppProperties () returned 0x3
[0257.137] IsAppThemed () returned 0x1
[0257.137] GetThemeAppProperties () returned 0x3
[0257.137] GetThemeAppProperties () returned 0x3
[0257.137] IsThemePartDefined () returned 0x1
[0257.137] GdipCreateRegion (region=0x53e070) returned 0x0
[0257.137] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.137] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0257.137] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.137] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0257.137] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.137] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0257.137] LocalFree (hMem=0x89eac0) returned 0x0
[0257.137] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.137] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0257.138] LocalFree (hMem=0x89eac0) returned 0x0
[0257.138] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.138] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0257.138] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0257.138] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0257.138] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.138] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0257.138] GetCurrentObject (hdc=0x910107c9, type=0x1) returned 0xb00017
[0257.138] GetCurrentObject (hdc=0x910107c9, type=0x2) returned 0x900010
[0257.138] GetCurrentObject (hdc=0x910107c9, type=0x7) returned 0x1e0507b9
[0257.138] GetCurrentObject (hdc=0x910107c9, type=0x6) returned 0x8a01c2
[0257.138] SaveDC (hdc=0x910107c9) returned 1
[0257.138] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b040798
[0257.138] GetClipRgn (hdc=0x910107c9, hrgn=0x3b040798) returned 0
[0257.138] SelectClipRgn (hdc=0x910107c9, hrgn=0x5304051e) returned 2
[0257.138] DeleteObject (ho=0x3b040798) returned 1
[0257.139] DeleteObject (ho=0x5304051e) returned 1
[0257.139] OffsetViewportOrgEx (in: hdc=0x910107c9, x=0, y=0, lppt=0x249dc64 | out: lppt=0x249dc64) returned 1
[0257.139] DrawThemeParentBackground () returned 0x0
[0257.139] GetWindowPlacement (in: hWnd=0x2a013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0257.139] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0257.139] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.139] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.139] GetSystemMetrics (nIndex=42) returned 0
[0257.139] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.139] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0257.139] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0257.139] GetCurrentObject (hdc=0x910107c9, type=0x1) returned 0xb00017
[0257.139] GetCurrentObject (hdc=0x910107c9, type=0x2) returned 0x900010
[0257.139] GetCurrentObject (hdc=0x910107c9, type=0x7) returned 0x1e0507b9
[0257.139] GetCurrentObject (hdc=0x910107c9, type=0x6) returned 0x8a01c2
[0257.140] SaveDC (hdc=0x910107c9) returned 2
[0257.140] GetNearestColor (hdc=0x910107c9, color=0xf0f0f0) returned 0xf0f0f0
[0257.140] CreateSolidBrush (color=0xf0f0f0) returned 0x6e10078d
[0257.140] FillRect (hDC=0x910107c9, lprc=0x53dad0, hbr=0x6e10078d) returned 1
[0257.140] DeleteObject (ho=0x6e10078d) returned 1
[0257.140] RestoreDC (hdc=0x910107c9, nSavedDC=-1) returned 1
[0257.140] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.140] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.140] GetSystemMetrics (nIndex=42) returned 0
[0257.140] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.140] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0257.140] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0257.140] GetCurrentObject (hdc=0x910107c9, type=0x1) returned 0xb00017
[0257.140] GetCurrentObject (hdc=0x910107c9, type=0x2) returned 0x900010
[0257.140] GetCurrentObject (hdc=0x910107c9, type=0x7) returned 0x1e0507b9
[0257.141] GetCurrentObject (hdc=0x910107c9, type=0x6) returned 0x8a01c2
[0257.141] SaveDC (hdc=0x910107c9) returned 2
[0257.141] GetNearestColor (hdc=0x910107c9, color=0xf0f0f0) returned 0xf0f0f0
[0257.141] CreateSolidBrush (color=0xf0f0f0) returned 0x6f10078d
[0257.141] FillRect (hDC=0x910107c9, lprc=0x53da70, hbr=0x6f10078d) returned 1
[0257.141] DeleteObject (ho=0x6f10078d) returned 1
[0257.141] RestoreDC (hdc=0x910107c9, nSavedDC=-1) returned 1
[0257.141] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.141] GetSystemMetrics (nIndex=42) returned 0
[0257.141] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0257.141] RestoreDC (hdc=0x910107c9, nSavedDC=-1) returned 1
[0257.142] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107c9) returned 0x0
[0257.142] IsAppThemed () returned 0x1
[0257.142] GetThemeAppProperties () returned 0x3
[0257.142] GetThemeAppProperties () returned 0x3
[0257.142] IsAppThemed () returned 0x1
[0257.142] GetThemeAppProperties () returned 0x3
[0257.142] GetThemeAppProperties () returned 0x3
[0257.142] IsThemePartDefined () returned 0x1
[0257.142] GdipCreateRegion (region=0x53dff4) returned 0x0
[0257.142] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.142] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0257.142] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.142] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0257.142] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0257.142] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0257.142] LocalFree (hMem=0x89ec80) returned 0x0
[0257.142] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.142] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0257.143] LocalFree (hMem=0x89eac0) returned 0x0
[0257.143] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.143] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0257.143] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0257.143] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0257.143] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.143] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0257.143] GetCurrentObject (hdc=0x910107c9, type=0x1) returned 0xb00017
[0257.143] GetCurrentObject (hdc=0x910107c9, type=0x2) returned 0x900010
[0257.143] GetCurrentObject (hdc=0x910107c9, type=0x7) returned 0x1e0507b9
[0257.143] GetCurrentObject (hdc=0x910107c9, type=0x6) returned 0x8a01c2
[0257.143] SaveDC (hdc=0x910107c9) returned 1
[0257.143] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5404051e
[0257.143] GetClipRgn (hdc=0x910107c9, hrgn=0x5404051e) returned 0
[0257.144] SelectClipRgn (hdc=0x910107c9, hrgn=0x3d040798) returned 2
[0257.144] DeleteObject (ho=0x5404051e) returned 1
[0257.144] DeleteObject (ho=0x3d040798) returned 1
[0257.144] OffsetViewportOrgEx (in: hdc=0x910107c9, x=0, y=0, lppt=0x249e4ec | out: lppt=0x249e4ec) returned 1
[0257.144] IsAppThemed () returned 0x1
[0257.144] GetThemeAppProperties () returned 0x3
[0257.144] GetThemeAppProperties () returned 0x3
[0257.144] DrawThemeBackground () returned 0x0
[0257.144] RestoreDC (hdc=0x910107c9, nSavedDC=-1) returned 1
[0257.144] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107c9) returned 0x0
[0257.144] GdipCreateRegion (region=0x53dff8) returned 0x0
[0257.144] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.144] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0257.144] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.144] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0257.144] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0257.145] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0257.145] LocalFree (hMem=0x89ee08) returned 0x0
[0257.145] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0257.145] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0257.145] LocalFree (hMem=0x89ec80) returned 0x0
[0257.145] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.145] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0257.145] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0257.145] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0257.145] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.145] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0257.145] GetCurrentObject (hdc=0x910107c9, type=0x1) returned 0xb00017
[0257.145] GetCurrentObject (hdc=0x910107c9, type=0x2) returned 0x900010
[0257.145] GetCurrentObject (hdc=0x910107c9, type=0x7) returned 0x1e0507b9
[0257.146] GetCurrentObject (hdc=0x910107c9, type=0x6) returned 0x8a01c2
[0257.146] SaveDC (hdc=0x910107c9) returned 1
[0257.146] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3e040798
[0257.146] GetClipRgn (hdc=0x910107c9, hrgn=0x3e040798) returned 0
[0257.146] SelectClipRgn (hdc=0x910107c9, hrgn=0x5504051e) returned 2
[0257.146] DeleteObject (ho=0x3e040798) returned 1
[0257.146] DeleteObject (ho=0x5504051e) returned 1
[0257.146] OffsetViewportOrgEx (in: hdc=0x910107c9, x=0, y=0, lppt=0x249e7c0 | out: lppt=0x249e7c0) returned 1
[0257.151] IsAppThemed () returned 0x1
[0257.151] GetThemeAppProperties () returned 0x3
[0257.151] GetThemeAppProperties () returned 0x3
[0257.151] GetThemeBackgroundContentRect () returned 0x0
[0257.151] RestoreDC (hdc=0x910107c9, nSavedDC=-1) returned 1
[0257.151] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107c9) returned 0x0
[0257.151] IsAppThemed () returned 0x1
[0257.151] GetThemeAppProperties () returned 0x3
[0257.151] GetThemeAppProperties () returned 0x3
[0257.151] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0257.151] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0257.151] GetCurrentObject (hdc=0x910107c9, type=0x1) returned 0xb00017
[0257.151] GetCurrentObject (hdc=0x910107c9, type=0x2) returned 0x900010
[0257.152] GetCurrentObject (hdc=0x910107c9, type=0x7) returned 0x1e0507b9
[0257.152] GetCurrentObject (hdc=0x910107c9, type=0x6) returned 0x8a01c2
[0257.152] SaveDC (hdc=0x910107c9) returned 1
[0257.152] GetTextAlign (hdc=0x910107c9) returned 0x0
[0257.152] GetTextColor (hdc=0x910107c9) returned 0x0
[0257.152] GetCurrentObject (hdc=0x910107c9, type=0x6) returned 0x8a01c2
[0257.152] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0257.152] SelectObject (hdc=0x910107c9, h=0x730a066d) returned 0x8a01c2
[0257.152] GetBkMode (hdc=0x910107c9) returned 2
[0257.152] SetBkMode (hdc=0x910107c9, mode=1) returned 2
[0257.153] DrawTextExW (in: hdc=0x910107c9, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x249eb60 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0257.153] DrawTextExW (in: hdc=0x910107c9, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x249eb60 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0257.153] RestoreDC (hdc=0x910107c9, nSavedDC=-1) returned 1
[0257.153] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107c9) returned 0x0
[0257.153] GetFocus () returned 0xe01e2
[0257.153] IsAppThemed () returned 0x1
[0257.154] GetThemeAppProperties () returned 0x3
[0257.154] GetThemeAppProperties () returned 0x3
[0257.154] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0257.154] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x910107c9, x1=0, y1=0, rop=0xcc0020) returned 1
[0257.154] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107c9) returned 0x0
[0257.154] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0257.154] SelectObject (hdc=0x910107c9, h=0x85000f) returned 0x1e0507b9
[0257.154] DeleteDC (hdc=0x910107c9) returned 1
[0257.154] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0257.154] EndPaint (hWnd=0x802ca, lpPaint=0x53e2e4) returned 1
[0257.154] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.155] IsWindowUnicode (hWnd=0x202c6) returned 1
[0257.155] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.155] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.155] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.155] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0257.155] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0257.155] CreateCompatibleDC (hdc=0x10105d6) returned 0x930107c9
[0257.155] SelectObject (hdc=0x930107c9, h=0x1e0507b9) returned 0x85000f
[0257.155] GdipCreateFromHDC (hdc=0x930107c9, graphics=0x53e300) returned 0x0
[0257.156] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0257.156] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0257.156] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0257.156] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.156] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0257.156] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.156] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0257.156] LocalFree (hMem=0x89eac0) returned 0x0
[0257.156] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.156] GdipCreateRegion (region=0x53e348) returned 0x0
[0257.156] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.156] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0257.156] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0257.156] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb890dbd) returned 0x0
[0257.157] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.157] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0257.157] GetCurrentObject (hdc=0x930107c9, type=0x1) returned 0xb00017
[0257.157] GetCurrentObject (hdc=0x930107c9, type=0x2) returned 0x900010
[0257.157] GetCurrentObject (hdc=0x930107c9, type=0x7) returned 0x1e0507b9
[0257.157] GetCurrentObject (hdc=0x930107c9, type=0x6) returned 0x8a01c2
[0257.157] SaveDC (hdc=0x930107c9) returned 1
[0257.157] GetNearestColor (hdc=0x930107c9, color=0xff) returned 0xff
[0257.157] GetNearestColor (hdc=0x930107c9, color=0x55) returned 0x55
[0257.157] GetNearestColor (hdc=0x930107c9, color=0x0) returned 0x0
[0257.157] GetNearestColor (hdc=0x930107c9, color=0x55) returned 0x55
[0257.157] GetNearestColor (hdc=0x930107c9, color=0x0) returned 0x0
[0257.158] GetNearestColor (hdc=0x930107c9, color=0x8080ff) returned 0x8080ff
[0257.158] GetNearestColor (hdc=0x930107c9, color=0x7373e5) returned 0x7373e5
[0257.158] GetNearestColor (hdc=0x930107c9, color=0xe5) returned 0xe5
[0257.158] GetNearestColor (hdc=0x930107c9, color=0x0) returned 0x0
[0257.158] RestoreDC (hdc=0x930107c9, nSavedDC=-1) returned 1
[0257.158] GdipReleaseDC (graphics=0x5d92c30, hdc=0x930107c9) returned 0x0
[0257.158] IsAppThemed () returned 0x1
[0257.158] GetThemeAppProperties () returned 0x3
[0257.158] GetThemeAppProperties () returned 0x3
[0257.158] IsAppThemed () returned 0x1
[0257.158] GetThemeAppProperties () returned 0x3
[0257.158] GetThemeAppProperties () returned 0x3
[0257.158] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0257.159] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x249f344 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0257.159] IsAppThemed () returned 0x1
[0257.159] GetThemeAppProperties () returned 0x3
[0257.159] GetThemeAppProperties () returned 0x3
[0257.159] IsAppThemed () returned 0x1
[0257.159] GetThemeAppProperties () returned 0x3
[0257.159] GetThemeAppProperties () returned 0x3
[0257.159] GetFocus () returned 0xe01e2
[0257.159] IsAppThemed () returned 0x1
[0257.159] GetThemeAppProperties () returned 0x3
[0257.159] GetThemeAppProperties () returned 0x3
[0257.159] IsAppThemed () returned 0x1
[0257.159] GetThemeAppProperties () returned 0x3
[0257.159] GetThemeAppProperties () returned 0x3
[0257.160] IsThemePartDefined () returned 0x1
[0257.160] IsAppThemed () returned 0x1
[0257.160] GetThemeAppProperties () returned 0x3
[0257.160] GetThemeAppProperties () returned 0x3
[0257.160] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0257.160] IsAppThemed () returned 0x1
[0257.160] GetThemeAppProperties () returned 0x3
[0257.160] GetThemeAppProperties () returned 0x3
[0257.160] IsAppThemed () returned 0x1
[0257.160] GetThemeAppProperties () returned 0x3
[0257.160] GetThemeAppProperties () returned 0x3
[0257.160] IsThemePartDefined () returned 0x1
[0257.160] GdipCreateRegion (region=0x53e070) returned 0x0
[0257.160] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.160] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0257.160] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.160] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0257.160] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.160] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0257.161] LocalFree (hMem=0x89eac0) returned 0x0
[0257.161] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0257.161] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0257.161] LocalFree (hMem=0x89ec80) returned 0x0
[0257.161] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.161] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0257.161] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0257.161] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0257.161] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.161] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0257.161] GetCurrentObject (hdc=0x930107c9, type=0x1) returned 0xb00017
[0257.161] GetCurrentObject (hdc=0x930107c9, type=0x2) returned 0x900010
[0257.161] GetCurrentObject (hdc=0x930107c9, type=0x7) returned 0x1e0507b9
[0257.161] GetCurrentObject (hdc=0x930107c9, type=0x6) returned 0x8a01c2
[0257.161] SaveDC (hdc=0x930107c9) returned 1
[0257.162] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5604051e
[0257.162] GetClipRgn (hdc=0x930107c9, hrgn=0x5604051e) returned 0
[0257.162] SelectClipRgn (hdc=0x930107c9, hrgn=0x42040798) returned 2
[0257.162] DeleteObject (ho=0x5604051e) returned 1
[0257.162] DeleteObject (ho=0x42040798) returned 1
[0257.162] OffsetViewportOrgEx (in: hdc=0x930107c9, x=0, y=0, lppt=0x249f9f4 | out: lppt=0x249f9f4) returned 1
[0257.162] DrawThemeParentBackground () returned 0x0
[0257.162] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0257.163] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0257.163] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0257.163] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0257.163] GetSystemMetrics (nIndex=42) returned 0
[0257.163] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0257.163] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0257.163] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0257.163] GetCurrentObject (hdc=0x930107c9, type=0x1) returned 0xb00017
[0257.163] GetCurrentObject (hdc=0x930107c9, type=0x2) returned 0x900010
[0257.163] GetCurrentObject (hdc=0x930107c9, type=0x7) returned 0x1e0507b9
[0257.163] GetCurrentObject (hdc=0x930107c9, type=0x6) returned 0x8a01c2
[0257.163] SaveDC (hdc=0x930107c9) returned 2
[0257.163] GetNearestColor (hdc=0x930107c9, color=0xff) returned 0xff
[0257.164] CreateSolidBrush (color=0xff) returned 0x7010078d
[0257.164] FillRect (hDC=0x930107c9, lprc=0x53dad0, hbr=0x7010078d) returned 1
[0257.164] DeleteObject (ho=0x7010078d) returned 1
[0257.164] RestoreDC (hdc=0x930107c9, nSavedDC=-1) returned 1
[0257.164] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0257.164] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0257.164] GetSystemMetrics (nIndex=42) returned 0
[0257.164] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0257.164] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0257.164] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0257.164] GetCurrentObject (hdc=0x930107c9, type=0x1) returned 0xb00017
[0257.164] GetCurrentObject (hdc=0x930107c9, type=0x2) returned 0x900010
[0257.164] GetCurrentObject (hdc=0x930107c9, type=0x7) returned 0x1e0507b9
[0257.164] GetCurrentObject (hdc=0x930107c9, type=0x6) returned 0x8a01c2
[0257.165] SaveDC (hdc=0x930107c9) returned 2
[0257.165] GetNearestColor (hdc=0x930107c9, color=0xff) returned 0xff
[0257.165] CreateSolidBrush (color=0xff) returned 0x7110078d
[0257.165] FillRect (hDC=0x930107c9, lprc=0x53da70, hbr=0x7110078d) returned 1
[0257.165] DeleteObject (ho=0x7110078d) returned 1
[0257.165] RestoreDC (hdc=0x930107c9, nSavedDC=-1) returned 1
[0257.165] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0257.165] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0257.165] GetSystemMetrics (nIndex=42) returned 0
[0257.165] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0257.165] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0257.165] RestoreDC (hdc=0x930107c9, nSavedDC=-1) returned 1
[0257.166] GdipReleaseDC (graphics=0x5d92c30, hdc=0x930107c9) returned 0x0
[0257.166] IsAppThemed () returned 0x1
[0257.166] GetThemeAppProperties () returned 0x3
[0257.166] GetThemeAppProperties () returned 0x3
[0257.166] IsAppThemed () returned 0x1
[0257.166] GetThemeAppProperties () returned 0x3
[0257.166] GetThemeAppProperties () returned 0x3
[0257.166] IsThemePartDefined () returned 0x1
[0257.166] GdipCreateRegion (region=0x53dff4) returned 0x0
[0257.166] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.166] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0257.166] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.166] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0257.166] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0257.166] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0257.166] LocalFree (hMem=0x89ec80) returned 0x0
[0257.166] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0257.166] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0257.167] LocalFree (hMem=0x89eee8) returned 0x0
[0257.167] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.167] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0257.167] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0257.167] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0257.167] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.167] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0257.167] GetCurrentObject (hdc=0x930107c9, type=0x1) returned 0xb00017
[0257.167] GetCurrentObject (hdc=0x930107c9, type=0x2) returned 0x900010
[0257.167] GetCurrentObject (hdc=0x930107c9, type=0x7) returned 0x1e0507b9
[0257.167] GetCurrentObject (hdc=0x930107c9, type=0x6) returned 0x8a01c2
[0257.167] SaveDC (hdc=0x930107c9) returned 1
[0257.167] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x43040798
[0257.167] GetClipRgn (hdc=0x930107c9, hrgn=0x43040798) returned 0
[0257.168] SelectClipRgn (hdc=0x930107c9, hrgn=0x5804051e) returned 2
[0257.168] DeleteObject (ho=0x43040798) returned 1
[0257.168] DeleteObject (ho=0x5804051e) returned 1
[0257.168] OffsetViewportOrgEx (in: hdc=0x930107c9, x=0, y=0, lppt=0x24a0258 | out: lppt=0x24a0258) returned 1
[0257.168] IsAppThemed () returned 0x1
[0257.168] GetThemeAppProperties () returned 0x3
[0257.168] GetThemeAppProperties () returned 0x3
[0257.168] DrawThemeBackground () returned 0x0
[0257.168] RestoreDC (hdc=0x930107c9, nSavedDC=-1) returned 1
[0257.168] GdipReleaseDC (graphics=0x5d92c30, hdc=0x930107c9) returned 0x0
[0257.168] GdipCreateRegion (region=0x53dff8) returned 0x0
[0257.168] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.168] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0257.169] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.169] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0257.169] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0257.169] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0257.169] LocalFree (hMem=0x89eee8) returned 0x0
[0257.169] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.169] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0257.169] LocalFree (hMem=0x89eac0) returned 0x0
[0257.169] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.169] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0257.169] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0257.169] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0257.169] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.170] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0257.170] GetCurrentObject (hdc=0x930107c9, type=0x1) returned 0xb00017
[0257.170] GetCurrentObject (hdc=0x930107c9, type=0x2) returned 0x900010
[0257.170] GetCurrentObject (hdc=0x930107c9, type=0x7) returned 0x1e0507b9
[0257.170] GetCurrentObject (hdc=0x930107c9, type=0x6) returned 0x8a01c2
[0257.170] SaveDC (hdc=0x930107c9) returned 1
[0257.170] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5904051e
[0257.170] GetClipRgn (hdc=0x930107c9, hrgn=0x5904051e) returned 0
[0257.170] SelectClipRgn (hdc=0x930107c9, hrgn=0x44040798) returned 2
[0257.170] DeleteObject (ho=0x5904051e) returned 1
[0257.170] DeleteObject (ho=0x44040798) returned 1
[0257.170] OffsetViewportOrgEx (in: hdc=0x930107c9, x=0, y=0, lppt=0x24a052c | out: lppt=0x24a052c) returned 1
[0257.170] IsAppThemed () returned 0x1
[0257.171] GetThemeAppProperties () returned 0x3
[0257.171] GetThemeAppProperties () returned 0x3
[0257.171] GetThemeBackgroundContentRect () returned 0x0
[0257.171] RestoreDC (hdc=0x930107c9, nSavedDC=-1) returned 1
[0257.171] GdipReleaseDC (graphics=0x5d92c30, hdc=0x930107c9) returned 0x0
[0257.171] IsAppThemed () returned 0x1
[0257.171] GetThemeAppProperties () returned 0x3
[0257.171] GetThemeAppProperties () returned 0x3
[0257.171] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0257.171] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0257.171] GetCurrentObject (hdc=0x930107c9, type=0x1) returned 0xb00017
[0257.171] GetCurrentObject (hdc=0x930107c9, type=0x2) returned 0x900010
[0257.171] GetCurrentObject (hdc=0x930107c9, type=0x7) returned 0x1e0507b9
[0257.171] GetCurrentObject (hdc=0x930107c9, type=0x6) returned 0x8a01c2
[0257.171] SaveDC (hdc=0x930107c9) returned 1
[0257.171] GetTextAlign (hdc=0x930107c9) returned 0x0
[0257.171] GetTextColor (hdc=0x930107c9) returned 0x0
[0257.172] GetCurrentObject (hdc=0x930107c9, type=0x6) returned 0x8a01c2
[0257.172] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0257.172] SelectObject (hdc=0x930107c9, h=0x450a0799) returned 0x8a01c2
[0257.172] GetBkMode (hdc=0x930107c9) returned 2
[0257.172] SetBkMode (hdc=0x930107c9, mode=1) returned 2
[0257.172] DrawTextExW (in: hdc=0x930107c9, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x24a08cc | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0257.172] DrawTextExW (in: hdc=0x930107c9, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x24a08cc | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0257.173] RestoreDC (hdc=0x930107c9, nSavedDC=-1) returned 1
[0257.173] GdipReleaseDC (graphics=0x5d92c30, hdc=0x930107c9) returned 0x0
[0257.173] GetFocus () returned 0xe01e2
[0257.173] IsAppThemed () returned 0x1
[0257.173] GetThemeAppProperties () returned 0x3
[0257.173] GetThemeAppProperties () returned 0x3
[0257.173] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0257.173] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x930107c9, x1=0, y1=0, rop=0xcc0020) returned 1
[0257.173] GdipReleaseDC (graphics=0x5d92c30, hdc=0x930107c9) returned 0x0
[0257.173] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0257.173] SelectObject (hdc=0x930107c9, h=0x85000f) returned 0x1e0507b9
[0257.174] DeleteDC (hdc=0x930107c9) returned 1
[0257.174] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0257.174] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0257.174] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0257.174] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0257.174] WaitMessage () returned 1
[0257.175] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.175] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.175] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.175] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.175] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.176] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0257.176] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0257.177] WaitMessage () returned 1
[0257.182] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.182] IsWindowUnicode (hWnd=0xe0122) returned 1
[0257.182] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.182] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.182] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.182] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.182] IsWindowUnicode (hWnd=0xe0122) returned 1
[0257.182] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.182] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.182] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.183] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x2a1, wParam=0x0, lParam=0x60028) returned 0x0
[0257.183] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0257.183] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0257.183] WaitMessage () returned 1
[0257.198] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0257.198] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0257.198] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0257.198] WaitMessage () returned 1
[0257.200] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0257.200] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0257.200] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0257.200] WaitMessage () returned 1
[0257.201] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0257.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0257.201] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0257.201] WaitMessage () returned 1
[0257.274] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.274] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x84, wParam=0x0, lParam=0x18f0369) returned 0x1
[0257.274] IsWindowUnicode (hWnd=0xe0122) returned 1
[0257.274] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.274] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x84, wParam=0x0, lParam=0x18f0369) returned 0x1
[0257.275] GetDlgItem (hDlg=0x2a013e, nIDDlgItem=0) returned 0x0
[0257.275] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x210, wParam=0x201, lParam=0x12014a) returned 0x0
[0257.275] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x21, wParam=0x2a013e, lParam=0x2010001) returned 0x1
[0257.275] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x21, wParam=0x2a013e, lParam=0x2010001) returned 0x1
[0257.275] SetCursor (hCursor=0x10003) returned 0x10003
[0257.275] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.275] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.275] GetKeyState (nVirtKey=1) returned -128
[0257.275] GetKeyState (nVirtKey=2) returned 0
[0257.275] GetKeyState (nVirtKey=4) returned 0
[0257.275] GetKeyState (nVirtKey=5) returned 0
[0257.275] GetKeyState (nVirtKey=6) returned 0
[0257.275] IsWindowVisible (hWnd=0xe0122) returned 1
[0257.275] IsWindowEnabled (hWnd=0xe0122) returned 1
[0257.275] SetFocus (hWnd=0xe0122) returned 0xe01e2
[0257.276] GetFocus () returned 0xe0122
[0257.276] IsChild (hWndParent=0x2a013e, hWnd=0xe0122) returned 1
[0257.276] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x8, wParam=0xe0122, lParam=0x0) returned 0x1
[0257.276] SendMessageW (hWnd=0xe01e2, Msg=0x2111, wParam=0x20001e2, lParam=0xe01e2) returned 0x0
[0257.277] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0257.279] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0257.279] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0257.280] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0257.280] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0257.280] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0257.282] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0257.282] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x7, wParam=0xe01e2, lParam=0x0) returned 0x0
[0257.282] GetStockObject (i=5) returned 0x900015
[0257.282] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0257.282] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0xd, wParam=0x3, lParam=0x89e738) returned 0x2
[0257.282] GetDlgItem (hDlg=0x2a013e, nIDDlgItem=917794) returned 0xe0122
[0257.282] SendMessageW (hWnd=0xe0122, Msg=0x202b, wParam=0xe0122, lParam=0x53de74) returned 0x0
[0257.283] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x202b, wParam=0xe0122, lParam=0x53de74) returned 0x0
[0257.283] InvalidateRect (hWnd=0xe0122, lpRect=0x0, bErase=0) returned 1
[0257.284] GetFocus () returned 0xe0122
[0257.284] GetFocus () returned 0xe0122
[0257.284] GetFocus () returned 0xe0122
[0257.284] GetKeyState (nVirtKey=1) returned -128
[0257.285] GetKeyState (nVirtKey=2) returned 0
[0257.285] GetKeyState (nVirtKey=4) returned 0
[0257.285] GetKeyState (nVirtKey=5) returned 0
[0257.285] GetKeyState (nVirtKey=6) returned 0
[0257.285] GetCapture () returned 0x0
[0257.285] SetCapture (hWnd=0xe0122) returned 0x0
[0257.285] GetKeyState (nVirtKey=1) returned -128
[0257.285] GetKeyState (nVirtKey=2) returned 0
[0257.285] GetKeyState (nVirtKey=4) returned 0
[0257.285] GetKeyState (nVirtKey=5) returned 0
[0257.285] GetKeyState (nVirtKey=6) returned 0
[0257.285] NotifyWinEvent (event=0x800a, hwnd=0xe0122, idObject=-4, idChild=0)
[0257.285] InvalidateRect (hWnd=0xe0122, lpRect=0x53e4c8, bErase=0) returned 1
[0257.285] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.285] IsWindowUnicode (hWnd=0xe0122) returned 1
[0257.285] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0257.286] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0257.286] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0257.286] MapWindowPoints (in: hWndFrom=0xe0122, hWndTo=0x0, lpPoints=0x24a0b40, cPoints=0x1 | out: lpPoints=0x24a0b40) returned 25756481
[0257.286] NotifyWinEvent (event=0x800a, hwnd=0xe0122, idObject=-4, idChild=0)
[0257.286] InvalidateRect (hWnd=0xe0122, lpRect=0x53e468, bErase=0) returned 1
[0257.286] UpdateWindow (hWnd=0xe0122) returned 1
[0257.286] BeginPaint (in: hWnd=0xe0122, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0257.286] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0257.286] CreateCompatibleDC (hdc=0x10105d6) returned 0xfa010794
[0257.286] SelectObject (hdc=0xfa010794, h=0x1e0507b9) returned 0x85000f
[0257.287] GdipCreateFromHDC (hdc=0xfa010794, graphics=0x53df98) returned 0x0
[0257.292] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0257.292] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0257.292] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0257.292] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.292] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0257.292] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.292] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0257.292] LocalFree (hMem=0x89eac0) returned 0x0
[0257.292] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.292] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0257.292] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.292] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0257.292] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0257.292] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb870dbd) returned 0x0
[0257.292] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.292] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0257.293] GetCurrentObject (hdc=0xfa010794, type=0x1) returned 0xb00017
[0257.293] GetCurrentObject (hdc=0xfa010794, type=0x2) returned 0x900010
[0257.293] GetCurrentObject (hdc=0xfa010794, type=0x7) returned 0x1e0507b9
[0257.293] GetCurrentObject (hdc=0xfa010794, type=0x6) returned 0x8a01c2
[0257.293] SaveDC (hdc=0xfa010794) returned 1
[0257.293] GetNearestColor (hdc=0xfa010794, color=0xf0f0f0) returned 0xf0f0f0
[0257.293] GetNearestColor (hdc=0xfa010794, color=0xa0a0a0) returned 0xa0a0a0
[0257.293] GetNearestColor (hdc=0xfa010794, color=0x696969) returned 0x696969
[0257.293] GetNearestColor (hdc=0xfa010794, color=0xa0a0a0) returned 0xa0a0a0
[0257.293] GetNearestColor (hdc=0xfa010794, color=0x0) returned 0x0
[0257.293] GetNearestColor (hdc=0xfa010794, color=0xffffff) returned 0xffffff
[0257.293] GetNearestColor (hdc=0xfa010794, color=0xe5e5e5) returned 0xe5e5e5
[0257.293] GetNearestColor (hdc=0xfa010794, color=0xd7d7d7) returned 0xd7d7d7
[0257.293] GetNearestColor (hdc=0xfa010794, color=0x0) returned 0x0
[0257.294] RestoreDC (hdc=0xfa010794, nSavedDC=-1) returned 1
[0257.294] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfa010794) returned 0x0
[0257.294] IsAppThemed () returned 0x1
[0257.294] GetThemeAppProperties () returned 0x3
[0257.294] GetThemeAppProperties () returned 0x3
[0257.294] IsAppThemed () returned 0x1
[0257.294] GetThemeAppProperties () returned 0x3
[0257.294] GetThemeAppProperties () returned 0x3
[0257.294] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0257.294] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x24a12b4 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0257.295] IsAppThemed () returned 0x1
[0257.295] GetThemeAppProperties () returned 0x3
[0257.295] GetThemeAppProperties () returned 0x3
[0257.295] IsAppThemed () returned 0x1
[0257.295] GetThemeAppProperties () returned 0x3
[0257.295] GetThemeAppProperties () returned 0x3
[0257.295] IsAppThemed () returned 0x1
[0257.295] GetThemeAppProperties () returned 0x3
[0257.295] GetThemeAppProperties () returned 0x3
[0257.295] IsAppThemed () returned 0x1
[0257.295] GetThemeAppProperties () returned 0x3
[0257.295] GetThemeAppProperties () returned 0x3
[0257.295] IsThemePartDefined () returned 0x1
[0257.295] IsAppThemed () returned 0x1
[0257.295] GetThemeAppProperties () returned 0x3
[0257.295] GetThemeAppProperties () returned 0x3
[0257.295] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0257.295] IsAppThemed () returned 0x1
[0257.295] GetThemeAppProperties () returned 0x3
[0257.296] GetThemeAppProperties () returned 0x3
[0257.296] IsAppThemed () returned 0x1
[0257.296] GetThemeAppProperties () returned 0x3
[0257.296] GetThemeAppProperties () returned 0x3
[0257.296] IsThemePartDefined () returned 0x1
[0257.296] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0257.296] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.296] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0257.296] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.296] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0257.296] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.296] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0257.296] LocalFree (hMem=0x89eac0) returned 0x0
[0257.296] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.296] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0257.296] LocalFree (hMem=0x89eac0) returned 0x0
[0257.297] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.297] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0257.297] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0257.297] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0257.297] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.297] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0257.297] GetCurrentObject (hdc=0xfa010794, type=0x1) returned 0xb00017
[0257.297] GetCurrentObject (hdc=0xfa010794, type=0x2) returned 0x900010
[0257.297] GetCurrentObject (hdc=0xfa010794, type=0x7) returned 0x1e0507b9
[0257.297] GetCurrentObject (hdc=0xfa010794, type=0x6) returned 0x8a01c2
[0257.297] SaveDC (hdc=0xfa010794) returned 1
[0257.297] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x45040798
[0257.297] GetClipRgn (hdc=0xfa010794, hrgn=0x45040798) returned 0
[0257.298] SelectClipRgn (hdc=0xfa010794, hrgn=0x5d04051e) returned 2
[0257.298] DeleteObject (ho=0x45040798) returned 1
[0257.298] DeleteObject (ho=0x5d04051e) returned 1
[0257.298] OffsetViewportOrgEx (in: hdc=0xfa010794, x=0, y=0, lppt=0x24a1964 | out: lppt=0x24a1964) returned 1
[0257.298] DrawThemeParentBackground () returned 0x0
[0257.298] GetWindowPlacement (in: hWnd=0x2a013e, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0257.298] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0257.298] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.298] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.298] GetSystemMetrics (nIndex=42) returned 0
[0257.298] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.298] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0257.298] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0257.299] GetCurrentObject (hdc=0xfa010794, type=0x1) returned 0xb00017
[0257.299] GetCurrentObject (hdc=0xfa010794, type=0x2) returned 0x900010
[0257.299] GetCurrentObject (hdc=0xfa010794, type=0x7) returned 0x1e0507b9
[0257.299] GetCurrentObject (hdc=0xfa010794, type=0x6) returned 0x8a01c2
[0257.299] SaveDC (hdc=0xfa010794) returned 2
[0257.299] GetNearestColor (hdc=0xfa010794, color=0xf0f0f0) returned 0xf0f0f0
[0257.299] CreateSolidBrush (color=0xf0f0f0) returned 0x7210078d
[0257.299] FillRect (hDC=0xfa010794, lprc=0x53d760, hbr=0x7210078d) returned 1
[0257.299] DeleteObject (ho=0x7210078d) returned 1
[0257.299] RestoreDC (hdc=0xfa010794, nSavedDC=-1) returned 1
[0257.299] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.299] GetSystemMetrics (nIndex=42) returned 0
[0257.299] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0257.300] GetClientRect (in: hWnd=0x2a013e, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0257.300] GetCurrentObject (hdc=0xfa010794, type=0x1) returned 0xb00017
[0257.300] GetCurrentObject (hdc=0xfa010794, type=0x2) returned 0x900010
[0257.300] GetCurrentObject (hdc=0xfa010794, type=0x7) returned 0x1e0507b9
[0257.300] GetCurrentObject (hdc=0xfa010794, type=0x6) returned 0x8a01c2
[0257.300] SaveDC (hdc=0xfa010794) returned 2
[0257.300] GetNearestColor (hdc=0xfa010794, color=0xf0f0f0) returned 0xf0f0f0
[0257.300] CreateSolidBrush (color=0xf0f0f0) returned 0x7310078d
[0257.300] FillRect (hDC=0xfa010794, lprc=0x53d700, hbr=0x7310078d) returned 1
[0257.300] DeleteObject (ho=0x7310078d) returned 1
[0257.300] RestoreDC (hdc=0xfa010794, nSavedDC=-1) returned 1
[0257.300] GetWindowTextLengthW (hWnd=0x2a013e) returned 10
[0257.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0257.300] GetSystemMetrics (nIndex=42) returned 0
[0257.300] GetWindowTextW (in: hWnd=0x2a013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0257.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0257.301] RestoreDC (hdc=0xfa010794, nSavedDC=-1) returned 1
[0257.301] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfa010794) returned 0x0
[0257.301] IsAppThemed () returned 0x1
[0257.301] GetThemeAppProperties () returned 0x3
[0257.301] GetThemeAppProperties () returned 0x3
[0257.301] IsAppThemed () returned 0x1
[0257.301] GetThemeAppProperties () returned 0x3
[0257.301] GetThemeAppProperties () returned 0x3
[0257.301] IsThemePartDefined () returned 0x1
[0257.301] GdipCreateRegion (region=0x53dc80) returned 0x0
[0257.301] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.301] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0257.301] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.301] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0257.301] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.301] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0257.302] LocalFree (hMem=0x89eac0) returned 0x0
[0257.302] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0257.302] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0257.302] LocalFree (hMem=0x89ee08) returned 0x0
[0257.302] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.302] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0257.302] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0257.302] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0257.302] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.302] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0257.302] GetCurrentObject (hdc=0xfa010794, type=0x1) returned 0xb00017
[0257.302] GetCurrentObject (hdc=0xfa010794, type=0x2) returned 0x900010
[0257.302] GetCurrentObject (hdc=0xfa010794, type=0x7) returned 0x1e0507b9
[0257.305] GetCurrentObject (hdc=0xfa010794, type=0x6) returned 0x8a01c2
[0257.305] SaveDC (hdc=0xfa010794) returned 1
[0257.305] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e04051e
[0257.305] GetClipRgn (hdc=0xfa010794, hrgn=0x5e04051e) returned 0
[0257.305] SelectClipRgn (hdc=0xfa010794, hrgn=0x47040798) returned 2
[0257.305] DeleteObject (ho=0x5e04051e) returned 1
[0257.305] DeleteObject (ho=0x47040798) returned 1
[0257.305] OffsetViewportOrgEx (in: hdc=0xfa010794, x=0, y=0, lppt=0x24a21ec | out: lppt=0x24a21ec) returned 1
[0257.305] IsAppThemed () returned 0x1
[0257.305] GetThemeAppProperties () returned 0x3
[0257.305] GetThemeAppProperties () returned 0x3
[0257.305] DrawThemeBackground () returned 0x0
[0257.306] RestoreDC (hdc=0xfa010794, nSavedDC=-1) returned 1
[0257.306] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfa010794) returned 0x0
[0257.306] GdipCreateRegion (region=0x53dc84) returned 0x0
[0257.306] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.306] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0257.306] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.306] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0257.306] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.306] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0257.306] LocalFree (hMem=0x89eac0) returned 0x0
[0257.306] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0257.306] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0257.306] LocalFree (hMem=0x89ec80) returned 0x0
[0257.306] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.307] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0257.307] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0257.307] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0257.307] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.307] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0257.307] GetCurrentObject (hdc=0xfa010794, type=0x1) returned 0xb00017
[0257.307] GetCurrentObject (hdc=0xfa010794, type=0x2) returned 0x900010
[0257.307] GetCurrentObject (hdc=0xfa010794, type=0x7) returned 0x1e0507b9
[0257.307] GetCurrentObject (hdc=0xfa010794, type=0x6) returned 0x8a01c2
[0257.307] SaveDC (hdc=0xfa010794) returned 1
[0257.307] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x48040798
[0257.307] GetClipRgn (hdc=0xfa010794, hrgn=0x48040798) returned 0
[0257.307] SelectClipRgn (hdc=0xfa010794, hrgn=0x5f04051e) returned 2
[0257.307] DeleteObject (ho=0x48040798) returned 1
[0257.307] DeleteObject (ho=0x5f04051e) returned 1
[0257.308] OffsetViewportOrgEx (in: hdc=0xfa010794, x=0, y=0, lppt=0x24a24c0 | out: lppt=0x24a24c0) returned 1
[0257.308] IsAppThemed () returned 0x1
[0257.308] GetThemeAppProperties () returned 0x3
[0257.308] GetThemeAppProperties () returned 0x3
[0257.308] GetThemeBackgroundContentRect () returned 0x0
[0257.308] RestoreDC (hdc=0xfa010794, nSavedDC=-1) returned 1
[0257.308] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfa010794) returned 0x0
[0257.308] IsAppThemed () returned 0x1
[0257.308] GetThemeAppProperties () returned 0x3
[0257.308] GetThemeAppProperties () returned 0x3
[0257.308] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0257.308] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0257.308] GetCurrentObject (hdc=0xfa010794, type=0x1) returned 0xb00017
[0257.308] GetCurrentObject (hdc=0xfa010794, type=0x2) returned 0x900010
[0257.308] GetCurrentObject (hdc=0xfa010794, type=0x7) returned 0x1e0507b9
[0257.308] GetCurrentObject (hdc=0xfa010794, type=0x6) returned 0x8a01c2
[0257.308] SaveDC (hdc=0xfa010794) returned 1
[0257.309] GetTextAlign (hdc=0xfa010794) returned 0x0
[0257.309] GetTextColor (hdc=0xfa010794) returned 0x0
[0257.309] GetCurrentObject (hdc=0xfa010794, type=0x6) returned 0x8a01c2
[0257.309] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0257.309] SelectObject (hdc=0xfa010794, h=0x730a066d) returned 0x8a01c2
[0257.309] GetBkMode (hdc=0xfa010794) returned 2
[0257.309] SetBkMode (hdc=0xfa010794, mode=1) returned 2
[0257.309] DrawTextExW (in: hdc=0xfa010794, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x24a2860 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0257.309] DrawTextExW (in: hdc=0xfa010794, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x24a2860 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0257.310] RestoreDC (hdc=0xfa010794, nSavedDC=-1) returned 1
[0257.310] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfa010794) returned 0x0
[0257.310] GetFocus () returned 0xe0122
[0257.310] IsAppThemed () returned 0x1
[0257.310] GetThemeAppProperties () returned 0x3
[0257.310] GetThemeAppProperties () returned 0x3
[0257.310] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0257.310] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0xfa010794, x1=0, y1=0, rop=0xcc0020) returned 1
[0257.310] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfa010794) returned 0x0
[0257.310] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0257.310] SelectObject (hdc=0xfa010794, h=0x85000f) returned 0x1e0507b9
[0257.310] DeleteDC (hdc=0xfa010794) returned 1
[0257.311] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0257.311] EndPaint (hWnd=0xe0122, lpPaint=0x53df7c) returned 1
[0257.311] MapWindowPoints (in: hWndFrom=0xe0122, hWndTo=0x0, lpPoints=0x24a295c, cPoints=0x1 | out: lpPoints=0x24a295c) returned 25756481
[0257.311] WindowFromPoint (Point=0x369) returned 0xe0122
[0257.311] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x84, wParam=0x0, lParam=0x18f0369) returned 0x1
[0257.311] NotifyWinEvent (event=0x800a, hwnd=0xe0122, idObject=-4, idChild=0)
[0257.311] NotifyWinEvent (event=0x800c, hwnd=0xe0122, idObject=-4, idChild=0)
[0257.311] GetWindowTextLengthW (hWnd=0xe01e2) returned 0
[0257.311] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0257.311] GetSystemMetrics (nIndex=42) returned 0
[0257.311] GetWindowTextW (in: hWnd=0xe01e2, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0257.311] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0257.311] SendMessageW (hWnd=0x2a013e, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0257.312] GetCapture () returned 0xe0122
[0257.312] ReleaseCapture () returned 1
[0257.312] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0257.312] PeekMessageW (lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0)
[0257.312] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x84, wParam=0x0, lParam=0x18f0369) returned 0x1
[0257.313] IsWindow (hWnd=0x70036) returned 1
[0257.313] EnableWindow (hWnd=0x70036, bEnable=1)
[0257.314] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0257.314] IsWindow (hWnd=0x70036) returned 1
[0257.314] SetActiveWindow (hWnd=0x70036)
[0257.314] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x86, wParam=0x0, lParam=0x70036)
[0257.316] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0257.316] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0257.316] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0257.332] IsChild (hWndParent=0x2a013e, hWnd=0x202c6) returned 0
[0257.332] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe0122, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0257.332] GetCapture () returned 0x0
[0257.332] InvalidateRect (hWnd=0xe0122, lpRect=0x0, bErase=0) returned 1
[0257.345] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0257.345] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0257.345] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0257.352] IsChild (hWndParent=0x2a013e, hWnd=0x202c6) returned 0
[0257.352] ShowWindow (hWnd=0x2a013e, nCmdShow=0)
[0257.353] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0257.358] GetWindowLongW (hWnd=0x2a013e, nIndex=-20) returned 327937
[0257.358] DestroyWindow (hWnd=0x2a013e)
[0257.358] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0257.359] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2a013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0257.359] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xe01e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0257.360] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1000ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0257.361] GetWindowTextLengthW (hWnd=0xb004e)
[0257.361] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0257.361] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xb004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0257.392] GetProcessWindowStation () returned 0x13c
[0257.392] GetActiveWindow () returned 0x70036
[0257.392] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0257.392] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0257.392] GetCurrentThreadId () returned 0x11d0
[0257.393] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf555e, lParam=0x0) returned 1
[0257.393] IsWindowVisible (hWnd=0x70036) returned 1
[0257.393] IsWindowEnabled (hWnd=0x70036) returned 1
[0257.393] IsWindowVisible (hWnd=0x602b6) returned 0
[0257.393] IsWindowVisible (hWnd=0x901f8) returned 0
[0257.393] IsWindowVisible (hWnd=0x202d0) returned 0
[0257.393] IsWindowVisible (hWnd=0x202d4) returned 0
[0257.393] GetActiveWindow () returned 0x70036
[0257.393] GetFocus () returned 0x202c6
[0257.393] IsWindow (hWnd=0x70036) returned 1
[0257.394] EnableWindow (hWnd=0x70036, bEnable=0)
[0257.394] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0257.394] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0257.396] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0257.425] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x10105d6
[0257.425] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0257.425] CreateCompatibleDC (hdc=0x10105d6) returned 0xbd01079e
[0257.425] SelectObject (hdc=0xbd01079e, h=0x1e0507b9) returned 0x85000f
[0257.425] GdipCreateFromHDC (hdc=0xbd01079e, graphics=0x53e108) returned 0x0
[0257.425] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0257.425] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0257.425] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0257.425] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.426] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0257.426] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0257.426] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0257.426] LocalFree (hMem=0x89ee08) returned 0x0
[0257.426] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.426] GdipCreateRegion (region=0x53e150) returned 0x0
[0257.426] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.426] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0257.426] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0257.426] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb850dbd) returned 0x0
[0257.426] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.426] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0257.427] GetCurrentObject (hdc=0xbd01079e, type=0x1) returned 0xb00017
[0257.427] GetCurrentObject (hdc=0xbd01079e, type=0x2) returned 0x900010
[0257.427] GetCurrentObject (hdc=0xbd01079e, type=0x7) returned 0x1e0507b9
[0257.427] GetCurrentObject (hdc=0xbd01079e, type=0x6) returned 0x8a01c2
[0257.427] SaveDC (hdc=0xbd01079e) returned 1
[0257.427] GetNearestColor (hdc=0xbd01079e, color=0xff) returned 0xff
[0257.427] GetNearestColor (hdc=0xbd01079e, color=0x55) returned 0x55
[0257.427] GetNearestColor (hdc=0xbd01079e, color=0x0) returned 0x0
[0257.435] GetNearestColor (hdc=0xbd01079e, color=0x55) returned 0x55
[0257.435] GetNearestColor (hdc=0xbd01079e, color=0x0) returned 0x0
[0257.435] GetNearestColor (hdc=0xbd01079e, color=0x8080ff) returned 0x8080ff
[0257.435] GetNearestColor (hdc=0xbd01079e, color=0x7373e5) returned 0x7373e5
[0257.435] GetNearestColor (hdc=0xbd01079e, color=0xe5) returned 0xe5
[0257.435] GetNearestColor (hdc=0xbd01079e, color=0x0) returned 0x0
[0257.435] RestoreDC (hdc=0xbd01079e, nSavedDC=-1) returned 1
[0257.435] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbd01079e) returned 0x0
[0257.435] IsAppThemed () returned 0x1
[0257.435] GetThemeAppProperties () returned 0x3
[0257.435] GetThemeAppProperties () returned 0x3
[0257.435] IsAppThemed () returned 0x1
[0257.435] GetThemeAppProperties () returned 0x3
[0257.435] GetThemeAppProperties () returned 0x3
[0257.436] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0257.436] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x24a3c54 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0257.436] IsAppThemed () returned 0x1
[0257.436] GetThemeAppProperties () returned 0x3
[0257.436] GetThemeAppProperties () returned 0x3
[0257.436] IsAppThemed () returned 0x1
[0257.436] GetThemeAppProperties () returned 0x3
[0257.436] GetThemeAppProperties () returned 0x3
[0257.436] GetFocus () returned 0x902ca
[0257.436] IsAppThemed () returned 0x1
[0257.436] GetThemeAppProperties () returned 0x3
[0257.436] GetThemeAppProperties () returned 0x3
[0257.436] IsAppThemed () returned 0x1
[0257.437] GetThemeAppProperties () returned 0x3
[0257.437] GetThemeAppProperties () returned 0x3
[0257.437] IsThemePartDefined () returned 0x1
[0257.437] IsAppThemed () returned 0x1
[0257.437] GetThemeAppProperties () returned 0x3
[0257.437] GetThemeAppProperties () returned 0x3
[0257.437] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0257.437] IsAppThemed () returned 0x1
[0257.437] GetThemeAppProperties () returned 0x3
[0257.437] GetThemeAppProperties () returned 0x3
[0257.437] IsAppThemed () returned 0x1
[0257.437] GetThemeAppProperties () returned 0x3
[0257.437] GetThemeAppProperties () returned 0x3
[0257.437] IsThemePartDefined () returned 0x1
[0257.437] GdipCreateRegion (region=0x53de78) returned 0x0
[0257.437] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.437] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0257.437] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.437] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0257.437] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0257.437] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0257.438] LocalFree (hMem=0x89eac0) returned 0x0
[0257.438] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0257.438] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0257.438] LocalFree (hMem=0x89ee08) returned 0x0
[0257.438] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.438] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0257.438] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0257.438] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0257.438] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.438] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0257.438] GetCurrentObject (hdc=0xbd01079e, type=0x1) returned 0xb00017
[0257.438] GetCurrentObject (hdc=0xbd01079e, type=0x2) returned 0x900010
[0257.438] GetCurrentObject (hdc=0xbd01079e, type=0x7) returned 0x1e0507b9
[0257.438] GetCurrentObject (hdc=0xbd01079e, type=0x6) returned 0x8a01c2
[0257.438] SaveDC (hdc=0xbd01079e) returned 1
[0257.439] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6004051e
[0257.439] GetClipRgn (hdc=0xbd01079e, hrgn=0x6004051e) returned 0
[0257.439] SelectClipRgn (hdc=0xbd01079e, hrgn=0x4e040798) returned 2
[0257.439] DeleteObject (ho=0x6004051e) returned 1
[0257.439] DeleteObject (ho=0x4e040798) returned 1
[0257.439] OffsetViewportOrgEx (in: hdc=0xbd01079e, x=0, y=0, lppt=0x24a4304 | out: lppt=0x24a4304) returned 1
[0257.439] DrawThemeParentBackground () returned 0x0
[0257.439] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0257.439] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0257.439] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0257.439] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0257.439] GetSystemMetrics (nIndex=42) returned 0
[0257.439] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0257.439] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0257.440] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0257.440] GetCurrentObject (hdc=0xbd01079e, type=0x1) returned 0xb00017
[0257.440] GetCurrentObject (hdc=0xbd01079e, type=0x2) returned 0x900010
[0257.440] GetCurrentObject (hdc=0xbd01079e, type=0x7) returned 0x1e0507b9
[0257.440] GetCurrentObject (hdc=0xbd01079e, type=0x6) returned 0x8a01c2
[0257.440] SaveDC (hdc=0xbd01079e) returned 2
[0257.440] GetNearestColor (hdc=0xbd01079e, color=0xff) returned 0xff
[0257.440] CreateSolidBrush (color=0xff) returned 0x7410078d
[0257.440] FillRect (hDC=0xbd01079e, lprc=0x53d8d8, hbr=0x7410078d) returned 1
[0257.440] DeleteObject (ho=0x7410078d) returned 1
[0257.440] RestoreDC (hdc=0xbd01079e, nSavedDC=-1) returned 1
[0257.440] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0257.440] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0257.440] GetSystemMetrics (nIndex=42) returned 0
[0257.441] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0257.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0257.441] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0257.441] GetCurrentObject (hdc=0xbd01079e, type=0x1) returned 0xb00017
[0257.441] GetCurrentObject (hdc=0xbd01079e, type=0x2) returned 0x900010
[0257.441] GetCurrentObject (hdc=0xbd01079e, type=0x7) returned 0x1e0507b9
[0257.441] GetCurrentObject (hdc=0xbd01079e, type=0x6) returned 0x8a01c2
[0257.441] SaveDC (hdc=0xbd01079e) returned 2
[0257.441] GetNearestColor (hdc=0xbd01079e, color=0xff) returned 0xff
[0257.441] CreateSolidBrush (color=0xff) returned 0x7510078d
[0257.441] FillRect (hDC=0xbd01079e, lprc=0x53d878, hbr=0x7510078d) returned 1
[0257.441] DeleteObject (ho=0x7510078d) returned 1
[0257.441] RestoreDC (hdc=0xbd01079e, nSavedDC=-1) returned 1
[0257.441] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0257.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0257.442] GetSystemMetrics (nIndex=42) returned 0
[0257.442] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0257.442] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0257.442] RestoreDC (hdc=0xbd01079e, nSavedDC=-1) returned 1
[0257.442] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbd01079e) returned 0x0
[0257.442] IsAppThemed () returned 0x1
[0257.442] GetThemeAppProperties () returned 0x3
[0257.442] GetThemeAppProperties () returned 0x3
[0257.442] IsAppThemed () returned 0x1
[0257.443] GetThemeAppProperties () returned 0x3
[0257.443] GetThemeAppProperties () returned 0x3
[0257.443] IsThemePartDefined () returned 0x1
[0257.443] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0257.443] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.443] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0257.443] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.443] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0257.444] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0257.444] LocalFree (hMem=0x89eac0) returned 0x0
[0257.444] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0257.444] LocalFree (hMem=0x89ee08) returned 0x0
[0257.444] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.444] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0257.444] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0257.444] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0257.444] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.444] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0257.444] GetCurrentObject (hdc=0xbd01079e, type=0x1) returned 0xb00017
[0257.444] GetCurrentObject (hdc=0xbd01079e, type=0x2) returned 0x900010
[0257.444] GetCurrentObject (hdc=0xbd01079e, type=0x7) returned 0x1e0507b9
[0257.444] GetCurrentObject (hdc=0xbd01079e, type=0x6) returned 0x8a01c2
[0257.444] SaveDC (hdc=0xbd01079e) returned 1
[0257.445] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f040798
[0257.445] GetClipRgn (hdc=0xbd01079e, hrgn=0x4f040798) returned 0
[0257.445] SelectClipRgn (hdc=0xbd01079e, hrgn=0x6204051e) returned 2
[0257.445] DeleteObject (ho=0x4f040798) returned 1
[0257.445] DeleteObject (ho=0x6204051e) returned 1
[0257.445] OffsetViewportOrgEx (in: hdc=0xbd01079e, x=0, y=0, lppt=0x24a4b68 | out: lppt=0x24a4b68) returned 1
[0257.445] IsAppThemed () returned 0x1
[0257.445] GetThemeAppProperties () returned 0x3
[0257.445] GetThemeAppProperties () returned 0x3
[0257.445] DrawThemeBackground () returned 0x0
[0257.445] RestoreDC (hdc=0xbd01079e, nSavedDC=-1) returned 1
[0257.445] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbd01079e) returned 0x0
[0257.445] GdipCreateRegion (region=0x53de00) returned 0x0
[0257.445] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.445] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0257.445] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.446] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0257.446] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0257.446] LocalFree (hMem=0x89ec80) returned 0x0
[0257.446] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0257.446] LocalFree (hMem=0x89eac0) returned 0x0
[0257.446] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.446] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0257.446] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0257.446] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0257.446] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.446] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0257.446] GetCurrentObject (hdc=0xbd01079e, type=0x1) returned 0xb00017
[0257.446] GetCurrentObject (hdc=0xbd01079e, type=0x2) returned 0x900010
[0257.446] GetCurrentObject (hdc=0xbd01079e, type=0x7) returned 0x1e0507b9
[0257.446] GetCurrentObject (hdc=0xbd01079e, type=0x6) returned 0x8a01c2
[0257.446] SaveDC (hdc=0xbd01079e) returned 1
[0257.446] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6304051e
[0257.447] GetClipRgn (hdc=0xbd01079e, hrgn=0x6304051e) returned 0
[0257.447] SelectClipRgn (hdc=0xbd01079e, hrgn=0x50040798) returned 2
[0257.447] DeleteObject (ho=0x6304051e) returned 1
[0257.447] DeleteObject (ho=0x50040798) returned 1
[0257.447] OffsetViewportOrgEx (in: hdc=0xbd01079e, x=0, y=0, lppt=0x24a4e3c | out: lppt=0x24a4e3c) returned 1
[0257.447] IsAppThemed () returned 0x1
[0257.447] GetThemeAppProperties () returned 0x3
[0257.447] GetThemeAppProperties () returned 0x3
[0257.447] GetThemeBackgroundContentRect () returned 0x0
[0257.447] RestoreDC (hdc=0xbd01079e, nSavedDC=-1) returned 1
[0257.447] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbd01079e) returned 0x0
[0257.447] IsAppThemed () returned 0x1
[0257.447] GetThemeAppProperties () returned 0x3
[0257.447] GetThemeAppProperties () returned 0x3
[0257.447] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0257.447] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0257.447] GetCurrentObject (hdc=0xbd01079e, type=0x1) returned 0xb00017
[0257.447] GetCurrentObject (hdc=0xbd01079e, type=0x2) returned 0x900010
[0257.448] GetCurrentObject (hdc=0xbd01079e, type=0x7) returned 0x1e0507b9
[0257.448] GetCurrentObject (hdc=0xbd01079e, type=0x6) returned 0x8a01c2
[0257.448] SaveDC (hdc=0xbd01079e) returned 1
[0257.448] GetTextAlign (hdc=0xbd01079e) returned 0x0
[0257.448] GetTextColor (hdc=0xbd01079e) returned 0x0
[0257.448] GetCurrentObject (hdc=0xbd01079e, type=0x6) returned 0x8a01c2
[0257.448] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0257.448] SelectObject (hdc=0xbd01079e, h=0x450a0799) returned 0x8a01c2
[0257.448] GetBkMode (hdc=0xbd01079e) returned 2
[0257.448] SetBkMode (hdc=0xbd01079e, mode=1) returned 2
[0257.448] DrawTextExW (in: hdc=0xbd01079e, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x24a51dc | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0257.449] DrawTextExW (in: hdc=0xbd01079e, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x24a51dc | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0257.449] RestoreDC (hdc=0xbd01079e, nSavedDC=-1) returned 1
[0257.449] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbd01079e) returned 0x0
[0257.449] GetFocus () returned 0x902ca
[0257.449] IsAppThemed () returned 0x1
[0257.449] GetThemeAppProperties () returned 0x3
[0257.449] GetThemeAppProperties () returned 0x3
[0257.449] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0257.449] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xbd01079e, x1=0, y1=0, rop=0xcc0020) returned 1
[0257.449] GdipReleaseDC (graphics=0x5d92c30, hdc=0xbd01079e) returned 0x0
[0257.450] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0257.450] SelectObject (hdc=0xbd01079e, h=0x85000f) returned 0x1e0507b9
[0257.450] DeleteDC (hdc=0xbd01079e) returned 1
[0257.450] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0257.450] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0257.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0257.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0257.782] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x2b013e) returned 0x1
[0257.785] GetFocus () returned 0x2b013e
[0257.785] GetAncestor (hwnd=0x2b013e, gaFlags=0x1) returned 0x10010
[0257.785] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0257.785] SetFocus (hWnd=0x202c6) returned 0x0
[0257.796] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0257.798] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0257.798] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0257.799] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0257.799] GetFocus () returned 0x70036
[0257.799] SetFocus (hWnd=0x202c6) returned 0x0
[0257.805] IsWindow (hWnd=0x70036) returned 1
[0257.805] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0257.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0257.806] IsWindow (hWnd=0x70036) returned 1
[0257.806] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0257.806] IsWindow (hWnd=0x202c6) returned 1
[0257.806] SetFocus (hWnd=0x202c6) returned 0x70036
[0257.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0257.807] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0257.808] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0257.810] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0257.810] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0257.810] GetStockObject (i=5) returned 0x900015
[0257.810] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0257.811] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8cc880) returned 0x7
[0257.811] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0257.811] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0257.811] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0257.811] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0257.812] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0257.812] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0257.813] GetFocus () returned 0x202c6
[0257.813] GetCapture () returned 0x0
[0257.813] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.813] IsWindowUnicode (hWnd=0x202c6) returned 1
[0257.813] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.813] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.813] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.814] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.814] IsWindowUnicode (hWnd=0x202c6) returned 1
[0257.814] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.815] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.815] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.815] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0257.815] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0257.815] CreateCompatibleDC (hdc=0x8b010786) returned 0x84010527
[0257.815] SelectObject (hdc=0x84010527, h=0x1e0507b9) returned 0x85000f
[0257.815] GdipCreateFromHDC (hdc=0x84010527, graphics=0x53e958) returned 0x0
[0257.815] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0257.815] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0257.815] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0257.815] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.816] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0257.816] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0257.816] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0257.816] LocalFree (hMem=0x89ea88) returned 0x0
[0257.816] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.816] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0257.816] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.816] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0257.816] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0257.816] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb830dbd) returned 0x0
[0257.816] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.816] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0257.816] GetCurrentObject (hdc=0x84010527, type=0x1) returned 0xb00017
[0257.816] GetCurrentObject (hdc=0x84010527, type=0x2) returned 0x900010
[0257.816] GetCurrentObject (hdc=0x84010527, type=0x7) returned 0x1e0507b9
[0257.816] GetCurrentObject (hdc=0x84010527, type=0x6) returned 0x8a01c2
[0257.817] SaveDC (hdc=0x84010527) returned 1
[0257.817] GetNearestColor (hdc=0x84010527, color=0xff) returned 0xff
[0257.817] GetNearestColor (hdc=0x84010527, color=0x55) returned 0x55
[0257.817] GetNearestColor (hdc=0x84010527, color=0x0) returned 0x0
[0257.817] GetNearestColor (hdc=0x84010527, color=0x55) returned 0x55
[0257.817] GetNearestColor (hdc=0x84010527, color=0x0) returned 0x0
[0257.817] GetNearestColor (hdc=0x84010527, color=0x8080ff) returned 0x8080ff
[0257.817] GetNearestColor (hdc=0x84010527, color=0x7373e5) returned 0x7373e5
[0257.817] GetNearestColor (hdc=0x84010527, color=0xe5) returned 0xe5
[0257.817] GetNearestColor (hdc=0x84010527, color=0x0) returned 0x0
[0257.817] RestoreDC (hdc=0x84010527, nSavedDC=-1) returned 1
[0257.817] GdipReleaseDC (graphics=0x5d92c30, hdc=0x84010527) returned 0x0
[0257.817] IsAppThemed () returned 0x1
[0257.818] GetThemeAppProperties () returned 0x3
[0257.818] GetThemeAppProperties () returned 0x3
[0257.818] IsAppThemed () returned 0x1
[0257.818] GetThemeAppProperties () returned 0x3
[0257.818] GetThemeAppProperties () returned 0x3
[0257.818] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x24a5a38 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0257.832] IsAppThemed () returned 0x1
[0257.832] GetThemeAppProperties () returned 0x3
[0257.832] GetThemeAppProperties () returned 0x3
[0257.832] IsAppThemed () returned 0x1
[0257.832] GetThemeAppProperties () returned 0x3
[0257.832] GetThemeAppProperties () returned 0x3
[0257.832] GetFocus () returned 0x202c6
[0257.832] IsAppThemed () returned 0x1
[0257.832] GetThemeAppProperties () returned 0x3
[0257.832] GetThemeAppProperties () returned 0x3
[0257.832] IsAppThemed () returned 0x1
[0257.833] GetThemeAppProperties () returned 0x3
[0257.833] GetThemeAppProperties () returned 0x3
[0257.833] IsThemePartDefined () returned 0x1
[0257.833] IsAppThemed () returned 0x1
[0257.833] GetThemeAppProperties () returned 0x3
[0257.833] GetThemeAppProperties () returned 0x3
[0257.833] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0257.833] IsAppThemed () returned 0x1
[0257.833] GetThemeAppProperties () returned 0x3
[0257.833] GetThemeAppProperties () returned 0x3
[0257.833] IsAppThemed () returned 0x1
[0257.833] GetThemeAppProperties () returned 0x3
[0257.833] GetThemeAppProperties () returned 0x3
[0257.833] IsThemePartDefined () returned 0x1
[0257.833] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0257.833] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.834] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0257.834] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.834] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0257.834] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0257.834] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0257.834] LocalFree (hMem=0x89ea88) returned 0x0
[0257.834] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0257.834] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0257.834] LocalFree (hMem=0x89ec80) returned 0x0
[0257.835] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.835] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0257.835] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0257.835] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0257.835] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.835] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0257.835] GetCurrentObject (hdc=0x84010527, type=0x1) returned 0xb00017
[0257.835] GetCurrentObject (hdc=0x84010527, type=0x2) returned 0x900010
[0257.835] GetCurrentObject (hdc=0x84010527, type=0x7) returned 0x1e0507b9
[0257.835] GetCurrentObject (hdc=0x84010527, type=0x6) returned 0x8a01c2
[0257.835] SaveDC (hdc=0x84010527) returned 1
[0257.835] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7004051e
[0257.836] GetClipRgn (hdc=0x84010527, hrgn=0x7004051e) returned 0
[0257.836] SelectClipRgn (hdc=0x84010527, hrgn=0x5904053e) returned 2
[0257.836] DeleteObject (ho=0x7004051e) returned 1
[0257.836] DeleteObject (ho=0x5904053e) returned 1
[0257.836] OffsetViewportOrgEx (in: hdc=0x84010527, x=0, y=0, lppt=0x24a60e8 | out: lppt=0x24a60e8) returned 1
[0257.836] DrawThemeParentBackground () returned 0x0
[0257.836] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0257.836] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0257.836] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0257.836] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0257.837] GetSystemMetrics (nIndex=42) returned 0
[0257.837] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0257.837] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0257.837] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0257.837] GetCurrentObject (hdc=0x84010527, type=0x1) returned 0xb00017
[0257.837] GetCurrentObject (hdc=0x84010527, type=0x2) returned 0x900010
[0257.837] GetCurrentObject (hdc=0x84010527, type=0x7) returned 0x1e0507b9
[0257.837] GetCurrentObject (hdc=0x84010527, type=0x6) returned 0x8a01c2
[0257.837] SaveDC (hdc=0x84010527) returned 2
[0257.837] GetNearestColor (hdc=0x84010527, color=0xff) returned 0xff
[0257.837] CreateSolidBrush (color=0xff) returned 0x7710078d
[0257.837] FillRect (hDC=0x84010527, lprc=0x53e128, hbr=0x7710078d) returned 1
[0257.838] DeleteObject (ho=0x7710078d) returned 1
[0257.838] RestoreDC (hdc=0x84010527, nSavedDC=-1) returned 1
[0257.838] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0257.838] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0257.838] GetSystemMetrics (nIndex=42) returned 0
[0257.838] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0257.838] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0257.838] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0257.838] GetCurrentObject (hdc=0x84010527, type=0x1) returned 0xb00017
[0257.838] GetCurrentObject (hdc=0x84010527, type=0x2) returned 0x900010
[0257.838] GetCurrentObject (hdc=0x84010527, type=0x7) returned 0x1e0507b9
[0257.838] GetCurrentObject (hdc=0x84010527, type=0x6) returned 0x8a01c2
[0257.839] SaveDC (hdc=0x84010527) returned 2
[0257.839] GetNearestColor (hdc=0x84010527, color=0xff) returned 0xff
[0257.839] CreateSolidBrush (color=0xff) returned 0x7810078d
[0257.839] FillRect (hDC=0x84010527, lprc=0x53e0c8, hbr=0x7810078d) returned 1
[0257.839] DeleteObject (ho=0x7810078d) returned 1
[0257.839] RestoreDC (hdc=0x84010527, nSavedDC=-1) returned 1
[0257.839] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0257.839] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0257.839] GetSystemMetrics (nIndex=42) returned 0
[0257.839] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0257.839] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0257.840] RestoreDC (hdc=0x84010527, nSavedDC=-1) returned 1
[0257.840] GdipReleaseDC (graphics=0x5d92c30, hdc=0x84010527) returned 0x0
[0257.840] IsAppThemed () returned 0x1
[0257.840] GetThemeAppProperties () returned 0x3
[0257.840] GetThemeAppProperties () returned 0x3
[0257.840] IsAppThemed () returned 0x1
[0257.840] GetThemeAppProperties () returned 0x3
[0257.840] GetThemeAppProperties () returned 0x3
[0257.840] IsThemePartDefined () returned 0x1
[0257.840] GdipCreateRegion (region=0x53e64c) returned 0x0
[0257.840] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.840] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0257.841] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0257.841] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0257.841] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0257.841] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0257.841] LocalFree (hMem=0x89ee40) returned 0x0
[0257.841] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0257.841] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0257.841] LocalFree (hMem=0x89ee08) returned 0x0
[0257.841] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0257.841] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0257.841] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0257.841] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0257.841] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.842] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0257.842] GetCurrentObject (hdc=0x84010527, type=0x1) returned 0xb00017
[0257.842] GetCurrentObject (hdc=0x84010527, type=0x2) returned 0x900010
[0257.842] GetCurrentObject (hdc=0x84010527, type=0x7) returned 0x1e0507b9
[0257.842] GetCurrentObject (hdc=0x84010527, type=0x6) returned 0x8a01c2
[0257.842] SaveDC (hdc=0x84010527) returned 1
[0257.842] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a04053e
[0257.842] GetClipRgn (hdc=0x84010527, hrgn=0x5a04053e) returned 0
[0257.842] SelectClipRgn (hdc=0x84010527, hrgn=0x7204051e) returned 2
[0257.842] DeleteObject (ho=0x5a04053e) returned 1
[0257.842] DeleteObject (ho=0x7204051e) returned 1
[0257.842] OffsetViewportOrgEx (in: hdc=0x84010527, x=0, y=0, lppt=0x24a694c | out: lppt=0x24a694c) returned 1
[0257.842] IsAppThemed () returned 0x1
[0257.843] GetThemeAppProperties () returned 0x3
[0257.843] GetThemeAppProperties () returned 0x3
[0257.843] DrawThemeBackground () returned 0x0
[0257.843] RestoreDC (hdc=0x84010527, nSavedDC=-1) returned 1
[0257.843] GdipReleaseDC (graphics=0x5d92c30, hdc=0x84010527) returned 0x0
[0257.843] GdipCreateRegion (region=0x53e650) returned 0x0
[0257.843] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0257.843] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0257.843] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0257.843] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0257.844] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0257.844] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0257.844] LocalFree (hMem=0x89ee08) returned 0x0
[0257.844] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0257.844] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0257.844] LocalFree (hMem=0x89ea88) returned 0x0
[0257.844] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0257.844] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0257.844] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0257.844] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0257.844] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0257.844] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0257.845] GetCurrentObject (hdc=0x84010527, type=0x1) returned 0xb00017
[0257.845] GetCurrentObject (hdc=0x84010527, type=0x2) returned 0x900010
[0257.845] GetCurrentObject (hdc=0x84010527, type=0x7) returned 0x1e0507b9
[0257.845] GetCurrentObject (hdc=0x84010527, type=0x6) returned 0x8a01c2
[0257.845] SaveDC (hdc=0x84010527) returned 1
[0257.845] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7304051e
[0257.845] GetClipRgn (hdc=0x84010527, hrgn=0x7304051e) returned 0
[0257.845] SelectClipRgn (hdc=0x84010527, hrgn=0x5b04053e) returned 2
[0257.845] DeleteObject (ho=0x7304051e) returned 1
[0257.845] DeleteObject (ho=0x5b04053e) returned 1
[0257.845] OffsetViewportOrgEx (in: hdc=0x84010527, x=0, y=0, lppt=0x24a6c20 | out: lppt=0x24a6c20) returned 1
[0257.846] IsAppThemed () returned 0x1
[0257.846] GetThemeAppProperties () returned 0x3
[0257.846] GetThemeAppProperties () returned 0x3
[0257.846] GetThemeBackgroundContentRect () returned 0x0
[0257.846] RestoreDC (hdc=0x84010527, nSavedDC=-1) returned 1
[0257.846] GdipReleaseDC (graphics=0x5d92c30, hdc=0x84010527) returned 0x0
[0257.846] IsAppThemed () returned 0x1
[0257.846] GetThemeAppProperties () returned 0x3
[0257.846] GetThemeAppProperties () returned 0x3
[0257.846] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0257.846] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0257.846] GetCurrentObject (hdc=0x84010527, type=0x1) returned 0xb00017
[0257.846] GetCurrentObject (hdc=0x84010527, type=0x2) returned 0x900010
[0257.846] GetCurrentObject (hdc=0x84010527, type=0x7) returned 0x1e0507b9
[0257.847] GetCurrentObject (hdc=0x84010527, type=0x6) returned 0x8a01c2
[0257.847] SaveDC (hdc=0x84010527) returned 1
[0257.847] GetTextAlign (hdc=0x84010527) returned 0x0
[0257.847] GetTextColor (hdc=0x84010527) returned 0x0
[0257.847] GetCurrentObject (hdc=0x84010527, type=0x6) returned 0x8a01c2
[0257.847] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0257.847] SelectObject (hdc=0x84010527, h=0x450a0799) returned 0x8a01c2
[0257.847] GetBkMode (hdc=0x84010527) returned 2
[0257.848] SetBkMode (hdc=0x84010527, mode=1) returned 2
[0257.848] DrawTextExW (in: hdc=0x84010527, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x24a6fc0 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0257.848] DrawTextExW (in: hdc=0x84010527, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x24a6fc0 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0257.848] RestoreDC (hdc=0x84010527, nSavedDC=-1) returned 1
[0257.848] GdipReleaseDC (graphics=0x5d92c30, hdc=0x84010527) returned 0x0
[0257.849] GetFocus () returned 0x202c6
[0257.849] IsAppThemed () returned 0x1
[0257.849] GetThemeAppProperties () returned 0x3
[0257.849] GetThemeAppProperties () returned 0x3
[0257.849] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0257.849] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x84010527, x1=0, y1=0, rop=0xcc0020) returned 1
[0257.849] GdipReleaseDC (graphics=0x5d92c30, hdc=0x84010527) returned 0x0
[0257.855] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0257.855] SelectObject (hdc=0x84010527, h=0x85000f) returned 0x1e0507b9
[0257.855] DeleteDC (hdc=0x84010527) returned 1
[0257.855] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0257.855] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0257.856] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.856] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.856] WaitMessage () returned 1
[0257.859] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.859] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.859] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.859] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.859] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.860] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.861] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.861] WaitMessage () returned 1
[0257.915] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.915] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.915] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.915] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.915] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.916] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.916] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.916] WaitMessage () returned 1
[0257.917] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.917] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.917] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.917] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.918] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.918] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.918] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.919] WaitMessage () returned 1
[0257.919] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.919] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.919] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.920] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.920] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.921] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.921] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.921] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.921] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.921] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.922] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.922] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.922] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.922] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.922] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.922] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.922] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.922] WaitMessage () returned 1
[0257.923] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.923] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.923] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.923] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.923] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.925] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.925] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.925] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.925] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.925] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.925] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.925] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.925] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.925] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.925] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.925] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.926] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.926] WaitMessage () returned 1
[0257.926] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.926] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.926] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.926] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.926] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.931] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.932] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.932] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.932] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.932] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.932] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.932] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.932] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.932] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.932] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.932] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.933] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.933] WaitMessage () returned 1
[0257.933] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.933] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.933] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.933] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.933] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.935] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.935] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.935] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.935] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.935] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.935] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.936] IsWindowUnicode (hWnd=0x102dc) returned 1
[0257.936] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0257.936] TranslateMessage (lpMsg=0x53eef8) returned 0
[0257.936] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0257.936] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.936] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0257.936] WaitMessage () returned 1
[0258.131] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0258.131] IsWindowUnicode (hWnd=0x202d0) returned 1
[0258.131] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0258.131] TranslateMessage (lpMsg=0x53eef8) returned 0
[0258.131] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0258.132] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0258.132] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0258.132] WaitMessage () returned 1
[0258.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0258.460] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0258.460] TranslateMessage (lpMsg=0x53eef8) returned 0
[0258.460] DispatchMessageA (lpMsg=0x53eef8) returned 0x7eb4
[0258.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0258.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0258.460] WaitMessage () returned 1
[0259.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.460] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.460] TranslateMessage (lpMsg=0x53eef8) returned 0
[0259.460] DispatchMessageA (lpMsg=0x53eef8) returned 0x7eb3
[0259.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0259.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0259.460] WaitMessage () returned 1
[0259.743] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.743] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a30234) returned 0x1
[0259.744] IsWindowUnicode (hWnd=0x202c6) returned 1
[0259.744] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.744] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a30234) returned 0x1
[0259.744] SetCursor (hCursor=0x10003) returned 0x10003
[0259.744] TranslateMessage (lpMsg=0x53eef8) returned 0
[0259.744] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0259.744] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0259.744] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0259.744] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0259.744] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0259.745] GetKeyState (nVirtKey=1) returned 1
[0259.745] GetKeyState (nVirtKey=2) returned 0
[0259.745] GetKeyState (nVirtKey=4) returned 0
[0259.745] GetKeyState (nVirtKey=5) returned 0
[0259.745] GetKeyState (nVirtKey=6) returned 0
[0259.745] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.745] IsWindowUnicode (hWnd=0x202c6) returned 1
[0259.745] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.745] TranslateMessage (lpMsg=0x53eef8) returned 0
[0259.745] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0259.745] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0259.745] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0259.745] CreateCompatibleDC (hdc=0x8b010786) returned 0xd00107aa
[0259.746] SelectObject (hdc=0xd00107aa, h=0x1e0507b9) returned 0x85000f
[0259.746] GdipCreateFromHDC (hdc=0xd00107aa, graphics=0x53e958) returned 0x0
[0259.746] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0259.746] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0259.746] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0259.746] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0259.746] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0259.746] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0259.746] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0259.746] LocalFree (hMem=0x89ea88) returned 0x0
[0259.746] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0259.746] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0259.746] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0259.747] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0259.747] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0259.747] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb810dbd) returned 0x0
[0259.747] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0259.747] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0259.747] GetCurrentObject (hdc=0xd00107aa, type=0x1) returned 0xb00017
[0259.747] GetCurrentObject (hdc=0xd00107aa, type=0x2) returned 0x900010
[0259.747] GetCurrentObject (hdc=0xd00107aa, type=0x7) returned 0x1e0507b9
[0259.747] GetCurrentObject (hdc=0xd00107aa, type=0x6) returned 0x8a01c2
[0259.747] SaveDC (hdc=0xd00107aa) returned 1
[0259.747] GetNearestColor (hdc=0xd00107aa, color=0xff) returned 0xff
[0259.747] GetNearestColor (hdc=0xd00107aa, color=0x55) returned 0x55
[0259.747] GetNearestColor (hdc=0xd00107aa, color=0x0) returned 0x0
[0259.748] GetNearestColor (hdc=0xd00107aa, color=0x55) returned 0x55
[0259.748] GetNearestColor (hdc=0xd00107aa, color=0x0) returned 0x0
[0259.748] GetNearestColor (hdc=0xd00107aa, color=0x8080ff) returned 0x8080ff
[0259.748] GetNearestColor (hdc=0xd00107aa, color=0x7373e5) returned 0x7373e5
[0259.748] GetNearestColor (hdc=0xd00107aa, color=0xe5) returned 0xe5
[0259.748] GetNearestColor (hdc=0xd00107aa, color=0x0) returned 0x0
[0259.748] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0259.748] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107aa) returned 0x0
[0259.748] IsAppThemed () returned 0x1
[0259.748] GetThemeAppProperties () returned 0x3
[0259.748] GetThemeAppProperties () returned 0x3
[0259.748] IsAppThemed () returned 0x1
[0259.748] GetThemeAppProperties () returned 0x3
[0259.748] GetThemeAppProperties () returned 0x3
[0259.749] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x24a7954 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0259.749] IsAppThemed () returned 0x1
[0259.749] GetThemeAppProperties () returned 0x3
[0259.749] GetThemeAppProperties () returned 0x3
[0259.749] IsAppThemed () returned 0x1
[0259.749] GetThemeAppProperties () returned 0x3
[0259.749] GetThemeAppProperties () returned 0x3
[0259.749] IsAppThemed () returned 0x1
[0259.749] GetThemeAppProperties () returned 0x3
[0259.749] GetThemeAppProperties () returned 0x3
[0259.749] IsAppThemed () returned 0x1
[0259.749] GetThemeAppProperties () returned 0x3
[0259.749] GetThemeAppProperties () returned 0x3
[0259.749] IsThemePartDefined () returned 0x1
[0259.749] IsAppThemed () returned 0x1
[0259.750] GetThemeAppProperties () returned 0x3
[0259.750] GetThemeAppProperties () returned 0x3
[0259.750] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0259.750] IsAppThemed () returned 0x1
[0259.750] GetThemeAppProperties () returned 0x3
[0259.750] GetThemeAppProperties () returned 0x3
[0259.750] IsAppThemed () returned 0x1
[0259.750] GetThemeAppProperties () returned 0x3
[0259.750] GetThemeAppProperties () returned 0x3
[0259.750] IsThemePartDefined () returned 0x1
[0259.750] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0259.750] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0259.750] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0259.750] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0259.750] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0259.750] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0259.750] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0259.750] LocalFree (hMem=0x89ea88) returned 0x0
[0259.751] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0259.751] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0259.751] LocalFree (hMem=0x89eee8) returned 0x0
[0259.751] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0259.751] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0259.751] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0259.751] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0259.751] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0259.751] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0259.751] GetCurrentObject (hdc=0xd00107aa, type=0x1) returned 0xb00017
[0259.751] GetCurrentObject (hdc=0xd00107aa, type=0x2) returned 0x900010
[0259.751] GetCurrentObject (hdc=0xd00107aa, type=0x7) returned 0x1e0507b9
[0259.751] GetCurrentObject (hdc=0xd00107aa, type=0x6) returned 0x8a01c2
[0259.751] SaveDC (hdc=0xd00107aa) returned 1
[0259.751] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5c04053e
[0259.752] GetClipRgn (hdc=0xd00107aa, hrgn=0x5c04053e) returned 0
[0259.752] SelectClipRgn (hdc=0xd00107aa, hrgn=0x7704051e) returned 2
[0259.752] DeleteObject (ho=0x5c04053e) returned 1
[0259.752] DeleteObject (ho=0x7704051e) returned 1
[0259.752] OffsetViewportOrgEx (in: hdc=0xd00107aa, x=0, y=0, lppt=0x24a8004 | out: lppt=0x24a8004) returned 1
[0259.752] DrawThemeParentBackground () returned 0x0
[0259.752] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0259.752] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0259.752] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0259.752] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0259.752] GetSystemMetrics (nIndex=42) returned 0
[0259.752] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0259.752] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0259.753] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0259.753] GetCurrentObject (hdc=0xd00107aa, type=0x1) returned 0xb00017
[0259.753] GetCurrentObject (hdc=0xd00107aa, type=0x2) returned 0x900010
[0259.753] GetCurrentObject (hdc=0xd00107aa, type=0x7) returned 0x1e0507b9
[0259.753] GetCurrentObject (hdc=0xd00107aa, type=0x6) returned 0x8a01c2
[0259.753] SaveDC (hdc=0xd00107aa) returned 2
[0259.753] GetNearestColor (hdc=0xd00107aa, color=0xff) returned 0xff
[0259.753] CreateSolidBrush (color=0xff) returned 0x7910078d
[0259.753] FillRect (hDC=0xd00107aa, lprc=0x53e120, hbr=0x7910078d) returned 1
[0259.753] DeleteObject (ho=0x7910078d) returned 1
[0259.753] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0259.753] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0259.753] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0259.754] GetSystemMetrics (nIndex=42) returned 0
[0259.754] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0259.754] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0259.754] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0259.754] GetCurrentObject (hdc=0xd00107aa, type=0x1) returned 0xb00017
[0259.754] GetCurrentObject (hdc=0xd00107aa, type=0x2) returned 0x900010
[0259.754] GetCurrentObject (hdc=0xd00107aa, type=0x7) returned 0x1e0507b9
[0259.754] GetCurrentObject (hdc=0xd00107aa, type=0x6) returned 0x8a01c2
[0259.754] SaveDC (hdc=0xd00107aa) returned 2
[0259.754] GetNearestColor (hdc=0xd00107aa, color=0xff) returned 0xff
[0259.754] CreateSolidBrush (color=0xff) returned 0x7a10078d
[0259.754] FillRect (hDC=0xd00107aa, lprc=0x53e0c0, hbr=0x7a10078d) returned 1
[0259.754] DeleteObject (ho=0x7a10078d) returned 1
[0259.754] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0259.754] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0259.755] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0259.755] GetSystemMetrics (nIndex=42) returned 0
[0259.755] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0259.755] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0259.755] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0259.755] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107aa) returned 0x0
[0259.755] IsAppThemed () returned 0x1
[0259.755] GetThemeAppProperties () returned 0x3
[0259.755] GetThemeAppProperties () returned 0x3
[0259.755] IsAppThemed () returned 0x1
[0259.755] GetThemeAppProperties () returned 0x3
[0259.755] GetThemeAppProperties () returned 0x3
[0259.755] IsThemePartDefined () returned 0x1
[0259.755] GdipCreateRegion (region=0x53e640) returned 0x0
[0259.757] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0259.757] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0259.757] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0259.757] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0259.757] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0259.757] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0259.757] LocalFree (hMem=0x89ea88) returned 0x0
[0259.757] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0259.757] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0259.757] LocalFree (hMem=0x89ea88) returned 0x0
[0259.757] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0259.757] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0259.757] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0259.758] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0259.758] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0259.758] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0259.758] GetCurrentObject (hdc=0xd00107aa, type=0x1) returned 0xb00017
[0259.758] GetCurrentObject (hdc=0xd00107aa, type=0x2) returned 0x900010
[0259.758] GetCurrentObject (hdc=0xd00107aa, type=0x7) returned 0x1e0507b9
[0259.758] GetCurrentObject (hdc=0xd00107aa, type=0x6) returned 0x8a01c2
[0259.758] SaveDC (hdc=0xd00107aa) returned 1
[0259.758] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7804051e
[0259.758] GetClipRgn (hdc=0xd00107aa, hrgn=0x7804051e) returned 0
[0259.758] SelectClipRgn (hdc=0xd00107aa, hrgn=0x5e04053e) returned 2
[0259.758] DeleteObject (ho=0x7804051e) returned 1
[0259.758] DeleteObject (ho=0x5e04053e) returned 1
[0259.758] OffsetViewportOrgEx (in: hdc=0xd00107aa, x=0, y=0, lppt=0x24a8868 | out: lppt=0x24a8868) returned 1
[0259.758] IsAppThemed () returned 0x1
[0259.759] GetThemeAppProperties () returned 0x3
[0259.759] GetThemeAppProperties () returned 0x3
[0259.759] DrawThemeBackground () returned 0x0
[0259.759] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0259.759] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107aa) returned 0x0
[0259.759] GdipCreateRegion (region=0x53e644) returned 0x0
[0259.759] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0259.759] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0259.759] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0259.759] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0259.759] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0259.759] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0259.759] LocalFree (hMem=0x89ec80) returned 0x0
[0259.759] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0259.759] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0259.759] LocalFree (hMem=0x89ea88) returned 0x0
[0259.760] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0259.760] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0259.760] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0259.760] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0259.760] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0259.760] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0259.760] GetCurrentObject (hdc=0xd00107aa, type=0x1) returned 0xb00017
[0259.760] GetCurrentObject (hdc=0xd00107aa, type=0x2) returned 0x900010
[0259.760] GetCurrentObject (hdc=0xd00107aa, type=0x7) returned 0x1e0507b9
[0259.760] GetCurrentObject (hdc=0xd00107aa, type=0x6) returned 0x8a01c2
[0259.760] SaveDC (hdc=0xd00107aa) returned 1
[0259.760] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f04053e
[0259.760] GetClipRgn (hdc=0xd00107aa, hrgn=0x5f04053e) returned 0
[0259.760] SelectClipRgn (hdc=0xd00107aa, hrgn=0x7904051e) returned 2
[0259.760] DeleteObject (ho=0x5f04053e) returned 1
[0259.761] DeleteObject (ho=0x7904051e) returned 1
[0259.761] OffsetViewportOrgEx (in: hdc=0xd00107aa, x=0, y=0, lppt=0x24a8b3c | out: lppt=0x24a8b3c) returned 1
[0259.761] IsAppThemed () returned 0x1
[0259.761] GetThemeAppProperties () returned 0x3
[0259.761] GetThemeAppProperties () returned 0x3
[0259.761] GetThemeBackgroundContentRect () returned 0x0
[0259.761] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0259.761] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107aa) returned 0x0
[0259.761] IsAppThemed () returned 0x1
[0259.761] GetThemeAppProperties () returned 0x3
[0259.761] GetThemeAppProperties () returned 0x3
[0259.761] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0259.761] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0259.761] GetCurrentObject (hdc=0xd00107aa, type=0x1) returned 0xb00017
[0259.761] GetCurrentObject (hdc=0xd00107aa, type=0x2) returned 0x900010
[0259.761] GetCurrentObject (hdc=0xd00107aa, type=0x7) returned 0x1e0507b9
[0259.761] GetCurrentObject (hdc=0xd00107aa, type=0x6) returned 0x8a01c2
[0259.761] SaveDC (hdc=0xd00107aa) returned 1
[0259.762] GetTextAlign (hdc=0xd00107aa) returned 0x0
[0259.762] GetTextColor (hdc=0xd00107aa) returned 0x0
[0259.762] GetCurrentObject (hdc=0xd00107aa, type=0x6) returned 0x8a01c2
[0259.762] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0259.762] SelectObject (hdc=0xd00107aa, h=0x450a0799) returned 0x8a01c2
[0259.762] GetBkMode (hdc=0xd00107aa) returned 2
[0259.762] SetBkMode (hdc=0xd00107aa, mode=1) returned 2
[0259.762] DrawTextExW (in: hdc=0xd00107aa, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x24a8edc | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0259.762] DrawTextExW (in: hdc=0xd00107aa, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x24a8edc | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0259.763] RestoreDC (hdc=0xd00107aa, nSavedDC=-1) returned 1
[0259.763] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107aa) returned 0x0
[0259.763] GetFocus () returned 0x202c6
[0259.763] IsAppThemed () returned 0x1
[0259.763] GetThemeAppProperties () returned 0x3
[0259.763] GetThemeAppProperties () returned 0x3
[0259.763] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0259.763] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xd00107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0259.764] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd00107aa) returned 0x0
[0259.764] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0259.764] SelectObject (hdc=0xd00107aa, h=0x85000f) returned 0x1e0507b9
[0259.764] DeleteDC (hdc=0xd00107aa) returned 1
[0259.764] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0259.764] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0259.764] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0259.764] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0259.764] WaitMessage () returned 1
[0259.850] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.850] IsWindowUnicode (hWnd=0x202c6) returned 1
[0259.850] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.850] TranslateMessage (lpMsg=0x53eef8) returned 0
[0259.850] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0259.850] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.850] IsWindowUnicode (hWnd=0x202c6) returned 1
[0259.850] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.850] TranslateMessage (lpMsg=0x53eef8) returned 0
[0259.850] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0259.851] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x1b0044) returned 0x0
[0259.851] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0259.851] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0259.851] WaitMessage () returned 1
[0259.974] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.974] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a30234) returned 0x1
[0259.974] IsWindowUnicode (hWnd=0x202c6) returned 1
[0259.974] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.974] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a30234) returned 0x1
[0259.975] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0259.975] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13601de) returned 0x0
[0259.975] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0259.975] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0259.975] SetCursor (hCursor=0x10003) returned 0x10003
[0259.975] TranslateMessage (lpMsg=0x53eef8) returned 0
[0259.975] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0259.975] GetKeyState (nVirtKey=1) returned -128
[0259.975] GetKeyState (nVirtKey=2) returned 0
[0259.975] GetKeyState (nVirtKey=4) returned 0
[0259.975] GetKeyState (nVirtKey=5) returned 0
[0259.975] GetKeyState (nVirtKey=6) returned 0
[0259.975] IsWindowVisible (hWnd=0x202c6) returned 1
[0259.975] IsWindowEnabled (hWnd=0x202c6) returned 1
[0259.975] SetFocus (hWnd=0x202c6) returned 0x202c6
[0259.975] GetFocus () returned 0x202c6
[0259.976] GetFocus () returned 0x202c6
[0259.976] GetFocus () returned 0x202c6
[0259.976] GetKeyState (nVirtKey=1) returned -128
[0259.976] GetKeyState (nVirtKey=2) returned 0
[0259.976] GetKeyState (nVirtKey=4) returned 0
[0259.976] GetKeyState (nVirtKey=5) returned 0
[0259.976] GetKeyState (nVirtKey=6) returned 0
[0259.976] GetCapture () returned 0x0
[0259.976] SetCapture (hWnd=0x202c6) returned 0x0
[0259.976] GetKeyState (nVirtKey=1) returned -128
[0259.976] GetKeyState (nVirtKey=2) returned 0
[0259.976] GetKeyState (nVirtKey=4) returned 0
[0259.976] GetKeyState (nVirtKey=5) returned 0
[0259.976] GetKeyState (nVirtKey=6) returned 0
[0259.976] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0259.976] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0259.976] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.976] IsWindowUnicode (hWnd=0x202c6) returned 1
[0259.976] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0259.976] TranslateMessage (lpMsg=0x53eef8) returned 0
[0259.976] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0259.976] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x24a9060, cPoints=0x1 | out: lpPoints=0x24a9060) returned 25690608
[0259.977] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0259.977] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0259.977] UpdateWindow (hWnd=0x202c6) returned 1
[0259.977] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x8b010786
[0259.977] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0259.977] CreateCompatibleDC (hdc=0x8b010786) returned 0xd10107aa
[0259.977] SelectObject (hdc=0xd10107aa, h=0x1e0507b9) returned 0x85000f
[0259.977] GdipCreateFromHDC (hdc=0xd10107aa, graphics=0x53e5f0) returned 0x0
[0259.977] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0259.977] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0259.977] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0259.977] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0259.977] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0259.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0259.978] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0259.978] LocalFree (hMem=0x89eee8) returned 0x0
[0259.978] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0259.978] GdipCreateRegion (region=0x53e638) returned 0x0
[0259.978] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0259.978] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0259.978] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0259.978] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb7f0dbd) returned 0x0
[0259.978] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0259.978] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0259.978] GetCurrentObject (hdc=0xd10107aa, type=0x1) returned 0xb00017
[0259.978] GetCurrentObject (hdc=0xd10107aa, type=0x2) returned 0x900010
[0259.978] GetCurrentObject (hdc=0xd10107aa, type=0x7) returned 0x1e0507b9
[0259.978] GetCurrentObject (hdc=0xd10107aa, type=0x6) returned 0x8a01c2
[0259.978] SaveDC (hdc=0xd10107aa) returned 1
[0259.978] GetNearestColor (hdc=0xd10107aa, color=0xff) returned 0xff
[0259.979] GetNearestColor (hdc=0xd10107aa, color=0x55) returned 0x55
[0259.979] GetNearestColor (hdc=0xd10107aa, color=0x0) returned 0x0
[0259.979] GetNearestColor (hdc=0xd10107aa, color=0x55) returned 0x55
[0259.979] GetNearestColor (hdc=0xd10107aa, color=0x0) returned 0x0
[0259.979] GetNearestColor (hdc=0xd10107aa, color=0x8080ff) returned 0x8080ff
[0259.979] GetNearestColor (hdc=0xd10107aa, color=0x7373e5) returned 0x7373e5
[0259.979] GetNearestColor (hdc=0xd10107aa, color=0xe5) returned 0xe5
[0259.979] GetNearestColor (hdc=0xd10107aa, color=0x0) returned 0x0
[0259.979] RestoreDC (hdc=0xd10107aa, nSavedDC=-1) returned 1
[0259.979] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd10107aa) returned 0x0
[0259.979] IsAppThemed () returned 0x1
[0259.979] GetThemeAppProperties () returned 0x3
[0259.979] GetThemeAppProperties () returned 0x3
[0259.979] IsAppThemed () returned 0x1
[0259.979] GetThemeAppProperties () returned 0x3
[0259.979] GetThemeAppProperties () returned 0x3
[0259.980] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x24a977c | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0259.980] IsAppThemed () returned 0x1
[0259.980] GetThemeAppProperties () returned 0x3
[0259.980] GetThemeAppProperties () returned 0x3
[0259.980] IsAppThemed () returned 0x1
[0259.980] GetThemeAppProperties () returned 0x3
[0259.980] GetThemeAppProperties () returned 0x3
[0259.980] IsAppThemed () returned 0x1
[0259.980] GetThemeAppProperties () returned 0x3
[0259.980] GetThemeAppProperties () returned 0x3
[0259.980] IsAppThemed () returned 0x1
[0259.980] GetThemeAppProperties () returned 0x3
[0259.980] GetThemeAppProperties () returned 0x3
[0259.980] IsThemePartDefined () returned 0x1
[0259.980] IsAppThemed () returned 0x1
[0259.980] GetThemeAppProperties () returned 0x3
[0259.980] GetThemeAppProperties () returned 0x3
[0259.980] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0259.980] IsAppThemed () returned 0x1
[0259.981] GetThemeAppProperties () returned 0x3
[0259.981] GetThemeAppProperties () returned 0x3
[0259.981] IsAppThemed () returned 0x1
[0259.981] GetThemeAppProperties () returned 0x3
[0259.981] GetThemeAppProperties () returned 0x3
[0259.981] IsThemePartDefined () returned 0x1
[0259.981] GdipCreateRegion (region=0x53e354) returned 0x0
[0259.981] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0259.981] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0259.981] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0259.981] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0259.981] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0259.981] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0259.981] LocalFree (hMem=0x89ec80) returned 0x0
[0259.981] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0259.981] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0259.981] LocalFree (hMem=0x89ea88) returned 0x0
[0259.981] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0259.981] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0259.981] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0259.981] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0259.982] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0259.982] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0259.982] GetCurrentObject (hdc=0xd10107aa, type=0x1) returned 0xb00017
[0259.982] GetCurrentObject (hdc=0xd10107aa, type=0x2) returned 0x900010
[0259.982] GetCurrentObject (hdc=0xd10107aa, type=0x7) returned 0x1e0507b9
[0259.982] GetCurrentObject (hdc=0xd10107aa, type=0x6) returned 0x8a01c2
[0259.982] SaveDC (hdc=0xd10107aa) returned 1
[0259.982] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a04051e
[0259.982] GetClipRgn (hdc=0xd10107aa, hrgn=0x7a04051e) returned 0
[0259.982] SelectClipRgn (hdc=0xd10107aa, hrgn=0x6304053e) returned 2
[0259.982] DeleteObject (ho=0x7a04051e) returned 1
[0259.982] DeleteObject (ho=0x6304053e) returned 1
[0259.982] OffsetViewportOrgEx (in: hdc=0xd10107aa, x=0, y=0, lppt=0x24a9e2c | out: lppt=0x24a9e2c) returned 1
[0259.982] DrawThemeParentBackground () returned 0x0
[0259.982] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0259.983] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0259.983] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0259.983] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0259.983] GetSystemMetrics (nIndex=42) returned 0
[0259.983] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0259.983] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0259.983] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0259.983] GetCurrentObject (hdc=0xd10107aa, type=0x1) returned 0xb00017
[0259.983] GetCurrentObject (hdc=0xd10107aa, type=0x2) returned 0x900010
[0259.983] GetCurrentObject (hdc=0xd10107aa, type=0x7) returned 0x1e0507b9
[0259.983] GetCurrentObject (hdc=0xd10107aa, type=0x6) returned 0x8a01c2
[0259.983] SaveDC (hdc=0xd10107aa) returned 2
[0259.983] GetNearestColor (hdc=0xd10107aa, color=0xff) returned 0xff
[0259.983] CreateSolidBrush (color=0xff) returned 0x7b10078d
[0259.983] FillRect (hDC=0xd10107aa, lprc=0x53ddb8, hbr=0x7b10078d) returned 1
[0259.983] DeleteObject (ho=0x7b10078d) returned 1
[0259.983] RestoreDC (hdc=0xd10107aa, nSavedDC=-1) returned 1
[0259.983] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0259.984] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0259.984] GetSystemMetrics (nIndex=42) returned 0
[0259.984] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0259.984] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0259.984] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0259.984] GetCurrentObject (hdc=0xd10107aa, type=0x1) returned 0xb00017
[0259.984] GetCurrentObject (hdc=0xd10107aa, type=0x2) returned 0x900010
[0259.984] GetCurrentObject (hdc=0xd10107aa, type=0x7) returned 0x1e0507b9
[0259.984] GetCurrentObject (hdc=0xd10107aa, type=0x6) returned 0x8a01c2
[0259.984] SaveDC (hdc=0xd10107aa) returned 2
[0259.984] GetNearestColor (hdc=0xd10107aa, color=0xff) returned 0xff
[0259.984] CreateSolidBrush (color=0xff) returned 0x7c10078d
[0259.984] FillRect (hDC=0xd10107aa, lprc=0x53dd58, hbr=0x7c10078d) returned 1
[0259.984] DeleteObject (ho=0x7c10078d) returned 1
[0259.984] RestoreDC (hdc=0xd10107aa, nSavedDC=-1) returned 1
[0259.984] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0259.984] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0259.984] GetSystemMetrics (nIndex=42) returned 0
[0259.984] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0259.984] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0259.985] RestoreDC (hdc=0xd10107aa, nSavedDC=-1) returned 1
[0259.985] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd10107aa) returned 0x0
[0259.985] IsAppThemed () returned 0x1
[0259.985] GetThemeAppProperties () returned 0x3
[0259.985] GetThemeAppProperties () returned 0x3
[0259.985] IsAppThemed () returned 0x1
[0259.985] GetThemeAppProperties () returned 0x3
[0259.985] GetThemeAppProperties () returned 0x3
[0259.985] IsThemePartDefined () returned 0x1
[0259.985] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0259.985] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0259.985] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0259.985] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0259.985] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0259.985] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0259.985] LocalFree (hMem=0x89ea88) returned 0x0
[0259.985] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0259.986] LocalFree (hMem=0x89eee8) returned 0x0
[0259.986] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0259.986] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0259.986] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0259.986] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0259.986] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0259.986] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0259.986] GetCurrentObject (hdc=0xd10107aa, type=0x1) returned 0xb00017
[0259.986] GetCurrentObject (hdc=0xd10107aa, type=0x2) returned 0x900010
[0259.986] GetCurrentObject (hdc=0xd10107aa, type=0x7) returned 0x1e0507b9
[0259.986] GetCurrentObject (hdc=0xd10107aa, type=0x6) returned 0x8a01c2
[0259.986] SaveDC (hdc=0xd10107aa) returned 1
[0259.986] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6404053e
[0259.986] GetClipRgn (hdc=0xd10107aa, hrgn=0x6404053e) returned 0
[0259.986] SelectClipRgn (hdc=0xd10107aa, hrgn=0x7c04051e) returned 2
[0259.986] DeleteObject (ho=0x6404053e) returned 1
[0259.986] DeleteObject (ho=0x7c04051e) returned 1
[0259.986] OffsetViewportOrgEx (in: hdc=0xd10107aa, x=0, y=0, lppt=0x24aa690 | out: lppt=0x24aa690) returned 1
[0259.986] IsAppThemed () returned 0x1
[0259.986] GetThemeAppProperties () returned 0x3
[0259.986] GetThemeAppProperties () returned 0x3
[0259.987] DrawThemeBackground () returned 0x0
[0259.987] RestoreDC (hdc=0xd10107aa, nSavedDC=-1) returned 1
[0259.987] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd10107aa) returned 0x0
[0259.987] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0259.987] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0259.987] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0259.987] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0259.987] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0259.987] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0259.987] LocalFree (hMem=0x89ea88) returned 0x0
[0259.987] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0259.987] LocalFree (hMem=0x89ee08) returned 0x0
[0259.987] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0259.987] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0259.988] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0259.988] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0259.988] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0259.988] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0259.988] GetCurrentObject (hdc=0xd10107aa, type=0x1) returned 0xb00017
[0259.988] GetCurrentObject (hdc=0xd10107aa, type=0x2) returned 0x900010
[0259.988] GetCurrentObject (hdc=0xd10107aa, type=0x7) returned 0x1e0507b9
[0259.988] GetCurrentObject (hdc=0xd10107aa, type=0x6) returned 0x8a01c2
[0259.988] SaveDC (hdc=0xd10107aa) returned 1
[0259.988] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d04051e
[0259.988] GetClipRgn (hdc=0xd10107aa, hrgn=0x7d04051e) returned 0
[0259.988] SelectClipRgn (hdc=0xd10107aa, hrgn=0x6504053e) returned 2
[0259.988] DeleteObject (ho=0x7d04051e) returned 1
[0259.988] DeleteObject (ho=0x6504053e) returned 1
[0259.988] OffsetViewportOrgEx (in: hdc=0xd10107aa, x=0, y=0, lppt=0x24aa964 | out: lppt=0x24aa964) returned 1
[0259.988] IsAppThemed () returned 0x1
[0259.988] GetThemeAppProperties () returned 0x3
[0259.988] GetThemeAppProperties () returned 0x3
[0259.988] GetThemeBackgroundContentRect () returned 0x0
[0259.988] RestoreDC (hdc=0xd10107aa, nSavedDC=-1) returned 1
[0259.989] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd10107aa) returned 0x0
[0259.989] IsAppThemed () returned 0x1
[0259.989] GetThemeAppProperties () returned 0x3
[0259.989] GetThemeAppProperties () returned 0x3
[0259.989] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0259.989] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0259.989] GetCurrentObject (hdc=0xd10107aa, type=0x1) returned 0xb00017
[0259.989] GetCurrentObject (hdc=0xd10107aa, type=0x2) returned 0x900010
[0259.989] GetCurrentObject (hdc=0xd10107aa, type=0x7) returned 0x1e0507b9
[0259.989] GetCurrentObject (hdc=0xd10107aa, type=0x6) returned 0x8a01c2
[0259.989] SaveDC (hdc=0xd10107aa) returned 1
[0259.989] GetTextAlign (hdc=0xd10107aa) returned 0x0
[0259.989] GetTextColor (hdc=0xd10107aa) returned 0x0
[0259.989] GetCurrentObject (hdc=0xd10107aa, type=0x6) returned 0x8a01c2
[0259.989] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0259.989] SelectObject (hdc=0xd10107aa, h=0x450a0799) returned 0x8a01c2
[0259.989] GetBkMode (hdc=0xd10107aa) returned 2
[0259.990] SetBkMode (hdc=0xd10107aa, mode=1) returned 2
[0259.990] DrawTextExW (in: hdc=0xd10107aa, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x24aad04 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0259.990] DrawTextExW (in: hdc=0xd10107aa, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x24aad04 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0259.990] RestoreDC (hdc=0xd10107aa, nSavedDC=-1) returned 1
[0259.990] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd10107aa) returned 0x0
[0259.990] GetFocus () returned 0x202c6
[0259.991] IsAppThemed () returned 0x1
[0259.991] GetThemeAppProperties () returned 0x3
[0259.991] GetThemeAppProperties () returned 0x3
[0259.991] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0259.991] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xd10107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0259.991] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd10107aa) returned 0x0
[0259.991] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0259.991] SelectObject (hdc=0xd10107aa, h=0x85000f) returned 0x1e0507b9
[0259.991] DeleteDC (hdc=0xd10107aa) returned 1
[0259.991] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0259.991] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0259.992] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x24aae00, cPoints=0x1 | out: lpPoints=0x24aae00) returned 25690608
[0259.992] WindowFromPoint (Point=0x234) returned 0x202c6
[0259.992] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a30234) returned 0x1
[0259.992] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0259.992] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0259.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0259.993] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0259.993] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0259.993] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0259.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0259.994] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0259.994] GetDC (hWnd=0x0) returned 0x60100ce
[0259.994] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e888) returned 0x0
[0259.994] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0259.994] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0259.994] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0259.994] GetSystemMetrics (nIndex=5) returned 1
[0259.994] GetSystemMetrics (nIndex=6) returned 1
[0259.995] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0259.995] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0259.995] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0259.995] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0260.121] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.121] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0260.122] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.122] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0260.122] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.122] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0260.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.123] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0260.123] GetSystemMetrics (nIndex=5) returned 1
[0260.123] GetSystemMetrics (nIndex=6) returned 1
[0260.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.123] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0260.123] GetSystemMetrics (nIndex=5) returned 1
[0260.123] GetSystemMetrics (nIndex=6) returned 1
[0260.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.124] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0260.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.124] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0260.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.124] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0260.125] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.125] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0260.125] GetSystemMetrics (nIndex=59) returned 1460
[0260.125] GetSystemMetrics (nIndex=60) returned 920
[0260.125] GetSystemMetrics (nIndex=34) returned 136
[0260.125] GetSystemMetrics (nIndex=35) returned 39
[0260.125] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.125] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0260.125] GetCurrentThreadId () returned 0x11d0
[0260.125] GetCurrentThreadId () returned 0x11d0
[0260.125] GetCurrentThreadId () returned 0x11d0
[0260.125] GetCurrentThreadId () returned 0x11d0
[0260.125] GetCurrentThreadId () returned 0x11d0
[0260.125] GetCurrentThreadId () returned 0x11d0
[0260.125] GetCurrentThreadId () returned 0x11d0
[0260.125] GetCurrentThreadId () returned 0x11d0
[0260.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.126] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0260.126] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0260.126] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0260.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.126] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0260.127] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.127] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0260.127] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2c013e
[0260.127] SetWindowLongW (hWnd=0x2c013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0260.128] GetWindowLongW (hWnd=0x2c013e, nIndex=-4) returned 1950089536
[0260.128] SetWindowLongW (hWnd=0x2c013e, nIndex=-4, dwNewLong=79647894) returned 1950089536
[0260.128] GetWindowLongW (hWnd=0x2c013e, nIndex=-4) returned 79647894
[0260.128] GetWindowLongW (hWnd=0x2c013e, nIndex=-16) returned 113311744
[0260.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2c013e, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0260.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2c013e, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0260.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2c013e, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0260.129] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2c013e, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0260.129] GetClientRect (in: hWnd=0x2c013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0260.129] GetWindowRect (in: hWnd=0x2c013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0260.130] SetWindowTextW (hWnd=0x2c013e, lpString="WindowsFormsParkingWindow") returned 1
[0260.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2c013e, Msg=0xc, wParam=0x0, lParam=0x24a2d4c) returned 0x1
[0260.130] GetParent (hWnd=0x2c013e) returned 0x0
[0260.131] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0260.131] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x2c013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x100122
[0260.131] SetWindowLongW (hWnd=0x100122, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0260.131] GetWindowLongW (hWnd=0x100122, nIndex=-4) returned 1868147648
[0260.132] SetWindowLongW (hWnd=0x100122, nIndex=-4, dwNewLong=79648214) returned 1868147648
[0260.132] GetWindowLongW (hWnd=0x100122, nIndex=-4) returned 79648214
[0260.132] GetWindowLongW (hWnd=0x100122, nIndex=-16) returned 1174405133
[0260.132] GetWindowLongW (hWnd=0x100122, nIndex=-12) returned 0
[0260.132] SetWindowLongW (hWnd=0x100122, nIndex=-12, dwNewLong=1048866) returned 0
[0260.132] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0260.132] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0260.133] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0260.133] GetClientRect (in: hWnd=0x100122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0260.133] GetWindowRect (in: hWnd=0x100122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0260.133] GetParent (hWnd=0x100122) returned 0x2c013e
[0260.133] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2c013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0260.133] SetWindowTextW (hWnd=0x100122, lpString="Enter password: ") returned 1
[0260.134] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0260.134] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0260.134] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0260.134] GetClientRect (in: hWnd=0x100122, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0260.134] GetWindowRect (in: hWnd=0x100122, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0260.134] GetParent (hWnd=0x100122) returned 0x2c013e
[0260.134] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2c013e, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0260.135] SendMessageW (hWnd=0x100122, Msg=0x2210, wParam=0x1220001, lParam=0x100122) returned 0x0
[0260.135] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x2210, wParam=0x1220001, lParam=0x100122) returned 0x0
[0260.135] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0260.135] GetParent (hWnd=0x100122) returned 0x2c013e
[0260.135] GdipCreateFromHWND (hwnd=0x100122, graphics=0x53e994) returned 0x0
[0260.135] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0260.135] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0260.136] GetProcessWindowStation () returned 0x13c
[0260.136] GetCapture () returned 0x202c6
[0260.136] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0260.136] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0260.136] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0260.136] ReleaseCapture () returned 1
[0260.136] GetActiveWindow () returned 0x70036
[0260.136] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0260.137] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.137] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0260.137] GetCursorPos (in: lpPoint=0x24b7bb0 | out: lpPoint=0x24b7bb0*(x=564, y=419)) returned 1
[0260.137] MonitorFromPoint (pt=0x234, dwFlags=0x1a3) returned 0x10001
[0260.137] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0260.137] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xd40107aa
[0260.137] GetDeviceCaps (hdc=0xd40107aa, index=12) returned 32
[0260.137] GetDeviceCaps (hdc=0xd40107aa, index=14) returned 1
[0260.138] DeleteDC (hdc=0xd40107aa) returned 1
[0260.138] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0260.138] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0260.138] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xa02ca
[0260.139] SetWindowLongW (hWnd=0xa02ca, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0260.139] GetWindowLongW (hWnd=0xa02ca, nIndex=-4) returned 1950089536
[0260.139] SetWindowLongW (hWnd=0xa02ca, nIndex=-4, dwNewLong=79647694) returned 1950089536
[0260.139] GetWindowLongW (hWnd=0xa02ca, nIndex=-4) returned 79647694
[0260.139] GetWindowLongW (hWnd=0xa02ca, nIndex=-16) returned 113770496
[0260.140] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0260.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0260.142] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0260.142] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0260.142] GetWindowRect (in: hWnd=0xa02ca, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0260.142] SetWindowTextW (hWnd=0xa02ca, lpString="Ransomware") returned 1
[0260.142] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xc, wParam=0x0, lParam=0x24aaec8) returned 0x1
[0260.143] GetStartupInfoW (in: lpStartupInfo=0x24b7eec | out: lpStartupInfo=0x24b7eec*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0260.144] GetParent (hWnd=0xa02ca) returned 0x0
[0260.144] SetWindowLongW (hWnd=0xa02ca, nIndex=-8, dwNewLong=0) returned 0
[0260.144] SendMessageW (hWnd=0xa02ca, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0260.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0260.144] SendMessageW (hWnd=0xa02ca, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0260.144] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0260.144] GetSystemMenu (hWnd=0xa02ca, bRevert=0) returned 0x3a02ad
[0260.145] GetWindowPlacement (in: hWnd=0xa02ca, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0260.145] EnableMenuItem (hMenu=0x3a02ad, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0260.145] EnableMenuItem (hMenu=0x3a02ad, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0260.145] EnableMenuItem (hMenu=0x3a02ad, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0260.145] EnableMenuItem (hMenu=0x3a02ad, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0260.145] EnableMenuItem (hMenu=0x3a02ad, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0260.145] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0260.145] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0260.145] GetWindowRect (in: hWnd=0xa02ca, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0260.146] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.146] GetWindowLongW (hWnd=0xa02ca, nIndex=-16) returned 113770496
[0260.146] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.146] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.146] GetSystemMetrics (nIndex=42) returned 0
[0260.146] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.146] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0260.146] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.147] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.147] GetSystemMetrics (nIndex=42) returned 0
[0260.147] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.147] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0260.147] GetCursorPos (in: lpPoint=0x24b8060 | out: lpPoint=0x24b8060*(x=564, y=419)) returned 1
[0260.147] MonitorFromPoint (pt=0x234, dwFlags=0x1a3) returned 0x10001
[0260.147] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0260.147] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xd80107aa
[0260.147] GetDeviceCaps (hdc=0xd80107aa, index=12) returned 32
[0260.147] GetDeviceCaps (hdc=0xd80107aa, index=14) returned 1
[0260.147] DeleteDC (hdc=0xd80107aa) returned 1
[0260.148] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0260.148] GetWindowLongW (hWnd=0xa02ca, nIndex=-16) returned 113770496
[0260.148] GetWindowLongW (hWnd=0xa02ca, nIndex=-20) returned 327937
[0260.148] SetWindowLongW (hWnd=0xa02ca, nIndex=-16, dwNewLong=46661632) returned 113770496
[0260.148] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0260.148] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0260.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0260.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0260.149] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0260.150] SetWindowLongW (hWnd=0xa02ca, nIndex=-20, dwNewLong=327681) returned 327937
[0260.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0260.150] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0260.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0260.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0260.151] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0260.152] SetWindowPos (hWnd=0xa02ca, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0260.152] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0260.152] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0260.152] GetWindowPlacement (in: hWnd=0xa02ca, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0260.152] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0260.152] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0260.152] GetWindowRect (in: hWnd=0xa02ca, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0260.153] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0260.153] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0260.154] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0260.154] RedrawWindow (hWnd=0xa02ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0260.154] GetSystemMenu (hWnd=0xa02ca, bRevert=0) returned 0x3a02ad
[0260.154] GetWindowPlacement (in: hWnd=0xa02ca, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0260.154] EnableMenuItem (hMenu=0x3a02ad, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0260.154] EnableMenuItem (hMenu=0x3a02ad, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0260.154] EnableMenuItem (hMenu=0x3a02ad, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0260.154] EnableMenuItem (hMenu=0x3a02ad, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0260.154] EnableMenuItem (hMenu=0x3a02ad, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0260.155] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0260.155] GetWindowLongW (hWnd=0xa02ca, nIndex=-8) returned 0
[0260.155] SetWindowLongW (hWnd=0xa02ca, nIndex=-8, dwNewLong=458806) returned 0
[0260.155] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0260.155] GetProcessWindowStation () returned 0x13c
[0260.155] GetCurrentThreadId () returned 0x11d0
[0260.155] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf55fe, lParam=0x0) returned 1
[0260.156] IsWindowVisible (hWnd=0xa02ca) returned 0
[0260.156] IsWindowVisible (hWnd=0x70036) returned 1
[0260.156] IsWindowEnabled (hWnd=0x70036) returned 1
[0260.156] IsWindowVisible (hWnd=0x602b6) returned 0
[0260.156] IsWindowVisible (hWnd=0x901f8) returned 0
[0260.156] IsWindowVisible (hWnd=0x202d0) returned 0
[0260.156] IsWindowVisible (hWnd=0x202d4) returned 0
[0260.157] GetActiveWindow () returned 0x70036
[0260.157] GetFocus () returned 0x202c6
[0260.157] IsWindow (hWnd=0x70036) returned 1
[0260.157] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0260.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0260.158] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0260.158] GetWindowLongW (hWnd=0xa02ca, nIndex=-8) returned 458806
[0260.158] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0260.158] GetCurrentThreadId () returned 0x11d0
[0260.158] GetWindowLongW (hWnd=0xa02ca, nIndex=-8) returned 458806
[0260.158] IsWindowEnabled (hWnd=0x70036) returned 0
[0260.158] IsWindowEnabled (hWnd=0xa02ca) returned 1
[0260.158] ShowWindow (hWnd=0xa02ca, nCmdShow=5) returned 0
[0260.158] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0260.158] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0260.159] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.159] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0260.159] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0xa02ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xc004e
[0260.160] SetWindowLongW (hWnd=0xc004e, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0260.161] GetWindowLongW (hWnd=0xc004e, nIndex=-4) returned 1868026976
[0260.161] SetWindowLongW (hWnd=0xc004e, nIndex=-4, dwNewLong=79647934) returned 1868026976
[0260.161] GetWindowLongW (hWnd=0xc004e, nIndex=-4) returned 79647934
[0260.161] GetWindowLongW (hWnd=0xc004e, nIndex=-16) returned 1174470848
[0260.161] GetWindowLongW (hWnd=0xc004e, nIndex=-12) returned 0
[0260.161] SetWindowLongW (hWnd=0xc004e, nIndex=-12, dwNewLong=786510) returned 0
[0260.161] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0260.163] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0260.164] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0260.165] SendMessageW (hWnd=0xc004e, Msg=0x2055, wParam=0xc004e, lParam=0x3) returned 0x2
[0260.165] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0260.165] GetWindow (hWnd=0xc004e, uCmd=0x3) returned 0x0
[0260.165] GetClientRect (in: hWnd=0xc004e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0260.165] GetWindowRect (in: hWnd=0xc004e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0260.165] GetParent (hWnd=0xc004e) returned 0xa02ca
[0260.165] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02ca, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0260.165] SendMessageW (hWnd=0xc004e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0260.165] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0260.165] SendMessageW (hWnd=0xc004e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0260.165] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0260.166] GetSystemMetrics (nIndex=5) returned 1
[0260.166] GetSystemMetrics (nIndex=6) returned 1
[0260.166] SendMessageW (hWnd=0xc004e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0260.166] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0260.166] SendMessageW (hWnd=0xc004e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0260.166] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0260.167] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0260.167] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0260.167] GetClientRect (in: hWnd=0xc004e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0260.167] GetWindowRect (in: hWnd=0xc004e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0260.167] GetParent (hWnd=0xc004e) returned 0xa02ca
[0260.167] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02ca, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0260.167] SendMessageW (hWnd=0xc004e, Msg=0x2210, wParam=0x4e0001, lParam=0xc004e) returned 0x0
[0260.167] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x2210, wParam=0x4e0001, lParam=0xc004e) returned 0x0
[0260.167] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0260.168] GetParent (hWnd=0xc004e) returned 0xa02ca
[0260.168] GetParent (hWnd=0x100122) returned 0x2c013e
[0260.168] SetParent (hWndChild=0x100122, hWndNewParent=0xa02ca) returned 0x2c013e
[0260.168] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0260.168] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0260.169] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0260.169] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0260.169] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0260.169] GetClientRect (in: hWnd=0x100122, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0260.169] GetWindowRect (in: hWnd=0x100122, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0260.169] GetParent (hWnd=0x100122) returned 0xa02ca
[0260.169] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02ca, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0260.169] GetClientRect (in: hWnd=0x100122, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0260.169] GetWindowRect (in: hWnd=0x100122, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0260.169] GetParent (hWnd=0x100122) returned 0xa02ca
[0260.169] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02ca, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0260.169] GetParent (hWnd=0x100122) returned 0xa02ca
[0260.170] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0260.170] GetWindow (hWnd=0x100122, uCmd=0x3) returned 0x0
[0260.170] SetWindowPos (hWnd=0x100122, hWndInsertAfter=0xc004e, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0260.170] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0260.171] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0260.171] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0260.171] GetClientRect (in: hWnd=0x100122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0260.171] GetWindowRect (in: hWnd=0x100122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0260.171] GetParent (hWnd=0x100122) returned 0xa02ca
[0260.171] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02ca, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0260.171] GetParent (hWnd=0x100122) returned 0xa02ca
[0260.171] GetWindow (hWnd=0x100122, uCmd=0x3) returned 0xc004e
[0260.171] GetWindowThreadProcessId (in: hWnd=0x100122, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0260.171] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0260.172] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.172] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0260.173] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0xa02ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xf01e2
[0260.173] SetWindowLongW (hWnd=0xf01e2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0260.173] GetWindowLongW (hWnd=0xf01e2, nIndex=-4) returned 1868032000
[0260.174] SetWindowLongW (hWnd=0xf01e2, nIndex=-4, dwNewLong=79648334) returned 1868032000
[0260.174] GetWindowLongW (hWnd=0xf01e2, nIndex=-4) returned 79648334
[0260.174] GetWindowLongW (hWnd=0xf01e2, nIndex=-16) returned 1174470667
[0260.174] GetWindowLongW (hWnd=0xf01e2, nIndex=-12) returned 0
[0260.174] SetWindowLongW (hWnd=0xf01e2, nIndex=-12, dwNewLong=983522) returned 0
[0260.174] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0260.175] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0260.175] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0260.176] SendMessageW (hWnd=0xf01e2, Msg=0x2055, wParam=0xf01e2, lParam=0x3) returned 0x2
[0260.176] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0260.176] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0260.176] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0260.176] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0260.176] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0260.176] RedrawWindow (hWnd=0xc004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0260.177] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0260.177] RedrawWindow (hWnd=0x100122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0260.177] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0260.177] RedrawWindow (hWnd=0xf01e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0260.177] RedrawWindow (hWnd=0xa02ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0260.178] GetWindow (hWnd=0xf01e2, uCmd=0x3) returned 0x100122
[0260.178] GetClientRect (in: hWnd=0xf01e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0260.178] GetWindowRect (in: hWnd=0xf01e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0260.178] GetParent (hWnd=0xf01e2) returned 0xa02ca
[0260.178] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02ca, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0260.178] SetWindowTextW (hWnd=0xf01e2, lpString="OK") returned 1
[0260.178] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0xc, wParam=0x0, lParam=0x24af388) returned 0x1
[0260.179] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0260.179] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0260.179] GetClientRect (in: hWnd=0xf01e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0260.179] GetWindowRect (in: hWnd=0xf01e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0260.179] GetParent (hWnd=0xf01e2) returned 0xa02ca
[0260.179] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02ca, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0260.179] SendMessageW (hWnd=0xf01e2, Msg=0x2210, wParam=0x1e20001, lParam=0xf01e2) returned 0x0
[0260.179] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x2210, wParam=0x1e20001, lParam=0xf01e2) returned 0x0
[0260.179] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0260.180] GetParent (hWnd=0xf01e2) returned 0xa02ca
[0260.180] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0260.180] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.181] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0260.181] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0xa02ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1100ea
[0260.181] SetWindowLongW (hWnd=0x1100ea, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0260.181] GetWindowLongW (hWnd=0x1100ea, nIndex=-4) returned 1868032000
[0260.182] SetWindowLongW (hWnd=0x1100ea, nIndex=-4, dwNewLong=79648654) returned 1868032000
[0260.182] GetWindowLongW (hWnd=0x1100ea, nIndex=-4) returned 79648654
[0260.182] GetWindowLongW (hWnd=0x1100ea, nIndex=-16) returned 1174470667
[0260.182] GetWindowLongW (hWnd=0x1100ea, nIndex=-12) returned 0
[0260.182] SetWindowLongW (hWnd=0x1100ea, nIndex=-12, dwNewLong=1114346) returned 0
[0260.182] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1100ea, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0260.183] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1100ea, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0260.183] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1100ea, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0260.184] SendMessageW (hWnd=0x1100ea, Msg=0x2055, wParam=0x1100ea, lParam=0x3) returned 0x2
[0260.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0260.184] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1100ea, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0260.184] GetWindow (hWnd=0x1100ea, uCmd=0x3) returned 0xf01e2
[0260.184] GetClientRect (in: hWnd=0x1100ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0260.184] GetWindowRect (in: hWnd=0x1100ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0260.184] GetParent (hWnd=0x1100ea) returned 0xa02ca
[0260.184] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02ca, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0260.185] SetWindowTextW (hWnd=0x1100ea, lpString="Cancel") returned 1
[0260.185] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1100ea, Msg=0xc, wParam=0x0, lParam=0x24b2c48) returned 0x1
[0260.185] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1100ea, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0260.185] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1100ea, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0260.185] GetClientRect (in: hWnd=0x1100ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0260.185] GetWindowRect (in: hWnd=0x1100ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0260.185] GetParent (hWnd=0x1100ea) returned 0xa02ca
[0260.186] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02ca, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0260.186] SendMessageW (hWnd=0x1100ea, Msg=0x2210, wParam=0xea0001, lParam=0x1100ea) returned 0x0
[0260.186] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1100ea, Msg=0x2210, wParam=0xea0001, lParam=0x1100ea) returned 0x0
[0260.186] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1100ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0260.186] GetParent (hWnd=0x1100ea) returned 0xa02ca
[0260.186] GetDC (hWnd=0x0) returned 0x10105d6
[0260.186] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e320) returned 0x0
[0260.187] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0260.187] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0260.187] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0260.187] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0260.187] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0260.188] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0260.188] GetWindowLongW (hWnd=0xa02ca, nIndex=-8) returned 458806
[0260.188] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0260.188] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0260.188] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xdf0107aa
[0260.188] GetDeviceCaps (hdc=0xdf0107aa, index=12) returned 32
[0260.188] GetDeviceCaps (hdc=0xdf0107aa, index=14) returned 1
[0260.188] DeleteDC (hdc=0xdf0107aa) returned 1
[0260.188] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0260.188] GetWindowThreadProcessId (in: hWnd=0xa02ca, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0260.189] GetCurrentThreadId () returned 0x11d0
[0260.189] PostMessageW (hWnd=0xa02ca, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0260.189] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.189] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.189] GetSystemMetrics (nIndex=42) returned 0
[0260.189] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.189] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0260.189] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0260.189] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0260.190] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0260.190] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0260.198] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0xa02ca) returned 0x1
[0260.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0260.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0260.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0260.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0260.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0260.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0260.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0260.205] GetFocus () returned 0x202c6
[0260.205] IsChild (hWndParent=0xa02ca, hWnd=0x202c6) returned 0
[0260.205] GetFocus () returned 0x202c6
[0260.205] SetFocus (hWnd=0xc004e) returned 0x202c6
[0260.206] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xc004e, lParam=0x0) returned 0x0
[0260.206] GetCapture () returned 0x0
[0260.206] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0260.207] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0260.208] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0260.213] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0260.213] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0260.214] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0260.214] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0260.214] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0260.215] GetParent (hWnd=0xa02ca) returned 0x0
[0260.215] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0260.215] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0260.215] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0260.216] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0260.216] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0260.216] GetSysColorBrush (nIndex=5) returned 0x100079
[0260.217] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0260.217] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0260.218] SendMessageW (hWnd=0xc004e, Msg=0x2111, wParam=0x100004e, lParam=0xc004e) returned 0x0
[0260.219] SendMessageW (hWnd=0xc004e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0260.219] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0260.219] GetKeyState (nVirtKey=1) returned 0
[0260.219] GetKeyState (nVirtKey=2) returned 0
[0260.219] GetKeyState (nVirtKey=4) returned 0
[0260.219] GetKeyState (nVirtKey=5) returned 0
[0260.219] GetKeyState (nVirtKey=6) returned 0
[0260.219] GetWindowTextLengthW (hWnd=0xc004e) returned 0
[0260.219] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0260.219] SendMessageW (hWnd=0xc004e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0260.219] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0260.219] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0260.219] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0260.222] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0260.223] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0260.224] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0260.224] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0260.235] GetWindowPlacement (in: hWnd=0xa02ca, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0260.235] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0260.235] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.235] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.235] GetSystemMetrics (nIndex=42) returned 0
[0260.235] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.235] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0260.235] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0260.235] GetCurrentObject (hdc=0xf0105ee, type=0x1) returned 0xb00017
[0260.236] GetCurrentObject (hdc=0xf0105ee, type=0x2) returned 0x900010
[0260.236] GetCurrentObject (hdc=0xf0105ee, type=0x7) returned 0xffffffffa005079b
[0260.236] GetCurrentObject (hdc=0xf0105ee, type=0x6) returned 0x8a01c2
[0260.236] SaveDC (hdc=0xf0105ee) returned 1
[0260.236] GetNearestColor (hdc=0xf0105ee, color=0xf0f0f0) returned 0xf0f0f0
[0260.236] CreateSolidBrush (color=0xf0f0f0) returned 0x7d10078d
[0260.236] FillRect (hDC=0xf0105ee, lprc=0x53e250, hbr=0x7d10078d) returned 1
[0260.236] DeleteObject (ho=0x7d10078d) returned 1
[0260.236] RestoreDC (hdc=0xf0105ee, nSavedDC=-1) returned 1
[0260.236] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0260.237] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0260.237] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0260.237] GetWindowPlacement (in: hWnd=0xa02ca, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0260.237] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0260.237] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.238] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.238] GetSystemMetrics (nIndex=42) returned 0
[0260.238] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.238] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0260.238] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0260.238] GetCurrentObject (hdc=0xd0010734, type=0x1) returned 0xb00017
[0260.238] GetCurrentObject (hdc=0xd0010734, type=0x2) returned 0x900010
[0260.238] GetCurrentObject (hdc=0xd0010734, type=0x7) returned 0x1105065f
[0260.238] GetCurrentObject (hdc=0xd0010734, type=0x6) returned 0x8a01c2
[0260.238] SaveDC (hdc=0xd0010734) returned 1
[0260.238] GetNearestColor (hdc=0xd0010734, color=0xf0f0f0) returned 0xf0f0f0
[0260.238] CreateSolidBrush (color=0xf0f0f0) returned 0x7e10078d
[0260.238] FillRect (hDC=0xd0010734, lprc=0x53dc18, hbr=0x7e10078d) returned 1
[0260.238] DeleteObject (ho=0x7e10078d) returned 1
[0260.238] RestoreDC (hdc=0xd0010734, nSavedDC=-1) returned 1
[0260.239] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.239] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.239] GetSystemMetrics (nIndex=42) returned 0
[0260.239] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.239] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0260.239] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0260.239] GetCurrentObject (hdc=0xd0010734, type=0x1) returned 0xb00017
[0260.239] GetCurrentObject (hdc=0xd0010734, type=0x2) returned 0x900010
[0260.239] GetCurrentObject (hdc=0xd0010734, type=0x7) returned 0x1105065f
[0260.239] GetCurrentObject (hdc=0xd0010734, type=0x6) returned 0x8a01c2
[0260.239] SaveDC (hdc=0xd0010734) returned 1
[0260.239] GetNearestColor (hdc=0xd0010734, color=0xf0f0f0) returned 0xf0f0f0
[0260.239] CreateSolidBrush (color=0xf0f0f0) returned 0x7f10078d
[0260.239] FillRect (hDC=0xd0010734, lprc=0x53dbb8, hbr=0x7f10078d) returned 1
[0260.239] DeleteObject (ho=0x7f10078d) returned 1
[0260.240] RestoreDC (hdc=0xd0010734, nSavedDC=-1) returned 1
[0260.240] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.240] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.240] GetSystemMetrics (nIndex=42) returned 0
[0260.240] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.240] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0260.249] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0260.249] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0260.249] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0260.249] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0260.249] GetStockObject (i=5) returned 0x900015
[0260.250] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1100ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0260.250] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1100ea, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0260.250] GetStockObject (i=5) returned 0x900015
[0260.250] GetWindowPlacement (in: hWnd=0xa02ca, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0260.250] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0260.250] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0260.250] GetWindowRect (in: hWnd=0xa02ca, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0260.263] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0260.264] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0260.264] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0260.264] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0260.265] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0260.265] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0260.265] GetWindowRect (in: hWnd=0xa02ca, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0260.265] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.265] IsWindowUnicode (hWnd=0xa02ca) returned 1
[0260.265] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.265] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.265] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.265] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0260.265] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.265] IsWindowUnicode (hWnd=0xa02ca) returned 1
[0260.265] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.266] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.266] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.266] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.266] MapWindowPoints (in: hWndFrom=0x100122, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0260.266] IsWindowUnicode (hWnd=0x100122) returned 1
[0260.266] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.266] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.267] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.267] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.267] IsWindowUnicode (hWnd=0x202c6) returned 1
[0260.267] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.267] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.267] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.267] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0260.267] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0260.267] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.267] MapWindowPoints (in: hWndFrom=0x100122, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0260.267] IsWindowUnicode (hWnd=0x100122) returned 1
[0260.267] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.268] MapWindowPoints (in: hWndFrom=0x100122, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0260.268] SetCursor (hCursor=0x10003) returned 0x10003
[0260.268] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.268] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.268] _TrackMouseEvent (in: lpEventTrack=0x24b95dc | out: lpEventTrack=0x24b95dc) returned 1
[0260.268] SendMessageW (hWnd=0x100122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0260.268] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0260.268] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x200, wParam=0x0, lParam=0x1c000b) returned 0x0
[0260.268] GetKeyState (nVirtKey=1) returned 0
[0260.268] GetKeyState (nVirtKey=2) returned 0
[0260.268] GetKeyState (nVirtKey=4) returned 0
[0260.268] GetKeyState (nVirtKey=5) returned 0
[0260.268] GetKeyState (nVirtKey=6) returned 0
[0260.268] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.271] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x84, wParam=0x0, lParam=0x194035b) returned 0x1
[0260.271] IsWindowUnicode (hWnd=0xf01e2) returned 1
[0260.271] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.271] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.271] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.272] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.272] IsWindowUnicode (hWnd=0x100122) returned 1
[0260.272] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.272] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.272] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.272] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0260.272] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.272] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x84, wParam=0x0, lParam=0x194035b) returned 0x1
[0260.272] IsWindowUnicode (hWnd=0xf01e2) returned 1
[0260.273] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.273] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x84, wParam=0x0, lParam=0x194035b) returned 0x1
[0260.273] SetCursor (hCursor=0x10003) returned 0x10003
[0260.273] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.273] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.273] _TrackMouseEvent (in: lpEventTrack=0x24b9610 | out: lpEventTrack=0x24b9610) returned 1
[0260.273] SendMessageW (hWnd=0xf01e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0260.273] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0260.273] InvalidateRect (hWnd=0xf01e2, lpRect=0x0, bErase=0) returned 1
[0260.273] GetKeyState (nVirtKey=1) returned 0
[0260.273] GetKeyState (nVirtKey=2) returned 0
[0260.273] GetKeyState (nVirtKey=4) returned 0
[0260.273] GetKeyState (nVirtKey=5) returned 0
[0260.273] GetKeyState (nVirtKey=6) returned 0
[0260.273] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.274] IsWindowUnicode (hWnd=0xa02ca) returned 1
[0260.274] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.274] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.274] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.274] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.275] IsWindowUnicode (hWnd=0xa02ca) returned 1
[0260.275] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.275] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.275] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.275] BeginPaint (in: hWnd=0xa02ca, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x60100ce
[0260.276] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0260.276] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.276] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.276] GetSystemMetrics (nIndex=42) returned 0
[0260.276] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.276] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0260.276] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0260.276] EndPaint (hWnd=0xa02ca, lpPaint=0x53e30c) returned 1
[0260.276] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.277] IsWindowUnicode (hWnd=0xc004e) returned 1
[0260.277] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.277] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.277] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0260.277] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0260.277] SetTextColor (hdc=0xd1010734, color=0x0) returned 0x0
[0260.277] SetBkColor (hdc=0xd1010734, color=0xffffff) returned 0xffffff
[0260.278] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.278] IsWindowUnicode (hWnd=0x100122) returned 1
[0260.279] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.279] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.279] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.279] BeginPaint (in: hWnd=0x100122, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x8b010786
[0260.279] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0260.279] CreateCompatibleDC (hdc=0x8b010786) returned 0x8101079c
[0260.279] SelectObject (hdc=0x8101079c, h=0x1e0507b9) returned 0x85000f
[0260.279] GdipCreateFromHDC (hdc=0x8101079c, graphics=0x53e30c) returned 0x0
[0260.279] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0260.279] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0260.279] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0260.279] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0260.280] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0260.280] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.280] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0260.280] LocalFree (hMem=0x89ea88) returned 0x0
[0260.280] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0260.280] GdipCreateRegion (region=0x53e354) returned 0x0
[0260.280] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.280] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0260.280] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0260.280] GetWindowTextLengthW (hWnd=0x100122) returned 16
[0260.280] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0260.280] GetSystemMetrics (nIndex=42) returned 0
[0260.280] GetWindowTextW (in: hWnd=0x100122, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0260.280] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0260.280] GetClientRect (in: hWnd=0x100122, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0260.280] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0260.280] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0260.280] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0260.280] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0260.281] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0260.281] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.281] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0260.281] LocalFree (hMem=0x89ea88) returned 0x0
[0260.281] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0260.281] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.281] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0260.281] LocalFree (hMem=0x89ea88) returned 0x0
[0260.281] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0260.281] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0260.281] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0260.281] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0260.281] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0260.281] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0260.281] GetCurrentObject (hdc=0x8101079c, type=0x1) returned 0xb00017
[0260.281] GetCurrentObject (hdc=0x8101079c, type=0x2) returned 0x900010
[0260.281] GetCurrentObject (hdc=0x8101079c, type=0x7) returned 0x1e0507b9
[0260.281] GetCurrentObject (hdc=0x8101079c, type=0x6) returned 0x8a01c2
[0260.282] SaveDC (hdc=0x8101079c) returned 1
[0260.282] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6804053e
[0260.282] GetClipRgn (hdc=0x8101079c, hrgn=0x6804053e) returned 0
[0260.282] SelectClipRgn (hdc=0x8101079c, hrgn=0x8304051e) returned 2
[0260.282] DeleteObject (ho=0x6804053e) returned 1
[0260.282] DeleteObject (ho=0x8304051e) returned 1
[0260.282] OffsetViewportOrgEx (in: hdc=0x8101079c, x=0, y=0, lppt=0x24b9b18 | out: lppt=0x24b9b18) returned 1
[0260.282] GetNearestColor (hdc=0x8101079c, color=0xf0f0f0) returned 0xf0f0f0
[0260.282] CreateSolidBrush (color=0xf0f0f0) returned 0x8010078d
[0260.282] FillRect (hDC=0x8101079c, lprc=0x53e1f4, hbr=0x8010078d) returned 1
[0260.282] DeleteObject (ho=0x8010078d) returned 1
[0260.282] RestoreDC (hdc=0x8101079c, nSavedDC=-1) returned 1
[0260.282] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101079c) returned 0x0
[0260.282] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb790dbd) returned 0x0
[0260.282] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.282] GetWindowTextLengthW (hWnd=0x100122) returned 16
[0260.282] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0260.283] GetSystemMetrics (nIndex=42) returned 0
[0260.283] GetWindowTextW (in: hWnd=0x100122, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0260.283] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0260.283] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0260.283] GetCurrentObject (hdc=0x8101079c, type=0x1) returned 0xb00017
[0260.283] GetCurrentObject (hdc=0x8101079c, type=0x2) returned 0x900010
[0260.283] GetCurrentObject (hdc=0x8101079c, type=0x7) returned 0x1e0507b9
[0260.283] GetCurrentObject (hdc=0x8101079c, type=0x6) returned 0x8a01c2
[0260.283] SaveDC (hdc=0x8101079c) returned 1
[0260.283] GetNearestColor (hdc=0x8101079c, color=0x0) returned 0x0
[0260.283] RestoreDC (hdc=0x8101079c, nSavedDC=-1) returned 1
[0260.283] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101079c) returned 0x0
[0260.284] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0260.284] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0260.284] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0260.284] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x24b9e20 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0260.284] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0260.284] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0260.285] GetCurrentObject (hdc=0x8101079c, type=0x1) returned 0xb00017
[0260.285] GetCurrentObject (hdc=0x8101079c, type=0x2) returned 0x900010
[0260.285] GetCurrentObject (hdc=0x8101079c, type=0x7) returned 0x1e0507b9
[0260.285] GetCurrentObject (hdc=0x8101079c, type=0x6) returned 0x8a01c2
[0260.285] SaveDC (hdc=0x8101079c) returned 1
[0260.285] GetTextAlign (hdc=0x8101079c) returned 0x0
[0260.285] GetTextColor (hdc=0x8101079c) returned 0x0
[0260.285] GetCurrentObject (hdc=0x8101079c, type=0x6) returned 0x8a01c2
[0260.285] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0260.285] SelectObject (hdc=0x8101079c, h=0x730a066d) returned 0x8a01c2
[0260.285] GetBkMode (hdc=0x8101079c) returned 2
[0260.285] SetBkMode (hdc=0x8101079c, mode=1) returned 2
[0260.285] DrawTextExW (in: hdc=0x8101079c, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x24ba044 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0260.286] RestoreDC (hdc=0x8101079c, nSavedDC=-1) returned 1
[0260.286] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101079c) returned 0x0
[0260.286] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0260.286] BitBlt (hdc=0x8b010786, x=0, y=0, cx=250, cy=70, hdcSrc=0x8101079c, x1=0, y1=0, rop=0xcc0020) returned 1
[0260.286] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8101079c) returned 0x0
[0260.286] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0260.286] SelectObject (hdc=0x8101079c, h=0x85000f) returned 0x1e0507b9
[0260.287] DeleteDC (hdc=0x8101079c) returned 1
[0260.287] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0260.295] EndPaint (hWnd=0x100122, lpPaint=0x53e2f0) returned 1
[0260.295] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.295] IsWindowUnicode (hWnd=0xf01e2) returned 1
[0260.295] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.295] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.295] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.295] BeginPaint (in: hWnd=0xf01e2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0260.296] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0260.296] CreateCompatibleDC (hdc=0x10105d6) returned 0x8301079c
[0260.296] SelectObject (hdc=0x8301079c, h=0x1e0507b9) returned 0x85000f
[0260.296] GdipCreateFromHDC (hdc=0x8301079c, graphics=0x53e300) returned 0x0
[0260.296] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0260.296] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0260.296] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0260.296] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0260.296] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0260.296] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.296] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0260.296] LocalFree (hMem=0x89ea88) returned 0x0
[0260.296] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0260.296] GdipCreateRegion (region=0x53e348) returned 0x0
[0260.297] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.297] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0260.297] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0260.297] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb770dbd) returned 0x0
[0260.297] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.297] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0260.297] GetCurrentObject (hdc=0x8301079c, type=0x1) returned 0xb00017
[0260.297] GetCurrentObject (hdc=0x8301079c, type=0x2) returned 0x900010
[0260.297] GetCurrentObject (hdc=0x8301079c, type=0x7) returned 0x1e0507b9
[0260.297] GetCurrentObject (hdc=0x8301079c, type=0x6) returned 0x8a01c2
[0260.297] SaveDC (hdc=0x8301079c) returned 1
[0260.297] GetNearestColor (hdc=0x8301079c, color=0xf0f0f0) returned 0xf0f0f0
[0260.297] GetNearestColor (hdc=0x8301079c, color=0xa0a0a0) returned 0xa0a0a0
[0260.297] GetNearestColor (hdc=0x8301079c, color=0x696969) returned 0x696969
[0260.297] GetNearestColor (hdc=0x8301079c, color=0xa0a0a0) returned 0xa0a0a0
[0260.297] GetNearestColor (hdc=0x8301079c, color=0x0) returned 0x0
[0260.298] GetNearestColor (hdc=0x8301079c, color=0xffffff) returned 0xffffff
[0260.298] GetNearestColor (hdc=0x8301079c, color=0xe5e5e5) returned 0xe5e5e5
[0260.298] GetNearestColor (hdc=0x8301079c, color=0xd7d7d7) returned 0xd7d7d7
[0260.298] GetNearestColor (hdc=0x8301079c, color=0x0) returned 0x0
[0260.298] RestoreDC (hdc=0x8301079c, nSavedDC=-1) returned 1
[0260.298] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8301079c) returned 0x0
[0260.298] IsAppThemed () returned 0x1
[0260.298] GetThemeAppProperties () returned 0x3
[0260.298] GetThemeAppProperties () returned 0x3
[0260.298] IsAppThemed () returned 0x1
[0260.298] GetThemeAppProperties () returned 0x3
[0260.298] GetThemeAppProperties () returned 0x3
[0260.298] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x24ba7b0 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0260.299] IsAppThemed () returned 0x1
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] IsAppThemed () returned 0x1
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] IsAppThemed () returned 0x1
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] IsAppThemed () returned 0x1
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] IsThemePartDefined () returned 0x1
[0260.299] IsAppThemed () returned 0x1
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0260.299] IsAppThemed () returned 0x1
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] IsAppThemed () returned 0x1
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] GetThemeAppProperties () returned 0x3
[0260.299] IsThemePartDefined () returned 0x1
[0260.300] GdipCreateRegion (region=0x53e064) returned 0x0
[0260.300] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.300] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0260.300] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0260.300] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0260.300] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.300] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0260.300] LocalFree (hMem=0x89ea88) returned 0x0
[0260.300] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0260.300] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0260.300] LocalFree (hMem=0x89ec80) returned 0x0
[0260.300] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0260.300] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0260.300] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0260.300] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0260.300] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.300] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0260.300] GetCurrentObject (hdc=0x8301079c, type=0x1) returned 0xb00017
[0260.301] GetCurrentObject (hdc=0x8301079c, type=0x2) returned 0x900010
[0260.301] GetCurrentObject (hdc=0x8301079c, type=0x7) returned 0x1e0507b9
[0260.301] GetCurrentObject (hdc=0x8301079c, type=0x6) returned 0x8a01c2
[0260.301] SaveDC (hdc=0x8301079c) returned 1
[0260.301] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8404051e
[0260.301] GetClipRgn (hdc=0x8301079c, hrgn=0x8404051e) returned 0
[0260.301] SelectClipRgn (hdc=0x8301079c, hrgn=0x6c04053e) returned 2
[0260.301] DeleteObject (ho=0x8404051e) returned 1
[0260.301] DeleteObject (ho=0x6c04053e) returned 1
[0260.301] OffsetViewportOrgEx (in: hdc=0x8301079c, x=0, y=0, lppt=0x24bae60 | out: lppt=0x24bae60) returned 1
[0260.301] DrawThemeParentBackground () returned 0x0
[0260.301] GetWindowPlacement (in: hWnd=0xa02ca, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0260.301] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0260.301] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.301] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.301] GetSystemMetrics (nIndex=42) returned 0
[0260.302] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.302] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0260.302] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0260.302] GetCurrentObject (hdc=0x8301079c, type=0x1) returned 0xb00017
[0260.302] GetCurrentObject (hdc=0x8301079c, type=0x2) returned 0x900010
[0260.302] GetCurrentObject (hdc=0x8301079c, type=0x7) returned 0x1e0507b9
[0260.302] GetCurrentObject (hdc=0x8301079c, type=0x6) returned 0x8a01c2
[0260.302] SaveDC (hdc=0x8301079c) returned 2
[0260.302] GetNearestColor (hdc=0x8301079c, color=0xf0f0f0) returned 0xf0f0f0
[0260.302] CreateSolidBrush (color=0xf0f0f0) returned 0x8110078d
[0260.302] FillRect (hDC=0x8301079c, lprc=0x53dac8, hbr=0x8110078d) returned 1
[0260.302] DeleteObject (ho=0x8110078d) returned 1
[0260.302] RestoreDC (hdc=0x8301079c, nSavedDC=-1) returned 1
[0260.306] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.306] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.306] GetSystemMetrics (nIndex=42) returned 0
[0260.306] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.306] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0260.307] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0260.307] GetCurrentObject (hdc=0x8301079c, type=0x1) returned 0xb00017
[0260.307] GetCurrentObject (hdc=0x8301079c, type=0x2) returned 0x900010
[0260.307] GetCurrentObject (hdc=0x8301079c, type=0x7) returned 0x1e0507b9
[0260.307] GetCurrentObject (hdc=0x8301079c, type=0x6) returned 0x8a01c2
[0260.307] SaveDC (hdc=0x8301079c) returned 2
[0260.307] GetNearestColor (hdc=0x8301079c, color=0xf0f0f0) returned 0xf0f0f0
[0260.307] CreateSolidBrush (color=0xf0f0f0) returned 0x8210078d
[0260.307] FillRect (hDC=0x8301079c, lprc=0x53da68, hbr=0x8210078d) returned 1
[0260.307] DeleteObject (ho=0x8210078d) returned 1
[0260.307] RestoreDC (hdc=0x8301079c, nSavedDC=-1) returned 1
[0260.307] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.307] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.307] GetSystemMetrics (nIndex=42) returned 0
[0260.307] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.307] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0260.308] RestoreDC (hdc=0x8301079c, nSavedDC=-1) returned 1
[0260.308] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8301079c) returned 0x0
[0260.308] IsAppThemed () returned 0x1
[0260.308] GetThemeAppProperties () returned 0x3
[0260.308] GetThemeAppProperties () returned 0x3
[0260.308] IsAppThemed () returned 0x1
[0260.308] GetThemeAppProperties () returned 0x3
[0260.308] GetThemeAppProperties () returned 0x3
[0260.308] IsThemePartDefined () returned 0x1
[0260.308] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0260.308] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.308] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0260.308] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0260.308] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0260.308] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0260.308] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0260.308] LocalFree (hMem=0x89ec80) returned 0x0
[0260.309] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0260.309] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0260.309] LocalFree (hMem=0x89ee40) returned 0x0
[0260.309] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0260.309] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0260.309] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0260.309] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0260.309] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.309] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0260.309] GetCurrentObject (hdc=0x8301079c, type=0x1) returned 0xb00017
[0260.309] GetCurrentObject (hdc=0x8301079c, type=0x2) returned 0x900010
[0260.309] GetCurrentObject (hdc=0x8301079c, type=0x7) returned 0x1e0507b9
[0260.309] GetCurrentObject (hdc=0x8301079c, type=0x6) returned 0x8a01c2
[0260.309] SaveDC (hdc=0x8301079c) returned 1
[0260.309] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d04053e
[0260.309] GetClipRgn (hdc=0x8301079c, hrgn=0x6d04053e) returned 0
[0260.309] SelectClipRgn (hdc=0x8301079c, hrgn=0x8604051e) returned 2
[0260.310] DeleteObject (ho=0x6d04053e) returned 1
[0260.310] DeleteObject (ho=0x8604051e) returned 1
[0260.310] OffsetViewportOrgEx (in: hdc=0x8301079c, x=0, y=0, lppt=0x24bb6e8 | out: lppt=0x24bb6e8) returned 1
[0260.310] IsAppThemed () returned 0x1
[0260.310] GetThemeAppProperties () returned 0x3
[0260.310] GetThemeAppProperties () returned 0x3
[0260.310] DrawThemeBackground () returned 0x0
[0260.310] RestoreDC (hdc=0x8301079c, nSavedDC=-1) returned 1
[0260.310] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8301079c) returned 0x0
[0260.310] GdipCreateRegion (region=0x53dfec) returned 0x0
[0260.310] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.310] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0260.310] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0260.310] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0260.310] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0260.310] LocalFree (hMem=0x89ea88) returned 0x0
[0260.310] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0260.310] LocalFree (hMem=0x89ec80) returned 0x0
[0260.310] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0260.311] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0260.311] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0260.311] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0260.311] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.311] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0260.311] GetCurrentObject (hdc=0x8301079c, type=0x1) returned 0xb00017
[0260.311] GetCurrentObject (hdc=0x8301079c, type=0x2) returned 0x900010
[0260.311] GetCurrentObject (hdc=0x8301079c, type=0x7) returned 0x1e0507b9
[0260.311] GetCurrentObject (hdc=0x8301079c, type=0x6) returned 0x8a01c2
[0260.311] SaveDC (hdc=0x8301079c) returned 1
[0260.311] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8704051e
[0260.311] GetClipRgn (hdc=0x8301079c, hrgn=0x8704051e) returned 0
[0260.311] SelectClipRgn (hdc=0x8301079c, hrgn=0x6e04053e) returned 2
[0260.311] DeleteObject (ho=0x8704051e) returned 1
[0260.311] DeleteObject (ho=0x6e04053e) returned 1
[0260.311] OffsetViewportOrgEx (in: hdc=0x8301079c, x=0, y=0, lppt=0x24bb9bc | out: lppt=0x24bb9bc) returned 1
[0260.311] IsAppThemed () returned 0x1
[0260.311] GetThemeAppProperties () returned 0x3
[0260.311] GetThemeAppProperties () returned 0x3
[0260.311] GetThemeBackgroundContentRect () returned 0x0
[0260.312] RestoreDC (hdc=0x8301079c, nSavedDC=-1) returned 1
[0260.312] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8301079c) returned 0x0
[0260.312] IsAppThemed () returned 0x1
[0260.312] GetThemeAppProperties () returned 0x3
[0260.312] GetThemeAppProperties () returned 0x3
[0260.312] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0260.312] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0260.312] GetCurrentObject (hdc=0x8301079c, type=0x1) returned 0xb00017
[0260.312] GetCurrentObject (hdc=0x8301079c, type=0x2) returned 0x900010
[0260.312] GetCurrentObject (hdc=0x8301079c, type=0x7) returned 0x1e0507b9
[0260.312] GetCurrentObject (hdc=0x8301079c, type=0x6) returned 0x8a01c2
[0260.312] SaveDC (hdc=0x8301079c) returned 1
[0260.312] GetTextAlign (hdc=0x8301079c) returned 0x0
[0260.312] GetTextColor (hdc=0x8301079c) returned 0x0
[0260.312] GetCurrentObject (hdc=0x8301079c, type=0x6) returned 0x8a01c2
[0260.312] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0260.312] SelectObject (hdc=0x8301079c, h=0x730a066d) returned 0x8a01c2
[0260.313] GetBkMode (hdc=0x8301079c) returned 2
[0260.313] SetBkMode (hdc=0x8301079c, mode=1) returned 2
[0260.313] DrawTextExW (in: hdc=0x8301079c, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x24bbd5c | out: lpchText="OK", lprc=0x53df84) returned 13
[0260.313] DrawTextExW (in: hdc=0x8301079c, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x24bbd5c | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0260.313] RestoreDC (hdc=0x8301079c, nSavedDC=-1) returned 1
[0260.313] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8301079c) returned 0x0
[0260.313] GetFocus () returned 0xc004e
[0260.313] IsAppThemed () returned 0x1
[0260.313] GetThemeAppProperties () returned 0x3
[0260.313] GetThemeAppProperties () returned 0x3
[0260.313] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0260.313] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x8301079c, x1=0, y1=0, rop=0xcc0020) returned 1
[0260.314] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8301079c) returned 0x0
[0260.314] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0260.314] SelectObject (hdc=0x8301079c, h=0x85000f) returned 0x1e0507b9
[0260.314] DeleteDC (hdc=0x8301079c) returned 1
[0260.314] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0260.314] EndPaint (hWnd=0xf01e2, lpPaint=0x53e2e4) returned 1
[0260.315] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.315] IsWindowUnicode (hWnd=0x1100ea) returned 1
[0260.315] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.315] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.315] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.315] BeginPaint (in: hWnd=0x1100ea, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0260.315] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0260.315] CreateCompatibleDC (hdc=0x60100ce) returned 0x8501079c
[0260.315] SelectObject (hdc=0x8501079c, h=0x1e0507b9) returned 0x85000f
[0260.315] GdipCreateFromHDC (hdc=0x8501079c, graphics=0x53e300) returned 0x0
[0260.315] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0260.316] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0260.316] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0260.316] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0260.316] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0260.316] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0260.316] LocalFree (hMem=0x89ea88) returned 0x0
[0260.316] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0260.316] GdipCreateRegion (region=0x53e348) returned 0x0
[0260.316] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.316] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0260.316] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0260.316] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb750dbd) returned 0x0
[0260.316] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.316] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0260.316] GetCurrentObject (hdc=0x8501079c, type=0x1) returned 0xb00017
[0260.316] GetCurrentObject (hdc=0x8501079c, type=0x2) returned 0x900010
[0260.316] GetCurrentObject (hdc=0x8501079c, type=0x7) returned 0x1e0507b9
[0260.316] GetCurrentObject (hdc=0x8501079c, type=0x6) returned 0x8a01c2
[0260.316] SaveDC (hdc=0x8501079c) returned 1
[0260.317] GetNearestColor (hdc=0x8501079c, color=0xf0f0f0) returned 0xf0f0f0
[0260.317] GetNearestColor (hdc=0x8501079c, color=0xa0a0a0) returned 0xa0a0a0
[0260.317] GetNearestColor (hdc=0x8501079c, color=0x696969) returned 0x696969
[0260.317] GetNearestColor (hdc=0x8501079c, color=0xa0a0a0) returned 0xa0a0a0
[0260.317] GetNearestColor (hdc=0x8501079c, color=0x0) returned 0x0
[0260.317] GetNearestColor (hdc=0x8501079c, color=0xffffff) returned 0xffffff
[0260.317] GetNearestColor (hdc=0x8501079c, color=0xe5e5e5) returned 0xe5e5e5
[0260.317] GetNearestColor (hdc=0x8501079c, color=0xd7d7d7) returned 0xd7d7d7
[0260.317] GetNearestColor (hdc=0x8501079c, color=0x0) returned 0x0
[0260.317] RestoreDC (hdc=0x8501079c, nSavedDC=-1) returned 1
[0260.317] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8501079c) returned 0x0
[0260.317] IsAppThemed () returned 0x1
[0260.317] GetThemeAppProperties () returned 0x3
[0260.317] GetThemeAppProperties () returned 0x3
[0260.317] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0260.317] SendMessageW (hWnd=0xa02ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0260.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0260.318] IsAppThemed () returned 0x1
[0260.318] GetThemeAppProperties () returned 0x3
[0260.318] GetThemeAppProperties () returned 0x3
[0260.318] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x24bc56c | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0260.318] IsAppThemed () returned 0x1
[0260.318] GetThemeAppProperties () returned 0x3
[0260.318] GetThemeAppProperties () returned 0x3
[0260.318] IsAppThemed () returned 0x1
[0260.318] GetThemeAppProperties () returned 0x3
[0260.318] GetThemeAppProperties () returned 0x3
[0260.318] GetFocus () returned 0xc004e
[0260.318] IsAppThemed () returned 0x1
[0260.318] GetThemeAppProperties () returned 0x3
[0260.318] GetThemeAppProperties () returned 0x3
[0260.318] IsAppThemed () returned 0x1
[0260.318] GetThemeAppProperties () returned 0x3
[0260.318] GetThemeAppProperties () returned 0x3
[0260.318] IsThemePartDefined () returned 0x1
[0260.318] IsAppThemed () returned 0x1
[0260.319] GetThemeAppProperties () returned 0x3
[0260.319] GetThemeAppProperties () returned 0x3
[0260.319] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0260.319] IsAppThemed () returned 0x1
[0260.319] GetThemeAppProperties () returned 0x3
[0260.319] GetThemeAppProperties () returned 0x3
[0260.319] IsAppThemed () returned 0x1
[0260.319] GetThemeAppProperties () returned 0x3
[0260.319] GetThemeAppProperties () returned 0x3
[0260.319] IsThemePartDefined () returned 0x1
[0260.319] GdipCreateRegion (region=0x53e070) returned 0x0
[0260.319] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.319] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0260.319] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0260.319] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0260.319] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.319] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0260.319] LocalFree (hMem=0x89ea88) returned 0x0
[0260.319] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0260.319] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0260.319] LocalFree (hMem=0x89eee8) returned 0x0
[0260.320] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0260.320] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0260.320] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0260.320] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0260.320] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.320] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0260.320] GetCurrentObject (hdc=0x8501079c, type=0x1) returned 0xb00017
[0260.320] GetCurrentObject (hdc=0x8501079c, type=0x2) returned 0x900010
[0260.320] GetCurrentObject (hdc=0x8501079c, type=0x7) returned 0x1e0507b9
[0260.320] GetCurrentObject (hdc=0x8501079c, type=0x6) returned 0x8a01c2
[0260.320] SaveDC (hdc=0x8501079c) returned 1
[0260.320] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f04053e
[0260.320] GetClipRgn (hdc=0x8501079c, hrgn=0x6f04053e) returned 0
[0260.320] SelectClipRgn (hdc=0x8501079c, hrgn=0x8b04051e) returned 2
[0260.320] DeleteObject (ho=0x6f04053e) returned 1
[0260.320] DeleteObject (ho=0x8b04051e) returned 1
[0260.320] OffsetViewportOrgEx (in: hdc=0x8501079c, x=0, y=0, lppt=0x24bcc1c | out: lppt=0x24bcc1c) returned 1
[0260.321] DrawThemeParentBackground () returned 0x0
[0260.321] GetWindowPlacement (in: hWnd=0xa02ca, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0260.321] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0260.321] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.321] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.321] GetSystemMetrics (nIndex=42) returned 0
[0260.321] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.321] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0260.321] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0260.321] GetCurrentObject (hdc=0x8501079c, type=0x1) returned 0xb00017
[0260.321] GetCurrentObject (hdc=0x8501079c, type=0x2) returned 0x900010
[0260.321] GetCurrentObject (hdc=0x8501079c, type=0x7) returned 0x1e0507b9
[0260.321] GetCurrentObject (hdc=0x8501079c, type=0x6) returned 0x8a01c2
[0260.321] SaveDC (hdc=0x8501079c) returned 2
[0260.322] GetNearestColor (hdc=0x8501079c, color=0xf0f0f0) returned 0xf0f0f0
[0260.322] CreateSolidBrush (color=0xf0f0f0) returned 0x8310078d
[0260.322] FillRect (hDC=0x8501079c, lprc=0x53dad0, hbr=0x8310078d) returned 1
[0260.322] DeleteObject (ho=0x8310078d) returned 1
[0260.322] RestoreDC (hdc=0x8501079c, nSavedDC=-1) returned 1
[0260.322] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.322] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.322] GetSystemMetrics (nIndex=42) returned 0
[0260.322] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.322] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0260.322] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0260.322] GetCurrentObject (hdc=0x8501079c, type=0x1) returned 0xb00017
[0260.322] GetCurrentObject (hdc=0x8501079c, type=0x2) returned 0x900010
[0260.322] GetCurrentObject (hdc=0x8501079c, type=0x7) returned 0x1e0507b9
[0260.322] GetCurrentObject (hdc=0x8501079c, type=0x6) returned 0x8a01c2
[0260.322] SaveDC (hdc=0x8501079c) returned 2
[0260.322] GetNearestColor (hdc=0x8501079c, color=0xf0f0f0) returned 0xf0f0f0
[0260.323] CreateSolidBrush (color=0xf0f0f0) returned 0x8410078d
[0260.323] FillRect (hDC=0x8501079c, lprc=0x53da70, hbr=0x8410078d) returned 1
[0260.323] DeleteObject (ho=0x8410078d) returned 1
[0260.323] RestoreDC (hdc=0x8501079c, nSavedDC=-1) returned 1
[0260.323] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.323] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.323] GetSystemMetrics (nIndex=42) returned 0
[0260.323] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.323] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0260.323] RestoreDC (hdc=0x8501079c, nSavedDC=-1) returned 1
[0260.323] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8501079c) returned 0x0
[0260.323] IsAppThemed () returned 0x1
[0260.323] GetThemeAppProperties () returned 0x3
[0260.323] GetThemeAppProperties () returned 0x3
[0260.323] IsAppThemed () returned 0x1
[0260.323] GetThemeAppProperties () returned 0x3
[0260.324] GetThemeAppProperties () returned 0x3
[0260.324] IsThemePartDefined () returned 0x1
[0260.324] GdipCreateRegion (region=0x53dff4) returned 0x0
[0260.324] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.324] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0260.324] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0260.324] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0260.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.324] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0260.324] LocalFree (hMem=0x89ea88) returned 0x0
[0260.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.324] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0260.324] LocalFree (hMem=0x89ea88) returned 0x0
[0260.324] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0260.324] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0260.324] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0260.324] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0260.324] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.324] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0260.324] GetCurrentObject (hdc=0x8501079c, type=0x1) returned 0xb00017
[0260.325] GetCurrentObject (hdc=0x8501079c, type=0x2) returned 0x900010
[0260.325] GetCurrentObject (hdc=0x8501079c, type=0x7) returned 0x1e0507b9
[0260.325] GetCurrentObject (hdc=0x8501079c, type=0x6) returned 0x8a01c2
[0260.325] SaveDC (hdc=0x8501079c) returned 1
[0260.325] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8c04051e
[0260.325] GetClipRgn (hdc=0x8501079c, hrgn=0x8c04051e) returned 0
[0260.325] SelectClipRgn (hdc=0x8501079c, hrgn=0x7104053e) returned 2
[0260.325] DeleteObject (ho=0x8c04051e) returned 1
[0260.325] DeleteObject (ho=0x7104053e) returned 1
[0260.325] OffsetViewportOrgEx (in: hdc=0x8501079c, x=0, y=0, lppt=0x24bd4a4 | out: lppt=0x24bd4a4) returned 1
[0260.325] IsAppThemed () returned 0x1
[0260.325] GetThemeAppProperties () returned 0x3
[0260.325] GetThemeAppProperties () returned 0x3
[0260.325] DrawThemeBackground () returned 0x0
[0260.325] RestoreDC (hdc=0x8501079c, nSavedDC=-1) returned 1
[0260.325] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8501079c) returned 0x0
[0260.325] GdipCreateRegion (region=0x53dff8) returned 0x0
[0260.325] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.326] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0260.326] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0260.326] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0260.326] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0260.326] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0260.326] LocalFree (hMem=0x89ec80) returned 0x0
[0260.326] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.326] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0260.326] LocalFree (hMem=0x89ea88) returned 0x0
[0260.326] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0260.326] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0260.326] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0260.326] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0260.326] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.326] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0260.326] GetCurrentObject (hdc=0x8501079c, type=0x1) returned 0xb00017
[0260.326] GetCurrentObject (hdc=0x8501079c, type=0x2) returned 0x900010
[0260.326] GetCurrentObject (hdc=0x8501079c, type=0x7) returned 0x1e0507b9
[0260.326] GetCurrentObject (hdc=0x8501079c, type=0x6) returned 0x8a01c2
[0260.326] SaveDC (hdc=0x8501079c) returned 1
[0260.327] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7204053e
[0260.327] GetClipRgn (hdc=0x8501079c, hrgn=0x7204053e) returned 0
[0260.327] SelectClipRgn (hdc=0x8501079c, hrgn=0x8d04051e) returned 2
[0260.327] DeleteObject (ho=0x7204053e) returned 1
[0260.327] DeleteObject (ho=0x8d04051e) returned 1
[0260.327] OffsetViewportOrgEx (in: hdc=0x8501079c, x=0, y=0, lppt=0x24bd778 | out: lppt=0x24bd778) returned 1
[0260.327] IsAppThemed () returned 0x1
[0260.327] GetThemeAppProperties () returned 0x3
[0260.327] GetThemeAppProperties () returned 0x3
[0260.327] GetThemeBackgroundContentRect () returned 0x0
[0260.327] RestoreDC (hdc=0x8501079c, nSavedDC=-1) returned 1
[0260.327] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8501079c) returned 0x0
[0260.327] IsAppThemed () returned 0x1
[0260.327] GetThemeAppProperties () returned 0x3
[0260.327] GetThemeAppProperties () returned 0x3
[0260.327] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0260.327] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0260.327] GetCurrentObject (hdc=0x8501079c, type=0x1) returned 0xb00017
[0260.327] GetCurrentObject (hdc=0x8501079c, type=0x2) returned 0x900010
[0260.328] GetCurrentObject (hdc=0x8501079c, type=0x7) returned 0x1e0507b9
[0260.328] GetCurrentObject (hdc=0x8501079c, type=0x6) returned 0x8a01c2
[0260.328] SaveDC (hdc=0x8501079c) returned 1
[0260.328] GetTextAlign (hdc=0x8501079c) returned 0x0
[0260.328] GetTextColor (hdc=0x8501079c) returned 0x0
[0260.328] GetCurrentObject (hdc=0x8501079c, type=0x6) returned 0x8a01c2
[0260.328] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0260.328] SelectObject (hdc=0x8501079c, h=0x730a066d) returned 0x8a01c2
[0260.328] GetBkMode (hdc=0x8501079c) returned 2
[0260.328] SetBkMode (hdc=0x8501079c, mode=1) returned 2
[0260.328] DrawTextExW (in: hdc=0x8501079c, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x24bdb18 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0260.328] DrawTextExW (in: hdc=0x8501079c, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x24bdb18 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0260.329] RestoreDC (hdc=0x8501079c, nSavedDC=-1) returned 1
[0260.329] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8501079c) returned 0x0
[0260.329] GetFocus () returned 0xc004e
[0260.329] IsAppThemed () returned 0x1
[0260.329] GetThemeAppProperties () returned 0x3
[0260.329] GetThemeAppProperties () returned 0x3
[0260.329] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0260.329] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x8501079c, x1=0, y1=0, rop=0xcc0020) returned 1
[0260.329] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8501079c) returned 0x0
[0260.329] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0260.329] SelectObject (hdc=0x8501079c, h=0x85000f) returned 0x1e0507b9
[0260.329] DeleteDC (hdc=0x8501079c) returned 1
[0260.329] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0260.330] EndPaint (hWnd=0x1100ea, lpPaint=0x53e2e4) returned 1
[0260.330] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.330] IsWindowUnicode (hWnd=0x202c6) returned 1
[0260.330] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.330] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.330] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.330] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0260.330] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0260.330] CreateCompatibleDC (hdc=0xf0105ee) returned 0x8701079c
[0260.330] SelectObject (hdc=0x8701079c, h=0x1e0507b9) returned 0x85000f
[0260.331] GdipCreateFromHDC (hdc=0x8701079c, graphics=0x53e300) returned 0x0
[0260.331] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0260.331] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0260.331] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0260.331] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0260.331] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0260.331] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0260.331] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0260.331] LocalFree (hMem=0x89eee8) returned 0x0
[0260.331] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0260.331] GdipCreateRegion (region=0x53e348) returned 0x0
[0260.331] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.331] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0260.331] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0260.331] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb730dbd) returned 0x0
[0260.331] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.331] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0260.332] GetCurrentObject (hdc=0x8701079c, type=0x1) returned 0xb00017
[0260.332] GetCurrentObject (hdc=0x8701079c, type=0x2) returned 0x900010
[0260.332] GetCurrentObject (hdc=0x8701079c, type=0x7) returned 0x1e0507b9
[0260.332] GetCurrentObject (hdc=0x8701079c, type=0x6) returned 0x8a01c2
[0260.332] SaveDC (hdc=0x8701079c) returned 1
[0260.332] GetNearestColor (hdc=0x8701079c, color=0xff) returned 0xff
[0260.332] GetNearestColor (hdc=0x8701079c, color=0x55) returned 0x55
[0260.332] GetNearestColor (hdc=0x8701079c, color=0x0) returned 0x0
[0260.332] GetNearestColor (hdc=0x8701079c, color=0x55) returned 0x55
[0260.332] GetNearestColor (hdc=0x8701079c, color=0x0) returned 0x0
[0260.332] GetNearestColor (hdc=0x8701079c, color=0x8080ff) returned 0x8080ff
[0260.332] GetNearestColor (hdc=0x8701079c, color=0x7373e5) returned 0x7373e5
[0260.332] GetNearestColor (hdc=0x8701079c, color=0xe5) returned 0xe5
[0260.332] GetNearestColor (hdc=0x8701079c, color=0x0) returned 0x0
[0260.332] RestoreDC (hdc=0x8701079c, nSavedDC=-1) returned 1
[0260.332] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8701079c) returned 0x0
[0260.332] IsAppThemed () returned 0x1
[0260.333] GetThemeAppProperties () returned 0x3
[0260.333] GetThemeAppProperties () returned 0x3
[0260.333] IsAppThemed () returned 0x1
[0260.333] GetThemeAppProperties () returned 0x3
[0260.333] GetThemeAppProperties () returned 0x3
[0260.333] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0260.333] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x24be2fc | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0260.333] IsAppThemed () returned 0x1
[0260.333] GetThemeAppProperties () returned 0x3
[0260.333] GetThemeAppProperties () returned 0x3
[0260.333] IsAppThemed () returned 0x1
[0260.333] GetThemeAppProperties () returned 0x3
[0260.333] GetThemeAppProperties () returned 0x3
[0260.333] GetFocus () returned 0xc004e
[0260.333] IsAppThemed () returned 0x1
[0260.333] GetThemeAppProperties () returned 0x3
[0260.333] GetThemeAppProperties () returned 0x3
[0260.333] IsAppThemed () returned 0x1
[0260.337] GetThemeAppProperties () returned 0x3
[0260.337] GetThemeAppProperties () returned 0x3
[0260.337] IsThemePartDefined () returned 0x1
[0260.337] IsAppThemed () returned 0x1
[0260.337] GetThemeAppProperties () returned 0x3
[0260.337] GetThemeAppProperties () returned 0x3
[0260.337] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0260.337] IsAppThemed () returned 0x1
[0260.337] GetThemeAppProperties () returned 0x3
[0260.337] GetThemeAppProperties () returned 0x3
[0260.337] IsAppThemed () returned 0x1
[0260.337] GetThemeAppProperties () returned 0x3
[0260.337] GetThemeAppProperties () returned 0x3
[0260.337] IsThemePartDefined () returned 0x1
[0260.337] GdipCreateRegion (region=0x53e070) returned 0x0
[0260.337] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.337] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0260.337] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0260.338] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0260.338] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0260.338] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0260.338] LocalFree (hMem=0x89ec80) returned 0x0
[0260.338] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.338] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0260.338] LocalFree (hMem=0x89ea88) returned 0x0
[0260.338] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0260.338] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0260.338] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0260.338] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0260.338] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.338] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0260.338] GetCurrentObject (hdc=0x8701079c, type=0x1) returned 0xb00017
[0260.338] GetCurrentObject (hdc=0x8701079c, type=0x2) returned 0x900010
[0260.338] GetCurrentObject (hdc=0x8701079c, type=0x7) returned 0x1e0507b9
[0260.338] GetCurrentObject (hdc=0x8701079c, type=0x6) returned 0x8a01c2
[0260.338] SaveDC (hdc=0x8701079c) returned 1
[0260.338] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8e04051e
[0260.338] GetClipRgn (hdc=0x8701079c, hrgn=0x8e04051e) returned 0
[0260.339] SelectClipRgn (hdc=0x8701079c, hrgn=0x7604053e) returned 2
[0260.339] DeleteObject (ho=0x8e04051e) returned 1
[0260.339] DeleteObject (ho=0x7604053e) returned 1
[0260.339] OffsetViewportOrgEx (in: hdc=0x8701079c, x=0, y=0, lppt=0x24be9ac | out: lppt=0x24be9ac) returned 1
[0260.339] DrawThemeParentBackground () returned 0x0
[0260.339] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0260.339] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0260.339] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0260.339] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0260.339] GetSystemMetrics (nIndex=42) returned 0
[0260.339] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0260.339] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0260.339] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0260.339] GetCurrentObject (hdc=0x8701079c, type=0x1) returned 0xb00017
[0260.339] GetCurrentObject (hdc=0x8701079c, type=0x2) returned 0x900010
[0260.339] GetCurrentObject (hdc=0x8701079c, type=0x7) returned 0x1e0507b9
[0260.340] GetCurrentObject (hdc=0x8701079c, type=0x6) returned 0x8a01c2
[0260.340] SaveDC (hdc=0x8701079c) returned 2
[0260.340] GetNearestColor (hdc=0x8701079c, color=0xff) returned 0xff
[0260.340] CreateSolidBrush (color=0xff) returned 0x8510078d
[0260.340] FillRect (hDC=0x8701079c, lprc=0x53dad0, hbr=0x8510078d) returned 1
[0260.340] DeleteObject (ho=0x8510078d) returned 1
[0260.340] RestoreDC (hdc=0x8701079c, nSavedDC=-1) returned 1
[0260.340] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0260.340] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0260.340] GetSystemMetrics (nIndex=42) returned 0
[0260.340] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0260.340] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0260.340] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0260.340] GetCurrentObject (hdc=0x8701079c, type=0x1) returned 0xb00017
[0260.340] GetCurrentObject (hdc=0x8701079c, type=0x2) returned 0x900010
[0260.340] GetCurrentObject (hdc=0x8701079c, type=0x7) returned 0x1e0507b9
[0260.340] GetCurrentObject (hdc=0x8701079c, type=0x6) returned 0x8a01c2
[0260.340] SaveDC (hdc=0x8701079c) returned 2
[0260.341] GetNearestColor (hdc=0x8701079c, color=0xff) returned 0xff
[0260.341] CreateSolidBrush (color=0xff) returned 0x8610078d
[0260.341] FillRect (hDC=0x8701079c, lprc=0x53da70, hbr=0x8610078d) returned 1
[0260.341] DeleteObject (ho=0x8610078d) returned 1
[0260.341] RestoreDC (hdc=0x8701079c, nSavedDC=-1) returned 1
[0260.341] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0260.341] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0260.341] GetSystemMetrics (nIndex=42) returned 0
[0260.341] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0260.341] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0260.341] RestoreDC (hdc=0x8701079c, nSavedDC=-1) returned 1
[0260.341] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8701079c) returned 0x0
[0260.341] IsAppThemed () returned 0x1
[0260.342] GetThemeAppProperties () returned 0x3
[0260.342] GetThemeAppProperties () returned 0x3
[0260.342] IsAppThemed () returned 0x1
[0260.342] GetThemeAppProperties () returned 0x3
[0260.342] GetThemeAppProperties () returned 0x3
[0260.342] IsThemePartDefined () returned 0x1
[0260.342] GdipCreateRegion (region=0x53dff4) returned 0x0
[0260.342] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.342] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0260.342] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0260.342] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0260.342] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.342] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0260.342] LocalFree (hMem=0x89ea88) returned 0x0
[0260.342] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0260.342] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0260.342] LocalFree (hMem=0x89eee8) returned 0x0
[0260.342] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0260.343] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0260.343] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0260.343] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0260.343] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.343] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0260.343] GetCurrentObject (hdc=0x8701079c, type=0x1) returned 0xb00017
[0260.343] GetCurrentObject (hdc=0x8701079c, type=0x2) returned 0x900010
[0260.343] GetCurrentObject (hdc=0x8701079c, type=0x7) returned 0x1e0507b9
[0260.343] GetCurrentObject (hdc=0x8701079c, type=0x6) returned 0x8a01c2
[0260.343] SaveDC (hdc=0x8701079c) returned 1
[0260.343] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7704053e
[0260.343] GetClipRgn (hdc=0x8701079c, hrgn=0x7704053e) returned 0
[0260.343] SelectClipRgn (hdc=0x8701079c, hrgn=0x9004051e) returned 2
[0260.343] DeleteObject (ho=0x7704053e) returned 1
[0260.343] DeleteObject (ho=0x9004051e) returned 1
[0260.343] OffsetViewportOrgEx (in: hdc=0x8701079c, x=0, y=0, lppt=0x24bf210 | out: lppt=0x24bf210) returned 1
[0260.343] IsAppThemed () returned 0x1
[0260.344] GetThemeAppProperties () returned 0x3
[0260.344] GetThemeAppProperties () returned 0x3
[0260.344] DrawThemeBackground () returned 0x0
[0260.344] RestoreDC (hdc=0x8701079c, nSavedDC=-1) returned 1
[0260.344] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8701079c) returned 0x0
[0260.344] GdipCreateRegion (region=0x53dff8) returned 0x0
[0260.344] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.344] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0260.344] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0260.344] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0260.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.344] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0260.344] LocalFree (hMem=0x89ea88) returned 0x0
[0260.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0260.344] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0260.344] LocalFree (hMem=0x89ee40) returned 0x0
[0260.344] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0260.345] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0260.345] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0260.345] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0260.345] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.345] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0260.345] GetCurrentObject (hdc=0x8701079c, type=0x1) returned 0xb00017
[0260.345] GetCurrentObject (hdc=0x8701079c, type=0x2) returned 0x900010
[0260.345] GetCurrentObject (hdc=0x8701079c, type=0x7) returned 0x1e0507b9
[0260.345] GetCurrentObject (hdc=0x8701079c, type=0x6) returned 0x8a01c2
[0260.345] SaveDC (hdc=0x8701079c) returned 1
[0260.345] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9104051e
[0260.345] GetClipRgn (hdc=0x8701079c, hrgn=0x9104051e) returned 0
[0260.345] SelectClipRgn (hdc=0x8701079c, hrgn=0x7804053e) returned 2
[0260.345] DeleteObject (ho=0x9104051e) returned 1
[0260.345] DeleteObject (ho=0x7804053e) returned 1
[0260.345] OffsetViewportOrgEx (in: hdc=0x8701079c, x=0, y=0, lppt=0x24bf4e4 | out: lppt=0x24bf4e4) returned 1
[0260.345] IsAppThemed () returned 0x1
[0260.346] GetThemeAppProperties () returned 0x3
[0260.346] GetThemeAppProperties () returned 0x3
[0260.346] GetThemeBackgroundContentRect () returned 0x0
[0260.346] RestoreDC (hdc=0x8701079c, nSavedDC=-1) returned 1
[0260.346] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8701079c) returned 0x0
[0260.346] IsAppThemed () returned 0x1
[0260.346] GetThemeAppProperties () returned 0x3
[0260.346] GetThemeAppProperties () returned 0x3
[0260.346] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0260.346] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0260.346] GetCurrentObject (hdc=0x8701079c, type=0x1) returned 0xb00017
[0260.346] GetCurrentObject (hdc=0x8701079c, type=0x2) returned 0x900010
[0260.346] GetCurrentObject (hdc=0x8701079c, type=0x7) returned 0x1e0507b9
[0260.346] GetCurrentObject (hdc=0x8701079c, type=0x6) returned 0x8a01c2
[0260.346] SaveDC (hdc=0x8701079c) returned 1
[0260.346] GetTextAlign (hdc=0x8701079c) returned 0x0
[0260.346] GetTextColor (hdc=0x8701079c) returned 0x0
[0260.346] GetCurrentObject (hdc=0x8701079c, type=0x6) returned 0x8a01c2
[0260.347] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0260.347] SelectObject (hdc=0x8701079c, h=0x450a0799) returned 0x8a01c2
[0260.347] GetBkMode (hdc=0x8701079c) returned 2
[0260.347] SetBkMode (hdc=0x8701079c, mode=1) returned 2
[0260.347] DrawTextExW (in: hdc=0x8701079c, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x24bf884 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0260.347] DrawTextExW (in: hdc=0x8701079c, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x24bf884 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0260.347] RestoreDC (hdc=0x8701079c, nSavedDC=-1) returned 1
[0260.348] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8701079c) returned 0x0
[0260.348] GetFocus () returned 0xc004e
[0260.348] IsAppThemed () returned 0x1
[0260.348] GetThemeAppProperties () returned 0x3
[0260.348] GetThemeAppProperties () returned 0x3
[0260.348] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0260.348] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x8701079c, x1=0, y1=0, rop=0xcc0020) returned 1
[0260.348] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8701079c) returned 0x0
[0260.348] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0260.348] SelectObject (hdc=0x8701079c, h=0x85000f) returned 0x1e0507b9
[0260.348] DeleteDC (hdc=0x8701079c) returned 1
[0260.348] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0260.348] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0260.349] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.349] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.349] WaitMessage () returned 1
[0260.368] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.368] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0260.368] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.368] WaitMessage () returned 1
[0260.370] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.370] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0260.370] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.370] WaitMessage () returned 1
[0260.371] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.371] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0260.371] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.371] WaitMessage () returned 1
[0260.379] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.379] IsWindowUnicode (hWnd=0x102dc) returned 1
[0260.379] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.380] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.380] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.384] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.384] IsWindowUnicode (hWnd=0xf01e2) returned 1
[0260.384] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.384] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.384] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.384] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.385] IsWindowUnicode (hWnd=0xf01e2) returned 1
[0260.385] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.385] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.385] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.385] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x2a1, wParam=0x0, lParam=0xb001a) returned 0x0
[0260.385] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.385] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.385] WaitMessage () returned 1
[0260.396] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.396] IsWindowUnicode (hWnd=0x102dc) returned 1
[0260.396] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.396] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.396] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.397] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.397] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.397] WaitMessage () returned 1
[0260.398] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.398] IsWindowUnicode (hWnd=0x102dc) returned 1
[0260.398] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.398] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.398] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.399] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.399] IsWindowUnicode (hWnd=0x102dc) returned 1
[0260.399] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.399] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.399] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.399] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.399] IsWindowUnicode (hWnd=0x102dc) returned 1
[0260.399] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.400] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.400] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.400] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.400] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.400] WaitMessage () returned 1
[0260.400] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.400] IsWindowUnicode (hWnd=0x102dc) returned 1
[0260.400] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.400] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.401] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.402] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.402] IsWindowUnicode (hWnd=0x102dc) returned 1
[0260.402] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.402] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.402] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.402] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.402] IsWindowUnicode (hWnd=0x102dc) returned 1
[0260.402] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.402] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.402] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.402] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.403] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.403] WaitMessage () returned 1
[0260.403] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.403] IsWindowUnicode (hWnd=0x102dc) returned 1
[0260.403] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.403] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.403] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.404] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.405] IsWindowUnicode (hWnd=0x102dc) returned 1
[0260.405] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.405] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.405] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.405] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.405] IsWindowUnicode (hWnd=0x102dc) returned 1
[0260.405] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.405] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.405] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.405] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.406] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.406] WaitMessage () returned 1
[0260.465] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.465] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.465] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.465] DispatchMessageA (lpMsg=0x53e8a0) returned 0x7eb1
[0260.465] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.465] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.465] WaitMessage () returned 1
[0260.540] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.540] IsWindowUnicode (hWnd=0x202d0) returned 1
[0260.540] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.540] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.540] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.540] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.540] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0260.540] WaitMessage () returned 1
[0260.605] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.605] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x84, wParam=0x0, lParam=0x194035b) returned 0x1
[0260.605] IsWindowUnicode (hWnd=0xf01e2) returned 1
[0260.605] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.605] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x84, wParam=0x0, lParam=0x194035b) returned 0x1
[0260.605] GetDlgItem (hDlg=0xa02ca, nIDDlgItem=0) returned 0x0
[0260.605] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x210, wParam=0x201, lParam=0x17013c) returned 0x0
[0260.606] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x21, wParam=0xa02ca, lParam=0x2010001) returned 0x1
[0260.606] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x21, wParam=0xa02ca, lParam=0x2010001) returned 0x1
[0260.606] SetCursor (hCursor=0x10003) returned 0x10003
[0260.606] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.606] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0260.606] GetKeyState (nVirtKey=1) returned -127
[0260.606] GetKeyState (nVirtKey=2) returned 0
[0260.606] GetKeyState (nVirtKey=4) returned 0
[0260.606] GetKeyState (nVirtKey=5) returned 0
[0260.606] GetKeyState (nVirtKey=6) returned 0
[0260.606] IsWindowVisible (hWnd=0xf01e2) returned 1
[0260.606] IsWindowEnabled (hWnd=0xf01e2) returned 1
[0260.606] SetFocus (hWnd=0xf01e2) returned 0xc004e
[0260.607] GetFocus () returned 0xf01e2
[0260.607] IsChild (hWndParent=0xa02ca, hWnd=0xf01e2) returned 1
[0260.607] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x8, wParam=0xf01e2, lParam=0x0) returned 0x1
[0260.607] SendMessageW (hWnd=0xc004e, Msg=0x2111, wParam=0x200004e, lParam=0xc004e) returned 0x0
[0260.608] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0260.609] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0260.610] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0260.610] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0260.610] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0260.610] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0260.613] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0260.613] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x7, wParam=0xc004e, lParam=0x0) returned 0x0
[0260.613] GetStockObject (i=5) returned 0x900015
[0260.613] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0260.613] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0xd, wParam=0x3, lParam=0x89e628) returned 0x2
[0260.613] GetDlgItem (hDlg=0xa02ca, nIDDlgItem=983522) returned 0xf01e2
[0260.613] SendMessageW (hWnd=0xf01e2, Msg=0x202b, wParam=0xf01e2, lParam=0x53de74) returned 0x0
[0260.613] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x202b, wParam=0xf01e2, lParam=0x53de74) returned 0x0
[0260.613] InvalidateRect (hWnd=0xf01e2, lpRect=0x0, bErase=0) returned 1
[0260.616] GetFocus () returned 0xf01e2
[0260.616] GetFocus () returned 0xf01e2
[0260.616] GetFocus () returned 0xf01e2
[0260.616] GetKeyState (nVirtKey=1) returned -127
[0260.616] GetKeyState (nVirtKey=2) returned 0
[0260.616] GetKeyState (nVirtKey=4) returned 0
[0260.616] GetKeyState (nVirtKey=5) returned 0
[0260.617] GetKeyState (nVirtKey=6) returned 0
[0260.617] GetCapture () returned 0x0
[0260.617] SetCapture (hWnd=0xf01e2) returned 0x0
[0260.617] GetKeyState (nVirtKey=1) returned -127
[0260.617] GetKeyState (nVirtKey=2) returned 0
[0260.617] GetKeyState (nVirtKey=4) returned 0
[0260.617] GetKeyState (nVirtKey=5) returned 0
[0260.617] GetKeyState (nVirtKey=6) returned 0
[0260.617] NotifyWinEvent (event=0x800a, hwnd=0xf01e2, idObject=-4, idChild=0)
[0260.617] InvalidateRect (hWnd=0xf01e2, lpRect=0x53e4c8, bErase=0) returned 1
[0260.617] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.617] IsWindowUnicode (hWnd=0xf01e2) returned 1
[0260.617] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0260.617] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0260.617] DispatchMessageW (lpMsg=0x53e8a0)
[0260.617] MapWindowPoints (in: hWndFrom=0xf01e2, hWndTo=0x0, lpPoints=0x24bfbac, cPoints=0x1 | out: lpPoints=0x24bfbac) returned 25756481
[0260.617] NotifyWinEvent (event=0x800a, hwnd=0xf01e2, idObject=-4, idChild=0)
[0260.617] InvalidateRect (hWnd=0xf01e2, lpRect=0x53e468, bErase=0) returned 1
[0260.617] UpdateWindow (hWnd=0xf01e2)
[0260.617] BeginPaint (in: hWnd=0xf01e2, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0xf0105ee
[0260.618] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0260.618] CreateCompatibleDC (hdc=0xf0105ee) returned 0x650107b0
[0260.618] SelectObject (hdc=0x650107b0, h=0x1e0507b9) returned 0x85000f
[0260.618] GdipCreateFromHDC (hdc=0x650107b0, graphics=0x53df98) returned 0x0
[0260.618] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0260.618] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0260.618] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0260.618] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0260.618] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0260.618] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.618] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0260.618] LocalFree (hMem=0x89ea88) returned 0x0
[0260.618] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0260.618] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0260.619] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.619] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0260.619] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0260.619] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb710dbd) returned 0x0
[0260.619] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.619] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0260.619] GetCurrentObject (hdc=0x650107b0, type=0x1) returned 0xb00017
[0260.619] GetCurrentObject (hdc=0x650107b0, type=0x2) returned 0x900010
[0260.619] GetCurrentObject (hdc=0x650107b0, type=0x7) returned 0x1e0507b9
[0260.619] GetCurrentObject (hdc=0x650107b0, type=0x6) returned 0x8a01c2
[0260.619] SaveDC (hdc=0x650107b0) returned 1
[0260.619] GetNearestColor (hdc=0x650107b0, color=0xf0f0f0) returned 0xf0f0f0
[0260.619] GetNearestColor (hdc=0x650107b0, color=0xa0a0a0) returned 0xa0a0a0
[0260.619] GetNearestColor (hdc=0x650107b0, color=0x696969) returned 0x696969
[0260.619] GetNearestColor (hdc=0x650107b0, color=0xa0a0a0) returned 0xa0a0a0
[0260.619] GetNearestColor (hdc=0x650107b0, color=0x0) returned 0x0
[0260.619] GetNearestColor (hdc=0x650107b0, color=0xffffff) returned 0xffffff
[0260.620] GetNearestColor (hdc=0x650107b0, color=0xe5e5e5) returned 0xe5e5e5
[0260.620] GetNearestColor (hdc=0x650107b0, color=0xd7d7d7) returned 0xd7d7d7
[0260.620] GetNearestColor (hdc=0x650107b0, color=0x0) returned 0x0
[0260.620] RestoreDC (hdc=0x650107b0, nSavedDC=-1) returned 1
[0260.620] GdipReleaseDC (graphics=0x5d92c30, hdc=0x650107b0) returned 0x0
[0260.620] IsAppThemed () returned 0x1
[0260.620] GetThemeAppProperties () returned 0x3
[0260.620] GetThemeAppProperties () returned 0x3
[0260.620] IsAppThemed () returned 0x1
[0260.620] GetThemeAppProperties () returned 0x3
[0260.620] GetThemeAppProperties () returned 0x3
[0260.620] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0260.620] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x24c0320 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0260.620] IsAppThemed () returned 0x1
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] IsAppThemed () returned 0x1
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] IsAppThemed () returned 0x1
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] IsAppThemed () returned 0x1
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] IsThemePartDefined () returned 0x1
[0260.621] IsAppThemed () returned 0x1
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0260.621] IsAppThemed () returned 0x1
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] IsAppThemed () returned 0x1
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] GetThemeAppProperties () returned 0x3
[0260.621] IsThemePartDefined () returned 0x1
[0260.621] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0260.621] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.621] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0260.622] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0260.622] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0260.622] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.622] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0260.622] LocalFree (hMem=0x89ea88) returned 0x0
[0260.622] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0260.622] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0260.622] LocalFree (hMem=0x89ea88) returned 0x0
[0260.622] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0260.622] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0260.622] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0260.622] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0260.622] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.622] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0260.622] GetCurrentObject (hdc=0x650107b0, type=0x1) returned 0xb00017
[0260.622] GetCurrentObject (hdc=0x650107b0, type=0x2) returned 0x900010
[0260.622] GetCurrentObject (hdc=0x650107b0, type=0x7) returned 0x1e0507b9
[0260.622] GetCurrentObject (hdc=0x650107b0, type=0x6) returned 0x8a01c2
[0260.622] SaveDC (hdc=0x650107b0) returned 1
[0260.622] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7904053e
[0260.623] GetClipRgn (hdc=0x650107b0, hrgn=0x7904053e) returned 0
[0260.623] SelectClipRgn (hdc=0x650107b0, hrgn=0x9504051e) returned 2
[0260.623] DeleteObject (ho=0x7904053e) returned 1
[0260.623] DeleteObject (ho=0x9504051e) returned 1
[0260.623] OffsetViewportOrgEx (in: hdc=0x650107b0, x=0, y=0, lppt=0x24c09d0 | out: lppt=0x24c09d0) returned 1
[0260.623] DrawThemeParentBackground () returned 0x0
[0260.623] GetWindowPlacement (in: hWnd=0xa02ca, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0260.623] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0260.623] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.623] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.623] GetSystemMetrics (nIndex=42) returned 0
[0260.623] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.623] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0260.623] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0260.624] GetCurrentObject (hdc=0x650107b0, type=0x1) returned 0xb00017
[0260.624] GetCurrentObject (hdc=0x650107b0, type=0x2) returned 0x900010
[0260.624] GetCurrentObject (hdc=0x650107b0, type=0x7) returned 0x1e0507b9
[0260.624] GetCurrentObject (hdc=0x650107b0, type=0x6) returned 0x8a01c2
[0260.624] SaveDC (hdc=0x650107b0) returned 2
[0260.624] GetNearestColor (hdc=0x650107b0, color=0xf0f0f0) returned 0xf0f0f0
[0260.624] CreateSolidBrush (color=0xf0f0f0) returned 0x8710078d
[0260.624] FillRect (hDC=0x650107b0, lprc=0x53d760, hbr=0x8710078d) returned 1
[0260.624] DeleteObject (ho=0x8710078d) returned 1
[0260.625] RestoreDC (hdc=0x650107b0, nSavedDC=-1) returned 1
[0260.625] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.625] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.625] GetSystemMetrics (nIndex=42) returned 0
[0260.625] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.625] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0260.625] GetClientRect (in: hWnd=0xa02ca, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0260.625] GetCurrentObject (hdc=0x650107b0, type=0x1) returned 0xb00017
[0260.625] GetCurrentObject (hdc=0x650107b0, type=0x2) returned 0x900010
[0260.625] GetCurrentObject (hdc=0x650107b0, type=0x7) returned 0x1e0507b9
[0260.625] GetCurrentObject (hdc=0x650107b0, type=0x6) returned 0x8a01c2
[0260.625] SaveDC (hdc=0x650107b0) returned 2
[0260.625] GetNearestColor (hdc=0x650107b0, color=0xf0f0f0) returned 0xf0f0f0
[0260.625] CreateSolidBrush (color=0xf0f0f0) returned 0x8810078d
[0260.625] FillRect (hDC=0x650107b0, lprc=0x53d700, hbr=0x8810078d) returned 1
[0260.625] DeleteObject (ho=0x8810078d) returned 1
[0260.625] RestoreDC (hdc=0x650107b0, nSavedDC=-1) returned 1
[0260.625] GetWindowTextLengthW (hWnd=0xa02ca) returned 10
[0260.625] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0260.626] GetSystemMetrics (nIndex=42) returned 0
[0260.626] GetWindowTextW (in: hWnd=0xa02ca, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0260.626] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0260.626] RestoreDC (hdc=0x650107b0, nSavedDC=-1) returned 1
[0260.626] GdipReleaseDC (graphics=0x5d92c30, hdc=0x650107b0) returned 0x0
[0260.626] IsAppThemed () returned 0x1
[0260.626] GetThemeAppProperties () returned 0x3
[0260.626] GetThemeAppProperties () returned 0x3
[0260.626] IsAppThemed () returned 0x1
[0260.626] GetThemeAppProperties () returned 0x3
[0260.626] GetThemeAppProperties () returned 0x3
[0260.626] IsThemePartDefined () returned 0x1
[0260.626] GdipCreateRegion (region=0x53dc80) returned 0x0
[0260.626] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.626] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0260.626] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0260.626] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0260.626] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0260.627] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0260.627] LocalFree (hMem=0x89ec80) returned 0x0
[0260.627] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0260.627] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0260.627] LocalFree (hMem=0x89ec80) returned 0x0
[0260.627] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0260.627] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0260.627] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0260.627] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0260.627] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.627] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0260.627] GetCurrentObject (hdc=0x650107b0, type=0x1) returned 0xb00017
[0260.627] GetCurrentObject (hdc=0x650107b0, type=0x2) returned 0x900010
[0260.627] GetCurrentObject (hdc=0x650107b0, type=0x7) returned 0x1e0507b9
[0260.627] GetCurrentObject (hdc=0x650107b0, type=0x6) returned 0x8a01c2
[0260.627] SaveDC (hdc=0x650107b0) returned 1
[0260.627] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9604051e
[0260.628] GetClipRgn (hdc=0x650107b0, hrgn=0x9604051e) returned 0
[0260.628] SelectClipRgn (hdc=0x650107b0, hrgn=0x7b04053e) returned 2
[0260.628] DeleteObject (ho=0x9604051e) returned 1
[0260.628] DeleteObject (ho=0x7b04053e) returned 1
[0260.628] OffsetViewportOrgEx (in: hdc=0x650107b0, x=0, y=0, lppt=0x24c1258 | out: lppt=0x24c1258) returned 1
[0260.628] IsAppThemed () returned 0x1
[0260.628] GetThemeAppProperties () returned 0x3
[0260.628] GetThemeAppProperties () returned 0x3
[0260.628] DrawThemeBackground () returned 0x0
[0260.628] RestoreDC (hdc=0x650107b0, nSavedDC=-1) returned 1
[0260.628] GdipReleaseDC (graphics=0x5d92c30, hdc=0x650107b0) returned 0x0
[0260.628] GdipCreateRegion (region=0x53dc84) returned 0x0
[0260.628] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.628] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0260.628] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0260.628] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0260.628] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0260.628] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0260.628] LocalFree (hMem=0x89ec80) returned 0x0
[0260.629] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0260.629] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0260.629] LocalFree (hMem=0x89ec80) returned 0x0
[0260.629] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0260.629] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0260.629] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0260.629] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0260.629] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.629] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0260.629] GetCurrentObject (hdc=0x650107b0, type=0x1) returned 0xb00017
[0260.629] GetCurrentObject (hdc=0x650107b0, type=0x2) returned 0x900010
[0260.629] GetCurrentObject (hdc=0x650107b0, type=0x7) returned 0x1e0507b9
[0260.629] GetCurrentObject (hdc=0x650107b0, type=0x6) returned 0x8a01c2
[0260.629] SaveDC (hdc=0x650107b0) returned 1
[0260.629] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c04053e
[0260.629] GetClipRgn (hdc=0x650107b0, hrgn=0x7c04053e) returned 0
[0260.629] SelectClipRgn (hdc=0x650107b0, hrgn=0x9704051e) returned 2
[0260.629] DeleteObject (ho=0x7c04053e) returned 1
[0260.629] DeleteObject (ho=0x9704051e) returned 1
[0260.629] OffsetViewportOrgEx (in: hdc=0x650107b0, x=0, y=0, lppt=0x24c152c | out: lppt=0x24c152c) returned 1
[0260.629] IsAppThemed () returned 0x1
[0260.630] GetThemeAppProperties () returned 0x3
[0260.630] GetThemeAppProperties () returned 0x3
[0260.630] GetThemeBackgroundContentRect () returned 0x0
[0260.630] RestoreDC (hdc=0x650107b0, nSavedDC=-1) returned 1
[0260.630] GdipReleaseDC (graphics=0x5d92c30, hdc=0x650107b0) returned 0x0
[0260.630] IsAppThemed () returned 0x1
[0260.630] GetThemeAppProperties () returned 0x3
[0260.630] GetThemeAppProperties () returned 0x3
[0260.630] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0260.630] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0260.630] GetCurrentObject (hdc=0x650107b0, type=0x1) returned 0xb00017
[0260.630] GetCurrentObject (hdc=0x650107b0, type=0x2) returned 0x900010
[0260.630] GetCurrentObject (hdc=0x650107b0, type=0x7) returned 0x1e0507b9
[0260.630] GetCurrentObject (hdc=0x650107b0, type=0x6) returned 0x8a01c2
[0260.630] SaveDC (hdc=0x650107b0) returned 1
[0260.630] GetTextAlign (hdc=0x650107b0) returned 0x0
[0260.630] GetTextColor (hdc=0x650107b0) returned 0x0
[0260.630] GetCurrentObject (hdc=0x650107b0, type=0x6) returned 0x8a01c2
[0260.632] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0260.632] SelectObject (hdc=0x650107b0, h=0x730a066d) returned 0x8a01c2
[0260.632] GetBkMode (hdc=0x650107b0) returned 2
[0260.632] SetBkMode (hdc=0x650107b0, mode=1) returned 2
[0260.632] DrawTextExW (in: hdc=0x650107b0, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x24c18cc | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0260.632] DrawTextExW (in: hdc=0x650107b0, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x24c18cc | out: lpchText="OK", lprc=0x53dd80) returned 13
[0260.632] RestoreDC (hdc=0x650107b0, nSavedDC=-1) returned 1
[0260.632] GdipReleaseDC (graphics=0x5d92c30, hdc=0x650107b0) returned 0x0
[0260.633] GetFocus () returned 0xf01e2
[0260.633] IsAppThemed () returned 0x1
[0260.633] GetThemeAppProperties () returned 0x3
[0260.633] GetThemeAppProperties () returned 0x3
[0260.633] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0260.633] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x650107b0, x1=0, y1=0, rop=0xcc0020) returned 1
[0260.633] GdipReleaseDC (graphics=0x5d92c30, hdc=0x650107b0) returned 0x0
[0260.633] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0260.633] SelectObject (hdc=0x650107b0, h=0x85000f) returned 0x1e0507b9
[0260.633] DeleteDC (hdc=0x650107b0) returned 1
[0260.633] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0260.633] EndPaint (hWnd=0xf01e2, lpPaint=0x53df7c) returned 1
[0260.634] WindowFromPoint (Point=0x35b)
[0260.634] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x84, wParam=0x0, lParam=0x194035b) returned 0x1
[0260.634] GetWindowTextLengthW (hWnd=0xc004e)
[0260.634] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0260.634] GetWindowTextW (hWnd=0xc004e, lpString=0x53e3e4, nMaxCount=1)
[0260.634] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0260.634] SendMessageW (hWnd=0xa02ca, Msg=0x10, wParam=0x0, lParam=0x0)
[0260.634] GetCapture () returned 0xf01e2
[0260.634] ReleaseCapture ()
[0260.635] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0260.636] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x84, wParam=0x0, lParam=0x194035b) returned 0x1
[0260.636] EnableWindow (hWnd=0x70036, bEnable=1)
[0260.637] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0260.637] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x86, wParam=0x0, lParam=0x70036)
[0260.639] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0260.639] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0260.639] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0260.691] IsChild (hWndParent=0xa02ca, hWnd=0x202c6) returned 0
[0260.691] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xf01e2, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0260.691] GetCapture () returned 0x0
[0260.691] InvalidateRect (hWnd=0xf01e2, lpRect=0x0, bErase=0) returned 1
[0260.695] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0260.695] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0260.695] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0260.700] IsChild (hWndParent=0xa02ca, hWnd=0x202c6) returned 0
[0260.700] ShowWindow (hWnd=0xa02ca, nCmdShow=0)
[0260.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0260.705] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xa02ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0260.706] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xc004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0260.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2c013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0260.708] GetWindowTextLengthW (hWnd=0x100122)
[0260.708] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0260.708] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x100122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0260.721] GetProcessWindowStation () returned 0x13c
[0260.721] GetActiveWindow () returned 0x70036
[0260.721] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0260.721] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0260.721] GetCurrentThreadId () returned 0x11d0
[0260.722] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf5676, lParam=0x0) returned 1
[0260.722] IsWindowVisible (hWnd=0x70036) returned 1
[0260.722] IsWindowEnabled (hWnd=0x70036) returned 1
[0260.722] IsWindowVisible (hWnd=0x602b6) returned 0
[0260.722] IsWindowVisible (hWnd=0x901f8) returned 0
[0260.722] IsWindowVisible (hWnd=0x202d0) returned 0
[0260.722] IsWindowVisible (hWnd=0x202d4) returned 0
[0260.722] GetActiveWindow () returned 0x70036
[0260.722] GetFocus () returned 0x202c6
[0260.723] IsWindow (hWnd=0x70036) returned 1
[0260.723] EnableWindow (hWnd=0x70036, bEnable=0)
[0260.723] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0260.723] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0260.725] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0260.751] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x8b010786
[0260.751] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0260.751] CreateCompatibleDC (hdc=0x8b010786) returned 0x48010795
[0260.751] SelectObject (hdc=0x48010795, h=0x1e0507b9) returned 0x85000f
[0260.751] GdipCreateFromHDC (hdc=0x48010795, graphics=0x53e108) returned 0x0
[0260.751] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0260.752] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0260.752] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0260.752] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0260.752] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0260.752] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0260.752] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0260.752] LocalFree (hMem=0x89eac0) returned 0x0
[0260.752] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0260.752] GdipCreateRegion (region=0x53e150) returned 0x0
[0260.752] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.752] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0260.752] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0260.752] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb6f0dbd) returned 0x0
[0260.752] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.753] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0260.753] GetCurrentObject (hdc=0x48010795, type=0x1) returned 0xb00017
[0260.753] GetCurrentObject (hdc=0x48010795, type=0x2) returned 0x900010
[0260.753] GetCurrentObject (hdc=0x48010795, type=0x7) returned 0x1e0507b9
[0260.753] GetCurrentObject (hdc=0x48010795, type=0x6) returned 0x8a01c2
[0260.753] SaveDC (hdc=0x48010795) returned 1
[0260.753] GetNearestColor (hdc=0x48010795, color=0xff) returned 0xff
[0260.753] GetNearestColor (hdc=0x48010795, color=0x55) returned 0x55
[0260.753] GetNearestColor (hdc=0x48010795, color=0x0) returned 0x0
[0260.753] GetNearestColor (hdc=0x48010795, color=0x55) returned 0x55
[0260.754] GetNearestColor (hdc=0x48010795, color=0x0) returned 0x0
[0260.754] GetNearestColor (hdc=0x48010795, color=0x8080ff) returned 0x8080ff
[0260.754] GetNearestColor (hdc=0x48010795, color=0x7373e5) returned 0x7373e5
[0260.754] GetNearestColor (hdc=0x48010795, color=0xe5) returned 0xe5
[0260.754] GetNearestColor (hdc=0x48010795, color=0x0) returned 0x0
[0260.754] RestoreDC (hdc=0x48010795, nSavedDC=-1) returned 1
[0260.754] GdipReleaseDC (graphics=0x5d92c30, hdc=0x48010795) returned 0x0
[0260.754] IsAppThemed () returned 0x1
[0260.754] GetThemeAppProperties () returned 0x3
[0260.754] GetThemeAppProperties () returned 0x3
[0260.754] IsAppThemed () returned 0x1
[0260.754] GetThemeAppProperties () returned 0x3
[0260.754] GetThemeAppProperties () returned 0x3
[0260.754] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0260.755] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x24c2cc0 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0260.755] IsAppThemed () returned 0x1
[0260.755] GetThemeAppProperties () returned 0x3
[0260.755] GetThemeAppProperties () returned 0x3
[0260.755] IsAppThemed () returned 0x1
[0260.755] GetThemeAppProperties () returned 0x3
[0260.755] GetThemeAppProperties () returned 0x3
[0260.755] GetFocus () returned 0x1200ea
[0260.755] IsAppThemed () returned 0x1
[0260.755] GetThemeAppProperties () returned 0x3
[0260.755] GetThemeAppProperties () returned 0x3
[0260.755] IsAppThemed () returned 0x1
[0260.755] GetThemeAppProperties () returned 0x3
[0260.762] GetThemeAppProperties () returned 0x3
[0260.762] IsThemePartDefined () returned 0x1
[0260.762] IsAppThemed () returned 0x1
[0260.762] GetThemeAppProperties () returned 0x3
[0260.762] GetThemeAppProperties () returned 0x3
[0260.762] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0260.762] IsAppThemed () returned 0x1
[0260.762] GetThemeAppProperties () returned 0x3
[0260.762] GetThemeAppProperties () returned 0x3
[0260.762] IsAppThemed () returned 0x1
[0260.762] GetThemeAppProperties () returned 0x3
[0260.762] GetThemeAppProperties () returned 0x3
[0260.762] IsThemePartDefined () returned 0x1
[0260.762] GdipCreateRegion (region=0x53de78) returned 0x0
[0260.762] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.762] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0260.762] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0260.762] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0260.762] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0260.762] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0260.763] LocalFree (hMem=0x89ec80) returned 0x0
[0260.763] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0260.763] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0260.763] LocalFree (hMem=0x89eac0) returned 0x0
[0260.763] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0260.763] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0260.763] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0260.763] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0260.763] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.763] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0260.763] GetCurrentObject (hdc=0x48010795, type=0x1) returned 0xb00017
[0260.763] GetCurrentObject (hdc=0x48010795, type=0x2) returned 0x900010
[0260.763] GetCurrentObject (hdc=0x48010795, type=0x7) returned 0x1e0507b9
[0260.763] GetCurrentObject (hdc=0x48010795, type=0x6) returned 0x8a01c2
[0260.763] SaveDC (hdc=0x48010795) returned 1
[0260.763] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9804051e
[0260.763] GetClipRgn (hdc=0x48010795, hrgn=0x9804051e) returned 0
[0260.764] SelectClipRgn (hdc=0x48010795, hrgn=0x8204053e) returned 2
[0260.764] DeleteObject (ho=0x9804051e) returned 1
[0260.764] DeleteObject (ho=0x8204053e) returned 1
[0260.764] OffsetViewportOrgEx (in: hdc=0x48010795, x=0, y=0, lppt=0x24c3370 | out: lppt=0x24c3370) returned 1
[0260.764] DrawThemeParentBackground () returned 0x0
[0260.764] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0260.764] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0260.764] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0260.764] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0260.764] GetSystemMetrics (nIndex=42) returned 0
[0260.764] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0260.764] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0260.764] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0260.764] GetCurrentObject (hdc=0x48010795, type=0x1) returned 0xb00017
[0260.764] GetCurrentObject (hdc=0x48010795, type=0x2) returned 0x900010
[0260.765] GetCurrentObject (hdc=0x48010795, type=0x7) returned 0x1e0507b9
[0260.765] GetCurrentObject (hdc=0x48010795, type=0x6) returned 0x8a01c2
[0260.765] SaveDC (hdc=0x48010795) returned 2
[0260.765] GetNearestColor (hdc=0x48010795, color=0xff) returned 0xff
[0260.765] CreateSolidBrush (color=0xff) returned 0x8910078d
[0260.765] FillRect (hDC=0x48010795, lprc=0x53d8d8, hbr=0x8910078d) returned 1
[0260.765] DeleteObject (ho=0x8910078d) returned 1
[0260.765] RestoreDC (hdc=0x48010795, nSavedDC=-1) returned 1
[0260.765] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0260.765] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0260.765] GetSystemMetrics (nIndex=42) returned 0
[0260.765] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0260.765] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0260.765] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0260.765] GetCurrentObject (hdc=0x48010795, type=0x1) returned 0xb00017
[0260.765] GetCurrentObject (hdc=0x48010795, type=0x2) returned 0x900010
[0260.765] GetCurrentObject (hdc=0x48010795, type=0x7) returned 0x1e0507b9
[0260.765] GetCurrentObject (hdc=0x48010795, type=0x6) returned 0x8a01c2
[0260.766] SaveDC (hdc=0x48010795) returned 2
[0260.766] GetNearestColor (hdc=0x48010795, color=0xff) returned 0xff
[0260.766] CreateSolidBrush (color=0xff) returned 0x8a10078d
[0260.766] FillRect (hDC=0x48010795, lprc=0x53d878, hbr=0x8a10078d) returned 1
[0260.766] DeleteObject (ho=0x8a10078d) returned 1
[0260.766] RestoreDC (hdc=0x48010795, nSavedDC=-1) returned 1
[0260.766] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0260.766] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0260.766] GetSystemMetrics (nIndex=42) returned 0
[0260.766] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0260.766] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0260.766] RestoreDC (hdc=0x48010795, nSavedDC=-1) returned 1
[0260.766] GdipReleaseDC (graphics=0x5d92c30, hdc=0x48010795) returned 0x0
[0260.766] IsAppThemed () returned 0x1
[0260.766] GetThemeAppProperties () returned 0x3
[0260.767] GetThemeAppProperties () returned 0x3
[0260.767] IsAppThemed () returned 0x1
[0260.767] GetThemeAppProperties () returned 0x3
[0260.767] GetThemeAppProperties () returned 0x3
[0260.767] IsThemePartDefined () returned 0x1
[0260.767] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0260.767] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.767] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0260.767] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0260.767] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0260.767] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0260.767] LocalFree (hMem=0x89ec80) returned 0x0
[0260.767] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0260.767] LocalFree (hMem=0x89eac0) returned 0x0
[0260.767] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0260.767] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0260.767] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0260.767] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0260.767] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.767] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0260.768] GetCurrentObject (hdc=0x48010795, type=0x1) returned 0xb00017
[0260.768] GetCurrentObject (hdc=0x48010795, type=0x2) returned 0x900010
[0260.768] GetCurrentObject (hdc=0x48010795, type=0x7) returned 0x1e0507b9
[0260.768] GetCurrentObject (hdc=0x48010795, type=0x6) returned 0x8a01c2
[0260.768] SaveDC (hdc=0x48010795) returned 1
[0260.768] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8304053e
[0260.768] GetClipRgn (hdc=0x48010795, hrgn=0x8304053e) returned 0
[0260.768] SelectClipRgn (hdc=0x48010795, hrgn=0x9a04051e) returned 2
[0260.768] DeleteObject (ho=0x8304053e) returned 1
[0260.768] DeleteObject (ho=0x9a04051e) returned 1
[0260.768] OffsetViewportOrgEx (in: hdc=0x48010795, x=0, y=0, lppt=0x24c3bd4 | out: lppt=0x24c3bd4) returned 1
[0260.768] IsAppThemed () returned 0x1
[0260.768] GetThemeAppProperties () returned 0x3
[0260.768] GetThemeAppProperties () returned 0x3
[0260.768] DrawThemeBackground () returned 0x0
[0260.768] RestoreDC (hdc=0x48010795, nSavedDC=-1) returned 1
[0260.768] GdipReleaseDC (graphics=0x5d92c30, hdc=0x48010795) returned 0x0
[0260.768] GdipCreateRegion (region=0x53de00) returned 0x0
[0260.769] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0260.769] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0260.769] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0260.769] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0260.769] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0260.769] LocalFree (hMem=0x89ec80) returned 0x0
[0260.769] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0260.769] LocalFree (hMem=0x89ee08) returned 0x0
[0260.769] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0260.769] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0260.769] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0260.769] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0260.769] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0260.769] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0260.769] GetCurrentObject (hdc=0x48010795, type=0x1) returned 0xb00017
[0260.769] GetCurrentObject (hdc=0x48010795, type=0x2) returned 0x900010
[0260.769] GetCurrentObject (hdc=0x48010795, type=0x7) returned 0x1e0507b9
[0260.769] GetCurrentObject (hdc=0x48010795, type=0x6) returned 0x8a01c2
[0260.769] SaveDC (hdc=0x48010795) returned 1
[0260.770] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9b04051e
[0260.770] GetClipRgn (hdc=0x48010795, hrgn=0x9b04051e) returned 0
[0260.770] SelectClipRgn (hdc=0x48010795, hrgn=0x8404053e) returned 2
[0260.770] DeleteObject (ho=0x9b04051e) returned 1
[0260.770] DeleteObject (ho=0x8404053e) returned 1
[0260.770] OffsetViewportOrgEx (in: hdc=0x48010795, x=0, y=0, lppt=0x24c3ea8 | out: lppt=0x24c3ea8) returned 1
[0260.770] IsAppThemed () returned 0x1
[0260.770] GetThemeAppProperties () returned 0x3
[0260.770] GetThemeAppProperties () returned 0x3
[0260.770] GetThemeBackgroundContentRect () returned 0x0
[0260.770] RestoreDC (hdc=0x48010795, nSavedDC=-1) returned 1
[0260.770] GdipReleaseDC (graphics=0x5d92c30, hdc=0x48010795) returned 0x0
[0260.770] IsAppThemed () returned 0x1
[0260.771] GetThemeAppProperties () returned 0x3
[0260.771] GetThemeAppProperties () returned 0x3
[0260.771] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0260.771] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0260.771] GetCurrentObject (hdc=0x48010795, type=0x1) returned 0xb00017
[0260.771] GetCurrentObject (hdc=0x48010795, type=0x2) returned 0x900010
[0260.771] GetCurrentObject (hdc=0x48010795, type=0x7) returned 0x1e0507b9
[0260.771] GetCurrentObject (hdc=0x48010795, type=0x6) returned 0x8a01c2
[0260.771] SaveDC (hdc=0x48010795) returned 1
[0260.772] GetTextAlign (hdc=0x48010795) returned 0x0
[0260.772] GetTextColor (hdc=0x48010795) returned 0x0
[0260.772] GetCurrentObject (hdc=0x48010795, type=0x6) returned 0x8a01c2
[0260.772] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0260.772] SelectObject (hdc=0x48010795, h=0x450a0799) returned 0x8a01c2
[0260.772] GetBkMode (hdc=0x48010795) returned 2
[0260.772] SetBkMode (hdc=0x48010795, mode=1) returned 2
[0260.772] DrawTextExW (in: hdc=0x48010795, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x24c4248 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0260.773] DrawTextExW (in: hdc=0x48010795, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x24c4248 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0260.773] RestoreDC (hdc=0x48010795, nSavedDC=-1) returned 1
[0260.773] GdipReleaseDC (graphics=0x5d92c30, hdc=0x48010795) returned 0x0
[0260.773] GetFocus () returned 0x1200ea
[0260.773] IsAppThemed () returned 0x1
[0260.773] GetThemeAppProperties () returned 0x3
[0260.773] GetThemeAppProperties () returned 0x3
[0260.773] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0260.773] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x48010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0260.774] GdipReleaseDC (graphics=0x5d92c30, hdc=0x48010795) returned 0x0
[0260.774] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0260.774] SelectObject (hdc=0x48010795, h=0x85000f) returned 0x1e0507b9
[0260.774] DeleteDC (hdc=0x48010795) returned 1
[0260.774] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0260.774] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0261.082] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0261.082] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0261.082] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0xb02ca) returned 0x1
[0261.086] GetFocus () returned 0xb02ca
[0261.086] GetAncestor (hwnd=0xb02ca, gaFlags=0x1) returned 0x10010
[0261.086] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0261.086] SetFocus (hWnd=0x202c6) returned 0x0
[0261.089] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0261.091] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0261.091] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0261.092] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0261.092] GetFocus () returned 0x70036
[0261.092] SetFocus (hWnd=0x202c6) returned 0x0
[0261.098] IsWindow (hWnd=0x70036) returned 1
[0261.098] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0261.099] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0261.099] IsWindow (hWnd=0x70036) returned 1
[0261.099] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0261.099] IsWindow (hWnd=0x202c6) returned 1
[0261.099] SetFocus (hWnd=0x202c6) returned 0x70036
[0261.104] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0261.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0261.106] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0261.108] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0261.108] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0261.108] GetStockObject (i=5) returned 0x900015
[0261.109] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0261.109] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8cca90) returned 0x7
[0261.109] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0261.109] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0261.109] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0261.109] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0261.111] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0261.111] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0261.111] GetFocus () returned 0x202c6
[0261.111] GetCapture () returned 0x0
[0261.111] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.112] IsWindowUnicode (hWnd=0x202c6) returned 1
[0261.112] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.112] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.112] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.112] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.113] IsWindowUnicode (hWnd=0x202c6) returned 1
[0261.113] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.113] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.113] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.113] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0261.113] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0261.113] CreateCompatibleDC (hdc=0xf0105ee) returned 0xae01079b
[0261.113] SelectObject (hdc=0xae01079b, h=0x1e0507b9) returned 0x85000f
[0261.114] GdipCreateFromHDC (hdc=0xae01079b, graphics=0x53e958) returned 0x0
[0261.114] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0261.114] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0261.114] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0261.114] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0261.114] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0261.114] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0261.114] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0261.114] LocalFree (hMem=0x89ec80) returned 0x0
[0261.114] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0261.114] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0261.114] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0261.114] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0261.115] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0261.115] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb6d0dbd) returned 0x0
[0261.115] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0261.115] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0261.115] GetCurrentObject (hdc=0xae01079b, type=0x1) returned 0xb00017
[0261.115] GetCurrentObject (hdc=0xae01079b, type=0x2) returned 0x900010
[0261.115] GetCurrentObject (hdc=0xae01079b, type=0x7) returned 0x1e0507b9
[0261.115] GetCurrentObject (hdc=0xae01079b, type=0x6) returned 0x8a01c2
[0261.115] SaveDC (hdc=0xae01079b) returned 1
[0261.115] GetNearestColor (hdc=0xae01079b, color=0xff) returned 0xff
[0261.116] GetNearestColor (hdc=0xae01079b, color=0x55) returned 0x55
[0261.116] GetNearestColor (hdc=0xae01079b, color=0x0) returned 0x0
[0261.116] GetNearestColor (hdc=0xae01079b, color=0x55) returned 0x55
[0261.116] GetNearestColor (hdc=0xae01079b, color=0x0) returned 0x0
[0261.116] GetNearestColor (hdc=0xae01079b, color=0x8080ff) returned 0x8080ff
[0261.116] GetNearestColor (hdc=0xae01079b, color=0x7373e5) returned 0x7373e5
[0261.116] GetNearestColor (hdc=0xae01079b, color=0xe5) returned 0xe5
[0261.116] GetNearestColor (hdc=0xae01079b, color=0x0) returned 0x0
[0261.116] RestoreDC (hdc=0xae01079b, nSavedDC=-1) returned 1
[0261.116] GdipReleaseDC (graphics=0x5d92c30, hdc=0xae01079b) returned 0x0
[0261.116] IsAppThemed () returned 0x1
[0261.116] GetThemeAppProperties () returned 0x3
[0261.116] GetThemeAppProperties () returned 0x3
[0261.117] IsAppThemed () returned 0x1
[0261.117] GetThemeAppProperties () returned 0x3
[0261.117] GetThemeAppProperties () returned 0x3
[0261.117] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x24c4aa4 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0261.117] IsAppThemed () returned 0x1
[0261.117] GetThemeAppProperties () returned 0x3
[0261.117] GetThemeAppProperties () returned 0x3
[0261.117] IsAppThemed () returned 0x1
[0261.117] GetThemeAppProperties () returned 0x3
[0261.117] GetThemeAppProperties () returned 0x3
[0261.117] GetFocus () returned 0x202c6
[0261.118] IsAppThemed () returned 0x1
[0261.118] GetThemeAppProperties () returned 0x3
[0261.118] GetThemeAppProperties () returned 0x3
[0261.118] IsAppThemed () returned 0x1
[0261.118] GetThemeAppProperties () returned 0x3
[0261.118] GetThemeAppProperties () returned 0x3
[0261.118] IsThemePartDefined () returned 0x1
[0261.118] IsAppThemed () returned 0x1
[0261.118] GetThemeAppProperties () returned 0x3
[0261.118] GetThemeAppProperties () returned 0x3
[0261.118] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0261.118] IsAppThemed () returned 0x1
[0261.118] GetThemeAppProperties () returned 0x3
[0261.118] GetThemeAppProperties () returned 0x3
[0261.118] IsAppThemed () returned 0x1
[0261.118] GetThemeAppProperties () returned 0x3
[0261.118] GetThemeAppProperties () returned 0x3
[0261.118] IsThemePartDefined () returned 0x1
[0261.118] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0261.118] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0261.119] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0261.119] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0261.119] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0261.119] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0261.119] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0261.119] LocalFree (hMem=0x89eac0) returned 0x0
[0261.119] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0261.119] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0261.119] LocalFree (hMem=0x89ee08) returned 0x0
[0261.119] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0261.119] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0261.119] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0261.119] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0261.119] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0261.119] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0261.119] GetCurrentObject (hdc=0xae01079b, type=0x1) returned 0xb00017
[0261.119] GetCurrentObject (hdc=0xae01079b, type=0x2) returned 0x900010
[0261.120] GetCurrentObject (hdc=0xae01079b, type=0x7) returned 0x1e0507b9
[0261.120] GetCurrentObject (hdc=0xae01079b, type=0x6) returned 0x8a01c2
[0261.120] SaveDC (hdc=0xae01079b) returned 1
[0261.120] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8a04053e
[0261.120] GetClipRgn (hdc=0xae01079b, hrgn=0x8a04053e) returned 0
[0261.120] SelectClipRgn (hdc=0xae01079b, hrgn=0xab04051e) returned 2
[0261.120] DeleteObject (ho=0x8a04053e) returned 1
[0261.120] DeleteObject (ho=0xab04051e) returned 1
[0261.120] OffsetViewportOrgEx (in: hdc=0xae01079b, x=0, y=0, lppt=0x24c5154 | out: lppt=0x24c5154) returned 1
[0261.120] DrawThemeParentBackground () returned 0x0
[0261.120] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0261.121] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0261.121] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0261.121] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0261.121] GetSystemMetrics (nIndex=42) returned 0
[0261.121] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0261.121] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0261.121] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0261.121] GetCurrentObject (hdc=0xae01079b, type=0x1) returned 0xb00017
[0261.121] GetCurrentObject (hdc=0xae01079b, type=0x2) returned 0x900010
[0261.121] GetCurrentObject (hdc=0xae01079b, type=0x7) returned 0x1e0507b9
[0261.121] GetCurrentObject (hdc=0xae01079b, type=0x6) returned 0x8a01c2
[0261.121] SaveDC (hdc=0xae01079b) returned 2
[0261.121] GetNearestColor (hdc=0xae01079b, color=0xff) returned 0xff
[0261.121] CreateSolidBrush (color=0xff) returned 0x8c10078d
[0261.121] FillRect (hDC=0xae01079b, lprc=0x53e128, hbr=0x8c10078d) returned 1
[0261.121] DeleteObject (ho=0x8c10078d) returned 1
[0261.122] RestoreDC (hdc=0xae01079b, nSavedDC=-1) returned 1
[0261.122] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0261.122] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0261.122] GetSystemMetrics (nIndex=42) returned 0
[0261.122] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0261.122] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0261.122] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0261.122] GetCurrentObject (hdc=0xae01079b, type=0x1) returned 0xb00017
[0261.122] GetCurrentObject (hdc=0xae01079b, type=0x2) returned 0x900010
[0261.122] GetCurrentObject (hdc=0xae01079b, type=0x7) returned 0x1e0507b9
[0261.122] GetCurrentObject (hdc=0xae01079b, type=0x6) returned 0x8a01c2
[0261.122] SaveDC (hdc=0xae01079b) returned 2
[0261.122] GetNearestColor (hdc=0xae01079b, color=0xff) returned 0xff
[0261.122] CreateSolidBrush (color=0xff) returned 0x8d10078d
[0261.123] FillRect (hDC=0xae01079b, lprc=0x53e0c8, hbr=0x8d10078d) returned 1
[0261.123] DeleteObject (ho=0x8d10078d) returned 1
[0261.123] RestoreDC (hdc=0xae01079b, nSavedDC=-1) returned 1
[0261.123] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0261.123] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0261.123] GetSystemMetrics (nIndex=42) returned 0
[0261.123] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0261.123] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0261.123] RestoreDC (hdc=0xae01079b, nSavedDC=-1) returned 1
[0261.123] GdipReleaseDC (graphics=0x5d92c30, hdc=0xae01079b) returned 0x0
[0261.123] IsAppThemed () returned 0x1
[0261.124] GetThemeAppProperties () returned 0x3
[0261.124] GetThemeAppProperties () returned 0x3
[0261.124] IsAppThemed () returned 0x1
[0261.124] GetThemeAppProperties () returned 0x3
[0261.124] GetThemeAppProperties () returned 0x3
[0261.124] IsThemePartDefined () returned 0x1
[0261.124] GdipCreateRegion (region=0x53e64c) returned 0x0
[0261.124] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0261.124] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0261.124] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0261.124] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0261.124] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0261.124] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0261.124] LocalFree (hMem=0x89ec80) returned 0x0
[0261.124] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0261.124] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0261.124] LocalFree (hMem=0x89ee08) returned 0x0
[0261.125] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0261.125] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0261.125] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0261.125] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0261.125] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0261.125] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0261.125] GetCurrentObject (hdc=0xae01079b, type=0x1) returned 0xb00017
[0261.125] GetCurrentObject (hdc=0xae01079b, type=0x2) returned 0x900010
[0261.125] GetCurrentObject (hdc=0xae01079b, type=0x7) returned 0x1e0507b9
[0261.125] GetCurrentObject (hdc=0xae01079b, type=0x6) returned 0x8a01c2
[0261.125] SaveDC (hdc=0xae01079b) returned 1
[0261.125] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xac04051e
[0261.125] GetClipRgn (hdc=0xae01079b, hrgn=0xac04051e) returned 0
[0261.125] SelectClipRgn (hdc=0xae01079b, hrgn=0x8c04053e) returned 2
[0261.126] DeleteObject (ho=0xac04051e) returned 1
[0261.126] DeleteObject (ho=0x8c04053e) returned 1
[0261.126] OffsetViewportOrgEx (in: hdc=0xae01079b, x=0, y=0, lppt=0x24c59b8 | out: lppt=0x24c59b8) returned 1
[0261.126] IsAppThemed () returned 0x1
[0261.126] GetThemeAppProperties () returned 0x3
[0261.126] GetThemeAppProperties () returned 0x3
[0261.126] DrawThemeBackground () returned 0x0
[0261.126] RestoreDC (hdc=0xae01079b, nSavedDC=-1) returned 1
[0261.126] GdipReleaseDC (graphics=0x5d92c30, hdc=0xae01079b) returned 0x0
[0261.126] GdipCreateRegion (region=0x53e650) returned 0x0
[0261.126] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0261.126] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0261.127] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0261.127] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0261.127] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0261.127] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0261.127] LocalFree (hMem=0x89ee08) returned 0x0
[0261.127] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0261.127] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0261.127] LocalFree (hMem=0x89ec80) returned 0x0
[0261.127] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0261.127] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0261.127] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0261.127] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0261.127] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0261.127] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0261.127] GetCurrentObject (hdc=0xae01079b, type=0x1) returned 0xb00017
[0261.128] GetCurrentObject (hdc=0xae01079b, type=0x2) returned 0x900010
[0261.128] GetCurrentObject (hdc=0xae01079b, type=0x7) returned 0x1e0507b9
[0261.128] GetCurrentObject (hdc=0xae01079b, type=0x6) returned 0x8a01c2
[0261.128] SaveDC (hdc=0xae01079b) returned 1
[0261.128] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8d04053e
[0261.128] GetClipRgn (hdc=0xae01079b, hrgn=0x8d04053e) returned 0
[0261.128] SelectClipRgn (hdc=0xae01079b, hrgn=0xad04051e) returned 2
[0261.128] DeleteObject (ho=0x8d04053e) returned 1
[0261.128] DeleteObject (ho=0xad04051e) returned 1
[0261.128] OffsetViewportOrgEx (in: hdc=0xae01079b, x=0, y=0, lppt=0x24c5c8c | out: lppt=0x24c5c8c) returned 1
[0261.128] IsAppThemed () returned 0x1
[0261.128] GetThemeAppProperties () returned 0x3
[0261.128] GetThemeAppProperties () returned 0x3
[0261.128] GetThemeBackgroundContentRect () returned 0x0
[0261.129] RestoreDC (hdc=0xae01079b, nSavedDC=-1) returned 1
[0261.129] GdipReleaseDC (graphics=0x5d92c30, hdc=0xae01079b) returned 0x0
[0261.129] IsAppThemed () returned 0x1
[0261.129] GetThemeAppProperties () returned 0x3
[0261.129] GetThemeAppProperties () returned 0x3
[0261.129] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0261.129] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0261.129] GetCurrentObject (hdc=0xae01079b, type=0x1) returned 0xb00017
[0261.129] GetCurrentObject (hdc=0xae01079b, type=0x2) returned 0x900010
[0261.129] GetCurrentObject (hdc=0xae01079b, type=0x7) returned 0x1e0507b9
[0261.129] GetCurrentObject (hdc=0xae01079b, type=0x6) returned 0x8a01c2
[0261.129] SaveDC (hdc=0xae01079b) returned 1
[0261.130] GetTextAlign (hdc=0xae01079b) returned 0x0
[0261.130] GetTextColor (hdc=0xae01079b) returned 0x0
[0261.130] GetCurrentObject (hdc=0xae01079b, type=0x6) returned 0x8a01c2
[0261.130] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0261.130] SelectObject (hdc=0xae01079b, h=0x450a0799) returned 0x8a01c2
[0261.130] GetBkMode (hdc=0xae01079b) returned 2
[0261.130] SetBkMode (hdc=0xae01079b, mode=1) returned 2
[0261.130] DrawTextExW (in: hdc=0xae01079b, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x24c602c | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0261.140] DrawTextExW (in: hdc=0xae01079b, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x24c602c | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0261.141] RestoreDC (hdc=0xae01079b, nSavedDC=-1) returned 1
[0261.141] GdipReleaseDC (graphics=0x5d92c30, hdc=0xae01079b) returned 0x0
[0261.141] GetFocus () returned 0x202c6
[0261.141] IsAppThemed () returned 0x1
[0261.141] GetThemeAppProperties () returned 0x3
[0261.141] GetThemeAppProperties () returned 0x3
[0261.141] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0261.141] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xae01079b, x1=0, y1=0, rop=0xcc0020) returned 1
[0261.141] GdipReleaseDC (graphics=0x5d92c30, hdc=0xae01079b) returned 0x0
[0261.141] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0261.142] SelectObject (hdc=0xae01079b, h=0x85000f) returned 0x1e0507b9
[0261.142] DeleteDC (hdc=0xae01079b) returned 1
[0261.142] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0261.142] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0261.142] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.142] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.142] WaitMessage () returned 1
[0261.146] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.146] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.146] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.147] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.147] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.148] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.148] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.148] WaitMessage () returned 1
[0261.184] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.184] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.184] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.185] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.185] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.186] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.186] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.186] WaitMessage () returned 1
[0261.187] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.187] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.187] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.187] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.187] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.188] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.189] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.189] WaitMessage () returned 1
[0261.189] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.189] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.189] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.190] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.190] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.191] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.192] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.192] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.192] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.192] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.192] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.192] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.192] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.192] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.192] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.192] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.197] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.197] WaitMessage () returned 1
[0261.199] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.199] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.199] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.199] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.199] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.200] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.201] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.201] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.201] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.201] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.201] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.201] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.201] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.201] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.201] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.202] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.202] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.202] WaitMessage () returned 1
[0261.203] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.203] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.203] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.203] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.203] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.204] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.205] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.205] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.205] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.205] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.205] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.205] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.205] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.205] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.205] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.205] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.207] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.207] WaitMessage () returned 1
[0261.207] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.207] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.207] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.207] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.207] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.210] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.210] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.210] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.210] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.210] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.210] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.211] IsWindowUnicode (hWnd=0x102dc) returned 1
[0261.211] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.211] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.211] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.211] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.212] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.212] WaitMessage () returned 1
[0261.428] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.428] IsWindowUnicode (hWnd=0x202d0) returned 1
[0261.429] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.429] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.429] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0261.429] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.429] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.429] WaitMessage () returned 1
[0261.459] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.459] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0261.459] TranslateMessage (lpMsg=0x53eef8) returned 0
[0261.459] DispatchMessageA (lpMsg=0x53eef8) returned 0x7eaf
[0261.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0261.460] WaitMessage () returned 1
[0262.475] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0262.475] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0262.475] TranslateMessage (lpMsg=0x53eef8) returned 0
[0262.475] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0262.475] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0262.476] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0262.476] WaitMessage () returned 1
[0262.932] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0262.932] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940240) returned 0x1
[0262.932] IsWindowUnicode (hWnd=0x202c6) returned 1
[0262.932] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0262.932] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940240) returned 0x1
[0262.932] SetCursor (hCursor=0x10003) returned 0x10003
[0262.932] TranslateMessage (lpMsg=0x53eef8) returned 0
[0262.932] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0262.932] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0262.932] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0262.932] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0262.932] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0262.933] GetKeyState (nVirtKey=1) returned 0
[0262.933] GetKeyState (nVirtKey=2) returned 0
[0262.933] GetKeyState (nVirtKey=4) returned 0
[0262.933] GetKeyState (nVirtKey=5) returned 0
[0262.933] GetKeyState (nVirtKey=6) returned 0
[0262.933] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0262.933] IsWindowUnicode (hWnd=0x202c6) returned 1
[0262.933] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0262.933] TranslateMessage (lpMsg=0x53eef8) returned 0
[0262.933] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0262.933] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0262.933] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0262.933] CreateCompatibleDC (hdc=0xf0105ee) returned 0xdd0107bf
[0262.933] SelectObject (hdc=0xdd0107bf, h=0x1e0507b9) returned 0x85000f
[0262.933] GdipCreateFromHDC (hdc=0xdd0107bf, graphics=0x53e958) returned 0x0
[0262.934] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0262.934] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0262.934] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0262.934] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0262.934] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0262.934] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0262.934] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0262.934] LocalFree (hMem=0x89ea88) returned 0x0
[0262.934] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0262.934] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0262.934] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0262.934] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0262.934] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0262.934] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb6b0dbd) returned 0x0
[0262.934] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0262.934] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0262.934] GetCurrentObject (hdc=0xdd0107bf, type=0x1) returned 0xb00017
[0262.935] GetCurrentObject (hdc=0xdd0107bf, type=0x2) returned 0x900010
[0262.935] GetCurrentObject (hdc=0xdd0107bf, type=0x7) returned 0x1e0507b9
[0262.935] GetCurrentObject (hdc=0xdd0107bf, type=0x6) returned 0x8a01c2
[0262.935] SaveDC (hdc=0xdd0107bf) returned 1
[0262.935] GetNearestColor (hdc=0xdd0107bf, color=0xff) returned 0xff
[0262.935] GetNearestColor (hdc=0xdd0107bf, color=0x55) returned 0x55
[0262.935] GetNearestColor (hdc=0xdd0107bf, color=0x0) returned 0x0
[0262.935] GetNearestColor (hdc=0xdd0107bf, color=0x55) returned 0x55
[0262.935] GetNearestColor (hdc=0xdd0107bf, color=0x0) returned 0x0
[0262.935] GetNearestColor (hdc=0xdd0107bf, color=0x8080ff) returned 0x8080ff
[0262.935] GetNearestColor (hdc=0xdd0107bf, color=0x7373e5) returned 0x7373e5
[0262.935] GetNearestColor (hdc=0xdd0107bf, color=0xe5) returned 0xe5
[0262.936] GetNearestColor (hdc=0xdd0107bf, color=0x0) returned 0x0
[0262.936] RestoreDC (hdc=0xdd0107bf, nSavedDC=-1) returned 1
[0262.936] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd0107bf) returned 0x0
[0262.936] IsAppThemed () returned 0x1
[0262.936] GetThemeAppProperties () returned 0x3
[0262.936] GetThemeAppProperties () returned 0x3
[0262.936] IsAppThemed () returned 0x1
[0262.936] GetThemeAppProperties () returned 0x3
[0262.936] GetThemeAppProperties () returned 0x3
[0262.936] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x24c69c0 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0262.936] IsAppThemed () returned 0x1
[0262.936] GetThemeAppProperties () returned 0x3
[0262.937] GetThemeAppProperties () returned 0x3
[0262.937] IsAppThemed () returned 0x1
[0262.937] GetThemeAppProperties () returned 0x3
[0262.937] GetThemeAppProperties () returned 0x3
[0262.937] IsAppThemed () returned 0x1
[0262.937] GetThemeAppProperties () returned 0x3
[0262.937] GetThemeAppProperties () returned 0x3
[0262.937] IsAppThemed () returned 0x1
[0262.937] GetThemeAppProperties () returned 0x3
[0262.937] GetThemeAppProperties () returned 0x3
[0262.937] IsThemePartDefined () returned 0x1
[0262.937] IsAppThemed () returned 0x1
[0262.937] GetThemeAppProperties () returned 0x3
[0262.937] GetThemeAppProperties () returned 0x3
[0262.937] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0262.937] IsAppThemed () returned 0x1
[0262.937] GetThemeAppProperties () returned 0x3
[0262.937] GetThemeAppProperties () returned 0x3
[0262.937] IsAppThemed () returned 0x1
[0262.938] GetThemeAppProperties () returned 0x3
[0262.938] GetThemeAppProperties () returned 0x3
[0262.938] IsThemePartDefined () returned 0x1
[0262.938] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0262.938] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0262.938] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0262.938] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0262.938] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0262.938] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0262.938] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0262.938] LocalFree (hMem=0x89ea88) returned 0x0
[0262.938] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0262.938] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0262.938] LocalFree (hMem=0x89ec80) returned 0x0
[0262.938] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0262.938] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0262.938] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0262.938] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0262.939] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0262.939] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0262.939] GetCurrentObject (hdc=0xdd0107bf, type=0x1) returned 0xb00017
[0262.939] GetCurrentObject (hdc=0xdd0107bf, type=0x2) returned 0x900010
[0262.939] GetCurrentObject (hdc=0xdd0107bf, type=0x7) returned 0x1e0507b9
[0262.939] GetCurrentObject (hdc=0xdd0107bf, type=0x6) returned 0x8a01c2
[0262.939] SaveDC (hdc=0xdd0107bf) returned 1
[0262.939] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xae04051e
[0262.939] GetClipRgn (hdc=0xdd0107bf, hrgn=0xae04051e) returned 0
[0262.939] SelectClipRgn (hdc=0xdd0107bf, hrgn=0x9104053e) returned 2
[0262.939] DeleteObject (ho=0xae04051e) returned 1
[0262.939] DeleteObject (ho=0x9104053e) returned 1
[0262.939] OffsetViewportOrgEx (in: hdc=0xdd0107bf, x=0, y=0, lppt=0x24c7070 | out: lppt=0x24c7070) returned 1
[0262.939] DrawThemeParentBackground () returned 0x0
[0262.940] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0262.940] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0262.940] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0262.940] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0262.940] GetSystemMetrics (nIndex=42) returned 0
[0262.940] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0262.940] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0262.940] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0262.940] GetCurrentObject (hdc=0xdd0107bf, type=0x1) returned 0xb00017
[0262.940] GetCurrentObject (hdc=0xdd0107bf, type=0x2) returned 0x900010
[0262.940] GetCurrentObject (hdc=0xdd0107bf, type=0x7) returned 0x1e0507b9
[0262.940] GetCurrentObject (hdc=0xdd0107bf, type=0x6) returned 0x8a01c2
[0262.940] SaveDC (hdc=0xdd0107bf) returned 2
[0262.940] GetNearestColor (hdc=0xdd0107bf, color=0xff) returned 0xff
[0262.941] CreateSolidBrush (color=0xff) returned 0x8e10078d
[0262.941] FillRect (hDC=0xdd0107bf, lprc=0x53e120, hbr=0x8e10078d) returned 1
[0262.941] DeleteObject (ho=0x8e10078d) returned 1
[0262.941] RestoreDC (hdc=0xdd0107bf, nSavedDC=-1) returned 1
[0262.941] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0262.941] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0262.941] GetSystemMetrics (nIndex=42) returned 0
[0262.941] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0262.941] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0262.941] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0262.941] GetCurrentObject (hdc=0xdd0107bf, type=0x1) returned 0xb00017
[0262.941] GetCurrentObject (hdc=0xdd0107bf, type=0x2) returned 0x900010
[0262.941] GetCurrentObject (hdc=0xdd0107bf, type=0x7) returned 0x1e0507b9
[0262.941] GetCurrentObject (hdc=0xdd0107bf, type=0x6) returned 0x8a01c2
[0262.941] SaveDC (hdc=0xdd0107bf) returned 2
[0262.942] GetNearestColor (hdc=0xdd0107bf, color=0xff) returned 0xff
[0262.942] CreateSolidBrush (color=0xff) returned 0x8f10078d
[0262.942] FillRect (hDC=0xdd0107bf, lprc=0x53e0c0, hbr=0x8f10078d) returned 1
[0262.942] DeleteObject (ho=0x8f10078d) returned 1
[0262.942] RestoreDC (hdc=0xdd0107bf, nSavedDC=-1) returned 1
[0262.942] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0262.942] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0262.942] GetSystemMetrics (nIndex=42) returned 0
[0262.942] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0262.942] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0262.942] RestoreDC (hdc=0xdd0107bf, nSavedDC=-1) returned 1
[0262.942] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd0107bf) returned 0x0
[0262.942] IsAppThemed () returned 0x1
[0262.943] GetThemeAppProperties () returned 0x3
[0262.943] GetThemeAppProperties () returned 0x3
[0262.943] IsAppThemed () returned 0x1
[0262.943] GetThemeAppProperties () returned 0x3
[0262.943] GetThemeAppProperties () returned 0x3
[0262.943] IsThemePartDefined () returned 0x1
[0262.943] GdipCreateRegion (region=0x53e640) returned 0x0
[0262.944] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0262.944] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0262.944] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0262.944] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0262.944] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0262.944] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0262.945] LocalFree (hMem=0x89ee08) returned 0x0
[0262.945] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0262.945] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0262.945] LocalFree (hMem=0x89ee08) returned 0x0
[0262.945] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0262.945] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0262.945] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0262.945] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0262.945] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0262.945] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0262.945] GetCurrentObject (hdc=0xdd0107bf, type=0x1) returned 0xb00017
[0262.945] GetCurrentObject (hdc=0xdd0107bf, type=0x2) returned 0x900010
[0262.945] GetCurrentObject (hdc=0xdd0107bf, type=0x7) returned 0x1e0507b9
[0262.945] GetCurrentObject (hdc=0xdd0107bf, type=0x6) returned 0x8a01c2
[0262.945] SaveDC (hdc=0xdd0107bf) returned 1
[0262.945] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9204053e
[0262.945] GetClipRgn (hdc=0xdd0107bf, hrgn=0x9204053e) returned 0
[0262.946] SelectClipRgn (hdc=0xdd0107bf, hrgn=0xb004051e) returned 2
[0262.946] DeleteObject (ho=0x9204053e) returned 1
[0262.946] DeleteObject (ho=0xb004051e) returned 1
[0262.946] OffsetViewportOrgEx (in: hdc=0xdd0107bf, x=0, y=0, lppt=0x24c78d4 | out: lppt=0x24c78d4) returned 1
[0262.946] IsAppThemed () returned 0x1
[0262.946] GetThemeAppProperties () returned 0x3
[0262.946] GetThemeAppProperties () returned 0x3
[0262.946] DrawThemeBackground () returned 0x0
[0262.946] RestoreDC (hdc=0xdd0107bf, nSavedDC=-1) returned 1
[0262.946] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd0107bf) returned 0x0
[0262.946] GdipCreateRegion (region=0x53e644) returned 0x0
[0262.946] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0262.946] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0262.946] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0262.946] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0262.947] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0262.947] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0262.947] LocalFree (hMem=0x89ee08) returned 0x0
[0262.947] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0262.947] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0262.947] LocalFree (hMem=0x89ee08) returned 0x0
[0262.947] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0262.947] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0262.947] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0262.947] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0262.947] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0262.947] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0262.947] GetCurrentObject (hdc=0xdd0107bf, type=0x1) returned 0xb00017
[0262.947] GetCurrentObject (hdc=0xdd0107bf, type=0x2) returned 0x900010
[0262.947] GetCurrentObject (hdc=0xdd0107bf, type=0x7) returned 0x1e0507b9
[0262.947] GetCurrentObject (hdc=0xdd0107bf, type=0x6) returned 0x8a01c2
[0262.948] SaveDC (hdc=0xdd0107bf) returned 1
[0262.948] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb104051e
[0262.948] GetClipRgn (hdc=0xdd0107bf, hrgn=0xb104051e) returned 0
[0262.948] SelectClipRgn (hdc=0xdd0107bf, hrgn=0x9304053e) returned 2
[0262.949] DeleteObject (ho=0xb104051e) returned 1
[0262.949] DeleteObject (ho=0x9304053e) returned 1
[0262.949] OffsetViewportOrgEx (in: hdc=0xdd0107bf, x=0, y=0, lppt=0x24c7ba8 | out: lppt=0x24c7ba8) returned 1
[0262.949] IsAppThemed () returned 0x1
[0262.949] GetThemeAppProperties () returned 0x3
[0262.949] GetThemeAppProperties () returned 0x3
[0262.949] GetThemeBackgroundContentRect () returned 0x0
[0262.949] RestoreDC (hdc=0xdd0107bf, nSavedDC=-1) returned 1
[0262.949] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd0107bf) returned 0x0
[0262.949] IsAppThemed () returned 0x1
[0262.949] GetThemeAppProperties () returned 0x3
[0262.949] GetThemeAppProperties () returned 0x3
[0262.949] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0262.949] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0262.949] GetCurrentObject (hdc=0xdd0107bf, type=0x1) returned 0xb00017
[0262.949] GetCurrentObject (hdc=0xdd0107bf, type=0x2) returned 0x900010
[0262.949] GetCurrentObject (hdc=0xdd0107bf, type=0x7) returned 0x1e0507b9
[0262.950] GetCurrentObject (hdc=0xdd0107bf, type=0x6) returned 0x8a01c2
[0262.950] SaveDC (hdc=0xdd0107bf) returned 1
[0262.950] GetTextAlign (hdc=0xdd0107bf) returned 0x0
[0262.950] GetTextColor (hdc=0xdd0107bf) returned 0x0
[0262.950] GetCurrentObject (hdc=0xdd0107bf, type=0x6) returned 0x8a01c2
[0262.950] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0262.950] SelectObject (hdc=0xdd0107bf, h=0x450a0799) returned 0x8a01c2
[0262.950] GetBkMode (hdc=0xdd0107bf) returned 2
[0262.950] SetBkMode (hdc=0xdd0107bf, mode=1) returned 2
[0262.950] DrawTextExW (in: hdc=0xdd0107bf, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x24c7f48 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0262.951] DrawTextExW (in: hdc=0xdd0107bf, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x24c7f48 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0262.951] RestoreDC (hdc=0xdd0107bf, nSavedDC=-1) returned 1
[0262.951] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd0107bf) returned 0x0
[0262.951] GetFocus () returned 0x202c6
[0262.951] IsAppThemed () returned 0x1
[0262.951] GetThemeAppProperties () returned 0x3
[0262.952] GetThemeAppProperties () returned 0x3
[0262.952] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0262.952] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xdd0107bf, x1=0, y1=0, rop=0xcc0020) returned 1
[0262.952] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd0107bf) returned 0x0
[0262.952] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0262.952] SelectObject (hdc=0xdd0107bf, h=0x85000f) returned 0x1e0507b9
[0262.952] DeleteDC (hdc=0xdd0107bf) returned 1
[0262.952] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0262.952] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0262.953] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0262.953] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0262.953] WaitMessage () returned 1
[0263.039] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0263.039] IsWindowUnicode (hWnd=0x202c6) returned 1
[0263.039] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0263.039] TranslateMessage (lpMsg=0x53eef8) returned 0
[0263.039] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0263.039] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0263.039] IsWindowUnicode (hWnd=0x202c6) returned 1
[0263.039] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0263.039] TranslateMessage (lpMsg=0x53eef8) returned 0
[0263.039] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0263.039] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xc0050) returned 0x0
[0263.040] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0263.040] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0263.040] WaitMessage () returned 1
[0263.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0263.195] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940240) returned 0x1
[0263.195] IsWindowUnicode (hWnd=0x202c6) returned 1
[0263.195] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0263.195] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940240) returned 0x1
[0263.195] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0263.195] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12701ea) returned 0x0
[0263.195] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0263.195] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0263.195] SetCursor (hCursor=0x10003) returned 0x10003
[0263.195] TranslateMessage (lpMsg=0x53eef8) returned 0
[0263.195] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0263.195] GetKeyState (nVirtKey=1) returned -127
[0263.195] GetKeyState (nVirtKey=2) returned 0
[0263.195] GetKeyState (nVirtKey=4) returned 0
[0263.196] GetKeyState (nVirtKey=5) returned 0
[0263.196] GetKeyState (nVirtKey=6) returned 0
[0263.196] IsWindowVisible (hWnd=0x202c6) returned 1
[0263.196] IsWindowEnabled (hWnd=0x202c6) returned 1
[0263.196] SetFocus (hWnd=0x202c6) returned 0x202c6
[0263.196] GetFocus () returned 0x202c6
[0263.196] GetFocus () returned 0x202c6
[0263.196] GetFocus () returned 0x202c6
[0263.196] GetKeyState (nVirtKey=1) returned -127
[0263.196] GetKeyState (nVirtKey=2) returned 0
[0263.196] GetKeyState (nVirtKey=4) returned 0
[0263.196] GetKeyState (nVirtKey=5) returned 0
[0263.196] GetKeyState (nVirtKey=6) returned 0
[0263.196] GetCapture () returned 0x0
[0263.196] SetCapture (hWnd=0x202c6) returned 0x0
[0263.196] GetKeyState (nVirtKey=1) returned -127
[0263.196] GetKeyState (nVirtKey=2) returned 0
[0263.196] GetKeyState (nVirtKey=4) returned 0
[0263.196] GetKeyState (nVirtKey=5) returned 0
[0263.196] GetKeyState (nVirtKey=6) returned 0
[0263.196] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0263.196] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0263.196] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0263.197] IsWindowUnicode (hWnd=0x202c6) returned 1
[0263.197] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0263.197] TranslateMessage (lpMsg=0x53eef8) returned 0
[0263.197] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0263.197] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x24c80cc, cPoints=0x1 | out: lpPoints=0x24c80cc) returned 25690608
[0263.197] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0263.197] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0263.197] UpdateWindow (hWnd=0x202c6) returned 1
[0263.197] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0263.197] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0263.197] CreateCompatibleDC (hdc=0xf0105ee) returned 0xde0107bf
[0263.197] SelectObject (hdc=0xde0107bf, h=0x1e0507b9) returned 0x85000f
[0263.197] GdipCreateFromHDC (hdc=0xde0107bf, graphics=0x53e5f0) returned 0x0
[0263.197] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0263.197] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0263.198] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0263.198] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.198] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0263.198] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0263.198] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0263.198] LocalFree (hMem=0x89ee08) returned 0x0
[0263.198] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.198] GdipCreateRegion (region=0x53e638) returned 0x0
[0263.198] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.198] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0263.198] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0263.198] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb690dbd) returned 0x0
[0263.198] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.198] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0263.198] GetCurrentObject (hdc=0xde0107bf, type=0x1) returned 0xb00017
[0263.198] GetCurrentObject (hdc=0xde0107bf, type=0x2) returned 0x900010
[0263.198] GetCurrentObject (hdc=0xde0107bf, type=0x7) returned 0x1e0507b9
[0263.198] GetCurrentObject (hdc=0xde0107bf, type=0x6) returned 0x8a01c2
[0263.198] SaveDC (hdc=0xde0107bf) returned 1
[0263.199] GetNearestColor (hdc=0xde0107bf, color=0xff) returned 0xff
[0263.199] GetNearestColor (hdc=0xde0107bf, color=0x55) returned 0x55
[0263.199] GetNearestColor (hdc=0xde0107bf, color=0x0) returned 0x0
[0263.199] GetNearestColor (hdc=0xde0107bf, color=0x55) returned 0x55
[0263.199] GetNearestColor (hdc=0xde0107bf, color=0x0) returned 0x0
[0263.199] GetNearestColor (hdc=0xde0107bf, color=0x8080ff) returned 0x8080ff
[0263.199] GetNearestColor (hdc=0xde0107bf, color=0x7373e5) returned 0x7373e5
[0263.199] GetNearestColor (hdc=0xde0107bf, color=0xe5) returned 0xe5
[0263.199] GetNearestColor (hdc=0xde0107bf, color=0x0) returned 0x0
[0263.199] RestoreDC (hdc=0xde0107bf, nSavedDC=-1) returned 1
[0263.199] GdipReleaseDC (graphics=0x5d92c30, hdc=0xde0107bf) returned 0x0
[0263.199] IsAppThemed () returned 0x1
[0263.199] GetThemeAppProperties () returned 0x3
[0263.199] GetThemeAppProperties () returned 0x3
[0263.199] IsAppThemed () returned 0x1
[0263.199] GetThemeAppProperties () returned 0x3
[0263.200] GetThemeAppProperties () returned 0x3
[0263.200] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x24c87e8 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0263.200] IsAppThemed () returned 0x1
[0263.200] GetThemeAppProperties () returned 0x3
[0263.200] GetThemeAppProperties () returned 0x3
[0263.200] IsAppThemed () returned 0x1
[0263.200] GetThemeAppProperties () returned 0x3
[0263.200] GetThemeAppProperties () returned 0x3
[0263.200] IsAppThemed () returned 0x1
[0263.200] GetThemeAppProperties () returned 0x3
[0263.200] GetThemeAppProperties () returned 0x3
[0263.200] IsAppThemed () returned 0x1
[0263.200] GetThemeAppProperties () returned 0x3
[0263.200] GetThemeAppProperties () returned 0x3
[0263.200] IsThemePartDefined () returned 0x1
[0263.200] IsAppThemed () returned 0x1
[0263.200] GetThemeAppProperties () returned 0x3
[0263.200] GetThemeAppProperties () returned 0x3
[0263.201] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0263.201] IsAppThemed () returned 0x1
[0263.201] GetThemeAppProperties () returned 0x3
[0263.201] GetThemeAppProperties () returned 0x3
[0263.201] IsAppThemed () returned 0x1
[0263.201] GetThemeAppProperties () returned 0x3
[0263.201] GetThemeAppProperties () returned 0x3
[0263.201] IsThemePartDefined () returned 0x1
[0263.201] GdipCreateRegion (region=0x53e354) returned 0x0
[0263.201] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.201] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0263.201] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.201] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0263.201] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.201] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0263.201] LocalFree (hMem=0x89ea88) returned 0x0
[0263.201] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0263.201] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0263.201] LocalFree (hMem=0x89eee8) returned 0x0
[0263.201] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.201] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0263.201] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0263.201] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0263.202] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.202] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0263.202] GetCurrentObject (hdc=0xde0107bf, type=0x1) returned 0xb00017
[0263.202] GetCurrentObject (hdc=0xde0107bf, type=0x2) returned 0x900010
[0263.202] GetCurrentObject (hdc=0xde0107bf, type=0x7) returned 0x1e0507b9
[0263.202] GetCurrentObject (hdc=0xde0107bf, type=0x6) returned 0x8a01c2
[0263.202] SaveDC (hdc=0xde0107bf) returned 1
[0263.202] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9404053e
[0263.202] GetClipRgn (hdc=0xde0107bf, hrgn=0x9404053e) returned 0
[0263.202] SelectClipRgn (hdc=0xde0107bf, hrgn=0xb504051e) returned 2
[0263.202] DeleteObject (ho=0x9404053e) returned 1
[0263.202] DeleteObject (ho=0xb504051e) returned 1
[0263.202] OffsetViewportOrgEx (in: hdc=0xde0107bf, x=0, y=0, lppt=0x24c8e98 | out: lppt=0x24c8e98) returned 1
[0263.202] DrawThemeParentBackground () returned 0x0
[0263.202] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0263.202] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0263.202] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0263.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0263.203] GetSystemMetrics (nIndex=42) returned 0
[0263.203] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0263.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0263.203] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0263.203] GetCurrentObject (hdc=0xde0107bf, type=0x1) returned 0xb00017
[0263.203] GetCurrentObject (hdc=0xde0107bf, type=0x2) returned 0x900010
[0263.203] GetCurrentObject (hdc=0xde0107bf, type=0x7) returned 0x1e0507b9
[0263.203] GetCurrentObject (hdc=0xde0107bf, type=0x6) returned 0x8a01c2
[0263.203] SaveDC (hdc=0xde0107bf) returned 2
[0263.203] GetNearestColor (hdc=0xde0107bf, color=0xff) returned 0xff
[0263.203] CreateSolidBrush (color=0xff) returned 0x9010078d
[0263.203] FillRect (hDC=0xde0107bf, lprc=0x53ddb8, hbr=0x9010078d) returned 1
[0263.203] DeleteObject (ho=0x9010078d) returned 1
[0263.203] RestoreDC (hdc=0xde0107bf, nSavedDC=-1) returned 1
[0263.203] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0263.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0263.203] GetSystemMetrics (nIndex=42) returned 0
[0263.203] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0263.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0263.204] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0263.204] GetCurrentObject (hdc=0xde0107bf, type=0x1) returned 0xb00017
[0263.204] GetCurrentObject (hdc=0xde0107bf, type=0x2) returned 0x900010
[0263.204] GetCurrentObject (hdc=0xde0107bf, type=0x7) returned 0x1e0507b9
[0263.204] GetCurrentObject (hdc=0xde0107bf, type=0x6) returned 0x8a01c2
[0263.204] SaveDC (hdc=0xde0107bf) returned 2
[0263.204] GetNearestColor (hdc=0xde0107bf, color=0xff) returned 0xff
[0263.204] CreateSolidBrush (color=0xff) returned 0x9110078d
[0263.204] FillRect (hDC=0xde0107bf, lprc=0x53dd58, hbr=0x9110078d) returned 1
[0263.204] DeleteObject (ho=0x9110078d) returned 1
[0263.204] RestoreDC (hdc=0xde0107bf, nSavedDC=-1) returned 1
[0263.204] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0263.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0263.204] GetSystemMetrics (nIndex=42) returned 0
[0263.204] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0263.204] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0263.204] RestoreDC (hdc=0xde0107bf, nSavedDC=-1) returned 1
[0263.205] GdipReleaseDC (graphics=0x5d92c30, hdc=0xde0107bf) returned 0x0
[0263.205] IsAppThemed () returned 0x1
[0263.205] GetThemeAppProperties () returned 0x3
[0263.205] GetThemeAppProperties () returned 0x3
[0263.205] IsAppThemed () returned 0x1
[0263.205] GetThemeAppProperties () returned 0x3
[0263.205] GetThemeAppProperties () returned 0x3
[0263.205] IsThemePartDefined () returned 0x1
[0263.205] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0263.205] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.205] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0263.205] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.205] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0263.205] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.205] LocalFree (hMem=0x89ea88) returned 0x0
[0263.205] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.205] LocalFree (hMem=0x89ea88) returned 0x0
[0263.205] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.205] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0263.205] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0263.206] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0263.206] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.206] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0263.206] GetCurrentObject (hdc=0xde0107bf, type=0x1) returned 0xb00017
[0263.206] GetCurrentObject (hdc=0xde0107bf, type=0x2) returned 0x900010
[0263.206] GetCurrentObject (hdc=0xde0107bf, type=0x7) returned 0x1e0507b9
[0263.206] GetCurrentObject (hdc=0xde0107bf, type=0x6) returned 0x8a01c2
[0263.206] SaveDC (hdc=0xde0107bf) returned 1
[0263.206] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb604051e
[0263.206] GetClipRgn (hdc=0xde0107bf, hrgn=0xb604051e) returned 0
[0263.206] SelectClipRgn (hdc=0xde0107bf, hrgn=0x9604053e) returned 2
[0263.206] DeleteObject (ho=0xb604051e) returned 1
[0263.206] DeleteObject (ho=0x9604053e) returned 1
[0263.206] OffsetViewportOrgEx (in: hdc=0xde0107bf, x=0, y=0, lppt=0x24c96fc | out: lppt=0x24c96fc) returned 1
[0263.206] IsAppThemed () returned 0x1
[0263.206] GetThemeAppProperties () returned 0x3
[0263.206] GetThemeAppProperties () returned 0x3
[0263.206] DrawThemeBackground () returned 0x0
[0263.206] RestoreDC (hdc=0xde0107bf, nSavedDC=-1) returned 1
[0263.207] GdipReleaseDC (graphics=0x5d92c30, hdc=0xde0107bf) returned 0x0
[0263.207] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0263.207] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.207] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0263.207] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.207] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0263.207] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0263.207] LocalFree (hMem=0x89ea88) returned 0x0
[0263.207] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0263.207] LocalFree (hMem=0x89ec80) returned 0x0
[0263.207] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.207] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0263.207] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0263.207] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0263.207] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.207] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0263.207] GetCurrentObject (hdc=0xde0107bf, type=0x1) returned 0xb00017
[0263.207] GetCurrentObject (hdc=0xde0107bf, type=0x2) returned 0x900010
[0263.207] GetCurrentObject (hdc=0xde0107bf, type=0x7) returned 0x1e0507b9
[0263.207] GetCurrentObject (hdc=0xde0107bf, type=0x6) returned 0x8a01c2
[0263.207] SaveDC (hdc=0xde0107bf) returned 1
[0263.208] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9704053e
[0263.208] GetClipRgn (hdc=0xde0107bf, hrgn=0x9704053e) returned 0
[0263.208] SelectClipRgn (hdc=0xde0107bf, hrgn=0xb704051e) returned 2
[0263.208] DeleteObject (ho=0x9704053e) returned 1
[0263.208] DeleteObject (ho=0xb704051e) returned 1
[0263.208] OffsetViewportOrgEx (in: hdc=0xde0107bf, x=0, y=0, lppt=0x24c99d0 | out: lppt=0x24c99d0) returned 1
[0263.208] IsAppThemed () returned 0x1
[0263.208] GetThemeAppProperties () returned 0x3
[0263.208] GetThemeAppProperties () returned 0x3
[0263.208] GetThemeBackgroundContentRect () returned 0x0
[0263.208] RestoreDC (hdc=0xde0107bf, nSavedDC=-1) returned 1
[0263.208] GdipReleaseDC (graphics=0x5d92c30, hdc=0xde0107bf) returned 0x0
[0263.208] IsAppThemed () returned 0x1
[0263.208] GetThemeAppProperties () returned 0x3
[0263.208] GetThemeAppProperties () returned 0x3
[0263.208] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0263.208] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0263.208] GetCurrentObject (hdc=0xde0107bf, type=0x1) returned 0xb00017
[0263.208] GetCurrentObject (hdc=0xde0107bf, type=0x2) returned 0x900010
[0263.208] GetCurrentObject (hdc=0xde0107bf, type=0x7) returned 0x1e0507b9
[0263.208] GetCurrentObject (hdc=0xde0107bf, type=0x6) returned 0x8a01c2
[0263.209] SaveDC (hdc=0xde0107bf) returned 1
[0263.209] GetTextAlign (hdc=0xde0107bf) returned 0x0
[0263.209] GetTextColor (hdc=0xde0107bf) returned 0x0
[0263.209] GetCurrentObject (hdc=0xde0107bf, type=0x6) returned 0x8a01c2
[0263.209] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0263.210] SelectObject (hdc=0xde0107bf, h=0x450a0799) returned 0x8a01c2
[0263.210] GetBkMode (hdc=0xde0107bf) returned 2
[0263.210] SetBkMode (hdc=0xde0107bf, mode=1) returned 2
[0263.210] DrawTextExW (in: hdc=0xde0107bf, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x24c9d70 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0263.210] DrawTextExW (in: hdc=0xde0107bf, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x24c9d70 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0263.210] RestoreDC (hdc=0xde0107bf, nSavedDC=-1) returned 1
[0263.211] GdipReleaseDC (graphics=0x5d92c30, hdc=0xde0107bf) returned 0x0
[0263.211] GetFocus () returned 0x202c6
[0263.211] IsAppThemed () returned 0x1
[0263.211] GetThemeAppProperties () returned 0x3
[0263.211] GetThemeAppProperties () returned 0x3
[0263.211] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0263.211] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xde0107bf, x1=0, y1=0, rop=0xcc0020) returned 1
[0263.211] GdipReleaseDC (graphics=0x5d92c30, hdc=0xde0107bf) returned 0x0
[0263.211] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0263.211] SelectObject (hdc=0xde0107bf, h=0x85000f) returned 0x1e0507b9
[0263.211] DeleteDC (hdc=0xde0107bf) returned 1
[0263.212] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0263.212] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0263.212] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x24c9e6c, cPoints=0x1 | out: lpPoints=0x24c9e6c) returned 25690608
[0263.212] WindowFromPoint (Point=0x240) returned 0x202c6
[0263.212] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1940240) returned 0x1
[0263.212] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0263.212] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0263.213] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.213] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0263.214] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.214] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0263.214] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.214] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0263.215] GetDC (hWnd=0x0) returned 0x60100ce
[0263.215] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e888) returned 0x0
[0263.215] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0263.215] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0263.215] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0263.215] GetSystemMetrics (nIndex=5) returned 1
[0263.215] GetSystemMetrics (nIndex=6) returned 1
[0263.216] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.216] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0263.216] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.216] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0263.290] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.290] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0263.291] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.291] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0263.292] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.292] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0263.292] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.292] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0263.293] GetSystemMetrics (nIndex=5) returned 1
[0263.293] GetSystemMetrics (nIndex=6) returned 1
[0263.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.293] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0263.293] GetSystemMetrics (nIndex=5) returned 1
[0263.293] GetSystemMetrics (nIndex=6) returned 1
[0263.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.294] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0263.296] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0263.296] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0263.297] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0263.297] GetSystemMetrics (nIndex=59) returned 1460
[0263.297] GetSystemMetrics (nIndex=60) returned 920
[0263.297] GetSystemMetrics (nIndex=34) returned 136
[0263.297] GetSystemMetrics (nIndex=35) returned 39
[0263.297] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.297] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0263.298] GetCurrentThreadId () returned 0x11d0
[0263.298] GetCurrentThreadId () returned 0x11d0
[0263.298] GetCurrentThreadId () returned 0x11d0
[0263.298] GetCurrentThreadId () returned 0x11d0
[0263.298] GetCurrentThreadId () returned 0x11d0
[0263.298] GetCurrentThreadId () returned 0x11d0
[0263.298] GetCurrentThreadId () returned 0x11d0
[0263.298] GetCurrentThreadId () returned 0x11d0
[0263.298] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.298] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0263.298] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0263.298] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0263.298] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.298] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0263.299] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.299] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0263.299] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xc02ca
[0263.318] SetWindowLongW (hWnd=0xc02ca, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0263.318] GetWindowLongW (hWnd=0xc02ca, nIndex=-4) returned 1950089536
[0263.319] SetWindowLongW (hWnd=0xc02ca, nIndex=-4, dwNewLong=79647974) returned 1950089536
[0263.319] GetWindowLongW (hWnd=0xc02ca, nIndex=-4) returned 79647974
[0263.319] GetWindowLongW (hWnd=0xc02ca, nIndex=-16) returned 113311744
[0263.319] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02ca, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0263.319] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02ca, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0263.319] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02ca, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0263.320] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02ca, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0263.320] GetClientRect (in: hWnd=0xc02ca, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0263.320] GetWindowRect (in: hWnd=0xc02ca, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0263.320] SetWindowTextW (hWnd=0xc02ca, lpString="WindowsFormsParkingWindow") returned 1
[0263.320] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02ca, Msg=0xc, wParam=0x0, lParam=0x2305c94) returned 0x1
[0263.320] GetParent (hWnd=0xc02ca) returned 0x0
[0263.321] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0263.321] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0xc02ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1101e2
[0263.321] SetWindowLongW (hWnd=0x1101e2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0263.321] GetWindowLongW (hWnd=0x1101e2, nIndex=-4) returned 1868147648
[0263.322] SetWindowLongW (hWnd=0x1101e2, nIndex=-4, dwNewLong=79648094) returned 1868147648
[0263.322] GetWindowLongW (hWnd=0x1101e2, nIndex=-4) returned 79648094
[0263.322] GetWindowLongW (hWnd=0x1101e2, nIndex=-16) returned 1174405133
[0263.322] GetWindowLongW (hWnd=0x1101e2, nIndex=-12) returned 0
[0263.322] SetWindowLongW (hWnd=0x1101e2, nIndex=-12, dwNewLong=1114594) returned 0
[0263.322] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0263.322] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0263.323] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0263.324] GetClientRect (in: hWnd=0x1101e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0263.324] GetWindowRect (in: hWnd=0x1101e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0263.324] GetParent (hWnd=0x1101e2) returned 0xc02ca
[0263.324] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02ca, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0263.324] SetWindowTextW (hWnd=0x1101e2, lpString="Enter password: ") returned 1
[0263.324] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0263.324] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0263.324] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0263.325] GetClientRect (in: hWnd=0x1101e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0263.325] GetWindowRect (in: hWnd=0x1101e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0263.325] GetParent (hWnd=0x1101e2) returned 0xc02ca
[0263.325] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xc02ca, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0263.325] SendMessageW (hWnd=0x1101e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1101e2) returned 0x0
[0263.325] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1101e2) returned 0x0
[0263.325] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0263.325] GetParent (hWnd=0x1101e2) returned 0xc02ca
[0263.325] GdipCreateFromHWND (hwnd=0x1101e2, graphics=0x53e994) returned 0x0
[0263.325] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0263.325] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0263.325] GetProcessWindowStation () returned 0x13c
[0263.326] GetCapture () returned 0x202c6
[0263.326] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0263.326] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0263.326] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0263.326] ReleaseCapture () returned 1
[0263.326] GetActiveWindow () returned 0x70036
[0263.326] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0263.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.327] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0263.327] GetCursorPos (in: lpPoint=0x23182f8 | out: lpPoint=0x23182f8*(x=576, y=404)) returned 1
[0263.327] MonitorFromPoint (pt=0x240, dwFlags=0x194) returned 0x10001
[0263.327] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0263.327] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xe10107bf
[0263.327] GetDeviceCaps (hdc=0xe10107bf, index=12) returned 32
[0263.327] GetDeviceCaps (hdc=0xe10107bf, index=14) returned 1
[0263.327] DeleteDC (hdc=0xe10107bf) returned 1
[0263.327] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0263.328] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0263.328] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1300ea
[0263.328] SetWindowLongW (hWnd=0x1300ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0263.328] GetWindowLongW (hWnd=0x1300ea, nIndex=-4) returned 1950089536
[0263.328] SetWindowLongW (hWnd=0x1300ea, nIndex=-4, dwNewLong=79648174) returned 1950089536
[0263.328] GetWindowLongW (hWnd=0x1300ea, nIndex=-4) returned 79648174
[0263.328] GetWindowLongW (hWnd=0x1300ea, nIndex=-16) returned 113770496
[0263.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0263.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0263.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0263.330] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0263.330] GetWindowRect (in: hWnd=0x1300ea, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0263.330] SetWindowTextW (hWnd=0x1300ea, lpString="Ransomware") returned 1
[0263.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xc, wParam=0x0, lParam=0x2306ffc) returned 0x1
[0263.331] GetStartupInfoW (in: lpStartupInfo=0x2318634 | out: lpStartupInfo=0x2318634*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0263.332] GetParent (hWnd=0x1300ea) returned 0x0
[0263.332] SetWindowLongW (hWnd=0x1300ea, nIndex=-8, dwNewLong=0) returned 0
[0263.333] SendMessageW (hWnd=0x1300ea, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0263.333] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0263.333] SendMessageW (hWnd=0x1300ea, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0263.333] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0263.333] GetSystemMenu (hWnd=0x1300ea, bRevert=0) returned 0x150111
[0263.334] GetWindowPlacement (in: hWnd=0x1300ea, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0263.334] EnableMenuItem (hMenu=0x150111, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0263.334] EnableMenuItem (hMenu=0x150111, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0263.334] EnableMenuItem (hMenu=0x150111, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0263.334] EnableMenuItem (hMenu=0x150111, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0263.334] EnableMenuItem (hMenu=0x150111, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0263.334] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0263.334] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0263.334] GetWindowRect (in: hWnd=0x1300ea, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0263.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.335] GetWindowLongW (hWnd=0x1300ea, nIndex=-16) returned 113770496
[0263.335] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.335] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.335] GetSystemMetrics (nIndex=42) returned 0
[0263.335] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.335] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0263.335] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.335] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.335] GetSystemMetrics (nIndex=42) returned 0
[0263.335] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.335] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0263.335] GetCursorPos (in: lpPoint=0x23187a8 | out: lpPoint=0x23187a8*(x=576, y=404)) returned 1
[0263.335] MonitorFromPoint (pt=0x23e, dwFlags=0x192) returned 0x10001
[0263.335] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0263.335] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xe50107bf
[0263.336] GetDeviceCaps (hdc=0xe50107bf, index=12) returned 32
[0263.336] GetDeviceCaps (hdc=0xe50107bf, index=14) returned 1
[0263.336] DeleteDC (hdc=0xe50107bf) returned 1
[0263.336] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0263.336] GetWindowLongW (hWnd=0x1300ea, nIndex=-16) returned 113770496
[0263.336] GetWindowLongW (hWnd=0x1300ea, nIndex=-20) returned 327937
[0263.336] SetWindowLongW (hWnd=0x1300ea, nIndex=-16, dwNewLong=46661632) returned 113770496
[0263.336] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0263.336] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0263.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0263.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0263.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0263.337] SetWindowLongW (hWnd=0x1300ea, nIndex=-20, dwNewLong=327681) returned 327937
[0263.338] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0263.338] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0263.338] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0263.338] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0263.339] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0263.339] SetWindowPos (hWnd=0x1300ea, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0263.339] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0263.339] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0263.339] GetWindowPlacement (in: hWnd=0x1300ea, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0263.339] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0263.339] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0263.340] GetWindowRect (in: hWnd=0x1300ea, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0263.340] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0263.340] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0263.340] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0263.341] RedrawWindow (hWnd=0x1300ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0263.341] GetSystemMenu (hWnd=0x1300ea, bRevert=0) returned 0x150111
[0263.341] GetWindowPlacement (in: hWnd=0x1300ea, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0263.341] EnableMenuItem (hMenu=0x150111, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0263.341] EnableMenuItem (hMenu=0x150111, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0263.341] EnableMenuItem (hMenu=0x150111, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0263.341] EnableMenuItem (hMenu=0x150111, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0263.341] EnableMenuItem (hMenu=0x150111, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0263.341] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0263.341] GetWindowLongW (hWnd=0x1300ea, nIndex=-8) returned 0
[0263.341] SetWindowLongW (hWnd=0x1300ea, nIndex=-8, dwNewLong=458806) returned 0
[0263.342] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0263.342] GetProcessWindowStation () returned 0x13c
[0263.342] GetCurrentThreadId () returned 0x11d0
[0263.343] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf546e, lParam=0x0) returned 1
[0263.343] IsWindowVisible (hWnd=0x1300ea) returned 0
[0263.343] IsWindowVisible (hWnd=0x70036) returned 1
[0263.343] IsWindowEnabled (hWnd=0x70036) returned 1
[0263.343] IsWindowVisible (hWnd=0x602b6) returned 0
[0263.343] IsWindowVisible (hWnd=0x901f8) returned 0
[0263.343] IsWindowVisible (hWnd=0x202d0) returned 0
[0263.343] IsWindowVisible (hWnd=0x202d4) returned 0
[0263.343] GetActiveWindow () returned 0x70036
[0263.343] GetFocus () returned 0x202c6
[0263.343] IsWindow (hWnd=0x70036) returned 1
[0263.343] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0263.343] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0263.344] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0263.344] GetWindowLongW (hWnd=0x1300ea, nIndex=-8) returned 458806
[0263.344] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0263.344] GetCurrentThreadId () returned 0x11d0
[0263.344] GetWindowLongW (hWnd=0x1300ea, nIndex=-8) returned 458806
[0263.344] IsWindowEnabled (hWnd=0x70036) returned 0
[0263.344] IsWindowEnabled (hWnd=0x1300ea) returned 1
[0263.344] ShowWindow (hWnd=0x1300ea, nCmdShow=5) returned 0
[0263.344] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0263.344] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0263.345] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.345] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0263.345] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x1300ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x110122
[0263.345] SetWindowLongW (hWnd=0x110122, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0263.345] GetWindowLongW (hWnd=0x110122, nIndex=-4) returned 1868026976
[0263.346] SetWindowLongW (hWnd=0x110122, nIndex=-4, dwNewLong=79647774) returned 1868026976
[0263.346] GetWindowLongW (hWnd=0x110122, nIndex=-4) returned 79647774
[0263.346] GetWindowLongW (hWnd=0x110122, nIndex=-16) returned 1174470848
[0263.346] GetWindowLongW (hWnd=0x110122, nIndex=-12) returned 0
[0263.346] SetWindowLongW (hWnd=0x110122, nIndex=-12, dwNewLong=1114402) returned 0
[0263.346] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0263.347] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0263.347] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0263.348] SendMessageW (hWnd=0x110122, Msg=0x2055, wParam=0x110122, lParam=0x3) returned 0x2
[0263.348] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0263.348] GetWindow (hWnd=0x110122, uCmd=0x3) returned 0x0
[0263.348] GetClientRect (in: hWnd=0x110122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0263.348] GetWindowRect (in: hWnd=0x110122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0263.348] GetParent (hWnd=0x110122) returned 0x1300ea
[0263.348] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1300ea, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0263.348] SendMessageW (hWnd=0x110122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0263.349] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0263.349] SendMessageW (hWnd=0x110122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0263.349] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0263.349] GetSystemMetrics (nIndex=5) returned 1
[0263.349] GetSystemMetrics (nIndex=6) returned 1
[0263.349] SendMessageW (hWnd=0x110122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0263.349] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0263.349] SendMessageW (hWnd=0x110122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0263.349] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0263.350] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0263.350] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0263.350] GetClientRect (in: hWnd=0x110122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0263.350] GetWindowRect (in: hWnd=0x110122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0263.350] GetParent (hWnd=0x110122) returned 0x1300ea
[0263.350] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1300ea, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0263.350] SendMessageW (hWnd=0x110122, Msg=0x2210, wParam=0x1220001, lParam=0x110122) returned 0x0
[0263.350] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x2210, wParam=0x1220001, lParam=0x110122) returned 0x0
[0263.350] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0263.350] GetParent (hWnd=0x110122) returned 0x1300ea
[0263.350] GetParent (hWnd=0x1101e2) returned 0xc02ca
[0263.350] SetParent (hWndChild=0x1101e2, hWndNewParent=0x1300ea) returned 0xc02ca
[0263.350] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0263.351] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0263.351] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0263.351] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0263.351] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0263.351] GetClientRect (in: hWnd=0x1101e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0263.351] GetWindowRect (in: hWnd=0x1101e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0263.351] GetParent (hWnd=0x1101e2) returned 0x1300ea
[0263.352] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1300ea, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0263.352] GetClientRect (in: hWnd=0x1101e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0263.352] GetWindowRect (in: hWnd=0x1101e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0263.352] GetParent (hWnd=0x1101e2) returned 0x1300ea
[0263.352] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1300ea, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0263.352] GetParent (hWnd=0x1101e2) returned 0x1300ea
[0263.352] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0263.352] GetWindow (hWnd=0x1101e2, uCmd=0x3) returned 0x0
[0263.352] SetWindowPos (hWnd=0x1101e2, hWndInsertAfter=0x110122, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0263.352] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0263.353] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0263.353] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0263.353] GetClientRect (in: hWnd=0x1101e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0263.353] GetWindowRect (in: hWnd=0x1101e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0263.353] GetParent (hWnd=0x1101e2) returned 0x1300ea
[0263.353] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1300ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0263.353] GetParent (hWnd=0x1101e2) returned 0x1300ea
[0263.353] GetWindow (hWnd=0x1101e2, uCmd=0x3) returned 0x110122
[0263.353] GetWindowThreadProcessId (in: hWnd=0x1101e2, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0263.353] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0263.353] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.354] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0263.354] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x1300ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xd004e
[0263.354] SetWindowLongW (hWnd=0xd004e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0263.354] GetWindowLongW (hWnd=0xd004e, nIndex=-4) returned 1868032000
[0263.354] SetWindowLongW (hWnd=0xd004e, nIndex=-4, dwNewLong=79648254) returned 1868032000
[0263.355] GetWindowLongW (hWnd=0xd004e, nIndex=-4) returned 79648254
[0263.355] GetWindowLongW (hWnd=0xd004e, nIndex=-16) returned 1174470667
[0263.355] GetWindowLongW (hWnd=0xd004e, nIndex=-12) returned 0
[0263.355] SetWindowLongW (hWnd=0xd004e, nIndex=-12, dwNewLong=852046) returned 0
[0263.355] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0263.355] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0263.356] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0263.356] SendMessageW (hWnd=0xd004e, Msg=0x2055, wParam=0xd004e, lParam=0x3) returned 0x2
[0263.356] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0263.356] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0263.357] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0263.357] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0263.357] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0263.357] RedrawWindow (hWnd=0x110122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0263.357] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0263.357] RedrawWindow (hWnd=0x1101e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0263.357] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0263.357] RedrawWindow (hWnd=0xd004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0263.357] RedrawWindow (hWnd=0x1300ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0263.357] GetWindow (hWnd=0xd004e, uCmd=0x3) returned 0x1101e2
[0263.357] GetClientRect (in: hWnd=0xd004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0263.357] GetWindowRect (in: hWnd=0xd004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0263.357] GetParent (hWnd=0xd004e) returned 0x1300ea
[0263.358] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1300ea, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0263.358] SetWindowTextW (hWnd=0xd004e, lpString="OK") returned 1
[0263.358] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0xc, wParam=0x0, lParam=0x2309bac) returned 0x1
[0263.358] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0263.358] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0263.358] GetClientRect (in: hWnd=0xd004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0263.358] GetWindowRect (in: hWnd=0xd004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0263.358] GetParent (hWnd=0xd004e) returned 0x1300ea
[0263.358] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1300ea, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0263.359] SendMessageW (hWnd=0xd004e, Msg=0x2210, wParam=0x4e0001, lParam=0xd004e) returned 0x0
[0263.359] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x2210, wParam=0x4e0001, lParam=0xd004e) returned 0x0
[0263.359] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0263.359] GetParent (hWnd=0xd004e) returned 0x1300ea
[0263.359] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0263.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.360] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0263.360] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x1300ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2d013e
[0263.361] SetWindowLongW (hWnd=0x2d013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0263.361] GetWindowLongW (hWnd=0x2d013e, nIndex=-4) returned 1868032000
[0263.361] SetWindowLongW (hWnd=0x2d013e, nIndex=-4, dwNewLong=79648374) returned 1868032000
[0263.361] GetWindowLongW (hWnd=0x2d013e, nIndex=-4) returned 79648374
[0263.361] GetWindowLongW (hWnd=0x2d013e, nIndex=-16) returned 1174470667
[0263.361] GetWindowLongW (hWnd=0x2d013e, nIndex=-12) returned 0
[0263.361] SetWindowLongW (hWnd=0x2d013e, nIndex=-12, dwNewLong=2949438) returned 0
[0263.361] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0263.362] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0263.362] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0263.363] SendMessageW (hWnd=0x2d013e, Msg=0x2055, wParam=0x2d013e, lParam=0x3) returned 0x2
[0263.363] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0263.363] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0263.363] GetWindow (hWnd=0x2d013e, uCmd=0x3) returned 0xd004e
[0263.363] GetClientRect (in: hWnd=0x2d013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0263.364] GetWindowRect (in: hWnd=0x2d013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0263.364] GetParent (hWnd=0x2d013e) returned 0x1300ea
[0263.364] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1300ea, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0263.364] SetWindowTextW (hWnd=0x2d013e, lpString="Cancel") returned 1
[0263.364] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0xc, wParam=0x0, lParam=0x230d46c) returned 0x1
[0263.364] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0263.364] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0263.364] GetClientRect (in: hWnd=0x2d013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0263.364] GetWindowRect (in: hWnd=0x2d013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0263.364] GetParent (hWnd=0x2d013e) returned 0x1300ea
[0263.364] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1300ea, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0263.365] SendMessageW (hWnd=0x2d013e, Msg=0x2210, wParam=0x13e0001, lParam=0x2d013e) returned 0x0
[0263.365] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0x2210, wParam=0x13e0001, lParam=0x2d013e) returned 0x0
[0263.365] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0263.366] GetParent (hWnd=0x2d013e) returned 0x1300ea
[0263.366] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0263.366] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e320) returned 0x0
[0263.366] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0263.366] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0263.366] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0263.367] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0263.367] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0263.367] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0263.367] GetWindowLongW (hWnd=0x1300ea, nIndex=-8) returned 458806
[0263.367] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0263.367] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0263.367] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xec0107bf
[0263.367] GetDeviceCaps (hdc=0xec0107bf, index=12) returned 32
[0263.368] GetDeviceCaps (hdc=0xec0107bf, index=14) returned 1
[0263.368] DeleteDC (hdc=0xec0107bf) returned 1
[0263.368] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0263.368] GetWindowThreadProcessId (in: hWnd=0x1300ea, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0263.368] GetCurrentThreadId () returned 0x11d0
[0263.368] PostMessageW (hWnd=0x1300ea, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0263.368] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.368] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.368] GetSystemMetrics (nIndex=42) returned 0
[0263.368] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.368] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0263.368] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0263.369] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0263.369] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0263.369] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0263.378] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1300ea) returned 0x1
[0263.380] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0263.380] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0263.381] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0263.381] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0263.383] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0263.383] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0263.383] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0263.384] GetFocus () returned 0x202c6
[0263.384] IsChild (hWndParent=0x1300ea, hWnd=0x202c6) returned 0
[0263.384] GetFocus () returned 0x202c6
[0263.385] SetFocus (hWnd=0x110122) returned 0x202c6
[0263.385] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x110122, lParam=0x0) returned 0x0
[0263.385] GetCapture () returned 0x0
[0263.385] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0263.386] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0263.387] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0263.389] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0263.389] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0263.389] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0263.389] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0263.390] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0263.390] GetParent (hWnd=0x1300ea) returned 0x0
[0263.390] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0263.390] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0263.390] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0263.391] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0263.391] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0263.391] GetSysColorBrush (nIndex=5) returned 0x100079
[0263.392] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0263.392] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0263.394] SendMessageW (hWnd=0x110122, Msg=0x2111, wParam=0x1000122, lParam=0x110122) returned 0x0
[0263.394] SendMessageW (hWnd=0x110122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0263.394] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0263.394] GetKeyState (nVirtKey=1) returned 1
[0263.394] GetKeyState (nVirtKey=2) returned 0
[0263.394] GetKeyState (nVirtKey=4) returned 0
[0263.394] GetKeyState (nVirtKey=5) returned 0
[0263.394] GetKeyState (nVirtKey=6) returned 0
[0263.394] GetWindowTextLengthW (hWnd=0x110122) returned 0
[0263.394] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0263.394] SendMessageW (hWnd=0x110122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0263.394] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0263.395] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0263.395] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0263.403] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0263.404] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0263.405] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0263.405] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0263.405] GetWindowPlacement (in: hWnd=0x1300ea, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0263.405] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0263.405] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.405] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.405] GetSystemMetrics (nIndex=42) returned 0
[0263.406] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0263.406] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0263.406] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0263.406] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0263.406] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x71050785
[0263.406] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0263.406] SaveDC (hdc=0x10105d6) returned 1
[0263.406] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0263.406] CreateSolidBrush (color=0xf0f0f0) returned 0x9210078d
[0263.406] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0x9210078d) returned 1
[0263.406] DeleteObject (ho=0x9210078d) returned 1
[0263.406] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0263.407] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0263.407] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0263.407] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0263.408] GetWindowPlacement (in: hWnd=0x1300ea, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0263.408] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0263.408] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.408] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.408] GetSystemMetrics (nIndex=42) returned 0
[0263.408] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.408] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0263.408] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0263.408] GetCurrentObject (hdc=0x20107bf, type=0x1) returned 0xb00017
[0263.408] GetCurrentObject (hdc=0x20107bf, type=0x2) returned 0x900010
[0263.408] GetCurrentObject (hdc=0x20107bf, type=0x7) returned 0xffffffff9c050527
[0263.408] GetCurrentObject (hdc=0x20107bf, type=0x6) returned 0x8a01c2
[0263.408] SaveDC (hdc=0x20107bf) returned 1
[0263.408] GetNearestColor (hdc=0x20107bf, color=0xf0f0f0) returned 0xf0f0f0
[0263.408] CreateSolidBrush (color=0xf0f0f0) returned 0x9310078d
[0263.408] FillRect (hDC=0x20107bf, lprc=0x53dc18, hbr=0x9310078d) returned 1
[0263.408] DeleteObject (ho=0x9310078d) returned 1
[0263.408] RestoreDC (hdc=0x20107bf, nSavedDC=-1) returned 1
[0263.409] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.409] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.409] GetSystemMetrics (nIndex=42) returned 0
[0263.409] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.409] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0263.409] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0263.409] GetCurrentObject (hdc=0x20107bf, type=0x1) returned 0xb00017
[0263.409] GetCurrentObject (hdc=0x20107bf, type=0x2) returned 0x900010
[0263.409] GetCurrentObject (hdc=0x20107bf, type=0x7) returned 0xffffffff9c050527
[0263.409] GetCurrentObject (hdc=0x20107bf, type=0x6) returned 0x8a01c2
[0263.409] SaveDC (hdc=0x20107bf) returned 1
[0263.409] GetNearestColor (hdc=0x20107bf, color=0xf0f0f0) returned 0xf0f0f0
[0263.409] CreateSolidBrush (color=0xf0f0f0) returned 0x9410078d
[0263.409] FillRect (hDC=0x20107bf, lprc=0x53dbb8, hbr=0x9410078d) returned 1
[0263.409] DeleteObject (ho=0x9410078d) returned 1
[0263.409] RestoreDC (hdc=0x20107bf, nSavedDC=-1) returned 1
[0263.409] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.410] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.410] GetSystemMetrics (nIndex=42) returned 0
[0263.410] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.410] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0263.411] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0263.411] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0263.411] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0263.412] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0263.412] GetStockObject (i=5) returned 0x900015
[0263.422] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0263.422] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0263.422] GetStockObject (i=5) returned 0x900015
[0263.422] GetWindowPlacement (in: hWnd=0x1300ea, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0263.422] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0263.422] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0263.422] GetWindowRect (in: hWnd=0x1300ea, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0263.424] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0263.424] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0263.424] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0263.424] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0263.425] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0263.425] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0263.425] GetWindowRect (in: hWnd=0x1300ea, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0263.425] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.425] IsWindowUnicode (hWnd=0x1300ea) returned 1
[0263.425] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.425] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.425] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.425] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0263.425] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.425] IsWindowUnicode (hWnd=0x1300ea) returned 1
[0263.425] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.425] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.425] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.425] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.426] MapWindowPoints (in: hWndFrom=0x1101e2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0263.426] IsWindowUnicode (hWnd=0x1101e2) returned 1
[0263.426] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.426] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.426] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.426] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.426] IsWindowUnicode (hWnd=0x202c6) returned 1
[0263.426] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.426] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.426] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.426] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0263.426] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0263.426] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.427] MapWindowPoints (in: hWndFrom=0x1101e2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0263.427] IsWindowUnicode (hWnd=0x1101e2) returned 1
[0263.427] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.427] MapWindowPoints (in: hWndFrom=0x1101e2, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0263.427] SetCursor (hCursor=0x10003) returned 0x10003
[0263.427] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.427] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.427] _TrackMouseEvent (in: lpEventTrack=0x2319d24 | out: lpEventTrack=0x2319d24) returned 1
[0263.427] SendMessageW (hWnd=0x1101e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0263.427] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0263.430] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x200, wParam=0x0, lParam=0xd0017) returned 0x0
[0263.430] GetKeyState (nVirtKey=1) returned 1
[0263.430] GetKeyState (nVirtKey=2) returned 0
[0263.430] GetKeyState (nVirtKey=4) returned 0
[0263.430] GetKeyState (nVirtKey=5) returned 0
[0263.430] GetKeyState (nVirtKey=6) returned 0
[0263.430] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.431] IsWindowUnicode (hWnd=0x1300ea) returned 1
[0263.431] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.431] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.431] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.431] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.432] IsWindowUnicode (hWnd=0x1300ea) returned 1
[0263.432] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.432] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.432] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.432] BeginPaint (in: hWnd=0x1300ea, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x60100ce
[0263.432] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0263.432] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.432] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.432] GetSystemMetrics (nIndex=42) returned 0
[0263.432] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.432] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0263.432] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0263.433] EndPaint (hWnd=0x1300ea, lpPaint=0x53e30c) returned 1
[0263.433] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.433] IsWindowUnicode (hWnd=0x110122) returned 1
[0263.433] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.433] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.433] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0263.433] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0263.433] SetTextColor (hdc=0x30107bf, color=0x0) returned 0x0
[0263.433] SetBkColor (hdc=0x30107bf, color=0xffffff) returned 0xffffff
[0263.434] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.434] IsWindowUnicode (hWnd=0x1101e2) returned 1
[0263.434] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.434] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.434] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.435] BeginPaint (in: hWnd=0x1101e2, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0xf0105ee
[0263.435] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0263.435] CreateCompatibleDC (hdc=0xf0105ee) returned 0x8d0107b1
[0263.435] SelectObject (hdc=0x8d0107b1, h=0x1e0507b9) returned 0x85000f
[0263.435] GdipCreateFromHDC (hdc=0x8d0107b1, graphics=0x53e30c) returned 0x0
[0263.435] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0263.435] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0263.435] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0263.435] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.435] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0263.435] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0263.435] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0263.435] LocalFree (hMem=0x89ec80) returned 0x0
[0263.435] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.435] GdipCreateRegion (region=0x53e354) returned 0x0
[0263.436] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.436] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0263.436] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0263.436] GetWindowTextLengthW (hWnd=0x1101e2) returned 16
[0263.436] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0263.436] GetSystemMetrics (nIndex=42) returned 0
[0263.436] GetWindowTextW (in: hWnd=0x1101e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0263.436] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0263.436] GetClientRect (in: hWnd=0x1101e2, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0263.436] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0263.436] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0263.436] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0263.436] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.436] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0263.436] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0263.436] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0263.436] LocalFree (hMem=0x89ee40) returned 0x0
[0263.436] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0263.436] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0263.436] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0263.436] LocalFree (hMem=0x89ee40) returned 0x0
[0263.436] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.437] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0263.437] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0263.437] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0263.437] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0263.437] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0263.437] GetCurrentObject (hdc=0x8d0107b1, type=0x1) returned 0xb00017
[0263.437] GetCurrentObject (hdc=0x8d0107b1, type=0x2) returned 0x900010
[0263.437] GetCurrentObject (hdc=0x8d0107b1, type=0x7) returned 0x1e0507b9
[0263.437] GetCurrentObject (hdc=0x8d0107b1, type=0x6) returned 0x8a01c2
[0263.437] SaveDC (hdc=0x8d0107b1) returned 1
[0263.437] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b040798
[0263.437] GetClipRgn (hdc=0x8d0107b1, hrgn=0x5b040798) returned 0
[0263.437] SelectClipRgn (hdc=0x8d0107b1, hrgn=0xbc04051e) returned 2
[0263.437] DeleteObject (ho=0x5b040798) returned 1
[0263.437] DeleteObject (ho=0xbc04051e) returned 1
[0263.437] OffsetViewportOrgEx (in: hdc=0x8d0107b1, x=0, y=0, lppt=0x231a208 | out: lppt=0x231a208) returned 1
[0263.437] GetNearestColor (hdc=0x8d0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0263.437] CreateSolidBrush (color=0xf0f0f0) returned 0x9510078d
[0263.437] FillRect (hDC=0x8d0107b1, lprc=0x53e1f4, hbr=0x9510078d) returned 1
[0263.438] DeleteObject (ho=0x9510078d) returned 1
[0263.438] RestoreDC (hdc=0x8d0107b1, nSavedDC=-1) returned 1
[0263.438] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107b1) returned 0x0
[0263.438] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb630dbd) returned 0x0
[0263.438] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.438] GetWindowTextLengthW (hWnd=0x1101e2) returned 16
[0263.438] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0263.438] GetSystemMetrics (nIndex=42) returned 0
[0263.438] GetWindowTextW (in: hWnd=0x1101e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0263.438] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0263.438] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0263.438] GetCurrentObject (hdc=0x8d0107b1, type=0x1) returned 0xb00017
[0263.438] GetCurrentObject (hdc=0x8d0107b1, type=0x2) returned 0x900010
[0263.438] GetCurrentObject (hdc=0x8d0107b1, type=0x7) returned 0x1e0507b9
[0263.438] GetCurrentObject (hdc=0x8d0107b1, type=0x6) returned 0x8a01c2
[0263.438] SaveDC (hdc=0x8d0107b1) returned 1
[0263.438] GetNearestColor (hdc=0x8d0107b1, color=0x0) returned 0x0
[0263.438] RestoreDC (hdc=0x8d0107b1, nSavedDC=-1) returned 1
[0263.438] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107b1) returned 0x0
[0263.439] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0263.439] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0263.439] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0263.439] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x231a510 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0263.439] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0263.439] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0263.439] GetCurrentObject (hdc=0x8d0107b1, type=0x1) returned 0xb00017
[0263.439] GetCurrentObject (hdc=0x8d0107b1, type=0x2) returned 0x900010
[0263.439] GetCurrentObject (hdc=0x8d0107b1, type=0x7) returned 0x1e0507b9
[0263.440] GetCurrentObject (hdc=0x8d0107b1, type=0x6) returned 0x8a01c2
[0263.440] SaveDC (hdc=0x8d0107b1) returned 1
[0263.440] GetTextAlign (hdc=0x8d0107b1) returned 0x0
[0263.440] GetTextColor (hdc=0x8d0107b1) returned 0x0
[0263.440] GetCurrentObject (hdc=0x8d0107b1, type=0x6) returned 0x8a01c2
[0263.440] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0263.440] SelectObject (hdc=0x8d0107b1, h=0x730a066d) returned 0x8a01c2
[0263.440] GetBkMode (hdc=0x8d0107b1) returned 2
[0263.440] SetBkMode (hdc=0x8d0107b1, mode=1) returned 2
[0263.440] DrawTextExW (in: hdc=0x8d0107b1, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x231a734 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0263.440] RestoreDC (hdc=0x8d0107b1, nSavedDC=-1) returned 1
[0263.440] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107b1) returned 0x0
[0263.440] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0263.441] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=250, cy=70, hdcSrc=0x8d0107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0263.441] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107b1) returned 0x0
[0263.441] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0263.441] SelectObject (hdc=0x8d0107b1, h=0x85000f) returned 0x1e0507b9
[0263.441] DeleteDC (hdc=0x8d0107b1) returned 1
[0263.441] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0263.441] EndPaint (hWnd=0x1101e2, lpPaint=0x53e2f0) returned 1
[0263.441] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.441] IsWindowUnicode (hWnd=0xd004e) returned 1
[0263.441] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.441] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.441] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.441] BeginPaint (in: hWnd=0xd004e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0263.442] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0263.442] CreateCompatibleDC (hdc=0x8b010786) returned 0x8f0107b1
[0263.442] SelectObject (hdc=0x8f0107b1, h=0x1e0507b9) returned 0x85000f
[0263.442] GdipCreateFromHDC (hdc=0x8f0107b1, graphics=0x53e300) returned 0x0
[0263.442] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0263.442] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0263.442] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0263.442] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.442] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0263.442] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.442] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.442] LocalFree (hMem=0x89ea88) returned 0x0
[0263.442] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.442] GdipCreateRegion (region=0x53e348) returned 0x0
[0263.442] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.442] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0263.443] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0263.443] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb610dbd) returned 0x0
[0263.443] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.443] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0263.443] GetCurrentObject (hdc=0x8f0107b1, type=0x1) returned 0xb00017
[0263.443] GetCurrentObject (hdc=0x8f0107b1, type=0x2) returned 0x900010
[0263.443] GetCurrentObject (hdc=0x8f0107b1, type=0x7) returned 0x1e0507b9
[0263.443] GetCurrentObject (hdc=0x8f0107b1, type=0x6) returned 0x8a01c2
[0263.443] SaveDC (hdc=0x8f0107b1) returned 1
[0263.443] GetNearestColor (hdc=0x8f0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0263.443] GetNearestColor (hdc=0x8f0107b1, color=0xa0a0a0) returned 0xa0a0a0
[0263.443] GetNearestColor (hdc=0x8f0107b1, color=0x696969) returned 0x696969
[0263.443] GetNearestColor (hdc=0x8f0107b1, color=0xa0a0a0) returned 0xa0a0a0
[0263.443] GetNearestColor (hdc=0x8f0107b1, color=0x0) returned 0x0
[0263.444] GetNearestColor (hdc=0x8f0107b1, color=0xffffff) returned 0xffffff
[0263.444] GetNearestColor (hdc=0x8f0107b1, color=0xe5e5e5) returned 0xe5e5e5
[0263.444] GetNearestColor (hdc=0x8f0107b1, color=0xd7d7d7) returned 0xd7d7d7
[0263.444] GetNearestColor (hdc=0x8f0107b1, color=0x0) returned 0x0
[0263.444] RestoreDC (hdc=0x8f0107b1, nSavedDC=-1) returned 1
[0263.444] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107b1) returned 0x0
[0263.444] IsAppThemed () returned 0x1
[0263.444] GetThemeAppProperties () returned 0x3
[0263.444] GetThemeAppProperties () returned 0x3
[0263.444] IsAppThemed () returned 0x1
[0263.444] GetThemeAppProperties () returned 0x3
[0263.444] GetThemeAppProperties () returned 0x3
[0263.444] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x231aea0 | out: lpchText="OK", lprc=0x53e028) returned 13
[0263.444] IsAppThemed () returned 0x1
[0263.444] GetThemeAppProperties () returned 0x3
[0263.444] GetThemeAppProperties () returned 0x3
[0263.444] IsAppThemed () returned 0x1
[0263.445] GetThemeAppProperties () returned 0x3
[0263.445] GetThemeAppProperties () returned 0x3
[0263.445] GetFocus () returned 0x110122
[0263.445] IsAppThemed () returned 0x1
[0263.445] GetThemeAppProperties () returned 0x3
[0263.445] GetThemeAppProperties () returned 0x3
[0263.445] IsAppThemed () returned 0x1
[0263.445] GetThemeAppProperties () returned 0x3
[0263.445] GetThemeAppProperties () returned 0x3
[0263.445] IsThemePartDefined () returned 0x1
[0263.445] IsAppThemed () returned 0x1
[0263.445] GetThemeAppProperties () returned 0x3
[0263.445] GetThemeAppProperties () returned 0x3
[0263.445] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0263.445] IsAppThemed () returned 0x1
[0263.445] GetThemeAppProperties () returned 0x3
[0263.445] GetThemeAppProperties () returned 0x3
[0263.445] IsAppThemed () returned 0x1
[0263.445] GetThemeAppProperties () returned 0x3
[0263.445] GetThemeAppProperties () returned 0x3
[0263.445] IsThemePartDefined () returned 0x1
[0263.445] GdipCreateRegion (region=0x53e070) returned 0x0
[0263.445] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.445] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0263.445] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.445] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0263.446] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0263.446] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0263.446] LocalFree (hMem=0x89ec80) returned 0x0
[0263.446] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0263.446] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0263.446] LocalFree (hMem=0x89ec80) returned 0x0
[0263.446] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.446] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0263.446] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0263.446] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0263.446] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.446] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0263.446] GetCurrentObject (hdc=0x8f0107b1, type=0x1) returned 0xb00017
[0263.446] GetCurrentObject (hdc=0x8f0107b1, type=0x2) returned 0x900010
[0263.446] GetCurrentObject (hdc=0x8f0107b1, type=0x7) returned 0x1e0507b9
[0263.446] GetCurrentObject (hdc=0x8f0107b1, type=0x6) returned 0x8a01c2
[0263.446] SaveDC (hdc=0x8f0107b1) returned 1
[0263.446] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbd04051e
[0263.446] GetClipRgn (hdc=0x8f0107b1, hrgn=0xbd04051e) returned 0
[0263.446] SelectClipRgn (hdc=0x8f0107b1, hrgn=0x5f040798) returned 2
[0263.447] DeleteObject (ho=0xbd04051e) returned 1
[0263.447] DeleteObject (ho=0x5f040798) returned 1
[0263.447] OffsetViewportOrgEx (in: hdc=0x8f0107b1, x=0, y=0, lppt=0x231b550 | out: lppt=0x231b550) returned 1
[0263.447] DrawThemeParentBackground () returned 0x0
[0263.447] GetWindowPlacement (in: hWnd=0x1300ea, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0263.447] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0263.447] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.448] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.448] GetSystemMetrics (nIndex=42) returned 0
[0263.448] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.448] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0263.448] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0263.448] GetCurrentObject (hdc=0x8f0107b1, type=0x1) returned 0xb00017
[0263.448] GetCurrentObject (hdc=0x8f0107b1, type=0x2) returned 0x900010
[0263.448] GetCurrentObject (hdc=0x8f0107b1, type=0x7) returned 0x1e0507b9
[0263.448] GetCurrentObject (hdc=0x8f0107b1, type=0x6) returned 0x8a01c2
[0263.448] SaveDC (hdc=0x8f0107b1) returned 2
[0263.448] GetNearestColor (hdc=0x8f0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0263.448] CreateSolidBrush (color=0xf0f0f0) returned 0x9610078d
[0263.448] FillRect (hDC=0x8f0107b1, lprc=0x53dad0, hbr=0x9610078d) returned 1
[0263.448] DeleteObject (ho=0x9610078d) returned 1
[0263.448] RestoreDC (hdc=0x8f0107b1, nSavedDC=-1) returned 1
[0263.448] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.448] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.448] GetSystemMetrics (nIndex=42) returned 0
[0263.448] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.449] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0263.449] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0263.449] GetCurrentObject (hdc=0x8f0107b1, type=0x1) returned 0xb00017
[0263.449] GetCurrentObject (hdc=0x8f0107b1, type=0x2) returned 0x900010
[0263.449] GetCurrentObject (hdc=0x8f0107b1, type=0x7) returned 0x1e0507b9
[0263.449] GetCurrentObject (hdc=0x8f0107b1, type=0x6) returned 0x8a01c2
[0263.449] SaveDC (hdc=0x8f0107b1) returned 2
[0263.449] GetNearestColor (hdc=0x8f0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0263.449] CreateSolidBrush (color=0xf0f0f0) returned 0x9710078d
[0263.449] FillRect (hDC=0x8f0107b1, lprc=0x53da70, hbr=0x9710078d) returned 1
[0263.449] DeleteObject (ho=0x9710078d) returned 1
[0263.449] RestoreDC (hdc=0x8f0107b1, nSavedDC=-1) returned 1
[0263.449] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.449] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.449] GetSystemMetrics (nIndex=42) returned 0
[0263.449] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.449] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0263.450] RestoreDC (hdc=0x8f0107b1, nSavedDC=-1) returned 1
[0263.450] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107b1) returned 0x0
[0263.450] IsAppThemed () returned 0x1
[0263.450] GetThemeAppProperties () returned 0x3
[0263.450] GetThemeAppProperties () returned 0x3
[0263.450] IsAppThemed () returned 0x1
[0263.450] GetThemeAppProperties () returned 0x3
[0263.450] GetThemeAppProperties () returned 0x3
[0263.450] IsThemePartDefined () returned 0x1
[0263.450] GdipCreateRegion (region=0x53dff4) returned 0x0
[0263.450] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.450] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0263.450] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.450] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0263.450] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0263.450] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0263.450] LocalFree (hMem=0x89ee40) returned 0x0
[0263.450] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.450] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.450] LocalFree (hMem=0x89ea88) returned 0x0
[0263.450] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.450] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0263.451] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0263.451] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0263.451] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.451] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0263.451] GetCurrentObject (hdc=0x8f0107b1, type=0x1) returned 0xb00017
[0263.451] GetCurrentObject (hdc=0x8f0107b1, type=0x2) returned 0x900010
[0263.451] GetCurrentObject (hdc=0x8f0107b1, type=0x7) returned 0x1e0507b9
[0263.451] GetCurrentObject (hdc=0x8f0107b1, type=0x6) returned 0x8a01c2
[0263.451] SaveDC (hdc=0x8f0107b1) returned 1
[0263.451] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x60040798
[0263.451] GetClipRgn (hdc=0x8f0107b1, hrgn=0x60040798) returned 0
[0263.451] SelectClipRgn (hdc=0x8f0107b1, hrgn=0xbf04051e) returned 2
[0263.451] DeleteObject (ho=0x60040798) returned 1
[0263.451] DeleteObject (ho=0xbf04051e) returned 1
[0263.451] OffsetViewportOrgEx (in: hdc=0x8f0107b1, x=0, y=0, lppt=0x231bdd8 | out: lppt=0x231bdd8) returned 1
[0263.451] IsAppThemed () returned 0x1
[0263.451] GetThemeAppProperties () returned 0x3
[0263.451] GetThemeAppProperties () returned 0x3
[0263.451] DrawThemeBackground () returned 0x0
[0263.451] RestoreDC (hdc=0x8f0107b1, nSavedDC=-1) returned 1
[0263.451] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107b1) returned 0x0
[0263.451] GdipCreateRegion (region=0x53dff8) returned 0x0
[0263.452] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.452] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0263.452] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.452] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0263.452] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0263.452] LocalFree (hMem=0x89ea88) returned 0x0
[0263.452] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0263.452] LocalFree (hMem=0x89ea88) returned 0x0
[0263.452] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.452] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0263.452] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0263.452] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0263.452] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.452] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0263.452] GetCurrentObject (hdc=0x8f0107b1, type=0x1) returned 0xb00017
[0263.452] GetCurrentObject (hdc=0x8f0107b1, type=0x2) returned 0x900010
[0263.452] GetCurrentObject (hdc=0x8f0107b1, type=0x7) returned 0x1e0507b9
[0263.452] GetCurrentObject (hdc=0x8f0107b1, type=0x6) returned 0x8a01c2
[0263.452] SaveDC (hdc=0x8f0107b1) returned 1
[0263.452] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc004051e
[0263.452] GetClipRgn (hdc=0x8f0107b1, hrgn=0xc004051e) returned 0
[0263.452] SelectClipRgn (hdc=0x8f0107b1, hrgn=0x61040798) returned 2
[0263.453] DeleteObject (ho=0xc004051e) returned 1
[0263.453] DeleteObject (ho=0x61040798) returned 1
[0263.453] OffsetViewportOrgEx (in: hdc=0x8f0107b1, x=0, y=0, lppt=0x231c0ac | out: lppt=0x231c0ac) returned 1
[0263.453] IsAppThemed () returned 0x1
[0263.453] GetThemeAppProperties () returned 0x3
[0263.453] GetThemeAppProperties () returned 0x3
[0263.453] GetThemeBackgroundContentRect () returned 0x0
[0263.453] RestoreDC (hdc=0x8f0107b1, nSavedDC=-1) returned 1
[0263.453] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107b1) returned 0x0
[0263.453] IsAppThemed () returned 0x1
[0263.453] GetThemeAppProperties () returned 0x3
[0263.453] GetThemeAppProperties () returned 0x3
[0263.453] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0263.453] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0263.453] GetCurrentObject (hdc=0x8f0107b1, type=0x1) returned 0xb00017
[0263.453] GetCurrentObject (hdc=0x8f0107b1, type=0x2) returned 0x900010
[0263.453] GetCurrentObject (hdc=0x8f0107b1, type=0x7) returned 0x1e0507b9
[0263.453] GetCurrentObject (hdc=0x8f0107b1, type=0x6) returned 0x8a01c2
[0263.453] SaveDC (hdc=0x8f0107b1) returned 1
[0263.453] GetTextAlign (hdc=0x8f0107b1) returned 0x0
[0263.453] GetTextColor (hdc=0x8f0107b1) returned 0x0
[0263.453] GetCurrentObject (hdc=0x8f0107b1, type=0x6) returned 0x8a01c2
[0263.454] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0263.454] SelectObject (hdc=0x8f0107b1, h=0x730a066d) returned 0x8a01c2
[0263.454] GetBkMode (hdc=0x8f0107b1) returned 2
[0263.454] SetBkMode (hdc=0x8f0107b1, mode=1) returned 2
[0263.454] DrawTextExW (in: hdc=0x8f0107b1, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x231c44c | out: lpchText="OK", lprc=0x53df90) returned 13
[0263.454] DrawTextExW (in: hdc=0x8f0107b1, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x231c44c | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0263.454] RestoreDC (hdc=0x8f0107b1, nSavedDC=-1) returned 1
[0263.454] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107b1) returned 0x0
[0263.454] GetFocus () returned 0x110122
[0263.454] IsAppThemed () returned 0x1
[0263.455] GetThemeAppProperties () returned 0x3
[0263.455] GetThemeAppProperties () returned 0x3
[0263.455] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0263.455] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x8f0107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0263.455] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107b1) returned 0x0
[0263.455] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0263.455] SelectObject (hdc=0x8f0107b1, h=0x85000f) returned 0x1e0507b9
[0263.455] DeleteDC (hdc=0x8f0107b1) returned 1
[0263.455] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0263.455] EndPaint (hWnd=0xd004e, lpPaint=0x53e2e4) returned 1
[0263.455] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.455] IsWindowUnicode (hWnd=0x2d013e) returned 1
[0263.455] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.455] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.456] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.456] BeginPaint (in: hWnd=0x2d013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0263.456] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0263.456] CreateCompatibleDC (hdc=0x60100ce) returned 0x910107b1
[0263.456] SelectObject (hdc=0x910107b1, h=0x1e0507b9) returned 0x85000f
[0263.456] GdipCreateFromHDC (hdc=0x910107b1, graphics=0x53e300) returned 0x0
[0263.456] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0263.456] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0263.456] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0263.456] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.456] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0263.456] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0263.456] LocalFree (hMem=0x89ec80) returned 0x0
[0263.456] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.456] GdipCreateRegion (region=0x53e348) returned 0x0
[0263.456] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.457] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0263.457] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0263.457] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb5f0dbd) returned 0x0
[0263.457] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.457] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0263.457] GetCurrentObject (hdc=0x910107b1, type=0x1) returned 0xb00017
[0263.457] GetCurrentObject (hdc=0x910107b1, type=0x2) returned 0x900010
[0263.457] GetCurrentObject (hdc=0x910107b1, type=0x7) returned 0x1e0507b9
[0263.457] GetCurrentObject (hdc=0x910107b1, type=0x6) returned 0x8a01c2
[0263.457] SaveDC (hdc=0x910107b1) returned 1
[0263.457] GetNearestColor (hdc=0x910107b1, color=0xf0f0f0) returned 0xf0f0f0
[0263.457] GetNearestColor (hdc=0x910107b1, color=0xa0a0a0) returned 0xa0a0a0
[0263.457] GetNearestColor (hdc=0x910107b1, color=0x696969) returned 0x696969
[0263.457] GetNearestColor (hdc=0x910107b1, color=0xa0a0a0) returned 0xa0a0a0
[0263.457] GetNearestColor (hdc=0x910107b1, color=0x0) returned 0x0
[0263.457] GetNearestColor (hdc=0x910107b1, color=0xffffff) returned 0xffffff
[0263.457] GetNearestColor (hdc=0x910107b1, color=0xe5e5e5) returned 0xe5e5e5
[0263.457] GetNearestColor (hdc=0x910107b1, color=0xd7d7d7) returned 0xd7d7d7
[0263.457] GetNearestColor (hdc=0x910107b1, color=0x0) returned 0x0
[0263.458] RestoreDC (hdc=0x910107b1, nSavedDC=-1) returned 1
[0263.458] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107b1) returned 0x0
[0263.458] IsAppThemed () returned 0x1
[0263.458] GetThemeAppProperties () returned 0x3
[0263.458] GetThemeAppProperties () returned 0x3
[0263.458] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0263.458] SendMessageW (hWnd=0x1300ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0263.458] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0263.458] IsAppThemed () returned 0x1
[0263.458] GetThemeAppProperties () returned 0x3
[0263.458] GetThemeAppProperties () returned 0x3
[0263.458] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x231cc5c | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0263.458] IsAppThemed () returned 0x1
[0263.458] GetThemeAppProperties () returned 0x3
[0263.458] GetThemeAppProperties () returned 0x3
[0263.458] IsAppThemed () returned 0x1
[0263.458] GetThemeAppProperties () returned 0x3
[0263.459] GetThemeAppProperties () returned 0x3
[0263.459] GetFocus () returned 0x110122
[0263.497] IsAppThemed () returned 0x1
[0263.497] GetThemeAppProperties () returned 0x3
[0263.497] GetThemeAppProperties () returned 0x3
[0263.497] IsAppThemed () returned 0x1
[0263.497] GetThemeAppProperties () returned 0x3
[0263.497] GetThemeAppProperties () returned 0x3
[0263.497] IsThemePartDefined () returned 0x1
[0263.497] IsAppThemed () returned 0x1
[0263.497] GetThemeAppProperties () returned 0x3
[0263.497] GetThemeAppProperties () returned 0x3
[0263.497] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0263.497] IsAppThemed () returned 0x1
[0263.497] GetThemeAppProperties () returned 0x3
[0263.497] GetThemeAppProperties () returned 0x3
[0263.497] IsAppThemed () returned 0x1
[0263.497] GetThemeAppProperties () returned 0x3
[0263.497] GetThemeAppProperties () returned 0x3
[0263.497] IsThemePartDefined () returned 0x1
[0263.497] GdipCreateRegion (region=0x53e070) returned 0x0
[0263.498] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.498] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0263.498] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.498] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0263.498] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0263.498] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0263.498] LocalFree (hMem=0x89ee40) returned 0x0
[0263.498] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0263.498] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0263.498] LocalFree (hMem=0x89ec80) returned 0x0
[0263.498] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.498] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0263.498] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0263.498] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0263.498] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.498] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0263.499] GetCurrentObject (hdc=0x910107b1, type=0x1) returned 0xb00017
[0263.499] GetCurrentObject (hdc=0x910107b1, type=0x2) returned 0x900010
[0263.499] GetCurrentObject (hdc=0x910107b1, type=0x7) returned 0x1e0507b9
[0263.499] GetCurrentObject (hdc=0x910107b1, type=0x6) returned 0x8a01c2
[0263.499] SaveDC (hdc=0x910107b1) returned 1
[0263.499] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x62040798
[0263.499] GetClipRgn (hdc=0x910107b1, hrgn=0x62040798) returned 0
[0263.499] SelectClipRgn (hdc=0x910107b1, hrgn=0xc404051e) returned 2
[0263.499] DeleteObject (ho=0x62040798) returned 1
[0263.499] DeleteObject (ho=0xc404051e) returned 1
[0263.499] OffsetViewportOrgEx (in: hdc=0x910107b1, x=0, y=0, lppt=0x231d30c | out: lppt=0x231d30c) returned 1
[0263.499] DrawThemeParentBackground () returned 0x0
[0263.499] GetWindowPlacement (in: hWnd=0x1300ea, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0263.500] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0263.500] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.500] GetSystemMetrics (nIndex=42) returned 0
[0263.500] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0263.500] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0263.500] GetCurrentObject (hdc=0x910107b1, type=0x1) returned 0xb00017
[0263.500] GetCurrentObject (hdc=0x910107b1, type=0x2) returned 0x900010
[0263.500] GetCurrentObject (hdc=0x910107b1, type=0x7) returned 0x1e0507b9
[0263.500] GetCurrentObject (hdc=0x910107b1, type=0x6) returned 0x8a01c2
[0263.500] SaveDC (hdc=0x910107b1) returned 2
[0263.500] GetNearestColor (hdc=0x910107b1, color=0xf0f0f0) returned 0xf0f0f0
[0263.500] CreateSolidBrush (color=0xf0f0f0) returned 0x9810078d
[0263.500] FillRect (hDC=0x910107b1, lprc=0x53dad0, hbr=0x9810078d) returned 1
[0263.501] DeleteObject (ho=0x9810078d) returned 1
[0263.501] RestoreDC (hdc=0x910107b1, nSavedDC=-1) returned 1
[0263.501] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.501] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.501] GetSystemMetrics (nIndex=42) returned 0
[0263.501] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.501] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0263.501] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0263.501] GetCurrentObject (hdc=0x910107b1, type=0x1) returned 0xb00017
[0263.501] GetCurrentObject (hdc=0x910107b1, type=0x2) returned 0x900010
[0263.501] GetCurrentObject (hdc=0x910107b1, type=0x7) returned 0x1e0507b9
[0263.501] GetCurrentObject (hdc=0x910107b1, type=0x6) returned 0x8a01c2
[0263.501] SaveDC (hdc=0x910107b1) returned 2
[0263.501] GetNearestColor (hdc=0x910107b1, color=0xf0f0f0) returned 0xf0f0f0
[0263.501] CreateSolidBrush (color=0xf0f0f0) returned 0x9910078d
[0263.501] FillRect (hDC=0x910107b1, lprc=0x53da70, hbr=0x9910078d) returned 1
[0263.502] DeleteObject (ho=0x9910078d) returned 1
[0263.502] RestoreDC (hdc=0x910107b1, nSavedDC=-1) returned 1
[0263.502] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.502] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.502] GetSystemMetrics (nIndex=42) returned 0
[0263.502] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.502] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0263.502] RestoreDC (hdc=0x910107b1, nSavedDC=-1) returned 1
[0263.502] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107b1) returned 0x0
[0263.502] IsAppThemed () returned 0x1
[0263.502] GetThemeAppProperties () returned 0x3
[0263.502] GetThemeAppProperties () returned 0x3
[0263.502] IsAppThemed () returned 0x1
[0263.502] GetThemeAppProperties () returned 0x3
[0263.503] GetThemeAppProperties () returned 0x3
[0263.503] IsThemePartDefined () returned 0x1
[0263.503] GdipCreateRegion (region=0x53dff4) returned 0x0
[0263.503] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.503] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0263.503] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.503] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0263.503] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.503] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.503] LocalFree (hMem=0x89ea88) returned 0x0
[0263.503] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.503] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.503] LocalFree (hMem=0x89ea88) returned 0x0
[0263.503] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.503] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0263.503] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0263.503] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0263.503] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.504] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0263.504] GetCurrentObject (hdc=0x910107b1, type=0x1) returned 0xb00017
[0263.504] GetCurrentObject (hdc=0x910107b1, type=0x2) returned 0x900010
[0263.504] GetCurrentObject (hdc=0x910107b1, type=0x7) returned 0x1e0507b9
[0263.504] GetCurrentObject (hdc=0x910107b1, type=0x6) returned 0x8a01c2
[0263.504] SaveDC (hdc=0x910107b1) returned 1
[0263.504] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc504051e
[0263.504] GetClipRgn (hdc=0x910107b1, hrgn=0xc504051e) returned 0
[0263.504] SelectClipRgn (hdc=0x910107b1, hrgn=0x64040798) returned 2
[0263.504] DeleteObject (ho=0xc504051e) returned 1
[0263.504] DeleteObject (ho=0x64040798) returned 1
[0263.504] OffsetViewportOrgEx (in: hdc=0x910107b1, x=0, y=0, lppt=0x231db94 | out: lppt=0x231db94) returned 1
[0263.504] IsAppThemed () returned 0x1
[0263.504] GetThemeAppProperties () returned 0x3
[0263.504] GetThemeAppProperties () returned 0x3
[0263.504] DrawThemeBackground () returned 0x0
[0263.505] RestoreDC (hdc=0x910107b1, nSavedDC=-1) returned 1
[0263.505] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107b1) returned 0x0
[0263.505] GdipCreateRegion (region=0x53dff8) returned 0x0
[0263.505] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.505] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0263.505] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.505] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0263.505] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0263.505] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0263.505] LocalFree (hMem=0x89ee40) returned 0x0
[0263.505] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.505] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0263.505] LocalFree (hMem=0x89ea88) returned 0x0
[0263.505] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.505] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0263.509] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0263.510] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0263.510] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.510] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0263.510] GetCurrentObject (hdc=0x910107b1, type=0x1) returned 0xb00017
[0263.510] GetCurrentObject (hdc=0x910107b1, type=0x2) returned 0x900010
[0263.510] GetCurrentObject (hdc=0x910107b1, type=0x7) returned 0x1e0507b9
[0263.510] GetCurrentObject (hdc=0x910107b1, type=0x6) returned 0x8a01c2
[0263.510] SaveDC (hdc=0x910107b1) returned 1
[0263.510] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x65040798
[0263.510] GetClipRgn (hdc=0x910107b1, hrgn=0x65040798) returned 0
[0263.510] SelectClipRgn (hdc=0x910107b1, hrgn=0xc604051e) returned 2
[0263.510] DeleteObject (ho=0x65040798) returned 1
[0263.510] DeleteObject (ho=0xc604051e) returned 1
[0263.510] OffsetViewportOrgEx (in: hdc=0x910107b1, x=0, y=0, lppt=0x231de68 | out: lppt=0x231de68) returned 1
[0263.510] IsAppThemed () returned 0x1
[0263.511] GetThemeAppProperties () returned 0x3
[0263.511] GetThemeAppProperties () returned 0x3
[0263.511] GetThemeBackgroundContentRect () returned 0x0
[0263.511] RestoreDC (hdc=0x910107b1, nSavedDC=-1) returned 1
[0263.511] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107b1) returned 0x0
[0263.511] IsAppThemed () returned 0x1
[0263.511] GetThemeAppProperties () returned 0x3
[0263.511] GetThemeAppProperties () returned 0x3
[0263.511] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0263.511] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0263.511] GetCurrentObject (hdc=0x910107b1, type=0x1) returned 0xb00017
[0263.511] GetCurrentObject (hdc=0x910107b1, type=0x2) returned 0x900010
[0263.511] GetCurrentObject (hdc=0x910107b1, type=0x7) returned 0x1e0507b9
[0263.511] GetCurrentObject (hdc=0x910107b1, type=0x6) returned 0x8a01c2
[0263.511] SaveDC (hdc=0x910107b1) returned 1
[0263.511] GetTextAlign (hdc=0x910107b1) returned 0x0
[0263.512] GetTextColor (hdc=0x910107b1) returned 0x0
[0263.512] GetCurrentObject (hdc=0x910107b1, type=0x6) returned 0x8a01c2
[0263.512] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0263.512] SelectObject (hdc=0x910107b1, h=0x730a066d) returned 0x8a01c2
[0263.512] GetBkMode (hdc=0x910107b1) returned 2
[0263.512] SetBkMode (hdc=0x910107b1, mode=1) returned 2
[0263.512] DrawTextExW (in: hdc=0x910107b1, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x231e208 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0263.512] DrawTextExW (in: hdc=0x910107b1, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x231e208 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0263.513] RestoreDC (hdc=0x910107b1, nSavedDC=-1) returned 1
[0263.513] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107b1) returned 0x0
[0263.513] GetFocus () returned 0x110122
[0263.513] IsAppThemed () returned 0x1
[0263.513] GetThemeAppProperties () returned 0x3
[0263.513] GetThemeAppProperties () returned 0x3
[0263.513] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0263.513] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x910107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0263.513] GdipReleaseDC (graphics=0x5d92c30, hdc=0x910107b1) returned 0x0
[0263.513] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0263.513] SelectObject (hdc=0x910107b1, h=0x85000f) returned 0x1e0507b9
[0263.514] DeleteDC (hdc=0x910107b1) returned 1
[0263.514] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0263.514] EndPaint (hWnd=0x2d013e, lpPaint=0x53e2e4) returned 1
[0263.514] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0263.515] IsWindowUnicode (hWnd=0x102dc) returned 1
[0263.515] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.515] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0263.516] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.516] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.516] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.516] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0263.517] IsWindowUnicode (hWnd=0x102dc) returned 1
[0263.517] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.517] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.518] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.518] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.518] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x84, wParam=0x0, lParam=0x1920355) returned 0x1
[0263.518] IsWindowUnicode (hWnd=0xd004e) returned 1
[0263.518] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.519] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.519] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.519] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.519] IsWindowUnicode (hWnd=0x1101e2) returned 1
[0263.519] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.519] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.519] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.519] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0263.519] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.519] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x84, wParam=0x0, lParam=0x1920355) returned 0x1
[0263.519] IsWindowUnicode (hWnd=0xd004e) returned 1
[0263.519] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.519] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x84, wParam=0x0, lParam=0x1920355) returned 0x1
[0263.520] SetCursor (hCursor=0x10003) returned 0x10003
[0263.520] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.520] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.520] _TrackMouseEvent (in: lpEventTrack=0x231e304 | out: lpEventTrack=0x231e304) returned 1
[0263.520] SendMessageW (hWnd=0xd004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0263.520] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0263.520] InvalidateRect (hWnd=0xd004e, lpRect=0x0, bErase=0) returned 1
[0263.520] GetKeyState (nVirtKey=1) returned 1
[0263.520] GetKeyState (nVirtKey=2) returned 0
[0263.520] GetKeyState (nVirtKey=4) returned 0
[0263.520] GetKeyState (nVirtKey=5) returned 0
[0263.520] GetKeyState (nVirtKey=6) returned 0
[0263.520] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.521] IsWindowUnicode (hWnd=0xd004e) returned 1
[0263.521] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.521] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.521] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.521] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.528] IsWindowUnicode (hWnd=0xd004e) returned 1
[0263.528] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.528] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.528] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.528] BeginPaint (in: hWnd=0xd004e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0263.529] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0263.529] CreateCompatibleDC (hdc=0x8b010786) returned 0x8d0107c6
[0263.529] SelectObject (hdc=0x8d0107c6, h=0x1e0507b9) returned 0x85000f
[0263.529] GdipCreateFromHDC (hdc=0x8d0107c6, graphics=0x53e300) returned 0x0
[0263.529] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0263.529] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0263.529] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0263.529] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.529] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0263.529] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.529] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.530] LocalFree (hMem=0x89ea88) returned 0x0
[0263.530] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.530] GdipCreateRegion (region=0x53e348) returned 0x0
[0263.530] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.530] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0263.530] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0263.530] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb5d0dbd) returned 0x0
[0263.530] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.530] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0263.530] GetCurrentObject (hdc=0x8d0107c6, type=0x1) returned 0xb00017
[0263.530] GetCurrentObject (hdc=0x8d0107c6, type=0x2) returned 0x900010
[0263.530] GetCurrentObject (hdc=0x8d0107c6, type=0x7) returned 0x1e0507b9
[0263.530] GetCurrentObject (hdc=0x8d0107c6, type=0x6) returned 0x8a01c2
[0263.530] SaveDC (hdc=0x8d0107c6) returned 1
[0263.530] GetNearestColor (hdc=0x8d0107c6, color=0xf0f0f0) returned 0xf0f0f0
[0263.530] GetNearestColor (hdc=0x8d0107c6, color=0xa0a0a0) returned 0xa0a0a0
[0263.531] GetNearestColor (hdc=0x8d0107c6, color=0x696969) returned 0x696969
[0263.531] GetNearestColor (hdc=0x8d0107c6, color=0xa0a0a0) returned 0xa0a0a0
[0263.531] GetNearestColor (hdc=0x8d0107c6, color=0x0) returned 0x0
[0263.531] GetNearestColor (hdc=0x8d0107c6, color=0xffffff) returned 0xffffff
[0263.531] GetNearestColor (hdc=0x8d0107c6, color=0xe5e5e5) returned 0xe5e5e5
[0263.531] GetNearestColor (hdc=0x8d0107c6, color=0xd7d7d7) returned 0xd7d7d7
[0263.531] GetNearestColor (hdc=0x8d0107c6, color=0x0) returned 0x0
[0263.531] RestoreDC (hdc=0x8d0107c6, nSavedDC=-1) returned 1
[0263.531] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c6) returned 0x0
[0263.531] IsAppThemed () returned 0x1
[0263.531] GetThemeAppProperties () returned 0x3
[0263.531] GetThemeAppProperties () returned 0x3
[0263.531] IsAppThemed () returned 0x1
[0263.531] GetThemeAppProperties () returned 0x3
[0263.531] GetThemeAppProperties () returned 0x3
[0263.532] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x231ea64 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0263.532] IsAppThemed () returned 0x1
[0263.532] GetThemeAppProperties () returned 0x3
[0263.532] GetThemeAppProperties () returned 0x3
[0263.532] IsAppThemed () returned 0x1
[0263.532] GetThemeAppProperties () returned 0x3
[0263.532] GetThemeAppProperties () returned 0x3
[0263.532] IsAppThemed () returned 0x1
[0263.532] GetThemeAppProperties () returned 0x3
[0263.532] GetThemeAppProperties () returned 0x3
[0263.533] IsAppThemed () returned 0x1
[0263.533] GetThemeAppProperties () returned 0x3
[0263.533] GetThemeAppProperties () returned 0x3
[0263.533] IsThemePartDefined () returned 0x1
[0263.533] IsAppThemed () returned 0x1
[0263.533] GetThemeAppProperties () returned 0x3
[0263.533] GetThemeAppProperties () returned 0x3
[0263.533] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0263.533] IsAppThemed () returned 0x1
[0263.533] GetThemeAppProperties () returned 0x3
[0263.533] GetThemeAppProperties () returned 0x3
[0263.533] IsAppThemed () returned 0x1
[0263.533] GetThemeAppProperties () returned 0x3
[0263.533] GetThemeAppProperties () returned 0x3
[0263.533] IsThemePartDefined () returned 0x1
[0263.533] GdipCreateRegion (region=0x53e064) returned 0x0
[0263.533] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.533] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0263.533] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.533] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0263.533] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0263.534] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0263.534] LocalFree (hMem=0x89ec80) returned 0x0
[0263.534] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0263.534] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0263.534] LocalFree (hMem=0x89ee40) returned 0x0
[0263.534] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.534] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0263.534] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0263.534] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0263.534] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.534] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0263.534] GetCurrentObject (hdc=0x8d0107c6, type=0x1) returned 0xb00017
[0263.534] GetCurrentObject (hdc=0x8d0107c6, type=0x2) returned 0x900010
[0263.534] GetCurrentObject (hdc=0x8d0107c6, type=0x7) returned 0x1e0507b9
[0263.534] GetCurrentObject (hdc=0x8d0107c6, type=0x6) returned 0x8a01c2
[0263.534] SaveDC (hdc=0x8d0107c6) returned 1
[0263.535] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc704051e
[0263.535] GetClipRgn (hdc=0x8d0107c6, hrgn=0xc704051e) returned 0
[0263.535] SelectClipRgn (hdc=0x8d0107c6, hrgn=0x69040798) returned 2
[0263.535] DeleteObject (ho=0xc704051e) returned 1
[0263.535] DeleteObject (ho=0x69040798) returned 1
[0263.535] OffsetViewportOrgEx (in: hdc=0x8d0107c6, x=0, y=0, lppt=0x231f114 | out: lppt=0x231f114) returned 1
[0263.535] DrawThemeParentBackground () returned 0x0
[0263.535] GetWindowPlacement (in: hWnd=0x1300ea, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0263.535] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0263.535] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.535] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.535] GetSystemMetrics (nIndex=42) returned 0
[0263.535] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.535] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0263.536] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0263.536] GetCurrentObject (hdc=0x8d0107c6, type=0x1) returned 0xb00017
[0263.536] GetCurrentObject (hdc=0x8d0107c6, type=0x2) returned 0x900010
[0263.536] GetCurrentObject (hdc=0x8d0107c6, type=0x7) returned 0x1e0507b9
[0263.536] GetCurrentObject (hdc=0x8d0107c6, type=0x6) returned 0x8a01c2
[0263.536] SaveDC (hdc=0x8d0107c6) returned 2
[0263.536] GetNearestColor (hdc=0x8d0107c6, color=0xf0f0f0) returned 0xf0f0f0
[0263.536] CreateSolidBrush (color=0xf0f0f0) returned 0x9a10078d
[0263.536] FillRect (hDC=0x8d0107c6, lprc=0x53dac8, hbr=0x9a10078d) returned 1
[0263.536] DeleteObject (ho=0x9a10078d) returned 1
[0263.536] RestoreDC (hdc=0x8d0107c6, nSavedDC=-1) returned 1
[0263.536] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.536] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.536] GetSystemMetrics (nIndex=42) returned 0
[0263.536] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.537] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0263.537] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0263.537] GetCurrentObject (hdc=0x8d0107c6, type=0x1) returned 0xb00017
[0263.537] GetCurrentObject (hdc=0x8d0107c6, type=0x2) returned 0x900010
[0263.537] GetCurrentObject (hdc=0x8d0107c6, type=0x7) returned 0x1e0507b9
[0263.537] GetCurrentObject (hdc=0x8d0107c6, type=0x6) returned 0x8a01c2
[0263.538] SaveDC (hdc=0x8d0107c6) returned 2
[0263.538] GetNearestColor (hdc=0x8d0107c6, color=0xf0f0f0) returned 0xf0f0f0
[0263.538] CreateSolidBrush (color=0xf0f0f0) returned 0x9b10078d
[0263.538] FillRect (hDC=0x8d0107c6, lprc=0x53da68, hbr=0x9b10078d) returned 1
[0263.538] DeleteObject (ho=0x9b10078d) returned 1
[0263.538] RestoreDC (hdc=0x8d0107c6, nSavedDC=-1) returned 1
[0263.538] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.538] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.538] GetSystemMetrics (nIndex=42) returned 0
[0263.538] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.538] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0263.538] RestoreDC (hdc=0x8d0107c6, nSavedDC=-1) returned 1
[0263.539] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c6) returned 0x0
[0263.539] IsAppThemed () returned 0x1
[0263.539] GetThemeAppProperties () returned 0x3
[0263.539] GetThemeAppProperties () returned 0x3
[0263.539] IsAppThemed () returned 0x1
[0263.539] GetThemeAppProperties () returned 0x3
[0263.539] GetThemeAppProperties () returned 0x3
[0263.539] IsThemePartDefined () returned 0x1
[0263.539] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0263.539] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.539] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0263.539] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.539] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0263.539] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0263.539] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0263.539] LocalFree (hMem=0x89ee40) returned 0x0
[0263.539] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0263.539] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0263.539] LocalFree (hMem=0x89ee40) returned 0x0
[0263.540] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.540] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0263.540] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0263.540] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0263.540] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.540] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0263.540] GetCurrentObject (hdc=0x8d0107c6, type=0x1) returned 0xb00017
[0263.540] GetCurrentObject (hdc=0x8d0107c6, type=0x2) returned 0x900010
[0263.540] GetCurrentObject (hdc=0x8d0107c6, type=0x7) returned 0x1e0507b9
[0263.540] GetCurrentObject (hdc=0x8d0107c6, type=0x6) returned 0x8a01c2
[0263.540] SaveDC (hdc=0x8d0107c6) returned 1
[0263.540] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a040798
[0263.540] GetClipRgn (hdc=0x8d0107c6, hrgn=0x6a040798) returned 0
[0263.540] SelectClipRgn (hdc=0x8d0107c6, hrgn=0xc904051e) returned 2
[0263.540] DeleteObject (ho=0x6a040798) returned 1
[0263.540] DeleteObject (ho=0xc904051e) returned 1
[0263.540] OffsetViewportOrgEx (in: hdc=0x8d0107c6, x=0, y=0, lppt=0x231f99c | out: lppt=0x231f99c) returned 1
[0263.541] IsAppThemed () returned 0x1
[0263.541] GetThemeAppProperties () returned 0x3
[0263.541] GetThemeAppProperties () returned 0x3
[0263.541] DrawThemeBackground () returned 0x0
[0263.541] RestoreDC (hdc=0x8d0107c6, nSavedDC=-1) returned 1
[0263.541] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c6) returned 0x0
[0263.541] GdipCreateRegion (region=0x53dfec) returned 0x0
[0263.541] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.541] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0263.541] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.541] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0263.541] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0263.541] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0263.541] LocalFree (hMem=0x89ee40) returned 0x0
[0263.541] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0263.541] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0263.541] LocalFree (hMem=0x89ee40) returned 0x0
[0263.541] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.542] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0263.542] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0263.542] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0263.542] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.542] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0263.542] GetCurrentObject (hdc=0x8d0107c6, type=0x1) returned 0xb00017
[0263.542] GetCurrentObject (hdc=0x8d0107c6, type=0x2) returned 0x900010
[0263.542] GetCurrentObject (hdc=0x8d0107c6, type=0x7) returned 0x1e0507b9
[0263.542] GetCurrentObject (hdc=0x8d0107c6, type=0x6) returned 0x8a01c2
[0263.542] SaveDC (hdc=0x8d0107c6) returned 1
[0263.542] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xca04051e
[0263.542] GetClipRgn (hdc=0x8d0107c6, hrgn=0xca04051e) returned 0
[0263.542] SelectClipRgn (hdc=0x8d0107c6, hrgn=0x6b040798) returned 2
[0263.542] DeleteObject (ho=0xca04051e) returned 1
[0263.542] DeleteObject (ho=0x6b040798) returned 1
[0263.542] OffsetViewportOrgEx (in: hdc=0x8d0107c6, x=0, y=0, lppt=0x231fc70 | out: lppt=0x231fc70) returned 1
[0263.542] IsAppThemed () returned 0x1
[0263.542] GetThemeAppProperties () returned 0x3
[0263.542] GetThemeAppProperties () returned 0x3
[0263.542] GetThemeBackgroundContentRect () returned 0x0
[0263.542] RestoreDC (hdc=0x8d0107c6, nSavedDC=-1) returned 1
[0263.543] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c6) returned 0x0
[0263.543] IsAppThemed () returned 0x1
[0263.543] GetThemeAppProperties () returned 0x3
[0263.543] GetThemeAppProperties () returned 0x3
[0263.543] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0263.543] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0263.543] GetCurrentObject (hdc=0x8d0107c6, type=0x1) returned 0xb00017
[0263.543] GetCurrentObject (hdc=0x8d0107c6, type=0x2) returned 0x900010
[0263.543] GetCurrentObject (hdc=0x8d0107c6, type=0x7) returned 0x1e0507b9
[0263.543] GetCurrentObject (hdc=0x8d0107c6, type=0x6) returned 0x8a01c2
[0263.543] SaveDC (hdc=0x8d0107c6) returned 1
[0263.543] GetTextAlign (hdc=0x8d0107c6) returned 0x0
[0263.543] GetTextColor (hdc=0x8d0107c6) returned 0x0
[0263.543] GetCurrentObject (hdc=0x8d0107c6, type=0x6) returned 0x8a01c2
[0263.543] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0263.543] SelectObject (hdc=0x8d0107c6, h=0x730a066d) returned 0x8a01c2
[0263.544] GetBkMode (hdc=0x8d0107c6) returned 2
[0263.544] SetBkMode (hdc=0x8d0107c6, mode=1) returned 2
[0263.544] DrawTextExW (in: hdc=0x8d0107c6, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x2320010 | out: lpchText="OK", lprc=0x53df84) returned 13
[0263.544] DrawTextExW (in: hdc=0x8d0107c6, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x2320010 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0263.544] RestoreDC (hdc=0x8d0107c6, nSavedDC=-1) returned 1
[0263.544] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c6) returned 0x0
[0263.544] GetFocus () returned 0x110122
[0263.544] IsAppThemed () returned 0x1
[0263.545] GetThemeAppProperties () returned 0x3
[0263.545] GetThemeAppProperties () returned 0x3
[0263.545] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0263.545] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x8d0107c6, x1=0, y1=0, rop=0xcc0020) returned 1
[0263.545] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8d0107c6) returned 0x0
[0263.545] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0263.545] SelectObject (hdc=0x8d0107c6, h=0x85000f) returned 0x1e0507b9
[0263.545] DeleteDC (hdc=0x8d0107c6) returned 1
[0263.545] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0263.545] EndPaint (hWnd=0xd004e, lpPaint=0x53e2e4) returned 1
[0263.545] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.545] IsWindowUnicode (hWnd=0x202c6) returned 1
[0263.546] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.546] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.546] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.546] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0263.546] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0263.546] CreateCompatibleDC (hdc=0x60100ce) returned 0x8f0107c6
[0263.546] SelectObject (hdc=0x8f0107c6, h=0x1e0507b9) returned 0x85000f
[0263.546] GdipCreateFromHDC (hdc=0x8f0107c6, graphics=0x53e300) returned 0x0
[0263.546] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0263.546] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0263.546] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0263.546] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.546] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0263.547] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.547] LocalFree (hMem=0x89ea88) returned 0x0
[0263.547] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.547] GdipCreateRegion (region=0x53e348) returned 0x0
[0263.547] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.547] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0263.547] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0263.547] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb5b0dbd) returned 0x0
[0263.547] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.547] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0263.547] GetCurrentObject (hdc=0x8f0107c6, type=0x1) returned 0xb00017
[0263.547] GetCurrentObject (hdc=0x8f0107c6, type=0x2) returned 0x900010
[0263.547] GetCurrentObject (hdc=0x8f0107c6, type=0x7) returned 0x1e0507b9
[0263.547] GetCurrentObject (hdc=0x8f0107c6, type=0x6) returned 0x8a01c2
[0263.547] SaveDC (hdc=0x8f0107c6) returned 1
[0263.547] GetNearestColor (hdc=0x8f0107c6, color=0xff) returned 0xff
[0263.547] GetNearestColor (hdc=0x8f0107c6, color=0x55) returned 0x55
[0263.547] GetNearestColor (hdc=0x8f0107c6, color=0x0) returned 0x0
[0263.547] GetNearestColor (hdc=0x8f0107c6, color=0x55) returned 0x55
[0263.547] GetNearestColor (hdc=0x8f0107c6, color=0x0) returned 0x0
[0263.547] GetNearestColor (hdc=0x8f0107c6, color=0x8080ff) returned 0x8080ff
[0263.548] GetNearestColor (hdc=0x8f0107c6, color=0x7373e5) returned 0x7373e5
[0263.548] GetNearestColor (hdc=0x8f0107c6, color=0xe5) returned 0xe5
[0263.548] GetNearestColor (hdc=0x8f0107c6, color=0x0) returned 0x0
[0263.548] RestoreDC (hdc=0x8f0107c6, nSavedDC=-1) returned 1
[0263.548] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c6) returned 0x0
[0263.548] IsAppThemed () returned 0x1
[0263.548] GetThemeAppProperties () returned 0x3
[0263.548] GetThemeAppProperties () returned 0x3
[0263.548] IsAppThemed () returned 0x1
[0263.548] GetThemeAppProperties () returned 0x3
[0263.548] GetThemeAppProperties () returned 0x3
[0263.548] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0263.548] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x23207f4 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0263.548] IsAppThemed () returned 0x1
[0263.548] GetThemeAppProperties () returned 0x3
[0263.548] GetThemeAppProperties () returned 0x3
[0263.548] IsAppThemed () returned 0x1
[0263.549] GetThemeAppProperties () returned 0x3
[0263.549] GetThemeAppProperties () returned 0x3
[0263.549] GetFocus () returned 0x110122
[0263.549] IsAppThemed () returned 0x1
[0263.549] GetThemeAppProperties () returned 0x3
[0263.549] GetThemeAppProperties () returned 0x3
[0263.549] IsAppThemed () returned 0x1
[0263.549] GetThemeAppProperties () returned 0x3
[0263.549] GetThemeAppProperties () returned 0x3
[0263.549] IsThemePartDefined () returned 0x1
[0263.549] IsAppThemed () returned 0x1
[0263.549] GetThemeAppProperties () returned 0x3
[0263.549] GetThemeAppProperties () returned 0x3
[0263.549] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0263.549] IsAppThemed () returned 0x1
[0263.549] GetThemeAppProperties () returned 0x3
[0263.549] GetThemeAppProperties () returned 0x3
[0263.549] IsAppThemed () returned 0x1
[0263.549] GetThemeAppProperties () returned 0x3
[0263.549] GetThemeAppProperties () returned 0x3
[0263.549] IsThemePartDefined () returned 0x1
[0263.549] GdipCreateRegion (region=0x53e070) returned 0x0
[0263.549] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.549] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0263.549] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.549] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0263.549] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0263.550] LocalFree (hMem=0x89eee8) returned 0x0
[0263.550] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0263.550] LocalFree (hMem=0x89ea88) returned 0x0
[0263.550] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.550] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0263.550] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0263.550] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0263.550] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.550] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0263.550] GetCurrentObject (hdc=0x8f0107c6, type=0x1) returned 0xb00017
[0263.550] GetCurrentObject (hdc=0x8f0107c6, type=0x2) returned 0x900010
[0263.550] GetCurrentObject (hdc=0x8f0107c6, type=0x7) returned 0x1e0507b9
[0263.550] GetCurrentObject (hdc=0x8f0107c6, type=0x6) returned 0x8a01c2
[0263.550] SaveDC (hdc=0x8f0107c6) returned 1
[0263.550] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c040798
[0263.550] GetClipRgn (hdc=0x8f0107c6, hrgn=0x6c040798) returned 0
[0263.550] SelectClipRgn (hdc=0x8f0107c6, hrgn=0xce04051e) returned 2
[0263.550] DeleteObject (ho=0x6c040798) returned 1
[0263.550] DeleteObject (ho=0xce04051e) returned 1
[0263.550] OffsetViewportOrgEx (in: hdc=0x8f0107c6, x=0, y=0, lppt=0x2320ea4 | out: lppt=0x2320ea4) returned 1
[0263.550] DrawThemeParentBackground () returned 0x0
[0263.551] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0263.551] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0263.551] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0263.551] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0263.551] GetSystemMetrics (nIndex=42) returned 0
[0263.551] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0263.551] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0263.551] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0263.551] GetCurrentObject (hdc=0x8f0107c6, type=0x1) returned 0xb00017
[0263.551] GetCurrentObject (hdc=0x8f0107c6, type=0x2) returned 0x900010
[0263.551] GetCurrentObject (hdc=0x8f0107c6, type=0x7) returned 0x1e0507b9
[0263.551] GetCurrentObject (hdc=0x8f0107c6, type=0x6) returned 0x8a01c2
[0263.551] SaveDC (hdc=0x8f0107c6) returned 2
[0263.551] GetNearestColor (hdc=0x8f0107c6, color=0xff) returned 0xff
[0263.551] CreateSolidBrush (color=0xff) returned 0x9c10078d
[0263.551] FillRect (hDC=0x8f0107c6, lprc=0x53dad0, hbr=0x9c10078d) returned 1
[0263.551] DeleteObject (ho=0x9c10078d) returned 1
[0263.551] RestoreDC (hdc=0x8f0107c6, nSavedDC=-1) returned 1
[0263.551] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0263.551] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0263.552] GetSystemMetrics (nIndex=42) returned 0
[0263.552] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0263.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0263.552] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0263.552] GetCurrentObject (hdc=0x8f0107c6, type=0x1) returned 0xb00017
[0263.552] GetCurrentObject (hdc=0x8f0107c6, type=0x2) returned 0x900010
[0263.552] GetCurrentObject (hdc=0x8f0107c6, type=0x7) returned 0x1e0507b9
[0263.552] GetCurrentObject (hdc=0x8f0107c6, type=0x6) returned 0x8a01c2
[0263.552] SaveDC (hdc=0x8f0107c6) returned 2
[0263.552] GetNearestColor (hdc=0x8f0107c6, color=0xff) returned 0xff
[0263.552] CreateSolidBrush (color=0xff) returned 0x9d10078d
[0263.552] FillRect (hDC=0x8f0107c6, lprc=0x53da70, hbr=0x9d10078d) returned 1
[0263.552] DeleteObject (ho=0x9d10078d) returned 1
[0263.552] RestoreDC (hdc=0x8f0107c6, nSavedDC=-1) returned 1
[0263.552] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0263.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0263.559] GetSystemMetrics (nIndex=42) returned 0
[0263.560] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0263.560] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0263.560] RestoreDC (hdc=0x8f0107c6, nSavedDC=-1) returned 1
[0263.560] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c6) returned 0x0
[0263.560] IsAppThemed () returned 0x1
[0263.560] GetThemeAppProperties () returned 0x3
[0263.560] GetThemeAppProperties () returned 0x3
[0263.560] IsAppThemed () returned 0x1
[0263.560] GetThemeAppProperties () returned 0x3
[0263.560] GetThemeAppProperties () returned 0x3
[0263.560] IsThemePartDefined () returned 0x1
[0263.560] GdipCreateRegion (region=0x53dff4) returned 0x0
[0263.560] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.560] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0263.561] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.561] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0263.561] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.561] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.561] LocalFree (hMem=0x89ea88) returned 0x0
[0263.561] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.561] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.561] LocalFree (hMem=0x89ea88) returned 0x0
[0263.561] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.561] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0263.561] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0263.561] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0263.561] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.561] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0263.561] GetCurrentObject (hdc=0x8f0107c6, type=0x1) returned 0xb00017
[0263.561] GetCurrentObject (hdc=0x8f0107c6, type=0x2) returned 0x900010
[0263.561] GetCurrentObject (hdc=0x8f0107c6, type=0x7) returned 0x1e0507b9
[0263.562] GetCurrentObject (hdc=0x8f0107c6, type=0x6) returned 0x8a01c2
[0263.562] SaveDC (hdc=0x8f0107c6) returned 1
[0263.562] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcf04051e
[0263.562] GetClipRgn (hdc=0x8f0107c6, hrgn=0xcf04051e) returned 0
[0263.562] SelectClipRgn (hdc=0x8f0107c6, hrgn=0x6e040798) returned 2
[0263.562] DeleteObject (ho=0xcf04051e) returned 1
[0263.562] DeleteObject (ho=0x6e040798) returned 1
[0263.562] OffsetViewportOrgEx (in: hdc=0x8f0107c6, x=0, y=0, lppt=0x2321708 | out: lppt=0x2321708) returned 1
[0263.562] IsAppThemed () returned 0x1
[0263.562] GetThemeAppProperties () returned 0x3
[0263.562] GetThemeAppProperties () returned 0x3
[0263.562] DrawThemeBackground () returned 0x0
[0263.562] RestoreDC (hdc=0x8f0107c6, nSavedDC=-1) returned 1
[0263.562] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c6) returned 0x0
[0263.562] GdipCreateRegion (region=0x53dff8) returned 0x0
[0263.563] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.563] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0263.563] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.563] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0263.563] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0263.563] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0263.563] LocalFree (hMem=0x89ec80) returned 0x0
[0263.563] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0263.563] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0263.563] LocalFree (hMem=0x89ee40) returned 0x0
[0263.563] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.563] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0263.563] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0263.563] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0263.563] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.563] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0263.564] GetCurrentObject (hdc=0x8f0107c6, type=0x1) returned 0xb00017
[0263.564] GetCurrentObject (hdc=0x8f0107c6, type=0x2) returned 0x900010
[0263.564] GetCurrentObject (hdc=0x8f0107c6, type=0x7) returned 0x1e0507b9
[0263.564] GetCurrentObject (hdc=0x8f0107c6, type=0x6) returned 0x8a01c2
[0263.564] SaveDC (hdc=0x8f0107c6) returned 1
[0263.564] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f040798
[0263.564] GetClipRgn (hdc=0x8f0107c6, hrgn=0x6f040798) returned 0
[0263.564] SelectClipRgn (hdc=0x8f0107c6, hrgn=0xd004051e) returned 2
[0263.564] DeleteObject (ho=0x6f040798) returned 1
[0263.564] DeleteObject (ho=0xd004051e) returned 1
[0263.564] OffsetViewportOrgEx (in: hdc=0x8f0107c6, x=0, y=0, lppt=0x23219dc | out: lppt=0x23219dc) returned 1
[0263.564] IsAppThemed () returned 0x1
[0263.564] GetThemeAppProperties () returned 0x3
[0263.564] GetThemeAppProperties () returned 0x3
[0263.564] GetThemeBackgroundContentRect () returned 0x0
[0263.564] RestoreDC (hdc=0x8f0107c6, nSavedDC=-1) returned 1
[0263.564] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c6) returned 0x0
[0263.564] IsAppThemed () returned 0x1
[0263.565] GetThemeAppProperties () returned 0x3
[0263.565] GetThemeAppProperties () returned 0x3
[0263.565] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0263.565] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0263.565] GetCurrentObject (hdc=0x8f0107c6, type=0x1) returned 0xb00017
[0263.565] GetCurrentObject (hdc=0x8f0107c6, type=0x2) returned 0x900010
[0263.565] GetCurrentObject (hdc=0x8f0107c6, type=0x7) returned 0x1e0507b9
[0263.565] GetCurrentObject (hdc=0x8f0107c6, type=0x6) returned 0x8a01c2
[0263.565] SaveDC (hdc=0x8f0107c6) returned 1
[0263.565] GetTextAlign (hdc=0x8f0107c6) returned 0x0
[0263.565] GetTextColor (hdc=0x8f0107c6) returned 0x0
[0263.565] GetCurrentObject (hdc=0x8f0107c6, type=0x6) returned 0x8a01c2
[0263.565] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0263.565] SelectObject (hdc=0x8f0107c6, h=0x450a0799) returned 0x8a01c2
[0263.565] GetBkMode (hdc=0x8f0107c6) returned 2
[0263.566] SetBkMode (hdc=0x8f0107c6, mode=1) returned 2
[0263.566] DrawTextExW (in: hdc=0x8f0107c6, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x2321d7c | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0263.566] DrawTextExW (in: hdc=0x8f0107c6, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x2321d7c | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0263.566] RestoreDC (hdc=0x8f0107c6, nSavedDC=-1) returned 1
[0263.566] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c6) returned 0x0
[0263.566] GetFocus () returned 0x110122
[0263.567] IsAppThemed () returned 0x1
[0263.567] GetThemeAppProperties () returned 0x3
[0263.567] GetThemeAppProperties () returned 0x3
[0263.567] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0263.567] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x8f0107c6, x1=0, y1=0, rop=0xcc0020) returned 1
[0263.567] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8f0107c6) returned 0x0
[0263.567] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0263.567] SelectObject (hdc=0x8f0107c6, h=0x85000f) returned 0x1e0507b9
[0263.567] DeleteDC (hdc=0x8f0107c6) returned 1
[0263.567] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0263.567] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0263.575] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0263.575] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0263.575] WaitMessage () returned 1
[0263.608] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.608] IsWindowUnicode (hWnd=0x102dc) returned 1
[0263.608] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.608] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.608] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.609] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0263.609] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0263.609] WaitMessage () returned 1
[0263.610] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.610] IsWindowUnicode (hWnd=0x102dc) returned 1
[0263.610] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.610] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.610] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.611] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.612] IsWindowUnicode (hWnd=0x102dc) returned 1
[0263.612] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.612] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.612] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.612] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.612] IsWindowUnicode (hWnd=0x102dc) returned 1
[0263.612] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.612] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.612] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.612] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0263.613] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0263.613] WaitMessage () returned 1
[0263.613] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.613] IsWindowUnicode (hWnd=0x102dc) returned 1
[0263.613] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.613] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.613] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.615] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.620] IsWindowUnicode (hWnd=0x102dc) returned 1
[0263.620] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.620] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.620] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.620] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.620] IsWindowUnicode (hWnd=0x102dc) returned 1
[0263.620] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.620] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.620] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.620] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.621] IsWindowUnicode (hWnd=0xd004e) returned 1
[0263.621] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.621] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.621] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.621] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.621] IsWindowUnicode (hWnd=0xd004e) returned 1
[0263.621] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.622] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.622] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.622] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x2a1, wParam=0x0, lParam=0x90014) returned 0x0
[0263.622] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0263.622] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0263.622] WaitMessage () returned 1
[0263.624] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.624] IsWindowUnicode (hWnd=0x102dc) returned 1
[0263.624] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.624] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.624] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.626] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.626] IsWindowUnicode (hWnd=0x102dc) returned 1
[0263.626] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.626] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.626] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.627] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.627] IsWindowUnicode (hWnd=0x102dc) returned 1
[0263.627] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.627] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.627] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.627] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0263.627] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0263.627] WaitMessage () returned 1
[0263.731] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.731] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x84, wParam=0x0, lParam=0x1920355) returned 0x1
[0263.732] IsWindowUnicode (hWnd=0xd004e) returned 1
[0263.732] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.732] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x84, wParam=0x0, lParam=0x1920355) returned 0x1
[0263.732] GetDlgItem (hDlg=0x1300ea, nIDDlgItem=0) returned 0x0
[0263.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x210, wParam=0x201, lParam=0x150136) returned 0x0
[0263.732] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x21, wParam=0x1300ea, lParam=0x2010001) returned 0x1
[0263.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x21, wParam=0x1300ea, lParam=0x2010001) returned 0x1
[0263.732] SetCursor (hCursor=0x10003) returned 0x10003
[0263.733] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.733] DispatchMessageW (lpMsg=0x53e8a0)
[0263.733] GetKeyState (nVirtKey=1) returned -128
[0263.733] GetKeyState (nVirtKey=2) returned 0
[0263.733] GetKeyState (nVirtKey=4) returned 0
[0263.733] GetKeyState (nVirtKey=5) returned 0
[0263.733] GetKeyState (nVirtKey=6) returned 0
[0263.733] IsWindowVisible (hWnd=0xd004e) returned 1
[0263.733] IsWindowEnabled (hWnd=0xd004e) returned 1
[0263.733] SetFocus (hWnd=0xd004e) returned 0x110122
[0263.733] GetFocus () returned 0xd004e
[0263.733] IsChild (hWndParent=0x1300ea, hWnd=0xd004e) returned 1
[0263.733] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x8, wParam=0xd004e, lParam=0x0) returned 0x1
[0263.734] SendMessageW (hWnd=0x110122, Msg=0x2111, wParam=0x2000122, lParam=0x110122) returned 0x0
[0263.735] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0263.736] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0263.737] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0263.737] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0263.738] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0263.738] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0263.743] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0263.744] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x7, wParam=0x110122, lParam=0x0) returned 0x0
[0263.744] GetStockObject (i=5) returned 0x900015
[0263.744] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0263.744] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0xd, wParam=0x3, lParam=0x89e638) returned 0x2
[0263.744] GetDlgItem (hDlg=0x1300ea, nIDDlgItem=852046) returned 0xd004e
[0263.744] SendMessageW (hWnd=0xd004e, Msg=0x202b, wParam=0xd004e, lParam=0x53de74) returned 0x0
[0263.744] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x202b, wParam=0xd004e, lParam=0x53de74) returned 0x0
[0263.744] InvalidateRect (hWnd=0xd004e, lpRect=0x0, bErase=0) returned 1
[0263.746] GetFocus () returned 0xd004e
[0263.746] GetFocus () returned 0xd004e
[0263.746] GetFocus () returned 0xd004e
[0263.746] GetKeyState (nVirtKey=1) returned -128
[0263.746] GetKeyState (nVirtKey=2) returned 0
[0263.746] GetKeyState (nVirtKey=4) returned 0
[0263.747] GetKeyState (nVirtKey=5) returned 0
[0263.747] GetKeyState (nVirtKey=6) returned 0
[0263.747] GetCapture () returned 0x0
[0263.747] SetCapture (hWnd=0xd004e) returned 0x0
[0263.747] GetKeyState (nVirtKey=1) returned -128
[0263.747] GetKeyState (nVirtKey=2) returned 0
[0263.747] GetKeyState (nVirtKey=4) returned 0
[0263.747] GetKeyState (nVirtKey=5) returned 0
[0263.747] GetKeyState (nVirtKey=6) returned 0
[0263.747] NotifyWinEvent (event=0x800a, hwnd=0xd004e, idObject=-4, idChild=0)
[0263.747] InvalidateRect (hWnd=0xd004e, lpRect=0x53e4c8, bErase=0) returned 1
[0263.747] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.747] IsWindowUnicode (hWnd=0xd004e) returned 1
[0263.748] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.748] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0263.748] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0263.748] MapWindowPoints (in: hWndFrom=0xd004e, hWndTo=0x0, lpPoints=0x2321fcc, cPoints=0x1 | out: lpPoints=0x2321fcc) returned 25756481
[0263.748] NotifyWinEvent (event=0x800a, hwnd=0xd004e, idObject=-4, idChild=0)
[0263.748] InvalidateRect (hWnd=0xd004e, lpRect=0x53e468, bErase=0) returned 1
[0263.748] UpdateWindow (hWnd=0xd004e) returned 1
[0263.748] BeginPaint (in: hWnd=0xd004e, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x60100ce
[0263.748] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0263.748] CreateCompatibleDC (hdc=0x60100ce) returned 0x790107bc
[0263.749] SelectObject (hdc=0x790107bc, h=0x1e0507b9) returned 0x85000f
[0263.749] GdipCreateFromHDC (hdc=0x790107bc, graphics=0x53df98) returned 0x0
[0263.749] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0263.749] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0263.749] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0263.749] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.749] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0263.749] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.749] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.749] LocalFree (hMem=0x89ea88) returned 0x0
[0263.749] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.750] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0263.750] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.750] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0263.750] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0263.750] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb590dbd) returned 0x0
[0263.750] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.750] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0263.750] GetCurrentObject (hdc=0x790107bc, type=0x1) returned 0xb00017
[0263.750] GetCurrentObject (hdc=0x790107bc, type=0x2) returned 0x900010
[0263.750] GetCurrentObject (hdc=0x790107bc, type=0x7) returned 0x1e0507b9
[0263.750] GetCurrentObject (hdc=0x790107bc, type=0x6) returned 0x8a01c2
[0263.750] SaveDC (hdc=0x790107bc) returned 1
[0263.751] GetNearestColor (hdc=0x790107bc, color=0xf0f0f0) returned 0xf0f0f0
[0263.751] GetNearestColor (hdc=0x790107bc, color=0xa0a0a0) returned 0xa0a0a0
[0263.751] GetNearestColor (hdc=0x790107bc, color=0x696969) returned 0x696969
[0263.751] GetNearestColor (hdc=0x790107bc, color=0xa0a0a0) returned 0xa0a0a0
[0263.751] GetNearestColor (hdc=0x790107bc, color=0x0) returned 0x0
[0263.751] GetNearestColor (hdc=0x790107bc, color=0xffffff) returned 0xffffff
[0263.751] GetNearestColor (hdc=0x790107bc, color=0xe5e5e5) returned 0xe5e5e5
[0263.751] GetNearestColor (hdc=0x790107bc, color=0xd7d7d7) returned 0xd7d7d7
[0263.751] GetNearestColor (hdc=0x790107bc, color=0x0) returned 0x0
[0263.751] RestoreDC (hdc=0x790107bc, nSavedDC=-1) returned 1
[0263.752] GdipReleaseDC (graphics=0x5d92c30, hdc=0x790107bc) returned 0x0
[0263.752] IsAppThemed () returned 0x1
[0263.752] GetThemeAppProperties () returned 0x3
[0263.752] GetThemeAppProperties () returned 0x3
[0263.752] IsAppThemed () returned 0x1
[0263.752] GetThemeAppProperties () returned 0x3
[0263.752] GetThemeAppProperties () returned 0x3
[0263.752] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0263.752] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x2322740 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0263.752] IsAppThemed () returned 0x1
[0263.752] GetThemeAppProperties () returned 0x3
[0263.752] GetThemeAppProperties () returned 0x3
[0263.752] IsAppThemed () returned 0x1
[0263.753] GetThemeAppProperties () returned 0x3
[0263.753] GetThemeAppProperties () returned 0x3
[0263.753] IsAppThemed () returned 0x1
[0263.753] GetThemeAppProperties () returned 0x3
[0263.753] GetThemeAppProperties () returned 0x3
[0263.753] IsAppThemed () returned 0x1
[0263.753] GetThemeAppProperties () returned 0x3
[0263.753] GetThemeAppProperties () returned 0x3
[0263.753] IsThemePartDefined () returned 0x1
[0263.753] IsAppThemed () returned 0x1
[0263.753] GetThemeAppProperties () returned 0x3
[0263.753] GetThemeAppProperties () returned 0x3
[0263.753] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0263.753] IsAppThemed () returned 0x1
[0263.753] GetThemeAppProperties () returned 0x3
[0263.753] GetThemeAppProperties () returned 0x3
[0263.753] IsAppThemed () returned 0x1
[0263.753] GetThemeAppProperties () returned 0x3
[0263.753] GetThemeAppProperties () returned 0x3
[0263.753] IsThemePartDefined () returned 0x1
[0263.753] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0263.754] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.754] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0263.754] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.754] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0263.754] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0263.754] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0263.754] LocalFree (hMem=0x89ee08) returned 0x0
[0263.754] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.754] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0263.754] LocalFree (hMem=0x89ea88) returned 0x0
[0263.754] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.754] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0263.754] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0263.754] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0263.754] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.754] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0263.755] GetCurrentObject (hdc=0x790107bc, type=0x1) returned 0xb00017
[0263.755] GetCurrentObject (hdc=0x790107bc, type=0x2) returned 0x900010
[0263.755] GetCurrentObject (hdc=0x790107bc, type=0x7) returned 0x1e0507b9
[0263.755] GetCurrentObject (hdc=0x790107bc, type=0x6) returned 0x8a01c2
[0263.755] SaveDC (hdc=0x790107bc) returned 1
[0263.755] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd104051e
[0263.755] GetClipRgn (hdc=0x790107bc, hrgn=0xd104051e) returned 0
[0263.755] SelectClipRgn (hdc=0x790107bc, hrgn=0x73040798) returned 2
[0263.755] DeleteObject (ho=0xd104051e) returned 1
[0263.755] DeleteObject (ho=0x73040798) returned 1
[0263.755] OffsetViewportOrgEx (in: hdc=0x790107bc, x=0, y=0, lppt=0x2322df0 | out: lppt=0x2322df0) returned 1
[0263.755] DrawThemeParentBackground ()
[0263.759] GetWindowPlacement (in: hWnd=0x1300ea, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0263.759] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0263.759] GetWindowTextLengthW (hWnd=0x1300ea)
[0263.759] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.759] GetSystemMetrics (nIndex=42) returned 0
[0263.759] GetWindowTextW (hWnd=0x1300ea, lpString=0x53d878, nMaxCount=11)
[0263.759] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0263.759] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0263.759] GetCurrentObject (hdc=0x790107bc, type=0x1) returned 0xb00017
[0263.759] GetCurrentObject (hdc=0x790107bc, type=0x2) returned 0x900010
[0263.759] GetCurrentObject (hdc=0x790107bc, type=0x7) returned 0x1e0507b9
[0263.759] GetCurrentObject (hdc=0x790107bc, type=0x6) returned 0x8a01c2
[0263.759] SaveDC (hdc=0x790107bc) returned 2
[0263.759] GetNearestColor (hdc=0x790107bc, color=0xf0f0f0) returned 0xf0f0f0
[0263.760] CreateSolidBrush (color=0xf0f0f0) returned 0x9e10078d
[0263.760] FillRect (hDC=0x790107bc, lprc=0x53d760, hbr=0x9e10078d) returned 1
[0263.760] DeleteObject (ho=0x9e10078d) returned 1
[0263.760] RestoreDC (hdc=0x790107bc, nSavedDC=-1) returned 1
[0263.760] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.760] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0263.760] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0263.760] GetCurrentObject (hdc=0x790107bc, type=0x1) returned 0xb00017
[0263.760] GetCurrentObject (hdc=0x790107bc, type=0x2) returned 0x900010
[0263.760] GetCurrentObject (hdc=0x790107bc, type=0x7) returned 0x1e0507b9
[0263.760] GetCurrentObject (hdc=0x790107bc, type=0x6) returned 0x8a01c2
[0263.761] SaveDC (hdc=0x790107bc) returned 2
[0263.761] GetNearestColor (hdc=0x790107bc, color=0xf0f0f0) returned 0xf0f0f0
[0263.761] CreateSolidBrush (color=0xf0f0f0) returned 0x9f10078d
[0263.761] FillRect (hDC=0x790107bc, lprc=0x53d700, hbr=0x9f10078d) returned 1
[0263.761] DeleteObject (ho=0x9f10078d) returned 1
[0263.761] RestoreDC (hdc=0x790107bc, nSavedDC=-1) returned 1
[0263.761] GetWindowTextLengthW (hWnd=0x1300ea)
[0263.761] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.761] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0263.762] RestoreDC (hdc=0x790107bc, nSavedDC=-1) returned 1
[0263.762] GdipReleaseDC (graphics=0x5d92c30, hdc=0x790107bc) returned 0x0
[0263.762] IsAppThemed () returned 0x1
[0263.762] GetThemeAppProperties () returned 0x3
[0263.762] GetThemeAppProperties () returned 0x3
[0263.762] IsAppThemed () returned 0x1
[0263.763] GetThemeAppProperties () returned 0x3
[0263.763] GetThemeAppProperties () returned 0x3
[0263.763] IsThemePartDefined () returned 0x1
[0263.763] GdipCreateRegion (region=0x53dc80) returned 0x0
[0263.763] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.763] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0263.763] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.763] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0263.763] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0263.763] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0263.763] LocalFree (hMem=0x89ee08) returned 0x0
[0263.763] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.763] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.763] LocalFree (hMem=0x89ea88) returned 0x0
[0263.763] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.763] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0263.763] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0263.763] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0263.764] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.764] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0263.764] GetCurrentObject (hdc=0x790107bc, type=0x1) returned 0xb00017
[0263.764] GetCurrentObject (hdc=0x790107bc, type=0x2) returned 0x900010
[0263.764] GetCurrentObject (hdc=0x790107bc, type=0x7) returned 0x1e0507b9
[0263.764] GetCurrentObject (hdc=0x790107bc, type=0x6) returned 0x8a01c2
[0263.764] SaveDC (hdc=0x790107bc) returned 1
[0263.764] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x74040798
[0263.764] GetClipRgn (hdc=0x790107bc, hrgn=0x74040798) returned 0
[0263.764] SelectClipRgn (hdc=0x790107bc, hrgn=0xd304051e) returned 2
[0263.764] DeleteObject (ho=0x74040798) returned 1
[0263.764] DeleteObject (ho=0xd304051e) returned 1
[0263.764] OffsetViewportOrgEx (in: hdc=0x790107bc, x=0, y=0, lppt=0x2323678 | out: lppt=0x2323678) returned 1
[0263.764] IsAppThemed () returned 0x1
[0263.765] GetThemeAppProperties () returned 0x3
[0263.765] GetThemeAppProperties () returned 0x3
[0263.765] DrawThemeBackground () returned 0x0
[0263.765] RestoreDC (hdc=0x790107bc, nSavedDC=-1) returned 1
[0263.765] GdipReleaseDC (graphics=0x5d92c30, hdc=0x790107bc) returned 0x0
[0263.765] GdipCreateRegion (region=0x53dc84) returned 0x0
[0263.765] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.765] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0263.765] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.765] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0263.765] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.765] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0263.765] LocalFree (hMem=0x89ea88) returned 0x0
[0263.765] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.765] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0263.765] LocalFree (hMem=0x89ea88) returned 0x0
[0263.765] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.765] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0263.766] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0263.766] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0263.766] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.766] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0263.766] GetCurrentObject (hdc=0x790107bc, type=0x1) returned 0xb00017
[0263.766] GetCurrentObject (hdc=0x790107bc, type=0x2) returned 0x900010
[0263.766] GetCurrentObject (hdc=0x790107bc, type=0x7) returned 0x1e0507b9
[0263.766] GetCurrentObject (hdc=0x790107bc, type=0x6) returned 0x8a01c2
[0263.766] SaveDC (hdc=0x790107bc) returned 1
[0263.766] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd404051e
[0263.766] GetClipRgn (hdc=0x790107bc, hrgn=0xd404051e) returned 0
[0263.766] SelectClipRgn (hdc=0x790107bc, hrgn=0x75040798) returned 2
[0263.766] DeleteObject (ho=0xd404051e) returned 1
[0263.766] DeleteObject (ho=0x75040798) returned 1
[0263.766] OffsetViewportOrgEx (in: hdc=0x790107bc, x=0, y=0, lppt=0x232394c | out: lppt=0x232394c) returned 1
[0263.767] IsAppThemed () returned 0x1
[0263.767] GetThemeAppProperties () returned 0x3
[0263.767] GetThemeAppProperties () returned 0x3
[0263.767] GetThemeBackgroundContentRect () returned 0x0
[0263.767] RestoreDC (hdc=0x790107bc, nSavedDC=-1) returned 1
[0263.767] GdipReleaseDC (graphics=0x5d92c30, hdc=0x790107bc) returned 0x0
[0263.767] IsAppThemed () returned 0x1
[0263.767] GetThemeAppProperties () returned 0x3
[0263.767] GetThemeAppProperties () returned 0x3
[0263.767] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0263.767] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0263.767] GetCurrentObject (hdc=0x790107bc, type=0x1) returned 0xb00017
[0263.767] GetCurrentObject (hdc=0x790107bc, type=0x2) returned 0x900010
[0263.767] GetCurrentObject (hdc=0x790107bc, type=0x7) returned 0x1e0507b9
[0263.767] GetCurrentObject (hdc=0x790107bc, type=0x6) returned 0x8a01c2
[0263.767] SaveDC (hdc=0x790107bc) returned 1
[0263.768] GetTextAlign (hdc=0x790107bc) returned 0x0
[0263.768] GetTextColor (hdc=0x790107bc) returned 0x0
[0263.768] GetCurrentObject (hdc=0x790107bc, type=0x6) returned 0x8a01c2
[0263.768] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0263.768] SelectObject (hdc=0x790107bc, h=0x730a066d) returned 0x8a01c2
[0263.768] GetBkMode (hdc=0x790107bc) returned 2
[0263.768] SetBkMode (hdc=0x790107bc, mode=1) returned 2
[0263.768] DrawTextExW (in: hdc=0x790107bc, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x2323cec | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0263.768] DrawTextExW (in: hdc=0x790107bc, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x2323cec | out: lpchText="OK", lprc=0x53dd80) returned 13
[0263.769] RestoreDC (hdc=0x790107bc, nSavedDC=-1) returned 1
[0263.769] GdipReleaseDC (graphics=0x5d92c30, hdc=0x790107bc) returned 0x0
[0263.769] GetFocus () returned 0xd004e
[0263.769] IsAppThemed () returned 0x1
[0263.769] GetThemeAppProperties () returned 0x3
[0263.769] GetThemeAppProperties () returned 0x3
[0263.769] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0263.769] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x790107bc, x1=0, y1=0, rop=0xcc0020) returned 1
[0263.769] GdipReleaseDC (graphics=0x5d92c30, hdc=0x790107bc) returned 0x0
[0263.769] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0263.769] SelectObject (hdc=0x790107bc, h=0x85000f) returned 0x1e0507b9
[0263.770] DeleteDC (hdc=0x790107bc) returned 1
[0263.770] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0263.770] EndPaint (hWnd=0xd004e, lpPaint=0x53df7c) returned 1
[0263.770] MapWindowPoints (in: hWndFrom=0xd004e, hWndTo=0x0, lpPoints=0x2323de8, cPoints=0x1 | out: lpPoints=0x2323de8) returned 25756481
[0263.770] WindowFromPoint (Point=0x355) returned 0xd004e
[0263.771] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x84, wParam=0x0, lParam=0x1920355) returned 0x1
[0263.771] NotifyWinEvent (event=0x800a, hwnd=0xd004e, idObject=-4, idChild=0)
[0263.771] NotifyWinEvent (event=0x800c, hwnd=0xd004e, idObject=-4, idChild=0)
[0263.771] GetWindowTextLengthW (hWnd=0x110122) returned 0
[0263.771] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0263.771] GetSystemMetrics (nIndex=42) returned 0
[0263.771] GetWindowTextW (in: hWnd=0x110122, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0263.771] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0263.774] SendMessageW (hWnd=0x1300ea, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0263.774] GetCapture () returned 0xd004e
[0263.774] ReleaseCapture () returned 1
[0263.774] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0263.774] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0263.775] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x84, wParam=0x0, lParam=0x1920355) returned 0x1
[0263.775] IsWindow (hWnd=0x70036) returned 1
[0263.775] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0263.775] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0263.776] IsWindow (hWnd=0x70036) returned 1
[0263.776] SetActiveWindow (hWnd=0x70036) returned 0x1300ea
[0263.776] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0263.778] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0263.778] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0263.778] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0263.779] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0263.779] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0263.779] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0263.779] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1300ea) returned 0x1
[0263.783] GetFocus () returned 0xd004e
[0263.783] SetFocus (hWnd=0x202c6) returned 0xd004e
[0263.784] GetFocus () returned 0x202c6
[0263.784] IsChild (hWndParent=0x1300ea, hWnd=0x202c6) returned 0
[0263.784] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0263.784] GetCapture () returned 0x0
[0263.784] InvalidateRect (hWnd=0xd004e, lpRect=0x0, bErase=0) returned 1
[0263.785] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0263.787] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0263.792] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0263.792] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0263.793] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0263.793] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0263.793] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0263.793] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0xd004e, lParam=0x0) returned 0x0
[0263.793] GetStockObject (i=5) returned 0x900015
[0263.794] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0263.794] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8cc910) returned 0x7
[0263.794] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0263.794] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0263.794] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0263.794] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0263.801] IsWindow (hWnd=0x202c6) returned 1
[0263.801] SetFocus (hWnd=0x202c6) returned 0x202c6
[0263.801] GetWindowLongW (hWnd=0x1300ea, nIndex=-8) returned 458806
[0263.801] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0263.801] GetCurrentThreadId () returned 0x11d0
[0263.801] IsWindow (hWnd=0x70036) returned 1
[0263.801] IsWindow (hWnd=0x70036) returned 1
[0263.801] IsWindowVisible (hWnd=0x70036) returned 1
[0263.801] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0263.801] GetFocus () returned 0x202c6
[0263.801] IsChild (hWndParent=0x1300ea, hWnd=0x202c6) returned 0
[0263.801] ShowWindow (hWnd=0x1300ea, nCmdShow=0) returned 1
[0263.801] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0263.801] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0263.815] GetWindowPlacement (in: hWnd=0x1300ea, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0263.815] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0263.815] GetClientRect (in: hWnd=0x1300ea, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0263.815] GetWindowRect (in: hWnd=0x1300ea, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0263.815] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0263.816] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0263.816] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0263.816] GetWindowLongW (hWnd=0x1300ea, nIndex=-20) returned 327937
[0263.816] DestroyWindow (hWnd=0x1300ea) returned 1
[0263.817] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0263.818] GetWindowTextLengthW (hWnd=0x1300ea) returned 10
[0263.818] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0263.818] GetSystemMetrics (nIndex=42) returned 0
[0263.818] GetWindowTextW (in: hWnd=0x1300ea, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0263.818] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0263.818] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0263.822] SendMessageW (hWnd=0x110122, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0263.822] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0263.822] SendMessageW (hWnd=0x110122, Msg=0xb0, wParam=0x2307708, lParam=0x53e518) returned 0x0
[0263.822] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xb0, wParam=0x2307708, lParam=0x53e518) returned 0x0
[0263.822] GetWindowTextLengthW (hWnd=0x110122) returned 0
[0263.822] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0263.822] GetSystemMetrics (nIndex=42) returned 0
[0263.822] GetWindowTextW (in: hWnd=0x110122, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0263.822] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0263.822] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0263.822] GetWindowThreadProcessId (in: hWnd=0xc02ca, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0263.822] GetWindow (hWnd=0xc02ca, uCmd=0x5) returned 0x0
[0263.822] GetWindowLongW (hWnd=0xc02ca, nIndex=-20) returned 65792
[0263.822] DestroyWindow (hWnd=0xc02ca) returned 1
[0263.823] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02ca, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0263.823] GetWindowTextLengthW (hWnd=0xc02ca) returned 25
[0263.823] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0263.823] GetSystemMetrics (nIndex=42) returned 0
[0263.823] GetWindowTextW (in: hWnd=0xc02ca, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0263.823] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02ca, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0263.823] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0263.823] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xc02ca, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0263.824] GetWindowTextLengthW (hWnd=0x1101e2) returned 16
[0263.824] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0263.825] GetSystemMetrics (nIndex=42) returned 0
[0263.825] GetWindowTextW (in: hWnd=0x1101e2, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0263.825] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0263.825] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0263.825] InvalidateRect (hWnd=0xd004e, lpRect=0x0, bErase=0) returned 1
[0263.825] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0263.825] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0263.826] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x110122, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0263.827] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1101e2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0263.828] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd004e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0263.830] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2d013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0263.831] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1300ea, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0263.833] GetProcessWindowStation () returned 0x13c
[0263.833] GetActiveWindow () returned 0x70036
[0263.833] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0263.833] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0263.833] GetCurrentThreadId () returned 0x11d0
[0263.840] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf53f6, lParam=0x0) returned 1
[0263.840] IsWindowVisible (hWnd=0x70036) returned 1
[0263.840] IsWindowEnabled (hWnd=0x70036) returned 1
[0263.840] IsWindowVisible (hWnd=0x602b6) returned 0
[0263.840] IsWindowVisible (hWnd=0x901f8) returned 0
[0263.840] IsWindowVisible (hWnd=0x202d0) returned 0
[0263.840] IsWindowVisible (hWnd=0x202d4) returned 0
[0263.840] GetActiveWindow () returned 0x70036
[0263.840] GetFocus () returned 0x202c6
[0263.840] IsWindow (hWnd=0x70036) returned 1
[0263.840] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0263.840] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0263.841] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0263.841] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0263.842] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0263.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1400ea) returned 0x1
[0263.855] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0263.855] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0263.858] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x2e013e, lParam=0x0) returned 0x0
[0263.859] GetCapture () returned 0x0
[0263.859] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0263.860] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0263.862] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0263.862] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0263.873] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x10105d6
[0263.873] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0263.873] CreateCompatibleDC (hdc=0x10105d6) returned 0x90107c5
[0263.873] SelectObject (hdc=0x90107c5, h=0x1e0507b9) returned 0x85000f
[0263.873] GdipCreateFromHDC (hdc=0x90107c5, graphics=0x53e108) returned 0x0
[0263.873] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0263.874] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0263.874] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0263.874] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.874] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0263.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0263.874] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0263.874] LocalFree (hMem=0x89ee08) returned 0x0
[0263.874] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.874] GdipCreateRegion (region=0x53e150) returned 0x0
[0263.874] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.874] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0263.874] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0263.874] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb570dbd) returned 0x0
[0263.874] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.874] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0263.874] GetCurrentObject (hdc=0x90107c5, type=0x1) returned 0xb00017
[0263.875] GetCurrentObject (hdc=0x90107c5, type=0x2) returned 0x900010
[0263.875] GetCurrentObject (hdc=0x90107c5, type=0x7) returned 0x1e0507b9
[0263.875] GetCurrentObject (hdc=0x90107c5, type=0x6) returned 0x8a01c2
[0263.875] SaveDC (hdc=0x90107c5) returned 1
[0263.875] GetNearestColor (hdc=0x90107c5, color=0xff) returned 0xff
[0263.875] GetNearestColor (hdc=0x90107c5, color=0x55) returned 0x55
[0263.875] GetNearestColor (hdc=0x90107c5, color=0x0) returned 0x0
[0263.875] GetNearestColor (hdc=0x90107c5, color=0x55) returned 0x55
[0263.875] GetNearestColor (hdc=0x90107c5, color=0x0) returned 0x0
[0263.875] GetNearestColor (hdc=0x90107c5, color=0x8080ff) returned 0x8080ff
[0263.875] GetNearestColor (hdc=0x90107c5, color=0x7373e5) returned 0x7373e5
[0263.875] GetNearestColor (hdc=0x90107c5, color=0xe5) returned 0xe5
[0263.876] GetNearestColor (hdc=0x90107c5, color=0x0) returned 0x0
[0263.876] RestoreDC (hdc=0x90107c5, nSavedDC=-1) returned 1
[0263.876] GdipReleaseDC (graphics=0x5d92c30, hdc=0x90107c5) returned 0x0
[0263.876] IsAppThemed () returned 0x1
[0263.876] GetThemeAppProperties () returned 0x3
[0263.876] GetThemeAppProperties () returned 0x3
[0263.876] IsAppThemed () returned 0x1
[0263.876] GetThemeAppProperties () returned 0x3
[0263.876] GetThemeAppProperties () returned 0x3
[0263.876] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0263.876] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2325104 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0263.877] IsAppThemed () returned 0x1
[0263.877] GetThemeAppProperties () returned 0x3
[0263.877] GetThemeAppProperties () returned 0x3
[0263.877] IsAppThemed () returned 0x1
[0263.877] GetThemeAppProperties () returned 0x3
[0263.877] GetThemeAppProperties () returned 0x3
[0263.877] GetFocus () returned 0x2e013e
[0263.877] IsAppThemed () returned 0x1
[0263.877] GetThemeAppProperties () returned 0x3
[0263.877] GetThemeAppProperties () returned 0x3
[0263.877] IsAppThemed () returned 0x1
[0263.877] GetThemeAppProperties () returned 0x3
[0263.877] GetThemeAppProperties () returned 0x3
[0263.877] IsThemePartDefined () returned 0x1
[0263.877] IsAppThemed () returned 0x1
[0263.877] GetThemeAppProperties () returned 0x3
[0263.877] GetThemeAppProperties () returned 0x3
[0263.877] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0263.877] IsAppThemed () returned 0x1
[0263.877] GetThemeAppProperties () returned 0x3
[0263.878] GetThemeAppProperties () returned 0x3
[0263.878] IsAppThemed () returned 0x1
[0263.878] GetThemeAppProperties () returned 0x3
[0263.878] GetThemeAppProperties () returned 0x3
[0263.878] IsThemePartDefined () returned 0x1
[0263.878] GdipCreateRegion (region=0x53de78) returned 0x0
[0263.878] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.878] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0263.878] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.878] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0263.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0263.878] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0263.878] LocalFree (hMem=0x89ec80) returned 0x0
[0263.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0263.878] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0263.878] LocalFree (hMem=0x89ee08) returned 0x0
[0263.878] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.878] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0263.878] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0263.879] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0263.879] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.879] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0263.879] GetCurrentObject (hdc=0x90107c5, type=0x1) returned 0xb00017
[0263.879] GetCurrentObject (hdc=0x90107c5, type=0x2) returned 0x900010
[0263.879] GetCurrentObject (hdc=0x90107c5, type=0x7) returned 0x1e0507b9
[0263.879] GetCurrentObject (hdc=0x90107c5, type=0x6) returned 0x8a01c2
[0263.879] SaveDC (hdc=0x90107c5) returned 1
[0263.879] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x76040798
[0263.879] GetClipRgn (hdc=0x90107c5, hrgn=0x76040798) returned 0
[0263.879] SelectClipRgn (hdc=0x90107c5, hrgn=0xda04051e) returned 2
[0263.879] DeleteObject (ho=0x76040798) returned 1
[0263.879] DeleteObject (ho=0xda04051e) returned 1
[0263.879] OffsetViewportOrgEx (in: hdc=0x90107c5, x=0, y=0, lppt=0x23257b4 | out: lppt=0x23257b4) returned 1
[0263.879] DrawThemeParentBackground () returned 0x0
[0263.880] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0263.880] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0263.880] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0263.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0263.880] GetSystemMetrics (nIndex=42) returned 0
[0263.880] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0263.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0263.880] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0263.880] GetCurrentObject (hdc=0x90107c5, type=0x1) returned 0xb00017
[0263.880] GetCurrentObject (hdc=0x90107c5, type=0x2) returned 0x900010
[0263.880] GetCurrentObject (hdc=0x90107c5, type=0x7) returned 0x1e0507b9
[0263.880] GetCurrentObject (hdc=0x90107c5, type=0x6) returned 0x8a01c2
[0263.880] SaveDC (hdc=0x90107c5) returned 2
[0263.888] GetNearestColor (hdc=0x90107c5, color=0xff) returned 0xff
[0263.888] CreateSolidBrush (color=0xff) returned 0xa010078d
[0263.888] FillRect (hDC=0x90107c5, lprc=0x53d8d8, hbr=0xa010078d) returned 1
[0263.889] DeleteObject (ho=0xa010078d) returned 1
[0263.889] RestoreDC (hdc=0x90107c5, nSavedDC=-1) returned 1
[0263.889] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0263.889] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0263.889] GetSystemMetrics (nIndex=42) returned 0
[0263.889] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0263.889] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0263.889] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0263.889] GetCurrentObject (hdc=0x90107c5, type=0x1) returned 0xb00017
[0263.889] GetCurrentObject (hdc=0x90107c5, type=0x2) returned 0x900010
[0263.889] GetCurrentObject (hdc=0x90107c5, type=0x7) returned 0x1e0507b9
[0263.889] GetCurrentObject (hdc=0x90107c5, type=0x6) returned 0x8a01c2
[0263.889] SaveDC (hdc=0x90107c5) returned 2
[0263.889] GetNearestColor (hdc=0x90107c5, color=0xff) returned 0xff
[0263.890] CreateSolidBrush (color=0xff) returned 0xa110078d
[0263.890] FillRect (hDC=0x90107c5, lprc=0x53d878, hbr=0xa110078d) returned 1
[0263.890] DeleteObject (ho=0xa110078d) returned 1
[0263.890] RestoreDC (hdc=0x90107c5, nSavedDC=-1) returned 1
[0263.890] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0263.890] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0263.890] GetSystemMetrics (nIndex=42) returned 0
[0263.890] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0263.890] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0263.890] RestoreDC (hdc=0x90107c5, nSavedDC=-1) returned 1
[0263.890] GdipReleaseDC (graphics=0x5d92c30, hdc=0x90107c5) returned 0x0
[0263.890] IsAppThemed () returned 0x1
[0263.891] GetThemeAppProperties () returned 0x3
[0263.891] GetThemeAppProperties () returned 0x3
[0263.891] IsAppThemed () returned 0x1
[0263.891] GetThemeAppProperties () returned 0x3
[0263.891] GetThemeAppProperties () returned 0x3
[0263.891] IsThemePartDefined () returned 0x1
[0263.891] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0263.891] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.891] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0263.891] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0263.891] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0263.891] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.891] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0263.891] LocalFree (hMem=0x89ea88) returned 0x0
[0263.891] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0263.891] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0263.891] LocalFree (hMem=0x89ec80) returned 0x0
[0263.891] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0263.891] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0263.892] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0263.892] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0263.892] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.892] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0263.892] GetCurrentObject (hdc=0x90107c5, type=0x1) returned 0xb00017
[0263.892] GetCurrentObject (hdc=0x90107c5, type=0x2) returned 0x900010
[0263.892] GetCurrentObject (hdc=0x90107c5, type=0x7) returned 0x1e0507b9
[0263.892] GetCurrentObject (hdc=0x90107c5, type=0x6) returned 0x8a01c2
[0263.892] SaveDC (hdc=0x90107c5) returned 1
[0263.892] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdb04051e
[0263.892] GetClipRgn (hdc=0x90107c5, hrgn=0xdb04051e) returned 0
[0263.892] SelectClipRgn (hdc=0x90107c5, hrgn=0x78040798) returned 2
[0263.892] DeleteObject (ho=0xdb04051e) returned 1
[0263.892] DeleteObject (ho=0x78040798) returned 1
[0263.892] OffsetViewportOrgEx (in: hdc=0x90107c5, x=0, y=0, lppt=0x2326018 | out: lppt=0x2326018) returned 1
[0263.893] IsAppThemed () returned 0x1
[0263.893] GetThemeAppProperties () returned 0x3
[0263.893] GetThemeAppProperties () returned 0x3
[0263.893] DrawThemeBackground () returned 0x0
[0263.893] RestoreDC (hdc=0x90107c5, nSavedDC=-1) returned 1
[0263.893] GdipReleaseDC (graphics=0x5d92c30, hdc=0x90107c5) returned 0x0
[0263.893] GdipCreateRegion (region=0x53de00) returned 0x0
[0263.893] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0263.893] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0263.893] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0263.893] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0263.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0263.893] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0263.893] LocalFree (hMem=0x89ea88) returned 0x0
[0263.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0263.893] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0263.894] LocalFree (hMem=0x89ee08) returned 0x0
[0263.894] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0263.894] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0263.894] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0263.894] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0263.894] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0263.894] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0263.894] GetCurrentObject (hdc=0x90107c5, type=0x1) returned 0xb00017
[0263.894] GetCurrentObject (hdc=0x90107c5, type=0x2) returned 0x900010
[0263.894] GetCurrentObject (hdc=0x90107c5, type=0x7) returned 0x1e0507b9
[0263.894] GetCurrentObject (hdc=0x90107c5, type=0x6) returned 0x8a01c2
[0263.894] SaveDC (hdc=0x90107c5) returned 1
[0263.894] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x79040798
[0263.894] GetClipRgn (hdc=0x90107c5, hrgn=0x79040798) returned 0
[0263.894] SelectClipRgn (hdc=0x90107c5, hrgn=0xdc04051e) returned 2
[0263.895] DeleteObject (ho=0x79040798) returned 1
[0263.895] DeleteObject (ho=0xdc04051e) returned 1
[0263.895] OffsetViewportOrgEx (in: hdc=0x90107c5, x=0, y=0, lppt=0x23262ec | out: lppt=0x23262ec) returned 1
[0263.895] IsAppThemed () returned 0x1
[0263.895] GetThemeAppProperties () returned 0x3
[0263.895] GetThemeAppProperties () returned 0x3
[0263.895] GetThemeBackgroundContentRect () returned 0x0
[0263.895] RestoreDC (hdc=0x90107c5, nSavedDC=-1) returned 1
[0263.895] GdipReleaseDC (graphics=0x5d92c30, hdc=0x90107c5) returned 0x0
[0263.895] IsAppThemed () returned 0x1
[0263.895] GetThemeAppProperties () returned 0x3
[0263.895] GetThemeAppProperties () returned 0x3
[0263.895] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0263.895] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0263.895] GetCurrentObject (hdc=0x90107c5, type=0x1) returned 0xb00017
[0263.895] GetCurrentObject (hdc=0x90107c5, type=0x2) returned 0x900010
[0263.895] GetCurrentObject (hdc=0x90107c5, type=0x7) returned 0x1e0507b9
[0263.896] GetCurrentObject (hdc=0x90107c5, type=0x6) returned 0x8a01c2
[0263.896] SaveDC (hdc=0x90107c5) returned 1
[0263.896] GetTextAlign (hdc=0x90107c5) returned 0x0
[0263.896] GetTextColor (hdc=0x90107c5) returned 0x0
[0263.896] GetCurrentObject (hdc=0x90107c5, type=0x6) returned 0x8a01c2
[0263.896] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0263.901] SelectObject (hdc=0x90107c5, h=0x450a0799) returned 0x8a01c2
[0263.901] GetBkMode (hdc=0x90107c5) returned 2
[0263.901] SetBkMode (hdc=0x90107c5, mode=1) returned 2
[0263.901] DrawTextExW (in: hdc=0x90107c5, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x232668c | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0263.901] DrawTextExW (in: hdc=0x90107c5, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x232668c | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0263.901] RestoreDC (hdc=0x90107c5, nSavedDC=-1) returned 1
[0263.902] GdipReleaseDC (graphics=0x5d92c30, hdc=0x90107c5) returned 0x0
[0263.902] GetFocus () returned 0x2e013e
[0263.902] IsAppThemed () returned 0x1
[0263.902] GetThemeAppProperties () returned 0x3
[0263.902] GetThemeAppProperties () returned 0x3
[0263.902] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0263.902] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x90107c5, x1=0, y1=0, rop=0xcc0020) returned 1
[0263.902] GdipReleaseDC (graphics=0x5d92c30, hdc=0x90107c5) returned 0x0
[0263.902] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0263.902] SelectObject (hdc=0x90107c5, h=0x85000f) returned 0x1e0507b9
[0263.902] DeleteDC (hdc=0x90107c5) returned 1
[0263.902] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0263.902] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0264.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0264.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0264.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1400ea) returned 0x1
[0264.248] GetFocus () returned 0x1400ea
[0264.249] GetAncestor (hwnd=0x1400ea, gaFlags=0x1) returned 0x10010
[0264.249] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0264.249] SetFocus (hWnd=0x202c6) returned 0x0
[0264.252] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0264.253] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0264.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0264.254] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0264.254] GetFocus () returned 0x70036
[0264.254] SetFocus (hWnd=0x202c6) returned 0x0
[0264.270] IsWindow (hWnd=0x70036) returned 1
[0264.270] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0264.270] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0264.270] IsWindow (hWnd=0x70036) returned 1
[0264.270] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0264.270] IsWindow (hWnd=0x202c6) returned 1
[0264.271] SetFocus (hWnd=0x202c6) returned 0x70036
[0264.271] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0264.272] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0264.273] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0264.274] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0264.274] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0264.275] GetStockObject (i=5) returned 0x900015
[0264.275] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0264.275] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8cc8e0) returned 0x7
[0264.275] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0264.275] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0264.275] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0264.275] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0264.276] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0264.276] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0264.276] GetFocus () returned 0x202c6
[0264.276] GetCapture () returned 0x0
[0264.277] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.277] IsWindowUnicode (hWnd=0x202c6) returned 1
[0264.277] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.277] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.277] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.277] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.278] IsWindowUnicode (hWnd=0x202c6) returned 1
[0264.278] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.278] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.278] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.278] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0264.279] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0264.279] CreateCompatibleDC (hdc=0x60100ce) returned 0x2c01065f
[0264.279] SelectObject (hdc=0x2c01065f, h=0x1e0507b9) returned 0x85000f
[0264.279] GdipCreateFromHDC (hdc=0x2c01065f, graphics=0x53e958) returned 0x0
[0264.279] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0264.279] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0264.279] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0264.279] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0264.279] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0264.279] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0264.279] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0264.279] LocalFree (hMem=0x89ea88) returned 0x0
[0264.279] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0264.279] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0264.280] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0264.280] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0264.280] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0264.280] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb550dbd) returned 0x0
[0264.280] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0264.280] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0264.280] GetCurrentObject (hdc=0x2c01065f, type=0x1) returned 0xb00017
[0264.280] GetCurrentObject (hdc=0x2c01065f, type=0x2) returned 0x900010
[0264.280] GetCurrentObject (hdc=0x2c01065f, type=0x7) returned 0x1e0507b9
[0264.280] GetCurrentObject (hdc=0x2c01065f, type=0x6) returned 0x8a01c2
[0264.280] SaveDC (hdc=0x2c01065f) returned 1
[0264.280] GetNearestColor (hdc=0x2c01065f, color=0xff) returned 0xff
[0264.280] GetNearestColor (hdc=0x2c01065f, color=0x55) returned 0x55
[0264.280] GetNearestColor (hdc=0x2c01065f, color=0x0) returned 0x0
[0264.280] GetNearestColor (hdc=0x2c01065f, color=0x55) returned 0x55
[0264.280] GetNearestColor (hdc=0x2c01065f, color=0x0) returned 0x0
[0264.280] GetNearestColor (hdc=0x2c01065f, color=0x8080ff) returned 0x8080ff
[0264.281] GetNearestColor (hdc=0x2c01065f, color=0x7373e5) returned 0x7373e5
[0264.281] GetNearestColor (hdc=0x2c01065f, color=0xe5) returned 0xe5
[0264.281] GetNearestColor (hdc=0x2c01065f, color=0x0) returned 0x0
[0264.281] RestoreDC (hdc=0x2c01065f, nSavedDC=-1) returned 1
[0264.281] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c01065f) returned 0x0
[0264.281] IsAppThemed () returned 0x1
[0264.281] GetThemeAppProperties () returned 0x3
[0264.281] GetThemeAppProperties () returned 0x3
[0264.281] IsAppThemed () returned 0x1
[0264.281] GetThemeAppProperties () returned 0x3
[0264.281] GetThemeAppProperties () returned 0x3
[0264.281] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2326ee8 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0264.281] IsAppThemed () returned 0x1
[0264.281] GetThemeAppProperties () returned 0x3
[0264.281] GetThemeAppProperties () returned 0x3
[0264.281] IsAppThemed () returned 0x1
[0264.282] GetThemeAppProperties () returned 0x3
[0264.282] GetThemeAppProperties () returned 0x3
[0264.282] GetFocus () returned 0x202c6
[0264.282] IsAppThemed () returned 0x1
[0264.282] GetThemeAppProperties () returned 0x3
[0264.282] GetThemeAppProperties () returned 0x3
[0264.282] IsAppThemed () returned 0x1
[0264.282] GetThemeAppProperties () returned 0x3
[0264.282] GetThemeAppProperties () returned 0x3
[0264.282] IsThemePartDefined () returned 0x1
[0264.282] IsAppThemed () returned 0x1
[0264.282] GetThemeAppProperties () returned 0x3
[0264.282] GetThemeAppProperties () returned 0x3
[0264.282] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0264.282] IsAppThemed () returned 0x1
[0264.282] GetThemeAppProperties () returned 0x3
[0264.282] GetThemeAppProperties () returned 0x3
[0264.282] IsAppThemed () returned 0x1
[0264.282] GetThemeAppProperties () returned 0x3
[0264.282] GetThemeAppProperties () returned 0x3
[0264.282] IsThemePartDefined () returned 0x1
[0264.282] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0264.282] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0264.282] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0264.282] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0264.282] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0264.283] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0264.283] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0264.283] LocalFree (hMem=0x89ea88) returned 0x0
[0264.283] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0264.283] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0264.283] LocalFree (hMem=0x89ea88) returned 0x0
[0264.283] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0264.283] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0264.283] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0264.283] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0264.283] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0264.283] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0264.283] GetCurrentObject (hdc=0x2c01065f, type=0x1) returned 0xb00017
[0264.283] GetCurrentObject (hdc=0x2c01065f, type=0x2) returned 0x900010
[0264.283] GetCurrentObject (hdc=0x2c01065f, type=0x7) returned 0x1e0507b9
[0264.283] GetCurrentObject (hdc=0x2c01065f, type=0x6) returned 0x8a01c2
[0264.283] SaveDC (hdc=0x2c01065f) returned 1
[0264.283] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa004053e
[0264.283] GetClipRgn (hdc=0x2c01065f, hrgn=0xa004053e) returned 0
[0264.283] SelectClipRgn (hdc=0x2c01065f, hrgn=0xea04051e) returned 2
[0264.284] DeleteObject (ho=0xa004053e) returned 1
[0264.284] DeleteObject (ho=0xea04051e) returned 1
[0264.284] OffsetViewportOrgEx (in: hdc=0x2c01065f, x=0, y=0, lppt=0x2327598 | out: lppt=0x2327598) returned 1
[0264.284] DrawThemeParentBackground () returned 0x0
[0264.284] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0264.284] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0264.284] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0264.284] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0264.284] GetSystemMetrics (nIndex=42) returned 0
[0264.284] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0264.284] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0264.284] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0264.284] GetCurrentObject (hdc=0x2c01065f, type=0x1) returned 0xb00017
[0264.284] GetCurrentObject (hdc=0x2c01065f, type=0x2) returned 0x900010
[0264.284] GetCurrentObject (hdc=0x2c01065f, type=0x7) returned 0x1e0507b9
[0264.284] GetCurrentObject (hdc=0x2c01065f, type=0x6) returned 0x8a01c2
[0264.285] SaveDC (hdc=0x2c01065f) returned 2
[0264.285] GetNearestColor (hdc=0x2c01065f, color=0xff) returned 0xff
[0264.285] CreateSolidBrush (color=0xff) returned 0xa310078d
[0264.285] FillRect (hDC=0x2c01065f, lprc=0x53e128, hbr=0xa310078d) returned 1
[0264.285] DeleteObject (ho=0xa310078d) returned 1
[0264.285] RestoreDC (hdc=0x2c01065f, nSavedDC=-1) returned 1
[0264.285] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0264.285] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0264.285] GetSystemMetrics (nIndex=42) returned 0
[0264.285] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0264.285] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0264.285] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0264.285] GetCurrentObject (hdc=0x2c01065f, type=0x1) returned 0xb00017
[0264.285] GetCurrentObject (hdc=0x2c01065f, type=0x2) returned 0x900010
[0264.285] GetCurrentObject (hdc=0x2c01065f, type=0x7) returned 0x1e0507b9
[0264.285] GetCurrentObject (hdc=0x2c01065f, type=0x6) returned 0x8a01c2
[0264.285] SaveDC (hdc=0x2c01065f) returned 2
[0264.285] GetNearestColor (hdc=0x2c01065f, color=0xff) returned 0xff
[0264.285] CreateSolidBrush (color=0xff) returned 0xa410078d
[0264.286] FillRect (hDC=0x2c01065f, lprc=0x53e0c8, hbr=0xa410078d) returned 1
[0264.286] DeleteObject (ho=0xa410078d) returned 1
[0264.286] RestoreDC (hdc=0x2c01065f, nSavedDC=-1) returned 1
[0264.286] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0264.286] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0264.286] GetSystemMetrics (nIndex=42) returned 0
[0264.286] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0264.286] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0264.286] RestoreDC (hdc=0x2c01065f, nSavedDC=-1) returned 1
[0264.286] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c01065f) returned 0x0
[0264.286] IsAppThemed () returned 0x1
[0264.286] GetThemeAppProperties () returned 0x3
[0264.286] GetThemeAppProperties () returned 0x3
[0264.286] IsAppThemed () returned 0x1
[0264.286] GetThemeAppProperties () returned 0x3
[0264.286] GetThemeAppProperties () returned 0x3
[0264.286] IsThemePartDefined () returned 0x1
[0264.286] GdipCreateRegion (region=0x53e64c) returned 0x0
[0264.286] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0264.286] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0264.287] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0264.287] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0264.287] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0264.291] LocalFree (hMem=0x89ec80) returned 0x0
[0264.291] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0264.291] LocalFree (hMem=0x89ee40) returned 0x0
[0264.291] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0264.291] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0264.291] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0264.291] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0264.291] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0264.291] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0264.291] GetCurrentObject (hdc=0x2c01065f, type=0x1) returned 0xb00017
[0264.291] GetCurrentObject (hdc=0x2c01065f, type=0x2) returned 0x900010
[0264.291] GetCurrentObject (hdc=0x2c01065f, type=0x7) returned 0x1e0507b9
[0264.291] GetCurrentObject (hdc=0x2c01065f, type=0x6) returned 0x8a01c2
[0264.292] SaveDC (hdc=0x2c01065f) returned 1
[0264.292] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xeb04051e
[0264.292] GetClipRgn (hdc=0x2c01065f, hrgn=0xeb04051e) returned 0
[0264.292] SelectClipRgn (hdc=0x2c01065f, hrgn=0xa204053e) returned 2
[0264.292] DeleteObject (ho=0xeb04051e) returned 1
[0264.292] DeleteObject (ho=0xa204053e) returned 1
[0264.292] OffsetViewportOrgEx (in: hdc=0x2c01065f, x=0, y=0, lppt=0x2327dfc | out: lppt=0x2327dfc) returned 1
[0264.292] IsAppThemed () returned 0x1
[0264.292] GetThemeAppProperties () returned 0x3
[0264.292] GetThemeAppProperties () returned 0x3
[0264.292] DrawThemeBackground () returned 0x0
[0264.292] RestoreDC (hdc=0x2c01065f, nSavedDC=-1) returned 1
[0264.292] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c01065f) returned 0x0
[0264.292] GdipCreateRegion (region=0x53e650) returned 0x0
[0264.292] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0264.292] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0264.292] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0264.292] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0264.292] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0264.292] LocalFree (hMem=0x89ee40) returned 0x0
[0264.292] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0264.293] LocalFree (hMem=0x89ec80) returned 0x0
[0264.293] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0264.293] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0264.293] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0264.293] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0264.293] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0264.293] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0264.293] GetCurrentObject (hdc=0x2c01065f, type=0x1) returned 0xb00017
[0264.293] GetCurrentObject (hdc=0x2c01065f, type=0x2) returned 0x900010
[0264.293] GetCurrentObject (hdc=0x2c01065f, type=0x7) returned 0x1e0507b9
[0264.293] GetCurrentObject (hdc=0x2c01065f, type=0x6) returned 0x8a01c2
[0264.293] SaveDC (hdc=0x2c01065f) returned 1
[0264.293] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa304053e
[0264.293] GetClipRgn (hdc=0x2c01065f, hrgn=0xa304053e) returned 0
[0264.293] SelectClipRgn (hdc=0x2c01065f, hrgn=0xec04051e) returned 2
[0264.293] DeleteObject (ho=0xa304053e) returned 1
[0264.293] DeleteObject (ho=0xec04051e) returned 1
[0264.293] OffsetViewportOrgEx (in: hdc=0x2c01065f, x=0, y=0, lppt=0x23280d0 | out: lppt=0x23280d0) returned 1
[0264.293] IsAppThemed () returned 0x1
[0264.293] GetThemeAppProperties () returned 0x3
[0264.293] GetThemeAppProperties () returned 0x3
[0264.293] GetThemeBackgroundContentRect () returned 0x0
[0264.293] RestoreDC (hdc=0x2c01065f, nSavedDC=-1) returned 1
[0264.293] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c01065f) returned 0x0
[0264.294] IsAppThemed () returned 0x1
[0264.294] GetThemeAppProperties () returned 0x3
[0264.294] GetThemeAppProperties () returned 0x3
[0264.294] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0264.294] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0264.294] GetCurrentObject (hdc=0x2c01065f, type=0x1) returned 0xb00017
[0264.294] GetCurrentObject (hdc=0x2c01065f, type=0x2) returned 0x900010
[0264.294] GetCurrentObject (hdc=0x2c01065f, type=0x7) returned 0x1e0507b9
[0264.294] GetCurrentObject (hdc=0x2c01065f, type=0x6) returned 0x8a01c2
[0264.294] SaveDC (hdc=0x2c01065f) returned 1
[0264.294] GetTextAlign (hdc=0x2c01065f) returned 0x0
[0264.294] GetTextColor (hdc=0x2c01065f) returned 0x0
[0264.294] GetCurrentObject (hdc=0x2c01065f, type=0x6) returned 0x8a01c2
[0264.294] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0264.294] SelectObject (hdc=0x2c01065f, h=0x450a0799) returned 0x8a01c2
[0264.294] GetBkMode (hdc=0x2c01065f) returned 2
[0264.294] SetBkMode (hdc=0x2c01065f, mode=1) returned 2
[0264.294] DrawTextExW (in: hdc=0x2c01065f, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2328470 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0264.295] DrawTextExW (in: hdc=0x2c01065f, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2328470 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0264.295] RestoreDC (hdc=0x2c01065f, nSavedDC=-1) returned 1
[0264.295] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c01065f) returned 0x0
[0264.295] GetFocus () returned 0x202c6
[0264.295] IsAppThemed () returned 0x1
[0264.295] GetThemeAppProperties () returned 0x3
[0264.295] GetThemeAppProperties () returned 0x3
[0264.295] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0264.295] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x2c01065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0264.296] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c01065f) returned 0x0
[0264.296] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0264.296] SelectObject (hdc=0x2c01065f, h=0x85000f) returned 0x1e0507b9
[0264.296] DeleteDC (hdc=0x2c01065f) returned 1
[0264.296] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0264.296] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0264.296] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.296] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.296] WaitMessage () returned 1
[0264.302] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.302] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.302] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.302] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.302] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.306] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.306] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.306] WaitMessage () returned 1
[0264.354] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.354] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.354] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.354] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.354] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.355] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.355] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.355] WaitMessage () returned 1
[0264.356] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.356] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.356] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.356] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.357] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.357] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.357] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.357] WaitMessage () returned 1
[0264.358] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.358] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.358] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.358] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.358] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.360] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.360] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.360] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.360] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.360] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.360] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.360] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.360] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.360] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.360] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.360] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.361] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.361] WaitMessage () returned 1
[0264.361] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.361] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.361] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.361] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.361] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.362] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.363] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.363] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.363] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.363] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.363] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.363] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.363] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.363] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.363] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.363] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.364] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.364] WaitMessage () returned 1
[0264.364] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.364] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.364] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.364] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.364] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.368] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.369] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.369] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.369] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.369] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.369] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.369] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.369] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.369] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.369] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.369] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.370] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.370] WaitMessage () returned 1
[0264.372] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.372] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.372] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.372] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.372] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.373] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.373] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.373] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.373] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.373] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.374] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.374] IsWindowUnicode (hWnd=0x102dc) returned 1
[0264.374] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.374] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.374] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.374] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.374] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.374] WaitMessage () returned 1
[0264.399] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.400] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.400] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.400] DispatchMessageA (lpMsg=0x53eef8) returned 0x7eac
[0264.400] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.400] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.400] WaitMessage () returned 1
[0264.584] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.585] IsWindowUnicode (hWnd=0x202d0) returned 1
[0264.585] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0264.585] TranslateMessage (lpMsg=0x53eef8) returned 0
[0264.585] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0264.585] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.586] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0264.586] WaitMessage () returned 1
[0265.397] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0265.397] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0265.397] TranslateMessage (lpMsg=0x53eef8) returned 0
[0265.397] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0265.398] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0265.398] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0265.398] WaitMessage () returned 1
[0265.975] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0265.976] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1920253) returned 0x1
[0265.976] IsWindowUnicode (hWnd=0x202c6) returned 1
[0265.976] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0265.976] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1920253) returned 0x1
[0265.977] SetCursor (hCursor=0x10003) returned 0x10003
[0265.977] TranslateMessage (lpMsg=0x53eef8) returned 0
[0265.977] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0265.977] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0265.977] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0265.977] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0265.977] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0265.977] GetKeyState (nVirtKey=1) returned 1
[0265.977] GetKeyState (nVirtKey=2) returned 0
[0265.977] GetKeyState (nVirtKey=4) returned 0
[0265.977] GetKeyState (nVirtKey=5) returned 0
[0265.977] GetKeyState (nVirtKey=6) returned 0
[0265.978] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0265.978] IsWindowUnicode (hWnd=0x202c6) returned 1
[0265.978] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0265.978] TranslateMessage (lpMsg=0x53eef8) returned 0
[0265.978] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0265.978] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0265.978] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0265.978] CreateCompatibleDC (hdc=0x60100ce) returned 0x260107aa
[0265.978] SelectObject (hdc=0x260107aa, h=0x1e0507b9) returned 0x85000f
[0265.978] GdipCreateFromHDC (hdc=0x260107aa, graphics=0x53e958) returned 0x0
[0265.979] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0265.979] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0265.979] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0265.979] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0265.979] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0265.979] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0265.979] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0265.979] LocalFree (hMem=0x89ec80) returned 0x0
[0265.979] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0265.979] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0265.980] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0265.980] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0265.980] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0265.980] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb530dbd) returned 0x0
[0265.980] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0265.980] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0265.980] GetCurrentObject (hdc=0x260107aa, type=0x1) returned 0xb00017
[0265.980] GetCurrentObject (hdc=0x260107aa, type=0x2) returned 0x900010
[0265.980] GetCurrentObject (hdc=0x260107aa, type=0x7) returned 0x1e0507b9
[0265.980] GetCurrentObject (hdc=0x260107aa, type=0x6) returned 0x8a01c2
[0265.980] SaveDC (hdc=0x260107aa) returned 1
[0265.980] GetNearestColor (hdc=0x260107aa, color=0xff) returned 0xff
[0265.980] GetNearestColor (hdc=0x260107aa, color=0x55) returned 0x55
[0265.981] GetNearestColor (hdc=0x260107aa, color=0x0) returned 0x0
[0265.981] GetNearestColor (hdc=0x260107aa, color=0x55) returned 0x55
[0265.981] GetNearestColor (hdc=0x260107aa, color=0x0) returned 0x0
[0265.981] GetNearestColor (hdc=0x260107aa, color=0x8080ff) returned 0x8080ff
[0265.981] GetNearestColor (hdc=0x260107aa, color=0x7373e5) returned 0x7373e5
[0265.981] GetNearestColor (hdc=0x260107aa, color=0xe5) returned 0xe5
[0265.981] GetNearestColor (hdc=0x260107aa, color=0x0) returned 0x0
[0265.981] RestoreDC (hdc=0x260107aa, nSavedDC=-1) returned 1
[0265.981] GdipReleaseDC (graphics=0x5d92c30, hdc=0x260107aa) returned 0x0
[0265.981] IsAppThemed () returned 0x1
[0265.981] GetThemeAppProperties () returned 0x3
[0265.981] GetThemeAppProperties () returned 0x3
[0265.982] IsAppThemed () returned 0x1
[0265.982] GetThemeAppProperties () returned 0x3
[0265.982] GetThemeAppProperties () returned 0x3
[0265.982] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x2328e04 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0265.982] IsAppThemed () returned 0x1
[0265.982] GetThemeAppProperties () returned 0x3
[0265.982] GetThemeAppProperties () returned 0x3
[0265.982] IsAppThemed () returned 0x1
[0265.982] GetThemeAppProperties () returned 0x3
[0265.983] GetThemeAppProperties () returned 0x3
[0265.983] IsAppThemed () returned 0x1
[0265.983] GetThemeAppProperties () returned 0x3
[0265.983] GetThemeAppProperties () returned 0x3
[0265.983] IsAppThemed () returned 0x1
[0265.983] GetThemeAppProperties () returned 0x3
[0265.983] GetThemeAppProperties () returned 0x3
[0265.983] IsThemePartDefined () returned 0x1
[0265.983] IsAppThemed () returned 0x1
[0265.983] GetThemeAppProperties () returned 0x3
[0265.983] GetThemeAppProperties () returned 0x3
[0265.983] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0265.983] IsAppThemed () returned 0x1
[0265.983] GetThemeAppProperties () returned 0x3
[0265.983] GetThemeAppProperties () returned 0x3
[0265.983] IsAppThemed () returned 0x1
[0265.983] GetThemeAppProperties () returned 0x3
[0265.983] GetThemeAppProperties () returned 0x3
[0265.983] IsThemePartDefined () returned 0x1
[0265.983] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0265.984] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0265.984] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0265.984] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0265.984] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0265.984] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0265.984] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0265.984] LocalFree (hMem=0x89ee40) returned 0x0
[0265.984] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0265.984] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0265.984] LocalFree (hMem=0x89ee08) returned 0x0
[0265.984] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0265.984] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0265.984] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0265.984] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0265.984] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0265.984] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0265.984] GetCurrentObject (hdc=0x260107aa, type=0x1) returned 0xb00017
[0265.985] GetCurrentObject (hdc=0x260107aa, type=0x2) returned 0x900010
[0265.985] GetCurrentObject (hdc=0x260107aa, type=0x7) returned 0x1e0507b9
[0265.985] GetCurrentObject (hdc=0x260107aa, type=0x6) returned 0x8a01c2
[0265.985] SaveDC (hdc=0x260107aa) returned 1
[0265.985] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xed04051e
[0265.985] GetClipRgn (hdc=0x260107aa, hrgn=0xed04051e) returned 0
[0265.985] SelectClipRgn (hdc=0x260107aa, hrgn=0xa704053e) returned 2
[0265.985] DeleteObject (ho=0xed04051e) returned 1
[0265.985] DeleteObject (ho=0xa704053e) returned 1
[0265.985] OffsetViewportOrgEx (in: hdc=0x260107aa, x=0, y=0, lppt=0x23294b4 | out: lppt=0x23294b4) returned 1
[0265.985] DrawThemeParentBackground () returned 0x0
[0265.986] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0265.986] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0265.986] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0265.986] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0265.986] GetSystemMetrics (nIndex=42) returned 0
[0265.986] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0265.986] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0265.986] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0265.986] GetCurrentObject (hdc=0x260107aa, type=0x1) returned 0xb00017
[0265.986] GetCurrentObject (hdc=0x260107aa, type=0x2) returned 0x900010
[0265.986] GetCurrentObject (hdc=0x260107aa, type=0x7) returned 0x1e0507b9
[0265.986] GetCurrentObject (hdc=0x260107aa, type=0x6) returned 0x8a01c2
[0265.986] SaveDC (hdc=0x260107aa) returned 2
[0265.986] GetNearestColor (hdc=0x260107aa, color=0xff) returned 0xff
[0265.987] CreateSolidBrush (color=0xff) returned 0xa510078d
[0265.987] FillRect (hDC=0x260107aa, lprc=0x53e120, hbr=0xa510078d) returned 1
[0265.987] DeleteObject (ho=0xa510078d) returned 1
[0265.987] RestoreDC (hdc=0x260107aa, nSavedDC=-1) returned 1
[0265.987] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0265.987] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0265.987] GetSystemMetrics (nIndex=42) returned 0
[0265.987] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0265.987] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0265.987] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0265.987] GetCurrentObject (hdc=0x260107aa, type=0x1) returned 0xb00017
[0265.987] GetCurrentObject (hdc=0x260107aa, type=0x2) returned 0x900010
[0265.987] GetCurrentObject (hdc=0x260107aa, type=0x7) returned 0x1e0507b9
[0265.987] GetCurrentObject (hdc=0x260107aa, type=0x6) returned 0x8a01c2
[0265.987] SaveDC (hdc=0x260107aa) returned 2
[0265.988] GetNearestColor (hdc=0x260107aa, color=0xff) returned 0xff
[0265.988] CreateSolidBrush (color=0xff) returned 0xa610078d
[0265.988] FillRect (hDC=0x260107aa, lprc=0x53e0c0, hbr=0xa610078d) returned 1
[0265.988] DeleteObject (ho=0xa610078d) returned 1
[0265.988] RestoreDC (hdc=0x260107aa, nSavedDC=-1) returned 1
[0265.988] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0265.988] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0265.988] GetSystemMetrics (nIndex=42) returned 0
[0265.988] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0265.988] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0265.988] RestoreDC (hdc=0x260107aa, nSavedDC=-1) returned 1
[0265.988] GdipReleaseDC (graphics=0x5d92c30, hdc=0x260107aa) returned 0x0
[0265.989] IsAppThemed () returned 0x1
[0265.989] GetThemeAppProperties () returned 0x3
[0265.989] GetThemeAppProperties () returned 0x3
[0265.989] IsAppThemed () returned 0x1
[0265.989] GetThemeAppProperties () returned 0x3
[0265.989] GetThemeAppProperties () returned 0x3
[0265.989] IsThemePartDefined () returned 0x1
[0265.989] GdipCreateRegion (region=0x53e640) returned 0x0
[0265.989] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0265.989] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0265.989] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0265.989] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0265.989] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0265.989] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0265.989] LocalFree (hMem=0x89ea88) returned 0x0
[0265.989] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0265.989] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0265.989] LocalFree (hMem=0x89ee08) returned 0x0
[0265.990] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0265.990] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0265.990] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0265.990] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0265.990] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0265.990] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0265.990] GetCurrentObject (hdc=0x260107aa, type=0x1) returned 0xb00017
[0265.990] GetCurrentObject (hdc=0x260107aa, type=0x2) returned 0x900010
[0265.990] GetCurrentObject (hdc=0x260107aa, type=0x7) returned 0x1e0507b9
[0265.990] GetCurrentObject (hdc=0x260107aa, type=0x6) returned 0x8a01c2
[0265.990] SaveDC (hdc=0x260107aa) returned 1
[0265.990] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa804053e
[0265.990] GetClipRgn (hdc=0x260107aa, hrgn=0xa804053e) returned 0
[0265.991] SelectClipRgn (hdc=0x260107aa, hrgn=0xef04051e) returned 2
[0265.991] DeleteObject (ho=0xa804053e) returned 1
[0265.991] DeleteObject (ho=0xef04051e) returned 1
[0265.991] OffsetViewportOrgEx (in: hdc=0x260107aa, x=0, y=0, lppt=0x2329d18 | out: lppt=0x2329d18) returned 1
[0265.991] IsAppThemed () returned 0x1
[0265.991] GetThemeAppProperties () returned 0x3
[0265.991] GetThemeAppProperties () returned 0x3
[0265.991] DrawThemeBackground () returned 0x0
[0265.991] RestoreDC (hdc=0x260107aa, nSavedDC=-1) returned 1
[0265.991] GdipReleaseDC (graphics=0x5d92c30, hdc=0x260107aa) returned 0x0
[0265.991] GdipCreateRegion (region=0x53e644) returned 0x0
[0265.991] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0265.991] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0265.992] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0265.992] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0265.992] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0265.992] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0265.992] LocalFree (hMem=0x89ec80) returned 0x0
[0265.992] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0265.992] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0265.992] LocalFree (hMem=0x89ea88) returned 0x0
[0265.992] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0265.992] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0265.992] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0265.992] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0265.992] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0265.992] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0265.992] GetCurrentObject (hdc=0x260107aa, type=0x1) returned 0xb00017
[0265.992] GetCurrentObject (hdc=0x260107aa, type=0x2) returned 0x900010
[0265.992] GetCurrentObject (hdc=0x260107aa, type=0x7) returned 0x1e0507b9
[0265.993] GetCurrentObject (hdc=0x260107aa, type=0x6) returned 0x8a01c2
[0265.993] SaveDC (hdc=0x260107aa) returned 1
[0265.993] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf004051e
[0265.993] GetClipRgn (hdc=0x260107aa, hrgn=0xf004051e) returned 0
[0265.993] SelectClipRgn (hdc=0x260107aa, hrgn=0xa904053e) returned 2
[0265.993] DeleteObject (ho=0xf004051e) returned 1
[0265.993] DeleteObject (ho=0xa904053e) returned 1
[0265.993] OffsetViewportOrgEx (in: hdc=0x260107aa, x=0, y=0, lppt=0x2329fec | out: lppt=0x2329fec) returned 1
[0265.993] IsAppThemed () returned 0x1
[0265.993] GetThemeAppProperties () returned 0x3
[0265.993] GetThemeAppProperties () returned 0x3
[0265.993] GetThemeBackgroundContentRect () returned 0x0
[0265.993] RestoreDC (hdc=0x260107aa, nSavedDC=-1) returned 1
[0265.993] GdipReleaseDC (graphics=0x5d92c30, hdc=0x260107aa) returned 0x0
[0265.993] IsAppThemed () returned 0x1
[0265.994] GetThemeAppProperties () returned 0x3
[0265.994] GetThemeAppProperties () returned 0x3
[0265.994] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0265.994] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0265.994] GetCurrentObject (hdc=0x260107aa, type=0x1) returned 0xb00017
[0265.994] GetCurrentObject (hdc=0x260107aa, type=0x2) returned 0x900010
[0265.994] GetCurrentObject (hdc=0x260107aa, type=0x7) returned 0x1e0507b9
[0265.994] GetCurrentObject (hdc=0x260107aa, type=0x6) returned 0x8a01c2
[0265.994] SaveDC (hdc=0x260107aa) returned 1
[0265.994] GetTextAlign (hdc=0x260107aa) returned 0x0
[0265.994] GetTextColor (hdc=0x260107aa) returned 0x0
[0265.994] GetCurrentObject (hdc=0x260107aa, type=0x6) returned 0x8a01c2
[0265.994] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0265.994] SelectObject (hdc=0x260107aa, h=0x450a0799) returned 0x8a01c2
[0265.995] GetBkMode (hdc=0x260107aa) returned 2
[0265.995] SetBkMode (hdc=0x260107aa, mode=1) returned 2
[0265.995] DrawTextExW (in: hdc=0x260107aa, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x232a38c | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0265.995] DrawTextExW (in: hdc=0x260107aa, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x232a38c | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0265.995] RestoreDC (hdc=0x260107aa, nSavedDC=-1) returned 1
[0265.996] GdipReleaseDC (graphics=0x5d92c30, hdc=0x260107aa) returned 0x0
[0265.996] GetFocus () returned 0x202c6
[0265.996] IsAppThemed () returned 0x1
[0265.996] GetThemeAppProperties () returned 0x3
[0265.996] GetThemeAppProperties () returned 0x3
[0265.996] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0265.996] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x260107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0265.996] GdipReleaseDC (graphics=0x5d92c30, hdc=0x260107aa) returned 0x0
[0265.996] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0265.997] SelectObject (hdc=0x260107aa, h=0x85000f) returned 0x1e0507b9
[0265.997] DeleteDC (hdc=0x260107aa) returned 1
[0265.997] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0265.997] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0265.997] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0265.997] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0265.997] WaitMessage () returned 1
[0266.122] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0266.122] IsWindowUnicode (hWnd=0x202c6) returned 1
[0266.123] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0266.123] TranslateMessage (lpMsg=0x53eef8) returned 0
[0266.123] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0266.123] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0266.123] IsWindowUnicode (hWnd=0x202c6) returned 1
[0266.123] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0266.123] TranslateMessage (lpMsg=0x53eef8) returned 0
[0266.123] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0266.123] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xa0063) returned 0x0
[0266.123] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0266.123] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0266.123] WaitMessage () returned 1
[0266.255] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0266.255] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1920253) returned 0x1
[0266.255] IsWindowUnicode (hWnd=0x202c6) returned 1
[0266.255] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0266.256] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1920253) returned 0x1
[0266.256] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0266.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12501fd) returned 0x0
[0266.256] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0266.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0266.256] SetCursor (hCursor=0x10003) returned 0x10003
[0266.257] TranslateMessage (lpMsg=0x53eef8) returned 0
[0266.257] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0266.257] GetKeyState (nVirtKey=1) returned -128
[0266.257] GetKeyState (nVirtKey=2) returned 0
[0266.257] GetKeyState (nVirtKey=4) returned 0
[0266.257] GetKeyState (nVirtKey=5) returned 0
[0266.257] GetKeyState (nVirtKey=6) returned 0
[0266.257] IsWindowVisible (hWnd=0x202c6) returned 1
[0266.257] IsWindowEnabled (hWnd=0x202c6) returned 1
[0266.257] SetFocus (hWnd=0x202c6) returned 0x202c6
[0266.257] GetFocus () returned 0x202c6
[0266.257] GetFocus () returned 0x202c6
[0266.257] GetFocus () returned 0x202c6
[0266.257] GetKeyState (nVirtKey=1) returned -128
[0266.257] GetKeyState (nVirtKey=2) returned 0
[0266.257] GetKeyState (nVirtKey=4) returned 0
[0266.257] GetKeyState (nVirtKey=5) returned 0
[0266.257] GetKeyState (nVirtKey=6) returned 0
[0266.257] GetCapture () returned 0x0
[0266.257] SetCapture (hWnd=0x202c6) returned 0x0
[0266.258] GetKeyState (nVirtKey=1) returned -128
[0266.258] GetKeyState (nVirtKey=2) returned 0
[0266.258] GetKeyState (nVirtKey=4) returned 0
[0266.258] GetKeyState (nVirtKey=5) returned 0
[0266.258] GetKeyState (nVirtKey=6) returned 0
[0266.258] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0266.258] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0266.258] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0266.258] IsWindowUnicode (hWnd=0x202c6) returned 1
[0266.258] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0266.258] TranslateMessage (lpMsg=0x53eef8) returned 0
[0266.258] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0266.258] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x232a510, cPoints=0x1 | out: lpPoints=0x232a510) returned 25690608
[0266.258] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0266.258] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0266.258] UpdateWindow (hWnd=0x202c6) returned 1
[0266.259] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x60100ce
[0266.259] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0266.259] CreateCompatibleDC (hdc=0x60100ce) returned 0x270107aa
[0266.259] SelectObject (hdc=0x270107aa, h=0x1e0507b9) returned 0x85000f
[0266.259] GdipCreateFromHDC (hdc=0x270107aa, graphics=0x53e5f0) returned 0x0
[0266.259] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0266.259] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0266.259] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0266.259] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.259] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0266.260] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0266.260] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0266.260] LocalFree (hMem=0x89ec80) returned 0x0
[0266.260] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.260] GdipCreateRegion (region=0x53e638) returned 0x0
[0266.260] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.260] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0266.260] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0266.260] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb510dbd) returned 0x0
[0266.260] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.260] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0266.260] GetCurrentObject (hdc=0x270107aa, type=0x1) returned 0xb00017
[0266.260] GetCurrentObject (hdc=0x270107aa, type=0x2) returned 0x900010
[0266.260] GetCurrentObject (hdc=0x270107aa, type=0x7) returned 0x1e0507b9
[0266.260] GetCurrentObject (hdc=0x270107aa, type=0x6) returned 0x8a01c2
[0266.261] SaveDC (hdc=0x270107aa) returned 1
[0266.261] GetNearestColor (hdc=0x270107aa, color=0xff) returned 0xff
[0266.261] GetNearestColor (hdc=0x270107aa, color=0x55) returned 0x55
[0266.261] GetNearestColor (hdc=0x270107aa, color=0x0) returned 0x0
[0266.261] GetNearestColor (hdc=0x270107aa, color=0x55) returned 0x55
[0266.261] GetNearestColor (hdc=0x270107aa, color=0x0) returned 0x0
[0266.261] GetNearestColor (hdc=0x270107aa, color=0x8080ff) returned 0x8080ff
[0266.261] GetNearestColor (hdc=0x270107aa, color=0x7373e5) returned 0x7373e5
[0266.261] GetNearestColor (hdc=0x270107aa, color=0xe5) returned 0xe5
[0266.261] GetNearestColor (hdc=0x270107aa, color=0x0) returned 0x0
[0266.261] RestoreDC (hdc=0x270107aa, nSavedDC=-1) returned 1
[0266.261] GdipReleaseDC (graphics=0x5d92c30, hdc=0x270107aa) returned 0x0
[0266.261] IsAppThemed () returned 0x1
[0266.262] GetThemeAppProperties () returned 0x3
[0266.262] GetThemeAppProperties () returned 0x3
[0266.262] IsAppThemed () returned 0x1
[0266.262] GetThemeAppProperties () returned 0x3
[0266.262] GetThemeAppProperties () returned 0x3
[0266.262] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x232ac2c | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0266.262] IsAppThemed () returned 0x1
[0266.262] GetThemeAppProperties () returned 0x3
[0266.262] GetThemeAppProperties () returned 0x3
[0266.262] IsAppThemed () returned 0x1
[0266.262] GetThemeAppProperties () returned 0x3
[0266.262] GetThemeAppProperties () returned 0x3
[0266.262] IsAppThemed () returned 0x1
[0266.262] GetThemeAppProperties () returned 0x3
[0266.262] GetThemeAppProperties () returned 0x3
[0266.263] IsAppThemed () returned 0x1
[0266.263] GetThemeAppProperties () returned 0x3
[0266.263] GetThemeAppProperties () returned 0x3
[0266.263] IsThemePartDefined () returned 0x1
[0266.263] IsAppThemed () returned 0x1
[0266.263] GetThemeAppProperties () returned 0x3
[0266.263] GetThemeAppProperties () returned 0x3
[0266.263] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0266.263] IsAppThemed () returned 0x1
[0266.263] GetThemeAppProperties () returned 0x3
[0266.263] GetThemeAppProperties () returned 0x3
[0266.263] IsAppThemed () returned 0x1
[0266.263] GetThemeAppProperties () returned 0x3
[0266.263] GetThemeAppProperties () returned 0x3
[0266.263] IsThemePartDefined () returned 0x1
[0266.263] GdipCreateRegion (region=0x53e354) returned 0x0
[0266.263] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.263] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0266.263] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.263] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0266.264] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0266.264] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0266.264] LocalFree (hMem=0x89eee8) returned 0x0
[0266.264] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.264] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0266.264] LocalFree (hMem=0x89ee08) returned 0x0
[0266.264] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.264] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0266.264] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0266.264] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0266.264] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.264] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0266.264] GetCurrentObject (hdc=0x270107aa, type=0x1) returned 0xb00017
[0266.264] GetCurrentObject (hdc=0x270107aa, type=0x2) returned 0x900010
[0266.264] GetCurrentObject (hdc=0x270107aa, type=0x7) returned 0x1e0507b9
[0266.264] GetCurrentObject (hdc=0x270107aa, type=0x6) returned 0x8a01c2
[0266.264] SaveDC (hdc=0x270107aa) returned 1
[0266.265] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaa04053e
[0266.265] GetClipRgn (hdc=0x270107aa, hrgn=0xaa04053e) returned 0
[0266.265] SelectClipRgn (hdc=0x270107aa, hrgn=0xf404051e) returned 2
[0266.265] DeleteObject (ho=0xaa04053e) returned 1
[0266.265] DeleteObject (ho=0xf404051e) returned 1
[0266.265] OffsetViewportOrgEx (in: hdc=0x270107aa, x=0, y=0, lppt=0x232b2dc | out: lppt=0x232b2dc) returned 1
[0266.265] DrawThemeParentBackground () returned 0x0
[0266.265] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0266.265] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0266.265] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0266.265] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0266.265] GetSystemMetrics (nIndex=42) returned 0
[0266.265] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0266.265] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0266.266] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0266.266] GetCurrentObject (hdc=0x270107aa, type=0x1) returned 0xb00017
[0266.266] GetCurrentObject (hdc=0x270107aa, type=0x2) returned 0x900010
[0266.266] GetCurrentObject (hdc=0x270107aa, type=0x7) returned 0x1e0507b9
[0266.266] GetCurrentObject (hdc=0x270107aa, type=0x6) returned 0x8a01c2
[0266.266] SaveDC (hdc=0x270107aa) returned 2
[0266.266] GetNearestColor (hdc=0x270107aa, color=0xff) returned 0xff
[0266.266] CreateSolidBrush (color=0xff) returned 0xa710078d
[0266.266] FillRect (hDC=0x270107aa, lprc=0x53ddb8, hbr=0xa710078d) returned 1
[0266.266] DeleteObject (ho=0xa710078d) returned 1
[0266.266] RestoreDC (hdc=0x270107aa, nSavedDC=-1) returned 1
[0266.266] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0266.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0266.267] GetSystemMetrics (nIndex=42) returned 0
[0266.267] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0266.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0266.267] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0266.267] GetCurrentObject (hdc=0x270107aa, type=0x1) returned 0xb00017
[0266.267] GetCurrentObject (hdc=0x270107aa, type=0x2) returned 0x900010
[0266.267] GetCurrentObject (hdc=0x270107aa, type=0x7) returned 0x1e0507b9
[0266.267] GetCurrentObject (hdc=0x270107aa, type=0x6) returned 0x8a01c2
[0266.267] SaveDC (hdc=0x270107aa) returned 2
[0266.267] GetNearestColor (hdc=0x270107aa, color=0xff) returned 0xff
[0266.267] CreateSolidBrush (color=0xff) returned 0xa810078d
[0266.267] FillRect (hDC=0x270107aa, lprc=0x53dd58, hbr=0xa810078d) returned 1
[0266.267] DeleteObject (ho=0xa810078d) returned 1
[0266.267] RestoreDC (hdc=0x270107aa, nSavedDC=-1) returned 1
[0266.268] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0266.268] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0266.268] GetSystemMetrics (nIndex=42) returned 0
[0266.268] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0266.268] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0266.268] RestoreDC (hdc=0x270107aa, nSavedDC=-1) returned 1
[0266.268] GdipReleaseDC (graphics=0x5d92c30, hdc=0x270107aa) returned 0x0
[0266.268] IsAppThemed () returned 0x1
[0266.268] GetThemeAppProperties () returned 0x3
[0266.268] GetThemeAppProperties () returned 0x3
[0266.268] IsAppThemed () returned 0x1
[0266.268] GetThemeAppProperties () returned 0x3
[0266.268] GetThemeAppProperties () returned 0x3
[0266.268] IsThemePartDefined () returned 0x1
[0266.268] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0266.268] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.269] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0266.269] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.269] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0266.269] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0266.269] LocalFree (hMem=0x89ea88) returned 0x0
[0266.269] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0266.269] LocalFree (hMem=0x89ea88) returned 0x0
[0266.269] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.269] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0266.269] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0266.269] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0266.269] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.269] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0266.269] GetCurrentObject (hdc=0x270107aa, type=0x1) returned 0xb00017
[0266.269] GetCurrentObject (hdc=0x270107aa, type=0x2) returned 0x900010
[0266.269] GetCurrentObject (hdc=0x270107aa, type=0x7) returned 0x1e0507b9
[0266.269] GetCurrentObject (hdc=0x270107aa, type=0x6) returned 0x8a01c2
[0266.269] SaveDC (hdc=0x270107aa) returned 1
[0266.270] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf504051e
[0266.270] GetClipRgn (hdc=0x270107aa, hrgn=0xf504051e) returned 0
[0266.270] SelectClipRgn (hdc=0x270107aa, hrgn=0xac04053e) returned 2
[0266.270] DeleteObject (ho=0xf504051e) returned 1
[0266.270] DeleteObject (ho=0xac04053e) returned 1
[0266.270] OffsetViewportOrgEx (in: hdc=0x270107aa, x=0, y=0, lppt=0x232bb40 | out: lppt=0x232bb40) returned 1
[0266.270] IsAppThemed () returned 0x1
[0266.270] GetThemeAppProperties () returned 0x3
[0266.270] GetThemeAppProperties () returned 0x3
[0266.270] DrawThemeBackground () returned 0x0
[0266.270] RestoreDC (hdc=0x270107aa, nSavedDC=-1) returned 1
[0266.270] GdipReleaseDC (graphics=0x5d92c30, hdc=0x270107aa) returned 0x0
[0266.270] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0266.270] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.270] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0266.270] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.270] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0266.270] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0266.271] LocalFree (hMem=0x89ec80) returned 0x0
[0266.271] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0266.271] LocalFree (hMem=0x89ea88) returned 0x0
[0266.271] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.271] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0266.271] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0266.271] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0266.271] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.271] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0266.271] GetCurrentObject (hdc=0x270107aa, type=0x1) returned 0xb00017
[0266.272] GetCurrentObject (hdc=0x270107aa, type=0x2) returned 0x900010
[0266.272] GetCurrentObject (hdc=0x270107aa, type=0x7) returned 0x1e0507b9
[0266.272] GetCurrentObject (hdc=0x270107aa, type=0x6) returned 0x8a01c2
[0266.272] SaveDC (hdc=0x270107aa) returned 1
[0266.272] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xad04053e
[0266.272] GetClipRgn (hdc=0x270107aa, hrgn=0xad04053e) returned 0
[0266.272] SelectClipRgn (hdc=0x270107aa, hrgn=0xf604051e) returned 2
[0266.272] DeleteObject (ho=0xad04053e) returned 1
[0266.272] DeleteObject (ho=0xf604051e) returned 1
[0266.272] OffsetViewportOrgEx (in: hdc=0x270107aa, x=0, y=0, lppt=0x232be14 | out: lppt=0x232be14) returned 1
[0266.272] IsAppThemed () returned 0x1
[0266.272] GetThemeAppProperties () returned 0x3
[0266.273] GetThemeAppProperties () returned 0x3
[0266.273] GetThemeBackgroundContentRect () returned 0x0
[0266.273] RestoreDC (hdc=0x270107aa, nSavedDC=-1) returned 1
[0266.273] GdipReleaseDC (graphics=0x5d92c30, hdc=0x270107aa) returned 0x0
[0266.273] IsAppThemed () returned 0x1
[0266.273] GetThemeAppProperties () returned 0x3
[0266.273] GetThemeAppProperties () returned 0x3
[0266.273] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0266.273] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0266.273] GetCurrentObject (hdc=0x270107aa, type=0x1) returned 0xb00017
[0266.273] GetCurrentObject (hdc=0x270107aa, type=0x2) returned 0x900010
[0266.273] GetCurrentObject (hdc=0x270107aa, type=0x7) returned 0x1e0507b9
[0266.273] GetCurrentObject (hdc=0x270107aa, type=0x6) returned 0x8a01c2
[0266.273] SaveDC (hdc=0x270107aa) returned 1
[0266.273] GetTextAlign (hdc=0x270107aa) returned 0x0
[0266.273] GetTextColor (hdc=0x270107aa) returned 0x0
[0266.273] GetCurrentObject (hdc=0x270107aa, type=0x6) returned 0x8a01c2
[0266.273] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0266.274] SelectObject (hdc=0x270107aa, h=0x450a0799) returned 0x8a01c2
[0266.274] GetBkMode (hdc=0x270107aa) returned 2
[0266.274] SetBkMode (hdc=0x270107aa, mode=1) returned 2
[0266.274] DrawTextExW (in: hdc=0x270107aa, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x232c1b4 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0266.274] DrawTextExW (in: hdc=0x270107aa, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x232c1b4 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0266.274] RestoreDC (hdc=0x270107aa, nSavedDC=-1) returned 1
[0266.274] GdipReleaseDC (graphics=0x5d92c30, hdc=0x270107aa) returned 0x0
[0266.275] GetFocus () returned 0x202c6
[0266.275] IsAppThemed () returned 0x1
[0266.275] GetThemeAppProperties () returned 0x3
[0266.275] GetThemeAppProperties () returned 0x3
[0266.275] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0266.275] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x270107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0266.275] GdipReleaseDC (graphics=0x5d92c30, hdc=0x270107aa) returned 0x0
[0266.275] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0266.275] SelectObject (hdc=0x270107aa, h=0x85000f) returned 0x1e0507b9
[0266.275] DeleteDC (hdc=0x270107aa) returned 1
[0266.276] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0266.276] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0266.276] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x232c2b0, cPoints=0x1 | out: lpPoints=0x232c2b0) returned 25690608
[0266.276] WindowFromPoint (Point=0x253) returned 0x202c6
[0266.276] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1920253) returned 0x1
[0266.276] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0266.276] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0266.277] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.278] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0266.279] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.279] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0266.279] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.279] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0266.280] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0266.280] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e888) returned 0x0
[0266.280] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0266.280] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0266.280] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0266.280] GetSystemMetrics (nIndex=5) returned 1
[0266.280] GetSystemMetrics (nIndex=6) returned 1
[0266.281] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.281] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0266.281] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.281] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0266.347] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.347] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0266.347] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.347] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0266.348] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.348] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0266.348] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.348] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0266.348] GetSystemMetrics (nIndex=5) returned 1
[0266.348] GetSystemMetrics (nIndex=6) returned 1
[0266.349] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.349] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0266.349] GetSystemMetrics (nIndex=5) returned 1
[0266.349] GetSystemMetrics (nIndex=6) returned 1
[0266.349] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.350] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0266.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.350] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0266.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.351] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0266.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.351] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0266.351] GetSystemMetrics (nIndex=59) returned 1460
[0266.351] GetSystemMetrics (nIndex=60) returned 920
[0266.351] GetSystemMetrics (nIndex=34) returned 136
[0266.351] GetSystemMetrics (nIndex=35) returned 39
[0266.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.352] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0266.352] GetCurrentThreadId () returned 0x11d0
[0266.352] GetCurrentThreadId () returned 0x11d0
[0266.352] GetCurrentThreadId () returned 0x11d0
[0266.352] GetCurrentThreadId () returned 0x11d0
[0266.352] GetCurrentThreadId () returned 0x11d0
[0266.352] GetCurrentThreadId () returned 0x11d0
[0266.352] GetCurrentThreadId () returned 0x11d0
[0266.352] GetCurrentThreadId () returned 0x11d0
[0266.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.353] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0266.353] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0266.353] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0266.353] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.353] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0266.353] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.354] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0266.354] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1500ea
[0266.355] SetWindowLongW (hWnd=0x1500ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0266.355] GetWindowLongW (hWnd=0x1500ea, nIndex=-4) returned 1950089536
[0266.355] SetWindowLongW (hWnd=0x1500ea, nIndex=-4, dwNewLong=79648414) returned 1950089536
[0266.355] GetWindowLongW (hWnd=0x1500ea, nIndex=-4) returned 79648414
[0266.355] GetWindowLongW (hWnd=0x1500ea, nIndex=-16) returned 113311744
[0266.356] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1500ea, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0266.356] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1500ea, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0266.357] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1500ea, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0266.357] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1500ea, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0266.357] GetClientRect (in: hWnd=0x1500ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0266.357] GetWindowRect (in: hWnd=0x1500ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0266.357] SetWindowTextW (hWnd=0x1500ea, lpString="WindowsFormsParkingWindow") returned 1
[0266.357] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1500ea, Msg=0xc, wParam=0x0, lParam=0x23241fc) returned 0x1
[0266.358] GetParent (hWnd=0x1500ea) returned 0x0
[0266.358] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0266.358] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1500ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xf004e
[0266.359] SetWindowLongW (hWnd=0xf004e, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0266.359] GetWindowLongW (hWnd=0xf004e, nIndex=-4) returned 1868147648
[0266.359] SetWindowLongW (hWnd=0xf004e, nIndex=-4, dwNewLong=79648774) returned 1868147648
[0266.360] GetWindowLongW (hWnd=0xf004e, nIndex=-4) returned 79648774
[0266.360] GetWindowLongW (hWnd=0xf004e, nIndex=-16) returned 1174405133
[0266.360] GetWindowLongW (hWnd=0xf004e, nIndex=-12) returned 0
[0266.360] SetWindowLongW (hWnd=0xf004e, nIndex=-12, dwNewLong=983118) returned 0
[0266.360] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0266.360] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0266.361] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0266.361] GetClientRect (in: hWnd=0xf004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0266.361] GetWindowRect (in: hWnd=0xf004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0266.362] GetParent (hWnd=0xf004e) returned 0x1500ea
[0266.362] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1500ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0266.362] SetWindowTextW (hWnd=0xf004e, lpString="Enter password: ") returned 1
[0266.362] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0266.363] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0266.363] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0266.363] GetClientRect (in: hWnd=0xf004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0266.363] GetWindowRect (in: hWnd=0xf004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0266.363] GetParent (hWnd=0xf004e) returned 0x1500ea
[0266.363] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1500ea, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0266.363] SendMessageW (hWnd=0xf004e, Msg=0x2210, wParam=0x4e0001, lParam=0xf004e) returned 0x0
[0266.363] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x2210, wParam=0x4e0001, lParam=0xf004e) returned 0x0
[0266.363] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0266.364] GetParent (hWnd=0xf004e) returned 0x1500ea
[0266.364] GdipCreateFromHWND (hwnd=0xf004e, graphics=0x53e994) returned 0x0
[0266.364] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0266.364] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0266.364] GetProcessWindowStation () returned 0x13c
[0266.364] GetCapture () returned 0x202c6
[0266.364] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0266.364] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0266.365] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0266.365] ReleaseCapture () returned 1
[0266.365] GetActiveWindow () returned 0x70036
[0266.365] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0266.366] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.366] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0266.366] GetCursorPos (in: lpPoint=0x23390bc | out: lpPoint=0x23390bc*(x=595, y=402)) returned 1
[0266.366] MonitorFromPoint (pt=0x253, dwFlags=0x192) returned 0x10001
[0266.366] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0266.366] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x2a0107aa
[0266.366] GetDeviceCaps (hdc=0x2a0107aa, index=12) returned 32
[0266.366] GetDeviceCaps (hdc=0x2a0107aa, index=14) returned 1
[0266.366] DeleteDC (hdc=0x2a0107aa) returned 1
[0266.367] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0266.367] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0266.367] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2f013e
[0266.368] SetWindowLongW (hWnd=0x2f013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0266.368] GetWindowLongW (hWnd=0x2f013e, nIndex=-4) returned 1950089536
[0266.368] SetWindowLongW (hWnd=0x2f013e, nIndex=-4, dwNewLong=79648494) returned 1950089536
[0266.368] GetWindowLongW (hWnd=0x2f013e, nIndex=-4) returned 79648494
[0266.368] GetWindowLongW (hWnd=0x2f013e, nIndex=-16) returned 113770496
[0266.368] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0266.369] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0266.370] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0266.370] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0266.370] GetWindowRect (in: hWnd=0x2f013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0266.371] SetWindowTextW (hWnd=0x2f013e, lpString="Ransomware") returned 1
[0266.371] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xc, wParam=0x0, lParam=0x232c378) returned 0x1
[0266.372] GetStartupInfoW (in: lpStartupInfo=0x23393f8 | out: lpStartupInfo=0x23393f8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0266.373] GetParent (hWnd=0x2f013e) returned 0x0
[0266.373] SetWindowLongW (hWnd=0x2f013e, nIndex=-8, dwNewLong=0) returned 0
[0266.374] SendMessageW (hWnd=0x2f013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0266.374] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0266.374] SendMessageW (hWnd=0x2f013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0266.375] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0266.375] GetSystemMenu (hWnd=0x2f013e, bRevert=0) returned 0x870291
[0266.375] GetWindowPlacement (in: hWnd=0x2f013e, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0266.375] EnableMenuItem (hMenu=0x870291, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0266.375] EnableMenuItem (hMenu=0x870291, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0266.376] EnableMenuItem (hMenu=0x870291, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0266.376] EnableMenuItem (hMenu=0x870291, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0266.376] EnableMenuItem (hMenu=0x870291, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0266.376] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0266.376] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0266.376] GetWindowRect (in: hWnd=0x2f013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0266.376] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.376] GetWindowLongW (hWnd=0x2f013e, nIndex=-16) returned 113770496
[0266.377] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.377] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.377] GetSystemMetrics (nIndex=42) returned 0
[0266.377] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.377] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0266.377] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.377] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.377] GetSystemMetrics (nIndex=42) returned 0
[0266.377] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.377] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0266.377] GetCursorPos (in: lpPoint=0x233956c | out: lpPoint=0x233956c*(x=595, y=402)) returned 1
[0266.377] MonitorFromPoint (pt=0x254, dwFlags=0x191) returned 0x10001
[0266.377] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0266.377] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x2e0107aa
[0266.378] GetDeviceCaps (hdc=0x2e0107aa, index=12) returned 32
[0266.378] GetDeviceCaps (hdc=0x2e0107aa, index=14) returned 1
[0266.378] DeleteDC (hdc=0x2e0107aa) returned 1
[0266.378] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0266.378] GetWindowLongW (hWnd=0x2f013e, nIndex=-16) returned 113770496
[0266.378] GetWindowLongW (hWnd=0x2f013e, nIndex=-20) returned 327937
[0266.378] SetWindowLongW (hWnd=0x2f013e, nIndex=-16, dwNewLong=46661632) returned 113770496
[0266.378] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0266.379] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0266.379] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0266.379] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0266.380] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0266.380] SetWindowLongW (hWnd=0x2f013e, nIndex=-20, dwNewLong=327681) returned 327937
[0266.380] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0266.380] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0266.381] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0266.382] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0266.382] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0266.382] SetWindowPos (hWnd=0x2f013e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0266.382] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0266.382] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0266.383] GetWindowPlacement (in: hWnd=0x2f013e, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0266.383] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0266.383] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0266.383] GetWindowRect (in: hWnd=0x2f013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0266.384] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0266.384] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0266.384] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0266.385] RedrawWindow (hWnd=0x2f013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0266.385] GetSystemMenu (hWnd=0x2f013e, bRevert=0) returned 0x870291
[0266.385] GetWindowPlacement (in: hWnd=0x2f013e, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0266.385] EnableMenuItem (hMenu=0x870291, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0266.385] EnableMenuItem (hMenu=0x870291, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0266.385] EnableMenuItem (hMenu=0x870291, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0266.385] EnableMenuItem (hMenu=0x870291, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0266.385] EnableMenuItem (hMenu=0x870291, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0266.385] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0266.385] GetWindowLongW (hWnd=0x2f013e, nIndex=-8) returned 0
[0266.385] SetWindowLongW (hWnd=0x2f013e, nIndex=-8, dwNewLong=458806) returned 0
[0266.387] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0266.387] GetProcessWindowStation () returned 0x13c
[0266.387] GetCurrentThreadId () returned 0x11d0
[0266.387] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf5716, lParam=0x0) returned 1
[0266.388] IsWindowVisible (hWnd=0x2f013e) returned 0
[0266.388] IsWindowVisible (hWnd=0x70036) returned 1
[0266.388] IsWindowEnabled (hWnd=0x70036) returned 1
[0266.388] IsWindowVisible (hWnd=0x602b6) returned 0
[0266.388] IsWindowVisible (hWnd=0x901f8) returned 0
[0266.388] IsWindowVisible (hWnd=0x202d0) returned 0
[0266.388] IsWindowVisible (hWnd=0x202d4) returned 0
[0266.388] GetActiveWindow () returned 0x70036
[0266.388] GetFocus () returned 0x202c6
[0266.388] IsWindow (hWnd=0x70036) returned 1
[0266.388] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0266.388] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0266.389] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0266.389] GetWindowLongW (hWnd=0x2f013e, nIndex=-8) returned 458806
[0266.389] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0266.389] GetCurrentThreadId () returned 0x11d0
[0266.389] GetWindowLongW (hWnd=0x2f013e, nIndex=-8) returned 458806
[0266.389] IsWindowEnabled (hWnd=0x70036) returned 0
[0266.389] IsWindowEnabled (hWnd=0x2f013e) returned 1
[0266.389] ShowWindow (hWnd=0x2f013e, nCmdShow=5) returned 0
[0266.389] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0266.390] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0266.390] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.390] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0266.391] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x2f013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1201e2
[0266.391] SetWindowLongW (hWnd=0x1201e2, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0266.391] GetWindowLongW (hWnd=0x1201e2, nIndex=-4) returned 1868026976
[0266.391] SetWindowLongW (hWnd=0x1201e2, nIndex=-4, dwNewLong=79648574) returned 1868026976
[0266.392] GetWindowLongW (hWnd=0x1201e2, nIndex=-4) returned 79648574
[0266.392] GetWindowLongW (hWnd=0x1201e2, nIndex=-16) returned 1174470848
[0266.392] GetWindowLongW (hWnd=0x1201e2, nIndex=-12) returned 0
[0266.392] SetWindowLongW (hWnd=0x1201e2, nIndex=-12, dwNewLong=1180130) returned 0
[0266.392] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0266.393] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0266.393] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0266.395] SendMessageW (hWnd=0x1201e2, Msg=0x2055, wParam=0x1201e2, lParam=0x3) returned 0x2
[0266.395] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0266.395] GetWindow (hWnd=0x1201e2, uCmd=0x3) returned 0x0
[0266.395] GetClientRect (in: hWnd=0x1201e2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0266.395] GetWindowRect (in: hWnd=0x1201e2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0266.395] GetParent (hWnd=0x1201e2) returned 0x2f013e
[0266.395] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2f013e, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0266.395] SendMessageW (hWnd=0x1201e2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0266.395] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0266.396] SendMessageW (hWnd=0x1201e2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0266.396] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0266.396] GetSystemMetrics (nIndex=5) returned 1
[0266.396] GetSystemMetrics (nIndex=6) returned 1
[0266.396] SendMessageW (hWnd=0x1201e2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0266.396] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0266.396] SendMessageW (hWnd=0x1201e2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0266.396] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0266.397] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0266.397] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0266.397] GetClientRect (in: hWnd=0x1201e2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0266.397] GetWindowRect (in: hWnd=0x1201e2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0266.397] GetParent (hWnd=0x1201e2) returned 0x2f013e
[0266.397] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2f013e, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0266.397] SendMessageW (hWnd=0x1201e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1201e2) returned 0x0
[0266.397] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1201e2) returned 0x0
[0266.397] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0266.398] GetParent (hWnd=0x1201e2) returned 0x2f013e
[0266.398] GetParent (hWnd=0xf004e) returned 0x1500ea
[0266.398] SetParent (hWndChild=0xf004e, hWndNewParent=0x2f013e) returned 0x1500ea
[0266.398] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0266.399] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0266.399] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0266.399] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0266.399] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0266.399] GetClientRect (in: hWnd=0xf004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0266.399] GetWindowRect (in: hWnd=0xf004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0266.399] GetParent (hWnd=0xf004e) returned 0x2f013e
[0266.399] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2f013e, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0266.399] GetClientRect (in: hWnd=0xf004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0266.399] GetWindowRect (in: hWnd=0xf004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0266.399] GetParent (hWnd=0xf004e) returned 0x2f013e
[0266.399] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2f013e, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0266.399] GetParent (hWnd=0xf004e) returned 0x2f013e
[0266.400] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0266.400] GetWindow (hWnd=0xf004e, uCmd=0x3) returned 0x0
[0266.400] SetWindowPos (hWnd=0xf004e, hWndInsertAfter=0x1201e2, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0266.400] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0266.401] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0266.401] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0266.401] GetClientRect (in: hWnd=0xf004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0266.401] GetWindowRect (in: hWnd=0xf004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0266.401] GetParent (hWnd=0xf004e) returned 0x2f013e
[0266.401] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2f013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0266.401] GetParent (hWnd=0xf004e) returned 0x2f013e
[0266.401] GetWindow (hWnd=0xf004e, uCmd=0x3) returned 0x1201e2
[0266.401] GetWindowThreadProcessId (in: hWnd=0xf004e, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0266.401] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0266.402] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.402] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0266.402] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x2f013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x120122
[0266.403] SetWindowLongW (hWnd=0x120122, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0266.403] GetWindowLongW (hWnd=0x120122, nIndex=-4) returned 1868032000
[0266.403] SetWindowLongW (hWnd=0x120122, nIndex=-4, dwNewLong=79648734) returned 1868032000
[0266.403] GetWindowLongW (hWnd=0x120122, nIndex=-4) returned 79648734
[0266.403] GetWindowLongW (hWnd=0x120122, nIndex=-16) returned 1174470667
[0266.403] GetWindowLongW (hWnd=0x120122, nIndex=-12) returned 0
[0266.403] SetWindowLongW (hWnd=0x120122, nIndex=-12, dwNewLong=1179938) returned 0
[0266.404] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0266.404] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0266.405] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0266.406] SendMessageW (hWnd=0x120122, Msg=0x2055, wParam=0x120122, lParam=0x3) returned 0x2
[0266.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0266.406] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0266.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0266.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0266.406] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0266.406] RedrawWindow (hWnd=0x1201e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0266.406] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0266.406] RedrawWindow (hWnd=0xf004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0266.406] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0266.407] RedrawWindow (hWnd=0x120122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0266.407] RedrawWindow (hWnd=0x2f013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0266.407] GetWindow (hWnd=0x120122, uCmd=0x3) returned 0xf004e
[0266.407] GetClientRect (in: hWnd=0x120122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0266.407] GetWindowRect (in: hWnd=0x120122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0266.407] GetParent (hWnd=0x120122) returned 0x2f013e
[0266.407] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2f013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0266.407] SetWindowTextW (hWnd=0x120122, lpString="OK") returned 1
[0266.407] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0xc, wParam=0x0, lParam=0x2330894) returned 0x1
[0266.408] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0266.408] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0266.408] GetClientRect (in: hWnd=0x120122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0266.408] GetWindowRect (in: hWnd=0x120122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0266.408] GetParent (hWnd=0x120122) returned 0x2f013e
[0266.408] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2f013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0266.408] SendMessageW (hWnd=0x120122, Msg=0x2210, wParam=0x1220001, lParam=0x120122) returned 0x0
[0266.409] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x2210, wParam=0x1220001, lParam=0x120122) returned 0x0
[0266.409] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0266.409] GetParent (hWnd=0x120122) returned 0x2f013e
[0266.409] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0266.409] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.410] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0266.410] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x2f013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xd02ca
[0266.410] SetWindowLongW (hWnd=0xd02ca, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0266.411] GetWindowLongW (hWnd=0xd02ca, nIndex=-4) returned 1868032000
[0266.411] SetWindowLongW (hWnd=0xd02ca, nIndex=-4, dwNewLong=79648694) returned 1868032000
[0266.411] GetWindowLongW (hWnd=0xd02ca, nIndex=-4) returned 79648694
[0266.411] GetWindowLongW (hWnd=0xd02ca, nIndex=-16) returned 1174470667
[0266.411] GetWindowLongW (hWnd=0xd02ca, nIndex=-12) returned 0
[0266.411] SetWindowLongW (hWnd=0xd02ca, nIndex=-12, dwNewLong=852682) returned 0
[0266.411] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02ca, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0266.412] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02ca, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0266.413] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02ca, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0266.414] SendMessageW (hWnd=0xd02ca, Msg=0x2055, wParam=0xd02ca, lParam=0x3) returned 0x2
[0266.414] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0266.414] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02ca, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0266.414] GetWindow (hWnd=0xd02ca, uCmd=0x3) returned 0x120122
[0266.414] GetClientRect (in: hWnd=0xd02ca, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0266.414] GetWindowRect (in: hWnd=0xd02ca, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0266.414] GetParent (hWnd=0xd02ca) returned 0x2f013e
[0266.414] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2f013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0266.414] SetWindowTextW (hWnd=0xd02ca, lpString="Cancel") returned 1
[0266.414] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02ca, Msg=0xc, wParam=0x0, lParam=0x2334154) returned 0x1
[0266.415] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02ca, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0266.415] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02ca, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0266.415] GetClientRect (in: hWnd=0xd02ca, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0266.415] GetWindowRect (in: hWnd=0xd02ca, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0266.415] GetParent (hWnd=0xd02ca) returned 0x2f013e
[0266.415] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2f013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0266.415] SendMessageW (hWnd=0xd02ca, Msg=0x2210, wParam=0x2ca0001, lParam=0xd02ca) returned 0x0
[0266.415] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02ca, Msg=0x2210, wParam=0x2ca0001, lParam=0xd02ca) returned 0x0
[0266.416] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0266.416] GetParent (hWnd=0xd02ca) returned 0x2f013e
[0266.416] GetDC (hWnd=0x0) returned 0x10105d6
[0266.416] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e320) returned 0x0
[0266.417] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0266.417] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0266.417] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0266.417] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0266.417] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0266.417] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0266.417] GetWindowLongW (hWnd=0x2f013e, nIndex=-8) returned 458806
[0266.417] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0266.418] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0266.418] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x350107aa
[0266.418] GetDeviceCaps (hdc=0x350107aa, index=12) returned 32
[0266.418] GetDeviceCaps (hdc=0x350107aa, index=14) returned 1
[0266.418] DeleteDC (hdc=0x350107aa) returned 1
[0266.418] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0266.418] GetWindowThreadProcessId (in: hWnd=0x2f013e, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0266.418] GetCurrentThreadId () returned 0x11d0
[0266.418] PostMessageW (hWnd=0x2f013e, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0266.418] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.418] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.419] GetSystemMetrics (nIndex=42) returned 0
[0266.419] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.419] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0266.419] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0266.419] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0266.419] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0266.419] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0266.436] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x2f013e) returned 0x1
[0266.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0266.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0266.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0266.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0266.444] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0266.444] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0266.444] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0266.445] GetFocus () returned 0x202c6
[0266.445] IsChild (hWndParent=0x2f013e, hWnd=0x202c6) returned 0
[0266.445] GetFocus () returned 0x202c6
[0266.446] SetFocus (hWnd=0x1201e2) returned 0x202c6
[0266.447] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1201e2, lParam=0x0) returned 0x0
[0266.447] GetCapture () returned 0x0
[0266.447] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0266.448] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0266.450] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0266.452] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0266.452] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0266.452] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0266.452] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0266.453] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0266.453] GetParent (hWnd=0x2f013e) returned 0x0
[0266.453] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0266.454] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0266.454] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0266.454] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0266.455] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0266.455] GetSysColorBrush (nIndex=5) returned 0x100079
[0266.456] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0266.456] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0266.457] SendMessageW (hWnd=0x1201e2, Msg=0x2111, wParam=0x10001e2, lParam=0x1201e2) returned 0x0
[0266.457] SendMessageW (hWnd=0x1201e2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0266.457] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0266.457] GetKeyState (nVirtKey=1) returned 0
[0266.457] GetKeyState (nVirtKey=2) returned 0
[0266.457] GetKeyState (nVirtKey=4) returned 0
[0266.457] GetKeyState (nVirtKey=5) returned 0
[0266.457] GetKeyState (nVirtKey=6) returned 0
[0266.457] GetWindowTextLengthW (hWnd=0x1201e2) returned 0
[0266.458] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0266.458] SendMessageW (hWnd=0x1201e2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0266.458] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0266.458] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0266.458] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0266.476] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0266.478] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0266.478] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0266.478] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0266.479] GetWindowPlacement (in: hWnd=0x2f013e, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0266.479] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0266.479] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.479] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.479] GetSystemMetrics (nIndex=42) returned 0
[0266.479] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.479] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0266.479] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0266.479] GetCurrentObject (hdc=0xf0105ee, type=0x1) returned 0xb00017
[0266.480] GetCurrentObject (hdc=0xf0105ee, type=0x2) returned 0x900010
[0266.480] GetCurrentObject (hdc=0xf0105ee, type=0x7) returned 0xffffffffbf0507b3
[0266.480] GetCurrentObject (hdc=0xf0105ee, type=0x6) returned 0x8a01c2
[0266.480] SaveDC (hdc=0xf0105ee) returned 1
[0266.480] GetNearestColor (hdc=0xf0105ee, color=0xf0f0f0) returned 0xf0f0f0
[0266.480] CreateSolidBrush (color=0xf0f0f0) returned 0xa910078d
[0266.480] FillRect (hDC=0xf0105ee, lprc=0x53e250, hbr=0xa910078d) returned 1
[0266.480] DeleteObject (ho=0xa910078d) returned 1
[0266.480] RestoreDC (hdc=0xf0105ee, nSavedDC=-1) returned 1
[0266.480] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0266.481] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0266.481] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0266.482] GetWindowPlacement (in: hWnd=0x2f013e, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0266.482] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0266.482] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.482] GetSystemMetrics (nIndex=42) returned 0
[0266.482] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0266.482] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0266.482] GetCurrentObject (hdc=0x4b0107aa, type=0x1) returned 0xb00017
[0266.482] GetCurrentObject (hdc=0x4b0107aa, type=0x2) returned 0x900010
[0266.482] GetCurrentObject (hdc=0x4b0107aa, type=0x7) returned 0x3d050792
[0266.482] GetCurrentObject (hdc=0x4b0107aa, type=0x6) returned 0x8a01c2
[0266.482] SaveDC (hdc=0x4b0107aa) returned 1
[0266.483] GetNearestColor (hdc=0x4b0107aa, color=0xf0f0f0) returned 0xf0f0f0
[0266.483] CreateSolidBrush (color=0xf0f0f0) returned 0xaa10078d
[0266.483] FillRect (hDC=0x4b0107aa, lprc=0x53dc18, hbr=0xaa10078d) returned 1
[0266.483] DeleteObject (ho=0xaa10078d) returned 1
[0266.483] RestoreDC (hdc=0x4b0107aa, nSavedDC=-1) returned 1
[0266.483] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.483] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.483] GetSystemMetrics (nIndex=42) returned 0
[0266.483] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.483] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0266.483] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0266.483] GetCurrentObject (hdc=0x4b0107aa, type=0x1) returned 0xb00017
[0266.483] GetCurrentObject (hdc=0x4b0107aa, type=0x2) returned 0x900010
[0266.483] GetCurrentObject (hdc=0x4b0107aa, type=0x7) returned 0x3d050792
[0266.483] GetCurrentObject (hdc=0x4b0107aa, type=0x6) returned 0x8a01c2
[0266.484] SaveDC (hdc=0x4b0107aa) returned 1
[0266.484] GetNearestColor (hdc=0x4b0107aa, color=0xf0f0f0) returned 0xf0f0f0
[0266.484] CreateSolidBrush (color=0xf0f0f0) returned 0xab10078d
[0266.484] FillRect (hDC=0x4b0107aa, lprc=0x53dbb8, hbr=0xab10078d) returned 1
[0266.484] DeleteObject (ho=0xab10078d) returned 1
[0266.484] RestoreDC (hdc=0x4b0107aa, nSavedDC=-1) returned 1
[0266.484] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.484] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.484] GetSystemMetrics (nIndex=42) returned 0
[0266.484] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.484] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0266.485] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0266.485] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0266.486] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0266.486] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0266.486] GetStockObject (i=5) returned 0x900015
[0266.486] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0266.487] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xd02ca, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0266.487] GetStockObject (i=5) returned 0x900015
[0266.487] GetWindowPlacement (in: hWnd=0x2f013e, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0266.487] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0266.487] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0266.487] GetWindowRect (in: hWnd=0x2f013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0266.488] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0266.489] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0266.489] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0266.489] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0266.489] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0266.489] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0266.489] GetWindowRect (in: hWnd=0x2f013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0266.490] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.490] IsWindowUnicode (hWnd=0x2f013e) returned 1
[0266.490] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.498] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.498] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.498] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0266.498] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.498] IsWindowUnicode (hWnd=0x2f013e) returned 1
[0266.498] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.498] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.498] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.499] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.499] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x84, wParam=0x0, lParam=0x1930368) returned 0x1
[0266.499] IsWindowUnicode (hWnd=0x120122) returned 1
[0266.499] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.499] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.499] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.500] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.500] IsWindowUnicode (hWnd=0x202c6) returned 1
[0266.500] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.500] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.500] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.500] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0266.500] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0266.500] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.500] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x84, wParam=0x0, lParam=0x1930368) returned 0x1
[0266.500] IsWindowUnicode (hWnd=0x120122) returned 1
[0266.500] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.500] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x84, wParam=0x0, lParam=0x1930368) returned 0x1
[0266.501] SetCursor (hCursor=0x10003) returned 0x10003
[0266.501] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.501] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.501] _TrackMouseEvent (in: lpEventTrack=0x233aae8 | out: lpEventTrack=0x233aae8) returned 1
[0266.501] SendMessageW (hWnd=0x120122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0266.501] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0266.501] InvalidateRect (hWnd=0x120122, lpRect=0x0, bErase=0) returned 1
[0266.501] GetKeyState (nVirtKey=1) returned 0
[0266.501] GetKeyState (nVirtKey=2) returned 0
[0266.501] GetKeyState (nVirtKey=4) returned 0
[0266.501] GetKeyState (nVirtKey=5) returned 0
[0266.501] GetKeyState (nVirtKey=6) returned 0
[0266.501] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.502] IsWindowUnicode (hWnd=0x2f013e) returned 1
[0266.502] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.502] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.502] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.502] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.503] IsWindowUnicode (hWnd=0x2f013e) returned 1
[0266.503] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.503] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.503] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.503] BeginPaint (in: hWnd=0x2f013e, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x8b010786
[0266.503] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0266.504] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.504] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.504] GetSystemMetrics (nIndex=42) returned 0
[0266.504] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.504] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0266.504] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0266.504] EndPaint (hWnd=0x2f013e, lpPaint=0x53e30c) returned 1
[0266.504] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.504] IsWindowUnicode (hWnd=0x1201e2) returned 1
[0266.504] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.504] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.504] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0266.505] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0266.505] SetTextColor (hdc=0x4c0107aa, color=0x0) returned 0x0
[0266.505] SetBkColor (hdc=0x4c0107aa, color=0xffffff) returned 0xffffff
[0266.541] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.541] IsWindowUnicode (hWnd=0x102dc) returned 1
[0266.541] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.542] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.542] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.543] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.543] IsWindowUnicode (hWnd=0xf004e) returned 1
[0266.543] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.543] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.543] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.543] BeginPaint (in: hWnd=0xf004e, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x10105d6
[0266.544] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0266.544] CreateCompatibleDC (hdc=0x10105d6) returned 0x460107ce
[0266.544] SelectObject (hdc=0x460107ce, h=0x1e0507b9) returned 0x85000f
[0266.544] GdipCreateFromHDC (hdc=0x460107ce, graphics=0x53e30c) returned 0x0
[0266.544] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0266.544] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0266.544] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0266.544] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.544] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0266.544] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.544] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0266.544] LocalFree (hMem=0x89ee08) returned 0x0
[0266.545] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.545] GdipCreateRegion (region=0x53e354) returned 0x0
[0266.545] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.545] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0266.545] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0266.545] GetWindowTextLengthW (hWnd=0xf004e) returned 16
[0266.545] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0266.545] GetSystemMetrics (nIndex=42) returned 0
[0266.545] GetWindowTextW (in: hWnd=0xf004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0266.545] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0266.545] GetClientRect (in: hWnd=0xf004e, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0266.545] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0266.545] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0266.545] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0266.545] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.545] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0266.545] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.546] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0266.546] LocalFree (hMem=0x89ee08) returned 0x0
[0266.546] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0266.546] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0266.546] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0266.546] LocalFree (hMem=0x89ec80) returned 0x0
[0266.546] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.546] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0266.546] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0266.546] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0266.546] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0266.546] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0266.546] GetCurrentObject (hdc=0x460107ce, type=0x1) returned 0xb00017
[0266.546] GetCurrentObject (hdc=0x460107ce, type=0x2) returned 0x900010
[0266.546] GetCurrentObject (hdc=0x460107ce, type=0x7) returned 0x1e0507b9
[0266.546] GetCurrentObject (hdc=0x460107ce, type=0x6) returned 0x8a01c2
[0266.547] SaveDC (hdc=0x460107ce) returned 1
[0266.547] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcb0407a1
[0266.547] GetClipRgn (hdc=0x460107ce, hrgn=0xcb0407a1) returned 0
[0266.547] SelectClipRgn (hdc=0x460107ce, hrgn=0xfb04051e) returned 2
[0266.547] DeleteObject (ho=0xcb0407a1) returned 1
[0266.547] DeleteObject (ho=0xfb04051e) returned 1
[0266.547] OffsetViewportOrgEx (in: hdc=0x460107ce, x=0, y=0, lppt=0x233aff0 | out: lppt=0x233aff0) returned 1
[0266.547] GetNearestColor (hdc=0x460107ce, color=0xf0f0f0) returned 0xf0f0f0
[0266.547] CreateSolidBrush (color=0xf0f0f0) returned 0xac10078d
[0266.547] FillRect (hDC=0x460107ce, lprc=0x53e1f4, hbr=0xac10078d) returned 1
[0266.547] DeleteObject (ho=0xac10078d) returned 1
[0266.547] RestoreDC (hdc=0x460107ce, nSavedDC=-1) returned 1
[0266.547] GdipReleaseDC (graphics=0x5d92c30, hdc=0x460107ce) returned 0x0
[0266.548] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb4b0dbd) returned 0x0
[0266.548] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.548] GetWindowTextLengthW (hWnd=0xf004e) returned 16
[0266.548] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0266.548] GetSystemMetrics (nIndex=42) returned 0
[0266.548] GetWindowTextW (in: hWnd=0xf004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0266.548] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0266.548] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0266.548] GetCurrentObject (hdc=0x460107ce, type=0x1) returned 0xb00017
[0266.548] GetCurrentObject (hdc=0x460107ce, type=0x2) returned 0x900010
[0266.548] GetCurrentObject (hdc=0x460107ce, type=0x7) returned 0x1e0507b9
[0266.548] GetCurrentObject (hdc=0x460107ce, type=0x6) returned 0x8a01c2
[0266.548] SaveDC (hdc=0x460107ce) returned 1
[0266.548] GetNearestColor (hdc=0x460107ce, color=0x0) returned 0x0
[0266.548] RestoreDC (hdc=0x460107ce, nSavedDC=-1) returned 1
[0266.549] GdipReleaseDC (graphics=0x5d92c30, hdc=0x460107ce) returned 0x0
[0266.549] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0266.549] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0266.549] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0266.549] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x233b2f8 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0266.550] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0266.550] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0266.550] GetCurrentObject (hdc=0x460107ce, type=0x1) returned 0xb00017
[0266.550] GetCurrentObject (hdc=0x460107ce, type=0x2) returned 0x900010
[0266.550] GetCurrentObject (hdc=0x460107ce, type=0x7) returned 0x1e0507b9
[0266.550] GetCurrentObject (hdc=0x460107ce, type=0x6) returned 0x8a01c2
[0266.550] SaveDC (hdc=0x460107ce) returned 1
[0266.550] GetTextAlign (hdc=0x460107ce) returned 0x0
[0266.550] GetTextColor (hdc=0x460107ce) returned 0x0
[0266.550] GetCurrentObject (hdc=0x460107ce, type=0x6) returned 0x8a01c2
[0266.550] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0266.551] SelectObject (hdc=0x460107ce, h=0x730a066d) returned 0x8a01c2
[0266.551] GetBkMode (hdc=0x460107ce) returned 2
[0266.551] SetBkMode (hdc=0x460107ce, mode=1) returned 2
[0266.551] DrawTextExW (in: hdc=0x460107ce, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x233b51c | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0266.551] RestoreDC (hdc=0x460107ce, nSavedDC=-1) returned 1
[0266.551] GdipReleaseDC (graphics=0x5d92c30, hdc=0x460107ce) returned 0x0
[0266.551] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0266.551] BitBlt (hdc=0x10105d6, x=0, y=0, cx=250, cy=70, hdcSrc=0x460107ce, x1=0, y1=0, rop=0xcc0020) returned 1
[0266.552] GdipReleaseDC (graphics=0x5d92c30, hdc=0x460107ce) returned 0x0
[0266.552] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0266.552] SelectObject (hdc=0x460107ce, h=0x85000f) returned 0x1e0507b9
[0266.552] DeleteDC (hdc=0x460107ce) returned 1
[0266.552] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0266.552] EndPaint (hWnd=0xf004e, lpPaint=0x53e2f0) returned 1
[0266.552] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.556] IsWindowUnicode (hWnd=0x120122) returned 1
[0266.556] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.557] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.557] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.557] BeginPaint (in: hWnd=0x120122, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0266.557] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0266.557] CreateCompatibleDC (hdc=0x8b010786) returned 0x480107ce
[0266.557] SelectObject (hdc=0x480107ce, h=0x1e0507b9) returned 0x85000f
[0266.557] GdipCreateFromHDC (hdc=0x480107ce, graphics=0x53e300) returned 0x0
[0266.557] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0266.557] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0266.557] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0266.558] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.558] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0266.558] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.558] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0266.558] LocalFree (hMem=0x89ee08) returned 0x0
[0266.558] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.558] GdipCreateRegion (region=0x53e348) returned 0x0
[0266.558] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.558] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0266.558] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0266.558] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb490dbd) returned 0x0
[0266.558] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.558] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0266.558] GetCurrentObject (hdc=0x480107ce, type=0x1) returned 0xb00017
[0266.558] GetCurrentObject (hdc=0x480107ce, type=0x2) returned 0x900010
[0266.558] GetCurrentObject (hdc=0x480107ce, type=0x7) returned 0x1e0507b9
[0266.559] GetCurrentObject (hdc=0x480107ce, type=0x6) returned 0x8a01c2
[0266.559] SaveDC (hdc=0x480107ce) returned 1
[0266.559] GetNearestColor (hdc=0x480107ce, color=0xf0f0f0) returned 0xf0f0f0
[0266.559] GetNearestColor (hdc=0x480107ce, color=0xa0a0a0) returned 0xa0a0a0
[0266.559] GetNearestColor (hdc=0x480107ce, color=0x696969) returned 0x696969
[0266.559] GetNearestColor (hdc=0x480107ce, color=0xa0a0a0) returned 0xa0a0a0
[0266.559] GetNearestColor (hdc=0x480107ce, color=0x0) returned 0x0
[0266.559] GetNearestColor (hdc=0x480107ce, color=0xffffff) returned 0xffffff
[0266.559] GetNearestColor (hdc=0x480107ce, color=0xe5e5e5) returned 0xe5e5e5
[0266.559] GetNearestColor (hdc=0x480107ce, color=0xd7d7d7) returned 0xd7d7d7
[0266.559] GetNearestColor (hdc=0x480107ce, color=0x0) returned 0x0
[0266.559] RestoreDC (hdc=0x480107ce, nSavedDC=-1) returned 1
[0266.559] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107ce) returned 0x0
[0266.560] IsAppThemed () returned 0x1
[0266.560] GetThemeAppProperties () returned 0x3
[0266.560] GetThemeAppProperties () returned 0x3
[0266.560] IsAppThemed () returned 0x1
[0266.560] GetThemeAppProperties () returned 0x3
[0266.560] GetThemeAppProperties () returned 0x3
[0266.560] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x233bc88 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0266.560] IsAppThemed () returned 0x1
[0266.560] GetThemeAppProperties () returned 0x3
[0266.560] GetThemeAppProperties () returned 0x3
[0266.560] IsAppThemed () returned 0x1
[0266.560] GetThemeAppProperties () returned 0x3
[0266.561] GetThemeAppProperties () returned 0x3
[0266.561] IsAppThemed () returned 0x1
[0266.561] GetThemeAppProperties () returned 0x3
[0266.561] GetThemeAppProperties () returned 0x3
[0266.561] IsAppThemed () returned 0x1
[0266.561] GetThemeAppProperties () returned 0x3
[0266.561] GetThemeAppProperties () returned 0x3
[0266.561] IsThemePartDefined () returned 0x1
[0266.561] IsAppThemed () returned 0x1
[0266.561] GetThemeAppProperties () returned 0x3
[0266.561] GetThemeAppProperties () returned 0x3
[0266.561] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0266.561] IsAppThemed () returned 0x1
[0266.561] GetThemeAppProperties () returned 0x3
[0266.561] GetThemeAppProperties () returned 0x3
[0266.561] IsAppThemed () returned 0x1
[0266.561] GetThemeAppProperties () returned 0x3
[0266.561] GetThemeAppProperties () returned 0x3
[0266.561] IsThemePartDefined () returned 0x1
[0266.561] GdipCreateRegion (region=0x53e064) returned 0x0
[0266.561] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.561] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0266.562] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.562] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0266.562] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0266.562] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0266.562] LocalFree (hMem=0x89eac0) returned 0x0
[0266.562] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0266.562] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0266.562] LocalFree (hMem=0x89ec80) returned 0x0
[0266.562] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.562] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0266.562] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0266.562] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0266.562] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.562] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0266.562] GetCurrentObject (hdc=0x480107ce, type=0x1) returned 0xb00017
[0266.562] GetCurrentObject (hdc=0x480107ce, type=0x2) returned 0x900010
[0266.562] GetCurrentObject (hdc=0x480107ce, type=0x7) returned 0x1e0507b9
[0266.563] GetCurrentObject (hdc=0x480107ce, type=0x6) returned 0x8a01c2
[0266.563] SaveDC (hdc=0x480107ce) returned 1
[0266.563] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfc04051e
[0266.563] GetClipRgn (hdc=0x480107ce, hrgn=0xfc04051e) returned 0
[0266.563] SelectClipRgn (hdc=0x480107ce, hrgn=0xcf0407a1) returned 2
[0266.563] DeleteObject (ho=0xfc04051e) returned 1
[0266.563] DeleteObject (ho=0xcf0407a1) returned 1
[0266.563] OffsetViewportOrgEx (in: hdc=0x480107ce, x=0, y=0, lppt=0x233c338 | out: lppt=0x233c338) returned 1
[0266.563] DrawThemeParentBackground () returned 0x0
[0266.563] GetWindowPlacement (in: hWnd=0x2f013e, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0266.563] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0266.564] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.564] GetSystemMetrics (nIndex=42) returned 0
[0266.564] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0266.564] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0266.564] GetCurrentObject (hdc=0x480107ce, type=0x1) returned 0xb00017
[0266.564] GetCurrentObject (hdc=0x480107ce, type=0x2) returned 0x900010
[0266.564] GetCurrentObject (hdc=0x480107ce, type=0x7) returned 0x1e0507b9
[0266.564] GetCurrentObject (hdc=0x480107ce, type=0x6) returned 0x8a01c2
[0266.564] SaveDC (hdc=0x480107ce) returned 2
[0266.564] GetNearestColor (hdc=0x480107ce, color=0xf0f0f0) returned 0xf0f0f0
[0266.564] CreateSolidBrush (color=0xf0f0f0) returned 0xad10078d
[0266.564] FillRect (hDC=0x480107ce, lprc=0x53dac8, hbr=0xad10078d) returned 1
[0266.564] DeleteObject (ho=0xad10078d) returned 1
[0266.564] RestoreDC (hdc=0x480107ce, nSavedDC=-1) returned 1
[0266.565] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.565] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.565] GetSystemMetrics (nIndex=42) returned 0
[0266.565] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.565] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0266.565] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0266.565] GetCurrentObject (hdc=0x480107ce, type=0x1) returned 0xb00017
[0266.565] GetCurrentObject (hdc=0x480107ce, type=0x2) returned 0x900010
[0266.565] GetCurrentObject (hdc=0x480107ce, type=0x7) returned 0x1e0507b9
[0266.565] GetCurrentObject (hdc=0x480107ce, type=0x6) returned 0x8a01c2
[0266.565] SaveDC (hdc=0x480107ce) returned 2
[0266.565] GetNearestColor (hdc=0x480107ce, color=0xf0f0f0) returned 0xf0f0f0
[0266.565] CreateSolidBrush (color=0xf0f0f0) returned 0xae10078d
[0266.565] FillRect (hDC=0x480107ce, lprc=0x53da68, hbr=0xae10078d) returned 1
[0266.565] DeleteObject (ho=0xae10078d) returned 1
[0266.565] RestoreDC (hdc=0x480107ce, nSavedDC=-1) returned 1
[0266.566] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.566] GetSystemMetrics (nIndex=42) returned 0
[0266.566] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0266.566] RestoreDC (hdc=0x480107ce, nSavedDC=-1) returned 1
[0266.566] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107ce) returned 0x0
[0266.566] IsAppThemed () returned 0x1
[0266.566] GetThemeAppProperties () returned 0x3
[0266.566] GetThemeAppProperties () returned 0x3
[0266.566] IsAppThemed () returned 0x1
[0266.566] GetThemeAppProperties () returned 0x3
[0266.566] GetThemeAppProperties () returned 0x3
[0266.566] IsThemePartDefined () returned 0x1
[0266.566] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0266.567] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.567] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0266.567] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.567] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0266.567] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0266.567] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0266.567] LocalFree (hMem=0x89eac0) returned 0x0
[0266.567] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0266.567] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0266.567] LocalFree (hMem=0x89eac0) returned 0x0
[0266.567] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.567] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0266.567] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0266.567] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0266.567] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.567] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0266.567] GetCurrentObject (hdc=0x480107ce, type=0x1) returned 0xb00017
[0266.568] GetCurrentObject (hdc=0x480107ce, type=0x2) returned 0x900010
[0266.568] GetCurrentObject (hdc=0x480107ce, type=0x7) returned 0x1e0507b9
[0266.568] GetCurrentObject (hdc=0x480107ce, type=0x6) returned 0x8a01c2
[0266.568] SaveDC (hdc=0x480107ce) returned 1
[0266.568] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd00407a1
[0266.568] GetClipRgn (hdc=0x480107ce, hrgn=0xd00407a1) returned 0
[0266.568] SelectClipRgn (hdc=0x480107ce, hrgn=0xfe04051e) returned 2
[0266.568] DeleteObject (ho=0xd00407a1) returned 1
[0266.568] DeleteObject (ho=0xfe04051e) returned 1
[0266.568] OffsetViewportOrgEx (in: hdc=0x480107ce, x=0, y=0, lppt=0x233cbc0 | out: lppt=0x233cbc0) returned 1
[0266.568] IsAppThemed () returned 0x1
[0266.568] GetThemeAppProperties () returned 0x3
[0266.568] GetThemeAppProperties () returned 0x3
[0266.568] DrawThemeBackground () returned 0x0
[0266.569] RestoreDC (hdc=0x480107ce, nSavedDC=-1) returned 1
[0266.569] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107ce) returned 0x0
[0266.569] GdipCreateRegion (region=0x53dfec) returned 0x0
[0266.569] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.569] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0266.569] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.569] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0266.569] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0266.569] LocalFree (hMem=0x89eac0) returned 0x0
[0266.569] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0266.569] LocalFree (hMem=0x89ec80) returned 0x0
[0266.569] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.569] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0266.569] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0266.569] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0266.569] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.569] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0266.569] GetCurrentObject (hdc=0x480107ce, type=0x1) returned 0xb00017
[0266.569] GetCurrentObject (hdc=0x480107ce, type=0x2) returned 0x900010
[0266.569] GetCurrentObject (hdc=0x480107ce, type=0x7) returned 0x1e0507b9
[0266.570] GetCurrentObject (hdc=0x480107ce, type=0x6) returned 0x8a01c2
[0266.570] SaveDC (hdc=0x480107ce) returned 1
[0266.570] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xff04051e
[0266.570] GetClipRgn (hdc=0x480107ce, hrgn=0xff04051e) returned 0
[0266.570] SelectClipRgn (hdc=0x480107ce, hrgn=0xd10407a1) returned 2
[0266.570] DeleteObject (ho=0xff04051e) returned 1
[0266.570] DeleteObject (ho=0xd10407a1) returned 1
[0266.570] OffsetViewportOrgEx (in: hdc=0x480107ce, x=0, y=0, lppt=0x233ce94 | out: lppt=0x233ce94) returned 1
[0266.570] IsAppThemed () returned 0x1
[0266.570] GetThemeAppProperties () returned 0x3
[0266.570] GetThemeAppProperties () returned 0x3
[0266.570] GetThemeBackgroundContentRect () returned 0x0
[0266.570] RestoreDC (hdc=0x480107ce, nSavedDC=-1) returned 1
[0266.570] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107ce) returned 0x0
[0266.570] IsAppThemed () returned 0x1
[0266.570] GetThemeAppProperties () returned 0x3
[0266.570] GetThemeAppProperties () returned 0x3
[0266.571] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0266.571] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0266.571] GetCurrentObject (hdc=0x480107ce, type=0x1) returned 0xb00017
[0266.571] GetCurrentObject (hdc=0x480107ce, type=0x2) returned 0x900010
[0266.571] GetCurrentObject (hdc=0x480107ce, type=0x7) returned 0x1e0507b9
[0266.571] GetCurrentObject (hdc=0x480107ce, type=0x6) returned 0x8a01c2
[0266.571] SaveDC (hdc=0x480107ce) returned 1
[0266.571] GetTextAlign (hdc=0x480107ce) returned 0x0
[0266.571] GetTextColor (hdc=0x480107ce) returned 0x0
[0266.571] GetCurrentObject (hdc=0x480107ce, type=0x6) returned 0x8a01c2
[0266.571] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0266.571] SelectObject (hdc=0x480107ce, h=0x730a066d) returned 0x8a01c2
[0266.571] GetBkMode (hdc=0x480107ce) returned 2
[0266.571] SetBkMode (hdc=0x480107ce, mode=1) returned 2
[0266.572] DrawTextExW (in: hdc=0x480107ce, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x233d234 | out: lpchText="OK", lprc=0x53df84) returned 13
[0266.572] DrawTextExW (in: hdc=0x480107ce, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x233d234 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0266.572] RestoreDC (hdc=0x480107ce, nSavedDC=-1) returned 1
[0266.572] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107ce) returned 0x0
[0266.572] GetFocus () returned 0x1201e2
[0266.572] IsAppThemed () returned 0x1
[0266.572] GetThemeAppProperties () returned 0x3
[0266.572] GetThemeAppProperties () returned 0x3
[0266.573] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0266.573] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x480107ce, x1=0, y1=0, rop=0xcc0020) returned 1
[0266.573] GdipReleaseDC (graphics=0x5d92c30, hdc=0x480107ce) returned 0x0
[0266.573] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0266.573] SelectObject (hdc=0x480107ce, h=0x85000f) returned 0x1e0507b9
[0266.573] DeleteDC (hdc=0x480107ce) returned 1
[0266.573] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0266.573] EndPaint (hWnd=0x120122, lpPaint=0x53e2e4) returned 1
[0266.573] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.573] IsWindowUnicode (hWnd=0xd02ca) returned 1
[0266.573] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.574] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.574] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.574] BeginPaint (in: hWnd=0xd02ca, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0266.574] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0266.574] CreateCompatibleDC (hdc=0x60100ce) returned 0x4a0107ce
[0266.574] SelectObject (hdc=0x4a0107ce, h=0x1e0507b9) returned 0x85000f
[0266.574] GdipCreateFromHDC (hdc=0x4a0107ce, graphics=0x53e300) returned 0x0
[0266.574] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0266.574] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0266.574] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0266.574] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.574] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0266.574] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0266.575] LocalFree (hMem=0x89ee08) returned 0x0
[0266.575] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.575] GdipCreateRegion (region=0x53e348) returned 0x0
[0266.575] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.575] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0266.575] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0266.575] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb470dbd) returned 0x0
[0266.575] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.575] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0266.575] GetCurrentObject (hdc=0x4a0107ce, type=0x1) returned 0xb00017
[0266.575] GetCurrentObject (hdc=0x4a0107ce, type=0x2) returned 0x900010
[0266.575] GetCurrentObject (hdc=0x4a0107ce, type=0x7) returned 0x1e0507b9
[0266.575] GetCurrentObject (hdc=0x4a0107ce, type=0x6) returned 0x8a01c2
[0266.575] SaveDC (hdc=0x4a0107ce) returned 1
[0266.575] GetNearestColor (hdc=0x4a0107ce, color=0xf0f0f0) returned 0xf0f0f0
[0266.575] GetNearestColor (hdc=0x4a0107ce, color=0xa0a0a0) returned 0xa0a0a0
[0266.575] GetNearestColor (hdc=0x4a0107ce, color=0x696969) returned 0x696969
[0266.576] GetNearestColor (hdc=0x4a0107ce, color=0xa0a0a0) returned 0xa0a0a0
[0266.576] GetNearestColor (hdc=0x4a0107ce, color=0x0) returned 0x0
[0266.576] GetNearestColor (hdc=0x4a0107ce, color=0xffffff) returned 0xffffff
[0266.576] GetNearestColor (hdc=0x4a0107ce, color=0xe5e5e5) returned 0xe5e5e5
[0266.576] GetNearestColor (hdc=0x4a0107ce, color=0xd7d7d7) returned 0xd7d7d7
[0266.576] GetNearestColor (hdc=0x4a0107ce, color=0x0) returned 0x0
[0266.576] RestoreDC (hdc=0x4a0107ce, nSavedDC=-1) returned 1
[0266.576] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4a0107ce) returned 0x0
[0266.576] IsAppThemed () returned 0x1
[0266.576] GetThemeAppProperties () returned 0x3
[0266.576] GetThemeAppProperties () returned 0x3
[0266.576] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0266.576] SendMessageW (hWnd=0x2f013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0266.576] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0266.576] IsAppThemed () returned 0x1
[0266.577] GetThemeAppProperties () returned 0x3
[0266.577] GetThemeAppProperties () returned 0x3
[0266.577] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x233da44 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0266.577] IsAppThemed () returned 0x1
[0266.577] GetThemeAppProperties () returned 0x3
[0266.577] GetThemeAppProperties () returned 0x3
[0266.577] IsAppThemed () returned 0x1
[0266.577] GetThemeAppProperties () returned 0x3
[0266.577] GetThemeAppProperties () returned 0x3
[0266.577] GetFocus () returned 0x1201e2
[0266.577] IsAppThemed () returned 0x1
[0266.577] GetThemeAppProperties () returned 0x3
[0266.577] GetThemeAppProperties () returned 0x3
[0266.577] IsAppThemed () returned 0x1
[0266.577] GetThemeAppProperties () returned 0x3
[0266.577] GetThemeAppProperties () returned 0x3
[0266.578] IsThemePartDefined () returned 0x1
[0266.578] IsAppThemed () returned 0x1
[0266.578] GetThemeAppProperties () returned 0x3
[0266.578] GetThemeAppProperties () returned 0x3
[0266.578] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0266.578] IsAppThemed () returned 0x1
[0266.578] GetThemeAppProperties () returned 0x3
[0266.578] GetThemeAppProperties () returned 0x3
[0266.578] IsAppThemed () returned 0x1
[0266.578] GetThemeAppProperties () returned 0x3
[0266.578] GetThemeAppProperties () returned 0x3
[0266.578] IsThemePartDefined () returned 0x1
[0266.578] GdipCreateRegion (region=0x53e070) returned 0x0
[0266.578] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.578] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0266.578] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.578] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0266.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.578] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0266.578] LocalFree (hMem=0x89ee08) returned 0x0
[0266.579] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0266.579] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0266.579] LocalFree (hMem=0x89ec80) returned 0x0
[0266.579] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.579] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0266.579] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0266.579] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0266.579] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.579] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0266.579] GetCurrentObject (hdc=0x4a0107ce, type=0x1) returned 0xb00017
[0266.579] GetCurrentObject (hdc=0x4a0107ce, type=0x2) returned 0x900010
[0266.579] GetCurrentObject (hdc=0x4a0107ce, type=0x7) returned 0x1e0507b9
[0266.579] GetCurrentObject (hdc=0x4a0107ce, type=0x6) returned 0x8a01c2
[0266.579] SaveDC (hdc=0x4a0107ce) returned 1
[0266.579] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd20407a1
[0266.579] GetClipRgn (hdc=0x4a0107ce, hrgn=0xd20407a1) returned 0
[0266.580] SelectClipRgn (hdc=0x4a0107ce, hrgn=0x304051e) returned 2
[0266.580] DeleteObject (ho=0xd20407a1) returned 1
[0266.580] DeleteObject (ho=0x304051e) returned 1
[0266.580] OffsetViewportOrgEx (in: hdc=0x4a0107ce, x=0, y=0, lppt=0x233e0f4 | out: lppt=0x233e0f4) returned 1
[0266.580] DrawThemeParentBackground () returned 0x0
[0266.580] GetWindowPlacement (in: hWnd=0x2f013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0266.580] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0266.580] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.580] GetSystemMetrics (nIndex=42) returned 0
[0266.580] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0266.580] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0266.580] GetCurrentObject (hdc=0x4a0107ce, type=0x1) returned 0xb00017
[0266.581] GetCurrentObject (hdc=0x4a0107ce, type=0x2) returned 0x900010
[0266.581] GetCurrentObject (hdc=0x4a0107ce, type=0x7) returned 0x1e0507b9
[0266.581] GetCurrentObject (hdc=0x4a0107ce, type=0x6) returned 0x8a01c2
[0266.581] SaveDC (hdc=0x4a0107ce) returned 2
[0266.581] GetNearestColor (hdc=0x4a0107ce, color=0xf0f0f0) returned 0xf0f0f0
[0266.581] CreateSolidBrush (color=0xf0f0f0) returned 0xaf10078d
[0266.581] FillRect (hDC=0x4a0107ce, lprc=0x53dad0, hbr=0xaf10078d) returned 1
[0266.581] DeleteObject (ho=0xaf10078d) returned 1
[0266.581] RestoreDC (hdc=0x4a0107ce, nSavedDC=-1) returned 1
[0266.581] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.581] GetSystemMetrics (nIndex=42) returned 0
[0266.581] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0266.581] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0266.582] GetCurrentObject (hdc=0x4a0107ce, type=0x1) returned 0xb00017
[0266.582] GetCurrentObject (hdc=0x4a0107ce, type=0x2) returned 0x900010
[0266.582] GetCurrentObject (hdc=0x4a0107ce, type=0x7) returned 0x1e0507b9
[0266.582] GetCurrentObject (hdc=0x4a0107ce, type=0x6) returned 0x8a01c2
[0266.582] SaveDC (hdc=0x4a0107ce) returned 2
[0266.582] GetNearestColor (hdc=0x4a0107ce, color=0xf0f0f0) returned 0xf0f0f0
[0266.582] CreateSolidBrush (color=0xf0f0f0) returned 0xb010078d
[0266.582] FillRect (hDC=0x4a0107ce, lprc=0x53da70, hbr=0xb010078d) returned 1
[0266.582] DeleteObject (ho=0xb010078d) returned 1
[0266.582] RestoreDC (hdc=0x4a0107ce, nSavedDC=-1) returned 1
[0266.582] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.582] GetSystemMetrics (nIndex=42) returned 0
[0266.582] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0266.583] RestoreDC (hdc=0x4a0107ce, nSavedDC=-1) returned 1
[0266.583] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4a0107ce) returned 0x0
[0266.583] IsAppThemed () returned 0x1
[0266.583] GetThemeAppProperties () returned 0x3
[0266.583] GetThemeAppProperties () returned 0x3
[0266.583] IsAppThemed () returned 0x1
[0266.583] GetThemeAppProperties () returned 0x3
[0266.583] GetThemeAppProperties () returned 0x3
[0266.583] IsThemePartDefined () returned 0x1
[0266.583] GdipCreateRegion (region=0x53dff4) returned 0x0
[0266.583] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.583] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0266.583] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.583] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0266.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0266.583] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0266.588] LocalFree (hMem=0x89ec80) returned 0x0
[0266.588] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0266.588] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0266.588] LocalFree (hMem=0x89eac0) returned 0x0
[0266.588] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.588] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0266.588] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0266.588] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0266.588] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.588] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0266.589] GetCurrentObject (hdc=0x4a0107ce, type=0x1) returned 0xb00017
[0266.589] GetCurrentObject (hdc=0x4a0107ce, type=0x2) returned 0x900010
[0266.589] GetCurrentObject (hdc=0x4a0107ce, type=0x7) returned 0x1e0507b9
[0266.589] GetCurrentObject (hdc=0x4a0107ce, type=0x6) returned 0x8a01c2
[0266.589] SaveDC (hdc=0x4a0107ce) returned 1
[0266.589] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x404051e
[0266.589] GetClipRgn (hdc=0x4a0107ce, hrgn=0x404051e) returned 0
[0266.589] SelectClipRgn (hdc=0x4a0107ce, hrgn=0xd40407a1) returned 2
[0266.589] DeleteObject (ho=0x404051e) returned 1
[0266.589] DeleteObject (ho=0xd40407a1) returned 1
[0266.589] OffsetViewportOrgEx (in: hdc=0x4a0107ce, x=0, y=0, lppt=0x233e97c | out: lppt=0x233e97c) returned 1
[0266.589] IsAppThemed () returned 0x1
[0266.589] GetThemeAppProperties () returned 0x3
[0266.589] GetThemeAppProperties () returned 0x3
[0266.589] DrawThemeBackground () returned 0x0
[0266.590] RestoreDC (hdc=0x4a0107ce, nSavedDC=-1) returned 1
[0266.590] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4a0107ce) returned 0x0
[0266.590] GdipCreateRegion (region=0x53dff8) returned 0x0
[0266.590] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.590] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0266.590] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.590] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0266.590] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.590] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0266.590] LocalFree (hMem=0x89ee08) returned 0x0
[0266.590] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0266.590] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0266.590] LocalFree (hMem=0x89ec80) returned 0x0
[0266.590] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.590] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0266.590] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0266.590] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0266.591] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.591] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0266.591] GetCurrentObject (hdc=0x4a0107ce, type=0x1) returned 0xb00017
[0266.591] GetCurrentObject (hdc=0x4a0107ce, type=0x2) returned 0x900010
[0266.591] GetCurrentObject (hdc=0x4a0107ce, type=0x7) returned 0x1e0507b9
[0266.591] GetCurrentObject (hdc=0x4a0107ce, type=0x6) returned 0x8a01c2
[0266.591] SaveDC (hdc=0x4a0107ce) returned 1
[0266.591] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd50407a1
[0266.591] GetClipRgn (hdc=0x4a0107ce, hrgn=0xd50407a1) returned 0
[0266.591] SelectClipRgn (hdc=0x4a0107ce, hrgn=0x504051e) returned 2
[0266.591] DeleteObject (ho=0xd50407a1) returned 1
[0266.591] DeleteObject (ho=0x504051e) returned 1
[0266.591] OffsetViewportOrgEx (in: hdc=0x4a0107ce, x=0, y=0, lppt=0x233ec50 | out: lppt=0x233ec50) returned 1
[0266.591] IsAppThemed () returned 0x1
[0266.592] GetThemeAppProperties () returned 0x3
[0266.592] GetThemeAppProperties () returned 0x3
[0266.592] GetThemeBackgroundContentRect () returned 0x0
[0266.592] RestoreDC (hdc=0x4a0107ce, nSavedDC=-1) returned 1
[0266.592] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4a0107ce) returned 0x0
[0266.592] IsAppThemed () returned 0x1
[0266.592] GetThemeAppProperties () returned 0x3
[0266.592] GetThemeAppProperties () returned 0x3
[0266.592] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0266.592] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0266.592] GetCurrentObject (hdc=0x4a0107ce, type=0x1) returned 0xb00017
[0266.592] GetCurrentObject (hdc=0x4a0107ce, type=0x2) returned 0x900010
[0266.592] GetCurrentObject (hdc=0x4a0107ce, type=0x7) returned 0x1e0507b9
[0266.592] GetCurrentObject (hdc=0x4a0107ce, type=0x6) returned 0x8a01c2
[0266.592] SaveDC (hdc=0x4a0107ce) returned 1
[0266.592] GetTextAlign (hdc=0x4a0107ce) returned 0x0
[0266.592] GetTextColor (hdc=0x4a0107ce) returned 0x0
[0266.593] GetCurrentObject (hdc=0x4a0107ce, type=0x6) returned 0x8a01c2
[0266.593] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0266.593] SelectObject (hdc=0x4a0107ce, h=0x730a066d) returned 0x8a01c2
[0266.593] GetBkMode (hdc=0x4a0107ce) returned 2
[0266.593] SetBkMode (hdc=0x4a0107ce, mode=1) returned 2
[0266.593] DrawTextExW (in: hdc=0x4a0107ce, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x233eff0 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0266.593] DrawTextExW (in: hdc=0x4a0107ce, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x233eff0 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0266.594] RestoreDC (hdc=0x4a0107ce, nSavedDC=-1) returned 1
[0266.594] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4a0107ce) returned 0x0
[0266.594] GetFocus () returned 0x1201e2
[0266.594] IsAppThemed () returned 0x1
[0266.594] GetThemeAppProperties () returned 0x3
[0266.594] GetThemeAppProperties () returned 0x3
[0266.594] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0266.594] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x4a0107ce, x1=0, y1=0, rop=0xcc0020) returned 1
[0266.594] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4a0107ce) returned 0x0
[0266.594] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0266.594] SelectObject (hdc=0x4a0107ce, h=0x85000f) returned 0x1e0507b9
[0266.595] DeleteDC (hdc=0x4a0107ce) returned 1
[0266.595] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0266.595] EndPaint (hWnd=0xd02ca, lpPaint=0x53e2e4) returned 1
[0266.595] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.595] IsWindowUnicode (hWnd=0x202c6) returned 1
[0266.595] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.595] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.595] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.595] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0266.595] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0266.596] CreateCompatibleDC (hdc=0xf0105ee) returned 0x4c0107ce
[0266.596] SelectObject (hdc=0x4c0107ce, h=0x1e0507b9) returned 0x85000f
[0266.596] GdipCreateFromHDC (hdc=0x4c0107ce, graphics=0x53e300) returned 0x0
[0266.596] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0266.596] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0266.596] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0266.596] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.596] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0266.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0266.596] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0266.596] LocalFree (hMem=0x89ee40) returned 0x0
[0266.596] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.596] GdipCreateRegion (region=0x53e348) returned 0x0
[0266.597] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.597] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0266.597] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0266.597] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb450dbd) returned 0x0
[0266.597] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.597] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0266.597] GetCurrentObject (hdc=0x4c0107ce, type=0x1) returned 0xb00017
[0266.597] GetCurrentObject (hdc=0x4c0107ce, type=0x2) returned 0x900010
[0266.597] GetCurrentObject (hdc=0x4c0107ce, type=0x7) returned 0x1e0507b9
[0266.597] GetCurrentObject (hdc=0x4c0107ce, type=0x6) returned 0x8a01c2
[0266.597] SaveDC (hdc=0x4c0107ce) returned 1
[0266.597] GetNearestColor (hdc=0x4c0107ce, color=0xff) returned 0xff
[0266.597] GetNearestColor (hdc=0x4c0107ce, color=0x55) returned 0x55
[0266.597] GetNearestColor (hdc=0x4c0107ce, color=0x0) returned 0x0
[0266.598] GetNearestColor (hdc=0x4c0107ce, color=0x55) returned 0x55
[0266.598] GetNearestColor (hdc=0x4c0107ce, color=0x0) returned 0x0
[0266.598] GetNearestColor (hdc=0x4c0107ce, color=0x8080ff) returned 0x8080ff
[0266.598] GetNearestColor (hdc=0x4c0107ce, color=0x7373e5) returned 0x7373e5
[0266.598] GetNearestColor (hdc=0x4c0107ce, color=0xe5) returned 0xe5
[0266.598] GetNearestColor (hdc=0x4c0107ce, color=0x0) returned 0x0
[0266.598] RestoreDC (hdc=0x4c0107ce, nSavedDC=-1) returned 1
[0266.598] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4c0107ce) returned 0x0
[0266.598] IsAppThemed () returned 0x1
[0266.598] GetThemeAppProperties () returned 0x3
[0266.598] GetThemeAppProperties () returned 0x3
[0266.598] IsAppThemed () returned 0x1
[0266.598] GetThemeAppProperties () returned 0x3
[0266.598] GetThemeAppProperties () returned 0x3
[0266.599] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0266.599] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x233f7d4 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0266.599] IsAppThemed () returned 0x1
[0266.599] GetThemeAppProperties () returned 0x3
[0266.599] GetThemeAppProperties () returned 0x3
[0266.599] IsAppThemed () returned 0x1
[0266.599] GetThemeAppProperties () returned 0x3
[0266.599] GetThemeAppProperties () returned 0x3
[0266.600] GetFocus () returned 0x1201e2
[0266.600] IsAppThemed () returned 0x1
[0266.600] GetThemeAppProperties () returned 0x3
[0266.600] GetThemeAppProperties () returned 0x3
[0266.600] IsAppThemed () returned 0x1
[0266.600] GetThemeAppProperties () returned 0x3
[0266.600] GetThemeAppProperties () returned 0x3
[0266.600] IsThemePartDefined () returned 0x1
[0266.600] IsAppThemed () returned 0x1
[0266.600] GetThemeAppProperties () returned 0x3
[0266.600] GetThemeAppProperties () returned 0x3
[0266.600] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0266.600] IsAppThemed () returned 0x1
[0266.600] GetThemeAppProperties () returned 0x3
[0266.600] GetThemeAppProperties () returned 0x3
[0266.600] IsAppThemed () returned 0x1
[0266.600] GetThemeAppProperties () returned 0x3
[0266.600] GetThemeAppProperties () returned 0x3
[0266.600] IsThemePartDefined () returned 0x1
[0266.600] GdipCreateRegion (region=0x53e070) returned 0x0
[0266.600] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.601] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0266.601] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.601] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0266.601] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.601] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0266.601] LocalFree (hMem=0x89ee08) returned 0x0
[0266.601] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0266.601] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0266.601] LocalFree (hMem=0x89eac0) returned 0x0
[0266.601] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.601] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0266.601] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0266.601] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0266.601] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.601] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0266.601] GetCurrentObject (hdc=0x4c0107ce, type=0x1) returned 0xb00017
[0266.602] GetCurrentObject (hdc=0x4c0107ce, type=0x2) returned 0x900010
[0266.602] GetCurrentObject (hdc=0x4c0107ce, type=0x7) returned 0x1e0507b9
[0266.602] GetCurrentObject (hdc=0x4c0107ce, type=0x6) returned 0x8a01c2
[0266.602] SaveDC (hdc=0x4c0107ce) returned 1
[0266.602] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x604051e
[0266.602] GetClipRgn (hdc=0x4c0107ce, hrgn=0x604051e) returned 0
[0266.602] SelectClipRgn (hdc=0x4c0107ce, hrgn=0xd90407a1) returned 2
[0266.602] DeleteObject (ho=0x604051e) returned 1
[0266.602] DeleteObject (ho=0xd90407a1) returned 1
[0266.602] OffsetViewportOrgEx (in: hdc=0x4c0107ce, x=0, y=0, lppt=0x233fe84 | out: lppt=0x233fe84) returned 1
[0266.602] DrawThemeParentBackground () returned 0x0
[0266.602] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0266.602] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0266.603] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0266.603] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0266.603] GetSystemMetrics (nIndex=42) returned 0
[0266.603] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0266.603] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0266.603] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0266.603] GetCurrentObject (hdc=0x4c0107ce, type=0x1) returned 0xb00017
[0266.603] GetCurrentObject (hdc=0x4c0107ce, type=0x2) returned 0x900010
[0266.603] GetCurrentObject (hdc=0x4c0107ce, type=0x7) returned 0x1e0507b9
[0266.603] GetCurrentObject (hdc=0x4c0107ce, type=0x6) returned 0x8a01c2
[0266.603] SaveDC (hdc=0x4c0107ce) returned 2
[0266.603] GetNearestColor (hdc=0x4c0107ce, color=0xff) returned 0xff
[0266.603] CreateSolidBrush (color=0xff) returned 0xb110078d
[0266.603] FillRect (hDC=0x4c0107ce, lprc=0x53dad0, hbr=0xb110078d) returned 1
[0266.603] DeleteObject (ho=0xb110078d) returned 1
[0266.604] RestoreDC (hdc=0x4c0107ce, nSavedDC=-1) returned 1
[0266.604] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0266.604] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0266.604] GetSystemMetrics (nIndex=42) returned 0
[0266.604] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0266.604] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0266.604] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0266.604] GetCurrentObject (hdc=0x4c0107ce, type=0x1) returned 0xb00017
[0266.604] GetCurrentObject (hdc=0x4c0107ce, type=0x2) returned 0x900010
[0266.604] GetCurrentObject (hdc=0x4c0107ce, type=0x7) returned 0x1e0507b9
[0266.604] GetCurrentObject (hdc=0x4c0107ce, type=0x6) returned 0x8a01c2
[0266.604] SaveDC (hdc=0x4c0107ce) returned 2
[0266.604] GetNearestColor (hdc=0x4c0107ce, color=0xff) returned 0xff
[0266.604] CreateSolidBrush (color=0xff) returned 0xb210078d
[0266.604] FillRect (hDC=0x4c0107ce, lprc=0x53da70, hbr=0xb210078d) returned 1
[0266.605] DeleteObject (ho=0xb210078d) returned 1
[0266.605] RestoreDC (hdc=0x4c0107ce, nSavedDC=-1) returned 1
[0266.605] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0266.605] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0266.605] GetSystemMetrics (nIndex=42) returned 0
[0266.605] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0266.605] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0266.605] RestoreDC (hdc=0x4c0107ce, nSavedDC=-1) returned 1
[0266.605] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4c0107ce) returned 0x0
[0266.605] IsAppThemed () returned 0x1
[0266.605] GetThemeAppProperties () returned 0x3
[0266.605] GetThemeAppProperties () returned 0x3
[0266.605] IsAppThemed () returned 0x1
[0266.606] GetThemeAppProperties () returned 0x3
[0266.606] GetThemeAppProperties () returned 0x3
[0266.606] IsThemePartDefined () returned 0x1
[0266.606] GdipCreateRegion (region=0x53dff4) returned 0x0
[0266.606] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.606] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0266.606] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.606] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0266.606] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.606] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0266.606] LocalFree (hMem=0x89ee08) returned 0x0
[0266.606] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0266.606] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0266.606] LocalFree (hMem=0x89ec80) returned 0x0
[0266.606] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.606] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0266.606] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0266.606] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0266.607] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.607] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0266.607] GetCurrentObject (hdc=0x4c0107ce, type=0x1) returned 0xb00017
[0266.607] GetCurrentObject (hdc=0x4c0107ce, type=0x2) returned 0x900010
[0266.607] GetCurrentObject (hdc=0x4c0107ce, type=0x7) returned 0x1e0507b9
[0266.607] GetCurrentObject (hdc=0x4c0107ce, type=0x6) returned 0x8a01c2
[0266.607] SaveDC (hdc=0x4c0107ce) returned 1
[0266.607] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xda0407a1
[0266.607] GetClipRgn (hdc=0x4c0107ce, hrgn=0xda0407a1) returned 0
[0266.607] SelectClipRgn (hdc=0x4c0107ce, hrgn=0x804051e) returned 2
[0266.607] DeleteObject (ho=0xda0407a1) returned 1
[0266.607] DeleteObject (ho=0x804051e) returned 1
[0266.607] OffsetViewportOrgEx (in: hdc=0x4c0107ce, x=0, y=0, lppt=0x23406e8 | out: lppt=0x23406e8) returned 1
[0266.607] IsAppThemed () returned 0x1
[0266.608] GetThemeAppProperties () returned 0x3
[0266.608] GetThemeAppProperties () returned 0x3
[0266.608] DrawThemeBackground () returned 0x0
[0266.608] RestoreDC (hdc=0x4c0107ce, nSavedDC=-1) returned 1
[0266.608] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4c0107ce) returned 0x0
[0266.608] GdipCreateRegion (region=0x53dff8) returned 0x0
[0266.608] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.608] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0266.608] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.608] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0266.608] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0266.608] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0266.608] LocalFree (hMem=0x89eac0) returned 0x0
[0266.608] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0266.608] LocalFree (hMem=0x89ec80) returned 0x0
[0266.609] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.609] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0266.609] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0266.609] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0266.609] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.609] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0266.609] GetCurrentObject (hdc=0x4c0107ce, type=0x1) returned 0xb00017
[0266.609] GetCurrentObject (hdc=0x4c0107ce, type=0x2) returned 0x900010
[0266.609] GetCurrentObject (hdc=0x4c0107ce, type=0x7) returned 0x1e0507b9
[0266.609] GetCurrentObject (hdc=0x4c0107ce, type=0x6) returned 0x8a01c2
[0266.609] SaveDC (hdc=0x4c0107ce) returned 1
[0266.609] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x904051e
[0266.609] GetClipRgn (hdc=0x4c0107ce, hrgn=0x904051e) returned 0
[0266.609] SelectClipRgn (hdc=0x4c0107ce, hrgn=0xdb0407a1) returned 2
[0266.609] DeleteObject (ho=0x904051e) returned 1
[0266.609] DeleteObject (ho=0xdb0407a1) returned 1
[0266.609] OffsetViewportOrgEx (in: hdc=0x4c0107ce, x=0, y=0, lppt=0x23409bc | out: lppt=0x23409bc) returned 1
[0266.609] IsAppThemed () returned 0x1
[0266.610] GetThemeAppProperties () returned 0x3
[0266.610] GetThemeAppProperties () returned 0x3
[0266.610] GetThemeBackgroundContentRect () returned 0x0
[0266.610] RestoreDC (hdc=0x4c0107ce, nSavedDC=-1) returned 1
[0266.610] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4c0107ce) returned 0x0
[0266.610] IsAppThemed () returned 0x1
[0266.610] GetThemeAppProperties () returned 0x3
[0266.610] GetThemeAppProperties () returned 0x3
[0266.610] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0266.610] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0266.610] GetCurrentObject (hdc=0x4c0107ce, type=0x1) returned 0xb00017
[0266.610] GetCurrentObject (hdc=0x4c0107ce, type=0x2) returned 0x900010
[0266.610] GetCurrentObject (hdc=0x4c0107ce, type=0x7) returned 0x1e0507b9
[0266.610] GetCurrentObject (hdc=0x4c0107ce, type=0x6) returned 0x8a01c2
[0266.610] SaveDC (hdc=0x4c0107ce) returned 1
[0266.610] GetTextAlign (hdc=0x4c0107ce) returned 0x0
[0266.610] GetTextColor (hdc=0x4c0107ce) returned 0x0
[0266.610] GetCurrentObject (hdc=0x4c0107ce, type=0x6) returned 0x8a01c2
[0266.611] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0266.611] SelectObject (hdc=0x4c0107ce, h=0x450a0799) returned 0x8a01c2
[0266.611] GetBkMode (hdc=0x4c0107ce) returned 2
[0266.611] SetBkMode (hdc=0x4c0107ce, mode=1) returned 2
[0266.611] DrawTextExW (in: hdc=0x4c0107ce, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x2340d5c | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0266.611] DrawTextExW (in: hdc=0x4c0107ce, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x2340d5c | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0266.612] RestoreDC (hdc=0x4c0107ce, nSavedDC=-1) returned 1
[0266.612] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4c0107ce) returned 0x0
[0266.612] GetFocus () returned 0x1201e2
[0266.612] IsAppThemed () returned 0x1
[0266.612] GetThemeAppProperties () returned 0x3
[0266.612] GetThemeAppProperties () returned 0x3
[0266.612] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0266.612] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x4c0107ce, x1=0, y1=0, rop=0xcc0020) returned 1
[0266.612] GdipReleaseDC (graphics=0x5d92c30, hdc=0x4c0107ce) returned 0x0
[0266.612] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0266.612] SelectObject (hdc=0x4c0107ce, h=0x85000f) returned 0x1e0507b9
[0266.612] DeleteDC (hdc=0x4c0107ce) returned 1
[0266.612] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0266.612] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0266.613] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.613] IsWindowUnicode (hWnd=0x120122) returned 1
[0266.613] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.613] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.613] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.613] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.613] IsWindowUnicode (hWnd=0x120122) returned 1
[0266.613] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.613] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.613] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.613] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x2a1, wParam=0x0, lParam=0xa0027) returned 0x0
[0266.613] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0266.613] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0266.614] WaitMessage () returned 1
[0266.620] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0266.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0266.621] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0266.621] WaitMessage () returned 1
[0266.622] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0266.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0266.622] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0266.622] WaitMessage () returned 1
[0266.623] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0266.623] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0266.623] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0266.623] WaitMessage () returned 1
[0266.667] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.667] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x84, wParam=0x0, lParam=0x1930368) returned 0x1
[0266.667] IsWindowUnicode (hWnd=0x120122) returned 1
[0266.667] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.667] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x84, wParam=0x0, lParam=0x1930368) returned 0x1
[0266.667] GetDlgItem (hDlg=0x2f013e, nIDDlgItem=0) returned 0x0
[0266.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x210, wParam=0x201, lParam=0x160149) returned 0x0
[0266.667] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x21, wParam=0x2f013e, lParam=0x2010001) returned 0x1
[0266.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x21, wParam=0x2f013e, lParam=0x2010001) returned 0x1
[0266.668] SetCursor (hCursor=0x10003) returned 0x10003
[0266.668] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.668] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.668] GetKeyState (nVirtKey=1) returned -127
[0266.668] GetKeyState (nVirtKey=2) returned 0
[0266.668] GetKeyState (nVirtKey=4) returned 0
[0266.668] GetKeyState (nVirtKey=5) returned 0
[0266.668] GetKeyState (nVirtKey=6) returned 0
[0266.668] IsWindowVisible (hWnd=0x120122) returned 1
[0266.668] IsWindowEnabled (hWnd=0x120122) returned 1
[0266.668] SetFocus (hWnd=0x120122) returned 0x1201e2
[0266.669] GetFocus () returned 0x120122
[0266.669] IsChild (hWndParent=0x2f013e, hWnd=0x120122) returned 1
[0266.669] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x8, wParam=0x120122, lParam=0x0) returned 0x1
[0266.669] SendMessageW (hWnd=0x1201e2, Msg=0x2111, wParam=0x20001e2, lParam=0x1201e2) returned 0x0
[0266.671] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0266.672] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0266.673] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0266.673] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0266.673] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0266.673] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0266.676] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0266.676] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x7, wParam=0x1201e2, lParam=0x0) returned 0x0
[0266.676] GetStockObject (i=5) returned 0x900015
[0266.676] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0266.676] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0xd, wParam=0x3, lParam=0x89e7e8) returned 0x2
[0266.676] GetDlgItem (hDlg=0x2f013e, nIDDlgItem=1179938) returned 0x120122
[0266.676] SendMessageW (hWnd=0x120122, Msg=0x202b, wParam=0x120122, lParam=0x53de74) returned 0x0
[0266.676] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x202b, wParam=0x120122, lParam=0x53de74) returned 0x0
[0266.676] InvalidateRect (hWnd=0x120122, lpRect=0x0, bErase=0) returned 1
[0266.683] GetFocus () returned 0x120122
[0266.683] GetFocus () returned 0x120122
[0266.683] GetFocus () returned 0x120122
[0266.684] GetKeyState (nVirtKey=1) returned -127
[0266.684] GetKeyState (nVirtKey=2) returned 0
[0266.684] GetKeyState (nVirtKey=4) returned 0
[0266.684] GetKeyState (nVirtKey=5) returned 0
[0266.684] GetKeyState (nVirtKey=6) returned 0
[0266.684] GetCapture () returned 0x0
[0266.684] SetCapture (hWnd=0x120122) returned 0x0
[0266.684] GetKeyState (nVirtKey=1) returned -127
[0266.684] GetKeyState (nVirtKey=2) returned 0
[0266.684] GetKeyState (nVirtKey=4) returned 0
[0266.684] GetKeyState (nVirtKey=5) returned 0
[0266.684] GetKeyState (nVirtKey=6) returned 0
[0266.684] NotifyWinEvent (event=0x800a, hwnd=0x120122, idObject=-4, idChild=0)
[0266.684] InvalidateRect (hWnd=0x120122, lpRect=0x53e4c8, bErase=0) returned 1
[0266.684] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.684] IsWindowUnicode (hWnd=0x120122) returned 1
[0266.684] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0266.685] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0266.685] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0266.685] MapWindowPoints (in: hWndFrom=0x120122, hWndTo=0x0, lpPoints=0x2340f88, cPoints=0x1 | out: lpPoints=0x2340f88) returned 25756481
[0266.685] NotifyWinEvent (event=0x800a, hwnd=0x120122, idObject=-4, idChild=0)
[0266.685] InvalidateRect (hWnd=0x120122, lpRect=0x53e468, bErase=0) returned 1
[0266.685] UpdateWindow (hWnd=0x120122) returned 1
[0266.685] BeginPaint (in: hWnd=0x120122, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0xf0105ee
[0266.685] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0266.685] CreateCompatibleDC (hdc=0xf0105ee) returned 0xae0107b1
[0266.685] SelectObject (hdc=0xae0107b1, h=0x1e0507b9) returned 0x85000f
[0266.685] GdipCreateFromHDC (hdc=0xae0107b1, graphics=0x53df98) returned 0x0
[0266.686] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0266.686] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0266.686] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0266.686] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.686] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0266.686] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0266.686] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0266.686] LocalFree (hMem=0x89eac0) returned 0x0
[0266.686] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.686] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0266.686] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.686] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0266.686] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0266.686] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb430dbd) returned 0x0
[0266.686] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.686] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0266.687] GetCurrentObject (hdc=0xae0107b1, type=0x1) returned 0xb00017
[0266.687] GetCurrentObject (hdc=0xae0107b1, type=0x2) returned 0x900010
[0266.687] GetCurrentObject (hdc=0xae0107b1, type=0x7) returned 0x1e0507b9
[0266.687] GetCurrentObject (hdc=0xae0107b1, type=0x6) returned 0x8a01c2
[0266.687] SaveDC (hdc=0xae0107b1) returned 1
[0266.687] GetNearestColor (hdc=0xae0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0266.687] GetNearestColor (hdc=0xae0107b1, color=0xa0a0a0) returned 0xa0a0a0
[0266.687] GetNearestColor (hdc=0xae0107b1, color=0x696969) returned 0x696969
[0266.687] GetNearestColor (hdc=0xae0107b1, color=0xa0a0a0) returned 0xa0a0a0
[0266.687] GetNearestColor (hdc=0xae0107b1, color=0x0) returned 0x0
[0266.687] GetNearestColor (hdc=0xae0107b1, color=0xffffff) returned 0xffffff
[0266.687] GetNearestColor (hdc=0xae0107b1, color=0xe5e5e5) returned 0xe5e5e5
[0266.687] GetNearestColor (hdc=0xae0107b1, color=0xd7d7d7) returned 0xd7d7d7
[0266.688] GetNearestColor (hdc=0xae0107b1, color=0x0) returned 0x0
[0266.688] RestoreDC (hdc=0xae0107b1, nSavedDC=-1) returned 1
[0266.688] GdipReleaseDC (graphics=0x5d92c30, hdc=0xae0107b1) returned 0x0
[0266.688] IsAppThemed () returned 0x1
[0266.688] GetThemeAppProperties () returned 0x3
[0266.688] GetThemeAppProperties () returned 0x3
[0266.688] IsAppThemed () returned 0x1
[0266.688] GetThemeAppProperties () returned 0x3
[0266.688] GetThemeAppProperties () returned 0x3
[0266.688] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0266.688] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x23416fc | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0266.689] IsAppThemed () returned 0x1
[0266.689] GetThemeAppProperties () returned 0x3
[0266.689] GetThemeAppProperties () returned 0x3
[0266.689] IsAppThemed () returned 0x1
[0266.689] GetThemeAppProperties () returned 0x3
[0266.689] GetThemeAppProperties () returned 0x3
[0266.689] IsAppThemed () returned 0x1
[0266.689] GetThemeAppProperties () returned 0x3
[0266.689] GetThemeAppProperties () returned 0x3
[0266.689] IsAppThemed () returned 0x1
[0266.689] GetThemeAppProperties () returned 0x3
[0266.689] GetThemeAppProperties () returned 0x3
[0266.689] IsThemePartDefined () returned 0x1
[0266.689] IsAppThemed () returned 0x1
[0266.689] GetThemeAppProperties () returned 0x3
[0266.689] GetThemeAppProperties () returned 0x3
[0266.689] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0266.689] IsAppThemed () returned 0x1
[0266.690] GetThemeAppProperties () returned 0x3
[0266.690] GetThemeAppProperties () returned 0x3
[0266.690] IsAppThemed () returned 0x1
[0266.690] GetThemeAppProperties () returned 0x3
[0266.690] GetThemeAppProperties () returned 0x3
[0266.690] IsThemePartDefined () returned 0x1
[0266.690] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0266.690] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.690] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0266.690] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.690] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0266.690] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0266.690] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0266.690] LocalFree (hMem=0x89ec80) returned 0x0
[0266.690] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.690] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0266.690] LocalFree (hMem=0x89ee08) returned 0x0
[0266.690] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.690] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0266.691] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0266.691] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0266.691] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.691] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0266.691] GetCurrentObject (hdc=0xae0107b1, type=0x1) returned 0xb00017
[0266.691] GetCurrentObject (hdc=0xae0107b1, type=0x2) returned 0x900010
[0266.691] GetCurrentObject (hdc=0xae0107b1, type=0x7) returned 0x1e0507b9
[0266.691] GetCurrentObject (hdc=0xae0107b1, type=0x6) returned 0x8a01c2
[0266.691] SaveDC (hdc=0xae0107b1) returned 1
[0266.691] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdc0407a1
[0266.691] GetClipRgn (hdc=0xae0107b1, hrgn=0xdc0407a1) returned 0
[0266.691] SelectClipRgn (hdc=0xae0107b1, hrgn=0xd04051e) returned 2
[0266.691] DeleteObject (ho=0xdc0407a1) returned 1
[0266.691] DeleteObject (ho=0xd04051e) returned 1
[0266.691] OffsetViewportOrgEx (in: hdc=0xae0107b1, x=0, y=0, lppt=0x2341dac | out: lppt=0x2341dac) returned 1
[0266.692] DrawThemeParentBackground () returned 0x0
[0266.692] GetWindowPlacement (in: hWnd=0x2f013e, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0266.692] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0266.692] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.692] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.692] GetSystemMetrics (nIndex=42) returned 0
[0266.692] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.692] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0266.692] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0266.692] GetCurrentObject (hdc=0xae0107b1, type=0x1) returned 0xb00017
[0266.692] GetCurrentObject (hdc=0xae0107b1, type=0x2) returned 0x900010
[0266.692] GetCurrentObject (hdc=0xae0107b1, type=0x7) returned 0x1e0507b9
[0266.692] GetCurrentObject (hdc=0xae0107b1, type=0x6) returned 0x8a01c2
[0266.692] SaveDC (hdc=0xae0107b1) returned 2
[0266.693] GetNearestColor (hdc=0xae0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0266.693] CreateSolidBrush (color=0xf0f0f0) returned 0xb310078d
[0266.693] FillRect (hDC=0xae0107b1, lprc=0x53d760, hbr=0xb310078d) returned 1
[0266.693] DeleteObject (ho=0xb310078d) returned 1
[0266.693] RestoreDC (hdc=0xae0107b1, nSavedDC=-1) returned 1
[0266.699] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.699] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.699] GetSystemMetrics (nIndex=42) returned 0
[0266.699] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.699] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0266.699] GetClientRect (in: hWnd=0x2f013e, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0266.699] GetCurrentObject (hdc=0xae0107b1, type=0x1) returned 0xb00017
[0266.699] GetCurrentObject (hdc=0xae0107b1, type=0x2) returned 0x900010
[0266.699] GetCurrentObject (hdc=0xae0107b1, type=0x7) returned 0x1e0507b9
[0266.699] GetCurrentObject (hdc=0xae0107b1, type=0x6) returned 0x8a01c2
[0266.699] SaveDC (hdc=0xae0107b1) returned 2
[0266.699] GetNearestColor (hdc=0xae0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0266.699] CreateSolidBrush (color=0xf0f0f0) returned 0xb410078d
[0266.700] FillRect (hDC=0xae0107b1, lprc=0x53d700, hbr=0xb410078d) returned 1
[0266.700] DeleteObject (ho=0xb410078d) returned 1
[0266.700] RestoreDC (hdc=0xae0107b1, nSavedDC=-1) returned 1
[0266.700] GetWindowTextLengthW (hWnd=0x2f013e) returned 10
[0266.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0266.700] GetSystemMetrics (nIndex=42) returned 0
[0266.700] GetWindowTextW (in: hWnd=0x2f013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0266.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0266.700] RestoreDC (hdc=0xae0107b1, nSavedDC=-1) returned 1
[0266.700] GdipReleaseDC (graphics=0x5d92c30, hdc=0xae0107b1) returned 0x0
[0266.700] IsAppThemed () returned 0x1
[0266.701] GetThemeAppProperties () returned 0x3
[0266.701] GetThemeAppProperties () returned 0x3
[0266.701] IsAppThemed () returned 0x1
[0266.701] GetThemeAppProperties () returned 0x3
[0266.701] GetThemeAppProperties () returned 0x3
[0266.701] IsThemePartDefined () returned 0x1
[0266.701] GdipCreateRegion (region=0x53dc80) returned 0x0
[0266.701] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.701] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0266.701] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.701] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0266.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.701] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0266.701] LocalFree (hMem=0x89ee08) returned 0x0
[0266.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.701] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0266.701] LocalFree (hMem=0x89ee08) returned 0x0
[0266.701] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.702] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0266.702] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0266.702] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0266.702] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.702] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0266.702] GetCurrentObject (hdc=0xae0107b1, type=0x1) returned 0xb00017
[0266.702] GetCurrentObject (hdc=0xae0107b1, type=0x2) returned 0x900010
[0266.702] GetCurrentObject (hdc=0xae0107b1, type=0x7) returned 0x1e0507b9
[0266.702] GetCurrentObject (hdc=0xae0107b1, type=0x6) returned 0x8a01c2
[0266.702] SaveDC (hdc=0xae0107b1) returned 1
[0266.702] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe04051e
[0266.702] GetClipRgn (hdc=0xae0107b1, hrgn=0xe04051e) returned 0
[0266.702] SelectClipRgn (hdc=0xae0107b1, hrgn=0xde0407a1) returned 2
[0266.702] DeleteObject (ho=0xe04051e) returned 1
[0266.703] DeleteObject (ho=0xde0407a1) returned 1
[0266.703] OffsetViewportOrgEx (in: hdc=0xae0107b1, x=0, y=0, lppt=0x2342634 | out: lppt=0x2342634) returned 1
[0266.703] IsAppThemed () returned 0x1
[0266.703] GetThemeAppProperties () returned 0x3
[0266.703] GetThemeAppProperties () returned 0x3
[0266.703] DrawThemeBackground () returned 0x0
[0266.703] RestoreDC (hdc=0xae0107b1, nSavedDC=-1) returned 1
[0266.703] GdipReleaseDC (graphics=0x5d92c30, hdc=0xae0107b1) returned 0x0
[0266.703] GdipCreateRegion (region=0x53dc84) returned 0x0
[0266.703] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.703] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0266.703] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.703] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0266.703] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.703] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0266.703] LocalFree (hMem=0x89ee08) returned 0x0
[0266.704] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.704] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0266.704] LocalFree (hMem=0x89ee08) returned 0x0
[0266.704] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.704] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0266.704] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0266.704] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0266.704] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.704] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0266.704] GetCurrentObject (hdc=0xae0107b1, type=0x1) returned 0xb00017
[0266.704] GetCurrentObject (hdc=0xae0107b1, type=0x2) returned 0x900010
[0266.704] GetCurrentObject (hdc=0xae0107b1, type=0x7) returned 0x1e0507b9
[0266.704] GetCurrentObject (hdc=0xae0107b1, type=0x6) returned 0x8a01c2
[0266.704] SaveDC (hdc=0xae0107b1) returned 1
[0266.704] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdf0407a1
[0266.704] GetClipRgn (hdc=0xae0107b1, hrgn=0xdf0407a1) returned 0
[0266.705] SelectClipRgn (hdc=0xae0107b1, hrgn=0xf04051e) returned 2
[0266.705] DeleteObject (ho=0xdf0407a1) returned 1
[0266.705] DeleteObject (ho=0xf04051e) returned 1
[0266.705] OffsetViewportOrgEx (in: hdc=0xae0107b1, x=0, y=0, lppt=0x2342908 | out: lppt=0x2342908) returned 1
[0266.705] IsAppThemed () returned 0x1
[0266.705] GetThemeAppProperties () returned 0x3
[0266.705] GetThemeAppProperties () returned 0x3
[0266.705] GetThemeBackgroundContentRect () returned 0x0
[0266.705] RestoreDC (hdc=0xae0107b1, nSavedDC=-1) returned 1
[0266.705] GdipReleaseDC (graphics=0x5d92c30, hdc=0xae0107b1) returned 0x0
[0266.705] IsAppThemed () returned 0x1
[0266.705] GetThemeAppProperties () returned 0x3
[0266.705] GetThemeAppProperties () returned 0x3
[0266.705] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0266.705] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0266.705] GetCurrentObject (hdc=0xae0107b1, type=0x1) returned 0xb00017
[0266.705] GetCurrentObject (hdc=0xae0107b1, type=0x2) returned 0x900010
[0266.706] GetCurrentObject (hdc=0xae0107b1, type=0x7) returned 0x1e0507b9
[0266.706] GetCurrentObject (hdc=0xae0107b1, type=0x6) returned 0x8a01c2
[0266.706] SaveDC (hdc=0xae0107b1) returned 1
[0266.706] GetTextAlign (hdc=0xae0107b1) returned 0x0
[0266.706] GetTextColor (hdc=0xae0107b1) returned 0x0
[0266.706] GetCurrentObject (hdc=0xae0107b1, type=0x6) returned 0x8a01c2
[0266.706] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0266.706] SelectObject (hdc=0xae0107b1, h=0x730a066d) returned 0x8a01c2
[0266.706] GetBkMode (hdc=0xae0107b1) returned 2
[0266.706] SetBkMode (hdc=0xae0107b1, mode=1) returned 2
[0266.706] DrawTextExW (in: hdc=0xae0107b1, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x2342ca8 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0266.707] DrawTextExW (in: hdc=0xae0107b1, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x2342ca8 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0266.707] RestoreDC (hdc=0xae0107b1, nSavedDC=-1) returned 1
[0266.707] GdipReleaseDC (graphics=0x5d92c30, hdc=0xae0107b1) returned 0x0
[0266.707] GetFocus () returned 0x120122
[0266.707] IsAppThemed () returned 0x1
[0266.707] GetThemeAppProperties () returned 0x3
[0266.707] GetThemeAppProperties () returned 0x3
[0266.707] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0266.707] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xae0107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0266.708] GdipReleaseDC (graphics=0x5d92c30, hdc=0xae0107b1) returned 0x0
[0266.708] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0266.708] SelectObject (hdc=0xae0107b1, h=0x85000f) returned 0x1e0507b9
[0266.708] DeleteDC (hdc=0xae0107b1) returned 1
[0266.708] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0266.708] EndPaint (hWnd=0x120122, lpPaint=0x53df7c) returned 1
[0266.708] MapWindowPoints (in: hWndFrom=0x120122, hWndTo=0x0, lpPoints=0x2342da4, cPoints=0x1 | out: lpPoints=0x2342da4) returned 25756481
[0266.708] WindowFromPoint (Point=0x368) returned 0x120122
[0266.708] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x84, wParam=0x0, lParam=0x1930368) returned 0x1
[0266.717] NotifyWinEvent (event=0x800a, hwnd=0x120122, idObject=-4, idChild=0)
[0266.717] NotifyWinEvent (event=0x800c, hwnd=0x120122, idObject=-4, idChild=0)
[0266.717] GetWindowTextLengthW (hWnd=0x1201e2) returned 0
[0266.717] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0266.717] GetSystemMetrics (nIndex=42) returned 0
[0266.718] GetWindowTextW (in: hWnd=0x1201e2, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0266.718] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0266.718] SendMessageW (hWnd=0x2f013e, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0266.718] GetCapture () returned 0x120122
[0266.718] ReleaseCapture () returned 1
[0266.718] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0266.718] PeekMessageW (lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0)
[0266.719] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x84, wParam=0x0, lParam=0x1930368) returned 0x1
[0266.720] IsWindow (hWnd=0x70036) returned 1
[0266.720] EnableWindow (hWnd=0x70036, bEnable=1)
[0266.721] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0266.721] IsWindow (hWnd=0x70036) returned 1
[0266.721] SetActiveWindow (hWnd=0x70036)
[0266.721] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x86, wParam=0x0, lParam=0x70036)
[0266.723] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0266.723] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0266.724] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0266.785] IsChild (hWndParent=0x2f013e, hWnd=0x202c6) returned 0
[0266.785] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x120122, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0266.785] GetCapture () returned 0x0
[0266.785] InvalidateRect (hWnd=0x120122, lpRect=0x0, bErase=0) returned 1
[0266.807] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0266.807] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0266.807] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0266.813] IsChild (hWndParent=0x2f013e, hWnd=0x202c6) returned 0
[0266.813] ShowWindow (hWnd=0x2f013e, nCmdShow=0)
[0266.813] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0266.824] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2f013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0266.824] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1201e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0266.825] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1500ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0266.826] GetWindowTextLengthW (hWnd=0xf004e)
[0266.826] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0266.826] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0xf004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0266.839] GetProcessWindowStation () returned 0x13c
[0266.839] GetActiveWindow () returned 0x70036
[0266.840] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0266.840] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0266.840] GetCurrentThreadId () returned 0x11d0
[0266.840] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf5856, lParam=0x0) returned 1
[0266.840] IsWindowVisible (hWnd=0x70036) returned 1
[0266.840] IsWindowEnabled (hWnd=0x70036) returned 1
[0266.840] IsWindowVisible (hWnd=0x602b6) returned 0
[0266.840] IsWindowVisible (hWnd=0x901f8) returned 0
[0266.840] IsWindowVisible (hWnd=0x202d0) returned 0
[0266.840] IsWindowVisible (hWnd=0x202d4) returned 0
[0266.841] GetActiveWindow () returned 0x70036
[0266.841] GetFocus () returned 0x202c6
[0266.841] IsWindow (hWnd=0x70036) returned 1
[0266.841] EnableWindow (hWnd=0x70036, bEnable=0)
[0266.841] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0266.842] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0266.843] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0266.874] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0xf0105ee
[0266.874] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0266.874] CreateCompatibleDC (hdc=0xf0105ee) returned 0xc50107b1
[0266.874] SelectObject (hdc=0xc50107b1, h=0x1e0507b9) returned 0x85000f
[0266.874] GdipCreateFromHDC (hdc=0xc50107b1, graphics=0x53e108) returned 0x0
[0266.874] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0266.874] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0266.874] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0266.874] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.874] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0266.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0266.875] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0266.875] LocalFree (hMem=0x89eac0) returned 0x0
[0266.875] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.875] GdipCreateRegion (region=0x53e150) returned 0x0
[0266.875] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.875] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0266.875] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0266.875] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb410dbd) returned 0x0
[0266.875] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.875] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0266.875] GetCurrentObject (hdc=0xc50107b1, type=0x1) returned 0xb00017
[0266.875] GetCurrentObject (hdc=0xc50107b1, type=0x2) returned 0x900010
[0266.875] GetCurrentObject (hdc=0xc50107b1, type=0x7) returned 0x1e0507b9
[0266.875] GetCurrentObject (hdc=0xc50107b1, type=0x6) returned 0x8a01c2
[0266.875] SaveDC (hdc=0xc50107b1) returned 1
[0266.876] GetNearestColor (hdc=0xc50107b1, color=0xff) returned 0xff
[0266.876] GetNearestColor (hdc=0xc50107b1, color=0x55) returned 0x55
[0266.876] GetNearestColor (hdc=0xc50107b1, color=0x0) returned 0x0
[0266.876] GetNearestColor (hdc=0xc50107b1, color=0x55) returned 0x55
[0266.876] GetNearestColor (hdc=0xc50107b1, color=0x0) returned 0x0
[0266.876] GetNearestColor (hdc=0xc50107b1, color=0x8080ff) returned 0x8080ff
[0266.876] GetNearestColor (hdc=0xc50107b1, color=0x7373e5) returned 0x7373e5
[0266.876] GetNearestColor (hdc=0xc50107b1, color=0xe5) returned 0xe5
[0266.876] GetNearestColor (hdc=0xc50107b1, color=0x0) returned 0x0
[0266.876] RestoreDC (hdc=0xc50107b1, nSavedDC=-1) returned 1
[0266.876] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107b1) returned 0x0
[0266.876] IsAppThemed () returned 0x1
[0266.876] GetThemeAppProperties () returned 0x3
[0266.876] GetThemeAppProperties () returned 0x3
[0266.876] IsAppThemed () returned 0x1
[0266.876] GetThemeAppProperties () returned 0x3
[0266.876] GetThemeAppProperties () returned 0x3
[0266.877] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0266.877] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x234409c | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0266.877] IsAppThemed () returned 0x1
[0266.877] GetThemeAppProperties () returned 0x3
[0266.877] GetThemeAppProperties () returned 0x3
[0266.877] IsAppThemed () returned 0x1
[0266.877] GetThemeAppProperties () returned 0x3
[0266.877] GetThemeAppProperties () returned 0x3
[0266.877] GetFocus () returned 0xe02ca
[0266.877] IsAppThemed () returned 0x1
[0266.877] GetThemeAppProperties () returned 0x3
[0266.877] GetThemeAppProperties () returned 0x3
[0266.877] IsAppThemed () returned 0x1
[0266.877] GetThemeAppProperties () returned 0x3
[0266.877] GetThemeAppProperties () returned 0x3
[0266.877] IsThemePartDefined () returned 0x1
[0266.877] IsAppThemed () returned 0x1
[0266.877] GetThemeAppProperties () returned 0x3
[0266.877] GetThemeAppProperties () returned 0x3
[0266.878] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0266.878] IsAppThemed () returned 0x1
[0266.878] GetThemeAppProperties () returned 0x3
[0266.878] GetThemeAppProperties () returned 0x3
[0266.878] IsAppThemed () returned 0x1
[0266.878] GetThemeAppProperties () returned 0x3
[0266.878] GetThemeAppProperties () returned 0x3
[0266.878] IsThemePartDefined () returned 0x1
[0266.878] GdipCreateRegion (region=0x53de78) returned 0x0
[0266.878] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.878] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0266.878] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.878] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0266.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0266.878] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0266.878] LocalFree (hMem=0x89ee08) returned 0x0
[0266.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0266.878] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0266.878] LocalFree (hMem=0x89eac0) returned 0x0
[0266.878] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.878] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0266.878] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0266.878] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0266.878] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.878] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0266.879] GetCurrentObject (hdc=0xc50107b1, type=0x1) returned 0xb00017
[0266.879] GetCurrentObject (hdc=0xc50107b1, type=0x2) returned 0x900010
[0266.879] GetCurrentObject (hdc=0xc50107b1, type=0x7) returned 0x1e0507b9
[0266.879] GetCurrentObject (hdc=0xc50107b1, type=0x6) returned 0x8a01c2
[0266.879] SaveDC (hdc=0xc50107b1) returned 1
[0266.879] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1004051e
[0266.879] GetClipRgn (hdc=0xc50107b1, hrgn=0x1004051e) returned 0
[0266.879] SelectClipRgn (hdc=0xc50107b1, hrgn=0xe50407a1) returned 2
[0266.879] DeleteObject (ho=0x1004051e) returned 1
[0266.879] DeleteObject (ho=0xe50407a1) returned 1
[0266.879] OffsetViewportOrgEx (in: hdc=0xc50107b1, x=0, y=0, lppt=0x234474c | out: lppt=0x234474c) returned 1
[0266.879] DrawThemeParentBackground () returned 0x0
[0266.879] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0266.879] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0266.879] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0266.879] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0266.879] GetSystemMetrics (nIndex=42) returned 0
[0266.879] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0266.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0266.880] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0266.880] GetCurrentObject (hdc=0xc50107b1, type=0x1) returned 0xb00017
[0266.880] GetCurrentObject (hdc=0xc50107b1, type=0x2) returned 0x900010
[0266.880] GetCurrentObject (hdc=0xc50107b1, type=0x7) returned 0x1e0507b9
[0266.880] GetCurrentObject (hdc=0xc50107b1, type=0x6) returned 0x8a01c2
[0266.880] SaveDC (hdc=0xc50107b1) returned 2
[0266.880] GetNearestColor (hdc=0xc50107b1, color=0xff) returned 0xff
[0266.880] CreateSolidBrush (color=0xff) returned 0xb510078d
[0266.880] FillRect (hDC=0xc50107b1, lprc=0x53d8d8, hbr=0xb510078d) returned 1
[0266.880] DeleteObject (ho=0xb510078d) returned 1
[0266.880] RestoreDC (hdc=0xc50107b1, nSavedDC=-1) returned 1
[0266.880] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0266.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0266.880] GetSystemMetrics (nIndex=42) returned 0
[0266.880] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0266.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0266.880] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0266.880] GetCurrentObject (hdc=0xc50107b1, type=0x1) returned 0xb00017
[0266.880] GetCurrentObject (hdc=0xc50107b1, type=0x2) returned 0x900010
[0266.881] GetCurrentObject (hdc=0xc50107b1, type=0x7) returned 0x1e0507b9
[0266.881] GetCurrentObject (hdc=0xc50107b1, type=0x6) returned 0x8a01c2
[0266.881] SaveDC (hdc=0xc50107b1) returned 2
[0266.881] GetNearestColor (hdc=0xc50107b1, color=0xff) returned 0xff
[0266.881] CreateSolidBrush (color=0xff) returned 0xb610078d
[0266.881] FillRect (hDC=0xc50107b1, lprc=0x53d878, hbr=0xb610078d) returned 1
[0266.881] DeleteObject (ho=0xb610078d) returned 1
[0266.881] RestoreDC (hdc=0xc50107b1, nSavedDC=-1) returned 1
[0266.881] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0266.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0266.881] GetSystemMetrics (nIndex=42) returned 0
[0266.881] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0266.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0266.882] RestoreDC (hdc=0xc50107b1, nSavedDC=-1) returned 1
[0266.882] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107b1) returned 0x0
[0266.882] IsAppThemed () returned 0x1
[0266.882] GetThemeAppProperties () returned 0x3
[0266.882] GetThemeAppProperties () returned 0x3
[0266.882] IsAppThemed () returned 0x1
[0266.882] GetThemeAppProperties () returned 0x3
[0266.882] GetThemeAppProperties () returned 0x3
[0266.883] IsThemePartDefined () returned 0x1
[0266.883] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0266.883] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.883] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0266.883] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0266.883] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0266.883] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0266.884] LocalFree (hMem=0x89ee08) returned 0x0
[0266.884] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0266.885] LocalFree (hMem=0x89eac0) returned 0x0
[0266.885] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0266.885] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0266.885] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0266.885] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0266.885] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.885] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0266.885] GetCurrentObject (hdc=0xc50107b1, type=0x1) returned 0xb00017
[0266.885] GetCurrentObject (hdc=0xc50107b1, type=0x2) returned 0x900010
[0266.885] GetCurrentObject (hdc=0xc50107b1, type=0x7) returned 0x1e0507b9
[0266.885] GetCurrentObject (hdc=0xc50107b1, type=0x6) returned 0x8a01c2
[0266.885] SaveDC (hdc=0xc50107b1) returned 1
[0266.885] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe60407a1
[0266.885] GetClipRgn (hdc=0xc50107b1, hrgn=0xe60407a1) returned 0
[0266.885] SelectClipRgn (hdc=0xc50107b1, hrgn=0x1204051e) returned 2
[0266.885] DeleteObject (ho=0xe60407a1) returned 1
[0266.885] DeleteObject (ho=0x1204051e) returned 1
[0266.885] OffsetViewportOrgEx (in: hdc=0xc50107b1, x=0, y=0, lppt=0x2344fb0 | out: lppt=0x2344fb0) returned 1
[0266.886] IsAppThemed () returned 0x1
[0266.886] GetThemeAppProperties () returned 0x3
[0266.886] GetThemeAppProperties () returned 0x3
[0266.886] DrawThemeBackground () returned 0x0
[0266.886] RestoreDC (hdc=0xc50107b1, nSavedDC=-1) returned 1
[0266.886] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107b1) returned 0x0
[0266.886] GdipCreateRegion (region=0x53de00) returned 0x0
[0266.886] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0266.886] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0266.886] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0266.886] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0266.886] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0266.886] LocalFree (hMem=0x89eac0) returned 0x0
[0266.886] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0266.886] LocalFree (hMem=0x89eac0) returned 0x0
[0266.886] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0266.886] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0266.886] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0266.887] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0266.887] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0266.887] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0266.887] GetCurrentObject (hdc=0xc50107b1, type=0x1) returned 0xb00017
[0266.887] GetCurrentObject (hdc=0xc50107b1, type=0x2) returned 0x900010
[0266.887] GetCurrentObject (hdc=0xc50107b1, type=0x7) returned 0x1e0507b9
[0266.887] GetCurrentObject (hdc=0xc50107b1, type=0x6) returned 0x8a01c2
[0266.887] SaveDC (hdc=0xc50107b1) returned 1
[0266.887] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1304051e
[0266.887] GetClipRgn (hdc=0xc50107b1, hrgn=0x1304051e) returned 0
[0266.887] SelectClipRgn (hdc=0xc50107b1, hrgn=0xe70407a1) returned 2
[0266.887] DeleteObject (ho=0x1304051e) returned 1
[0266.887] DeleteObject (ho=0xe70407a1) returned 1
[0266.887] OffsetViewportOrgEx (in: hdc=0xc50107b1, x=0, y=0, lppt=0x2345284 | out: lppt=0x2345284) returned 1
[0266.887] IsAppThemed () returned 0x1
[0266.887] GetThemeAppProperties () returned 0x3
[0266.887] GetThemeAppProperties () returned 0x3
[0266.887] GetThemeBackgroundContentRect () returned 0x0
[0266.887] RestoreDC (hdc=0xc50107b1, nSavedDC=-1) returned 1
[0266.887] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107b1) returned 0x0
[0266.888] IsAppThemed () returned 0x1
[0266.888] GetThemeAppProperties () returned 0x3
[0266.888] GetThemeAppProperties () returned 0x3
[0266.888] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0266.888] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0266.888] GetCurrentObject (hdc=0xc50107b1, type=0x1) returned 0xb00017
[0266.888] GetCurrentObject (hdc=0xc50107b1, type=0x2) returned 0x900010
[0266.888] GetCurrentObject (hdc=0xc50107b1, type=0x7) returned 0x1e0507b9
[0266.888] GetCurrentObject (hdc=0xc50107b1, type=0x6) returned 0x8a01c2
[0266.888] SaveDC (hdc=0xc50107b1) returned 1
[0266.888] GetTextAlign (hdc=0xc50107b1) returned 0x0
[0266.888] GetTextColor (hdc=0xc50107b1) returned 0x0
[0266.888] GetCurrentObject (hdc=0xc50107b1, type=0x6) returned 0x8a01c2
[0266.888] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0266.888] SelectObject (hdc=0xc50107b1, h=0x450a0799) returned 0x8a01c2
[0266.888] GetBkMode (hdc=0xc50107b1) returned 2
[0266.888] SetBkMode (hdc=0xc50107b1, mode=1) returned 2
[0266.889] DrawTextExW (in: hdc=0xc50107b1, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2345624 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0266.889] DrawTextExW (in: hdc=0xc50107b1, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2345624 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0266.889] RestoreDC (hdc=0xc50107b1, nSavedDC=-1) returned 1
[0266.889] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107b1) returned 0x0
[0266.889] GetFocus () returned 0xe02ca
[0266.889] IsAppThemed () returned 0x1
[0266.889] GetThemeAppProperties () returned 0x3
[0266.889] GetThemeAppProperties () returned 0x3
[0266.889] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0266.890] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xc50107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0266.890] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc50107b1) returned 0x0
[0266.890] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0266.890] SelectObject (hdc=0xc50107b1, h=0x85000f) returned 0x1e0507b9
[0266.890] DeleteDC (hdc=0xc50107b1) returned 1
[0266.890] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0266.890] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0267.215] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0267.215] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0267.215] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x30013e) returned 0x1
[0267.218] GetFocus () returned 0x30013e
[0267.218] GetAncestor (hwnd=0x30013e, gaFlags=0x1) returned 0x10010
[0267.218] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0267.219] SetFocus (hWnd=0x202c6) returned 0x0
[0267.221] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0267.223] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0267.223] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0267.224] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0267.224] GetFocus () returned 0x70036
[0267.224] SetFocus (hWnd=0x202c6) returned 0x0
[0267.236] IsWindow (hWnd=0x70036) returned 1
[0267.236] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0267.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0267.237] IsWindow (hWnd=0x70036) returned 1
[0267.237] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0267.237] IsWindow (hWnd=0x202c6) returned 1
[0267.237] SetFocus (hWnd=0x202c6) returned 0x70036
[0267.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0267.238] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0267.239] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0267.241] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0267.241] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0267.241] GetStockObject (i=5) returned 0x900015
[0267.241] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0267.241] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8cca90) returned 0x7
[0267.241] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0267.241] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0267.241] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0267.241] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0267.242] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0267.243] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0267.243] GetFocus () returned 0x202c6
[0267.243] GetCapture () returned 0x0
[0267.243] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.243] IsWindowUnicode (hWnd=0x202c6) returned 1
[0267.243] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.243] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.243] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.243] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.244] IsWindowUnicode (hWnd=0x202c6) returned 1
[0267.244] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.244] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.244] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.244] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0267.244] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0267.244] CreateCompatibleDC (hdc=0x10105d6) returned 0x400107ab
[0267.245] SelectObject (hdc=0x400107ab, h=0x1e0507b9) returned 0x85000f
[0267.245] GdipCreateFromHDC (hdc=0x400107ab, graphics=0x53e958) returned 0x0
[0267.245] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0267.245] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0267.245] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0267.245] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0267.245] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0267.245] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0267.245] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0267.245] LocalFree (hMem=0x89eac0) returned 0x0
[0267.245] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0267.245] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0267.245] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0267.245] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0267.245] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0267.245] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb3f0dbd) returned 0x0
[0267.246] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0267.246] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0267.246] GetCurrentObject (hdc=0x400107ab, type=0x1) returned 0xb00017
[0267.246] GetCurrentObject (hdc=0x400107ab, type=0x2) returned 0x900010
[0267.246] GetCurrentObject (hdc=0x400107ab, type=0x7) returned 0x1e0507b9
[0267.246] GetCurrentObject (hdc=0x400107ab, type=0x6) returned 0x8a01c2
[0267.246] SaveDC (hdc=0x400107ab) returned 1
[0267.246] GetNearestColor (hdc=0x400107ab, color=0xff) returned 0xff
[0267.246] GetNearestColor (hdc=0x400107ab, color=0x55) returned 0x55
[0267.246] GetNearestColor (hdc=0x400107ab, color=0x0) returned 0x0
[0267.246] GetNearestColor (hdc=0x400107ab, color=0x55) returned 0x55
[0267.246] GetNearestColor (hdc=0x400107ab, color=0x0) returned 0x0
[0267.246] GetNearestColor (hdc=0x400107ab, color=0x8080ff) returned 0x8080ff
[0267.246] GetNearestColor (hdc=0x400107ab, color=0x7373e5) returned 0x7373e5
[0267.246] GetNearestColor (hdc=0x400107ab, color=0xe5) returned 0xe5
[0267.246] GetNearestColor (hdc=0x400107ab, color=0x0) returned 0x0
[0267.246] RestoreDC (hdc=0x400107ab, nSavedDC=-1) returned 1
[0267.247] GdipReleaseDC (graphics=0x5d92c30, hdc=0x400107ab) returned 0x0
[0267.247] IsAppThemed () returned 0x1
[0267.247] GetThemeAppProperties () returned 0x3
[0267.247] GetThemeAppProperties () returned 0x3
[0267.247] IsAppThemed () returned 0x1
[0267.247] GetThemeAppProperties () returned 0x3
[0267.247] GetThemeAppProperties () returned 0x3
[0267.247] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2345e80 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0267.247] IsAppThemed () returned 0x1
[0267.247] GetThemeAppProperties () returned 0x3
[0267.247] GetThemeAppProperties () returned 0x3
[0267.247] IsAppThemed () returned 0x1
[0267.247] GetThemeAppProperties () returned 0x3
[0267.247] GetThemeAppProperties () returned 0x3
[0267.247] GetFocus () returned 0x202c6
[0267.247] IsAppThemed () returned 0x1
[0267.248] GetThemeAppProperties () returned 0x3
[0267.248] GetThemeAppProperties () returned 0x3
[0267.248] IsAppThemed () returned 0x1
[0267.248] GetThemeAppProperties () returned 0x3
[0267.248] GetThemeAppProperties () returned 0x3
[0267.248] IsThemePartDefined () returned 0x1
[0267.248] IsAppThemed () returned 0x1
[0267.248] GetThemeAppProperties () returned 0x3
[0267.248] GetThemeAppProperties () returned 0x3
[0267.248] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0267.248] IsAppThemed () returned 0x1
[0267.248] GetThemeAppProperties () returned 0x3
[0267.248] GetThemeAppProperties () returned 0x3
[0267.248] IsAppThemed () returned 0x1
[0267.248] GetThemeAppProperties () returned 0x3
[0267.248] GetThemeAppProperties () returned 0x3
[0267.248] IsThemePartDefined () returned 0x1
[0267.248] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0267.248] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0267.248] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0267.248] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0267.248] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0267.248] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0267.248] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0267.248] LocalFree (hMem=0x89ee08) returned 0x0
[0267.249] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0267.249] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0267.249] LocalFree (hMem=0x89eac0) returned 0x0
[0267.249] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0267.249] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0267.249] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0267.249] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0267.249] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0267.249] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0267.249] GetCurrentObject (hdc=0x400107ab, type=0x1) returned 0xb00017
[0267.249] GetCurrentObject (hdc=0x400107ab, type=0x2) returned 0x900010
[0267.249] GetCurrentObject (hdc=0x400107ab, type=0x7) returned 0x1e0507b9
[0267.249] GetCurrentObject (hdc=0x400107ab, type=0x6) returned 0x8a01c2
[0267.249] SaveDC (hdc=0x400107ab) returned 1
[0267.249] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb604053e
[0267.249] GetClipRgn (hdc=0x400107ab, hrgn=0xb604053e) returned 0
[0267.249] SelectClipRgn (hdc=0x400107ab, hrgn=0xf50407a1) returned 2
[0267.249] DeleteObject (ho=0xb604053e) returned 1
[0267.249] DeleteObject (ho=0xf50407a1) returned 1
[0267.249] OffsetViewportOrgEx (in: hdc=0x400107ab, x=0, y=0, lppt=0x2346530 | out: lppt=0x2346530) returned 1
[0267.250] DrawThemeParentBackground () returned 0x0
[0267.250] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0267.250] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0267.250] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0267.250] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0267.250] GetSystemMetrics (nIndex=42) returned 0
[0267.250] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0267.250] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0267.250] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0267.250] GetCurrentObject (hdc=0x400107ab, type=0x1) returned 0xb00017
[0267.250] GetCurrentObject (hdc=0x400107ab, type=0x2) returned 0x900010
[0267.250] GetCurrentObject (hdc=0x400107ab, type=0x7) returned 0x1e0507b9
[0267.250] GetCurrentObject (hdc=0x400107ab, type=0x6) returned 0x8a01c2
[0267.250] SaveDC (hdc=0x400107ab) returned 2
[0267.250] GetNearestColor (hdc=0x400107ab, color=0xff) returned 0xff
[0267.250] CreateSolidBrush (color=0xff) returned 0xb810078d
[0267.250] FillRect (hDC=0x400107ab, lprc=0x53e128, hbr=0xb810078d) returned 1
[0267.251] DeleteObject (ho=0xb810078d) returned 1
[0267.251] RestoreDC (hdc=0x400107ab, nSavedDC=-1) returned 1
[0267.251] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0267.251] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0267.251] GetSystemMetrics (nIndex=42) returned 0
[0267.251] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0267.251] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0267.251] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0267.251] GetCurrentObject (hdc=0x400107ab, type=0x1) returned 0xb00017
[0267.251] GetCurrentObject (hdc=0x400107ab, type=0x2) returned 0x900010
[0267.251] GetCurrentObject (hdc=0x400107ab, type=0x7) returned 0x1e0507b9
[0267.251] GetCurrentObject (hdc=0x400107ab, type=0x6) returned 0x8a01c2
[0267.251] SaveDC (hdc=0x400107ab) returned 2
[0267.251] GetNearestColor (hdc=0x400107ab, color=0xff) returned 0xff
[0267.251] CreateSolidBrush (color=0xff) returned 0xb910078d
[0267.251] FillRect (hDC=0x400107ab, lprc=0x53e0c8, hbr=0xb910078d) returned 1
[0267.251] DeleteObject (ho=0xb910078d) returned 1
[0267.251] RestoreDC (hdc=0x400107ab, nSavedDC=-1) returned 1
[0267.251] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0267.252] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0267.252] GetSystemMetrics (nIndex=42) returned 0
[0267.252] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0267.252] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0267.252] RestoreDC (hdc=0x400107ab, nSavedDC=-1) returned 1
[0267.252] GdipReleaseDC (graphics=0x5d92c30, hdc=0x400107ab) returned 0x0
[0267.252] IsAppThemed () returned 0x1
[0267.252] GetThemeAppProperties () returned 0x3
[0267.252] GetThemeAppProperties () returned 0x3
[0267.252] IsAppThemed () returned 0x1
[0267.252] GetThemeAppProperties () returned 0x3
[0267.252] GetThemeAppProperties () returned 0x3
[0267.252] IsThemePartDefined () returned 0x1
[0267.252] GdipCreateRegion (region=0x53e64c) returned 0x0
[0267.252] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0267.252] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0267.252] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0267.252] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0267.252] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0267.252] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0267.253] LocalFree (hMem=0x89ec80) returned 0x0
[0267.253] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0267.253] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0267.253] LocalFree (hMem=0x89ee08) returned 0x0
[0267.253] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0267.253] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0267.253] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0267.253] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0267.253] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0267.253] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0267.253] GetCurrentObject (hdc=0x400107ab, type=0x1) returned 0xb00017
[0267.253] GetCurrentObject (hdc=0x400107ab, type=0x2) returned 0x900010
[0267.253] GetCurrentObject (hdc=0x400107ab, type=0x7) returned 0x1e0507b9
[0267.253] GetCurrentObject (hdc=0x400107ab, type=0x6) returned 0x8a01c2
[0267.253] SaveDC (hdc=0x400107ab) returned 1
[0267.253] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf60407a1
[0267.253] GetClipRgn (hdc=0x400107ab, hrgn=0xf60407a1) returned 0
[0267.253] SelectClipRgn (hdc=0x400107ab, hrgn=0xb804053e) returned 2
[0267.253] DeleteObject (ho=0xf60407a1) returned 1
[0267.253] DeleteObject (ho=0xb804053e) returned 1
[0267.254] OffsetViewportOrgEx (in: hdc=0x400107ab, x=0, y=0, lppt=0x2346d94 | out: lppt=0x2346d94) returned 1
[0267.254] IsAppThemed () returned 0x1
[0267.254] GetThemeAppProperties () returned 0x3
[0267.254] GetThemeAppProperties () returned 0x3
[0267.254] DrawThemeBackground () returned 0x0
[0267.254] RestoreDC (hdc=0x400107ab, nSavedDC=-1) returned 1
[0267.254] GdipReleaseDC (graphics=0x5d92c30, hdc=0x400107ab) returned 0x0
[0267.254] GdipCreateRegion (region=0x53e650) returned 0x0
[0267.254] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0267.254] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0267.254] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0267.254] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0267.254] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0267.254] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0267.254] LocalFree (hMem=0x89ee08) returned 0x0
[0267.254] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0267.254] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0267.254] LocalFree (hMem=0x89eac0) returned 0x0
[0267.254] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0267.254] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0267.255] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0267.255] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0267.255] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0267.255] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0267.255] GetCurrentObject (hdc=0x400107ab, type=0x1) returned 0xb00017
[0267.255] GetCurrentObject (hdc=0x400107ab, type=0x2) returned 0x900010
[0267.255] GetCurrentObject (hdc=0x400107ab, type=0x7) returned 0x1e0507b9
[0267.255] GetCurrentObject (hdc=0x400107ab, type=0x6) returned 0x8a01c2
[0267.255] SaveDC (hdc=0x400107ab) returned 1
[0267.255] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb904053e
[0267.255] GetClipRgn (hdc=0x400107ab, hrgn=0xb904053e) returned 0
[0267.255] SelectClipRgn (hdc=0x400107ab, hrgn=0xf70407a1) returned 2
[0267.255] DeleteObject (ho=0xb904053e) returned 1
[0267.255] DeleteObject (ho=0xf70407a1) returned 1
[0267.255] OffsetViewportOrgEx (in: hdc=0x400107ab, x=0, y=0, lppt=0x2347068 | out: lppt=0x2347068) returned 1
[0267.255] IsAppThemed () returned 0x1
[0267.255] GetThemeAppProperties () returned 0x3
[0267.255] GetThemeAppProperties () returned 0x3
[0267.255] GetThemeBackgroundContentRect () returned 0x0
[0267.267] RestoreDC (hdc=0x400107ab, nSavedDC=-1) returned 1
[0267.267] GdipReleaseDC (graphics=0x5d92c30, hdc=0x400107ab) returned 0x0
[0267.267] IsAppThemed () returned 0x1
[0267.267] GetThemeAppProperties () returned 0x3
[0267.267] GetThemeAppProperties () returned 0x3
[0267.268] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0267.268] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0267.268] GetCurrentObject (hdc=0x400107ab, type=0x1) returned 0xb00017
[0267.268] GetCurrentObject (hdc=0x400107ab, type=0x2) returned 0x900010
[0267.268] GetCurrentObject (hdc=0x400107ab, type=0x7) returned 0x1e0507b9
[0267.268] GetCurrentObject (hdc=0x400107ab, type=0x6) returned 0x8a01c2
[0267.268] SaveDC (hdc=0x400107ab) returned 1
[0267.268] GetTextAlign (hdc=0x400107ab) returned 0x0
[0267.268] GetTextColor (hdc=0x400107ab) returned 0x0
[0267.268] GetCurrentObject (hdc=0x400107ab, type=0x6) returned 0x8a01c2
[0267.268] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0267.268] SelectObject (hdc=0x400107ab, h=0x450a0799) returned 0x8a01c2
[0267.268] GetBkMode (hdc=0x400107ab) returned 2
[0267.268] SetBkMode (hdc=0x400107ab, mode=1) returned 2
[0267.268] DrawTextExW (in: hdc=0x400107ab, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2347408 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0267.269] DrawTextExW (in: hdc=0x400107ab, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2347408 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0267.269] RestoreDC (hdc=0x400107ab, nSavedDC=-1) returned 1
[0267.269] GdipReleaseDC (graphics=0x5d92c30, hdc=0x400107ab) returned 0x0
[0267.269] GetFocus () returned 0x202c6
[0267.269] IsAppThemed () returned 0x1
[0267.269] GetThemeAppProperties () returned 0x3
[0267.269] GetThemeAppProperties () returned 0x3
[0267.269] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0267.269] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x400107ab, x1=0, y1=0, rop=0xcc0020) returned 1
[0267.269] GdipReleaseDC (graphics=0x5d92c30, hdc=0x400107ab) returned 0x0
[0267.269] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0267.269] SelectObject (hdc=0x400107ab, h=0x85000f) returned 0x1e0507b9
[0267.269] DeleteDC (hdc=0x400107ab) returned 1
[0267.270] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0267.270] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0267.270] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.270] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.270] WaitMessage () returned 1
[0267.273] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.273] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.273] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.273] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.273] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.274] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.274] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.274] WaitMessage () returned 1
[0267.287] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.291] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.291] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.291] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.291] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.292] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.292] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.292] WaitMessage () returned 1
[0267.294] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.294] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.294] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.295] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.295] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.295] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.295] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.295] WaitMessage () returned 1
[0267.296] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.296] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.296] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.296] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.296] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.297] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.298] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.298] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.298] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.298] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.298] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.298] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.298] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.298] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.298] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.298] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.299] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.299] WaitMessage () returned 1
[0267.299] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.299] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.299] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.299] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.299] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.300] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.301] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.301] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.301] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.301] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.301] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.301] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.301] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.301] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.301] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.301] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.302] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.302] WaitMessage () returned 1
[0267.302] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.302] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.302] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.302] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.302] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.307] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.307] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.307] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.307] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.307] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.307] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.307] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.307] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.307] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.307] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.307] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.308] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.308] WaitMessage () returned 1
[0267.310] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.310] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.310] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.310] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.310] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.311] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.311] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.311] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.311] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.311] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.312] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.312] IsWindowUnicode (hWnd=0x102dc) returned 1
[0267.312] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.312] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.312] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.312] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.312] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.312] WaitMessage () returned 1
[0267.491] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.491] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.491] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.491] DispatchMessageA (lpMsg=0x53eef8) returned 0x7ea8
[0267.491] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.491] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.491] WaitMessage () returned 1
[0267.553] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.553] IsWindowUnicode (hWnd=0x202d0) returned 1
[0267.553] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0267.553] TranslateMessage (lpMsg=0x53eef8) returned 0
[0267.553] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0267.553] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.553] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0267.553] WaitMessage () returned 1
[0268.506] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0268.506] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0268.506] TranslateMessage (lpMsg=0x53eef8) returned 0
[0268.506] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0268.507] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0268.507] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0268.507] WaitMessage () returned 1
[0269.027] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0269.027] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1960215) returned 0x1
[0269.027] IsWindowUnicode (hWnd=0x202c6) returned 1
[0269.027] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0269.027] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1960215) returned 0x1
[0269.028] SetCursor (hCursor=0x10003) returned 0x10003
[0269.028] TranslateMessage (lpMsg=0x53eef8) returned 0
[0269.028] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0269.028] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0269.028] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0269.028] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0269.028] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0269.028] GetKeyState (nVirtKey=1) returned 0
[0269.028] GetKeyState (nVirtKey=2) returned 0
[0269.028] GetKeyState (nVirtKey=4) returned 0
[0269.028] GetKeyState (nVirtKey=5) returned 0
[0269.028] GetKeyState (nVirtKey=6) returned 0
[0269.028] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0269.029] IsWindowUnicode (hWnd=0x202c6) returned 1
[0269.029] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0269.029] TranslateMessage (lpMsg=0x53eef8) returned 0
[0269.029] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0269.029] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x10105d6
[0269.029] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0269.029] CreateCompatibleDC (hdc=0x10105d6) returned 0xa0107bf
[0269.029] SelectObject (hdc=0xa0107bf, h=0x1e0507b9) returned 0x85000f
[0269.029] GdipCreateFromHDC (hdc=0xa0107bf, graphics=0x53e958) returned 0x0
[0269.030] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0269.030] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0269.030] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0269.030] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.030] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0269.030] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.030] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0269.030] LocalFree (hMem=0x89ea88) returned 0x0
[0269.030] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.030] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0269.030] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.031] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0269.031] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0269.031] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb3d0dbd) returned 0x0
[0269.031] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.031] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0269.031] GetCurrentObject (hdc=0xa0107bf, type=0x1) returned 0xb00017
[0269.031] GetCurrentObject (hdc=0xa0107bf, type=0x2) returned 0x900010
[0269.031] GetCurrentObject (hdc=0xa0107bf, type=0x7) returned 0x1e0507b9
[0269.031] GetCurrentObject (hdc=0xa0107bf, type=0x6) returned 0x8a01c2
[0269.031] SaveDC (hdc=0xa0107bf) returned 1
[0269.031] GetNearestColor (hdc=0xa0107bf, color=0xff) returned 0xff
[0269.031] GetNearestColor (hdc=0xa0107bf, color=0x55) returned 0x55
[0269.031] GetNearestColor (hdc=0xa0107bf, color=0x0) returned 0x0
[0269.032] GetNearestColor (hdc=0xa0107bf, color=0x55) returned 0x55
[0269.032] GetNearestColor (hdc=0xa0107bf, color=0x0) returned 0x0
[0269.032] GetNearestColor (hdc=0xa0107bf, color=0x8080ff) returned 0x8080ff
[0269.032] GetNearestColor (hdc=0xa0107bf, color=0x7373e5) returned 0x7373e5
[0269.032] GetNearestColor (hdc=0xa0107bf, color=0xe5) returned 0xe5
[0269.032] GetNearestColor (hdc=0xa0107bf, color=0x0) returned 0x0
[0269.032] RestoreDC (hdc=0xa0107bf, nSavedDC=-1) returned 1
[0269.032] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa0107bf) returned 0x0
[0269.032] IsAppThemed () returned 0x1
[0269.032] GetThemeAppProperties () returned 0x3
[0269.032] GetThemeAppProperties () returned 0x3
[0269.033] IsAppThemed () returned 0x1
[0269.033] GetThemeAppProperties () returned 0x3
[0269.033] GetThemeAppProperties () returned 0x3
[0269.033] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x2347d9c | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0269.033] IsAppThemed () returned 0x1
[0269.033] GetThemeAppProperties () returned 0x3
[0269.033] GetThemeAppProperties () returned 0x3
[0269.033] IsAppThemed () returned 0x1
[0269.033] GetThemeAppProperties () returned 0x3
[0269.033] GetThemeAppProperties () returned 0x3
[0269.034] IsAppThemed () returned 0x1
[0269.034] GetThemeAppProperties () returned 0x3
[0269.034] GetThemeAppProperties () returned 0x3
[0269.034] IsAppThemed () returned 0x1
[0269.034] GetThemeAppProperties () returned 0x3
[0269.034] GetThemeAppProperties () returned 0x3
[0269.034] IsThemePartDefined () returned 0x1
[0269.034] IsAppThemed () returned 0x1
[0269.034] GetThemeAppProperties () returned 0x3
[0269.034] GetThemeAppProperties () returned 0x3
[0269.034] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0269.034] IsAppThemed () returned 0x1
[0269.034] GetThemeAppProperties () returned 0x3
[0269.034] GetThemeAppProperties () returned 0x3
[0269.034] IsAppThemed () returned 0x1
[0269.034] GetThemeAppProperties () returned 0x3
[0269.034] GetThemeAppProperties () returned 0x3
[0269.034] IsThemePartDefined () returned 0x1
[0269.034] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0269.034] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.034] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0269.034] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.034] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0269.035] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.035] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0269.035] LocalFree (hMem=0x89ea88) returned 0x0
[0269.035] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0269.035] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0269.035] LocalFree (hMem=0x89eee8) returned 0x0
[0269.035] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.035] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0269.035] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0269.035] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0269.035] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.035] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0269.035] GetCurrentObject (hdc=0xa0107bf, type=0x1) returned 0xb00017
[0269.035] GetCurrentObject (hdc=0xa0107bf, type=0x2) returned 0x900010
[0269.035] GetCurrentObject (hdc=0xa0107bf, type=0x7) returned 0x1e0507b9
[0269.035] GetCurrentObject (hdc=0xa0107bf, type=0x6) returned 0x8a01c2
[0269.036] SaveDC (hdc=0xa0107bf) returned 1
[0269.036] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf80407a1
[0269.036] GetClipRgn (hdc=0xa0107bf, hrgn=0xf80407a1) returned 0
[0269.036] SelectClipRgn (hdc=0xa0107bf, hrgn=0xbd04053e) returned 2
[0269.036] DeleteObject (ho=0xf80407a1) returned 1
[0269.036] DeleteObject (ho=0xbd04053e) returned 1
[0269.036] OffsetViewportOrgEx (in: hdc=0xa0107bf, x=0, y=0, lppt=0x234844c | out: lppt=0x234844c) returned 1
[0269.036] DrawThemeParentBackground () returned 0x0
[0269.036] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0269.036] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0269.036] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0269.036] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0269.036] GetSystemMetrics (nIndex=42) returned 0
[0269.037] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0269.037] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0269.037] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0269.037] GetCurrentObject (hdc=0xa0107bf, type=0x1) returned 0xb00017
[0269.037] GetCurrentObject (hdc=0xa0107bf, type=0x2) returned 0x900010
[0269.037] GetCurrentObject (hdc=0xa0107bf, type=0x7) returned 0x1e0507b9
[0269.037] GetCurrentObject (hdc=0xa0107bf, type=0x6) returned 0x8a01c2
[0269.037] SaveDC (hdc=0xa0107bf) returned 2
[0269.037] GetNearestColor (hdc=0xa0107bf, color=0xff) returned 0xff
[0269.037] CreateSolidBrush (color=0xff) returned 0xba10078d
[0269.037] FillRect (hDC=0xa0107bf, lprc=0x53e120, hbr=0xba10078d) returned 1
[0269.038] DeleteObject (ho=0xba10078d) returned 1
[0269.038] RestoreDC (hdc=0xa0107bf, nSavedDC=-1) returned 1
[0269.038] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0269.038] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0269.038] GetSystemMetrics (nIndex=42) returned 0
[0269.038] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0269.038] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0269.038] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0269.038] GetCurrentObject (hdc=0xa0107bf, type=0x1) returned 0xb00017
[0269.038] GetCurrentObject (hdc=0xa0107bf, type=0x2) returned 0x900010
[0269.038] GetCurrentObject (hdc=0xa0107bf, type=0x7) returned 0x1e0507b9
[0269.038] GetCurrentObject (hdc=0xa0107bf, type=0x6) returned 0x8a01c2
[0269.038] SaveDC (hdc=0xa0107bf) returned 2
[0269.038] GetNearestColor (hdc=0xa0107bf, color=0xff) returned 0xff
[0269.038] CreateSolidBrush (color=0xff) returned 0xbb10078d
[0269.038] FillRect (hDC=0xa0107bf, lprc=0x53e0c0, hbr=0xbb10078d) returned 1
[0269.039] DeleteObject (ho=0xbb10078d) returned 1
[0269.039] RestoreDC (hdc=0xa0107bf, nSavedDC=-1) returned 1
[0269.039] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0269.039] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0269.039] GetSystemMetrics (nIndex=42) returned 0
[0269.039] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0269.039] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0269.039] RestoreDC (hdc=0xa0107bf, nSavedDC=-1) returned 1
[0269.039] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa0107bf) returned 0x0
[0269.039] IsAppThemed () returned 0x1
[0269.039] GetThemeAppProperties () returned 0x3
[0269.039] GetThemeAppProperties () returned 0x3
[0269.039] IsAppThemed () returned 0x1
[0269.040] GetThemeAppProperties () returned 0x3
[0269.040] GetThemeAppProperties () returned 0x3
[0269.040] IsThemePartDefined () returned 0x1
[0269.040] GdipCreateRegion (region=0x53e640) returned 0x0
[0269.040] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.040] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0269.040] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.040] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0269.040] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0269.040] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0269.040] LocalFree (hMem=0x89ec80) returned 0x0
[0269.040] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0269.040] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0269.040] LocalFree (hMem=0x89eac0) returned 0x0
[0269.040] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.040] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0269.040] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0269.041] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0269.041] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.041] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0269.041] GetCurrentObject (hdc=0xa0107bf, type=0x1) returned 0xb00017
[0269.041] GetCurrentObject (hdc=0xa0107bf, type=0x2) returned 0x900010
[0269.041] GetCurrentObject (hdc=0xa0107bf, type=0x7) returned 0x1e0507b9
[0269.041] GetCurrentObject (hdc=0xa0107bf, type=0x6) returned 0x8a01c2
[0269.041] SaveDC (hdc=0xa0107bf) returned 1
[0269.041] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbe04053e
[0269.041] GetClipRgn (hdc=0xa0107bf, hrgn=0xbe04053e) returned 0
[0269.041] SelectClipRgn (hdc=0xa0107bf, hrgn=0xfa0407a1) returned 2
[0269.041] DeleteObject (ho=0xbe04053e) returned 1
[0269.041] DeleteObject (ho=0xfa0407a1) returned 1
[0269.041] OffsetViewportOrgEx (in: hdc=0xa0107bf, x=0, y=0, lppt=0x2348cb0 | out: lppt=0x2348cb0) returned 1
[0269.042] IsAppThemed () returned 0x1
[0269.042] GetThemeAppProperties () returned 0x3
[0269.042] GetThemeAppProperties () returned 0x3
[0269.042] DrawThemeBackground () returned 0x0
[0269.042] RestoreDC (hdc=0xa0107bf, nSavedDC=-1) returned 1
[0269.042] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa0107bf) returned 0x0
[0269.042] GdipCreateRegion (region=0x53e644) returned 0x0
[0269.042] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.042] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0269.042] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.042] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0269.042] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.042] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0269.042] LocalFree (hMem=0x89ea88) returned 0x0
[0269.043] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.043] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0269.043] LocalFree (hMem=0x89ea88) returned 0x0
[0269.043] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.043] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0269.043] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0269.043] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0269.043] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.043] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0269.043] GetCurrentObject (hdc=0xa0107bf, type=0x1) returned 0xb00017
[0269.043] GetCurrentObject (hdc=0xa0107bf, type=0x2) returned 0x900010
[0269.043] GetCurrentObject (hdc=0xa0107bf, type=0x7) returned 0x1e0507b9
[0269.043] GetCurrentObject (hdc=0xa0107bf, type=0x6) returned 0x8a01c2
[0269.043] SaveDC (hdc=0xa0107bf) returned 1
[0269.043] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfb0407a1
[0269.044] GetClipRgn (hdc=0xa0107bf, hrgn=0xfb0407a1) returned 0
[0269.044] SelectClipRgn (hdc=0xa0107bf, hrgn=0xbf04053e) returned 2
[0269.044] DeleteObject (ho=0xfb0407a1) returned 1
[0269.044] DeleteObject (ho=0xbf04053e) returned 1
[0269.044] OffsetViewportOrgEx (in: hdc=0xa0107bf, x=0, y=0, lppt=0x2348f84 | out: lppt=0x2348f84) returned 1
[0269.044] IsAppThemed () returned 0x1
[0269.044] GetThemeAppProperties () returned 0x3
[0269.044] GetThemeAppProperties () returned 0x3
[0269.044] GetThemeBackgroundContentRect () returned 0x0
[0269.044] RestoreDC (hdc=0xa0107bf, nSavedDC=-1) returned 1
[0269.044] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa0107bf) returned 0x0
[0269.044] IsAppThemed () returned 0x1
[0269.044] GetThemeAppProperties () returned 0x3
[0269.044] GetThemeAppProperties () returned 0x3
[0269.044] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0269.044] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0269.044] GetCurrentObject (hdc=0xa0107bf, type=0x1) returned 0xb00017
[0269.045] GetCurrentObject (hdc=0xa0107bf, type=0x2) returned 0x900010
[0269.045] GetCurrentObject (hdc=0xa0107bf, type=0x7) returned 0x1e0507b9
[0269.045] GetCurrentObject (hdc=0xa0107bf, type=0x6) returned 0x8a01c2
[0269.045] SaveDC (hdc=0xa0107bf) returned 1
[0269.045] GetTextAlign (hdc=0xa0107bf) returned 0x0
[0269.045] GetTextColor (hdc=0xa0107bf) returned 0x0
[0269.045] GetCurrentObject (hdc=0xa0107bf, type=0x6) returned 0x8a01c2
[0269.045] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0269.045] SelectObject (hdc=0xa0107bf, h=0x450a0799) returned 0x8a01c2
[0269.045] GetBkMode (hdc=0xa0107bf) returned 2
[0269.045] SetBkMode (hdc=0xa0107bf, mode=1) returned 2
[0269.045] DrawTextExW (in: hdc=0xa0107bf, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2349324 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0269.046] DrawTextExW (in: hdc=0xa0107bf, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2349324 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0269.046] RestoreDC (hdc=0xa0107bf, nSavedDC=-1) returned 1
[0269.046] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa0107bf) returned 0x0
[0269.046] GetFocus () returned 0x202c6
[0269.047] IsAppThemed () returned 0x1
[0269.047] GetThemeAppProperties () returned 0x3
[0269.047] GetThemeAppProperties () returned 0x3
[0269.047] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0269.047] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xa0107bf, x1=0, y1=0, rop=0xcc0020) returned 1
[0269.048] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa0107bf) returned 0x0
[0269.048] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0269.048] SelectObject (hdc=0xa0107bf, h=0x85000f) returned 0x1e0507b9
[0269.048] DeleteDC (hdc=0xa0107bf) returned 1
[0269.048] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0269.048] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0269.048] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0269.048] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0269.048] WaitMessage () returned 1
[0269.143] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0269.144] IsWindowUnicode (hWnd=0x202c6) returned 1
[0269.144] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0269.144] TranslateMessage (lpMsg=0x53eef8) returned 0
[0269.144] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0269.144] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0269.144] IsWindowUnicode (hWnd=0x202c6) returned 1
[0269.144] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0269.145] TranslateMessage (lpMsg=0x53eef8) returned 0
[0269.145] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0269.145] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xe0025) returned 0x0
[0269.145] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0269.145] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0269.145] WaitMessage () returned 1
[0269.262] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0269.263] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1960215) returned 0x1
[0269.263] IsWindowUnicode (hWnd=0x202c6) returned 1
[0269.263] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0269.263] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1960215) returned 0x1
[0269.264] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0269.264] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12901bf) returned 0x0
[0269.264] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0269.264] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0269.264] SetCursor (hCursor=0x10003) returned 0x10003
[0269.264] TranslateMessage (lpMsg=0x53eef8) returned 0
[0269.264] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0269.265] GetKeyState (nVirtKey=1) returned -127
[0269.265] GetKeyState (nVirtKey=2) returned 0
[0269.265] GetKeyState (nVirtKey=4) returned 0
[0269.265] GetKeyState (nVirtKey=5) returned 0
[0269.265] GetKeyState (nVirtKey=6) returned 0
[0269.265] IsWindowVisible (hWnd=0x202c6) returned 1
[0269.265] IsWindowEnabled (hWnd=0x202c6) returned 1
[0269.265] SetFocus (hWnd=0x202c6) returned 0x202c6
[0269.265] GetFocus () returned 0x202c6
[0269.265] GetFocus () returned 0x202c6
[0269.265] GetFocus () returned 0x202c6
[0269.265] GetKeyState (nVirtKey=1) returned -127
[0269.265] GetKeyState (nVirtKey=2) returned 0
[0269.265] GetKeyState (nVirtKey=4) returned 0
[0269.265] GetKeyState (nVirtKey=5) returned 0
[0269.265] GetKeyState (nVirtKey=6) returned 0
[0269.265] GetCapture () returned 0x0
[0269.266] SetCapture (hWnd=0x202c6) returned 0x0
[0269.266] GetKeyState (nVirtKey=1) returned -127
[0269.266] GetKeyState (nVirtKey=2) returned 0
[0269.266] GetKeyState (nVirtKey=4) returned 0
[0269.266] GetKeyState (nVirtKey=5) returned 0
[0269.266] GetKeyState (nVirtKey=6) returned 0
[0269.266] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0269.266] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0269.266] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0269.266] IsWindowUnicode (hWnd=0x202c6) returned 1
[0269.266] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0269.267] TranslateMessage (lpMsg=0x53eef8) returned 0
[0269.267] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0269.267] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23494a8, cPoints=0x1 | out: lpPoints=0x23494a8) returned 25690608
[0269.267] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0269.267] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0269.267] UpdateWindow (hWnd=0x202c6) returned 1
[0269.268] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x10105d6
[0269.268] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0269.268] CreateCompatibleDC (hdc=0x10105d6) returned 0xb0107bf
[0269.269] SelectObject (hdc=0xb0107bf, h=0x1e0507b9) returned 0x85000f
[0269.269] GdipCreateFromHDC (hdc=0xb0107bf, graphics=0x53e5f0) returned 0x0
[0269.269] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0269.269] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0269.269] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0269.269] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.269] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0269.270] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0269.270] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0269.270] LocalFree (hMem=0x89ee08) returned 0x0
[0269.270] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.270] GdipCreateRegion (region=0x53e638) returned 0x0
[0269.270] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.270] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0269.270] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0269.270] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb3b0dbd) returned 0x0
[0269.270] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.270] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0269.270] GetCurrentObject (hdc=0xb0107bf, type=0x1) returned 0xb00017
[0269.270] GetCurrentObject (hdc=0xb0107bf, type=0x2) returned 0x900010
[0269.271] GetCurrentObject (hdc=0xb0107bf, type=0x7) returned 0x1e0507b9
[0269.271] GetCurrentObject (hdc=0xb0107bf, type=0x6) returned 0x8a01c2
[0269.271] SaveDC (hdc=0xb0107bf) returned 1
[0269.271] GetNearestColor (hdc=0xb0107bf, color=0xff) returned 0xff
[0269.271] GetNearestColor (hdc=0xb0107bf, color=0x55) returned 0x55
[0269.271] GetNearestColor (hdc=0xb0107bf, color=0x0) returned 0x0
[0269.272] GetNearestColor (hdc=0xb0107bf, color=0x55) returned 0x55
[0269.272] GetNearestColor (hdc=0xb0107bf, color=0x0) returned 0x0
[0269.272] GetNearestColor (hdc=0xb0107bf, color=0x8080ff) returned 0x8080ff
[0269.272] GetNearestColor (hdc=0xb0107bf, color=0x7373e5) returned 0x7373e5
[0269.272] GetNearestColor (hdc=0xb0107bf, color=0xe5) returned 0xe5
[0269.272] GetNearestColor (hdc=0xb0107bf, color=0x0) returned 0x0
[0269.272] RestoreDC (hdc=0xb0107bf, nSavedDC=-1) returned 1
[0269.272] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb0107bf) returned 0x0
[0269.272] IsAppThemed () returned 0x1
[0269.273] GetThemeAppProperties () returned 0x3
[0269.273] GetThemeAppProperties () returned 0x3
[0269.273] IsAppThemed () returned 0x1
[0269.273] GetThemeAppProperties () returned 0x3
[0269.273] GetThemeAppProperties () returned 0x3
[0269.273] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x2349bc4 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0269.273] IsAppThemed () returned 0x1
[0269.273] GetThemeAppProperties () returned 0x3
[0269.273] GetThemeAppProperties () returned 0x3
[0269.273] IsAppThemed () returned 0x1
[0269.274] GetThemeAppProperties () returned 0x3
[0269.274] GetThemeAppProperties () returned 0x3
[0269.274] IsAppThemed () returned 0x1
[0269.274] GetThemeAppProperties () returned 0x3
[0269.274] GetThemeAppProperties () returned 0x3
[0269.274] IsAppThemed () returned 0x1
[0269.274] GetThemeAppProperties () returned 0x3
[0269.274] GetThemeAppProperties () returned 0x3
[0269.274] IsThemePartDefined () returned 0x1
[0269.274] IsAppThemed () returned 0x1
[0269.274] GetThemeAppProperties () returned 0x3
[0269.274] GetThemeAppProperties () returned 0x3
[0269.274] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0269.274] IsAppThemed () returned 0x1
[0269.274] GetThemeAppProperties () returned 0x3
[0269.274] GetThemeAppProperties () returned 0x3
[0269.274] IsAppThemed () returned 0x1
[0269.274] GetThemeAppProperties () returned 0x3
[0269.274] GetThemeAppProperties () returned 0x3
[0269.274] IsThemePartDefined () returned 0x1
[0269.274] GdipCreateRegion (region=0x53e354) returned 0x0
[0269.275] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.275] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0269.275] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.275] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0269.275] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0269.275] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0269.275] LocalFree (hMem=0x89ec80) returned 0x0
[0269.275] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.275] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0269.275] LocalFree (hMem=0x89ea88) returned 0x0
[0269.275] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.275] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0269.275] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0269.275] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0269.275] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.275] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0269.276] GetCurrentObject (hdc=0xb0107bf, type=0x1) returned 0xb00017
[0269.276] GetCurrentObject (hdc=0xb0107bf, type=0x2) returned 0x900010
[0269.276] GetCurrentObject (hdc=0xb0107bf, type=0x7) returned 0x1e0507b9
[0269.276] GetCurrentObject (hdc=0xb0107bf, type=0x6) returned 0x8a01c2
[0269.276] SaveDC (hdc=0xb0107bf) returned 1
[0269.276] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc004053e
[0269.276] GetClipRgn (hdc=0xb0107bf, hrgn=0xc004053e) returned 0
[0269.276] SelectClipRgn (hdc=0xb0107bf, hrgn=0xff0407a1) returned 2
[0269.276] DeleteObject (ho=0xc004053e) returned 1
[0269.276] DeleteObject (ho=0xff0407a1) returned 1
[0269.276] OffsetViewportOrgEx (in: hdc=0xb0107bf, x=0, y=0, lppt=0x234a274 | out: lppt=0x234a274) returned 1
[0269.276] DrawThemeParentBackground () returned 0x0
[0269.277] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0269.277] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0269.277] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0269.277] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0269.277] GetSystemMetrics (nIndex=42) returned 0
[0269.277] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0269.277] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0269.277] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0269.277] GetCurrentObject (hdc=0xb0107bf, type=0x1) returned 0xb00017
[0269.277] GetCurrentObject (hdc=0xb0107bf, type=0x2) returned 0x900010
[0269.277] GetCurrentObject (hdc=0xb0107bf, type=0x7) returned 0x1e0507b9
[0269.277] GetCurrentObject (hdc=0xb0107bf, type=0x6) returned 0x8a01c2
[0269.278] SaveDC (hdc=0xb0107bf) returned 2
[0269.278] GetNearestColor (hdc=0xb0107bf, color=0xff) returned 0xff
[0269.278] CreateSolidBrush (color=0xff) returned 0xbc10078d
[0269.278] FillRect (hDC=0xb0107bf, lprc=0x53ddb8, hbr=0xbc10078d) returned 1
[0269.278] DeleteObject (ho=0xbc10078d) returned 1
[0269.278] RestoreDC (hdc=0xb0107bf, nSavedDC=-1) returned 1
[0269.278] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0269.278] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0269.278] GetSystemMetrics (nIndex=42) returned 0
[0269.278] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0269.278] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0269.279] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0269.279] GetCurrentObject (hdc=0xb0107bf, type=0x1) returned 0xb00017
[0269.279] GetCurrentObject (hdc=0xb0107bf, type=0x2) returned 0x900010
[0269.279] GetCurrentObject (hdc=0xb0107bf, type=0x7) returned 0x1e0507b9
[0269.279] GetCurrentObject (hdc=0xb0107bf, type=0x6) returned 0x8a01c2
[0269.279] SaveDC (hdc=0xb0107bf) returned 2
[0269.279] GetNearestColor (hdc=0xb0107bf, color=0xff) returned 0xff
[0269.279] CreateSolidBrush (color=0xff) returned 0xbd10078d
[0269.279] FillRect (hDC=0xb0107bf, lprc=0x53dd58, hbr=0xbd10078d) returned 1
[0269.279] DeleteObject (ho=0xbd10078d) returned 1
[0269.279] RestoreDC (hdc=0xb0107bf, nSavedDC=-1) returned 1
[0269.279] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0269.279] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0269.279] GetSystemMetrics (nIndex=42) returned 0
[0269.279] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0269.279] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0269.280] RestoreDC (hdc=0xb0107bf, nSavedDC=-1) returned 1
[0269.280] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb0107bf) returned 0x0
[0269.280] IsAppThemed () returned 0x1
[0269.280] GetThemeAppProperties () returned 0x3
[0269.280] GetThemeAppProperties () returned 0x3
[0269.280] IsAppThemed () returned 0x1
[0269.280] GetThemeAppProperties () returned 0x3
[0269.280] GetThemeAppProperties () returned 0x3
[0269.280] IsThemePartDefined () returned 0x1
[0269.280] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0269.280] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.280] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0269.280] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.281] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0269.281] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0269.281] LocalFree (hMem=0x89ea88) returned 0x0
[0269.281] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0269.281] LocalFree (hMem=0x89eac0) returned 0x0
[0269.281] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.281] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0269.281] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0269.281] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0269.281] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.281] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0269.281] GetCurrentObject (hdc=0xb0107bf, type=0x1) returned 0xb00017
[0269.281] GetCurrentObject (hdc=0xb0107bf, type=0x2) returned 0x900010
[0269.281] GetCurrentObject (hdc=0xb0107bf, type=0x7) returned 0x1e0507b9
[0269.281] GetCurrentObject (hdc=0xb0107bf, type=0x6) returned 0x8a01c2
[0269.281] SaveDC (hdc=0xb0107bf) returned 1
[0269.281] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x407a1
[0269.282] GetClipRgn (hdc=0xb0107bf, hrgn=0x407a1) returned 0
[0269.282] SelectClipRgn (hdc=0xb0107bf, hrgn=0xc204053e) returned 2
[0269.282] DeleteObject (ho=0x407a1) returned 1
[0269.282] DeleteObject (ho=0xc204053e) returned 1
[0269.282] OffsetViewportOrgEx (in: hdc=0xb0107bf, x=0, y=0, lppt=0x234aad8 | out: lppt=0x234aad8) returned 1
[0269.282] IsAppThemed () returned 0x1
[0269.282] GetThemeAppProperties () returned 0x3
[0269.282] GetThemeAppProperties () returned 0x3
[0269.282] DrawThemeBackground () returned 0x0
[0269.282] RestoreDC (hdc=0xb0107bf, nSavedDC=-1) returned 1
[0269.282] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb0107bf) returned 0x0
[0269.282] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0269.282] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.282] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0269.282] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.283] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0269.283] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0269.283] LocalFree (hMem=0x89ec80) returned 0x0
[0269.283] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0269.283] LocalFree (hMem=0x89ec80) returned 0x0
[0269.283] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.283] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0269.283] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0269.283] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0269.283] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.283] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0269.283] GetCurrentObject (hdc=0xb0107bf, type=0x1) returned 0xb00017
[0269.283] GetCurrentObject (hdc=0xb0107bf, type=0x2) returned 0x900010
[0269.283] GetCurrentObject (hdc=0xb0107bf, type=0x7) returned 0x1e0507b9
[0269.283] GetCurrentObject (hdc=0xb0107bf, type=0x6) returned 0x8a01c2
[0269.283] SaveDC (hdc=0xb0107bf) returned 1
[0269.283] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc304053e
[0269.283] GetClipRgn (hdc=0xb0107bf, hrgn=0xc304053e) returned 0
[0269.284] SelectClipRgn (hdc=0xb0107bf, hrgn=0x10407a1) returned 2
[0269.284] DeleteObject (ho=0xc304053e) returned 1
[0269.284] DeleteObject (ho=0x10407a1) returned 1
[0269.284] OffsetViewportOrgEx (in: hdc=0xb0107bf, x=0, y=0, lppt=0x234adac | out: lppt=0x234adac) returned 1
[0269.284] IsAppThemed () returned 0x1
[0269.284] GetThemeAppProperties () returned 0x3
[0269.284] GetThemeAppProperties () returned 0x3
[0269.284] GetThemeBackgroundContentRect () returned 0x0
[0269.284] RestoreDC (hdc=0xb0107bf, nSavedDC=-1) returned 1
[0269.284] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb0107bf) returned 0x0
[0269.284] IsAppThemed () returned 0x1
[0269.284] GetThemeAppProperties () returned 0x3
[0269.284] GetThemeAppProperties () returned 0x3
[0269.284] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0269.284] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0269.284] GetCurrentObject (hdc=0xb0107bf, type=0x1) returned 0xb00017
[0269.284] GetCurrentObject (hdc=0xb0107bf, type=0x2) returned 0x900010
[0269.285] GetCurrentObject (hdc=0xb0107bf, type=0x7) returned 0x1e0507b9
[0269.285] GetCurrentObject (hdc=0xb0107bf, type=0x6) returned 0x8a01c2
[0269.285] SaveDC (hdc=0xb0107bf) returned 1
[0269.285] GetTextAlign (hdc=0xb0107bf) returned 0x0
[0269.285] GetTextColor (hdc=0xb0107bf) returned 0x0
[0269.285] GetCurrentObject (hdc=0xb0107bf, type=0x6) returned 0x8a01c2
[0269.285] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0269.285] SelectObject (hdc=0xb0107bf, h=0x450a0799) returned 0x8a01c2
[0269.285] GetBkMode (hdc=0xb0107bf) returned 2
[0269.285] SetBkMode (hdc=0xb0107bf, mode=1) returned 2
[0269.285] DrawTextExW (in: hdc=0xb0107bf, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x234b14c | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0269.286] DrawTextExW (in: hdc=0xb0107bf, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x234b14c | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0269.286] RestoreDC (hdc=0xb0107bf, nSavedDC=-1) returned 1
[0269.286] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb0107bf) returned 0x0
[0269.286] GetFocus () returned 0x202c6
[0269.286] IsAppThemed () returned 0x1
[0269.286] GetThemeAppProperties () returned 0x3
[0269.286] GetThemeAppProperties () returned 0x3
[0269.287] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0269.287] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xb0107bf, x1=0, y1=0, rop=0xcc0020) returned 1
[0269.287] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb0107bf) returned 0x0
[0269.287] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0269.287] SelectObject (hdc=0xb0107bf, h=0x85000f) returned 0x1e0507b9
[0269.287] DeleteDC (hdc=0xb0107bf) returned 1
[0269.287] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0269.287] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0269.288] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x234b248, cPoints=0x1 | out: lpPoints=0x234b248) returned 25690608
[0269.288] WindowFromPoint (Point=0x215) returned 0x202c6
[0269.288] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1960215) returned 0x1
[0269.288] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0269.288] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0269.289] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.290] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0269.291] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.292] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0269.292] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.292] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0269.292] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0269.292] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e888) returned 0x0
[0269.293] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0269.293] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0269.293] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0269.293] GetSystemMetrics (nIndex=5) returned 1
[0269.293] GetSystemMetrics (nIndex=6) returned 1
[0269.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.294] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0269.294] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.294] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0269.364] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.364] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0269.365] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.365] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0269.366] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.366] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0269.366] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.366] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0269.366] GetSystemMetrics (nIndex=5) returned 1
[0269.367] GetSystemMetrics (nIndex=6) returned 1
[0269.367] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.367] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0269.367] GetSystemMetrics (nIndex=5) returned 1
[0269.367] GetSystemMetrics (nIndex=6) returned 1
[0269.367] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.367] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0269.368] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.368] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0269.368] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.368] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0269.369] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.369] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0269.369] GetSystemMetrics (nIndex=59) returned 1460
[0269.369] GetSystemMetrics (nIndex=60) returned 920
[0269.369] GetSystemMetrics (nIndex=34) returned 136
[0269.369] GetSystemMetrics (nIndex=35) returned 39
[0269.369] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.369] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0269.369] GetCurrentThreadId () returned 0x11d0
[0269.369] GetCurrentThreadId () returned 0x11d0
[0269.370] GetCurrentThreadId () returned 0x11d0
[0269.370] GetCurrentThreadId () returned 0x11d0
[0269.370] GetCurrentThreadId () returned 0x11d0
[0269.370] GetCurrentThreadId () returned 0x11d0
[0269.370] GetCurrentThreadId () returned 0x11d0
[0269.370] GetCurrentThreadId () returned 0x11d0
[0269.370] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.370] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0269.370] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0269.370] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0269.371] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.371] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0269.371] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.371] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0269.372] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x31013e
[0269.373] SetWindowLongW (hWnd=0x31013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0269.373] GetWindowLongW (hWnd=0x31013e, nIndex=-4) returned 1950089536
[0269.373] SetWindowLongW (hWnd=0x31013e, nIndex=-4, dwNewLong=79649214) returned 1950089536
[0269.373] GetWindowLongW (hWnd=0x31013e, nIndex=-4) returned 79649214
[0269.373] GetWindowLongW (hWnd=0x31013e, nIndex=-16) returned 113311744
[0269.374] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x31013e, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0269.374] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x31013e, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0269.375] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x31013e, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0269.375] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x31013e, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0269.375] GetClientRect (in: hWnd=0x31013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0269.375] GetWindowRect (in: hWnd=0x31013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0269.376] SetWindowTextW (hWnd=0x31013e, lpString="WindowsFormsParkingWindow") returned 1
[0269.376] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x31013e, Msg=0xc, wParam=0x0, lParam=0x2343194) returned 0x1
[0269.377] GetParent (hWnd=0x31013e) returned 0x0
[0269.377] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0269.377] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x31013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x140122
[0269.377] SetWindowLongW (hWnd=0x140122, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0269.378] GetWindowLongW (hWnd=0x140122, nIndex=-4) returned 1868147648
[0269.378] SetWindowLongW (hWnd=0x140122, nIndex=-4, dwNewLong=79649014) returned 1868147648
[0269.378] GetWindowLongW (hWnd=0x140122, nIndex=-4) returned 79649014
[0269.378] GetWindowLongW (hWnd=0x140122, nIndex=-16) returned 1174405133
[0269.378] GetWindowLongW (hWnd=0x140122, nIndex=-12) returned 0
[0269.378] SetWindowLongW (hWnd=0x140122, nIndex=-12, dwNewLong=1311010) returned 0
[0269.378] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0269.379] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0269.379] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0269.380] GetClientRect (in: hWnd=0x140122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0269.380] GetWindowRect (in: hWnd=0x140122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0269.380] GetParent (hWnd=0x140122) returned 0x31013e
[0269.380] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x31013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0269.381] SetWindowTextW (hWnd=0x140122, lpString="Enter password: ") returned 1
[0269.381] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0269.382] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0269.382] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0269.382] GetClientRect (in: hWnd=0x140122, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0269.382] GetWindowRect (in: hWnd=0x140122, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0269.382] GetParent (hWnd=0x140122) returned 0x31013e
[0269.382] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x31013e, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0269.382] SendMessageW (hWnd=0x140122, Msg=0x2210, wParam=0x1220001, lParam=0x140122) returned 0x0
[0269.382] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x2210, wParam=0x1220001, lParam=0x140122) returned 0x0
[0269.383] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0269.383] GetParent (hWnd=0x140122) returned 0x31013e
[0269.383] GdipCreateFromHWND (hwnd=0x140122, graphics=0x53e994) returned 0x0
[0269.383] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0269.384] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0269.384] GetProcessWindowStation () returned 0x13c
[0269.384] GetCapture () returned 0x202c6
[0269.384] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0269.384] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0269.384] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0269.384] ReleaseCapture () returned 1
[0269.384] GetActiveWindow () returned 0x70036
[0269.384] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0269.385] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.385] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0269.385] GetCursorPos (in: lpPoint=0x2357ff8 | out: lpPoint=0x2357ff8*(x=533, y=406)) returned 1
[0269.385] MonitorFromPoint (pt=0x215, dwFlags=0x196) returned 0x10001
[0269.385] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0269.386] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xe0107bf
[0269.386] GetDeviceCaps (hdc=0xe0107bf, index=12) returned 32
[0269.386] GetDeviceCaps (hdc=0xe0107bf, index=14) returned 1
[0269.386] DeleteDC (hdc=0xe0107bf) returned 1
[0269.386] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0269.387] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0269.387] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xf02ca
[0269.388] SetWindowLongW (hWnd=0xf02ca, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0269.388] GetWindowLongW (hWnd=0xf02ca, nIndex=-4) returned 1950089536
[0269.388] SetWindowLongW (hWnd=0xf02ca, nIndex=-4, dwNewLong=79649294) returned 1950089536
[0269.388] GetWindowLongW (hWnd=0xf02ca, nIndex=-4) returned 79649294
[0269.388] GetWindowLongW (hWnd=0xf02ca, nIndex=-16) returned 113770496
[0269.388] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0269.390] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0269.391] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0269.391] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0269.391] GetWindowRect (in: hWnd=0xf02ca, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0269.391] SetWindowTextW (hWnd=0xf02ca, lpString="Ransomware") returned 1
[0269.391] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xc, wParam=0x0, lParam=0x234b310) returned 0x1
[0269.393] GetStartupInfoW (in: lpStartupInfo=0x2358334 | out: lpStartupInfo=0x2358334*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0269.397] GetParent (hWnd=0xf02ca) returned 0x0
[0269.397] SetWindowLongW (hWnd=0xf02ca, nIndex=-8, dwNewLong=0) returned 0
[0269.397] SendMessageW (hWnd=0xf02ca, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0269.397] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0269.398] SendMessageW (hWnd=0xf02ca, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0269.398] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0269.398] GetSystemMenu (hWnd=0xf02ca, bRevert=0) returned 0x51021b
[0269.399] GetWindowPlacement (in: hWnd=0xf02ca, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0269.399] EnableMenuItem (hMenu=0x51021b, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0269.399] EnableMenuItem (hMenu=0x51021b, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0269.399] EnableMenuItem (hMenu=0x51021b, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0269.399] EnableMenuItem (hMenu=0x51021b, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0269.399] EnableMenuItem (hMenu=0x51021b, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0269.399] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0269.399] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0269.399] GetWindowRect (in: hWnd=0xf02ca, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0269.400] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.400] GetWindowLongW (hWnd=0xf02ca, nIndex=-16) returned 113770496
[0269.400] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.401] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.401] GetSystemMetrics (nIndex=42) returned 0
[0269.401] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.401] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0269.401] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.401] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.401] GetSystemMetrics (nIndex=42) returned 0
[0269.401] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.401] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0269.401] GetCursorPos (in: lpPoint=0x23584a8 | out: lpPoint=0x23584a8*(x=533, y=406)) returned 1
[0269.401] MonitorFromPoint (pt=0x215, dwFlags=0x196) returned 0x10001
[0269.401] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0269.402] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x120107bf
[0269.402] GetDeviceCaps (hdc=0x120107bf, index=12) returned 32
[0269.402] GetDeviceCaps (hdc=0x120107bf, index=14) returned 1
[0269.402] DeleteDC (hdc=0x120107bf) returned 1
[0269.402] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0269.402] GetWindowLongW (hWnd=0xf02ca, nIndex=-16) returned 113770496
[0269.402] GetWindowLongW (hWnd=0xf02ca, nIndex=-20) returned 327937
[0269.402] SetWindowLongW (hWnd=0xf02ca, nIndex=-16, dwNewLong=46661632) returned 113770496
[0269.402] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0269.403] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0269.404] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0269.404] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0269.404] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0269.404] SetWindowLongW (hWnd=0xf02ca, nIndex=-20, dwNewLong=327681) returned 327937
[0269.404] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0269.405] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0269.405] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0269.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0269.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0269.406] SetWindowPos (hWnd=0xf02ca, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0269.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0269.407] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0269.407] GetWindowPlacement (in: hWnd=0xf02ca, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0269.407] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0269.407] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0269.407] GetWindowRect (in: hWnd=0xf02ca, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0269.408] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0269.408] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0269.409] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0269.409] RedrawWindow (hWnd=0xf02ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0269.409] GetSystemMenu (hWnd=0xf02ca, bRevert=0) returned 0x51021b
[0269.409] GetWindowPlacement (in: hWnd=0xf02ca, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0269.409] EnableMenuItem (hMenu=0x51021b, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0269.409] EnableMenuItem (hMenu=0x51021b, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0269.409] EnableMenuItem (hMenu=0x51021b, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0269.409] EnableMenuItem (hMenu=0x51021b, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0269.409] EnableMenuItem (hMenu=0x51021b, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0269.410] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0269.410] GetWindowLongW (hWnd=0xf02ca, nIndex=-8) returned 0
[0269.410] SetWindowLongW (hWnd=0xf02ca, nIndex=-8, dwNewLong=458806) returned 0
[0269.411] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0269.411] GetProcessWindowStation () returned 0x13c
[0269.411] GetCurrentThreadId () returned 0x11d0
[0269.412] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf591e, lParam=0x0) returned 1
[0269.412] IsWindowVisible (hWnd=0xf02ca) returned 0
[0269.412] IsWindowVisible (hWnd=0x70036) returned 1
[0269.412] IsWindowEnabled (hWnd=0x70036) returned 1
[0269.412] IsWindowVisible (hWnd=0x602b6) returned 0
[0269.412] IsWindowVisible (hWnd=0x901f8) returned 0
[0269.412] IsWindowVisible (hWnd=0x202d0) returned 0
[0269.413] IsWindowVisible (hWnd=0x202d4) returned 0
[0269.413] GetActiveWindow () returned 0x70036
[0269.413] GetFocus () returned 0x202c6
[0269.413] IsWindow (hWnd=0x70036) returned 1
[0269.413] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0269.413] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0269.414] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0269.414] GetWindowLongW (hWnd=0xf02ca, nIndex=-8) returned 458806
[0269.414] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0269.415] GetCurrentThreadId () returned 0x11d0
[0269.415] GetWindowLongW (hWnd=0xf02ca, nIndex=-8) returned 458806
[0269.415] IsWindowEnabled (hWnd=0x70036) returned 0
[0269.415] IsWindowEnabled (hWnd=0xf02ca) returned 1
[0269.415] ShowWindow (hWnd=0xf02ca, nCmdShow=5) returned 0
[0269.415] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0269.415] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0269.415] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.416] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0269.416] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0xf02ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x10004e
[0269.417] SetWindowLongW (hWnd=0x10004e, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0269.417] GetWindowLongW (hWnd=0x10004e, nIndex=-4) returned 1868026976
[0269.417] SetWindowLongW (hWnd=0x10004e, nIndex=-4, dwNewLong=79649334) returned 1868026976
[0269.417] GetWindowLongW (hWnd=0x10004e, nIndex=-4) returned 79649334
[0269.417] GetWindowLongW (hWnd=0x10004e, nIndex=-16) returned 1174470848
[0269.417] GetWindowLongW (hWnd=0x10004e, nIndex=-12) returned 0
[0269.417] SetWindowLongW (hWnd=0x10004e, nIndex=-12, dwNewLong=1048654) returned 0
[0269.417] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0269.419] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0269.419] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0269.420] SendMessageW (hWnd=0x10004e, Msg=0x2055, wParam=0x10004e, lParam=0x3) returned 0x2
[0269.420] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0269.420] GetWindow (hWnd=0x10004e, uCmd=0x3) returned 0x0
[0269.420] GetClientRect (in: hWnd=0x10004e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0269.420] GetWindowRect (in: hWnd=0x10004e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0269.420] GetParent (hWnd=0x10004e) returned 0xf02ca
[0269.420] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf02ca, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0269.420] SendMessageW (hWnd=0x10004e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0269.420] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0269.421] SendMessageW (hWnd=0x10004e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0269.421] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0269.421] GetSystemMetrics (nIndex=5) returned 1
[0269.421] GetSystemMetrics (nIndex=6) returned 1
[0269.421] SendMessageW (hWnd=0x10004e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0269.421] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0269.421] SendMessageW (hWnd=0x10004e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0269.421] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0269.422] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0269.422] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0269.422] GetClientRect (in: hWnd=0x10004e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0269.422] GetWindowRect (in: hWnd=0x10004e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0269.422] GetParent (hWnd=0x10004e) returned 0xf02ca
[0269.422] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf02ca, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0269.422] SendMessageW (hWnd=0x10004e, Msg=0x2210, wParam=0x4e0001, lParam=0x10004e) returned 0x0
[0269.422] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x2210, wParam=0x4e0001, lParam=0x10004e) returned 0x0
[0269.422] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0269.422] GetParent (hWnd=0x10004e) returned 0xf02ca
[0269.422] GetParent (hWnd=0x140122) returned 0x31013e
[0269.422] SetParent (hWndChild=0x140122, hWndNewParent=0xf02ca) returned 0x31013e
[0269.422] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0269.423] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0269.423] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0269.424] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0269.424] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0269.424] GetClientRect (in: hWnd=0x140122, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0269.424] GetWindowRect (in: hWnd=0x140122, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0269.424] GetParent (hWnd=0x140122) returned 0xf02ca
[0269.424] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf02ca, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0269.424] GetClientRect (in: hWnd=0x140122, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0269.424] GetWindowRect (in: hWnd=0x140122, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0269.424] GetParent (hWnd=0x140122) returned 0xf02ca
[0269.424] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf02ca, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0269.424] GetParent (hWnd=0x140122) returned 0xf02ca
[0269.424] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0269.424] GetWindow (hWnd=0x140122, uCmd=0x3) returned 0x0
[0269.424] SetWindowPos (hWnd=0x140122, hWndInsertAfter=0x10004e, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0269.424] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0269.425] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0269.425] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0269.425] GetClientRect (in: hWnd=0x140122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0269.425] GetWindowRect (in: hWnd=0x140122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0269.425] GetParent (hWnd=0x140122) returned 0xf02ca
[0269.425] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf02ca, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0269.425] GetParent (hWnd=0x140122) returned 0xf02ca
[0269.425] GetWindow (hWnd=0x140122, uCmd=0x3) returned 0x10004e
[0269.425] GetWindowThreadProcessId (in: hWnd=0x140122, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0269.426] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0269.426] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.426] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0269.426] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0xf02ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1301e2
[0269.427] SetWindowLongW (hWnd=0x1301e2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0269.427] GetWindowLongW (hWnd=0x1301e2, nIndex=-4) returned 1868032000
[0269.427] SetWindowLongW (hWnd=0x1301e2, nIndex=-4, dwNewLong=79649454) returned 1868032000
[0269.427] GetWindowLongW (hWnd=0x1301e2, nIndex=-4) returned 79649454
[0269.427] GetWindowLongW (hWnd=0x1301e2, nIndex=-16) returned 1174470667
[0269.427] GetWindowLongW (hWnd=0x1301e2, nIndex=-12) returned 0
[0269.427] SetWindowLongW (hWnd=0x1301e2, nIndex=-12, dwNewLong=1245666) returned 0
[0269.428] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0269.428] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0269.428] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0269.430] SendMessageW (hWnd=0x1301e2, Msg=0x2055, wParam=0x1301e2, lParam=0x3) returned 0x2
[0269.430] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0269.430] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0269.430] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0269.430] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0269.430] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0269.430] RedrawWindow (hWnd=0x10004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0269.430] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0269.430] RedrawWindow (hWnd=0x140122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0269.430] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0269.430] RedrawWindow (hWnd=0x1301e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0269.430] RedrawWindow (hWnd=0xf02ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0269.431] GetWindow (hWnd=0x1301e2, uCmd=0x3) returned 0x140122
[0269.431] GetClientRect (in: hWnd=0x1301e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0269.431] GetWindowRect (in: hWnd=0x1301e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0269.431] GetParent (hWnd=0x1301e2) returned 0xf02ca
[0269.431] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf02ca, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0269.431] SetWindowTextW (hWnd=0x1301e2, lpString="OK") returned 1
[0269.431] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0xc, wParam=0x0, lParam=0x234f7d0) returned 0x1
[0269.431] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0269.432] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0269.432] GetClientRect (in: hWnd=0x1301e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0269.432] GetWindowRect (in: hWnd=0x1301e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0269.432] GetParent (hWnd=0x1301e2) returned 0xf02ca
[0269.432] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf02ca, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0269.432] SendMessageW (hWnd=0x1301e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1301e2) returned 0x0
[0269.432] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1301e2) returned 0x0
[0269.432] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0269.432] GetParent (hWnd=0x1301e2) returned 0xf02ca
[0269.432] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0269.433] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.433] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0269.433] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0xf02ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1600ea
[0269.433] SetWindowLongW (hWnd=0x1600ea, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0269.433] GetWindowLongW (hWnd=0x1600ea, nIndex=-4) returned 1868032000
[0269.434] SetWindowLongW (hWnd=0x1600ea, nIndex=-4, dwNewLong=79649254) returned 1868032000
[0269.434] GetWindowLongW (hWnd=0x1600ea, nIndex=-4) returned 79649254
[0269.434] GetWindowLongW (hWnd=0x1600ea, nIndex=-16) returned 1174470667
[0269.434] GetWindowLongW (hWnd=0x1600ea, nIndex=-12) returned 0
[0269.434] SetWindowLongW (hWnd=0x1600ea, nIndex=-12, dwNewLong=1442026) returned 0
[0269.434] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1600ea, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0269.435] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1600ea, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0269.435] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1600ea, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0269.435] SendMessageW (hWnd=0x1600ea, Msg=0x2055, wParam=0x1600ea, lParam=0x3) returned 0x2
[0269.436] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0269.436] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1600ea, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0269.436] GetWindow (hWnd=0x1600ea, uCmd=0x3) returned 0x1301e2
[0269.436] GetClientRect (in: hWnd=0x1600ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0269.436] GetWindowRect (in: hWnd=0x1600ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0269.436] GetParent (hWnd=0x1600ea) returned 0xf02ca
[0269.436] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf02ca, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0269.436] SetWindowTextW (hWnd=0x1600ea, lpString="Cancel") returned 1
[0269.436] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1600ea, Msg=0xc, wParam=0x0, lParam=0x2353090) returned 0x1
[0269.436] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1600ea, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0269.437] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1600ea, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0269.437] GetClientRect (in: hWnd=0x1600ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0269.437] GetWindowRect (in: hWnd=0x1600ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0269.437] GetParent (hWnd=0x1600ea) returned 0xf02ca
[0269.437] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xf02ca, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0269.437] SendMessageW (hWnd=0x1600ea, Msg=0x2210, wParam=0xea0001, lParam=0x1600ea) returned 0x0
[0269.437] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1600ea, Msg=0x2210, wParam=0xea0001, lParam=0x1600ea) returned 0x0
[0269.437] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1600ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0269.437] GetParent (hWnd=0x1600ea) returned 0xf02ca
[0269.437] GetDC (hWnd=0x0) returned 0x60100ce
[0269.437] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e320) returned 0x0
[0269.438] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0269.438] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0269.438] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0269.438] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0269.438] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0269.438] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0269.438] GetWindowLongW (hWnd=0xf02ca, nIndex=-8) returned 458806
[0269.438] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0269.438] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0269.438] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x190107bf
[0269.439] GetDeviceCaps (hdc=0x190107bf, index=12) returned 32
[0269.439] GetDeviceCaps (hdc=0x190107bf, index=14) returned 1
[0269.439] DeleteDC (hdc=0x190107bf) returned 1
[0269.439] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0269.439] GetWindowThreadProcessId (in: hWnd=0xf02ca, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0269.439] GetCurrentThreadId () returned 0x11d0
[0269.439] PostMessageW (hWnd=0xf02ca, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0269.439] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.439] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.439] GetSystemMetrics (nIndex=42) returned 0
[0269.439] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.439] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0269.439] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0269.440] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0269.440] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0269.440] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0269.456] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0xf02ca) returned 0x1
[0269.472] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0269.472] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0269.472] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0269.472] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0269.476] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0269.476] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0269.476] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0269.477] GetFocus () returned 0x202c6
[0269.477] IsChild (hWndParent=0xf02ca, hWnd=0x202c6) returned 0
[0269.477] GetFocus () returned 0x202c6
[0269.477] SetFocus (hWnd=0x10004e) returned 0x202c6
[0269.479] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x10004e, lParam=0x0) returned 0x0
[0269.479] GetCapture () returned 0x0
[0269.479] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0269.481] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0269.482] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0269.484] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0269.484] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0269.484] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0269.484] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0269.485] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0269.485] GetParent (hWnd=0xf02ca) returned 0x0
[0269.485] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0269.486] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0269.486] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0269.487] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0269.487] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0269.487] GetSysColorBrush (nIndex=5) returned 0x100079
[0269.488] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0269.488] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0269.489] SendMessageW (hWnd=0x10004e, Msg=0x2111, wParam=0x100004e, lParam=0x10004e) returned 0x0
[0269.489] SendMessageW (hWnd=0x10004e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0269.489] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0269.489] GetKeyState (nVirtKey=1) returned 1
[0269.489] GetKeyState (nVirtKey=2) returned 0
[0269.490] GetKeyState (nVirtKey=4) returned 0
[0269.490] GetKeyState (nVirtKey=5) returned 0
[0269.502] GetKeyState (nVirtKey=6) returned 0
[0269.502] GetWindowTextLengthW (hWnd=0x10004e) returned 0
[0269.502] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0269.502] SendMessageW (hWnd=0x10004e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0269.502] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0269.503] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0269.503] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0269.508] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0269.510] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0269.510] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0269.510] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0269.511] GetWindowPlacement (in: hWnd=0xf02ca, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0269.511] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0269.511] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.511] GetSystemMetrics (nIndex=42) returned 0
[0269.511] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0269.511] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0269.511] GetCurrentObject (hdc=0xf0105ee, type=0x1) returned 0xb00017
[0269.511] GetCurrentObject (hdc=0xf0105ee, type=0x2) returned 0x900010
[0269.511] GetCurrentObject (hdc=0xf0105ee, type=0x7) returned 0xffffffffcc0507bd
[0269.511] GetCurrentObject (hdc=0xf0105ee, type=0x6) returned 0x8a01c2
[0269.511] SaveDC (hdc=0xf0105ee) returned 1
[0269.512] GetNearestColor (hdc=0xf0105ee, color=0xf0f0f0) returned 0xf0f0f0
[0269.512] CreateSolidBrush (color=0xf0f0f0) returned 0xbe10078d
[0269.512] FillRect (hDC=0xf0105ee, lprc=0x53e250, hbr=0xbe10078d) returned 1
[0269.512] DeleteObject (ho=0xbe10078d) returned 1
[0269.512] RestoreDC (hdc=0xf0105ee, nSavedDC=-1) returned 1
[0269.512] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0269.512] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0269.512] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0269.513] GetWindowPlacement (in: hWnd=0xf02ca, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0269.514] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0269.514] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.514] GetSystemMetrics (nIndex=42) returned 0
[0269.514] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0269.514] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0269.514] GetCurrentObject (hdc=0x2f0107bf, type=0x1) returned 0xb00017
[0269.514] GetCurrentObject (hdc=0x2f0107bf, type=0x2) returned 0x900010
[0269.514] GetCurrentObject (hdc=0x2f0107bf, type=0x7) returned 0xffffffffa6050785
[0269.514] GetCurrentObject (hdc=0x2f0107bf, type=0x6) returned 0x8a01c2
[0269.514] SaveDC (hdc=0x2f0107bf) returned 1
[0269.514] GetNearestColor (hdc=0x2f0107bf, color=0xf0f0f0) returned 0xf0f0f0
[0269.514] CreateSolidBrush (color=0xf0f0f0) returned 0xbf10078d
[0269.514] FillRect (hDC=0x2f0107bf, lprc=0x53dc18, hbr=0xbf10078d) returned 1
[0269.515] DeleteObject (ho=0xbf10078d) returned 1
[0269.515] RestoreDC (hdc=0x2f0107bf, nSavedDC=-1) returned 1
[0269.515] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.515] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.515] GetSystemMetrics (nIndex=42) returned 0
[0269.515] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.515] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0269.515] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0269.515] GetCurrentObject (hdc=0x2f0107bf, type=0x1) returned 0xb00017
[0269.515] GetCurrentObject (hdc=0x2f0107bf, type=0x2) returned 0x900010
[0269.515] GetCurrentObject (hdc=0x2f0107bf, type=0x7) returned 0xffffffffa6050785
[0269.515] GetCurrentObject (hdc=0x2f0107bf, type=0x6) returned 0x8a01c2
[0269.515] SaveDC (hdc=0x2f0107bf) returned 1
[0269.515] GetNearestColor (hdc=0x2f0107bf, color=0xf0f0f0) returned 0xf0f0f0
[0269.515] CreateSolidBrush (color=0xf0f0f0) returned 0xc010078d
[0269.516] FillRect (hDC=0x2f0107bf, lprc=0x53dbb8, hbr=0xc010078d) returned 1
[0269.516] DeleteObject (ho=0xc010078d) returned 1
[0269.516] RestoreDC (hdc=0x2f0107bf, nSavedDC=-1) returned 1
[0269.516] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.516] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.516] GetSystemMetrics (nIndex=42) returned 0
[0269.516] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.516] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0269.517] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0269.517] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0269.518] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0269.518] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0269.519] GetStockObject (i=5) returned 0x900015
[0269.519] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1600ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0269.520] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1600ea, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0269.520] GetStockObject (i=5) returned 0x900015
[0269.520] GetWindowPlacement (in: hWnd=0xf02ca, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0269.520] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0269.520] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0269.520] GetWindowRect (in: hWnd=0xf02ca, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0269.531] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0269.531] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0269.532] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0269.532] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0269.532] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0269.532] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0269.532] GetWindowRect (in: hWnd=0xf02ca, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0269.532] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.533] IsWindowUnicode (hWnd=0xf02ca) returned 1
[0269.533] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.533] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.533] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.533] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0269.533] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.533] IsWindowUnicode (hWnd=0xf02ca) returned 1
[0269.533] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.533] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.533] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.533] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.534] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x84, wParam=0x0, lParam=0x1930350) returned 0x1
[0269.534] IsWindowUnicode (hWnd=0x1301e2) returned 1
[0269.534] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.534] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.534] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.534] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.534] IsWindowUnicode (hWnd=0x202c6) returned 1
[0269.534] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.534] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.535] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.535] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0269.535] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0269.535] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.535] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x84, wParam=0x0, lParam=0x1930350) returned 0x1
[0269.535] IsWindowUnicode (hWnd=0x1301e2) returned 1
[0269.535] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.535] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x84, wParam=0x0, lParam=0x1930350) returned 0x1
[0269.535] SetCursor (hCursor=0x10003) returned 0x10003
[0269.535] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.535] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.536] _TrackMouseEvent (in: lpEventTrack=0x2359a24 | out: lpEventTrack=0x2359a24) returned 1
[0269.536] SendMessageW (hWnd=0x1301e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0269.536] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0269.536] InvalidateRect (hWnd=0x1301e2, lpRect=0x0, bErase=0) returned 1
[0269.536] GetKeyState (nVirtKey=1) returned 1
[0269.536] GetKeyState (nVirtKey=2) returned 0
[0269.536] GetKeyState (nVirtKey=4) returned 0
[0269.536] GetKeyState (nVirtKey=5) returned 0
[0269.536] GetKeyState (nVirtKey=6) returned 0
[0269.536] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.536] IsWindowUnicode (hWnd=0xf02ca) returned 1
[0269.536] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.537] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.537] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.537] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.538] IsWindowUnicode (hWnd=0xf02ca) returned 1
[0269.538] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.538] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.538] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.538] BeginPaint (in: hWnd=0xf02ca, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x8b010786
[0269.539] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0269.539] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.539] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.539] GetSystemMetrics (nIndex=42) returned 0
[0269.539] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.539] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0269.539] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0269.539] EndPaint (hWnd=0xf02ca, lpPaint=0x53e30c) returned 1
[0269.539] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.540] IsWindowUnicode (hWnd=0x10004e) returned 1
[0269.540] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.540] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.540] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0269.540] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0269.540] SetTextColor (hdc=0x300107bf, color=0x0) returned 0x0
[0269.540] SetBkColor (hdc=0x300107bf, color=0xffffff) returned 0xffffff
[0269.542] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.542] IsWindowUnicode (hWnd=0x140122) returned 1
[0269.542] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.542] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.542] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.542] BeginPaint (in: hWnd=0x140122, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x10105d6
[0269.542] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0269.542] CreateCompatibleDC (hdc=0x10105d6) returned 0x26010535
[0269.542] SelectObject (hdc=0x26010535, h=0x1e0507b9) returned 0x85000f
[0269.542] GdipCreateFromHDC (hdc=0x26010535, graphics=0x53e30c) returned 0x0
[0269.543] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0269.543] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0269.543] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0269.543] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.543] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0269.543] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0269.543] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0269.543] LocalFree (hMem=0x89ec80) returned 0x0
[0269.543] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.543] GdipCreateRegion (region=0x53e354) returned 0x0
[0269.543] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.543] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0269.543] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0269.543] GetWindowTextLengthW (hWnd=0x140122) returned 16
[0269.544] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0269.544] GetSystemMetrics (nIndex=42) returned 0
[0269.544] GetWindowTextW (in: hWnd=0x140122, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0269.544] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0269.544] GetClientRect (in: hWnd=0x140122, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0269.544] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0269.544] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0269.544] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0269.544] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.544] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0269.544] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0269.544] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0269.544] LocalFree (hMem=0x89ee08) returned 0x0
[0269.544] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0269.544] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0269.544] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0269.545] LocalFree (hMem=0x89ee08) returned 0x0
[0269.545] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.545] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0269.545] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0269.545] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0269.545] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0269.545] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0269.545] GetCurrentObject (hdc=0x26010535, type=0x1) returned 0xb00017
[0269.545] GetCurrentObject (hdc=0x26010535, type=0x2) returned 0x900010
[0269.545] GetCurrentObject (hdc=0x26010535, type=0x7) returned 0x1e0507b9
[0269.545] GetCurrentObject (hdc=0x26010535, type=0x6) returned 0x8a01c2
[0269.545] SaveDC (hdc=0x26010535) returned 1
[0269.545] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x82040798
[0269.545] GetClipRgn (hdc=0x26010535, hrgn=0x82040798) returned 0
[0269.545] SelectClipRgn (hdc=0x26010535, hrgn=0x60407a1) returned 2
[0269.546] DeleteObject (ho=0x82040798) returned 1
[0269.546] DeleteObject (ho=0x60407a1) returned 1
[0269.546] OffsetViewportOrgEx (in: hdc=0x26010535, x=0, y=0, lppt=0x2359f2c | out: lppt=0x2359f2c) returned 1
[0269.546] GetNearestColor (hdc=0x26010535, color=0xf0f0f0) returned 0xf0f0f0
[0269.546] CreateSolidBrush (color=0xf0f0f0) returned 0xc110078d
[0269.546] FillRect (hDC=0x26010535, lprc=0x53e1f4, hbr=0xc110078d) returned 1
[0269.546] DeleteObject (ho=0xc110078d) returned 1
[0269.546] RestoreDC (hdc=0x26010535, nSavedDC=-1) returned 1
[0269.546] GdipReleaseDC (graphics=0x5d92c30, hdc=0x26010535) returned 0x0
[0269.546] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb350dbd) returned 0x0
[0269.546] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.546] GetWindowTextLengthW (hWnd=0x140122) returned 16
[0269.546] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0269.546] GetSystemMetrics (nIndex=42) returned 0
[0269.546] GetWindowTextW (in: hWnd=0x140122, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0269.546] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0269.547] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0269.547] GetCurrentObject (hdc=0x26010535, type=0x1) returned 0xb00017
[0269.547] GetCurrentObject (hdc=0x26010535, type=0x2) returned 0x900010
[0269.547] GetCurrentObject (hdc=0x26010535, type=0x7) returned 0x1e0507b9
[0269.547] GetCurrentObject (hdc=0x26010535, type=0x6) returned 0x8a01c2
[0269.547] SaveDC (hdc=0x26010535) returned 1
[0269.547] GetNearestColor (hdc=0x26010535, color=0x0) returned 0x0
[0269.547] RestoreDC (hdc=0x26010535, nSavedDC=-1) returned 1
[0269.547] GdipReleaseDC (graphics=0x5d92c30, hdc=0x26010535) returned 0x0
[0269.548] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0269.548] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0269.548] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0269.548] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x235a234 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0269.548] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0269.549] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0269.549] GetCurrentObject (hdc=0x26010535, type=0x1) returned 0xb00017
[0269.549] GetCurrentObject (hdc=0x26010535, type=0x2) returned 0x900010
[0269.549] GetCurrentObject (hdc=0x26010535, type=0x7) returned 0x1e0507b9
[0269.549] GetCurrentObject (hdc=0x26010535, type=0x6) returned 0x8a01c2
[0269.549] SaveDC (hdc=0x26010535) returned 1
[0269.549] GetTextAlign (hdc=0x26010535) returned 0x0
[0269.549] GetTextColor (hdc=0x26010535) returned 0x0
[0269.549] GetCurrentObject (hdc=0x26010535, type=0x6) returned 0x8a01c2
[0269.549] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0269.549] SelectObject (hdc=0x26010535, h=0x730a066d) returned 0x8a01c2
[0269.549] GetBkMode (hdc=0x26010535) returned 2
[0269.549] SetBkMode (hdc=0x26010535, mode=1) returned 2
[0269.550] DrawTextExW (in: hdc=0x26010535, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x235a458 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0269.550] RestoreDC (hdc=0x26010535, nSavedDC=-1) returned 1
[0269.550] GdipReleaseDC (graphics=0x5d92c30, hdc=0x26010535) returned 0x0
[0269.550] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0269.550] BitBlt (hdc=0x10105d6, x=0, y=0, cx=250, cy=70, hdcSrc=0x26010535, x1=0, y1=0, rop=0xcc0020) returned 1
[0269.550] GdipReleaseDC (graphics=0x5d92c30, hdc=0x26010535) returned 0x0
[0269.550] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0269.551] SelectObject (hdc=0x26010535, h=0x85000f) returned 0x1e0507b9
[0269.551] DeleteDC (hdc=0x26010535) returned 1
[0269.551] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0269.551] EndPaint (hWnd=0x140122, lpPaint=0x53e2f0) returned 1
[0269.551] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.551] IsWindowUnicode (hWnd=0x1301e2) returned 1
[0269.551] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.551] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.551] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.551] BeginPaint (in: hWnd=0x1301e2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0269.552] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0269.552] CreateCompatibleDC (hdc=0x60100ce) returned 0x28010535
[0269.552] SelectObject (hdc=0x28010535, h=0x1e0507b9) returned 0x85000f
[0269.552] GdipCreateFromHDC (hdc=0x28010535, graphics=0x53e300) returned 0x0
[0269.552] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0269.552] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0269.552] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0269.552] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.552] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0269.552] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0269.557] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0269.557] LocalFree (hMem=0x89ee08) returned 0x0
[0269.557] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.557] GdipCreateRegion (region=0x53e348) returned 0x0
[0269.557] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.557] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0269.557] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0269.557] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb330dbd) returned 0x0
[0269.557] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.557] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0269.558] GetCurrentObject (hdc=0x28010535, type=0x1) returned 0xb00017
[0269.558] GetCurrentObject (hdc=0x28010535, type=0x2) returned 0x900010
[0269.558] GetCurrentObject (hdc=0x28010535, type=0x7) returned 0x1e0507b9
[0269.558] GetCurrentObject (hdc=0x28010535, type=0x6) returned 0x8a01c2
[0269.558] SaveDC (hdc=0x28010535) returned 1
[0269.558] GetNearestColor (hdc=0x28010535, color=0xf0f0f0) returned 0xf0f0f0
[0269.558] GetNearestColor (hdc=0x28010535, color=0xa0a0a0) returned 0xa0a0a0
[0269.558] GetNearestColor (hdc=0x28010535, color=0x696969) returned 0x696969
[0269.558] GetNearestColor (hdc=0x28010535, color=0xa0a0a0) returned 0xa0a0a0
[0269.558] GetNearestColor (hdc=0x28010535, color=0x0) returned 0x0
[0269.558] GetNearestColor (hdc=0x28010535, color=0xffffff) returned 0xffffff
[0269.558] GetNearestColor (hdc=0x28010535, color=0xe5e5e5) returned 0xe5e5e5
[0269.559] GetNearestColor (hdc=0x28010535, color=0xd7d7d7) returned 0xd7d7d7
[0269.559] GetNearestColor (hdc=0x28010535, color=0x0) returned 0x0
[0269.559] RestoreDC (hdc=0x28010535, nSavedDC=-1) returned 1
[0269.559] GdipReleaseDC (graphics=0x5d92c30, hdc=0x28010535) returned 0x0
[0269.559] IsAppThemed () returned 0x1
[0269.559] GetThemeAppProperties () returned 0x3
[0269.559] GetThemeAppProperties () returned 0x3
[0269.559] IsAppThemed () returned 0x1
[0269.559] GetThemeAppProperties () returned 0x3
[0269.559] GetThemeAppProperties () returned 0x3
[0269.559] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x235abc4 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0269.560] IsAppThemed () returned 0x1
[0269.560] GetThemeAppProperties () returned 0x3
[0269.560] GetThemeAppProperties () returned 0x3
[0269.560] IsAppThemed () returned 0x1
[0269.560] GetThemeAppProperties () returned 0x3
[0269.560] GetThemeAppProperties () returned 0x3
[0269.560] IsAppThemed () returned 0x1
[0269.560] GetThemeAppProperties () returned 0x3
[0269.560] GetThemeAppProperties () returned 0x3
[0269.560] IsAppThemed () returned 0x1
[0269.560] GetThemeAppProperties () returned 0x3
[0269.560] GetThemeAppProperties () returned 0x3
[0269.561] IsThemePartDefined () returned 0x1
[0269.561] IsAppThemed () returned 0x1
[0269.561] GetThemeAppProperties () returned 0x3
[0269.561] GetThemeAppProperties () returned 0x3
[0269.561] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0269.561] IsAppThemed () returned 0x1
[0269.561] GetThemeAppProperties () returned 0x3
[0269.561] GetThemeAppProperties () returned 0x3
[0269.561] IsAppThemed () returned 0x1
[0269.561] GetThemeAppProperties () returned 0x3
[0269.561] GetThemeAppProperties () returned 0x3
[0269.561] IsThemePartDefined () returned 0x1
[0269.561] GdipCreateRegion (region=0x53e064) returned 0x0
[0269.561] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.561] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0269.562] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.562] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0269.562] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0269.562] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0269.562] LocalFree (hMem=0x89ec80) returned 0x0
[0269.562] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0269.562] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0269.562] LocalFree (hMem=0x89ec80) returned 0x0
[0269.562] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.562] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0269.562] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0269.562] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0269.563] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.563] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0269.563] GetCurrentObject (hdc=0x28010535, type=0x1) returned 0xb00017
[0269.563] GetCurrentObject (hdc=0x28010535, type=0x2) returned 0x900010
[0269.563] GetCurrentObject (hdc=0x28010535, type=0x7) returned 0x1e0507b9
[0269.563] GetCurrentObject (hdc=0x28010535, type=0x6) returned 0x8a01c2
[0269.563] SaveDC (hdc=0x28010535) returned 1
[0269.563] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x70407a1
[0269.563] GetClipRgn (hdc=0x28010535, hrgn=0x70407a1) returned 0
[0269.563] SelectClipRgn (hdc=0x28010535, hrgn=0x86040798) returned 2
[0269.563] DeleteObject (ho=0x70407a1) returned 1
[0269.564] DeleteObject (ho=0x86040798) returned 1
[0269.564] OffsetViewportOrgEx (in: hdc=0x28010535, x=0, y=0, lppt=0x235b274 | out: lppt=0x235b274) returned 1
[0269.564] DrawThemeParentBackground () returned 0x0
[0269.564] GetWindowPlacement (in: hWnd=0xf02ca, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0269.564] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0269.564] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.564] GetSystemMetrics (nIndex=42) returned 0
[0269.564] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0269.565] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0269.565] GetCurrentObject (hdc=0x28010535, type=0x1) returned 0xb00017
[0269.565] GetCurrentObject (hdc=0x28010535, type=0x2) returned 0x900010
[0269.565] GetCurrentObject (hdc=0x28010535, type=0x7) returned 0x1e0507b9
[0269.565] GetCurrentObject (hdc=0x28010535, type=0x6) returned 0x8a01c2
[0269.565] SaveDC (hdc=0x28010535) returned 2
[0269.565] GetNearestColor (hdc=0x28010535, color=0xf0f0f0) returned 0xf0f0f0
[0269.565] CreateSolidBrush (color=0xf0f0f0) returned 0xc210078d
[0269.565] FillRect (hDC=0x28010535, lprc=0x53dac8, hbr=0xc210078d) returned 1
[0269.565] DeleteObject (ho=0xc210078d) returned 1
[0269.565] RestoreDC (hdc=0x28010535, nSavedDC=-1) returned 1
[0269.566] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.566] GetSystemMetrics (nIndex=42) returned 0
[0269.566] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0269.566] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0269.566] GetCurrentObject (hdc=0x28010535, type=0x1) returned 0xb00017
[0269.566] GetCurrentObject (hdc=0x28010535, type=0x2) returned 0x900010
[0269.566] GetCurrentObject (hdc=0x28010535, type=0x7) returned 0x1e0507b9
[0269.566] GetCurrentObject (hdc=0x28010535, type=0x6) returned 0x8a01c2
[0269.566] SaveDC (hdc=0x28010535) returned 2
[0269.567] GetNearestColor (hdc=0x28010535, color=0xf0f0f0) returned 0xf0f0f0
[0269.567] CreateSolidBrush (color=0xf0f0f0) returned 0xc310078d
[0269.567] FillRect (hDC=0x28010535, lprc=0x53da68, hbr=0xc310078d) returned 1
[0269.567] DeleteObject (ho=0xc310078d) returned 1
[0269.567] RestoreDC (hdc=0x28010535, nSavedDC=-1) returned 1
[0269.567] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.567] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.567] GetSystemMetrics (nIndex=42) returned 0
[0269.567] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.567] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0269.568] RestoreDC (hdc=0x28010535, nSavedDC=-1) returned 1
[0269.568] GdipReleaseDC (graphics=0x5d92c30, hdc=0x28010535) returned 0x0
[0269.568] IsAppThemed () returned 0x1
[0269.603] GetThemeAppProperties () returned 0x3
[0269.603] GetThemeAppProperties () returned 0x3
[0269.603] IsAppThemed () returned 0x1
[0269.603] GetThemeAppProperties () returned 0x3
[0269.603] GetThemeAppProperties () returned 0x3
[0269.603] IsThemePartDefined () returned 0x1
[0269.603] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0269.604] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.604] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0269.604] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.604] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0269.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.604] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0269.604] LocalFree (hMem=0x89ea88) returned 0x0
[0269.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0269.604] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0269.604] LocalFree (hMem=0x89eee8) returned 0x0
[0269.604] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.604] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0269.605] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0269.605] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0269.605] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.605] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0269.605] GetCurrentObject (hdc=0x28010535, type=0x1) returned 0xb00017
[0269.605] GetCurrentObject (hdc=0x28010535, type=0x2) returned 0x900010
[0269.605] GetCurrentObject (hdc=0x28010535, type=0x7) returned 0x1e0507b9
[0269.605] GetCurrentObject (hdc=0x28010535, type=0x6) returned 0x8a01c2
[0269.605] SaveDC (hdc=0x28010535) returned 1
[0269.605] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x87040798
[0269.605] GetClipRgn (hdc=0x28010535, hrgn=0x87040798) returned 0
[0269.605] SelectClipRgn (hdc=0x28010535, hrgn=0x90407a1) returned 2
[0269.606] DeleteObject (ho=0x87040798) returned 1
[0269.606] DeleteObject (ho=0x90407a1) returned 1
[0269.606] OffsetViewportOrgEx (in: hdc=0x28010535, x=0, y=0, lppt=0x235bafc | out: lppt=0x235bafc) returned 1
[0269.606] IsAppThemed () returned 0x1
[0269.606] GetThemeAppProperties () returned 0x3
[0269.606] GetThemeAppProperties () returned 0x3
[0269.606] DrawThemeBackground () returned 0x0
[0269.606] RestoreDC (hdc=0x28010535, nSavedDC=-1) returned 1
[0269.606] GdipReleaseDC (graphics=0x5d92c30, hdc=0x28010535) returned 0x0
[0269.606] GdipCreateRegion (region=0x53dfec) returned 0x0
[0269.606] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.606] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0269.607] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.607] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0269.607] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0269.607] LocalFree (hMem=0x89ea88) returned 0x0
[0269.607] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0269.607] LocalFree (hMem=0x89ea88) returned 0x0
[0269.607] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.607] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0269.607] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0269.607] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0269.607] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.607] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0269.607] GetCurrentObject (hdc=0x28010535, type=0x1) returned 0xb00017
[0269.607] GetCurrentObject (hdc=0x28010535, type=0x2) returned 0x900010
[0269.608] GetCurrentObject (hdc=0x28010535, type=0x7) returned 0x1e0507b9
[0269.608] GetCurrentObject (hdc=0x28010535, type=0x6) returned 0x8a01c2
[0269.608] SaveDC (hdc=0x28010535) returned 1
[0269.608] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa0407a1
[0269.608] GetClipRgn (hdc=0x28010535, hrgn=0xa0407a1) returned 0
[0269.608] SelectClipRgn (hdc=0x28010535, hrgn=0x88040798) returned 2
[0269.608] DeleteObject (ho=0xa0407a1) returned 1
[0269.608] DeleteObject (ho=0x88040798) returned 1
[0269.608] OffsetViewportOrgEx (in: hdc=0x28010535, x=0, y=0, lppt=0x235bdd0 | out: lppt=0x235bdd0) returned 1
[0269.608] IsAppThemed () returned 0x1
[0269.608] GetThemeAppProperties () returned 0x3
[0269.608] GetThemeAppProperties () returned 0x3
[0269.609] GetThemeBackgroundContentRect () returned 0x0
[0269.609] RestoreDC (hdc=0x28010535, nSavedDC=-1) returned 1
[0269.609] GdipReleaseDC (graphics=0x5d92c30, hdc=0x28010535) returned 0x0
[0269.609] IsAppThemed () returned 0x1
[0269.609] GetThemeAppProperties () returned 0x3
[0269.609] GetThemeAppProperties () returned 0x3
[0269.609] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0269.609] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0269.609] GetCurrentObject (hdc=0x28010535, type=0x1) returned 0xb00017
[0269.609] GetCurrentObject (hdc=0x28010535, type=0x2) returned 0x900010
[0269.609] GetCurrentObject (hdc=0x28010535, type=0x7) returned 0x1e0507b9
[0269.609] GetCurrentObject (hdc=0x28010535, type=0x6) returned 0x8a01c2
[0269.609] SaveDC (hdc=0x28010535) returned 1
[0269.609] GetTextAlign (hdc=0x28010535) returned 0x0
[0269.610] GetTextColor (hdc=0x28010535) returned 0x0
[0269.610] GetCurrentObject (hdc=0x28010535, type=0x6) returned 0x8a01c2
[0269.610] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0269.610] SelectObject (hdc=0x28010535, h=0x730a066d) returned 0x8a01c2
[0269.610] GetBkMode (hdc=0x28010535) returned 2
[0269.610] SetBkMode (hdc=0x28010535, mode=1) returned 2
[0269.610] DrawTextExW (in: hdc=0x28010535, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x235c170 | out: lpchText="OK", lprc=0x53df84) returned 13
[0269.610] DrawTextExW (in: hdc=0x28010535, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x235c170 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0269.611] RestoreDC (hdc=0x28010535, nSavedDC=-1) returned 1
[0269.611] GdipReleaseDC (graphics=0x5d92c30, hdc=0x28010535) returned 0x0
[0269.611] GetFocus () returned 0x10004e
[0269.611] IsAppThemed () returned 0x1
[0269.611] GetThemeAppProperties () returned 0x3
[0269.611] GetThemeAppProperties () returned 0x3
[0269.611] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0269.611] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x28010535, x1=0, y1=0, rop=0xcc0020) returned 1
[0269.612] GdipReleaseDC (graphics=0x5d92c30, hdc=0x28010535) returned 0x0
[0269.612] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0269.612] SelectObject (hdc=0x28010535, h=0x85000f) returned 0x1e0507b9
[0269.612] DeleteDC (hdc=0x28010535) returned 1
[0269.612] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0269.612] EndPaint (hWnd=0x1301e2, lpPaint=0x53e2e4) returned 1
[0269.612] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.612] IsWindowUnicode (hWnd=0x102dc) returned 1
[0269.612] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.613] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.613] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.614] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.614] IsWindowUnicode (hWnd=0x1600ea) returned 1
[0269.614] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.614] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.614] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.614] BeginPaint (in: hWnd=0x1600ea, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0269.614] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0269.614] CreateCompatibleDC (hdc=0xf0105ee) returned 0x2a010535
[0269.615] SelectObject (hdc=0x2a010535, h=0x1e0507b9) returned 0x85000f
[0269.615] GdipCreateFromHDC (hdc=0x2a010535, graphics=0x53e300) returned 0x0
[0269.619] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0269.619] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0269.620] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0269.620] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.620] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0269.620] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0269.620] LocalFree (hMem=0x89ea88) returned 0x0
[0269.620] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.620] GdipCreateRegion (region=0x53e348) returned 0x0
[0269.620] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.620] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0269.620] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0269.620] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb310dbd) returned 0x0
[0269.620] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.620] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0269.621] GetCurrentObject (hdc=0x2a010535, type=0x1) returned 0xb00017
[0269.621] GetCurrentObject (hdc=0x2a010535, type=0x2) returned 0x900010
[0269.621] GetCurrentObject (hdc=0x2a010535, type=0x7) returned 0x1e0507b9
[0269.621] GetCurrentObject (hdc=0x2a010535, type=0x6) returned 0x8a01c2
[0269.621] SaveDC (hdc=0x2a010535) returned 1
[0269.621] GetNearestColor (hdc=0x2a010535, color=0xf0f0f0) returned 0xf0f0f0
[0269.621] GetNearestColor (hdc=0x2a010535, color=0xa0a0a0) returned 0xa0a0a0
[0269.621] GetNearestColor (hdc=0x2a010535, color=0x696969) returned 0x696969
[0269.621] GetNearestColor (hdc=0x2a010535, color=0xa0a0a0) returned 0xa0a0a0
[0269.621] GetNearestColor (hdc=0x2a010535, color=0x0) returned 0x0
[0269.621] GetNearestColor (hdc=0x2a010535, color=0xffffff) returned 0xffffff
[0269.622] GetNearestColor (hdc=0x2a010535, color=0xe5e5e5) returned 0xe5e5e5
[0269.622] GetNearestColor (hdc=0x2a010535, color=0xd7d7d7) returned 0xd7d7d7
[0269.622] GetNearestColor (hdc=0x2a010535, color=0x0) returned 0x0
[0269.622] RestoreDC (hdc=0x2a010535, nSavedDC=-1) returned 1
[0269.622] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a010535) returned 0x0
[0269.622] IsAppThemed () returned 0x1
[0269.622] GetThemeAppProperties () returned 0x3
[0269.622] GetThemeAppProperties () returned 0x3
[0269.622] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0269.622] SendMessageW (hWnd=0xf02ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0269.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0269.623] IsAppThemed () returned 0x1
[0269.623] GetThemeAppProperties () returned 0x3
[0269.623] GetThemeAppProperties () returned 0x3
[0269.623] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x235c980 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0269.623] IsAppThemed () returned 0x1
[0269.623] GetThemeAppProperties () returned 0x3
[0269.623] GetThemeAppProperties () returned 0x3
[0269.623] IsAppThemed () returned 0x1
[0269.623] GetThemeAppProperties () returned 0x3
[0269.623] GetThemeAppProperties () returned 0x3
[0269.623] GetFocus () returned 0x10004e
[0269.623] IsAppThemed () returned 0x1
[0269.623] GetThemeAppProperties () returned 0x3
[0269.624] GetThemeAppProperties () returned 0x3
[0269.624] IsAppThemed () returned 0x1
[0269.624] GetThemeAppProperties () returned 0x3
[0269.624] GetThemeAppProperties () returned 0x3
[0269.624] IsThemePartDefined () returned 0x1
[0269.624] IsAppThemed () returned 0x1
[0269.624] GetThemeAppProperties () returned 0x3
[0269.624] GetThemeAppProperties () returned 0x3
[0269.624] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0269.624] IsAppThemed () returned 0x1
[0269.624] GetThemeAppProperties () returned 0x3
[0269.624] GetThemeAppProperties () returned 0x3
[0269.624] IsAppThemed () returned 0x1
[0269.624] GetThemeAppProperties () returned 0x3
[0269.624] GetThemeAppProperties () returned 0x3
[0269.624] IsThemePartDefined () returned 0x1
[0269.624] GdipCreateRegion (region=0x53e070) returned 0x0
[0269.624] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.624] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0269.624] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.625] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0269.625] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0269.625] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0269.625] LocalFree (hMem=0x89ee08) returned 0x0
[0269.625] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.625] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0269.625] LocalFree (hMem=0x89ea88) returned 0x0
[0269.625] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.625] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0269.625] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0269.625] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0269.625] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.625] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0269.625] GetCurrentObject (hdc=0x2a010535, type=0x1) returned 0xb00017
[0269.625] GetCurrentObject (hdc=0x2a010535, type=0x2) returned 0x900010
[0269.625] GetCurrentObject (hdc=0x2a010535, type=0x7) returned 0x1e0507b9
[0269.626] GetCurrentObject (hdc=0x2a010535, type=0x6) returned 0x8a01c2
[0269.626] SaveDC (hdc=0x2a010535) returned 1
[0269.626] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x89040798
[0269.626] GetClipRgn (hdc=0x2a010535, hrgn=0x89040798) returned 0
[0269.626] SelectClipRgn (hdc=0x2a010535, hrgn=0xe0407a1) returned 2
[0269.626] DeleteObject (ho=0x89040798) returned 1
[0269.626] DeleteObject (ho=0xe0407a1) returned 1
[0269.626] OffsetViewportOrgEx (in: hdc=0x2a010535, x=0, y=0, lppt=0x235d030 | out: lppt=0x235d030) returned 1
[0269.626] DrawThemeParentBackground () returned 0x0
[0269.626] GetWindowPlacement (in: hWnd=0xf02ca, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0269.626] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0269.626] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.627] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.627] GetSystemMetrics (nIndex=42) returned 0
[0269.627] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.627] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0269.627] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0269.627] GetCurrentObject (hdc=0x2a010535, type=0x1) returned 0xb00017
[0269.627] GetCurrentObject (hdc=0x2a010535, type=0x2) returned 0x900010
[0269.627] GetCurrentObject (hdc=0x2a010535, type=0x7) returned 0x1e0507b9
[0269.627] GetCurrentObject (hdc=0x2a010535, type=0x6) returned 0x8a01c2
[0269.627] SaveDC (hdc=0x2a010535) returned 2
[0269.627] GetNearestColor (hdc=0x2a010535, color=0xf0f0f0) returned 0xf0f0f0
[0269.627] CreateSolidBrush (color=0xf0f0f0) returned 0xc410078d
[0269.627] FillRect (hDC=0x2a010535, lprc=0x53dad0, hbr=0xc410078d) returned 1
[0269.627] DeleteObject (ho=0xc410078d) returned 1
[0269.628] RestoreDC (hdc=0x2a010535, nSavedDC=-1) returned 1
[0269.628] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.628] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.628] GetSystemMetrics (nIndex=42) returned 0
[0269.628] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.628] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0269.628] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0269.628] GetCurrentObject (hdc=0x2a010535, type=0x1) returned 0xb00017
[0269.628] GetCurrentObject (hdc=0x2a010535, type=0x2) returned 0x900010
[0269.628] GetCurrentObject (hdc=0x2a010535, type=0x7) returned 0x1e0507b9
[0269.628] GetCurrentObject (hdc=0x2a010535, type=0x6) returned 0x8a01c2
[0269.628] SaveDC (hdc=0x2a010535) returned 2
[0269.628] GetNearestColor (hdc=0x2a010535, color=0xf0f0f0) returned 0xf0f0f0
[0269.628] CreateSolidBrush (color=0xf0f0f0) returned 0xc510078d
[0269.628] FillRect (hDC=0x2a010535, lprc=0x53da70, hbr=0xc510078d) returned 1
[0269.629] DeleteObject (ho=0xc510078d) returned 1
[0269.629] RestoreDC (hdc=0x2a010535, nSavedDC=-1) returned 1
[0269.629] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.629] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.629] GetSystemMetrics (nIndex=42) returned 0
[0269.629] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.629] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0269.629] RestoreDC (hdc=0x2a010535, nSavedDC=-1) returned 1
[0269.629] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a010535) returned 0x0
[0269.629] IsAppThemed () returned 0x1
[0269.629] GetThemeAppProperties () returned 0x3
[0269.629] GetThemeAppProperties () returned 0x3
[0269.629] IsAppThemed () returned 0x1
[0269.630] GetThemeAppProperties () returned 0x3
[0269.630] GetThemeAppProperties () returned 0x3
[0269.630] IsThemePartDefined () returned 0x1
[0269.630] GdipCreateRegion (region=0x53dff4) returned 0x0
[0269.630] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.630] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0269.630] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.630] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0269.630] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0269.630] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0269.630] LocalFree (hMem=0x89ee08) returned 0x0
[0269.630] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0269.630] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0269.630] LocalFree (hMem=0x89ec80) returned 0x0
[0269.630] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.630] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0269.631] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0269.631] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0269.631] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.631] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0269.631] GetCurrentObject (hdc=0x2a010535, type=0x1) returned 0xb00017
[0269.631] GetCurrentObject (hdc=0x2a010535, type=0x2) returned 0x900010
[0269.631] GetCurrentObject (hdc=0x2a010535, type=0x7) returned 0x1e0507b9
[0269.631] GetCurrentObject (hdc=0x2a010535, type=0x6) returned 0x8a01c2
[0269.631] SaveDC (hdc=0x2a010535) returned 1
[0269.631] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf0407a1
[0269.631] GetClipRgn (hdc=0x2a010535, hrgn=0xf0407a1) returned 0
[0269.632] SelectClipRgn (hdc=0x2a010535, hrgn=0x8b040798) returned 2
[0269.632] DeleteObject (ho=0xf0407a1) returned 1
[0269.632] DeleteObject (ho=0x8b040798) returned 1
[0269.632] OffsetViewportOrgEx (in: hdc=0x2a010535, x=0, y=0, lppt=0x235d8b8 | out: lppt=0x235d8b8) returned 1
[0269.632] IsAppThemed () returned 0x1
[0269.632] GetThemeAppProperties () returned 0x3
[0269.632] GetThemeAppProperties () returned 0x3
[0269.632] DrawThemeBackground () returned 0x0
[0269.632] RestoreDC (hdc=0x2a010535, nSavedDC=-1) returned 1
[0269.632] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a010535) returned 0x0
[0269.632] GdipCreateRegion (region=0x53dff8) returned 0x0
[0269.632] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.632] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0269.632] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.632] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0269.633] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.633] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0269.633] LocalFree (hMem=0x89ea88) returned 0x0
[0269.633] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.633] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0269.633] LocalFree (hMem=0x89ea88) returned 0x0
[0269.633] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.633] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0269.633] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0269.633] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0269.633] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.633] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0269.633] GetCurrentObject (hdc=0x2a010535, type=0x1) returned 0xb00017
[0269.633] GetCurrentObject (hdc=0x2a010535, type=0x2) returned 0x900010
[0269.633] GetCurrentObject (hdc=0x2a010535, type=0x7) returned 0x1e0507b9
[0269.633] GetCurrentObject (hdc=0x2a010535, type=0x6) returned 0x8a01c2
[0269.634] SaveDC (hdc=0x2a010535) returned 1
[0269.634] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8c040798
[0269.634] GetClipRgn (hdc=0x2a010535, hrgn=0x8c040798) returned 0
[0269.634] SelectClipRgn (hdc=0x2a010535, hrgn=0x100407a1) returned 2
[0269.634] DeleteObject (ho=0x8c040798) returned 1
[0269.634] DeleteObject (ho=0x100407a1) returned 1
[0269.634] OffsetViewportOrgEx (in: hdc=0x2a010535, x=0, y=0, lppt=0x235db8c | out: lppt=0x235db8c) returned 1
[0269.634] IsAppThemed () returned 0x1
[0269.634] GetThemeAppProperties () returned 0x3
[0269.634] GetThemeAppProperties () returned 0x3
[0269.634] GetThemeBackgroundContentRect () returned 0x0
[0269.634] RestoreDC (hdc=0x2a010535, nSavedDC=-1) returned 1
[0269.634] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a010535) returned 0x0
[0269.634] IsAppThemed () returned 0x1
[0269.635] GetThemeAppProperties () returned 0x3
[0269.635] GetThemeAppProperties () returned 0x3
[0269.635] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0269.635] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0269.635] GetCurrentObject (hdc=0x2a010535, type=0x1) returned 0xb00017
[0269.635] GetCurrentObject (hdc=0x2a010535, type=0x2) returned 0x900010
[0269.635] GetCurrentObject (hdc=0x2a010535, type=0x7) returned 0x1e0507b9
[0269.635] GetCurrentObject (hdc=0x2a010535, type=0x6) returned 0x8a01c2
[0269.635] SaveDC (hdc=0x2a010535) returned 1
[0269.635] GetTextAlign (hdc=0x2a010535) returned 0x0
[0269.635] GetTextColor (hdc=0x2a010535) returned 0x0
[0269.635] GetCurrentObject (hdc=0x2a010535, type=0x6) returned 0x8a01c2
[0269.635] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0269.636] SelectObject (hdc=0x2a010535, h=0x730a066d) returned 0x8a01c2
[0269.636] GetBkMode (hdc=0x2a010535) returned 2
[0269.636] SetBkMode (hdc=0x2a010535, mode=1) returned 2
[0269.636] DrawTextExW (in: hdc=0x2a010535, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x235df2c | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0269.636] DrawTextExW (in: hdc=0x2a010535, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x235df2c | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0269.636] RestoreDC (hdc=0x2a010535, nSavedDC=-1) returned 1
[0269.637] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a010535) returned 0x0
[0269.637] GetFocus () returned 0x10004e
[0269.637] IsAppThemed () returned 0x1
[0269.637] GetThemeAppProperties () returned 0x3
[0269.637] GetThemeAppProperties () returned 0x3
[0269.637] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0269.637] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x2a010535, x1=0, y1=0, rop=0xcc0020) returned 1
[0269.637] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a010535) returned 0x0
[0269.637] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0269.637] SelectObject (hdc=0x2a010535, h=0x85000f) returned 0x1e0507b9
[0269.638] DeleteDC (hdc=0x2a010535) returned 1
[0269.638] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0269.638] EndPaint (hWnd=0x1600ea, lpPaint=0x53e2e4) returned 1
[0269.638] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.638] IsWindowUnicode (hWnd=0x202c6) returned 1
[0269.638] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.638] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.638] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.638] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0269.639] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0269.639] CreateCompatibleDC (hdc=0x10105d6) returned 0x2c010535
[0269.639] SelectObject (hdc=0x2c010535, h=0x1e0507b9) returned 0x85000f
[0269.639] GdipCreateFromHDC (hdc=0x2c010535, graphics=0x53e300) returned 0x0
[0269.639] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0269.639] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0269.639] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0269.639] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.639] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0269.639] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.639] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0269.639] LocalFree (hMem=0x89ea88) returned 0x0
[0269.640] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.640] GdipCreateRegion (region=0x53e348) returned 0x0
[0269.640] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.640] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0269.640] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0269.640] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb2f0dbd) returned 0x0
[0269.640] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.640] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0269.640] GetCurrentObject (hdc=0x2c010535, type=0x1) returned 0xb00017
[0269.640] GetCurrentObject (hdc=0x2c010535, type=0x2) returned 0x900010
[0269.640] GetCurrentObject (hdc=0x2c010535, type=0x7) returned 0x1e0507b9
[0269.640] GetCurrentObject (hdc=0x2c010535, type=0x6) returned 0x8a01c2
[0269.640] SaveDC (hdc=0x2c010535) returned 1
[0269.640] GetNearestColor (hdc=0x2c010535, color=0xff) returned 0xff
[0269.641] GetNearestColor (hdc=0x2c010535, color=0x55) returned 0x55
[0269.641] GetNearestColor (hdc=0x2c010535, color=0x0) returned 0x0
[0269.641] GetNearestColor (hdc=0x2c010535, color=0x55) returned 0x55
[0269.641] GetNearestColor (hdc=0x2c010535, color=0x0) returned 0x0
[0269.641] GetNearestColor (hdc=0x2c010535, color=0x8080ff) returned 0x8080ff
[0269.641] GetNearestColor (hdc=0x2c010535, color=0x7373e5) returned 0x7373e5
[0269.641] GetNearestColor (hdc=0x2c010535, color=0xe5) returned 0xe5
[0269.641] GetNearestColor (hdc=0x2c010535, color=0x0) returned 0x0
[0269.641] RestoreDC (hdc=0x2c010535, nSavedDC=-1) returned 1
[0269.641] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c010535) returned 0x0
[0269.641] IsAppThemed () returned 0x1
[0269.641] GetThemeAppProperties () returned 0x3
[0269.641] GetThemeAppProperties () returned 0x3
[0269.641] IsAppThemed () returned 0x1
[0269.642] GetThemeAppProperties () returned 0x3
[0269.642] GetThemeAppProperties () returned 0x3
[0269.642] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0269.642] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x235e710 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0269.642] IsAppThemed () returned 0x1
[0269.642] GetThemeAppProperties () returned 0x3
[0269.642] GetThemeAppProperties () returned 0x3
[0269.642] IsAppThemed () returned 0x1
[0269.642] GetThemeAppProperties () returned 0x3
[0269.642] GetThemeAppProperties () returned 0x3
[0269.642] GetFocus () returned 0x10004e
[0269.642] IsAppThemed () returned 0x1
[0269.643] GetThemeAppProperties () returned 0x3
[0269.643] GetThemeAppProperties () returned 0x3
[0269.643] IsAppThemed () returned 0x1
[0269.643] GetThemeAppProperties () returned 0x3
[0269.643] GetThemeAppProperties () returned 0x3
[0269.643] IsThemePartDefined () returned 0x1
[0269.643] IsAppThemed () returned 0x1
[0269.643] GetThemeAppProperties () returned 0x3
[0269.643] GetThemeAppProperties () returned 0x3
[0269.643] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0269.643] IsAppThemed () returned 0x1
[0269.643] GetThemeAppProperties () returned 0x3
[0269.643] GetThemeAppProperties () returned 0x3
[0269.643] IsAppThemed () returned 0x1
[0269.643] GetThemeAppProperties () returned 0x3
[0269.643] GetThemeAppProperties () returned 0x3
[0269.643] IsThemePartDefined () returned 0x1
[0269.643] GdipCreateRegion (region=0x53e070) returned 0x0
[0269.643] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.643] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0269.643] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.644] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0269.644] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0269.644] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0269.644] LocalFree (hMem=0x89eee8) returned 0x0
[0269.644] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0269.644] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0269.644] LocalFree (hMem=0x89ec80) returned 0x0
[0269.644] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.644] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0269.644] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0269.644] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0269.644] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.644] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0269.644] GetCurrentObject (hdc=0x2c010535, type=0x1) returned 0xb00017
[0269.644] GetCurrentObject (hdc=0x2c010535, type=0x2) returned 0x900010
[0269.644] GetCurrentObject (hdc=0x2c010535, type=0x7) returned 0x1e0507b9
[0269.645] GetCurrentObject (hdc=0x2c010535, type=0x6) returned 0x8a01c2
[0269.645] SaveDC (hdc=0x2c010535) returned 1
[0269.645] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x110407a1
[0269.645] GetClipRgn (hdc=0x2c010535, hrgn=0x110407a1) returned 0
[0269.645] SelectClipRgn (hdc=0x2c010535, hrgn=0x90040798) returned 2
[0269.645] DeleteObject (ho=0x110407a1) returned 1
[0269.645] DeleteObject (ho=0x90040798) returned 1
[0269.645] OffsetViewportOrgEx (in: hdc=0x2c010535, x=0, y=0, lppt=0x235edc0 | out: lppt=0x235edc0) returned 1
[0269.645] DrawThemeParentBackground () returned 0x0
[0269.645] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0269.645] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0269.645] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0269.645] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0269.646] GetSystemMetrics (nIndex=42) returned 0
[0269.646] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0269.646] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0269.646] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0269.646] GetCurrentObject (hdc=0x2c010535, type=0x1) returned 0xb00017
[0269.646] GetCurrentObject (hdc=0x2c010535, type=0x2) returned 0x900010
[0269.646] GetCurrentObject (hdc=0x2c010535, type=0x7) returned 0x1e0507b9
[0269.646] GetCurrentObject (hdc=0x2c010535, type=0x6) returned 0x8a01c2
[0269.646] SaveDC (hdc=0x2c010535) returned 2
[0269.651] GetNearestColor (hdc=0x2c010535, color=0xff) returned 0xff
[0269.651] CreateSolidBrush (color=0xff) returned 0xc610078d
[0269.651] FillRect (hDC=0x2c010535, lprc=0x53dad0, hbr=0xc610078d) returned 1
[0269.651] DeleteObject (ho=0xc610078d) returned 1
[0269.651] RestoreDC (hdc=0x2c010535, nSavedDC=-1) returned 1
[0269.651] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0269.652] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0269.652] GetSystemMetrics (nIndex=42) returned 0
[0269.652] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0269.652] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0269.652] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0269.652] GetCurrentObject (hdc=0x2c010535, type=0x1) returned 0xb00017
[0269.652] GetCurrentObject (hdc=0x2c010535, type=0x2) returned 0x900010
[0269.652] GetCurrentObject (hdc=0x2c010535, type=0x7) returned 0x1e0507b9
[0269.652] GetCurrentObject (hdc=0x2c010535, type=0x6) returned 0x8a01c2
[0269.652] SaveDC (hdc=0x2c010535) returned 2
[0269.652] GetNearestColor (hdc=0x2c010535, color=0xff) returned 0xff
[0269.652] CreateSolidBrush (color=0xff) returned 0xc710078d
[0269.652] FillRect (hDC=0x2c010535, lprc=0x53da70, hbr=0xc710078d) returned 1
[0269.652] DeleteObject (ho=0xc710078d) returned 1
[0269.652] RestoreDC (hdc=0x2c010535, nSavedDC=-1) returned 1
[0269.653] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0269.653] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0269.653] GetSystemMetrics (nIndex=42) returned 0
[0269.653] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0269.653] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0269.653] RestoreDC (hdc=0x2c010535, nSavedDC=-1) returned 1
[0269.653] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c010535) returned 0x0
[0269.653] IsAppThemed () returned 0x1
[0269.653] GetThemeAppProperties () returned 0x3
[0269.653] GetThemeAppProperties () returned 0x3
[0269.653] IsAppThemed () returned 0x1
[0269.653] GetThemeAppProperties () returned 0x3
[0269.653] GetThemeAppProperties () returned 0x3
[0269.653] IsThemePartDefined () returned 0x1
[0269.653] GdipCreateRegion (region=0x53dff4) returned 0x0
[0269.654] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.654] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0269.654] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.654] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0269.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0269.654] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0269.654] LocalFree (hMem=0x89ec80) returned 0x0
[0269.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.654] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0269.654] LocalFree (hMem=0x89ea88) returned 0x0
[0269.654] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.654] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0269.654] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0269.654] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0269.654] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.654] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0269.654] GetCurrentObject (hdc=0x2c010535, type=0x1) returned 0xb00017
[0269.655] GetCurrentObject (hdc=0x2c010535, type=0x2) returned 0x900010
[0269.655] GetCurrentObject (hdc=0x2c010535, type=0x7) returned 0x1e0507b9
[0269.655] GetCurrentObject (hdc=0x2c010535, type=0x6) returned 0x8a01c2
[0269.655] SaveDC (hdc=0x2c010535) returned 1
[0269.655] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x91040798
[0269.655] GetClipRgn (hdc=0x2c010535, hrgn=0x91040798) returned 0
[0269.655] SelectClipRgn (hdc=0x2c010535, hrgn=0x130407a1) returned 2
[0269.655] DeleteObject (ho=0x91040798) returned 1
[0269.655] DeleteObject (ho=0x130407a1) returned 1
[0269.655] OffsetViewportOrgEx (in: hdc=0x2c010535, x=0, y=0, lppt=0x235f624 | out: lppt=0x235f624) returned 1
[0269.655] IsAppThemed () returned 0x1
[0269.655] GetThemeAppProperties () returned 0x3
[0269.655] GetThemeAppProperties () returned 0x3
[0269.655] DrawThemeBackground () returned 0x0
[0269.656] RestoreDC (hdc=0x2c010535, nSavedDC=-1) returned 1
[0269.656] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c010535) returned 0x0
[0269.656] GdipCreateRegion (region=0x53dff8) returned 0x0
[0269.656] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.656] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0269.656] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.656] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0269.656] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.656] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0269.656] LocalFree (hMem=0x89ea88) returned 0x0
[0269.656] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0269.656] LocalFree (hMem=0x89ee08) returned 0x0
[0269.656] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.656] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0269.656] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0269.656] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0269.656] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.657] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0269.657] GetCurrentObject (hdc=0x2c010535, type=0x1) returned 0xb00017
[0269.657] GetCurrentObject (hdc=0x2c010535, type=0x2) returned 0x900010
[0269.657] GetCurrentObject (hdc=0x2c010535, type=0x7) returned 0x1e0507b9
[0269.657] GetCurrentObject (hdc=0x2c010535, type=0x6) returned 0x8a01c2
[0269.657] SaveDC (hdc=0x2c010535) returned 1
[0269.657] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x140407a1
[0269.657] GetClipRgn (hdc=0x2c010535, hrgn=0x140407a1) returned 0
[0269.657] SelectClipRgn (hdc=0x2c010535, hrgn=0x92040798) returned 2
[0269.657] DeleteObject (ho=0x140407a1) returned 1
[0269.657] DeleteObject (ho=0x92040798) returned 1
[0269.657] OffsetViewportOrgEx (in: hdc=0x2c010535, x=0, y=0, lppt=0x235f8f8 | out: lppt=0x235f8f8) returned 1
[0269.657] IsAppThemed () returned 0x1
[0269.657] GetThemeAppProperties () returned 0x3
[0269.657] GetThemeAppProperties () returned 0x3
[0269.657] GetThemeBackgroundContentRect () returned 0x0
[0269.657] RestoreDC (hdc=0x2c010535, nSavedDC=-1) returned 1
[0269.658] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c010535) returned 0x0
[0269.658] IsAppThemed () returned 0x1
[0269.658] GetThemeAppProperties () returned 0x3
[0269.658] GetThemeAppProperties () returned 0x3
[0269.658] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0269.658] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0269.658] GetCurrentObject (hdc=0x2c010535, type=0x1) returned 0xb00017
[0269.658] GetCurrentObject (hdc=0x2c010535, type=0x2) returned 0x900010
[0269.658] GetCurrentObject (hdc=0x2c010535, type=0x7) returned 0x1e0507b9
[0269.658] GetCurrentObject (hdc=0x2c010535, type=0x6) returned 0x8a01c2
[0269.658] SaveDC (hdc=0x2c010535) returned 1
[0269.658] GetTextAlign (hdc=0x2c010535) returned 0x0
[0269.658] GetTextColor (hdc=0x2c010535) returned 0x0
[0269.658] GetCurrentObject (hdc=0x2c010535, type=0x6) returned 0x8a01c2
[0269.658] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0269.658] SelectObject (hdc=0x2c010535, h=0x450a0799) returned 0x8a01c2
[0269.659] GetBkMode (hdc=0x2c010535) returned 2
[0269.659] SetBkMode (hdc=0x2c010535, mode=1) returned 2
[0269.659] DrawTextExW (in: hdc=0x2c010535, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x235fc98 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0269.659] DrawTextExW (in: hdc=0x2c010535, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x235fc98 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0269.659] RestoreDC (hdc=0x2c010535, nSavedDC=-1) returned 1
[0269.659] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c010535) returned 0x0
[0269.659] GetFocus () returned 0x10004e
[0269.660] IsAppThemed () returned 0x1
[0269.660] GetThemeAppProperties () returned 0x3
[0269.660] GetThemeAppProperties () returned 0x3
[0269.660] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0269.660] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x2c010535, x1=0, y1=0, rop=0xcc0020) returned 1
[0269.660] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c010535) returned 0x0
[0269.660] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0269.660] SelectObject (hdc=0x2c010535, h=0x85000f) returned 0x1e0507b9
[0269.660] DeleteDC (hdc=0x2c010535) returned 1
[0269.660] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0269.660] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0269.661] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.661] IsWindowUnicode (hWnd=0x1301e2) returned 1
[0269.661] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.661] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.661] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.661] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.661] IsWindowUnicode (hWnd=0x1301e2) returned 1
[0269.661] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.661] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.661] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.661] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x2a1, wParam=0x0, lParam=0xa000f) returned 0x0
[0269.661] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.661] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.662] WaitMessage () returned 1
[0269.663] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.663] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0269.663] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.663] WaitMessage () returned 1
[0269.664] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.664] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0269.665] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.665] WaitMessage () returned 1
[0269.665] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.665] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0269.665] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.665] WaitMessage () returned 1
[0269.708] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.708] IsWindowUnicode (hWnd=0x102dc) returned 1
[0269.708] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.708] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.708] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.715] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.715] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.715] WaitMessage () returned 1
[0269.721] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.721] IsWindowUnicode (hWnd=0x102dc) returned 1
[0269.721] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.721] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.721] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.722] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.723] IsWindowUnicode (hWnd=0x102dc) returned 1
[0269.723] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.723] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.723] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.723] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.723] IsWindowUnicode (hWnd=0x102dc) returned 1
[0269.723] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.723] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.723] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.723] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.724] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.724] WaitMessage () returned 1
[0269.736] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.736] IsWindowUnicode (hWnd=0x102dc) returned 1
[0269.736] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.736] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.737] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.738] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.738] IsWindowUnicode (hWnd=0x102dc) returned 1
[0269.738] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.738] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.738] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.739] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.739] IsWindowUnicode (hWnd=0x102dc) returned 1
[0269.739] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.739] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.739] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.739] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.740] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0269.740] WaitMessage () returned 1
[0269.751] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.751] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x84, wParam=0x0, lParam=0x1930350) returned 0x1
[0269.751] IsWindowUnicode (hWnd=0x1301e2) returned 1
[0269.751] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.752] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x84, wParam=0x0, lParam=0x1930350) returned 0x1
[0269.752] GetDlgItem (hDlg=0xf02ca, nIDDlgItem=0) returned 0x0
[0269.752] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x210, wParam=0x201, lParam=0x160131) returned 0x0
[0269.752] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x21, wParam=0xf02ca, lParam=0x2010001) returned 0x1
[0269.752] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x21, wParam=0xf02ca, lParam=0x2010001) returned 0x1
[0269.752] SetCursor (hCursor=0x10003) returned 0x10003
[0269.752] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.752] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.752] GetKeyState (nVirtKey=1) returned -128
[0269.752] GetKeyState (nVirtKey=2) returned 0
[0269.752] GetKeyState (nVirtKey=4) returned 0
[0269.753] GetKeyState (nVirtKey=5) returned 0
[0269.753] GetKeyState (nVirtKey=6) returned 0
[0269.753] IsWindowVisible (hWnd=0x1301e2) returned 1
[0269.753] IsWindowEnabled (hWnd=0x1301e2) returned 1
[0269.753] SetFocus (hWnd=0x1301e2) returned 0x10004e
[0269.753] GetFocus () returned 0x1301e2
[0269.753] IsChild (hWndParent=0xf02ca, hWnd=0x1301e2) returned 1
[0269.753] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x8, wParam=0x1301e2, lParam=0x0) returned 0x1
[0269.754] SendMessageW (hWnd=0x10004e, Msg=0x2111, wParam=0x200004e, lParam=0x10004e) returned 0x0
[0269.755] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0269.791] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0269.791] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0269.792] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0269.792] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0269.792] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0269.794] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0269.794] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x7, wParam=0x10004e, lParam=0x0) returned 0x0
[0269.794] GetStockObject (i=5) returned 0x900015
[0269.794] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0269.794] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0xd, wParam=0x3, lParam=0x89e6b8) returned 0x2
[0269.794] GetDlgItem (hDlg=0xf02ca, nIDDlgItem=1245666) returned 0x1301e2
[0269.794] SendMessageW (hWnd=0x1301e2, Msg=0x202b, wParam=0x1301e2, lParam=0x53de74) returned 0x0
[0269.794] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x202b, wParam=0x1301e2, lParam=0x53de74) returned 0x0
[0269.794] InvalidateRect (hWnd=0x1301e2, lpRect=0x0, bErase=0) returned 1
[0269.796] GetFocus () returned 0x1301e2
[0269.796] GetFocus () returned 0x1301e2
[0269.796] GetFocus () returned 0x1301e2
[0269.796] GetKeyState (nVirtKey=1) returned -128
[0269.796] GetKeyState (nVirtKey=2) returned 0
[0269.796] GetKeyState (nVirtKey=4) returned 0
[0269.796] GetKeyState (nVirtKey=5) returned 0
[0269.796] GetKeyState (nVirtKey=6) returned 0
[0269.796] GetCapture () returned 0x0
[0269.796] SetCapture (hWnd=0x1301e2) returned 0x0
[0269.796] GetKeyState (nVirtKey=1) returned -128
[0269.796] GetKeyState (nVirtKey=2) returned 0
[0269.796] GetKeyState (nVirtKey=4) returned 0
[0269.796] GetKeyState (nVirtKey=5) returned 0
[0269.796] GetKeyState (nVirtKey=6) returned 0
[0269.796] NotifyWinEvent (event=0x800a, hwnd=0x1301e2, idObject=-4, idChild=0)
[0269.796] InvalidateRect (hWnd=0x1301e2, lpRect=0x53e4c8, bErase=0) returned 1
[0269.796] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.796] IsWindowUnicode (hWnd=0x1301e2) returned 1
[0269.796] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0269.797] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0269.797] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0269.797] MapWindowPoints (in: hWndFrom=0x1301e2, hWndTo=0x0, lpPoints=0x235ff30, cPoints=0x1 | out: lpPoints=0x235ff30) returned 25756481
[0269.797] NotifyWinEvent (event=0x800a, hwnd=0x1301e2, idObject=-4, idChild=0)
[0269.797] InvalidateRect (hWnd=0x1301e2, lpRect=0x53e468, bErase=0) returned 1
[0269.797] UpdateWindow (hWnd=0x1301e2) returned 1
[0269.797] BeginPaint (in: hWnd=0x1301e2, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0269.797] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0269.797] CreateCompatibleDC (hdc=0x10105d6) returned 0x70010795
[0269.797] SelectObject (hdc=0x70010795, h=0x1e0507b9) returned 0x85000f
[0269.797] GdipCreateFromHDC (hdc=0x70010795, graphics=0x53df98) returned 0x0
[0269.797] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0269.797] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0269.797] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0269.798] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.798] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0269.798] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0269.798] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0269.798] LocalFree (hMem=0x89ec80) returned 0x0
[0269.798] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.798] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0269.798] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.798] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0269.798] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0269.798] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb2d0dbd) returned 0x0
[0269.798] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.798] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0269.798] GetCurrentObject (hdc=0x70010795, type=0x1) returned 0xb00017
[0269.798] GetCurrentObject (hdc=0x70010795, type=0x2) returned 0x900010
[0269.798] GetCurrentObject (hdc=0x70010795, type=0x7) returned 0x1e0507b9
[0269.798] GetCurrentObject (hdc=0x70010795, type=0x6) returned 0x8a01c2
[0269.799] SaveDC (hdc=0x70010795) returned 1
[0269.799] GetNearestColor (hdc=0x70010795, color=0xf0f0f0) returned 0xf0f0f0
[0269.799] GetNearestColor (hdc=0x70010795, color=0xa0a0a0) returned 0xa0a0a0
[0269.799] GetNearestColor (hdc=0x70010795, color=0x696969) returned 0x696969
[0269.799] GetNearestColor (hdc=0x70010795, color=0xa0a0a0) returned 0xa0a0a0
[0269.799] GetNearestColor (hdc=0x70010795, color=0x0) returned 0x0
[0269.799] GetNearestColor (hdc=0x70010795, color=0xffffff) returned 0xffffff
[0269.799] GetNearestColor (hdc=0x70010795, color=0xe5e5e5) returned 0xe5e5e5
[0269.799] GetNearestColor (hdc=0x70010795, color=0xd7d7d7) returned 0xd7d7d7
[0269.799] GetNearestColor (hdc=0x70010795, color=0x0) returned 0x0
[0269.799] RestoreDC (hdc=0x70010795, nSavedDC=-1) returned 1
[0269.799] GdipReleaseDC (graphics=0x5d92c30, hdc=0x70010795) returned 0x0
[0269.799] IsAppThemed () returned 0x1
[0269.799] GetThemeAppProperties () returned 0x3
[0269.799] GetThemeAppProperties () returned 0x3
[0269.800] IsAppThemed () returned 0x1
[0269.800] GetThemeAppProperties () returned 0x3
[0269.800] GetThemeAppProperties () returned 0x3
[0269.800] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0269.800] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x23606a4 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0269.800] IsAppThemed () returned 0x1
[0269.800] GetThemeAppProperties () returned 0x3
[0269.800] GetThemeAppProperties () returned 0x3
[0269.800] IsAppThemed () returned 0x1
[0269.800] GetThemeAppProperties () returned 0x3
[0269.800] GetThemeAppProperties () returned 0x3
[0269.800] IsAppThemed () returned 0x1
[0269.800] GetThemeAppProperties () returned 0x3
[0269.800] GetThemeAppProperties () returned 0x3
[0269.800] IsAppThemed () returned 0x1
[0269.800] GetThemeAppProperties () returned 0x3
[0269.800] GetThemeAppProperties () returned 0x3
[0269.800] IsThemePartDefined () returned 0x1
[0269.801] IsAppThemed () returned 0x1
[0269.801] GetThemeAppProperties () returned 0x3
[0269.801] GetThemeAppProperties () returned 0x3
[0269.801] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0269.801] IsAppThemed () returned 0x1
[0269.801] GetThemeAppProperties () returned 0x3
[0269.801] GetThemeAppProperties () returned 0x3
[0269.801] IsAppThemed () returned 0x1
[0269.801] GetThemeAppProperties () returned 0x3
[0269.801] GetThemeAppProperties () returned 0x3
[0269.801] IsThemePartDefined () returned 0x1
[0269.801] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0269.801] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.801] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0269.801] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.801] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0269.801] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0269.801] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0269.801] LocalFree (hMem=0x89ee40) returned 0x0
[0269.801] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0269.801] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0269.801] LocalFree (hMem=0x89ee08) returned 0x0
[0269.801] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.801] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0269.802] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0269.802] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0269.802] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.802] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0269.802] GetCurrentObject (hdc=0x70010795, type=0x1) returned 0xb00017
[0269.802] GetCurrentObject (hdc=0x70010795, type=0x2) returned 0x900010
[0269.802] GetCurrentObject (hdc=0x70010795, type=0x7) returned 0x1e0507b9
[0269.802] GetCurrentObject (hdc=0x70010795, type=0x6) returned 0x8a01c2
[0269.802] SaveDC (hdc=0x70010795) returned 1
[0269.802] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x93040798
[0269.802] GetClipRgn (hdc=0x70010795, hrgn=0x93040798) returned 0
[0269.802] SelectClipRgn (hdc=0x70010795, hrgn=0x180407a1) returned 2
[0269.802] DeleteObject (ho=0x93040798) returned 1
[0269.802] DeleteObject (ho=0x180407a1) returned 1
[0269.802] OffsetViewportOrgEx (in: hdc=0x70010795, x=0, y=0, lppt=0x2360d54 | out: lppt=0x2360d54) returned 1
[0269.804] DrawThemeParentBackground () returned 0x0
[0269.805] GetWindowPlacement (in: hWnd=0xf02ca, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0269.805] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0269.805] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.805] GetSystemMetrics (nIndex=42) returned 0
[0269.805] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0269.805] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0269.805] GetCurrentObject (hdc=0x70010795, type=0x1) returned 0xb00017
[0269.805] GetCurrentObject (hdc=0x70010795, type=0x2) returned 0x900010
[0269.805] GetCurrentObject (hdc=0x70010795, type=0x7) returned 0x1e0507b9
[0269.805] GetCurrentObject (hdc=0x70010795, type=0x6) returned 0x8a01c2
[0269.805] SaveDC (hdc=0x70010795) returned 2
[0269.805] GetNearestColor (hdc=0x70010795, color=0xf0f0f0) returned 0xf0f0f0
[0269.805] CreateSolidBrush (color=0xf0f0f0) returned 0xc810078d
[0269.805] FillRect (hDC=0x70010795, lprc=0x53d760, hbr=0xc810078d) returned 1
[0269.805] DeleteObject (ho=0xc810078d) returned 1
[0269.805] RestoreDC (hdc=0x70010795, nSavedDC=-1) returned 1
[0269.806] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.806] GetSystemMetrics (nIndex=42) returned 0
[0269.806] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0269.806] GetClientRect (in: hWnd=0xf02ca, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0269.806] GetCurrentObject (hdc=0x70010795, type=0x1) returned 0xb00017
[0269.806] GetCurrentObject (hdc=0x70010795, type=0x2) returned 0x900010
[0269.806] GetCurrentObject (hdc=0x70010795, type=0x7) returned 0x1e0507b9
[0269.806] GetCurrentObject (hdc=0x70010795, type=0x6) returned 0x8a01c2
[0269.806] SaveDC (hdc=0x70010795) returned 2
[0269.806] GetNearestColor (hdc=0x70010795, color=0xf0f0f0) returned 0xf0f0f0
[0269.806] CreateSolidBrush (color=0xf0f0f0) returned 0xc910078d
[0269.806] FillRect (hDC=0x70010795, lprc=0x53d700, hbr=0xc910078d) returned 1
[0269.806] DeleteObject (ho=0xc910078d) returned 1
[0269.806] RestoreDC (hdc=0x70010795, nSavedDC=-1) returned 1
[0269.806] GetWindowTextLengthW (hWnd=0xf02ca) returned 10
[0269.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0269.806] GetSystemMetrics (nIndex=42) returned 0
[0269.806] GetWindowTextW (in: hWnd=0xf02ca, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0269.807] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0269.807] RestoreDC (hdc=0x70010795, nSavedDC=-1) returned 1
[0269.807] GdipReleaseDC (graphics=0x5d92c30, hdc=0x70010795) returned 0x0
[0269.807] IsAppThemed () returned 0x1
[0269.807] GetThemeAppProperties () returned 0x3
[0269.807] GetThemeAppProperties () returned 0x3
[0269.807] IsAppThemed () returned 0x1
[0269.807] GetThemeAppProperties () returned 0x3
[0269.807] GetThemeAppProperties () returned 0x3
[0269.807] IsThemePartDefined () returned 0x1
[0269.807] GdipCreateRegion (region=0x53dc80) returned 0x0
[0269.807] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.807] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0269.807] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.807] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0269.807] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.807] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0269.807] LocalFree (hMem=0x89ea88) returned 0x0
[0269.808] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0269.808] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0269.808] LocalFree (hMem=0x89ee08) returned 0x0
[0269.808] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.808] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0269.808] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0269.808] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0269.808] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.808] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0269.808] GetCurrentObject (hdc=0x70010795, type=0x1) returned 0xb00017
[0269.808] GetCurrentObject (hdc=0x70010795, type=0x2) returned 0x900010
[0269.808] GetCurrentObject (hdc=0x70010795, type=0x7) returned 0x1e0507b9
[0269.808] GetCurrentObject (hdc=0x70010795, type=0x6) returned 0x8a01c2
[0269.808] SaveDC (hdc=0x70010795) returned 1
[0269.808] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x190407a1
[0269.808] GetClipRgn (hdc=0x70010795, hrgn=0x190407a1) returned 0
[0269.809] SelectClipRgn (hdc=0x70010795, hrgn=0x95040798) returned 2
[0269.809] DeleteObject (ho=0x190407a1) returned 1
[0269.809] DeleteObject (ho=0x95040798) returned 1
[0269.809] OffsetViewportOrgEx (in: hdc=0x70010795, x=0, y=0, lppt=0x23615dc | out: lppt=0x23615dc) returned 1
[0269.809] IsAppThemed () returned 0x1
[0269.809] GetThemeAppProperties () returned 0x3
[0269.809] GetThemeAppProperties () returned 0x3
[0269.809] DrawThemeBackground () returned 0x0
[0269.809] RestoreDC (hdc=0x70010795, nSavedDC=-1) returned 1
[0269.809] GdipReleaseDC (graphics=0x5d92c30, hdc=0x70010795) returned 0x0
[0269.809] GdipCreateRegion (region=0x53dc84) returned 0x0
[0269.809] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.809] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0269.809] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.809] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0269.809] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0269.809] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0269.809] LocalFree (hMem=0x89ec80) returned 0x0
[0269.810] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0269.810] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0269.810] LocalFree (hMem=0x89ea88) returned 0x0
[0269.810] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.810] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0269.810] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0269.810] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0269.810] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.810] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0269.810] GetCurrentObject (hdc=0x70010795, type=0x1) returned 0xb00017
[0269.810] GetCurrentObject (hdc=0x70010795, type=0x2) returned 0x900010
[0269.810] GetCurrentObject (hdc=0x70010795, type=0x7) returned 0x1e0507b9
[0269.810] GetCurrentObject (hdc=0x70010795, type=0x6) returned 0x8a01c2
[0269.810] SaveDC (hdc=0x70010795) returned 1
[0269.810] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x96040798
[0269.811] GetClipRgn (hdc=0x70010795, hrgn=0x96040798) returned 0
[0269.811] SelectClipRgn (hdc=0x70010795, hrgn=0x1a0407a1) returned 2
[0269.811] DeleteObject (ho=0x96040798) returned 1
[0269.811] DeleteObject (ho=0x1a0407a1) returned 1
[0269.811] OffsetViewportOrgEx (in: hdc=0x70010795, x=0, y=0, lppt=0x23618b0 | out: lppt=0x23618b0) returned 1
[0269.811] IsAppThemed () returned 0x1
[0269.811] GetThemeAppProperties () returned 0x3
[0269.811] GetThemeAppProperties () returned 0x3
[0269.811] GetThemeBackgroundContentRect () returned 0x0
[0269.811] RestoreDC (hdc=0x70010795, nSavedDC=-1) returned 1
[0269.811] GdipReleaseDC (graphics=0x5d92c30, hdc=0x70010795) returned 0x0
[0269.811] IsAppThemed () returned 0x1
[0269.811] GetThemeAppProperties () returned 0x3
[0269.811] GetThemeAppProperties () returned 0x3
[0269.811] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0269.811] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0269.811] GetCurrentObject (hdc=0x70010795, type=0x1) returned 0xb00017
[0269.811] GetCurrentObject (hdc=0x70010795, type=0x2) returned 0x900010
[0269.812] GetCurrentObject (hdc=0x70010795, type=0x7) returned 0x1e0507b9
[0269.812] GetCurrentObject (hdc=0x70010795, type=0x6) returned 0x8a01c2
[0269.812] SaveDC (hdc=0x70010795) returned 1
[0269.812] GetTextAlign (hdc=0x70010795) returned 0x0
[0269.812] GetTextColor (hdc=0x70010795) returned 0x0
[0269.812] GetCurrentObject (hdc=0x70010795, type=0x6) returned 0x8a01c2
[0269.812] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0269.812] SelectObject (hdc=0x70010795, h=0x730a066d) returned 0x8a01c2
[0269.812] GetBkMode (hdc=0x70010795) returned 2
[0269.812] SetBkMode (hdc=0x70010795, mode=1) returned 2
[0269.813] DrawTextExW (in: hdc=0x70010795, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x2361c50 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0269.813] DrawTextExW (in: hdc=0x70010795, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x2361c50 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0269.813] RestoreDC (hdc=0x70010795, nSavedDC=-1) returned 1
[0269.813] GdipReleaseDC (graphics=0x5d92c30, hdc=0x70010795) returned 0x0
[0269.813] GetFocus () returned 0x1301e2
[0269.813] IsAppThemed () returned 0x1
[0269.814] GetThemeAppProperties () returned 0x3
[0269.814] GetThemeAppProperties () returned 0x3
[0269.814] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0269.814] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x70010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0269.814] GdipReleaseDC (graphics=0x5d92c30, hdc=0x70010795) returned 0x0
[0269.814] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0269.814] SelectObject (hdc=0x70010795, h=0x85000f) returned 0x1e0507b9
[0269.814] DeleteDC (hdc=0x70010795) returned 1
[0269.814] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0269.814] EndPaint (hWnd=0x1301e2, lpPaint=0x53df7c) returned 1
[0269.814] MapWindowPoints (in: hWndFrom=0x1301e2, hWndTo=0x0, lpPoints=0x2361d4c, cPoints=0x1 | out: lpPoints=0x2361d4c) returned 25756481
[0269.814] WindowFromPoint (Point=0x350) returned 0x1301e2
[0269.815] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x84, wParam=0x0, lParam=0x1930350) returned 0x1
[0269.815] NotifyWinEvent (event=0x800a, hwnd=0x1301e2, idObject=-4, idChild=0)
[0269.815] NotifyWinEvent (event=0x800c, hwnd=0x1301e2, idObject=-4, idChild=0)
[0269.815] GetWindowTextLengthW (hWnd=0x10004e) returned 0
[0269.815] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0269.815] GetSystemMetrics (nIndex=42) returned 0
[0269.815] GetWindowTextW (in: hWnd=0x10004e, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0269.815] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0269.815] SendMessageW (hWnd=0xf02ca, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0269.815] GetCapture () returned 0x1301e2
[0269.815] ReleaseCapture () returned 1
[0269.816] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0269.816] PeekMessageW (lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0)
[0269.816] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x84, wParam=0x0, lParam=0x1930350) returned 0x1
[0269.817] IsWindow (hWnd=0x70036) returned 1
[0269.817] EnableWindow (hWnd=0x70036, bEnable=1)
[0269.822] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0269.822] IsWindow (hWnd=0x70036) returned 1
[0269.822] SetActiveWindow (hWnd=0x70036)
[0269.822] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x86, wParam=0x0, lParam=0x70036)
[0269.824] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0269.824] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0269.824] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0269.832] IsChild (hWndParent=0xf02ca, hWnd=0x202c6) returned 0
[0269.832] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1301e2, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0269.832] GetCapture () returned 0x0
[0269.832] InvalidateRect (hWnd=0x1301e2, lpRect=0x0, bErase=0) returned 1
[0269.841] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0269.841] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0269.842] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0269.846] IsChild (hWndParent=0xf02ca, hWnd=0x202c6) returned 0
[0269.846] ShowWindow (hWnd=0xf02ca, nCmdShow=0)
[0269.846] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0269.852] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0xf02ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0269.852] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x10004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0269.852] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x31013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0269.853] GetWindowTextLengthW (hWnd=0x140122)
[0269.854] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0269.854] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x140122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0269.860] GetProcessWindowStation () returned 0x13c
[0269.860] GetActiveWindow () returned 0x70036
[0269.860] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0269.860] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0269.860] GetCurrentThreadId () returned 0x11d0
[0269.860] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf5946, lParam=0x0) returned 1
[0269.861] IsWindowVisible (hWnd=0x70036) returned 1
[0269.861] IsWindowEnabled (hWnd=0x70036) returned 1
[0269.861] IsWindowVisible (hWnd=0x602b6) returned 0
[0269.861] IsWindowVisible (hWnd=0x901f8) returned 0
[0269.861] IsWindowVisible (hWnd=0x202d0) returned 0
[0269.861] IsWindowVisible (hWnd=0x202d4) returned 0
[0269.861] GetActiveWindow () returned 0x70036
[0269.861] GetFocus () returned 0x202c6
[0269.861] IsWindow (hWnd=0x70036) returned 1
[0269.861] EnableWindow (hWnd=0x70036, bEnable=0)
[0269.861] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0269.862] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0269.863] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0269.902] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0xf0105ee
[0269.902] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0269.902] CreateCompatibleDC (hdc=0xf0105ee) returned 0x85010795
[0269.902] SelectObject (hdc=0x85010795, h=0x1e0507b9) returned 0x85000f
[0269.902] GdipCreateFromHDC (hdc=0x85010795, graphics=0x53e108) returned 0x0
[0269.902] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0269.902] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0269.902] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0269.902] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.903] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0269.903] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0269.903] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0269.903] LocalFree (hMem=0x89ec80) returned 0x0
[0269.903] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.903] GdipCreateRegion (region=0x53e150) returned 0x0
[0269.903] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.903] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0269.903] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0269.903] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb2b0dbd) returned 0x0
[0269.903] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.903] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0269.903] GetCurrentObject (hdc=0x85010795, type=0x1) returned 0xb00017
[0269.903] GetCurrentObject (hdc=0x85010795, type=0x2) returned 0x900010
[0269.904] GetCurrentObject (hdc=0x85010795, type=0x7) returned 0x1e0507b9
[0269.904] GetCurrentObject (hdc=0x85010795, type=0x6) returned 0x8a01c2
[0269.904] SaveDC (hdc=0x85010795) returned 1
[0269.904] GetNearestColor (hdc=0x85010795, color=0xff) returned 0xff
[0269.904] GetNearestColor (hdc=0x85010795, color=0x55) returned 0x55
[0269.904] GetNearestColor (hdc=0x85010795, color=0x0) returned 0x0
[0269.905] GetNearestColor (hdc=0x85010795, color=0x55) returned 0x55
[0269.905] GetNearestColor (hdc=0x85010795, color=0x0) returned 0x0
[0269.905] GetNearestColor (hdc=0x85010795, color=0x8080ff) returned 0x8080ff
[0269.905] GetNearestColor (hdc=0x85010795, color=0x7373e5) returned 0x7373e5
[0269.905] GetNearestColor (hdc=0x85010795, color=0xe5) returned 0xe5
[0269.905] GetNearestColor (hdc=0x85010795, color=0x0) returned 0x0
[0269.905] RestoreDC (hdc=0x85010795, nSavedDC=-1) returned 1
[0269.905] GdipReleaseDC (graphics=0x5d92c30, hdc=0x85010795) returned 0x0
[0269.905] IsAppThemed () returned 0x1
[0269.905] GetThemeAppProperties () returned 0x3
[0269.905] GetThemeAppProperties () returned 0x3
[0269.905] IsAppThemed () returned 0x1
[0269.905] GetThemeAppProperties () returned 0x3
[0269.906] GetThemeAppProperties () returned 0x3
[0269.906] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0269.906] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2363044 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0269.906] IsAppThemed () returned 0x1
[0269.906] GetThemeAppProperties () returned 0x3
[0269.906] GetThemeAppProperties () returned 0x3
[0269.906] IsAppThemed () returned 0x1
[0269.906] GetThemeAppProperties () returned 0x3
[0269.906] GetThemeAppProperties () returned 0x3
[0269.906] GetFocus () returned 0x1700ea
[0269.906] IsAppThemed () returned 0x1
[0269.907] GetThemeAppProperties () returned 0x3
[0269.907] GetThemeAppProperties () returned 0x3
[0269.907] IsAppThemed () returned 0x1
[0269.907] GetThemeAppProperties () returned 0x3
[0269.907] GetThemeAppProperties () returned 0x3
[0269.907] IsThemePartDefined () returned 0x1
[0269.907] IsAppThemed () returned 0x1
[0269.907] GetThemeAppProperties () returned 0x3
[0269.907] GetThemeAppProperties () returned 0x3
[0269.907] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0269.907] IsAppThemed () returned 0x1
[0269.907] GetThemeAppProperties () returned 0x3
[0269.907] GetThemeAppProperties () returned 0x3
[0269.907] IsAppThemed () returned 0x1
[0269.907] GetThemeAppProperties () returned 0x3
[0269.907] GetThemeAppProperties () returned 0x3
[0269.907] IsThemePartDefined () returned 0x1
[0269.907] GdipCreateRegion (region=0x53de78) returned 0x0
[0269.907] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.907] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0269.908] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.908] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0269.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0269.908] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0269.908] LocalFree (hMem=0x89ee08) returned 0x0
[0269.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0269.908] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0269.908] LocalFree (hMem=0x89eac0) returned 0x0
[0269.908] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.908] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0269.908] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0269.908] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0269.908] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.908] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0269.908] GetCurrentObject (hdc=0x85010795, type=0x1) returned 0xb00017
[0269.908] GetCurrentObject (hdc=0x85010795, type=0x2) returned 0x900010
[0269.908] GetCurrentObject (hdc=0x85010795, type=0x7) returned 0x1e0507b9
[0269.909] GetCurrentObject (hdc=0x85010795, type=0x6) returned 0x8a01c2
[0269.909] SaveDC (hdc=0x85010795) returned 1
[0269.909] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1b0407a1
[0269.909] GetClipRgn (hdc=0x85010795, hrgn=0x1b0407a1) returned 0
[0269.909] SelectClipRgn (hdc=0x85010795, hrgn=0x9c040798) returned 2
[0269.909] DeleteObject (ho=0x1b0407a1) returned 1
[0269.909] DeleteObject (ho=0x9c040798) returned 1
[0269.909] OffsetViewportOrgEx (in: hdc=0x85010795, x=0, y=0, lppt=0x23636f4 | out: lppt=0x23636f4) returned 1
[0269.909] DrawThemeParentBackground () returned 0x0
[0269.909] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0269.910] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0269.910] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0269.910] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0269.910] GetSystemMetrics (nIndex=42) returned 0
[0269.910] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0269.910] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0269.910] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0269.910] GetCurrentObject (hdc=0x85010795, type=0x1) returned 0xb00017
[0269.910] GetCurrentObject (hdc=0x85010795, type=0x2) returned 0x900010
[0269.910] GetCurrentObject (hdc=0x85010795, type=0x7) returned 0x1e0507b9
[0269.910] GetCurrentObject (hdc=0x85010795, type=0x6) returned 0x8a01c2
[0269.910] SaveDC (hdc=0x85010795) returned 2
[0269.910] GetNearestColor (hdc=0x85010795, color=0xff) returned 0xff
[0269.910] CreateSolidBrush (color=0xff) returned 0xca10078d
[0269.910] FillRect (hDC=0x85010795, lprc=0x53d8d8, hbr=0xca10078d) returned 1
[0269.911] DeleteObject (ho=0xca10078d) returned 1
[0269.911] RestoreDC (hdc=0x85010795, nSavedDC=-1) returned 1
[0269.911] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0269.911] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0269.911] GetSystemMetrics (nIndex=42) returned 0
[0269.911] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0269.911] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0269.911] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0269.911] GetCurrentObject (hdc=0x85010795, type=0x1) returned 0xb00017
[0269.911] GetCurrentObject (hdc=0x85010795, type=0x2) returned 0x900010
[0269.911] GetCurrentObject (hdc=0x85010795, type=0x7) returned 0x1e0507b9
[0269.911] GetCurrentObject (hdc=0x85010795, type=0x6) returned 0x8a01c2
[0269.911] SaveDC (hdc=0x85010795) returned 2
[0269.911] GetNearestColor (hdc=0x85010795, color=0xff) returned 0xff
[0269.912] CreateSolidBrush (color=0xff) returned 0xcb10078d
[0269.912] FillRect (hDC=0x85010795, lprc=0x53d878, hbr=0xcb10078d) returned 1
[0269.912] DeleteObject (ho=0xcb10078d) returned 1
[0269.925] RestoreDC (hdc=0x85010795, nSavedDC=-1) returned 1
[0269.925] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0269.925] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0269.925] GetSystemMetrics (nIndex=42) returned 0
[0269.925] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0269.925] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0269.926] RestoreDC (hdc=0x85010795, nSavedDC=-1) returned 1
[0269.926] GdipReleaseDC (graphics=0x5d92c30, hdc=0x85010795) returned 0x0
[0269.926] IsAppThemed () returned 0x1
[0269.926] GetThemeAppProperties () returned 0x3
[0269.926] GetThemeAppProperties () returned 0x3
[0269.926] IsAppThemed () returned 0x1
[0269.926] GetThemeAppProperties () returned 0x3
[0269.926] GetThemeAppProperties () returned 0x3
[0269.926] IsThemePartDefined () returned 0x1
[0269.926] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0269.926] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.926] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0269.926] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0269.926] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0269.926] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0269.926] LocalFree (hMem=0x89eac0) returned 0x0
[0269.927] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0269.927] LocalFree (hMem=0x89eac0) returned 0x0
[0269.927] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0269.927] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0269.927] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0269.927] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0269.927] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.927] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0269.927] GetCurrentObject (hdc=0x85010795, type=0x1) returned 0xb00017
[0269.927] GetCurrentObject (hdc=0x85010795, type=0x2) returned 0x900010
[0269.927] GetCurrentObject (hdc=0x85010795, type=0x7) returned 0x1e0507b9
[0269.927] GetCurrentObject (hdc=0x85010795, type=0x6) returned 0x8a01c2
[0269.927] SaveDC (hdc=0x85010795) returned 1
[0269.928] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9d040798
[0269.928] GetClipRgn (hdc=0x85010795, hrgn=0x9d040798) returned 0
[0269.928] SelectClipRgn (hdc=0x85010795, hrgn=0x1d0407a1) returned 2
[0269.928] DeleteObject (ho=0x9d040798) returned 1
[0269.928] DeleteObject (ho=0x1d0407a1) returned 1
[0269.928] OffsetViewportOrgEx (in: hdc=0x85010795, x=0, y=0, lppt=0x2363f58 | out: lppt=0x2363f58) returned 1
[0269.928] IsAppThemed () returned 0x1
[0269.928] GetThemeAppProperties () returned 0x3
[0269.928] GetThemeAppProperties () returned 0x3
[0269.928] DrawThemeBackground () returned 0x0
[0269.929] RestoreDC (hdc=0x85010795, nSavedDC=-1) returned 1
[0269.929] GdipReleaseDC (graphics=0x5d92c30, hdc=0x85010795) returned 0x0
[0269.929] GdipCreateRegion (region=0x53de00) returned 0x0
[0269.929] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0269.929] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0269.929] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0269.929] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0269.929] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0269.929] LocalFree (hMem=0x89ec80) returned 0x0
[0269.929] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0269.929] LocalFree (hMem=0x89ec80) returned 0x0
[0269.929] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0269.929] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0269.929] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0269.929] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0269.929] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0269.930] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0269.930] GetCurrentObject (hdc=0x85010795, type=0x1) returned 0xb00017
[0269.930] GetCurrentObject (hdc=0x85010795, type=0x2) returned 0x900010
[0269.930] GetCurrentObject (hdc=0x85010795, type=0x7) returned 0x1e0507b9
[0269.930] GetCurrentObject (hdc=0x85010795, type=0x6) returned 0x8a01c2
[0269.930] SaveDC (hdc=0x85010795) returned 1
[0269.930] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1e0407a1
[0269.930] GetClipRgn (hdc=0x85010795, hrgn=0x1e0407a1) returned 0
[0269.930] SelectClipRgn (hdc=0x85010795, hrgn=0x9e040798) returned 2
[0269.930] DeleteObject (ho=0x1e0407a1) returned 1
[0269.930] DeleteObject (ho=0x9e040798) returned 1
[0269.930] OffsetViewportOrgEx (in: hdc=0x85010795, x=0, y=0, lppt=0x236422c | out: lppt=0x236422c) returned 1
[0269.930] IsAppThemed () returned 0x1
[0269.930] GetThemeAppProperties () returned 0x3
[0269.930] GetThemeAppProperties () returned 0x3
[0269.930] GetThemeBackgroundContentRect () returned 0x0
[0269.930] RestoreDC (hdc=0x85010795, nSavedDC=-1) returned 1
[0269.931] GdipReleaseDC (graphics=0x5d92c30, hdc=0x85010795) returned 0x0
[0269.931] IsAppThemed () returned 0x1
[0269.931] GetThemeAppProperties () returned 0x3
[0269.931] GetThemeAppProperties () returned 0x3
[0269.931] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0269.931] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0269.931] GetCurrentObject (hdc=0x85010795, type=0x1) returned 0xb00017
[0269.931] GetCurrentObject (hdc=0x85010795, type=0x2) returned 0x900010
[0269.931] GetCurrentObject (hdc=0x85010795, type=0x7) returned 0x1e0507b9
[0269.931] GetCurrentObject (hdc=0x85010795, type=0x6) returned 0x8a01c2
[0269.931] SaveDC (hdc=0x85010795) returned 1
[0269.931] GetTextAlign (hdc=0x85010795) returned 0x0
[0269.931] GetTextColor (hdc=0x85010795) returned 0x0
[0269.931] GetCurrentObject (hdc=0x85010795, type=0x6) returned 0x8a01c2
[0269.931] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0269.932] SelectObject (hdc=0x85010795, h=0x450a0799) returned 0x8a01c2
[0269.932] GetBkMode (hdc=0x85010795) returned 2
[0269.932] SetBkMode (hdc=0x85010795, mode=1) returned 2
[0269.932] DrawTextExW (in: hdc=0x85010795, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x23645cc | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0269.932] DrawTextExW (in: hdc=0x85010795, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x23645cc | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0269.932] RestoreDC (hdc=0x85010795, nSavedDC=-1) returned 1
[0269.933] GdipReleaseDC (graphics=0x5d92c30, hdc=0x85010795) returned 0x0
[0269.933] GetFocus () returned 0x1700ea
[0269.933] IsAppThemed () returned 0x1
[0269.933] GetThemeAppProperties () returned 0x3
[0269.933] GetThemeAppProperties () returned 0x3
[0269.933] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0269.933] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x85010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0269.933] GdipReleaseDC (graphics=0x5d92c30, hdc=0x85010795) returned 0x0
[0269.933] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0269.933] SelectObject (hdc=0x85010795, h=0x85000f) returned 0x1e0507b9
[0269.933] DeleteDC (hdc=0x85010795) returned 1
[0269.933] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0269.933] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0270.314] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0270.314] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0270.314] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1002ca) returned 0x1
[0270.316] GetFocus () returned 0x1002ca
[0270.316] GetAncestor (hwnd=0x1002ca, gaFlags=0x1) returned 0x10010
[0270.316] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0270.317] SetFocus (hWnd=0x202c6) returned 0x0
[0270.327] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0270.329] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0270.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0270.330] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0270.330] GetFocus () returned 0x70036
[0270.330] SetFocus (hWnd=0x202c6) returned 0x0
[0270.336] IsWindow (hWnd=0x70036) returned 1
[0270.336] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0270.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0270.337] IsWindow (hWnd=0x70036) returned 1
[0270.337] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0270.337] IsWindow (hWnd=0x202c6) returned 1
[0270.337] SetFocus (hWnd=0x202c6) returned 0x70036
[0270.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0270.338] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0270.340] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0270.341] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0270.341] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0270.342] GetStockObject (i=5) returned 0x900015
[0270.342] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0270.342] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8cc910) returned 0x7
[0270.342] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0270.342] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0270.342] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0270.342] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0270.344] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0270.344] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0270.344] GetFocus () returned 0x202c6
[0270.344] GetCapture () returned 0x0
[0270.344] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.344] IsWindowUnicode (hWnd=0x202c6) returned 1
[0270.344] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.345] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.345] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.345] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.346] IsWindowUnicode (hWnd=0x202c6) returned 1
[0270.346] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.346] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.346] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.346] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0270.346] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0270.346] CreateCompatibleDC (hdc=0x8b010786) returned 0xdf0107c4
[0270.346] SelectObject (hdc=0xdf0107c4, h=0x1e0507b9) returned 0x85000f
[0270.346] GdipCreateFromHDC (hdc=0xdf0107c4, graphics=0x53e958) returned 0x0
[0270.346] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0270.346] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0270.346] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0270.347] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0270.347] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0270.347] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0270.347] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0270.347] LocalFree (hMem=0x89ec80) returned 0x0
[0270.347] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0270.347] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0270.347] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0270.347] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0270.347] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0270.347] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb290dbd) returned 0x0
[0270.347] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0270.347] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0270.347] GetCurrentObject (hdc=0xdf0107c4, type=0x1) returned 0xb00017
[0270.347] GetCurrentObject (hdc=0xdf0107c4, type=0x2) returned 0x900010
[0270.348] GetCurrentObject (hdc=0xdf0107c4, type=0x7) returned 0x1e0507b9
[0270.348] GetCurrentObject (hdc=0xdf0107c4, type=0x6) returned 0x8a01c2
[0270.348] SaveDC (hdc=0xdf0107c4) returned 1
[0270.348] GetNearestColor (hdc=0xdf0107c4, color=0xff) returned 0xff
[0270.348] GetNearestColor (hdc=0xdf0107c4, color=0x55) returned 0x55
[0270.348] GetNearestColor (hdc=0xdf0107c4, color=0x0) returned 0x0
[0270.348] GetNearestColor (hdc=0xdf0107c4, color=0x55) returned 0x55
[0270.348] GetNearestColor (hdc=0xdf0107c4, color=0x0) returned 0x0
[0270.348] GetNearestColor (hdc=0xdf0107c4, color=0x8080ff) returned 0x8080ff
[0270.348] GetNearestColor (hdc=0xdf0107c4, color=0x7373e5) returned 0x7373e5
[0270.348] GetNearestColor (hdc=0xdf0107c4, color=0xe5) returned 0xe5
[0270.348] GetNearestColor (hdc=0xdf0107c4, color=0x0) returned 0x0
[0270.348] RestoreDC (hdc=0xdf0107c4, nSavedDC=-1) returned 1
[0270.349] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdf0107c4) returned 0x0
[0270.349] IsAppThemed () returned 0x1
[0270.349] GetThemeAppProperties () returned 0x3
[0270.349] GetThemeAppProperties () returned 0x3
[0270.349] IsAppThemed () returned 0x1
[0270.349] GetThemeAppProperties () returned 0x3
[0270.349] GetThemeAppProperties () returned 0x3
[0270.349] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2364e28 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0270.364] IsAppThemed () returned 0x1
[0270.364] GetThemeAppProperties () returned 0x3
[0270.365] GetThemeAppProperties () returned 0x3
[0270.365] IsAppThemed () returned 0x1
[0270.365] GetThemeAppProperties () returned 0x3
[0270.365] GetThemeAppProperties () returned 0x3
[0270.365] GetFocus () returned 0x202c6
[0270.365] IsAppThemed () returned 0x1
[0270.369] GetThemeAppProperties () returned 0x3
[0270.369] GetThemeAppProperties () returned 0x3
[0270.369] IsAppThemed () returned 0x1
[0270.369] GetThemeAppProperties () returned 0x3
[0270.369] GetThemeAppProperties () returned 0x3
[0270.369] IsThemePartDefined () returned 0x1
[0270.369] IsAppThemed () returned 0x1
[0270.369] GetThemeAppProperties () returned 0x3
[0270.369] GetThemeAppProperties () returned 0x3
[0270.369] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0270.369] IsAppThemed () returned 0x1
[0270.370] GetThemeAppProperties () returned 0x3
[0270.370] GetThemeAppProperties () returned 0x3
[0270.370] IsAppThemed () returned 0x1
[0270.370] GetThemeAppProperties () returned 0x3
[0270.370] GetThemeAppProperties () returned 0x3
[0270.370] IsThemePartDefined () returned 0x1
[0270.370] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0270.370] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0270.370] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0270.370] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0270.370] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0270.370] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0270.370] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0270.370] LocalFree (hMem=0x89ea88) returned 0x0
[0270.370] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0270.370] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0270.370] LocalFree (hMem=0x89ee40) returned 0x0
[0270.370] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0270.370] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0270.371] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0270.371] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0270.371] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0270.371] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0270.371] GetCurrentObject (hdc=0xdf0107c4, type=0x1) returned 0xb00017
[0270.371] GetCurrentObject (hdc=0xdf0107c4, type=0x2) returned 0x900010
[0270.371] GetCurrentObject (hdc=0xdf0107c4, type=0x7) returned 0x1e0507b9
[0270.371] GetCurrentObject (hdc=0xdf0107c4, type=0x6) returned 0x8a01c2
[0270.371] SaveDC (hdc=0xdf0107c4) returned 1
[0270.371] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcc04053e
[0270.371] GetClipRgn (hdc=0xdf0107c4, hrgn=0xcc04053e) returned 0
[0270.371] SelectClipRgn (hdc=0xdf0107c4, hrgn=0xac040798) returned 2
[0270.371] DeleteObject (ho=0xcc04053e) returned 1
[0270.371] DeleteObject (ho=0xac040798) returned 1
[0270.371] OffsetViewportOrgEx (in: hdc=0xdf0107c4, x=0, y=0, lppt=0x23654d8 | out: lppt=0x23654d8) returned 1
[0270.372] DrawThemeParentBackground () returned 0x0
[0270.372] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0270.372] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0270.372] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0270.372] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0270.372] GetSystemMetrics (nIndex=42) returned 0
[0270.372] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0270.372] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0270.372] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0270.372] GetCurrentObject (hdc=0xdf0107c4, type=0x1) returned 0xb00017
[0270.372] GetCurrentObject (hdc=0xdf0107c4, type=0x2) returned 0x900010
[0270.372] GetCurrentObject (hdc=0xdf0107c4, type=0x7) returned 0x1e0507b9
[0270.372] GetCurrentObject (hdc=0xdf0107c4, type=0x6) returned 0x8a01c2
[0270.372] SaveDC (hdc=0xdf0107c4) returned 2
[0270.373] GetNearestColor (hdc=0xdf0107c4, color=0xff) returned 0xff
[0270.373] CreateSolidBrush (color=0xff) returned 0xcd10078d
[0270.373] FillRect (hDC=0xdf0107c4, lprc=0x53e128, hbr=0xcd10078d) returned 1
[0270.373] DeleteObject (ho=0xcd10078d) returned 1
[0270.373] RestoreDC (hdc=0xdf0107c4, nSavedDC=-1) returned 1
[0270.373] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0270.373] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0270.373] GetSystemMetrics (nIndex=42) returned 0
[0270.373] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0270.373] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0270.373] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0270.373] GetCurrentObject (hdc=0xdf0107c4, type=0x1) returned 0xb00017
[0270.373] GetCurrentObject (hdc=0xdf0107c4, type=0x2) returned 0x900010
[0270.373] GetCurrentObject (hdc=0xdf0107c4, type=0x7) returned 0x1e0507b9
[0270.373] GetCurrentObject (hdc=0xdf0107c4, type=0x6) returned 0x8a01c2
[0270.374] SaveDC (hdc=0xdf0107c4) returned 2
[0270.374] GetNearestColor (hdc=0xdf0107c4, color=0xff) returned 0xff
[0270.374] CreateSolidBrush (color=0xff) returned 0xce10078d
[0270.374] FillRect (hDC=0xdf0107c4, lprc=0x53e0c8, hbr=0xce10078d) returned 1
[0270.374] DeleteObject (ho=0xce10078d) returned 1
[0270.374] RestoreDC (hdc=0xdf0107c4, nSavedDC=-1) returned 1
[0270.374] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0270.374] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0270.374] GetSystemMetrics (nIndex=42) returned 0
[0270.374] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0270.374] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0270.374] RestoreDC (hdc=0xdf0107c4, nSavedDC=-1) returned 1
[0270.374] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdf0107c4) returned 0x0
[0270.375] IsAppThemed () returned 0x1
[0270.375] GetThemeAppProperties () returned 0x3
[0270.375] GetThemeAppProperties () returned 0x3
[0270.375] IsAppThemed () returned 0x1
[0270.375] GetThemeAppProperties () returned 0x3
[0270.375] GetThemeAppProperties () returned 0x3
[0270.375] IsThemePartDefined () returned 0x1
[0270.375] GdipCreateRegion (region=0x53e64c) returned 0x0
[0270.375] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0270.375] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0270.375] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0270.375] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0270.375] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0270.375] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0270.375] LocalFree (hMem=0x89ea88) returned 0x0
[0270.375] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0270.375] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0270.375] LocalFree (hMem=0x89ea88) returned 0x0
[0270.376] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0270.376] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0270.376] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0270.376] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0270.376] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0270.376] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0270.376] GetCurrentObject (hdc=0xdf0107c4, type=0x1) returned 0xb00017
[0270.376] GetCurrentObject (hdc=0xdf0107c4, type=0x2) returned 0x900010
[0270.376] GetCurrentObject (hdc=0xdf0107c4, type=0x7) returned 0x1e0507b9
[0270.376] GetCurrentObject (hdc=0xdf0107c4, type=0x6) returned 0x8a01c2
[0270.376] SaveDC (hdc=0xdf0107c4) returned 1
[0270.376] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xad040798
[0270.376] GetClipRgn (hdc=0xdf0107c4, hrgn=0xad040798) returned 0
[0270.376] SelectClipRgn (hdc=0xdf0107c4, hrgn=0xce04053e) returned 2
[0270.376] DeleteObject (ho=0xad040798) returned 1
[0270.376] DeleteObject (ho=0xce04053e) returned 1
[0270.377] OffsetViewportOrgEx (in: hdc=0xdf0107c4, x=0, y=0, lppt=0x2365d3c | out: lppt=0x2365d3c) returned 1
[0270.377] IsAppThemed () returned 0x1
[0270.377] GetThemeAppProperties () returned 0x3
[0270.377] GetThemeAppProperties () returned 0x3
[0270.377] DrawThemeBackground () returned 0x0
[0270.377] RestoreDC (hdc=0xdf0107c4, nSavedDC=-1) returned 1
[0270.377] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdf0107c4) returned 0x0
[0270.377] GdipCreateRegion (region=0x53e650) returned 0x0
[0270.377] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0270.377] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0270.377] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0270.377] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0270.377] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0270.377] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0270.377] LocalFree (hMem=0x89ea88) returned 0x0
[0270.377] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0270.377] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0270.378] LocalFree (hMem=0x89ea88) returned 0x0
[0270.378] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0270.378] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0270.378] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0270.378] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0270.378] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0270.378] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0270.378] GetCurrentObject (hdc=0xdf0107c4, type=0x1) returned 0xb00017
[0270.378] GetCurrentObject (hdc=0xdf0107c4, type=0x2) returned 0x900010
[0270.378] GetCurrentObject (hdc=0xdf0107c4, type=0x7) returned 0x1e0507b9
[0270.378] GetCurrentObject (hdc=0xdf0107c4, type=0x6) returned 0x8a01c2
[0270.378] SaveDC (hdc=0xdf0107c4) returned 1
[0270.378] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcf04053e
[0270.378] GetClipRgn (hdc=0xdf0107c4, hrgn=0xcf04053e) returned 0
[0270.378] SelectClipRgn (hdc=0xdf0107c4, hrgn=0xae040798) returned 2
[0270.378] DeleteObject (ho=0xcf04053e) returned 1
[0270.379] DeleteObject (ho=0xae040798) returned 1
[0270.379] OffsetViewportOrgEx (in: hdc=0xdf0107c4, x=0, y=0, lppt=0x2366010 | out: lppt=0x2366010) returned 1
[0270.379] IsAppThemed () returned 0x1
[0270.379] GetThemeAppProperties () returned 0x3
[0270.379] GetThemeAppProperties () returned 0x3
[0270.379] GetThemeBackgroundContentRect () returned 0x0
[0270.379] RestoreDC (hdc=0xdf0107c4, nSavedDC=-1) returned 1
[0270.379] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdf0107c4) returned 0x0
[0270.379] IsAppThemed () returned 0x1
[0270.379] GetThemeAppProperties () returned 0x3
[0270.379] GetThemeAppProperties () returned 0x3
[0270.379] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0270.379] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0270.379] GetCurrentObject (hdc=0xdf0107c4, type=0x1) returned 0xb00017
[0270.379] GetCurrentObject (hdc=0xdf0107c4, type=0x2) returned 0x900010
[0270.379] GetCurrentObject (hdc=0xdf0107c4, type=0x7) returned 0x1e0507b9
[0270.379] GetCurrentObject (hdc=0xdf0107c4, type=0x6) returned 0x8a01c2
[0270.379] SaveDC (hdc=0xdf0107c4) returned 1
[0270.380] GetTextAlign (hdc=0xdf0107c4) returned 0x0
[0270.380] GetTextColor (hdc=0xdf0107c4) returned 0x0
[0270.380] GetCurrentObject (hdc=0xdf0107c4, type=0x6) returned 0x8a01c2
[0270.380] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0270.380] SelectObject (hdc=0xdf0107c4, h=0x450a0799) returned 0x8a01c2
[0270.380] GetBkMode (hdc=0xdf0107c4) returned 2
[0270.380] SetBkMode (hdc=0xdf0107c4, mode=1) returned 2
[0270.380] DrawTextExW (in: hdc=0xdf0107c4, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x23663b0 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0270.384] DrawTextExW (in: hdc=0xdf0107c4, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x23663b0 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0270.384] RestoreDC (hdc=0xdf0107c4, nSavedDC=-1) returned 1
[0270.384] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdf0107c4) returned 0x0
[0270.384] GetFocus () returned 0x202c6
[0270.384] IsAppThemed () returned 0x1
[0270.384] GetThemeAppProperties () returned 0x3
[0270.384] GetThemeAppProperties () returned 0x3
[0270.384] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0270.384] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xdf0107c4, x1=0, y1=0, rop=0xcc0020) returned 1
[0270.385] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdf0107c4) returned 0x0
[0270.385] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0270.385] SelectObject (hdc=0xdf0107c4, h=0x85000f) returned 0x1e0507b9
[0270.385] DeleteDC (hdc=0xdf0107c4) returned 1
[0270.385] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0270.385] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0270.385] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.385] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.385] WaitMessage () returned 1
[0270.389] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.389] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.389] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.389] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.389] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.390] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.390] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.390] WaitMessage () returned 1
[0270.407] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.407] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.407] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.407] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.407] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.408] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.408] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.408] WaitMessage () returned 1
[0270.409] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.410] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.410] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.410] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.410] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.411] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.411] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.411] WaitMessage () returned 1
[0270.412] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.412] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.415] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.415] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.415] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.416] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.416] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.417] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.417] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.417] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.417] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.417] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.417] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.417] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.417] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.417] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.418] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.418] WaitMessage () returned 1
[0270.420] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.420] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.420] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.420] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.420] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.422] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.422] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.422] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.422] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.422] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.422] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.422] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.422] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.422] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.422] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.422] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.423] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.423] WaitMessage () returned 1
[0270.423] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.423] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.423] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.423] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.423] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.425] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.425] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.425] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.425] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.425] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.426] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.426] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.426] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.426] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.426] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.426] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.426] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.426] WaitMessage () returned 1
[0270.427] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.427] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.427] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.427] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.427] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.432] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.433] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.433] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.433] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.433] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.433] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.433] IsWindowUnicode (hWnd=0x102dc) returned 1
[0270.433] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.433] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.433] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.433] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.434] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.434] WaitMessage () returned 1
[0270.525] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.525] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.525] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.525] DispatchMessageA (lpMsg=0x53eef8) returned 0x7ea4
[0270.525] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.525] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.525] WaitMessage () returned 1
[0270.647] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.647] IsWindowUnicode (hWnd=0x202d0) returned 1
[0270.647] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0270.647] TranslateMessage (lpMsg=0x53eef8) returned 0
[0270.647] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0270.647] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.647] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0270.647] WaitMessage () returned 1
[0271.522] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0271.522] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0271.522] TranslateMessage (lpMsg=0x53eef8) returned 0
[0271.522] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0271.522] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0271.522] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0271.522] WaitMessage () returned 1
[0272.093] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0272.093] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1970222) returned 0x1
[0272.094] IsWindowUnicode (hWnd=0x202c6) returned 1
[0272.094] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0272.094] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1970222) returned 0x1
[0272.094] SetCursor (hCursor=0x10003) returned 0x10003
[0272.094] TranslateMessage (lpMsg=0x53eef8) returned 0
[0272.094] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0272.094] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0272.094] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0272.095] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0272.095] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0272.095] GetKeyState (nVirtKey=1) returned 1
[0272.095] GetKeyState (nVirtKey=2) returned 0
[0272.095] GetKeyState (nVirtKey=4) returned 0
[0272.095] GetKeyState (nVirtKey=5) returned 0
[0272.095] GetKeyState (nVirtKey=6) returned 0
[0272.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0272.095] IsWindowUnicode (hWnd=0x202c6) returned 1
[0272.095] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0272.095] TranslateMessage (lpMsg=0x53eef8) returned 0
[0272.095] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0272.095] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0272.095] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0272.096] CreateCompatibleDC (hdc=0x8b010786) returned 0x44010792
[0272.096] SelectObject (hdc=0x44010792, h=0x1e0507b9) returned 0x85000f
[0272.096] GdipCreateFromHDC (hdc=0x44010792, graphics=0x53e958) returned 0x0
[0272.096] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0272.096] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0272.096] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0272.096] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.096] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0272.096] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0272.096] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0272.097] LocalFree (hMem=0x89eac0) returned 0x0
[0272.097] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.097] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0272.097] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.097] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0272.097] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0272.097] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb270dbd) returned 0x0
[0272.097] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.097] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0272.097] GetCurrentObject (hdc=0x44010792, type=0x1) returned 0xb00017
[0272.097] GetCurrentObject (hdc=0x44010792, type=0x2) returned 0x900010
[0272.097] GetCurrentObject (hdc=0x44010792, type=0x7) returned 0x1e0507b9
[0272.097] GetCurrentObject (hdc=0x44010792, type=0x6) returned 0x8a01c2
[0272.097] SaveDC (hdc=0x44010792) returned 1
[0272.097] GetNearestColor (hdc=0x44010792, color=0xff) returned 0xff
[0272.098] GetNearestColor (hdc=0x44010792, color=0x55) returned 0x55
[0272.098] GetNearestColor (hdc=0x44010792, color=0x0) returned 0x0
[0272.098] GetNearestColor (hdc=0x44010792, color=0x55) returned 0x55
[0272.098] GetNearestColor (hdc=0x44010792, color=0x0) returned 0x0
[0272.098] GetNearestColor (hdc=0x44010792, color=0x8080ff) returned 0x8080ff
[0272.098] GetNearestColor (hdc=0x44010792, color=0x7373e5) returned 0x7373e5
[0272.098] GetNearestColor (hdc=0x44010792, color=0xe5) returned 0xe5
[0272.098] GetNearestColor (hdc=0x44010792, color=0x0) returned 0x0
[0272.098] RestoreDC (hdc=0x44010792, nSavedDC=-1) returned 1
[0272.098] GdipReleaseDC (graphics=0x5d92c30, hdc=0x44010792) returned 0x0
[0272.098] IsAppThemed () returned 0x1
[0272.098] GetThemeAppProperties () returned 0x3
[0272.098] GetThemeAppProperties () returned 0x3
[0272.098] IsAppThemed () returned 0x1
[0272.099] GetThemeAppProperties () returned 0x3
[0272.099] GetThemeAppProperties () returned 0x3
[0272.099] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x2366d44 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0272.099] IsAppThemed () returned 0x1
[0272.099] GetThemeAppProperties () returned 0x3
[0272.099] GetThemeAppProperties () returned 0x3
[0272.099] IsAppThemed () returned 0x1
[0272.099] GetThemeAppProperties () returned 0x3
[0272.099] GetThemeAppProperties () returned 0x3
[0272.099] IsAppThemed () returned 0x1
[0272.099] GetThemeAppProperties () returned 0x3
[0272.099] GetThemeAppProperties () returned 0x3
[0272.099] IsAppThemed () returned 0x1
[0272.100] GetThemeAppProperties () returned 0x3
[0272.100] GetThemeAppProperties () returned 0x3
[0272.100] IsThemePartDefined () returned 0x1
[0272.100] IsAppThemed () returned 0x1
[0272.100] GetThemeAppProperties () returned 0x3
[0272.100] GetThemeAppProperties () returned 0x3
[0272.100] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0272.100] IsAppThemed () returned 0x1
[0272.100] GetThemeAppProperties () returned 0x3
[0272.100] GetThemeAppProperties () returned 0x3
[0272.100] IsAppThemed () returned 0x1
[0272.100] GetThemeAppProperties () returned 0x3
[0272.100] GetThemeAppProperties () returned 0x3
[0272.100] IsThemePartDefined () returned 0x1
[0272.100] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0272.100] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.100] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0272.100] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.100] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0272.101] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0272.101] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0272.101] LocalFree (hMem=0x89ec80) returned 0x0
[0272.101] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.101] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.101] LocalFree (hMem=0x89ea88) returned 0x0
[0272.101] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.101] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0272.101] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0272.101] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0272.101] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.101] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0272.102] GetCurrentObject (hdc=0x44010792, type=0x1) returned 0xb00017
[0272.102] GetCurrentObject (hdc=0x44010792, type=0x2) returned 0x900010
[0272.102] GetCurrentObject (hdc=0x44010792, type=0x7) returned 0x1e0507b9
[0272.102] GetCurrentObject (hdc=0x44010792, type=0x6) returned 0x8a01c2
[0272.102] SaveDC (hdc=0x44010792) returned 1
[0272.102] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaf040798
[0272.102] GetClipRgn (hdc=0x44010792, hrgn=0xaf040798) returned 0
[0272.102] SelectClipRgn (hdc=0x44010792, hrgn=0xd304053e) returned 2
[0272.102] DeleteObject (ho=0xaf040798) returned 1
[0272.102] DeleteObject (ho=0xd304053e) returned 1
[0272.102] OffsetViewportOrgEx (in: hdc=0x44010792, x=0, y=0, lppt=0x23673f4 | out: lppt=0x23673f4) returned 1
[0272.103] DrawThemeParentBackground () returned 0x0
[0272.103] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0272.103] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0272.103] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0272.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0272.103] GetSystemMetrics (nIndex=42) returned 0
[0272.103] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0272.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0272.104] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0272.104] GetCurrentObject (hdc=0x44010792, type=0x1) returned 0xb00017
[0272.104] GetCurrentObject (hdc=0x44010792, type=0x2) returned 0x900010
[0272.104] GetCurrentObject (hdc=0x44010792, type=0x7) returned 0x1e0507b9
[0272.104] GetCurrentObject (hdc=0x44010792, type=0x6) returned 0x8a01c2
[0272.104] SaveDC (hdc=0x44010792) returned 2
[0272.104] GetNearestColor (hdc=0x44010792, color=0xff) returned 0xff
[0272.104] CreateSolidBrush (color=0xff) returned 0xcf10078d
[0272.104] FillRect (hDC=0x44010792, lprc=0x53e120, hbr=0xcf10078d) returned 1
[0272.104] DeleteObject (ho=0xcf10078d) returned 1
[0272.104] RestoreDC (hdc=0x44010792, nSavedDC=-1) returned 1
[0272.104] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0272.104] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0272.104] GetSystemMetrics (nIndex=42) returned 0
[0272.104] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0272.104] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0272.105] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0272.105] GetCurrentObject (hdc=0x44010792, type=0x1) returned 0xb00017
[0272.105] GetCurrentObject (hdc=0x44010792, type=0x2) returned 0x900010
[0272.105] GetCurrentObject (hdc=0x44010792, type=0x7) returned 0x1e0507b9
[0272.105] GetCurrentObject (hdc=0x44010792, type=0x6) returned 0x8a01c2
[0272.105] SaveDC (hdc=0x44010792) returned 2
[0272.105] GetNearestColor (hdc=0x44010792, color=0xff) returned 0xff
[0272.105] CreateSolidBrush (color=0xff) returned 0xd010078d
[0272.105] FillRect (hDC=0x44010792, lprc=0x53e0c0, hbr=0xd010078d) returned 1
[0272.105] DeleteObject (ho=0xd010078d) returned 1
[0272.105] RestoreDC (hdc=0x44010792, nSavedDC=-1) returned 1
[0272.105] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0272.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0272.105] GetSystemMetrics (nIndex=42) returned 0
[0272.105] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0272.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0272.106] RestoreDC (hdc=0x44010792, nSavedDC=-1) returned 1
[0272.106] GdipReleaseDC (graphics=0x5d92c30, hdc=0x44010792) returned 0x0
[0272.106] IsAppThemed () returned 0x1
[0272.106] GetThemeAppProperties () returned 0x3
[0272.106] GetThemeAppProperties () returned 0x3
[0272.106] IsAppThemed () returned 0x1
[0272.106] GetThemeAppProperties () returned 0x3
[0272.106] GetThemeAppProperties () returned 0x3
[0272.106] IsThemePartDefined () returned 0x1
[0272.106] GdipCreateRegion (region=0x53e640) returned 0x0
[0272.106] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.106] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0272.106] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.106] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0272.106] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.106] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0272.106] LocalFree (hMem=0x89ee08) returned 0x0
[0272.106] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0272.106] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0272.107] LocalFree (hMem=0x89ee40) returned 0x0
[0272.107] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.107] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0272.107] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0272.107] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0272.107] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.107] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0272.107] GetCurrentObject (hdc=0x44010792, type=0x1) returned 0xb00017
[0272.107] GetCurrentObject (hdc=0x44010792, type=0x2) returned 0x900010
[0272.107] GetCurrentObject (hdc=0x44010792, type=0x7) returned 0x1e0507b9
[0272.107] GetCurrentObject (hdc=0x44010792, type=0x6) returned 0x8a01c2
[0272.107] SaveDC (hdc=0x44010792) returned 1
[0272.107] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd404053e
[0272.107] GetClipRgn (hdc=0x44010792, hrgn=0xd404053e) returned 0
[0272.107] SelectClipRgn (hdc=0x44010792, hrgn=0xb1040798) returned 2
[0272.107] DeleteObject (ho=0xd404053e) returned 1
[0272.108] DeleteObject (ho=0xb1040798) returned 1
[0272.108] OffsetViewportOrgEx (in: hdc=0x44010792, x=0, y=0, lppt=0x2367c58 | out: lppt=0x2367c58) returned 1
[0272.108] IsAppThemed () returned 0x1
[0272.108] GetThemeAppProperties () returned 0x3
[0272.108] GetThemeAppProperties () returned 0x3
[0272.108] DrawThemeBackground () returned 0x0
[0272.108] RestoreDC (hdc=0x44010792, nSavedDC=-1) returned 1
[0272.108] GdipReleaseDC (graphics=0x5d92c30, hdc=0x44010792) returned 0x0
[0272.108] GdipCreateRegion (region=0x53e644) returned 0x0
[0272.108] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.108] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0272.109] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.109] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0272.109] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0272.109] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0272.109] LocalFree (hMem=0x89ec80) returned 0x0
[0272.109] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.109] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.109] LocalFree (hMem=0x89ea88) returned 0x0
[0272.109] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.109] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0272.109] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0272.110] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0272.110] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.110] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0272.110] GetCurrentObject (hdc=0x44010792, type=0x1) returned 0xb00017
[0272.110] GetCurrentObject (hdc=0x44010792, type=0x2) returned 0x900010
[0272.110] GetCurrentObject (hdc=0x44010792, type=0x7) returned 0x1e0507b9
[0272.110] GetCurrentObject (hdc=0x44010792, type=0x6) returned 0x8a01c2
[0272.110] SaveDC (hdc=0x44010792) returned 1
[0272.110] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb2040798
[0272.110] GetClipRgn (hdc=0x44010792, hrgn=0xb2040798) returned 0
[0272.110] SelectClipRgn (hdc=0x44010792, hrgn=0xd504053e) returned 2
[0272.111] DeleteObject (ho=0xb2040798) returned 1
[0272.111] DeleteObject (ho=0xd504053e) returned 1
[0272.111] OffsetViewportOrgEx (in: hdc=0x44010792, x=0, y=0, lppt=0x2367f2c | out: lppt=0x2367f2c) returned 1
[0272.111] IsAppThemed () returned 0x1
[0272.111] GetThemeAppProperties () returned 0x3
[0272.111] GetThemeAppProperties () returned 0x3
[0272.111] GetThemeBackgroundContentRect () returned 0x0
[0272.111] RestoreDC (hdc=0x44010792, nSavedDC=-1) returned 1
[0272.111] GdipReleaseDC (graphics=0x5d92c30, hdc=0x44010792) returned 0x0
[0272.111] IsAppThemed () returned 0x1
[0272.111] GetThemeAppProperties () returned 0x3
[0272.111] GetThemeAppProperties () returned 0x3
[0272.111] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0272.111] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0272.111] GetCurrentObject (hdc=0x44010792, type=0x1) returned 0xb00017
[0272.112] GetCurrentObject (hdc=0x44010792, type=0x2) returned 0x900010
[0272.112] GetCurrentObject (hdc=0x44010792, type=0x7) returned 0x1e0507b9
[0272.112] GetCurrentObject (hdc=0x44010792, type=0x6) returned 0x8a01c2
[0272.112] SaveDC (hdc=0x44010792) returned 1
[0272.112] GetTextAlign (hdc=0x44010792) returned 0x0
[0272.112] GetTextColor (hdc=0x44010792) returned 0x0
[0272.112] GetCurrentObject (hdc=0x44010792, type=0x6) returned 0x8a01c2
[0272.112] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0272.112] SelectObject (hdc=0x44010792, h=0x450a0799) returned 0x8a01c2
[0272.112] GetBkMode (hdc=0x44010792) returned 2
[0272.112] SetBkMode (hdc=0x44010792, mode=1) returned 2
[0272.113] DrawTextExW (in: hdc=0x44010792, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x23682cc | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0272.113] DrawTextExW (in: hdc=0x44010792, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x23682cc | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0272.113] RestoreDC (hdc=0x44010792, nSavedDC=-1) returned 1
[0272.113] GdipReleaseDC (graphics=0x5d92c30, hdc=0x44010792) returned 0x0
[0272.113] GetFocus () returned 0x202c6
[0272.113] IsAppThemed () returned 0x1
[0272.113] GetThemeAppProperties () returned 0x3
[0272.113] GetThemeAppProperties () returned 0x3
[0272.113] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0272.113] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x44010792, x1=0, y1=0, rop=0xcc0020) returned 1
[0272.114] GdipReleaseDC (graphics=0x5d92c30, hdc=0x44010792) returned 0x0
[0272.114] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0272.114] SelectObject (hdc=0x44010792, h=0x85000f) returned 0x1e0507b9
[0272.114] DeleteDC (hdc=0x44010792) returned 1
[0272.114] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.114] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0272.114] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0272.114] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0272.114] WaitMessage () returned 1
[0272.193] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0272.193] IsWindowUnicode (hWnd=0x202c6) returned 1
[0272.193] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0272.194] TranslateMessage (lpMsg=0x53eef8) returned 0
[0272.194] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0272.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0272.194] IsWindowUnicode (hWnd=0x202c6) returned 1
[0272.194] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0272.194] TranslateMessage (lpMsg=0x53eef8) returned 0
[0272.194] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0272.194] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xf0032) returned 0x0
[0272.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0272.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0272.194] WaitMessage () returned 1
[0272.306] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0272.307] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1970222) returned 0x1
[0272.307] IsWindowUnicode (hWnd=0x202c6) returned 1
[0272.307] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0272.307] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1970222) returned 0x1
[0272.307] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0272.307] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12a01cc) returned 0x0
[0272.307] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0272.307] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0272.307] SetCursor (hCursor=0x10003) returned 0x10003
[0272.308] TranslateMessage (lpMsg=0x53eef8) returned 0
[0272.308] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0272.308] GetKeyState (nVirtKey=1) returned -128
[0272.308] GetKeyState (nVirtKey=2) returned 0
[0272.308] GetKeyState (nVirtKey=4) returned 0
[0272.308] GetKeyState (nVirtKey=5) returned 0
[0272.308] GetKeyState (nVirtKey=6) returned 0
[0272.308] IsWindowVisible (hWnd=0x202c6) returned 1
[0272.308] IsWindowEnabled (hWnd=0x202c6) returned 1
[0272.308] SetFocus (hWnd=0x202c6) returned 0x202c6
[0272.308] GetFocus () returned 0x202c6
[0272.308] GetFocus () returned 0x202c6
[0272.308] GetFocus () returned 0x202c6
[0272.308] GetKeyState (nVirtKey=1) returned -128
[0272.308] GetKeyState (nVirtKey=2) returned 0
[0272.308] GetKeyState (nVirtKey=4) returned 0
[0272.308] GetKeyState (nVirtKey=5) returned 0
[0272.308] GetKeyState (nVirtKey=6) returned 0
[0272.308] GetCapture () returned 0x0
[0272.308] SetCapture (hWnd=0x202c6) returned 0x0
[0272.308] GetKeyState (nVirtKey=1) returned -128
[0272.308] GetKeyState (nVirtKey=2) returned 0
[0272.309] GetKeyState (nVirtKey=4) returned 0
[0272.309] GetKeyState (nVirtKey=5) returned 0
[0272.309] GetKeyState (nVirtKey=6) returned 0
[0272.309] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0272.309] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0272.309] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0272.309] IsWindowUnicode (hWnd=0x202c6) returned 1
[0272.309] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0272.309] TranslateMessage (lpMsg=0x53eef8) returned 0
[0272.309] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0272.309] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2368450, cPoints=0x1 | out: lpPoints=0x2368450) returned 25690608
[0272.309] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0272.309] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0272.309] UpdateWindow (hWnd=0x202c6) returned 1
[0272.309] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x8b010786
[0272.309] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0272.310] CreateCompatibleDC (hdc=0x8b010786) returned 0x45010792
[0272.310] SelectObject (hdc=0x45010792, h=0x1e0507b9) returned 0x85000f
[0272.310] GdipCreateFromHDC (hdc=0x45010792, graphics=0x53e5f0) returned 0x0
[0272.310] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0272.310] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0272.310] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0272.310] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.310] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0272.310] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.310] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0272.310] LocalFree (hMem=0x89ee08) returned 0x0
[0272.310] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.310] GdipCreateRegion (region=0x53e638) returned 0x0
[0272.311] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.311] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0272.311] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0272.311] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb250dbd) returned 0x0
[0272.311] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.311] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0272.311] GetCurrentObject (hdc=0x45010792, type=0x1) returned 0xb00017
[0272.311] GetCurrentObject (hdc=0x45010792, type=0x2) returned 0x900010
[0272.311] GetCurrentObject (hdc=0x45010792, type=0x7) returned 0x1e0507b9
[0272.311] GetCurrentObject (hdc=0x45010792, type=0x6) returned 0x8a01c2
[0272.311] SaveDC (hdc=0x45010792) returned 1
[0272.311] GetNearestColor (hdc=0x45010792, color=0xff) returned 0xff
[0272.311] GetNearestColor (hdc=0x45010792, color=0x55) returned 0x55
[0272.311] GetNearestColor (hdc=0x45010792, color=0x0) returned 0x0
[0272.312] GetNearestColor (hdc=0x45010792, color=0x55) returned 0x55
[0272.312] GetNearestColor (hdc=0x45010792, color=0x0) returned 0x0
[0272.312] GetNearestColor (hdc=0x45010792, color=0x8080ff) returned 0x8080ff
[0272.312] GetNearestColor (hdc=0x45010792, color=0x7373e5) returned 0x7373e5
[0272.312] GetNearestColor (hdc=0x45010792, color=0xe5) returned 0xe5
[0272.312] GetNearestColor (hdc=0x45010792, color=0x0) returned 0x0
[0272.312] RestoreDC (hdc=0x45010792, nSavedDC=-1) returned 1
[0272.312] GdipReleaseDC (graphics=0x5d92c30, hdc=0x45010792) returned 0x0
[0272.312] IsAppThemed () returned 0x1
[0272.312] GetThemeAppProperties () returned 0x3
[0272.312] GetThemeAppProperties () returned 0x3
[0272.312] IsAppThemed () returned 0x1
[0272.312] GetThemeAppProperties () returned 0x3
[0272.312] GetThemeAppProperties () returned 0x3
[0272.312] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x2368b6c | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0272.313] IsAppThemed () returned 0x1
[0272.313] GetThemeAppProperties () returned 0x3
[0272.313] GetThemeAppProperties () returned 0x3
[0272.313] IsAppThemed () returned 0x1
[0272.313] GetThemeAppProperties () returned 0x3
[0272.313] GetThemeAppProperties () returned 0x3
[0272.313] IsAppThemed () returned 0x1
[0272.313] GetThemeAppProperties () returned 0x3
[0272.313] GetThemeAppProperties () returned 0x3
[0272.313] IsAppThemed () returned 0x1
[0272.313] GetThemeAppProperties () returned 0x3
[0272.313] GetThemeAppProperties () returned 0x3
[0272.313] IsThemePartDefined () returned 0x1
[0272.313] IsAppThemed () returned 0x1
[0272.313] GetThemeAppProperties () returned 0x3
[0272.313] GetThemeAppProperties () returned 0x3
[0272.313] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0272.314] IsAppThemed () returned 0x1
[0272.314] GetThemeAppProperties () returned 0x3
[0272.314] GetThemeAppProperties () returned 0x3
[0272.314] IsAppThemed () returned 0x1
[0272.314] GetThemeAppProperties () returned 0x3
[0272.314] GetThemeAppProperties () returned 0x3
[0272.314] IsThemePartDefined () returned 0x1
[0272.314] GdipCreateRegion (region=0x53e354) returned 0x0
[0272.314] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.314] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0272.314] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.314] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0272.314] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.314] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.314] LocalFree (hMem=0x89ea88) returned 0x0
[0272.314] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0272.314] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0272.314] LocalFree (hMem=0x89ec80) returned 0x0
[0272.315] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.315] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0272.315] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0272.315] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0272.315] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.315] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0272.315] GetCurrentObject (hdc=0x45010792, type=0x1) returned 0xb00017
[0272.315] GetCurrentObject (hdc=0x45010792, type=0x2) returned 0x900010
[0272.315] GetCurrentObject (hdc=0x45010792, type=0x7) returned 0x1e0507b9
[0272.315] GetCurrentObject (hdc=0x45010792, type=0x6) returned 0x8a01c2
[0272.315] SaveDC (hdc=0x45010792) returned 1
[0272.315] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd604053e
[0272.315] GetClipRgn (hdc=0x45010792, hrgn=0xd604053e) returned 0
[0272.315] SelectClipRgn (hdc=0x45010792, hrgn=0xb6040798) returned 2
[0272.315] DeleteObject (ho=0xd604053e) returned 1
[0272.316] DeleteObject (ho=0xb6040798) returned 1
[0272.316] OffsetViewportOrgEx (in: hdc=0x45010792, x=0, y=0, lppt=0x236921c | out: lppt=0x236921c) returned 1
[0272.316] DrawThemeParentBackground () returned 0x0
[0272.316] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0272.316] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0272.316] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0272.316] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0272.316] GetSystemMetrics (nIndex=42) returned 0
[0272.316] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0272.316] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0272.316] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0272.316] GetCurrentObject (hdc=0x45010792, type=0x1) returned 0xb00017
[0272.316] GetCurrentObject (hdc=0x45010792, type=0x2) returned 0x900010
[0272.316] GetCurrentObject (hdc=0x45010792, type=0x7) returned 0x1e0507b9
[0272.316] GetCurrentObject (hdc=0x45010792, type=0x6) returned 0x8a01c2
[0272.316] SaveDC (hdc=0x45010792) returned 2
[0272.316] GetNearestColor (hdc=0x45010792, color=0xff) returned 0xff
[0272.317] CreateSolidBrush (color=0xff) returned 0xd110078d
[0272.317] FillRect (hDC=0x45010792, lprc=0x53ddb8, hbr=0xd110078d) returned 1
[0272.317] DeleteObject (ho=0xd110078d) returned 1
[0272.317] RestoreDC (hdc=0x45010792, nSavedDC=-1) returned 1
[0272.317] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0272.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0272.317] GetSystemMetrics (nIndex=42) returned 0
[0272.317] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0272.317] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0272.317] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0272.317] GetCurrentObject (hdc=0x45010792, type=0x1) returned 0xb00017
[0272.317] GetCurrentObject (hdc=0x45010792, type=0x2) returned 0x900010
[0272.317] GetCurrentObject (hdc=0x45010792, type=0x7) returned 0x1e0507b9
[0272.317] GetCurrentObject (hdc=0x45010792, type=0x6) returned 0x8a01c2
[0272.317] SaveDC (hdc=0x45010792) returned 2
[0272.317] GetNearestColor (hdc=0x45010792, color=0xff) returned 0xff
[0272.318] CreateSolidBrush (color=0xff) returned 0xd210078d
[0272.318] FillRect (hDC=0x45010792, lprc=0x53dd58, hbr=0xd210078d) returned 1
[0272.318] DeleteObject (ho=0xd210078d) returned 1
[0272.318] RestoreDC (hdc=0x45010792, nSavedDC=-1) returned 1
[0272.318] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0272.318] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0272.319] GetSystemMetrics (nIndex=42) returned 0
[0272.319] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0272.319] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0272.319] RestoreDC (hdc=0x45010792, nSavedDC=-1) returned 1
[0272.319] GdipReleaseDC (graphics=0x5d92c30, hdc=0x45010792) returned 0x0
[0272.319] IsAppThemed () returned 0x1
[0272.319] GetThemeAppProperties () returned 0x3
[0272.319] GetThemeAppProperties () returned 0x3
[0272.319] IsAppThemed () returned 0x1
[0272.320] GetThemeAppProperties () returned 0x3
[0272.320] GetThemeAppProperties () returned 0x3
[0272.320] IsThemePartDefined () returned 0x1
[0272.320] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0272.320] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.320] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0272.320] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.320] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0272.320] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0272.320] LocalFree (hMem=0x89ea88) returned 0x0
[0272.320] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0272.320] LocalFree (hMem=0x89ec80) returned 0x0
[0272.320] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.320] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0272.320] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0272.320] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0272.320] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.320] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0272.320] GetCurrentObject (hdc=0x45010792, type=0x1) returned 0xb00017
[0272.320] GetCurrentObject (hdc=0x45010792, type=0x2) returned 0x900010
[0272.321] GetCurrentObject (hdc=0x45010792, type=0x7) returned 0x1e0507b9
[0272.321] GetCurrentObject (hdc=0x45010792, type=0x6) returned 0x8a01c2
[0272.321] SaveDC (hdc=0x45010792) returned 1
[0272.321] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb7040798
[0272.321] GetClipRgn (hdc=0x45010792, hrgn=0xb7040798) returned 0
[0272.321] SelectClipRgn (hdc=0x45010792, hrgn=0xd804053e) returned 2
[0272.321] DeleteObject (ho=0xb7040798) returned 1
[0272.321] DeleteObject (ho=0xd804053e) returned 1
[0272.321] OffsetViewportOrgEx (in: hdc=0x45010792, x=0, y=0, lppt=0x2369a80 | out: lppt=0x2369a80) returned 1
[0272.321] IsAppThemed () returned 0x1
[0272.321] GetThemeAppProperties () returned 0x3
[0272.321] GetThemeAppProperties () returned 0x3
[0272.321] DrawThemeBackground () returned 0x0
[0272.321] RestoreDC (hdc=0x45010792, nSavedDC=-1) returned 1
[0272.321] GdipReleaseDC (graphics=0x5d92c30, hdc=0x45010792) returned 0x0
[0272.321] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0272.321] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.321] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0272.322] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.322] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0272.322] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.322] LocalFree (hMem=0x89ea88) returned 0x0
[0272.322] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0272.322] LocalFree (hMem=0x89ec80) returned 0x0
[0272.322] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.322] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0272.322] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0272.322] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0272.322] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.322] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0272.322] GetCurrentObject (hdc=0x45010792, type=0x1) returned 0xb00017
[0272.322] GetCurrentObject (hdc=0x45010792, type=0x2) returned 0x900010
[0272.322] GetCurrentObject (hdc=0x45010792, type=0x7) returned 0x1e0507b9
[0272.322] GetCurrentObject (hdc=0x45010792, type=0x6) returned 0x8a01c2
[0272.322] SaveDC (hdc=0x45010792) returned 1
[0272.322] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd904053e
[0272.322] GetClipRgn (hdc=0x45010792, hrgn=0xd904053e) returned 0
[0272.322] SelectClipRgn (hdc=0x45010792, hrgn=0xb8040798) returned 2
[0272.323] DeleteObject (ho=0xd904053e) returned 1
[0272.323] DeleteObject (ho=0xb8040798) returned 1
[0272.323] OffsetViewportOrgEx (in: hdc=0x45010792, x=0, y=0, lppt=0x2369d54 | out: lppt=0x2369d54) returned 1
[0272.323] IsAppThemed () returned 0x1
[0272.323] GetThemeAppProperties () returned 0x3
[0272.323] GetThemeAppProperties () returned 0x3
[0272.323] GetThemeBackgroundContentRect () returned 0x0
[0272.323] RestoreDC (hdc=0x45010792, nSavedDC=-1) returned 1
[0272.323] GdipReleaseDC (graphics=0x5d92c30, hdc=0x45010792) returned 0x0
[0272.323] IsAppThemed () returned 0x1
[0272.323] GetThemeAppProperties () returned 0x3
[0272.323] GetThemeAppProperties () returned 0x3
[0272.323] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0272.323] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0272.323] GetCurrentObject (hdc=0x45010792, type=0x1) returned 0xb00017
[0272.323] GetCurrentObject (hdc=0x45010792, type=0x2) returned 0x900010
[0272.323] GetCurrentObject (hdc=0x45010792, type=0x7) returned 0x1e0507b9
[0272.324] GetCurrentObject (hdc=0x45010792, type=0x6) returned 0x8a01c2
[0272.324] SaveDC (hdc=0x45010792) returned 1
[0272.324] GetTextAlign (hdc=0x45010792) returned 0x0
[0272.324] GetTextColor (hdc=0x45010792) returned 0x0
[0272.324] GetCurrentObject (hdc=0x45010792, type=0x6) returned 0x8a01c2
[0272.324] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0272.324] SelectObject (hdc=0x45010792, h=0x450a0799) returned 0x8a01c2
[0272.324] GetBkMode (hdc=0x45010792) returned 2
[0272.324] SetBkMode (hdc=0x45010792, mode=1) returned 2
[0272.324] DrawTextExW (in: hdc=0x45010792, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x236a0f4 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0272.324] DrawTextExW (in: hdc=0x45010792, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x236a0f4 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0272.325] RestoreDC (hdc=0x45010792, nSavedDC=-1) returned 1
[0272.325] GdipReleaseDC (graphics=0x5d92c30, hdc=0x45010792) returned 0x0
[0272.325] GetFocus () returned 0x202c6
[0272.325] IsAppThemed () returned 0x1
[0272.325] GetThemeAppProperties () returned 0x3
[0272.325] GetThemeAppProperties () returned 0x3
[0272.325] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0272.325] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x45010792, x1=0, y1=0, rop=0xcc0020) returned 1
[0272.325] GdipReleaseDC (graphics=0x5d92c30, hdc=0x45010792) returned 0x0
[0272.326] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0272.326] SelectObject (hdc=0x45010792, h=0x85000f) returned 0x1e0507b9
[0272.326] DeleteDC (hdc=0x45010792) returned 1
[0272.326] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.326] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0272.326] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x236a1f0, cPoints=0x1 | out: lpPoints=0x236a1f0) returned 25690608
[0272.326] WindowFromPoint (Point=0x222) returned 0x202c6
[0272.326] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1970222) returned 0x1
[0272.326] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0272.326] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0272.327] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.327] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0272.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.328] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0272.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.329] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0272.329] GetDC (hWnd=0x0) returned 0x60100ce
[0272.329] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e888) returned 0x0
[0272.329] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0272.329] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.330] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0272.330] GetSystemMetrics (nIndex=5) returned 1
[0272.330] GetSystemMetrics (nIndex=6) returned 1
[0272.330] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.330] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0272.330] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.331] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0272.389] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.389] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0272.389] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.389] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0272.390] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.390] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0272.390] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.390] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0272.390] GetSystemMetrics (nIndex=5) returned 1
[0272.390] GetSystemMetrics (nIndex=6) returned 1
[0272.390] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.391] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0272.391] GetSystemMetrics (nIndex=5) returned 1
[0272.391] GetSystemMetrics (nIndex=6) returned 1
[0272.391] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.391] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0272.391] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.391] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0272.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.392] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0272.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.392] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0272.392] GetSystemMetrics (nIndex=59) returned 1460
[0272.392] GetSystemMetrics (nIndex=60) returned 920
[0272.392] GetSystemMetrics (nIndex=34) returned 136
[0272.392] GetSystemMetrics (nIndex=35) returned 39
[0272.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.392] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0272.392] GetCurrentThreadId () returned 0x11d0
[0272.392] GetCurrentThreadId () returned 0x11d0
[0272.392] GetCurrentThreadId () returned 0x11d0
[0272.392] GetCurrentThreadId () returned 0x11d0
[0272.393] GetCurrentThreadId () returned 0x11d0
[0272.393] GetCurrentThreadId () returned 0x11d0
[0272.393] GetCurrentThreadId () returned 0x11d0
[0272.393] GetCurrentThreadId () returned 0x11d0
[0272.393] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.393] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0272.393] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0272.393] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0272.393] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.393] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0272.394] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.394] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0272.394] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1102ca
[0272.395] SetWindowLongW (hWnd=0x1102ca, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0272.395] GetWindowLongW (hWnd=0x1102ca, nIndex=-4) returned 1950089536
[0272.396] SetWindowLongW (hWnd=0x1102ca, nIndex=-4, dwNewLong=79649374) returned 1950089536
[0272.396] GetWindowLongW (hWnd=0x1102ca, nIndex=-4) returned 79649374
[0272.396] GetWindowLongW (hWnd=0x1102ca, nIndex=-16) returned 113311744
[0272.396] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102ca, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0272.396] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102ca, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0272.397] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102ca, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0272.397] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102ca, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0272.397] GetClientRect (in: hWnd=0x1102ca, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0272.397] GetWindowRect (in: hWnd=0x1102ca, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0272.398] SetWindowTextW (hWnd=0x1102ca, lpString="WindowsFormsParkingWindow") returned 1
[0272.398] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102ca, Msg=0xc, wParam=0x0, lParam=0x236213c) returned 0x1
[0272.398] GetParent (hWnd=0x1102ca) returned 0x0
[0272.399] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0272.399] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1102ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1501e2
[0272.399] SetWindowLongW (hWnd=0x1501e2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0272.399] GetWindowLongW (hWnd=0x1501e2, nIndex=-4) returned 1868147648
[0272.400] SetWindowLongW (hWnd=0x1501e2, nIndex=-4, dwNewLong=79649174) returned 1868147648
[0272.400] GetWindowLongW (hWnd=0x1501e2, nIndex=-4) returned 79649174
[0272.400] GetWindowLongW (hWnd=0x1501e2, nIndex=-16) returned 1174405133
[0272.400] GetWindowLongW (hWnd=0x1501e2, nIndex=-12) returned 0
[0272.400] SetWindowLongW (hWnd=0x1501e2, nIndex=-12, dwNewLong=1376738) returned 0
[0272.400] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0272.401] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0272.401] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0272.401] GetClientRect (in: hWnd=0x1501e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0272.401] GetWindowRect (in: hWnd=0x1501e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0272.401] GetParent (hWnd=0x1501e2) returned 0x1102ca
[0272.402] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102ca, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0272.402] SetWindowTextW (hWnd=0x1501e2, lpString="Enter password: ") returned 1
[0272.402] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0272.402] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0272.402] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0272.403] GetClientRect (in: hWnd=0x1501e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0272.403] GetWindowRect (in: hWnd=0x1501e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0272.403] GetParent (hWnd=0x1501e2) returned 0x1102ca
[0272.403] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1102ca, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0272.403] SendMessageW (hWnd=0x1501e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1501e2) returned 0x0
[0272.403] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1501e2) returned 0x0
[0272.403] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0272.403] GetParent (hWnd=0x1501e2) returned 0x1102ca
[0272.403] GdipCreateFromHWND (hwnd=0x1501e2, graphics=0x53e994) returned 0x0
[0272.404] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0272.404] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.404] GetProcessWindowStation () returned 0x13c
[0272.404] GetCapture () returned 0x202c6
[0272.404] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0272.404] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0272.404] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0272.405] ReleaseCapture () returned 1
[0272.405] GetActiveWindow () returned 0x70036
[0272.405] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0272.405] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.405] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0272.405] GetCursorPos (in: lpPoint=0x2376fa0 | out: lpPoint=0x2376fa0*(x=546, y=407)) returned 1
[0272.405] MonitorFromPoint (pt=0x222, dwFlags=0x197) returned 0x10001
[0272.406] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0272.406] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x48010792
[0272.406] GetDeviceCaps (hdc=0x48010792, index=12) returned 32
[0272.406] GetDeviceCaps (hdc=0x48010792, index=14) returned 1
[0272.406] DeleteDC (hdc=0x48010792) returned 1
[0272.406] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0272.407] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0272.407] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1800ea
[0272.407] SetWindowLongW (hWnd=0x1800ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0272.407] GetWindowLongW (hWnd=0x1800ea, nIndex=-4) returned 1950089536
[0272.408] SetWindowLongW (hWnd=0x1800ea, nIndex=-4, dwNewLong=79649134) returned 1950089536
[0272.408] GetWindowLongW (hWnd=0x1800ea, nIndex=-4) returned 79649134
[0272.408] GetWindowLongW (hWnd=0x1800ea, nIndex=-16) returned 113770496
[0272.408] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0272.409] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0272.410] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0272.410] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0272.410] GetWindowRect (in: hWnd=0x1800ea, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0272.410] SetWindowTextW (hWnd=0x1800ea, lpString="Ransomware") returned 1
[0272.410] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xc, wParam=0x0, lParam=0x236a2b8) returned 0x1
[0272.411] GetStartupInfoW (in: lpStartupInfo=0x23772dc | out: lpStartupInfo=0x23772dc*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0272.413] GetParent (hWnd=0x1800ea) returned 0x0
[0272.413] SetWindowLongW (hWnd=0x1800ea, nIndex=-8, dwNewLong=0) returned 0
[0272.414] SendMessageW (hWnd=0x1800ea, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0272.414] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0272.414] SendMessageW (hWnd=0x1800ea, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0272.414] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0272.415] GetSystemMenu (hWnd=0x1800ea, bRevert=0) returned 0x1b0111
[0272.415] GetWindowPlacement (in: hWnd=0x1800ea, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0272.415] EnableMenuItem (hMenu=0x1b0111, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0272.415] EnableMenuItem (hMenu=0x1b0111, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0272.415] EnableMenuItem (hMenu=0x1b0111, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0272.416] EnableMenuItem (hMenu=0x1b0111, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0272.416] EnableMenuItem (hMenu=0x1b0111, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0272.416] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0272.416] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0272.416] GetWindowRect (in: hWnd=0x1800ea, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0272.416] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.416] GetWindowLongW (hWnd=0x1800ea, nIndex=-16) returned 113770496
[0272.416] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.417] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.417] GetSystemMetrics (nIndex=42) returned 0
[0272.417] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.417] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0272.417] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.417] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.417] GetSystemMetrics (nIndex=42) returned 0
[0272.417] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.417] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0272.417] GetCursorPos (in: lpPoint=0x2377450 | out: lpPoint=0x2377450*(x=546, y=407)) returned 1
[0272.417] MonitorFromPoint (pt=0x224, dwFlags=0x198) returned 0x10001
[0272.417] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0272.417] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x4c010792
[0272.418] GetDeviceCaps (hdc=0x4c010792, index=12) returned 32
[0272.418] GetDeviceCaps (hdc=0x4c010792, index=14) returned 1
[0272.418] DeleteDC (hdc=0x4c010792) returned 1
[0272.418] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0272.418] GetWindowLongW (hWnd=0x1800ea, nIndex=-16) returned 113770496
[0272.418] GetWindowLongW (hWnd=0x1800ea, nIndex=-20) returned 327937
[0272.418] SetWindowLongW (hWnd=0x1800ea, nIndex=-16, dwNewLong=46661632) returned 113770496
[0272.418] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0272.418] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0272.419] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0272.419] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0272.419] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0272.420] SetWindowLongW (hWnd=0x1800ea, nIndex=-20, dwNewLong=327681) returned 327937
[0272.420] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0272.420] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0272.420] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0272.421] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0272.421] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0272.421] SetWindowPos (hWnd=0x1800ea, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0272.421] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0272.421] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0272.422] GetWindowPlacement (in: hWnd=0x1800ea, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0272.422] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0272.422] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0272.422] GetWindowRect (in: hWnd=0x1800ea, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0272.422] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0272.423] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0272.423] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0272.423] RedrawWindow (hWnd=0x1800ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0272.423] GetSystemMenu (hWnd=0x1800ea, bRevert=0) returned 0x1b0111
[0272.424] GetWindowPlacement (in: hWnd=0x1800ea, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0272.424] EnableMenuItem (hMenu=0x1b0111, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0272.424] EnableMenuItem (hMenu=0x1b0111, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0272.424] EnableMenuItem (hMenu=0x1b0111, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0272.424] EnableMenuItem (hMenu=0x1b0111, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0272.424] EnableMenuItem (hMenu=0x1b0111, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0272.424] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0272.424] GetWindowLongW (hWnd=0x1800ea, nIndex=-8) returned 0
[0272.424] SetWindowLongW (hWnd=0x1800ea, nIndex=-8, dwNewLong=458806) returned 0
[0272.425] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0272.425] GetProcessWindowStation () returned 0x13c
[0272.425] GetCurrentThreadId () returned 0x11d0
[0272.425] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf5afe, lParam=0x0) returned 1
[0272.425] IsWindowVisible (hWnd=0x1800ea) returned 0
[0272.425] IsWindowVisible (hWnd=0x70036) returned 1
[0272.425] IsWindowEnabled (hWnd=0x70036) returned 1
[0272.425] IsWindowVisible (hWnd=0x602b6) returned 0
[0272.426] IsWindowVisible (hWnd=0x901f8) returned 0
[0272.426] IsWindowVisible (hWnd=0x202d0) returned 0
[0272.426] IsWindowVisible (hWnd=0x202d4) returned 0
[0272.426] GetActiveWindow () returned 0x70036
[0272.426] GetFocus () returned 0x202c6
[0272.426] IsWindow (hWnd=0x70036) returned 1
[0272.426] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0272.426] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0272.427] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0272.427] GetWindowLongW (hWnd=0x1800ea, nIndex=-8) returned 458806
[0272.427] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0272.427] GetCurrentThreadId () returned 0x11d0
[0272.427] GetWindowLongW (hWnd=0x1800ea, nIndex=-8) returned 458806
[0272.427] IsWindowEnabled (hWnd=0x70036) returned 0
[0272.427] IsWindowEnabled (hWnd=0x1800ea) returned 1
[0272.427] ShowWindow (hWnd=0x1800ea, nCmdShow=5) returned 0
[0272.427] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0272.427] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0272.428] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.429] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0272.429] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x1800ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x150122
[0272.429] SetWindowLongW (hWnd=0x150122, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0272.429] GetWindowLongW (hWnd=0x150122, nIndex=-4) returned 1868026976
[0272.429] SetWindowLongW (hWnd=0x150122, nIndex=-4, dwNewLong=79649574) returned 1868026976
[0272.430] GetWindowLongW (hWnd=0x150122, nIndex=-4) returned 79649574
[0272.430] GetWindowLongW (hWnd=0x150122, nIndex=-16) returned 1174470848
[0272.430] GetWindowLongW (hWnd=0x150122, nIndex=-12) returned 0
[0272.430] SetWindowLongW (hWnd=0x150122, nIndex=-12, dwNewLong=1376546) returned 0
[0272.430] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0272.431] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0272.431] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0272.432] SendMessageW (hWnd=0x150122, Msg=0x2055, wParam=0x150122, lParam=0x3) returned 0x2
[0272.432] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0272.432] GetWindow (hWnd=0x150122, uCmd=0x3) returned 0x0
[0272.432] GetClientRect (in: hWnd=0x150122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0272.432] GetWindowRect (in: hWnd=0x150122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0272.432] GetParent (hWnd=0x150122) returned 0x1800ea
[0272.432] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1800ea, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0272.432] SendMessageW (hWnd=0x150122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0272.432] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0272.432] SendMessageW (hWnd=0x150122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0272.432] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0272.433] GetSystemMetrics (nIndex=5) returned 1
[0272.433] GetSystemMetrics (nIndex=6) returned 1
[0272.433] SendMessageW (hWnd=0x150122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0272.433] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0272.433] SendMessageW (hWnd=0x150122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0272.433] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0272.433] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0272.434] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0272.434] GetClientRect (in: hWnd=0x150122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0272.434] GetWindowRect (in: hWnd=0x150122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0272.434] GetParent (hWnd=0x150122) returned 0x1800ea
[0272.434] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1800ea, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0272.434] SendMessageW (hWnd=0x150122, Msg=0x2210, wParam=0x1220001, lParam=0x150122) returned 0x0
[0272.434] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x2210, wParam=0x1220001, lParam=0x150122) returned 0x0
[0272.434] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0272.434] GetParent (hWnd=0x150122) returned 0x1800ea
[0272.434] GetParent (hWnd=0x1501e2) returned 0x1102ca
[0272.434] SetParent (hWndChild=0x1501e2, hWndNewParent=0x1800ea) returned 0x1102ca
[0272.435] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0272.435] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0272.435] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0272.435] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0272.435] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0272.435] GetClientRect (in: hWnd=0x1501e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0272.436] GetWindowRect (in: hWnd=0x1501e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0272.436] GetParent (hWnd=0x1501e2) returned 0x1800ea
[0272.436] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1800ea, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0272.436] GetClientRect (in: hWnd=0x1501e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0272.436] GetWindowRect (in: hWnd=0x1501e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0272.436] GetParent (hWnd=0x1501e2) returned 0x1800ea
[0272.436] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1800ea, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0272.436] GetParent (hWnd=0x1501e2) returned 0x1800ea
[0272.436] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0272.436] GetWindow (hWnd=0x1501e2, uCmd=0x3) returned 0x0
[0272.436] SetWindowPos (hWnd=0x1501e2, hWndInsertAfter=0x150122, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0272.436] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0272.437] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0272.437] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0272.437] GetClientRect (in: hWnd=0x1501e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0272.437] GetWindowRect (in: hWnd=0x1501e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0272.437] GetParent (hWnd=0x1501e2) returned 0x1800ea
[0272.437] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1800ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0272.437] GetParent (hWnd=0x1501e2) returned 0x1800ea
[0272.437] GetWindow (hWnd=0x1501e2, uCmd=0x3) returned 0x150122
[0272.437] GetWindowThreadProcessId (in: hWnd=0x1501e2, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0272.437] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0272.437] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.438] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0272.438] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x1800ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x11004e
[0272.438] SetWindowLongW (hWnd=0x11004e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0272.438] GetWindowLongW (hWnd=0x11004e, nIndex=-4) returned 1868032000
[0272.439] SetWindowLongW (hWnd=0x11004e, nIndex=-4, dwNewLong=79649654) returned 1868032000
[0272.439] GetWindowLongW (hWnd=0x11004e, nIndex=-4) returned 79649654
[0272.439] GetWindowLongW (hWnd=0x11004e, nIndex=-16) returned 1174470667
[0272.439] GetWindowLongW (hWnd=0x11004e, nIndex=-12) returned 0
[0272.439] SetWindowLongW (hWnd=0x11004e, nIndex=-12, dwNewLong=1114190) returned 0
[0272.439] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0272.439] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0272.440] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0272.440] SendMessageW (hWnd=0x11004e, Msg=0x2055, wParam=0x11004e, lParam=0x3) returned 0x2
[0272.440] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0272.441] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0272.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0272.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0272.441] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0272.441] RedrawWindow (hWnd=0x150122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0272.441] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0272.441] RedrawWindow (hWnd=0x1501e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0272.441] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0272.441] RedrawWindow (hWnd=0x11004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0272.441] RedrawWindow (hWnd=0x1800ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0272.441] GetWindow (hWnd=0x11004e, uCmd=0x3) returned 0x1501e2
[0272.441] GetClientRect (in: hWnd=0x11004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0272.441] GetWindowRect (in: hWnd=0x11004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0272.442] GetParent (hWnd=0x11004e) returned 0x1800ea
[0272.442] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1800ea, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0272.442] SetWindowTextW (hWnd=0x11004e, lpString="OK") returned 1
[0272.442] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0xc, wParam=0x0, lParam=0x236e778) returned 0x1
[0272.442] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0272.442] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0272.442] GetClientRect (in: hWnd=0x11004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0272.442] GetWindowRect (in: hWnd=0x11004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0272.442] GetParent (hWnd=0x11004e) returned 0x1800ea
[0272.442] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1800ea, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0272.443] SendMessageW (hWnd=0x11004e, Msg=0x2210, wParam=0x4e0001, lParam=0x11004e) returned 0x0
[0272.443] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x2210, wParam=0x4e0001, lParam=0x11004e) returned 0x0
[0272.443] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0272.443] GetParent (hWnd=0x11004e) returned 0x1800ea
[0272.443] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0272.443] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.444] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0272.444] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x1800ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x32013e
[0272.444] SetWindowLongW (hWnd=0x32013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0272.444] GetWindowLongW (hWnd=0x32013e, nIndex=-4) returned 1868032000
[0272.445] SetWindowLongW (hWnd=0x32013e, nIndex=-4, dwNewLong=79648974) returned 1868032000
[0272.445] GetWindowLongW (hWnd=0x32013e, nIndex=-4) returned 79648974
[0272.445] GetWindowLongW (hWnd=0x32013e, nIndex=-16) returned 1174470667
[0272.445] GetWindowLongW (hWnd=0x32013e, nIndex=-12) returned 0
[0272.445] SetWindowLongW (hWnd=0x32013e, nIndex=-12, dwNewLong=3277118) returned 0
[0272.445] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0272.445] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0272.446] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0272.446] SendMessageW (hWnd=0x32013e, Msg=0x2055, wParam=0x32013e, lParam=0x3) returned 0x2
[0272.447] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0272.447] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0272.447] GetWindow (hWnd=0x32013e, uCmd=0x3) returned 0x11004e
[0272.447] GetClientRect (in: hWnd=0x32013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0272.447] GetWindowRect (in: hWnd=0x32013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0272.447] GetParent (hWnd=0x32013e) returned 0x1800ea
[0272.447] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1800ea, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0272.447] SetWindowTextW (hWnd=0x32013e, lpString="Cancel") returned 1
[0272.447] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0xc, wParam=0x0, lParam=0x2372038) returned 0x1
[0272.447] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0272.448] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0272.448] GetClientRect (in: hWnd=0x32013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0272.448] GetWindowRect (in: hWnd=0x32013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0272.448] GetParent (hWnd=0x32013e) returned 0x1800ea
[0272.448] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1800ea, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0272.448] SendMessageW (hWnd=0x32013e, Msg=0x2210, wParam=0x13e0001, lParam=0x32013e) returned 0x0
[0272.448] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0x2210, wParam=0x13e0001, lParam=0x32013e) returned 0x0
[0272.448] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0272.448] GetParent (hWnd=0x32013e) returned 0x1800ea
[0272.448] GetDC (hWnd=0x0) returned 0xf0105ee
[0272.448] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e320) returned 0x0
[0272.449] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0272.449] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.449] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0272.449] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0272.449] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0272.449] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.449] GetWindowLongW (hWnd=0x1800ea, nIndex=-8) returned 458806
[0272.449] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0272.450] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0272.450] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x53010792
[0272.450] GetDeviceCaps (hdc=0x53010792, index=12) returned 32
[0272.450] GetDeviceCaps (hdc=0x53010792, index=14) returned 1
[0272.450] DeleteDC (hdc=0x53010792) returned 1
[0272.450] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0272.450] GetWindowThreadProcessId (in: hWnd=0x1800ea, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0272.450] GetCurrentThreadId () returned 0x11d0
[0272.450] PostMessageW (hWnd=0x1800ea, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0272.450] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.450] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.450] GetSystemMetrics (nIndex=42) returned 0
[0272.450] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.450] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0272.450] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0272.451] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0272.451] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0272.451] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0272.458] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1800ea) returned 0x1
[0272.463] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0272.463] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0272.464] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0272.464] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0272.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0272.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0272.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0272.467] GetFocus () returned 0x202c6
[0272.467] IsChild (hWndParent=0x1800ea, hWnd=0x202c6) returned 0
[0272.467] GetFocus () returned 0x202c6
[0272.467] SetFocus (hWnd=0x150122) returned 0x202c6
[0272.468] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x150122, lParam=0x0) returned 0x0
[0272.468] GetCapture () returned 0x0
[0272.468] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0272.469] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0272.470] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0272.471] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0272.471] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0272.471] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0272.471] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0272.472] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0272.472] GetParent (hWnd=0x1800ea) returned 0x0
[0272.472] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0272.473] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0272.473] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0272.474] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0272.474] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0272.474] GetSysColorBrush (nIndex=5) returned 0x100079
[0272.475] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0272.475] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0272.476] SendMessageW (hWnd=0x150122, Msg=0x2111, wParam=0x1000122, lParam=0x150122) returned 0x0
[0272.476] SendMessageW (hWnd=0x150122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0272.476] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0272.476] GetKeyState (nVirtKey=1) returned 0
[0272.476] GetKeyState (nVirtKey=2) returned 0
[0272.476] GetKeyState (nVirtKey=4) returned 0
[0272.476] GetKeyState (nVirtKey=5) returned 0
[0272.476] GetKeyState (nVirtKey=6) returned 0
[0272.476] GetWindowTextLengthW (hWnd=0x150122) returned 0
[0272.476] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0272.476] SendMessageW (hWnd=0x150122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0272.476] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0272.477] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0272.477] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0272.480] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0272.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0272.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0272.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0272.483] GetWindowPlacement (in: hWnd=0x1800ea, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0272.483] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0272.483] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.483] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.483] GetSystemMetrics (nIndex=42) returned 0
[0272.483] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.483] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0272.483] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0272.483] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0272.483] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0272.484] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x50734
[0272.484] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0272.484] SaveDC (hdc=0x10105d6) returned 1
[0272.484] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0272.484] CreateSolidBrush (color=0xf0f0f0) returned 0xd310078d
[0272.484] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0xd310078d) returned 1
[0272.484] DeleteObject (ho=0xd310078d) returned 1
[0272.484] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0272.484] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0272.484] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0272.484] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0272.485] GetWindowPlacement (in: hWnd=0x1800ea, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0272.485] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0272.485] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.486] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.486] GetSystemMetrics (nIndex=42) returned 0
[0272.486] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.486] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0272.486] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0272.486] GetCurrentObject (hdc=0x69010792, type=0x1) returned 0xb00017
[0272.486] GetCurrentObject (hdc=0x69010792, type=0x2) returned 0x900010
[0272.486] GetCurrentObject (hdc=0x69010792, type=0x7) returned 0xffffffff850507ce
[0272.486] GetCurrentObject (hdc=0x69010792, type=0x6) returned 0x8a01c2
[0272.486] SaveDC (hdc=0x69010792) returned 1
[0272.486] GetNearestColor (hdc=0x69010792, color=0xf0f0f0) returned 0xf0f0f0
[0272.486] CreateSolidBrush (color=0xf0f0f0) returned 0xd410078d
[0272.486] FillRect (hDC=0x69010792, lprc=0x53dc18, hbr=0xd410078d) returned 1
[0272.487] DeleteObject (ho=0xd410078d) returned 1
[0272.487] RestoreDC (hdc=0x69010792, nSavedDC=-1) returned 1
[0272.487] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.487] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.487] GetSystemMetrics (nIndex=42) returned 0
[0272.487] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.487] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0272.487] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0272.487] GetCurrentObject (hdc=0x69010792, type=0x1) returned 0xb00017
[0272.487] GetCurrentObject (hdc=0x69010792, type=0x2) returned 0x900010
[0272.487] GetCurrentObject (hdc=0x69010792, type=0x7) returned 0xffffffff850507ce
[0272.487] GetCurrentObject (hdc=0x69010792, type=0x6) returned 0x8a01c2
[0272.488] SaveDC (hdc=0x69010792) returned 1
[0272.488] GetNearestColor (hdc=0x69010792, color=0xf0f0f0) returned 0xf0f0f0
[0272.488] CreateSolidBrush (color=0xf0f0f0) returned 0xd510078d
[0272.488] FillRect (hDC=0x69010792, lprc=0x53dbb8, hbr=0xd510078d) returned 1
[0272.488] DeleteObject (ho=0xd510078d) returned 1
[0272.488] RestoreDC (hdc=0x69010792, nSavedDC=-1) returned 1
[0272.488] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.488] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.488] GetSystemMetrics (nIndex=42) returned 0
[0272.488] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.489] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0272.490] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0272.490] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0272.499] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0272.499] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0272.499] GetStockObject (i=5) returned 0x900015
[0272.500] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0272.500] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0272.500] GetStockObject (i=5) returned 0x900015
[0272.500] GetWindowPlacement (in: hWnd=0x1800ea, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0272.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0272.500] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0272.500] GetWindowRect (in: hWnd=0x1800ea, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0272.501] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0272.501] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0272.502] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0272.502] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0272.502] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0272.502] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0272.502] GetWindowRect (in: hWnd=0x1800ea, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0272.502] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.502] IsWindowUnicode (hWnd=0x1800ea) returned 1
[0272.502] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.502] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.502] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.502] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0272.502] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.503] IsWindowUnicode (hWnd=0x1800ea) returned 1
[0272.503] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.503] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.503] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.503] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.503] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x84, wParam=0x0, lParam=0x1970222) returned 0x1
[0272.503] IsWindowUnicode (hWnd=0x1800ea) returned 1
[0272.503] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.504] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.504] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.504] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.504] IsWindowUnicode (hWnd=0x202c6) returned 1
[0272.504] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.504] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.504] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.504] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0272.504] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0272.504] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.504] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x84, wParam=0x0, lParam=0x1970222) returned 0x1
[0272.504] IsWindowUnicode (hWnd=0x1800ea) returned 1
[0272.504] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.504] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x84, wParam=0x0, lParam=0x1970222) returned 0x1
[0272.505] SetCursor (hCursor=0x10003) returned 0x10003
[0272.505] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.505] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.505] _TrackMouseEvent (in: lpEventTrack=0x23789cc | out: lpEventTrack=0x23789cc) returned 1
[0272.505] SendMessageW (hWnd=0x1800ea, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0272.505] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0272.505] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x200, wParam=0x0, lParam=0x1a0003) returned 0x0
[0272.505] GetKeyState (nVirtKey=1) returned 0
[0272.505] GetKeyState (nVirtKey=2) returned 0
[0272.505] GetKeyState (nVirtKey=4) returned 0
[0272.505] GetKeyState (nVirtKey=5) returned 0
[0272.505] GetKeyState (nVirtKey=6) returned 0
[0272.505] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.505] IsWindowUnicode (hWnd=0x1800ea) returned 1
[0272.537] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.537] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0272.538] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.538] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.538] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.538] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0272.539] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0272.540] IsWindowUnicode (hWnd=0x1800ea) returned 1
[0272.540] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.540] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.540] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.540] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.541] IsWindowUnicode (hWnd=0x1800ea) returned 1
[0272.541] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.541] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.541] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.541] BeginPaint (in: hWnd=0x1800ea, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x8b010786
[0272.541] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0272.541] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.541] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.541] GetSystemMetrics (nIndex=42) returned 0
[0272.541] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.541] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0272.541] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0272.542] EndPaint (hWnd=0x1800ea, lpPaint=0x53e30c) returned 1
[0272.542] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.542] IsWindowUnicode (hWnd=0x150122) returned 1
[0272.542] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.542] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.542] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0272.542] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0272.542] SetTextColor (hdc=0x6a010792, color=0x0) returned 0x0
[0272.542] SetBkColor (hdc=0x6a010792, color=0xffffff) returned 0xffffff
[0272.544] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.544] IsWindowUnicode (hWnd=0x1501e2) returned 1
[0272.544] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.544] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.544] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.544] BeginPaint (in: hWnd=0x1501e2, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x10105d6
[0272.544] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0272.544] CreateCompatibleDC (hdc=0x10105d6) returned 0xf30107c3
[0272.544] SelectObject (hdc=0xf30107c3, h=0x1e0507b9) returned 0x85000f
[0272.545] GdipCreateFromHDC (hdc=0xf30107c3, graphics=0x53e30c) returned 0x0
[0272.545] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0272.545] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0272.545] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0272.545] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.545] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0272.545] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.545] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0272.545] LocalFree (hMem=0x89ea88) returned 0x0
[0272.545] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.545] GdipCreateRegion (region=0x53e354) returned 0x0
[0272.545] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.546] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0272.546] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0272.546] GetWindowTextLengthW (hWnd=0x1501e2) returned 16
[0272.546] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0272.546] GetSystemMetrics (nIndex=42) returned 0
[0272.546] GetWindowTextW (in: hWnd=0x1501e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0272.546] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0272.546] GetClientRect (in: hWnd=0x1501e2, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0272.546] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0272.546] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0272.546] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0272.546] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.546] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0272.546] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.547] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.547] LocalFree (hMem=0x89ea88) returned 0x0
[0272.547] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0272.547] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.547] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.547] LocalFree (hMem=0x89ea88) returned 0x0
[0272.547] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.547] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0272.547] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0272.547] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0272.547] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0272.547] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0272.547] GetCurrentObject (hdc=0xf30107c3, type=0x1) returned 0xb00017
[0272.548] GetCurrentObject (hdc=0xf30107c3, type=0x2) returned 0x900010
[0272.548] GetCurrentObject (hdc=0xf30107c3, type=0x7) returned 0x1e0507b9
[0272.548] GetCurrentObject (hdc=0xf30107c3, type=0x6) returned 0x8a01c2
[0272.548] SaveDC (hdc=0xf30107c3) returned 1
[0272.548] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1c04051e
[0272.548] GetClipRgn (hdc=0xf30107c3, hrgn=0x1c04051e) returned 0
[0272.548] SelectClipRgn (hdc=0xf30107c3, hrgn=0xbd040798) returned 2
[0272.548] DeleteObject (ho=0x1c04051e) returned 1
[0272.548] DeleteObject (ho=0xbd040798) returned 1
[0272.548] OffsetViewportOrgEx (in: hdc=0xf30107c3, x=0, y=0, lppt=0x2378eb0 | out: lppt=0x2378eb0) returned 1
[0272.548] GetNearestColor (hdc=0xf30107c3, color=0xf0f0f0) returned 0xf0f0f0
[0272.548] CreateSolidBrush (color=0xf0f0f0) returned 0xd610078d
[0272.549] FillRect (hDC=0xf30107c3, lprc=0x53e1f4, hbr=0xd610078d) returned 1
[0272.549] DeleteObject (ho=0xd610078d) returned 1
[0272.549] RestoreDC (hdc=0xf30107c3, nSavedDC=-1) returned 1
[0272.549] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf30107c3) returned 0x0
[0272.549] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb1f0dbd) returned 0x0
[0272.549] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.549] GetWindowTextLengthW (hWnd=0x1501e2) returned 16
[0272.549] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0272.549] GetSystemMetrics (nIndex=42) returned 0
[0272.549] GetWindowTextW (in: hWnd=0x1501e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0272.549] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0272.549] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0272.549] GetCurrentObject (hdc=0xf30107c3, type=0x1) returned 0xb00017
[0272.549] GetCurrentObject (hdc=0xf30107c3, type=0x2) returned 0x900010
[0272.550] GetCurrentObject (hdc=0xf30107c3, type=0x7) returned 0x1e0507b9
[0272.550] GetCurrentObject (hdc=0xf30107c3, type=0x6) returned 0x8a01c2
[0272.550] SaveDC (hdc=0xf30107c3) returned 1
[0272.550] GetNearestColor (hdc=0xf30107c3, color=0x0) returned 0x0
[0272.550] RestoreDC (hdc=0xf30107c3, nSavedDC=-1) returned 1
[0272.550] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf30107c3) returned 0x0
[0272.550] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0272.551] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0272.551] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0272.551] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x23791b8 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0272.551] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0272.551] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0272.551] GetCurrentObject (hdc=0xf30107c3, type=0x1) returned 0xb00017
[0272.551] GetCurrentObject (hdc=0xf30107c3, type=0x2) returned 0x900010
[0272.551] GetCurrentObject (hdc=0xf30107c3, type=0x7) returned 0x1e0507b9
[0272.551] GetCurrentObject (hdc=0xf30107c3, type=0x6) returned 0x8a01c2
[0272.552] SaveDC (hdc=0xf30107c3) returned 1
[0272.552] GetTextAlign (hdc=0xf30107c3) returned 0x0
[0272.552] GetTextColor (hdc=0xf30107c3) returned 0x0
[0272.552] GetCurrentObject (hdc=0xf30107c3, type=0x6) returned 0x8a01c2
[0272.552] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0272.552] SelectObject (hdc=0xf30107c3, h=0x730a066d) returned 0x8a01c2
[0272.552] GetBkMode (hdc=0xf30107c3) returned 2
[0272.552] SetBkMode (hdc=0xf30107c3, mode=1) returned 2
[0272.552] DrawTextExW (in: hdc=0xf30107c3, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x23793dc | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0272.557] RestoreDC (hdc=0xf30107c3, nSavedDC=-1) returned 1
[0272.557] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf30107c3) returned 0x0
[0272.557] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0272.557] BitBlt (hdc=0x10105d6, x=0, y=0, cx=250, cy=70, hdcSrc=0xf30107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0272.557] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf30107c3) returned 0x0
[0272.557] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0272.558] SelectObject (hdc=0xf30107c3, h=0x85000f) returned 0x1e0507b9
[0272.558] DeleteDC (hdc=0xf30107c3) returned 1
[0272.558] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.558] EndPaint (hWnd=0x1501e2, lpPaint=0x53e2f0) returned 1
[0272.558] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.558] IsWindowUnicode (hWnd=0x11004e) returned 1
[0272.558] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.558] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.558] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.558] BeginPaint (in: hWnd=0x11004e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0272.558] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0272.558] CreateCompatibleDC (hdc=0xf0105ee) returned 0xf50107c3
[0272.558] SelectObject (hdc=0xf50107c3, h=0x1e0507b9) returned 0x85000f
[0272.559] GdipCreateFromHDC (hdc=0xf50107c3, graphics=0x53e300) returned 0x0
[0272.559] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0272.559] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0272.559] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0272.559] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.559] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0272.559] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.559] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0272.559] LocalFree (hMem=0x89ea88) returned 0x0
[0272.559] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.559] GdipCreateRegion (region=0x53e348) returned 0x0
[0272.559] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.559] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0272.559] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0272.559] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb1d0dbd) returned 0x0
[0272.559] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.559] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0272.560] GetCurrentObject (hdc=0xf50107c3, type=0x1) returned 0xb00017
[0272.560] GetCurrentObject (hdc=0xf50107c3, type=0x2) returned 0x900010
[0272.560] GetCurrentObject (hdc=0xf50107c3, type=0x7) returned 0x1e0507b9
[0272.560] GetCurrentObject (hdc=0xf50107c3, type=0x6) returned 0x8a01c2
[0272.560] SaveDC (hdc=0xf50107c3) returned 1
[0272.560] GetNearestColor (hdc=0xf50107c3, color=0xf0f0f0) returned 0xf0f0f0
[0272.560] GetNearestColor (hdc=0xf50107c3, color=0xa0a0a0) returned 0xa0a0a0
[0272.560] GetNearestColor (hdc=0xf50107c3, color=0x696969) returned 0x696969
[0272.560] GetNearestColor (hdc=0xf50107c3, color=0xa0a0a0) returned 0xa0a0a0
[0272.560] GetNearestColor (hdc=0xf50107c3, color=0x0) returned 0x0
[0272.560] GetNearestColor (hdc=0xf50107c3, color=0xffffff) returned 0xffffff
[0272.560] GetNearestColor (hdc=0xf50107c3, color=0xe5e5e5) returned 0xe5e5e5
[0272.560] GetNearestColor (hdc=0xf50107c3, color=0xd7d7d7) returned 0xd7d7d7
[0272.560] GetNearestColor (hdc=0xf50107c3, color=0x0) returned 0x0
[0272.560] RestoreDC (hdc=0xf50107c3, nSavedDC=-1) returned 1
[0272.560] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf50107c3) returned 0x0
[0272.560] IsAppThemed () returned 0x1
[0272.560] GetThemeAppProperties () returned 0x3
[0272.561] GetThemeAppProperties () returned 0x3
[0272.561] IsAppThemed () returned 0x1
[0272.561] GetThemeAppProperties () returned 0x3
[0272.561] GetThemeAppProperties () returned 0x3
[0272.561] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x2379b48 | out: lpchText="OK", lprc=0x53e028) returned 13
[0272.561] IsAppThemed () returned 0x1
[0272.561] GetThemeAppProperties () returned 0x3
[0272.561] GetThemeAppProperties () returned 0x3
[0272.561] IsAppThemed () returned 0x1
[0272.561] GetThemeAppProperties () returned 0x3
[0272.561] GetThemeAppProperties () returned 0x3
[0272.561] GetFocus () returned 0x150122
[0272.561] IsAppThemed () returned 0x1
[0272.561] GetThemeAppProperties () returned 0x3
[0272.561] GetThemeAppProperties () returned 0x3
[0272.561] IsAppThemed () returned 0x1
[0272.561] GetThemeAppProperties () returned 0x3
[0272.561] GetThemeAppProperties () returned 0x3
[0272.561] IsThemePartDefined () returned 0x1
[0272.561] IsAppThemed () returned 0x1
[0272.562] GetThemeAppProperties () returned 0x3
[0272.562] GetThemeAppProperties () returned 0x3
[0272.562] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0272.562] IsAppThemed () returned 0x1
[0272.562] GetThemeAppProperties () returned 0x3
[0272.562] GetThemeAppProperties () returned 0x3
[0272.562] IsAppThemed () returned 0x1
[0272.562] GetThemeAppProperties () returned 0x3
[0272.562] GetThemeAppProperties () returned 0x3
[0272.562] IsThemePartDefined () returned 0x1
[0272.562] GdipCreateRegion (region=0x53e070) returned 0x0
[0272.562] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.562] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0272.562] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.562] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0272.562] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.562] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0272.562] LocalFree (hMem=0x89ee08) returned 0x0
[0272.562] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.562] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.562] LocalFree (hMem=0x89ea88) returned 0x0
[0272.562] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.562] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0272.562] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0272.562] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0272.563] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.563] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0272.563] GetCurrentObject (hdc=0xf50107c3, type=0x1) returned 0xb00017
[0272.563] GetCurrentObject (hdc=0xf50107c3, type=0x2) returned 0x900010
[0272.563] GetCurrentObject (hdc=0xf50107c3, type=0x7) returned 0x1e0507b9
[0272.563] GetCurrentObject (hdc=0xf50107c3, type=0x6) returned 0x8a01c2
[0272.563] SaveDC (hdc=0xf50107c3) returned 1
[0272.563] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbe040798
[0272.563] GetClipRgn (hdc=0xf50107c3, hrgn=0xbe040798) returned 0
[0272.563] SelectClipRgn (hdc=0xf50107c3, hrgn=0x2004051e) returned 2
[0272.563] DeleteObject (ho=0xbe040798) returned 1
[0272.563] DeleteObject (ho=0x2004051e) returned 1
[0272.563] OffsetViewportOrgEx (in: hdc=0xf50107c3, x=0, y=0, lppt=0x237a1f8 | out: lppt=0x237a1f8) returned 1
[0272.563] DrawThemeParentBackground () returned 0x0
[0272.564] GetWindowPlacement (in: hWnd=0x1800ea, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0272.564] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0272.564] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.564] GetSystemMetrics (nIndex=42) returned 0
[0272.564] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0272.564] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0272.564] GetCurrentObject (hdc=0xf50107c3, type=0x1) returned 0xb00017
[0272.564] GetCurrentObject (hdc=0xf50107c3, type=0x2) returned 0x900010
[0272.564] GetCurrentObject (hdc=0xf50107c3, type=0x7) returned 0x1e0507b9
[0272.565] GetCurrentObject (hdc=0xf50107c3, type=0x6) returned 0x8a01c2
[0272.565] SaveDC (hdc=0xf50107c3) returned 2
[0272.565] GetNearestColor (hdc=0xf50107c3, color=0xf0f0f0) returned 0xf0f0f0
[0272.565] CreateSolidBrush (color=0xf0f0f0) returned 0xd710078d
[0272.565] FillRect (hDC=0xf50107c3, lprc=0x53dad0, hbr=0xd710078d) returned 1
[0272.565] DeleteObject (ho=0xd710078d) returned 1
[0272.565] RestoreDC (hdc=0xf50107c3, nSavedDC=-1) returned 1
[0272.565] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.565] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.565] GetSystemMetrics (nIndex=42) returned 0
[0272.565] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.565] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0272.566] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0272.566] GetCurrentObject (hdc=0xf50107c3, type=0x1) returned 0xb00017
[0272.566] GetCurrentObject (hdc=0xf50107c3, type=0x2) returned 0x900010
[0272.566] GetCurrentObject (hdc=0xf50107c3, type=0x7) returned 0x1e0507b9
[0272.566] GetCurrentObject (hdc=0xf50107c3, type=0x6) returned 0x8a01c2
[0272.566] SaveDC (hdc=0xf50107c3) returned 2
[0272.566] GetNearestColor (hdc=0xf50107c3, color=0xf0f0f0) returned 0xf0f0f0
[0272.566] CreateSolidBrush (color=0xf0f0f0) returned 0xd810078d
[0272.566] FillRect (hDC=0xf50107c3, lprc=0x53da70, hbr=0xd810078d) returned 1
[0272.566] DeleteObject (ho=0xd810078d) returned 1
[0272.566] RestoreDC (hdc=0xf50107c3, nSavedDC=-1) returned 1
[0272.566] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.566] GetSystemMetrics (nIndex=42) returned 0
[0272.566] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0272.567] RestoreDC (hdc=0xf50107c3, nSavedDC=-1) returned 1
[0272.567] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf50107c3) returned 0x0
[0272.567] IsAppThemed () returned 0x1
[0272.567] GetThemeAppProperties () returned 0x3
[0272.567] GetThemeAppProperties () returned 0x3
[0272.567] IsAppThemed () returned 0x1
[0272.567] GetThemeAppProperties () returned 0x3
[0272.567] GetThemeAppProperties () returned 0x3
[0272.567] IsThemePartDefined () returned 0x1
[0272.567] GdipCreateRegion (region=0x53dff4) returned 0x0
[0272.567] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.567] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0272.568] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.568] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0272.568] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.568] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0272.568] LocalFree (hMem=0x89ea88) returned 0x0
[0272.568] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.568] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0272.575] LocalFree (hMem=0x89ee08) returned 0x0
[0272.575] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.575] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0272.575] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0272.575] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0272.575] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.575] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0272.575] GetCurrentObject (hdc=0xf50107c3, type=0x1) returned 0xb00017
[0272.575] GetCurrentObject (hdc=0xf50107c3, type=0x2) returned 0x900010
[0272.575] GetCurrentObject (hdc=0xf50107c3, type=0x7) returned 0x1e0507b9
[0272.575] GetCurrentObject (hdc=0xf50107c3, type=0x6) returned 0x8a01c2
[0272.575] SaveDC (hdc=0xf50107c3) returned 1
[0272.575] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2104051e
[0272.576] GetClipRgn (hdc=0xf50107c3, hrgn=0x2104051e) returned 0
[0272.576] SelectClipRgn (hdc=0xf50107c3, hrgn=0xc0040798) returned 2
[0272.576] DeleteObject (ho=0x2104051e) returned 1
[0272.576] DeleteObject (ho=0xc0040798) returned 1
[0272.576] OffsetViewportOrgEx (in: hdc=0xf50107c3, x=0, y=0, lppt=0x237aa80 | out: lppt=0x237aa80) returned 1
[0272.576] IsAppThemed () returned 0x1
[0272.576] GetThemeAppProperties () returned 0x3
[0272.576] GetThemeAppProperties () returned 0x3
[0272.576] DrawThemeBackground () returned 0x0
[0272.576] RestoreDC (hdc=0xf50107c3, nSavedDC=-1) returned 1
[0272.576] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf50107c3) returned 0x0
[0272.576] GdipCreateRegion (region=0x53dff8) returned 0x0
[0272.576] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.576] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0272.576] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.576] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0272.576] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0272.577] LocalFree (hMem=0x89ee08) returned 0x0
[0272.577] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0272.577] LocalFree (hMem=0x89ee08) returned 0x0
[0272.577] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.577] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0272.577] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0272.577] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0272.577] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.577] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0272.577] GetCurrentObject (hdc=0xf50107c3, type=0x1) returned 0xb00017
[0272.577] GetCurrentObject (hdc=0xf50107c3, type=0x2) returned 0x900010
[0272.577] GetCurrentObject (hdc=0xf50107c3, type=0x7) returned 0x1e0507b9
[0272.577] GetCurrentObject (hdc=0xf50107c3, type=0x6) returned 0x8a01c2
[0272.577] SaveDC (hdc=0xf50107c3) returned 1
[0272.577] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc1040798
[0272.577] GetClipRgn (hdc=0xf50107c3, hrgn=0xc1040798) returned 0
[0272.577] SelectClipRgn (hdc=0xf50107c3, hrgn=0x2204051e) returned 2
[0272.578] DeleteObject (ho=0xc1040798) returned 1
[0272.578] DeleteObject (ho=0x2204051e) returned 1
[0272.578] OffsetViewportOrgEx (in: hdc=0xf50107c3, x=0, y=0, lppt=0x237ad54 | out: lppt=0x237ad54) returned 1
[0272.578] IsAppThemed () returned 0x1
[0272.578] GetThemeAppProperties () returned 0x3
[0272.578] GetThemeAppProperties () returned 0x3
[0272.578] GetThemeBackgroundContentRect () returned 0x0
[0272.578] RestoreDC (hdc=0xf50107c3, nSavedDC=-1) returned 1
[0272.578] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf50107c3) returned 0x0
[0272.578] IsAppThemed () returned 0x1
[0272.578] GetThemeAppProperties () returned 0x3
[0272.578] GetThemeAppProperties () returned 0x3
[0272.578] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0272.578] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0272.578] GetCurrentObject (hdc=0xf50107c3, type=0x1) returned 0xb00017
[0272.578] GetCurrentObject (hdc=0xf50107c3, type=0x2) returned 0x900010
[0272.578] GetCurrentObject (hdc=0xf50107c3, type=0x7) returned 0x1e0507b9
[0272.578] GetCurrentObject (hdc=0xf50107c3, type=0x6) returned 0x8a01c2
[0272.579] SaveDC (hdc=0xf50107c3) returned 1
[0272.579] GetTextAlign (hdc=0xf50107c3) returned 0x0
[0272.579] GetTextColor (hdc=0xf50107c3) returned 0x0
[0272.579] GetCurrentObject (hdc=0xf50107c3, type=0x6) returned 0x8a01c2
[0272.579] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0272.579] SelectObject (hdc=0xf50107c3, h=0x730a066d) returned 0x8a01c2
[0272.579] GetBkMode (hdc=0xf50107c3) returned 2
[0272.579] SetBkMode (hdc=0xf50107c3, mode=1) returned 2
[0272.579] DrawTextExW (in: hdc=0xf50107c3, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x237b0f4 | out: lpchText="OK", lprc=0x53df90) returned 13
[0272.579] DrawTextExW (in: hdc=0xf50107c3, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x237b0f4 | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0272.580] RestoreDC (hdc=0xf50107c3, nSavedDC=-1) returned 1
[0272.580] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf50107c3) returned 0x0
[0272.580] GetFocus () returned 0x150122
[0272.580] IsAppThemed () returned 0x1
[0272.580] GetThemeAppProperties () returned 0x3
[0272.580] GetThemeAppProperties () returned 0x3
[0272.580] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0272.580] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xf50107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0272.580] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf50107c3) returned 0x0
[0272.580] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0272.580] SelectObject (hdc=0xf50107c3, h=0x85000f) returned 0x1e0507b9
[0272.581] DeleteDC (hdc=0xf50107c3) returned 1
[0272.581] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.581] EndPaint (hWnd=0x11004e, lpPaint=0x53e2e4) returned 1
[0272.581] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.581] IsWindowUnicode (hWnd=0x32013e) returned 1
[0272.581] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.581] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.581] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.581] BeginPaint (in: hWnd=0x32013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0272.581] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0272.582] CreateCompatibleDC (hdc=0x10105d6) returned 0xf70107c3
[0272.582] SelectObject (hdc=0xf70107c3, h=0x1e0507b9) returned 0x85000f
[0272.582] GdipCreateFromHDC (hdc=0xf70107c3, graphics=0x53e300) returned 0x0
[0272.582] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0272.582] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0272.582] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0272.582] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.582] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0272.582] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0272.582] LocalFree (hMem=0x89ee08) returned 0x0
[0272.582] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.582] GdipCreateRegion (region=0x53e348) returned 0x0
[0272.582] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.582] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0272.582] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0272.582] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb1b0dbd) returned 0x0
[0272.583] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.583] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0272.583] GetCurrentObject (hdc=0xf70107c3, type=0x1) returned 0xb00017
[0272.583] GetCurrentObject (hdc=0xf70107c3, type=0x2) returned 0x900010
[0272.583] GetCurrentObject (hdc=0xf70107c3, type=0x7) returned 0x1e0507b9
[0272.583] GetCurrentObject (hdc=0xf70107c3, type=0x6) returned 0x8a01c2
[0272.583] SaveDC (hdc=0xf70107c3) returned 1
[0272.583] GetNearestColor (hdc=0xf70107c3, color=0xf0f0f0) returned 0xf0f0f0
[0272.583] GetNearestColor (hdc=0xf70107c3, color=0xa0a0a0) returned 0xa0a0a0
[0272.583] GetNearestColor (hdc=0xf70107c3, color=0x696969) returned 0x696969
[0272.583] GetNearestColor (hdc=0xf70107c3, color=0xa0a0a0) returned 0xa0a0a0
[0272.583] GetNearestColor (hdc=0xf70107c3, color=0x0) returned 0x0
[0272.583] GetNearestColor (hdc=0xf70107c3, color=0xffffff) returned 0xffffff
[0272.583] GetNearestColor (hdc=0xf70107c3, color=0xe5e5e5) returned 0xe5e5e5
[0272.584] GetNearestColor (hdc=0xf70107c3, color=0xd7d7d7) returned 0xd7d7d7
[0272.585] GetNearestColor (hdc=0xf70107c3, color=0x0) returned 0x0
[0272.585] RestoreDC (hdc=0xf70107c3, nSavedDC=-1) returned 1
[0272.585] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf70107c3) returned 0x0
[0272.585] IsAppThemed () returned 0x1
[0272.587] GetThemeAppProperties () returned 0x3
[0272.587] GetThemeAppProperties () returned 0x3
[0272.587] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0272.587] SendMessageW (hWnd=0x1800ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0272.587] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0272.587] IsAppThemed () returned 0x1
[0272.587] GetThemeAppProperties () returned 0x3
[0272.587] GetThemeAppProperties () returned 0x3
[0272.587] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x237b904 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0272.588] IsAppThemed () returned 0x1
[0272.588] GetThemeAppProperties () returned 0x3
[0272.588] GetThemeAppProperties () returned 0x3
[0272.588] IsAppThemed () returned 0x1
[0272.588] GetThemeAppProperties () returned 0x3
[0272.588] GetThemeAppProperties () returned 0x3
[0272.588] GetFocus () returned 0x150122
[0272.588] IsAppThemed () returned 0x1
[0272.588] GetThemeAppProperties () returned 0x3
[0272.588] GetThemeAppProperties () returned 0x3
[0272.588] IsAppThemed () returned 0x1
[0272.588] GetThemeAppProperties () returned 0x3
[0272.589] GetThemeAppProperties () returned 0x3
[0272.589] IsThemePartDefined () returned 0x1
[0272.589] IsAppThemed () returned 0x1
[0272.589] GetThemeAppProperties () returned 0x3
[0272.589] GetThemeAppProperties () returned 0x3
[0272.589] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0272.589] IsAppThemed () returned 0x1
[0272.589] GetThemeAppProperties () returned 0x3
[0272.589] GetThemeAppProperties () returned 0x3
[0272.589] IsAppThemed () returned 0x1
[0272.589] GetThemeAppProperties () returned 0x3
[0272.589] GetThemeAppProperties () returned 0x3
[0272.589] IsThemePartDefined () returned 0x1
[0272.589] GdipCreateRegion (region=0x53e070) returned 0x0
[0272.589] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.590] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0272.590] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.590] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0272.590] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.590] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.590] LocalFree (hMem=0x89ea88) returned 0x0
[0272.590] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.590] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.590] LocalFree (hMem=0x89ea88) returned 0x0
[0272.591] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.591] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0272.591] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0272.591] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0272.591] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.591] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0272.591] GetCurrentObject (hdc=0xf70107c3, type=0x1) returned 0xb00017
[0272.591] GetCurrentObject (hdc=0xf70107c3, type=0x2) returned 0x900010
[0272.591] GetCurrentObject (hdc=0xf70107c3, type=0x7) returned 0x1e0507b9
[0272.591] GetCurrentObject (hdc=0xf70107c3, type=0x6) returned 0x8a01c2
[0272.591] SaveDC (hdc=0xf70107c3) returned 1
[0272.592] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2304051e
[0272.592] GetClipRgn (hdc=0xf70107c3, hrgn=0x2304051e) returned 0
[0272.592] SelectClipRgn (hdc=0xf70107c3, hrgn=0xc5040798) returned 2
[0272.592] DeleteObject (ho=0x2304051e) returned 1
[0272.592] DeleteObject (ho=0xc5040798) returned 1
[0272.592] OffsetViewportOrgEx (in: hdc=0xf70107c3, x=0, y=0, lppt=0x237bfb4 | out: lppt=0x237bfb4) returned 1
[0272.592] DrawThemeParentBackground () returned 0x0
[0272.592] GetWindowPlacement (in: hWnd=0x1800ea, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0272.592] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0272.592] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.593] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.593] GetSystemMetrics (nIndex=42) returned 0
[0272.593] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.593] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0272.593] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0272.593] GetCurrentObject (hdc=0xf70107c3, type=0x1) returned 0xb00017
[0272.593] GetCurrentObject (hdc=0xf70107c3, type=0x2) returned 0x900010
[0272.593] GetCurrentObject (hdc=0xf70107c3, type=0x7) returned 0x1e0507b9
[0272.593] GetCurrentObject (hdc=0xf70107c3, type=0x6) returned 0x8a01c2
[0272.593] SaveDC (hdc=0xf70107c3) returned 2
[0272.593] GetNearestColor (hdc=0xf70107c3, color=0xf0f0f0) returned 0xf0f0f0
[0272.593] CreateSolidBrush (color=0xf0f0f0) returned 0xd910078d
[0272.593] FillRect (hDC=0xf70107c3, lprc=0x53dad0, hbr=0xd910078d) returned 1
[0272.594] DeleteObject (ho=0xd910078d) returned 1
[0272.594] RestoreDC (hdc=0xf70107c3, nSavedDC=-1) returned 1
[0272.594] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.594] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.594] GetSystemMetrics (nIndex=42) returned 0
[0272.594] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.594] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0272.594] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0272.594] GetCurrentObject (hdc=0xf70107c3, type=0x1) returned 0xb00017
[0272.594] GetCurrentObject (hdc=0xf70107c3, type=0x2) returned 0x900010
[0272.594] GetCurrentObject (hdc=0xf70107c3, type=0x7) returned 0x1e0507b9
[0272.594] GetCurrentObject (hdc=0xf70107c3, type=0x6) returned 0x8a01c2
[0272.594] SaveDC (hdc=0xf70107c3) returned 2
[0272.595] GetNearestColor (hdc=0xf70107c3, color=0xf0f0f0) returned 0xf0f0f0
[0272.595] CreateSolidBrush (color=0xf0f0f0) returned 0xda10078d
[0272.595] FillRect (hDC=0xf70107c3, lprc=0x53da70, hbr=0xda10078d) returned 1
[0272.595] DeleteObject (ho=0xda10078d) returned 1
[0272.595] RestoreDC (hdc=0xf70107c3, nSavedDC=-1) returned 1
[0272.595] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.595] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.595] GetSystemMetrics (nIndex=42) returned 0
[0272.595] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.595] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0272.595] RestoreDC (hdc=0xf70107c3, nSavedDC=-1) returned 1
[0272.595] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf70107c3) returned 0x0
[0272.596] IsAppThemed () returned 0x1
[0272.596] GetThemeAppProperties () returned 0x3
[0272.596] GetThemeAppProperties () returned 0x3
[0272.596] IsAppThemed () returned 0x1
[0272.596] GetThemeAppProperties () returned 0x3
[0272.596] GetThemeAppProperties () returned 0x3
[0272.596] IsThemePartDefined () returned 0x1
[0272.596] GdipCreateRegion (region=0x53dff4) returned 0x0
[0272.596] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.596] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0272.596] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.596] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0272.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.596] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0272.596] LocalFree (hMem=0x89ea88) returned 0x0
[0272.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.596] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0272.596] LocalFree (hMem=0x89ee08) returned 0x0
[0272.597] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.597] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0272.597] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0272.597] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0272.597] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.597] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0272.597] GetCurrentObject (hdc=0xf70107c3, type=0x1) returned 0xb00017
[0272.597] GetCurrentObject (hdc=0xf70107c3, type=0x2) returned 0x900010
[0272.597] GetCurrentObject (hdc=0xf70107c3, type=0x7) returned 0x1e0507b9
[0272.597] GetCurrentObject (hdc=0xf70107c3, type=0x6) returned 0x8a01c2
[0272.597] SaveDC (hdc=0xf70107c3) returned 1
[0272.597] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc6040798
[0272.597] GetClipRgn (hdc=0xf70107c3, hrgn=0xc6040798) returned 0
[0272.597] SelectClipRgn (hdc=0xf70107c3, hrgn=0x2504051e) returned 2
[0272.597] DeleteObject (ho=0xc6040798) returned 1
[0272.598] DeleteObject (ho=0x2504051e) returned 1
[0272.598] OffsetViewportOrgEx (in: hdc=0xf70107c3, x=0, y=0, lppt=0x237c83c | out: lppt=0x237c83c) returned 1
[0272.598] IsAppThemed () returned 0x1
[0272.598] GetThemeAppProperties () returned 0x3
[0272.598] GetThemeAppProperties () returned 0x3
[0272.598] DrawThemeBackground () returned 0x0
[0272.598] RestoreDC (hdc=0xf70107c3, nSavedDC=-1) returned 1
[0272.598] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf70107c3) returned 0x0
[0272.598] GdipCreateRegion (region=0x53dff8) returned 0x0
[0272.598] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.598] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0272.598] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.598] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0272.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0272.599] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0272.599] LocalFree (hMem=0x89ee40) returned 0x0
[0272.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.599] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.599] LocalFree (hMem=0x89ea88) returned 0x0
[0272.599] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.599] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0272.599] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0272.599] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0272.606] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.606] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0272.607] GetCurrentObject (hdc=0xf70107c3, type=0x1) returned 0xb00017
[0272.607] GetCurrentObject (hdc=0xf70107c3, type=0x2) returned 0x900010
[0272.607] GetCurrentObject (hdc=0xf70107c3, type=0x7) returned 0x1e0507b9
[0272.607] GetCurrentObject (hdc=0xf70107c3, type=0x6) returned 0x8a01c2
[0272.607] SaveDC (hdc=0xf70107c3) returned 1
[0272.607] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2604051e
[0272.607] GetClipRgn (hdc=0xf70107c3, hrgn=0x2604051e) returned 0
[0272.607] SelectClipRgn (hdc=0xf70107c3, hrgn=0xc7040798) returned 2
[0272.607] DeleteObject (ho=0x2604051e) returned 1
[0272.607] DeleteObject (ho=0xc7040798) returned 1
[0272.607] OffsetViewportOrgEx (in: hdc=0xf70107c3, x=0, y=0, lppt=0x237cb10 | out: lppt=0x237cb10) returned 1
[0272.607] IsAppThemed () returned 0x1
[0272.608] GetThemeAppProperties () returned 0x3
[0272.608] GetThemeAppProperties () returned 0x3
[0272.608] GetThemeBackgroundContentRect () returned 0x0
[0272.608] RestoreDC (hdc=0xf70107c3, nSavedDC=-1) returned 1
[0272.608] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf70107c3) returned 0x0
[0272.608] IsAppThemed () returned 0x1
[0272.608] GetThemeAppProperties () returned 0x3
[0272.608] GetThemeAppProperties () returned 0x3
[0272.608] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0272.608] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0272.608] GetCurrentObject (hdc=0xf70107c3, type=0x1) returned 0xb00017
[0272.608] GetCurrentObject (hdc=0xf70107c3, type=0x2) returned 0x900010
[0272.608] GetCurrentObject (hdc=0xf70107c3, type=0x7) returned 0x1e0507b9
[0272.608] GetCurrentObject (hdc=0xf70107c3, type=0x6) returned 0x8a01c2
[0272.608] SaveDC (hdc=0xf70107c3) returned 1
[0272.609] GetTextAlign (hdc=0xf70107c3) returned 0x0
[0272.609] GetTextColor (hdc=0xf70107c3) returned 0x0
[0272.609] GetCurrentObject (hdc=0xf70107c3, type=0x6) returned 0x8a01c2
[0272.609] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0272.609] SelectObject (hdc=0xf70107c3, h=0x730a066d) returned 0x8a01c2
[0272.609] GetBkMode (hdc=0xf70107c3) returned 2
[0272.609] SetBkMode (hdc=0xf70107c3, mode=1) returned 2
[0272.609] DrawTextExW (in: hdc=0xf70107c3, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x237ceb0 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0272.610] DrawTextExW (in: hdc=0xf70107c3, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x237ceb0 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0272.610] RestoreDC (hdc=0xf70107c3, nSavedDC=-1) returned 1
[0272.610] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf70107c3) returned 0x0
[0272.610] GetFocus () returned 0x150122
[0272.610] IsAppThemed () returned 0x1
[0272.610] GetThemeAppProperties () returned 0x3
[0272.610] GetThemeAppProperties () returned 0x3
[0272.610] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0272.610] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0xf70107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0272.610] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf70107c3) returned 0x0
[0272.611] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0272.611] SelectObject (hdc=0xf70107c3, h=0x85000f) returned 0x1e0507b9
[0272.611] DeleteDC (hdc=0xf70107c3) returned 1
[0272.611] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.611] EndPaint (hWnd=0x32013e, lpPaint=0x53e2e4) returned 1
[0272.611] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.611] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x84, wParam=0x0, lParam=0x1970355) returned 0x1
[0272.612] IsWindowUnicode (hWnd=0x11004e) returned 1
[0272.612] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.612] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.612] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.612] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0272.612] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.612] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x84, wParam=0x0, lParam=0x1970355) returned 0x1
[0272.612] IsWindowUnicode (hWnd=0x11004e) returned 1
[0272.612] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.612] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x84, wParam=0x0, lParam=0x1970355) returned 0x1
[0272.612] SetCursor (hCursor=0x10003) returned 0x10003
[0272.612] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.613] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.613] _TrackMouseEvent (in: lpEventTrack=0x237cfac | out: lpEventTrack=0x237cfac) returned 1
[0272.613] SendMessageW (hWnd=0x11004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0272.613] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0272.613] InvalidateRect (hWnd=0x11004e, lpRect=0x0, bErase=0) returned 1
[0272.613] GetKeyState (nVirtKey=1) returned 0
[0272.613] GetKeyState (nVirtKey=2) returned 0
[0272.613] GetKeyState (nVirtKey=4) returned 0
[0272.613] GetKeyState (nVirtKey=5) returned 0
[0272.613] GetKeyState (nVirtKey=6) returned 0
[0272.613] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.613] IsWindowUnicode (hWnd=0x11004e) returned 1
[0272.613] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.613] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.613] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.613] BeginPaint (in: hWnd=0x11004e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0272.614] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0272.614] CreateCompatibleDC (hdc=0xf0105ee) returned 0xf80107c3
[0272.614] SelectObject (hdc=0xf80107c3, h=0x1e0507b9) returned 0x85000f
[0272.614] GdipCreateFromHDC (hdc=0xf80107c3, graphics=0x53e300) returned 0x0
[0272.614] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0272.614] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0272.614] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0272.614] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.614] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0272.614] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0272.614] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0272.615] LocalFree (hMem=0x89eac0) returned 0x0
[0272.615] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.615] GdipCreateRegion (region=0x53e348) returned 0x0
[0272.615] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.615] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0272.615] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0272.616] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb190dbd) returned 0x0
[0272.616] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.616] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0272.616] GetCurrentObject (hdc=0xf80107c3, type=0x1) returned 0xb00017
[0272.616] GetCurrentObject (hdc=0xf80107c3, type=0x2) returned 0x900010
[0272.616] GetCurrentObject (hdc=0xf80107c3, type=0x7) returned 0x1e0507b9
[0272.616] GetCurrentObject (hdc=0xf80107c3, type=0x6) returned 0x8a01c2
[0272.616] SaveDC (hdc=0xf80107c3) returned 1
[0272.616] GetNearestColor (hdc=0xf80107c3, color=0xf0f0f0) returned 0xf0f0f0
[0272.616] GetNearestColor (hdc=0xf80107c3, color=0xa0a0a0) returned 0xa0a0a0
[0272.616] GetNearestColor (hdc=0xf80107c3, color=0x696969) returned 0x696969
[0272.616] GetNearestColor (hdc=0xf80107c3, color=0xa0a0a0) returned 0xa0a0a0
[0272.616] GetNearestColor (hdc=0xf80107c3, color=0x0) returned 0x0
[0272.616] GetNearestColor (hdc=0xf80107c3, color=0xffffff) returned 0xffffff
[0272.617] GetNearestColor (hdc=0xf80107c3, color=0xe5e5e5) returned 0xe5e5e5
[0272.617] GetNearestColor (hdc=0xf80107c3, color=0xd7d7d7) returned 0xd7d7d7
[0272.617] GetNearestColor (hdc=0xf80107c3, color=0x0) returned 0x0
[0272.617] RestoreDC (hdc=0xf80107c3, nSavedDC=-1) returned 1
[0272.617] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf80107c3) returned 0x0
[0272.617] IsAppThemed () returned 0x1
[0272.617] GetThemeAppProperties () returned 0x3
[0272.617] GetThemeAppProperties () returned 0x3
[0272.617] IsAppThemed () returned 0x1
[0272.617] GetThemeAppProperties () returned 0x3
[0272.617] GetThemeAppProperties () returned 0x3
[0272.617] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x237d70c | out: lpchText="OK", lprc=0x53e01c) returned 13
[0272.618] IsAppThemed () returned 0x1
[0272.618] GetThemeAppProperties () returned 0x3
[0272.618] GetThemeAppProperties () returned 0x3
[0272.618] IsAppThemed () returned 0x1
[0272.618] GetThemeAppProperties () returned 0x3
[0272.618] GetThemeAppProperties () returned 0x3
[0272.618] IsAppThemed () returned 0x1
[0272.618] GetThemeAppProperties () returned 0x3
[0272.618] GetThemeAppProperties () returned 0x3
[0272.618] IsAppThemed () returned 0x1
[0272.618] GetThemeAppProperties () returned 0x3
[0272.618] GetThemeAppProperties () returned 0x3
[0272.618] IsThemePartDefined () returned 0x1
[0272.618] IsAppThemed () returned 0x1
[0272.618] GetThemeAppProperties () returned 0x3
[0272.618] GetThemeAppProperties () returned 0x3
[0272.618] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0272.618] IsAppThemed () returned 0x1
[0272.618] GetThemeAppProperties () returned 0x3
[0272.619] GetThemeAppProperties () returned 0x3
[0272.619] IsAppThemed () returned 0x1
[0272.619] GetThemeAppProperties () returned 0x3
[0272.619] GetThemeAppProperties () returned 0x3
[0272.619] IsThemePartDefined () returned 0x1
[0272.619] GdipCreateRegion (region=0x53e064) returned 0x0
[0272.619] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.619] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0272.619] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.619] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0272.619] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.619] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0272.619] LocalFree (hMem=0x89ee08) returned 0x0
[0272.619] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.620] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.620] LocalFree (hMem=0x89ea88) returned 0x0
[0272.620] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.620] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0272.620] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0272.620] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0272.620] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.620] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0272.620] GetCurrentObject (hdc=0xf80107c3, type=0x1) returned 0xb00017
[0272.620] GetCurrentObject (hdc=0xf80107c3, type=0x2) returned 0x900010
[0272.620] GetCurrentObject (hdc=0xf80107c3, type=0x7) returned 0x1e0507b9
[0272.620] GetCurrentObject (hdc=0xf80107c3, type=0x6) returned 0x8a01c2
[0272.620] SaveDC (hdc=0xf80107c3) returned 1
[0272.620] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc8040798
[0272.620] GetClipRgn (hdc=0xf80107c3, hrgn=0xc8040798) returned 0
[0272.620] SelectClipRgn (hdc=0xf80107c3, hrgn=0x2a04051e) returned 2
[0272.620] DeleteObject (ho=0xc8040798) returned 1
[0272.620] DeleteObject (ho=0x2a04051e) returned 1
[0272.621] OffsetViewportOrgEx (in: hdc=0xf80107c3, x=0, y=0, lppt=0x237ddbc | out: lppt=0x237ddbc) returned 1
[0272.621] DrawThemeParentBackground () returned 0x0
[0272.621] GetWindowPlacement (in: hWnd=0x1800ea, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0272.621] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0272.621] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.621] GetSystemMetrics (nIndex=42) returned 0
[0272.621] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0272.621] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0272.621] GetCurrentObject (hdc=0xf80107c3, type=0x1) returned 0xb00017
[0272.621] GetCurrentObject (hdc=0xf80107c3, type=0x2) returned 0x900010
[0272.621] GetCurrentObject (hdc=0xf80107c3, type=0x7) returned 0x1e0507b9
[0272.621] GetCurrentObject (hdc=0xf80107c3, type=0x6) returned 0x8a01c2
[0272.621] SaveDC (hdc=0xf80107c3) returned 2
[0272.622] GetNearestColor (hdc=0xf80107c3, color=0xf0f0f0) returned 0xf0f0f0
[0272.622] CreateSolidBrush (color=0xf0f0f0) returned 0xdb10078d
[0272.622] FillRect (hDC=0xf80107c3, lprc=0x53dac8, hbr=0xdb10078d) returned 1
[0272.622] DeleteObject (ho=0xdb10078d) returned 1
[0272.622] RestoreDC (hdc=0xf80107c3, nSavedDC=-1) returned 1
[0272.622] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.622] GetSystemMetrics (nIndex=42) returned 0
[0272.622] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.622] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0272.622] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0272.622] GetCurrentObject (hdc=0xf80107c3, type=0x1) returned 0xb00017
[0272.622] GetCurrentObject (hdc=0xf80107c3, type=0x2) returned 0x900010
[0272.622] GetCurrentObject (hdc=0xf80107c3, type=0x7) returned 0x1e0507b9
[0272.622] GetCurrentObject (hdc=0xf80107c3, type=0x6) returned 0x8a01c2
[0272.623] SaveDC (hdc=0xf80107c3) returned 2
[0272.623] GetNearestColor (hdc=0xf80107c3, color=0xf0f0f0) returned 0xf0f0f0
[0272.623] CreateSolidBrush (color=0xf0f0f0) returned 0xdc10078d
[0272.623] FillRect (hDC=0xf80107c3, lprc=0x53da68, hbr=0xdc10078d) returned 1
[0272.623] DeleteObject (ho=0xdc10078d) returned 1
[0272.623] RestoreDC (hdc=0xf80107c3, nSavedDC=-1) returned 1
[0272.623] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.623] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.623] GetSystemMetrics (nIndex=42) returned 0
[0272.623] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.623] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0272.623] RestoreDC (hdc=0xf80107c3, nSavedDC=-1) returned 1
[0272.623] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf80107c3) returned 0x0
[0272.623] IsAppThemed () returned 0x1
[0272.624] GetThemeAppProperties () returned 0x3
[0272.624] GetThemeAppProperties () returned 0x3
[0272.624] IsAppThemed () returned 0x1
[0272.624] GetThemeAppProperties () returned 0x3
[0272.624] GetThemeAppProperties () returned 0x3
[0272.624] IsThemePartDefined () returned 0x1
[0272.624] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0272.624] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.624] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0272.624] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.624] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0272.624] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.624] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0272.624] LocalFree (hMem=0x89ee08) returned 0x0
[0272.624] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0272.624] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0272.624] LocalFree (hMem=0x89ee40) returned 0x0
[0272.624] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.624] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0272.624] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0272.624] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0272.625] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.625] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0272.625] GetCurrentObject (hdc=0xf80107c3, type=0x1) returned 0xb00017
[0272.625] GetCurrentObject (hdc=0xf80107c3, type=0x2) returned 0x900010
[0272.625] GetCurrentObject (hdc=0xf80107c3, type=0x7) returned 0x1e0507b9
[0272.625] GetCurrentObject (hdc=0xf80107c3, type=0x6) returned 0x8a01c2
[0272.625] SaveDC (hdc=0xf80107c3) returned 1
[0272.625] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2b04051e
[0272.625] GetClipRgn (hdc=0xf80107c3, hrgn=0x2b04051e) returned 0
[0272.625] SelectClipRgn (hdc=0xf80107c3, hrgn=0xca040798) returned 2
[0272.625] DeleteObject (ho=0x2b04051e) returned 1
[0272.625] DeleteObject (ho=0xca040798) returned 1
[0272.625] OffsetViewportOrgEx (in: hdc=0xf80107c3, x=0, y=0, lppt=0x237e644 | out: lppt=0x237e644) returned 1
[0272.625] IsAppThemed () returned 0x1
[0272.626] GetThemeAppProperties () returned 0x3
[0272.626] GetThemeAppProperties () returned 0x3
[0272.626] DrawThemeBackground () returned 0x0
[0272.626] RestoreDC (hdc=0xf80107c3, nSavedDC=-1) returned 1
[0272.626] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf80107c3) returned 0x0
[0272.626] GdipCreateRegion (region=0x53dfec) returned 0x0
[0272.626] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.626] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0272.626] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.626] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0272.626] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.626] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0272.626] LocalFree (hMem=0x89ee08) returned 0x0
[0272.626] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.626] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.626] LocalFree (hMem=0x89ea88) returned 0x0
[0272.626] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.626] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0272.626] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0272.627] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0272.627] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.627] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0272.627] GetCurrentObject (hdc=0xf80107c3, type=0x1) returned 0xb00017
[0272.627] GetCurrentObject (hdc=0xf80107c3, type=0x2) returned 0x900010
[0272.627] GetCurrentObject (hdc=0xf80107c3, type=0x7) returned 0x1e0507b9
[0272.627] GetCurrentObject (hdc=0xf80107c3, type=0x6) returned 0x8a01c2
[0272.627] SaveDC (hdc=0xf80107c3) returned 1
[0272.627] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcb040798
[0272.627] GetClipRgn (hdc=0xf80107c3, hrgn=0xcb040798) returned 0
[0272.627] SelectClipRgn (hdc=0xf80107c3, hrgn=0x2c04051e) returned 2
[0272.627] DeleteObject (ho=0xcb040798) returned 1
[0272.627] DeleteObject (ho=0x2c04051e) returned 1
[0272.627] OffsetViewportOrgEx (in: hdc=0xf80107c3, x=0, y=0, lppt=0x237e918 | out: lppt=0x237e918) returned 1
[0272.627] IsAppThemed () returned 0x1
[0272.627] GetThemeAppProperties () returned 0x3
[0272.627] GetThemeAppProperties () returned 0x3
[0272.627] GetThemeBackgroundContentRect () returned 0x0
[0272.627] RestoreDC (hdc=0xf80107c3, nSavedDC=-1) returned 1
[0272.628] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf80107c3) returned 0x0
[0272.628] IsAppThemed () returned 0x1
[0272.628] GetThemeAppProperties () returned 0x3
[0272.628] GetThemeAppProperties () returned 0x3
[0272.628] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0272.628] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0272.628] GetCurrentObject (hdc=0xf80107c3, type=0x1) returned 0xb00017
[0272.628] GetCurrentObject (hdc=0xf80107c3, type=0x2) returned 0x900010
[0272.628] GetCurrentObject (hdc=0xf80107c3, type=0x7) returned 0x1e0507b9
[0272.628] GetCurrentObject (hdc=0xf80107c3, type=0x6) returned 0x8a01c2
[0272.628] SaveDC (hdc=0xf80107c3) returned 1
[0272.628] GetTextAlign (hdc=0xf80107c3) returned 0x0
[0272.628] GetTextColor (hdc=0xf80107c3) returned 0x0
[0272.628] GetCurrentObject (hdc=0xf80107c3, type=0x6) returned 0x8a01c2
[0272.628] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0272.628] SelectObject (hdc=0xf80107c3, h=0x730a066d) returned 0x8a01c2
[0272.628] GetBkMode (hdc=0xf80107c3) returned 2
[0272.628] SetBkMode (hdc=0xf80107c3, mode=1) returned 2
[0272.629] DrawTextExW (in: hdc=0xf80107c3, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x237ecb8 | out: lpchText="OK", lprc=0x53df84) returned 13
[0272.629] DrawTextExW (in: hdc=0xf80107c3, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x237ecb8 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0272.629] RestoreDC (hdc=0xf80107c3, nSavedDC=-1) returned 1
[0272.629] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf80107c3) returned 0x0
[0272.629] GetFocus () returned 0x150122
[0272.629] IsAppThemed () returned 0x1
[0272.629] GetThemeAppProperties () returned 0x3
[0272.629] GetThemeAppProperties () returned 0x3
[0272.629] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0272.629] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xf80107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0272.629] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf80107c3) returned 0x0
[0272.630] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0272.630] SelectObject (hdc=0xf80107c3, h=0x85000f) returned 0x1e0507b9
[0272.630] DeleteDC (hdc=0xf80107c3) returned 1
[0272.630] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.630] EndPaint (hWnd=0x11004e, lpPaint=0x53e2e4) returned 1
[0272.630] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.630] IsWindowUnicode (hWnd=0x202c6) returned 1
[0272.630] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.630] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.630] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.630] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0272.637] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0272.637] CreateCompatibleDC (hdc=0x10105d6) returned 0x5a0107c5
[0272.637] SelectObject (hdc=0x5a0107c5, h=0x1e0507b9) returned 0x85000f
[0272.637] GdipCreateFromHDC (hdc=0x5a0107c5, graphics=0x53e300) returned 0x0
[0272.637] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0272.637] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0272.637] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0272.637] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.637] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0272.637] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0272.638] LocalFree (hMem=0x89ee08) returned 0x0
[0272.638] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.638] GdipCreateRegion (region=0x53e348) returned 0x0
[0272.638] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.638] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0272.638] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0272.638] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb170dbd) returned 0x0
[0272.638] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.638] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0272.638] GetCurrentObject (hdc=0x5a0107c5, type=0x1) returned 0xb00017
[0272.638] GetCurrentObject (hdc=0x5a0107c5, type=0x2) returned 0x900010
[0272.638] GetCurrentObject (hdc=0x5a0107c5, type=0x7) returned 0x1e0507b9
[0272.638] GetCurrentObject (hdc=0x5a0107c5, type=0x6) returned 0x8a01c2
[0272.638] SaveDC (hdc=0x5a0107c5) returned 1
[0272.638] GetNearestColor (hdc=0x5a0107c5, color=0xff) returned 0xff
[0272.639] GetNearestColor (hdc=0x5a0107c5, color=0x55) returned 0x55
[0272.639] GetNearestColor (hdc=0x5a0107c5, color=0x0) returned 0x0
[0272.639] GetNearestColor (hdc=0x5a0107c5, color=0x55) returned 0x55
[0272.639] GetNearestColor (hdc=0x5a0107c5, color=0x0) returned 0x0
[0272.639] GetNearestColor (hdc=0x5a0107c5, color=0x8080ff) returned 0x8080ff
[0272.639] GetNearestColor (hdc=0x5a0107c5, color=0x7373e5) returned 0x7373e5
[0272.639] GetNearestColor (hdc=0x5a0107c5, color=0xe5) returned 0xe5
[0272.639] GetNearestColor (hdc=0x5a0107c5, color=0x0) returned 0x0
[0272.639] RestoreDC (hdc=0x5a0107c5, nSavedDC=-1) returned 1
[0272.639] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5a0107c5) returned 0x0
[0272.639] IsAppThemed () returned 0x1
[0272.639] GetThemeAppProperties () returned 0x3
[0272.639] GetThemeAppProperties () returned 0x3
[0272.639] IsAppThemed () returned 0x1
[0272.640] GetThemeAppProperties () returned 0x3
[0272.640] GetThemeAppProperties () returned 0x3
[0272.640] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0272.640] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x237f49c | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0272.640] IsAppThemed () returned 0x1
[0272.640] GetThemeAppProperties () returned 0x3
[0272.640] GetThemeAppProperties () returned 0x3
[0272.640] IsAppThemed () returned 0x1
[0272.640] GetThemeAppProperties () returned 0x3
[0272.640] GetThemeAppProperties () returned 0x3
[0272.640] GetFocus () returned 0x150122
[0272.641] IsAppThemed () returned 0x1
[0272.641] GetThemeAppProperties () returned 0x3
[0272.641] GetThemeAppProperties () returned 0x3
[0272.641] IsAppThemed () returned 0x1
[0272.641] GetThemeAppProperties () returned 0x3
[0272.641] GetThemeAppProperties () returned 0x3
[0272.641] IsThemePartDefined () returned 0x1
[0272.641] IsAppThemed () returned 0x1
[0272.641] GetThemeAppProperties () returned 0x3
[0272.641] GetThemeAppProperties () returned 0x3
[0272.641] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0272.641] IsAppThemed () returned 0x1
[0272.641] GetThemeAppProperties () returned 0x3
[0272.641] GetThemeAppProperties () returned 0x3
[0272.641] IsAppThemed () returned 0x1
[0272.641] GetThemeAppProperties () returned 0x3
[0272.641] GetThemeAppProperties () returned 0x3
[0272.642] IsThemePartDefined () returned 0x1
[0272.642] GdipCreateRegion (region=0x53e070) returned 0x0
[0272.642] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.642] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0272.642] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.642] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0272.642] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.642] LocalFree (hMem=0x89ea88) returned 0x0
[0272.642] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0272.642] LocalFree (hMem=0x89ee08) returned 0x0
[0272.642] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.642] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0272.642] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0272.642] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0272.642] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.643] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0272.643] GetCurrentObject (hdc=0x5a0107c5, type=0x1) returned 0xb00017
[0272.643] GetCurrentObject (hdc=0x5a0107c5, type=0x2) returned 0x900010
[0272.643] GetCurrentObject (hdc=0x5a0107c5, type=0x7) returned 0x1e0507b9
[0272.643] GetCurrentObject (hdc=0x5a0107c5, type=0x6) returned 0x8a01c2
[0272.643] SaveDC (hdc=0x5a0107c5) returned 1
[0272.643] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d04051e
[0272.643] GetClipRgn (hdc=0x5a0107c5, hrgn=0x2d04051e) returned 0
[0272.643] SelectClipRgn (hdc=0x5a0107c5, hrgn=0xcf040798) returned 2
[0272.643] DeleteObject (ho=0x2d04051e) returned 1
[0272.643] DeleteObject (ho=0xcf040798) returned 1
[0272.643] OffsetViewportOrgEx (in: hdc=0x5a0107c5, x=0, y=0, lppt=0x237fb4c | out: lppt=0x237fb4c) returned 1
[0272.643] DrawThemeParentBackground () returned 0x0
[0272.643] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0272.643] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0272.643] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0272.644] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0272.644] GetSystemMetrics (nIndex=42) returned 0
[0272.644] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0272.644] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0272.644] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0272.644] GetCurrentObject (hdc=0x5a0107c5, type=0x1) returned 0xb00017
[0272.644] GetCurrentObject (hdc=0x5a0107c5, type=0x2) returned 0x900010
[0272.644] GetCurrentObject (hdc=0x5a0107c5, type=0x7) returned 0x1e0507b9
[0272.644] GetCurrentObject (hdc=0x5a0107c5, type=0x6) returned 0x8a01c2
[0272.644] SaveDC (hdc=0x5a0107c5) returned 2
[0272.644] GetNearestColor (hdc=0x5a0107c5, color=0xff) returned 0xff
[0272.644] CreateSolidBrush (color=0xff) returned 0xdd10078d
[0272.644] FillRect (hDC=0x5a0107c5, lprc=0x53dad0, hbr=0xdd10078d) returned 1
[0272.644] DeleteObject (ho=0xdd10078d) returned 1
[0272.644] RestoreDC (hdc=0x5a0107c5, nSavedDC=-1) returned 1
[0272.645] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0272.645] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0272.645] GetSystemMetrics (nIndex=42) returned 0
[0272.645] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0272.645] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0272.645] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0272.645] GetCurrentObject (hdc=0x5a0107c5, type=0x1) returned 0xb00017
[0272.645] GetCurrentObject (hdc=0x5a0107c5, type=0x2) returned 0x900010
[0272.645] GetCurrentObject (hdc=0x5a0107c5, type=0x7) returned 0x1e0507b9
[0272.645] GetCurrentObject (hdc=0x5a0107c5, type=0x6) returned 0x8a01c2
[0272.645] SaveDC (hdc=0x5a0107c5) returned 2
[0272.645] GetNearestColor (hdc=0x5a0107c5, color=0xff) returned 0xff
[0272.645] CreateSolidBrush (color=0xff) returned 0xde10078d
[0272.645] FillRect (hDC=0x5a0107c5, lprc=0x53da70, hbr=0xde10078d) returned 1
[0272.645] DeleteObject (ho=0xde10078d) returned 1
[0272.645] RestoreDC (hdc=0x5a0107c5, nSavedDC=-1) returned 1
[0272.645] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0272.645] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0272.645] GetSystemMetrics (nIndex=42) returned 0
[0272.646] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0272.646] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0272.646] RestoreDC (hdc=0x5a0107c5, nSavedDC=-1) returned 1
[0272.646] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5a0107c5) returned 0x0
[0272.646] IsAppThemed () returned 0x1
[0272.651] GetThemeAppProperties () returned 0x3
[0272.651] GetThemeAppProperties () returned 0x3
[0272.652] IsAppThemed () returned 0x1
[0272.652] GetThemeAppProperties () returned 0x3
[0272.652] GetThemeAppProperties () returned 0x3
[0272.652] IsThemePartDefined () returned 0x1
[0272.652] GdipCreateRegion (region=0x53dff4) returned 0x0
[0272.652] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.652] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0272.652] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.652] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0272.652] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.652] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0272.652] LocalFree (hMem=0x89ea88) returned 0x0
[0272.652] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.652] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0272.652] LocalFree (hMem=0x89ee08) returned 0x0
[0272.652] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.652] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0272.652] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0272.652] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0272.653] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.653] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0272.653] GetCurrentObject (hdc=0x5a0107c5, type=0x1) returned 0xb00017
[0272.653] GetCurrentObject (hdc=0x5a0107c5, type=0x2) returned 0x900010
[0272.653] GetCurrentObject (hdc=0x5a0107c5, type=0x7) returned 0x1e0507b9
[0272.653] GetCurrentObject (hdc=0x5a0107c5, type=0x6) returned 0x8a01c2
[0272.653] SaveDC (hdc=0x5a0107c5) returned 1
[0272.653] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd0040798
[0272.653] GetClipRgn (hdc=0x5a0107c5, hrgn=0xd0040798) returned 0
[0272.653] SelectClipRgn (hdc=0x5a0107c5, hrgn=0x2f04051e) returned 2
[0272.653] DeleteObject (ho=0xd0040798) returned 1
[0272.653] DeleteObject (ho=0x2f04051e) returned 1
[0272.653] OffsetViewportOrgEx (in: hdc=0x5a0107c5, x=0, y=0, lppt=0x23803b0 | out: lppt=0x23803b0) returned 1
[0272.653] IsAppThemed () returned 0x1
[0272.653] GetThemeAppProperties () returned 0x3
[0272.654] GetThemeAppProperties () returned 0x3
[0272.654] DrawThemeBackground () returned 0x0
[0272.654] RestoreDC (hdc=0x5a0107c5, nSavedDC=-1) returned 1
[0272.654] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5a0107c5) returned 0x0
[0272.654] GdipCreateRegion (region=0x53dff8) returned 0x0
[0272.654] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.654] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0272.654] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.654] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0272.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.654] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.654] LocalFree (hMem=0x89ea88) returned 0x0
[0272.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.654] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0272.654] LocalFree (hMem=0x89ee08) returned 0x0
[0272.654] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.654] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0272.654] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0272.654] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0272.654] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.655] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0272.655] GetCurrentObject (hdc=0x5a0107c5, type=0x1) returned 0xb00017
[0272.655] GetCurrentObject (hdc=0x5a0107c5, type=0x2) returned 0x900010
[0272.655] GetCurrentObject (hdc=0x5a0107c5, type=0x7) returned 0x1e0507b9
[0272.655] GetCurrentObject (hdc=0x5a0107c5, type=0x6) returned 0x8a01c2
[0272.655] SaveDC (hdc=0x5a0107c5) returned 1
[0272.655] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3004051e
[0272.655] GetClipRgn (hdc=0x5a0107c5, hrgn=0x3004051e) returned 0
[0272.655] SelectClipRgn (hdc=0x5a0107c5, hrgn=0xd1040798) returned 2
[0272.655] DeleteObject (ho=0x3004051e) returned 1
[0272.655] DeleteObject (ho=0xd1040798) returned 1
[0272.655] OffsetViewportOrgEx (in: hdc=0x5a0107c5, x=0, y=0, lppt=0x2380684 | out: lppt=0x2380684) returned 1
[0272.655] IsAppThemed () returned 0x1
[0272.655] GetThemeAppProperties () returned 0x3
[0272.655] GetThemeAppProperties () returned 0x3
[0272.655] GetThemeBackgroundContentRect () returned 0x0
[0272.655] RestoreDC (hdc=0x5a0107c5, nSavedDC=-1) returned 1
[0272.655] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5a0107c5) returned 0x0
[0272.656] IsAppThemed () returned 0x1
[0272.656] GetThemeAppProperties () returned 0x3
[0272.656] GetThemeAppProperties () returned 0x3
[0272.656] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0272.656] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0272.656] GetCurrentObject (hdc=0x5a0107c5, type=0x1) returned 0xb00017
[0272.656] GetCurrentObject (hdc=0x5a0107c5, type=0x2) returned 0x900010
[0272.656] GetCurrentObject (hdc=0x5a0107c5, type=0x7) returned 0x1e0507b9
[0272.656] GetCurrentObject (hdc=0x5a0107c5, type=0x6) returned 0x8a01c2
[0272.656] SaveDC (hdc=0x5a0107c5) returned 1
[0272.656] GetTextAlign (hdc=0x5a0107c5) returned 0x0
[0272.656] GetTextColor (hdc=0x5a0107c5) returned 0x0
[0272.656] GetCurrentObject (hdc=0x5a0107c5, type=0x6) returned 0x8a01c2
[0272.656] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0272.656] SelectObject (hdc=0x5a0107c5, h=0x450a0799) returned 0x8a01c2
[0272.656] GetBkMode (hdc=0x5a0107c5) returned 2
[0272.656] SetBkMode (hdc=0x5a0107c5, mode=1) returned 2
[0272.657] DrawTextExW (in: hdc=0x5a0107c5, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x2380a24 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0272.657] DrawTextExW (in: hdc=0x5a0107c5, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x2380a24 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0272.657] RestoreDC (hdc=0x5a0107c5, nSavedDC=-1) returned 1
[0272.657] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5a0107c5) returned 0x0
[0272.657] GetFocus () returned 0x150122
[0272.657] IsAppThemed () returned 0x1
[0272.657] GetThemeAppProperties () returned 0x3
[0272.657] GetThemeAppProperties () returned 0x3
[0272.657] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0272.657] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x5a0107c5, x1=0, y1=0, rop=0xcc0020) returned 1
[0272.658] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5a0107c5) returned 0x0
[0272.658] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0272.658] SelectObject (hdc=0x5a0107c5, h=0x85000f) returned 0x1e0507b9
[0272.658] DeleteDC (hdc=0x5a0107c5) returned 1
[0272.658] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.658] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0272.658] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.658] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.658] WaitMessage () returned 1
[0272.673] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.673] IsWindowUnicode (hWnd=0x102dc) returned 1
[0272.673] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.673] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.673] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.674] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.674] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.674] WaitMessage () returned 1
[0272.681] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.681] IsWindowUnicode (hWnd=0x102dc) returned 1
[0272.681] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.681] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.681] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.682] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.682] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.682] WaitMessage () returned 1
[0272.682] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.682] IsWindowUnicode (hWnd=0x102dc) returned 1
[0272.682] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.682] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.682] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.683] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.684] IsWindowUnicode (hWnd=0x102dc) returned 1
[0272.684] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.684] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.684] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.684] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.684] IsWindowUnicode (hWnd=0x102dc) returned 1
[0272.684] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.684] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.684] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.685] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.685] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.685] WaitMessage () returned 1
[0272.685] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.685] IsWindowUnicode (hWnd=0x102dc) returned 1
[0272.685] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.685] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.685] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.686] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.687] IsWindowUnicode (hWnd=0x102dc) returned 1
[0272.687] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.687] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.687] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.687] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.687] IsWindowUnicode (hWnd=0x102dc) returned 1
[0272.687] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.687] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.687] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.687] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.688] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.688] WaitMessage () returned 1
[0272.690] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.690] IsWindowUnicode (hWnd=0x102dc) returned 1
[0272.690] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.690] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.690] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.699] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.699] IsWindowUnicode (hWnd=0x102dc) returned 1
[0272.699] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.699] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.699] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.699] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.700] IsWindowUnicode (hWnd=0x102dc) returned 1
[0272.700] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.700] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.700] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.700] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.700] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.700] WaitMessage () returned 1
[0272.709] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.709] IsWindowUnicode (hWnd=0x11004e) returned 1
[0272.709] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.709] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.709] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.709] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.709] IsWindowUnicode (hWnd=0x11004e) returned 1
[0272.709] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.710] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.710] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.710] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x2a1, wParam=0x0, lParam=0xe0014) returned 0x0
[0272.710] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.710] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.710] WaitMessage () returned 1
[0272.782] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.782] IsWindowUnicode (hWnd=0x202d0) returned 1
[0272.782] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.782] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.782] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.783] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.783] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0272.783] WaitMessage () returned 1
[0272.833] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.834] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x84, wParam=0x0, lParam=0x1970355) returned 0x1
[0272.834] IsWindowUnicode (hWnd=0x11004e) returned 1
[0272.834] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.834] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x84, wParam=0x0, lParam=0x1970355) returned 0x1
[0272.834] GetDlgItem (hDlg=0x1800ea, nIDDlgItem=0) returned 0x0
[0272.834] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x210, wParam=0x201, lParam=0x1a0136) returned 0x0
[0272.834] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x21, wParam=0x1800ea, lParam=0x2010001) returned 0x1
[0272.834] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x21, wParam=0x1800ea, lParam=0x2010001) returned 0x1
[0272.834] SetCursor (hCursor=0x10003) returned 0x10003
[0272.835] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.835] DispatchMessageW (lpMsg=0x53e8a0)
[0272.835] GetKeyState (nVirtKey=1) returned -127
[0272.835] GetKeyState (nVirtKey=2) returned 0
[0272.835] GetKeyState (nVirtKey=4) returned 0
[0272.835] GetKeyState (nVirtKey=5) returned 0
[0272.835] GetKeyState (nVirtKey=6) returned 0
[0272.835] IsWindowVisible (hWnd=0x11004e) returned 1
[0272.835] IsWindowEnabled (hWnd=0x11004e) returned 1
[0272.835] SetFocus (hWnd=0x11004e) returned 0x150122
[0272.835] GetFocus () returned 0x11004e
[0272.835] IsChild (hWndParent=0x1800ea, hWnd=0x11004e) returned 1
[0272.835] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x8, wParam=0x11004e, lParam=0x0) returned 0x1
[0272.836] SendMessageW (hWnd=0x150122, Msg=0x2111, wParam=0x2000122, lParam=0x150122) returned 0x0
[0272.836] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0272.838] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0272.838] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0272.838] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0272.839] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0272.839] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0272.841] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0272.841] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x7, wParam=0x150122, lParam=0x0) returned 0x0
[0272.841] GetStockObject (i=5) returned 0x900015
[0272.841] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0272.841] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0xd, wParam=0x3, lParam=0x89e658) returned 0x2
[0272.841] GetDlgItem (hDlg=0x1800ea, nIDDlgItem=1114190) returned 0x11004e
[0272.841] SendMessageW (hWnd=0x11004e, Msg=0x202b, wParam=0x11004e, lParam=0x53de74) returned 0x0
[0272.841] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x202b, wParam=0x11004e, lParam=0x53de74) returned 0x0
[0272.841] InvalidateRect (hWnd=0x11004e, lpRect=0x0, bErase=0) returned 1
[0272.843] GetFocus () returned 0x11004e
[0272.843] GetFocus () returned 0x11004e
[0272.843] GetFocus () returned 0x11004e
[0272.843] GetKeyState (nVirtKey=1) returned -127
[0272.843] GetKeyState (nVirtKey=2) returned 0
[0272.843] GetKeyState (nVirtKey=4) returned 0
[0272.843] GetKeyState (nVirtKey=5) returned 0
[0272.843] GetKeyState (nVirtKey=6) returned 0
[0272.843] GetCapture () returned 0x0
[0272.843] SetCapture (hWnd=0x11004e) returned 0x0
[0272.843] GetKeyState (nVirtKey=1) returned -127
[0272.843] GetKeyState (nVirtKey=2) returned 0
[0272.843] GetKeyState (nVirtKey=4) returned 0
[0272.843] GetKeyState (nVirtKey=5) returned 0
[0272.843] GetKeyState (nVirtKey=6) returned 0
[0272.843] NotifyWinEvent (event=0x800a, hwnd=0x11004e, idObject=-4, idChild=0)
[0272.843] InvalidateRect (hWnd=0x11004e, lpRect=0x53e4c8, bErase=0) returned 1
[0272.843] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.843] IsWindowUnicode (hWnd=0x11004e) returned 1
[0272.843] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.844] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0272.844] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0272.844] MapWindowPoints (in: hWndFrom=0x11004e, hWndTo=0x0, lpPoints=0x2380ce0, cPoints=0x1 | out: lpPoints=0x2380ce0) returned 25756481
[0272.844] NotifyWinEvent (event=0x800a, hwnd=0x11004e, idObject=-4, idChild=0)
[0272.844] InvalidateRect (hWnd=0x11004e, lpRect=0x53e468, bErase=0) returned 1
[0272.844] UpdateWindow (hWnd=0x11004e) returned 1
[0272.844] BeginPaint (in: hWnd=0x11004e, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0272.844] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0272.844] CreateCompatibleDC (hdc=0x10105d6) returned 0x5901065f
[0272.844] SelectObject (hdc=0x5901065f, h=0x1e0507b9) returned 0x85000f
[0272.844] GdipCreateFromHDC (hdc=0x5901065f, graphics=0x53df98) returned 0x0
[0272.844] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0272.844] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0272.845] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0272.845] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.845] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0272.845] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0272.845] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0272.845] LocalFree (hMem=0x89ec80) returned 0x0
[0272.845] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.845] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0272.845] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.845] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0272.845] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0272.845] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb150dbd) returned 0x0
[0272.845] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.845] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0272.845] GetCurrentObject (hdc=0x5901065f, type=0x1) returned 0xb00017
[0272.845] GetCurrentObject (hdc=0x5901065f, type=0x2) returned 0x900010
[0272.845] GetCurrentObject (hdc=0x5901065f, type=0x7) returned 0x1e0507b9
[0272.845] GetCurrentObject (hdc=0x5901065f, type=0x6) returned 0x8a01c2
[0272.845] SaveDC (hdc=0x5901065f) returned 1
[0272.846] GetNearestColor (hdc=0x5901065f, color=0xf0f0f0) returned 0xf0f0f0
[0272.846] GetNearestColor (hdc=0x5901065f, color=0xa0a0a0) returned 0xa0a0a0
[0272.846] GetNearestColor (hdc=0x5901065f, color=0x696969) returned 0x696969
[0272.846] GetNearestColor (hdc=0x5901065f, color=0xa0a0a0) returned 0xa0a0a0
[0272.846] GetNearestColor (hdc=0x5901065f, color=0x0) returned 0x0
[0272.846] GetNearestColor (hdc=0x5901065f, color=0xffffff) returned 0xffffff
[0272.846] GetNearestColor (hdc=0x5901065f, color=0xe5e5e5) returned 0xe5e5e5
[0272.846] GetNearestColor (hdc=0x5901065f, color=0xd7d7d7) returned 0xd7d7d7
[0272.846] GetNearestColor (hdc=0x5901065f, color=0x0) returned 0x0
[0272.846] RestoreDC (hdc=0x5901065f, nSavedDC=-1) returned 1
[0272.846] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5901065f) returned 0x0
[0272.846] IsAppThemed () returned 0x1
[0272.846] GetThemeAppProperties () returned 0x3
[0272.846] GetThemeAppProperties () returned 0x3
[0272.846] IsAppThemed () returned 0x1
[0272.847] GetThemeAppProperties () returned 0x3
[0272.847] GetThemeAppProperties () returned 0x3
[0272.847] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0272.847] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x2381454 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0272.847] IsAppThemed () returned 0x1
[0272.847] GetThemeAppProperties () returned 0x3
[0272.847] GetThemeAppProperties () returned 0x3
[0272.847] IsAppThemed () returned 0x1
[0272.847] GetThemeAppProperties () returned 0x3
[0272.847] GetThemeAppProperties () returned 0x3
[0272.847] IsAppThemed () returned 0x1
[0272.847] GetThemeAppProperties () returned 0x3
[0272.847] GetThemeAppProperties () returned 0x3
[0272.847] IsAppThemed () returned 0x1
[0272.847] GetThemeAppProperties () returned 0x3
[0272.848] GetThemeAppProperties () returned 0x3
[0272.848] IsThemePartDefined () returned 0x1
[0272.848] IsAppThemed () returned 0x1
[0272.848] GetThemeAppProperties () returned 0x3
[0272.848] GetThemeAppProperties () returned 0x3
[0272.848] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0272.848] IsAppThemed () returned 0x1
[0272.848] GetThemeAppProperties () returned 0x3
[0272.848] GetThemeAppProperties () returned 0x3
[0272.848] IsAppThemed () returned 0x1
[0272.848] GetThemeAppProperties () returned 0x3
[0272.848] GetThemeAppProperties () returned 0x3
[0272.848] IsThemePartDefined () returned 0x1
[0272.848] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0272.848] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.848] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0272.848] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.848] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0272.848] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0272.848] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0272.848] LocalFree (hMem=0x89ec80) returned 0x0
[0272.848] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.848] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0272.849] LocalFree (hMem=0x89ee08) returned 0x0
[0272.849] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.849] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0272.849] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0272.849] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0272.849] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.849] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0272.849] GetCurrentObject (hdc=0x5901065f, type=0x1) returned 0xb00017
[0272.849] GetCurrentObject (hdc=0x5901065f, type=0x2) returned 0x900010
[0272.849] GetCurrentObject (hdc=0x5901065f, type=0x7) returned 0x1e0507b9
[0272.849] GetCurrentObject (hdc=0x5901065f, type=0x6) returned 0x8a01c2
[0272.850] SaveDC (hdc=0x5901065f) returned 1
[0272.850] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd2040798
[0272.850] GetClipRgn (hdc=0x5901065f, hrgn=0xd2040798) returned 0
[0272.850] SelectClipRgn (hdc=0x5901065f, hrgn=0x3404051e) returned 2
[0272.850] DeleteObject (ho=0xd2040798) returned 1
[0272.851] DeleteObject (ho=0x3404051e) returned 1
[0272.851] OffsetViewportOrgEx (in: hdc=0x5901065f, x=0, y=0, lppt=0x2381b04 | out: lppt=0x2381b04) returned 1
[0272.851] DrawThemeParentBackground ()
[0272.851] GetWindowPlacement (in: hWnd=0x1800ea, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0272.851] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0272.851] GetWindowTextLengthW (hWnd=0x1800ea)
[0272.851] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.851] GetSystemMetrics (nIndex=42) returned 0
[0272.851] GetWindowTextW (hWnd=0x1800ea, lpString=0x53d878, nMaxCount=11)
[0272.851] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0272.851] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0272.851] GetCurrentObject (hdc=0x5901065f, type=0x1) returned 0xb00017
[0272.851] GetCurrentObject (hdc=0x5901065f, type=0x2) returned 0x900010
[0272.851] GetCurrentObject (hdc=0x5901065f, type=0x7) returned 0x1e0507b9
[0272.851] GetCurrentObject (hdc=0x5901065f, type=0x6) returned 0x8a01c2
[0272.851] SaveDC (hdc=0x5901065f) returned 2
[0272.852] GetNearestColor (hdc=0x5901065f, color=0xf0f0f0) returned 0xf0f0f0
[0272.852] CreateSolidBrush (color=0xf0f0f0) returned 0xdf10078d
[0272.852] FillRect (hDC=0x5901065f, lprc=0x53d760, hbr=0xdf10078d) returned 1
[0272.852] DeleteObject (ho=0xdf10078d) returned 1
[0272.852] RestoreDC (hdc=0x5901065f, nSavedDC=-1) returned 1
[0272.852] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.852] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0272.852] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0272.852] GetCurrentObject (hdc=0x5901065f, type=0x1) returned 0xb00017
[0272.852] GetCurrentObject (hdc=0x5901065f, type=0x2) returned 0x900010
[0272.852] GetCurrentObject (hdc=0x5901065f, type=0x7) returned 0x1e0507b9
[0272.852] GetCurrentObject (hdc=0x5901065f, type=0x6) returned 0x8a01c2
[0272.852] SaveDC (hdc=0x5901065f) returned 2
[0272.853] GetNearestColor (hdc=0x5901065f, color=0xf0f0f0) returned 0xf0f0f0
[0272.853] CreateSolidBrush (color=0xf0f0f0) returned 0xe010078d
[0272.853] FillRect (hDC=0x5901065f, lprc=0x53d700, hbr=0xe010078d) returned 1
[0272.853] DeleteObject (ho=0xe010078d) returned 1
[0272.853] RestoreDC (hdc=0x5901065f, nSavedDC=-1) returned 1
[0272.853] GetWindowTextLengthW (hWnd=0x1800ea)
[0272.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0272.854] RestoreDC (hdc=0x5901065f, nSavedDC=-1) returned 1
[0272.854] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5901065f) returned 0x0
[0272.854] IsAppThemed () returned 0x1
[0272.854] GetThemeAppProperties () returned 0x3
[0272.854] GetThemeAppProperties () returned 0x3
[0272.854] IsAppThemed () returned 0x1
[0272.854] GetThemeAppProperties () returned 0x3
[0272.854] GetThemeAppProperties () returned 0x3
[0272.854] IsThemePartDefined () returned 0x1
[0272.854] GdipCreateRegion (region=0x53dc80) returned 0x0
[0272.854] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.854] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0272.854] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.854] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0272.855] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.855] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0272.855] LocalFree (hMem=0x89ee08) returned 0x0
[0272.855] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0272.855] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0272.855] LocalFree (hMem=0x89ec80) returned 0x0
[0272.855] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.855] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0272.855] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0272.855] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0272.855] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.855] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0272.855] GetCurrentObject (hdc=0x5901065f, type=0x1) returned 0xb00017
[0272.855] GetCurrentObject (hdc=0x5901065f, type=0x2) returned 0x900010
[0272.855] GetCurrentObject (hdc=0x5901065f, type=0x7) returned 0x1e0507b9
[0272.855] GetCurrentObject (hdc=0x5901065f, type=0x6) returned 0x8a01c2
[0272.856] SaveDC (hdc=0x5901065f) returned 1
[0272.856] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3504051e
[0272.856] GetClipRgn (hdc=0x5901065f, hrgn=0x3504051e) returned 0
[0272.856] SelectClipRgn (hdc=0x5901065f, hrgn=0xd4040798) returned 2
[0272.856] DeleteObject (ho=0x3504051e) returned 1
[0272.856] DeleteObject (ho=0xd4040798) returned 1
[0272.856] OffsetViewportOrgEx (in: hdc=0x5901065f, x=0, y=0, lppt=0x238238c | out: lppt=0x238238c) returned 1
[0272.856] IsAppThemed () returned 0x1
[0272.856] GetThemeAppProperties () returned 0x3
[0272.856] GetThemeAppProperties () returned 0x3
[0272.856] DrawThemeBackground () returned 0x0
[0272.856] RestoreDC (hdc=0x5901065f, nSavedDC=-1) returned 1
[0272.856] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5901065f) returned 0x0
[0272.856] GdipCreateRegion (region=0x53dc84) returned 0x0
[0272.857] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.857] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0272.857] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.857] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0272.857] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0272.857] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0272.857] LocalFree (hMem=0x89ec80) returned 0x0
[0272.857] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0272.857] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0272.857] LocalFree (hMem=0x89ea88) returned 0x0
[0272.857] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.857] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0272.857] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0272.857] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0272.857] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.857] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0272.857] GetCurrentObject (hdc=0x5901065f, type=0x1) returned 0xb00017
[0272.857] GetCurrentObject (hdc=0x5901065f, type=0x2) returned 0x900010
[0272.858] GetCurrentObject (hdc=0x5901065f, type=0x7) returned 0x1e0507b9
[0272.858] GetCurrentObject (hdc=0x5901065f, type=0x6) returned 0x8a01c2
[0272.858] SaveDC (hdc=0x5901065f) returned 1
[0272.858] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd5040798
[0272.858] GetClipRgn (hdc=0x5901065f, hrgn=0xd5040798) returned 0
[0272.858] SelectClipRgn (hdc=0x5901065f, hrgn=0x3604051e) returned 2
[0272.858] DeleteObject (ho=0xd5040798) returned 1
[0272.858] DeleteObject (ho=0x3604051e) returned 1
[0272.858] OffsetViewportOrgEx (in: hdc=0x5901065f, x=0, y=0, lppt=0x2382660 | out: lppt=0x2382660) returned 1
[0272.858] IsAppThemed () returned 0x1
[0272.858] GetThemeAppProperties () returned 0x3
[0272.858] GetThemeAppProperties () returned 0x3
[0272.858] GetThemeBackgroundContentRect () returned 0x0
[0272.858] RestoreDC (hdc=0x5901065f, nSavedDC=-1) returned 1
[0272.859] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5901065f) returned 0x0
[0272.859] IsAppThemed () returned 0x1
[0272.859] GetThemeAppProperties () returned 0x3
[0272.859] GetThemeAppProperties () returned 0x3
[0272.859] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0272.859] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0272.859] GetCurrentObject (hdc=0x5901065f, type=0x1) returned 0xb00017
[0272.859] GetCurrentObject (hdc=0x5901065f, type=0x2) returned 0x900010
[0272.859] GetCurrentObject (hdc=0x5901065f, type=0x7) returned 0x1e0507b9
[0272.859] GetCurrentObject (hdc=0x5901065f, type=0x6) returned 0x8a01c2
[0272.859] SaveDC (hdc=0x5901065f) returned 1
[0272.859] GetTextAlign (hdc=0x5901065f) returned 0x0
[0272.859] GetTextColor (hdc=0x5901065f) returned 0x0
[0272.859] GetCurrentObject (hdc=0x5901065f, type=0x6) returned 0x8a01c2
[0272.859] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0272.859] SelectObject (hdc=0x5901065f, h=0x730a066d) returned 0x8a01c2
[0272.860] GetBkMode (hdc=0x5901065f) returned 2
[0272.860] SetBkMode (hdc=0x5901065f, mode=1) returned 2
[0272.860] DrawTextExW (in: hdc=0x5901065f, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x2382a00 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0272.860] DrawTextExW (in: hdc=0x5901065f, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x2382a00 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0272.860] RestoreDC (hdc=0x5901065f, nSavedDC=-1) returned 1
[0272.860] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5901065f) returned 0x0
[0272.860] GetFocus () returned 0x11004e
[0272.860] IsAppThemed () returned 0x1
[0272.860] GetThemeAppProperties () returned 0x3
[0272.861] GetThemeAppProperties () returned 0x3
[0272.861] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0272.861] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x5901065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0272.861] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5901065f) returned 0x0
[0272.861] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0272.861] SelectObject (hdc=0x5901065f, h=0x85000f) returned 0x1e0507b9
[0272.861] DeleteDC (hdc=0x5901065f) returned 1
[0272.861] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.861] EndPaint (hWnd=0x11004e, lpPaint=0x53df7c) returned 1
[0272.861] MapWindowPoints (in: hWndFrom=0x11004e, hWndTo=0x0, lpPoints=0x2382afc, cPoints=0x1 | out: lpPoints=0x2382afc) returned 25756481
[0272.861] WindowFromPoint (Point=0x355) returned 0x11004e
[0272.861] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x84, wParam=0x0, lParam=0x1970355) returned 0x1
[0272.862] NotifyWinEvent (event=0x800a, hwnd=0x11004e, idObject=-4, idChild=0)
[0272.862] NotifyWinEvent (event=0x800c, hwnd=0x11004e, idObject=-4, idChild=0)
[0272.862] GetWindowTextLengthW (hWnd=0x150122) returned 0
[0272.862] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0272.862] GetSystemMetrics (nIndex=42) returned 0
[0272.862] GetWindowTextW (in: hWnd=0x150122, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0272.862] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0272.862] SendMessageW (hWnd=0x1800ea, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0272.862] GetCapture () returned 0x11004e
[0272.862] ReleaseCapture () returned 1
[0272.862] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0272.862] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0272.863] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x84, wParam=0x0, lParam=0x1970355) returned 0x1
[0272.863] IsWindow (hWnd=0x70036) returned 1
[0272.863] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0272.863] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0272.864] IsWindow (hWnd=0x70036) returned 1
[0272.864] SetActiveWindow (hWnd=0x70036) returned 0x1800ea
[0272.864] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0272.868] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0272.868] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0272.869] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0272.869] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0272.869] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0272.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0272.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1800ea) returned 0x1
[0272.872] GetFocus () returned 0x11004e
[0272.872] SetFocus (hWnd=0x202c6) returned 0x11004e
[0272.873] GetFocus () returned 0x202c6
[0272.873] IsChild (hWndParent=0x1800ea, hWnd=0x202c6) returned 0
[0272.873] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0272.873] GetCapture () returned 0x0
[0272.873] InvalidateRect (hWnd=0x11004e, lpRect=0x0, bErase=0) returned 1
[0272.874] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0272.875] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0272.876] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0272.876] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0272.876] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0272.876] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0272.877] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0272.877] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x11004e, lParam=0x0) returned 0x0
[0272.877] GetStockObject (i=5) returned 0x900015
[0272.877] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0272.877] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8cca90) returned 0x7
[0272.877] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0272.877] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0272.877] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0272.877] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0272.879] IsWindow (hWnd=0x202c6) returned 1
[0272.879] SetFocus (hWnd=0x202c6) returned 0x202c6
[0272.879] GetWindowLongW (hWnd=0x1800ea, nIndex=-8) returned 458806
[0272.879] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0272.879] GetCurrentThreadId () returned 0x11d0
[0272.879] IsWindow (hWnd=0x70036) returned 1
[0272.879] IsWindow (hWnd=0x70036) returned 1
[0272.879] IsWindowVisible (hWnd=0x70036) returned 1
[0272.879] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0272.879] GetFocus () returned 0x202c6
[0272.879] IsChild (hWndParent=0x1800ea, hWnd=0x202c6) returned 0
[0272.879] ShowWindow (hWnd=0x1800ea, nCmdShow=0) returned 1
[0272.879] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0272.879] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0272.881] GetWindowPlacement (in: hWnd=0x1800ea, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0272.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0272.881] GetClientRect (in: hWnd=0x1800ea, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0272.881] GetWindowRect (in: hWnd=0x1800ea, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0272.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0272.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0272.882] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0272.882] GetWindowLongW (hWnd=0x1800ea, nIndex=-20) returned 327937
[0272.882] DestroyWindow (hWnd=0x1800ea) returned 1
[0272.883] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0272.884] GetWindowTextLengthW (hWnd=0x1800ea) returned 10
[0272.884] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0272.884] GetSystemMetrics (nIndex=42) returned 0
[0272.884] GetWindowTextW (in: hWnd=0x1800ea, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0272.884] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0272.884] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0272.884] SendMessageW (hWnd=0x150122, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0272.884] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0272.884] SendMessageW (hWnd=0x150122, Msg=0xb0, wParam=0x236aaac, lParam=0x53e518) returned 0x0
[0272.884] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xb0, wParam=0x236aaac, lParam=0x53e518) returned 0x0
[0272.884] GetWindowTextLengthW (hWnd=0x150122) returned 0
[0272.884] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0272.884] GetSystemMetrics (nIndex=42) returned 0
[0272.884] GetWindowTextW (in: hWnd=0x150122, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0272.884] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0272.884] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0272.884] GetWindowThreadProcessId (in: hWnd=0x1102ca, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0272.885] GetWindow (hWnd=0x1102ca, uCmd=0x5) returned 0x0
[0272.885] GetWindowLongW (hWnd=0x1102ca, nIndex=-20) returned 65792
[0272.885] DestroyWindow (hWnd=0x1102ca) returned 1
[0272.885] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102ca, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0272.885] GetWindowTextLengthW (hWnd=0x1102ca) returned 25
[0272.885] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0272.885] GetSystemMetrics (nIndex=42) returned 0
[0272.885] GetWindowTextW (in: hWnd=0x1102ca, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0272.885] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102ca, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0272.885] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0272.885] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1102ca, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0272.886] GetWindowTextLengthW (hWnd=0x1501e2) returned 16
[0272.886] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0272.886] GetSystemMetrics (nIndex=42) returned 0
[0272.886] GetWindowTextW (in: hWnd=0x1501e2, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0272.886] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0272.886] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0272.887] InvalidateRect (hWnd=0x11004e, lpRect=0x0, bErase=0) returned 1
[0272.887] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0272.887] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0272.887] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x150122, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0272.888] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1501e2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0272.889] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x11004e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0272.890] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x32013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0272.891] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1800ea, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0272.893] GetProcessWindowStation () returned 0x13c
[0272.893] GetActiveWindow () returned 0x70036
[0272.893] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0272.893] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0272.893] GetCurrentThreadId () returned 0x11d0
[0272.893] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf5a86, lParam=0x0) returned 1
[0272.894] IsWindowVisible (hWnd=0x70036) returned 1
[0272.894] IsWindowEnabled (hWnd=0x70036) returned 1
[0272.894] IsWindowVisible (hWnd=0x602b6) returned 0
[0272.894] IsWindowVisible (hWnd=0x901f8) returned 0
[0272.894] IsWindowVisible (hWnd=0x202d0) returned 0
[0272.894] IsWindowVisible (hWnd=0x202d4) returned 0
[0272.894] GetActiveWindow () returned 0x70036
[0272.894] GetFocus () returned 0x202c6
[0272.894] IsWindow (hWnd=0x70036) returned 1
[0272.894] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0272.894] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0272.894] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0272.895] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0272.896] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0272.908] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1900ea) returned 0x1
[0272.910] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0272.911] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0272.921] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x33013e, lParam=0x0) returned 0x0
[0272.921] GetCapture () returned 0x0
[0272.921] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0272.922] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0272.924] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0272.924] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0272.927] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x8b010786
[0272.927] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0272.927] CreateCompatibleDC (hdc=0x8b010786) returned 0x6b01065f
[0272.927] SelectObject (hdc=0x6b01065f, h=0x1e0507b9) returned 0x85000f
[0272.927] GdipCreateFromHDC (hdc=0x6b01065f, graphics=0x53e108) returned 0x0
[0272.927] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0272.927] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0272.927] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0272.927] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.931] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0272.931] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0272.931] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0272.931] LocalFree (hMem=0x89ec80) returned 0x0
[0272.931] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.931] GdipCreateRegion (region=0x53e150) returned 0x0
[0272.931] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.931] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0272.931] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0272.931] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb130dbd) returned 0x0
[0272.931] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.932] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0272.932] GetCurrentObject (hdc=0x6b01065f, type=0x1) returned 0xb00017
[0272.932] GetCurrentObject (hdc=0x6b01065f, type=0x2) returned 0x900010
[0272.932] GetCurrentObject (hdc=0x6b01065f, type=0x7) returned 0x1e0507b9
[0272.932] GetCurrentObject (hdc=0x6b01065f, type=0x6) returned 0x8a01c2
[0272.932] SaveDC (hdc=0x6b01065f) returned 1
[0272.932] GetNearestColor (hdc=0x6b01065f, color=0xff) returned 0xff
[0272.932] GetNearestColor (hdc=0x6b01065f, color=0x55) returned 0x55
[0272.932] GetNearestColor (hdc=0x6b01065f, color=0x0) returned 0x0
[0272.932] GetNearestColor (hdc=0x6b01065f, color=0x55) returned 0x55
[0272.932] GetNearestColor (hdc=0x6b01065f, color=0x0) returned 0x0
[0272.932] GetNearestColor (hdc=0x6b01065f, color=0x8080ff) returned 0x8080ff
[0272.932] GetNearestColor (hdc=0x6b01065f, color=0x7373e5) returned 0x7373e5
[0272.932] GetNearestColor (hdc=0x6b01065f, color=0xe5) returned 0xe5
[0272.932] GetNearestColor (hdc=0x6b01065f, color=0x0) returned 0x0
[0272.933] RestoreDC (hdc=0x6b01065f, nSavedDC=-1) returned 1
[0272.933] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6b01065f) returned 0x0
[0272.933] IsAppThemed () returned 0x1
[0272.933] GetThemeAppProperties () returned 0x3
[0272.933] GetThemeAppProperties () returned 0x3
[0272.933] IsAppThemed () returned 0x1
[0272.933] GetThemeAppProperties () returned 0x3
[0272.933] GetThemeAppProperties () returned 0x3
[0272.933] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0272.933] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2383df4 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0272.933] IsAppThemed () returned 0x1
[0272.933] GetThemeAppProperties () returned 0x3
[0272.933] GetThemeAppProperties () returned 0x3
[0272.934] IsAppThemed () returned 0x1
[0272.934] GetThemeAppProperties () returned 0x3
[0272.934] GetThemeAppProperties () returned 0x3
[0272.934] GetFocus () returned 0x33013e
[0272.934] IsAppThemed () returned 0x1
[0272.934] GetThemeAppProperties () returned 0x3
[0272.934] GetThemeAppProperties () returned 0x3
[0272.934] IsAppThemed () returned 0x1
[0272.934] GetThemeAppProperties () returned 0x3
[0272.934] GetThemeAppProperties () returned 0x3
[0272.934] IsThemePartDefined () returned 0x1
[0272.934] IsAppThemed () returned 0x1
[0272.934] GetThemeAppProperties () returned 0x3
[0272.934] GetThemeAppProperties () returned 0x3
[0272.934] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0272.934] IsAppThemed () returned 0x1
[0272.934] GetThemeAppProperties () returned 0x3
[0272.934] GetThemeAppProperties () returned 0x3
[0272.934] IsAppThemed () returned 0x1
[0272.934] GetThemeAppProperties () returned 0x3
[0272.934] GetThemeAppProperties () returned 0x3
[0272.934] IsThemePartDefined () returned 0x1
[0272.934] GdipCreateRegion (region=0x53de78) returned 0x0
[0272.934] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.934] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0272.935] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.935] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0272.935] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0272.935] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0272.935] LocalFree (hMem=0x89ec80) returned 0x0
[0272.935] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0272.935] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0272.935] LocalFree (hMem=0x89ee08) returned 0x0
[0272.935] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.935] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0272.935] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0272.935] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0272.935] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.935] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0272.935] GetCurrentObject (hdc=0x6b01065f, type=0x1) returned 0xb00017
[0272.935] GetCurrentObject (hdc=0x6b01065f, type=0x2) returned 0x900010
[0272.935] GetCurrentObject (hdc=0x6b01065f, type=0x7) returned 0x1e0507b9
[0272.935] GetCurrentObject (hdc=0x6b01065f, type=0x6) returned 0x8a01c2
[0272.936] SaveDC (hdc=0x6b01065f) returned 1
[0272.936] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3704051e
[0272.936] GetClipRgn (hdc=0x6b01065f, hrgn=0x3704051e) returned 0
[0272.936] SelectClipRgn (hdc=0x6b01065f, hrgn=0xdb040798) returned 2
[0272.936] DeleteObject (ho=0x3704051e) returned 1
[0272.936] DeleteObject (ho=0xdb040798) returned 1
[0272.936] OffsetViewportOrgEx (in: hdc=0x6b01065f, x=0, y=0, lppt=0x23844a4 | out: lppt=0x23844a4) returned 1
[0272.936] DrawThemeParentBackground () returned 0x0
[0272.936] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0272.936] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0272.936] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0272.936] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0272.936] GetSystemMetrics (nIndex=42) returned 0
[0272.936] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0272.936] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0272.937] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0272.937] GetCurrentObject (hdc=0x6b01065f, type=0x1) returned 0xb00017
[0272.937] GetCurrentObject (hdc=0x6b01065f, type=0x2) returned 0x900010
[0272.937] GetCurrentObject (hdc=0x6b01065f, type=0x7) returned 0x1e0507b9
[0272.937] GetCurrentObject (hdc=0x6b01065f, type=0x6) returned 0x8a01c2
[0272.937] SaveDC (hdc=0x6b01065f) returned 2
[0272.937] GetNearestColor (hdc=0x6b01065f, color=0xff) returned 0xff
[0272.937] CreateSolidBrush (color=0xff) returned 0xe110078d
[0272.937] FillRect (hDC=0x6b01065f, lprc=0x53d8d8, hbr=0xe110078d) returned 1
[0272.937] DeleteObject (ho=0xe110078d) returned 1
[0272.937] RestoreDC (hdc=0x6b01065f, nSavedDC=-1) returned 1
[0272.937] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0272.937] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0272.937] GetSystemMetrics (nIndex=42) returned 0
[0272.937] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0272.937] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0272.937] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0272.937] GetCurrentObject (hdc=0x6b01065f, type=0x1) returned 0xb00017
[0272.937] GetCurrentObject (hdc=0x6b01065f, type=0x2) returned 0x900010
[0272.937] GetCurrentObject (hdc=0x6b01065f, type=0x7) returned 0x1e0507b9
[0272.938] GetCurrentObject (hdc=0x6b01065f, type=0x6) returned 0x8a01c2
[0272.938] SaveDC (hdc=0x6b01065f) returned 2
[0272.938] GetNearestColor (hdc=0x6b01065f, color=0xff) returned 0xff
[0272.938] CreateSolidBrush (color=0xff) returned 0xe210078d
[0272.938] FillRect (hDC=0x6b01065f, lprc=0x53d878, hbr=0xe210078d) returned 1
[0272.938] DeleteObject (ho=0xe210078d) returned 1
[0272.938] RestoreDC (hdc=0x6b01065f, nSavedDC=-1) returned 1
[0272.938] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0272.938] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0272.938] GetSystemMetrics (nIndex=42) returned 0
[0272.938] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0272.938] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0272.938] RestoreDC (hdc=0x6b01065f, nSavedDC=-1) returned 1
[0272.938] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6b01065f) returned 0x0
[0272.938] IsAppThemed () returned 0x1
[0272.939] GetThemeAppProperties () returned 0x3
[0272.939] GetThemeAppProperties () returned 0x3
[0272.939] IsAppThemed () returned 0x1
[0272.939] GetThemeAppProperties () returned 0x3
[0272.939] GetThemeAppProperties () returned 0x3
[0272.939] IsThemePartDefined () returned 0x1
[0272.939] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0272.939] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.939] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0272.939] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0272.939] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0272.939] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0272.939] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0272.939] LocalFree (hMem=0x89eac0) returned 0x0
[0272.939] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0272.939] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0272.939] LocalFree (hMem=0x89eac0) returned 0x0
[0272.939] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0272.939] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0272.939] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0272.939] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0272.939] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.940] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0272.940] GetCurrentObject (hdc=0x6b01065f, type=0x1) returned 0xb00017
[0272.940] GetCurrentObject (hdc=0x6b01065f, type=0x2) returned 0x900010
[0272.940] GetCurrentObject (hdc=0x6b01065f, type=0x7) returned 0x1e0507b9
[0272.940] GetCurrentObject (hdc=0x6b01065f, type=0x6) returned 0x8a01c2
[0272.940] SaveDC (hdc=0x6b01065f) returned 1
[0272.940] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdc040798
[0272.940] GetClipRgn (hdc=0x6b01065f, hrgn=0xdc040798) returned 0
[0272.940] SelectClipRgn (hdc=0x6b01065f, hrgn=0x3904051e) returned 2
[0272.940] DeleteObject (ho=0xdc040798) returned 1
[0272.940] DeleteObject (ho=0x3904051e) returned 1
[0272.940] OffsetViewportOrgEx (in: hdc=0x6b01065f, x=0, y=0, lppt=0x2384d08 | out: lppt=0x2384d08) returned 1
[0272.940] IsAppThemed () returned 0x1
[0272.940] GetThemeAppProperties () returned 0x3
[0272.940] GetThemeAppProperties () returned 0x3
[0272.940] DrawThemeBackground () returned 0x0
[0272.940] RestoreDC (hdc=0x6b01065f, nSavedDC=-1) returned 1
[0272.940] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6b01065f) returned 0x0
[0272.941] GdipCreateRegion (region=0x53de00) returned 0x0
[0272.941] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0272.941] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0272.941] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0272.941] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0272.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0272.941] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0272.941] LocalFree (hMem=0x89eac0) returned 0x0
[0272.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0272.941] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0272.941] LocalFree (hMem=0x89ec80) returned 0x0
[0272.941] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0272.941] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0272.941] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0272.941] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0272.941] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0272.941] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0272.941] GetCurrentObject (hdc=0x6b01065f, type=0x1) returned 0xb00017
[0272.941] GetCurrentObject (hdc=0x6b01065f, type=0x2) returned 0x900010
[0272.941] GetCurrentObject (hdc=0x6b01065f, type=0x7) returned 0x1e0507b9
[0272.941] GetCurrentObject (hdc=0x6b01065f, type=0x6) returned 0x8a01c2
[0272.942] SaveDC (hdc=0x6b01065f) returned 1
[0272.942] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a04051e
[0272.942] GetClipRgn (hdc=0x6b01065f, hrgn=0x3a04051e) returned 0
[0272.942] SelectClipRgn (hdc=0x6b01065f, hrgn=0xdd040798) returned 2
[0272.942] DeleteObject (ho=0x3a04051e) returned 1
[0272.942] DeleteObject (ho=0xdd040798) returned 1
[0272.942] OffsetViewportOrgEx (in: hdc=0x6b01065f, x=0, y=0, lppt=0x2384fdc | out: lppt=0x2384fdc) returned 1
[0272.942] IsAppThemed () returned 0x1
[0272.942] GetThemeAppProperties () returned 0x3
[0272.942] GetThemeAppProperties () returned 0x3
[0272.942] GetThemeBackgroundContentRect () returned 0x0
[0272.942] RestoreDC (hdc=0x6b01065f, nSavedDC=-1) returned 1
[0272.942] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6b01065f) returned 0x0
[0272.942] IsAppThemed () returned 0x1
[0272.942] GetThemeAppProperties () returned 0x3
[0272.942] GetThemeAppProperties () returned 0x3
[0272.942] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0272.942] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0272.942] GetCurrentObject (hdc=0x6b01065f, type=0x1) returned 0xb00017
[0272.942] GetCurrentObject (hdc=0x6b01065f, type=0x2) returned 0x900010
[0272.942] GetCurrentObject (hdc=0x6b01065f, type=0x7) returned 0x1e0507b9
[0272.942] GetCurrentObject (hdc=0x6b01065f, type=0x6) returned 0x8a01c2
[0272.943] SaveDC (hdc=0x6b01065f) returned 1
[0272.943] GetTextAlign (hdc=0x6b01065f) returned 0x0
[0272.943] GetTextColor (hdc=0x6b01065f) returned 0x0
[0272.943] GetCurrentObject (hdc=0x6b01065f, type=0x6) returned 0x8a01c2
[0272.943] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0272.943] SelectObject (hdc=0x6b01065f, h=0x450a0799) returned 0x8a01c2
[0272.943] GetBkMode (hdc=0x6b01065f) returned 2
[0272.943] SetBkMode (hdc=0x6b01065f, mode=1) returned 2
[0272.943] DrawTextExW (in: hdc=0x6b01065f, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x238537c | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0272.943] DrawTextExW (in: hdc=0x6b01065f, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x238537c | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0272.944] RestoreDC (hdc=0x6b01065f, nSavedDC=-1) returned 1
[0272.944] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6b01065f) returned 0x0
[0272.944] GetFocus () returned 0x33013e
[0272.944] IsAppThemed () returned 0x1
[0272.944] GetThemeAppProperties () returned 0x3
[0272.944] GetThemeAppProperties () returned 0x3
[0272.944] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0272.944] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x6b01065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0272.944] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6b01065f) returned 0x0
[0272.944] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0272.944] SelectObject (hdc=0x6b01065f, h=0x85000f) returned 0x1e0507b9
[0272.944] DeleteDC (hdc=0x6b01065f) returned 1
[0272.944] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0272.944] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0273.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0273.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0273.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1900ea) returned 0x1
[0273.259] GetFocus () returned 0x1900ea
[0273.259] GetAncestor (hwnd=0x1900ea, gaFlags=0x1) returned 0x10010
[0273.259] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0273.259] SetFocus (hWnd=0x202c6) returned 0x0
[0273.261] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0273.262] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0273.262] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0273.263] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0273.263] GetFocus () returned 0x70036
[0273.263] SetFocus (hWnd=0x202c6) returned 0x0
[0273.268] IsWindow (hWnd=0x70036) returned 1
[0273.268] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0273.268] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0273.268] IsWindow (hWnd=0x70036) returned 1
[0273.268] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0273.268] IsWindow (hWnd=0x202c6) returned 1
[0273.268] SetFocus (hWnd=0x202c6) returned 0x70036
[0273.269] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0273.269] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0273.270] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0273.278] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0273.278] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0273.278] GetStockObject (i=5) returned 0x900015
[0273.279] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0273.279] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8cca90) returned 0x7
[0273.279] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0273.279] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0273.279] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0273.279] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0273.280] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0273.280] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0273.280] GetFocus () returned 0x202c6
[0273.280] GetCapture () returned 0x0
[0273.280] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.281] IsWindowUnicode (hWnd=0x202c6) returned 1
[0273.281] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.281] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.281] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.281] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.282] IsWindowUnicode (hWnd=0x202c6) returned 1
[0273.282] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.282] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.282] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.282] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0273.282] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0273.282] CreateCompatibleDC (hdc=0x8b010786) returned 0x42010535
[0273.282] SelectObject (hdc=0x42010535, h=0x1e0507b9) returned 0x85000f
[0273.282] GdipCreateFromHDC (hdc=0x42010535, graphics=0x53e958) returned 0x0
[0273.282] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0273.283] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0273.283] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0273.283] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0273.283] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0273.283] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0273.283] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0273.283] LocalFree (hMem=0x89ec80) returned 0x0
[0273.283] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0273.283] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0273.283] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0273.283] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0273.283] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0273.283] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb110dbd) returned 0x0
[0273.283] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0273.283] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0273.283] GetCurrentObject (hdc=0x42010535, type=0x1) returned 0xb00017
[0273.283] GetCurrentObject (hdc=0x42010535, type=0x2) returned 0x900010
[0273.283] GetCurrentObject (hdc=0x42010535, type=0x7) returned 0x1e0507b9
[0273.284] GetCurrentObject (hdc=0x42010535, type=0x6) returned 0x8a01c2
[0273.284] SaveDC (hdc=0x42010535) returned 1
[0273.284] GetNearestColor (hdc=0x42010535, color=0xff) returned 0xff
[0273.284] GetNearestColor (hdc=0x42010535, color=0x55) returned 0x55
[0273.284] GetNearestColor (hdc=0x42010535, color=0x0) returned 0x0
[0273.284] GetNearestColor (hdc=0x42010535, color=0x55) returned 0x55
[0273.284] GetNearestColor (hdc=0x42010535, color=0x0) returned 0x0
[0273.284] GetNearestColor (hdc=0x42010535, color=0x8080ff) returned 0x8080ff
[0273.284] GetNearestColor (hdc=0x42010535, color=0x7373e5) returned 0x7373e5
[0273.284] GetNearestColor (hdc=0x42010535, color=0xe5) returned 0xe5
[0273.284] GetNearestColor (hdc=0x42010535, color=0x0) returned 0x0
[0273.284] RestoreDC (hdc=0x42010535, nSavedDC=-1) returned 1
[0273.284] GdipReleaseDC (graphics=0x5d92c30, hdc=0x42010535) returned 0x0
[0273.284] IsAppThemed () returned 0x1
[0273.284] GetThemeAppProperties () returned 0x3
[0273.284] GetThemeAppProperties () returned 0x3
[0273.284] IsAppThemed () returned 0x1
[0273.285] GetThemeAppProperties () returned 0x3
[0273.285] GetThemeAppProperties () returned 0x3
[0273.285] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2385bd8 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0273.285] IsAppThemed () returned 0x1
[0273.285] GetThemeAppProperties () returned 0x3
[0273.285] GetThemeAppProperties () returned 0x3
[0273.285] IsAppThemed () returned 0x1
[0273.285] GetThemeAppProperties () returned 0x3
[0273.285] GetThemeAppProperties () returned 0x3
[0273.285] GetFocus () returned 0x202c6
[0273.285] IsAppThemed () returned 0x1
[0273.285] GetThemeAppProperties () returned 0x3
[0273.285] GetThemeAppProperties () returned 0x3
[0273.285] IsAppThemed () returned 0x1
[0273.285] GetThemeAppProperties () returned 0x3
[0273.285] GetThemeAppProperties () returned 0x3
[0273.285] IsThemePartDefined () returned 0x1
[0273.285] IsAppThemed () returned 0x1
[0273.285] GetThemeAppProperties () returned 0x3
[0273.286] GetThemeAppProperties () returned 0x3
[0273.286] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0273.286] IsAppThemed () returned 0x1
[0273.286] GetThemeAppProperties () returned 0x3
[0273.286] GetThemeAppProperties () returned 0x3
[0273.286] IsAppThemed () returned 0x1
[0273.286] GetThemeAppProperties () returned 0x3
[0273.286] GetThemeAppProperties () returned 0x3
[0273.286] IsThemePartDefined () returned 0x1
[0273.286] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0273.286] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0273.286] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0273.286] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0273.286] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0273.286] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0273.286] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0273.286] LocalFree (hMem=0x89eac0) returned 0x0
[0273.286] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0273.286] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0273.286] LocalFree (hMem=0x89ee08) returned 0x0
[0273.286] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0273.286] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0273.286] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0273.287] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0273.287] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0273.287] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0273.287] GetCurrentObject (hdc=0x42010535, type=0x1) returned 0xb00017
[0273.287] GetCurrentObject (hdc=0x42010535, type=0x2) returned 0x900010
[0273.287] GetCurrentObject (hdc=0x42010535, type=0x7) returned 0x1e0507b9
[0273.287] GetCurrentObject (hdc=0x42010535, type=0x6) returned 0x8a01c2
[0273.287] SaveDC (hdc=0x42010535) returned 1
[0273.287] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe204053e
[0273.287] GetClipRgn (hdc=0x42010535, hrgn=0xe204053e) returned 0
[0273.287] SelectClipRgn (hdc=0x42010535, hrgn=0xeb040798) returned 2
[0273.288] DeleteObject (ho=0xe204053e) returned 1
[0273.288] DeleteObject (ho=0xeb040798) returned 1
[0273.288] OffsetViewportOrgEx (in: hdc=0x42010535, x=0, y=0, lppt=0x2386288 | out: lppt=0x2386288) returned 1
[0273.288] DrawThemeParentBackground () returned 0x0
[0273.288] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0273.288] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0273.288] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0273.288] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0273.288] GetSystemMetrics (nIndex=42) returned 0
[0273.288] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0273.288] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0273.288] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0273.288] GetCurrentObject (hdc=0x42010535, type=0x1) returned 0xb00017
[0273.288] GetCurrentObject (hdc=0x42010535, type=0x2) returned 0x900010
[0273.288] GetCurrentObject (hdc=0x42010535, type=0x7) returned 0x1e0507b9
[0273.288] GetCurrentObject (hdc=0x42010535, type=0x6) returned 0x8a01c2
[0273.288] SaveDC (hdc=0x42010535) returned 2
[0273.289] GetNearestColor (hdc=0x42010535, color=0xff) returned 0xff
[0273.289] CreateSolidBrush (color=0xff) returned 0xe410078d
[0273.289] FillRect (hDC=0x42010535, lprc=0x53e128, hbr=0xe410078d) returned 1
[0273.289] DeleteObject (ho=0xe410078d) returned 1
[0273.289] RestoreDC (hdc=0x42010535, nSavedDC=-1) returned 1
[0273.289] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0273.289] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0273.289] GetSystemMetrics (nIndex=42) returned 0
[0273.289] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0273.289] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0273.289] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0273.289] GetCurrentObject (hdc=0x42010535, type=0x1) returned 0xb00017
[0273.289] GetCurrentObject (hdc=0x42010535, type=0x2) returned 0x900010
[0273.289] GetCurrentObject (hdc=0x42010535, type=0x7) returned 0x1e0507b9
[0273.289] GetCurrentObject (hdc=0x42010535, type=0x6) returned 0x8a01c2
[0273.289] SaveDC (hdc=0x42010535) returned 2
[0273.289] GetNearestColor (hdc=0x42010535, color=0xff) returned 0xff
[0273.289] CreateSolidBrush (color=0xff) returned 0xe510078d
[0273.290] FillRect (hDC=0x42010535, lprc=0x53e0c8, hbr=0xe510078d) returned 1
[0273.290] DeleteObject (ho=0xe510078d) returned 1
[0273.290] RestoreDC (hdc=0x42010535, nSavedDC=-1) returned 1
[0273.290] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0273.290] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0273.290] GetSystemMetrics (nIndex=42) returned 0
[0273.290] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0273.290] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0273.290] RestoreDC (hdc=0x42010535, nSavedDC=-1) returned 1
[0273.290] GdipReleaseDC (graphics=0x5d92c30, hdc=0x42010535) returned 0x0
[0273.290] IsAppThemed () returned 0x1
[0273.290] GetThemeAppProperties () returned 0x3
[0273.290] GetThemeAppProperties () returned 0x3
[0273.290] IsAppThemed () returned 0x1
[0273.290] GetThemeAppProperties () returned 0x3
[0273.290] GetThemeAppProperties () returned 0x3
[0273.290] IsThemePartDefined () returned 0x1
[0273.290] GdipCreateRegion (region=0x53e64c) returned 0x0
[0273.290] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0273.291] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0273.291] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0273.291] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0273.291] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0273.291] LocalFree (hMem=0x89ec80) returned 0x0
[0273.291] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0273.291] LocalFree (hMem=0x89eac0) returned 0x0
[0273.291] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0273.291] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0273.291] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0273.291] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0273.291] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0273.291] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0273.291] GetCurrentObject (hdc=0x42010535, type=0x1) returned 0xb00017
[0273.291] GetCurrentObject (hdc=0x42010535, type=0x2) returned 0x900010
[0273.291] GetCurrentObject (hdc=0x42010535, type=0x7) returned 0x1e0507b9
[0273.291] GetCurrentObject (hdc=0x42010535, type=0x6) returned 0x8a01c2
[0273.291] SaveDC (hdc=0x42010535) returned 1
[0273.291] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xec040798
[0273.291] GetClipRgn (hdc=0x42010535, hrgn=0xec040798) returned 0
[0273.291] SelectClipRgn (hdc=0x42010535, hrgn=0xe404053e) returned 2
[0273.292] DeleteObject (ho=0xec040798) returned 1
[0273.292] DeleteObject (ho=0xe404053e) returned 1
[0273.292] OffsetViewportOrgEx (in: hdc=0x42010535, x=0, y=0, lppt=0x2386aec | out: lppt=0x2386aec) returned 1
[0273.292] IsAppThemed () returned 0x1
[0273.292] GetThemeAppProperties () returned 0x3
[0273.292] GetThemeAppProperties () returned 0x3
[0273.292] DrawThemeBackground () returned 0x0
[0273.292] RestoreDC (hdc=0x42010535, nSavedDC=-1) returned 1
[0273.292] GdipReleaseDC (graphics=0x5d92c30, hdc=0x42010535) returned 0x0
[0273.292] GdipCreateRegion (region=0x53e650) returned 0x0
[0273.292] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0273.292] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0273.292] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0273.292] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0273.292] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0273.292] LocalFree (hMem=0x89eac0) returned 0x0
[0273.292] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0273.292] LocalFree (hMem=0x89ec80) returned 0x0
[0273.292] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0273.292] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0273.292] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0273.292] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0273.292] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0273.293] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0273.293] GetCurrentObject (hdc=0x42010535, type=0x1) returned 0xb00017
[0273.293] GetCurrentObject (hdc=0x42010535, type=0x2) returned 0x900010
[0273.293] GetCurrentObject (hdc=0x42010535, type=0x7) returned 0x1e0507b9
[0273.293] GetCurrentObject (hdc=0x42010535, type=0x6) returned 0x8a01c2
[0273.293] SaveDC (hdc=0x42010535) returned 1
[0273.293] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe504053e
[0273.293] GetClipRgn (hdc=0x42010535, hrgn=0xe504053e) returned 0
[0273.293] SelectClipRgn (hdc=0x42010535, hrgn=0xed040798) returned 2
[0273.293] DeleteObject (ho=0xe504053e) returned 1
[0273.293] DeleteObject (ho=0xed040798) returned 1
[0273.293] OffsetViewportOrgEx (in: hdc=0x42010535, x=0, y=0, lppt=0x2386dc0 | out: lppt=0x2386dc0) returned 1
[0273.293] IsAppThemed () returned 0x1
[0273.293] GetThemeAppProperties () returned 0x3
[0273.293] GetThemeAppProperties () returned 0x3
[0273.293] GetThemeBackgroundContentRect () returned 0x0
[0273.293] RestoreDC (hdc=0x42010535, nSavedDC=-1) returned 1
[0273.293] GdipReleaseDC (graphics=0x5d92c30, hdc=0x42010535) returned 0x0
[0273.293] IsAppThemed () returned 0x1
[0273.293] GetThemeAppProperties () returned 0x3
[0273.293] GetThemeAppProperties () returned 0x3
[0273.293] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0273.293] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0273.294] GetCurrentObject (hdc=0x42010535, type=0x1) returned 0xb00017
[0273.294] GetCurrentObject (hdc=0x42010535, type=0x2) returned 0x900010
[0273.294] GetCurrentObject (hdc=0x42010535, type=0x7) returned 0x1e0507b9
[0273.294] GetCurrentObject (hdc=0x42010535, type=0x6) returned 0x8a01c2
[0273.294] SaveDC (hdc=0x42010535) returned 1
[0273.294] GetTextAlign (hdc=0x42010535) returned 0x0
[0273.294] GetTextColor (hdc=0x42010535) returned 0x0
[0273.294] GetCurrentObject (hdc=0x42010535, type=0x6) returned 0x8a01c2
[0273.294] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0273.294] SelectObject (hdc=0x42010535, h=0x450a0799) returned 0x8a01c2
[0273.294] GetBkMode (hdc=0x42010535) returned 2
[0273.294] SetBkMode (hdc=0x42010535, mode=1) returned 2
[0273.294] DrawTextExW (in: hdc=0x42010535, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2387160 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0273.294] DrawTextExW (in: hdc=0x42010535, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2387160 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0273.295] RestoreDC (hdc=0x42010535, nSavedDC=-1) returned 1
[0273.295] GdipReleaseDC (graphics=0x5d92c30, hdc=0x42010535) returned 0x0
[0273.295] GetFocus () returned 0x202c6
[0273.295] IsAppThemed () returned 0x1
[0273.295] GetThemeAppProperties () returned 0x3
[0273.295] GetThemeAppProperties () returned 0x3
[0273.295] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0273.295] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x42010535, x1=0, y1=0, rop=0xcc0020) returned 1
[0273.295] GdipReleaseDC (graphics=0x5d92c30, hdc=0x42010535) returned 0x0
[0273.295] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0273.295] SelectObject (hdc=0x42010535, h=0x85000f) returned 0x1e0507b9
[0273.295] DeleteDC (hdc=0x42010535) returned 1
[0273.295] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0273.295] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0273.296] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.296] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.296] WaitMessage () returned 1
[0273.299] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.299] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.299] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.299] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.299] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.300] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.300] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.300] WaitMessage () returned 1
[0273.328] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.328] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.328] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.328] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.328] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.329] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.329] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.329] WaitMessage () returned 1
[0273.330] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.330] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.330] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.330] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.330] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.331] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.331] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.331] WaitMessage () returned 1
[0273.332] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.332] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.332] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.332] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.332] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.333] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.337] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.337] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.337] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.337] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.337] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.337] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.337] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.337] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.337] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.337] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.338] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.338] WaitMessage () returned 1
[0273.340] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.340] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.340] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.340] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.340] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.341] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.341] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.341] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.342] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.342] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.342] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.342] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.342] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.342] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.342] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.342] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.342] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.343] WaitMessage () returned 1
[0273.343] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.343] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.343] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.343] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.343] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.344] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.344] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.344] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.344] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.344] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.345] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.345] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.345] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.345] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.345] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.345] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.345] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.345] WaitMessage () returned 1
[0273.346] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.346] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.346] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.346] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.346] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.347] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.347] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.347] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.347] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.347] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.348] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.348] IsWindowUnicode (hWnd=0x102dc) returned 1
[0273.348] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.348] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.348] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.348] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.348] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.348] WaitMessage () returned 1
[0273.493] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.493] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.493] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.493] DispatchMessageA (lpMsg=0x53eef8) returned 0x7ea0
[0273.493] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.493] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.493] WaitMessage () returned 1
[0273.585] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.585] IsWindowUnicode (hWnd=0x202d0) returned 1
[0273.585] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0273.585] TranslateMessage (lpMsg=0x53eef8) returned 0
[0273.585] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0273.585] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.585] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0273.585] WaitMessage () returned 1
[0274.491] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0274.491] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0274.491] TranslateMessage (lpMsg=0x53eef8) returned 0
[0274.491] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0274.492] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0274.492] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0274.492] WaitMessage () returned 1
[0275.090] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0275.090] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a00239) returned 0x1
[0275.091] IsWindowUnicode (hWnd=0x202c6) returned 1
[0275.091] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0275.091] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a00239) returned 0x1
[0275.091] SetCursor (hCursor=0x10003) returned 0x10003
[0275.092] TranslateMessage (lpMsg=0x53eef8) returned 0
[0275.092] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0275.092] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0275.092] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0275.092] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0275.092] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0275.092] GetKeyState (nVirtKey=1) returned 0
[0275.092] GetKeyState (nVirtKey=2) returned 0
[0275.092] GetKeyState (nVirtKey=4) returned 0
[0275.092] GetKeyState (nVirtKey=5) returned 0
[0275.092] GetKeyState (nVirtKey=6) returned 0
[0275.092] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0275.093] IsWindowUnicode (hWnd=0x202c6) returned 1
[0275.093] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0275.093] TranslateMessage (lpMsg=0x53eef8) returned 0
[0275.093] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0275.093] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0275.093] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0275.093] CreateCompatibleDC (hdc=0x8b010786) returned 0x360107bf
[0275.093] SelectObject (hdc=0x360107bf, h=0x1e0507b9) returned 0x85000f
[0275.093] GdipCreateFromHDC (hdc=0x360107bf, graphics=0x53e958) returned 0x0
[0275.094] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0275.094] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0275.094] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0275.094] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.094] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0275.094] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0275.094] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0275.095] LocalFree (hMem=0x89eee8) returned 0x0
[0275.095] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.095] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0275.095] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.095] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0275.095] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0275.095] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb0f0dbd) returned 0x0
[0275.095] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.095] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0275.095] GetCurrentObject (hdc=0x360107bf, type=0x1) returned 0xb00017
[0275.095] GetCurrentObject (hdc=0x360107bf, type=0x2) returned 0x900010
[0275.096] GetCurrentObject (hdc=0x360107bf, type=0x7) returned 0x1e0507b9
[0275.096] GetCurrentObject (hdc=0x360107bf, type=0x6) returned 0x8a01c2
[0275.096] SaveDC (hdc=0x360107bf) returned 1
[0275.096] GetNearestColor (hdc=0x360107bf, color=0xff) returned 0xff
[0275.096] GetNearestColor (hdc=0x360107bf, color=0x55) returned 0x55
[0275.096] GetNearestColor (hdc=0x360107bf, color=0x0) returned 0x0
[0275.096] GetNearestColor (hdc=0x360107bf, color=0x55) returned 0x55
[0275.096] GetNearestColor (hdc=0x360107bf, color=0x0) returned 0x0
[0275.096] GetNearestColor (hdc=0x360107bf, color=0x8080ff) returned 0x8080ff
[0275.096] GetNearestColor (hdc=0x360107bf, color=0x7373e5) returned 0x7373e5
[0275.096] GetNearestColor (hdc=0x360107bf, color=0xe5) returned 0xe5
[0275.097] GetNearestColor (hdc=0x360107bf, color=0x0) returned 0x0
[0275.097] RestoreDC (hdc=0x360107bf, nSavedDC=-1) returned 1
[0275.097] GdipReleaseDC (graphics=0x5d92c30, hdc=0x360107bf) returned 0x0
[0275.097] IsAppThemed () returned 0x1
[0275.097] GetThemeAppProperties () returned 0x3
[0275.097] GetThemeAppProperties () returned 0x3
[0275.097] IsAppThemed () returned 0x1
[0275.097] GetThemeAppProperties () returned 0x3
[0275.097] GetThemeAppProperties () returned 0x3
[0275.097] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x2387af4 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0275.098] IsAppThemed () returned 0x1
[0275.098] GetThemeAppProperties () returned 0x3
[0275.098] GetThemeAppProperties () returned 0x3
[0275.098] IsAppThemed () returned 0x1
[0275.098] GetThemeAppProperties () returned 0x3
[0275.098] GetThemeAppProperties () returned 0x3
[0275.098] IsAppThemed () returned 0x1
[0275.098] GetThemeAppProperties () returned 0x3
[0275.098] GetThemeAppProperties () returned 0x3
[0275.098] IsAppThemed () returned 0x1
[0275.098] GetThemeAppProperties () returned 0x3
[0275.098] GetThemeAppProperties () returned 0x3
[0275.098] IsThemePartDefined () returned 0x1
[0275.098] IsAppThemed () returned 0x1
[0275.098] GetThemeAppProperties () returned 0x3
[0275.098] GetThemeAppProperties () returned 0x3
[0275.099] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0275.099] IsAppThemed () returned 0x1
[0275.099] GetThemeAppProperties () returned 0x3
[0275.099] GetThemeAppProperties () returned 0x3
[0275.099] IsAppThemed () returned 0x1
[0275.099] GetThemeAppProperties () returned 0x3
[0275.099] GetThemeAppProperties () returned 0x3
[0275.099] IsThemePartDefined () returned 0x1
[0275.099] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0275.099] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.099] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0275.099] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.099] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0275.099] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.099] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0275.099] LocalFree (hMem=0x89ea88) returned 0x0
[0275.099] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0275.099] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0275.100] LocalFree (hMem=0x89eee8) returned 0x0
[0275.100] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.100] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0275.100] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0275.100] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0275.100] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.100] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0275.100] GetCurrentObject (hdc=0x360107bf, type=0x1) returned 0xb00017
[0275.100] GetCurrentObject (hdc=0x360107bf, type=0x2) returned 0x900010
[0275.100] GetCurrentObject (hdc=0x360107bf, type=0x7) returned 0x1e0507b9
[0275.100] GetCurrentObject (hdc=0x360107bf, type=0x6) returned 0x8a01c2
[0275.100] SaveDC (hdc=0x360107bf) returned 1
[0275.100] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xee040798
[0275.100] GetClipRgn (hdc=0x360107bf, hrgn=0xee040798) returned 0
[0275.101] SelectClipRgn (hdc=0x360107bf, hrgn=0xe904053e) returned 2
[0275.101] DeleteObject (ho=0xee040798) returned 1
[0275.101] DeleteObject (ho=0xe904053e) returned 1
[0275.101] OffsetViewportOrgEx (in: hdc=0x360107bf, x=0, y=0, lppt=0x23881a4 | out: lppt=0x23881a4) returned 1
[0275.101] DrawThemeParentBackground () returned 0x0
[0275.101] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0275.101] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0275.101] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0275.101] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0275.101] GetSystemMetrics (nIndex=42) returned 0
[0275.101] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0275.101] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0275.102] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0275.102] GetCurrentObject (hdc=0x360107bf, type=0x1) returned 0xb00017
[0275.102] GetCurrentObject (hdc=0x360107bf, type=0x2) returned 0x900010
[0275.102] GetCurrentObject (hdc=0x360107bf, type=0x7) returned 0x1e0507b9
[0275.102] GetCurrentObject (hdc=0x360107bf, type=0x6) returned 0x8a01c2
[0275.102] SaveDC (hdc=0x360107bf) returned 2
[0275.102] GetNearestColor (hdc=0x360107bf, color=0xff) returned 0xff
[0275.102] CreateSolidBrush (color=0xff) returned 0xe610078d
[0275.102] FillRect (hDC=0x360107bf, lprc=0x53e120, hbr=0xe610078d) returned 1
[0275.102] DeleteObject (ho=0xe610078d) returned 1
[0275.102] RestoreDC (hdc=0x360107bf, nSavedDC=-1) returned 1
[0275.103] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0275.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0275.103] GetSystemMetrics (nIndex=42) returned 0
[0275.103] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0275.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0275.103] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0275.103] GetCurrentObject (hdc=0x360107bf, type=0x1) returned 0xb00017
[0275.103] GetCurrentObject (hdc=0x360107bf, type=0x2) returned 0x900010
[0275.103] GetCurrentObject (hdc=0x360107bf, type=0x7) returned 0x1e0507b9
[0275.103] GetCurrentObject (hdc=0x360107bf, type=0x6) returned 0x8a01c2
[0275.103] SaveDC (hdc=0x360107bf) returned 2
[0275.103] GetNearestColor (hdc=0x360107bf, color=0xff) returned 0xff
[0275.103] CreateSolidBrush (color=0xff) returned 0xe710078d
[0275.104] FillRect (hDC=0x360107bf, lprc=0x53e0c0, hbr=0xe710078d) returned 1
[0275.104] DeleteObject (ho=0xe710078d) returned 1
[0275.104] RestoreDC (hdc=0x360107bf, nSavedDC=-1) returned 1
[0275.104] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0275.104] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0275.104] GetSystemMetrics (nIndex=42) returned 0
[0275.104] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0275.104] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0275.104] RestoreDC (hdc=0x360107bf, nSavedDC=-1) returned 1
[0275.104] GdipReleaseDC (graphics=0x5d92c30, hdc=0x360107bf) returned 0x0
[0275.104] IsAppThemed () returned 0x1
[0275.105] GetThemeAppProperties () returned 0x3
[0275.105] GetThemeAppProperties () returned 0x3
[0275.105] IsAppThemed () returned 0x1
[0275.105] GetThemeAppProperties () returned 0x3
[0275.105] GetThemeAppProperties () returned 0x3
[0275.105] IsThemePartDefined () returned 0x1
[0275.105] GdipCreateRegion (region=0x53e640) returned 0x0
[0275.105] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.105] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0275.105] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.105] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0275.105] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0275.105] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0275.105] LocalFree (hMem=0x89ec80) returned 0x0
[0275.105] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0275.105] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0275.105] LocalFree (hMem=0x89eee8) returned 0x0
[0275.105] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.106] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0275.106] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0275.106] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0275.106] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.106] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0275.106] GetCurrentObject (hdc=0x360107bf, type=0x1) returned 0xb00017
[0275.106] GetCurrentObject (hdc=0x360107bf, type=0x2) returned 0x900010
[0275.106] GetCurrentObject (hdc=0x360107bf, type=0x7) returned 0x1e0507b9
[0275.106] GetCurrentObject (hdc=0x360107bf, type=0x6) returned 0x8a01c2
[0275.106] SaveDC (hdc=0x360107bf) returned 1
[0275.106] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xea04053e
[0275.106] GetClipRgn (hdc=0x360107bf, hrgn=0xea04053e) returned 0
[0275.106] SelectClipRgn (hdc=0x360107bf, hrgn=0xf0040798) returned 2
[0275.106] DeleteObject (ho=0xea04053e) returned 1
[0275.106] DeleteObject (ho=0xf0040798) returned 1
[0275.107] OffsetViewportOrgEx (in: hdc=0x360107bf, x=0, y=0, lppt=0x2388a08 | out: lppt=0x2388a08) returned 1
[0275.107] IsAppThemed () returned 0x1
[0275.107] GetThemeAppProperties () returned 0x3
[0275.107] GetThemeAppProperties () returned 0x3
[0275.107] DrawThemeBackground () returned 0x0
[0275.107] RestoreDC (hdc=0x360107bf, nSavedDC=-1) returned 1
[0275.107] GdipReleaseDC (graphics=0x5d92c30, hdc=0x360107bf) returned 0x0
[0275.107] GdipCreateRegion (region=0x53e644) returned 0x0
[0275.107] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.107] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0275.107] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.107] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0275.107] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0275.108] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0275.108] LocalFree (hMem=0x89eee8) returned 0x0
[0275.108] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0275.108] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0275.108] LocalFree (hMem=0x89ee08) returned 0x0
[0275.108] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.108] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0275.108] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0275.108] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0275.108] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.108] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0275.108] GetCurrentObject (hdc=0x360107bf, type=0x1) returned 0xb00017
[0275.108] GetCurrentObject (hdc=0x360107bf, type=0x2) returned 0x900010
[0275.108] GetCurrentObject (hdc=0x360107bf, type=0x7) returned 0x1e0507b9
[0275.108] GetCurrentObject (hdc=0x360107bf, type=0x6) returned 0x8a01c2
[0275.108] SaveDC (hdc=0x360107bf) returned 1
[0275.109] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf1040798
[0275.109] GetClipRgn (hdc=0x360107bf, hrgn=0xf1040798) returned 0
[0275.109] SelectClipRgn (hdc=0x360107bf, hrgn=0xeb04053e) returned 2
[0275.109] DeleteObject (ho=0xf1040798) returned 1
[0275.109] DeleteObject (ho=0xeb04053e) returned 1
[0275.109] OffsetViewportOrgEx (in: hdc=0x360107bf, x=0, y=0, lppt=0x2388cdc | out: lppt=0x2388cdc) returned 1
[0275.109] IsAppThemed () returned 0x1
[0275.109] GetThemeAppProperties () returned 0x3
[0275.109] GetThemeAppProperties () returned 0x3
[0275.109] GetThemeBackgroundContentRect () returned 0x0
[0275.109] RestoreDC (hdc=0x360107bf, nSavedDC=-1) returned 1
[0275.109] GdipReleaseDC (graphics=0x5d92c30, hdc=0x360107bf) returned 0x0
[0275.109] IsAppThemed () returned 0x1
[0275.109] GetThemeAppProperties () returned 0x3
[0275.109] GetThemeAppProperties () returned 0x3
[0275.109] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0275.109] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0275.110] GetCurrentObject (hdc=0x360107bf, type=0x1) returned 0xb00017
[0275.110] GetCurrentObject (hdc=0x360107bf, type=0x2) returned 0x900010
[0275.110] GetCurrentObject (hdc=0x360107bf, type=0x7) returned 0x1e0507b9
[0275.110] GetCurrentObject (hdc=0x360107bf, type=0x6) returned 0x8a01c2
[0275.110] SaveDC (hdc=0x360107bf) returned 1
[0275.110] GetTextAlign (hdc=0x360107bf) returned 0x0
[0275.110] GetTextColor (hdc=0x360107bf) returned 0x0
[0275.110] GetCurrentObject (hdc=0x360107bf, type=0x6) returned 0x8a01c2
[0275.110] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0275.110] SelectObject (hdc=0x360107bf, h=0x450a0799) returned 0x8a01c2
[0275.110] GetBkMode (hdc=0x360107bf) returned 2
[0275.110] SetBkMode (hdc=0x360107bf, mode=1) returned 2
[0275.111] DrawTextExW (in: hdc=0x360107bf, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x238907c | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0275.111] DrawTextExW (in: hdc=0x360107bf, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x238907c | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0275.111] RestoreDC (hdc=0x360107bf, nSavedDC=-1) returned 1
[0275.111] GdipReleaseDC (graphics=0x5d92c30, hdc=0x360107bf) returned 0x0
[0275.111] GetFocus () returned 0x202c6
[0275.111] IsAppThemed () returned 0x1
[0275.112] GetThemeAppProperties () returned 0x3
[0275.112] GetThemeAppProperties () returned 0x3
[0275.112] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0275.112] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x360107bf, x1=0, y1=0, rop=0xcc0020) returned 1
[0275.112] GdipReleaseDC (graphics=0x5d92c30, hdc=0x360107bf) returned 0x0
[0275.113] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0275.113] SelectObject (hdc=0x360107bf, h=0x85000f) returned 0x1e0507b9
[0275.113] DeleteDC (hdc=0x360107bf) returned 1
[0275.113] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0275.113] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0275.113] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0275.113] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0275.113] WaitMessage () returned 1
[0275.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0275.194] IsWindowUnicode (hWnd=0x202c6) returned 1
[0275.194] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0275.194] TranslateMessage (lpMsg=0x53eef8) returned 0
[0275.194] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0275.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0275.194] IsWindowUnicode (hWnd=0x202c6) returned 1
[0275.194] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0275.194] TranslateMessage (lpMsg=0x53eef8) returned 0
[0275.194] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0275.194] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x180049) returned 0x0
[0275.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0275.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0275.194] WaitMessage () returned 1
[0275.288] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0275.289] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a00239) returned 0x1
[0275.289] IsWindowUnicode (hWnd=0x202c6) returned 1
[0275.289] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0275.289] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a00239) returned 0x1
[0275.289] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0275.289] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13301e3) returned 0x0
[0275.289] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0275.289] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0275.290] SetCursor (hCursor=0x10003) returned 0x10003
[0275.290] TranslateMessage (lpMsg=0x53eef8) returned 0
[0275.290] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0275.290] GetKeyState (nVirtKey=1) returned -127
[0275.290] GetKeyState (nVirtKey=2) returned 0
[0275.290] GetKeyState (nVirtKey=4) returned 0
[0275.290] GetKeyState (nVirtKey=5) returned 0
[0275.290] GetKeyState (nVirtKey=6) returned 0
[0275.290] IsWindowVisible (hWnd=0x202c6) returned 1
[0275.290] IsWindowEnabled (hWnd=0x202c6) returned 1
[0275.290] SetFocus (hWnd=0x202c6) returned 0x202c6
[0275.290] GetFocus () returned 0x202c6
[0275.290] GetFocus () returned 0x202c6
[0275.290] GetFocus () returned 0x202c6
[0275.290] GetKeyState (nVirtKey=1) returned -127
[0275.290] GetKeyState (nVirtKey=2) returned 0
[0275.290] GetKeyState (nVirtKey=4) returned 0
[0275.290] GetKeyState (nVirtKey=5) returned 0
[0275.290] GetKeyState (nVirtKey=6) returned 0
[0275.291] GetCapture () returned 0x0
[0275.291] SetCapture (hWnd=0x202c6) returned 0x0
[0275.291] GetKeyState (nVirtKey=1) returned -127
[0275.291] GetKeyState (nVirtKey=2) returned 0
[0275.291] GetKeyState (nVirtKey=4) returned 0
[0275.291] GetKeyState (nVirtKey=5) returned 0
[0275.291] GetKeyState (nVirtKey=6) returned 0
[0275.291] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0275.291] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0275.291] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0275.291] IsWindowUnicode (hWnd=0x202c6) returned 1
[0275.291] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0275.291] TranslateMessage (lpMsg=0x53eef8) returned 0
[0275.291] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0275.291] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2389200, cPoints=0x1 | out: lpPoints=0x2389200) returned 25690608
[0275.291] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0275.291] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0275.291] UpdateWindow (hWnd=0x202c6) returned 1
[0275.292] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x8b010786
[0275.292] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0275.292] CreateCompatibleDC (hdc=0x8b010786) returned 0x370107bf
[0275.292] SelectObject (hdc=0x370107bf, h=0x1e0507b9) returned 0x85000f
[0275.292] GdipCreateFromHDC (hdc=0x370107bf, graphics=0x53e5f0) returned 0x0
[0275.292] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0275.292] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0275.292] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0275.292] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.292] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0275.292] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0275.292] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0275.293] LocalFree (hMem=0x89eee8) returned 0x0
[0275.293] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.293] GdipCreateRegion (region=0x53e638) returned 0x0
[0275.293] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.293] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0275.293] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0275.293] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb0d0dbd) returned 0x0
[0275.293] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.293] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0275.293] GetCurrentObject (hdc=0x370107bf, type=0x1) returned 0xb00017
[0275.293] GetCurrentObject (hdc=0x370107bf, type=0x2) returned 0x900010
[0275.293] GetCurrentObject (hdc=0x370107bf, type=0x7) returned 0x1e0507b9
[0275.293] GetCurrentObject (hdc=0x370107bf, type=0x6) returned 0x8a01c2
[0275.293] SaveDC (hdc=0x370107bf) returned 1
[0275.293] GetNearestColor (hdc=0x370107bf, color=0xff) returned 0xff
[0275.293] GetNearestColor (hdc=0x370107bf, color=0x55) returned 0x55
[0275.293] GetNearestColor (hdc=0x370107bf, color=0x0) returned 0x0
[0275.294] GetNearestColor (hdc=0x370107bf, color=0x55) returned 0x55
[0275.294] GetNearestColor (hdc=0x370107bf, color=0x0) returned 0x0
[0275.294] GetNearestColor (hdc=0x370107bf, color=0x8080ff) returned 0x8080ff
[0275.294] GetNearestColor (hdc=0x370107bf, color=0x7373e5) returned 0x7373e5
[0275.294] GetNearestColor (hdc=0x370107bf, color=0xe5) returned 0xe5
[0275.294] GetNearestColor (hdc=0x370107bf, color=0x0) returned 0x0
[0275.294] RestoreDC (hdc=0x370107bf, nSavedDC=-1) returned 1
[0275.294] GdipReleaseDC (graphics=0x5d92c30, hdc=0x370107bf) returned 0x0
[0275.294] IsAppThemed () returned 0x1
[0275.294] GetThemeAppProperties () returned 0x3
[0275.294] GetThemeAppProperties () returned 0x3
[0275.294] IsAppThemed () returned 0x1
[0275.294] GetThemeAppProperties () returned 0x3
[0275.294] GetThemeAppProperties () returned 0x3
[0275.294] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x238991c | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0275.295] IsAppThemed () returned 0x1
[0275.295] GetThemeAppProperties () returned 0x3
[0275.295] GetThemeAppProperties () returned 0x3
[0275.295] IsAppThemed () returned 0x1
[0275.295] GetThemeAppProperties () returned 0x3
[0275.295] GetThemeAppProperties () returned 0x3
[0275.295] IsAppThemed () returned 0x1
[0275.295] GetThemeAppProperties () returned 0x3
[0275.295] GetThemeAppProperties () returned 0x3
[0275.295] IsAppThemed () returned 0x1
[0275.295] GetThemeAppProperties () returned 0x3
[0275.295] GetThemeAppProperties () returned 0x3
[0275.295] IsThemePartDefined () returned 0x1
[0275.295] IsAppThemed () returned 0x1
[0275.295] GetThemeAppProperties () returned 0x3
[0275.295] GetThemeAppProperties () returned 0x3
[0275.295] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0275.295] IsAppThemed () returned 0x1
[0275.295] GetThemeAppProperties () returned 0x3
[0275.295] GetThemeAppProperties () returned 0x3
[0275.295] IsAppThemed () returned 0x1
[0275.296] GetThemeAppProperties () returned 0x3
[0275.296] GetThemeAppProperties () returned 0x3
[0275.296] IsThemePartDefined () returned 0x1
[0275.296] GdipCreateRegion (region=0x53e354) returned 0x0
[0275.296] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.296] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0275.296] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.296] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0275.296] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0275.296] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0275.296] LocalFree (hMem=0x89eee8) returned 0x0
[0275.296] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0275.296] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0275.296] LocalFree (hMem=0x89ee08) returned 0x0
[0275.296] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.296] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0275.296] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0275.296] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0275.297] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.297] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0275.297] GetCurrentObject (hdc=0x370107bf, type=0x1) returned 0xb00017
[0275.297] GetCurrentObject (hdc=0x370107bf, type=0x2) returned 0x900010
[0275.297] GetCurrentObject (hdc=0x370107bf, type=0x7) returned 0x1e0507b9
[0275.297] GetCurrentObject (hdc=0x370107bf, type=0x6) returned 0x8a01c2
[0275.297] SaveDC (hdc=0x370107bf) returned 1
[0275.297] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xec04053e
[0275.297] GetClipRgn (hdc=0x370107bf, hrgn=0xec04053e) returned 0
[0275.297] SelectClipRgn (hdc=0x370107bf, hrgn=0xf5040798) returned 2
[0275.297] DeleteObject (ho=0xec04053e) returned 1
[0275.297] DeleteObject (ho=0xf5040798) returned 1
[0275.297] OffsetViewportOrgEx (in: hdc=0x370107bf, x=0, y=0, lppt=0x2389fcc | out: lppt=0x2389fcc) returned 1
[0275.297] DrawThemeParentBackground () returned 0x0
[0275.297] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0275.298] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0275.298] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0275.298] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0275.298] GetSystemMetrics (nIndex=42) returned 0
[0275.298] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0275.298] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0275.298] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0275.298] GetCurrentObject (hdc=0x370107bf, type=0x1) returned 0xb00017
[0275.298] GetCurrentObject (hdc=0x370107bf, type=0x2) returned 0x900010
[0275.298] GetCurrentObject (hdc=0x370107bf, type=0x7) returned 0x1e0507b9
[0275.298] GetCurrentObject (hdc=0x370107bf, type=0x6) returned 0x8a01c2
[0275.298] SaveDC (hdc=0x370107bf) returned 2
[0275.298] GetNearestColor (hdc=0x370107bf, color=0xff) returned 0xff
[0275.298] CreateSolidBrush (color=0xff) returned 0xe810078d
[0275.298] FillRect (hDC=0x370107bf, lprc=0x53ddb8, hbr=0xe810078d) returned 1
[0275.298] DeleteObject (ho=0xe810078d) returned 1
[0275.298] RestoreDC (hdc=0x370107bf, nSavedDC=-1) returned 1
[0275.298] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0275.298] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0275.299] GetSystemMetrics (nIndex=42) returned 0
[0275.299] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0275.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0275.299] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0275.299] GetCurrentObject (hdc=0x370107bf, type=0x1) returned 0xb00017
[0275.299] GetCurrentObject (hdc=0x370107bf, type=0x2) returned 0x900010
[0275.299] GetCurrentObject (hdc=0x370107bf, type=0x7) returned 0x1e0507b9
[0275.299] GetCurrentObject (hdc=0x370107bf, type=0x6) returned 0x8a01c2
[0275.299] SaveDC (hdc=0x370107bf) returned 2
[0275.299] GetNearestColor (hdc=0x370107bf, color=0xff) returned 0xff
[0275.299] CreateSolidBrush (color=0xff) returned 0xe910078d
[0275.299] FillRect (hDC=0x370107bf, lprc=0x53dd58, hbr=0xe910078d) returned 1
[0275.299] DeleteObject (ho=0xe910078d) returned 1
[0275.299] RestoreDC (hdc=0x370107bf, nSavedDC=-1) returned 1
[0275.299] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0275.299] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0275.300] GetSystemMetrics (nIndex=42) returned 0
[0275.300] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0275.300] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0275.300] RestoreDC (hdc=0x370107bf, nSavedDC=-1) returned 1
[0275.300] GdipReleaseDC (graphics=0x5d92c30, hdc=0x370107bf) returned 0x0
[0275.300] IsAppThemed () returned 0x1
[0275.300] GetThemeAppProperties () returned 0x3
[0275.300] GetThemeAppProperties () returned 0x3
[0275.300] IsAppThemed () returned 0x1
[0275.300] GetThemeAppProperties () returned 0x3
[0275.300] GetThemeAppProperties () returned 0x3
[0275.300] IsThemePartDefined () returned 0x1
[0275.300] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0275.300] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.300] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0275.300] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.301] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0275.301] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0275.301] LocalFree (hMem=0x89ec80) returned 0x0
[0275.301] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0275.301] LocalFree (hMem=0x89ee08) returned 0x0
[0275.301] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.301] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0275.301] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0275.301] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0275.301] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.301] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0275.301] GetCurrentObject (hdc=0x370107bf, type=0x1) returned 0xb00017
[0275.301] GetCurrentObject (hdc=0x370107bf, type=0x2) returned 0x900010
[0275.301] GetCurrentObject (hdc=0x370107bf, type=0x7) returned 0x1e0507b9
[0275.301] GetCurrentObject (hdc=0x370107bf, type=0x6) returned 0x8a01c2
[0275.301] SaveDC (hdc=0x370107bf) returned 1
[0275.302] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf6040798
[0275.302] GetClipRgn (hdc=0x370107bf, hrgn=0xf6040798) returned 0
[0275.302] SelectClipRgn (hdc=0x370107bf, hrgn=0xee04053e) returned 2
[0275.302] DeleteObject (ho=0xf6040798) returned 1
[0275.302] DeleteObject (ho=0xee04053e) returned 1
[0275.302] OffsetViewportOrgEx (in: hdc=0x370107bf, x=0, y=0, lppt=0x238a830 | out: lppt=0x238a830) returned 1
[0275.302] IsAppThemed () returned 0x1
[0275.302] GetThemeAppProperties () returned 0x3
[0275.302] GetThemeAppProperties () returned 0x3
[0275.302] DrawThemeBackground () returned 0x0
[0275.302] RestoreDC (hdc=0x370107bf, nSavedDC=-1) returned 1
[0275.302] GdipReleaseDC (graphics=0x5d92c30, hdc=0x370107bf) returned 0x0
[0275.303] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0275.303] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.303] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0275.303] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.303] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0275.303] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0275.304] LocalFree (hMem=0x89ea88) returned 0x0
[0275.304] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0275.304] LocalFree (hMem=0x89ec80) returned 0x0
[0275.304] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.304] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0275.304] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0275.304] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0275.304] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.304] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0275.304] GetCurrentObject (hdc=0x370107bf, type=0x1) returned 0xb00017
[0275.304] GetCurrentObject (hdc=0x370107bf, type=0x2) returned 0x900010
[0275.304] GetCurrentObject (hdc=0x370107bf, type=0x7) returned 0x1e0507b9
[0275.304] GetCurrentObject (hdc=0x370107bf, type=0x6) returned 0x8a01c2
[0275.304] SaveDC (hdc=0x370107bf) returned 1
[0275.304] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xef04053e
[0275.305] GetClipRgn (hdc=0x370107bf, hrgn=0xef04053e) returned 0
[0275.305] SelectClipRgn (hdc=0x370107bf, hrgn=0xf7040798) returned 2
[0275.305] DeleteObject (ho=0xef04053e) returned 1
[0275.305] DeleteObject (ho=0xf7040798) returned 1
[0275.305] OffsetViewportOrgEx (in: hdc=0x370107bf, x=0, y=0, lppt=0x238ab04 | out: lppt=0x238ab04) returned 1
[0275.305] IsAppThemed () returned 0x1
[0275.305] GetThemeAppProperties () returned 0x3
[0275.305] GetThemeAppProperties () returned 0x3
[0275.305] GetThemeBackgroundContentRect () returned 0x0
[0275.305] RestoreDC (hdc=0x370107bf, nSavedDC=-1) returned 1
[0275.305] GdipReleaseDC (graphics=0x5d92c30, hdc=0x370107bf) returned 0x0
[0275.305] IsAppThemed () returned 0x1
[0275.305] GetThemeAppProperties () returned 0x3
[0275.305] GetThemeAppProperties () returned 0x3
[0275.305] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0275.305] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0275.305] GetCurrentObject (hdc=0x370107bf, type=0x1) returned 0xb00017
[0275.306] GetCurrentObject (hdc=0x370107bf, type=0x2) returned 0x900010
[0275.306] GetCurrentObject (hdc=0x370107bf, type=0x7) returned 0x1e0507b9
[0275.306] GetCurrentObject (hdc=0x370107bf, type=0x6) returned 0x8a01c2
[0275.306] SaveDC (hdc=0x370107bf) returned 1
[0275.306] GetTextAlign (hdc=0x370107bf) returned 0x0
[0275.306] GetTextColor (hdc=0x370107bf) returned 0x0
[0275.306] GetCurrentObject (hdc=0x370107bf, type=0x6) returned 0x8a01c2
[0275.306] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0275.306] SelectObject (hdc=0x370107bf, h=0x450a0799) returned 0x8a01c2
[0275.306] GetBkMode (hdc=0x370107bf) returned 2
[0275.306] SetBkMode (hdc=0x370107bf, mode=1) returned 2
[0275.307] DrawTextExW (in: hdc=0x370107bf, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x238aea4 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0275.307] DrawTextExW (in: hdc=0x370107bf, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x238aea4 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0275.307] RestoreDC (hdc=0x370107bf, nSavedDC=-1) returned 1
[0275.307] GdipReleaseDC (graphics=0x5d92c30, hdc=0x370107bf) returned 0x0
[0275.307] GetFocus () returned 0x202c6
[0275.308] IsAppThemed () returned 0x1
[0275.308] GetThemeAppProperties () returned 0x3
[0275.308] GetThemeAppProperties () returned 0x3
[0275.308] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0275.308] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x370107bf, x1=0, y1=0, rop=0xcc0020) returned 1
[0275.308] GdipReleaseDC (graphics=0x5d92c30, hdc=0x370107bf) returned 0x0
[0275.308] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0275.308] SelectObject (hdc=0x370107bf, h=0x85000f) returned 0x1e0507b9
[0275.308] DeleteDC (hdc=0x370107bf) returned 1
[0275.308] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0275.309] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0275.309] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x238afa0, cPoints=0x1 | out: lpPoints=0x238afa0) returned 25690608
[0275.309] WindowFromPoint (Point=0x239) returned 0x202c6
[0275.309] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a00239) returned 0x1
[0275.309] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0275.309] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0275.311] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.311] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0275.312] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.312] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0275.313] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.313] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0275.313] GetDC (hWnd=0x0) returned 0xf0105ee
[0275.313] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e888) returned 0x0
[0275.313] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0275.313] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0275.314] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0275.314] GetSystemMetrics (nIndex=5) returned 1
[0275.314] GetSystemMetrics (nIndex=6) returned 1
[0275.314] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.314] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0275.315] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.315] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0275.396] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.397] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0275.397] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.397] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0275.398] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.398] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0275.398] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.399] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0275.399] GetSystemMetrics (nIndex=5) returned 1
[0275.399] GetSystemMetrics (nIndex=6) returned 1
[0275.399] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.399] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0275.399] GetSystemMetrics (nIndex=5) returned 1
[0275.399] GetSystemMetrics (nIndex=6) returned 1
[0275.400] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.400] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0275.400] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.400] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0275.401] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.401] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0275.401] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.401] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0275.401] GetSystemMetrics (nIndex=59) returned 1460
[0275.402] GetSystemMetrics (nIndex=60) returned 920
[0275.402] GetSystemMetrics (nIndex=34) returned 136
[0275.402] GetSystemMetrics (nIndex=35) returned 39
[0275.402] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.402] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0275.402] GetCurrentThreadId () returned 0x11d0
[0275.402] GetCurrentThreadId () returned 0x11d0
[0275.403] GetCurrentThreadId () returned 0x11d0
[0275.403] GetCurrentThreadId () returned 0x11d0
[0275.403] GetCurrentThreadId () returned 0x11d0
[0275.403] GetCurrentThreadId () returned 0x11d0
[0275.403] GetCurrentThreadId () returned 0x11d0
[0275.403] GetCurrentThreadId () returned 0x11d0
[0275.403] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.403] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0275.403] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0275.404] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0275.404] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.404] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0275.405] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.405] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0275.405] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1a00ea
[0275.422] SetWindowLongW (hWnd=0x1a00ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0275.423] GetWindowLongW (hWnd=0x1a00ea, nIndex=-4) returned 1950089536
[0275.423] SetWindowLongW (hWnd=0x1a00ea, nIndex=-4, dwNewLong=79649494) returned 1950089536
[0275.423] GetWindowLongW (hWnd=0x1a00ea, nIndex=-4) returned 79649494
[0275.423] GetWindowLongW (hWnd=0x1a00ea, nIndex=-16) returned 113311744
[0275.424] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a00ea, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0275.424] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a00ea, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0275.425] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a00ea, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0275.425] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a00ea, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0275.425] GetClientRect (in: hWnd=0x1a00ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0275.425] GetWindowRect (in: hWnd=0x1a00ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0275.426] SetWindowTextW (hWnd=0x1a00ea, lpString="WindowsFormsParkingWindow") returned 1
[0275.426] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a00ea, Msg=0xc, wParam=0x0, lParam=0x2382eec) returned 0x1
[0275.426] GetParent (hWnd=0x1a00ea) returned 0x0
[0275.427] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0275.427] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1a00ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x13004e
[0275.428] SetWindowLongW (hWnd=0x13004e, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0275.428] GetWindowLongW (hWnd=0x13004e, nIndex=-4) returned 1868147648
[0275.428] SetWindowLongW (hWnd=0x13004e, nIndex=-4, dwNewLong=79649614) returned 1868147648
[0275.428] GetWindowLongW (hWnd=0x13004e, nIndex=-4) returned 79649614
[0275.428] GetWindowLongW (hWnd=0x13004e, nIndex=-16) returned 1174405133
[0275.428] GetWindowLongW (hWnd=0x13004e, nIndex=-12) returned 0
[0275.428] SetWindowLongW (hWnd=0x13004e, nIndex=-12, dwNewLong=1245262) returned 0
[0275.429] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0275.429] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0275.430] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0275.430] GetClientRect (in: hWnd=0x13004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0275.430] GetWindowRect (in: hWnd=0x13004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0275.431] GetParent (hWnd=0x13004e) returned 0x1a00ea
[0275.431] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1a00ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0275.431] SetWindowTextW (hWnd=0x13004e, lpString="Enter password: ") returned 1
[0275.431] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0275.432] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0275.432] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0275.432] GetClientRect (in: hWnd=0x13004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0275.432] GetWindowRect (in: hWnd=0x13004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0275.432] GetParent (hWnd=0x13004e) returned 0x1a00ea
[0275.432] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1a00ea, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0275.432] SendMessageW (hWnd=0x13004e, Msg=0x2210, wParam=0x4e0001, lParam=0x13004e) returned 0x0
[0275.432] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x2210, wParam=0x4e0001, lParam=0x13004e) returned 0x0
[0275.433] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0275.433] GetParent (hWnd=0x13004e) returned 0x1a00ea
[0275.433] GdipCreateFromHWND (hwnd=0x13004e, graphics=0x53e994) returned 0x0
[0275.433] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0275.433] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0275.433] GetProcessWindowStation () returned 0x13c
[0275.434] GetCapture () returned 0x202c6
[0275.434] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0275.434] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0275.434] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0275.434] ReleaseCapture () returned 1
[0275.434] GetActiveWindow () returned 0x70036
[0275.434] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0275.435] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.435] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0275.435] GetCursorPos (in: lpPoint=0x2397d50 | out: lpPoint=0x2397d50*(x=569, y=416)) returned 1
[0275.435] MonitorFromPoint (pt=0x239, dwFlags=0x1a0) returned 0x10001
[0275.435] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0275.435] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x3a0107bf
[0275.436] GetDeviceCaps (hdc=0x3a0107bf, index=12) returned 32
[0275.436] GetDeviceCaps (hdc=0x3a0107bf, index=14) returned 1
[0275.436] DeleteDC (hdc=0x3a0107bf) returned 1
[0275.436] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0275.436] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0275.436] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x34013e
[0275.437] SetWindowLongW (hWnd=0x34013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0275.437] GetWindowLongW (hWnd=0x34013e, nIndex=-4) returned 1950089536
[0275.437] SetWindowLongW (hWnd=0x34013e, nIndex=-4, dwNewLong=79646278) returned 1950089536
[0275.437] GetWindowLongW (hWnd=0x34013e, nIndex=-4) returned 79646278
[0275.438] GetWindowLongW (hWnd=0x34013e, nIndex=-16) returned 113770496
[0275.439] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0275.440] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0275.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0275.441] GetClientRect (in: hWnd=0x34013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0275.441] GetWindowRect (in: hWnd=0x34013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0275.441] SetWindowTextW (hWnd=0x34013e, lpString="Ransomware") returned 1
[0275.441] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xc, wParam=0x0, lParam=0x238b068) returned 0x1
[0275.442] GetStartupInfoW (in: lpStartupInfo=0x239808c | out: lpStartupInfo=0x239808c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0275.444] GetParent (hWnd=0x34013e) returned 0x0
[0275.444] SetWindowLongW (hWnd=0x34013e, nIndex=-8, dwNewLong=0) returned 0
[0275.446] SendMessageW (hWnd=0x34013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0275.446] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0275.446] SendMessageW (hWnd=0x34013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0275.446] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0275.446] GetSystemMenu (hWnd=0x34013e, bRevert=0) returned 0x280217
[0275.447] GetWindowPlacement (in: hWnd=0x34013e, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0275.447] EnableMenuItem (hMenu=0x280217, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0275.447] EnableMenuItem (hMenu=0x280217, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0275.447] EnableMenuItem (hMenu=0x280217, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0275.447] EnableMenuItem (hMenu=0x280217, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0275.447] EnableMenuItem (hMenu=0x280217, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0275.447] GetClientRect (in: hWnd=0x34013e, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0275.447] GetClientRect (in: hWnd=0x34013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0275.447] GetWindowRect (in: hWnd=0x34013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0275.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.448] GetWindowLongW (hWnd=0x34013e, nIndex=-16) returned 113770496
[0275.448] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.448] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.448] GetSystemMetrics (nIndex=42) returned 0
[0275.448] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.448] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0275.448] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.448] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.449] GetSystemMetrics (nIndex=42) returned 0
[0275.449] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.449] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0275.449] GetCursorPos (in: lpPoint=0x2398200 | out: lpPoint=0x2398200*(x=569, y=416)) returned 1
[0275.449] MonitorFromPoint (pt=0x239, dwFlags=0x1a0) returned 0x10001
[0275.449] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0275.449] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x3e0107bf
[0275.449] GetDeviceCaps (hdc=0x3e0107bf, index=12) returned 32
[0275.449] GetDeviceCaps (hdc=0x3e0107bf, index=14) returned 1
[0275.450] DeleteDC (hdc=0x3e0107bf) returned 1
[0275.450] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0275.450] GetWindowLongW (hWnd=0x34013e, nIndex=-16) returned 113770496
[0275.450] GetWindowLongW (hWnd=0x34013e, nIndex=-20) returned 327937
[0275.450] SetWindowLongW (hWnd=0x34013e, nIndex=-16, dwNewLong=46661632) returned 113770496
[0275.450] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0275.450] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0275.451] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0275.451] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0275.452] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0275.452] SetWindowLongW (hWnd=0x34013e, nIndex=-20, dwNewLong=327681) returned 327937
[0275.452] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0275.453] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0275.453] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0275.453] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0275.454] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0275.454] SetWindowPos (hWnd=0x34013e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0275.455] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0275.455] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0275.455] GetWindowPlacement (in: hWnd=0x34013e, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0275.455] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0275.455] GetClientRect (in: hWnd=0x34013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0275.455] GetWindowRect (in: hWnd=0x34013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0275.456] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0275.456] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0275.457] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0275.457] RedrawWindow (hWnd=0x34013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0275.457] GetSystemMenu (hWnd=0x34013e, bRevert=0) returned 0x280217
[0275.457] GetWindowPlacement (in: hWnd=0x34013e, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0275.457] EnableMenuItem (hMenu=0x280217, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0275.458] EnableMenuItem (hMenu=0x280217, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0275.458] EnableMenuItem (hMenu=0x280217, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0275.458] EnableMenuItem (hMenu=0x280217, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0275.458] EnableMenuItem (hMenu=0x280217, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0275.458] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0275.458] GetWindowLongW (hWnd=0x34013e, nIndex=-8) returned 0
[0275.458] SetWindowLongW (hWnd=0x34013e, nIndex=-8, dwNewLong=458806) returned 0
[0275.460] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0275.460] GetProcessWindowStation () returned 0x13c
[0275.460] GetCurrentThreadId () returned 0x11d0
[0275.460] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4ffe, lParam=0x0) returned 1
[0275.460] IsWindowVisible (hWnd=0x34013e) returned 0
[0275.460] IsWindowVisible (hWnd=0x70036) returned 1
[0275.460] IsWindowEnabled (hWnd=0x70036) returned 1
[0275.460] IsWindowVisible (hWnd=0x602b6) returned 0
[0275.461] IsWindowVisible (hWnd=0x901f8) returned 0
[0275.461] IsWindowVisible (hWnd=0x202d0) returned 0
[0275.461] IsWindowVisible (hWnd=0x202d4) returned 0
[0275.461] GetActiveWindow () returned 0x70036
[0275.461] GetFocus () returned 0x202c6
[0275.461] IsWindow (hWnd=0x70036) returned 1
[0275.461] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0275.461] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0275.462] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0275.462] GetWindowLongW (hWnd=0x34013e, nIndex=-8) returned 458806
[0275.462] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0275.463] GetCurrentThreadId () returned 0x11d0
[0275.463] GetWindowLongW (hWnd=0x34013e, nIndex=-8) returned 458806
[0275.463] IsWindowEnabled (hWnd=0x70036) returned 0
[0275.463] IsWindowEnabled (hWnd=0x34013e) returned 1
[0275.463] ShowWindow (hWnd=0x34013e, nCmdShow=5) returned 0
[0275.463] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0275.463] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0275.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.464] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0275.464] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x34013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1601e2
[0275.465] SetWindowLongW (hWnd=0x1601e2, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0275.465] GetWindowLongW (hWnd=0x1601e2, nIndex=-4) returned 1868026976
[0275.466] SetWindowLongW (hWnd=0x1601e2, nIndex=-4, dwNewLong=79646398) returned 1868026976
[0275.466] GetWindowLongW (hWnd=0x1601e2, nIndex=-4) returned 79646398
[0275.466] GetWindowLongW (hWnd=0x1601e2, nIndex=-16) returned 1174470848
[0275.466] GetWindowLongW (hWnd=0x1601e2, nIndex=-12) returned 0
[0275.466] SetWindowLongW (hWnd=0x1601e2, nIndex=-12, dwNewLong=1442274) returned 0
[0275.466] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0275.467] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0275.468] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0275.469] SendMessageW (hWnd=0x1601e2, Msg=0x2055, wParam=0x1601e2, lParam=0x3) returned 0x2
[0275.470] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0275.470] GetWindow (hWnd=0x1601e2, uCmd=0x3) returned 0x0
[0275.470] GetClientRect (in: hWnd=0x1601e2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0275.470] GetWindowRect (in: hWnd=0x1601e2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0275.470] GetParent (hWnd=0x1601e2) returned 0x34013e
[0275.470] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x34013e, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0275.470] SendMessageW (hWnd=0x1601e2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0275.470] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0275.470] SendMessageW (hWnd=0x1601e2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0275.470] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0275.471] GetSystemMetrics (nIndex=5) returned 1
[0275.471] GetSystemMetrics (nIndex=6) returned 1
[0275.471] SendMessageW (hWnd=0x1601e2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0275.471] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0275.471] SendMessageW (hWnd=0x1601e2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0275.471] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0275.472] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0275.472] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0275.472] GetClientRect (in: hWnd=0x1601e2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0275.472] GetWindowRect (in: hWnd=0x1601e2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0275.472] GetParent (hWnd=0x1601e2) returned 0x34013e
[0275.472] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x34013e, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0275.472] SendMessageW (hWnd=0x1601e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1601e2) returned 0x0
[0275.472] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1601e2) returned 0x0
[0275.473] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0275.473] GetParent (hWnd=0x1601e2) returned 0x34013e
[0275.473] GetParent (hWnd=0x13004e) returned 0x1a00ea
[0275.473] SetParent (hWndChild=0x13004e, hWndNewParent=0x34013e) returned 0x1a00ea
[0275.473] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0275.474] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0275.474] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0275.474] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0275.475] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0275.475] GetClientRect (in: hWnd=0x13004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0275.475] GetWindowRect (in: hWnd=0x13004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0275.475] GetParent (hWnd=0x13004e) returned 0x34013e
[0275.475] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x34013e, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0275.475] GetClientRect (in: hWnd=0x13004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0275.475] GetWindowRect (in: hWnd=0x13004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0275.475] GetParent (hWnd=0x13004e) returned 0x34013e
[0275.475] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x34013e, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0275.475] GetParent (hWnd=0x13004e) returned 0x34013e
[0275.475] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0275.475] GetWindow (hWnd=0x13004e, uCmd=0x3) returned 0x0
[0275.476] SetWindowPos (hWnd=0x13004e, hWndInsertAfter=0x1601e2, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0275.476] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0275.476] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0275.477] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0275.477] GetClientRect (in: hWnd=0x13004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0275.477] GetWindowRect (in: hWnd=0x13004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0275.477] GetParent (hWnd=0x13004e) returned 0x34013e
[0275.477] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x34013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0275.477] GetParent (hWnd=0x13004e) returned 0x34013e
[0275.477] GetWindow (hWnd=0x13004e, uCmd=0x3) returned 0x1601e2
[0275.477] GetWindowThreadProcessId (in: hWnd=0x13004e, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0275.477] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0275.477] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.478] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0275.478] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x34013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x160122
[0275.479] SetWindowLongW (hWnd=0x160122, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0275.479] GetWindowLongW (hWnd=0x160122, nIndex=-4) returned 1868032000
[0275.479] SetWindowLongW (hWnd=0x160122, nIndex=-4, dwNewLong=79645678) returned 1868032000
[0275.479] GetWindowLongW (hWnd=0x160122, nIndex=-4) returned 79645678
[0275.479] GetWindowLongW (hWnd=0x160122, nIndex=-16) returned 1174470667
[0275.479] GetWindowLongW (hWnd=0x160122, nIndex=-12) returned 0
[0275.479] SetWindowLongW (hWnd=0x160122, nIndex=-12, dwNewLong=1442082) returned 0
[0275.480] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0275.480] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0275.481] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0275.482] SendMessageW (hWnd=0x160122, Msg=0x2055, wParam=0x160122, lParam=0x3) returned 0x2
[0275.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0275.482] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0275.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0275.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0275.482] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0275.482] RedrawWindow (hWnd=0x1601e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0275.482] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0275.482] RedrawWindow (hWnd=0x13004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0275.483] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0275.483] RedrawWindow (hWnd=0x160122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0275.483] RedrawWindow (hWnd=0x34013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0275.483] GetWindow (hWnd=0x160122, uCmd=0x3) returned 0x13004e
[0275.483] GetClientRect (in: hWnd=0x160122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0275.483] GetWindowRect (in: hWnd=0x160122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0275.483] GetParent (hWnd=0x160122) returned 0x34013e
[0275.483] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x34013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0275.484] SetWindowTextW (hWnd=0x160122, lpString="OK") returned 1
[0275.484] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0xc, wParam=0x0, lParam=0x238f528) returned 0x1
[0275.484] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0275.485] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0275.485] GetClientRect (in: hWnd=0x160122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0275.485] GetWindowRect (in: hWnd=0x160122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0275.485] GetParent (hWnd=0x160122) returned 0x34013e
[0275.485] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x34013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0275.485] SendMessageW (hWnd=0x160122, Msg=0x2210, wParam=0x1220001, lParam=0x160122) returned 0x0
[0275.485] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x2210, wParam=0x1220001, lParam=0x160122) returned 0x0
[0275.486] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0275.486] GetParent (hWnd=0x160122) returned 0x34013e
[0275.486] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0275.487] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.488] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0275.488] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x34013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1202ca
[0275.488] SetWindowLongW (hWnd=0x1202ca, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0275.488] GetWindowLongW (hWnd=0x1202ca, nIndex=-4) returned 1868032000
[0275.489] SetWindowLongW (hWnd=0x1202ca, nIndex=-4, dwNewLong=79646478) returned 1868032000
[0275.489] GetWindowLongW (hWnd=0x1202ca, nIndex=-4) returned 79646478
[0275.489] GetWindowLongW (hWnd=0x1202ca, nIndex=-16) returned 1174470667
[0275.489] GetWindowLongW (hWnd=0x1202ca, nIndex=-12) returned 0
[0275.489] SetWindowLongW (hWnd=0x1202ca, nIndex=-12, dwNewLong=1180362) returned 0
[0275.489] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1202ca, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0275.491] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1202ca, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0275.491] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1202ca, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0275.492] SendMessageW (hWnd=0x1202ca, Msg=0x2055, wParam=0x1202ca, lParam=0x3) returned 0x2
[0275.492] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0275.492] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1202ca, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0275.492] GetWindow (hWnd=0x1202ca, uCmd=0x3) returned 0x160122
[0275.492] GetClientRect (in: hWnd=0x1202ca, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0275.492] GetWindowRect (in: hWnd=0x1202ca, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0275.492] GetParent (hWnd=0x1202ca) returned 0x34013e
[0275.492] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x34013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0275.493] SetWindowTextW (hWnd=0x1202ca, lpString="Cancel") returned 1
[0275.493] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1202ca, Msg=0xc, wParam=0x0, lParam=0x2392de8) returned 0x1
[0275.494] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1202ca, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0275.494] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1202ca, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0275.494] GetClientRect (in: hWnd=0x1202ca, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0275.494] GetWindowRect (in: hWnd=0x1202ca, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0275.494] GetParent (hWnd=0x1202ca) returned 0x34013e
[0275.494] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x34013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0275.494] SendMessageW (hWnd=0x1202ca, Msg=0x2210, wParam=0x2ca0001, lParam=0x1202ca) returned 0x0
[0275.494] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1202ca, Msg=0x2210, wParam=0x2ca0001, lParam=0x1202ca) returned 0x0
[0275.494] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1202ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0275.495] GetParent (hWnd=0x1202ca) returned 0x34013e
[0275.495] GetDC (hWnd=0x0) returned 0x60100ce
[0275.495] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e320) returned 0x0
[0275.495] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0275.495] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0275.495] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0275.496] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0275.496] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0275.496] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0275.496] GetWindowLongW (hWnd=0x34013e, nIndex=-8) returned 458806
[0275.496] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0275.496] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0275.496] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x450107bf
[0275.497] GetDeviceCaps (hdc=0x450107bf, index=12) returned 32
[0275.497] GetDeviceCaps (hdc=0x450107bf, index=14) returned 1
[0275.497] DeleteDC (hdc=0x450107bf) returned 1
[0275.497] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0275.497] GetWindowThreadProcessId (in: hWnd=0x34013e, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0275.497] GetCurrentThreadId () returned 0x11d0
[0275.497] PostMessageW (hWnd=0x34013e, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0275.498] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.498] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.498] GetSystemMetrics (nIndex=42) returned 0
[0275.498] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.498] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0275.498] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0275.498] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0275.499] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0275.499] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0275.518] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x34013e) returned 0x1
[0275.522] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0275.522] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0275.522] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0275.522] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0275.525] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0275.525] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0275.526] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0275.527] GetFocus () returned 0x202c6
[0275.527] IsChild (hWndParent=0x34013e, hWnd=0x202c6) returned 0
[0275.527] GetFocus () returned 0x202c6
[0275.527] SetFocus (hWnd=0x1601e2) returned 0x202c6
[0275.528] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1601e2, lParam=0x0) returned 0x0
[0275.528] GetCapture () returned 0x0
[0275.528] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0275.529] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0275.531] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0275.533] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0275.533] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0275.533] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0275.533] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0275.534] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0275.534] GetParent (hWnd=0x34013e) returned 0x0
[0275.534] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0275.535] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0275.535] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0275.535] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0275.535] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0275.535] GetSysColorBrush (nIndex=5) returned 0x100079
[0275.536] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0275.537] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0275.547] SendMessageW (hWnd=0x1601e2, Msg=0x2111, wParam=0x10001e2, lParam=0x1601e2) returned 0x0
[0275.547] SendMessageW (hWnd=0x1601e2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0275.547] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0275.547] GetKeyState (nVirtKey=1) returned 1
[0275.547] GetKeyState (nVirtKey=2) returned 0
[0275.547] GetKeyState (nVirtKey=4) returned 0
[0275.547] GetKeyState (nVirtKey=5) returned 0
[0275.547] GetKeyState (nVirtKey=6) returned 0
[0275.547] GetWindowTextLengthW (hWnd=0x1601e2) returned 0
[0275.547] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0275.547] SendMessageW (hWnd=0x1601e2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0275.547] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0275.548] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0275.548] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0275.562] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0275.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0275.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0275.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0275.565] GetWindowPlacement (in: hWnd=0x34013e, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0275.565] GetClientRect (in: hWnd=0x34013e, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0275.565] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.565] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.566] GetSystemMetrics (nIndex=42) returned 0
[0275.566] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0275.566] GetClientRect (in: hWnd=0x34013e, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0275.566] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0275.566] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0275.566] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0xfffffffff005078e
[0275.566] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0275.566] SaveDC (hdc=0x10105d6) returned 1
[0275.566] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0275.566] CreateSolidBrush (color=0xf0f0f0) returned 0xea10078d
[0275.566] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0xea10078d) returned 1
[0275.567] DeleteObject (ho=0xea10078d) returned 1
[0275.567] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0275.567] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0275.567] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0275.567] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0275.569] GetWindowPlacement (in: hWnd=0x34013e, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0275.569] GetClientRect (in: hWnd=0x34013e, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0275.569] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.569] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.569] GetSystemMetrics (nIndex=42) returned 0
[0275.569] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.569] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0275.569] GetClientRect (in: hWnd=0x34013e, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0275.569] GetCurrentObject (hdc=0x5b0107bf, type=0x1) returned 0xb00017
[0275.569] GetCurrentObject (hdc=0x5b0107bf, type=0x2) returned 0x900010
[0275.569] GetCurrentObject (hdc=0x5b0107bf, type=0x7) returned 0x5f0507c7
[0275.569] GetCurrentObject (hdc=0x5b0107bf, type=0x6) returned 0x8a01c2
[0275.569] SaveDC (hdc=0x5b0107bf) returned 1
[0275.569] GetNearestColor (hdc=0x5b0107bf, color=0xf0f0f0) returned 0xf0f0f0
[0275.569] CreateSolidBrush (color=0xf0f0f0) returned 0xeb10078d
[0275.570] FillRect (hDC=0x5b0107bf, lprc=0x53dc18, hbr=0xeb10078d) returned 1
[0275.570] DeleteObject (ho=0xeb10078d) returned 1
[0275.570] RestoreDC (hdc=0x5b0107bf, nSavedDC=-1) returned 1
[0275.570] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.570] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.570] GetSystemMetrics (nIndex=42) returned 0
[0275.570] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.570] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0275.570] GetClientRect (in: hWnd=0x34013e, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0275.570] GetCurrentObject (hdc=0x5b0107bf, type=0x1) returned 0xb00017
[0275.570] GetCurrentObject (hdc=0x5b0107bf, type=0x2) returned 0x900010
[0275.570] GetCurrentObject (hdc=0x5b0107bf, type=0x7) returned 0x5f0507c7
[0275.570] GetCurrentObject (hdc=0x5b0107bf, type=0x6) returned 0x8a01c2
[0275.570] SaveDC (hdc=0x5b0107bf) returned 1
[0275.571] GetNearestColor (hdc=0x5b0107bf, color=0xf0f0f0) returned 0xf0f0f0
[0275.571] CreateSolidBrush (color=0xf0f0f0) returned 0xec10078d
[0275.571] FillRect (hDC=0x5b0107bf, lprc=0x53dbb8, hbr=0xec10078d) returned 1
[0275.571] DeleteObject (ho=0xec10078d) returned 1
[0275.571] RestoreDC (hdc=0x5b0107bf, nSavedDC=-1) returned 1
[0275.571] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.571] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.571] GetSystemMetrics (nIndex=42) returned 0
[0275.571] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.571] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0275.574] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0275.574] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0275.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0275.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0275.575] GetStockObject (i=5) returned 0x900015
[0275.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1202ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0275.576] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1202ca, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0275.576] GetStockObject (i=5) returned 0x900015
[0275.576] GetWindowPlacement (in: hWnd=0x34013e, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0275.576] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0275.576] GetClientRect (in: hWnd=0x34013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0275.576] GetWindowRect (in: hWnd=0x34013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0275.578] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0275.578] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0275.578] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0275.578] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0275.579] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0275.579] GetClientRect (in: hWnd=0x34013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0275.579] GetWindowRect (in: hWnd=0x34013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0275.579] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.579] IsWindowUnicode (hWnd=0x34013e) returned 1
[0275.579] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.579] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.579] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.579] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0275.579] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.579] IsWindowUnicode (hWnd=0x34013e) returned 1
[0275.579] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.579] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.580] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.580] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.580] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x84, wParam=0x0, lParam=0x18d034f) returned 0x1
[0275.580] IsWindowUnicode (hWnd=0x160122) returned 1
[0275.580] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.580] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.580] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.581] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.581] IsWindowUnicode (hWnd=0x202c6) returned 1
[0275.581] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.581] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.581] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.581] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0275.581] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0275.581] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.581] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x84, wParam=0x0, lParam=0x18d034f) returned 0x1
[0275.581] IsWindowUnicode (hWnd=0x160122) returned 1
[0275.581] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.582] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x84, wParam=0x0, lParam=0x18d034f) returned 0x1
[0275.582] SetCursor (hCursor=0x10003) returned 0x10003
[0275.582] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.582] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.582] _TrackMouseEvent (in: lpEventTrack=0x239977c | out: lpEventTrack=0x239977c) returned 1
[0275.582] SendMessageW (hWnd=0x160122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0275.582] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0275.582] InvalidateRect (hWnd=0x160122, lpRect=0x0, bErase=0) returned 1
[0275.582] GetKeyState (nVirtKey=1) returned 1
[0275.582] GetKeyState (nVirtKey=2) returned 0
[0275.582] GetKeyState (nVirtKey=4) returned 0
[0275.582] GetKeyState (nVirtKey=5) returned 0
[0275.582] GetKeyState (nVirtKey=6) returned 0
[0275.582] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.583] IsWindowUnicode (hWnd=0x34013e) returned 1
[0275.583] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.583] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.583] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.583] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.592] IsWindowUnicode (hWnd=0x34013e) returned 1
[0275.592] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.592] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.592] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.592] BeginPaint (in: hWnd=0x34013e, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0xf0105ee
[0275.592] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0275.593] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.593] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.593] GetSystemMetrics (nIndex=42) returned 0
[0275.593] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.593] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0275.593] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0275.593] EndPaint (hWnd=0x34013e, lpPaint=0x53e30c) returned 1
[0275.593] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.594] IsWindowUnicode (hWnd=0x1601e2) returned 1
[0275.594] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.594] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.594] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0275.594] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0275.594] SetTextColor (hdc=0x5c0107bf, color=0x0) returned 0x0
[0275.594] SetBkColor (hdc=0x5c0107bf, color=0xffffff) returned 0xffffff
[0275.596] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.596] IsWindowUnicode (hWnd=0x13004e) returned 1
[0275.596] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.596] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.596] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.596] BeginPaint (in: hWnd=0x13004e, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x8b010786
[0275.596] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0275.596] CreateCompatibleDC (hdc=0x8b010786) returned 0x8801065f
[0275.596] SelectObject (hdc=0x8801065f, h=0x1e0507b9) returned 0x85000f
[0275.597] GdipCreateFromHDC (hdc=0x8801065f, graphics=0x53e30c) returned 0x0
[0275.597] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0275.597] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0275.597] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0275.597] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.597] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0275.597] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0275.597] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0275.597] LocalFree (hMem=0x89ee08) returned 0x0
[0275.597] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.598] GdipCreateRegion (region=0x53e354) returned 0x0
[0275.598] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.598] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0275.598] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0275.598] GetWindowTextLengthW (hWnd=0x13004e) returned 16
[0275.598] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0275.598] GetSystemMetrics (nIndex=42) returned 0
[0275.598] GetWindowTextW (in: hWnd=0x13004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0275.598] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0275.598] GetClientRect (in: hWnd=0x13004e, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0275.598] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0275.598] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0275.598] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0275.598] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.599] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0275.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0275.599] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0275.599] LocalFree (hMem=0x89eac0) returned 0x0
[0275.599] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0275.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.599] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0275.639] LocalFree (hMem=0x89ea88) returned 0x0
[0275.639] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.639] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0275.639] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0275.639] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0275.639] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0275.639] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0275.639] GetCurrentObject (hdc=0x8801065f, type=0x1) returned 0xb00017
[0275.639] GetCurrentObject (hdc=0x8801065f, type=0x2) returned 0x900010
[0275.639] GetCurrentObject (hdc=0x8801065f, type=0x7) returned 0x1e0507b9
[0275.639] GetCurrentObject (hdc=0x8801065f, type=0x6) returned 0x8a01c2
[0275.639] SaveDC (hdc=0x8801065f) returned 1
[0275.640] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x270407a1
[0275.640] GetClipRgn (hdc=0x8801065f, hrgn=0x270407a1) returned 0
[0275.640] SelectClipRgn (hdc=0x8801065f, hrgn=0xfc040798) returned 2
[0275.640] DeleteObject (ho=0x270407a1) returned 1
[0275.640] DeleteObject (ho=0xfc040798) returned 1
[0275.640] OffsetViewportOrgEx (in: hdc=0x8801065f, x=0, y=0, lppt=0x2399c84 | out: lppt=0x2399c84) returned 1
[0275.640] GetNearestColor (hdc=0x8801065f, color=0xf0f0f0) returned 0xf0f0f0
[0275.640] CreateSolidBrush (color=0xf0f0f0) returned 0xed10078d
[0275.640] FillRect (hDC=0x8801065f, lprc=0x53e1f4, hbr=0xed10078d) returned 1
[0275.640] DeleteObject (ho=0xed10078d) returned 1
[0275.640] RestoreDC (hdc=0x8801065f, nSavedDC=-1) returned 1
[0275.641] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8801065f) returned 0x0
[0275.641] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb070dbd) returned 0x0
[0275.641] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.641] GetWindowTextLengthW (hWnd=0x13004e) returned 16
[0275.641] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0275.641] GetSystemMetrics (nIndex=42) returned 0
[0275.641] GetWindowTextW (in: hWnd=0x13004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0275.641] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0275.641] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0275.641] GetCurrentObject (hdc=0x8801065f, type=0x1) returned 0xb00017
[0275.641] GetCurrentObject (hdc=0x8801065f, type=0x2) returned 0x900010
[0275.641] GetCurrentObject (hdc=0x8801065f, type=0x7) returned 0x1e0507b9
[0275.642] GetCurrentObject (hdc=0x8801065f, type=0x6) returned 0x8a01c2
[0275.642] SaveDC (hdc=0x8801065f) returned 1
[0275.642] GetNearestColor (hdc=0x8801065f, color=0x0) returned 0x0
[0275.642] RestoreDC (hdc=0x8801065f, nSavedDC=-1) returned 1
[0275.642] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8801065f) returned 0x0
[0275.643] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0275.643] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0275.643] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0275.643] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2399f8c | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0275.644] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0275.644] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0275.644] GetCurrentObject (hdc=0x8801065f, type=0x1) returned 0xb00017
[0275.644] GetCurrentObject (hdc=0x8801065f, type=0x2) returned 0x900010
[0275.644] GetCurrentObject (hdc=0x8801065f, type=0x7) returned 0x1e0507b9
[0275.644] GetCurrentObject (hdc=0x8801065f, type=0x6) returned 0x8a01c2
[0275.644] SaveDC (hdc=0x8801065f) returned 1
[0275.644] GetTextAlign (hdc=0x8801065f) returned 0x0
[0275.645] GetTextColor (hdc=0x8801065f) returned 0x0
[0275.645] GetCurrentObject (hdc=0x8801065f, type=0x6) returned 0x8a01c2
[0275.645] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0275.645] SelectObject (hdc=0x8801065f, h=0x730a066d) returned 0x8a01c2
[0275.645] GetBkMode (hdc=0x8801065f) returned 2
[0275.645] SetBkMode (hdc=0x8801065f, mode=1) returned 2
[0275.645] DrawTextExW (in: hdc=0x8801065f, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x239a1b0 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0275.646] RestoreDC (hdc=0x8801065f, nSavedDC=-1) returned 1
[0275.646] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8801065f) returned 0x0
[0275.646] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0275.647] BitBlt (hdc=0x8b010786, x=0, y=0, cx=250, cy=70, hdcSrc=0x8801065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0275.647] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8801065f) returned 0x0
[0275.647] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0275.647] SelectObject (hdc=0x8801065f, h=0x85000f) returned 0x1e0507b9
[0275.647] DeleteDC (hdc=0x8801065f) returned 1
[0275.647] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0275.647] EndPaint (hWnd=0x13004e, lpPaint=0x53e2f0) returned 1
[0275.648] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.648] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0275.649] IsWindowUnicode (hWnd=0x102dc) returned 1
[0275.649] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.649] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0275.650] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.650] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.650] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.651] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0275.652] IsWindowUnicode (hWnd=0x102dc) returned 1
[0275.652] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.652] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.652] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.652] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.653] IsWindowUnicode (hWnd=0x160122) returned 1
[0275.653] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.654] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.654] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.654] BeginPaint (in: hWnd=0x160122, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0275.654] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0275.654] CreateCompatibleDC (hdc=0x10105d6) returned 0x8a01065f
[0275.654] SelectObject (hdc=0x8a01065f, h=0x1e0507b9) returned 0x85000f
[0275.654] GdipCreateFromHDC (hdc=0x8a01065f, graphics=0x53e300) returned 0x0
[0275.655] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0275.655] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0275.655] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0275.655] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.655] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0275.655] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.655] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0275.655] LocalFree (hMem=0x89ea88) returned 0x0
[0275.655] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.655] GdipCreateRegion (region=0x53e348) returned 0x0
[0275.655] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.655] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0275.656] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0275.656] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb050dbd) returned 0x0
[0275.656] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.656] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0275.656] GetCurrentObject (hdc=0x8a01065f, type=0x1) returned 0xb00017
[0275.656] GetCurrentObject (hdc=0x8a01065f, type=0x2) returned 0x900010
[0275.656] GetCurrentObject (hdc=0x8a01065f, type=0x7) returned 0x1e0507b9
[0275.656] GetCurrentObject (hdc=0x8a01065f, type=0x6) returned 0x8a01c2
[0275.656] SaveDC (hdc=0x8a01065f) returned 1
[0275.657] GetNearestColor (hdc=0x8a01065f, color=0xf0f0f0) returned 0xf0f0f0
[0275.657] GetNearestColor (hdc=0x8a01065f, color=0xa0a0a0) returned 0xa0a0a0
[0275.657] GetNearestColor (hdc=0x8a01065f, color=0x696969) returned 0x696969
[0275.657] GetNearestColor (hdc=0x8a01065f, color=0xa0a0a0) returned 0xa0a0a0
[0275.657] GetNearestColor (hdc=0x8a01065f, color=0x0) returned 0x0
[0275.657] GetNearestColor (hdc=0x8a01065f, color=0xffffff) returned 0xffffff
[0275.657] GetNearestColor (hdc=0x8a01065f, color=0xe5e5e5) returned 0xe5e5e5
[0275.657] GetNearestColor (hdc=0x8a01065f, color=0xd7d7d7) returned 0xd7d7d7
[0275.657] GetNearestColor (hdc=0x8a01065f, color=0x0) returned 0x0
[0275.657] RestoreDC (hdc=0x8a01065f, nSavedDC=-1) returned 1
[0275.658] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8a01065f) returned 0x0
[0275.658] IsAppThemed () returned 0x1
[0275.658] GetThemeAppProperties () returned 0x3
[0275.658] GetThemeAppProperties () returned 0x3
[0275.658] IsAppThemed () returned 0x1
[0275.658] GetThemeAppProperties () returned 0x3
[0275.658] GetThemeAppProperties () returned 0x3
[0275.658] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x239a91c | out: lpchText="OK", lprc=0x53e01c) returned 13
[0275.659] IsAppThemed () returned 0x1
[0275.659] GetThemeAppProperties () returned 0x3
[0275.659] GetThemeAppProperties () returned 0x3
[0275.659] IsAppThemed () returned 0x1
[0275.659] GetThemeAppProperties () returned 0x3
[0275.659] GetThemeAppProperties () returned 0x3
[0275.659] IsAppThemed () returned 0x1
[0275.659] GetThemeAppProperties () returned 0x3
[0275.659] GetThemeAppProperties () returned 0x3
[0275.659] IsAppThemed () returned 0x1
[0275.659] GetThemeAppProperties () returned 0x3
[0275.659] GetThemeAppProperties () returned 0x3
[0275.659] IsThemePartDefined () returned 0x1
[0275.659] IsAppThemed () returned 0x1
[0275.659] GetThemeAppProperties () returned 0x3
[0275.659] GetThemeAppProperties () returned 0x3
[0275.659] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0275.660] IsAppThemed () returned 0x1
[0275.660] GetThemeAppProperties () returned 0x3
[0275.660] GetThemeAppProperties () returned 0x3
[0275.660] IsAppThemed () returned 0x1
[0275.660] GetThemeAppProperties () returned 0x3
[0275.660] GetThemeAppProperties () returned 0x3
[0275.660] IsThemePartDefined () returned 0x1
[0275.660] GdipCreateRegion (region=0x53e064) returned 0x0
[0275.660] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.660] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0275.660] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.660] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0275.660] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.660] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0275.661] LocalFree (hMem=0x89ea88) returned 0x0
[0275.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.661] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0275.661] LocalFree (hMem=0x89ea88) returned 0x0
[0275.661] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.661] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0275.661] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0275.661] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0275.661] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.662] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0275.662] GetCurrentObject (hdc=0x8a01065f, type=0x1) returned 0xb00017
[0275.669] GetCurrentObject (hdc=0x8a01065f, type=0x2) returned 0x900010
[0275.669] GetCurrentObject (hdc=0x8a01065f, type=0x7) returned 0x1e0507b9
[0275.669] GetCurrentObject (hdc=0x8a01065f, type=0x6) returned 0x8a01c2
[0275.669] SaveDC (hdc=0x8a01065f) returned 1
[0275.669] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfd040798
[0275.669] GetClipRgn (hdc=0x8a01065f, hrgn=0xfd040798) returned 0
[0275.669] SelectClipRgn (hdc=0x8a01065f, hrgn=0x2b0407a1) returned 2
[0275.669] DeleteObject (ho=0xfd040798) returned 1
[0275.669] DeleteObject (ho=0x2b0407a1) returned 1
[0275.669] OffsetViewportOrgEx (in: hdc=0x8a01065f, x=0, y=0, lppt=0x239afcc | out: lppt=0x239afcc) returned 1
[0275.670] DrawThemeParentBackground () returned 0x0
[0275.670] GetWindowPlacement (in: hWnd=0x34013e, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0275.670] GetClientRect (in: hWnd=0x34013e, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0275.670] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.670] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.671] GetSystemMetrics (nIndex=42) returned 0
[0275.671] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.671] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0275.671] GetClientRect (in: hWnd=0x34013e, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0275.671] GetCurrentObject (hdc=0x8a01065f, type=0x1) returned 0xb00017
[0275.671] GetCurrentObject (hdc=0x8a01065f, type=0x2) returned 0x900010
[0275.671] GetCurrentObject (hdc=0x8a01065f, type=0x7) returned 0x1e0507b9
[0275.671] GetCurrentObject (hdc=0x8a01065f, type=0x6) returned 0x8a01c2
[0275.671] SaveDC (hdc=0x8a01065f) returned 2
[0275.671] GetNearestColor (hdc=0x8a01065f, color=0xf0f0f0) returned 0xf0f0f0
[0275.672] CreateSolidBrush (color=0xf0f0f0) returned 0xee10078d
[0275.672] FillRect (hDC=0x8a01065f, lprc=0x53dac8, hbr=0xee10078d) returned 1
[0275.672] DeleteObject (ho=0xee10078d) returned 1
[0275.672] RestoreDC (hdc=0x8a01065f, nSavedDC=-1) returned 1
[0275.672] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.672] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.672] GetSystemMetrics (nIndex=42) returned 0
[0275.672] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.672] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0275.672] GetClientRect (in: hWnd=0x34013e, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0275.672] GetCurrentObject (hdc=0x8a01065f, type=0x1) returned 0xb00017
[0275.672] GetCurrentObject (hdc=0x8a01065f, type=0x2) returned 0x900010
[0275.672] GetCurrentObject (hdc=0x8a01065f, type=0x7) returned 0x1e0507b9
[0275.672] GetCurrentObject (hdc=0x8a01065f, type=0x6) returned 0x8a01c2
[0275.673] SaveDC (hdc=0x8a01065f) returned 2
[0275.673] GetNearestColor (hdc=0x8a01065f, color=0xf0f0f0) returned 0xf0f0f0
[0275.673] CreateSolidBrush (color=0xf0f0f0) returned 0xef10078d
[0275.673] FillRect (hDC=0x8a01065f, lprc=0x53da68, hbr=0xef10078d) returned 1
[0275.673] DeleteObject (ho=0xef10078d) returned 1
[0275.673] RestoreDC (hdc=0x8a01065f, nSavedDC=-1) returned 1
[0275.673] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.673] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.673] GetSystemMetrics (nIndex=42) returned 0
[0275.673] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.673] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0275.674] RestoreDC (hdc=0x8a01065f, nSavedDC=-1) returned 1
[0275.674] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8a01065f) returned 0x0
[0275.674] IsAppThemed () returned 0x1
[0275.674] GetThemeAppProperties () returned 0x3
[0275.674] GetThemeAppProperties () returned 0x3
[0275.674] IsAppThemed () returned 0x1
[0275.674] GetThemeAppProperties () returned 0x3
[0275.674] GetThemeAppProperties () returned 0x3
[0275.674] IsThemePartDefined () returned 0x1
[0275.674] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0275.674] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.674] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0275.675] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.675] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0275.675] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.675] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0275.675] LocalFree (hMem=0x89ea88) returned 0x0
[0275.675] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.675] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0275.675] LocalFree (hMem=0x89ea88) returned 0x0
[0275.675] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.676] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0275.676] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0275.676] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0275.676] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.677] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0275.677] GetCurrentObject (hdc=0x8a01065f, type=0x1) returned 0xb00017
[0275.677] GetCurrentObject (hdc=0x8a01065f, type=0x2) returned 0x900010
[0275.677] GetCurrentObject (hdc=0x8a01065f, type=0x7) returned 0x1e0507b9
[0275.677] GetCurrentObject (hdc=0x8a01065f, type=0x6) returned 0x8a01c2
[0275.677] SaveDC (hdc=0x8a01065f) returned 1
[0275.684] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2c0407a1
[0275.684] GetClipRgn (hdc=0x8a01065f, hrgn=0x2c0407a1) returned 0
[0275.684] SelectClipRgn (hdc=0x8a01065f, hrgn=0xff040798) returned 2
[0275.684] DeleteObject (ho=0x2c0407a1) returned 1
[0275.684] DeleteObject (ho=0xff040798) returned 1
[0275.684] OffsetViewportOrgEx (in: hdc=0x8a01065f, x=0, y=0, lppt=0x239b854 | out: lppt=0x239b854) returned 1
[0275.684] IsAppThemed () returned 0x1
[0275.684] GetThemeAppProperties () returned 0x3
[0275.684] GetThemeAppProperties () returned 0x3
[0275.684] DrawThemeBackground () returned 0x0
[0275.685] RestoreDC (hdc=0x8a01065f, nSavedDC=-1) returned 1
[0275.685] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8a01065f) returned 0x0
[0275.685] GdipCreateRegion (region=0x53dfec) returned 0x0
[0275.685] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.685] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0275.685] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.685] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0275.685] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0275.685] LocalFree (hMem=0x89ee08) returned 0x0
[0275.685] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0275.685] LocalFree (hMem=0x89ee08) returned 0x0
[0275.685] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.685] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0275.685] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0275.685] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0275.686] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.686] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0275.686] GetCurrentObject (hdc=0x8a01065f, type=0x1) returned 0xb00017
[0275.686] GetCurrentObject (hdc=0x8a01065f, type=0x2) returned 0x900010
[0275.686] GetCurrentObject (hdc=0x8a01065f, type=0x7) returned 0x1e0507b9
[0275.686] GetCurrentObject (hdc=0x8a01065f, type=0x6) returned 0x8a01c2
[0275.686] SaveDC (hdc=0x8a01065f) returned 1
[0275.686] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x40798
[0275.686] GetClipRgn (hdc=0x8a01065f, hrgn=0x40798) returned 0
[0275.686] SelectClipRgn (hdc=0x8a01065f, hrgn=0x2d0407a1) returned 2
[0275.686] DeleteObject (ho=0x40798) returned 1
[0275.686] DeleteObject (ho=0x2d0407a1) returned 1
[0275.686] OffsetViewportOrgEx (in: hdc=0x8a01065f, x=0, y=0, lppt=0x239bb28 | out: lppt=0x239bb28) returned 1
[0275.686] IsAppThemed () returned 0x1
[0275.687] GetThemeAppProperties () returned 0x3
[0275.687] GetThemeAppProperties () returned 0x3
[0275.687] GetThemeBackgroundContentRect () returned 0x0
[0275.687] RestoreDC (hdc=0x8a01065f, nSavedDC=-1) returned 1
[0275.687] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8a01065f) returned 0x0
[0275.687] IsAppThemed () returned 0x1
[0275.687] GetThemeAppProperties () returned 0x3
[0275.687] GetThemeAppProperties () returned 0x3
[0275.687] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0275.687] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0275.687] GetCurrentObject (hdc=0x8a01065f, type=0x1) returned 0xb00017
[0275.687] GetCurrentObject (hdc=0x8a01065f, type=0x2) returned 0x900010
[0275.687] GetCurrentObject (hdc=0x8a01065f, type=0x7) returned 0x1e0507b9
[0275.687] GetCurrentObject (hdc=0x8a01065f, type=0x6) returned 0x8a01c2
[0275.687] SaveDC (hdc=0x8a01065f) returned 1
[0275.688] GetTextAlign (hdc=0x8a01065f) returned 0x0
[0275.688] GetTextColor (hdc=0x8a01065f) returned 0x0
[0275.688] GetCurrentObject (hdc=0x8a01065f, type=0x6) returned 0x8a01c2
[0275.688] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0275.688] SelectObject (hdc=0x8a01065f, h=0x730a066d) returned 0x8a01c2
[0275.688] GetBkMode (hdc=0x8a01065f) returned 2
[0275.688] SetBkMode (hdc=0x8a01065f, mode=1) returned 2
[0275.688] DrawTextExW (in: hdc=0x8a01065f, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x239bec8 | out: lpchText="OK", lprc=0x53df84) returned 13
[0275.688] DrawTextExW (in: hdc=0x8a01065f, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x239bec8 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0275.689] RestoreDC (hdc=0x8a01065f, nSavedDC=-1) returned 1
[0275.689] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8a01065f) returned 0x0
[0275.689] GetFocus () returned 0x1601e2
[0275.689] IsAppThemed () returned 0x1
[0275.689] GetThemeAppProperties () returned 0x3
[0275.689] GetThemeAppProperties () returned 0x3
[0275.689] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0275.689] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x8a01065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0275.689] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8a01065f) returned 0x0
[0275.689] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0275.689] SelectObject (hdc=0x8a01065f, h=0x85000f) returned 0x1e0507b9
[0275.689] DeleteDC (hdc=0x8a01065f) returned 1
[0275.689] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0275.690] EndPaint (hWnd=0x160122, lpPaint=0x53e2e4) returned 1
[0275.690] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.690] IsWindowUnicode (hWnd=0x1202ca) returned 1
[0275.690] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.690] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.690] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.690] BeginPaint (in: hWnd=0x1202ca, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0275.690] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0275.690] CreateCompatibleDC (hdc=0x8b010786) returned 0x8c01065f
[0275.690] SelectObject (hdc=0x8c01065f, h=0x1e0507b9) returned 0x85000f
[0275.690] GdipCreateFromHDC (hdc=0x8c01065f, graphics=0x53e300) returned 0x0
[0275.690] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0275.691] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0275.691] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0275.691] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.691] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0275.691] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0275.691] LocalFree (hMem=0x89ee08) returned 0x0
[0275.691] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.691] GdipCreateRegion (region=0x53e348) returned 0x0
[0275.691] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.691] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0275.691] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0275.691] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb030dbd) returned 0x0
[0275.691] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.691] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0275.691] GetCurrentObject (hdc=0x8c01065f, type=0x1) returned 0xb00017
[0275.691] GetCurrentObject (hdc=0x8c01065f, type=0x2) returned 0x900010
[0275.691] GetCurrentObject (hdc=0x8c01065f, type=0x7) returned 0x1e0507b9
[0275.691] GetCurrentObject (hdc=0x8c01065f, type=0x6) returned 0x8a01c2
[0275.692] SaveDC (hdc=0x8c01065f) returned 1
[0275.692] GetNearestColor (hdc=0x8c01065f, color=0xf0f0f0) returned 0xf0f0f0
[0275.692] GetNearestColor (hdc=0x8c01065f, color=0xa0a0a0) returned 0xa0a0a0
[0275.692] GetNearestColor (hdc=0x8c01065f, color=0x696969) returned 0x696969
[0275.692] GetNearestColor (hdc=0x8c01065f, color=0xa0a0a0) returned 0xa0a0a0
[0275.692] GetNearestColor (hdc=0x8c01065f, color=0x0) returned 0x0
[0275.692] GetNearestColor (hdc=0x8c01065f, color=0xffffff) returned 0xffffff
[0275.692] GetNearestColor (hdc=0x8c01065f, color=0xe5e5e5) returned 0xe5e5e5
[0275.692] GetNearestColor (hdc=0x8c01065f, color=0xd7d7d7) returned 0xd7d7d7
[0275.692] GetNearestColor (hdc=0x8c01065f, color=0x0) returned 0x0
[0275.692] RestoreDC (hdc=0x8c01065f, nSavedDC=-1) returned 1
[0275.692] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8c01065f) returned 0x0
[0275.692] IsAppThemed () returned 0x1
[0275.693] GetThemeAppProperties () returned 0x3
[0275.693] GetThemeAppProperties () returned 0x3
[0275.693] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0275.693] SendMessageW (hWnd=0x34013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0275.693] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0275.694] IsAppThemed () returned 0x1
[0275.694] GetThemeAppProperties () returned 0x3
[0275.694] GetThemeAppProperties () returned 0x3
[0275.694] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x239c6d8 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0275.694] IsAppThemed () returned 0x1
[0275.694] GetThemeAppProperties () returned 0x3
[0275.694] GetThemeAppProperties () returned 0x3
[0275.694] IsAppThemed () returned 0x1
[0275.694] GetThemeAppProperties () returned 0x3
[0275.694] GetThemeAppProperties () returned 0x3
[0275.694] GetFocus () returned 0x1601e2
[0275.694] IsAppThemed () returned 0x1
[0275.694] GetThemeAppProperties () returned 0x3
[0275.694] GetThemeAppProperties () returned 0x3
[0275.694] IsAppThemed () returned 0x1
[0275.694] GetThemeAppProperties () returned 0x3
[0275.695] GetThemeAppProperties () returned 0x3
[0275.695] IsThemePartDefined () returned 0x1
[0275.695] IsAppThemed () returned 0x1
[0275.695] GetThemeAppProperties () returned 0x3
[0275.695] GetThemeAppProperties () returned 0x3
[0275.695] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0275.695] IsAppThemed () returned 0x1
[0275.695] GetThemeAppProperties () returned 0x3
[0275.695] GetThemeAppProperties () returned 0x3
[0275.695] IsAppThemed () returned 0x1
[0275.695] GetThemeAppProperties () returned 0x3
[0275.695] GetThemeAppProperties () returned 0x3
[0275.695] IsThemePartDefined () returned 0x1
[0275.695] GdipCreateRegion (region=0x53e070) returned 0x0
[0275.695] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.695] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0275.695] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.695] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0275.695] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0275.695] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0275.696] LocalFree (hMem=0x89ee08) returned 0x0
[0275.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.696] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0275.696] LocalFree (hMem=0x89ea88) returned 0x0
[0275.696] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.696] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0275.696] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0275.696] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0275.696] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.696] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0275.696] GetCurrentObject (hdc=0x8c01065f, type=0x1) returned 0xb00017
[0275.696] GetCurrentObject (hdc=0x8c01065f, type=0x2) returned 0x900010
[0275.696] GetCurrentObject (hdc=0x8c01065f, type=0x7) returned 0x1e0507b9
[0275.696] GetCurrentObject (hdc=0x8c01065f, type=0x6) returned 0x8a01c2
[0275.696] SaveDC (hdc=0x8c01065f) returned 1
[0275.697] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2e0407a1
[0275.697] GetClipRgn (hdc=0x8c01065f, hrgn=0x2e0407a1) returned 0
[0275.697] SelectClipRgn (hdc=0x8c01065f, hrgn=0x4040798) returned 2
[0275.697] DeleteObject (ho=0x2e0407a1) returned 1
[0275.697] DeleteObject (ho=0x4040798) returned 1
[0275.697] OffsetViewportOrgEx (in: hdc=0x8c01065f, x=0, y=0, lppt=0x239cd88 | out: lppt=0x239cd88) returned 1
[0275.697] DrawThemeParentBackground () returned 0x0
[0275.697] GetWindowPlacement (in: hWnd=0x34013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0275.697] GetClientRect (in: hWnd=0x34013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0275.697] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.697] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.697] GetSystemMetrics (nIndex=42) returned 0
[0275.697] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.697] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0275.698] GetClientRect (in: hWnd=0x34013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0275.698] GetCurrentObject (hdc=0x8c01065f, type=0x1) returned 0xb00017
[0275.698] GetCurrentObject (hdc=0x8c01065f, type=0x2) returned 0x900010
[0275.698] GetCurrentObject (hdc=0x8c01065f, type=0x7) returned 0x1e0507b9
[0275.698] GetCurrentObject (hdc=0x8c01065f, type=0x6) returned 0x8a01c2
[0275.698] SaveDC (hdc=0x8c01065f) returned 2
[0275.698] GetNearestColor (hdc=0x8c01065f, color=0xf0f0f0) returned 0xf0f0f0
[0275.698] CreateSolidBrush (color=0xf0f0f0) returned 0xf010078d
[0275.698] FillRect (hDC=0x8c01065f, lprc=0x53dad0, hbr=0xf010078d) returned 1
[0275.698] DeleteObject (ho=0xf010078d) returned 1
[0275.698] RestoreDC (hdc=0x8c01065f, nSavedDC=-1) returned 1
[0275.699] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.699] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.699] GetSystemMetrics (nIndex=42) returned 0
[0275.699] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.699] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0275.699] GetClientRect (in: hWnd=0x34013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0275.699] GetCurrentObject (hdc=0x8c01065f, type=0x1) returned 0xb00017
[0275.699] GetCurrentObject (hdc=0x8c01065f, type=0x2) returned 0x900010
[0275.699] GetCurrentObject (hdc=0x8c01065f, type=0x7) returned 0x1e0507b9
[0275.699] GetCurrentObject (hdc=0x8c01065f, type=0x6) returned 0x8a01c2
[0275.699] SaveDC (hdc=0x8c01065f) returned 2
[0275.699] GetNearestColor (hdc=0x8c01065f, color=0xf0f0f0) returned 0xf0f0f0
[0275.699] CreateSolidBrush (color=0xf0f0f0) returned 0xf110078d
[0275.699] FillRect (hDC=0x8c01065f, lprc=0x53da70, hbr=0xf110078d) returned 1
[0275.699] DeleteObject (ho=0xf110078d) returned 1
[0275.699] RestoreDC (hdc=0x8c01065f, nSavedDC=-1) returned 1
[0275.700] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.700] GetSystemMetrics (nIndex=42) returned 0
[0275.700] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0275.700] RestoreDC (hdc=0x8c01065f, nSavedDC=-1) returned 1
[0275.700] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8c01065f) returned 0x0
[0275.700] IsAppThemed () returned 0x1
[0275.700] GetThemeAppProperties () returned 0x3
[0275.700] GetThemeAppProperties () returned 0x3
[0275.700] IsAppThemed () returned 0x1
[0275.700] GetThemeAppProperties () returned 0x3
[0275.700] GetThemeAppProperties () returned 0x3
[0275.700] IsThemePartDefined () returned 0x1
[0275.700] GdipCreateRegion (region=0x53dff4) returned 0x0
[0275.700] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.701] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0275.701] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.701] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0275.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0275.701] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0275.701] LocalFree (hMem=0x89ee08) returned 0x0
[0275.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.701] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0275.701] LocalFree (hMem=0x89ea88) returned 0x0
[0275.701] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.701] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0275.701] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0275.701] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0275.701] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.702] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0275.702] GetCurrentObject (hdc=0x8c01065f, type=0x1) returned 0xb00017
[0275.702] GetCurrentObject (hdc=0x8c01065f, type=0x2) returned 0x900010
[0275.702] GetCurrentObject (hdc=0x8c01065f, type=0x7) returned 0x1e0507b9
[0275.702] GetCurrentObject (hdc=0x8c01065f, type=0x6) returned 0x8a01c2
[0275.702] SaveDC (hdc=0x8c01065f) returned 1
[0275.702] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5040798
[0275.702] GetClipRgn (hdc=0x8c01065f, hrgn=0x5040798) returned 0
[0275.702] SelectClipRgn (hdc=0x8c01065f, hrgn=0x300407a1) returned 2
[0275.702] DeleteObject (ho=0x5040798) returned 1
[0275.703] DeleteObject (ho=0x300407a1) returned 1
[0275.703] OffsetViewportOrgEx (in: hdc=0x8c01065f, x=0, y=0, lppt=0x239d610 | out: lppt=0x239d610) returned 1
[0275.703] IsAppThemed () returned 0x1
[0275.703] GetThemeAppProperties () returned 0x3
[0275.703] GetThemeAppProperties () returned 0x3
[0275.703] DrawThemeBackground () returned 0x0
[0275.703] RestoreDC (hdc=0x8c01065f, nSavedDC=-1) returned 1
[0275.703] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8c01065f) returned 0x0
[0275.703] GdipCreateRegion (region=0x53dff8) returned 0x0
[0275.703] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.703] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0275.703] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.703] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0275.703] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.703] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0275.703] LocalFree (hMem=0x89ea88) returned 0x0
[0275.703] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0275.703] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0275.703] LocalFree (hMem=0x89eee8) returned 0x0
[0275.704] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.704] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0275.704] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0275.704] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0275.704] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.704] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0275.704] GetCurrentObject (hdc=0x8c01065f, type=0x1) returned 0xb00017
[0275.704] GetCurrentObject (hdc=0x8c01065f, type=0x2) returned 0x900010
[0275.704] GetCurrentObject (hdc=0x8c01065f, type=0x7) returned 0x1e0507b9
[0275.704] GetCurrentObject (hdc=0x8c01065f, type=0x6) returned 0x8a01c2
[0275.704] SaveDC (hdc=0x8c01065f) returned 1
[0275.704] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x310407a1
[0275.704] GetClipRgn (hdc=0x8c01065f, hrgn=0x310407a1) returned 0
[0275.704] SelectClipRgn (hdc=0x8c01065f, hrgn=0x6040798) returned 2
[0275.705] DeleteObject (ho=0x310407a1) returned 1
[0275.705] DeleteObject (ho=0x6040798) returned 1
[0275.705] OffsetViewportOrgEx (in: hdc=0x8c01065f, x=0, y=0, lppt=0x239d8e4 | out: lppt=0x239d8e4) returned 1
[0275.705] IsAppThemed () returned 0x1
[0275.705] GetThemeAppProperties () returned 0x3
[0275.705] GetThemeAppProperties () returned 0x3
[0275.705] GetThemeBackgroundContentRect () returned 0x0
[0275.705] RestoreDC (hdc=0x8c01065f, nSavedDC=-1) returned 1
[0275.705] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8c01065f) returned 0x0
[0275.705] IsAppThemed () returned 0x1
[0275.705] GetThemeAppProperties () returned 0x3
[0275.705] GetThemeAppProperties () returned 0x3
[0275.705] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0275.705] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0275.705] GetCurrentObject (hdc=0x8c01065f, type=0x1) returned 0xb00017
[0275.705] GetCurrentObject (hdc=0x8c01065f, type=0x2) returned 0x900010
[0275.706] GetCurrentObject (hdc=0x8c01065f, type=0x7) returned 0x1e0507b9
[0275.706] GetCurrentObject (hdc=0x8c01065f, type=0x6) returned 0x8a01c2
[0275.706] SaveDC (hdc=0x8c01065f) returned 1
[0275.706] GetTextAlign (hdc=0x8c01065f) returned 0x0
[0275.706] GetTextColor (hdc=0x8c01065f) returned 0x0
[0275.706] GetCurrentObject (hdc=0x8c01065f, type=0x6) returned 0x8a01c2
[0275.706] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0275.706] SelectObject (hdc=0x8c01065f, h=0x730a066d) returned 0x8a01c2
[0275.706] GetBkMode (hdc=0x8c01065f) returned 2
[0275.706] SetBkMode (hdc=0x8c01065f, mode=1) returned 2
[0275.706] DrawTextExW (in: hdc=0x8c01065f, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x239dc84 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0275.707] DrawTextExW (in: hdc=0x8c01065f, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x239dc84 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0275.707] RestoreDC (hdc=0x8c01065f, nSavedDC=-1) returned 1
[0275.707] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8c01065f) returned 0x0
[0275.707] GetFocus () returned 0x1601e2
[0275.707] IsAppThemed () returned 0x1
[0275.707] GetThemeAppProperties () returned 0x3
[0275.707] GetThemeAppProperties () returned 0x3
[0275.708] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0275.708] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x8c01065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0275.708] GdipReleaseDC (graphics=0x5d92c30, hdc=0x8c01065f) returned 0x0
[0275.708] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0275.708] SelectObject (hdc=0x8c01065f, h=0x85000f) returned 0x1e0507b9
[0275.708] DeleteDC (hdc=0x8c01065f) returned 1
[0275.708] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0275.708] EndPaint (hWnd=0x1202ca, lpPaint=0x53e2e4) returned 1
[0275.708] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.708] IsWindowUnicode (hWnd=0x202c6) returned 1
[0275.708] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.714] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.714] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.715] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0275.715] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0275.715] CreateCompatibleDC (hdc=0x10105d6) returned 0x760107a2
[0275.715] SelectObject (hdc=0x760107a2, h=0x1e0507b9) returned 0x85000f
[0275.715] GdipCreateFromHDC (hdc=0x760107a2, graphics=0x53e300) returned 0x0
[0275.715] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0275.715] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0275.715] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0275.715] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.715] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0275.715] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.715] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0275.716] LocalFree (hMem=0x89ea88) returned 0x0
[0275.716] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.716] GdipCreateRegion (region=0x53e348) returned 0x0
[0275.716] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.716] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0275.716] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0275.716] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfb010dbd) returned 0x0
[0275.716] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.716] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0275.716] GetCurrentObject (hdc=0x760107a2, type=0x1) returned 0xb00017
[0275.716] GetCurrentObject (hdc=0x760107a2, type=0x2) returned 0x900010
[0275.716] GetCurrentObject (hdc=0x760107a2, type=0x7) returned 0x1e0507b9
[0275.716] GetCurrentObject (hdc=0x760107a2, type=0x6) returned 0x8a01c2
[0275.716] SaveDC (hdc=0x760107a2) returned 1
[0275.717] GetNearestColor (hdc=0x760107a2, color=0xff) returned 0xff
[0275.717] GetNearestColor (hdc=0x760107a2, color=0x55) returned 0x55
[0275.717] GetNearestColor (hdc=0x760107a2, color=0x0) returned 0x0
[0275.717] GetNearestColor (hdc=0x760107a2, color=0x55) returned 0x55
[0275.717] GetNearestColor (hdc=0x760107a2, color=0x0) returned 0x0
[0275.717] GetNearestColor (hdc=0x760107a2, color=0x8080ff) returned 0x8080ff
[0275.717] GetNearestColor (hdc=0x760107a2, color=0x7373e5) returned 0x7373e5
[0275.717] GetNearestColor (hdc=0x760107a2, color=0xe5) returned 0xe5
[0275.717] GetNearestColor (hdc=0x760107a2, color=0x0) returned 0x0
[0275.717] RestoreDC (hdc=0x760107a2, nSavedDC=-1) returned 1
[0275.717] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107a2) returned 0x0
[0275.717] IsAppThemed () returned 0x1
[0275.718] GetThemeAppProperties () returned 0x3
[0275.718] GetThemeAppProperties () returned 0x3
[0275.718] IsAppThemed () returned 0x1
[0275.718] GetThemeAppProperties () returned 0x3
[0275.718] GetThemeAppProperties () returned 0x3
[0275.718] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0275.718] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x239e468 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0275.718] IsAppThemed () returned 0x1
[0275.718] GetThemeAppProperties () returned 0x3
[0275.718] GetThemeAppProperties () returned 0x3
[0275.718] IsAppThemed () returned 0x1
[0275.718] GetThemeAppProperties () returned 0x3
[0275.718] GetThemeAppProperties () returned 0x3
[0275.718] GetFocus () returned 0x1601e2
[0275.718] IsAppThemed () returned 0x1
[0275.718] GetThemeAppProperties () returned 0x3
[0275.719] GetThemeAppProperties () returned 0x3
[0275.719] IsAppThemed () returned 0x1
[0275.719] GetThemeAppProperties () returned 0x3
[0275.719] GetThemeAppProperties () returned 0x3
[0275.719] IsThemePartDefined () returned 0x1
[0275.719] IsAppThemed () returned 0x1
[0275.719] GetThemeAppProperties () returned 0x3
[0275.719] GetThemeAppProperties () returned 0x3
[0275.719] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0275.719] IsAppThemed () returned 0x1
[0275.719] GetThemeAppProperties () returned 0x3
[0275.719] GetThemeAppProperties () returned 0x3
[0275.719] IsAppThemed () returned 0x1
[0275.719] GetThemeAppProperties () returned 0x3
[0275.719] GetThemeAppProperties () returned 0x3
[0275.719] IsThemePartDefined () returned 0x1
[0275.719] GdipCreateRegion (region=0x53e070) returned 0x0
[0275.719] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.719] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0275.719] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.720] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0275.720] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0275.720] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0275.720] LocalFree (hMem=0x89eee8) returned 0x0
[0275.720] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0275.720] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0275.720] LocalFree (hMem=0x89ee08) returned 0x0
[0275.720] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.720] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0275.720] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0275.720] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0275.720] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.720] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0275.720] GetCurrentObject (hdc=0x760107a2, type=0x1) returned 0xb00017
[0275.720] GetCurrentObject (hdc=0x760107a2, type=0x2) returned 0x900010
[0275.720] GetCurrentObject (hdc=0x760107a2, type=0x7) returned 0x1e0507b9
[0275.720] GetCurrentObject (hdc=0x760107a2, type=0x6) returned 0x8a01c2
[0275.721] SaveDC (hdc=0x760107a2) returned 1
[0275.721] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7040798
[0275.721] GetClipRgn (hdc=0x760107a2, hrgn=0x7040798) returned 0
[0275.721] SelectClipRgn (hdc=0x760107a2, hrgn=0x350407a1) returned 2
[0275.721] DeleteObject (ho=0x7040798) returned 1
[0275.721] DeleteObject (ho=0x350407a1) returned 1
[0275.721] OffsetViewportOrgEx (in: hdc=0x760107a2, x=0, y=0, lppt=0x239eb18 | out: lppt=0x239eb18) returned 1
[0275.721] DrawThemeParentBackground () returned 0x0
[0275.721] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0275.721] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0275.721] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0275.721] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0275.721] GetSystemMetrics (nIndex=42) returned 0
[0275.721] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0275.721] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0275.722] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0275.722] GetCurrentObject (hdc=0x760107a2, type=0x1) returned 0xb00017
[0275.722] GetCurrentObject (hdc=0x760107a2, type=0x2) returned 0x900010
[0275.722] GetCurrentObject (hdc=0x760107a2, type=0x7) returned 0x1e0507b9
[0275.722] GetCurrentObject (hdc=0x760107a2, type=0x6) returned 0x8a01c2
[0275.722] SaveDC (hdc=0x760107a2) returned 2
[0275.722] GetNearestColor (hdc=0x760107a2, color=0xff) returned 0xff
[0275.722] CreateSolidBrush (color=0xff) returned 0xf210078d
[0275.722] FillRect (hDC=0x760107a2, lprc=0x53dad0, hbr=0xf210078d) returned 1
[0275.722] DeleteObject (ho=0xf210078d) returned 1
[0275.722] RestoreDC (hdc=0x760107a2, nSavedDC=-1) returned 1
[0275.722] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0275.722] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0275.723] GetSystemMetrics (nIndex=42) returned 0
[0275.723] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0275.723] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0275.723] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0275.723] GetCurrentObject (hdc=0x760107a2, type=0x1) returned 0xb00017
[0275.723] GetCurrentObject (hdc=0x760107a2, type=0x2) returned 0x900010
[0275.723] GetCurrentObject (hdc=0x760107a2, type=0x7) returned 0x1e0507b9
[0275.723] GetCurrentObject (hdc=0x760107a2, type=0x6) returned 0x8a01c2
[0275.723] SaveDC (hdc=0x760107a2) returned 2
[0275.723] GetNearestColor (hdc=0x760107a2, color=0xff) returned 0xff
[0275.723] CreateSolidBrush (color=0xff) returned 0xf310078d
[0275.723] FillRect (hDC=0x760107a2, lprc=0x53da70, hbr=0xf310078d) returned 1
[0275.723] DeleteObject (ho=0xf310078d) returned 1
[0275.723] RestoreDC (hdc=0x760107a2, nSavedDC=-1) returned 1
[0275.723] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0275.723] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0275.723] GetSystemMetrics (nIndex=42) returned 0
[0275.724] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0275.724] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0275.724] RestoreDC (hdc=0x760107a2, nSavedDC=-1) returned 1
[0275.724] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107a2) returned 0x0
[0275.724] IsAppThemed () returned 0x1
[0275.724] GetThemeAppProperties () returned 0x3
[0275.724] GetThemeAppProperties () returned 0x3
[0275.724] IsAppThemed () returned 0x1
[0275.730] GetThemeAppProperties () returned 0x3
[0275.730] GetThemeAppProperties () returned 0x3
[0275.730] IsThemePartDefined () returned 0x1
[0275.730] GdipCreateRegion (region=0x53dff4) returned 0x0
[0275.730] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.730] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0275.730] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.730] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0275.730] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0275.730] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0275.731] LocalFree (hMem=0x89eee8) returned 0x0
[0275.731] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0275.731] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0275.731] LocalFree (hMem=0x89eee8) returned 0x0
[0275.731] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.731] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0275.731] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0275.731] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0275.731] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.731] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0275.731] GetCurrentObject (hdc=0x760107a2, type=0x1) returned 0xb00017
[0275.731] GetCurrentObject (hdc=0x760107a2, type=0x2) returned 0x900010
[0275.731] GetCurrentObject (hdc=0x760107a2, type=0x7) returned 0x1e0507b9
[0275.731] GetCurrentObject (hdc=0x760107a2, type=0x6) returned 0x8a01c2
[0275.731] SaveDC (hdc=0x760107a2) returned 1
[0275.731] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x360407a1
[0275.732] GetClipRgn (hdc=0x760107a2, hrgn=0x360407a1) returned 0
[0275.732] SelectClipRgn (hdc=0x760107a2, hrgn=0x9040798) returned 2
[0275.732] DeleteObject (ho=0x360407a1) returned 1
[0275.732] DeleteObject (ho=0x9040798) returned 1
[0275.732] OffsetViewportOrgEx (in: hdc=0x760107a2, x=0, y=0, lppt=0x239f37c | out: lppt=0x239f37c) returned 1
[0275.732] IsAppThemed () returned 0x1
[0275.732] GetThemeAppProperties () returned 0x3
[0275.732] GetThemeAppProperties () returned 0x3
[0275.732] DrawThemeBackground () returned 0x0
[0275.732] RestoreDC (hdc=0x760107a2, nSavedDC=-1) returned 1
[0275.732] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107a2) returned 0x0
[0275.732] GdipCreateRegion (region=0x53dff8) returned 0x0
[0275.732] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.732] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0275.732] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.732] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0275.732] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0275.733] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0275.733] LocalFree (hMem=0x89ee08) returned 0x0
[0275.733] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0275.733] LocalFree (hMem=0x89eee8) returned 0x0
[0275.733] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.733] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0275.733] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0275.733] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0275.733] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.733] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0275.733] GetCurrentObject (hdc=0x760107a2, type=0x1) returned 0xb00017
[0275.733] GetCurrentObject (hdc=0x760107a2, type=0x2) returned 0x900010
[0275.733] GetCurrentObject (hdc=0x760107a2, type=0x7) returned 0x1e0507b9
[0275.733] GetCurrentObject (hdc=0x760107a2, type=0x6) returned 0x8a01c2
[0275.733] SaveDC (hdc=0x760107a2) returned 1
[0275.733] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa040798
[0275.733] GetClipRgn (hdc=0x760107a2, hrgn=0xa040798) returned 0
[0275.734] SelectClipRgn (hdc=0x760107a2, hrgn=0x370407a1) returned 2
[0275.734] DeleteObject (ho=0xa040798) returned 1
[0275.734] DeleteObject (ho=0x370407a1) returned 1
[0275.734] OffsetViewportOrgEx (in: hdc=0x760107a2, x=0, y=0, lppt=0x239f650 | out: lppt=0x239f650) returned 1
[0275.734] IsAppThemed () returned 0x1
[0275.734] GetThemeAppProperties () returned 0x3
[0275.734] GetThemeAppProperties () returned 0x3
[0275.734] GetThemeBackgroundContentRect () returned 0x0
[0275.734] RestoreDC (hdc=0x760107a2, nSavedDC=-1) returned 1
[0275.734] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107a2) returned 0x0
[0275.734] IsAppThemed () returned 0x1
[0275.734] GetThemeAppProperties () returned 0x3
[0275.734] GetThemeAppProperties () returned 0x3
[0275.734] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0275.734] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0275.734] GetCurrentObject (hdc=0x760107a2, type=0x1) returned 0xb00017
[0275.734] GetCurrentObject (hdc=0x760107a2, type=0x2) returned 0x900010
[0275.734] GetCurrentObject (hdc=0x760107a2, type=0x7) returned 0x1e0507b9
[0275.734] GetCurrentObject (hdc=0x760107a2, type=0x6) returned 0x8a01c2
[0275.734] SaveDC (hdc=0x760107a2) returned 1
[0275.735] GetTextAlign (hdc=0x760107a2) returned 0x0
[0275.735] GetTextColor (hdc=0x760107a2) returned 0x0
[0275.735] GetCurrentObject (hdc=0x760107a2, type=0x6) returned 0x8a01c2
[0275.735] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0275.735] SelectObject (hdc=0x760107a2, h=0x450a0799) returned 0x8a01c2
[0275.735] GetBkMode (hdc=0x760107a2) returned 2
[0275.735] SetBkMode (hdc=0x760107a2, mode=1) returned 2
[0275.735] DrawTextExW (in: hdc=0x760107a2, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x239f9f0 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0275.735] DrawTextExW (in: hdc=0x760107a2, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x239f9f0 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0275.735] RestoreDC (hdc=0x760107a2, nSavedDC=-1) returned 1
[0275.736] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107a2) returned 0x0
[0275.736] GetFocus () returned 0x1601e2
[0275.736] IsAppThemed () returned 0x1
[0275.736] GetThemeAppProperties () returned 0x3
[0275.736] GetThemeAppProperties () returned 0x3
[0275.736] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0275.736] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x760107a2, x1=0, y1=0, rop=0xcc0020) returned 1
[0275.736] GdipReleaseDC (graphics=0x5d92c30, hdc=0x760107a2) returned 0x0
[0275.736] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0275.736] SelectObject (hdc=0x760107a2, h=0x85000f) returned 0x1e0507b9
[0275.736] DeleteDC (hdc=0x760107a2) returned 1
[0275.736] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0275.736] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0275.736] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.737] IsWindowUnicode (hWnd=0x160122) returned 1
[0275.737] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.737] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.737] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.737] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.737] IsWindowUnicode (hWnd=0x160122) returned 1
[0275.737] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.737] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.737] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.737] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x2a1, wParam=0x0, lParam=0x4000e) returned 0x0
[0275.737] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0275.737] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0275.737] WaitMessage () returned 1
[0275.815] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.815] IsWindowUnicode (hWnd=0x102dc) returned 1
[0275.815] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.815] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.815] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.825] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.825] IsWindowUnicode (hWnd=0x102dc) returned 1
[0275.825] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.825] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.825] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.826] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.826] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x84, wParam=0x0, lParam=0x18d034f) returned 0x1
[0275.826] IsWindowUnicode (hWnd=0x160122) returned 1
[0275.826] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.826] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x84, wParam=0x0, lParam=0x18d034f) returned 0x1
[0275.827] GetDlgItem (hDlg=0x34013e, nIDDlgItem=0) returned 0x0
[0275.827] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x210, wParam=0x201, lParam=0x100130) returned 0x0
[0275.827] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x21, wParam=0x34013e, lParam=0x2010001) returned 0x1
[0275.827] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x21, wParam=0x34013e, lParam=0x2010001) returned 0x1
[0275.827] SetCursor (hCursor=0x10003) returned 0x10003
[0275.827] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.827] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.827] GetKeyState (nVirtKey=1) returned -128
[0275.827] GetKeyState (nVirtKey=2) returned 0
[0275.827] GetKeyState (nVirtKey=4) returned 0
[0275.827] GetKeyState (nVirtKey=5) returned 0
[0275.827] GetKeyState (nVirtKey=6) returned 0
[0275.827] IsWindowVisible (hWnd=0x160122) returned 1
[0275.828] IsWindowEnabled (hWnd=0x160122) returned 1
[0275.828] SetFocus (hWnd=0x160122) returned 0x1601e2
[0275.828] GetFocus () returned 0x160122
[0275.828] IsChild (hWndParent=0x34013e, hWnd=0x160122) returned 1
[0275.828] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x8, wParam=0x160122, lParam=0x0) returned 0x1
[0275.828] SendMessageW (hWnd=0x1601e2, Msg=0x2111, wParam=0x20001e2, lParam=0x1601e2) returned 0x0
[0275.830] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0275.831] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0275.832] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0275.832] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0275.832] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0275.832] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0275.838] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0275.838] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x7, wParam=0x1601e2, lParam=0x0) returned 0x0
[0275.838] GetStockObject (i=5) returned 0x900015
[0275.838] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0275.839] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0xd, wParam=0x3, lParam=0x89e738) returned 0x2
[0275.839] GetDlgItem (hDlg=0x34013e, nIDDlgItem=1442082) returned 0x160122
[0275.839] SendMessageW (hWnd=0x160122, Msg=0x202b, wParam=0x160122, lParam=0x53de74) returned 0x0
[0275.839] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x202b, wParam=0x160122, lParam=0x53de74) returned 0x0
[0275.839] InvalidateRect (hWnd=0x160122, lpRect=0x0, bErase=0) returned 1
[0275.841] GetFocus () returned 0x160122
[0275.841] GetFocus () returned 0x160122
[0275.841] GetFocus () returned 0x160122
[0275.841] GetKeyState (nVirtKey=1) returned -128
[0275.841] GetKeyState (nVirtKey=2) returned 0
[0275.841] GetKeyState (nVirtKey=4) returned 0
[0275.841] GetKeyState (nVirtKey=5) returned 0
[0275.841] GetKeyState (nVirtKey=6) returned 0
[0275.841] GetCapture () returned 0x0
[0275.841] SetCapture (hWnd=0x160122) returned 0x0
[0275.842] GetKeyState (nVirtKey=1) returned -128
[0275.842] GetKeyState (nVirtKey=2) returned 0
[0275.842] GetKeyState (nVirtKey=4) returned 0
[0275.842] GetKeyState (nVirtKey=5) returned 0
[0275.842] GetKeyState (nVirtKey=6) returned 0
[0275.842] NotifyWinEvent (event=0x800a, hwnd=0x160122, idObject=-4, idChild=0)
[0275.842] InvalidateRect (hWnd=0x160122, lpRect=0x53e4c8, bErase=0) returned 1
[0275.842] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.842] IsWindowUnicode (hWnd=0x160122) returned 1
[0275.842] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.842] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0275.842] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0275.842] MapWindowPoints (in: hWndFrom=0x160122, hWndTo=0x0, lpPoints=0x239fbb0, cPoints=0x1 | out: lpPoints=0x239fbb0) returned 25756481
[0275.842] NotifyWinEvent (event=0x800a, hwnd=0x160122, idObject=-4, idChild=0)
[0275.842] InvalidateRect (hWnd=0x160122, lpRect=0x53e468, bErase=0) returned 1
[0275.843] UpdateWindow (hWnd=0x160122) returned 1
[0275.843] BeginPaint (in: hWnd=0x160122, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0275.843] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0275.843] CreateCompatibleDC (hdc=0x10105d6) returned 0xdd010527
[0275.843] SelectObject (hdc=0xdd010527, h=0x1e0507b9) returned 0x85000f
[0275.843] GdipCreateFromHDC (hdc=0xdd010527, graphics=0x53df98) returned 0x0
[0275.843] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0275.844] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0275.844] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0275.844] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.844] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0275.844] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0275.844] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0275.844] LocalFree (hMem=0x89ec80) returned 0x0
[0275.844] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.844] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0275.844] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.844] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0275.844] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0275.845] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaff0dbd) returned 0x0
[0275.845] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.845] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0275.845] GetCurrentObject (hdc=0xdd010527, type=0x1) returned 0xb00017
[0275.845] GetCurrentObject (hdc=0xdd010527, type=0x2) returned 0x900010
[0275.845] GetCurrentObject (hdc=0xdd010527, type=0x7) returned 0x1e0507b9
[0275.845] GetCurrentObject (hdc=0xdd010527, type=0x6) returned 0x8a01c2
[0275.845] SaveDC (hdc=0xdd010527) returned 1
[0275.845] GetNearestColor (hdc=0xdd010527, color=0xf0f0f0) returned 0xf0f0f0
[0275.845] GetNearestColor (hdc=0xdd010527, color=0xa0a0a0) returned 0xa0a0a0
[0275.846] GetNearestColor (hdc=0xdd010527, color=0x696969) returned 0x696969
[0275.846] GetNearestColor (hdc=0xdd010527, color=0xa0a0a0) returned 0xa0a0a0
[0275.846] GetNearestColor (hdc=0xdd010527, color=0x0) returned 0x0
[0275.846] GetNearestColor (hdc=0xdd010527, color=0xffffff) returned 0xffffff
[0275.846] GetNearestColor (hdc=0xdd010527, color=0xe5e5e5) returned 0xe5e5e5
[0275.846] GetNearestColor (hdc=0xdd010527, color=0xd7d7d7) returned 0xd7d7d7
[0275.846] GetNearestColor (hdc=0xdd010527, color=0x0) returned 0x0
[0275.846] RestoreDC (hdc=0xdd010527, nSavedDC=-1) returned 1
[0275.846] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd010527) returned 0x0
[0275.847] IsAppThemed () returned 0x1
[0275.847] GetThemeAppProperties () returned 0x3
[0275.847] GetThemeAppProperties () returned 0x3
[0275.847] IsAppThemed () returned 0x1
[0275.847] GetThemeAppProperties () returned 0x3
[0275.847] GetThemeAppProperties () returned 0x3
[0275.847] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0275.847] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x23a0324 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0275.848] IsAppThemed () returned 0x1
[0275.848] GetThemeAppProperties () returned 0x3
[0275.848] GetThemeAppProperties () returned 0x3
[0275.848] IsAppThemed () returned 0x1
[0275.848] GetThemeAppProperties () returned 0x3
[0275.848] GetThemeAppProperties () returned 0x3
[0275.848] IsAppThemed () returned 0x1
[0275.848] GetThemeAppProperties () returned 0x3
[0275.848] GetThemeAppProperties () returned 0x3
[0275.848] IsAppThemed () returned 0x1
[0275.848] GetThemeAppProperties () returned 0x3
[0275.849] GetThemeAppProperties () returned 0x3
[0275.849] IsThemePartDefined () returned 0x1
[0275.849] IsAppThemed () returned 0x1
[0275.849] GetThemeAppProperties () returned 0x3
[0275.849] GetThemeAppProperties () returned 0x3
[0275.849] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0275.849] IsAppThemed () returned 0x1
[0275.849] GetThemeAppProperties () returned 0x3
[0275.849] GetThemeAppProperties () returned 0x3
[0275.849] IsAppThemed () returned 0x1
[0275.850] GetThemeAppProperties () returned 0x3
[0275.850] GetThemeAppProperties () returned 0x3
[0275.850] IsThemePartDefined () returned 0x1
[0275.850] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0275.850] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.850] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0275.850] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.850] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0275.850] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.850] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0275.850] LocalFree (hMem=0x89ea88) returned 0x0
[0275.850] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0275.850] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0275.851] LocalFree (hMem=0x89ee08) returned 0x0
[0275.851] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.851] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0275.851] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0275.851] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0275.851] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.851] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0275.851] GetCurrentObject (hdc=0xdd010527, type=0x1) returned 0xb00017
[0275.851] GetCurrentObject (hdc=0xdd010527, type=0x2) returned 0x900010
[0275.851] GetCurrentObject (hdc=0xdd010527, type=0x7) returned 0x1e0507b9
[0275.852] GetCurrentObject (hdc=0xdd010527, type=0x6) returned 0x8a01c2
[0275.852] SaveDC (hdc=0xdd010527) returned 1
[0275.852] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x380407a1
[0275.852] GetClipRgn (hdc=0xdd010527, hrgn=0x380407a1) returned 0
[0275.852] SelectClipRgn (hdc=0xdd010527, hrgn=0xe040798) returned 2
[0275.852] DeleteObject (ho=0x380407a1) returned 1
[0275.852] DeleteObject (ho=0xe040798) returned 1
[0275.852] OffsetViewportOrgEx (in: hdc=0xdd010527, x=0, y=0, lppt=0x23a09d4 | out: lppt=0x23a09d4) returned 1
[0275.852] DrawThemeParentBackground () returned 0x0
[0275.853] GetWindowPlacement (in: hWnd=0x34013e, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0275.853] GetClientRect (in: hWnd=0x34013e, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0275.853] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.853] GetSystemMetrics (nIndex=42) returned 0
[0275.853] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0275.853] GetClientRect (in: hWnd=0x34013e, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0275.853] GetCurrentObject (hdc=0xdd010527, type=0x1) returned 0xb00017
[0275.853] GetCurrentObject (hdc=0xdd010527, type=0x2) returned 0x900010
[0275.853] GetCurrentObject (hdc=0xdd010527, type=0x7) returned 0x1e0507b9
[0275.853] GetCurrentObject (hdc=0xdd010527, type=0x6) returned 0x8a01c2
[0275.853] SaveDC (hdc=0xdd010527) returned 2
[0275.854] GetNearestColor (hdc=0xdd010527, color=0xf0f0f0) returned 0xf0f0f0
[0275.854] CreateSolidBrush (color=0xf0f0f0) returned 0xf410078d
[0275.854] FillRect (hDC=0xdd010527, lprc=0x53d760, hbr=0xf410078d) returned 1
[0275.854] DeleteObject (ho=0xf410078d) returned 1
[0275.854] RestoreDC (hdc=0xdd010527, nSavedDC=-1) returned 1
[0275.854] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.854] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.854] GetSystemMetrics (nIndex=42) returned 0
[0275.854] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.854] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0275.855] GetClientRect (in: hWnd=0x34013e, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0275.855] GetCurrentObject (hdc=0xdd010527, type=0x1) returned 0xb00017
[0275.855] GetCurrentObject (hdc=0xdd010527, type=0x2) returned 0x900010
[0275.855] GetCurrentObject (hdc=0xdd010527, type=0x7) returned 0x1e0507b9
[0275.855] GetCurrentObject (hdc=0xdd010527, type=0x6) returned 0x8a01c2
[0275.855] SaveDC (hdc=0xdd010527) returned 2
[0275.855] GetNearestColor (hdc=0xdd010527, color=0xf0f0f0) returned 0xf0f0f0
[0275.855] CreateSolidBrush (color=0xf0f0f0) returned 0xf510078d
[0275.855] FillRect (hDC=0xdd010527, lprc=0x53d700, hbr=0xf510078d) returned 1
[0275.856] DeleteObject (ho=0xf510078d) returned 1
[0275.856] RestoreDC (hdc=0xdd010527, nSavedDC=-1) returned 1
[0275.856] GetWindowTextLengthW (hWnd=0x34013e) returned 10
[0275.856] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0275.856] GetSystemMetrics (nIndex=42) returned 0
[0275.856] GetWindowTextW (in: hWnd=0x34013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0275.856] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0275.856] RestoreDC (hdc=0xdd010527, nSavedDC=-1) returned 1
[0275.857] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd010527) returned 0x0
[0275.857] IsAppThemed () returned 0x1
[0275.857] GetThemeAppProperties () returned 0x3
[0275.857] GetThemeAppProperties () returned 0x3
[0275.857] IsAppThemed () returned 0x1
[0275.857] GetThemeAppProperties () returned 0x3
[0275.857] GetThemeAppProperties () returned 0x3
[0275.857] IsThemePartDefined () returned 0x1
[0275.857] GdipCreateRegion (region=0x53dc80) returned 0x0
[0275.857] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.857] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0275.857] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.857] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0275.857] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0275.858] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0275.858] LocalFree (hMem=0x89ee40) returned 0x0
[0275.858] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0275.858] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0275.858] LocalFree (hMem=0x89ec80) returned 0x0
[0275.858] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.858] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0275.858] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0275.858] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0275.858] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.858] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0275.859] GetCurrentObject (hdc=0xdd010527, type=0x1) returned 0xb00017
[0275.859] GetCurrentObject (hdc=0xdd010527, type=0x2) returned 0x900010
[0275.859] GetCurrentObject (hdc=0xdd010527, type=0x7) returned 0x1e0507b9
[0275.859] GetCurrentObject (hdc=0xdd010527, type=0x6) returned 0x8a01c2
[0275.859] SaveDC (hdc=0xdd010527) returned 1
[0275.859] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf040798
[0275.859] GetClipRgn (hdc=0xdd010527, hrgn=0xf040798) returned 0
[0275.859] SelectClipRgn (hdc=0xdd010527, hrgn=0x3a0407a1) returned 2
[0275.859] DeleteObject (ho=0xf040798) returned 1
[0275.859] DeleteObject (ho=0x3a0407a1) returned 1
[0275.859] OffsetViewportOrgEx (in: hdc=0xdd010527, x=0, y=0, lppt=0x23a125c | out: lppt=0x23a125c) returned 1
[0275.859] IsAppThemed () returned 0x1
[0275.860] GetThemeAppProperties () returned 0x3
[0275.860] GetThemeAppProperties () returned 0x3
[0275.860] DrawThemeBackground () returned 0x0
[0275.860] RestoreDC (hdc=0xdd010527, nSavedDC=-1) returned 1
[0275.860] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd010527) returned 0x0
[0275.860] GdipCreateRegion (region=0x53dc84) returned 0x0
[0275.860] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.860] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0275.860] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.860] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0275.860] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0275.860] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0275.860] LocalFree (hMem=0x89ea88) returned 0x0
[0275.861] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0275.861] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0275.861] LocalFree (hMem=0x89ee08) returned 0x0
[0275.861] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.861] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0275.861] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0275.861] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0275.861] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.861] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0275.861] GetCurrentObject (hdc=0xdd010527, type=0x1) returned 0xb00017
[0275.861] GetCurrentObject (hdc=0xdd010527, type=0x2) returned 0x900010
[0275.861] GetCurrentObject (hdc=0xdd010527, type=0x7) returned 0x1e0507b9
[0275.862] GetCurrentObject (hdc=0xdd010527, type=0x6) returned 0x8a01c2
[0275.862] SaveDC (hdc=0xdd010527) returned 1
[0275.862] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b0407a1
[0275.862] GetClipRgn (hdc=0xdd010527, hrgn=0x3b0407a1) returned 0
[0275.862] SelectClipRgn (hdc=0xdd010527, hrgn=0x10040798) returned 2
[0275.862] DeleteObject (ho=0x3b0407a1) returned 1
[0275.862] DeleteObject (ho=0x10040798) returned 1
[0275.862] OffsetViewportOrgEx (in: hdc=0xdd010527, x=0, y=0, lppt=0x23a1530 | out: lppt=0x23a1530) returned 1
[0275.862] IsAppThemed () returned 0x1
[0275.862] GetThemeAppProperties () returned 0x3
[0275.862] GetThemeAppProperties () returned 0x3
[0275.863] GetThemeBackgroundContentRect () returned 0x0
[0275.863] RestoreDC (hdc=0xdd010527, nSavedDC=-1) returned 1
[0275.863] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd010527) returned 0x0
[0275.863] IsAppThemed () returned 0x1
[0275.863] GetThemeAppProperties () returned 0x3
[0275.863] GetThemeAppProperties () returned 0x3
[0275.863] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0275.863] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0275.863] GetCurrentObject (hdc=0xdd010527, type=0x1) returned 0xb00017
[0275.863] GetCurrentObject (hdc=0xdd010527, type=0x2) returned 0x900010
[0275.864] GetCurrentObject (hdc=0xdd010527, type=0x7) returned 0x1e0507b9
[0275.864] GetCurrentObject (hdc=0xdd010527, type=0x6) returned 0x8a01c2
[0275.864] SaveDC (hdc=0xdd010527) returned 1
[0275.864] GetTextAlign (hdc=0xdd010527) returned 0x0
[0275.864] GetTextColor (hdc=0xdd010527) returned 0x0
[0275.864] GetCurrentObject (hdc=0xdd010527, type=0x6) returned 0x8a01c2
[0275.864] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0275.864] SelectObject (hdc=0xdd010527, h=0x730a066d) returned 0x8a01c2
[0275.864] GetBkMode (hdc=0xdd010527) returned 2
[0275.865] SetBkMode (hdc=0xdd010527, mode=1) returned 2
[0275.865] DrawTextExW (in: hdc=0xdd010527, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x23a18d0 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0275.873] DrawTextExW (in: hdc=0xdd010527, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x23a18d0 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0275.873] RestoreDC (hdc=0xdd010527, nSavedDC=-1) returned 1
[0275.873] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd010527) returned 0x0
[0275.873] GetFocus () returned 0x160122
[0275.874] IsAppThemed () returned 0x1
[0275.874] GetThemeAppProperties () returned 0x3
[0275.874] GetThemeAppProperties () returned 0x3
[0275.874] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0275.874] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0xdd010527, x1=0, y1=0, rop=0xcc0020) returned 1
[0275.874] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd010527) returned 0x0
[0275.874] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0275.874] SelectObject (hdc=0xdd010527, h=0x85000f) returned 0x1e0507b9
[0275.874] DeleteDC (hdc=0xdd010527) returned 1
[0275.875] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0275.875] EndPaint (hWnd=0x160122, lpPaint=0x53df7c) returned 1
[0275.875] MapWindowPoints (in: hWndFrom=0x160122, hWndTo=0x0, lpPoints=0x23a19cc, cPoints=0x1 | out: lpPoints=0x23a19cc) returned 25756481
[0275.875] WindowFromPoint (Point=0x34f) returned 0x160122
[0275.875] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x84, wParam=0x0, lParam=0x18d034f) returned 0x1
[0275.875] NotifyWinEvent (event=0x800a, hwnd=0x160122, idObject=-4, idChild=0)
[0275.875] NotifyWinEvent (event=0x800c, hwnd=0x160122, idObject=-4, idChild=0)
[0275.875] GetWindowTextLengthW (hWnd=0x1601e2) returned 0
[0275.876] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0275.876] GetSystemMetrics (nIndex=42) returned 0
[0275.876] GetWindowTextW (in: hWnd=0x1601e2, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0275.876] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0275.876] SendMessageW (hWnd=0x34013e, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0275.876] GetCapture () returned 0x160122
[0275.876] ReleaseCapture () returned 1
[0275.876] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0275.876] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0275.877] IsWindow (hWnd=0x70036) returned 1
[0275.877] EnableWindow (hWnd=0x70036, bEnable=1)
[0275.877] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0275.879] IsWindow (hWnd=0x70036) returned 1
[0275.879] SetActiveWindow (hWnd=0x70036)
[0275.879] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x86, wParam=0x0, lParam=0x70036)
[0275.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0275.882] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0275.884] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0275.901] IsChild (hWndParent=0x34013e, hWnd=0x202c6) returned 0
[0275.901] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x160122, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0275.902] GetCapture () returned 0x0
[0275.902] InvalidateRect (hWnd=0x160122, lpRect=0x0, bErase=0) returned 1
[0275.907] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0275.907] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0275.907] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0275.915] IsChild (hWndParent=0x34013e, hWnd=0x202c6) returned 0
[0275.915] ShowWindow (hWnd=0x34013e, nCmdShow=0)
[0275.915] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0275.921] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x34013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0275.922] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1601e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0275.922] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1a00ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0275.924] GetWindowTextLengthW (hWnd=0x13004e)
[0275.924] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0275.925] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x13004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0275.945] GetProcessWindowStation () returned 0x13c
[0275.945] GetActiveWindow () returned 0x70036
[0275.945] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0275.945] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0275.945] GetCurrentThreadId () returned 0x11d0
[0275.946] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4e6e, lParam=0x0) returned 1
[0275.946] IsWindowVisible (hWnd=0x70036) returned 1
[0275.946] IsWindowEnabled (hWnd=0x70036) returned 1
[0275.946] IsWindowVisible (hWnd=0x602b6) returned 0
[0275.946] IsWindowVisible (hWnd=0x901f8) returned 0
[0275.946] IsWindowVisible (hWnd=0x202d0) returned 0
[0275.946] IsWindowVisible (hWnd=0x202d4) returned 0
[0275.946] GetActiveWindow () returned 0x70036
[0275.946] GetFocus () returned 0x202c6
[0275.947] IsWindow (hWnd=0x70036) returned 1
[0275.947] EnableWindow (hWnd=0x70036, bEnable=0)
[0275.947] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0275.948] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0275.949] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0275.980] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x60100ce
[0275.980] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0275.980] CreateCompatibleDC (hdc=0x60100ce) returned 0xc90107ba
[0275.980] SelectObject (hdc=0xc90107ba, h=0x1e0507b9) returned 0x85000f
[0275.980] GdipCreateFromHDC (hdc=0xc90107ba, graphics=0x53e108) returned 0x0
[0275.980] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0275.980] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0275.980] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0275.981] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.981] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0275.981] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0275.981] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0275.981] LocalFree (hMem=0x89eac0) returned 0x0
[0275.981] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.981] GdipCreateRegion (region=0x53e150) returned 0x0
[0275.981] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.981] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0275.981] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0275.981] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfafd0dbd) returned 0x0
[0275.981] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.981] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0275.981] GetCurrentObject (hdc=0xc90107ba, type=0x1) returned 0xb00017
[0275.981] GetCurrentObject (hdc=0xc90107ba, type=0x2) returned 0x900010
[0275.981] GetCurrentObject (hdc=0xc90107ba, type=0x7) returned 0x1e0507b9
[0275.982] GetCurrentObject (hdc=0xc90107ba, type=0x6) returned 0x8a01c2
[0275.982] SaveDC (hdc=0xc90107ba) returned 1
[0275.982] GetNearestColor (hdc=0xc90107ba, color=0xff) returned 0xff
[0275.982] GetNearestColor (hdc=0xc90107ba, color=0x55) returned 0x55
[0275.982] GetNearestColor (hdc=0xc90107ba, color=0x0) returned 0x0
[0275.983] GetNearestColor (hdc=0xc90107ba, color=0x55) returned 0x55
[0275.983] GetNearestColor (hdc=0xc90107ba, color=0x0) returned 0x0
[0275.983] GetNearestColor (hdc=0xc90107ba, color=0x8080ff) returned 0x8080ff
[0275.983] GetNearestColor (hdc=0xc90107ba, color=0x7373e5) returned 0x7373e5
[0275.983] GetNearestColor (hdc=0xc90107ba, color=0xe5) returned 0xe5
[0275.983] GetNearestColor (hdc=0xc90107ba, color=0x0) returned 0x0
[0275.983] RestoreDC (hdc=0xc90107ba, nSavedDC=-1) returned 1
[0275.983] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107ba) returned 0x0
[0275.983] IsAppThemed () returned 0x1
[0275.983] GetThemeAppProperties () returned 0x3
[0275.983] GetThemeAppProperties () returned 0x3
[0275.983] IsAppThemed () returned 0x1
[0275.983] GetThemeAppProperties () returned 0x3
[0275.983] GetThemeAppProperties () returned 0x3
[0275.984] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0275.984] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x23a2cc4 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0275.984] IsAppThemed () returned 0x1
[0275.984] GetThemeAppProperties () returned 0x3
[0275.984] GetThemeAppProperties () returned 0x3
[0275.984] IsAppThemed () returned 0x1
[0275.984] GetThemeAppProperties () returned 0x3
[0275.984] GetThemeAppProperties () returned 0x3
[0275.984] GetFocus () returned 0x1302ca
[0275.984] IsAppThemed () returned 0x1
[0275.984] GetThemeAppProperties () returned 0x3
[0275.984] GetThemeAppProperties () returned 0x3
[0275.985] IsAppThemed () returned 0x1
[0275.985] GetThemeAppProperties () returned 0x3
[0275.985] GetThemeAppProperties () returned 0x3
[0275.985] IsThemePartDefined () returned 0x1
[0275.985] IsAppThemed () returned 0x1
[0275.985] GetThemeAppProperties () returned 0x3
[0275.985] GetThemeAppProperties () returned 0x3
[0275.985] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0275.985] IsAppThemed () returned 0x1
[0275.985] GetThemeAppProperties () returned 0x3
[0275.985] GetThemeAppProperties () returned 0x3
[0275.985] IsAppThemed () returned 0x1
[0275.985] GetThemeAppProperties () returned 0x3
[0275.985] GetThemeAppProperties () returned 0x3
[0275.985] IsThemePartDefined () returned 0x1
[0275.985] GdipCreateRegion (region=0x53de78) returned 0x0
[0275.985] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.985] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0275.985] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.985] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0275.985] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0275.986] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0275.986] LocalFree (hMem=0x89ec80) returned 0x0
[0275.986] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0275.986] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0275.986] LocalFree (hMem=0x89ec80) returned 0x0
[0275.986] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.986] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0275.986] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0275.986] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0275.986] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.986] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0275.986] GetCurrentObject (hdc=0xc90107ba, type=0x1) returned 0xb00017
[0275.986] GetCurrentObject (hdc=0xc90107ba, type=0x2) returned 0x900010
[0275.986] GetCurrentObject (hdc=0xc90107ba, type=0x7) returned 0x1e0507b9
[0275.986] GetCurrentObject (hdc=0xc90107ba, type=0x6) returned 0x8a01c2
[0275.986] SaveDC (hdc=0xc90107ba) returned 1
[0275.987] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x11040798
[0275.987] GetClipRgn (hdc=0xc90107ba, hrgn=0x11040798) returned 0
[0275.987] SelectClipRgn (hdc=0xc90107ba, hrgn=0x410407a1) returned 2
[0275.987] DeleteObject (ho=0x11040798) returned 1
[0275.987] DeleteObject (ho=0x410407a1) returned 1
[0275.987] OffsetViewportOrgEx (in: hdc=0xc90107ba, x=0, y=0, lppt=0x23a3374 | out: lppt=0x23a3374) returned 1
[0275.987] DrawThemeParentBackground () returned 0x0
[0275.987] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0275.987] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0275.987] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0275.987] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0275.987] GetSystemMetrics (nIndex=42) returned 0
[0275.987] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0275.987] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0275.988] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0275.988] GetCurrentObject (hdc=0xc90107ba, type=0x1) returned 0xb00017
[0275.988] GetCurrentObject (hdc=0xc90107ba, type=0x2) returned 0x900010
[0275.988] GetCurrentObject (hdc=0xc90107ba, type=0x7) returned 0x1e0507b9
[0275.988] GetCurrentObject (hdc=0xc90107ba, type=0x6) returned 0x8a01c2
[0275.988] SaveDC (hdc=0xc90107ba) returned 2
[0275.988] GetNearestColor (hdc=0xc90107ba, color=0xff) returned 0xff
[0275.988] CreateSolidBrush (color=0xff) returned 0xf610078d
[0275.988] FillRect (hDC=0xc90107ba, lprc=0x53d8d8, hbr=0xf610078d) returned 1
[0275.988] DeleteObject (ho=0xf610078d) returned 1
[0275.988] RestoreDC (hdc=0xc90107ba, nSavedDC=-1) returned 1
[0275.988] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0275.988] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0275.988] GetSystemMetrics (nIndex=42) returned 0
[0275.989] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0275.989] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0275.989] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0275.989] GetCurrentObject (hdc=0xc90107ba, type=0x1) returned 0xb00017
[0275.989] GetCurrentObject (hdc=0xc90107ba, type=0x2) returned 0x900010
[0275.989] GetCurrentObject (hdc=0xc90107ba, type=0x7) returned 0x1e0507b9
[0275.989] GetCurrentObject (hdc=0xc90107ba, type=0x6) returned 0x8a01c2
[0275.989] SaveDC (hdc=0xc90107ba) returned 2
[0275.989] GetNearestColor (hdc=0xc90107ba, color=0xff) returned 0xff
[0275.989] CreateSolidBrush (color=0xff) returned 0xf710078d
[0275.989] FillRect (hDC=0xc90107ba, lprc=0x53d878, hbr=0xf710078d) returned 1
[0275.989] DeleteObject (ho=0xf710078d) returned 1
[0275.989] RestoreDC (hdc=0xc90107ba, nSavedDC=-1) returned 1
[0275.989] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0275.989] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0275.989] GetSystemMetrics (nIndex=42) returned 0
[0275.989] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0275.990] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0275.990] RestoreDC (hdc=0xc90107ba, nSavedDC=-1) returned 1
[0275.997] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107ba) returned 0x0
[0275.997] IsAppThemed () returned 0x1
[0275.997] GetThemeAppProperties () returned 0x3
[0275.997] GetThemeAppProperties () returned 0x3
[0275.997] IsAppThemed () returned 0x1
[0275.997] GetThemeAppProperties () returned 0x3
[0275.997] GetThemeAppProperties () returned 0x3
[0275.997] IsThemePartDefined () returned 0x1
[0275.997] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0275.997] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.997] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0275.997] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0275.997] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0275.997] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0275.997] LocalFree (hMem=0x89ee08) returned 0x0
[0275.997] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0275.998] LocalFree (hMem=0x89ee08) returned 0x0
[0275.998] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0275.998] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0275.998] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0275.998] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0275.998] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0275.998] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0275.998] GetCurrentObject (hdc=0xc90107ba, type=0x1) returned 0xb00017
[0275.998] GetCurrentObject (hdc=0xc90107ba, type=0x2) returned 0x900010
[0275.998] GetCurrentObject (hdc=0xc90107ba, type=0x7) returned 0x1e0507b9
[0275.998] GetCurrentObject (hdc=0xc90107ba, type=0x6) returned 0x8a01c2
[0275.998] SaveDC (hdc=0xc90107ba) returned 1
[0275.998] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x420407a1
[0275.998] GetClipRgn (hdc=0xc90107ba, hrgn=0x420407a1) returned 0
[0275.998] SelectClipRgn (hdc=0xc90107ba, hrgn=0x13040798) returned 2
[0275.998] DeleteObject (ho=0x420407a1) returned 1
[0275.998] DeleteObject (ho=0x13040798) returned 1
[0275.998] OffsetViewportOrgEx (in: hdc=0xc90107ba, x=0, y=0, lppt=0x23a3bd8 | out: lppt=0x23a3bd8) returned 1
[0275.999] IsAppThemed () returned 0x1
[0275.999] GetThemeAppProperties () returned 0x3
[0275.999] GetThemeAppProperties () returned 0x3
[0275.999] DrawThemeBackground () returned 0x0
[0275.999] RestoreDC (hdc=0xc90107ba, nSavedDC=-1) returned 1
[0275.999] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107ba) returned 0x0
[0275.999] GdipCreateRegion (region=0x53de00) returned 0x0
[0275.999] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0275.999] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0275.999] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0275.999] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0275.999] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0275.999] LocalFree (hMem=0x89ec80) returned 0x0
[0275.999] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0275.999] LocalFree (hMem=0x89ec80) returned 0x0
[0275.999] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0275.999] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0275.999] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0276.000] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0276.000] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0276.000] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0276.000] GetCurrentObject (hdc=0xc90107ba, type=0x1) returned 0xb00017
[0276.000] GetCurrentObject (hdc=0xc90107ba, type=0x2) returned 0x900010
[0276.000] GetCurrentObject (hdc=0xc90107ba, type=0x7) returned 0x1e0507b9
[0276.000] GetCurrentObject (hdc=0xc90107ba, type=0x6) returned 0x8a01c2
[0276.000] SaveDC (hdc=0xc90107ba) returned 1
[0276.000] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x14040798
[0276.000] GetClipRgn (hdc=0xc90107ba, hrgn=0x14040798) returned 0
[0276.000] SelectClipRgn (hdc=0xc90107ba, hrgn=0x430407a1) returned 2
[0276.000] DeleteObject (ho=0x14040798) returned 1
[0276.000] DeleteObject (ho=0x430407a1) returned 1
[0276.000] OffsetViewportOrgEx (in: hdc=0xc90107ba, x=0, y=0, lppt=0x23a3eac | out: lppt=0x23a3eac) returned 1
[0276.000] IsAppThemed () returned 0x1
[0276.000] GetThemeAppProperties () returned 0x3
[0276.000] GetThemeAppProperties () returned 0x3
[0276.000] GetThemeBackgroundContentRect () returned 0x0
[0276.000] RestoreDC (hdc=0xc90107ba, nSavedDC=-1) returned 1
[0276.001] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107ba) returned 0x0
[0276.001] IsAppThemed () returned 0x1
[0276.001] GetThemeAppProperties () returned 0x3
[0276.001] GetThemeAppProperties () returned 0x3
[0276.001] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0276.001] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0276.001] GetCurrentObject (hdc=0xc90107ba, type=0x1) returned 0xb00017
[0276.001] GetCurrentObject (hdc=0xc90107ba, type=0x2) returned 0x900010
[0276.001] GetCurrentObject (hdc=0xc90107ba, type=0x7) returned 0x1e0507b9
[0276.001] GetCurrentObject (hdc=0xc90107ba, type=0x6) returned 0x8a01c2
[0276.001] SaveDC (hdc=0xc90107ba) returned 1
[0276.001] GetTextAlign (hdc=0xc90107ba) returned 0x0
[0276.001] GetTextColor (hdc=0xc90107ba) returned 0x0
[0276.001] GetCurrentObject (hdc=0xc90107ba, type=0x6) returned 0x8a01c2
[0276.001] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0276.001] SelectObject (hdc=0xc90107ba, h=0x450a0799) returned 0x8a01c2
[0276.002] GetBkMode (hdc=0xc90107ba) returned 2
[0276.002] SetBkMode (hdc=0xc90107ba, mode=1) returned 2
[0276.002] DrawTextExW (in: hdc=0xc90107ba, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x23a424c | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0276.002] DrawTextExW (in: hdc=0xc90107ba, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x23a424c | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0276.002] RestoreDC (hdc=0xc90107ba, nSavedDC=-1) returned 1
[0276.002] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107ba) returned 0x0
[0276.002] GetFocus () returned 0x1302ca
[0276.003] IsAppThemed () returned 0x1
[0276.003] GetThemeAppProperties () returned 0x3
[0276.003] GetThemeAppProperties () returned 0x3
[0276.003] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0276.003] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xc90107ba, x1=0, y1=0, rop=0xcc0020) returned 1
[0276.003] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc90107ba) returned 0x0
[0276.003] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0276.003] SelectObject (hdc=0xc90107ba, h=0x85000f) returned 0x1e0507b9
[0276.004] DeleteDC (hdc=0xc90107ba) returned 1
[0276.004] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0276.004] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0276.351] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0276.352] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0276.352] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x35013e) returned 0x1
[0276.355] GetFocus () returned 0x35013e
[0276.355] GetAncestor (hwnd=0x35013e, gaFlags=0x1) returned 0x10010
[0276.355] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0276.355] SetFocus (hWnd=0x202c6) returned 0x0
[0276.358] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0276.360] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0276.360] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0276.360] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0276.360] GetFocus () returned 0x70036
[0276.360] SetFocus (hWnd=0x202c6) returned 0x0
[0276.375] IsWindow (hWnd=0x70036) returned 1
[0276.375] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0276.375] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0276.376] IsWindow (hWnd=0x70036) returned 1
[0276.376] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0276.376] IsWindow (hWnd=0x202c6) returned 1
[0276.376] SetFocus (hWnd=0x202c6) returned 0x70036
[0276.376] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0276.377] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0276.378] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0276.380] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0276.380] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0276.381] GetStockObject (i=5) returned 0x900015
[0276.381] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0276.381] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8ccaf0) returned 0x7
[0276.381] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0276.381] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0276.381] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0276.381] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0276.383] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0276.383] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0276.383] GetFocus () returned 0x202c6
[0276.383] GetCapture () returned 0x0
[0276.383] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.384] IsWindowUnicode (hWnd=0x202c6) returned 1
[0276.384] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.384] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.384] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.384] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.385] IsWindowUnicode (hWnd=0x202c6) returned 1
[0276.385] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.385] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.385] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.385] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0276.385] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0276.385] CreateCompatibleDC (hdc=0x8b010786) returned 0xd1010795
[0276.386] SelectObject (hdc=0xd1010795, h=0x1e0507b9) returned 0x85000f
[0276.386] GdipCreateFromHDC (hdc=0xd1010795, graphics=0x53e958) returned 0x0
[0276.386] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0276.386] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0276.386] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0276.386] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0276.386] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0276.386] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0276.386] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0276.386] LocalFree (hMem=0x89ea88) returned 0x0
[0276.386] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0276.386] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0276.386] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0276.387] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0276.387] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0276.387] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfafb0dbd) returned 0x0
[0276.387] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0276.387] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0276.387] GetCurrentObject (hdc=0xd1010795, type=0x1) returned 0xb00017
[0276.387] GetCurrentObject (hdc=0xd1010795, type=0x2) returned 0x900010
[0276.387] GetCurrentObject (hdc=0xd1010795, type=0x7) returned 0x1e0507b9
[0276.387] GetCurrentObject (hdc=0xd1010795, type=0x6) returned 0x8a01c2
[0276.387] SaveDC (hdc=0xd1010795) returned 1
[0276.387] GetNearestColor (hdc=0xd1010795, color=0xff) returned 0xff
[0276.387] GetNearestColor (hdc=0xd1010795, color=0x55) returned 0x55
[0276.387] GetNearestColor (hdc=0xd1010795, color=0x0) returned 0x0
[0276.387] GetNearestColor (hdc=0xd1010795, color=0x55) returned 0x55
[0276.387] GetNearestColor (hdc=0xd1010795, color=0x0) returned 0x0
[0276.387] GetNearestColor (hdc=0xd1010795, color=0x8080ff) returned 0x8080ff
[0276.388] GetNearestColor (hdc=0xd1010795, color=0x7373e5) returned 0x7373e5
[0276.388] GetNearestColor (hdc=0xd1010795, color=0xe5) returned 0xe5
[0276.388] GetNearestColor (hdc=0xd1010795, color=0x0) returned 0x0
[0276.388] RestoreDC (hdc=0xd1010795, nSavedDC=-1) returned 1
[0276.388] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd1010795) returned 0x0
[0276.388] IsAppThemed () returned 0x1
[0276.388] GetThemeAppProperties () returned 0x3
[0276.388] GetThemeAppProperties () returned 0x3
[0276.388] IsAppThemed () returned 0x1
[0276.388] GetThemeAppProperties () returned 0x3
[0276.388] GetThemeAppProperties () returned 0x3
[0276.388] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x23a4aa8 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0276.389] IsAppThemed () returned 0x1
[0276.389] GetThemeAppProperties () returned 0x3
[0276.389] GetThemeAppProperties () returned 0x3
[0276.389] IsAppThemed () returned 0x1
[0276.389] GetThemeAppProperties () returned 0x3
[0276.389] GetThemeAppProperties () returned 0x3
[0276.389] GetFocus () returned 0x202c6
[0276.389] IsAppThemed () returned 0x1
[0276.389] GetThemeAppProperties () returned 0x3
[0276.389] GetThemeAppProperties () returned 0x3
[0276.389] IsAppThemed () returned 0x1
[0276.389] GetThemeAppProperties () returned 0x3
[0276.389] GetThemeAppProperties () returned 0x3
[0276.389] IsThemePartDefined () returned 0x1
[0276.389] IsAppThemed () returned 0x1
[0276.389] GetThemeAppProperties () returned 0x3
[0276.389] GetThemeAppProperties () returned 0x3
[0276.389] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0276.389] IsAppThemed () returned 0x1
[0276.390] GetThemeAppProperties () returned 0x3
[0276.390] GetThemeAppProperties () returned 0x3
[0276.390] IsAppThemed () returned 0x1
[0276.390] GetThemeAppProperties () returned 0x3
[0276.390] GetThemeAppProperties () returned 0x3
[0276.390] IsThemePartDefined () returned 0x1
[0276.390] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0276.390] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0276.390] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0276.390] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0276.390] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0276.390] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0276.390] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0276.390] LocalFree (hMem=0x89ee08) returned 0x0
[0276.390] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0276.390] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0276.390] LocalFree (hMem=0x89ea88) returned 0x0
[0276.390] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0276.391] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0276.391] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0276.391] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0276.391] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0276.391] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0276.391] GetCurrentObject (hdc=0xd1010795, type=0x1) returned 0xb00017
[0276.391] GetCurrentObject (hdc=0xd1010795, type=0x2) returned 0x900010
[0276.391] GetCurrentObject (hdc=0xd1010795, type=0x7) returned 0x1e0507b9
[0276.391] GetCurrentObject (hdc=0xd1010795, type=0x6) returned 0x8a01c2
[0276.391] SaveDC (hdc=0xd1010795) returned 1
[0276.391] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf804053e
[0276.391] GetClipRgn (hdc=0xd1010795, hrgn=0xf804053e) returned 0
[0276.391] SelectClipRgn (hdc=0xd1010795, hrgn=0x510407a1) returned 2
[0276.392] DeleteObject (ho=0xf804053e) returned 1
[0276.392] DeleteObject (ho=0x510407a1) returned 1
[0276.392] OffsetViewportOrgEx (in: hdc=0xd1010795, x=0, y=0, lppt=0x23a5158 | out: lppt=0x23a5158) returned 1
[0276.392] DrawThemeParentBackground () returned 0x0
[0276.392] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0276.392] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0276.392] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0276.392] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0276.392] GetSystemMetrics (nIndex=42) returned 0
[0276.392] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0276.392] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0276.392] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0276.392] GetCurrentObject (hdc=0xd1010795, type=0x1) returned 0xb00017
[0276.392] GetCurrentObject (hdc=0xd1010795, type=0x2) returned 0x900010
[0276.392] GetCurrentObject (hdc=0xd1010795, type=0x7) returned 0x1e0507b9
[0276.393] GetCurrentObject (hdc=0xd1010795, type=0x6) returned 0x8a01c2
[0276.393] SaveDC (hdc=0xd1010795) returned 2
[0276.393] GetNearestColor (hdc=0xd1010795, color=0xff) returned 0xff
[0276.393] CreateSolidBrush (color=0xff) returned 0xf910078d
[0276.393] FillRect (hDC=0xd1010795, lprc=0x53e128, hbr=0xf910078d) returned 1
[0276.393] DeleteObject (ho=0xf910078d) returned 1
[0276.393] RestoreDC (hdc=0xd1010795, nSavedDC=-1) returned 1
[0276.393] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0276.393] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0276.393] GetSystemMetrics (nIndex=42) returned 0
[0276.393] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0276.393] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0276.394] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0276.394] GetCurrentObject (hdc=0xd1010795, type=0x1) returned 0xb00017
[0276.394] GetCurrentObject (hdc=0xd1010795, type=0x2) returned 0x900010
[0276.394] GetCurrentObject (hdc=0xd1010795, type=0x7) returned 0x1e0507b9
[0276.394] GetCurrentObject (hdc=0xd1010795, type=0x6) returned 0x8a01c2
[0276.394] SaveDC (hdc=0xd1010795) returned 2
[0276.394] GetNearestColor (hdc=0xd1010795, color=0xff) returned 0xff
[0276.394] CreateSolidBrush (color=0xff) returned 0xfa10078d
[0276.394] FillRect (hDC=0xd1010795, lprc=0x53e0c8, hbr=0xfa10078d) returned 1
[0276.394] DeleteObject (ho=0xfa10078d) returned 1
[0276.394] RestoreDC (hdc=0xd1010795, nSavedDC=-1) returned 1
[0276.394] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0276.394] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0276.395] GetSystemMetrics (nIndex=42) returned 0
[0276.395] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0276.395] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0276.395] RestoreDC (hdc=0xd1010795, nSavedDC=-1) returned 1
[0276.395] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd1010795) returned 0x0
[0276.395] IsAppThemed () returned 0x1
[0276.395] GetThemeAppProperties () returned 0x3
[0276.395] GetThemeAppProperties () returned 0x3
[0276.395] IsAppThemed () returned 0x1
[0276.395] GetThemeAppProperties () returned 0x3
[0276.395] GetThemeAppProperties () returned 0x3
[0276.395] IsThemePartDefined () returned 0x1
[0276.395] GdipCreateRegion (region=0x53e64c) returned 0x0
[0276.396] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0276.396] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0276.396] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0276.396] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0276.396] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0276.396] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0276.396] LocalFree (hMem=0x89ea88) returned 0x0
[0276.396] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0276.409] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0276.409] LocalFree (hMem=0x89eee8) returned 0x0
[0276.409] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0276.410] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0276.410] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0276.410] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0276.410] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0276.410] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0276.410] GetCurrentObject (hdc=0xd1010795, type=0x1) returned 0xb00017
[0276.410] GetCurrentObject (hdc=0xd1010795, type=0x2) returned 0x900010
[0276.410] GetCurrentObject (hdc=0xd1010795, type=0x7) returned 0x1e0507b9
[0276.410] GetCurrentObject (hdc=0xd1010795, type=0x6) returned 0x8a01c2
[0276.410] SaveDC (hdc=0xd1010795) returned 1
[0276.410] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x520407a1
[0276.410] GetClipRgn (hdc=0xd1010795, hrgn=0x520407a1) returned 0
[0276.410] SelectClipRgn (hdc=0xd1010795, hrgn=0xfa04053e) returned 2
[0276.411] DeleteObject (ho=0x520407a1) returned 1
[0276.411] DeleteObject (ho=0xfa04053e) returned 1
[0276.411] OffsetViewportOrgEx (in: hdc=0xd1010795, x=0, y=0, lppt=0x23a59bc | out: lppt=0x23a59bc) returned 1
[0276.411] IsAppThemed () returned 0x1
[0276.411] GetThemeAppProperties () returned 0x3
[0276.411] GetThemeAppProperties () returned 0x3
[0276.411] DrawThemeBackground () returned 0x0
[0276.411] RestoreDC (hdc=0xd1010795, nSavedDC=-1) returned 1
[0276.411] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd1010795) returned 0x0
[0276.411] GdipCreateRegion (region=0x53e650) returned 0x0
[0276.411] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0276.411] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0276.411] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0276.411] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0276.412] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0276.412] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0276.412] LocalFree (hMem=0x89ea88) returned 0x0
[0276.412] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0276.412] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0276.412] LocalFree (hMem=0x89ea88) returned 0x0
[0276.412] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0276.412] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0276.412] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0276.412] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0276.413] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0276.413] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0276.413] GetCurrentObject (hdc=0xd1010795, type=0x1) returned 0xb00017
[0276.413] GetCurrentObject (hdc=0xd1010795, type=0x2) returned 0x900010
[0276.413] GetCurrentObject (hdc=0xd1010795, type=0x7) returned 0x1e0507b9
[0276.413] GetCurrentObject (hdc=0xd1010795, type=0x6) returned 0x8a01c2
[0276.413] SaveDC (hdc=0xd1010795) returned 1
[0276.413] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfb04053e
[0276.413] GetClipRgn (hdc=0xd1010795, hrgn=0xfb04053e) returned 0
[0276.413] SelectClipRgn (hdc=0xd1010795, hrgn=0x530407a1) returned 2
[0276.413] DeleteObject (ho=0xfb04053e) returned 1
[0276.413] DeleteObject (ho=0x530407a1) returned 1
[0276.414] OffsetViewportOrgEx (in: hdc=0xd1010795, x=0, y=0, lppt=0x23a5c90 | out: lppt=0x23a5c90) returned 1
[0276.414] IsAppThemed () returned 0x1
[0276.414] GetThemeAppProperties () returned 0x3
[0276.414] GetThemeAppProperties () returned 0x3
[0276.414] GetThemeBackgroundContentRect () returned 0x0
[0276.414] RestoreDC (hdc=0xd1010795, nSavedDC=-1) returned 1
[0276.414] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd1010795) returned 0x0
[0276.414] IsAppThemed () returned 0x1
[0276.414] GetThemeAppProperties () returned 0x3
[0276.414] GetThemeAppProperties () returned 0x3
[0276.414] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0276.414] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0276.414] GetCurrentObject (hdc=0xd1010795, type=0x1) returned 0xb00017
[0276.414] GetCurrentObject (hdc=0xd1010795, type=0x2) returned 0x900010
[0276.414] GetCurrentObject (hdc=0xd1010795, type=0x7) returned 0x1e0507b9
[0276.414] GetCurrentObject (hdc=0xd1010795, type=0x6) returned 0x8a01c2
[0276.414] SaveDC (hdc=0xd1010795) returned 1
[0276.415] GetTextAlign (hdc=0xd1010795) returned 0x0
[0276.415] GetTextColor (hdc=0xd1010795) returned 0x0
[0276.415] GetCurrentObject (hdc=0xd1010795, type=0x6) returned 0x8a01c2
[0276.415] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0276.415] SelectObject (hdc=0xd1010795, h=0x450a0799) returned 0x8a01c2
[0276.415] GetBkMode (hdc=0xd1010795) returned 2
[0276.415] SetBkMode (hdc=0xd1010795, mode=1) returned 2
[0276.415] DrawTextExW (in: hdc=0xd1010795, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x23a6030 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0276.416] DrawTextExW (in: hdc=0xd1010795, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x23a6030 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0276.416] RestoreDC (hdc=0xd1010795, nSavedDC=-1) returned 1
[0276.416] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd1010795) returned 0x0
[0276.416] GetFocus () returned 0x202c6
[0276.416] IsAppThemed () returned 0x1
[0276.416] GetThemeAppProperties () returned 0x3
[0276.416] GetThemeAppProperties () returned 0x3
[0276.416] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0276.416] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xd1010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0276.417] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd1010795) returned 0x0
[0276.417] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0276.417] SelectObject (hdc=0xd1010795, h=0x85000f) returned 0x1e0507b9
[0276.417] DeleteDC (hdc=0xd1010795) returned 1
[0276.417] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0276.417] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0276.417] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.417] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.417] WaitMessage () returned 1
[0276.421] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.421] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.421] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.422] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.422] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.423] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.423] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.423] WaitMessage () returned 1
[0276.465] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.465] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.465] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.465] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.465] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.467] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.467] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.467] WaitMessage () returned 1
[0276.468] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.468] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.468] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.468] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.469] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.470] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.470] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.470] WaitMessage () returned 1
[0276.470] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.470] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.471] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.471] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.471] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.472] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.473] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.473] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.473] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.473] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.473] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.473] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.473] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.473] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.473] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.473] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.474] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.474] WaitMessage () returned 1
[0276.475] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.475] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.475] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.475] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.475] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.476] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.477] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.477] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.477] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.477] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.477] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.477] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.477] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.477] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.477] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.477] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.478] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.478] WaitMessage () returned 1
[0276.478] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.478] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.478] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.479] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.479] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.480] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.480] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.480] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.480] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.480] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.481] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.481] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.481] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.481] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.481] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.481] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.482] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.482] WaitMessage () returned 1
[0276.482] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.482] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.482] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.482] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.482] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.484] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.484] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.484] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.484] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.484] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.484] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.484] IsWindowUnicode (hWnd=0x102dc) returned 1
[0276.484] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.485] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.485] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.485] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.485] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.485] WaitMessage () returned 1
[0276.572] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.573] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.573] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.573] DispatchMessageA (lpMsg=0x53eef8) returned 0x7e9c
[0276.573] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.573] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.573] WaitMessage () returned 1
[0276.678] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.678] IsWindowUnicode (hWnd=0x202d0) returned 1
[0276.678] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0276.678] TranslateMessage (lpMsg=0x53eef8) returned 0
[0276.678] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0276.678] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.679] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0276.679] WaitMessage () returned 1
[0277.584] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0277.584] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0277.584] TranslateMessage (lpMsg=0x53eef8) returned 0
[0277.584] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0277.585] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0277.585] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0277.585] WaitMessage () returned 1
[0278.182] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0278.182] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c0239) returned 0x1
[0278.183] IsWindowUnicode (hWnd=0x202c6) returned 1
[0278.183] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0278.183] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c0239) returned 0x1
[0278.183] SetCursor (hCursor=0x10003) returned 0x10003
[0278.183] TranslateMessage (lpMsg=0x53eef8) returned 0
[0278.183] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0278.183] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0278.183] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0278.183] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0278.183] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0278.184] GetKeyState (nVirtKey=1) returned 1
[0278.184] GetKeyState (nVirtKey=2) returned 0
[0278.184] GetKeyState (nVirtKey=4) returned 0
[0278.184] GetKeyState (nVirtKey=5) returned 0
[0278.184] GetKeyState (nVirtKey=6) returned 0
[0278.184] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0278.184] IsWindowUnicode (hWnd=0x202c6) returned 1
[0278.184] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0278.184] TranslateMessage (lpMsg=0x53eef8) returned 0
[0278.184] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0278.184] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0278.185] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0278.185] CreateCompatibleDC (hdc=0x8b010786) returned 0xff0107b3
[0278.185] SelectObject (hdc=0xff0107b3, h=0x1e0507b9) returned 0x85000f
[0278.185] GdipCreateFromHDC (hdc=0xff0107b3, graphics=0x53e958) returned 0x0
[0278.185] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0278.185] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0278.185] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0278.185] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.186] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0278.186] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.186] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0278.186] LocalFree (hMem=0x89ee08) returned 0x0
[0278.186] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.186] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0278.186] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.186] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0278.186] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0278.186] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaf90dbd) returned 0x0
[0278.186] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.186] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0278.186] GetCurrentObject (hdc=0xff0107b3, type=0x1) returned 0xb00017
[0278.186] GetCurrentObject (hdc=0xff0107b3, type=0x2) returned 0x900010
[0278.186] GetCurrentObject (hdc=0xff0107b3, type=0x7) returned 0x1e0507b9
[0278.187] GetCurrentObject (hdc=0xff0107b3, type=0x6) returned 0x8a01c2
[0278.187] SaveDC (hdc=0xff0107b3) returned 1
[0278.187] GetNearestColor (hdc=0xff0107b3, color=0xff) returned 0xff
[0278.187] GetNearestColor (hdc=0xff0107b3, color=0x55) returned 0x55
[0278.187] GetNearestColor (hdc=0xff0107b3, color=0x0) returned 0x0
[0278.187] GetNearestColor (hdc=0xff0107b3, color=0x55) returned 0x55
[0278.187] GetNearestColor (hdc=0xff0107b3, color=0x0) returned 0x0
[0278.187] GetNearestColor (hdc=0xff0107b3, color=0x8080ff) returned 0x8080ff
[0278.187] GetNearestColor (hdc=0xff0107b3, color=0x7373e5) returned 0x7373e5
[0278.187] GetNearestColor (hdc=0xff0107b3, color=0xe5) returned 0xe5
[0278.187] GetNearestColor (hdc=0xff0107b3, color=0x0) returned 0x0
[0278.187] RestoreDC (hdc=0xff0107b3, nSavedDC=-1) returned 1
[0278.188] GdipReleaseDC (graphics=0x5d92c30, hdc=0xff0107b3) returned 0x0
[0278.188] IsAppThemed () returned 0x1
[0278.188] GetThemeAppProperties () returned 0x3
[0278.188] GetThemeAppProperties () returned 0x3
[0278.188] IsAppThemed () returned 0x1
[0278.188] GetThemeAppProperties () returned 0x3
[0278.188] GetThemeAppProperties () returned 0x3
[0278.188] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x23a69c4 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0278.188] IsAppThemed () returned 0x1
[0278.189] GetThemeAppProperties () returned 0x3
[0278.189] GetThemeAppProperties () returned 0x3
[0278.189] IsAppThemed () returned 0x1
[0278.189] GetThemeAppProperties () returned 0x3
[0278.189] GetThemeAppProperties () returned 0x3
[0278.189] IsAppThemed () returned 0x1
[0278.189] GetThemeAppProperties () returned 0x3
[0278.189] GetThemeAppProperties () returned 0x3
[0278.189] IsAppThemed () returned 0x1
[0278.189] GetThemeAppProperties () returned 0x3
[0278.189] GetThemeAppProperties () returned 0x3
[0278.189] IsThemePartDefined () returned 0x1
[0278.189] IsAppThemed () returned 0x1
[0278.189] GetThemeAppProperties () returned 0x3
[0278.189] GetThemeAppProperties () returned 0x3
[0278.189] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0278.189] IsAppThemed () returned 0x1
[0278.189] GetThemeAppProperties () returned 0x3
[0278.189] GetThemeAppProperties () returned 0x3
[0278.189] IsAppThemed () returned 0x1
[0278.190] GetThemeAppProperties () returned 0x3
[0278.190] GetThemeAppProperties () returned 0x3
[0278.190] IsThemePartDefined () returned 0x1
[0278.190] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0278.190] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.190] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0278.190] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.190] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0278.190] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.190] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.190] LocalFree (hMem=0x89ea88) returned 0x0
[0278.190] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.190] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0278.190] LocalFree (hMem=0x89ee08) returned 0x0
[0278.190] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.190] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0278.190] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0278.190] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0278.190] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.191] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0278.191] GetCurrentObject (hdc=0xff0107b3, type=0x1) returned 0xb00017
[0278.191] GetCurrentObject (hdc=0xff0107b3, type=0x2) returned 0x900010
[0278.191] GetCurrentObject (hdc=0xff0107b3, type=0x7) returned 0x1e0507b9
[0278.191] GetCurrentObject (hdc=0xff0107b3, type=0x6) returned 0x8a01c2
[0278.191] SaveDC (hdc=0xff0107b3) returned 1
[0278.191] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x540407a1
[0278.191] GetClipRgn (hdc=0xff0107b3, hrgn=0x540407a1) returned 0
[0278.191] SelectClipRgn (hdc=0xff0107b3, hrgn=0xff04053e) returned 2
[0278.191] DeleteObject (ho=0x540407a1) returned 1
[0278.191] DeleteObject (ho=0xff04053e) returned 1
[0278.191] OffsetViewportOrgEx (in: hdc=0xff0107b3, x=0, y=0, lppt=0x23a7074 | out: lppt=0x23a7074) returned 1
[0278.191] DrawThemeParentBackground () returned 0x0
[0278.192] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0278.192] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0278.192] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0278.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0278.192] GetSystemMetrics (nIndex=42) returned 0
[0278.192] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0278.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0278.192] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0278.192] GetCurrentObject (hdc=0xff0107b3, type=0x1) returned 0xb00017
[0278.192] GetCurrentObject (hdc=0xff0107b3, type=0x2) returned 0x900010
[0278.192] GetCurrentObject (hdc=0xff0107b3, type=0x7) returned 0x1e0507b9
[0278.192] GetCurrentObject (hdc=0xff0107b3, type=0x6) returned 0x8a01c2
[0278.192] SaveDC (hdc=0xff0107b3) returned 2
[0278.192] GetNearestColor (hdc=0xff0107b3, color=0xff) returned 0xff
[0278.193] CreateSolidBrush (color=0xff) returned 0xfb10078d
[0278.193] FillRect (hDC=0xff0107b3, lprc=0x53e120, hbr=0xfb10078d) returned 1
[0278.193] DeleteObject (ho=0xfb10078d) returned 1
[0278.193] RestoreDC (hdc=0xff0107b3, nSavedDC=-1) returned 1
[0278.195] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0278.195] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0278.195] GetSystemMetrics (nIndex=42) returned 0
[0278.195] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0278.195] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0278.195] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0278.195] GetCurrentObject (hdc=0xff0107b3, type=0x1) returned 0xb00017
[0278.195] GetCurrentObject (hdc=0xff0107b3, type=0x2) returned 0x900010
[0278.195] GetCurrentObject (hdc=0xff0107b3, type=0x7) returned 0x1e0507b9
[0278.195] GetCurrentObject (hdc=0xff0107b3, type=0x6) returned 0x8a01c2
[0278.195] SaveDC (hdc=0xff0107b3) returned 2
[0278.195] GetNearestColor (hdc=0xff0107b3, color=0xff) returned 0xff
[0278.195] CreateSolidBrush (color=0xff) returned 0xfc10078d
[0278.196] FillRect (hDC=0xff0107b3, lprc=0x53e0c0, hbr=0xfc10078d) returned 1
[0278.196] DeleteObject (ho=0xfc10078d) returned 1
[0278.196] RestoreDC (hdc=0xff0107b3, nSavedDC=-1) returned 1
[0278.196] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0278.196] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0278.196] GetSystemMetrics (nIndex=42) returned 0
[0278.196] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0278.196] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0278.196] RestoreDC (hdc=0xff0107b3, nSavedDC=-1) returned 1
[0278.196] GdipReleaseDC (graphics=0x5d92c30, hdc=0xff0107b3) returned 0x0
[0278.196] IsAppThemed () returned 0x1
[0278.196] GetThemeAppProperties () returned 0x3
[0278.196] GetThemeAppProperties () returned 0x3
[0278.197] IsAppThemed () returned 0x1
[0278.197] GetThemeAppProperties () returned 0x3
[0278.197] GetThemeAppProperties () returned 0x3
[0278.197] IsThemePartDefined () returned 0x1
[0278.197] GdipCreateRegion (region=0x53e640) returned 0x0
[0278.197] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.197] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0278.197] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.197] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0278.197] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.197] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0278.197] LocalFree (hMem=0x89ea88) returned 0x0
[0278.197] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.197] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0278.197] LocalFree (hMem=0x89ea88) returned 0x0
[0278.197] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.197] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0278.197] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0278.198] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0278.198] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.198] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0278.198] GetCurrentObject (hdc=0xff0107b3, type=0x1) returned 0xb00017
[0278.198] GetCurrentObject (hdc=0xff0107b3, type=0x2) returned 0x900010
[0278.198] GetCurrentObject (hdc=0xff0107b3, type=0x7) returned 0x1e0507b9
[0278.198] GetCurrentObject (hdc=0xff0107b3, type=0x6) returned 0x8a01c2
[0278.198] SaveDC (hdc=0xff0107b3) returned 1
[0278.198] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4053e
[0278.198] GetClipRgn (hdc=0xff0107b3, hrgn=0x4053e) returned 0
[0278.198] SelectClipRgn (hdc=0xff0107b3, hrgn=0x560407a1) returned 2
[0278.198] DeleteObject (ho=0x4053e) returned 1
[0278.198] DeleteObject (ho=0x560407a1) returned 1
[0278.198] OffsetViewportOrgEx (in: hdc=0xff0107b3, x=0, y=0, lppt=0x23a78d8 | out: lppt=0x23a78d8) returned 1
[0278.198] IsAppThemed () returned 0x1
[0278.198] GetThemeAppProperties () returned 0x3
[0278.199] GetThemeAppProperties () returned 0x3
[0278.199] DrawThemeBackground () returned 0x0
[0278.199] RestoreDC (hdc=0xff0107b3, nSavedDC=-1) returned 1
[0278.200] GdipReleaseDC (graphics=0x5d92c30, hdc=0xff0107b3) returned 0x0
[0278.200] GdipCreateRegion (region=0x53e644) returned 0x0
[0278.200] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.200] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0278.200] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.200] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0278.201] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.201] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.201] LocalFree (hMem=0x89ea88) returned 0x0
[0278.201] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.201] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0278.201] LocalFree (hMem=0x89ee08) returned 0x0
[0278.201] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.201] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0278.201] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0278.201] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0278.201] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.201] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0278.201] GetCurrentObject (hdc=0xff0107b3, type=0x1) returned 0xb00017
[0278.201] GetCurrentObject (hdc=0xff0107b3, type=0x2) returned 0x900010
[0278.201] GetCurrentObject (hdc=0xff0107b3, type=0x7) returned 0x1e0507b9
[0278.201] GetCurrentObject (hdc=0xff0107b3, type=0x6) returned 0x8a01c2
[0278.202] SaveDC (hdc=0xff0107b3) returned 1
[0278.202] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x570407a1
[0278.202] GetClipRgn (hdc=0xff0107b3, hrgn=0x570407a1) returned 0
[0278.202] SelectClipRgn (hdc=0xff0107b3, hrgn=0x104053e) returned 2
[0278.202] DeleteObject (ho=0x570407a1) returned 1
[0278.202] DeleteObject (ho=0x104053e) returned 1
[0278.202] OffsetViewportOrgEx (in: hdc=0xff0107b3, x=0, y=0, lppt=0x23a7bac | out: lppt=0x23a7bac) returned 1
[0278.202] IsAppThemed () returned 0x1
[0278.202] GetThemeAppProperties () returned 0x3
[0278.202] GetThemeAppProperties () returned 0x3
[0278.202] GetThemeBackgroundContentRect () returned 0x0
[0278.202] RestoreDC (hdc=0xff0107b3, nSavedDC=-1) returned 1
[0278.202] GdipReleaseDC (graphics=0x5d92c30, hdc=0xff0107b3) returned 0x0
[0278.202] IsAppThemed () returned 0x1
[0278.202] GetThemeAppProperties () returned 0x3
[0278.202] GetThemeAppProperties () returned 0x3
[0278.203] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0278.203] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0278.203] GetCurrentObject (hdc=0xff0107b3, type=0x1) returned 0xb00017
[0278.203] GetCurrentObject (hdc=0xff0107b3, type=0x2) returned 0x900010
[0278.203] GetCurrentObject (hdc=0xff0107b3, type=0x7) returned 0x1e0507b9
[0278.203] GetCurrentObject (hdc=0xff0107b3, type=0x6) returned 0x8a01c2
[0278.203] SaveDC (hdc=0xff0107b3) returned 1
[0278.203] GetTextAlign (hdc=0xff0107b3) returned 0x0
[0278.203] GetTextColor (hdc=0xff0107b3) returned 0x0
[0278.203] GetCurrentObject (hdc=0xff0107b3, type=0x6) returned 0x8a01c2
[0278.203] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0278.203] SelectObject (hdc=0xff0107b3, h=0x450a0799) returned 0x8a01c2
[0278.203] GetBkMode (hdc=0xff0107b3) returned 2
[0278.204] SetBkMode (hdc=0xff0107b3, mode=1) returned 2
[0278.204] DrawTextExW (in: hdc=0xff0107b3, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x23a7f4c | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0278.204] DrawTextExW (in: hdc=0xff0107b3, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x23a7f4c | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0278.205] RestoreDC (hdc=0xff0107b3, nSavedDC=-1) returned 1
[0278.205] GdipReleaseDC (graphics=0x5d92c30, hdc=0xff0107b3) returned 0x0
[0278.205] GetFocus () returned 0x202c6
[0278.205] IsAppThemed () returned 0x1
[0278.205] GetThemeAppProperties () returned 0x3
[0278.205] GetThemeAppProperties () returned 0x3
[0278.205] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0278.205] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0xff0107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0278.206] GdipReleaseDC (graphics=0x5d92c30, hdc=0xff0107b3) returned 0x0
[0278.206] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0278.206] SelectObject (hdc=0xff0107b3, h=0x85000f) returned 0x1e0507b9
[0278.206] DeleteDC (hdc=0xff0107b3) returned 1
[0278.206] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0278.206] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0278.206] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0278.206] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0278.206] WaitMessage () returned 1
[0278.287] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0278.287] IsWindowUnicode (hWnd=0x202c6) returned 1
[0278.287] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0278.287] TranslateMessage (lpMsg=0x53eef8) returned 0
[0278.288] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0278.288] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0278.288] IsWindowUnicode (hWnd=0x202c6) returned 1
[0278.288] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0278.288] TranslateMessage (lpMsg=0x53eef8) returned 0
[0278.288] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0278.288] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x140049) returned 0x0
[0278.288] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0278.288] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0278.288] WaitMessage () returned 1
[0278.400] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0278.401] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c0239) returned 0x1
[0278.401] IsWindowUnicode (hWnd=0x202c6) returned 1
[0278.401] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0278.401] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c0239) returned 0x1
[0278.401] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0278.401] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12f01e3) returned 0x0
[0278.401] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0278.401] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0278.402] SetCursor (hCursor=0x10003) returned 0x10003
[0278.402] TranslateMessage (lpMsg=0x53eef8) returned 0
[0278.402] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0278.402] GetKeyState (nVirtKey=1) returned -128
[0278.402] GetKeyState (nVirtKey=2) returned 0
[0278.402] GetKeyState (nVirtKey=4) returned 0
[0278.402] GetKeyState (nVirtKey=5) returned 0
[0278.402] GetKeyState (nVirtKey=6) returned 0
[0278.402] IsWindowVisible (hWnd=0x202c6) returned 1
[0278.402] IsWindowEnabled (hWnd=0x202c6) returned 1
[0278.402] SetFocus (hWnd=0x202c6) returned 0x202c6
[0278.402] GetFocus () returned 0x202c6
[0278.402] GetFocus () returned 0x202c6
[0278.402] GetFocus () returned 0x202c6
[0278.402] GetKeyState (nVirtKey=1) returned -128
[0278.402] GetKeyState (nVirtKey=2) returned 0
[0278.402] GetKeyState (nVirtKey=4) returned 0
[0278.402] GetKeyState (nVirtKey=5) returned 0
[0278.402] GetKeyState (nVirtKey=6) returned 0
[0278.403] GetCapture () returned 0x0
[0278.403] SetCapture (hWnd=0x202c6) returned 0x0
[0278.403] GetKeyState (nVirtKey=1) returned -128
[0278.403] GetKeyState (nVirtKey=2) returned 0
[0278.403] GetKeyState (nVirtKey=4) returned 0
[0278.403] GetKeyState (nVirtKey=5) returned 0
[0278.403] GetKeyState (nVirtKey=6) returned 0
[0278.403] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0278.403] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0278.403] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0278.403] IsWindowUnicode (hWnd=0x202c6) returned 1
[0278.403] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0278.403] TranslateMessage (lpMsg=0x53eef8) returned 0
[0278.403] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0278.403] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23a80d0, cPoints=0x1 | out: lpPoints=0x23a80d0) returned 25690608
[0278.403] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0278.403] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0278.404] UpdateWindow (hWnd=0x202c6) returned 1
[0278.404] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x8b010786
[0278.404] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0278.404] CreateCompatibleDC (hdc=0x8b010786) returned 0x107b3
[0278.404] SelectObject (hdc=0x107b3, h=0x1e0507b9) returned 0x85000f
[0278.404] GdipCreateFromHDC (hdc=0x107b3, graphics=0x53e5f0) returned 0x0
[0278.404] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0278.404] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0278.404] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0278.404] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.405] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0278.405] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.405] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0278.405] LocalFree (hMem=0x89ea88) returned 0x0
[0278.405] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.405] GdipCreateRegion (region=0x53e638) returned 0x0
[0278.405] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.405] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0278.405] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0278.405] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaf70dbd) returned 0x0
[0278.405] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.405] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0278.405] GetCurrentObject (hdc=0x107b3, type=0x1) returned 0xb00017
[0278.405] GetCurrentObject (hdc=0x107b3, type=0x2) returned 0x900010
[0278.405] GetCurrentObject (hdc=0x107b3, type=0x7) returned 0x1e0507b9
[0278.405] GetCurrentObject (hdc=0x107b3, type=0x6) returned 0x8a01c2
[0278.406] SaveDC (hdc=0x107b3) returned 1
[0278.406] GetNearestColor (hdc=0x107b3, color=0xff) returned 0xff
[0278.406] GetNearestColor (hdc=0x107b3, color=0x55) returned 0x55
[0278.406] GetNearestColor (hdc=0x107b3, color=0x0) returned 0x0
[0278.406] GetNearestColor (hdc=0x107b3, color=0x55) returned 0x55
[0278.406] GetNearestColor (hdc=0x107b3, color=0x0) returned 0x0
[0278.406] GetNearestColor (hdc=0x107b3, color=0x8080ff) returned 0x8080ff
[0278.406] GetNearestColor (hdc=0x107b3, color=0x7373e5) returned 0x7373e5
[0278.406] GetNearestColor (hdc=0x107b3, color=0xe5) returned 0xe5
[0278.406] GetNearestColor (hdc=0x107b3, color=0x0) returned 0x0
[0278.406] RestoreDC (hdc=0x107b3, nSavedDC=-1) returned 1
[0278.406] GdipReleaseDC (graphics=0x5d92c30, hdc=0x107b3) returned 0x0
[0278.406] IsAppThemed () returned 0x1
[0278.407] GetThemeAppProperties () returned 0x3
[0278.407] GetThemeAppProperties () returned 0x3
[0278.407] IsAppThemed () returned 0x1
[0278.407] GetThemeAppProperties () returned 0x3
[0278.407] GetThemeAppProperties () returned 0x3
[0278.407] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x23a87ec | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0278.407] IsAppThemed () returned 0x1
[0278.407] GetThemeAppProperties () returned 0x3
[0278.407] GetThemeAppProperties () returned 0x3
[0278.407] IsAppThemed () returned 0x1
[0278.407] GetThemeAppProperties () returned 0x3
[0278.407] GetThemeAppProperties () returned 0x3
[0278.407] IsAppThemed () returned 0x1
[0278.407] GetThemeAppProperties () returned 0x3
[0278.408] GetThemeAppProperties () returned 0x3
[0278.408] IsAppThemed () returned 0x1
[0278.408] GetThemeAppProperties () returned 0x3
[0278.408] GetThemeAppProperties () returned 0x3
[0278.408] IsThemePartDefined () returned 0x1
[0278.408] IsAppThemed () returned 0x1
[0278.408] GetThemeAppProperties () returned 0x3
[0278.408] GetThemeAppProperties () returned 0x3
[0278.408] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0278.408] IsAppThemed () returned 0x1
[0278.408] GetThemeAppProperties () returned 0x3
[0278.408] GetThemeAppProperties () returned 0x3
[0278.408] IsAppThemed () returned 0x1
[0278.408] GetThemeAppProperties () returned 0x3
[0278.408] GetThemeAppProperties () returned 0x3
[0278.408] IsThemePartDefined () returned 0x1
[0278.408] GdipCreateRegion (region=0x53e354) returned 0x0
[0278.408] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.408] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0278.408] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.409] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0278.409] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.409] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.409] LocalFree (hMem=0x89ea88) returned 0x0
[0278.409] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0278.409] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0278.409] LocalFree (hMem=0x89ec80) returned 0x0
[0278.409] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.409] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0278.409] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0278.409] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0278.409] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.409] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0278.409] GetCurrentObject (hdc=0x107b3, type=0x1) returned 0xb00017
[0278.409] GetCurrentObject (hdc=0x107b3, type=0x2) returned 0x900010
[0278.409] GetCurrentObject (hdc=0x107b3, type=0x7) returned 0x1e0507b9
[0278.409] GetCurrentObject (hdc=0x107b3, type=0x6) returned 0x8a01c2
[0278.410] SaveDC (hdc=0x107b3) returned 1
[0278.410] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x204053e
[0278.410] GetClipRgn (hdc=0x107b3, hrgn=0x204053e) returned 0
[0278.410] SelectClipRgn (hdc=0x107b3, hrgn=0x5b0407a1) returned 2
[0278.410] DeleteObject (ho=0x204053e) returned 1
[0278.410] DeleteObject (ho=0x5b0407a1) returned 1
[0278.410] OffsetViewportOrgEx (in: hdc=0x107b3, x=0, y=0, lppt=0x23a8e9c | out: lppt=0x23a8e9c) returned 1
[0278.410] DrawThemeParentBackground () returned 0x0
[0278.410] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0278.410] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0278.410] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0278.410] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0278.410] GetSystemMetrics (nIndex=42) returned 0
[0278.410] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0278.411] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0278.411] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0278.411] GetCurrentObject (hdc=0x107b3, type=0x1) returned 0xb00017
[0278.411] GetCurrentObject (hdc=0x107b3, type=0x2) returned 0x900010
[0278.411] GetCurrentObject (hdc=0x107b3, type=0x7) returned 0x1e0507b9
[0278.411] GetCurrentObject (hdc=0x107b3, type=0x6) returned 0x8a01c2
[0278.411] SaveDC (hdc=0x107b3) returned 2
[0278.411] GetNearestColor (hdc=0x107b3, color=0xff) returned 0xff
[0278.411] CreateSolidBrush (color=0xff) returned 0xfd10078d
[0278.411] FillRect (hDC=0x107b3, lprc=0x53ddb8, hbr=0xfd10078d) returned 1
[0278.411] DeleteObject (ho=0xfd10078d) returned 1
[0278.411] RestoreDC (hdc=0x107b3, nSavedDC=-1) returned 1
[0278.411] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0278.411] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0278.412] GetSystemMetrics (nIndex=42) returned 0
[0278.412] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0278.412] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0278.412] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0278.412] GetCurrentObject (hdc=0x107b3, type=0x1) returned 0xb00017
[0278.412] GetCurrentObject (hdc=0x107b3, type=0x2) returned 0x900010
[0278.412] GetCurrentObject (hdc=0x107b3, type=0x7) returned 0x1e0507b9
[0278.412] GetCurrentObject (hdc=0x107b3, type=0x6) returned 0x8a01c2
[0278.412] SaveDC (hdc=0x107b3) returned 2
[0278.412] GetNearestColor (hdc=0x107b3, color=0xff) returned 0xff
[0278.412] CreateSolidBrush (color=0xff) returned 0xfe10078d
[0278.412] FillRect (hDC=0x107b3, lprc=0x53dd58, hbr=0xfe10078d) returned 1
[0278.412] DeleteObject (ho=0xfe10078d) returned 1
[0278.412] RestoreDC (hdc=0x107b3, nSavedDC=-1) returned 1
[0278.413] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0278.413] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0278.413] GetSystemMetrics (nIndex=42) returned 0
[0278.413] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0278.413] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0278.413] RestoreDC (hdc=0x107b3, nSavedDC=-1) returned 1
[0278.413] GdipReleaseDC (graphics=0x5d92c30, hdc=0x107b3) returned 0x0
[0278.413] IsAppThemed () returned 0x1
[0278.413] GetThemeAppProperties () returned 0x3
[0278.413] GetThemeAppProperties () returned 0x3
[0278.413] IsAppThemed () returned 0x1
[0278.413] GetThemeAppProperties () returned 0x3
[0278.413] GetThemeAppProperties () returned 0x3
[0278.413] IsThemePartDefined () returned 0x1
[0278.413] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0278.413] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.414] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0278.414] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.414] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0278.414] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0278.414] LocalFree (hMem=0x89ea88) returned 0x0
[0278.414] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0278.414] LocalFree (hMem=0x89ec80) returned 0x0
[0278.414] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.414] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0278.414] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0278.414] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0278.414] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.414] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0278.414] GetCurrentObject (hdc=0x107b3, type=0x1) returned 0xb00017
[0278.414] GetCurrentObject (hdc=0x107b3, type=0x2) returned 0x900010
[0278.414] GetCurrentObject (hdc=0x107b3, type=0x7) returned 0x1e0507b9
[0278.414] GetCurrentObject (hdc=0x107b3, type=0x6) returned 0x8a01c2
[0278.414] SaveDC (hdc=0x107b3) returned 1
[0278.414] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5c0407a1
[0278.415] GetClipRgn (hdc=0x107b3, hrgn=0x5c0407a1) returned 0
[0278.415] SelectClipRgn (hdc=0x107b3, hrgn=0x404053e) returned 2
[0278.415] DeleteObject (ho=0x5c0407a1) returned 1
[0278.415] DeleteObject (ho=0x404053e) returned 1
[0278.415] OffsetViewportOrgEx (in: hdc=0x107b3, x=0, y=0, lppt=0x23a9700 | out: lppt=0x23a9700) returned 1
[0278.415] IsAppThemed () returned 0x1
[0278.415] GetThemeAppProperties () returned 0x3
[0278.415] GetThemeAppProperties () returned 0x3
[0278.415] DrawThemeBackground () returned 0x0
[0278.415] RestoreDC (hdc=0x107b3, nSavedDC=-1) returned 1
[0278.415] GdipReleaseDC (graphics=0x5d92c30, hdc=0x107b3) returned 0x0
[0278.415] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0278.415] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.415] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0278.415] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.415] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0278.415] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.416] LocalFree (hMem=0x89ea88) returned 0x0
[0278.416] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0278.416] LocalFree (hMem=0x89ec80) returned 0x0
[0278.416] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.416] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0278.416] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0278.416] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0278.416] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.416] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0278.416] GetCurrentObject (hdc=0x107b3, type=0x1) returned 0xb00017
[0278.416] GetCurrentObject (hdc=0x107b3, type=0x2) returned 0x900010
[0278.416] GetCurrentObject (hdc=0x107b3, type=0x7) returned 0x1e0507b9
[0278.416] GetCurrentObject (hdc=0x107b3, type=0x6) returned 0x8a01c2
[0278.416] SaveDC (hdc=0x107b3) returned 1
[0278.416] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x504053e
[0278.416] GetClipRgn (hdc=0x107b3, hrgn=0x504053e) returned 0
[0278.416] SelectClipRgn (hdc=0x107b3, hrgn=0x5d0407a1) returned 2
[0278.416] DeleteObject (ho=0x504053e) returned 1
[0278.416] DeleteObject (ho=0x5d0407a1) returned 1
[0278.417] OffsetViewportOrgEx (in: hdc=0x107b3, x=0, y=0, lppt=0x23a99d4 | out: lppt=0x23a99d4) returned 1
[0278.417] IsAppThemed () returned 0x1
[0278.417] GetThemeAppProperties () returned 0x3
[0278.417] GetThemeAppProperties () returned 0x3
[0278.417] GetThemeBackgroundContentRect () returned 0x0
[0278.417] RestoreDC (hdc=0x107b3, nSavedDC=-1) returned 1
[0278.417] GdipReleaseDC (graphics=0x5d92c30, hdc=0x107b3) returned 0x0
[0278.417] IsAppThemed () returned 0x1
[0278.417] GetThemeAppProperties () returned 0x3
[0278.417] GetThemeAppProperties () returned 0x3
[0278.417] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0278.417] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0278.417] GetCurrentObject (hdc=0x107b3, type=0x1) returned 0xb00017
[0278.417] GetCurrentObject (hdc=0x107b3, type=0x2) returned 0x900010
[0278.417] GetCurrentObject (hdc=0x107b3, type=0x7) returned 0x1e0507b9
[0278.417] GetCurrentObject (hdc=0x107b3, type=0x6) returned 0x8a01c2
[0278.417] SaveDC (hdc=0x107b3) returned 1
[0278.417] GetTextAlign (hdc=0x107b3) returned 0x0
[0278.417] GetTextColor (hdc=0x107b3) returned 0x0
[0278.418] GetCurrentObject (hdc=0x107b3, type=0x6) returned 0x8a01c2
[0278.418] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0278.418] SelectObject (hdc=0x107b3, h=0x450a0799) returned 0x8a01c2
[0278.418] GetBkMode (hdc=0x107b3) returned 2
[0278.418] SetBkMode (hdc=0x107b3, mode=1) returned 2
[0278.418] DrawTextExW (in: hdc=0x107b3, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x23a9d74 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0278.418] DrawTextExW (in: hdc=0x107b3, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x23a9d74 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0278.419] RestoreDC (hdc=0x107b3, nSavedDC=-1) returned 1
[0278.419] GdipReleaseDC (graphics=0x5d92c30, hdc=0x107b3) returned 0x0
[0278.419] GetFocus () returned 0x202c6
[0278.419] IsAppThemed () returned 0x1
[0278.419] GetThemeAppProperties () returned 0x3
[0278.419] GetThemeAppProperties () returned 0x3
[0278.419] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0278.419] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0278.419] GdipReleaseDC (graphics=0x5d92c30, hdc=0x107b3) returned 0x0
[0278.419] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0278.419] SelectObject (hdc=0x107b3, h=0x85000f) returned 0x1e0507b9
[0278.420] DeleteDC (hdc=0x107b3) returned 1
[0278.420] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0278.420] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0278.420] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23a9e70, cPoints=0x1 | out: lpPoints=0x23a9e70) returned 25690608
[0278.420] WindowFromPoint (Point=0x239) returned 0x202c6
[0278.420] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19c0239) returned 0x1
[0278.420] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0278.420] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0278.421] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.422] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0278.423] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.423] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0278.423] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.423] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0278.423] GetDC (hWnd=0x0) returned 0xf0105ee
[0278.423] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e888) returned 0x0
[0278.424] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0278.424] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0278.424] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0278.424] GetSystemMetrics (nIndex=5) returned 1
[0278.424] GetSystemMetrics (nIndex=6) returned 1
[0278.425] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.425] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0278.425] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.425] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0278.487] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.487] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0278.488] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.488] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0278.488] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.488] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0278.488] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.488] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0278.488] GetSystemMetrics (nIndex=5) returned 1
[0278.488] GetSystemMetrics (nIndex=6) returned 1
[0278.488] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.489] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0278.489] GetSystemMetrics (nIndex=5) returned 1
[0278.489] GetSystemMetrics (nIndex=6) returned 1
[0278.489] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.489] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0278.489] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.489] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0278.489] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.489] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0278.490] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.490] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0278.490] GetSystemMetrics (nIndex=59) returned 1460
[0278.490] GetSystemMetrics (nIndex=60) returned 920
[0278.490] GetSystemMetrics (nIndex=34) returned 136
[0278.490] GetSystemMetrics (nIndex=35) returned 39
[0278.492] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.492] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0278.492] GetCurrentThreadId () returned 0x11d0
[0278.492] GetCurrentThreadId () returned 0x11d0
[0278.492] GetCurrentThreadId () returned 0x11d0
[0278.492] GetCurrentThreadId () returned 0x11d0
[0278.492] GetCurrentThreadId () returned 0x11d0
[0278.492] GetCurrentThreadId () returned 0x11d0
[0278.492] GetCurrentThreadId () returned 0x11d0
[0278.492] GetCurrentThreadId () returned 0x11d0
[0278.492] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.492] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0278.492] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0278.493] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0278.493] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.493] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0278.493] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.493] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0278.493] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x36013e
[0278.494] SetWindowLongW (hWnd=0x36013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0278.494] GetWindowLongW (hWnd=0x36013e, nIndex=-4) returned 1950089536
[0278.494] SetWindowLongW (hWnd=0x36013e, nIndex=-4, dwNewLong=79646558) returned 1950089536
[0278.494] GetWindowLongW (hWnd=0x36013e, nIndex=-4) returned 79646558
[0278.494] GetWindowLongW (hWnd=0x36013e, nIndex=-16) returned 113311744
[0278.495] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x36013e, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0278.495] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x36013e, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0278.495] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x36013e, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0278.496] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x36013e, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0278.496] GetClientRect (in: hWnd=0x36013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0278.496] GetWindowRect (in: hWnd=0x36013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0278.496] SetWindowTextW (hWnd=0x36013e, lpString="WindowsFormsParkingWindow") returned 1
[0278.496] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x36013e, Msg=0xc, wParam=0x0, lParam=0x23a1dbc) returned 0x1
[0278.496] GetParent (hWnd=0x36013e) returned 0x0
[0278.497] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0278.497] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x36013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x180122
[0278.497] SetWindowLongW (hWnd=0x180122, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0278.497] GetWindowLongW (hWnd=0x180122, nIndex=-4) returned 1868147648
[0278.497] SetWindowLongW (hWnd=0x180122, nIndex=-4, dwNewLong=79645838) returned 1868147648
[0278.497] GetWindowLongW (hWnd=0x180122, nIndex=-4) returned 79645838
[0278.497] GetWindowLongW (hWnd=0x180122, nIndex=-16) returned 1174405133
[0278.497] GetWindowLongW (hWnd=0x180122, nIndex=-12) returned 0
[0278.497] SetWindowLongW (hWnd=0x180122, nIndex=-12, dwNewLong=1573154) returned 0
[0278.497] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0278.498] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0278.498] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0278.499] GetClientRect (in: hWnd=0x180122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0278.499] GetWindowRect (in: hWnd=0x180122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0278.499] GetParent (hWnd=0x180122) returned 0x36013e
[0278.499] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x36013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0278.499] SetWindowTextW (hWnd=0x180122, lpString="Enter password: ") returned 1
[0278.499] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0278.500] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0278.500] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0278.500] GetClientRect (in: hWnd=0x180122, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0278.500] GetWindowRect (in: hWnd=0x180122, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0278.500] GetParent (hWnd=0x180122) returned 0x36013e
[0278.500] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x36013e, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0278.500] SendMessageW (hWnd=0x180122, Msg=0x2210, wParam=0x1220001, lParam=0x180122) returned 0x0
[0278.500] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x2210, wParam=0x1220001, lParam=0x180122) returned 0x0
[0278.500] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0278.501] GetParent (hWnd=0x180122) returned 0x36013e
[0278.501] GdipCreateFromHWND (hwnd=0x180122, graphics=0x53e994) returned 0x0
[0278.501] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0278.501] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0278.501] GetProcessWindowStation () returned 0x13c
[0278.501] GetCapture () returned 0x202c6
[0278.501] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0278.501] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0278.501] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0278.502] ReleaseCapture () returned 1
[0278.502] GetActiveWindow () returned 0x70036
[0278.502] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0278.502] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.502] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0278.502] GetCursorPos (in: lpPoint=0x23b6c20 | out: lpPoint=0x23b6c20*(x=569, y=412)) returned 1
[0278.502] MonitorFromPoint (pt=0x239, dwFlags=0x19c) returned 0x10001
[0278.502] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0278.502] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x30107b3
[0278.503] GetDeviceCaps (hdc=0x30107b3, index=12) returned 32
[0278.503] GetDeviceCaps (hdc=0x30107b3, index=14) returned 1
[0278.503] DeleteDC (hdc=0x30107b3) returned 1
[0278.503] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0278.503] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0278.503] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1402ca
[0278.504] SetWindowLongW (hWnd=0x1402ca, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0278.504] GetWindowLongW (hWnd=0x1402ca, nIndex=-4) returned 1950089536
[0278.504] SetWindowLongW (hWnd=0x1402ca, nIndex=-4, dwNewLong=79646758) returned 1950089536
[0278.504] GetWindowLongW (hWnd=0x1402ca, nIndex=-4) returned 79646758
[0278.504] GetWindowLongW (hWnd=0x1402ca, nIndex=-16) returned 113770496
[0278.504] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0278.505] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0278.506] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0278.506] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0278.506] GetWindowRect (in: hWnd=0x1402ca, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0278.506] SetWindowTextW (hWnd=0x1402ca, lpString="Ransomware") returned 1
[0278.506] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xc, wParam=0x0, lParam=0x23a9f38) returned 0x1
[0278.506] GetStartupInfoW (in: lpStartupInfo=0x23b6f5c | out: lpStartupInfo=0x23b6f5c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0278.507] GetParent (hWnd=0x1402ca) returned 0x0
[0278.507] SetWindowLongW (hWnd=0x1402ca, nIndex=-8, dwNewLong=0) returned 0
[0278.508] SendMessageW (hWnd=0x1402ca, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0278.508] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0278.508] SendMessageW (hWnd=0x1402ca, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0278.508] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0278.508] GetSystemMenu (hWnd=0x1402ca, bRevert=0) returned 0xa90291
[0278.508] GetWindowPlacement (in: hWnd=0x1402ca, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0278.508] EnableMenuItem (hMenu=0xa90291, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0278.508] EnableMenuItem (hMenu=0xa90291, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0278.509] EnableMenuItem (hMenu=0xa90291, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0278.509] EnableMenuItem (hMenu=0xa90291, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0278.509] EnableMenuItem (hMenu=0xa90291, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0278.509] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0278.509] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0278.509] GetWindowRect (in: hWnd=0x1402ca, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0278.509] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.509] GetWindowLongW (hWnd=0x1402ca, nIndex=-16) returned 113770496
[0278.509] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.509] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.509] GetSystemMetrics (nIndex=42) returned 0
[0278.509] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.509] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0278.509] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.509] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.509] GetSystemMetrics (nIndex=42) returned 0
[0278.509] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.510] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0278.510] GetCursorPos (in: lpPoint=0x23b70d0 | out: lpPoint=0x23b70d0*(x=569, y=412)) returned 1
[0278.510] MonitorFromPoint (pt=0x236, dwFlags=0x19d) returned 0x10001
[0278.510] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0278.510] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x70107b3
[0278.510] GetDeviceCaps (hdc=0x70107b3, index=12) returned 32
[0278.510] GetDeviceCaps (hdc=0x70107b3, index=14) returned 1
[0278.510] DeleteDC (hdc=0x70107b3) returned 1
[0278.510] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0278.510] GetWindowLongW (hWnd=0x1402ca, nIndex=-16) returned 113770496
[0278.510] GetWindowLongW (hWnd=0x1402ca, nIndex=-20) returned 327937
[0278.510] SetWindowLongW (hWnd=0x1402ca, nIndex=-16, dwNewLong=46661632) returned 113770496
[0278.510] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0278.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0278.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0278.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0278.511] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0278.512] SetWindowLongW (hWnd=0x1402ca, nIndex=-20, dwNewLong=327681) returned 327937
[0278.512] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0278.512] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0278.513] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0278.513] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0278.513] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0278.513] SetWindowPos (hWnd=0x1402ca, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0278.513] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0278.513] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0278.514] GetWindowPlacement (in: hWnd=0x1402ca, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0278.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0278.514] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0278.514] GetWindowRect (in: hWnd=0x1402ca, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0278.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0278.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0278.515] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0278.515] RedrawWindow (hWnd=0x1402ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0278.515] GetSystemMenu (hWnd=0x1402ca, bRevert=0) returned 0xa90291
[0278.515] GetWindowPlacement (in: hWnd=0x1402ca, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0278.515] EnableMenuItem (hMenu=0xa90291, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0278.515] EnableMenuItem (hMenu=0xa90291, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0278.515] EnableMenuItem (hMenu=0xa90291, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0278.515] EnableMenuItem (hMenu=0xa90291, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0278.515] EnableMenuItem (hMenu=0xa90291, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0278.515] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0278.515] GetWindowLongW (hWnd=0x1402ca, nIndex=-8) returned 0
[0278.515] SetWindowLongW (hWnd=0x1402ca, nIndex=-8, dwNewLong=458806) returned 0
[0278.516] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0278.516] GetProcessWindowStation () returned 0x13c
[0278.516] GetCurrentThreadId () returned 0x11d0
[0278.516] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf4d2e, lParam=0x0) returned 1
[0278.516] IsWindowVisible (hWnd=0x1402ca) returned 0
[0278.516] IsWindowVisible (hWnd=0x70036) returned 1
[0278.516] IsWindowEnabled (hWnd=0x70036) returned 1
[0278.516] IsWindowVisible (hWnd=0x602b6) returned 0
[0278.516] IsWindowVisible (hWnd=0x901f8) returned 0
[0278.516] IsWindowVisible (hWnd=0x202d0) returned 0
[0278.516] IsWindowVisible (hWnd=0x202d4) returned 0
[0278.516] GetActiveWindow () returned 0x70036
[0278.516] GetFocus () returned 0x202c6
[0278.516] IsWindow (hWnd=0x70036) returned 1
[0278.516] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0278.517] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0278.517] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0278.517] GetWindowLongW (hWnd=0x1402ca, nIndex=-8) returned 458806
[0278.517] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0278.517] GetCurrentThreadId () returned 0x11d0
[0278.517] GetWindowLongW (hWnd=0x1402ca, nIndex=-8) returned 458806
[0278.517] IsWindowEnabled (hWnd=0x70036) returned 0
[0278.517] IsWindowEnabled (hWnd=0x1402ca) returned 1
[0278.517] ShowWindow (hWnd=0x1402ca, nCmdShow=5) returned 0
[0278.518] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0278.518] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0278.518] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.518] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0278.518] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x1402ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x14004e
[0278.519] SetWindowLongW (hWnd=0x14004e, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0278.519] GetWindowLongW (hWnd=0x14004e, nIndex=-4) returned 1868026976
[0278.519] SetWindowLongW (hWnd=0x14004e, nIndex=-4, dwNewLong=79646798) returned 1868026976
[0278.519] GetWindowLongW (hWnd=0x14004e, nIndex=-4) returned 79646798
[0278.519] GetWindowLongW (hWnd=0x14004e, nIndex=-16) returned 1174470848
[0278.519] GetWindowLongW (hWnd=0x14004e, nIndex=-12) returned 0
[0278.519] SetWindowLongW (hWnd=0x14004e, nIndex=-12, dwNewLong=1310798) returned 0
[0278.519] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0278.520] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0278.520] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0278.522] SendMessageW (hWnd=0x14004e, Msg=0x2055, wParam=0x14004e, lParam=0x3) returned 0x2
[0278.522] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0278.522] GetWindow (hWnd=0x14004e, uCmd=0x3) returned 0x0
[0278.522] GetClientRect (in: hWnd=0x14004e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0278.522] GetWindowRect (in: hWnd=0x14004e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0278.522] GetParent (hWnd=0x14004e) returned 0x1402ca
[0278.522] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1402ca, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0278.522] SendMessageW (hWnd=0x14004e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0278.522] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0278.522] SendMessageW (hWnd=0x14004e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0278.522] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0278.523] GetSystemMetrics (nIndex=5) returned 1
[0278.523] GetSystemMetrics (nIndex=6) returned 1
[0278.523] SendMessageW (hWnd=0x14004e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0278.523] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0278.523] SendMessageW (hWnd=0x14004e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0278.523] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0278.523] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0278.523] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0278.523] GetClientRect (in: hWnd=0x14004e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0278.523] GetWindowRect (in: hWnd=0x14004e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0278.524] GetParent (hWnd=0x14004e) returned 0x1402ca
[0278.524] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1402ca, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0278.524] SendMessageW (hWnd=0x14004e, Msg=0x2210, wParam=0x4e0001, lParam=0x14004e) returned 0x0
[0278.524] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x2210, wParam=0x4e0001, lParam=0x14004e) returned 0x0
[0278.524] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0278.524] GetParent (hWnd=0x14004e) returned 0x1402ca
[0278.524] GetParent (hWnd=0x180122) returned 0x36013e
[0278.524] SetParent (hWndChild=0x180122, hWndNewParent=0x1402ca) returned 0x36013e
[0278.524] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0278.525] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0278.525] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0278.525] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0278.525] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0278.525] GetClientRect (in: hWnd=0x180122, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0278.525] GetWindowRect (in: hWnd=0x180122, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0278.525] GetParent (hWnd=0x180122) returned 0x1402ca
[0278.525] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1402ca, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0278.525] GetClientRect (in: hWnd=0x180122, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0278.525] GetWindowRect (in: hWnd=0x180122, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0278.525] GetParent (hWnd=0x180122) returned 0x1402ca
[0278.525] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1402ca, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0278.525] GetParent (hWnd=0x180122) returned 0x1402ca
[0278.525] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0278.526] GetWindow (hWnd=0x180122, uCmd=0x3) returned 0x0
[0278.526] SetWindowPos (hWnd=0x180122, hWndInsertAfter=0x14004e, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0278.526] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0278.526] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0278.526] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0278.526] GetClientRect (in: hWnd=0x180122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0278.526] GetWindowRect (in: hWnd=0x180122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0278.526] GetParent (hWnd=0x180122) returned 0x1402ca
[0278.526] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1402ca, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0278.526] GetParent (hWnd=0x180122) returned 0x1402ca
[0278.526] GetWindow (hWnd=0x180122, uCmd=0x3) returned 0x14004e
[0278.527] GetWindowThreadProcessId (in: hWnd=0x180122, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0278.527] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0278.527] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.527] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0278.527] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x1402ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1701e2
[0278.528] SetWindowLongW (hWnd=0x1701e2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0278.528] GetWindowLongW (hWnd=0x1701e2, nIndex=-4) returned 1868032000
[0278.528] SetWindowLongW (hWnd=0x1701e2, nIndex=-4, dwNewLong=79645878) returned 1868032000
[0278.529] GetWindowLongW (hWnd=0x1701e2, nIndex=-4) returned 79645878
[0278.529] GetWindowLongW (hWnd=0x1701e2, nIndex=-16) returned 1174470667
[0278.529] GetWindowLongW (hWnd=0x1701e2, nIndex=-12) returned 0
[0278.529] SetWindowLongW (hWnd=0x1701e2, nIndex=-12, dwNewLong=1507810) returned 0
[0278.529] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0278.529] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0278.529] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0278.530] SendMessageW (hWnd=0x1701e2, Msg=0x2055, wParam=0x1701e2, lParam=0x3) returned 0x2
[0278.530] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0278.530] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0278.530] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0278.530] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0278.530] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0278.531] RedrawWindow (hWnd=0x14004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0278.531] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0278.531] RedrawWindow (hWnd=0x180122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0278.531] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0278.531] RedrawWindow (hWnd=0x1701e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0278.531] RedrawWindow (hWnd=0x1402ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0278.531] GetWindow (hWnd=0x1701e2, uCmd=0x3) returned 0x180122
[0278.531] GetClientRect (in: hWnd=0x1701e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0278.531] GetWindowRect (in: hWnd=0x1701e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0278.531] GetParent (hWnd=0x1701e2) returned 0x1402ca
[0278.531] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1402ca, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0278.532] SetWindowTextW (hWnd=0x1701e2, lpString="OK") returned 1
[0278.532] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0xc, wParam=0x0, lParam=0x23ae3f8) returned 0x1
[0278.532] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0278.532] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0278.532] GetClientRect (in: hWnd=0x1701e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0278.532] GetWindowRect (in: hWnd=0x1701e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0278.532] GetParent (hWnd=0x1701e2) returned 0x1402ca
[0278.532] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1402ca, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0278.532] SendMessageW (hWnd=0x1701e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1701e2) returned 0x0
[0278.532] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1701e2) returned 0x0
[0278.532] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0278.533] GetParent (hWnd=0x1701e2) returned 0x1402ca
[0278.533] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0278.533] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.533] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0278.533] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x1402ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1b00ea
[0278.534] SetWindowLongW (hWnd=0x1b00ea, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0278.534] GetWindowLongW (hWnd=0x1b00ea, nIndex=-4) returned 1868032000
[0278.534] SetWindowLongW (hWnd=0x1b00ea, nIndex=-4, dwNewLong=79647198) returned 1868032000
[0278.534] GetWindowLongW (hWnd=0x1b00ea, nIndex=-4) returned 79647198
[0278.534] GetWindowLongW (hWnd=0x1b00ea, nIndex=-16) returned 1174470667
[0278.534] GetWindowLongW (hWnd=0x1b00ea, nIndex=-12) returned 0
[0278.534] SetWindowLongW (hWnd=0x1b00ea, nIndex=-12, dwNewLong=1769706) returned 0
[0278.534] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0278.535] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0278.535] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0278.536] SendMessageW (hWnd=0x1b00ea, Msg=0x2055, wParam=0x1b00ea, lParam=0x3) returned 0x2
[0278.536] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0278.536] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0278.536] GetWindow (hWnd=0x1b00ea, uCmd=0x3) returned 0x1701e2
[0278.536] GetClientRect (in: hWnd=0x1b00ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0278.536] GetWindowRect (in: hWnd=0x1b00ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0278.536] GetParent (hWnd=0x1b00ea) returned 0x1402ca
[0278.536] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1402ca, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0278.536] SetWindowTextW (hWnd=0x1b00ea, lpString="Cancel") returned 1
[0278.536] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0xc, wParam=0x0, lParam=0x23b1cb8) returned 0x1
[0278.537] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0278.537] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0278.537] GetClientRect (in: hWnd=0x1b00ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0278.537] GetWindowRect (in: hWnd=0x1b00ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0278.537] GetParent (hWnd=0x1b00ea) returned 0x1402ca
[0278.537] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1402ca, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0278.537] SendMessageW (hWnd=0x1b00ea, Msg=0x2210, wParam=0xea0001, lParam=0x1b00ea) returned 0x0
[0278.537] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0x2210, wParam=0xea0001, lParam=0x1b00ea) returned 0x0
[0278.537] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0278.538] GetParent (hWnd=0x1b00ea) returned 0x1402ca
[0278.538] GetDC (hWnd=0x0) returned 0x60100ce
[0278.538] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e320) returned 0x0
[0278.538] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0278.538] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0278.538] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0278.538] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0278.539] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0278.539] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0278.539] GetWindowLongW (hWnd=0x1402ca, nIndex=-8) returned 458806
[0278.539] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0278.539] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0278.539] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xe0107b3
[0278.539] GetDeviceCaps (hdc=0xe0107b3, index=12) returned 32
[0278.539] GetDeviceCaps (hdc=0xe0107b3, index=14) returned 1
[0278.539] DeleteDC (hdc=0xe0107b3) returned 1
[0278.539] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0278.539] GetWindowThreadProcessId (in: hWnd=0x1402ca, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0278.539] GetCurrentThreadId () returned 0x11d0
[0278.539] PostMessageW (hWnd=0x1402ca, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0278.539] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.539] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.539] GetSystemMetrics (nIndex=42) returned 0
[0278.540] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.540] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0278.540] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0278.540] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0278.540] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0278.540] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0278.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1402ca) returned 0x1
[0278.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0278.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0278.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0278.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0278.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0278.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0278.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0278.553] GetFocus () returned 0x202c6
[0278.553] IsChild (hWndParent=0x1402ca, hWnd=0x202c6) returned 0
[0278.553] GetFocus () returned 0x202c6
[0278.553] SetFocus (hWnd=0x14004e) returned 0x202c6
[0278.554] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x14004e, lParam=0x0) returned 0x0
[0278.554] GetCapture () returned 0x0
[0278.554] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0278.555] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0278.556] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0278.557] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.557] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0278.557] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.557] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0278.558] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.558] GetParent (hWnd=0x1402ca) returned 0x0
[0278.558] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0278.558] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.558] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0278.559] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0278.559] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0278.559] GetSysColorBrush (nIndex=5) returned 0x100079
[0278.560] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.560] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0278.561] SendMessageW (hWnd=0x14004e, Msg=0x2111, wParam=0x100004e, lParam=0x14004e) returned 0x0
[0278.561] SendMessageW (hWnd=0x14004e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0278.561] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0278.561] GetKeyState (nVirtKey=1) returned 0
[0278.561] GetKeyState (nVirtKey=2) returned 0
[0278.561] GetKeyState (nVirtKey=4) returned 0
[0278.561] GetKeyState (nVirtKey=5) returned 0
[0278.561] GetKeyState (nVirtKey=6) returned 0
[0278.561] GetWindowTextLengthW (hWnd=0x14004e) returned 0
[0278.561] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0278.561] SendMessageW (hWnd=0x14004e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0278.561] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0278.561] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0278.561] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0278.564] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0278.565] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0278.565] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0278.565] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0278.565] GetWindowPlacement (in: hWnd=0x1402ca, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0278.566] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0278.566] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.566] GetSystemMetrics (nIndex=42) returned 0
[0278.566] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0278.566] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0278.566] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0278.566] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0278.566] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0xffffffff8e0507a2
[0278.566] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0278.566] SaveDC (hdc=0x10105d6) returned 1
[0278.566] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0278.566] CreateSolidBrush (color=0xf0f0f0) returned 0xff10078d
[0278.566] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0xff10078d) returned 1
[0278.566] DeleteObject (ho=0xff10078d) returned 1
[0278.566] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0278.567] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0278.567] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0278.567] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0278.572] GetWindowPlacement (in: hWnd=0x1402ca, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0278.572] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0278.572] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.572] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.572] GetSystemMetrics (nIndex=42) returned 0
[0278.572] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.572] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0278.572] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0278.572] GetCurrentObject (hdc=0x240107b3, type=0x1) returned 0xb00017
[0278.572] GetCurrentObject (hdc=0x240107b3, type=0x2) returned 0x900010
[0278.572] GetCurrentObject (hdc=0x240107b3, type=0x7) returned 0x79050794
[0278.572] GetCurrentObject (hdc=0x240107b3, type=0x6) returned 0x8a01c2
[0278.572] SaveDC (hdc=0x240107b3) returned 1
[0278.572] GetNearestColor (hdc=0x240107b3, color=0xf0f0f0) returned 0xf0f0f0
[0278.572] CreateSolidBrush (color=0xf0f0f0) returned 0x10078d
[0278.572] FillRect (hDC=0x240107b3, lprc=0x53dc18, hbr=0x10078d) returned 1
[0278.572] DeleteObject (ho=0x10078d) returned 1
[0278.573] RestoreDC (hdc=0x240107b3, nSavedDC=-1) returned 1
[0278.573] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.573] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.573] GetSystemMetrics (nIndex=42) returned 0
[0278.573] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.573] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0278.573] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0278.573] GetCurrentObject (hdc=0x240107b3, type=0x1) returned 0xb00017
[0278.573] GetCurrentObject (hdc=0x240107b3, type=0x2) returned 0x900010
[0278.573] GetCurrentObject (hdc=0x240107b3, type=0x7) returned 0x79050794
[0278.573] GetCurrentObject (hdc=0x240107b3, type=0x6) returned 0x8a01c2
[0278.573] SaveDC (hdc=0x240107b3) returned 1
[0278.573] GetNearestColor (hdc=0x240107b3, color=0xf0f0f0) returned 0xf0f0f0
[0278.573] CreateSolidBrush (color=0xf0f0f0) returned 0x110078d
[0278.573] FillRect (hDC=0x240107b3, lprc=0x53dbb8, hbr=0x110078d) returned 1
[0278.573] DeleteObject (ho=0x110078d) returned 1
[0278.573] RestoreDC (hdc=0x240107b3, nSavedDC=-1) returned 1
[0278.573] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.573] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.573] GetSystemMetrics (nIndex=42) returned 0
[0278.574] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.574] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0278.574] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0278.574] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0278.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0278.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0278.575] GetStockObject (i=5) returned 0x900015
[0278.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0278.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0278.575] GetStockObject (i=5) returned 0x900015
[0278.575] GetWindowPlacement (in: hWnd=0x1402ca, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0278.575] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0278.576] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0278.576] GetWindowRect (in: hWnd=0x1402ca, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0278.577] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0278.577] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0278.577] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0278.577] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0278.577] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0278.577] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0278.577] GetWindowRect (in: hWnd=0x1402ca, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0278.577] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.577] IsWindowUnicode (hWnd=0x1402ca) returned 1
[0278.577] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.578] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.578] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.578] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0278.578] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.578] IsWindowUnicode (hWnd=0x1402ca) returned 1
[0278.578] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.578] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.578] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.578] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.578] MapWindowPoints (in: hWndFrom=0x180122, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0278.578] IsWindowUnicode (hWnd=0x180122) returned 1
[0278.578] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.579] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.579] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.579] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.579] IsWindowUnicode (hWnd=0x202c6) returned 1
[0278.579] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.579] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.579] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.579] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0278.579] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0278.579] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.579] MapWindowPoints (in: hWndFrom=0x180122, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0278.580] IsWindowUnicode (hWnd=0x180122) returned 1
[0278.580] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.580] MapWindowPoints (in: hWndFrom=0x180122, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0278.580] SetCursor (hCursor=0x10003) returned 0x10003
[0278.580] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.580] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.580] _TrackMouseEvent (in: lpEventTrack=0x23b864c | out: lpEventTrack=0x23b864c) returned 1
[0278.580] SendMessageW (hWnd=0x180122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0278.580] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0278.580] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x200, wParam=0x0, lParam=0x150010) returned 0x0
[0278.580] GetKeyState (nVirtKey=1) returned 0
[0278.580] GetKeyState (nVirtKey=2) returned 0
[0278.580] GetKeyState (nVirtKey=4) returned 0
[0278.580] GetKeyState (nVirtKey=5) returned 0
[0278.580] GetKeyState (nVirtKey=6) returned 0
[0278.580] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.581] IsWindowUnicode (hWnd=0x1402ca) returned 1
[0278.581] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.581] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.581] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.581] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.581] IsWindowUnicode (hWnd=0x1402ca) returned 1
[0278.582] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.582] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.582] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.582] BeginPaint (in: hWnd=0x1402ca, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0xf0105ee
[0278.582] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0278.582] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.582] GetSystemMetrics (nIndex=42) returned 0
[0278.582] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0278.582] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0278.582] EndPaint (hWnd=0x1402ca, lpPaint=0x53e30c) returned 1
[0278.583] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.583] IsWindowUnicode (hWnd=0x14004e) returned 1
[0278.583] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.583] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.583] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0278.583] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0278.601] SetTextColor (hdc=0x250107b3, color=0x0) returned 0x0
[0278.601] SetBkColor (hdc=0x250107b3, color=0xffffff) returned 0xffffff
[0278.602] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.602] IsWindowUnicode (hWnd=0x102dc) returned 1
[0278.602] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.602] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.602] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.603] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.603] IsWindowUnicode (hWnd=0x180122) returned 1
[0278.603] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.603] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.603] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.603] BeginPaint (in: hWnd=0x180122, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x8b010786
[0278.604] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0278.604] CreateCompatibleDC (hdc=0x8b010786) returned 0xe6010795
[0278.604] SelectObject (hdc=0xe6010795, h=0x1e0507b9) returned 0x85000f
[0278.604] GdipCreateFromHDC (hdc=0xe6010795, graphics=0x53e30c) returned 0x0
[0278.604] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0278.604] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0278.604] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0278.604] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.604] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0278.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0278.604] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0278.604] LocalFree (hMem=0x89eee8) returned 0x0
[0278.604] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.604] GdipCreateRegion (region=0x53e354) returned 0x0
[0278.604] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.605] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0278.605] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0278.605] GetWindowTextLengthW (hWnd=0x180122) returned 16
[0278.605] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0278.605] GetSystemMetrics (nIndex=42) returned 0
[0278.605] GetWindowTextW (in: hWnd=0x180122, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0278.605] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0278.605] GetClientRect (in: hWnd=0x180122, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0278.605] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0278.605] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0278.605] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0278.605] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.605] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0278.605] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.605] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.605] LocalFree (hMem=0x89ea88) returned 0x0
[0278.605] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0278.605] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.605] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.605] LocalFree (hMem=0x89ea88) returned 0x0
[0278.605] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.606] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0278.606] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0278.606] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0278.606] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0278.606] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0278.606] GetCurrentObject (hdc=0xe6010795, type=0x1) returned 0xb00017
[0278.606] GetCurrentObject (hdc=0xe6010795, type=0x2) returned 0x900010
[0278.606] GetCurrentObject (hdc=0xe6010795, type=0x7) returned 0x1e0507b9
[0278.606] GetCurrentObject (hdc=0xe6010795, type=0x6) returned 0x8a01c2
[0278.606] SaveDC (hdc=0xe6010795) returned 1
[0278.606] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4304051e
[0278.606] GetClipRgn (hdc=0xe6010795, hrgn=0x4304051e) returned 0
[0278.606] SelectClipRgn (hdc=0xe6010795, hrgn=0x620407a1) returned 2
[0278.606] DeleteObject (ho=0x4304051e) returned 1
[0278.606] DeleteObject (ho=0x620407a1) returned 1
[0278.606] OffsetViewportOrgEx (in: hdc=0xe6010795, x=0, y=0, lppt=0x23b8b30 | out: lppt=0x23b8b30) returned 1
[0278.606] GetNearestColor (hdc=0xe6010795, color=0xf0f0f0) returned 0xf0f0f0
[0278.606] CreateSolidBrush (color=0xf0f0f0) returned 0x210078d
[0278.607] FillRect (hDC=0xe6010795, lprc=0x53e1f4, hbr=0x210078d) returned 1
[0278.607] DeleteObject (ho=0x210078d) returned 1
[0278.607] RestoreDC (hdc=0xe6010795, nSavedDC=-1) returned 1
[0278.607] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe6010795) returned 0x0
[0278.607] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaf10dbd) returned 0x0
[0278.607] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.607] GetWindowTextLengthW (hWnd=0x180122) returned 16
[0278.607] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0278.607] GetSystemMetrics (nIndex=42) returned 0
[0278.607] GetWindowTextW (in: hWnd=0x180122, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0278.607] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0278.607] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0278.607] GetCurrentObject (hdc=0xe6010795, type=0x1) returned 0xb00017
[0278.607] GetCurrentObject (hdc=0xe6010795, type=0x2) returned 0x900010
[0278.607] GetCurrentObject (hdc=0xe6010795, type=0x7) returned 0x1e0507b9
[0278.607] GetCurrentObject (hdc=0xe6010795, type=0x6) returned 0x8a01c2
[0278.607] SaveDC (hdc=0xe6010795) returned 1
[0278.607] GetNearestColor (hdc=0xe6010795, color=0x0) returned 0x0
[0278.607] RestoreDC (hdc=0xe6010795, nSavedDC=-1) returned 1
[0278.608] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe6010795) returned 0x0
[0278.608] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0278.608] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0278.608] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0278.608] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x23b8e38 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0278.608] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0278.608] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0278.609] GetCurrentObject (hdc=0xe6010795, type=0x1) returned 0xb00017
[0278.609] GetCurrentObject (hdc=0xe6010795, type=0x2) returned 0x900010
[0278.609] GetCurrentObject (hdc=0xe6010795, type=0x7) returned 0x1e0507b9
[0278.609] GetCurrentObject (hdc=0xe6010795, type=0x6) returned 0x8a01c2
[0278.609] SaveDC (hdc=0xe6010795) returned 1
[0278.609] GetTextAlign (hdc=0xe6010795) returned 0x0
[0278.609] GetTextColor (hdc=0xe6010795) returned 0x0
[0278.609] GetCurrentObject (hdc=0xe6010795, type=0x6) returned 0x8a01c2
[0278.609] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0278.609] SelectObject (hdc=0xe6010795, h=0x730a066d) returned 0x8a01c2
[0278.609] GetBkMode (hdc=0xe6010795) returned 2
[0278.609] SetBkMode (hdc=0xe6010795, mode=1) returned 2
[0278.609] DrawTextExW (in: hdc=0xe6010795, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x23b905c | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0278.610] RestoreDC (hdc=0xe6010795, nSavedDC=-1) returned 1
[0278.610] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe6010795) returned 0x0
[0278.610] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0278.610] BitBlt (hdc=0x8b010786, x=0, y=0, cx=250, cy=70, hdcSrc=0xe6010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0278.610] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe6010795) returned 0x0
[0278.610] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0278.610] SelectObject (hdc=0xe6010795, h=0x85000f) returned 0x1e0507b9
[0278.610] DeleteDC (hdc=0xe6010795) returned 1
[0278.610] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0278.610] EndPaint (hWnd=0x180122, lpPaint=0x53e2f0) returned 1
[0278.610] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.611] IsWindowUnicode (hWnd=0x1701e2) returned 1
[0278.611] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.611] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.611] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.611] BeginPaint (in: hWnd=0x1701e2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0278.611] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0278.611] CreateCompatibleDC (hdc=0x60100ce) returned 0xe8010795
[0278.611] SelectObject (hdc=0xe8010795, h=0x1e0507b9) returned 0x85000f
[0278.611] GdipCreateFromHDC (hdc=0xe8010795, graphics=0x53e300) returned 0x0
[0278.611] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0278.611] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0278.611] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0278.611] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.611] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0278.611] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.612] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0278.612] LocalFree (hMem=0x89ee08) returned 0x0
[0278.612] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.612] GdipCreateRegion (region=0x53e348) returned 0x0
[0278.612] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.612] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0278.612] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0278.612] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaef0dbd) returned 0x0
[0278.612] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.612] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0278.612] GetCurrentObject (hdc=0xe8010795, type=0x1) returned 0xb00017
[0278.612] GetCurrentObject (hdc=0xe8010795, type=0x2) returned 0x900010
[0278.612] GetCurrentObject (hdc=0xe8010795, type=0x7) returned 0x1e0507b9
[0278.612] GetCurrentObject (hdc=0xe8010795, type=0x6) returned 0x8a01c2
[0278.612] SaveDC (hdc=0xe8010795) returned 1
[0278.612] GetNearestColor (hdc=0xe8010795, color=0xf0f0f0) returned 0xf0f0f0
[0278.612] GetNearestColor (hdc=0xe8010795, color=0xa0a0a0) returned 0xa0a0a0
[0278.612] GetNearestColor (hdc=0xe8010795, color=0x696969) returned 0x696969
[0278.612] GetNearestColor (hdc=0xe8010795, color=0xa0a0a0) returned 0xa0a0a0
[0278.613] GetNearestColor (hdc=0xe8010795, color=0x0) returned 0x0
[0278.613] GetNearestColor (hdc=0xe8010795, color=0xffffff) returned 0xffffff
[0278.613] GetNearestColor (hdc=0xe8010795, color=0xe5e5e5) returned 0xe5e5e5
[0278.613] GetNearestColor (hdc=0xe8010795, color=0xd7d7d7) returned 0xd7d7d7
[0278.613] GetNearestColor (hdc=0xe8010795, color=0x0) returned 0x0
[0278.613] RestoreDC (hdc=0xe8010795, nSavedDC=-1) returned 1
[0278.613] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe8010795) returned 0x0
[0278.613] IsAppThemed () returned 0x1
[0278.613] GetThemeAppProperties () returned 0x3
[0278.613] GetThemeAppProperties () returned 0x3
[0278.613] IsAppThemed () returned 0x1
[0278.613] GetThemeAppProperties () returned 0x3
[0278.613] GetThemeAppProperties () returned 0x3
[0278.613] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x23b97c8 | out: lpchText="OK", lprc=0x53e028) returned 13
[0278.613] IsAppThemed () returned 0x1
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] IsAppThemed () returned 0x1
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] GetFocus () returned 0x14004e
[0278.614] IsAppThemed () returned 0x1
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] IsAppThemed () returned 0x1
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] IsThemePartDefined () returned 0x1
[0278.614] IsAppThemed () returned 0x1
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0278.614] IsAppThemed () returned 0x1
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] IsAppThemed () returned 0x1
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] GetThemeAppProperties () returned 0x3
[0278.614] IsThemePartDefined () returned 0x1
[0278.614] GdipCreateRegion (region=0x53e070) returned 0x0
[0278.614] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.614] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0278.614] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.615] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0278.615] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.615] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.615] LocalFree (hMem=0x89ea88) returned 0x0
[0278.615] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.618] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.618] LocalFree (hMem=0x89ea88) returned 0x0
[0278.618] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.618] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0278.618] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0278.618] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0278.618] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.618] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0278.618] GetCurrentObject (hdc=0xe8010795, type=0x1) returned 0xb00017
[0278.618] GetCurrentObject (hdc=0xe8010795, type=0x2) returned 0x900010
[0278.618] GetCurrentObject (hdc=0xe8010795, type=0x7) returned 0x1e0507b9
[0278.618] GetCurrentObject (hdc=0xe8010795, type=0x6) returned 0x8a01c2
[0278.619] SaveDC (hdc=0xe8010795) returned 1
[0278.619] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x630407a1
[0278.619] GetClipRgn (hdc=0xe8010795, hrgn=0x630407a1) returned 0
[0278.619] SelectClipRgn (hdc=0xe8010795, hrgn=0x4704051e) returned 2
[0278.619] DeleteObject (ho=0x630407a1) returned 1
[0278.619] DeleteObject (ho=0x4704051e) returned 1
[0278.619] OffsetViewportOrgEx (in: hdc=0xe8010795, x=0, y=0, lppt=0x23b9e78 | out: lppt=0x23b9e78) returned 1
[0278.619] DrawThemeParentBackground () returned 0x0
[0278.619] GetWindowPlacement (in: hWnd=0x1402ca, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0278.619] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0278.619] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.619] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.619] GetSystemMetrics (nIndex=42) returned 0
[0278.619] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.619] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0278.620] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0278.620] GetCurrentObject (hdc=0xe8010795, type=0x1) returned 0xb00017
[0278.620] GetCurrentObject (hdc=0xe8010795, type=0x2) returned 0x900010
[0278.620] GetCurrentObject (hdc=0xe8010795, type=0x7) returned 0x1e0507b9
[0278.620] GetCurrentObject (hdc=0xe8010795, type=0x6) returned 0x8a01c2
[0278.620] SaveDC (hdc=0xe8010795) returned 2
[0278.620] GetNearestColor (hdc=0xe8010795, color=0xf0f0f0) returned 0xf0f0f0
[0278.620] CreateSolidBrush (color=0xf0f0f0) returned 0x310078d
[0278.620] FillRect (hDC=0xe8010795, lprc=0x53dad0, hbr=0x310078d) returned 1
[0278.620] DeleteObject (ho=0x310078d) returned 1
[0278.620] RestoreDC (hdc=0xe8010795, nSavedDC=-1) returned 1
[0278.620] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.620] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.620] GetSystemMetrics (nIndex=42) returned 0
[0278.620] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.620] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0278.620] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0278.620] GetCurrentObject (hdc=0xe8010795, type=0x1) returned 0xb00017
[0278.621] GetCurrentObject (hdc=0xe8010795, type=0x2) returned 0x900010
[0278.621] GetCurrentObject (hdc=0xe8010795, type=0x7) returned 0x1e0507b9
[0278.621] GetCurrentObject (hdc=0xe8010795, type=0x6) returned 0x8a01c2
[0278.621] SaveDC (hdc=0xe8010795) returned 2
[0278.621] GetNearestColor (hdc=0xe8010795, color=0xf0f0f0) returned 0xf0f0f0
[0278.621] CreateSolidBrush (color=0xf0f0f0) returned 0x410078d
[0278.621] FillRect (hDC=0xe8010795, lprc=0x53da70, hbr=0x410078d) returned 1
[0278.621] DeleteObject (ho=0x410078d) returned 1
[0278.621] RestoreDC (hdc=0xe8010795, nSavedDC=-1) returned 1
[0278.621] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.621] GetSystemMetrics (nIndex=42) returned 0
[0278.621] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.621] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0278.621] RestoreDC (hdc=0xe8010795, nSavedDC=-1) returned 1
[0278.621] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe8010795) returned 0x0
[0278.622] IsAppThemed () returned 0x1
[0278.622] GetThemeAppProperties () returned 0x3
[0278.622] GetThemeAppProperties () returned 0x3
[0278.622] IsAppThemed () returned 0x1
[0278.622] GetThemeAppProperties () returned 0x3
[0278.622] GetThemeAppProperties () returned 0x3
[0278.622] IsThemePartDefined () returned 0x1
[0278.622] GdipCreateRegion (region=0x53dff4) returned 0x0
[0278.622] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.622] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0278.622] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.622] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0278.622] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0278.622] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0278.622] LocalFree (hMem=0x89eee8) returned 0x0
[0278.622] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.622] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0278.622] LocalFree (hMem=0x89ea88) returned 0x0
[0278.622] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.622] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0278.622] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0278.622] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0278.622] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.623] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0278.623] GetCurrentObject (hdc=0xe8010795, type=0x1) returned 0xb00017
[0278.623] GetCurrentObject (hdc=0xe8010795, type=0x2) returned 0x900010
[0278.623] GetCurrentObject (hdc=0xe8010795, type=0x7) returned 0x1e0507b9
[0278.623] GetCurrentObject (hdc=0xe8010795, type=0x6) returned 0x8a01c2
[0278.623] SaveDC (hdc=0xe8010795) returned 1
[0278.623] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4804051e
[0278.623] GetClipRgn (hdc=0xe8010795, hrgn=0x4804051e) returned 0
[0278.623] SelectClipRgn (hdc=0xe8010795, hrgn=0x650407a1) returned 2
[0278.623] DeleteObject (ho=0x4804051e) returned 1
[0278.623] DeleteObject (ho=0x650407a1) returned 1
[0278.623] OffsetViewportOrgEx (in: hdc=0xe8010795, x=0, y=0, lppt=0x23ba700 | out: lppt=0x23ba700) returned 1
[0278.623] IsAppThemed () returned 0x1
[0278.623] GetThemeAppProperties () returned 0x3
[0278.623] GetThemeAppProperties () returned 0x3
[0278.623] DrawThemeBackground () returned 0x0
[0278.623] RestoreDC (hdc=0xe8010795, nSavedDC=-1) returned 1
[0278.623] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe8010795) returned 0x0
[0278.623] GdipCreateRegion (region=0x53dff8) returned 0x0
[0278.623] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.623] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0278.624] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.624] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0278.624] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0278.624] LocalFree (hMem=0x89ee08) returned 0x0
[0278.624] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.624] LocalFree (hMem=0x89ea88) returned 0x0
[0278.624] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.624] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0278.624] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0278.624] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0278.624] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.624] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0278.624] GetCurrentObject (hdc=0xe8010795, type=0x1) returned 0xb00017
[0278.624] GetCurrentObject (hdc=0xe8010795, type=0x2) returned 0x900010
[0278.624] GetCurrentObject (hdc=0xe8010795, type=0x7) returned 0x1e0507b9
[0278.624] GetCurrentObject (hdc=0xe8010795, type=0x6) returned 0x8a01c2
[0278.624] SaveDC (hdc=0xe8010795) returned 1
[0278.624] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x660407a1
[0278.624] GetClipRgn (hdc=0xe8010795, hrgn=0x660407a1) returned 0
[0278.624] SelectClipRgn (hdc=0xe8010795, hrgn=0x4904051e) returned 2
[0278.625] DeleteObject (ho=0x660407a1) returned 1
[0278.625] DeleteObject (ho=0x4904051e) returned 1
[0278.625] OffsetViewportOrgEx (in: hdc=0xe8010795, x=0, y=0, lppt=0x23ba9d4 | out: lppt=0x23ba9d4) returned 1
[0278.625] IsAppThemed () returned 0x1
[0278.625] GetThemeAppProperties () returned 0x3
[0278.625] GetThemeAppProperties () returned 0x3
[0278.625] GetThemeBackgroundContentRect () returned 0x0
[0278.625] RestoreDC (hdc=0xe8010795, nSavedDC=-1) returned 1
[0278.625] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe8010795) returned 0x0
[0278.625] IsAppThemed () returned 0x1
[0278.625] GetThemeAppProperties () returned 0x3
[0278.625] GetThemeAppProperties () returned 0x3
[0278.625] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0278.625] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0278.625] GetCurrentObject (hdc=0xe8010795, type=0x1) returned 0xb00017
[0278.625] GetCurrentObject (hdc=0xe8010795, type=0x2) returned 0x900010
[0278.625] GetCurrentObject (hdc=0xe8010795, type=0x7) returned 0x1e0507b9
[0278.625] GetCurrentObject (hdc=0xe8010795, type=0x6) returned 0x8a01c2
[0278.625] SaveDC (hdc=0xe8010795) returned 1
[0278.625] GetTextAlign (hdc=0xe8010795) returned 0x0
[0278.625] GetTextColor (hdc=0xe8010795) returned 0x0
[0278.625] GetCurrentObject (hdc=0xe8010795, type=0x6) returned 0x8a01c2
[0278.626] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0278.626] SelectObject (hdc=0xe8010795, h=0x730a066d) returned 0x8a01c2
[0278.626] GetBkMode (hdc=0xe8010795) returned 2
[0278.626] SetBkMode (hdc=0xe8010795, mode=1) returned 2
[0278.626] DrawTextExW (in: hdc=0xe8010795, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x23bad74 | out: lpchText="OK", lprc=0x53df90) returned 13
[0278.626] DrawTextExW (in: hdc=0xe8010795, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x23bad74 | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0278.626] RestoreDC (hdc=0xe8010795, nSavedDC=-1) returned 1
[0278.626] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe8010795) returned 0x0
[0278.626] GetFocus () returned 0x14004e
[0278.627] IsAppThemed () returned 0x1
[0278.627] GetThemeAppProperties () returned 0x3
[0278.627] GetThemeAppProperties () returned 0x3
[0278.627] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0278.627] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0xe8010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0278.627] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe8010795) returned 0x0
[0278.627] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0278.627] SelectObject (hdc=0xe8010795, h=0x85000f) returned 0x1e0507b9
[0278.627] DeleteDC (hdc=0xe8010795) returned 1
[0278.627] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0278.627] EndPaint (hWnd=0x1701e2, lpPaint=0x53e2e4) returned 1
[0278.627] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.627] IsWindowUnicode (hWnd=0x1b00ea) returned 1
[0278.627] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.627] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.627] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.628] BeginPaint (in: hWnd=0x1b00ea, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0278.628] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0278.628] CreateCompatibleDC (hdc=0xf0105ee) returned 0xea010795
[0278.628] SelectObject (hdc=0xea010795, h=0x1e0507b9) returned 0x85000f
[0278.628] GdipCreateFromHDC (hdc=0xea010795, graphics=0x53e300) returned 0x0
[0278.628] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0278.628] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0278.628] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0278.628] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.628] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0278.628] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0278.628] LocalFree (hMem=0x89eee8) returned 0x0
[0278.628] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.628] GdipCreateRegion (region=0x53e348) returned 0x0
[0278.628] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.629] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0278.629] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0278.629] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaed0dbd) returned 0x0
[0278.629] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.629] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0278.629] GetCurrentObject (hdc=0xea010795, type=0x1) returned 0xb00017
[0278.629] GetCurrentObject (hdc=0xea010795, type=0x2) returned 0x900010
[0278.629] GetCurrentObject (hdc=0xea010795, type=0x7) returned 0x1e0507b9
[0278.629] GetCurrentObject (hdc=0xea010795, type=0x6) returned 0x8a01c2
[0278.629] SaveDC (hdc=0xea010795) returned 1
[0278.629] GetNearestColor (hdc=0xea010795, color=0xf0f0f0) returned 0xf0f0f0
[0278.629] GetNearestColor (hdc=0xea010795, color=0xa0a0a0) returned 0xa0a0a0
[0278.629] GetNearestColor (hdc=0xea010795, color=0x696969) returned 0x696969
[0278.629] GetNearestColor (hdc=0xea010795, color=0xa0a0a0) returned 0xa0a0a0
[0278.629] GetNearestColor (hdc=0xea010795, color=0x0) returned 0x0
[0278.629] GetNearestColor (hdc=0xea010795, color=0xffffff) returned 0xffffff
[0278.629] GetNearestColor (hdc=0xea010795, color=0xe5e5e5) returned 0xe5e5e5
[0278.629] GetNearestColor (hdc=0xea010795, color=0xd7d7d7) returned 0xd7d7d7
[0278.629] GetNearestColor (hdc=0xea010795, color=0x0) returned 0x0
[0278.629] RestoreDC (hdc=0xea010795, nSavedDC=-1) returned 1
[0278.630] GdipReleaseDC (graphics=0x5d92c30, hdc=0xea010795) returned 0x0
[0278.630] IsAppThemed () returned 0x1
[0278.630] GetThemeAppProperties () returned 0x3
[0278.630] GetThemeAppProperties () returned 0x3
[0278.630] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0278.630] SendMessageW (hWnd=0x1402ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0278.630] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0278.630] IsAppThemed () returned 0x1
[0278.630] GetThemeAppProperties () returned 0x3
[0278.630] GetThemeAppProperties () returned 0x3
[0278.630] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x23bb584 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0278.630] IsAppThemed () returned 0x1
[0278.630] GetThemeAppProperties () returned 0x3
[0278.630] GetThemeAppProperties () returned 0x3
[0278.630] IsAppThemed () returned 0x1
[0278.630] GetThemeAppProperties () returned 0x3
[0278.630] GetThemeAppProperties () returned 0x3
[0278.630] GetFocus () returned 0x14004e
[0278.631] IsAppThemed () returned 0x1
[0278.631] GetThemeAppProperties () returned 0x3
[0278.631] GetThemeAppProperties () returned 0x3
[0278.631] IsAppThemed () returned 0x1
[0278.631] GetThemeAppProperties () returned 0x3
[0278.631] GetThemeAppProperties () returned 0x3
[0278.631] IsThemePartDefined () returned 0x1
[0278.631] IsAppThemed () returned 0x1
[0278.631] GetThemeAppProperties () returned 0x3
[0278.631] GetThemeAppProperties () returned 0x3
[0278.631] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0278.631] IsAppThemed () returned 0x1
[0278.631] GetThemeAppProperties () returned 0x3
[0278.631] GetThemeAppProperties () returned 0x3
[0278.631] IsAppThemed () returned 0x1
[0278.631] GetThemeAppProperties () returned 0x3
[0278.631] GetThemeAppProperties () returned 0x3
[0278.631] IsThemePartDefined () returned 0x1
[0278.631] GdipCreateRegion (region=0x53e070) returned 0x0
[0278.631] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.631] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0278.631] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.631] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0278.631] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.631] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0278.632] LocalFree (hMem=0x89ee08) returned 0x0
[0278.632] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.632] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0278.632] LocalFree (hMem=0x89ee08) returned 0x0
[0278.632] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.632] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0278.632] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0278.632] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0278.632] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.632] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0278.632] GetCurrentObject (hdc=0xea010795, type=0x1) returned 0xb00017
[0278.632] GetCurrentObject (hdc=0xea010795, type=0x2) returned 0x900010
[0278.632] GetCurrentObject (hdc=0xea010795, type=0x7) returned 0x1e0507b9
[0278.632] GetCurrentObject (hdc=0xea010795, type=0x6) returned 0x8a01c2
[0278.632] SaveDC (hdc=0xea010795) returned 1
[0278.632] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4a04051e
[0278.632] GetClipRgn (hdc=0xea010795, hrgn=0x4a04051e) returned 0
[0278.632] SelectClipRgn (hdc=0xea010795, hrgn=0x6a0407a1) returned 2
[0278.632] DeleteObject (ho=0x4a04051e) returned 1
[0278.633] DeleteObject (ho=0x6a0407a1) returned 1
[0278.633] OffsetViewportOrgEx (in: hdc=0xea010795, x=0, y=0, lppt=0x23bbc34 | out: lppt=0x23bbc34) returned 1
[0278.633] DrawThemeParentBackground () returned 0x0
[0278.633] GetWindowPlacement (in: hWnd=0x1402ca, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0278.633] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0278.633] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.633] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.633] GetSystemMetrics (nIndex=42) returned 0
[0278.633] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.633] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0278.633] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0278.633] GetCurrentObject (hdc=0xea010795, type=0x1) returned 0xb00017
[0278.633] GetCurrentObject (hdc=0xea010795, type=0x2) returned 0x900010
[0278.633] GetCurrentObject (hdc=0xea010795, type=0x7) returned 0x1e0507b9
[0278.633] GetCurrentObject (hdc=0xea010795, type=0x6) returned 0x8a01c2
[0278.633] SaveDC (hdc=0xea010795) returned 2
[0278.633] GetNearestColor (hdc=0xea010795, color=0xf0f0f0) returned 0xf0f0f0
[0278.633] CreateSolidBrush (color=0xf0f0f0) returned 0x510078d
[0278.634] FillRect (hDC=0xea010795, lprc=0x53dad0, hbr=0x510078d) returned 1
[0278.634] DeleteObject (ho=0x510078d) returned 1
[0278.634] RestoreDC (hdc=0xea010795, nSavedDC=-1) returned 1
[0278.634] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.634] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.634] GetSystemMetrics (nIndex=42) returned 0
[0278.634] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.634] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0278.634] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0278.634] GetCurrentObject (hdc=0xea010795, type=0x1) returned 0xb00017
[0278.634] GetCurrentObject (hdc=0xea010795, type=0x2) returned 0x900010
[0278.634] GetCurrentObject (hdc=0xea010795, type=0x7) returned 0x1e0507b9
[0278.634] GetCurrentObject (hdc=0xea010795, type=0x6) returned 0x8a01c2
[0278.634] SaveDC (hdc=0xea010795) returned 2
[0278.634] GetNearestColor (hdc=0xea010795, color=0xf0f0f0) returned 0xf0f0f0
[0278.634] CreateSolidBrush (color=0xf0f0f0) returned 0x610078d
[0278.634] FillRect (hDC=0xea010795, lprc=0x53da70, hbr=0x610078d) returned 1
[0278.634] DeleteObject (ho=0x610078d) returned 1
[0278.634] RestoreDC (hdc=0xea010795, nSavedDC=-1) returned 1
[0278.635] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.635] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.635] GetSystemMetrics (nIndex=42) returned 0
[0278.635] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.635] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0278.635] RestoreDC (hdc=0xea010795, nSavedDC=-1) returned 1
[0278.635] GdipReleaseDC (graphics=0x5d92c30, hdc=0xea010795) returned 0x0
[0278.635] IsAppThemed () returned 0x1
[0278.635] GetThemeAppProperties () returned 0x3
[0278.636] GetThemeAppProperties () returned 0x3
[0278.636] IsAppThemed () returned 0x1
[0278.636] GetThemeAppProperties () returned 0x3
[0278.636] GetThemeAppProperties () returned 0x3
[0278.636] IsThemePartDefined () returned 0x1
[0278.636] GdipCreateRegion (region=0x53dff4) returned 0x0
[0278.636] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.636] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0278.636] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.636] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0278.636] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.636] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0278.636] LocalFree (hMem=0x89ea88) returned 0x0
[0278.636] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0278.636] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0278.636] LocalFree (hMem=0x89eee8) returned 0x0
[0278.636] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.636] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0278.636] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0278.636] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0278.637] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.637] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0278.637] GetCurrentObject (hdc=0xea010795, type=0x1) returned 0xb00017
[0278.637] GetCurrentObject (hdc=0xea010795, type=0x2) returned 0x900010
[0278.637] GetCurrentObject (hdc=0xea010795, type=0x7) returned 0x1e0507b9
[0278.637] GetCurrentObject (hdc=0xea010795, type=0x6) returned 0x8a01c2
[0278.637] SaveDC (hdc=0xea010795) returned 1
[0278.637] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b0407a1
[0278.637] GetClipRgn (hdc=0xea010795, hrgn=0x6b0407a1) returned 0
[0278.637] SelectClipRgn (hdc=0xea010795, hrgn=0x4c04051e) returned 2
[0278.637] DeleteObject (ho=0x6b0407a1) returned 1
[0278.637] DeleteObject (ho=0x4c04051e) returned 1
[0278.637] OffsetViewportOrgEx (in: hdc=0xea010795, x=0, y=0, lppt=0x23bc4bc | out: lppt=0x23bc4bc) returned 1
[0278.637] IsAppThemed () returned 0x1
[0278.638] GetThemeAppProperties () returned 0x3
[0278.638] GetThemeAppProperties () returned 0x3
[0278.638] DrawThemeBackground () returned 0x0
[0278.638] RestoreDC (hdc=0xea010795, nSavedDC=-1) returned 1
[0278.638] GdipReleaseDC (graphics=0x5d92c30, hdc=0xea010795) returned 0x0
[0278.638] GdipCreateRegion (region=0x53dff8) returned 0x0
[0278.638] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.638] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0278.638] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.638] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0278.638] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.638] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.638] LocalFree (hMem=0x89ea88) returned 0x0
[0278.638] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.638] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0278.638] LocalFree (hMem=0x89ee08) returned 0x0
[0278.638] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.638] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0278.639] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0278.639] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0278.639] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.639] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0278.639] GetCurrentObject (hdc=0xea010795, type=0x1) returned 0xb00017
[0278.639] GetCurrentObject (hdc=0xea010795, type=0x2) returned 0x900010
[0278.639] GetCurrentObject (hdc=0xea010795, type=0x7) returned 0x1e0507b9
[0278.639] GetCurrentObject (hdc=0xea010795, type=0x6) returned 0x8a01c2
[0278.639] SaveDC (hdc=0xea010795) returned 1
[0278.639] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4d04051e
[0278.639] GetClipRgn (hdc=0xea010795, hrgn=0x4d04051e) returned 0
[0278.639] SelectClipRgn (hdc=0xea010795, hrgn=0x6c0407a1) returned 2
[0278.639] DeleteObject (ho=0x4d04051e) returned 1
[0278.639] DeleteObject (ho=0x6c0407a1) returned 1
[0278.639] OffsetViewportOrgEx (in: hdc=0xea010795, x=0, y=0, lppt=0x23bc790 | out: lppt=0x23bc790) returned 1
[0278.639] IsAppThemed () returned 0x1
[0278.640] GetThemeAppProperties () returned 0x3
[0278.640] GetThemeAppProperties () returned 0x3
[0278.640] GetThemeBackgroundContentRect () returned 0x0
[0278.640] RestoreDC (hdc=0xea010795, nSavedDC=-1) returned 1
[0278.640] GdipReleaseDC (graphics=0x5d92c30, hdc=0xea010795) returned 0x0
[0278.640] IsAppThemed () returned 0x1
[0278.640] GetThemeAppProperties () returned 0x3
[0278.640] GetThemeAppProperties () returned 0x3
[0278.640] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0278.640] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0278.640] GetCurrentObject (hdc=0xea010795, type=0x1) returned 0xb00017
[0278.640] GetCurrentObject (hdc=0xea010795, type=0x2) returned 0x900010
[0278.640] GetCurrentObject (hdc=0xea010795, type=0x7) returned 0x1e0507b9
[0278.640] GetCurrentObject (hdc=0xea010795, type=0x6) returned 0x8a01c2
[0278.640] SaveDC (hdc=0xea010795) returned 1
[0278.640] GetTextAlign (hdc=0xea010795) returned 0x0
[0278.640] GetTextColor (hdc=0xea010795) returned 0x0
[0278.640] GetCurrentObject (hdc=0xea010795, type=0x6) returned 0x8a01c2
[0278.641] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0278.641] SelectObject (hdc=0xea010795, h=0x730a066d) returned 0x8a01c2
[0278.641] GetBkMode (hdc=0xea010795) returned 2
[0278.641] SetBkMode (hdc=0xea010795, mode=1) returned 2
[0278.641] DrawTextExW (in: hdc=0xea010795, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x23bcb30 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0278.641] DrawTextExW (in: hdc=0xea010795, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x23bcb30 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0278.642] RestoreDC (hdc=0xea010795, nSavedDC=-1) returned 1
[0278.642] GdipReleaseDC (graphics=0x5d92c30, hdc=0xea010795) returned 0x0
[0278.642] GetFocus () returned 0x14004e
[0278.642] IsAppThemed () returned 0x1
[0278.642] GetThemeAppProperties () returned 0x3
[0278.642] GetThemeAppProperties () returned 0x3
[0278.642] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0278.642] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xea010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0278.642] GdipReleaseDC (graphics=0x5d92c30, hdc=0xea010795) returned 0x0
[0278.642] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0278.642] SelectObject (hdc=0xea010795, h=0x85000f) returned 0x1e0507b9
[0278.642] DeleteDC (hdc=0xea010795) returned 1
[0278.642] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0278.643] EndPaint (hWnd=0x1b00ea, lpPaint=0x53e2e4) returned 1
[0278.643] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.643] IsWindowUnicode (hWnd=0x202c6) returned 1
[0278.643] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.643] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.643] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.643] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0278.643] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0278.643] CreateCompatibleDC (hdc=0x10105d6) returned 0xec010795
[0278.643] SelectObject (hdc=0xec010795, h=0x1e0507b9) returned 0x85000f
[0278.643] GdipCreateFromHDC (hdc=0xec010795, graphics=0x53e300) returned 0x0
[0278.644] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0278.644] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0278.644] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0278.644] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.644] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0278.644] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.644] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0278.644] LocalFree (hMem=0x89ea88) returned 0x0
[0278.644] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.644] GdipCreateRegion (region=0x53e348) returned 0x0
[0278.644] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.644] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0278.644] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0278.644] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaeb0dbd) returned 0x0
[0278.645] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.645] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0278.645] GetCurrentObject (hdc=0xec010795, type=0x1) returned 0xb00017
[0278.645] GetCurrentObject (hdc=0xec010795, type=0x2) returned 0x900010
[0278.645] GetCurrentObject (hdc=0xec010795, type=0x7) returned 0x1e0507b9
[0278.645] GetCurrentObject (hdc=0xec010795, type=0x6) returned 0x8a01c2
[0278.645] SaveDC (hdc=0xec010795) returned 1
[0278.645] GetNearestColor (hdc=0xec010795, color=0xff) returned 0xff
[0278.645] GetNearestColor (hdc=0xec010795, color=0x55) returned 0x55
[0278.645] GetNearestColor (hdc=0xec010795, color=0x0) returned 0x0
[0278.645] GetNearestColor (hdc=0xec010795, color=0x55) returned 0x55
[0278.645] GetNearestColor (hdc=0xec010795, color=0x0) returned 0x0
[0278.645] GetNearestColor (hdc=0xec010795, color=0x8080ff) returned 0x8080ff
[0278.645] GetNearestColor (hdc=0xec010795, color=0x7373e5) returned 0x7373e5
[0278.646] GetNearestColor (hdc=0xec010795, color=0xe5) returned 0xe5
[0278.646] GetNearestColor (hdc=0xec010795, color=0x0) returned 0x0
[0278.646] RestoreDC (hdc=0xec010795, nSavedDC=-1) returned 1
[0278.646] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec010795) returned 0x0
[0278.646] IsAppThemed () returned 0x1
[0278.646] GetThemeAppProperties () returned 0x3
[0278.646] GetThemeAppProperties () returned 0x3
[0278.646] IsAppThemed () returned 0x1
[0278.654] GetThemeAppProperties () returned 0x3
[0278.654] GetThemeAppProperties () returned 0x3
[0278.654] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0278.654] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x23bd314 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0278.655] IsAppThemed () returned 0x1
[0278.655] GetThemeAppProperties () returned 0x3
[0278.655] GetThemeAppProperties () returned 0x3
[0278.655] IsAppThemed () returned 0x1
[0278.656] GetThemeAppProperties () returned 0x3
[0278.656] GetThemeAppProperties () returned 0x3
[0278.656] GetFocus () returned 0x14004e
[0278.656] IsAppThemed () returned 0x1
[0278.656] GetThemeAppProperties () returned 0x3
[0278.656] GetThemeAppProperties () returned 0x3
[0278.656] IsAppThemed () returned 0x1
[0278.656] GetThemeAppProperties () returned 0x3
[0278.656] GetThemeAppProperties () returned 0x3
[0278.656] IsThemePartDefined () returned 0x1
[0278.656] IsAppThemed () returned 0x1
[0278.656] GetThemeAppProperties () returned 0x3
[0278.656] GetThemeAppProperties () returned 0x3
[0278.656] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0278.656] IsAppThemed () returned 0x1
[0278.656] GetThemeAppProperties () returned 0x3
[0278.656] GetThemeAppProperties () returned 0x3
[0278.656] IsAppThemed () returned 0x1
[0278.656] GetThemeAppProperties () returned 0x3
[0278.656] GetThemeAppProperties () returned 0x3
[0278.656] IsThemePartDefined () returned 0x1
[0278.656] GdipCreateRegion (region=0x53e070) returned 0x0
[0278.657] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.657] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0278.657] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.657] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0278.657] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.657] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0278.657] LocalFree (hMem=0x89ee08) returned 0x0
[0278.657] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.657] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.657] LocalFree (hMem=0x89ea88) returned 0x0
[0278.657] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.657] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0278.657] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0278.657] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0278.657] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.657] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0278.657] GetCurrentObject (hdc=0xec010795, type=0x1) returned 0xb00017
[0278.657] GetCurrentObject (hdc=0xec010795, type=0x2) returned 0x900010
[0278.657] GetCurrentObject (hdc=0xec010795, type=0x7) returned 0x1e0507b9
[0278.658] GetCurrentObject (hdc=0xec010795, type=0x6) returned 0x8a01c2
[0278.658] SaveDC (hdc=0xec010795) returned 1
[0278.658] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d0407a1
[0278.658] GetClipRgn (hdc=0xec010795, hrgn=0x6d0407a1) returned 0
[0278.658] SelectClipRgn (hdc=0xec010795, hrgn=0x5104051e) returned 2
[0278.658] DeleteObject (ho=0x6d0407a1) returned 1
[0278.658] DeleteObject (ho=0x5104051e) returned 1
[0278.658] OffsetViewportOrgEx (in: hdc=0xec010795, x=0, y=0, lppt=0x23bd9c4 | out: lppt=0x23bd9c4) returned 1
[0278.658] DrawThemeParentBackground () returned 0x0
[0278.658] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0278.658] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0278.658] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0278.659] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0278.659] GetSystemMetrics (nIndex=42) returned 0
[0278.659] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0278.659] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0278.659] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0278.659] GetCurrentObject (hdc=0xec010795, type=0x1) returned 0xb00017
[0278.659] GetCurrentObject (hdc=0xec010795, type=0x2) returned 0x900010
[0278.659] GetCurrentObject (hdc=0xec010795, type=0x7) returned 0x1e0507b9
[0278.659] GetCurrentObject (hdc=0xec010795, type=0x6) returned 0x8a01c2
[0278.659] SaveDC (hdc=0xec010795) returned 2
[0278.659] GetNearestColor (hdc=0xec010795, color=0xff) returned 0xff
[0278.659] CreateSolidBrush (color=0xff) returned 0x710078d
[0278.659] FillRect (hDC=0xec010795, lprc=0x53dad0, hbr=0x710078d) returned 1
[0278.659] DeleteObject (ho=0x710078d) returned 1
[0278.659] RestoreDC (hdc=0xec010795, nSavedDC=-1) returned 1
[0278.660] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0278.660] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0278.660] GetSystemMetrics (nIndex=42) returned 0
[0278.660] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0278.660] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0278.660] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0278.660] GetCurrentObject (hdc=0xec010795, type=0x1) returned 0xb00017
[0278.660] GetCurrentObject (hdc=0xec010795, type=0x2) returned 0x900010
[0278.660] GetCurrentObject (hdc=0xec010795, type=0x7) returned 0x1e0507b9
[0278.660] GetCurrentObject (hdc=0xec010795, type=0x6) returned 0x8a01c2
[0278.660] SaveDC (hdc=0xec010795) returned 2
[0278.660] GetNearestColor (hdc=0xec010795, color=0xff) returned 0xff
[0278.660] CreateSolidBrush (color=0xff) returned 0x810078d
[0278.660] FillRect (hDC=0xec010795, lprc=0x53da70, hbr=0x810078d) returned 1
[0278.660] DeleteObject (ho=0x810078d) returned 1
[0278.660] RestoreDC (hdc=0xec010795, nSavedDC=-1) returned 1
[0278.661] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0278.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0278.661] GetSystemMetrics (nIndex=42) returned 0
[0278.661] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0278.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0278.661] RestoreDC (hdc=0xec010795, nSavedDC=-1) returned 1
[0278.661] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec010795) returned 0x0
[0278.661] IsAppThemed () returned 0x1
[0278.661] GetThemeAppProperties () returned 0x3
[0278.661] GetThemeAppProperties () returned 0x3
[0278.661] IsAppThemed () returned 0x1
[0278.661] GetThemeAppProperties () returned 0x3
[0278.661] GetThemeAppProperties () returned 0x3
[0278.661] IsThemePartDefined () returned 0x1
[0278.661] GdipCreateRegion (region=0x53dff4) returned 0x0
[0278.662] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.662] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0278.662] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.662] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0278.662] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.662] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0278.662] LocalFree (hMem=0x89ea88) returned 0x0
[0278.662] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.662] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0278.662] LocalFree (hMem=0x89ea88) returned 0x0
[0278.662] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.662] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0278.662] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0278.662] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0278.663] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.663] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0278.663] GetCurrentObject (hdc=0xec010795, type=0x1) returned 0xb00017
[0278.663] GetCurrentObject (hdc=0xec010795, type=0x2) returned 0x900010
[0278.663] GetCurrentObject (hdc=0xec010795, type=0x7) returned 0x1e0507b9
[0278.663] GetCurrentObject (hdc=0xec010795, type=0x6) returned 0x8a01c2
[0278.663] SaveDC (hdc=0xec010795) returned 1
[0278.663] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5204051e
[0278.663] GetClipRgn (hdc=0xec010795, hrgn=0x5204051e) returned 0
[0278.663] SelectClipRgn (hdc=0xec010795, hrgn=0x6f0407a1) returned 2
[0278.663] DeleteObject (ho=0x5204051e) returned 1
[0278.663] DeleteObject (ho=0x6f0407a1) returned 1
[0278.663] OffsetViewportOrgEx (in: hdc=0xec010795, x=0, y=0, lppt=0x23be228 | out: lppt=0x23be228) returned 1
[0278.663] IsAppThemed () returned 0x1
[0278.664] GetThemeAppProperties () returned 0x3
[0278.664] GetThemeAppProperties () returned 0x3
[0278.664] DrawThemeBackground () returned 0x0
[0278.664] RestoreDC (hdc=0xec010795, nSavedDC=-1) returned 1
[0278.664] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec010795) returned 0x0
[0278.664] GdipCreateRegion (region=0x53dff8) returned 0x0
[0278.664] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.664] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0278.664] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.664] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0278.664] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.664] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0278.664] LocalFree (hMem=0x89ee08) returned 0x0
[0278.664] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.664] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.664] LocalFree (hMem=0x89ea88) returned 0x0
[0278.665] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.665] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0278.665] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0278.665] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0278.665] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.665] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0278.665] GetCurrentObject (hdc=0xec010795, type=0x1) returned 0xb00017
[0278.665] GetCurrentObject (hdc=0xec010795, type=0x2) returned 0x900010
[0278.665] GetCurrentObject (hdc=0xec010795, type=0x7) returned 0x1e0507b9
[0278.665] GetCurrentObject (hdc=0xec010795, type=0x6) returned 0x8a01c2
[0278.665] SaveDC (hdc=0xec010795) returned 1
[0278.665] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x700407a1
[0278.665] GetClipRgn (hdc=0xec010795, hrgn=0x700407a1) returned 0
[0278.665] SelectClipRgn (hdc=0xec010795, hrgn=0x5304051e) returned 2
[0278.665] DeleteObject (ho=0x700407a1) returned 1
[0278.665] DeleteObject (ho=0x5304051e) returned 1
[0278.665] OffsetViewportOrgEx (in: hdc=0xec010795, x=0, y=0, lppt=0x23be4fc | out: lppt=0x23be4fc) returned 1
[0278.665] IsAppThemed () returned 0x1
[0278.666] GetThemeAppProperties () returned 0x3
[0278.666] GetThemeAppProperties () returned 0x3
[0278.666] GetThemeBackgroundContentRect () returned 0x0
[0278.666] RestoreDC (hdc=0xec010795, nSavedDC=-1) returned 1
[0278.666] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec010795) returned 0x0
[0278.666] IsAppThemed () returned 0x1
[0278.666] GetThemeAppProperties () returned 0x3
[0278.666] GetThemeAppProperties () returned 0x3
[0278.666] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0278.666] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0278.666] GetCurrentObject (hdc=0xec010795, type=0x1) returned 0xb00017
[0278.666] GetCurrentObject (hdc=0xec010795, type=0x2) returned 0x900010
[0278.666] GetCurrentObject (hdc=0xec010795, type=0x7) returned 0x1e0507b9
[0278.666] GetCurrentObject (hdc=0xec010795, type=0x6) returned 0x8a01c2
[0278.666] SaveDC (hdc=0xec010795) returned 1
[0278.666] GetTextAlign (hdc=0xec010795) returned 0x0
[0278.666] GetTextColor (hdc=0xec010795) returned 0x0
[0278.666] GetCurrentObject (hdc=0xec010795, type=0x6) returned 0x8a01c2
[0278.667] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0278.667] SelectObject (hdc=0xec010795, h=0x450a0799) returned 0x8a01c2
[0278.667] GetBkMode (hdc=0xec010795) returned 2
[0278.667] SetBkMode (hdc=0xec010795, mode=1) returned 2
[0278.667] DrawTextExW (in: hdc=0xec010795, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x23be89c | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0278.667] DrawTextExW (in: hdc=0xec010795, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x23be89c | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0278.667] RestoreDC (hdc=0xec010795, nSavedDC=-1) returned 1
[0278.668] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec010795) returned 0x0
[0278.668] GetFocus () returned 0x14004e
[0278.668] IsAppThemed () returned 0x1
[0278.668] GetThemeAppProperties () returned 0x3
[0278.668] GetThemeAppProperties () returned 0x3
[0278.668] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0278.668] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xec010795, x1=0, y1=0, rop=0xcc0020) returned 1
[0278.668] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec010795) returned 0x0
[0278.668] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0278.668] SelectObject (hdc=0xec010795, h=0x85000f) returned 0x1e0507b9
[0278.668] DeleteDC (hdc=0xec010795) returned 1
[0278.668] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0278.668] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0278.669] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.669] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.669] WaitMessage () returned 1
[0278.681] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.681] IsWindowUnicode (hWnd=0x180122) returned 1
[0278.681] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.681] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.681] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.681] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.681] IsWindowUnicode (hWnd=0x180122) returned 1
[0278.681] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.682] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.682] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.682] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x2a1, wParam=0x0, lParam=0x150010) returned 0x0
[0278.682] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.682] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.682] WaitMessage () returned 1
[0278.684] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.684] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0278.685] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.685] WaitMessage () returned 1
[0278.685] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.685] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0278.686] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.686] WaitMessage () returned 1
[0278.686] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.686] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0278.686] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.686] WaitMessage () returned 1
[0278.703] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.703] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x84, wParam=0x0, lParam=0x1900358) returned 0x1
[0278.703] IsWindowUnicode (hWnd=0x1701e2) returned 1
[0278.703] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.703] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.703] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.703] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0278.703] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.703] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x84, wParam=0x0, lParam=0x1900358) returned 0x1
[0278.703] IsWindowUnicode (hWnd=0x1701e2) returned 1
[0278.703] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.703] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x84, wParam=0x0, lParam=0x1900358) returned 0x1
[0278.704] SetCursor (hCursor=0x10003) returned 0x10003
[0278.704] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.704] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.704] _TrackMouseEvent (in: lpEventTrack=0x23bea4c | out: lpEventTrack=0x23bea4c) returned 1
[0278.704] SendMessageW (hWnd=0x1701e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0278.704] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0278.704] InvalidateRect (hWnd=0x1701e2, lpRect=0x0, bErase=0) returned 1
[0278.704] GetKeyState (nVirtKey=1) returned 0
[0278.704] GetKeyState (nVirtKey=2) returned 0
[0278.704] GetKeyState (nVirtKey=4) returned 0
[0278.704] GetKeyState (nVirtKey=5) returned 0
[0278.704] GetKeyState (nVirtKey=6) returned 0
[0278.704] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.704] IsWindowUnicode (hWnd=0x1701e2) returned 1
[0278.704] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.704] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.704] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.704] BeginPaint (in: hWnd=0x1701e2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0278.704] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0278.705] CreateCompatibleDC (hdc=0xf0105ee) returned 0xf40107c6
[0278.705] SelectObject (hdc=0xf40107c6, h=0x1e0507b9) returned 0x85000f
[0278.705] GdipCreateFromHDC (hdc=0xf40107c6, graphics=0x53e300) returned 0x0
[0278.705] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0278.705] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0278.705] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0278.705] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.705] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0278.705] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0278.705] LocalFree (hMem=0x89ea88) returned 0x0
[0278.705] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.705] GdipCreateRegion (region=0x53e348) returned 0x0
[0278.705] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.705] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0278.705] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0278.705] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfae90dbd) returned 0x0
[0278.706] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.706] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0278.706] GetCurrentObject (hdc=0xf40107c6, type=0x1) returned 0xb00017
[0278.706] GetCurrentObject (hdc=0xf40107c6, type=0x2) returned 0x900010
[0278.706] GetCurrentObject (hdc=0xf40107c6, type=0x7) returned 0x1e0507b9
[0278.706] GetCurrentObject (hdc=0xf40107c6, type=0x6) returned 0x8a01c2
[0278.706] SaveDC (hdc=0xf40107c6) returned 1
[0278.706] GetNearestColor (hdc=0xf40107c6, color=0xf0f0f0) returned 0xf0f0f0
[0278.706] GetNearestColor (hdc=0xf40107c6, color=0xa0a0a0) returned 0xa0a0a0
[0278.706] GetNearestColor (hdc=0xf40107c6, color=0x696969) returned 0x696969
[0278.706] GetNearestColor (hdc=0xf40107c6, color=0xa0a0a0) returned 0xa0a0a0
[0278.706] GetNearestColor (hdc=0xf40107c6, color=0x0) returned 0x0
[0278.706] GetNearestColor (hdc=0xf40107c6, color=0xffffff) returned 0xffffff
[0278.706] GetNearestColor (hdc=0xf40107c6, color=0xe5e5e5) returned 0xe5e5e5
[0278.706] GetNearestColor (hdc=0xf40107c6, color=0xd7d7d7) returned 0xd7d7d7
[0278.706] GetNearestColor (hdc=0xf40107c6, color=0x0) returned 0x0
[0278.706] RestoreDC (hdc=0xf40107c6, nSavedDC=-1) returned 1
[0278.707] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf40107c6) returned 0x0
[0278.707] IsAppThemed () returned 0x1
[0278.707] GetThemeAppProperties () returned 0x3
[0278.707] GetThemeAppProperties () returned 0x3
[0278.707] IsAppThemed () returned 0x1
[0278.707] GetThemeAppProperties () returned 0x3
[0278.707] GetThemeAppProperties () returned 0x3
[0278.707] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0278.707] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x23bf1c8 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0278.707] IsAppThemed () returned 0x1
[0278.707] GetThemeAppProperties () returned 0x3
[0278.707] GetThemeAppProperties () returned 0x3
[0278.707] IsAppThemed () returned 0x1
[0278.707] GetThemeAppProperties () returned 0x3
[0278.707] GetThemeAppProperties () returned 0x3
[0278.707] IsAppThemed () returned 0x1
[0278.707] GetThemeAppProperties () returned 0x3
[0278.707] GetThemeAppProperties () returned 0x3
[0278.708] IsAppThemed () returned 0x1
[0278.708] GetThemeAppProperties () returned 0x3
[0278.708] GetThemeAppProperties () returned 0x3
[0278.708] IsThemePartDefined () returned 0x1
[0278.708] IsAppThemed () returned 0x1
[0278.708] GetThemeAppProperties () returned 0x3
[0278.708] GetThemeAppProperties () returned 0x3
[0278.708] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0278.708] IsAppThemed () returned 0x1
[0278.708] GetThemeAppProperties () returned 0x3
[0278.708] GetThemeAppProperties () returned 0x3
[0278.708] IsAppThemed () returned 0x1
[0278.708] GetThemeAppProperties () returned 0x3
[0278.708] GetThemeAppProperties () returned 0x3
[0278.708] IsThemePartDefined () returned 0x1
[0278.708] GdipCreateRegion (region=0x53e064) returned 0x0
[0278.708] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.708] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0278.708] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.708] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0278.708] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.708] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0278.708] LocalFree (hMem=0x89ee08) returned 0x0
[0278.708] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.709] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.712] LocalFree (hMem=0x89ea88) returned 0x0
[0278.712] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.712] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0278.712] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0278.712] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0278.712] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.712] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0278.712] GetCurrentObject (hdc=0xf40107c6, type=0x1) returned 0xb00017
[0278.712] GetCurrentObject (hdc=0xf40107c6, type=0x2) returned 0x900010
[0278.712] GetCurrentObject (hdc=0xf40107c6, type=0x7) returned 0x1e0507b9
[0278.712] GetCurrentObject (hdc=0xf40107c6, type=0x6) returned 0x8a01c2
[0278.712] SaveDC (hdc=0xf40107c6) returned 1
[0278.712] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5404051e
[0278.713] GetClipRgn (hdc=0xf40107c6, hrgn=0x5404051e) returned 0
[0278.713] SelectClipRgn (hdc=0xf40107c6, hrgn=0x740407a1) returned 2
[0278.713] DeleteObject (ho=0x5404051e) returned 1
[0278.713] DeleteObject (ho=0x740407a1) returned 1
[0278.713] OffsetViewportOrgEx (in: hdc=0xf40107c6, x=0, y=0, lppt=0x23bf878 | out: lppt=0x23bf878) returned 1
[0278.713] DrawThemeParentBackground () returned 0x0
[0278.713] GetWindowPlacement (in: hWnd=0x1402ca, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0278.713] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0278.713] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.713] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.713] GetSystemMetrics (nIndex=42) returned 0
[0278.713] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.713] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0278.713] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0278.713] GetCurrentObject (hdc=0xf40107c6, type=0x1) returned 0xb00017
[0278.713] GetCurrentObject (hdc=0xf40107c6, type=0x2) returned 0x900010
[0278.714] GetCurrentObject (hdc=0xf40107c6, type=0x7) returned 0x1e0507b9
[0278.714] GetCurrentObject (hdc=0xf40107c6, type=0x6) returned 0x8a01c2
[0278.714] SaveDC (hdc=0xf40107c6) returned 2
[0278.714] GetNearestColor (hdc=0xf40107c6, color=0xf0f0f0) returned 0xf0f0f0
[0278.714] CreateSolidBrush (color=0xf0f0f0) returned 0x910078d
[0278.714] FillRect (hDC=0xf40107c6, lprc=0x53dac8, hbr=0x910078d) returned 1
[0278.714] DeleteObject (ho=0x910078d) returned 1
[0278.714] RestoreDC (hdc=0xf40107c6, nSavedDC=-1) returned 1
[0278.714] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.714] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.714] GetSystemMetrics (nIndex=42) returned 0
[0278.714] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.714] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0278.714] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0278.714] GetCurrentObject (hdc=0xf40107c6, type=0x1) returned 0xb00017
[0278.714] GetCurrentObject (hdc=0xf40107c6, type=0x2) returned 0x900010
[0278.715] GetCurrentObject (hdc=0xf40107c6, type=0x7) returned 0x1e0507b9
[0278.715] GetCurrentObject (hdc=0xf40107c6, type=0x6) returned 0x8a01c2
[0278.715] SaveDC (hdc=0xf40107c6) returned 2
[0278.715] GetNearestColor (hdc=0xf40107c6, color=0xf0f0f0) returned 0xf0f0f0
[0278.715] CreateSolidBrush (color=0xf0f0f0) returned 0xa10078d
[0278.715] FillRect (hDC=0xf40107c6, lprc=0x53da68, hbr=0xa10078d) returned 1
[0278.715] DeleteObject (ho=0xa10078d) returned 1
[0278.715] RestoreDC (hdc=0xf40107c6, nSavedDC=-1) returned 1
[0278.715] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.715] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.715] GetSystemMetrics (nIndex=42) returned 0
[0278.715] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.715] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0278.715] RestoreDC (hdc=0xf40107c6, nSavedDC=-1) returned 1
[0278.715] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf40107c6) returned 0x0
[0278.715] IsAppThemed () returned 0x1
[0278.716] GetThemeAppProperties () returned 0x3
[0278.716] GetThemeAppProperties () returned 0x3
[0278.716] IsAppThemed () returned 0x1
[0278.716] GetThemeAppProperties () returned 0x3
[0278.716] GetThemeAppProperties () returned 0x3
[0278.716] IsThemePartDefined () returned 0x1
[0278.716] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0278.716] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.716] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0278.716] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.716] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0278.716] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.716] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0278.716] LocalFree (hMem=0x89ee08) returned 0x0
[0278.716] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.716] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0278.716] LocalFree (hMem=0x89ea88) returned 0x0
[0278.716] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.716] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0278.716] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0278.717] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0278.717] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.717] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0278.717] GetCurrentObject (hdc=0xf40107c6, type=0x1) returned 0xb00017
[0278.717] GetCurrentObject (hdc=0xf40107c6, type=0x2) returned 0x900010
[0278.717] GetCurrentObject (hdc=0xf40107c6, type=0x7) returned 0x1e0507b9
[0278.717] GetCurrentObject (hdc=0xf40107c6, type=0x6) returned 0x8a01c2
[0278.717] SaveDC (hdc=0xf40107c6) returned 1
[0278.717] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x750407a1
[0278.717] GetClipRgn (hdc=0xf40107c6, hrgn=0x750407a1) returned 0
[0278.717] SelectClipRgn (hdc=0xf40107c6, hrgn=0x5604051e) returned 2
[0278.717] DeleteObject (ho=0x750407a1) returned 1
[0278.717] DeleteObject (ho=0x5604051e) returned 1
[0278.717] OffsetViewportOrgEx (in: hdc=0xf40107c6, x=0, y=0, lppt=0x23c0100 | out: lppt=0x23c0100) returned 1
[0278.717] IsAppThemed () returned 0x1
[0278.717] GetThemeAppProperties () returned 0x3
[0278.717] GetThemeAppProperties () returned 0x3
[0278.717] DrawThemeBackground () returned 0x0
[0278.718] RestoreDC (hdc=0xf40107c6, nSavedDC=-1) returned 1
[0278.718] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf40107c6) returned 0x0
[0278.718] GdipCreateRegion (region=0x53dfec) returned 0x0
[0278.718] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.718] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0278.718] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.718] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0278.718] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.718] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0278.718] LocalFree (hMem=0x89ee08) returned 0x0
[0278.718] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.718] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.718] LocalFree (hMem=0x89ea88) returned 0x0
[0278.719] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.719] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0278.719] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0278.719] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0278.719] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.719] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0278.719] GetCurrentObject (hdc=0xf40107c6, type=0x1) returned 0xb00017
[0278.719] GetCurrentObject (hdc=0xf40107c6, type=0x2) returned 0x900010
[0278.719] GetCurrentObject (hdc=0xf40107c6, type=0x7) returned 0x1e0507b9
[0278.719] GetCurrentObject (hdc=0xf40107c6, type=0x6) returned 0x8a01c2
[0278.720] SaveDC (hdc=0xf40107c6) returned 1
[0278.720] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5704051e
[0278.720] GetClipRgn (hdc=0xf40107c6, hrgn=0x5704051e) returned 0
[0278.720] SelectClipRgn (hdc=0xf40107c6, hrgn=0x760407a1) returned 2
[0278.720] DeleteObject (ho=0x5704051e) returned 1
[0278.720] DeleteObject (ho=0x760407a1) returned 1
[0278.720] OffsetViewportOrgEx (in: hdc=0xf40107c6, x=0, y=0, lppt=0x23c03d4 | out: lppt=0x23c03d4) returned 1
[0278.721] IsAppThemed () returned 0x1
[0278.721] GetThemeAppProperties () returned 0x3
[0278.721] GetThemeAppProperties () returned 0x3
[0278.721] GetThemeBackgroundContentRect () returned 0x0
[0278.721] RestoreDC (hdc=0xf40107c6, nSavedDC=-1) returned 1
[0278.721] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf40107c6) returned 0x0
[0278.721] IsAppThemed () returned 0x1
[0278.721] GetThemeAppProperties () returned 0x3
[0278.721] GetThemeAppProperties () returned 0x3
[0278.721] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0278.721] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0278.721] GetCurrentObject (hdc=0xf40107c6, type=0x1) returned 0xb00017
[0278.722] GetCurrentObject (hdc=0xf40107c6, type=0x2) returned 0x900010
[0278.722] GetCurrentObject (hdc=0xf40107c6, type=0x7) returned 0x1e0507b9
[0278.722] GetCurrentObject (hdc=0xf40107c6, type=0x6) returned 0x8a01c2
[0278.722] SaveDC (hdc=0xf40107c6) returned 1
[0278.722] GetTextAlign (hdc=0xf40107c6) returned 0x0
[0278.722] GetTextColor (hdc=0xf40107c6) returned 0x0
[0278.722] GetCurrentObject (hdc=0xf40107c6, type=0x6) returned 0x8a01c2
[0278.723] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0278.723] SelectObject (hdc=0xf40107c6, h=0x730a066d) returned 0x8a01c2
[0278.723] GetBkMode (hdc=0xf40107c6) returned 2
[0278.723] SetBkMode (hdc=0xf40107c6, mode=1) returned 2
[0278.723] DrawTextExW (in: hdc=0xf40107c6, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x23c0774 | out: lpchText="OK", lprc=0x53df84) returned 13
[0278.724] DrawTextExW (in: hdc=0xf40107c6, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x23c0774 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0278.724] RestoreDC (hdc=0xf40107c6, nSavedDC=-1) returned 1
[0278.724] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf40107c6) returned 0x0
[0278.728] GetFocus () returned 0x14004e
[0278.728] IsAppThemed () returned 0x1
[0278.728] GetThemeAppProperties () returned 0x3
[0278.728] GetThemeAppProperties () returned 0x3
[0278.728] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0278.728] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xf40107c6, x1=0, y1=0, rop=0xcc0020) returned 1
[0278.728] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf40107c6) returned 0x0
[0278.728] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0278.729] SelectObject (hdc=0xf40107c6, h=0x85000f) returned 0x1e0507b9
[0278.729] DeleteDC (hdc=0xf40107c6) returned 1
[0278.729] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0278.729] EndPaint (hWnd=0x1701e2, lpPaint=0x53e2e4) returned 1
[0278.729] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.730] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.730] WaitMessage () returned 1
[0278.743] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.743] IsWindowUnicode (hWnd=0x102dc) returned 1
[0278.744] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.744] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.744] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.745] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.745] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.745] WaitMessage () returned 1
[0278.745] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.745] IsWindowUnicode (hWnd=0x102dc) returned 1
[0278.745] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.746] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.746] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.747] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.747] IsWindowUnicode (hWnd=0x102dc) returned 1
[0278.747] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.747] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.747] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.747] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.748] IsWindowUnicode (hWnd=0x102dc) returned 1
[0278.748] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.748] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.748] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.748] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.748] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.748] WaitMessage () returned 1
[0278.749] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.749] IsWindowUnicode (hWnd=0x102dc) returned 1
[0278.749] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.749] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.749] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.750] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.751] IsWindowUnicode (hWnd=0x102dc) returned 1
[0278.751] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.751] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.751] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.751] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.751] IsWindowUnicode (hWnd=0x102dc) returned 1
[0278.751] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.751] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.751] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.751] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.752] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.752] WaitMessage () returned 1
[0278.753] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.753] IsWindowUnicode (hWnd=0x102dc) returned 1
[0278.753] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.753] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.753] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.754] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.755] IsWindowUnicode (hWnd=0x102dc) returned 1
[0278.755] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.755] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.755] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.755] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.755] IsWindowUnicode (hWnd=0x102dc) returned 1
[0278.755] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.760] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.760] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.761] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.761] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.761] WaitMessage () returned 1
[0278.868] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.868] IsWindowUnicode (hWnd=0x1701e2) returned 1
[0278.868] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.868] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.869] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.869] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.869] IsWindowUnicode (hWnd=0x1701e2) returned 1
[0278.869] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.869] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.869] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.869] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x2a1, wParam=0x0, lParam=0x70017) returned 0x0
[0278.869] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.869] IsWindowUnicode (hWnd=0x202d0) returned 1
[0278.869] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.869] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.869] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.869] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.869] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0278.870] WaitMessage () returned 1
[0278.935] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.935] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x84, wParam=0x0, lParam=0x1900358) returned 0x1
[0278.935] IsWindowUnicode (hWnd=0x1701e2) returned 1
[0278.935] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.936] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x84, wParam=0x0, lParam=0x1900358) returned 0x1
[0278.936] GetDlgItem (hDlg=0x1402ca, nIDDlgItem=0) returned 0x0
[0278.936] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x210, wParam=0x201, lParam=0x130139) returned 0x0
[0278.936] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x21, wParam=0x1402ca, lParam=0x2010001) returned 0x1
[0278.936] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x21, wParam=0x1402ca, lParam=0x2010001) returned 0x1
[0278.936] SetCursor (hCursor=0x10003) returned 0x10003
[0278.936] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.936] DispatchMessageW (lpMsg=0x53e8a0)
[0278.936] GetKeyState (nVirtKey=1) returned -127
[0278.936] GetKeyState (nVirtKey=2) returned 0
[0278.936] GetKeyState (nVirtKey=4) returned 0
[0278.937] GetKeyState (nVirtKey=5) returned 0
[0278.937] GetKeyState (nVirtKey=6) returned 0
[0278.937] IsWindowVisible (hWnd=0x1701e2) returned 1
[0278.937] IsWindowEnabled (hWnd=0x1701e2) returned 1
[0278.937] SetFocus (hWnd=0x1701e2)
[0278.937] GetFocus () returned 0x1701e2
[0278.937] IsChild (hWndParent=0x1402ca, hWnd=0x1701e2) returned 1
[0278.937] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x8, wParam=0x1701e2, lParam=0x0) returned 0x1
[0278.938] SendMessageW (hWnd=0x14004e, Msg=0x2111, wParam=0x200004e, lParam=0x14004e) returned 0x0
[0278.939] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0278.940] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0278.941] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.941] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0278.941] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.942] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0278.944] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.944] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x7, wParam=0x14004e, lParam=0x0) returned 0x0
[0278.944] GetStockObject (i=5) returned 0x900015
[0278.944] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0278.945] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0xd, wParam=0x3, lParam=0x89e7a8) returned 0x2
[0278.945] GetDlgItem (hDlg=0x1402ca, nIDDlgItem=1507810) returned 0x1701e2
[0278.945] SendMessageW (hWnd=0x1701e2, Msg=0x202b, wParam=0x1701e2, lParam=0x53de74) returned 0x0
[0278.945] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x202b, wParam=0x1701e2, lParam=0x53de74) returned 0x0
[0278.945] InvalidateRect (hWnd=0x1701e2, lpRect=0x0, bErase=0) returned 1
[0278.951] GetKeyState (nVirtKey=1) returned -127
[0278.951] GetKeyState (nVirtKey=2) returned 0
[0278.951] GetKeyState (nVirtKey=4) returned 0
[0278.951] GetKeyState (nVirtKey=5) returned 0
[0278.951] GetKeyState (nVirtKey=6) returned 0
[0278.951] GetCapture () returned 0x0
[0278.951] SetCapture (hWnd=0x1701e2) returned 0x0
[0278.951] GetKeyState (nVirtKey=1) returned -127
[0278.951] GetKeyState (nVirtKey=2) returned 0
[0278.951] GetKeyState (nVirtKey=4) returned 0
[0278.951] GetKeyState (nVirtKey=5) returned 0
[0278.951] GetKeyState (nVirtKey=6) returned 0
[0278.951] NotifyWinEvent (event=0x800a, hwnd=0x1701e2, idObject=-4, idChild=0)
[0278.951] InvalidateRect (hWnd=0x1701e2, lpRect=0x53e4c8, bErase=0) returned 1
[0278.952] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.952] IsWindowUnicode (hWnd=0x1701e2) returned 1
[0278.952] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.952] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0278.952] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0278.952] MapWindowPoints (in: hWndFrom=0x1701e2, hWndTo=0x0, lpPoints=0x23c09e8, cPoints=0x1 | out: lpPoints=0x23c09e8) returned 25756481
[0278.952] NotifyWinEvent (event=0x800a, hwnd=0x1701e2, idObject=-4, idChild=0)
[0278.952] InvalidateRect (hWnd=0x1701e2, lpRect=0x53e468, bErase=0) returned 1
[0278.952] UpdateWindow (hWnd=0x1701e2) returned 1
[0278.952] BeginPaint (in: hWnd=0x1701e2, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0xf0105ee
[0278.952] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0278.952] CreateCompatibleDC (hdc=0xf0105ee) returned 0x84010792
[0278.953] SelectObject (hdc=0x84010792, h=0x1e0507b9) returned 0x85000f
[0278.953] GdipCreateFromHDC (hdc=0x84010792, graphics=0x53df98) returned 0x0
[0278.953] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0278.953] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0278.953] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0278.953] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.953] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0278.953] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0278.953] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0278.953] LocalFree (hMem=0x89ec80) returned 0x0
[0278.953] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.953] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0278.953] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.954] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0278.954] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0278.954] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfae70dbd) returned 0x0
[0278.954] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.954] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0278.954] GetCurrentObject (hdc=0x84010792, type=0x1) returned 0xb00017
[0278.954] GetCurrentObject (hdc=0x84010792, type=0x2) returned 0x900010
[0278.954] GetCurrentObject (hdc=0x84010792, type=0x7) returned 0x1e0507b9
[0278.954] GetCurrentObject (hdc=0x84010792, type=0x6) returned 0x8a01c2
[0278.954] SaveDC (hdc=0x84010792) returned 1
[0278.954] GetNearestColor (hdc=0x84010792, color=0xf0f0f0) returned 0xf0f0f0
[0278.954] GetNearestColor (hdc=0x84010792, color=0xa0a0a0) returned 0xa0a0a0
[0278.954] GetNearestColor (hdc=0x84010792, color=0x696969) returned 0x696969
[0278.955] GetNearestColor (hdc=0x84010792, color=0xa0a0a0) returned 0xa0a0a0
[0278.955] GetNearestColor (hdc=0x84010792, color=0x0) returned 0x0
[0278.955] GetNearestColor (hdc=0x84010792, color=0xffffff) returned 0xffffff
[0278.955] GetNearestColor (hdc=0x84010792, color=0xe5e5e5) returned 0xe5e5e5
[0278.955] GetNearestColor (hdc=0x84010792, color=0xd7d7d7) returned 0xd7d7d7
[0278.955] GetNearestColor (hdc=0x84010792, color=0x0) returned 0x0
[0278.955] RestoreDC (hdc=0x84010792, nSavedDC=-1) returned 1
[0278.955] GdipReleaseDC (graphics=0x5d92c30, hdc=0x84010792) returned 0x0
[0278.955] IsAppThemed () returned 0x1
[0278.955] GetThemeAppProperties () returned 0x3
[0278.955] GetThemeAppProperties () returned 0x3
[0278.955] IsAppThemed () returned 0x1
[0278.956] GetThemeAppProperties () returned 0x3
[0278.956] GetThemeAppProperties () returned 0x3
[0278.956] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x23c115c | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0278.956] IsAppThemed () returned 0x1
[0278.956] GetThemeAppProperties () returned 0x3
[0278.956] GetThemeAppProperties () returned 0x3
[0278.956] IsAppThemed () returned 0x1
[0278.956] GetThemeAppProperties () returned 0x3
[0278.956] GetThemeAppProperties () returned 0x3
[0278.956] IsAppThemed () returned 0x1
[0278.956] GetThemeAppProperties () returned 0x3
[0278.957] GetThemeAppProperties () returned 0x3
[0278.957] IsAppThemed () returned 0x1
[0278.957] GetThemeAppProperties () returned 0x3
[0278.957] GetThemeAppProperties () returned 0x3
[0278.957] IsThemePartDefined () returned 0x1
[0278.957] IsAppThemed () returned 0x1
[0278.957] GetThemeAppProperties () returned 0x3
[0278.957] GetThemeAppProperties () returned 0x3
[0278.957] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0278.957] IsAppThemed () returned 0x1
[0278.957] GetThemeAppProperties () returned 0x3
[0278.957] GetThemeAppProperties () returned 0x3
[0278.957] IsAppThemed () returned 0x1
[0278.957] GetThemeAppProperties () returned 0x3
[0278.957] GetThemeAppProperties () returned 0x3
[0278.957] IsThemePartDefined () returned 0x1
[0278.957] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0278.957] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.957] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0278.958] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.958] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0278.958] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0278.958] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0278.958] LocalFree (hMem=0x89ee08) returned 0x0
[0278.958] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.958] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.958] LocalFree (hMem=0x89ea88) returned 0x0
[0278.958] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.958] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0278.958] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0278.960] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0278.960] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.960] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0278.960] GetCurrentObject (hdc=0x84010792, type=0x1) returned 0xb00017
[0278.960] GetCurrentObject (hdc=0x84010792, type=0x2) returned 0x900010
[0278.960] GetCurrentObject (hdc=0x84010792, type=0x7) returned 0x1e0507b9
[0278.960] GetCurrentObject (hdc=0x84010792, type=0x6) returned 0x8a01c2
[0278.961] SaveDC (hdc=0x84010792) returned 1
[0278.961] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x770407a1
[0278.961] GetClipRgn (hdc=0x84010792, hrgn=0x770407a1) returned 0
[0278.961] SelectClipRgn (hdc=0x84010792, hrgn=0x5b04051e) returned 2
[0278.961] DeleteObject (ho=0x770407a1) returned 1
[0278.961] DeleteObject (ho=0x5b04051e) returned 1
[0278.961] OffsetViewportOrgEx (in: hdc=0x84010792, x=0, y=0, lppt=0x23c180c | out: lppt=0x23c180c) returned 1
[0278.961] DrawThemeParentBackground () returned 0x0
[0278.961] GetWindowPlacement (in: hWnd=0x1402ca, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0278.962] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0278.962] GetWindowTextLengthW (hWnd=0x1402ca)
[0278.962] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.962] GetSystemMetrics (nIndex=42) returned 0
[0278.962] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.962] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0278.962] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0278.962] GetCurrentObject (hdc=0x84010792, type=0x1) returned 0xb00017
[0278.962] GetCurrentObject (hdc=0x84010792, type=0x2) returned 0x900010
[0278.962] GetCurrentObject (hdc=0x84010792, type=0x7) returned 0x1e0507b9
[0278.963] GetCurrentObject (hdc=0x84010792, type=0x6) returned 0x8a01c2
[0278.963] SaveDC (hdc=0x84010792) returned 2
[0278.963] GetNearestColor (hdc=0x84010792, color=0xf0f0f0) returned 0xf0f0f0
[0278.963] CreateSolidBrush (color=0xf0f0f0) returned 0xb10078d
[0278.963] FillRect (hDC=0x84010792, lprc=0x53d760, hbr=0xb10078d) returned 1
[0278.963] DeleteObject (ho=0xb10078d) returned 1
[0278.963] RestoreDC (hdc=0x84010792, nSavedDC=-1) returned 1
[0278.964] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.964] GetSystemMetrics (nIndex=42) returned 0
[0278.964] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0278.964] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0278.964] GetCurrentObject (hdc=0x84010792, type=0x1) returned 0xb00017
[0278.964] GetCurrentObject (hdc=0x84010792, type=0x2) returned 0x900010
[0278.964] GetCurrentObject (hdc=0x84010792, type=0x7) returned 0x1e0507b9
[0278.964] GetCurrentObject (hdc=0x84010792, type=0x6) returned 0x8a01c2
[0278.964] SaveDC (hdc=0x84010792) returned 2
[0278.965] GetNearestColor (hdc=0x84010792, color=0xf0f0f0) returned 0xf0f0f0
[0278.965] CreateSolidBrush (color=0xf0f0f0) returned 0xc10078d
[0278.965] FillRect (hDC=0x84010792, lprc=0x53d700, hbr=0xc10078d) returned 1
[0278.965] DeleteObject (ho=0xc10078d) returned 1
[0278.965] RestoreDC (hdc=0x84010792, nSavedDC=-1) returned 1
[0278.965] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0278.965] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0278.965] GetSystemMetrics (nIndex=42) returned 0
[0278.965] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0278.966] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0278.966] RestoreDC (hdc=0x84010792, nSavedDC=-1) returned 1
[0278.966] GdipReleaseDC (graphics=0x5d92c30, hdc=0x84010792) returned 0x0
[0278.966] IsAppThemed () returned 0x1
[0278.966] GetThemeAppProperties () returned 0x3
[0278.966] GetThemeAppProperties () returned 0x3
[0278.966] IsAppThemed () returned 0x1
[0278.966] GetThemeAppProperties () returned 0x3
[0278.966] GetThemeAppProperties () returned 0x3
[0278.967] IsThemePartDefined () returned 0x1
[0278.967] GdipCreateRegion (region=0x53dc80) returned 0x0
[0278.967] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.967] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0278.967] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0278.967] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0278.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0278.967] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0278.967] LocalFree (hMem=0x89ec80) returned 0x0
[0278.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0278.967] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0278.968] LocalFree (hMem=0x89ea88) returned 0x0
[0278.968] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0278.968] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0278.968] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0278.968] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0278.968] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.968] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0278.968] GetCurrentObject (hdc=0x84010792, type=0x1) returned 0xb00017
[0278.968] GetCurrentObject (hdc=0x84010792, type=0x2) returned 0x900010
[0278.968] GetCurrentObject (hdc=0x84010792, type=0x7) returned 0x1e0507b9
[0278.968] GetCurrentObject (hdc=0x84010792, type=0x6) returned 0x8a01c2
[0278.968] SaveDC (hdc=0x84010792) returned 1
[0278.968] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5c04051e
[0278.968] GetClipRgn (hdc=0x84010792, hrgn=0x5c04051e) returned 0
[0278.968] SelectClipRgn (hdc=0x84010792, hrgn=0x790407a1) returned 2
[0278.968] DeleteObject (ho=0x5c04051e) returned 1
[0278.969] DeleteObject (ho=0x790407a1) returned 1
[0278.969] OffsetViewportOrgEx (in: hdc=0x84010792, x=0, y=0, lppt=0x23c2094 | out: lppt=0x23c2094) returned 1
[0278.969] IsAppThemed () returned 0x1
[0278.969] GetThemeAppProperties () returned 0x3
[0278.969] GetThemeAppProperties () returned 0x3
[0278.969] DrawThemeBackground () returned 0x0
[0278.969] RestoreDC (hdc=0x84010792, nSavedDC=-1) returned 1
[0278.969] GdipReleaseDC (graphics=0x5d92c30, hdc=0x84010792) returned 0x0
[0278.969] GdipCreateRegion (region=0x53dc84) returned 0x0
[0278.969] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0278.969] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0278.969] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0278.969] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0278.969] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0278.969] LocalFree (hMem=0x89ee08) returned 0x0
[0278.970] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0278.970] LocalFree (hMem=0x89ea88) returned 0x0
[0278.970] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0278.970] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0278.970] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0278.970] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0278.970] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0278.970] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0278.970] GetCurrentObject (hdc=0x84010792, type=0x1) returned 0xb00017
[0278.970] GetCurrentObject (hdc=0x84010792, type=0x2) returned 0x900010
[0278.970] GetCurrentObject (hdc=0x84010792, type=0x7) returned 0x1e0507b9
[0278.970] GetCurrentObject (hdc=0x84010792, type=0x6) returned 0x8a01c2
[0278.970] SaveDC (hdc=0x84010792) returned 1
[0278.970] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a0407a1
[0278.970] GetClipRgn (hdc=0x84010792, hrgn=0x7a0407a1) returned 0
[0278.971] SelectClipRgn (hdc=0x84010792, hrgn=0x5d04051e) returned 2
[0278.971] DeleteObject (ho=0x7a0407a1) returned 1
[0278.971] DeleteObject (ho=0x5d04051e) returned 1
[0278.971] OffsetViewportOrgEx (in: hdc=0x84010792, x=0, y=0, lppt=0x23c2368 | out: lppt=0x23c2368) returned 1
[0278.971] IsAppThemed () returned 0x1
[0278.971] GetThemeAppProperties () returned 0x3
[0278.971] GetThemeAppProperties () returned 0x3
[0278.971] GetThemeBackgroundContentRect () returned 0x0
[0278.971] RestoreDC (hdc=0x84010792, nSavedDC=-1) returned 1
[0278.971] GdipReleaseDC (graphics=0x5d92c30, hdc=0x84010792) returned 0x0
[0278.971] IsAppThemed () returned 0x1
[0278.971] GetThemeAppProperties () returned 0x3
[0278.971] GetThemeAppProperties () returned 0x3
[0278.971] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0278.972] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0278.972] GetCurrentObject (hdc=0x84010792, type=0x1) returned 0xb00017
[0278.972] GetCurrentObject (hdc=0x84010792, type=0x2) returned 0x900010
[0278.972] GetCurrentObject (hdc=0x84010792, type=0x7) returned 0x1e0507b9
[0278.972] GetCurrentObject (hdc=0x84010792, type=0x6) returned 0x8a01c2
[0278.972] SaveDC (hdc=0x84010792) returned 1
[0278.972] GetTextAlign (hdc=0x84010792) returned 0x0
[0278.972] GetTextColor (hdc=0x84010792) returned 0x0
[0278.972] GetCurrentObject (hdc=0x84010792, type=0x6) returned 0x8a01c2
[0278.972] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0278.972] SelectObject (hdc=0x84010792, h=0x730a066d) returned 0x8a01c2
[0278.972] GetBkMode (hdc=0x84010792) returned 2
[0278.973] SetBkMode (hdc=0x84010792, mode=1) returned 2
[0278.973] DrawTextExW (in: hdc=0x84010792, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x23c2708 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0278.973] DrawTextExW (in: hdc=0x84010792, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x23c2708 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0278.973] RestoreDC (hdc=0x84010792, nSavedDC=-1) returned 1
[0278.973] GdipReleaseDC (graphics=0x5d92c30, hdc=0x84010792) returned 0x0
[0278.973] GetFocus () returned 0x1701e2
[0278.974] IsAppThemed () returned 0x1
[0278.974] GetThemeAppProperties () returned 0x3
[0278.974] GetThemeAppProperties () returned 0x3
[0278.974] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0278.974] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x84010792, x1=0, y1=0, rop=0xcc0020) returned 1
[0278.974] GdipReleaseDC (graphics=0x5d92c30, hdc=0x84010792) returned 0x0
[0278.974] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0278.974] SelectObject (hdc=0x84010792, h=0x85000f) returned 0x1e0507b9
[0278.975] DeleteDC (hdc=0x84010792) returned 1
[0278.975] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0278.975] EndPaint (hWnd=0x1701e2, lpPaint=0x53df7c) returned 1
[0278.975] MapWindowPoints (in: hWndFrom=0x1701e2, hWndTo=0x0, lpPoints=0x23c2804, cPoints=0x1 | out: lpPoints=0x23c2804) returned 25756481
[0278.975] WindowFromPoint (Point=0x358) returned 0x1701e2
[0278.975] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x84, wParam=0x0, lParam=0x1900358) returned 0x1
[0278.975] NotifyWinEvent (event=0x800a, hwnd=0x1701e2, idObject=-4, idChild=0)
[0278.975] NotifyWinEvent (event=0x800c, hwnd=0x1701e2, idObject=-4, idChild=0)
[0278.975] GetWindowTextLengthW (hWnd=0x14004e) returned 0
[0278.975] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0278.976] GetSystemMetrics (nIndex=42) returned 0
[0278.976] GetWindowTextW (in: hWnd=0x14004e, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0278.976] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0278.976] SendMessageW (hWnd=0x1402ca, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0278.976] GetCapture () returned 0x1701e2
[0278.976] ReleaseCapture () returned 1
[0278.976] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0278.976] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0278.977] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x84, wParam=0x0, lParam=0x1900358) returned 0x1
[0278.977] IsWindow (hWnd=0x70036) returned 1
[0278.977] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0278.978] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0278.978] IsWindow (hWnd=0x70036) returned 1
[0278.978] SetActiveWindow (hWnd=0x70036) returned 0x1402ca
[0278.978] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0278.980] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0278.980] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0278.980] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0278.981] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0278.982] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0278.982] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0278.982] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1402ca) returned 0x1
[0278.985] GetFocus () returned 0x1701e2
[0278.985] SetFocus (hWnd=0x202c6) returned 0x1701e2
[0278.985] GetFocus () returned 0x202c6
[0278.986] IsChild (hWndParent=0x1402ca, hWnd=0x202c6) returned 0
[0278.986] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0278.986] GetCapture () returned 0x0
[0278.986] InvalidateRect (hWnd=0x1701e2, lpRect=0x0, bErase=0) returned 1
[0278.987] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0278.988] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0278.990] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.990] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0278.995] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.995] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0278.995] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.995] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x1701e2, lParam=0x0) returned 0x0
[0278.996] GetStockObject (i=5) returned 0x900015
[0278.996] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0278.996] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8cca90) returned 0x7
[0278.996] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0278.996] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0278.996] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0278.996] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0278.998] IsWindow (hWnd=0x202c6) returned 1
[0278.998] SetFocus (hWnd=0x202c6) returned 0x202c6
[0278.998] GetWindowLongW (hWnd=0x1402ca, nIndex=-8) returned 458806
[0278.998] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0278.999] GetCurrentThreadId () returned 0x11d0
[0278.999] IsWindow (hWnd=0x70036) returned 1
[0278.999] IsWindow (hWnd=0x70036) returned 1
[0278.999] IsWindowVisible (hWnd=0x70036) returned 1
[0278.999] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0278.999] GetFocus () returned 0x202c6
[0278.999] IsChild (hWndParent=0x1402ca, hWnd=0x202c6) returned 0
[0278.999] ShowWindow (hWnd=0x1402ca, nCmdShow=0) returned 1
[0278.999] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0278.999] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0279.001] GetWindowPlacement (in: hWnd=0x1402ca, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0279.001] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0279.001] GetClientRect (in: hWnd=0x1402ca, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0279.001] GetWindowRect (in: hWnd=0x1402ca, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0279.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0279.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0279.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0279.003] GetWindowLongW (hWnd=0x1402ca, nIndex=-20) returned 327937
[0279.003] DestroyWindow (hWnd=0x1402ca) returned 1
[0279.003] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0279.003] GetWindowTextLengthW (hWnd=0x1402ca) returned 10
[0279.003] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0279.004] GetSystemMetrics (nIndex=42) returned 0
[0279.004] GetWindowTextW (in: hWnd=0x1402ca, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0279.004] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0279.004] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0279.004] SendMessageW (hWnd=0x14004e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0279.004] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0279.004] SendMessageW (hWnd=0x14004e, Msg=0xb0, wParam=0x23aa72c, lParam=0x53e518) returned 0x0
[0279.004] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xb0, wParam=0x23aa72c, lParam=0x53e518) returned 0x0
[0279.004] GetWindowTextLengthW (hWnd=0x14004e) returned 0
[0279.004] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0279.004] GetSystemMetrics (nIndex=42) returned 0
[0279.004] GetWindowTextW (in: hWnd=0x14004e, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0279.004] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0279.004] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0279.005] GetWindowThreadProcessId (in: hWnd=0x36013e, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0279.005] GetWindow (hWnd=0x36013e, uCmd=0x5) returned 0x0
[0279.005] GetWindowLongW (hWnd=0x36013e, nIndex=-20) returned 65792
[0279.005] DestroyWindow (hWnd=0x36013e) returned 1
[0279.005] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x36013e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0279.005] GetWindowTextLengthW (hWnd=0x36013e) returned 25
[0279.005] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x36013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0279.005] GetSystemMetrics (nIndex=42) returned 0
[0279.005] GetWindowTextW (in: hWnd=0x36013e, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0279.005] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x36013e, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0279.005] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x36013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0279.018] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x36013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0279.019] GetWindowTextLengthW (hWnd=0x180122) returned 16
[0279.019] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0279.019] GetSystemMetrics (nIndex=42) returned 0
[0279.019] GetWindowTextW (in: hWnd=0x180122, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0279.020] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0279.020] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0279.020] InvalidateRect (hWnd=0x1701e2, lpRect=0x0, bErase=0) returned 1
[0279.020] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0279.020] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0279.021] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x14004e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0279.022] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x180122, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0279.024] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1701e2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0279.025] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b00ea, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0279.026] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1402ca, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0279.028] GetProcessWindowStation () returned 0x13c
[0279.028] GetActiveWindow () returned 0x70036
[0279.028] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0279.029] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0279.029] GetCurrentThreadId () returned 0x11d0
[0279.029] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf518e, lParam=0x0) returned 1
[0279.029] IsWindowVisible (hWnd=0x70036) returned 1
[0279.029] IsWindowEnabled (hWnd=0x70036) returned 1
[0279.029] IsWindowVisible (hWnd=0x602b6) returned 0
[0279.029] IsWindowVisible (hWnd=0x901f8) returned 0
[0279.029] IsWindowVisible (hWnd=0x202d0) returned 0
[0279.029] IsWindowVisible (hWnd=0x202d4) returned 0
[0279.029] GetActiveWindow () returned 0x70036
[0279.030] GetFocus () returned 0x202c6
[0279.030] IsWindow (hWnd=0x70036) returned 1
[0279.030] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0279.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0279.030] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0279.030] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0279.032] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0279.043] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1502ca) returned 0x1
[0279.046] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0279.046] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0279.049] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1c00ea, lParam=0x0) returned 0x0
[0279.049] GetCapture () returned 0x0
[0279.049] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0279.050] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0279.052] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0279.052] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0279.060] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x8b010786
[0279.060] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0279.060] CreateCompatibleDC (hdc=0x8b010786) returned 0x96010792
[0279.060] SelectObject (hdc=0x96010792, h=0x1e0507b9) returned 0x85000f
[0279.060] GdipCreateFromHDC (hdc=0x96010792, graphics=0x53e108) returned 0x0
[0279.061] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0279.061] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0279.061] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0279.061] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0279.061] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0279.061] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0279.061] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0279.061] LocalFree (hMem=0x89ec80) returned 0x0
[0279.061] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0279.061] GdipCreateRegion (region=0x53e150) returned 0x0
[0279.061] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0279.061] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0279.062] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0279.062] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfae50dbd) returned 0x0
[0279.062] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0279.062] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0279.062] GetCurrentObject (hdc=0x96010792, type=0x1) returned 0xb00017
[0279.062] GetCurrentObject (hdc=0x96010792, type=0x2) returned 0x900010
[0279.062] GetCurrentObject (hdc=0x96010792, type=0x7) returned 0x1e0507b9
[0279.062] GetCurrentObject (hdc=0x96010792, type=0x6) returned 0x8a01c2
[0279.063] SaveDC (hdc=0x96010792) returned 1
[0279.063] GetNearestColor (hdc=0x96010792, color=0xff) returned 0xff
[0279.063] GetNearestColor (hdc=0x96010792, color=0x55) returned 0x55
[0279.063] GetNearestColor (hdc=0x96010792, color=0x0) returned 0x0
[0279.063] GetNearestColor (hdc=0x96010792, color=0x55) returned 0x55
[0279.063] GetNearestColor (hdc=0x96010792, color=0x0) returned 0x0
[0279.064] GetNearestColor (hdc=0x96010792, color=0x8080ff) returned 0x8080ff
[0279.064] GetNearestColor (hdc=0x96010792, color=0x7373e5) returned 0x7373e5
[0279.064] GetNearestColor (hdc=0x96010792, color=0xe5) returned 0xe5
[0279.064] GetNearestColor (hdc=0x96010792, color=0x0) returned 0x0
[0279.064] RestoreDC (hdc=0x96010792, nSavedDC=-1) returned 1
[0279.064] GdipReleaseDC (graphics=0x5d92c30, hdc=0x96010792) returned 0x0
[0279.064] IsAppThemed () returned 0x1
[0279.064] GetThemeAppProperties () returned 0x3
[0279.064] GetThemeAppProperties () returned 0x3
[0279.064] IsAppThemed () returned 0x1
[0279.064] GetThemeAppProperties () returned 0x3
[0279.064] GetThemeAppProperties () returned 0x3
[0279.065] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0279.065] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x23c3afc | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0279.065] IsAppThemed () returned 0x1
[0279.065] GetThemeAppProperties () returned 0x3
[0279.065] GetThemeAppProperties () returned 0x3
[0279.065] IsAppThemed () returned 0x1
[0279.065] GetThemeAppProperties () returned 0x3
[0279.065] GetThemeAppProperties () returned 0x3
[0279.065] GetFocus () returned 0x1c00ea
[0279.065] IsAppThemed () returned 0x1
[0279.066] GetThemeAppProperties () returned 0x3
[0279.066] GetThemeAppProperties () returned 0x3
[0279.066] IsAppThemed () returned 0x1
[0279.066] GetThemeAppProperties () returned 0x3
[0279.066] GetThemeAppProperties () returned 0x3
[0279.066] IsThemePartDefined () returned 0x1
[0279.066] IsAppThemed () returned 0x1
[0279.066] GetThemeAppProperties () returned 0x3
[0279.066] GetThemeAppProperties () returned 0x3
[0279.066] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0279.066] IsAppThemed () returned 0x1
[0279.066] GetThemeAppProperties () returned 0x3
[0279.066] GetThemeAppProperties () returned 0x3
[0279.066] IsAppThemed () returned 0x1
[0279.066] GetThemeAppProperties () returned 0x3
[0279.066] GetThemeAppProperties () returned 0x3
[0279.066] IsThemePartDefined () returned 0x1
[0279.066] GdipCreateRegion (region=0x53de78) returned 0x0
[0279.066] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0279.067] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0279.067] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0279.067] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0279.067] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0279.067] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0279.067] LocalFree (hMem=0x89ec80) returned 0x0
[0279.067] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0279.067] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0279.067] LocalFree (hMem=0x89eac0) returned 0x0
[0279.067] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0279.067] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0279.067] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0279.067] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0279.067] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0279.068] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0279.068] GetCurrentObject (hdc=0x96010792, type=0x1) returned 0xb00017
[0279.068] GetCurrentObject (hdc=0x96010792, type=0x2) returned 0x900010
[0279.068] GetCurrentObject (hdc=0x96010792, type=0x7) returned 0x1e0507b9
[0279.068] GetCurrentObject (hdc=0x96010792, type=0x6) returned 0x8a01c2
[0279.068] SaveDC (hdc=0x96010792) returned 1
[0279.078] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e04051e
[0279.078] GetClipRgn (hdc=0x96010792, hrgn=0x5e04051e) returned 0
[0279.078] SelectClipRgn (hdc=0x96010792, hrgn=0x800407a1) returned 2
[0279.078] DeleteObject (ho=0x5e04051e) returned 1
[0279.078] DeleteObject (ho=0x800407a1) returned 1
[0279.078] OffsetViewportOrgEx (in: hdc=0x96010792, x=0, y=0, lppt=0x23c41ac | out: lppt=0x23c41ac) returned 1
[0279.079] DrawThemeParentBackground () returned 0x0
[0279.079] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0279.079] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0279.079] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0279.079] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0279.079] GetSystemMetrics (nIndex=42) returned 0
[0279.079] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0279.079] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0279.079] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0279.079] GetCurrentObject (hdc=0x96010792, type=0x1) returned 0xb00017
[0279.079] GetCurrentObject (hdc=0x96010792, type=0x2) returned 0x900010
[0279.079] GetCurrentObject (hdc=0x96010792, type=0x7) returned 0x1e0507b9
[0279.079] GetCurrentObject (hdc=0x96010792, type=0x6) returned 0x8a01c2
[0279.080] SaveDC (hdc=0x96010792) returned 2
[0279.080] GetNearestColor (hdc=0x96010792, color=0xff) returned 0xff
[0279.080] CreateSolidBrush (color=0xff) returned 0xd10078d
[0279.080] FillRect (hDC=0x96010792, lprc=0x53d8d8, hbr=0xd10078d) returned 1
[0279.080] DeleteObject (ho=0xd10078d) returned 1
[0279.080] RestoreDC (hdc=0x96010792, nSavedDC=-1) returned 1
[0279.080] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0279.080] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0279.080] GetSystemMetrics (nIndex=42) returned 0
[0279.080] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0279.080] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0279.080] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0279.080] GetCurrentObject (hdc=0x96010792, type=0x1) returned 0xb00017
[0279.081] GetCurrentObject (hdc=0x96010792, type=0x2) returned 0x900010
[0279.081] GetCurrentObject (hdc=0x96010792, type=0x7) returned 0x1e0507b9
[0279.081] GetCurrentObject (hdc=0x96010792, type=0x6) returned 0x8a01c2
[0279.081] SaveDC (hdc=0x96010792) returned 2
[0279.081] GetNearestColor (hdc=0x96010792, color=0xff) returned 0xff
[0279.081] CreateSolidBrush (color=0xff) returned 0xe10078d
[0279.081] FillRect (hDC=0x96010792, lprc=0x53d878, hbr=0xe10078d) returned 1
[0279.081] DeleteObject (ho=0xe10078d) returned 1
[0279.081] RestoreDC (hdc=0x96010792, nSavedDC=-1) returned 1
[0279.081] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0279.081] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0279.081] GetSystemMetrics (nIndex=42) returned 0
[0279.081] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0279.081] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0279.082] RestoreDC (hdc=0x96010792, nSavedDC=-1) returned 1
[0279.082] GdipReleaseDC (graphics=0x5d92c30, hdc=0x96010792) returned 0x0
[0279.082] IsAppThemed () returned 0x1
[0279.082] GetThemeAppProperties () returned 0x3
[0279.082] GetThemeAppProperties () returned 0x3
[0279.082] IsAppThemed () returned 0x1
[0279.082] GetThemeAppProperties () returned 0x3
[0279.082] GetThemeAppProperties () returned 0x3
[0279.082] IsThemePartDefined () returned 0x1
[0279.082] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0279.082] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0279.082] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0279.083] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0279.083] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0279.083] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0279.083] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0279.083] LocalFree (hMem=0x89eee8) returned 0x0
[0279.083] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0279.083] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0279.083] LocalFree (hMem=0x89eac0) returned 0x0
[0279.083] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0279.083] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0279.083] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0279.083] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0279.083] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0279.083] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0279.083] GetCurrentObject (hdc=0x96010792, type=0x1) returned 0xb00017
[0279.084] GetCurrentObject (hdc=0x96010792, type=0x2) returned 0x900010
[0279.108] GetCurrentObject (hdc=0x96010792, type=0x7) returned 0x1e0507b9
[0279.108] GetCurrentObject (hdc=0x96010792, type=0x6) returned 0x8a01c2
[0279.108] SaveDC (hdc=0x96010792) returned 1
[0279.109] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x810407a1
[0279.109] GetClipRgn (hdc=0x96010792, hrgn=0x810407a1) returned 0
[0279.109] SelectClipRgn (hdc=0x96010792, hrgn=0x6004051e) returned 2
[0279.109] DeleteObject (ho=0x810407a1) returned 1
[0279.109] DeleteObject (ho=0x6004051e) returned 1
[0279.109] OffsetViewportOrgEx (in: hdc=0x96010792, x=0, y=0, lppt=0x23c4a10 | out: lppt=0x23c4a10) returned 1
[0279.109] IsAppThemed () returned 0x1
[0279.109] GetThemeAppProperties () returned 0x3
[0279.109] GetThemeAppProperties () returned 0x3
[0279.109] DrawThemeBackground () returned 0x0
[0279.109] RestoreDC (hdc=0x96010792, nSavedDC=-1) returned 1
[0279.109] GdipReleaseDC (graphics=0x5d92c30, hdc=0x96010792) returned 0x0
[0279.109] GdipCreateRegion (region=0x53de00) returned 0x0
[0279.109] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0279.110] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0279.110] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0279.110] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0279.110] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0279.110] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0279.110] LocalFree (hMem=0x89eac0) returned 0x0
[0279.110] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0279.110] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0279.110] LocalFree (hMem=0x89ee08) returned 0x0
[0279.110] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0279.110] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0279.110] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0279.110] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0279.110] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0279.111] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0279.111] GetCurrentObject (hdc=0x96010792, type=0x1) returned 0xb00017
[0279.111] GetCurrentObject (hdc=0x96010792, type=0x2) returned 0x900010
[0279.111] GetCurrentObject (hdc=0x96010792, type=0x7) returned 0x1e0507b9
[0279.111] GetCurrentObject (hdc=0x96010792, type=0x6) returned 0x8a01c2
[0279.111] SaveDC (hdc=0x96010792) returned 1
[0279.111] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6104051e
[0279.111] GetClipRgn (hdc=0x96010792, hrgn=0x6104051e) returned 0
[0279.111] SelectClipRgn (hdc=0x96010792, hrgn=0x820407a1) returned 2
[0279.111] DeleteObject (ho=0x6104051e) returned 1
[0279.111] DeleteObject (ho=0x820407a1) returned 1
[0279.111] OffsetViewportOrgEx (in: hdc=0x96010792, x=0, y=0, lppt=0x23c4ce4 | out: lppt=0x23c4ce4) returned 1
[0279.112] IsAppThemed () returned 0x1
[0279.112] GetThemeAppProperties () returned 0x3
[0279.112] GetThemeAppProperties () returned 0x3
[0279.112] GetThemeBackgroundContentRect () returned 0x0
[0279.112] RestoreDC (hdc=0x96010792, nSavedDC=-1) returned 1
[0279.112] GdipReleaseDC (graphics=0x5d92c30, hdc=0x96010792) returned 0x0
[0279.112] IsAppThemed () returned 0x1
[0279.112] GetThemeAppProperties () returned 0x3
[0279.112] GetThemeAppProperties () returned 0x3
[0279.112] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0279.112] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0279.112] GetCurrentObject (hdc=0x96010792, type=0x1) returned 0xb00017
[0279.112] GetCurrentObject (hdc=0x96010792, type=0x2) returned 0x900010
[0279.112] GetCurrentObject (hdc=0x96010792, type=0x7) returned 0x1e0507b9
[0279.112] GetCurrentObject (hdc=0x96010792, type=0x6) returned 0x8a01c2
[0279.113] SaveDC (hdc=0x96010792) returned 1
[0279.113] GetTextAlign (hdc=0x96010792) returned 0x0
[0279.113] GetTextColor (hdc=0x96010792) returned 0x0
[0279.113] GetCurrentObject (hdc=0x96010792, type=0x6) returned 0x8a01c2
[0279.113] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0279.113] SelectObject (hdc=0x96010792, h=0x450a0799) returned 0x8a01c2
[0279.113] GetBkMode (hdc=0x96010792) returned 2
[0279.113] SetBkMode (hdc=0x96010792, mode=1) returned 2
[0279.113] DrawTextExW (in: hdc=0x96010792, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x23c5084 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0279.114] DrawTextExW (in: hdc=0x96010792, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x23c5084 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0279.114] RestoreDC (hdc=0x96010792, nSavedDC=-1) returned 1
[0279.114] GdipReleaseDC (graphics=0x5d92c30, hdc=0x96010792) returned 0x0
[0279.114] GetFocus () returned 0x1c00ea
[0279.114] IsAppThemed () returned 0x1
[0279.114] GetThemeAppProperties () returned 0x3
[0279.114] GetThemeAppProperties () returned 0x3
[0279.114] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0279.114] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x96010792, x1=0, y1=0, rop=0xcc0020) returned 1
[0279.115] GdipReleaseDC (graphics=0x5d92c30, hdc=0x96010792) returned 0x0
[0279.115] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0279.115] SelectObject (hdc=0x96010792, h=0x85000f) returned 0x1e0507b9
[0279.116] DeleteDC (hdc=0x96010792) returned 1
[0279.116] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0279.116] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0279.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0279.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0279.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1502ca) returned 0x1
[0279.469] GetFocus () returned 0x1502ca
[0279.470] GetAncestor (hwnd=0x1502ca, gaFlags=0x1) returned 0x10010
[0279.470] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0279.470] SetFocus (hWnd=0x202c6) returned 0x0
[0279.473] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0279.475] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0279.475] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0279.476] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0279.476] GetFocus () returned 0x70036
[0279.476] SetFocus (hWnd=0x202c6) returned 0x0
[0279.482] IsWindow (hWnd=0x70036) returned 1
[0279.482] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0279.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0279.482] IsWindow (hWnd=0x70036) returned 1
[0279.482] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0279.482] IsWindow (hWnd=0x202c6) returned 1
[0279.482] SetFocus (hWnd=0x202c6) returned 0x70036
[0279.483] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0279.484] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0279.485] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0279.487] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0279.487] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0279.487] GetStockObject (i=5) returned 0x900015
[0279.487] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0279.487] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8ccaa8) returned 0x7
[0279.487] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0279.487] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0279.487] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0279.488] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0279.489] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0279.489] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0279.489] GetFocus () returned 0x202c6
[0279.489] GetCapture () returned 0x0
[0279.489] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.495] IsWindowUnicode (hWnd=0x202c6) returned 1
[0279.495] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.495] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.495] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.495] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.496] IsWindowUnicode (hWnd=0x202c6) returned 1
[0279.496] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.496] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.496] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.496] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0279.497] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0279.497] CreateCompatibleDC (hdc=0xf0105ee) returned 0xa40107a2
[0279.497] SelectObject (hdc=0xa40107a2, h=0x1e0507b9) returned 0x85000f
[0279.497] GdipCreateFromHDC (hdc=0xa40107a2, graphics=0x53e958) returned 0x0
[0279.497] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0279.497] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0279.497] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0279.497] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0279.497] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0279.497] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0279.497] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0279.498] LocalFree (hMem=0x89ee08) returned 0x0
[0279.498] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0279.498] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0279.498] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0279.498] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0279.498] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0279.498] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfae30dbd) returned 0x0
[0279.498] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0279.498] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0279.498] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0279.498] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0279.498] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0279.498] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0279.498] SaveDC (hdc=0xa40107a2) returned 1
[0279.498] GetNearestColor (hdc=0xa40107a2, color=0xff) returned 0xff
[0279.498] GetNearestColor (hdc=0xa40107a2, color=0x55) returned 0x55
[0279.499] GetNearestColor (hdc=0xa40107a2, color=0x0) returned 0x0
[0279.499] GetNearestColor (hdc=0xa40107a2, color=0x55) returned 0x55
[0279.499] GetNearestColor (hdc=0xa40107a2, color=0x0) returned 0x0
[0279.499] GetNearestColor (hdc=0xa40107a2, color=0x8080ff) returned 0x8080ff
[0279.499] GetNearestColor (hdc=0xa40107a2, color=0x7373e5) returned 0x7373e5
[0279.499] GetNearestColor (hdc=0xa40107a2, color=0xe5) returned 0xe5
[0279.499] GetNearestColor (hdc=0xa40107a2, color=0x0) returned 0x0
[0279.499] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0279.499] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107a2) returned 0x0
[0279.499] IsAppThemed () returned 0x1
[0279.499] GetThemeAppProperties () returned 0x3
[0279.499] GetThemeAppProperties () returned 0x3
[0279.499] IsAppThemed () returned 0x1
[0279.500] GetThemeAppProperties () returned 0x3
[0279.500] GetThemeAppProperties () returned 0x3
[0279.500] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x23c58e0 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0279.500] IsAppThemed () returned 0x1
[0279.500] GetThemeAppProperties () returned 0x3
[0279.500] GetThemeAppProperties () returned 0x3
[0279.500] IsAppThemed () returned 0x1
[0279.500] GetThemeAppProperties () returned 0x3
[0279.500] GetThemeAppProperties () returned 0x3
[0279.500] GetFocus () returned 0x202c6
[0279.500] IsAppThemed () returned 0x1
[0279.500] GetThemeAppProperties () returned 0x3
[0279.500] GetThemeAppProperties () returned 0x3
[0279.500] IsAppThemed () returned 0x1
[0279.501] GetThemeAppProperties () returned 0x3
[0279.501] GetThemeAppProperties () returned 0x3
[0279.501] IsThemePartDefined () returned 0x1
[0279.501] IsAppThemed () returned 0x1
[0279.501] GetThemeAppProperties () returned 0x3
[0279.501] GetThemeAppProperties () returned 0x3
[0279.501] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0279.501] IsAppThemed () returned 0x1
[0279.501] GetThemeAppProperties () returned 0x3
[0279.501] GetThemeAppProperties () returned 0x3
[0279.501] IsAppThemed () returned 0x1
[0279.501] GetThemeAppProperties () returned 0x3
[0279.501] GetThemeAppProperties () returned 0x3
[0279.501] IsThemePartDefined () returned 0x1
[0279.501] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0279.501] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0279.501] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0279.501] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0279.501] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0279.501] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0279.501] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0279.502] LocalFree (hMem=0x89eac0) returned 0x0
[0279.502] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0279.502] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0279.502] LocalFree (hMem=0x89eac0) returned 0x0
[0279.502] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0279.502] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0279.502] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0279.502] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0279.502] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0279.502] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0279.502] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0279.502] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0279.502] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0279.502] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0279.502] SaveDC (hdc=0xa40107a2) returned 1
[0279.502] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe04053e
[0279.503] GetClipRgn (hdc=0xa40107a2, hrgn=0xe04053e) returned 0
[0279.503] SelectClipRgn (hdc=0xa40107a2, hrgn=0x900407a1) returned 2
[0279.503] DeleteObject (ho=0xe04053e) returned 1
[0279.503] DeleteObject (ho=0x900407a1) returned 1
[0279.503] OffsetViewportOrgEx (in: hdc=0xa40107a2, x=0, y=0, lppt=0x23c5f90 | out: lppt=0x23c5f90) returned 1
[0279.503] DrawThemeParentBackground () returned 0x0
[0279.503] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0279.503] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0279.503] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0279.503] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0279.503] GetSystemMetrics (nIndex=42) returned 0
[0279.503] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0279.503] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0279.503] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0279.503] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0279.504] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0279.504] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0279.504] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0279.504] SaveDC (hdc=0xa40107a2) returned 2
[0279.504] GetNearestColor (hdc=0xa40107a2, color=0xff) returned 0xff
[0279.504] CreateSolidBrush (color=0xff) returned 0x1010078d
[0279.504] FillRect (hDC=0xa40107a2, lprc=0x53e128, hbr=0x1010078d) returned 1
[0279.504] DeleteObject (ho=0x1010078d) returned 1
[0279.504] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0279.504] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0279.504] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0279.504] GetSystemMetrics (nIndex=42) returned 0
[0279.504] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0279.504] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0279.504] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0279.505] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0279.505] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0279.505] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0279.505] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0279.505] SaveDC (hdc=0xa40107a2) returned 2
[0279.505] GetNearestColor (hdc=0xa40107a2, color=0xff) returned 0xff
[0279.505] CreateSolidBrush (color=0xff) returned 0x1110078d
[0279.505] FillRect (hDC=0xa40107a2, lprc=0x53e0c8, hbr=0x1110078d) returned 1
[0279.505] DeleteObject (ho=0x1110078d) returned 1
[0279.505] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0279.505] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0279.505] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0279.505] GetSystemMetrics (nIndex=42) returned 0
[0279.505] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0279.506] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0279.507] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0279.507] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107a2) returned 0x0
[0279.507] IsAppThemed () returned 0x1
[0279.507] GetThemeAppProperties () returned 0x3
[0279.507] GetThemeAppProperties () returned 0x3
[0279.507] IsAppThemed () returned 0x1
[0279.507] GetThemeAppProperties () returned 0x3
[0279.507] GetThemeAppProperties () returned 0x3
[0279.507] IsThemePartDefined () returned 0x1
[0279.507] GdipCreateRegion (region=0x53e64c) returned 0x0
[0279.507] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0279.507] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0279.507] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0279.507] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0279.507] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0279.507] LocalFree (hMem=0x89eac0) returned 0x0
[0279.507] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0279.507] LocalFree (hMem=0x89ec80) returned 0x0
[0279.507] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0279.508] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0279.508] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0279.508] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0279.508] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0279.508] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0279.508] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0279.508] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0279.508] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0279.508] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0279.508] SaveDC (hdc=0xa40107a2) returned 1
[0279.508] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x910407a1
[0279.508] GetClipRgn (hdc=0xa40107a2, hrgn=0x910407a1) returned 0
[0279.508] SelectClipRgn (hdc=0xa40107a2, hrgn=0x1004053e) returned 2
[0279.508] DeleteObject (ho=0x910407a1) returned 1
[0279.508] DeleteObject (ho=0x1004053e) returned 1
[0279.508] OffsetViewportOrgEx (in: hdc=0xa40107a2, x=0, y=0, lppt=0x23c67f4 | out: lppt=0x23c67f4) returned 1
[0279.508] IsAppThemed () returned 0x1
[0279.509] GetThemeAppProperties () returned 0x3
[0279.509] GetThemeAppProperties () returned 0x3
[0279.509] DrawThemeBackground () returned 0x0
[0279.509] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0279.509] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107a2) returned 0x0
[0279.509] GdipCreateRegion (region=0x53e650) returned 0x0
[0279.509] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0279.509] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0279.509] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0279.509] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0279.509] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0279.509] LocalFree (hMem=0x89ee08) returned 0x0
[0279.509] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0279.509] LocalFree (hMem=0x89ee08) returned 0x0
[0279.509] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0279.509] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0279.509] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0279.509] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0279.509] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0279.510] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0279.510] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0279.510] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0279.510] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0279.510] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0279.510] SaveDC (hdc=0xa40107a2) returned 1
[0279.510] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1104053e
[0279.510] GetClipRgn (hdc=0xa40107a2, hrgn=0x1104053e) returned 0
[0279.510] SelectClipRgn (hdc=0xa40107a2, hrgn=0x920407a1) returned 2
[0279.510] DeleteObject (ho=0x1104053e) returned 1
[0279.510] DeleteObject (ho=0x920407a1) returned 1
[0279.510] OffsetViewportOrgEx (in: hdc=0xa40107a2, x=0, y=0, lppt=0x23c6ac8 | out: lppt=0x23c6ac8) returned 1
[0279.510] IsAppThemed () returned 0x1
[0279.510] GetThemeAppProperties () returned 0x3
[0279.510] GetThemeAppProperties () returned 0x3
[0279.510] GetThemeBackgroundContentRect () returned 0x0
[0279.510] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0279.511] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107a2) returned 0x0
[0279.511] IsAppThemed () returned 0x1
[0279.511] GetThemeAppProperties () returned 0x3
[0279.511] GetThemeAppProperties () returned 0x3
[0279.511] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0279.511] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0279.511] GetCurrentObject (hdc=0xa40107a2, type=0x1) returned 0xb00017
[0279.511] GetCurrentObject (hdc=0xa40107a2, type=0x2) returned 0x900010
[0279.511] GetCurrentObject (hdc=0xa40107a2, type=0x7) returned 0x1e0507b9
[0279.511] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0279.511] SaveDC (hdc=0xa40107a2) returned 1
[0279.511] GetTextAlign (hdc=0xa40107a2) returned 0x0
[0279.511] GetTextColor (hdc=0xa40107a2) returned 0x0
[0279.511] GetCurrentObject (hdc=0xa40107a2, type=0x6) returned 0x8a01c2
[0279.511] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0279.511] SelectObject (hdc=0xa40107a2, h=0x450a0799) returned 0x8a01c2
[0279.512] GetBkMode (hdc=0xa40107a2) returned 2
[0279.512] SetBkMode (hdc=0xa40107a2, mode=1) returned 2
[0279.512] DrawTextExW (in: hdc=0xa40107a2, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x23c6e68 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0279.512] DrawTextExW (in: hdc=0xa40107a2, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x23c6e68 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0279.512] RestoreDC (hdc=0xa40107a2, nSavedDC=-1) returned 1
[0279.512] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107a2) returned 0x0
[0279.512] GetFocus () returned 0x202c6
[0279.512] IsAppThemed () returned 0x1
[0279.513] GetThemeAppProperties () returned 0x3
[0279.513] GetThemeAppProperties () returned 0x3
[0279.513] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0279.513] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xa40107a2, x1=0, y1=0, rop=0xcc0020) returned 1
[0279.513] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107a2) returned 0x0
[0279.513] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0279.513] SelectObject (hdc=0xa40107a2, h=0x85000f) returned 0x1e0507b9
[0279.513] DeleteDC (hdc=0xa40107a2) returned 1
[0279.513] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0279.513] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0279.513] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.513] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.513] WaitMessage () returned 1
[0279.517] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.517] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.517] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.517] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.517] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.518] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.518] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.519] WaitMessage () returned 1
[0279.549] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.549] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.549] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.549] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.549] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.550] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.550] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.550] WaitMessage () returned 1
[0279.552] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.552] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.552] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.552] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.552] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.553] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.553] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.553] WaitMessage () returned 1
[0279.582] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.582] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.583] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.583] DispatchMessageA (lpMsg=0x53eef8) returned 0x7e97
[0279.583] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.584] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.584] WaitMessage () returned 1
[0279.586] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.586] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.586] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.586] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.586] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.588] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.588] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.588] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.588] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.588] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.588] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.589] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.589] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.589] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.589] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.589] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.597] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.597] WaitMessage () returned 1
[0279.597] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.597] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.597] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.597] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.597] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.599] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.599] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.603] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.603] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.603] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.604] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.604] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.604] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.604] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.604] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.604] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.605] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.605] WaitMessage () returned 1
[0279.605] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.605] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.605] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.605] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.605] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.607] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.607] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.607] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.607] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.607] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.637] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.638] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.638] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.638] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.638] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.638] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.639] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.639] WaitMessage () returned 1
[0279.639] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.639] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.639] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.640] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.640] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.642] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.642] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.642] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.642] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.642] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.642] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.643] IsWindowUnicode (hWnd=0x102dc) returned 1
[0279.643] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.643] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.643] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.643] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.643] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.643] WaitMessage () returned 1
[0279.792] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.792] IsWindowUnicode (hWnd=0x202d0) returned 1
[0279.792] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0279.792] TranslateMessage (lpMsg=0x53eef8) returned 0
[0279.792] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0279.792] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.792] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0279.792] WaitMessage () returned 1
[0280.569] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0280.569] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0280.569] TranslateMessage (lpMsg=0x53eef8) returned 0
[0280.569] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0280.569] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0280.569] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0280.569] WaitMessage () returned 1
[0281.228] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0281.228] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19a0232) returned 0x1
[0281.228] IsWindowUnicode (hWnd=0x202c6) returned 1
[0281.228] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0281.229] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19a0232) returned 0x1
[0281.229] SetCursor (hCursor=0x10003) returned 0x10003
[0281.229] TranslateMessage (lpMsg=0x53eef8) returned 0
[0281.229] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0281.229] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0281.229] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0281.229] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0281.229] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0281.229] GetKeyState (nVirtKey=1) returned 0
[0281.229] GetKeyState (nVirtKey=2) returned 0
[0281.229] GetKeyState (nVirtKey=4) returned 0
[0281.229] GetKeyState (nVirtKey=5) returned 0
[0281.229] GetKeyState (nVirtKey=6) returned 0
[0281.229] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0281.229] IsWindowUnicode (hWnd=0x202c6) returned 1
[0281.229] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0281.229] TranslateMessage (lpMsg=0x53eef8) returned 0
[0281.230] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0281.230] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0281.230] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0281.230] CreateCompatibleDC (hdc=0xf0105ee) returned 0x2a0107cd
[0281.230] SelectObject (hdc=0x2a0107cd, h=0x1e0507b9) returned 0x85000f
[0281.230] GdipCreateFromHDC (hdc=0x2a0107cd, graphics=0x53e958) returned 0x0
[0281.230] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0281.230] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0281.230] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0281.230] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.230] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0281.230] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.230] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0281.230] LocalFree (hMem=0x89ea88) returned 0x0
[0281.231] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.231] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0281.231] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.231] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0281.231] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0281.231] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfae10dbd) returned 0x0
[0281.231] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.231] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0281.231] GetCurrentObject (hdc=0x2a0107cd, type=0x1) returned 0xb00017
[0281.231] GetCurrentObject (hdc=0x2a0107cd, type=0x2) returned 0x900010
[0281.231] GetCurrentObject (hdc=0x2a0107cd, type=0x7) returned 0x1e0507b9
[0281.231] GetCurrentObject (hdc=0x2a0107cd, type=0x6) returned 0x8a01c2
[0281.231] SaveDC (hdc=0x2a0107cd) returned 1
[0281.231] GetNearestColor (hdc=0x2a0107cd, color=0xff) returned 0xff
[0281.231] GetNearestColor (hdc=0x2a0107cd, color=0x55) returned 0x55
[0281.231] GetNearestColor (hdc=0x2a0107cd, color=0x0) returned 0x0
[0281.232] GetNearestColor (hdc=0x2a0107cd, color=0x55) returned 0x55
[0281.232] GetNearestColor (hdc=0x2a0107cd, color=0x0) returned 0x0
[0281.232] GetNearestColor (hdc=0x2a0107cd, color=0x8080ff) returned 0x8080ff
[0281.232] GetNearestColor (hdc=0x2a0107cd, color=0x7373e5) returned 0x7373e5
[0281.232] GetNearestColor (hdc=0x2a0107cd, color=0xe5) returned 0xe5
[0281.232] GetNearestColor (hdc=0x2a0107cd, color=0x0) returned 0x0
[0281.232] RestoreDC (hdc=0x2a0107cd, nSavedDC=-1) returned 1
[0281.232] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a0107cd) returned 0x0
[0281.232] IsAppThemed () returned 0x1
[0281.232] GetThemeAppProperties () returned 0x3
[0281.232] GetThemeAppProperties () returned 0x3
[0281.232] IsAppThemed () returned 0x1
[0281.232] GetThemeAppProperties () returned 0x3
[0281.232] GetThemeAppProperties () returned 0x3
[0281.232] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x23c77fc | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0281.233] IsAppThemed () returned 0x1
[0281.233] GetThemeAppProperties () returned 0x3
[0281.233] GetThemeAppProperties () returned 0x3
[0281.233] IsAppThemed () returned 0x1
[0281.233] GetThemeAppProperties () returned 0x3
[0281.233] GetThemeAppProperties () returned 0x3
[0281.233] IsAppThemed () returned 0x1
[0281.233] GetThemeAppProperties () returned 0x3
[0281.233] GetThemeAppProperties () returned 0x3
[0281.233] IsAppThemed () returned 0x1
[0281.233] GetThemeAppProperties () returned 0x3
[0281.233] GetThemeAppProperties () returned 0x3
[0281.233] IsThemePartDefined () returned 0x1
[0281.233] IsAppThemed () returned 0x1
[0281.233] GetThemeAppProperties () returned 0x3
[0281.233] GetThemeAppProperties () returned 0x3
[0281.233] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0281.233] IsAppThemed () returned 0x1
[0281.234] GetThemeAppProperties () returned 0x3
[0281.234] GetThemeAppProperties () returned 0x3
[0281.234] IsAppThemed () returned 0x1
[0281.234] GetThemeAppProperties () returned 0x3
[0281.234] GetThemeAppProperties () returned 0x3
[0281.234] IsThemePartDefined () returned 0x1
[0281.234] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0281.234] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.234] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0281.234] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.234] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0281.234] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.234] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.234] LocalFree (hMem=0x89ea88) returned 0x0
[0281.234] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.234] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.234] LocalFree (hMem=0x89ea88) returned 0x0
[0281.234] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.235] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0281.235] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0281.235] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0281.235] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.235] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0281.235] GetCurrentObject (hdc=0x2a0107cd, type=0x1) returned 0xb00017
[0281.235] GetCurrentObject (hdc=0x2a0107cd, type=0x2) returned 0x900010
[0281.235] GetCurrentObject (hdc=0x2a0107cd, type=0x7) returned 0x1e0507b9
[0281.235] GetCurrentObject (hdc=0x2a0107cd, type=0x6) returned 0x8a01c2
[0281.235] SaveDC (hdc=0x2a0107cd) returned 1
[0281.235] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x930407a1
[0281.235] GetClipRgn (hdc=0x2a0107cd, hrgn=0x930407a1) returned 0
[0281.235] SelectClipRgn (hdc=0x2a0107cd, hrgn=0x1504053e) returned 2
[0281.235] DeleteObject (ho=0x930407a1) returned 1
[0281.235] DeleteObject (ho=0x1504053e) returned 1
[0281.235] OffsetViewportOrgEx (in: hdc=0x2a0107cd, x=0, y=0, lppt=0x23c7eac | out: lppt=0x23c7eac) returned 1
[0281.236] DrawThemeParentBackground () returned 0x0
[0281.236] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0281.236] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0281.236] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0281.236] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0281.236] GetSystemMetrics (nIndex=42) returned 0
[0281.236] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0281.236] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0281.236] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0281.236] GetCurrentObject (hdc=0x2a0107cd, type=0x1) returned 0xb00017
[0281.236] GetCurrentObject (hdc=0x2a0107cd, type=0x2) returned 0x900010
[0281.236] GetCurrentObject (hdc=0x2a0107cd, type=0x7) returned 0x1e0507b9
[0281.236] GetCurrentObject (hdc=0x2a0107cd, type=0x6) returned 0x8a01c2
[0281.236] SaveDC (hdc=0x2a0107cd) returned 2
[0281.237] GetNearestColor (hdc=0x2a0107cd, color=0xff) returned 0xff
[0281.237] CreateSolidBrush (color=0xff) returned 0x1210078d
[0281.237] FillRect (hDC=0x2a0107cd, lprc=0x53e120, hbr=0x1210078d) returned 1
[0281.237] DeleteObject (ho=0x1210078d) returned 1
[0281.237] RestoreDC (hdc=0x2a0107cd, nSavedDC=-1) returned 1
[0281.237] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0281.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0281.237] GetSystemMetrics (nIndex=42) returned 0
[0281.237] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0281.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0281.237] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0281.237] GetCurrentObject (hdc=0x2a0107cd, type=0x1) returned 0xb00017
[0281.237] GetCurrentObject (hdc=0x2a0107cd, type=0x2) returned 0x900010
[0281.237] GetCurrentObject (hdc=0x2a0107cd, type=0x7) returned 0x1e0507b9
[0281.237] GetCurrentObject (hdc=0x2a0107cd, type=0x6) returned 0x8a01c2
[0281.237] SaveDC (hdc=0x2a0107cd) returned 2
[0281.238] GetNearestColor (hdc=0x2a0107cd, color=0xff) returned 0xff
[0281.238] CreateSolidBrush (color=0xff) returned 0x1310078d
[0281.238] FillRect (hDC=0x2a0107cd, lprc=0x53e0c0, hbr=0x1310078d) returned 1
[0281.238] DeleteObject (ho=0x1310078d) returned 1
[0281.238] RestoreDC (hdc=0x2a0107cd, nSavedDC=-1) returned 1
[0281.238] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0281.238] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0281.238] GetSystemMetrics (nIndex=42) returned 0
[0281.238] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0281.238] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0281.238] RestoreDC (hdc=0x2a0107cd, nSavedDC=-1) returned 1
[0281.238] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a0107cd) returned 0x0
[0281.239] IsAppThemed () returned 0x1
[0281.239] GetThemeAppProperties () returned 0x3
[0281.239] GetThemeAppProperties () returned 0x3
[0281.239] IsAppThemed () returned 0x1
[0281.239] GetThemeAppProperties () returned 0x3
[0281.239] GetThemeAppProperties () returned 0x3
[0281.239] IsThemePartDefined () returned 0x1
[0281.239] GdipCreateRegion (region=0x53e640) returned 0x0
[0281.239] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.239] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0281.239] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.239] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0281.239] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0281.239] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0281.239] LocalFree (hMem=0x89ec80) returned 0x0
[0281.239] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0281.239] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0281.239] LocalFree (hMem=0x89ec80) returned 0x0
[0281.240] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.240] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0281.240] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0281.240] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0281.240] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.240] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0281.240] GetCurrentObject (hdc=0x2a0107cd, type=0x1) returned 0xb00017
[0281.240] GetCurrentObject (hdc=0x2a0107cd, type=0x2) returned 0x900010
[0281.240] GetCurrentObject (hdc=0x2a0107cd, type=0x7) returned 0x1e0507b9
[0281.240] GetCurrentObject (hdc=0x2a0107cd, type=0x6) returned 0x8a01c2
[0281.240] SaveDC (hdc=0x2a0107cd) returned 1
[0281.240] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1604053e
[0281.240] GetClipRgn (hdc=0x2a0107cd, hrgn=0x1604053e) returned 0
[0281.240] SelectClipRgn (hdc=0x2a0107cd, hrgn=0x950407a1) returned 2
[0281.240] DeleteObject (ho=0x1604053e) returned 1
[0281.240] DeleteObject (ho=0x950407a1) returned 1
[0281.240] OffsetViewportOrgEx (in: hdc=0x2a0107cd, x=0, y=0, lppt=0x23c8710 | out: lppt=0x23c8710) returned 1
[0281.240] IsAppThemed () returned 0x1
[0281.241] GetThemeAppProperties () returned 0x3
[0281.241] GetThemeAppProperties () returned 0x3
[0281.241] DrawThemeBackground () returned 0x0
[0281.241] RestoreDC (hdc=0x2a0107cd, nSavedDC=-1) returned 1
[0281.241] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a0107cd) returned 0x0
[0281.241] GdipCreateRegion (region=0x53e644) returned 0x0
[0281.241] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.241] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0281.241] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.241] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0281.241] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0281.241] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0281.241] LocalFree (hMem=0x89ec80) returned 0x0
[0281.241] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.241] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.241] LocalFree (hMem=0x89ea88) returned 0x0
[0281.241] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.241] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0281.241] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0281.242] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0281.242] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.242] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0281.242] GetCurrentObject (hdc=0x2a0107cd, type=0x1) returned 0xb00017
[0281.242] GetCurrentObject (hdc=0x2a0107cd, type=0x2) returned 0x900010
[0281.242] GetCurrentObject (hdc=0x2a0107cd, type=0x7) returned 0x1e0507b9
[0281.242] GetCurrentObject (hdc=0x2a0107cd, type=0x6) returned 0x8a01c2
[0281.242] SaveDC (hdc=0x2a0107cd) returned 1
[0281.242] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x960407a1
[0281.242] GetClipRgn (hdc=0x2a0107cd, hrgn=0x960407a1) returned 0
[0281.242] SelectClipRgn (hdc=0x2a0107cd, hrgn=0x1704053e) returned 2
[0281.242] DeleteObject (ho=0x960407a1) returned 1
[0281.242] DeleteObject (ho=0x1704053e) returned 1
[0281.242] OffsetViewportOrgEx (in: hdc=0x2a0107cd, x=0, y=0, lppt=0x23c89e4 | out: lppt=0x23c89e4) returned 1
[0281.242] IsAppThemed () returned 0x1
[0281.242] GetThemeAppProperties () returned 0x3
[0281.242] GetThemeAppProperties () returned 0x3
[0281.242] GetThemeBackgroundContentRect () returned 0x0
[0281.242] RestoreDC (hdc=0x2a0107cd, nSavedDC=-1) returned 1
[0281.242] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a0107cd) returned 0x0
[0281.242] IsAppThemed () returned 0x1
[0281.242] GetThemeAppProperties () returned 0x3
[0281.243] GetThemeAppProperties () returned 0x3
[0281.243] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0281.243] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0281.243] GetCurrentObject (hdc=0x2a0107cd, type=0x1) returned 0xb00017
[0281.243] GetCurrentObject (hdc=0x2a0107cd, type=0x2) returned 0x900010
[0281.243] GetCurrentObject (hdc=0x2a0107cd, type=0x7) returned 0x1e0507b9
[0281.243] GetCurrentObject (hdc=0x2a0107cd, type=0x6) returned 0x8a01c2
[0281.243] SaveDC (hdc=0x2a0107cd) returned 1
[0281.243] GetTextAlign (hdc=0x2a0107cd) returned 0x0
[0281.243] GetTextColor (hdc=0x2a0107cd) returned 0x0
[0281.243] GetCurrentObject (hdc=0x2a0107cd, type=0x6) returned 0x8a01c2
[0281.243] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0281.243] SelectObject (hdc=0x2a0107cd, h=0x450a0799) returned 0x8a01c2
[0281.243] GetBkMode (hdc=0x2a0107cd) returned 2
[0281.243] SetBkMode (hdc=0x2a0107cd, mode=1) returned 2
[0281.243] DrawTextExW (in: hdc=0x2a0107cd, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x23c8d84 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0281.244] DrawTextExW (in: hdc=0x2a0107cd, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x23c8d84 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0281.244] RestoreDC (hdc=0x2a0107cd, nSavedDC=-1) returned 1
[0281.244] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a0107cd) returned 0x0
[0281.244] GetFocus () returned 0x202c6
[0281.244] IsAppThemed () returned 0x1
[0281.244] GetThemeAppProperties () returned 0x3
[0281.244] GetThemeAppProperties () returned 0x3
[0281.244] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0281.244] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x2a0107cd, x1=0, y1=0, rop=0xcc0020) returned 1
[0281.245] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a0107cd) returned 0x0
[0281.245] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0281.245] SelectObject (hdc=0x2a0107cd, h=0x85000f) returned 0x1e0507b9
[0281.245] DeleteDC (hdc=0x2a0107cd) returned 1
[0281.245] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0281.245] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0281.245] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0281.245] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0281.245] WaitMessage () returned 1
[0281.335] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0281.335] IsWindowUnicode (hWnd=0x202c6) returned 1
[0281.335] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0281.335] TranslateMessage (lpMsg=0x53eef8) returned 0
[0281.335] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0281.335] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0281.335] IsWindowUnicode (hWnd=0x202c6) returned 1
[0281.335] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0281.335] TranslateMessage (lpMsg=0x53eef8) returned 0
[0281.335] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0281.335] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x120042) returned 0x0
[0281.336] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0281.336] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0281.336] WaitMessage () returned 1
[0281.477] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0281.478] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19a0232) returned 0x1
[0281.478] IsWindowUnicode (hWnd=0x202c6) returned 1
[0281.478] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0281.478] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19a0232) returned 0x1
[0281.478] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0281.478] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12d01dc) returned 0x0
[0281.478] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0281.478] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0281.478] SetCursor (hCursor=0x10003) returned 0x10003
[0281.478] TranslateMessage (lpMsg=0x53eef8) returned 0
[0281.478] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0281.478] GetKeyState (nVirtKey=1) returned -127
[0281.478] GetKeyState (nVirtKey=2) returned 0
[0281.478] GetKeyState (nVirtKey=4) returned 0
[0281.479] GetKeyState (nVirtKey=5) returned 0
[0281.479] GetKeyState (nVirtKey=6) returned 0
[0281.479] IsWindowVisible (hWnd=0x202c6) returned 1
[0281.479] IsWindowEnabled (hWnd=0x202c6) returned 1
[0281.479] SetFocus (hWnd=0x202c6) returned 0x202c6
[0281.479] GetFocus () returned 0x202c6
[0281.479] GetFocus () returned 0x202c6
[0281.479] GetFocus () returned 0x202c6
[0281.479] GetKeyState (nVirtKey=1) returned -127
[0281.479] GetKeyState (nVirtKey=2) returned 0
[0281.479] GetKeyState (nVirtKey=4) returned 0
[0281.479] GetKeyState (nVirtKey=5) returned 0
[0281.479] GetKeyState (nVirtKey=6) returned 0
[0281.479] GetCapture () returned 0x0
[0281.479] SetCapture (hWnd=0x202c6) returned 0x0
[0281.479] GetKeyState (nVirtKey=1) returned -127
[0281.479] GetKeyState (nVirtKey=2) returned 0
[0281.479] GetKeyState (nVirtKey=4) returned 0
[0281.479] GetKeyState (nVirtKey=5) returned 0
[0281.479] GetKeyState (nVirtKey=6) returned 0
[0281.479] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0281.479] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0281.479] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0281.479] IsWindowUnicode (hWnd=0x202c6) returned 1
[0281.479] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0281.480] TranslateMessage (lpMsg=0x53eef8) returned 0
[0281.480] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0281.480] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23c8f08, cPoints=0x1 | out: lpPoints=0x23c8f08) returned 25690608
[0281.480] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0281.480] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0281.480] UpdateWindow (hWnd=0x202c6) returned 1
[0281.480] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0281.480] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0281.480] CreateCompatibleDC (hdc=0xf0105ee) returned 0x2b0107cd
[0281.480] SelectObject (hdc=0x2b0107cd, h=0x1e0507b9) returned 0x85000f
[0281.480] GdipCreateFromHDC (hdc=0x2b0107cd, graphics=0x53e5f0) returned 0x0
[0281.480] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0281.480] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0281.480] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0281.480] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.481] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0281.481] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.481] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0281.481] LocalFree (hMem=0x89ea88) returned 0x0
[0281.481] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.481] GdipCreateRegion (region=0x53e638) returned 0x0
[0281.481] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.481] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0281.481] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0281.481] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfadf0dbd) returned 0x0
[0281.481] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.481] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0281.481] GetCurrentObject (hdc=0x2b0107cd, type=0x1) returned 0xb00017
[0281.481] GetCurrentObject (hdc=0x2b0107cd, type=0x2) returned 0x900010
[0281.481] GetCurrentObject (hdc=0x2b0107cd, type=0x7) returned 0x1e0507b9
[0281.481] GetCurrentObject (hdc=0x2b0107cd, type=0x6) returned 0x8a01c2
[0281.481] SaveDC (hdc=0x2b0107cd) returned 1
[0281.481] GetNearestColor (hdc=0x2b0107cd, color=0xff) returned 0xff
[0281.481] GetNearestColor (hdc=0x2b0107cd, color=0x55) returned 0x55
[0281.482] GetNearestColor (hdc=0x2b0107cd, color=0x0) returned 0x0
[0281.482] GetNearestColor (hdc=0x2b0107cd, color=0x55) returned 0x55
[0281.482] GetNearestColor (hdc=0x2b0107cd, color=0x0) returned 0x0
[0281.482] GetNearestColor (hdc=0x2b0107cd, color=0x8080ff) returned 0x8080ff
[0281.482] GetNearestColor (hdc=0x2b0107cd, color=0x7373e5) returned 0x7373e5
[0281.482] GetNearestColor (hdc=0x2b0107cd, color=0xe5) returned 0xe5
[0281.482] GetNearestColor (hdc=0x2b0107cd, color=0x0) returned 0x0
[0281.482] RestoreDC (hdc=0x2b0107cd, nSavedDC=-1) returned 1
[0281.482] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b0107cd) returned 0x0
[0281.482] IsAppThemed () returned 0x1
[0281.482] GetThemeAppProperties () returned 0x3
[0281.482] GetThemeAppProperties () returned 0x3
[0281.482] IsAppThemed () returned 0x1
[0281.482] GetThemeAppProperties () returned 0x3
[0281.482] GetThemeAppProperties () returned 0x3
[0281.482] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x23c9624 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0281.483] IsAppThemed () returned 0x1
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] IsAppThemed () returned 0x1
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] IsAppThemed () returned 0x1
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] IsAppThemed () returned 0x1
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] IsThemePartDefined () returned 0x1
[0281.483] IsAppThemed () returned 0x1
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0281.483] IsAppThemed () returned 0x1
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] IsAppThemed () returned 0x1
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] GetThemeAppProperties () returned 0x3
[0281.483] IsThemePartDefined () returned 0x1
[0281.483] GdipCreateRegion (region=0x53e354) returned 0x0
[0281.484] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.484] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0281.484] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.484] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0281.484] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0281.484] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0281.484] LocalFree (hMem=0x89ec80) returned 0x0
[0281.484] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0281.484] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0281.484] LocalFree (hMem=0x89ec80) returned 0x0
[0281.484] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.484] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0281.484] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0281.484] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0281.484] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.484] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0281.484] GetCurrentObject (hdc=0x2b0107cd, type=0x1) returned 0xb00017
[0281.484] GetCurrentObject (hdc=0x2b0107cd, type=0x2) returned 0x900010
[0281.484] GetCurrentObject (hdc=0x2b0107cd, type=0x7) returned 0x1e0507b9
[0281.484] GetCurrentObject (hdc=0x2b0107cd, type=0x6) returned 0x8a01c2
[0281.484] SaveDC (hdc=0x2b0107cd) returned 1
[0281.485] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1804053e
[0281.485] GetClipRgn (hdc=0x2b0107cd, hrgn=0x1804053e) returned 0
[0281.485] SelectClipRgn (hdc=0x2b0107cd, hrgn=0x9a0407a1) returned 2
[0281.485] DeleteObject (ho=0x1804053e) returned 1
[0281.485] DeleteObject (ho=0x9a0407a1) returned 1
[0281.485] OffsetViewportOrgEx (in: hdc=0x2b0107cd, x=0, y=0, lppt=0x23c9cd4 | out: lppt=0x23c9cd4) returned 1
[0281.485] DrawThemeParentBackground () returned 0x0
[0281.485] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0281.485] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0281.485] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0281.485] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0281.485] GetSystemMetrics (nIndex=42) returned 0
[0281.485] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0281.485] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0281.485] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0281.485] GetCurrentObject (hdc=0x2b0107cd, type=0x1) returned 0xb00017
[0281.485] GetCurrentObject (hdc=0x2b0107cd, type=0x2) returned 0x900010
[0281.485] GetCurrentObject (hdc=0x2b0107cd, type=0x7) returned 0x1e0507b9
[0281.485] GetCurrentObject (hdc=0x2b0107cd, type=0x6) returned 0x8a01c2
[0281.486] SaveDC (hdc=0x2b0107cd) returned 2
[0281.486] GetNearestColor (hdc=0x2b0107cd, color=0xff) returned 0xff
[0281.486] CreateSolidBrush (color=0xff) returned 0x1410078d
[0281.486] FillRect (hDC=0x2b0107cd, lprc=0x53ddb8, hbr=0x1410078d) returned 1
[0281.486] DeleteObject (ho=0x1410078d) returned 1
[0281.486] RestoreDC (hdc=0x2b0107cd, nSavedDC=-1) returned 1
[0281.486] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0281.486] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0281.486] GetSystemMetrics (nIndex=42) returned 0
[0281.486] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0281.486] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0281.486] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0281.486] GetCurrentObject (hdc=0x2b0107cd, type=0x1) returned 0xb00017
[0281.486] GetCurrentObject (hdc=0x2b0107cd, type=0x2) returned 0x900010
[0281.486] GetCurrentObject (hdc=0x2b0107cd, type=0x7) returned 0x1e0507b9
[0281.486] GetCurrentObject (hdc=0x2b0107cd, type=0x6) returned 0x8a01c2
[0281.486] SaveDC (hdc=0x2b0107cd) returned 2
[0281.486] GetNearestColor (hdc=0x2b0107cd, color=0xff) returned 0xff
[0281.486] CreateSolidBrush (color=0xff) returned 0x1510078d
[0281.487] FillRect (hDC=0x2b0107cd, lprc=0x53dd58, hbr=0x1510078d) returned 1
[0281.487] DeleteObject (ho=0x1510078d) returned 1
[0281.487] RestoreDC (hdc=0x2b0107cd, nSavedDC=-1) returned 1
[0281.487] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0281.487] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0281.487] GetSystemMetrics (nIndex=42) returned 0
[0281.487] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0281.487] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0281.487] RestoreDC (hdc=0x2b0107cd, nSavedDC=-1) returned 1
[0281.487] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b0107cd) returned 0x0
[0281.487] IsAppThemed () returned 0x1
[0281.487] GetThemeAppProperties () returned 0x3
[0281.487] GetThemeAppProperties () returned 0x3
[0281.487] IsAppThemed () returned 0x1
[0281.487] GetThemeAppProperties () returned 0x3
[0281.487] GetThemeAppProperties () returned 0x3
[0281.487] IsThemePartDefined () returned 0x1
[0281.487] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0281.487] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.488] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0281.488] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.488] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0281.488] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0281.488] LocalFree (hMem=0x89ee08) returned 0x0
[0281.488] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0281.488] LocalFree (hMem=0x89ea88) returned 0x0
[0281.488] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.488] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0281.488] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0281.488] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0281.488] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.488] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0281.488] GetCurrentObject (hdc=0x2b0107cd, type=0x1) returned 0xb00017
[0281.488] GetCurrentObject (hdc=0x2b0107cd, type=0x2) returned 0x900010
[0281.488] GetCurrentObject (hdc=0x2b0107cd, type=0x7) returned 0x1e0507b9
[0281.488] GetCurrentObject (hdc=0x2b0107cd, type=0x6) returned 0x8a01c2
[0281.488] SaveDC (hdc=0x2b0107cd) returned 1
[0281.488] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9b0407a1
[0281.488] GetClipRgn (hdc=0x2b0107cd, hrgn=0x9b0407a1) returned 0
[0281.488] SelectClipRgn (hdc=0x2b0107cd, hrgn=0x1a04053e) returned 2
[0281.488] DeleteObject (ho=0x9b0407a1) returned 1
[0281.489] DeleteObject (ho=0x1a04053e) returned 1
[0281.489] OffsetViewportOrgEx (in: hdc=0x2b0107cd, x=0, y=0, lppt=0x23ca538 | out: lppt=0x23ca538) returned 1
[0281.489] IsAppThemed () returned 0x1
[0281.489] GetThemeAppProperties () returned 0x3
[0281.489] GetThemeAppProperties () returned 0x3
[0281.489] DrawThemeBackground () returned 0x0
[0281.489] RestoreDC (hdc=0x2b0107cd, nSavedDC=-1) returned 1
[0281.489] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b0107cd) returned 0x0
[0281.489] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0281.489] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.489] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0281.489] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.489] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0281.489] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0281.489] LocalFree (hMem=0x89ec80) returned 0x0
[0281.489] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.489] LocalFree (hMem=0x89ea88) returned 0x0
[0281.489] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.489] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0281.489] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0281.489] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0281.489] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.489] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0281.490] GetCurrentObject (hdc=0x2b0107cd, type=0x1) returned 0xb00017
[0281.490] GetCurrentObject (hdc=0x2b0107cd, type=0x2) returned 0x900010
[0281.490] GetCurrentObject (hdc=0x2b0107cd, type=0x7) returned 0x1e0507b9
[0281.490] GetCurrentObject (hdc=0x2b0107cd, type=0x6) returned 0x8a01c2
[0281.490] SaveDC (hdc=0x2b0107cd) returned 1
[0281.490] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1b04053e
[0281.490] GetClipRgn (hdc=0x2b0107cd, hrgn=0x1b04053e) returned 0
[0281.490] SelectClipRgn (hdc=0x2b0107cd, hrgn=0x9c0407a1) returned 2
[0281.491] DeleteObject (ho=0x1b04053e) returned 1
[0281.491] DeleteObject (ho=0x9c0407a1) returned 1
[0281.491] OffsetViewportOrgEx (in: hdc=0x2b0107cd, x=0, y=0, lppt=0x23ca80c | out: lppt=0x23ca80c) returned 1
[0281.491] IsAppThemed () returned 0x1
[0281.491] GetThemeAppProperties () returned 0x3
[0281.491] GetThemeAppProperties () returned 0x3
[0281.491] GetThemeBackgroundContentRect () returned 0x0
[0281.491] RestoreDC (hdc=0x2b0107cd, nSavedDC=-1) returned 1
[0281.491] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b0107cd) returned 0x0
[0281.491] IsAppThemed () returned 0x1
[0281.491] GetThemeAppProperties () returned 0x3
[0281.491] GetThemeAppProperties () returned 0x3
[0281.491] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0281.491] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0281.491] GetCurrentObject (hdc=0x2b0107cd, type=0x1) returned 0xb00017
[0281.491] GetCurrentObject (hdc=0x2b0107cd, type=0x2) returned 0x900010
[0281.491] GetCurrentObject (hdc=0x2b0107cd, type=0x7) returned 0x1e0507b9
[0281.491] GetCurrentObject (hdc=0x2b0107cd, type=0x6) returned 0x8a01c2
[0281.491] SaveDC (hdc=0x2b0107cd) returned 1
[0281.491] GetTextAlign (hdc=0x2b0107cd) returned 0x0
[0281.491] GetTextColor (hdc=0x2b0107cd) returned 0x0
[0281.491] GetCurrentObject (hdc=0x2b0107cd, type=0x6) returned 0x8a01c2
[0281.492] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0281.492] SelectObject (hdc=0x2b0107cd, h=0x450a0799) returned 0x8a01c2
[0281.492] GetBkMode (hdc=0x2b0107cd) returned 2
[0281.492] SetBkMode (hdc=0x2b0107cd, mode=1) returned 2
[0281.492] DrawTextExW (in: hdc=0x2b0107cd, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x23cabac | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0281.492] DrawTextExW (in: hdc=0x2b0107cd, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x23cabac | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0281.492] RestoreDC (hdc=0x2b0107cd, nSavedDC=-1) returned 1
[0281.492] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b0107cd) returned 0x0
[0281.492] GetFocus () returned 0x202c6
[0281.492] IsAppThemed () returned 0x1
[0281.492] GetThemeAppProperties () returned 0x3
[0281.492] GetThemeAppProperties () returned 0x3
[0281.493] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0281.493] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x2b0107cd, x1=0, y1=0, rop=0xcc0020) returned 1
[0281.493] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b0107cd) returned 0x0
[0281.493] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0281.493] SelectObject (hdc=0x2b0107cd, h=0x85000f) returned 0x1e0507b9
[0281.493] DeleteDC (hdc=0x2b0107cd) returned 1
[0281.493] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0281.493] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0281.493] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23caca8, cPoints=0x1 | out: lpPoints=0x23caca8) returned 25690608
[0281.493] WindowFromPoint (Point=0x232) returned 0x202c6
[0281.493] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19a0232) returned 0x1
[0281.494] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0281.494] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0281.494] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.494] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0281.495] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.495] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0281.495] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.495] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0281.495] GetDC (hWnd=0x0) returned 0x60100ce
[0281.495] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e888) returned 0x0
[0281.496] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0281.496] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0281.496] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0281.496] GetSystemMetrics (nIndex=5) returned 1
[0281.496] GetSystemMetrics (nIndex=6) returned 1
[0281.497] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.497] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0281.497] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.497] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0281.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.546] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0281.546] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.546] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0281.546] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.546] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0281.546] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.547] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0281.547] GetSystemMetrics (nIndex=5) returned 1
[0281.547] GetSystemMetrics (nIndex=6) returned 1
[0281.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.547] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0281.547] GetSystemMetrics (nIndex=5) returned 1
[0281.547] GetSystemMetrics (nIndex=6) returned 1
[0281.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.547] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0281.548] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.548] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0281.548] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.548] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0281.548] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.548] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0281.548] GetSystemMetrics (nIndex=59) returned 1460
[0281.548] GetSystemMetrics (nIndex=60) returned 920
[0281.548] GetSystemMetrics (nIndex=34) returned 136
[0281.548] GetSystemMetrics (nIndex=35) returned 39
[0281.548] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.549] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0281.549] GetCurrentThreadId () returned 0x11d0
[0281.549] GetCurrentThreadId () returned 0x11d0
[0281.549] GetCurrentThreadId () returned 0x11d0
[0281.549] GetCurrentThreadId () returned 0x11d0
[0281.549] GetCurrentThreadId () returned 0x11d0
[0281.549] GetCurrentThreadId () returned 0x11d0
[0281.549] GetCurrentThreadId () returned 0x11d0
[0281.549] GetCurrentThreadId () returned 0x11d0
[0281.549] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.549] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0281.549] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0281.549] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0281.549] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.549] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0281.550] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.550] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0281.550] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1602ca
[0281.551] SetWindowLongW (hWnd=0x1602ca, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0281.551] GetWindowLongW (hWnd=0x1602ca, nIndex=-4) returned 1950089536
[0281.551] SetWindowLongW (hWnd=0x1602ca, nIndex=-4, dwNewLong=79647238) returned 1950089536
[0281.551] GetWindowLongW (hWnd=0x1602ca, nIndex=-4) returned 79647238
[0281.551] GetWindowLongW (hWnd=0x1602ca, nIndex=-16) returned 113311744
[0281.551] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1602ca, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0281.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1602ca, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0281.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1602ca, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0281.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1602ca, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0281.552] GetClientRect (in: hWnd=0x1602ca, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0281.554] GetWindowRect (in: hWnd=0x1602ca, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0281.554] SetWindowTextW (hWnd=0x1602ca, lpString="WindowsFormsParkingWindow") returned 1
[0281.554] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1602ca, Msg=0xc, wParam=0x0, lParam=0x23c2bf4) returned 0x1
[0281.554] GetParent (hWnd=0x1602ca) returned 0x0
[0281.555] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0281.555] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1602ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1901e2
[0281.555] SetWindowLongW (hWnd=0x1901e2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0281.555] GetWindowLongW (hWnd=0x1901e2, nIndex=-4) returned 1868147648
[0281.555] SetWindowLongW (hWnd=0x1901e2, nIndex=-4, dwNewLong=79647398) returned 1868147648
[0281.555] GetWindowLongW (hWnd=0x1901e2, nIndex=-4) returned 79647398
[0281.555] GetWindowLongW (hWnd=0x1901e2, nIndex=-16) returned 1174405133
[0281.555] GetWindowLongW (hWnd=0x1901e2, nIndex=-12) returned 0
[0281.555] SetWindowLongW (hWnd=0x1901e2, nIndex=-12, dwNewLong=1638882) returned 0
[0281.556] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0281.556] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0281.556] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0281.557] GetClientRect (in: hWnd=0x1901e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0281.557] GetWindowRect (in: hWnd=0x1901e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0281.557] GetParent (hWnd=0x1901e2) returned 0x1602ca
[0281.557] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1602ca, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0281.557] SetWindowTextW (hWnd=0x1901e2, lpString="Enter password: ") returned 1
[0281.557] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0281.557] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0281.557] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0281.557] GetClientRect (in: hWnd=0x1901e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0281.558] GetWindowRect (in: hWnd=0x1901e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0281.558] GetParent (hWnd=0x1901e2) returned 0x1602ca
[0281.558] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1602ca, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0281.558] SendMessageW (hWnd=0x1901e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1901e2) returned 0x0
[0281.558] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1901e2) returned 0x0
[0281.558] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0281.558] GetParent (hWnd=0x1901e2) returned 0x1602ca
[0281.558] GdipCreateFromHWND (hwnd=0x1901e2, graphics=0x53e994) returned 0x0
[0281.558] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0281.558] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0281.558] GetProcessWindowStation () returned 0x13c
[0281.558] GetCapture () returned 0x202c6
[0281.559] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0281.559] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0281.559] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0281.559] ReleaseCapture () returned 1
[0281.559] GetActiveWindow () returned 0x70036
[0281.559] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0281.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.559] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0281.559] GetCursorPos (in: lpPoint=0x23d7a58 | out: lpPoint=0x23d7a58*(x=562, y=410)) returned 1
[0281.559] MonitorFromPoint (pt=0x232, dwFlags=0x19a) returned 0x10001
[0281.559] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0281.560] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x2e0107cd
[0281.560] GetDeviceCaps (hdc=0x2e0107cd, index=12) returned 32
[0281.560] GetDeviceCaps (hdc=0x2e0107cd, index=14) returned 1
[0281.560] DeleteDC (hdc=0x2e0107cd) returned 1
[0281.560] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0281.560] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0281.560] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1d00ea
[0281.561] SetWindowLongW (hWnd=0x1d00ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0281.561] GetWindowLongW (hWnd=0x1d00ea, nIndex=-4) returned 1950089536
[0281.561] SetWindowLongW (hWnd=0x1d00ea, nIndex=-4, dwNewLong=79647478) returned 1950089536
[0281.561] GetWindowLongW (hWnd=0x1d00ea, nIndex=-4) returned 79647478
[0281.561] GetWindowLongW (hWnd=0x1d00ea, nIndex=-16) returned 113770496
[0281.561] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0281.562] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0281.563] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0281.563] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0281.563] GetWindowRect (in: hWnd=0x1d00ea, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0281.563] SetWindowTextW (hWnd=0x1d00ea, lpString="Ransomware") returned 1
[0281.563] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xc, wParam=0x0, lParam=0x23cad70) returned 0x1
[0281.564] GetStartupInfoW (in: lpStartupInfo=0x23d7d94 | out: lpStartupInfo=0x23d7d94*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0281.565] GetParent (hWnd=0x1d00ea) returned 0x0
[0281.565] SetWindowLongW (hWnd=0x1d00ea, nIndex=-8, dwNewLong=0) returned 0
[0281.565] SendMessageW (hWnd=0x1d00ea, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0281.565] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0281.566] SendMessageW (hWnd=0x1d00ea, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0281.566] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0281.566] GetSystemMenu (hWnd=0x1d00ea, bRevert=0) returned 0x2b0217
[0281.566] GetWindowPlacement (in: hWnd=0x1d00ea, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0281.566] EnableMenuItem (hMenu=0x2b0217, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0281.566] EnableMenuItem (hMenu=0x2b0217, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0281.566] EnableMenuItem (hMenu=0x2b0217, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0281.566] EnableMenuItem (hMenu=0x2b0217, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0281.567] EnableMenuItem (hMenu=0x2b0217, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0281.567] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0281.567] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0281.567] GetWindowRect (in: hWnd=0x1d00ea, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0281.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.567] GetWindowLongW (hWnd=0x1d00ea, nIndex=-16) returned 113770496
[0281.567] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.567] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.567] GetSystemMetrics (nIndex=42) returned 0
[0281.567] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.567] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0281.567] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.567] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.567] GetSystemMetrics (nIndex=42) returned 0
[0281.568] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.568] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0281.568] GetCursorPos (in: lpPoint=0x23d7f08 | out: lpPoint=0x23d7f08*(x=562, y=410)) returned 1
[0281.568] MonitorFromPoint (pt=0x233, dwFlags=0x197) returned 0x10001
[0281.568] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0281.568] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x320107cd
[0281.568] GetDeviceCaps (hdc=0x320107cd, index=12) returned 32
[0281.568] GetDeviceCaps (hdc=0x320107cd, index=14) returned 1
[0281.568] DeleteDC (hdc=0x320107cd) returned 1
[0281.568] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0281.568] GetWindowLongW (hWnd=0x1d00ea, nIndex=-16) returned 113770496
[0281.568] GetWindowLongW (hWnd=0x1d00ea, nIndex=-20) returned 327937
[0281.568] SetWindowLongW (hWnd=0x1d00ea, nIndex=-16, dwNewLong=46661632) returned 113770496
[0281.569] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0281.569] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0281.569] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0281.569] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0281.570] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0281.570] SetWindowLongW (hWnd=0x1d00ea, nIndex=-20, dwNewLong=327681) returned 327937
[0281.570] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0281.570] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0281.571] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0281.571] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0281.571] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0281.571] SetWindowPos (hWnd=0x1d00ea, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0281.571] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0281.571] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0281.572] GetWindowPlacement (in: hWnd=0x1d00ea, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0281.572] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0281.572] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0281.572] GetWindowRect (in: hWnd=0x1d00ea, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0281.572] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0281.572] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0281.573] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0281.573] RedrawWindow (hWnd=0x1d00ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0281.573] GetSystemMenu (hWnd=0x1d00ea, bRevert=0) returned 0x2b0217
[0281.573] GetWindowPlacement (in: hWnd=0x1d00ea, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0281.573] EnableMenuItem (hMenu=0x2b0217, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0281.573] EnableMenuItem (hMenu=0x2b0217, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0281.573] EnableMenuItem (hMenu=0x2b0217, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0281.573] EnableMenuItem (hMenu=0x2b0217, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0281.573] EnableMenuItem (hMenu=0x2b0217, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0281.573] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0281.573] GetWindowLongW (hWnd=0x1d00ea, nIndex=-8) returned 0
[0281.573] SetWindowLongW (hWnd=0x1d00ea, nIndex=-8, dwNewLong=458806) returned 0
[0281.574] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0281.574] GetProcessWindowStation () returned 0x13c
[0281.574] GetCurrentThreadId () returned 0x11d0
[0281.574] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf50c6, lParam=0x0) returned 1
[0281.575] IsWindowVisible (hWnd=0x1d00ea) returned 0
[0281.575] IsWindowVisible (hWnd=0x70036) returned 1
[0281.575] IsWindowEnabled (hWnd=0x70036) returned 1
[0281.575] IsWindowVisible (hWnd=0x602b6) returned 0
[0281.575] IsWindowVisible (hWnd=0x901f8) returned 0
[0281.575] IsWindowVisible (hWnd=0x202d0) returned 0
[0281.575] IsWindowVisible (hWnd=0x202d4) returned 0
[0281.575] GetActiveWindow () returned 0x70036
[0281.575] GetFocus () returned 0x202c6
[0281.575] IsWindow (hWnd=0x70036) returned 1
[0281.575] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0281.575] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0281.576] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0281.576] GetWindowLongW (hWnd=0x1d00ea, nIndex=-8) returned 458806
[0281.576] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0281.576] GetCurrentThreadId () returned 0x11d0
[0281.576] GetWindowLongW (hWnd=0x1d00ea, nIndex=-8) returned 458806
[0281.576] IsWindowEnabled (hWnd=0x70036) returned 0
[0281.576] IsWindowEnabled (hWnd=0x1d00ea) returned 1
[0281.576] ShowWindow (hWnd=0x1d00ea, nCmdShow=5) returned 0
[0281.576] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0281.576] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0281.577] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.577] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0281.577] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x1d00ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x190122
[0281.577] SetWindowLongW (hWnd=0x190122, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0281.577] GetWindowLongW (hWnd=0x190122, nIndex=-4) returned 1868026976
[0281.578] SetWindowLongW (hWnd=0x190122, nIndex=-4, dwNewLong=79643662) returned 1868026976
[0281.578] GetWindowLongW (hWnd=0x190122, nIndex=-4) returned 79643662
[0281.578] GetWindowLongW (hWnd=0x190122, nIndex=-16) returned 1174470848
[0281.578] GetWindowLongW (hWnd=0x190122, nIndex=-12) returned 0
[0281.578] SetWindowLongW (hWnd=0x190122, nIndex=-12, dwNewLong=1638690) returned 0
[0281.578] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0281.579] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0281.579] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0281.580] SendMessageW (hWnd=0x190122, Msg=0x2055, wParam=0x190122, lParam=0x3) returned 0x2
[0281.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0281.580] GetWindow (hWnd=0x190122, uCmd=0x3) returned 0x0
[0281.580] GetClientRect (in: hWnd=0x190122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0281.580] GetWindowRect (in: hWnd=0x190122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0281.580] GetParent (hWnd=0x190122) returned 0x1d00ea
[0281.580] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d00ea, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0281.580] SendMessageW (hWnd=0x190122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0281.580] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0281.580] SendMessageW (hWnd=0x190122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0281.580] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0281.580] GetSystemMetrics (nIndex=5) returned 1
[0281.580] GetSystemMetrics (nIndex=6) returned 1
[0281.581] SendMessageW (hWnd=0x190122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0281.581] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0281.581] SendMessageW (hWnd=0x190122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0281.581] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0281.581] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0281.581] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0281.581] GetClientRect (in: hWnd=0x190122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0281.581] GetWindowRect (in: hWnd=0x190122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0281.581] GetParent (hWnd=0x190122) returned 0x1d00ea
[0281.581] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d00ea, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0281.581] SendMessageW (hWnd=0x190122, Msg=0x2210, wParam=0x1220001, lParam=0x190122) returned 0x0
[0281.581] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x2210, wParam=0x1220001, lParam=0x190122) returned 0x0
[0281.581] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0281.582] GetParent (hWnd=0x190122) returned 0x1d00ea
[0281.582] GetParent (hWnd=0x1901e2) returned 0x1602ca
[0281.582] SetParent (hWndChild=0x1901e2, hWndNewParent=0x1d00ea) returned 0x1602ca
[0281.582] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0281.582] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0281.583] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0281.583] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0281.583] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0281.583] GetClientRect (in: hWnd=0x1901e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0281.583] GetWindowRect (in: hWnd=0x1901e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0281.583] GetParent (hWnd=0x1901e2) returned 0x1d00ea
[0281.583] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d00ea, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0281.583] GetClientRect (in: hWnd=0x1901e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0281.583] GetWindowRect (in: hWnd=0x1901e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0281.583] GetParent (hWnd=0x1901e2) returned 0x1d00ea
[0281.583] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d00ea, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0281.583] GetParent (hWnd=0x1901e2) returned 0x1d00ea
[0281.583] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0281.583] GetWindow (hWnd=0x1901e2, uCmd=0x3) returned 0x0
[0281.583] SetWindowPos (hWnd=0x1901e2, hWndInsertAfter=0x190122, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0281.583] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0281.584] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0281.584] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0281.584] GetClientRect (in: hWnd=0x1901e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0281.584] GetWindowRect (in: hWnd=0x1901e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0281.585] GetParent (hWnd=0x1901e2) returned 0x1d00ea
[0281.585] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d00ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0281.585] GetParent (hWnd=0x1901e2) returned 0x1d00ea
[0281.585] GetWindow (hWnd=0x1901e2, uCmd=0x3) returned 0x190122
[0281.585] GetWindowThreadProcessId (in: hWnd=0x1901e2, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0281.585] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0281.585] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.585] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0281.585] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x1d00ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x15004e
[0281.586] SetWindowLongW (hWnd=0x15004e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0281.586] GetWindowLongW (hWnd=0x15004e, nIndex=-4) returned 1868032000
[0281.586] SetWindowLongW (hWnd=0x15004e, nIndex=-4, dwNewLong=79644062) returned 1868032000
[0281.586] GetWindowLongW (hWnd=0x15004e, nIndex=-4) returned 79644062
[0281.586] GetWindowLongW (hWnd=0x15004e, nIndex=-16) returned 1174470667
[0281.586] GetWindowLongW (hWnd=0x15004e, nIndex=-12) returned 0
[0281.586] SetWindowLongW (hWnd=0x15004e, nIndex=-12, dwNewLong=1376334) returned 0
[0281.586] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0281.587] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0281.587] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0281.588] SendMessageW (hWnd=0x15004e, Msg=0x2055, wParam=0x15004e, lParam=0x3) returned 0x2
[0281.588] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0281.588] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0281.588] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0281.588] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0281.588] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0281.588] RedrawWindow (hWnd=0x190122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0281.588] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0281.588] RedrawWindow (hWnd=0x1901e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0281.588] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0281.588] RedrawWindow (hWnd=0x15004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0281.588] RedrawWindow (hWnd=0x1d00ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0281.589] GetWindow (hWnd=0x15004e, uCmd=0x3) returned 0x1901e2
[0281.589] GetClientRect (in: hWnd=0x15004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0281.589] GetWindowRect (in: hWnd=0x15004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0281.589] GetParent (hWnd=0x15004e) returned 0x1d00ea
[0281.589] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d00ea, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0281.589] SetWindowTextW (hWnd=0x15004e, lpString="OK") returned 1
[0281.589] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0xc, wParam=0x0, lParam=0x23cf230) returned 0x1
[0281.589] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0281.589] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0281.589] GetClientRect (in: hWnd=0x15004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0281.589] GetWindowRect (in: hWnd=0x15004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0281.589] GetParent (hWnd=0x15004e) returned 0x1d00ea
[0281.589] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d00ea, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0281.590] SendMessageW (hWnd=0x15004e, Msg=0x2210, wParam=0x4e0001, lParam=0x15004e) returned 0x0
[0281.590] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x2210, wParam=0x4e0001, lParam=0x15004e) returned 0x0
[0281.590] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0281.590] GetParent (hWnd=0x15004e) returned 0x1d00ea
[0281.590] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0281.590] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.590] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0281.590] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x1d00ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x37013e
[0281.591] SetWindowLongW (hWnd=0x37013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0281.591] GetWindowLongW (hWnd=0x37013e, nIndex=-4) returned 1868032000
[0281.591] SetWindowLongW (hWnd=0x37013e, nIndex=-4, dwNewLong=79644382) returned 1868032000
[0281.591] GetWindowLongW (hWnd=0x37013e, nIndex=-4) returned 79644382
[0281.591] GetWindowLongW (hWnd=0x37013e, nIndex=-16) returned 1174470667
[0281.591] GetWindowLongW (hWnd=0x37013e, nIndex=-12) returned 0
[0281.591] SetWindowLongW (hWnd=0x37013e, nIndex=-12, dwNewLong=3604798) returned 0
[0281.591] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0281.592] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0281.592] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0281.593] SendMessageW (hWnd=0x37013e, Msg=0x2055, wParam=0x37013e, lParam=0x3) returned 0x2
[0281.593] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0281.593] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0281.593] GetWindow (hWnd=0x37013e, uCmd=0x3) returned 0x15004e
[0281.593] GetClientRect (in: hWnd=0x37013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0281.593] GetWindowRect (in: hWnd=0x37013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0281.593] GetParent (hWnd=0x37013e) returned 0x1d00ea
[0281.593] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d00ea, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0281.593] SetWindowTextW (hWnd=0x37013e, lpString="Cancel") returned 1
[0281.593] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0xc, wParam=0x0, lParam=0x23d2af0) returned 0x1
[0281.594] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0281.594] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0281.594] GetClientRect (in: hWnd=0x37013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0281.594] GetWindowRect (in: hWnd=0x37013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0281.594] GetParent (hWnd=0x37013e) returned 0x1d00ea
[0281.594] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1d00ea, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0281.594] SendMessageW (hWnd=0x37013e, Msg=0x2210, wParam=0x13e0001, lParam=0x37013e) returned 0x0
[0281.594] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0x2210, wParam=0x13e0001, lParam=0x37013e) returned 0x0
[0281.594] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0281.594] GetParent (hWnd=0x37013e) returned 0x1d00ea
[0281.594] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0281.594] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e320) returned 0x0
[0281.595] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0281.595] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0281.595] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0281.595] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0281.596] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0281.596] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0281.596] GetWindowLongW (hWnd=0x1d00ea, nIndex=-8) returned 458806
[0281.596] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0281.596] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0281.596] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x390107cd
[0281.596] GetDeviceCaps (hdc=0x390107cd, index=12) returned 32
[0281.596] GetDeviceCaps (hdc=0x390107cd, index=14) returned 1
[0281.596] DeleteDC (hdc=0x390107cd) returned 1
[0281.596] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0281.597] GetWindowThreadProcessId (in: hWnd=0x1d00ea, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0281.597] GetCurrentThreadId () returned 0x11d0
[0281.597] PostMessageW (hWnd=0x1d00ea, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0281.597] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.597] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.597] GetSystemMetrics (nIndex=42) returned 0
[0281.597] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.597] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0281.597] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0281.597] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0281.597] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0281.598] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0281.606] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1d00ea) returned 0x1
[0281.608] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0281.608] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0281.609] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0281.609] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0281.610] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0281.611] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0281.611] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0281.612] GetFocus () returned 0x202c6
[0281.612] IsChild (hWndParent=0x1d00ea, hWnd=0x202c6) returned 0
[0281.612] GetFocus () returned 0x202c6
[0281.612] SetFocus (hWnd=0x190122) returned 0x202c6
[0281.612] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x190122, lParam=0x0) returned 0x0
[0281.613] GetCapture () returned 0x0
[0281.613] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0281.613] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0281.615] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0281.620] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0281.620] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0281.621] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0281.621] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0281.621] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0281.621] GetParent (hWnd=0x1d00ea) returned 0x0
[0281.621] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0281.622] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0281.622] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0281.623] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0281.623] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0281.623] GetSysColorBrush (nIndex=5) returned 0x100079
[0281.624] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0281.624] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0281.625] SendMessageW (hWnd=0x190122, Msg=0x2111, wParam=0x1000122, lParam=0x190122) returned 0x0
[0281.625] SendMessageW (hWnd=0x190122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0281.625] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0281.625] GetKeyState (nVirtKey=1) returned 1
[0281.625] GetKeyState (nVirtKey=2) returned 0
[0281.625] GetKeyState (nVirtKey=4) returned 0
[0281.625] GetKeyState (nVirtKey=5) returned 0
[0281.625] GetKeyState (nVirtKey=6) returned 0
[0281.625] GetWindowTextLengthW (hWnd=0x190122) returned 0
[0281.625] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0281.625] SendMessageW (hWnd=0x190122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0281.625] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0281.626] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0281.626] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0281.630] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0281.631] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0281.632] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0281.632] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0281.632] GetWindowPlacement (in: hWnd=0x1d00ea, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0281.632] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0281.632] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.632] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.632] GetSystemMetrics (nIndex=42) returned 0
[0281.632] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.632] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0281.633] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0281.633] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0281.633] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0281.633] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x650507ad
[0281.633] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0281.633] SaveDC (hdc=0x10105d6) returned 1
[0281.633] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0281.633] CreateSolidBrush (color=0xf0f0f0) returned 0x1610078d
[0281.633] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0x1610078d) returned 1
[0281.633] DeleteObject (ho=0x1610078d) returned 1
[0281.633] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0281.633] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0281.633] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0281.633] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0281.634] GetWindowPlacement (in: hWnd=0x1d00ea, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0281.634] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0281.634] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.634] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.635] GetSystemMetrics (nIndex=42) returned 0
[0281.635] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.635] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0281.635] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0281.635] GetCurrentObject (hdc=0x4f0107cd, type=0x1) returned 0xb00017
[0281.635] GetCurrentObject (hdc=0x4f0107cd, type=0x2) returned 0x900010
[0281.635] GetCurrentObject (hdc=0x4f0107cd, type=0x7) returned 0x3a0507c3
[0281.635] GetCurrentObject (hdc=0x4f0107cd, type=0x6) returned 0x8a01c2
[0281.635] SaveDC (hdc=0x4f0107cd) returned 1
[0281.635] GetNearestColor (hdc=0x4f0107cd, color=0xf0f0f0) returned 0xf0f0f0
[0281.635] CreateSolidBrush (color=0xf0f0f0) returned 0x1710078d
[0281.635] FillRect (hDC=0x4f0107cd, lprc=0x53dc18, hbr=0x1710078d) returned 1
[0281.635] DeleteObject (ho=0x1710078d) returned 1
[0281.635] RestoreDC (hdc=0x4f0107cd, nSavedDC=-1) returned 1
[0281.636] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.636] GetSystemMetrics (nIndex=42) returned 0
[0281.636] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.636] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0281.636] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0281.636] GetCurrentObject (hdc=0x4f0107cd, type=0x1) returned 0xb00017
[0281.636] GetCurrentObject (hdc=0x4f0107cd, type=0x2) returned 0x900010
[0281.636] GetCurrentObject (hdc=0x4f0107cd, type=0x7) returned 0x3a0507c3
[0281.636] GetCurrentObject (hdc=0x4f0107cd, type=0x6) returned 0x8a01c2
[0281.636] SaveDC (hdc=0x4f0107cd) returned 1
[0281.636] GetNearestColor (hdc=0x4f0107cd, color=0xf0f0f0) returned 0xf0f0f0
[0281.636] CreateSolidBrush (color=0xf0f0f0) returned 0x1810078d
[0281.636] FillRect (hDC=0x4f0107cd, lprc=0x53dbb8, hbr=0x1810078d) returned 1
[0281.636] DeleteObject (ho=0x1810078d) returned 1
[0281.636] RestoreDC (hdc=0x4f0107cd, nSavedDC=-1) returned 1
[0281.636] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.637] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.637] GetSystemMetrics (nIndex=42) returned 0
[0281.637] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.637] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0281.638] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0281.638] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0281.638] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0281.638] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0281.638] GetStockObject (i=5) returned 0x900015
[0281.639] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0281.639] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0281.639] GetStockObject (i=5) returned 0x900015
[0281.639] GetWindowPlacement (in: hWnd=0x1d00ea, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0281.639] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0281.639] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0281.639] GetWindowRect (in: hWnd=0x1d00ea, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0281.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0281.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0281.640] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0281.641] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0281.641] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0281.641] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0281.641] GetWindowRect (in: hWnd=0x1d00ea, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0281.641] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.641] IsWindowUnicode (hWnd=0x1d00ea) returned 1
[0281.641] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.641] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.641] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.641] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0281.641] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.641] IsWindowUnicode (hWnd=0x1d00ea) returned 1
[0281.641] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.642] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.642] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.642] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.642] MapWindowPoints (in: hWndFrom=0x1901e2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0281.642] IsWindowUnicode (hWnd=0x1901e2) returned 1
[0281.642] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.642] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.642] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.642] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.642] IsWindowUnicode (hWnd=0x202c6) returned 1
[0281.643] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.643] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.643] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.643] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0281.643] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0281.643] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.643] MapWindowPoints (in: hWndFrom=0x1901e2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0281.643] IsWindowUnicode (hWnd=0x1901e2) returned 1
[0281.643] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.643] MapWindowPoints (in: hWndFrom=0x1901e2, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0281.643] SetCursor (hCursor=0x10003) returned 0x10003
[0281.643] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.643] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.643] _TrackMouseEvent (in: lpEventTrack=0x23d9484 | out: lpEventTrack=0x23d9484) returned 1
[0281.644] SendMessageW (hWnd=0x1901e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0281.644] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0281.644] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x200, wParam=0x0, lParam=0x130009) returned 0x0
[0281.644] GetKeyState (nVirtKey=1) returned 1
[0281.644] GetKeyState (nVirtKey=2) returned 0
[0281.644] GetKeyState (nVirtKey=4) returned 0
[0281.644] GetKeyState (nVirtKey=5) returned 0
[0281.644] GetKeyState (nVirtKey=6) returned 0
[0281.644] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.644] IsWindowUnicode (hWnd=0x1d00ea) returned 1
[0281.644] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.644] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.644] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.644] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.646] IsWindowUnicode (hWnd=0x1d00ea) returned 1
[0281.646] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.646] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.646] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.646] BeginPaint (in: hWnd=0x1d00ea, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x60100ce
[0281.646] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0281.646] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.682] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.682] GetSystemMetrics (nIndex=42) returned 0
[0281.682] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.682] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0281.682] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0281.683] EndPaint (hWnd=0x1d00ea, lpPaint=0x53e30c) returned 1
[0281.683] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.683] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0281.683] IsWindowUnicode (hWnd=0x102dc) returned 1
[0281.684] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.684] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0281.684] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.684] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.685] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.685] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0281.686] IsWindowUnicode (hWnd=0x102dc) returned 1
[0281.686] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.686] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.686] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.686] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.687] IsWindowUnicode (hWnd=0x190122) returned 1
[0281.687] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.687] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.687] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0281.687] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0281.688] SetTextColor (hdc=0x500107cd, color=0x0) returned 0x0
[0281.688] SetBkColor (hdc=0x500107cd, color=0xffffff) returned 0xffffff
[0281.689] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.689] IsWindowUnicode (hWnd=0x1901e2) returned 1
[0281.689] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.689] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.689] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.689] BeginPaint (in: hWnd=0x1901e2, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x60100ce
[0281.689] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0281.689] CreateCompatibleDC (hdc=0x60100ce) returned 0x120107c1
[0281.689] SelectObject (hdc=0x120107c1, h=0x1e0507b9) returned 0x85000f
[0281.689] GdipCreateFromHDC (hdc=0x120107c1, graphics=0x53e30c) returned 0x0
[0281.690] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0281.690] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0281.690] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0281.690] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.690] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0281.690] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0281.690] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0281.690] LocalFree (hMem=0x89eee8) returned 0x0
[0281.690] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.690] GdipCreateRegion (region=0x53e354) returned 0x0
[0281.690] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.690] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0281.690] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0281.690] GetWindowTextLengthW (hWnd=0x1901e2) returned 16
[0281.690] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0281.690] GetSystemMetrics (nIndex=42) returned 0
[0281.690] GetWindowTextW (in: hWnd=0x1901e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0281.690] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0281.691] GetClientRect (in: hWnd=0x1901e2, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0281.691] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0281.691] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0281.691] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0281.691] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.691] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0281.691] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.691] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.691] LocalFree (hMem=0x89ea88) returned 0x0
[0281.691] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0281.691] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.691] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.691] LocalFree (hMem=0x89ea88) returned 0x0
[0281.691] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.691] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0281.691] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0281.691] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0281.692] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0281.692] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0281.692] GetCurrentObject (hdc=0x120107c1, type=0x1) returned 0xb00017
[0281.692] GetCurrentObject (hdc=0x120107c1, type=0x2) returned 0x900010
[0281.692] GetCurrentObject (hdc=0x120107c1, type=0x7) returned 0x1e0507b9
[0281.692] GetCurrentObject (hdc=0x120107c1, type=0x6) returned 0x8a01c2
[0281.692] SaveDC (hdc=0x120107c1) returned 1
[0281.692] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1d040798
[0281.692] GetClipRgn (hdc=0x120107c1, hrgn=0x1d040798) returned 0
[0281.692] SelectClipRgn (hdc=0x120107c1, hrgn=0xa10407a1) returned 2
[0281.692] DeleteObject (ho=0x1d040798) returned 1
[0281.692] DeleteObject (ho=0xa10407a1) returned 1
[0281.692] OffsetViewportOrgEx (in: hdc=0x120107c1, x=0, y=0, lppt=0x23d9968 | out: lppt=0x23d9968) returned 1
[0281.692] GetNearestColor (hdc=0x120107c1, color=0xf0f0f0) returned 0xf0f0f0
[0281.692] CreateSolidBrush (color=0xf0f0f0) returned 0x1910078d
[0281.692] FillRect (hDC=0x120107c1, lprc=0x53e1f4, hbr=0x1910078d) returned 1
[0281.693] DeleteObject (ho=0x1910078d) returned 1
[0281.693] RestoreDC (hdc=0x120107c1, nSavedDC=-1) returned 1
[0281.693] GdipReleaseDC (graphics=0x5d92c30, hdc=0x120107c1) returned 0x0
[0281.693] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfad90dbd) returned 0x0
[0281.694] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.694] GetWindowTextLengthW (hWnd=0x1901e2) returned 16
[0281.694] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0281.694] GetSystemMetrics (nIndex=42) returned 0
[0281.694] GetWindowTextW (in: hWnd=0x1901e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0281.694] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0281.694] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0281.694] GetCurrentObject (hdc=0x120107c1, type=0x1) returned 0xb00017
[0281.694] GetCurrentObject (hdc=0x120107c1, type=0x2) returned 0x900010
[0281.694] GetCurrentObject (hdc=0x120107c1, type=0x7) returned 0x1e0507b9
[0281.695] GetCurrentObject (hdc=0x120107c1, type=0x6) returned 0x8a01c2
[0281.695] SaveDC (hdc=0x120107c1) returned 1
[0281.695] GetNearestColor (hdc=0x120107c1, color=0x0) returned 0x0
[0281.695] RestoreDC (hdc=0x120107c1, nSavedDC=-1) returned 1
[0281.695] GdipReleaseDC (graphics=0x5d92c30, hdc=0x120107c1) returned 0x0
[0281.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0281.696] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0281.696] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0281.696] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x23d9c70 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0281.696] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0281.696] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0281.696] GetCurrentObject (hdc=0x120107c1, type=0x1) returned 0xb00017
[0281.696] GetCurrentObject (hdc=0x120107c1, type=0x2) returned 0x900010
[0281.696] GetCurrentObject (hdc=0x120107c1, type=0x7) returned 0x1e0507b9
[0281.696] GetCurrentObject (hdc=0x120107c1, type=0x6) returned 0x8a01c2
[0281.696] SaveDC (hdc=0x120107c1) returned 1
[0281.696] GetTextAlign (hdc=0x120107c1) returned 0x0
[0281.697] GetTextColor (hdc=0x120107c1) returned 0x0
[0281.697] GetCurrentObject (hdc=0x120107c1, type=0x6) returned 0x8a01c2
[0281.697] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0281.697] SelectObject (hdc=0x120107c1, h=0x730a066d) returned 0x8a01c2
[0281.697] GetBkMode (hdc=0x120107c1) returned 2
[0281.697] SetBkMode (hdc=0x120107c1, mode=1) returned 2
[0281.697] DrawTextExW (in: hdc=0x120107c1, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x23d9e94 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0281.697] RestoreDC (hdc=0x120107c1, nSavedDC=-1) returned 1
[0281.698] GdipReleaseDC (graphics=0x5d92c30, hdc=0x120107c1) returned 0x0
[0281.698] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0281.698] BitBlt (hdc=0x60100ce, x=0, y=0, cx=250, cy=70, hdcSrc=0x120107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0281.698] GdipReleaseDC (graphics=0x5d92c30, hdc=0x120107c1) returned 0x0
[0281.698] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0281.698] SelectObject (hdc=0x120107c1, h=0x85000f) returned 0x1e0507b9
[0281.698] DeleteDC (hdc=0x120107c1) returned 1
[0281.698] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0281.698] EndPaint (hWnd=0x1901e2, lpPaint=0x53e2f0) returned 1
[0281.698] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.699] IsWindowUnicode (hWnd=0x15004e) returned 1
[0281.699] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.699] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.699] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.699] BeginPaint (in: hWnd=0x15004e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0281.699] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0281.699] CreateCompatibleDC (hdc=0xf0105ee) returned 0x140107c1
[0281.699] SelectObject (hdc=0x140107c1, h=0x1e0507b9) returned 0x85000f
[0281.699] GdipCreateFromHDC (hdc=0x140107c1, graphics=0x53e300) returned 0x0
[0281.699] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0281.699] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0281.699] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0281.699] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.700] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0281.700] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0281.700] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0281.700] LocalFree (hMem=0x89ee08) returned 0x0
[0281.700] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.700] GdipCreateRegion (region=0x53e348) returned 0x0
[0281.700] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.700] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0281.700] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0281.700] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfad70dbd) returned 0x0
[0281.700] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.700] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0281.700] GetCurrentObject (hdc=0x140107c1, type=0x1) returned 0xb00017
[0281.700] GetCurrentObject (hdc=0x140107c1, type=0x2) returned 0x900010
[0281.700] GetCurrentObject (hdc=0x140107c1, type=0x7) returned 0x1e0507b9
[0281.700] GetCurrentObject (hdc=0x140107c1, type=0x6) returned 0x8a01c2
[0281.700] SaveDC (hdc=0x140107c1) returned 1
[0281.701] GetNearestColor (hdc=0x140107c1, color=0xf0f0f0) returned 0xf0f0f0
[0281.701] GetNearestColor (hdc=0x140107c1, color=0xa0a0a0) returned 0xa0a0a0
[0281.701] GetNearestColor (hdc=0x140107c1, color=0x696969) returned 0x696969
[0281.701] GetNearestColor (hdc=0x140107c1, color=0xa0a0a0) returned 0xa0a0a0
[0281.701] GetNearestColor (hdc=0x140107c1, color=0x0) returned 0x0
[0281.701] GetNearestColor (hdc=0x140107c1, color=0xffffff) returned 0xffffff
[0281.701] GetNearestColor (hdc=0x140107c1, color=0xe5e5e5) returned 0xe5e5e5
[0281.701] GetNearestColor (hdc=0x140107c1, color=0xd7d7d7) returned 0xd7d7d7
[0281.701] GetNearestColor (hdc=0x140107c1, color=0x0) returned 0x0
[0281.701] RestoreDC (hdc=0x140107c1, nSavedDC=-1) returned 1
[0281.701] GdipReleaseDC (graphics=0x5d92c30, hdc=0x140107c1) returned 0x0
[0281.701] IsAppThemed () returned 0x1
[0281.701] GetThemeAppProperties () returned 0x3
[0281.701] GetThemeAppProperties () returned 0x3
[0281.702] IsAppThemed () returned 0x1
[0281.702] GetThemeAppProperties () returned 0x3
[0281.702] GetThemeAppProperties () returned 0x3
[0281.702] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x23da600 | out: lpchText="OK", lprc=0x53e028) returned 13
[0281.702] IsAppThemed () returned 0x1
[0281.702] GetThemeAppProperties () returned 0x3
[0281.702] GetThemeAppProperties () returned 0x3
[0281.702] IsAppThemed () returned 0x1
[0281.702] GetThemeAppProperties () returned 0x3
[0281.702] GetThemeAppProperties () returned 0x3
[0281.702] GetFocus () returned 0x190122
[0281.702] IsAppThemed () returned 0x1
[0281.702] GetThemeAppProperties () returned 0x3
[0281.702] GetThemeAppProperties () returned 0x3
[0281.702] IsAppThemed () returned 0x1
[0281.703] GetThemeAppProperties () returned 0x3
[0281.703] GetThemeAppProperties () returned 0x3
[0281.703] IsThemePartDefined () returned 0x1
[0281.703] IsAppThemed () returned 0x1
[0281.703] GetThemeAppProperties () returned 0x3
[0281.703] GetThemeAppProperties () returned 0x3
[0281.703] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0281.703] IsAppThemed () returned 0x1
[0281.703] GetThemeAppProperties () returned 0x3
[0281.703] GetThemeAppProperties () returned 0x3
[0281.703] IsAppThemed () returned 0x1
[0281.703] GetThemeAppProperties () returned 0x3
[0281.703] GetThemeAppProperties () returned 0x3
[0281.703] IsThemePartDefined () returned 0x1
[0281.703] GdipCreateRegion (region=0x53e070) returned 0x0
[0281.703] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.703] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0281.703] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.703] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0281.703] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0281.703] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0281.704] LocalFree (hMem=0x89ee08) returned 0x0
[0281.704] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.704] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.704] LocalFree (hMem=0x89ea88) returned 0x0
[0281.704] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.704] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0281.704] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0281.704] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0281.704] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.704] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0281.704] GetCurrentObject (hdc=0x140107c1, type=0x1) returned 0xb00017
[0281.704] GetCurrentObject (hdc=0x140107c1, type=0x2) returned 0x900010
[0281.704] GetCurrentObject (hdc=0x140107c1, type=0x7) returned 0x1e0507b9
[0281.704] GetCurrentObject (hdc=0x140107c1, type=0x6) returned 0x8a01c2
[0281.704] SaveDC (hdc=0x140107c1) returned 1
[0281.704] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa20407a1
[0281.704] GetClipRgn (hdc=0x140107c1, hrgn=0xa20407a1) returned 0
[0281.705] SelectClipRgn (hdc=0x140107c1, hrgn=0x21040798) returned 2
[0281.705] DeleteObject (ho=0xa20407a1) returned 1
[0281.705] DeleteObject (ho=0x21040798) returned 1
[0281.705] OffsetViewportOrgEx (in: hdc=0x140107c1, x=0, y=0, lppt=0x23dacb0 | out: lppt=0x23dacb0) returned 1
[0281.705] DrawThemeParentBackground () returned 0x0
[0281.705] GetWindowPlacement (in: hWnd=0x1d00ea, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0281.705] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0281.705] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.705] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.705] GetSystemMetrics (nIndex=42) returned 0
[0281.705] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.705] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0281.705] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0281.705] GetCurrentObject (hdc=0x140107c1, type=0x1) returned 0xb00017
[0281.705] GetCurrentObject (hdc=0x140107c1, type=0x2) returned 0x900010
[0281.705] GetCurrentObject (hdc=0x140107c1, type=0x7) returned 0x1e0507b9
[0281.706] GetCurrentObject (hdc=0x140107c1, type=0x6) returned 0x8a01c2
[0281.706] SaveDC (hdc=0x140107c1) returned 2
[0281.706] GetNearestColor (hdc=0x140107c1, color=0xf0f0f0) returned 0xf0f0f0
[0281.706] CreateSolidBrush (color=0xf0f0f0) returned 0x1a10078d
[0281.706] FillRect (hDC=0x140107c1, lprc=0x53dad0, hbr=0x1a10078d) returned 1
[0281.706] DeleteObject (ho=0x1a10078d) returned 1
[0281.706] RestoreDC (hdc=0x140107c1, nSavedDC=-1) returned 1
[0281.706] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.706] GetSystemMetrics (nIndex=42) returned 0
[0281.706] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0281.706] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0281.706] GetCurrentObject (hdc=0x140107c1, type=0x1) returned 0xb00017
[0281.706] GetCurrentObject (hdc=0x140107c1, type=0x2) returned 0x900010
[0281.706] GetCurrentObject (hdc=0x140107c1, type=0x7) returned 0x1e0507b9
[0281.707] GetCurrentObject (hdc=0x140107c1, type=0x6) returned 0x8a01c2
[0281.707] SaveDC (hdc=0x140107c1) returned 2
[0281.707] GetNearestColor (hdc=0x140107c1, color=0xf0f0f0) returned 0xf0f0f0
[0281.707] CreateSolidBrush (color=0xf0f0f0) returned 0x1b10078d
[0281.707] FillRect (hDC=0x140107c1, lprc=0x53da70, hbr=0x1b10078d) returned 1
[0281.707] DeleteObject (ho=0x1b10078d) returned 1
[0281.707] RestoreDC (hdc=0x140107c1, nSavedDC=-1) returned 1
[0281.707] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.707] GetSystemMetrics (nIndex=42) returned 0
[0281.707] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0281.707] RestoreDC (hdc=0x140107c1, nSavedDC=-1) returned 1
[0281.707] GdipReleaseDC (graphics=0x5d92c30, hdc=0x140107c1) returned 0x0
[0281.708] IsAppThemed () returned 0x1
[0281.708] GetThemeAppProperties () returned 0x3
[0281.708] GetThemeAppProperties () returned 0x3
[0281.708] IsAppThemed () returned 0x1
[0281.708] GetThemeAppProperties () returned 0x3
[0281.708] GetThemeAppProperties () returned 0x3
[0281.708] IsThemePartDefined () returned 0x1
[0281.708] GdipCreateRegion (region=0x53dff4) returned 0x0
[0281.708] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.708] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0281.708] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.708] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0281.708] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.708] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0281.708] LocalFree (hMem=0x89ea88) returned 0x0
[0281.708] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0281.708] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0281.708] LocalFree (hMem=0x89ee08) returned 0x0
[0281.709] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.718] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0281.718] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0281.718] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0281.718] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.718] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0281.718] GetCurrentObject (hdc=0x140107c1, type=0x1) returned 0xb00017
[0281.718] GetCurrentObject (hdc=0x140107c1, type=0x2) returned 0x900010
[0281.718] GetCurrentObject (hdc=0x140107c1, type=0x7) returned 0x1e0507b9
[0281.718] GetCurrentObject (hdc=0x140107c1, type=0x6) returned 0x8a01c2
[0281.718] SaveDC (hdc=0x140107c1) returned 1
[0281.718] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x22040798
[0281.718] GetClipRgn (hdc=0x140107c1, hrgn=0x22040798) returned 0
[0281.718] SelectClipRgn (hdc=0x140107c1, hrgn=0xa40407a1) returned 2
[0281.718] DeleteObject (ho=0x22040798) returned 1
[0281.718] DeleteObject (ho=0xa40407a1) returned 1
[0281.718] OffsetViewportOrgEx (in: hdc=0x140107c1, x=0, y=0, lppt=0x23db538 | out: lppt=0x23db538) returned 1
[0281.718] IsAppThemed () returned 0x1
[0281.719] GetThemeAppProperties () returned 0x3
[0281.719] GetThemeAppProperties () returned 0x3
[0281.719] DrawThemeBackground () returned 0x0
[0281.719] RestoreDC (hdc=0x140107c1, nSavedDC=-1) returned 1
[0281.719] GdipReleaseDC (graphics=0x5d92c30, hdc=0x140107c1) returned 0x0
[0281.719] GdipCreateRegion (region=0x53dff8) returned 0x0
[0281.719] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.719] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0281.719] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.719] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0281.719] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0281.719] LocalFree (hMem=0x89ee08) returned 0x0
[0281.719] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.719] LocalFree (hMem=0x89ea88) returned 0x0
[0281.719] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.719] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0281.719] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0281.720] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0281.720] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.720] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0281.720] GetCurrentObject (hdc=0x140107c1, type=0x1) returned 0xb00017
[0281.720] GetCurrentObject (hdc=0x140107c1, type=0x2) returned 0x900010
[0281.720] GetCurrentObject (hdc=0x140107c1, type=0x7) returned 0x1e0507b9
[0281.720] GetCurrentObject (hdc=0x140107c1, type=0x6) returned 0x8a01c2
[0281.720] SaveDC (hdc=0x140107c1) returned 1
[0281.720] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa50407a1
[0281.720] GetClipRgn (hdc=0x140107c1, hrgn=0xa50407a1) returned 0
[0281.720] SelectClipRgn (hdc=0x140107c1, hrgn=0x23040798) returned 2
[0281.720] DeleteObject (ho=0xa50407a1) returned 1
[0281.720] DeleteObject (ho=0x23040798) returned 1
[0281.720] OffsetViewportOrgEx (in: hdc=0x140107c1, x=0, y=0, lppt=0x23db80c | out: lppt=0x23db80c) returned 1
[0281.720] IsAppThemed () returned 0x1
[0281.720] GetThemeAppProperties () returned 0x3
[0281.720] GetThemeAppProperties () returned 0x3
[0281.720] GetThemeBackgroundContentRect () returned 0x0
[0281.720] RestoreDC (hdc=0x140107c1, nSavedDC=-1) returned 1
[0281.720] GdipReleaseDC (graphics=0x5d92c30, hdc=0x140107c1) returned 0x0
[0281.721] IsAppThemed () returned 0x1
[0281.721] GetThemeAppProperties () returned 0x3
[0281.721] GetThemeAppProperties () returned 0x3
[0281.721] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0281.721] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0281.721] GetCurrentObject (hdc=0x140107c1, type=0x1) returned 0xb00017
[0281.721] GetCurrentObject (hdc=0x140107c1, type=0x2) returned 0x900010
[0281.721] GetCurrentObject (hdc=0x140107c1, type=0x7) returned 0x1e0507b9
[0281.721] GetCurrentObject (hdc=0x140107c1, type=0x6) returned 0x8a01c2
[0281.721] SaveDC (hdc=0x140107c1) returned 1
[0281.721] GetTextAlign (hdc=0x140107c1) returned 0x0
[0281.721] GetTextColor (hdc=0x140107c1) returned 0x0
[0281.721] GetCurrentObject (hdc=0x140107c1, type=0x6) returned 0x8a01c2
[0281.721] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0281.721] SelectObject (hdc=0x140107c1, h=0x730a066d) returned 0x8a01c2
[0281.721] GetBkMode (hdc=0x140107c1) returned 2
[0281.721] SetBkMode (hdc=0x140107c1, mode=1) returned 2
[0281.722] DrawTextExW (in: hdc=0x140107c1, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x23dbbac | out: lpchText="OK", lprc=0x53df90) returned 13
[0281.722] DrawTextExW (in: hdc=0x140107c1, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x23dbbac | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0281.722] RestoreDC (hdc=0x140107c1, nSavedDC=-1) returned 1
[0281.722] GdipReleaseDC (graphics=0x5d92c30, hdc=0x140107c1) returned 0x0
[0281.722] GetFocus () returned 0x190122
[0281.722] IsAppThemed () returned 0x1
[0281.722] GetThemeAppProperties () returned 0x3
[0281.722] GetThemeAppProperties () returned 0x3
[0281.722] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0281.723] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x140107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0281.723] GdipReleaseDC (graphics=0x5d92c30, hdc=0x140107c1) returned 0x0
[0281.723] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0281.723] SelectObject (hdc=0x140107c1, h=0x85000f) returned 0x1e0507b9
[0281.723] DeleteDC (hdc=0x140107c1) returned 1
[0281.723] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0281.723] EndPaint (hWnd=0x15004e, lpPaint=0x53e2e4) returned 1
[0281.723] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.723] IsWindowUnicode (hWnd=0x37013e) returned 1
[0281.723] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.723] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.723] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.724] BeginPaint (in: hWnd=0x37013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0281.724] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0281.724] CreateCompatibleDC (hdc=0x60100ce) returned 0x160107c1
[0281.724] SelectObject (hdc=0x160107c1, h=0x1e0507b9) returned 0x85000f
[0281.724] GdipCreateFromHDC (hdc=0x160107c1, graphics=0x53e300) returned 0x0
[0281.724] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0281.724] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0281.725] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0281.725] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.725] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0281.725] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0281.725] LocalFree (hMem=0x89ea88) returned 0x0
[0281.725] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.725] GdipCreateRegion (region=0x53e348) returned 0x0
[0281.725] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.725] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0281.725] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0281.725] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfad50dbd) returned 0x0
[0281.725] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.725] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0281.725] GetCurrentObject (hdc=0x160107c1, type=0x1) returned 0xb00017
[0281.725] GetCurrentObject (hdc=0x160107c1, type=0x2) returned 0x900010
[0281.725] GetCurrentObject (hdc=0x160107c1, type=0x7) returned 0x1e0507b9
[0281.726] GetCurrentObject (hdc=0x160107c1, type=0x6) returned 0x8a01c2
[0281.726] SaveDC (hdc=0x160107c1) returned 1
[0281.726] GetNearestColor (hdc=0x160107c1, color=0xf0f0f0) returned 0xf0f0f0
[0281.726] GetNearestColor (hdc=0x160107c1, color=0xa0a0a0) returned 0xa0a0a0
[0281.726] GetNearestColor (hdc=0x160107c1, color=0x696969) returned 0x696969
[0281.726] GetNearestColor (hdc=0x160107c1, color=0xa0a0a0) returned 0xa0a0a0
[0281.726] GetNearestColor (hdc=0x160107c1, color=0x0) returned 0x0
[0281.726] GetNearestColor (hdc=0x160107c1, color=0xffffff) returned 0xffffff
[0281.726] GetNearestColor (hdc=0x160107c1, color=0xe5e5e5) returned 0xe5e5e5
[0281.726] GetNearestColor (hdc=0x160107c1, color=0xd7d7d7) returned 0xd7d7d7
[0281.726] GetNearestColor (hdc=0x160107c1, color=0x0) returned 0x0
[0281.726] RestoreDC (hdc=0x160107c1, nSavedDC=-1) returned 1
[0281.726] GdipReleaseDC (graphics=0x5d92c30, hdc=0x160107c1) returned 0x0
[0281.726] IsAppThemed () returned 0x1
[0281.726] GetThemeAppProperties () returned 0x3
[0281.726] GetThemeAppProperties () returned 0x3
[0281.727] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0281.727] SendMessageW (hWnd=0x1d00ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0281.727] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0281.727] IsAppThemed () returned 0x1
[0281.727] GetThemeAppProperties () returned 0x3
[0281.727] GetThemeAppProperties () returned 0x3
[0281.727] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x23dc3bc | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0281.727] IsAppThemed () returned 0x1
[0281.727] GetThemeAppProperties () returned 0x3
[0281.727] GetThemeAppProperties () returned 0x3
[0281.727] IsAppThemed () returned 0x1
[0281.727] GetThemeAppProperties () returned 0x3
[0281.727] GetThemeAppProperties () returned 0x3
[0281.727] GetFocus () returned 0x190122
[0281.728] IsAppThemed () returned 0x1
[0281.728] GetThemeAppProperties () returned 0x3
[0281.728] GetThemeAppProperties () returned 0x3
[0281.728] IsAppThemed () returned 0x1
[0281.728] GetThemeAppProperties () returned 0x3
[0281.728] GetThemeAppProperties () returned 0x3
[0281.728] IsThemePartDefined () returned 0x1
[0281.728] IsAppThemed () returned 0x1
[0281.728] GetThemeAppProperties () returned 0x3
[0281.728] GetThemeAppProperties () returned 0x3
[0281.728] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0281.728] IsAppThemed () returned 0x1
[0281.728] GetThemeAppProperties () returned 0x3
[0281.728] GetThemeAppProperties () returned 0x3
[0281.728] IsAppThemed () returned 0x1
[0281.728] GetThemeAppProperties () returned 0x3
[0281.728] GetThemeAppProperties () returned 0x3
[0281.728] IsThemePartDefined () returned 0x1
[0281.728] GdipCreateRegion (region=0x53e070) returned 0x0
[0281.728] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.728] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0281.728] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.729] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0281.729] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.729] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.729] LocalFree (hMem=0x89ea88) returned 0x0
[0281.729] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0281.729] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0281.729] LocalFree (hMem=0x89ee08) returned 0x0
[0281.729] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.729] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0281.729] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0281.729] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0281.729] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.729] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0281.729] GetCurrentObject (hdc=0x160107c1, type=0x1) returned 0xb00017
[0281.729] GetCurrentObject (hdc=0x160107c1, type=0x2) returned 0x900010
[0281.729] GetCurrentObject (hdc=0x160107c1, type=0x7) returned 0x1e0507b9
[0281.729] GetCurrentObject (hdc=0x160107c1, type=0x6) returned 0x8a01c2
[0281.730] SaveDC (hdc=0x160107c1) returned 1
[0281.730] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x24040798
[0281.730] GetClipRgn (hdc=0x160107c1, hrgn=0x24040798) returned 0
[0281.730] SelectClipRgn (hdc=0x160107c1, hrgn=0xa90407a1) returned 2
[0281.730] DeleteObject (ho=0x24040798) returned 1
[0281.730] DeleteObject (ho=0xa90407a1) returned 1
[0281.730] OffsetViewportOrgEx (in: hdc=0x160107c1, x=0, y=0, lppt=0x23dca6c | out: lppt=0x23dca6c) returned 1
[0281.730] DrawThemeParentBackground () returned 0x0
[0281.730] GetWindowPlacement (in: hWnd=0x1d00ea, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0281.730] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0281.730] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.730] GetSystemMetrics (nIndex=42) returned 0
[0281.730] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0281.731] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0281.731] GetCurrentObject (hdc=0x160107c1, type=0x1) returned 0xb00017
[0281.731] GetCurrentObject (hdc=0x160107c1, type=0x2) returned 0x900010
[0281.731] GetCurrentObject (hdc=0x160107c1, type=0x7) returned 0x1e0507b9
[0281.731] GetCurrentObject (hdc=0x160107c1, type=0x6) returned 0x8a01c2
[0281.731] SaveDC (hdc=0x160107c1) returned 2
[0281.731] GetNearestColor (hdc=0x160107c1, color=0xf0f0f0) returned 0xf0f0f0
[0281.731] CreateSolidBrush (color=0xf0f0f0) returned 0x1c10078d
[0281.731] FillRect (hDC=0x160107c1, lprc=0x53dad0, hbr=0x1c10078d) returned 1
[0281.731] DeleteObject (ho=0x1c10078d) returned 1
[0281.731] RestoreDC (hdc=0x160107c1, nSavedDC=-1) returned 1
[0281.731] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.731] GetSystemMetrics (nIndex=42) returned 0
[0281.731] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0281.732] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0281.732] GetCurrentObject (hdc=0x160107c1, type=0x1) returned 0xb00017
[0281.732] GetCurrentObject (hdc=0x160107c1, type=0x2) returned 0x900010
[0281.732] GetCurrentObject (hdc=0x160107c1, type=0x7) returned 0x1e0507b9
[0281.732] GetCurrentObject (hdc=0x160107c1, type=0x6) returned 0x8a01c2
[0281.732] SaveDC (hdc=0x160107c1) returned 2
[0281.732] GetNearestColor (hdc=0x160107c1, color=0xf0f0f0) returned 0xf0f0f0
[0281.732] CreateSolidBrush (color=0xf0f0f0) returned 0x1d10078d
[0281.732] FillRect (hDC=0x160107c1, lprc=0x53da70, hbr=0x1d10078d) returned 1
[0281.732] DeleteObject (ho=0x1d10078d) returned 1
[0281.732] RestoreDC (hdc=0x160107c1, nSavedDC=-1) returned 1
[0281.732] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.732] GetSystemMetrics (nIndex=42) returned 0
[0281.732] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0281.733] RestoreDC (hdc=0x160107c1, nSavedDC=-1) returned 1
[0281.733] GdipReleaseDC (graphics=0x5d92c30, hdc=0x160107c1) returned 0x0
[0281.733] IsAppThemed () returned 0x1
[0281.733] GetThemeAppProperties () returned 0x3
[0281.733] GetThemeAppProperties () returned 0x3
[0281.733] IsAppThemed () returned 0x1
[0281.733] GetThemeAppProperties () returned 0x3
[0281.733] GetThemeAppProperties () returned 0x3
[0281.733] IsThemePartDefined () returned 0x1
[0281.733] GdipCreateRegion (region=0x53dff4) returned 0x0
[0281.733] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.733] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0281.733] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.733] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0281.734] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0281.734] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0281.734] LocalFree (hMem=0x89ee08) returned 0x0
[0281.734] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0281.734] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0281.734] LocalFree (hMem=0x89ee08) returned 0x0
[0281.734] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.734] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0281.734] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0281.734] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0281.734] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.734] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0281.734] GetCurrentObject (hdc=0x160107c1, type=0x1) returned 0xb00017
[0281.734] GetCurrentObject (hdc=0x160107c1, type=0x2) returned 0x900010
[0281.734] GetCurrentObject (hdc=0x160107c1, type=0x7) returned 0x1e0507b9
[0281.734] GetCurrentObject (hdc=0x160107c1, type=0x6) returned 0x8a01c2
[0281.734] SaveDC (hdc=0x160107c1) returned 1
[0281.735] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaa0407a1
[0281.735] GetClipRgn (hdc=0x160107c1, hrgn=0xaa0407a1) returned 0
[0281.735] SelectClipRgn (hdc=0x160107c1, hrgn=0x26040798) returned 2
[0281.735] DeleteObject (ho=0xaa0407a1) returned 1
[0281.735] DeleteObject (ho=0x26040798) returned 1
[0281.735] OffsetViewportOrgEx (in: hdc=0x160107c1, x=0, y=0, lppt=0x23dd2f4 | out: lppt=0x23dd2f4) returned 1
[0281.735] IsAppThemed () returned 0x1
[0281.735] GetThemeAppProperties () returned 0x3
[0281.735] GetThemeAppProperties () returned 0x3
[0281.735] DrawThemeBackground () returned 0x0
[0281.735] RestoreDC (hdc=0x160107c1, nSavedDC=-1) returned 1
[0281.735] GdipReleaseDC (graphics=0x5d92c30, hdc=0x160107c1) returned 0x0
[0281.735] GdipCreateRegion (region=0x53dff8) returned 0x0
[0281.735] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.735] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0281.736] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.736] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0281.736] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.736] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.736] LocalFree (hMem=0x89ea88) returned 0x0
[0281.736] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.736] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.736] LocalFree (hMem=0x89ea88) returned 0x0
[0281.736] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.736] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0281.736] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0281.736] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0281.736] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.736] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0281.736] GetCurrentObject (hdc=0x160107c1, type=0x1) returned 0xb00017
[0281.736] GetCurrentObject (hdc=0x160107c1, type=0x2) returned 0x900010
[0281.736] GetCurrentObject (hdc=0x160107c1, type=0x7) returned 0x1e0507b9
[0281.736] GetCurrentObject (hdc=0x160107c1, type=0x6) returned 0x8a01c2
[0281.737] SaveDC (hdc=0x160107c1) returned 1
[0281.737] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x27040798
[0281.737] GetClipRgn (hdc=0x160107c1, hrgn=0x27040798) returned 0
[0281.737] SelectClipRgn (hdc=0x160107c1, hrgn=0xab0407a1) returned 2
[0281.737] DeleteObject (ho=0x27040798) returned 1
[0281.737] DeleteObject (ho=0xab0407a1) returned 1
[0281.737] OffsetViewportOrgEx (in: hdc=0x160107c1, x=0, y=0, lppt=0x23dd5c8 | out: lppt=0x23dd5c8) returned 1
[0281.737] IsAppThemed () returned 0x1
[0281.737] GetThemeAppProperties () returned 0x3
[0281.737] GetThemeAppProperties () returned 0x3
[0281.737] GetThemeBackgroundContentRect () returned 0x0
[0281.737] RestoreDC (hdc=0x160107c1, nSavedDC=-1) returned 1
[0281.737] GdipReleaseDC (graphics=0x5d92c30, hdc=0x160107c1) returned 0x0
[0281.737] IsAppThemed () returned 0x1
[0281.737] GetThemeAppProperties () returned 0x3
[0281.737] GetThemeAppProperties () returned 0x3
[0281.737] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0281.738] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0281.738] GetCurrentObject (hdc=0x160107c1, type=0x1) returned 0xb00017
[0281.738] GetCurrentObject (hdc=0x160107c1, type=0x2) returned 0x900010
[0281.738] GetCurrentObject (hdc=0x160107c1, type=0x7) returned 0x1e0507b9
[0281.738] GetCurrentObject (hdc=0x160107c1, type=0x6) returned 0x8a01c2
[0281.738] SaveDC (hdc=0x160107c1) returned 1
[0281.738] GetTextAlign (hdc=0x160107c1) returned 0x0
[0281.738] GetTextColor (hdc=0x160107c1) returned 0x0
[0281.738] GetCurrentObject (hdc=0x160107c1, type=0x6) returned 0x8a01c2
[0281.738] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0281.738] SelectObject (hdc=0x160107c1, h=0x730a066d) returned 0x8a01c2
[0281.738] GetBkMode (hdc=0x160107c1) returned 2
[0281.738] SetBkMode (hdc=0x160107c1, mode=1) returned 2
[0281.739] DrawTextExW (in: hdc=0x160107c1, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x23dd968 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0281.739] DrawTextExW (in: hdc=0x160107c1, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x23dd968 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0281.739] RestoreDC (hdc=0x160107c1, nSavedDC=-1) returned 1
[0281.739] GdipReleaseDC (graphics=0x5d92c30, hdc=0x160107c1) returned 0x0
[0281.739] GetFocus () returned 0x190122
[0281.739] IsAppThemed () returned 0x1
[0281.739] GetThemeAppProperties () returned 0x3
[0281.739] GetThemeAppProperties () returned 0x3
[0281.739] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0281.740] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x160107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0281.740] GdipReleaseDC (graphics=0x5d92c30, hdc=0x160107c1) returned 0x0
[0281.740] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0281.740] SelectObject (hdc=0x160107c1, h=0x85000f) returned 0x1e0507b9
[0281.746] DeleteDC (hdc=0x160107c1) returned 1
[0281.746] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0281.746] EndPaint (hWnd=0x37013e, lpPaint=0x53e2e4) returned 1
[0281.747] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.747] IsWindowUnicode (hWnd=0x202c6) returned 1
[0281.747] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.747] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.747] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.747] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0281.747] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0281.747] CreateCompatibleDC (hdc=0xf0105ee) returned 0x180107c1
[0281.747] SelectObject (hdc=0x180107c1, h=0x1e0507b9) returned 0x85000f
[0281.747] GdipCreateFromHDC (hdc=0x180107c1, graphics=0x53e300) returned 0x0
[0281.748] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0281.748] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0281.748] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0281.748] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.748] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0281.748] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0281.748] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0281.748] LocalFree (hMem=0x89ee08) returned 0x0
[0281.748] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.748] GdipCreateRegion (region=0x53e348) returned 0x0
[0281.748] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.748] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0281.748] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0281.748] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfad30dbd) returned 0x0
[0281.748] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.748] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0281.749] GetCurrentObject (hdc=0x180107c1, type=0x1) returned 0xb00017
[0281.749] GetCurrentObject (hdc=0x180107c1, type=0x2) returned 0x900010
[0281.749] GetCurrentObject (hdc=0x180107c1, type=0x7) returned 0x1e0507b9
[0281.749] GetCurrentObject (hdc=0x180107c1, type=0x6) returned 0x8a01c2
[0281.749] SaveDC (hdc=0x180107c1) returned 1
[0281.749] GetNearestColor (hdc=0x180107c1, color=0xff) returned 0xff
[0281.749] GetNearestColor (hdc=0x180107c1, color=0x55) returned 0x55
[0281.749] GetNearestColor (hdc=0x180107c1, color=0x0) returned 0x0
[0281.749] GetNearestColor (hdc=0x180107c1, color=0x55) returned 0x55
[0281.749] GetNearestColor (hdc=0x180107c1, color=0x0) returned 0x0
[0281.749] GetNearestColor (hdc=0x180107c1, color=0x8080ff) returned 0x8080ff
[0281.749] GetNearestColor (hdc=0x180107c1, color=0x7373e5) returned 0x7373e5
[0281.749] GetNearestColor (hdc=0x180107c1, color=0xe5) returned 0xe5
[0281.749] GetNearestColor (hdc=0x180107c1, color=0x0) returned 0x0
[0281.750] RestoreDC (hdc=0x180107c1, nSavedDC=-1) returned 1
[0281.750] GdipReleaseDC (graphics=0x5d92c30, hdc=0x180107c1) returned 0x0
[0281.750] IsAppThemed () returned 0x1
[0281.750] GetThemeAppProperties () returned 0x3
[0281.750] GetThemeAppProperties () returned 0x3
[0281.750] IsAppThemed () returned 0x1
[0281.750] GetThemeAppProperties () returned 0x3
[0281.750] GetThemeAppProperties () returned 0x3
[0281.750] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0281.750] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x23de14c | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0281.750] IsAppThemed () returned 0x1
[0281.751] GetThemeAppProperties () returned 0x3
[0281.751] GetThemeAppProperties () returned 0x3
[0281.751] IsAppThemed () returned 0x1
[0281.751] GetThemeAppProperties () returned 0x3
[0281.751] GetThemeAppProperties () returned 0x3
[0281.751] GetFocus () returned 0x190122
[0281.751] IsAppThemed () returned 0x1
[0281.751] GetThemeAppProperties () returned 0x3
[0281.751] GetThemeAppProperties () returned 0x3
[0281.751] IsAppThemed () returned 0x1
[0281.751] GetThemeAppProperties () returned 0x3
[0281.751] GetThemeAppProperties () returned 0x3
[0281.751] IsThemePartDefined () returned 0x1
[0281.751] IsAppThemed () returned 0x1
[0281.751] GetThemeAppProperties () returned 0x3
[0281.751] GetThemeAppProperties () returned 0x3
[0281.751] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0281.751] IsAppThemed () returned 0x1
[0281.751] GetThemeAppProperties () returned 0x3
[0281.751] GetThemeAppProperties () returned 0x3
[0281.752] IsAppThemed () returned 0x1
[0281.752] GetThemeAppProperties () returned 0x3
[0281.752] GetThemeAppProperties () returned 0x3
[0281.752] IsThemePartDefined () returned 0x1
[0281.752] GdipCreateRegion (region=0x53e070) returned 0x0
[0281.752] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.752] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0281.752] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.752] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0281.752] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0281.752] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0281.752] LocalFree (hMem=0x89ee08) returned 0x0
[0281.752] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0281.752] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0281.752] LocalFree (hMem=0x89ee08) returned 0x0
[0281.752] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.752] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0281.752] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0281.753] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0281.753] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.753] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0281.753] GetCurrentObject (hdc=0x180107c1, type=0x1) returned 0xb00017
[0281.753] GetCurrentObject (hdc=0x180107c1, type=0x2) returned 0x900010
[0281.753] GetCurrentObject (hdc=0x180107c1, type=0x7) returned 0x1e0507b9
[0281.753] GetCurrentObject (hdc=0x180107c1, type=0x6) returned 0x8a01c2
[0281.753] SaveDC (hdc=0x180107c1) returned 1
[0281.753] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xac0407a1
[0281.753] GetClipRgn (hdc=0x180107c1, hrgn=0xac0407a1) returned 0
[0281.753] SelectClipRgn (hdc=0x180107c1, hrgn=0x2b040798) returned 2
[0281.753] DeleteObject (ho=0xac0407a1) returned 1
[0281.753] DeleteObject (ho=0x2b040798) returned 1
[0281.753] OffsetViewportOrgEx (in: hdc=0x180107c1, x=0, y=0, lppt=0x23de7fc | out: lppt=0x23de7fc) returned 1
[0281.753] DrawThemeParentBackground () returned 0x0
[0281.754] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0281.754] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0281.754] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0281.754] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0281.754] GetSystemMetrics (nIndex=42) returned 0
[0281.754] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0281.754] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0281.754] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0281.755] GetCurrentObject (hdc=0x180107c1, type=0x1) returned 0xb00017
[0281.755] GetCurrentObject (hdc=0x180107c1, type=0x2) returned 0x900010
[0281.755] GetCurrentObject (hdc=0x180107c1, type=0x7) returned 0x1e0507b9
[0281.755] GetCurrentObject (hdc=0x180107c1, type=0x6) returned 0x8a01c2
[0281.755] SaveDC (hdc=0x180107c1) returned 2
[0281.755] GetNearestColor (hdc=0x180107c1, color=0xff) returned 0xff
[0281.755] CreateSolidBrush (color=0xff) returned 0x1e10078d
[0281.755] FillRect (hDC=0x180107c1, lprc=0x53dad0, hbr=0x1e10078d) returned 1
[0281.755] DeleteObject (ho=0x1e10078d) returned 1
[0281.755] RestoreDC (hdc=0x180107c1, nSavedDC=-1) returned 1
[0281.755] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0281.755] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0281.755] GetSystemMetrics (nIndex=42) returned 0
[0281.755] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0281.763] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0281.763] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0281.763] GetCurrentObject (hdc=0x180107c1, type=0x1) returned 0xb00017
[0281.763] GetCurrentObject (hdc=0x180107c1, type=0x2) returned 0x900010
[0281.763] GetCurrentObject (hdc=0x180107c1, type=0x7) returned 0x1e0507b9
[0281.763] GetCurrentObject (hdc=0x180107c1, type=0x6) returned 0x8a01c2
[0281.763] SaveDC (hdc=0x180107c1) returned 2
[0281.764] GetNearestColor (hdc=0x180107c1, color=0xff) returned 0xff
[0281.764] CreateSolidBrush (color=0xff) returned 0x1f10078d
[0281.764] FillRect (hDC=0x180107c1, lprc=0x53da70, hbr=0x1f10078d) returned 1
[0281.764] DeleteObject (ho=0x1f10078d) returned 1
[0281.764] RestoreDC (hdc=0x180107c1, nSavedDC=-1) returned 1
[0281.764] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0281.764] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0281.764] GetSystemMetrics (nIndex=42) returned 0
[0281.764] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0281.764] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0281.764] RestoreDC (hdc=0x180107c1, nSavedDC=-1) returned 1
[0281.764] GdipReleaseDC (graphics=0x5d92c30, hdc=0x180107c1) returned 0x0
[0281.765] IsAppThemed () returned 0x1
[0281.765] GetThemeAppProperties () returned 0x3
[0281.765] GetThemeAppProperties () returned 0x3
[0281.765] IsAppThemed () returned 0x1
[0281.765] GetThemeAppProperties () returned 0x3
[0281.765] GetThemeAppProperties () returned 0x3
[0281.765] IsThemePartDefined () returned 0x1
[0281.765] GdipCreateRegion (region=0x53dff4) returned 0x0
[0281.765] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.765] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0281.765] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.765] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0281.765] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.765] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0281.765] LocalFree (hMem=0x89ea88) returned 0x0
[0281.765] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0281.765] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0281.765] LocalFree (hMem=0x89ee08) returned 0x0
[0281.766] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.766] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0281.766] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0281.766] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0281.766] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.766] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0281.766] GetCurrentObject (hdc=0x180107c1, type=0x1) returned 0xb00017
[0281.766] GetCurrentObject (hdc=0x180107c1, type=0x2) returned 0x900010
[0281.766] GetCurrentObject (hdc=0x180107c1, type=0x7) returned 0x1e0507b9
[0281.766] GetCurrentObject (hdc=0x180107c1, type=0x6) returned 0x8a01c2
[0281.766] SaveDC (hdc=0x180107c1) returned 1
[0281.766] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2c040798
[0281.766] GetClipRgn (hdc=0x180107c1, hrgn=0x2c040798) returned 0
[0281.766] SelectClipRgn (hdc=0x180107c1, hrgn=0xae0407a1) returned 2
[0281.766] DeleteObject (ho=0x2c040798) returned 1
[0281.767] DeleteObject (ho=0xae0407a1) returned 1
[0281.767] OffsetViewportOrgEx (in: hdc=0x180107c1, x=0, y=0, lppt=0x23df060 | out: lppt=0x23df060) returned 1
[0281.767] IsAppThemed () returned 0x1
[0281.768] GetThemeAppProperties () returned 0x3
[0281.768] GetThemeAppProperties () returned 0x3
[0281.768] DrawThemeBackground () returned 0x0
[0281.769] RestoreDC (hdc=0x180107c1, nSavedDC=-1) returned 1
[0281.769] GdipReleaseDC (graphics=0x5d92c30, hdc=0x180107c1) returned 0x0
[0281.769] GdipCreateRegion (region=0x53dff8) returned 0x0
[0281.769] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.769] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0281.769] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.769] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0281.769] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.769] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.769] LocalFree (hMem=0x89ea88) returned 0x0
[0281.769] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.769] LocalFree (hMem=0x89ea88) returned 0x0
[0281.769] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.769] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0281.770] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0281.770] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0281.770] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.770] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0281.770] GetCurrentObject (hdc=0x180107c1, type=0x1) returned 0xb00017
[0281.770] GetCurrentObject (hdc=0x180107c1, type=0x2) returned 0x900010
[0281.770] GetCurrentObject (hdc=0x180107c1, type=0x7) returned 0x1e0507b9
[0281.770] GetCurrentObject (hdc=0x180107c1, type=0x6) returned 0x8a01c2
[0281.770] SaveDC (hdc=0x180107c1) returned 1
[0281.770] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaf0407a1
[0281.770] GetClipRgn (hdc=0x180107c1, hrgn=0xaf0407a1) returned 0
[0281.770] SelectClipRgn (hdc=0x180107c1, hrgn=0x2d040798) returned 2
[0281.770] DeleteObject (ho=0xaf0407a1) returned 1
[0281.770] DeleteObject (ho=0x2d040798) returned 1
[0281.770] OffsetViewportOrgEx (in: hdc=0x180107c1, x=0, y=0, lppt=0x23df334 | out: lppt=0x23df334) returned 1
[0281.770] IsAppThemed () returned 0x1
[0281.770] GetThemeAppProperties () returned 0x3
[0281.770] GetThemeAppProperties () returned 0x3
[0281.771] GetThemeBackgroundContentRect () returned 0x0
[0281.771] RestoreDC (hdc=0x180107c1, nSavedDC=-1) returned 1
[0281.771] GdipReleaseDC (graphics=0x5d92c30, hdc=0x180107c1) returned 0x0
[0281.771] IsAppThemed () returned 0x1
[0281.771] GetThemeAppProperties () returned 0x3
[0281.771] GetThemeAppProperties () returned 0x3
[0281.771] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0281.771] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0281.771] GetCurrentObject (hdc=0x180107c1, type=0x1) returned 0xb00017
[0281.771] GetCurrentObject (hdc=0x180107c1, type=0x2) returned 0x900010
[0281.775] GetCurrentObject (hdc=0x180107c1, type=0x7) returned 0x1e0507b9
[0281.775] GetCurrentObject (hdc=0x180107c1, type=0x6) returned 0x8a01c2
[0281.775] SaveDC (hdc=0x180107c1) returned 1
[0281.776] GetTextAlign (hdc=0x180107c1) returned 0x0
[0281.776] GetTextColor (hdc=0x180107c1) returned 0x0
[0281.776] GetCurrentObject (hdc=0x180107c1, type=0x6) returned 0x8a01c2
[0281.776] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0281.776] SelectObject (hdc=0x180107c1, h=0x450a0799) returned 0x8a01c2
[0281.776] GetBkMode (hdc=0x180107c1) returned 2
[0281.776] SetBkMode (hdc=0x180107c1, mode=1) returned 2
[0281.776] DrawTextExW (in: hdc=0x180107c1, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x23df6d4 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0281.776] DrawTextExW (in: hdc=0x180107c1, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x23df6d4 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0281.777] RestoreDC (hdc=0x180107c1, nSavedDC=-1) returned 1
[0281.777] GdipReleaseDC (graphics=0x5d92c30, hdc=0x180107c1) returned 0x0
[0281.777] GetFocus () returned 0x190122
[0281.777] IsAppThemed () returned 0x1
[0281.777] GetThemeAppProperties () returned 0x3
[0281.777] GetThemeAppProperties () returned 0x3
[0281.777] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0281.777] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x180107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0281.777] GdipReleaseDC (graphics=0x5d92c30, hdc=0x180107c1) returned 0x0
[0281.777] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0281.777] SelectObject (hdc=0x180107c1, h=0x85000f) returned 0x1e0507b9
[0281.777] DeleteDC (hdc=0x180107c1) returned 1
[0281.777] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0281.777] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0281.778] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.778] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x84, wParam=0x0, lParam=0x18d035d) returned 0x1
[0281.778] IsWindowUnicode (hWnd=0x15004e) returned 1
[0281.778] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.778] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.778] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.778] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0281.778] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.778] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x84, wParam=0x0, lParam=0x18d035d) returned 0x1
[0281.779] IsWindowUnicode (hWnd=0x15004e) returned 1
[0281.779] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.779] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x84, wParam=0x0, lParam=0x18d035d) returned 0x1
[0281.779] SetCursor (hCursor=0x10003) returned 0x10003
[0281.779] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.779] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.779] _TrackMouseEvent (in: lpEventTrack=0x23df7d0 | out: lpEventTrack=0x23df7d0) returned 1
[0281.779] SendMessageW (hWnd=0x15004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0281.779] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0281.779] InvalidateRect (hWnd=0x15004e, lpRect=0x0, bErase=0) returned 1
[0281.779] GetKeyState (nVirtKey=1) returned 1
[0281.779] GetKeyState (nVirtKey=2) returned 0
[0281.779] GetKeyState (nVirtKey=4) returned 0
[0281.780] GetKeyState (nVirtKey=5) returned 0
[0281.780] GetKeyState (nVirtKey=6) returned 0
[0281.780] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.780] IsWindowUnicode (hWnd=0x15004e) returned 1
[0281.780] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.780] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.780] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.780] BeginPaint (in: hWnd=0x15004e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0281.780] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0281.780] CreateCompatibleDC (hdc=0x60100ce) returned 0x1a0107c1
[0281.780] SelectObject (hdc=0x1a0107c1, h=0x1e0507b9) returned 0x85000f
[0281.780] GdipCreateFromHDC (hdc=0x1a0107c1, graphics=0x53e300) returned 0x0
[0281.781] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0281.781] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0281.781] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0281.781] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.781] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0281.781] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0281.781] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0281.781] LocalFree (hMem=0x89eee8) returned 0x0
[0281.781] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.781] GdipCreateRegion (region=0x53e348) returned 0x0
[0281.781] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.781] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0281.781] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0281.781] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfad10dbd) returned 0x0
[0281.781] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.781] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0281.781] GetCurrentObject (hdc=0x1a0107c1, type=0x1) returned 0xb00017
[0281.782] GetCurrentObject (hdc=0x1a0107c1, type=0x2) returned 0x900010
[0281.782] GetCurrentObject (hdc=0x1a0107c1, type=0x7) returned 0x1e0507b9
[0281.782] GetCurrentObject (hdc=0x1a0107c1, type=0x6) returned 0x8a01c2
[0281.782] SaveDC (hdc=0x1a0107c1) returned 1
[0281.782] GetNearestColor (hdc=0x1a0107c1, color=0xf0f0f0) returned 0xf0f0f0
[0281.782] GetNearestColor (hdc=0x1a0107c1, color=0xa0a0a0) returned 0xa0a0a0
[0281.782] GetNearestColor (hdc=0x1a0107c1, color=0x696969) returned 0x696969
[0281.782] GetNearestColor (hdc=0x1a0107c1, color=0xa0a0a0) returned 0xa0a0a0
[0281.782] GetNearestColor (hdc=0x1a0107c1, color=0x0) returned 0x0
[0281.782] GetNearestColor (hdc=0x1a0107c1, color=0xffffff) returned 0xffffff
[0281.782] GetNearestColor (hdc=0x1a0107c1, color=0xe5e5e5) returned 0xe5e5e5
[0281.782] GetNearestColor (hdc=0x1a0107c1, color=0xd7d7d7) returned 0xd7d7d7
[0281.783] GetNearestColor (hdc=0x1a0107c1, color=0x0) returned 0x0
[0281.783] RestoreDC (hdc=0x1a0107c1, nSavedDC=-1) returned 1
[0281.783] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1a0107c1) returned 0x0
[0281.783] IsAppThemed () returned 0x1
[0281.783] GetThemeAppProperties () returned 0x3
[0281.783] GetThemeAppProperties () returned 0x3
[0281.783] IsAppThemed () returned 0x1
[0281.783] GetThemeAppProperties () returned 0x3
[0281.783] GetThemeAppProperties () returned 0x3
[0281.783] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0281.783] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x23dff4c | out: lpchText="OK", lprc=0x53e01c) returned 13
[0281.784] IsAppThemed () returned 0x1
[0281.784] GetThemeAppProperties () returned 0x3
[0281.784] GetThemeAppProperties () returned 0x3
[0281.784] IsAppThemed () returned 0x1
[0281.784] GetThemeAppProperties () returned 0x3
[0281.784] GetThemeAppProperties () returned 0x3
[0281.784] IsAppThemed () returned 0x1
[0281.784] GetThemeAppProperties () returned 0x3
[0281.784] GetThemeAppProperties () returned 0x3
[0281.784] IsAppThemed () returned 0x1
[0281.784] GetThemeAppProperties () returned 0x3
[0281.784] GetThemeAppProperties () returned 0x3
[0281.784] IsThemePartDefined () returned 0x1
[0281.784] IsAppThemed () returned 0x1
[0281.784] GetThemeAppProperties () returned 0x3
[0281.784] GetThemeAppProperties () returned 0x3
[0281.784] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0281.784] IsAppThemed () returned 0x1
[0281.785] GetThemeAppProperties () returned 0x3
[0281.785] GetThemeAppProperties () returned 0x3
[0281.785] IsAppThemed () returned 0x1
[0281.785] GetThemeAppProperties () returned 0x3
[0281.785] GetThemeAppProperties () returned 0x3
[0281.785] IsThemePartDefined () returned 0x1
[0281.785] GdipCreateRegion (region=0x53e064) returned 0x0
[0281.785] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.785] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0281.785] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.785] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0281.785] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.785] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.785] LocalFree (hMem=0x89ea88) returned 0x0
[0281.785] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.785] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0281.785] LocalFree (hMem=0x89ea88) returned 0x0
[0281.785] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.785] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0281.786] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0281.786] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0281.786] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.786] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0281.786] GetCurrentObject (hdc=0x1a0107c1, type=0x1) returned 0xb00017
[0281.786] GetCurrentObject (hdc=0x1a0107c1, type=0x2) returned 0x900010
[0281.786] GetCurrentObject (hdc=0x1a0107c1, type=0x7) returned 0x1e0507b9
[0281.786] GetCurrentObject (hdc=0x1a0107c1, type=0x6) returned 0x8a01c2
[0281.786] SaveDC (hdc=0x1a0107c1) returned 1
[0281.786] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2e040798
[0281.786] GetClipRgn (hdc=0x1a0107c1, hrgn=0x2e040798) returned 0
[0281.786] SelectClipRgn (hdc=0x1a0107c1, hrgn=0xb30407a1) returned 2
[0281.786] DeleteObject (ho=0x2e040798) returned 1
[0281.786] DeleteObject (ho=0xb30407a1) returned 1
[0281.786] OffsetViewportOrgEx (in: hdc=0x1a0107c1, x=0, y=0, lppt=0x23e05fc | out: lppt=0x23e05fc) returned 1
[0281.787] DrawThemeParentBackground () returned 0x0
[0281.789] GetWindowPlacement (in: hWnd=0x1d00ea, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0281.789] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0281.789] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.789] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.789] GetSystemMetrics (nIndex=42) returned 0
[0281.790] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.790] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0281.790] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0281.790] GetCurrentObject (hdc=0x1a0107c1, type=0x1) returned 0xb00017
[0281.790] GetCurrentObject (hdc=0x1a0107c1, type=0x2) returned 0x900010
[0281.790] GetCurrentObject (hdc=0x1a0107c1, type=0x7) returned 0x1e0507b9
[0281.790] GetCurrentObject (hdc=0x1a0107c1, type=0x6) returned 0x8a01c2
[0281.790] SaveDC (hdc=0x1a0107c1) returned 2
[0281.790] GetNearestColor (hdc=0x1a0107c1, color=0xf0f0f0) returned 0xf0f0f0
[0281.790] CreateSolidBrush (color=0xf0f0f0) returned 0x2010078d
[0281.790] FillRect (hDC=0x1a0107c1, lprc=0x53dac8, hbr=0x2010078d) returned 1
[0281.790] DeleteObject (ho=0x2010078d) returned 1
[0281.790] RestoreDC (hdc=0x1a0107c1, nSavedDC=-1) returned 1
[0281.790] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.791] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.791] GetSystemMetrics (nIndex=42) returned 0
[0281.791] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.791] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0281.791] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0281.791] GetCurrentObject (hdc=0x1a0107c1, type=0x1) returned 0xb00017
[0281.791] GetCurrentObject (hdc=0x1a0107c1, type=0x2) returned 0x900010
[0281.791] GetCurrentObject (hdc=0x1a0107c1, type=0x7) returned 0x1e0507b9
[0281.791] GetCurrentObject (hdc=0x1a0107c1, type=0x6) returned 0x8a01c2
[0281.791] SaveDC (hdc=0x1a0107c1) returned 2
[0281.791] GetNearestColor (hdc=0x1a0107c1, color=0xf0f0f0) returned 0xf0f0f0
[0281.791] CreateSolidBrush (color=0xf0f0f0) returned 0x2110078d
[0281.791] FillRect (hDC=0x1a0107c1, lprc=0x53da68, hbr=0x2110078d) returned 1
[0281.791] DeleteObject (ho=0x2110078d) returned 1
[0281.791] RestoreDC (hdc=0x1a0107c1, nSavedDC=-1) returned 1
[0281.792] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0281.792] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0281.792] GetSystemMetrics (nIndex=42) returned 0
[0281.792] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0281.792] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0281.792] RestoreDC (hdc=0x1a0107c1, nSavedDC=-1) returned 1
[0281.792] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1a0107c1) returned 0x0
[0281.792] IsAppThemed () returned 0x1
[0281.792] GetThemeAppProperties () returned 0x3
[0281.792] GetThemeAppProperties () returned 0x3
[0281.792] IsAppThemed () returned 0x1
[0281.792] GetThemeAppProperties () returned 0x3
[0281.792] GetThemeAppProperties () returned 0x3
[0281.792] IsThemePartDefined () returned 0x1
[0281.792] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0281.792] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.792] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0281.793] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0281.793] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0281.793] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0281.793] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0281.793] LocalFree (hMem=0x89ee08) returned 0x0
[0281.793] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0281.793] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0281.793] LocalFree (hMem=0x89ea88) returned 0x0
[0281.793] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0281.793] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0281.793] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0281.793] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0281.793] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.793] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0281.793] GetCurrentObject (hdc=0x1a0107c1, type=0x1) returned 0xb00017
[0281.793] GetCurrentObject (hdc=0x1a0107c1, type=0x2) returned 0x900010
[0281.793] GetCurrentObject (hdc=0x1a0107c1, type=0x7) returned 0x1e0507b9
[0281.793] GetCurrentObject (hdc=0x1a0107c1, type=0x6) returned 0x8a01c2
[0281.794] SaveDC (hdc=0x1a0107c1) returned 1
[0281.794] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb40407a1
[0281.794] GetClipRgn (hdc=0x1a0107c1, hrgn=0xb40407a1) returned 0
[0281.794] SelectClipRgn (hdc=0x1a0107c1, hrgn=0x30040798) returned 2
[0281.794] DeleteObject (ho=0xb40407a1) returned 1
[0281.794] DeleteObject (ho=0x30040798) returned 1
[0281.794] OffsetViewportOrgEx (in: hdc=0x1a0107c1, x=0, y=0, lppt=0x23e0e84 | out: lppt=0x23e0e84) returned 1
[0281.794] IsAppThemed () returned 0x1
[0281.794] GetThemeAppProperties () returned 0x3
[0281.794] GetThemeAppProperties () returned 0x3
[0281.794] DrawThemeBackground () returned 0x0
[0281.794] RestoreDC (hdc=0x1a0107c1, nSavedDC=-1) returned 1
[0281.794] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1a0107c1) returned 0x0
[0281.794] GdipCreateRegion (region=0x53dfec) returned 0x0
[0281.794] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0281.795] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0281.795] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0281.795] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0281.795] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0281.795] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0281.795] LocalFree (hMem=0x89eee8) returned 0x0
[0281.795] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0281.795] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0281.795] LocalFree (hMem=0x89ee08) returned 0x0
[0281.795] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0281.795] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0281.795] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0281.795] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0281.795] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0281.795] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0281.795] GetCurrentObject (hdc=0x1a0107c1, type=0x1) returned 0xb00017
[0281.795] GetCurrentObject (hdc=0x1a0107c1, type=0x2) returned 0x900010
[0281.796] GetCurrentObject (hdc=0x1a0107c1, type=0x7) returned 0x1e0507b9
[0281.796] GetCurrentObject (hdc=0x1a0107c1, type=0x6) returned 0x8a01c2
[0281.796] SaveDC (hdc=0x1a0107c1) returned 1
[0281.796] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x31040798
[0281.796] GetClipRgn (hdc=0x1a0107c1, hrgn=0x31040798) returned 0
[0281.796] SelectClipRgn (hdc=0x1a0107c1, hrgn=0xb50407a1) returned 2
[0281.796] DeleteObject (ho=0x31040798) returned 1
[0281.796] DeleteObject (ho=0xb50407a1) returned 1
[0281.796] OffsetViewportOrgEx (in: hdc=0x1a0107c1, x=0, y=0, lppt=0x23e1158 | out: lppt=0x23e1158) returned 1
[0281.796] IsAppThemed () returned 0x1
[0281.796] GetThemeAppProperties () returned 0x3
[0281.796] GetThemeAppProperties () returned 0x3
[0281.796] GetThemeBackgroundContentRect () returned 0x0
[0281.796] RestoreDC (hdc=0x1a0107c1, nSavedDC=-1) returned 1
[0281.796] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1a0107c1) returned 0x0
[0281.797] IsAppThemed () returned 0x1
[0281.797] GetThemeAppProperties () returned 0x3
[0281.797] GetThemeAppProperties () returned 0x3
[0281.797] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0281.797] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0281.797] GetCurrentObject (hdc=0x1a0107c1, type=0x1) returned 0xb00017
[0281.797] GetCurrentObject (hdc=0x1a0107c1, type=0x2) returned 0x900010
[0281.797] GetCurrentObject (hdc=0x1a0107c1, type=0x7) returned 0x1e0507b9
[0281.797] GetCurrentObject (hdc=0x1a0107c1, type=0x6) returned 0x8a01c2
[0281.797] SaveDC (hdc=0x1a0107c1) returned 1
[0281.797] GetTextAlign (hdc=0x1a0107c1) returned 0x0
[0281.797] GetTextColor (hdc=0x1a0107c1) returned 0x0
[0281.797] GetCurrentObject (hdc=0x1a0107c1, type=0x6) returned 0x8a01c2
[0281.797] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0281.797] SelectObject (hdc=0x1a0107c1, h=0x730a066d) returned 0x8a01c2
[0281.798] GetBkMode (hdc=0x1a0107c1) returned 2
[0281.798] SetBkMode (hdc=0x1a0107c1, mode=1) returned 2
[0281.798] DrawTextExW (in: hdc=0x1a0107c1, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x23e14f8 | out: lpchText="OK", lprc=0x53df84) returned 13
[0281.798] DrawTextExW (in: hdc=0x1a0107c1, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x23e14f8 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0281.798] RestoreDC (hdc=0x1a0107c1, nSavedDC=-1) returned 1
[0281.798] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1a0107c1) returned 0x0
[0281.798] GetFocus () returned 0x190122
[0281.799] IsAppThemed () returned 0x1
[0281.799] GetThemeAppProperties () returned 0x3
[0281.799] GetThemeAppProperties () returned 0x3
[0281.799] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0281.799] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x1a0107c1, x1=0, y1=0, rop=0xcc0020) returned 1
[0281.799] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1a0107c1) returned 0x0
[0281.799] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0281.799] SelectObject (hdc=0x1a0107c1, h=0x85000f) returned 0x1e0507b9
[0281.799] DeleteDC (hdc=0x1a0107c1) returned 1
[0281.799] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0281.799] EndPaint (hWnd=0x15004e, lpPaint=0x53e2e4) returned 1
[0281.800] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.800] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.800] WaitMessage () returned 1
[0281.841] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.841] IsWindowUnicode (hWnd=0x102dc) returned 1
[0281.841] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.841] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.841] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.842] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.843] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.843] WaitMessage () returned 1
[0281.843] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.844] IsWindowUnicode (hWnd=0x102dc) returned 1
[0281.844] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.844] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.844] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.846] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.846] IsWindowUnicode (hWnd=0x102dc) returned 1
[0281.846] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.846] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.846] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.847] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.847] IsWindowUnicode (hWnd=0x102dc) returned 1
[0281.847] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.847] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.847] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.847] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.848] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.848] WaitMessage () returned 1
[0281.848] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.848] IsWindowUnicode (hWnd=0x102dc) returned 1
[0281.848] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.848] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.848] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.855] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.856] IsWindowUnicode (hWnd=0x102dc) returned 1
[0281.856] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.856] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.856] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.856] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.857] IsWindowUnicode (hWnd=0x102dc) returned 1
[0281.857] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.857] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.857] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.857] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.857] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.857] WaitMessage () returned 1
[0281.860] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.860] IsWindowUnicode (hWnd=0x102dc) returned 1
[0281.860] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.860] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.860] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.861] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.862] IsWindowUnicode (hWnd=0x102dc) returned 1
[0281.862] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.862] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.862] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.862] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.862] IsWindowUnicode (hWnd=0x102dc) returned 1
[0281.862] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.862] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.862] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.863] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.864] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.864] WaitMessage () returned 1
[0281.901] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.901] IsWindowUnicode (hWnd=0x15004e) returned 1
[0281.901] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.901] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.901] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.901] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.901] IsWindowUnicode (hWnd=0x15004e) returned 1
[0281.901] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.902] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.902] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.902] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x2a1, wParam=0x0, lParam=0x4001c) returned 0x0
[0281.902] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.902] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.902] WaitMessage () returned 1
[0281.931] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.931] IsWindowUnicode (hWnd=0x202d0) returned 1
[0281.931] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.931] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.931] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0281.932] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.932] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0281.932] WaitMessage () returned 1
[0281.989] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.989] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x84, wParam=0x0, lParam=0x18d035d) returned 0x1
[0281.989] IsWindowUnicode (hWnd=0x15004e) returned 1
[0281.989] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0281.990] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x84, wParam=0x0, lParam=0x18d035d) returned 0x1
[0281.990] GetDlgItem (hDlg=0x1d00ea, nIDDlgItem=0) returned 0x0
[0281.991] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x210, wParam=0x201, lParam=0x10013e) returned 0x0
[0281.991] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x21, wParam=0x1d00ea, lParam=0x2010001) returned 0x1
[0281.991] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x21, wParam=0x1d00ea, lParam=0x2010001) returned 0x1
[0281.991] SetCursor (hCursor=0x10003) returned 0x10003
[0281.991] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0281.991] DispatchMessageW (lpMsg=0x53e8a0)
[0281.991] GetKeyState (nVirtKey=1) returned -128
[0281.991] GetKeyState (nVirtKey=2) returned 0
[0281.991] GetKeyState (nVirtKey=4) returned 0
[0281.991] GetKeyState (nVirtKey=5) returned 0
[0281.992] GetKeyState (nVirtKey=6) returned 0
[0281.992] IsWindowVisible (hWnd=0x15004e) returned 1
[0281.992] IsWindowEnabled (hWnd=0x15004e) returned 1
[0281.992] SetFocus (hWnd=0x15004e) returned 0x190122
[0281.992] GetFocus () returned 0x15004e
[0281.992] IsChild (hWndParent=0x1d00ea, hWnd=0x15004e) returned 1
[0281.992] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x8, wParam=0x15004e, lParam=0x0) returned 0x1
[0281.993] SendMessageW (hWnd=0x190122, Msg=0x2111, wParam=0x2000122, lParam=0x190122) returned 0x0
[0281.994] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0281.995] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0281.996] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0281.996] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0281.996] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0281.997] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0282.000] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0282.000] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x7, wParam=0x190122, lParam=0x0) returned 0x0
[0282.001] GetStockObject (i=5) returned 0x900015
[0282.001] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0282.001] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0xd, wParam=0x3, lParam=0x89e7a8) returned 0x2
[0282.001] GetDlgItem (hDlg=0x1d00ea, nIDDlgItem=1376334) returned 0x15004e
[0282.001] SendMessageW (hWnd=0x15004e, Msg=0x202b, wParam=0x15004e, lParam=0x53de74) returned 0x0
[0282.001] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x202b, wParam=0x15004e, lParam=0x53de74) returned 0x0
[0282.001] InvalidateRect (hWnd=0x15004e, lpRect=0x0, bErase=0) returned 1
[0282.005] GetFocus () returned 0x15004e
[0282.005] GetFocus () returned 0x15004e
[0282.005] GetFocus () returned 0x15004e
[0282.005] GetKeyState (nVirtKey=1) returned -128
[0282.005] GetKeyState (nVirtKey=2) returned 0
[0282.005] GetKeyState (nVirtKey=4) returned 0
[0282.005] GetKeyState (nVirtKey=5) returned 0
[0282.005] GetKeyState (nVirtKey=6) returned 0
[0282.006] GetCapture () returned 0x0
[0282.006] SetCapture (hWnd=0x15004e) returned 0x0
[0282.006] GetKeyState (nVirtKey=1) returned -128
[0282.006] GetKeyState (nVirtKey=2) returned 0
[0282.006] GetKeyState (nVirtKey=4) returned 0
[0282.006] GetKeyState (nVirtKey=5) returned 0
[0282.006] GetKeyState (nVirtKey=6) returned 0
[0282.006] NotifyWinEvent (event=0x800a, hwnd=0x15004e, idObject=-4, idChild=0)
[0282.006] InvalidateRect (hWnd=0x15004e, lpRect=0x53e4c8, bErase=0) returned 1
[0282.006] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0282.006] IsWindowUnicode (hWnd=0x15004e) returned 1
[0282.006] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0282.007] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0282.007] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0282.007] MapWindowPoints (in: hWndFrom=0x15004e, hWndTo=0x0, lpPoints=0x23e1790, cPoints=0x1 | out: lpPoints=0x23e1790) returned 25756481
[0282.007] NotifyWinEvent (event=0x800a, hwnd=0x15004e, idObject=-4, idChild=0)
[0282.007] InvalidateRect (hWnd=0x15004e, lpRect=0x53e468, bErase=0) returned 1
[0282.007] UpdateWindow (hWnd=0x15004e) returned 1
[0282.007] BeginPaint (in: hWnd=0x15004e, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x60100ce
[0282.007] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0282.007] CreateCompatibleDC (hdc=0x60100ce) returned 0xa10107cb
[0282.007] SelectObject (hdc=0xa10107cb, h=0x1e0507b9) returned 0x85000f
[0282.007] GdipCreateFromHDC (hdc=0xa10107cb, graphics=0x53df98) returned 0x0
[0282.008] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0282.008] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0282.008] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0282.008] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0282.008] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0282.008] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0282.008] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0282.008] LocalFree (hMem=0x89ec80) returned 0x0
[0282.008] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0282.008] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0282.008] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0282.008] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0282.009] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0282.009] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfacf0dbd) returned 0x0
[0282.009] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0282.009] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0282.009] GetCurrentObject (hdc=0xa10107cb, type=0x1) returned 0xb00017
[0282.009] GetCurrentObject (hdc=0xa10107cb, type=0x2) returned 0x900010
[0282.009] GetCurrentObject (hdc=0xa10107cb, type=0x7) returned 0x1e0507b9
[0282.009] GetCurrentObject (hdc=0xa10107cb, type=0x6) returned 0x8a01c2
[0282.009] SaveDC (hdc=0xa10107cb) returned 1
[0282.009] GetNearestColor (hdc=0xa10107cb, color=0xf0f0f0) returned 0xf0f0f0
[0282.009] GetNearestColor (hdc=0xa10107cb, color=0xa0a0a0) returned 0xa0a0a0
[0282.009] GetNearestColor (hdc=0xa10107cb, color=0x696969) returned 0x696969
[0282.009] GetNearestColor (hdc=0xa10107cb, color=0xa0a0a0) returned 0xa0a0a0
[0282.010] GetNearestColor (hdc=0xa10107cb, color=0x0) returned 0x0
[0282.010] GetNearestColor (hdc=0xa10107cb, color=0xffffff) returned 0xffffff
[0282.010] GetNearestColor (hdc=0xa10107cb, color=0xe5e5e5) returned 0xe5e5e5
[0282.010] GetNearestColor (hdc=0xa10107cb, color=0xd7d7d7) returned 0xd7d7d7
[0282.010] GetNearestColor (hdc=0xa10107cb, color=0x0) returned 0x0
[0282.010] RestoreDC (hdc=0xa10107cb, nSavedDC=-1) returned 1
[0282.010] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107cb) returned 0x0
[0282.010] IsAppThemed () returned 0x1
[0282.010] GetThemeAppProperties () returned 0x3
[0282.010] GetThemeAppProperties () returned 0x3
[0282.010] IsAppThemed () returned 0x1
[0282.010] GetThemeAppProperties () returned 0x3
[0282.010] GetThemeAppProperties () returned 0x3
[0282.011] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x23e1f04 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0282.011] IsAppThemed () returned 0x1
[0282.011] GetThemeAppProperties () returned 0x3
[0282.011] GetThemeAppProperties () returned 0x3
[0282.011] IsAppThemed () returned 0x1
[0282.011] GetThemeAppProperties () returned 0x3
[0282.011] GetThemeAppProperties () returned 0x3
[0282.011] IsAppThemed () returned 0x1
[0282.011] GetThemeAppProperties () returned 0x3
[0282.011] GetThemeAppProperties () returned 0x3
[0282.011] IsAppThemed () returned 0x1
[0282.011] GetThemeAppProperties () returned 0x3
[0282.011] GetThemeAppProperties () returned 0x3
[0282.011] IsThemePartDefined () returned 0x1
[0282.011] IsAppThemed () returned 0x1
[0282.012] GetThemeAppProperties () returned 0x3
[0282.012] GetThemeAppProperties () returned 0x3
[0282.012] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0282.012] IsAppThemed () returned 0x1
[0282.012] GetThemeAppProperties () returned 0x3
[0282.012] GetThemeAppProperties () returned 0x3
[0282.012] IsAppThemed () returned 0x1
[0282.012] GetThemeAppProperties () returned 0x3
[0282.012] GetThemeAppProperties () returned 0x3
[0282.012] IsThemePartDefined () returned 0x1
[0282.012] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0282.012] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0282.012] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0282.012] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0282.012] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0282.012] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0282.012] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0282.012] LocalFree (hMem=0x89ec80) returned 0x0
[0282.012] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0282.012] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0282.013] LocalFree (hMem=0x89eee8) returned 0x0
[0282.013] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0282.013] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0282.013] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0282.013] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0282.013] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0282.013] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0282.013] GetCurrentObject (hdc=0xa10107cb, type=0x1) returned 0xb00017
[0282.013] GetCurrentObject (hdc=0xa10107cb, type=0x2) returned 0x900010
[0282.013] GetCurrentObject (hdc=0xa10107cb, type=0x7) returned 0x1e0507b9
[0282.013] GetCurrentObject (hdc=0xa10107cb, type=0x6) returned 0x8a01c2
[0282.013] SaveDC (hdc=0xa10107cb) returned 1
[0282.013] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb60407a1
[0282.013] GetClipRgn (hdc=0xa10107cb, hrgn=0xb60407a1) returned 0
[0282.014] SelectClipRgn (hdc=0xa10107cb, hrgn=0x35040798) returned 2
[0282.014] DeleteObject (ho=0xb60407a1) returned 1
[0282.014] DeleteObject (ho=0x35040798) returned 1
[0282.014] OffsetViewportOrgEx (in: hdc=0xa10107cb, x=0, y=0, lppt=0x23e25b4 | out: lppt=0x23e25b4) returned 1
[0282.014] DrawThemeParentBackground ()
[0282.014] GetWindowPlacement (in: hWnd=0x1d00ea, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0282.014] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0282.014] GetWindowTextLengthW (hWnd=0x1d00ea)
[0282.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0282.014] GetSystemMetrics (nIndex=42) returned 0
[0282.014] GetWindowTextW (hWnd=0x1d00ea, lpString=0x53d878, nMaxCount=11)
[0282.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0282.015] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0282.015] GetCurrentObject (hdc=0xa10107cb, type=0x1) returned 0xb00017
[0282.015] GetCurrentObject (hdc=0xa10107cb, type=0x2) returned 0x900010
[0282.015] GetCurrentObject (hdc=0xa10107cb, type=0x7) returned 0x1e0507b9
[0282.015] GetCurrentObject (hdc=0xa10107cb, type=0x6) returned 0x8a01c2
[0282.015] SaveDC (hdc=0xa10107cb) returned 2
[0282.015] GetNearestColor (hdc=0xa10107cb, color=0xf0f0f0) returned 0xf0f0f0
[0282.015] CreateSolidBrush (color=0xf0f0f0) returned 0x2210078d
[0282.015] FillRect (hDC=0xa10107cb, lprc=0x53d760, hbr=0x2210078d) returned 1
[0282.015] DeleteObject (ho=0x2210078d) returned 1
[0282.015] RestoreDC (hdc=0xa10107cb, nSavedDC=-1) returned 1
[0282.016] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0282.016] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0282.016] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0282.016] GetCurrentObject (hdc=0xa10107cb, type=0x1) returned 0xb00017
[0282.016] GetCurrentObject (hdc=0xa10107cb, type=0x2) returned 0x900010
[0282.016] GetCurrentObject (hdc=0xa10107cb, type=0x7) returned 0x1e0507b9
[0282.016] GetCurrentObject (hdc=0xa10107cb, type=0x6) returned 0x8a01c2
[0282.016] SaveDC (hdc=0xa10107cb) returned 2
[0282.016] GetNearestColor (hdc=0xa10107cb, color=0xf0f0f0) returned 0xf0f0f0
[0282.016] CreateSolidBrush (color=0xf0f0f0) returned 0x2310078d
[0282.016] FillRect (hDC=0xa10107cb, lprc=0x53d700, hbr=0x2310078d) returned 1
[0282.017] DeleteObject (ho=0x2310078d) returned 1
[0282.017] RestoreDC (hdc=0xa10107cb, nSavedDC=-1) returned 1
[0282.017] GetWindowTextLengthW (hWnd=0x1d00ea)
[0282.017] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0282.017] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0282.018] RestoreDC (hdc=0xa10107cb, nSavedDC=-1) returned 1
[0282.018] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107cb) returned 0x0
[0282.018] IsAppThemed () returned 0x1
[0282.018] GetThemeAppProperties () returned 0x3
[0282.018] GetThemeAppProperties () returned 0x3
[0282.018] IsAppThemed () returned 0x1
[0282.018] GetThemeAppProperties () returned 0x3
[0282.018] GetThemeAppProperties () returned 0x3
[0282.018] IsThemePartDefined () returned 0x1
[0282.019] GdipCreateRegion (region=0x53dc80) returned 0x0
[0282.019] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0282.019] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0282.019] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0282.019] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0282.019] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0282.019] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0282.019] LocalFree (hMem=0x89eee8) returned 0x0
[0282.019] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0282.019] LocalFree (hMem=0x89ea88) returned 0x0
[0282.019] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0282.019] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0282.019] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0282.019] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0282.020] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0282.020] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0282.020] IsAppThemed () returned 0x1
[0282.020] GetThemeAppProperties () returned 0x3
[0282.020] GetThemeAppProperties () returned 0x3
[0282.020] DrawThemeBackground () returned 0x0
[0282.020] RestoreDC (hdc=0xa10107cb, nSavedDC=-1) returned 1
[0282.020] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107cb) returned 0x0
[0282.021] GdipCreateRegion (region=0x53dc84) returned 0x0
[0282.021] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0282.021] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0282.021] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0282.021] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0282.021] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0282.021] LocalFree (hMem=0x89ea88) returned 0x0
[0282.021] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0282.021] LocalFree (hMem=0x89ea88) returned 0x0
[0282.022] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0282.022] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0282.022] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0282.022] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0282.022] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0282.022] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0282.022] IsAppThemed () returned 0x1
[0282.023] GetThemeAppProperties () returned 0x3
[0282.023] GetThemeAppProperties () returned 0x3
[0282.023] GetThemeBackgroundContentRect () returned 0x0
[0282.023] RestoreDC (hdc=0xa10107cb, nSavedDC=-1) returned 1
[0282.023] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107cb) returned 0x0
[0282.023] IsAppThemed () returned 0x1
[0282.023] GetThemeAppProperties () returned 0x3
[0282.023] GetThemeAppProperties () returned 0x3
[0282.023] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0282.023] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0282.023] GetCurrentObject (hdc=0xa10107cb, type=0x1) returned 0xb00017
[0282.023] GetCurrentObject (hdc=0xa10107cb, type=0x2) returned 0x900010
[0282.023] GetCurrentObject (hdc=0xa10107cb, type=0x7) returned 0x1e0507b9
[0282.023] GetCurrentObject (hdc=0xa10107cb, type=0x6) returned 0x8a01c2
[0282.023] SaveDC (hdc=0xa10107cb) returned 1
[0282.024] GetTextAlign (hdc=0xa10107cb) returned 0x0
[0282.024] GetTextColor (hdc=0xa10107cb) returned 0x0
[0282.024] GetCurrentObject (hdc=0xa10107cb, type=0x6) returned 0x8a01c2
[0282.024] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0282.024] SelectObject (hdc=0xa10107cb, h=0x730a066d) returned 0x8a01c2
[0282.024] GetBkMode (hdc=0xa10107cb) returned 2
[0282.024] SetBkMode (hdc=0xa10107cb, mode=1) returned 2
[0282.024] DrawTextExW (in: hdc=0xa10107cb, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x23e34b0 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0282.024] DrawTextExW (in: hdc=0xa10107cb, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x23e34b0 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0282.025] RestoreDC (hdc=0xa10107cb, nSavedDC=-1) returned 1
[0282.025] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107cb) returned 0x0
[0282.025] GetFocus () returned 0x15004e
[0282.025] IsAppThemed () returned 0x1
[0282.025] GetThemeAppProperties () returned 0x3
[0282.025] GetThemeAppProperties () returned 0x3
[0282.025] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0282.025] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0xa10107cb, x1=0, y1=0, rop=0xcc0020) returned 1
[0282.025] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa10107cb) returned 0x0
[0282.025] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0282.025] SelectObject (hdc=0xa10107cb, h=0x85000f) returned 0x1e0507b9
[0282.025] DeleteDC (hdc=0xa10107cb) returned 1
[0282.026] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0282.026] EndPaint (hWnd=0x15004e, lpPaint=0x53df7c) returned 1
[0282.026] MapWindowPoints (in: hWndFrom=0x15004e, hWndTo=0x0, lpPoints=0x23e35ac, cPoints=0x1 | out: lpPoints=0x23e35ac) returned 25756481
[0282.026] WindowFromPoint (Point=0x35d) returned 0x15004e
[0282.026] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x84, wParam=0x0, lParam=0x18d035d) returned 0x1
[0282.026] NotifyWinEvent (event=0x800a, hwnd=0x15004e, idObject=-4, idChild=0)
[0282.026] NotifyWinEvent (event=0x800c, hwnd=0x15004e, idObject=-4, idChild=0)
[0282.026] GetWindowTextLengthW (hWnd=0x190122) returned 0
[0282.026] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0282.026] GetSystemMetrics (nIndex=42) returned 0
[0282.026] GetWindowTextW (in: hWnd=0x190122, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0282.026] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0282.027] SendMessageW (hWnd=0x1d00ea, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0282.027] GetCapture () returned 0x15004e
[0282.027] ReleaseCapture () returned 1
[0282.027] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0282.027] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0282.027] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x84, wParam=0x0, lParam=0x18d035d) returned 0x1
[0282.028] IsWindow (hWnd=0x70036) returned 1
[0282.028] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0282.028] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0282.028] IsWindow (hWnd=0x70036) returned 1
[0282.028] SetActiveWindow (hWnd=0x70036) returned 0x1d00ea
[0282.029] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0282.031] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0282.031] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0282.031] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0282.032] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0282.032] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0282.032] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0282.032] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1d00ea) returned 0x1
[0282.035] GetFocus () returned 0x15004e
[0282.036] SetFocus (hWnd=0x202c6) returned 0x15004e
[0282.036] GetFocus () returned 0x202c6
[0282.036] IsChild (hWndParent=0x1d00ea, hWnd=0x202c6) returned 0
[0282.036] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0282.037] GetCapture () returned 0x0
[0282.037] InvalidateRect (hWnd=0x15004e, lpRect=0x0, bErase=0) returned 1
[0282.038] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0282.039] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0282.041] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0282.041] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0282.041] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0282.041] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0282.042] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0282.042] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x15004e, lParam=0x0) returned 0x0
[0282.042] GetStockObject (i=5) returned 0x900015
[0282.042] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0282.042] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8db4b0) returned 0x7
[0282.042] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0282.043] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0282.043] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0282.043] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0282.048] IsWindow (hWnd=0x202c6) returned 1
[0282.048] SetFocus (hWnd=0x202c6) returned 0x202c6
[0282.048] GetWindowLongW (hWnd=0x1d00ea, nIndex=-8) returned 458806
[0282.048] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0282.048] GetCurrentThreadId () returned 0x11d0
[0282.048] IsWindow (hWnd=0x70036) returned 1
[0282.048] IsWindow (hWnd=0x70036) returned 1
[0282.048] IsWindowVisible (hWnd=0x70036) returned 1
[0282.048] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0282.048] GetFocus () returned 0x202c6
[0282.048] IsChild (hWndParent=0x1d00ea, hWnd=0x202c6) returned 0
[0282.049] ShowWindow (hWnd=0x1d00ea, nCmdShow=0) returned 1
[0282.049] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0282.049] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0282.051] GetWindowPlacement (in: hWnd=0x1d00ea, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0282.051] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0282.051] GetClientRect (in: hWnd=0x1d00ea, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0282.051] GetWindowRect (in: hWnd=0x1d00ea, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0282.052] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0282.052] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0282.062] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0282.062] GetWindowLongW (hWnd=0x1d00ea, nIndex=-20) returned 327937
[0282.062] DestroyWindow (hWnd=0x1d00ea) returned 1
[0282.063] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0282.063] GetWindowTextLengthW (hWnd=0x1d00ea) returned 10
[0282.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0282.064] GetSystemMetrics (nIndex=42) returned 0
[0282.064] GetWindowTextW (in: hWnd=0x1d00ea, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0282.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0282.064] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0282.064] SendMessageW (hWnd=0x190122, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0282.064] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0282.064] SendMessageW (hWnd=0x190122, Msg=0xb0, wParam=0x23cb564, lParam=0x53e518) returned 0x0
[0282.064] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xb0, wParam=0x23cb564, lParam=0x53e518) returned 0x0
[0282.064] GetWindowTextLengthW (hWnd=0x190122) returned 0
[0282.064] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0282.064] GetSystemMetrics (nIndex=42) returned 0
[0282.065] GetWindowTextW (in: hWnd=0x190122, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0282.065] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0282.065] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0282.065] GetWindowThreadProcessId (in: hWnd=0x1602ca, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0282.065] GetWindow (hWnd=0x1602ca, uCmd=0x5) returned 0x0
[0282.065] GetWindowLongW (hWnd=0x1602ca, nIndex=-20) returned 65792
[0282.065] DestroyWindow (hWnd=0x1602ca) returned 1
[0282.065] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1602ca, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0282.065] GetWindowTextLengthW (hWnd=0x1602ca) returned 25
[0282.065] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1602ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0282.065] GetSystemMetrics (nIndex=42) returned 0
[0282.066] GetWindowTextW (in: hWnd=0x1602ca, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0282.066] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1602ca, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0282.066] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1602ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0282.066] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1602ca, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0282.120] GetWindowTextLengthW (hWnd=0x1901e2) returned 16
[0282.120] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0282.120] GetSystemMetrics (nIndex=42) returned 0
[0282.120] GetWindowTextW (in: hWnd=0x1901e2, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0282.120] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0282.120] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0282.120] InvalidateRect (hWnd=0x15004e, lpRect=0x0, bErase=0) returned 1
[0282.120] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0282.120] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0282.121] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x190122, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0282.122] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1901e2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0282.123] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x15004e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0282.125] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x37013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0282.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1d00ea, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0282.128] GetProcessWindowStation () returned 0x13c
[0282.128] GetActiveWindow () returned 0x70036
[0282.128] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0282.128] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0282.128] GetCurrentThreadId () returned 0x11d0
[0282.129] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf463e, lParam=0x0) returned 1
[0282.129] IsWindowVisible (hWnd=0x70036) returned 1
[0282.129] IsWindowEnabled (hWnd=0x70036) returned 1
[0282.129] IsWindowVisible (hWnd=0x602b6) returned 0
[0282.129] IsWindowVisible (hWnd=0x901f8) returned 0
[0282.129] IsWindowVisible (hWnd=0x202d0) returned 0
[0282.129] IsWindowVisible (hWnd=0x202d4) returned 0
[0282.129] GetActiveWindow () returned 0x70036
[0282.130] GetFocus () returned 0x202c6
[0282.130] IsWindow (hWnd=0x70036) returned 1
[0282.130] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0282.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0282.139] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0282.139] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0282.141] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0282.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1e00ea) returned 0x1
[0282.160] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0282.160] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0282.166] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x38013e, lParam=0x0) returned 0x0
[0282.166] GetCapture () returned 0x0
[0282.166] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0282.167] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0282.169] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0282.169] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0282.173] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x8b010786
[0282.173] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0282.173] CreateCompatibleDC (hdc=0x8b010786) returned 0x2e0107c4
[0282.174] SelectObject (hdc=0x2e0107c4, h=0x1e0507b9) returned 0x85000f
[0282.174] GdipCreateFromHDC (hdc=0x2e0107c4, graphics=0x53e108) returned 0x0
[0282.174] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0282.174] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0282.174] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0282.174] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0282.174] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0282.174] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0282.174] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0282.174] LocalFree (hMem=0x89ea88) returned 0x0
[0282.174] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0282.175] GdipCreateRegion (region=0x53e150) returned 0x0
[0282.175] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0282.175] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0282.175] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0282.175] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfacd0dbd) returned 0x0
[0282.175] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0282.175] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0282.175] GetCurrentObject (hdc=0x2e0107c4, type=0x1) returned 0xb00017
[0282.175] GetCurrentObject (hdc=0x2e0107c4, type=0x2) returned 0x900010
[0282.175] GetCurrentObject (hdc=0x2e0107c4, type=0x7) returned 0x1e0507b9
[0282.175] GetCurrentObject (hdc=0x2e0107c4, type=0x6) returned 0x8a01c2
[0282.175] SaveDC (hdc=0x2e0107c4) returned 1
[0282.175] GetNearestColor (hdc=0x2e0107c4, color=0xff) returned 0xff
[0282.176] GetNearestColor (hdc=0x2e0107c4, color=0x55) returned 0x55
[0282.176] GetNearestColor (hdc=0x2e0107c4, color=0x0) returned 0x0
[0282.176] GetNearestColor (hdc=0x2e0107c4, color=0x55) returned 0x55
[0282.176] GetNearestColor (hdc=0x2e0107c4, color=0x0) returned 0x0
[0282.176] GetNearestColor (hdc=0x2e0107c4, color=0x8080ff) returned 0x8080ff
[0282.176] GetNearestColor (hdc=0x2e0107c4, color=0x7373e5) returned 0x7373e5
[0282.176] GetNearestColor (hdc=0x2e0107c4, color=0xe5) returned 0xe5
[0282.176] GetNearestColor (hdc=0x2e0107c4, color=0x0) returned 0x0
[0282.176] RestoreDC (hdc=0x2e0107c4, nSavedDC=-1) returned 1
[0282.176] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2e0107c4) returned 0x0
[0282.176] IsAppThemed () returned 0x1
[0282.176] GetThemeAppProperties () returned 0x3
[0282.176] GetThemeAppProperties () returned 0x3
[0282.176] IsAppThemed () returned 0x1
[0282.177] GetThemeAppProperties () returned 0x3
[0282.177] GetThemeAppProperties () returned 0x3
[0282.177] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0282.177] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x23e48a4 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0282.177] IsAppThemed () returned 0x1
[0282.177] GetThemeAppProperties () returned 0x3
[0282.177] GetThemeAppProperties () returned 0x3
[0282.177] IsAppThemed () returned 0x1
[0282.184] GetThemeAppProperties () returned 0x3
[0282.184] GetThemeAppProperties () returned 0x3
[0282.184] GetFocus () returned 0x38013e
[0282.184] IsAppThemed () returned 0x1
[0282.184] GetThemeAppProperties () returned 0x3
[0282.184] GetThemeAppProperties () returned 0x3
[0282.184] IsAppThemed () returned 0x1
[0282.184] GetThemeAppProperties () returned 0x3
[0282.184] GetThemeAppProperties () returned 0x3
[0282.184] IsThemePartDefined () returned 0x1
[0282.184] IsAppThemed () returned 0x1
[0282.184] GetThemeAppProperties () returned 0x3
[0282.184] GetThemeAppProperties () returned 0x3
[0282.184] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0282.184] IsAppThemed () returned 0x1
[0282.185] GetThemeAppProperties () returned 0x3
[0282.185] GetThemeAppProperties () returned 0x3
[0282.185] IsAppThemed () returned 0x1
[0282.185] GetThemeAppProperties () returned 0x3
[0282.185] GetThemeAppProperties () returned 0x3
[0282.185] IsThemePartDefined () returned 0x1
[0282.185] GdipCreateRegion (region=0x53de78) returned 0x0
[0282.185] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0282.185] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0282.185] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0282.185] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0282.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0282.185] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0282.185] LocalFree (hMem=0x89ee08) returned 0x0
[0282.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0282.185] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0282.185] LocalFree (hMem=0x89ee40) returned 0x0
[0282.186] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0282.186] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0282.186] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0282.186] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0282.186] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0282.186] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0282.186] GetCurrentObject (hdc=0x2e0107c4, type=0x1) returned 0xb00017
[0282.186] GetCurrentObject (hdc=0x2e0107c4, type=0x2) returned 0x900010
[0282.186] GetCurrentObject (hdc=0x2e0107c4, type=0x7) returned 0x1e0507b9
[0282.186] GetCurrentObject (hdc=0x2e0107c4, type=0x6) returned 0x8a01c2
[0282.186] SaveDC (hdc=0x2e0107c4) returned 1
[0282.186] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x38040798
[0282.186] GetClipRgn (hdc=0x2e0107c4, hrgn=0x38040798) returned 0
[0282.186] SelectClipRgn (hdc=0x2e0107c4, hrgn=0xbf0407a1) returned 2
[0282.187] DeleteObject (ho=0x38040798) returned 1
[0282.187] DeleteObject (ho=0xbf0407a1) returned 1
[0282.187] OffsetViewportOrgEx (in: hdc=0x2e0107c4, x=0, y=0, lppt=0x23e4f54 | out: lppt=0x23e4f54) returned 1
[0282.187] DrawThemeParentBackground () returned 0x0
[0282.187] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0282.187] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0282.187] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0282.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0282.187] GetSystemMetrics (nIndex=42) returned 0
[0282.187] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0282.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0282.187] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0282.187] GetCurrentObject (hdc=0x2e0107c4, type=0x1) returned 0xb00017
[0282.187] GetCurrentObject (hdc=0x2e0107c4, type=0x2) returned 0x900010
[0282.188] GetCurrentObject (hdc=0x2e0107c4, type=0x7) returned 0x1e0507b9
[0282.188] GetCurrentObject (hdc=0x2e0107c4, type=0x6) returned 0x8a01c2
[0282.188] SaveDC (hdc=0x2e0107c4) returned 2
[0282.188] GetNearestColor (hdc=0x2e0107c4, color=0xff) returned 0xff
[0282.188] CreateSolidBrush (color=0xff) returned 0x2410078d
[0282.188] FillRect (hDC=0x2e0107c4, lprc=0x53d8d8, hbr=0x2410078d) returned 1
[0282.188] DeleteObject (ho=0x2410078d) returned 1
[0282.188] RestoreDC (hdc=0x2e0107c4, nSavedDC=-1) returned 1
[0282.188] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0282.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0282.188] GetSystemMetrics (nIndex=42) returned 0
[0282.188] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0282.188] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0282.189] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0282.189] GetCurrentObject (hdc=0x2e0107c4, type=0x1) returned 0xb00017
[0282.189] GetCurrentObject (hdc=0x2e0107c4, type=0x2) returned 0x900010
[0282.189] GetCurrentObject (hdc=0x2e0107c4, type=0x7) returned 0x1e0507b9
[0282.189] GetCurrentObject (hdc=0x2e0107c4, type=0x6) returned 0x8a01c2
[0282.189] SaveDC (hdc=0x2e0107c4) returned 2
[0282.189] GetNearestColor (hdc=0x2e0107c4, color=0xff) returned 0xff
[0282.189] CreateSolidBrush (color=0xff) returned 0x2510078d
[0282.189] FillRect (hDC=0x2e0107c4, lprc=0x53d878, hbr=0x2510078d) returned 1
[0282.189] DeleteObject (ho=0x2510078d) returned 1
[0282.189] RestoreDC (hdc=0x2e0107c4, nSavedDC=-1) returned 1
[0282.189] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0282.189] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0282.189] GetSystemMetrics (nIndex=42) returned 0
[0282.190] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0282.190] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0282.190] RestoreDC (hdc=0x2e0107c4, nSavedDC=-1) returned 1
[0282.190] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2e0107c4) returned 0x0
[0282.190] IsAppThemed () returned 0x1
[0282.190] GetThemeAppProperties () returned 0x3
[0282.190] GetThemeAppProperties () returned 0x3
[0282.190] IsAppThemed () returned 0x1
[0282.190] GetThemeAppProperties () returned 0x3
[0282.190] GetThemeAppProperties () returned 0x3
[0282.190] IsThemePartDefined () returned 0x1
[0282.190] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0282.190] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0282.190] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0282.191] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0282.191] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0282.191] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0282.191] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0282.191] LocalFree (hMem=0x89ec80) returned 0x0
[0282.191] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0282.191] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0282.191] LocalFree (hMem=0x89ea88) returned 0x0
[0282.191] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0282.191] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0282.191] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0282.191] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0282.191] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0282.191] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0282.191] GetCurrentObject (hdc=0x2e0107c4, type=0x1) returned 0xb00017
[0282.191] GetCurrentObject (hdc=0x2e0107c4, type=0x2) returned 0x900010
[0282.192] GetCurrentObject (hdc=0x2e0107c4, type=0x7) returned 0x1e0507b9
[0282.192] GetCurrentObject (hdc=0x2e0107c4, type=0x6) returned 0x8a01c2
[0282.192] SaveDC (hdc=0x2e0107c4) returned 1
[0282.192] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc00407a1
[0282.192] GetClipRgn (hdc=0x2e0107c4, hrgn=0xc00407a1) returned 0
[0282.192] SelectClipRgn (hdc=0x2e0107c4, hrgn=0x3a040798) returned 2
[0282.192] DeleteObject (ho=0xc00407a1) returned 1
[0282.192] DeleteObject (ho=0x3a040798) returned 1
[0282.192] OffsetViewportOrgEx (in: hdc=0x2e0107c4, x=0, y=0, lppt=0x23e57b8 | out: lppt=0x23e57b8) returned 1
[0282.192] IsAppThemed () returned 0x1
[0282.192] GetThemeAppProperties () returned 0x3
[0282.192] GetThemeAppProperties () returned 0x3
[0282.192] DrawThemeBackground () returned 0x0
[0282.192] RestoreDC (hdc=0x2e0107c4, nSavedDC=-1) returned 1
[0282.193] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2e0107c4) returned 0x0
[0282.193] GdipCreateRegion (region=0x53de00) returned 0x0
[0282.193] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0282.193] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0282.193] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0282.193] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0282.208] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0282.208] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0282.208] LocalFree (hMem=0x89ee08) returned 0x0
[0282.225] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0282.225] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0282.225] LocalFree (hMem=0x89ea88) returned 0x0
[0282.225] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0282.225] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0282.225] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0282.225] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0282.225] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0282.225] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0282.225] GetCurrentObject (hdc=0x2e0107c4, type=0x1) returned 0xb00017
[0282.225] GetCurrentObject (hdc=0x2e0107c4, type=0x2) returned 0x900010
[0282.226] GetCurrentObject (hdc=0x2e0107c4, type=0x7) returned 0x1e0507b9
[0282.226] GetCurrentObject (hdc=0x2e0107c4, type=0x6) returned 0x8a01c2
[0282.226] SaveDC (hdc=0x2e0107c4) returned 1
[0282.226] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b040798
[0282.226] GetClipRgn (hdc=0x2e0107c4, hrgn=0x3b040798) returned 0
[0282.226] SelectClipRgn (hdc=0x2e0107c4, hrgn=0xc10407a1) returned 2
[0282.226] DeleteObject (ho=0x3b040798) returned 1
[0282.226] DeleteObject (ho=0xc10407a1) returned 1
[0282.226] OffsetViewportOrgEx (in: hdc=0x2e0107c4, x=0, y=0, lppt=0x23e5a8c | out: lppt=0x23e5a8c) returned 1
[0282.226] IsAppThemed () returned 0x1
[0282.226] GetThemeAppProperties () returned 0x3
[0282.226] GetThemeAppProperties () returned 0x3
[0282.227] GetThemeBackgroundContentRect () returned 0x0
[0282.227] RestoreDC (hdc=0x2e0107c4, nSavedDC=-1) returned 1
[0282.227] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2e0107c4) returned 0x0
[0282.227] IsAppThemed () returned 0x1
[0282.227] GetThemeAppProperties () returned 0x3
[0282.227] GetThemeAppProperties () returned 0x3
[0282.227] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0282.227] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0282.227] GetCurrentObject (hdc=0x2e0107c4, type=0x1) returned 0xb00017
[0282.227] GetCurrentObject (hdc=0x2e0107c4, type=0x2) returned 0x900010
[0282.227] GetCurrentObject (hdc=0x2e0107c4, type=0x7) returned 0x1e0507b9
[0282.227] GetCurrentObject (hdc=0x2e0107c4, type=0x6) returned 0x8a01c2
[0282.227] SaveDC (hdc=0x2e0107c4) returned 1
[0282.228] GetTextAlign (hdc=0x2e0107c4) returned 0x0
[0282.228] GetTextColor (hdc=0x2e0107c4) returned 0x0
[0282.228] GetCurrentObject (hdc=0x2e0107c4, type=0x6) returned 0x8a01c2
[0282.228] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0282.228] SelectObject (hdc=0x2e0107c4, h=0x450a0799) returned 0x8a01c2
[0282.228] GetBkMode (hdc=0x2e0107c4) returned 2
[0282.228] SetBkMode (hdc=0x2e0107c4, mode=1) returned 2
[0282.228] DrawTextExW (in: hdc=0x2e0107c4, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x23e5e2c | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0282.229] DrawTextExW (in: hdc=0x2e0107c4, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x23e5e2c | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0282.229] RestoreDC (hdc=0x2e0107c4, nSavedDC=-1) returned 1
[0282.229] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2e0107c4) returned 0x0
[0282.229] GetFocus () returned 0x38013e
[0282.229] IsAppThemed () returned 0x1
[0282.229] GetThemeAppProperties () returned 0x3
[0282.229] GetThemeAppProperties () returned 0x3
[0282.229] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0282.229] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x2e0107c4, x1=0, y1=0, rop=0xcc0020) returned 1
[0282.230] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2e0107c4) returned 0x0
[0282.230] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0282.230] SelectObject (hdc=0x2e0107c4, h=0x85000f) returned 0x1e0507b9
[0282.230] DeleteDC (hdc=0x2e0107c4) returned 1
[0282.230] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0282.230] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0282.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0282.514] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0282.515] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1e00ea) returned 0x1
[0282.518] GetFocus () returned 0x1e00ea
[0282.518] GetAncestor (hwnd=0x1e00ea, gaFlags=0x1) returned 0x10010
[0282.518] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0282.518] SetFocus (hWnd=0x202c6) returned 0x0
[0282.521] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0282.523] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0282.523] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0282.524] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0282.524] GetFocus () returned 0x70036
[0282.524] SetFocus (hWnd=0x202c6) returned 0x0
[0282.530] IsWindow (hWnd=0x70036) returned 1
[0282.530] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0282.531] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0282.531] IsWindow (hWnd=0x70036) returned 1
[0282.531] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0282.531] IsWindow (hWnd=0x202c6) returned 1
[0282.531] SetFocus (hWnd=0x202c6) returned 0x70036
[0282.531] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0282.532] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0282.534] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0282.536] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0282.536] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0282.536] GetStockObject (i=5) returned 0x900015
[0282.536] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0282.536] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8db540) returned 0x7
[0282.536] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0282.536] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0282.536] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0282.537] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0282.548] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0282.548] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0282.548] GetFocus () returned 0x202c6
[0282.548] GetCapture () returned 0x0
[0282.548] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.549] IsWindowUnicode (hWnd=0x202c6) returned 1
[0282.549] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.549] TranslateMessage (lpMsg=0x53eef8) returned 0
[0282.549] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0282.549] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.550] IsWindowUnicode (hWnd=0x202c6) returned 1
[0282.550] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.550] TranslateMessage (lpMsg=0x53eef8) returned 0
[0282.550] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0282.550] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0282.550] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0282.551] CreateCompatibleDC (hdc=0xf0105ee) returned 0xcc0107b6
[0282.551] SelectObject (hdc=0xcc0107b6, h=0x1e0507b9) returned 0x85000f
[0282.551] GdipCreateFromHDC (hdc=0xcc0107b6, graphics=0x53e958) returned 0x0
[0282.551] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0282.551] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0282.551] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0282.551] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0282.551] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0282.552] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0282.552] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0282.552] LocalFree (hMem=0x89ea88) returned 0x0
[0282.552] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0282.552] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0282.552] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0282.552] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0282.552] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0282.552] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfacb0dbd) returned 0x0
[0282.552] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0282.561] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0282.561] GetCurrentObject (hdc=0xcc0107b6, type=0x1) returned 0xb00017
[0282.561] GetCurrentObject (hdc=0xcc0107b6, type=0x2) returned 0x900010
[0282.561] GetCurrentObject (hdc=0xcc0107b6, type=0x7) returned 0x1e0507b9
[0282.561] GetCurrentObject (hdc=0xcc0107b6, type=0x6) returned 0x8a01c2
[0282.561] SaveDC (hdc=0xcc0107b6) returned 1
[0282.561] GetNearestColor (hdc=0xcc0107b6, color=0xff) returned 0xff
[0282.561] GetNearestColor (hdc=0xcc0107b6, color=0x55) returned 0x55
[0282.561] GetNearestColor (hdc=0xcc0107b6, color=0x0) returned 0x0
[0282.562] GetNearestColor (hdc=0xcc0107b6, color=0x55) returned 0x55
[0282.562] GetNearestColor (hdc=0xcc0107b6, color=0x0) returned 0x0
[0282.562] GetNearestColor (hdc=0xcc0107b6, color=0x8080ff) returned 0x8080ff
[0282.562] GetNearestColor (hdc=0xcc0107b6, color=0x7373e5) returned 0x7373e5
[0282.562] GetNearestColor (hdc=0xcc0107b6, color=0xe5) returned 0xe5
[0282.562] GetNearestColor (hdc=0xcc0107b6, color=0x0) returned 0x0
[0282.562] RestoreDC (hdc=0xcc0107b6, nSavedDC=-1) returned 1
[0282.562] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcc0107b6) returned 0x0
[0282.562] IsAppThemed () returned 0x1
[0282.562] GetThemeAppProperties () returned 0x3
[0282.562] GetThemeAppProperties () returned 0x3
[0282.562] IsAppThemed () returned 0x1
[0282.563] GetThemeAppProperties () returned 0x3
[0282.563] GetThemeAppProperties () returned 0x3
[0282.563] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x23e6688 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0282.563] IsAppThemed () returned 0x1
[0282.563] GetThemeAppProperties () returned 0x3
[0282.563] GetThemeAppProperties () returned 0x3
[0282.563] IsAppThemed () returned 0x1
[0282.563] GetThemeAppProperties () returned 0x3
[0282.563] GetThemeAppProperties () returned 0x3
[0282.563] GetFocus () returned 0x202c6
[0282.563] IsAppThemed () returned 0x1
[0282.564] GetThemeAppProperties () returned 0x3
[0282.564] GetThemeAppProperties () returned 0x3
[0282.564] IsAppThemed () returned 0x1
[0282.564] GetThemeAppProperties () returned 0x3
[0282.564] GetThemeAppProperties () returned 0x3
[0282.564] IsThemePartDefined () returned 0x1
[0282.564] IsAppThemed () returned 0x1
[0282.564] GetThemeAppProperties () returned 0x3
[0282.564] GetThemeAppProperties () returned 0x3
[0282.564] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0282.564] IsAppThemed () returned 0x1
[0282.564] GetThemeAppProperties () returned 0x3
[0282.564] GetThemeAppProperties () returned 0x3
[0282.564] IsAppThemed () returned 0x1
[0282.564] GetThemeAppProperties () returned 0x3
[0282.564] GetThemeAppProperties () returned 0x3
[0282.564] IsThemePartDefined () returned 0x1
[0282.564] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0282.565] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0282.565] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0282.565] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0282.565] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0282.565] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0282.565] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0282.565] LocalFree (hMem=0x89ec80) returned 0x0
[0282.565] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0282.565] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0282.565] LocalFree (hMem=0x89eee8) returned 0x0
[0282.565] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0282.565] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0282.565] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0282.565] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0282.565] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0282.566] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0282.566] GetCurrentObject (hdc=0xcc0107b6, type=0x1) returned 0xb00017
[0282.566] GetCurrentObject (hdc=0xcc0107b6, type=0x2) returned 0x900010
[0282.566] GetCurrentObject (hdc=0xcc0107b6, type=0x7) returned 0x1e0507b9
[0282.566] GetCurrentObject (hdc=0xcc0107b6, type=0x6) returned 0x8a01c2
[0282.566] SaveDC (hdc=0xcc0107b6) returned 1
[0282.566] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2404053e
[0282.566] GetClipRgn (hdc=0xcc0107b6, hrgn=0x2404053e) returned 0
[0282.566] SelectClipRgn (hdc=0xcc0107b6, hrgn=0xcf0407a1) returned 2
[0282.566] DeleteObject (ho=0x2404053e) returned 1
[0282.566] DeleteObject (ho=0xcf0407a1) returned 1
[0282.566] OffsetViewportOrgEx (in: hdc=0xcc0107b6, x=0, y=0, lppt=0x23e6d38 | out: lppt=0x23e6d38) returned 1
[0282.566] DrawThemeParentBackground () returned 0x0
[0282.567] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0282.567] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0282.567] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0282.567] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0282.567] GetSystemMetrics (nIndex=42) returned 0
[0282.567] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0282.567] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0282.567] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0282.567] GetCurrentObject (hdc=0xcc0107b6, type=0x1) returned 0xb00017
[0282.567] GetCurrentObject (hdc=0xcc0107b6, type=0x2) returned 0x900010
[0282.567] GetCurrentObject (hdc=0xcc0107b6, type=0x7) returned 0x1e0507b9
[0282.567] GetCurrentObject (hdc=0xcc0107b6, type=0x6) returned 0x8a01c2
[0282.567] SaveDC (hdc=0xcc0107b6) returned 2
[0282.568] GetNearestColor (hdc=0xcc0107b6, color=0xff) returned 0xff
[0282.568] CreateSolidBrush (color=0xff) returned 0x2710078d
[0282.568] FillRect (hDC=0xcc0107b6, lprc=0x53e128, hbr=0x2710078d) returned 1
[0282.568] DeleteObject (ho=0x2710078d) returned 1
[0282.568] RestoreDC (hdc=0xcc0107b6, nSavedDC=-1) returned 1
[0282.569] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0282.569] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0282.569] GetSystemMetrics (nIndex=42) returned 0
[0282.569] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0282.569] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0282.569] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0282.569] GetCurrentObject (hdc=0xcc0107b6, type=0x1) returned 0xb00017
[0282.569] GetCurrentObject (hdc=0xcc0107b6, type=0x2) returned 0x900010
[0282.569] GetCurrentObject (hdc=0xcc0107b6, type=0x7) returned 0x1e0507b9
[0282.569] GetCurrentObject (hdc=0xcc0107b6, type=0x6) returned 0x8a01c2
[0282.570] SaveDC (hdc=0xcc0107b6) returned 2
[0282.570] GetNearestColor (hdc=0xcc0107b6, color=0xff) returned 0xff
[0282.570] CreateSolidBrush (color=0xff) returned 0x2810078d
[0282.570] FillRect (hDC=0xcc0107b6, lprc=0x53e0c8, hbr=0x2810078d) returned 1
[0282.570] DeleteObject (ho=0x2810078d) returned 1
[0282.570] RestoreDC (hdc=0xcc0107b6, nSavedDC=-1) returned 1
[0282.570] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0282.570] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0282.570] GetSystemMetrics (nIndex=42) returned 0
[0282.570] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0282.570] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0282.571] RestoreDC (hdc=0xcc0107b6, nSavedDC=-1) returned 1
[0282.571] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcc0107b6) returned 0x0
[0282.571] IsAppThemed () returned 0x1
[0282.571] GetThemeAppProperties () returned 0x3
[0282.571] GetThemeAppProperties () returned 0x3
[0282.571] IsAppThemed () returned 0x1
[0282.571] GetThemeAppProperties () returned 0x3
[0282.571] GetThemeAppProperties () returned 0x3
[0282.571] IsThemePartDefined () returned 0x1
[0282.571] GdipCreateRegion (region=0x53e64c) returned 0x0
[0282.571] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0282.571] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0282.571] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0282.571] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0282.571] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0282.571] LocalFree (hMem=0x89ee40) returned 0x0
[0282.571] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0282.572] LocalFree (hMem=0x89ea88) returned 0x0
[0282.572] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0282.572] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0282.572] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0282.572] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0282.572] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0282.572] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0282.572] GetCurrentObject (hdc=0xcc0107b6, type=0x1) returned 0xb00017
[0282.572] GetCurrentObject (hdc=0xcc0107b6, type=0x2) returned 0x900010
[0282.572] GetCurrentObject (hdc=0xcc0107b6, type=0x7) returned 0x1e0507b9
[0282.572] GetCurrentObject (hdc=0xcc0107b6, type=0x6) returned 0x8a01c2
[0282.572] SaveDC (hdc=0xcc0107b6) returned 1
[0282.572] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd00407a1
[0282.572] GetClipRgn (hdc=0xcc0107b6, hrgn=0xd00407a1) returned 0
[0282.572] SelectClipRgn (hdc=0xcc0107b6, hrgn=0x2604053e) returned 2
[0282.572] DeleteObject (ho=0xd00407a1) returned 1
[0282.572] DeleteObject (ho=0x2604053e) returned 1
[0282.573] OffsetViewportOrgEx (in: hdc=0xcc0107b6, x=0, y=0, lppt=0x23e759c | out: lppt=0x23e759c) returned 1
[0282.573] IsAppThemed () returned 0x1
[0282.573] GetThemeAppProperties () returned 0x3
[0282.573] GetThemeAppProperties () returned 0x3
[0282.573] DrawThemeBackground () returned 0x0
[0282.573] RestoreDC (hdc=0xcc0107b6, nSavedDC=-1) returned 1
[0282.573] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcc0107b6) returned 0x0
[0282.573] GdipCreateRegion (region=0x53e650) returned 0x0
[0282.573] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0282.573] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0282.573] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0282.573] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0282.573] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0282.573] LocalFree (hMem=0x89ea88) returned 0x0
[0282.573] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0282.573] LocalFree (hMem=0x89ec80) returned 0x0
[0282.573] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0282.574] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0282.574] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0282.574] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0282.574] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0282.574] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0282.574] GetCurrentObject (hdc=0xcc0107b6, type=0x1) returned 0xb00017
[0282.574] GetCurrentObject (hdc=0xcc0107b6, type=0x2) returned 0x900010
[0282.574] GetCurrentObject (hdc=0xcc0107b6, type=0x7) returned 0x1e0507b9
[0282.574] GetCurrentObject (hdc=0xcc0107b6, type=0x6) returned 0x8a01c2
[0282.574] SaveDC (hdc=0xcc0107b6) returned 1
[0282.574] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2704053e
[0282.574] GetClipRgn (hdc=0xcc0107b6, hrgn=0x2704053e) returned 0
[0282.574] SelectClipRgn (hdc=0xcc0107b6, hrgn=0xd10407a1) returned 2
[0282.574] DeleteObject (ho=0x2704053e) returned 1
[0282.574] DeleteObject (ho=0xd10407a1) returned 1
[0282.574] OffsetViewportOrgEx (in: hdc=0xcc0107b6, x=0, y=0, lppt=0x23e7870 | out: lppt=0x23e7870) returned 1
[0282.574] IsAppThemed () returned 0x1
[0282.575] GetThemeAppProperties () returned 0x3
[0282.575] GetThemeAppProperties () returned 0x3
[0282.575] GetThemeBackgroundContentRect () returned 0x0
[0282.575] RestoreDC (hdc=0xcc0107b6, nSavedDC=-1) returned 1
[0282.575] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcc0107b6) returned 0x0
[0282.575] IsAppThemed () returned 0x1
[0282.575] GetThemeAppProperties () returned 0x3
[0282.575] GetThemeAppProperties () returned 0x3
[0282.575] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0282.575] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0282.575] GetCurrentObject (hdc=0xcc0107b6, type=0x1) returned 0xb00017
[0282.575] GetCurrentObject (hdc=0xcc0107b6, type=0x2) returned 0x900010
[0282.575] GetCurrentObject (hdc=0xcc0107b6, type=0x7) returned 0x1e0507b9
[0282.575] GetCurrentObject (hdc=0xcc0107b6, type=0x6) returned 0x8a01c2
[0282.575] SaveDC (hdc=0xcc0107b6) returned 1
[0282.575] GetTextAlign (hdc=0xcc0107b6) returned 0x0
[0282.575] GetTextColor (hdc=0xcc0107b6) returned 0x0
[0282.575] GetCurrentObject (hdc=0xcc0107b6, type=0x6) returned 0x8a01c2
[0282.576] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0282.576] SelectObject (hdc=0xcc0107b6, h=0x450a0799) returned 0x8a01c2
[0282.576] GetBkMode (hdc=0xcc0107b6) returned 2
[0282.576] SetBkMode (hdc=0xcc0107b6, mode=1) returned 2
[0282.576] DrawTextExW (in: hdc=0xcc0107b6, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x23e7c10 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0282.576] DrawTextExW (in: hdc=0xcc0107b6, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x23e7c10 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0282.577] RestoreDC (hdc=0xcc0107b6, nSavedDC=-1) returned 1
[0282.577] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcc0107b6) returned 0x0
[0282.577] GetFocus () returned 0x202c6
[0282.577] IsAppThemed () returned 0x1
[0282.577] GetThemeAppProperties () returned 0x3
[0282.577] GetThemeAppProperties () returned 0x3
[0282.577] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0282.577] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xcc0107b6, x1=0, y1=0, rop=0xcc0020) returned 1
[0282.577] GdipReleaseDC (graphics=0x5d92c30, hdc=0xcc0107b6) returned 0x0
[0282.577] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0282.577] SelectObject (hdc=0xcc0107b6, h=0x85000f) returned 0x1e0507b9
[0282.577] DeleteDC (hdc=0xcc0107b6) returned 1
[0282.578] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0282.578] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0282.578] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0282.578] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0282.578] WaitMessage () returned 1
[0282.582] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.582] IsWindowUnicode (hWnd=0x102dc) returned 1
[0282.582] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.582] TranslateMessage (lpMsg=0x53eef8) returned 0
[0282.582] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0282.588] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0282.588] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0282.588] WaitMessage () returned 1
[0282.605] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.605] IsWindowUnicode (hWnd=0x102dc) returned 1
[0282.605] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.605] TranslateMessage (lpMsg=0x53eef8) returned 0
[0282.605] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0282.606] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0282.606] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0282.606] WaitMessage () returned 1
[0282.612] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.612] IsWindowUnicode (hWnd=0x102dc) returned 1
[0282.612] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.612] TranslateMessage (lpMsg=0x53eef8) returned 0
[0282.612] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0282.624] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.624] IsWindowUnicode (hWnd=0x102dc) returned 1
[0282.624] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.624] TranslateMessage (lpMsg=0x53eef8) returned 0
[0282.624] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0282.624] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.624] IsWindowUnicode (hWnd=0x102dc) returned 1
[0282.624] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.624] TranslateMessage (lpMsg=0x53eef8) returned 0
[0282.624] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0282.625] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.625] IsWindowUnicode (hWnd=0x102dc) returned 1
[0282.625] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.625] TranslateMessage (lpMsg=0x53eef8) returned 0
[0282.625] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0282.625] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.625] IsWindowUnicode (hWnd=0x102dc) returned 1
[0282.625] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.625] TranslateMessage (lpMsg=0x53eef8) returned 0
[0282.625] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0282.626] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.626] IsWindowUnicode (hWnd=0x102dc) returned 1
[0282.626] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.626] TranslateMessage (lpMsg=0x53eef8) returned 0
[0282.626] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0282.626] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0282.626] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0282.626] WaitMessage () returned 1
[0282.634] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.634] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.634] TranslateMessage (lpMsg=0x53eef8) returned 0
[0282.634] DispatchMessageA (lpMsg=0x53eef8) returned 0x7e93
[0282.634] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0282.634] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0282.634] WaitMessage () returned 1
[0282.834] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.834] IsWindowUnicode (hWnd=0x202d0) returned 1
[0282.834] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0282.834] TranslateMessage (lpMsg=0x53eef8) returned 0
[0282.834] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0282.835] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0282.835] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0282.835] WaitMessage () returned 1
[0283.647] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0283.647] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0283.647] TranslateMessage (lpMsg=0x53eef8) returned 0
[0283.647] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0283.647] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0283.648] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0283.648] WaitMessage () returned 1
[0284.274] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0284.274] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a3023a) returned 0x1
[0284.274] IsWindowUnicode (hWnd=0x202c6) returned 1
[0284.274] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0284.274] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a3023a) returned 0x1
[0284.274] SetCursor (hCursor=0x10003) returned 0x10003
[0284.275] TranslateMessage (lpMsg=0x53eef8) returned 0
[0284.275] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0284.275] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0284.275] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0284.275] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0284.275] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0284.275] GetKeyState (nVirtKey=1) returned 1
[0284.275] GetKeyState (nVirtKey=2) returned 0
[0284.275] GetKeyState (nVirtKey=4) returned 0
[0284.275] GetKeyState (nVirtKey=5) returned 0
[0284.275] GetKeyState (nVirtKey=6) returned 0
[0284.275] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0284.275] IsWindowUnicode (hWnd=0x202c6) returned 1
[0284.275] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0284.275] TranslateMessage (lpMsg=0x53eef8) returned 0
[0284.276] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0284.276] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0284.276] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0284.276] CreateCompatibleDC (hdc=0xf0105ee) returned 0x2c0107b3
[0284.276] SelectObject (hdc=0x2c0107b3, h=0x1e0507b9) returned 0x85000f
[0284.276] GdipCreateFromHDC (hdc=0x2c0107b3, graphics=0x53e958) returned 0x0
[0284.276] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0284.276] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0284.276] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0284.277] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0284.277] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0284.277] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.277] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0284.277] LocalFree (hMem=0x89ea88) returned 0x0
[0284.277] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0284.277] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0284.277] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.277] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0284.277] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0284.277] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfac90dbd) returned 0x0
[0284.277] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.278] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0284.278] GetCurrentObject (hdc=0x2c0107b3, type=0x1) returned 0xb00017
[0284.278] GetCurrentObject (hdc=0x2c0107b3, type=0x2) returned 0x900010
[0284.278] GetCurrentObject (hdc=0x2c0107b3, type=0x7) returned 0x1e0507b9
[0284.278] GetCurrentObject (hdc=0x2c0107b3, type=0x6) returned 0x8a01c2
[0284.278] SaveDC (hdc=0x2c0107b3) returned 1
[0284.278] GetNearestColor (hdc=0x2c0107b3, color=0xff) returned 0xff
[0284.278] GetNearestColor (hdc=0x2c0107b3, color=0x55) returned 0x55
[0284.278] GetNearestColor (hdc=0x2c0107b3, color=0x0) returned 0x0
[0284.278] GetNearestColor (hdc=0x2c0107b3, color=0x55) returned 0x55
[0284.278] GetNearestColor (hdc=0x2c0107b3, color=0x0) returned 0x0
[0284.279] GetNearestColor (hdc=0x2c0107b3, color=0x8080ff) returned 0x8080ff
[0284.279] GetNearestColor (hdc=0x2c0107b3, color=0x7373e5) returned 0x7373e5
[0284.279] GetNearestColor (hdc=0x2c0107b3, color=0xe5) returned 0xe5
[0284.279] GetNearestColor (hdc=0x2c0107b3, color=0x0) returned 0x0
[0284.279] RestoreDC (hdc=0x2c0107b3, nSavedDC=-1) returned 1
[0284.279] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c0107b3) returned 0x0
[0284.279] IsAppThemed () returned 0x1
[0284.279] GetThemeAppProperties () returned 0x3
[0284.279] GetThemeAppProperties () returned 0x3
[0284.279] IsAppThemed () returned 0x1
[0284.280] GetThemeAppProperties () returned 0x3
[0284.280] GetThemeAppProperties () returned 0x3
[0284.280] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x23e8514 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0284.280] IsAppThemed () returned 0x1
[0284.280] GetThemeAppProperties () returned 0x3
[0284.280] GetThemeAppProperties () returned 0x3
[0284.280] IsAppThemed () returned 0x1
[0284.280] GetThemeAppProperties () returned 0x3
[0284.280] GetThemeAppProperties () returned 0x3
[0284.280] IsAppThemed () returned 0x1
[0284.280] GetThemeAppProperties () returned 0x3
[0284.280] GetThemeAppProperties () returned 0x3
[0284.280] IsAppThemed () returned 0x1
[0284.281] GetThemeAppProperties () returned 0x3
[0284.281] GetThemeAppProperties () returned 0x3
[0284.281] IsThemePartDefined () returned 0x1
[0284.281] IsAppThemed () returned 0x1
[0284.281] GetThemeAppProperties () returned 0x3
[0284.281] GetThemeAppProperties () returned 0x3
[0284.281] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0284.281] IsAppThemed () returned 0x1
[0284.281] GetThemeAppProperties () returned 0x3
[0284.281] GetThemeAppProperties () returned 0x3
[0284.281] IsAppThemed () returned 0x1
[0284.281] GetThemeAppProperties () returned 0x3
[0284.281] GetThemeAppProperties () returned 0x3
[0284.281] IsThemePartDefined () returned 0x1
[0284.281] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0284.281] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.281] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0284.281] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0284.281] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0284.282] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.282] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.282] LocalFree (hMem=0x89ea88) returned 0x0
[0284.282] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0284.282] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0284.282] LocalFree (hMem=0x89ec80) returned 0x0
[0284.282] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0284.282] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0284.282] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0284.282] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0284.282] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.282] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0284.282] GetCurrentObject (hdc=0x2c0107b3, type=0x1) returned 0xb00017
[0284.282] GetCurrentObject (hdc=0x2c0107b3, type=0x2) returned 0x900010
[0284.283] GetCurrentObject (hdc=0x2c0107b3, type=0x7) returned 0x1e0507b9
[0284.283] GetCurrentObject (hdc=0x2c0107b3, type=0x6) returned 0x8a01c2
[0284.283] SaveDC (hdc=0x2c0107b3) returned 1
[0284.283] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd20407a1
[0284.283] GetClipRgn (hdc=0x2c0107b3, hrgn=0xd20407a1) returned 0
[0284.283] SelectClipRgn (hdc=0x2c0107b3, hrgn=0x2b04053e) returned 2
[0284.283] DeleteObject (ho=0xd20407a1) returned 1
[0284.283] DeleteObject (ho=0x2b04053e) returned 1
[0284.283] OffsetViewportOrgEx (in: hdc=0x2c0107b3, x=0, y=0, lppt=0x23e8bc4 | out: lppt=0x23e8bc4) returned 1
[0284.283] DrawThemeParentBackground () returned 0x0
[0284.283] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0284.283] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0284.284] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0284.284] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0284.284] GetSystemMetrics (nIndex=42) returned 0
[0284.284] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0284.284] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0284.284] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0284.284] GetCurrentObject (hdc=0x2c0107b3, type=0x1) returned 0xb00017
[0284.284] GetCurrentObject (hdc=0x2c0107b3, type=0x2) returned 0x900010
[0284.284] GetCurrentObject (hdc=0x2c0107b3, type=0x7) returned 0x1e0507b9
[0284.284] GetCurrentObject (hdc=0x2c0107b3, type=0x6) returned 0x8a01c2
[0284.284] SaveDC (hdc=0x2c0107b3) returned 2
[0284.284] GetNearestColor (hdc=0x2c0107b3, color=0xff) returned 0xff
[0284.284] CreateSolidBrush (color=0xff) returned 0x2910078d
[0284.284] FillRect (hDC=0x2c0107b3, lprc=0x53e120, hbr=0x2910078d) returned 1
[0284.284] DeleteObject (ho=0x2910078d) returned 1
[0284.284] RestoreDC (hdc=0x2c0107b3, nSavedDC=-1) returned 1
[0284.285] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0284.285] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0284.285] GetSystemMetrics (nIndex=42) returned 0
[0284.285] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0284.285] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0284.285] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0284.285] GetCurrentObject (hdc=0x2c0107b3, type=0x1) returned 0xb00017
[0284.285] GetCurrentObject (hdc=0x2c0107b3, type=0x2) returned 0x900010
[0284.285] GetCurrentObject (hdc=0x2c0107b3, type=0x7) returned 0x1e0507b9
[0284.285] GetCurrentObject (hdc=0x2c0107b3, type=0x6) returned 0x8a01c2
[0284.285] SaveDC (hdc=0x2c0107b3) returned 2
[0284.285] GetNearestColor (hdc=0x2c0107b3, color=0xff) returned 0xff
[0284.285] CreateSolidBrush (color=0xff) returned 0x2a10078d
[0284.285] FillRect (hDC=0x2c0107b3, lprc=0x53e0c0, hbr=0x2a10078d) returned 1
[0284.286] DeleteObject (ho=0x2a10078d) returned 1
[0284.286] RestoreDC (hdc=0x2c0107b3, nSavedDC=-1) returned 1
[0284.286] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0284.286] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0284.286] GetSystemMetrics (nIndex=42) returned 0
[0284.286] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0284.286] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0284.286] RestoreDC (hdc=0x2c0107b3, nSavedDC=-1) returned 1
[0284.286] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c0107b3) returned 0x0
[0284.286] IsAppThemed () returned 0x1
[0284.286] GetThemeAppProperties () returned 0x3
[0284.286] GetThemeAppProperties () returned 0x3
[0284.286] IsAppThemed () returned 0x1
[0284.287] GetThemeAppProperties () returned 0x3
[0284.287] GetThemeAppProperties () returned 0x3
[0284.287] IsThemePartDefined () returned 0x1
[0284.287] GdipCreateRegion (region=0x53e640) returned 0x0
[0284.287] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.287] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0284.287] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0284.287] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0284.287] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0284.287] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0284.287] LocalFree (hMem=0x89ee08) returned 0x0
[0284.287] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0284.287] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0284.287] LocalFree (hMem=0x89ec80) returned 0x0
[0284.287] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0284.287] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0284.288] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0284.288] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0284.288] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.288] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0284.288] GetCurrentObject (hdc=0x2c0107b3, type=0x1) returned 0xb00017
[0284.288] GetCurrentObject (hdc=0x2c0107b3, type=0x2) returned 0x900010
[0284.288] GetCurrentObject (hdc=0x2c0107b3, type=0x7) returned 0x1e0507b9
[0284.288] GetCurrentObject (hdc=0x2c0107b3, type=0x6) returned 0x8a01c2
[0284.288] SaveDC (hdc=0x2c0107b3) returned 1
[0284.288] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2c04053e
[0284.288] GetClipRgn (hdc=0x2c0107b3, hrgn=0x2c04053e) returned 0
[0284.288] SelectClipRgn (hdc=0x2c0107b3, hrgn=0xd40407a1) returned 2
[0284.288] DeleteObject (ho=0x2c04053e) returned 1
[0284.288] DeleteObject (ho=0xd40407a1) returned 1
[0284.289] OffsetViewportOrgEx (in: hdc=0x2c0107b3, x=0, y=0, lppt=0x23e9428 | out: lppt=0x23e9428) returned 1
[0284.289] IsAppThemed () returned 0x1
[0284.289] GetThemeAppProperties () returned 0x3
[0284.289] GetThemeAppProperties () returned 0x3
[0284.289] DrawThemeBackground () returned 0x0
[0284.289] RestoreDC (hdc=0x2c0107b3, nSavedDC=-1) returned 1
[0284.289] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c0107b3) returned 0x0
[0284.289] GdipCreateRegion (region=0x53e644) returned 0x0
[0284.289] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.289] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0284.289] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0284.289] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0284.289] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.289] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.290] LocalFree (hMem=0x89ea88) returned 0x0
[0284.290] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.290] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.290] LocalFree (hMem=0x89ea88) returned 0x0
[0284.290] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0284.290] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0284.290] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0284.290] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0284.290] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.290] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0284.290] GetCurrentObject (hdc=0x2c0107b3, type=0x1) returned 0xb00017
[0284.290] GetCurrentObject (hdc=0x2c0107b3, type=0x2) returned 0x900010
[0284.290] GetCurrentObject (hdc=0x2c0107b3, type=0x7) returned 0x1e0507b9
[0284.290] GetCurrentObject (hdc=0x2c0107b3, type=0x6) returned 0x8a01c2
[0284.290] SaveDC (hdc=0x2c0107b3) returned 1
[0284.291] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd50407a1
[0284.291] GetClipRgn (hdc=0x2c0107b3, hrgn=0xd50407a1) returned 0
[0284.291] SelectClipRgn (hdc=0x2c0107b3, hrgn=0x2d04053e) returned 2
[0284.291] DeleteObject (ho=0xd50407a1) returned 1
[0284.291] DeleteObject (ho=0x2d04053e) returned 1
[0284.291] OffsetViewportOrgEx (in: hdc=0x2c0107b3, x=0, y=0, lppt=0x23e96fc | out: lppt=0x23e96fc) returned 1
[0284.291] IsAppThemed () returned 0x1
[0284.291] GetThemeAppProperties () returned 0x3
[0284.291] GetThemeAppProperties () returned 0x3
[0284.291] GetThemeBackgroundContentRect () returned 0x0
[0284.291] RestoreDC (hdc=0x2c0107b3, nSavedDC=-1) returned 1
[0284.291] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c0107b3) returned 0x0
[0284.291] IsAppThemed () returned 0x1
[0284.291] GetThemeAppProperties () returned 0x3
[0284.291] GetThemeAppProperties () returned 0x3
[0284.291] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0284.292] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0284.292] GetCurrentObject (hdc=0x2c0107b3, type=0x1) returned 0xb00017
[0284.292] GetCurrentObject (hdc=0x2c0107b3, type=0x2) returned 0x900010
[0284.292] GetCurrentObject (hdc=0x2c0107b3, type=0x7) returned 0x1e0507b9
[0284.292] GetCurrentObject (hdc=0x2c0107b3, type=0x6) returned 0x8a01c2
[0284.292] SaveDC (hdc=0x2c0107b3) returned 1
[0284.292] GetTextAlign (hdc=0x2c0107b3) returned 0x0
[0284.292] GetTextColor (hdc=0x2c0107b3) returned 0x0
[0284.292] GetCurrentObject (hdc=0x2c0107b3, type=0x6) returned 0x8a01c2
[0284.292] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0284.292] SelectObject (hdc=0x2c0107b3, h=0x450a0799) returned 0x8a01c2
[0284.292] GetBkMode (hdc=0x2c0107b3) returned 2
[0284.292] SetBkMode (hdc=0x2c0107b3, mode=1) returned 2
[0284.293] DrawTextExW (in: hdc=0x2c0107b3, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x23e9a9c | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0284.293] DrawTextExW (in: hdc=0x2c0107b3, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x23e9a9c | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0284.293] RestoreDC (hdc=0x2c0107b3, nSavedDC=-1) returned 1
[0284.293] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c0107b3) returned 0x0
[0284.293] GetFocus () returned 0x202c6
[0284.293] IsAppThemed () returned 0x1
[0284.293] GetThemeAppProperties () returned 0x3
[0284.294] GetThemeAppProperties () returned 0x3
[0284.294] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0284.294] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x2c0107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0284.294] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2c0107b3) returned 0x0
[0284.294] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0284.294] SelectObject (hdc=0x2c0107b3, h=0x85000f) returned 0x1e0507b9
[0284.294] DeleteDC (hdc=0x2c0107b3) returned 1
[0284.294] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0284.294] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0284.295] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0284.295] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0284.295] WaitMessage () returned 1
[0284.381] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0284.381] IsWindowUnicode (hWnd=0x202c6) returned 1
[0284.382] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0284.382] TranslateMessage (lpMsg=0x53eef8) returned 0
[0284.382] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0284.382] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0284.382] IsWindowUnicode (hWnd=0x202c6) returned 1
[0284.382] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0284.382] TranslateMessage (lpMsg=0x53eef8) returned 0
[0284.382] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0284.382] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x1b004a) returned 0x0
[0284.382] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0284.382] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0284.382] WaitMessage () returned 1
[0284.524] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0284.524] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a3023a) returned 0x1
[0284.524] IsWindowUnicode (hWnd=0x202c6) returned 1
[0284.524] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0284.525] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a3023a) returned 0x1
[0284.525] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0284.525] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13601e4) returned 0x0
[0284.525] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0284.525] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0284.525] SetCursor (hCursor=0x10003) returned 0x10003
[0284.525] TranslateMessage (lpMsg=0x53eef8) returned 0
[0284.525] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0284.525] GetKeyState (nVirtKey=1) returned -128
[0284.525] GetKeyState (nVirtKey=2) returned 0
[0284.525] GetKeyState (nVirtKey=4) returned 0
[0284.525] GetKeyState (nVirtKey=5) returned 0
[0284.525] GetKeyState (nVirtKey=6) returned 0
[0284.526] IsWindowVisible (hWnd=0x202c6) returned 1
[0284.526] IsWindowEnabled (hWnd=0x202c6) returned 1
[0284.526] SetFocus (hWnd=0x202c6) returned 0x202c6
[0284.526] GetFocus () returned 0x202c6
[0284.526] GetFocus () returned 0x202c6
[0284.526] GetFocus () returned 0x202c6
[0284.526] GetKeyState (nVirtKey=1) returned -128
[0284.526] GetKeyState (nVirtKey=2) returned 0
[0284.526] GetKeyState (nVirtKey=4) returned 0
[0284.526] GetKeyState (nVirtKey=5) returned 0
[0284.526] GetKeyState (nVirtKey=6) returned 0
[0284.526] GetCapture () returned 0x0
[0284.526] SetCapture (hWnd=0x202c6) returned 0x0
[0284.526] GetKeyState (nVirtKey=1) returned -128
[0284.526] GetKeyState (nVirtKey=2) returned 0
[0284.526] GetKeyState (nVirtKey=4) returned 0
[0284.526] GetKeyState (nVirtKey=5) returned 0
[0284.526] GetKeyState (nVirtKey=6) returned 0
[0284.526] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0284.526] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0284.526] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0284.527] IsWindowUnicode (hWnd=0x202c6) returned 1
[0284.527] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0284.527] TranslateMessage (lpMsg=0x53eef8) returned 0
[0284.527] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0284.527] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23e9c20, cPoints=0x1 | out: lpPoints=0x23e9c20) returned 25690608
[0284.527] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0284.527] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0284.527] UpdateWindow (hWnd=0x202c6) returned 1
[0284.527] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0284.527] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0284.527] CreateCompatibleDC (hdc=0xf0105ee) returned 0x2d0107b3
[0284.527] SelectObject (hdc=0x2d0107b3, h=0x1e0507b9) returned 0x85000f
[0284.528] GdipCreateFromHDC (hdc=0x2d0107b3, graphics=0x53e5f0) returned 0x0
[0284.528] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0284.528] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0284.528] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0284.528] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0284.528] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0284.528] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0284.528] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0284.528] LocalFree (hMem=0x89ee08) returned 0x0
[0284.528] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0284.528] GdipCreateRegion (region=0x53e638) returned 0x0
[0284.528] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.528] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0284.528] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0284.529] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfac70dbd) returned 0x0
[0284.529] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.529] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0284.529] GetCurrentObject (hdc=0x2d0107b3, type=0x1) returned 0xb00017
[0284.529] GetCurrentObject (hdc=0x2d0107b3, type=0x2) returned 0x900010
[0284.529] GetCurrentObject (hdc=0x2d0107b3, type=0x7) returned 0x1e0507b9
[0284.529] GetCurrentObject (hdc=0x2d0107b3, type=0x6) returned 0x8a01c2
[0284.529] SaveDC (hdc=0x2d0107b3) returned 1
[0284.529] GetNearestColor (hdc=0x2d0107b3, color=0xff) returned 0xff
[0284.529] GetNearestColor (hdc=0x2d0107b3, color=0x55) returned 0x55
[0284.529] GetNearestColor (hdc=0x2d0107b3, color=0x0) returned 0x0
[0284.529] GetNearestColor (hdc=0x2d0107b3, color=0x55) returned 0x55
[0284.529] GetNearestColor (hdc=0x2d0107b3, color=0x0) returned 0x0
[0284.529] GetNearestColor (hdc=0x2d0107b3, color=0x8080ff) returned 0x8080ff
[0284.529] GetNearestColor (hdc=0x2d0107b3, color=0x7373e5) returned 0x7373e5
[0284.530] GetNearestColor (hdc=0x2d0107b3, color=0xe5) returned 0xe5
[0284.530] GetNearestColor (hdc=0x2d0107b3, color=0x0) returned 0x0
[0284.530] RestoreDC (hdc=0x2d0107b3, nSavedDC=-1) returned 1
[0284.530] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d0107b3) returned 0x0
[0284.530] IsAppThemed () returned 0x1
[0284.530] GetThemeAppProperties () returned 0x3
[0284.530] GetThemeAppProperties () returned 0x3
[0284.530] IsAppThemed () returned 0x1
[0284.530] GetThemeAppProperties () returned 0x3
[0284.530] GetThemeAppProperties () returned 0x3
[0284.530] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x23ea33c | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0284.531] IsAppThemed () returned 0x1
[0284.531] GetThemeAppProperties () returned 0x3
[0284.531] GetThemeAppProperties () returned 0x3
[0284.531] IsAppThemed () returned 0x1
[0284.531] GetThemeAppProperties () returned 0x3
[0284.531] GetThemeAppProperties () returned 0x3
[0284.531] IsAppThemed () returned 0x1
[0284.531] GetThemeAppProperties () returned 0x3
[0284.531] GetThemeAppProperties () returned 0x3
[0284.531] IsAppThemed () returned 0x1
[0284.531] GetThemeAppProperties () returned 0x3
[0284.531] GetThemeAppProperties () returned 0x3
[0284.531] IsThemePartDefined () returned 0x1
[0284.531] IsAppThemed () returned 0x1
[0284.531] GetThemeAppProperties () returned 0x3
[0284.531] GetThemeAppProperties () returned 0x3
[0284.531] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0284.531] IsAppThemed () returned 0x1
[0284.531] GetThemeAppProperties () returned 0x3
[0284.531] GetThemeAppProperties () returned 0x3
[0284.531] IsAppThemed () returned 0x1
[0284.532] GetThemeAppProperties () returned 0x3
[0284.532] GetThemeAppProperties () returned 0x3
[0284.532] IsThemePartDefined () returned 0x1
[0284.532] GdipCreateRegion (region=0x53e354) returned 0x0
[0284.532] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.532] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0284.532] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0284.532] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0284.532] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.532] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.532] LocalFree (hMem=0x89ea88) returned 0x0
[0284.532] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.532] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.532] LocalFree (hMem=0x89ea88) returned 0x0
[0284.532] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0284.532] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0284.533] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0284.533] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0284.533] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.533] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0284.533] GetCurrentObject (hdc=0x2d0107b3, type=0x1) returned 0xb00017
[0284.533] GetCurrentObject (hdc=0x2d0107b3, type=0x2) returned 0x900010
[0284.533] GetCurrentObject (hdc=0x2d0107b3, type=0x7) returned 0x1e0507b9
[0284.533] GetCurrentObject (hdc=0x2d0107b3, type=0x6) returned 0x8a01c2
[0284.533] SaveDC (hdc=0x2d0107b3) returned 1
[0284.533] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2e04053e
[0284.533] GetClipRgn (hdc=0x2d0107b3, hrgn=0x2e04053e) returned 0
[0284.533] SelectClipRgn (hdc=0x2d0107b3, hrgn=0xd90407a1) returned 2
[0284.533] DeleteObject (ho=0x2e04053e) returned 1
[0284.533] DeleteObject (ho=0xd90407a1) returned 1
[0284.533] OffsetViewportOrgEx (in: hdc=0x2d0107b3, x=0, y=0, lppt=0x23ea9ec | out: lppt=0x23ea9ec) returned 1
[0284.533] DrawThemeParentBackground () returned 0x0
[0284.534] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0284.534] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0284.534] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0284.534] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0284.534] GetSystemMetrics (nIndex=42) returned 0
[0284.534] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0284.534] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0284.534] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0284.534] GetCurrentObject (hdc=0x2d0107b3, type=0x1) returned 0xb00017
[0284.534] GetCurrentObject (hdc=0x2d0107b3, type=0x2) returned 0x900010
[0284.534] GetCurrentObject (hdc=0x2d0107b3, type=0x7) returned 0x1e0507b9
[0284.534] GetCurrentObject (hdc=0x2d0107b3, type=0x6) returned 0x8a01c2
[0284.534] SaveDC (hdc=0x2d0107b3) returned 2
[0284.534] GetNearestColor (hdc=0x2d0107b3, color=0xff) returned 0xff
[0284.535] CreateSolidBrush (color=0xff) returned 0x2b10078d
[0284.535] FillRect (hDC=0x2d0107b3, lprc=0x53ddb8, hbr=0x2b10078d) returned 1
[0284.535] DeleteObject (ho=0x2b10078d) returned 1
[0284.535] RestoreDC (hdc=0x2d0107b3, nSavedDC=-1) returned 1
[0284.535] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0284.535] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0284.535] GetSystemMetrics (nIndex=42) returned 0
[0284.535] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0284.535] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0284.535] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0284.535] GetCurrentObject (hdc=0x2d0107b3, type=0x1) returned 0xb00017
[0284.535] GetCurrentObject (hdc=0x2d0107b3, type=0x2) returned 0x900010
[0284.535] GetCurrentObject (hdc=0x2d0107b3, type=0x7) returned 0x1e0507b9
[0284.535] GetCurrentObject (hdc=0x2d0107b3, type=0x6) returned 0x8a01c2
[0284.535] SaveDC (hdc=0x2d0107b3) returned 2
[0284.536] GetNearestColor (hdc=0x2d0107b3, color=0xff) returned 0xff
[0284.536] CreateSolidBrush (color=0xff) returned 0x2c10078d
[0284.536] FillRect (hDC=0x2d0107b3, lprc=0x53dd58, hbr=0x2c10078d) returned 1
[0284.536] DeleteObject (ho=0x2c10078d) returned 1
[0284.536] RestoreDC (hdc=0x2d0107b3, nSavedDC=-1) returned 1
[0284.536] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0284.536] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0284.536] GetSystemMetrics (nIndex=42) returned 0
[0284.536] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0284.536] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0284.536] RestoreDC (hdc=0x2d0107b3, nSavedDC=-1) returned 1
[0284.536] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d0107b3) returned 0x0
[0284.537] IsAppThemed () returned 0x1
[0284.537] GetThemeAppProperties () returned 0x3
[0284.537] GetThemeAppProperties () returned 0x3
[0284.537] IsAppThemed () returned 0x1
[0284.537] GetThemeAppProperties () returned 0x3
[0284.537] GetThemeAppProperties () returned 0x3
[0284.537] IsThemePartDefined () returned 0x1
[0284.537] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0284.537] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.537] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0284.537] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0284.537] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0284.537] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0284.537] LocalFree (hMem=0x89ea88) returned 0x0
[0284.537] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0284.538] LocalFree (hMem=0x89ec80) returned 0x0
[0284.538] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0284.538] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0284.538] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0284.538] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0284.538] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.538] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0284.538] GetCurrentObject (hdc=0x2d0107b3, type=0x1) returned 0xb00017
[0284.538] GetCurrentObject (hdc=0x2d0107b3, type=0x2) returned 0x900010
[0284.538] GetCurrentObject (hdc=0x2d0107b3, type=0x7) returned 0x1e0507b9
[0284.538] GetCurrentObject (hdc=0x2d0107b3, type=0x6) returned 0x8a01c2
[0284.538] SaveDC (hdc=0x2d0107b3) returned 1
[0284.538] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xda0407a1
[0284.538] GetClipRgn (hdc=0x2d0107b3, hrgn=0xda0407a1) returned 0
[0284.538] SelectClipRgn (hdc=0x2d0107b3, hrgn=0x3004053e) returned 2
[0284.538] DeleteObject (ho=0xda0407a1) returned 1
[0284.538] DeleteObject (ho=0x3004053e) returned 1
[0284.538] OffsetViewportOrgEx (in: hdc=0x2d0107b3, x=0, y=0, lppt=0x23eb250 | out: lppt=0x23eb250) returned 1
[0284.539] IsAppThemed () returned 0x1
[0284.539] GetThemeAppProperties () returned 0x3
[0284.539] GetThemeAppProperties () returned 0x3
[0284.539] DrawThemeBackground () returned 0x0
[0284.539] RestoreDC (hdc=0x2d0107b3, nSavedDC=-1) returned 1
[0284.539] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d0107b3) returned 0x0
[0284.539] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0284.539] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.539] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0284.539] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0284.539] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0284.539] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0284.539] LocalFree (hMem=0x89ee08) returned 0x0
[0284.539] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0284.539] LocalFree (hMem=0x89ee08) returned 0x0
[0284.539] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0284.539] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0284.539] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0284.540] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0284.540] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.540] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0284.540] GetCurrentObject (hdc=0x2d0107b3, type=0x1) returned 0xb00017
[0284.540] GetCurrentObject (hdc=0x2d0107b3, type=0x2) returned 0x900010
[0284.540] GetCurrentObject (hdc=0x2d0107b3, type=0x7) returned 0x1e0507b9
[0284.540] GetCurrentObject (hdc=0x2d0107b3, type=0x6) returned 0x8a01c2
[0284.540] SaveDC (hdc=0x2d0107b3) returned 1
[0284.540] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3104053e
[0284.540] GetClipRgn (hdc=0x2d0107b3, hrgn=0x3104053e) returned 0
[0284.540] SelectClipRgn (hdc=0x2d0107b3, hrgn=0xdb0407a1) returned 2
[0284.540] DeleteObject (ho=0x3104053e) returned 1
[0284.540] DeleteObject (ho=0xdb0407a1) returned 1
[0284.540] OffsetViewportOrgEx (in: hdc=0x2d0107b3, x=0, y=0, lppt=0x23eb524 | out: lppt=0x23eb524) returned 1
[0284.540] IsAppThemed () returned 0x1
[0284.541] GetThemeAppProperties () returned 0x3
[0284.541] GetThemeAppProperties () returned 0x3
[0284.541] GetThemeBackgroundContentRect () returned 0x0
[0284.541] RestoreDC (hdc=0x2d0107b3, nSavedDC=-1) returned 1
[0284.541] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d0107b3) returned 0x0
[0284.541] IsAppThemed () returned 0x1
[0284.541] GetThemeAppProperties () returned 0x3
[0284.541] GetThemeAppProperties () returned 0x3
[0284.541] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0284.541] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0284.541] GetCurrentObject (hdc=0x2d0107b3, type=0x1) returned 0xb00017
[0284.541] GetCurrentObject (hdc=0x2d0107b3, type=0x2) returned 0x900010
[0284.541] GetCurrentObject (hdc=0x2d0107b3, type=0x7) returned 0x1e0507b9
[0284.542] GetCurrentObject (hdc=0x2d0107b3, type=0x6) returned 0x8a01c2
[0284.542] SaveDC (hdc=0x2d0107b3) returned 1
[0284.542] GetTextAlign (hdc=0x2d0107b3) returned 0x0
[0284.542] GetTextColor (hdc=0x2d0107b3) returned 0x0
[0284.542] GetCurrentObject (hdc=0x2d0107b3, type=0x6) returned 0x8a01c2
[0284.542] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0284.542] SelectObject (hdc=0x2d0107b3, h=0x450a0799) returned 0x8a01c2
[0284.542] GetBkMode (hdc=0x2d0107b3) returned 2
[0284.542] SetBkMode (hdc=0x2d0107b3, mode=1) returned 2
[0284.543] DrawTextExW (in: hdc=0x2d0107b3, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x23eb8c4 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0284.543] DrawTextExW (in: hdc=0x2d0107b3, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x23eb8c4 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0284.543] RestoreDC (hdc=0x2d0107b3, nSavedDC=-1) returned 1
[0284.543] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d0107b3) returned 0x0
[0284.543] GetFocus () returned 0x202c6
[0284.544] IsAppThemed () returned 0x1
[0284.544] GetThemeAppProperties () returned 0x3
[0284.544] GetThemeAppProperties () returned 0x3
[0284.544] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0284.544] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x2d0107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0284.544] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2d0107b3) returned 0x0
[0284.544] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0284.544] SelectObject (hdc=0x2d0107b3, h=0x85000f) returned 0x1e0507b9
[0284.544] DeleteDC (hdc=0x2d0107b3) returned 1
[0284.544] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0284.545] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0284.545] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x23eb9c0, cPoints=0x1 | out: lpPoints=0x23eb9c0) returned 25690608
[0284.545] WindowFromPoint (Point=0x23a) returned 0x202c6
[0284.545] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a3023a) returned 0x1
[0284.545] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0284.545] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0284.546] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.546] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0284.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.547] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0284.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.547] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0284.548] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0284.548] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e888) returned 0x0
[0284.548] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0284.548] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0284.548] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0284.548] GetSystemMetrics (nIndex=5) returned 1
[0284.548] GetSystemMetrics (nIndex=6) returned 1
[0284.549] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.549] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0284.549] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.549] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0284.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.619] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0284.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.619] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0284.620] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.620] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0284.620] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.620] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0284.620] GetSystemMetrics (nIndex=5) returned 1
[0284.620] GetSystemMetrics (nIndex=6) returned 1
[0284.621] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.621] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0284.621] GetSystemMetrics (nIndex=5) returned 1
[0284.621] GetSystemMetrics (nIndex=6) returned 1
[0284.621] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.622] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0284.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.622] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0284.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.622] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0284.623] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.623] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0284.623] GetSystemMetrics (nIndex=59) returned 1460
[0284.623] GetSystemMetrics (nIndex=60) returned 920
[0284.623] GetSystemMetrics (nIndex=34) returned 136
[0284.623] GetSystemMetrics (nIndex=35) returned 39
[0284.623] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.623] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0284.623] GetCurrentThreadId () returned 0x11d0
[0284.624] GetCurrentThreadId () returned 0x11d0
[0284.624] GetCurrentThreadId () returned 0x11d0
[0284.624] GetCurrentThreadId () returned 0x11d0
[0284.624] GetCurrentThreadId () returned 0x11d0
[0284.624] GetCurrentThreadId () returned 0x11d0
[0284.624] GetCurrentThreadId () returned 0x11d0
[0284.624] GetCurrentThreadId () returned 0x11d0
[0284.624] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.624] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0284.624] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0284.624] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0284.625] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.625] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0284.625] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.625] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0284.626] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1f00ea
[0284.626] SetWindowLongW (hWnd=0x1f00ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0284.626] GetWindowLongW (hWnd=0x1f00ea, nIndex=-4) returned 1950089536
[0284.627] SetWindowLongW (hWnd=0x1f00ea, nIndex=-4, dwNewLong=79644622) returned 1950089536
[0284.627] GetWindowLongW (hWnd=0x1f00ea, nIndex=-4) returned 79644622
[0284.627] GetWindowLongW (hWnd=0x1f00ea, nIndex=-16) returned 113311744
[0284.628] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1f00ea, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0284.628] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1f00ea, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0284.628] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1f00ea, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0284.629] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1f00ea, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0284.629] GetClientRect (in: hWnd=0x1f00ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0284.629] GetWindowRect (in: hWnd=0x1f00ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0284.629] SetWindowTextW (hWnd=0x1f00ea, lpString="WindowsFormsParkingWindow") returned 1
[0284.629] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1f00ea, Msg=0xc, wParam=0x0, lParam=0x23e399c) returned 0x1
[0284.630] GetParent (hWnd=0x1f00ea) returned 0x0
[0284.630] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0284.631] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1f00ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x17004e
[0284.632] SetWindowLongW (hWnd=0x17004e, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0284.632] GetWindowLongW (hWnd=0x17004e, nIndex=-4) returned 1868147648
[0284.632] SetWindowLongW (hWnd=0x17004e, nIndex=-4, dwNewLong=79644422) returned 1868147648
[0284.632] GetWindowLongW (hWnd=0x17004e, nIndex=-4) returned 79644422
[0284.633] GetWindowLongW (hWnd=0x17004e, nIndex=-16) returned 1174405133
[0284.633] GetWindowLongW (hWnd=0x17004e, nIndex=-12) returned 0
[0284.633] SetWindowLongW (hWnd=0x17004e, nIndex=-12, dwNewLong=1507406) returned 0
[0284.633] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0284.633] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0284.634] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0284.634] GetClientRect (in: hWnd=0x17004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0284.634] GetWindowRect (in: hWnd=0x17004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0284.634] GetParent (hWnd=0x17004e) returned 0x1f00ea
[0284.634] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1f00ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0284.635] SetWindowTextW (hWnd=0x17004e, lpString="Enter password: ") returned 1
[0284.635] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0284.635] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0284.636] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0284.636] GetClientRect (in: hWnd=0x17004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0284.636] GetWindowRect (in: hWnd=0x17004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0284.636] GetParent (hWnd=0x17004e) returned 0x1f00ea
[0284.636] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1f00ea, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0284.636] SendMessageW (hWnd=0x17004e, Msg=0x2210, wParam=0x4e0001, lParam=0x17004e) returned 0x0
[0284.636] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x2210, wParam=0x4e0001, lParam=0x17004e) returned 0x0
[0284.636] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0284.636] GetParent (hWnd=0x17004e) returned 0x1f00ea
[0284.637] GdipCreateFromHWND (hwnd=0x17004e, graphics=0x53e994) returned 0x0
[0284.637] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0284.637] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0284.637] GetProcessWindowStation () returned 0x13c
[0284.637] GetCapture () returned 0x202c6
[0284.637] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0284.637] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0284.637] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0284.638] ReleaseCapture () returned 1
[0284.638] GetActiveWindow () returned 0x70036
[0284.638] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0284.638] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.638] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0284.638] GetCursorPos (in: lpPoint=0x23f8770 | out: lpPoint=0x23f8770*(x=570, y=419)) returned 1
[0284.639] MonitorFromPoint (pt=0x23a, dwFlags=0x1a3) returned 0x10001
[0284.639] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0284.639] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x300107b3
[0284.639] GetDeviceCaps (hdc=0x300107b3, index=12) returned 32
[0284.639] GetDeviceCaps (hdc=0x300107b3, index=14) returned 1
[0284.639] DeleteDC (hdc=0x300107b3) returned 1
[0284.639] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0284.640] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0284.640] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x39013e
[0284.640] SetWindowLongW (hWnd=0x39013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0284.640] GetWindowLongW (hWnd=0x39013e, nIndex=-4) returned 1950089536
[0284.641] SetWindowLongW (hWnd=0x39013e, nIndex=-4, dwNewLong=79643742) returned 1950089536
[0284.641] GetWindowLongW (hWnd=0x39013e, nIndex=-4) returned 79643742
[0284.641] GetWindowLongW (hWnd=0x39013e, nIndex=-16) returned 113770496
[0284.641] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0284.642] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0284.643] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0284.643] GetClientRect (in: hWnd=0x39013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0284.643] GetWindowRect (in: hWnd=0x39013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0284.643] SetWindowTextW (hWnd=0x39013e, lpString="Ransomware") returned 1
[0284.643] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xc, wParam=0x0, lParam=0x23eba88) returned 0x1
[0284.644] GetStartupInfoW (in: lpStartupInfo=0x23f8aac | out: lpStartupInfo=0x23f8aac*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0284.646] GetParent (hWnd=0x39013e) returned 0x0
[0284.646] SetWindowLongW (hWnd=0x39013e, nIndex=-8, dwNewLong=0) returned 0
[0284.647] SendMessageW (hWnd=0x39013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0284.647] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0284.647] SendMessageW (hWnd=0x39013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0284.647] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0284.647] GetSystemMenu (hWnd=0x39013e, bRevert=0) returned 0xad0291
[0284.648] GetWindowPlacement (in: hWnd=0x39013e, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0284.648] EnableMenuItem (hMenu=0xad0291, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0284.648] EnableMenuItem (hMenu=0xad0291, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0284.648] EnableMenuItem (hMenu=0xad0291, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0284.648] EnableMenuItem (hMenu=0xad0291, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0284.648] EnableMenuItem (hMenu=0xad0291, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0284.648] GetClientRect (in: hWnd=0x39013e, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0284.648] GetClientRect (in: hWnd=0x39013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0284.648] GetWindowRect (in: hWnd=0x39013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0284.649] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.649] GetWindowLongW (hWnd=0x39013e, nIndex=-16) returned 113770496
[0284.649] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.649] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.649] GetSystemMetrics (nIndex=42) returned 0
[0284.649] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.649] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0284.649] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.649] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.649] GetSystemMetrics (nIndex=42) returned 0
[0284.649] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.649] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0284.650] GetCursorPos (in: lpPoint=0x23f8c20 | out: lpPoint=0x23f8c20*(x=570, y=419)) returned 1
[0284.650] MonitorFromPoint (pt=0x23a, dwFlags=0x1a3) returned 0x10001
[0284.650] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0284.650] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x340107b3
[0284.650] GetDeviceCaps (hdc=0x340107b3, index=12) returned 32
[0284.650] GetDeviceCaps (hdc=0x340107b3, index=14) returned 1
[0284.650] DeleteDC (hdc=0x340107b3) returned 1
[0284.650] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0284.650] GetWindowLongW (hWnd=0x39013e, nIndex=-16) returned 113770496
[0284.651] GetWindowLongW (hWnd=0x39013e, nIndex=-20) returned 327937
[0284.651] SetWindowLongW (hWnd=0x39013e, nIndex=-16, dwNewLong=46661632) returned 113770496
[0284.651] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0284.651] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0284.652] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0284.652] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0284.652] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0284.653] SetWindowLongW (hWnd=0x39013e, nIndex=-20, dwNewLong=327681) returned 327937
[0284.653] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0284.653] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0284.654] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0284.654] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0284.654] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0284.654] SetWindowPos (hWnd=0x39013e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0284.655] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0284.655] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0284.655] GetWindowPlacement (in: hWnd=0x39013e, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0284.655] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0284.655] GetClientRect (in: hWnd=0x39013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0284.655] GetWindowRect (in: hWnd=0x39013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0284.656] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0284.656] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0284.656] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0284.657] RedrawWindow (hWnd=0x39013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0284.657] GetSystemMenu (hWnd=0x39013e, bRevert=0) returned 0xad0291
[0284.657] GetWindowPlacement (in: hWnd=0x39013e, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0284.657] EnableMenuItem (hMenu=0xad0291, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0284.657] EnableMenuItem (hMenu=0xad0291, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0284.657] EnableMenuItem (hMenu=0xad0291, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0284.657] EnableMenuItem (hMenu=0xad0291, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0284.657] EnableMenuItem (hMenu=0xad0291, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0284.657] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0284.657] GetWindowLongW (hWnd=0x39013e, nIndex=-8) returned 0
[0284.657] SetWindowLongW (hWnd=0x39013e, nIndex=-8, dwNewLong=458806) returned 0
[0284.658] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0284.658] GetProcessWindowStation () returned 0x13c
[0284.659] GetCurrentThreadId () returned 0x11d0
[0284.659] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf47f6, lParam=0x0) returned 1
[0284.659] IsWindowVisible (hWnd=0x39013e) returned 0
[0284.659] IsWindowVisible (hWnd=0x70036) returned 1
[0284.659] IsWindowEnabled (hWnd=0x70036) returned 1
[0284.659] IsWindowVisible (hWnd=0x602b6) returned 0
[0284.659] IsWindowVisible (hWnd=0x901f8) returned 0
[0284.659] IsWindowVisible (hWnd=0x202d0) returned 0
[0284.659] IsWindowVisible (hWnd=0x202d4) returned 0
[0284.659] GetActiveWindow () returned 0x70036
[0284.659] GetFocus () returned 0x202c6
[0284.660] IsWindow (hWnd=0x70036) returned 1
[0284.660] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0284.660] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0284.660] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0284.661] GetWindowLongW (hWnd=0x39013e, nIndex=-8) returned 458806
[0284.661] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0284.661] GetCurrentThreadId () returned 0x11d0
[0284.661] GetWindowLongW (hWnd=0x39013e, nIndex=-8) returned 458806
[0284.661] IsWindowEnabled (hWnd=0x70036) returned 0
[0284.661] IsWindowEnabled (hWnd=0x39013e) returned 1
[0284.661] ShowWindow (hWnd=0x39013e, nCmdShow=5) returned 0
[0284.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0284.661] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0284.661] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.662] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0284.663] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x39013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1a01e2
[0284.663] SetWindowLongW (hWnd=0x1a01e2, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0284.663] GetWindowLongW (hWnd=0x1a01e2, nIndex=-4) returned 1868026976
[0284.664] SetWindowLongW (hWnd=0x1a01e2, nIndex=-4, dwNewLong=79643862) returned 1868026976
[0284.664] GetWindowLongW (hWnd=0x1a01e2, nIndex=-4) returned 79643862
[0284.664] GetWindowLongW (hWnd=0x1a01e2, nIndex=-16) returned 1174470848
[0284.664] GetWindowLongW (hWnd=0x1a01e2, nIndex=-12) returned 0
[0284.664] SetWindowLongW (hWnd=0x1a01e2, nIndex=-12, dwNewLong=1704418) returned 0
[0284.664] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0284.665] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0284.666] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0284.667] SendMessageW (hWnd=0x1a01e2, Msg=0x2055, wParam=0x1a01e2, lParam=0x3) returned 0x2
[0284.667] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0284.667] GetWindow (hWnd=0x1a01e2, uCmd=0x3) returned 0x0
[0284.667] GetClientRect (in: hWnd=0x1a01e2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0284.667] GetWindowRect (in: hWnd=0x1a01e2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0284.667] GetParent (hWnd=0x1a01e2) returned 0x39013e
[0284.667] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x39013e, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0284.667] SendMessageW (hWnd=0x1a01e2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0284.667] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0284.667] SendMessageW (hWnd=0x1a01e2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0284.667] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0284.668] GetSystemMetrics (nIndex=5) returned 1
[0284.668] GetSystemMetrics (nIndex=6) returned 1
[0284.668] SendMessageW (hWnd=0x1a01e2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0284.668] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0284.668] SendMessageW (hWnd=0x1a01e2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0284.668] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0284.668] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0284.669] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0284.669] GetClientRect (in: hWnd=0x1a01e2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0284.669] GetWindowRect (in: hWnd=0x1a01e2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0284.669] GetParent (hWnd=0x1a01e2) returned 0x39013e
[0284.669] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x39013e, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0284.669] SendMessageW (hWnd=0x1a01e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1a01e2) returned 0x0
[0284.669] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1a01e2) returned 0x0
[0284.669] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0284.669] GetParent (hWnd=0x1a01e2) returned 0x39013e
[0284.669] GetParent (hWnd=0x17004e) returned 0x1f00ea
[0284.669] SetParent (hWndChild=0x17004e, hWndNewParent=0x39013e) returned 0x1f00ea
[0284.669] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0284.670] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0284.670] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0284.671] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0284.671] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0284.671] GetClientRect (in: hWnd=0x17004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0284.671] GetWindowRect (in: hWnd=0x17004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0284.671] GetParent (hWnd=0x17004e) returned 0x39013e
[0284.671] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x39013e, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0284.671] GetClientRect (in: hWnd=0x17004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0284.671] GetWindowRect (in: hWnd=0x17004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0284.671] GetParent (hWnd=0x17004e) returned 0x39013e
[0284.671] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x39013e, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0284.671] GetParent (hWnd=0x17004e) returned 0x39013e
[0284.671] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0284.671] GetWindow (hWnd=0x17004e, uCmd=0x3) returned 0x0
[0284.671] SetWindowPos (hWnd=0x17004e, hWndInsertAfter=0x1a01e2, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0284.672] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0284.672] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0284.672] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0284.672] GetClientRect (in: hWnd=0x17004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0284.672] GetWindowRect (in: hWnd=0x17004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0284.672] GetParent (hWnd=0x17004e) returned 0x39013e
[0284.672] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x39013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0284.672] GetParent (hWnd=0x17004e) returned 0x39013e
[0284.672] GetWindow (hWnd=0x17004e, uCmd=0x3) returned 0x1a01e2
[0284.673] GetWindowThreadProcessId (in: hWnd=0x17004e, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0284.673] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0284.673] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.674] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0284.674] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x39013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1a0122
[0284.674] SetWindowLongW (hWnd=0x1a0122, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0284.674] GetWindowLongW (hWnd=0x1a0122, nIndex=-4) returned 1868032000
[0284.674] SetWindowLongW (hWnd=0x1a0122, nIndex=-4, dwNewLong=79644942) returned 1868032000
[0284.675] GetWindowLongW (hWnd=0x1a0122, nIndex=-4) returned 79644942
[0284.675] GetWindowLongW (hWnd=0x1a0122, nIndex=-16) returned 1174470667
[0284.675] GetWindowLongW (hWnd=0x1a0122, nIndex=-12) returned 0
[0284.675] SetWindowLongW (hWnd=0x1a0122, nIndex=-12, dwNewLong=1704226) returned 0
[0284.675] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0284.675] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0284.676] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0284.677] SendMessageW (hWnd=0x1a0122, Msg=0x2055, wParam=0x1a0122, lParam=0x3) returned 0x2
[0284.677] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0284.677] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0284.677] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0284.677] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0284.677] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0284.677] RedrawWindow (hWnd=0x1a01e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0284.677] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0284.678] RedrawWindow (hWnd=0x17004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0284.678] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0284.678] RedrawWindow (hWnd=0x1a0122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0284.678] RedrawWindow (hWnd=0x39013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0284.678] GetWindow (hWnd=0x1a0122, uCmd=0x3) returned 0x17004e
[0284.678] GetClientRect (in: hWnd=0x1a0122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0284.678] GetWindowRect (in: hWnd=0x1a0122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0284.678] GetParent (hWnd=0x1a0122) returned 0x39013e
[0284.678] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x39013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0284.678] SetWindowTextW (hWnd=0x1a0122, lpString="OK") returned 1
[0284.678] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0xc, wParam=0x0, lParam=0x23eff48) returned 0x1
[0284.679] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0284.679] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0284.679] GetClientRect (in: hWnd=0x1a0122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0284.679] GetWindowRect (in: hWnd=0x1a0122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0284.679] GetParent (hWnd=0x1a0122) returned 0x39013e
[0284.679] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x39013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0284.679] SendMessageW (hWnd=0x1a0122, Msg=0x2210, wParam=0x1220001, lParam=0x1a0122) returned 0x0
[0284.680] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x2210, wParam=0x1220001, lParam=0x1a0122) returned 0x0
[0284.680] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0284.680] GetParent (hWnd=0x1a0122) returned 0x39013e
[0284.680] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0284.680] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.681] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0284.681] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x39013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1702ca
[0284.681] SetWindowLongW (hWnd=0x1702ca, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0284.681] GetWindowLongW (hWnd=0x1702ca, nIndex=-4) returned 1868032000
[0284.682] SetWindowLongW (hWnd=0x1702ca, nIndex=-4, dwNewLong=79645102) returned 1868032000
[0284.682] GetWindowLongW (hWnd=0x1702ca, nIndex=-4) returned 79645102
[0284.682] GetWindowLongW (hWnd=0x1702ca, nIndex=-16) returned 1174470667
[0284.682] GetWindowLongW (hWnd=0x1702ca, nIndex=-12) returned 0
[0284.682] SetWindowLongW (hWnd=0x1702ca, nIndex=-12, dwNewLong=1508042) returned 0
[0284.682] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702ca, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0284.683] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702ca, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0284.683] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702ca, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0284.684] SendMessageW (hWnd=0x1702ca, Msg=0x2055, wParam=0x1702ca, lParam=0x3) returned 0x2
[0284.684] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0284.684] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702ca, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0284.684] GetWindow (hWnd=0x1702ca, uCmd=0x3) returned 0x1a0122
[0284.684] GetClientRect (in: hWnd=0x1702ca, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0284.684] GetWindowRect (in: hWnd=0x1702ca, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0284.684] GetParent (hWnd=0x1702ca) returned 0x39013e
[0284.684] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x39013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0284.684] SetWindowTextW (hWnd=0x1702ca, lpString="Cancel") returned 1
[0284.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702ca, Msg=0xc, wParam=0x0, lParam=0x23f3808) returned 0x1
[0284.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702ca, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0284.685] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702ca, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0284.685] GetClientRect (in: hWnd=0x1702ca, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0284.685] GetWindowRect (in: hWnd=0x1702ca, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0284.685] GetParent (hWnd=0x1702ca) returned 0x39013e
[0284.685] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x39013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0284.685] SendMessageW (hWnd=0x1702ca, Msg=0x2210, wParam=0x2ca0001, lParam=0x1702ca) returned 0x0
[0284.686] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702ca, Msg=0x2210, wParam=0x2ca0001, lParam=0x1702ca) returned 0x0
[0284.686] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0284.686] GetParent (hWnd=0x1702ca) returned 0x39013e
[0284.686] GetDC (hWnd=0x0) returned 0x10105d6
[0284.686] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e320) returned 0x0
[0284.687] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0284.687] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0284.687] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0284.687] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0284.687] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0284.687] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0284.687] GetWindowLongW (hWnd=0x39013e, nIndex=-8) returned 458806
[0284.688] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0284.688] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0284.688] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x3b0107b3
[0284.688] GetDeviceCaps (hdc=0x3b0107b3, index=12) returned 32
[0284.688] GetDeviceCaps (hdc=0x3b0107b3, index=14) returned 1
[0284.688] DeleteDC (hdc=0x3b0107b3) returned 1
[0284.688] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0284.688] GetWindowThreadProcessId (in: hWnd=0x39013e, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0284.688] GetCurrentThreadId () returned 0x11d0
[0284.688] PostMessageW (hWnd=0x39013e, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0284.688] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.689] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.689] GetSystemMetrics (nIndex=42) returned 0
[0284.689] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.689] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0284.689] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0284.689] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0284.689] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0284.689] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0284.702] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x39013e) returned 0x1
[0284.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0284.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0284.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0284.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0284.710] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0284.710] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0284.710] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0284.711] GetFocus () returned 0x202c6
[0284.711] IsChild (hWndParent=0x39013e, hWnd=0x202c6) returned 0
[0284.711] GetFocus () returned 0x202c6
[0284.711] SetFocus (hWnd=0x1a01e2) returned 0x202c6
[0284.712] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1a01e2, lParam=0x0) returned 0x0
[0284.713] GetCapture () returned 0x0
[0284.713] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0284.714] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0284.715] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0284.717] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0284.717] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0284.717] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0284.717] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0284.718] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0284.718] GetParent (hWnd=0x39013e) returned 0x0
[0284.718] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0284.719] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0284.719] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0284.720] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0284.720] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0284.720] GetSysColorBrush (nIndex=5) returned 0x100079
[0284.721] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0284.721] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0284.722] SendMessageW (hWnd=0x1a01e2, Msg=0x2111, wParam=0x10001e2, lParam=0x1a01e2) returned 0x0
[0284.722] SendMessageW (hWnd=0x1a01e2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0284.722] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0284.722] GetKeyState (nVirtKey=1) returned 0
[0284.722] GetKeyState (nVirtKey=2) returned 0
[0284.722] GetKeyState (nVirtKey=4) returned 0
[0284.723] GetKeyState (nVirtKey=5) returned 0
[0284.723] GetKeyState (nVirtKey=6) returned 0
[0284.723] GetWindowTextLengthW (hWnd=0x1a01e2) returned 0
[0284.723] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0284.723] SendMessageW (hWnd=0x1a01e2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0284.723] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0284.723] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0
[0284.723] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff
[0284.735] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0284.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0284.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0284.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0284.738] GetWindowPlacement (in: hWnd=0x39013e, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0284.738] GetClientRect (in: hWnd=0x39013e, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0284.738] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.738] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.738] GetSystemMetrics (nIndex=42) returned 0
[0284.738] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.738] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0284.738] GetClientRect (in: hWnd=0x39013e, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0284.738] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017
[0284.738] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010
[0284.738] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0xffffffffdb050785
[0284.738] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2
[0284.738] SaveDC (hdc=0x60100ce) returned 1
[0284.738] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0
[0284.739] CreateSolidBrush (color=0xf0f0f0) returned 0x2d10078d
[0284.739] FillRect (hDC=0x60100ce, lprc=0x53e250, hbr=0x2d10078d) returned 1
[0284.739] DeleteObject (ho=0x2d10078d) returned 1
[0284.739] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1
[0284.739] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0284.739] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0284.739] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0284.741] GetWindowPlacement (in: hWnd=0x39013e, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0284.741] GetClientRect (in: hWnd=0x39013e, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0284.741] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.741] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.741] GetSystemMetrics (nIndex=42) returned 0
[0284.741] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.741] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0284.741] GetClientRect (in: hWnd=0x39013e, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0284.741] GetCurrentObject (hdc=0x510107b3, type=0x1) returned 0xb00017
[0284.741] GetCurrentObject (hdc=0x510107b3, type=0x2) returned 0x900010
[0284.741] GetCurrentObject (hdc=0x510107b3, type=0x7) returned 0xffffffff9d050535
[0284.741] GetCurrentObject (hdc=0x510107b3, type=0x6) returned 0x8a01c2
[0284.741] SaveDC (hdc=0x510107b3) returned 1
[0284.741] GetNearestColor (hdc=0x510107b3, color=0xf0f0f0) returned 0xf0f0f0
[0284.742] CreateSolidBrush (color=0xf0f0f0) returned 0x2e10078d
[0284.742] FillRect (hDC=0x510107b3, lprc=0x53dc18, hbr=0x2e10078d) returned 1
[0284.742] DeleteObject (ho=0x2e10078d) returned 1
[0284.742] RestoreDC (hdc=0x510107b3, nSavedDC=-1) returned 1
[0284.742] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.742] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.742] GetSystemMetrics (nIndex=42) returned 0
[0284.742] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.742] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0284.742] GetClientRect (in: hWnd=0x39013e, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0284.742] GetCurrentObject (hdc=0x510107b3, type=0x1) returned 0xb00017
[0284.742] GetCurrentObject (hdc=0x510107b3, type=0x2) returned 0x900010
[0284.742] GetCurrentObject (hdc=0x510107b3, type=0x7) returned 0xffffffff9d050535
[0284.742] GetCurrentObject (hdc=0x510107b3, type=0x6) returned 0x8a01c2
[0284.743] SaveDC (hdc=0x510107b3) returned 1
[0284.743] GetNearestColor (hdc=0x510107b3, color=0xf0f0f0) returned 0xf0f0f0
[0284.743] CreateSolidBrush (color=0xf0f0f0) returned 0x2f10078d
[0284.743] FillRect (hDC=0x510107b3, lprc=0x53dbb8, hbr=0x2f10078d) returned 1
[0284.743] DeleteObject (ho=0x2f10078d) returned 1
[0284.743] RestoreDC (hdc=0x510107b3, nSavedDC=-1) returned 1
[0284.743] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.743] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.743] GetSystemMetrics (nIndex=42) returned 0
[0284.744] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.744] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0284.745] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0284.745] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0284.745] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0284.746] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0284.746] GetStockObject (i=5) returned 0x900015
[0284.746] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0284.746] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1702ca, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0284.746] GetStockObject (i=5) returned 0x900015
[0284.747] GetWindowPlacement (in: hWnd=0x39013e, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0284.747] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0284.747] GetClientRect (in: hWnd=0x39013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0284.747] GetWindowRect (in: hWnd=0x39013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0284.749] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0284.749] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0284.749] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0284.749] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0284.750] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0284.750] GetClientRect (in: hWnd=0x39013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0284.750] GetWindowRect (in: hWnd=0x39013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0284.750] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.750] IsWindowUnicode (hWnd=0x39013e) returned 1
[0284.750] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.750] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.750] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.750] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0284.750] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.750] IsWindowUnicode (hWnd=0x39013e) returned 1
[0284.750] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.750] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.750] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.750] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.751] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x84, wParam=0x0, lParam=0x1940352) returned 0x1
[0284.751] IsWindowUnicode (hWnd=0x1a0122) returned 1
[0284.751] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.751] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.751] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.751] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.752] IsWindowUnicode (hWnd=0x202c6) returned 1
[0284.752] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.752] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.752] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.752] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0284.752] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0284.752] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.752] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x84, wParam=0x0, lParam=0x1940352) returned 0x1
[0284.752] IsWindowUnicode (hWnd=0x1a0122) returned 1
[0284.752] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.753] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x84, wParam=0x0, lParam=0x1940352) returned 0x1
[0284.753] SetCursor (hCursor=0x10003) returned 0x10003
[0284.753] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.753] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.753] _TrackMouseEvent (in: lpEventTrack=0x23fa19c | out: lpEventTrack=0x23fa19c) returned 1
[0284.753] SendMessageW (hWnd=0x1a0122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0284.753] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0284.753] InvalidateRect (hWnd=0x1a0122, lpRect=0x0, bErase=0) returned 1
[0284.753] GetKeyState (nVirtKey=1) returned 0
[0284.753] GetKeyState (nVirtKey=2) returned 0
[0284.753] GetKeyState (nVirtKey=4) returned 0
[0284.753] GetKeyState (nVirtKey=5) returned 0
[0284.753] GetKeyState (nVirtKey=6) returned 0
[0284.753] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.754] IsWindowUnicode (hWnd=0x39013e) returned 1
[0284.754] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.754] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.754] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.754] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.755] IsWindowUnicode (hWnd=0x39013e) returned 1
[0284.755] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.755] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.755] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.755] BeginPaint (in: hWnd=0x39013e, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0xf0105ee
[0284.797] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0284.797] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.797] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.798] GetSystemMetrics (nIndex=42) returned 0
[0284.798] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.798] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0284.798] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0284.798] EndPaint (hWnd=0x39013e, lpPaint=0x53e30c) returned 1
[0284.799] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.799] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0284.799] IsWindowUnicode (hWnd=0x102dc) returned 1
[0284.800] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0284.801] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.801] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.802] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.802] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0284.803] IsWindowUnicode (hWnd=0x102dc) returned 1
[0284.803] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.803] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.803] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.804] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.804] IsWindowUnicode (hWnd=0x1a01e2) returned 1
[0284.804] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.804] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.805] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0284.805] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0284.805] SetTextColor (hdc=0x520107b3, color=0x0) returned 0x0
[0284.805] SetBkColor (hdc=0x520107b3, color=0xffffff) returned 0xffffff
[0284.806] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.807] IsWindowUnicode (hWnd=0x17004e) returned 1
[0284.807] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.807] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.807] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.807] BeginPaint (in: hWnd=0x17004e, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x60100ce
[0284.807] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0284.807] CreateCompatibleDC (hdc=0x60100ce) returned 0x5b0107c0
[0284.808] SelectObject (hdc=0x5b0107c0, h=0x1e0507b9) returned 0x85000f
[0284.808] GdipCreateFromHDC (hdc=0x5b0107c0, graphics=0x53e30c) returned 0x0
[0284.808] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0284.808] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0284.808] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0284.809] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0284.809] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0284.809] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0284.809] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0284.810] LocalFree (hMem=0x89ee08) returned 0x0
[0284.810] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0284.810] GdipCreateRegion (region=0x53e354) returned 0x0
[0284.810] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.810] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0284.810] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0284.811] GetWindowTextLengthW (hWnd=0x17004e) returned 16
[0284.811] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0284.811] GetSystemMetrics (nIndex=42) returned 0
[0284.811] GetWindowTextW (in: hWnd=0x17004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0284.811] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0284.811] GetClientRect (in: hWnd=0x17004e, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0284.811] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0284.811] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0284.811] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0284.812] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0284.812] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0284.812] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.812] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.812] LocalFree (hMem=0x89ea88) returned 0x0
[0284.812] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0284.812] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0284.812] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0284.813] LocalFree (hMem=0x89ee08) returned 0x0
[0284.813] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0284.813] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0284.813] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0284.813] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0284.813] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0284.814] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0284.814] GetCurrentObject (hdc=0x5b0107c0, type=0x1) returned 0xb00017
[0284.814] GetCurrentObject (hdc=0x5b0107c0, type=0x2) returned 0x900010
[0284.814] GetCurrentObject (hdc=0x5b0107c0, type=0x7) returned 0x1e0507b9
[0284.814] GetCurrentObject (hdc=0x5b0107c0, type=0x6) returned 0x8a01c2
[0284.814] SaveDC (hdc=0x5b0107c0) returned 1
[0284.815] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a04051e
[0284.815] GetClipRgn (hdc=0x5b0107c0, hrgn=0x6a04051e) returned 0
[0284.815] SelectClipRgn (hdc=0x5b0107c0, hrgn=0xe00407a1) returned 2
[0284.815] DeleteObject (ho=0x6a04051e) returned 1
[0284.815] DeleteObject (ho=0xe00407a1) returned 1
[0284.815] OffsetViewportOrgEx (in: hdc=0x5b0107c0, x=0, y=0, lppt=0x23fa6a4 | out: lppt=0x23fa6a4) returned 1
[0284.815] GetNearestColor (hdc=0x5b0107c0, color=0xf0f0f0) returned 0xf0f0f0
[0284.815] CreateSolidBrush (color=0xf0f0f0) returned 0x3010078d
[0284.816] FillRect (hDC=0x5b0107c0, lprc=0x53e1f4, hbr=0x3010078d) returned 1
[0284.816] DeleteObject (ho=0x3010078d) returned 1
[0284.816] RestoreDC (hdc=0x5b0107c0, nSavedDC=-1) returned 1
[0284.816] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5b0107c0) returned 0x0
[0284.816] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfac10dbd) returned 0x0
[0284.816] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.816] GetWindowTextLengthW (hWnd=0x17004e) returned 16
[0284.816] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0284.817] GetSystemMetrics (nIndex=42) returned 0
[0284.817] GetWindowTextW (in: hWnd=0x17004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0284.817] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0284.817] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0284.817] GetCurrentObject (hdc=0x5b0107c0, type=0x1) returned 0xb00017
[0284.817] GetCurrentObject (hdc=0x5b0107c0, type=0x2) returned 0x900010
[0284.817] GetCurrentObject (hdc=0x5b0107c0, type=0x7) returned 0x1e0507b9
[0284.817] GetCurrentObject (hdc=0x5b0107c0, type=0x6) returned 0x8a01c2
[0284.818] SaveDC (hdc=0x5b0107c0) returned 1
[0284.818] GetNearestColor (hdc=0x5b0107c0, color=0x0) returned 0x0
[0284.818] RestoreDC (hdc=0x5b0107c0, nSavedDC=-1) returned 1
[0284.824] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5b0107c0) returned 0x0
[0284.825] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0284.825] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0284.825] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0284.826] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x23fa9ac | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0284.826] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0284.826] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0284.826] GetCurrentObject (hdc=0x5b0107c0, type=0x1) returned 0xb00017
[0284.826] GetCurrentObject (hdc=0x5b0107c0, type=0x2) returned 0x900010
[0284.826] GetCurrentObject (hdc=0x5b0107c0, type=0x7) returned 0x1e0507b9
[0284.826] GetCurrentObject (hdc=0x5b0107c0, type=0x6) returned 0x8a01c2
[0284.826] SaveDC (hdc=0x5b0107c0) returned 1
[0284.827] GetTextAlign (hdc=0x5b0107c0) returned 0x0
[0284.827] GetTextColor (hdc=0x5b0107c0) returned 0x0
[0284.827] GetCurrentObject (hdc=0x5b0107c0, type=0x6) returned 0x8a01c2
[0284.827] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0284.827] SelectObject (hdc=0x5b0107c0, h=0x730a066d) returned 0x8a01c2
[0284.827] GetBkMode (hdc=0x5b0107c0) returned 2
[0284.827] SetBkMode (hdc=0x5b0107c0, mode=1) returned 2
[0284.827] DrawTextExW (in: hdc=0x5b0107c0, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x23fabd0 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0284.828] RestoreDC (hdc=0x5b0107c0, nSavedDC=-1) returned 1
[0284.828] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5b0107c0) returned 0x0
[0284.828] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0284.828] BitBlt (hdc=0x60100ce, x=0, y=0, cx=250, cy=70, hdcSrc=0x5b0107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0284.828] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5b0107c0) returned 0x0
[0284.828] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0284.828] SelectObject (hdc=0x5b0107c0, h=0x85000f) returned 0x1e0507b9
[0284.828] DeleteDC (hdc=0x5b0107c0) returned 1
[0284.829] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0284.829] EndPaint (hWnd=0x17004e, lpPaint=0x53e2f0) returned 1
[0284.829] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.829] IsWindowUnicode (hWnd=0x1a0122) returned 1
[0284.829] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.829] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.829] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.829] BeginPaint (in: hWnd=0x1a0122, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0284.829] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0284.830] CreateCompatibleDC (hdc=0x10105d6) returned 0x5d0107c0
[0284.830] SelectObject (hdc=0x5d0107c0, h=0x1e0507b9) returned 0x85000f
[0284.830] GdipCreateFromHDC (hdc=0x5d0107c0, graphics=0x53e300) returned 0x0
[0284.830] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0284.830] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0284.830] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0284.830] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0284.830] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0284.830] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.830] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0284.830] LocalFree (hMem=0x89ea88) returned 0x0
[0284.830] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0284.830] GdipCreateRegion (region=0x53e348) returned 0x0
[0284.831] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.831] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0284.831] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0284.831] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfabf0dbd) returned 0x0
[0284.831] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.831] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0284.831] GetCurrentObject (hdc=0x5d0107c0, type=0x1) returned 0xb00017
[0284.831] GetCurrentObject (hdc=0x5d0107c0, type=0x2) returned 0x900010
[0284.831] GetCurrentObject (hdc=0x5d0107c0, type=0x7) returned 0x1e0507b9
[0284.831] GetCurrentObject (hdc=0x5d0107c0, type=0x6) returned 0x8a01c2
[0284.831] SaveDC (hdc=0x5d0107c0) returned 1
[0284.831] GetNearestColor (hdc=0x5d0107c0, color=0xf0f0f0) returned 0xf0f0f0
[0284.831] GetNearestColor (hdc=0x5d0107c0, color=0xa0a0a0) returned 0xa0a0a0
[0284.831] GetNearestColor (hdc=0x5d0107c0, color=0x696969) returned 0x696969
[0284.831] GetNearestColor (hdc=0x5d0107c0, color=0xa0a0a0) returned 0xa0a0a0
[0284.832] GetNearestColor (hdc=0x5d0107c0, color=0x0) returned 0x0
[0284.832] GetNearestColor (hdc=0x5d0107c0, color=0xffffff) returned 0xffffff
[0284.832] GetNearestColor (hdc=0x5d0107c0, color=0xe5e5e5) returned 0xe5e5e5
[0284.832] GetNearestColor (hdc=0x5d0107c0, color=0xd7d7d7) returned 0xd7d7d7
[0284.832] GetNearestColor (hdc=0x5d0107c0, color=0x0) returned 0x0
[0284.832] RestoreDC (hdc=0x5d0107c0, nSavedDC=-1) returned 1
[0284.832] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5d0107c0) returned 0x0
[0284.832] IsAppThemed () returned 0x1
[0284.832] GetThemeAppProperties () returned 0x3
[0284.832] GetThemeAppProperties () returned 0x3
[0284.832] IsAppThemed () returned 0x1
[0284.832] GetThemeAppProperties () returned 0x3
[0284.832] GetThemeAppProperties () returned 0x3
[0284.832] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x23fb33c | out: lpchText="OK", lprc=0x53e01c) returned 13
[0284.833] IsAppThemed () returned 0x1
[0284.833] GetThemeAppProperties () returned 0x3
[0284.833] GetThemeAppProperties () returned 0x3
[0284.833] IsAppThemed () returned 0x1
[0284.833] GetThemeAppProperties () returned 0x3
[0284.833] GetThemeAppProperties () returned 0x3
[0284.833] IsAppThemed () returned 0x1
[0284.833] GetThemeAppProperties () returned 0x3
[0284.833] GetThemeAppProperties () returned 0x3
[0284.833] IsAppThemed () returned 0x1
[0284.841] GetThemeAppProperties () returned 0x3
[0284.841] GetThemeAppProperties () returned 0x3
[0284.841] IsThemePartDefined () returned 0x1
[0284.841] IsAppThemed () returned 0x1
[0284.841] GetThemeAppProperties () returned 0x3
[0284.841] GetThemeAppProperties () returned 0x3
[0284.841] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0284.841] IsAppThemed () returned 0x1
[0284.841] GetThemeAppProperties () returned 0x3
[0284.841] GetThemeAppProperties () returned 0x3
[0284.841] IsAppThemed () returned 0x1
[0284.841] GetThemeAppProperties () returned 0x3
[0284.841] GetThemeAppProperties () returned 0x3
[0284.841] IsThemePartDefined () returned 0x1
[0284.841] GdipCreateRegion (region=0x53e064) returned 0x0
[0284.841] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.841] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0284.842] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0284.842] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0284.842] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.842] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.842] LocalFree (hMem=0x89ea88) returned 0x0
[0284.842] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0284.842] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0284.842] LocalFree (hMem=0x89ee08) returned 0x0
[0284.842] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0284.842] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0284.842] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0284.842] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0284.842] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.842] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0284.842] GetCurrentObject (hdc=0x5d0107c0, type=0x1) returned 0xb00017
[0284.842] GetCurrentObject (hdc=0x5d0107c0, type=0x2) returned 0x900010
[0284.842] GetCurrentObject (hdc=0x5d0107c0, type=0x7) returned 0x1e0507b9
[0284.843] GetCurrentObject (hdc=0x5d0107c0, type=0x6) returned 0x8a01c2
[0284.843] SaveDC (hdc=0x5d0107c0) returned 1
[0284.843] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe10407a1
[0284.843] GetClipRgn (hdc=0x5d0107c0, hrgn=0xe10407a1) returned 0
[0284.843] SelectClipRgn (hdc=0x5d0107c0, hrgn=0x6e04051e) returned 2
[0284.843] DeleteObject (ho=0xe10407a1) returned 1
[0284.843] DeleteObject (ho=0x6e04051e) returned 1
[0284.843] OffsetViewportOrgEx (in: hdc=0x5d0107c0, x=0, y=0, lppt=0x23fb9ec | out: lppt=0x23fb9ec) returned 1
[0284.843] DrawThemeParentBackground () returned 0x0
[0284.843] GetWindowPlacement (in: hWnd=0x39013e, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0284.843] GetClientRect (in: hWnd=0x39013e, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0284.843] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.843] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.844] GetSystemMetrics (nIndex=42) returned 0
[0284.844] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.844] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0284.844] GetClientRect (in: hWnd=0x39013e, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0284.844] GetCurrentObject (hdc=0x5d0107c0, type=0x1) returned 0xb00017
[0284.844] GetCurrentObject (hdc=0x5d0107c0, type=0x2) returned 0x900010
[0284.844] GetCurrentObject (hdc=0x5d0107c0, type=0x7) returned 0x1e0507b9
[0284.844] GetCurrentObject (hdc=0x5d0107c0, type=0x6) returned 0x8a01c2
[0284.844] SaveDC (hdc=0x5d0107c0) returned 2
[0284.844] GetNearestColor (hdc=0x5d0107c0, color=0xf0f0f0) returned 0xf0f0f0
[0284.844] CreateSolidBrush (color=0xf0f0f0) returned 0x3110078d
[0284.844] FillRect (hDC=0x5d0107c0, lprc=0x53dac8, hbr=0x3110078d) returned 1
[0284.844] DeleteObject (ho=0x3110078d) returned 1
[0284.844] RestoreDC (hdc=0x5d0107c0, nSavedDC=-1) returned 1
[0284.845] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.845] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.845] GetSystemMetrics (nIndex=42) returned 0
[0284.845] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.845] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0284.845] GetClientRect (in: hWnd=0x39013e, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0284.845] GetCurrentObject (hdc=0x5d0107c0, type=0x1) returned 0xb00017
[0284.845] GetCurrentObject (hdc=0x5d0107c0, type=0x2) returned 0x900010
[0284.845] GetCurrentObject (hdc=0x5d0107c0, type=0x7) returned 0x1e0507b9
[0284.845] GetCurrentObject (hdc=0x5d0107c0, type=0x6) returned 0x8a01c2
[0284.845] SaveDC (hdc=0x5d0107c0) returned 2
[0284.845] GetNearestColor (hdc=0x5d0107c0, color=0xf0f0f0) returned 0xf0f0f0
[0284.845] CreateSolidBrush (color=0xf0f0f0) returned 0x3210078d
[0284.845] FillRect (hDC=0x5d0107c0, lprc=0x53da68, hbr=0x3210078d) returned 1
[0284.845] DeleteObject (ho=0x3210078d) returned 1
[0284.845] RestoreDC (hdc=0x5d0107c0, nSavedDC=-1) returned 1
[0284.846] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.846] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.846] GetSystemMetrics (nIndex=42) returned 0
[0284.846] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.846] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0284.846] RestoreDC (hdc=0x5d0107c0, nSavedDC=-1) returned 1
[0284.846] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5d0107c0) returned 0x0
[0284.846] IsAppThemed () returned 0x1
[0284.846] GetThemeAppProperties () returned 0x3
[0284.846] GetThemeAppProperties () returned 0x3
[0284.846] IsAppThemed () returned 0x1
[0284.847] GetThemeAppProperties () returned 0x3
[0284.847] GetThemeAppProperties () returned 0x3
[0284.847] IsThemePartDefined () returned 0x1
[0284.847] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0284.847] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.847] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0284.847] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0284.847] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0284.847] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.847] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0284.847] LocalFree (hMem=0x89ea88) returned 0x0
[0284.847] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0284.847] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0284.847] LocalFree (hMem=0x89eee8) returned 0x0
[0284.847] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0284.848] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0284.848] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0284.848] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0284.848] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.848] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0284.848] GetCurrentObject (hdc=0x5d0107c0, type=0x1) returned 0xb00017
[0284.848] GetCurrentObject (hdc=0x5d0107c0, type=0x2) returned 0x900010
[0284.848] GetCurrentObject (hdc=0x5d0107c0, type=0x7) returned 0x1e0507b9
[0284.848] GetCurrentObject (hdc=0x5d0107c0, type=0x6) returned 0x8a01c2
[0284.848] SaveDC (hdc=0x5d0107c0) returned 1
[0284.848] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f04051e
[0284.848] GetClipRgn (hdc=0x5d0107c0, hrgn=0x6f04051e) returned 0
[0284.848] SelectClipRgn (hdc=0x5d0107c0, hrgn=0xe30407a1) returned 2
[0284.848] DeleteObject (ho=0x6f04051e) returned 1
[0284.848] DeleteObject (ho=0xe30407a1) returned 1
[0284.848] OffsetViewportOrgEx (in: hdc=0x5d0107c0, x=0, y=0, lppt=0x23fc274 | out: lppt=0x23fc274) returned 1
[0284.848] IsAppThemed () returned 0x1
[0284.848] GetThemeAppProperties () returned 0x3
[0284.849] GetThemeAppProperties () returned 0x3
[0284.849] DrawThemeBackground () returned 0x0
[0284.849] RestoreDC (hdc=0x5d0107c0, nSavedDC=-1) returned 1
[0284.849] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5d0107c0) returned 0x0
[0284.849] GdipCreateRegion (region=0x53dfec) returned 0x0
[0284.849] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.849] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0284.849] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0284.849] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0284.849] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0284.849] LocalFree (hMem=0x89ee08) returned 0x0
[0284.850] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.850] LocalFree (hMem=0x89ea88) returned 0x0
[0284.850] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0284.850] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0284.850] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0284.850] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0284.850] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.850] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0284.850] GetCurrentObject (hdc=0x5d0107c0, type=0x1) returned 0xb00017
[0284.850] GetCurrentObject (hdc=0x5d0107c0, type=0x2) returned 0x900010
[0284.850] GetCurrentObject (hdc=0x5d0107c0, type=0x7) returned 0x1e0507b9
[0284.850] GetCurrentObject (hdc=0x5d0107c0, type=0x6) returned 0x8a01c2
[0284.850] SaveDC (hdc=0x5d0107c0) returned 1
[0284.850] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe40407a1
[0284.850] GetClipRgn (hdc=0x5d0107c0, hrgn=0xe40407a1) returned 0
[0284.851] SelectClipRgn (hdc=0x5d0107c0, hrgn=0x7004051e) returned 2
[0284.851] DeleteObject (ho=0xe40407a1) returned 1
[0284.851] DeleteObject (ho=0x7004051e) returned 1
[0284.851] OffsetViewportOrgEx (in: hdc=0x5d0107c0, x=0, y=0, lppt=0x23fc548 | out: lppt=0x23fc548) returned 1
[0284.851] IsAppThemed () returned 0x1
[0284.851] GetThemeAppProperties () returned 0x3
[0284.851] GetThemeAppProperties () returned 0x3
[0284.851] GetThemeBackgroundContentRect () returned 0x0
[0284.851] RestoreDC (hdc=0x5d0107c0, nSavedDC=-1) returned 1
[0284.851] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5d0107c0) returned 0x0
[0284.851] IsAppThemed () returned 0x1
[0284.851] GetThemeAppProperties () returned 0x3
[0284.851] GetThemeAppProperties () returned 0x3
[0284.851] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0284.851] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0284.851] GetCurrentObject (hdc=0x5d0107c0, type=0x1) returned 0xb00017
[0284.851] GetCurrentObject (hdc=0x5d0107c0, type=0x2) returned 0x900010
[0284.851] GetCurrentObject (hdc=0x5d0107c0, type=0x7) returned 0x1e0507b9
[0284.851] GetCurrentObject (hdc=0x5d0107c0, type=0x6) returned 0x8a01c2
[0284.852] SaveDC (hdc=0x5d0107c0) returned 1
[0284.852] GetTextAlign (hdc=0x5d0107c0) returned 0x0
[0284.852] GetTextColor (hdc=0x5d0107c0) returned 0x0
[0284.852] GetCurrentObject (hdc=0x5d0107c0, type=0x6) returned 0x8a01c2
[0284.852] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0284.852] SelectObject (hdc=0x5d0107c0, h=0x730a066d) returned 0x8a01c2
[0284.852] GetBkMode (hdc=0x5d0107c0) returned 2
[0284.852] SetBkMode (hdc=0x5d0107c0, mode=1) returned 2
[0284.852] DrawTextExW (in: hdc=0x5d0107c0, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x23fc8e8 | out: lpchText="OK", lprc=0x53df84) returned 13
[0284.852] DrawTextExW (in: hdc=0x5d0107c0, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x23fc8e8 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0284.853] RestoreDC (hdc=0x5d0107c0, nSavedDC=-1) returned 1
[0284.853] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5d0107c0) returned 0x0
[0284.853] GetFocus () returned 0x1a01e2
[0284.853] IsAppThemed () returned 0x1
[0284.853] GetThemeAppProperties () returned 0x3
[0284.853] GetThemeAppProperties () returned 0x3
[0284.853] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0284.853] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x5d0107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0284.853] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5d0107c0) returned 0x0
[0284.853] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0284.853] SelectObject (hdc=0x5d0107c0, h=0x85000f) returned 0x1e0507b9
[0284.853] DeleteDC (hdc=0x5d0107c0) returned 1
[0284.854] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0284.854] EndPaint (hWnd=0x1a0122, lpPaint=0x53e2e4) returned 1
[0284.854] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.854] IsWindowUnicode (hWnd=0x1702ca) returned 1
[0284.854] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.854] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.854] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.854] BeginPaint (in: hWnd=0x1702ca, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0284.854] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0284.854] CreateCompatibleDC (hdc=0x60100ce) returned 0x5f0107c0
[0284.855] SelectObject (hdc=0x5f0107c0, h=0x1e0507b9) returned 0x85000f
[0284.855] GdipCreateFromHDC (hdc=0x5f0107c0, graphics=0x53e300) returned 0x0
[0284.855] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0284.855] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0284.855] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0284.855] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0284.855] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0284.855] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0284.855] LocalFree (hMem=0x89ee08) returned 0x0
[0284.855] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0284.855] GdipCreateRegion (region=0x53e348) returned 0x0
[0284.855] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.855] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0284.855] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0284.855] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfabd0dbd) returned 0x0
[0284.855] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.856] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0284.856] GetCurrentObject (hdc=0x5f0107c0, type=0x1) returned 0xb00017
[0284.856] GetCurrentObject (hdc=0x5f0107c0, type=0x2) returned 0x900010
[0284.856] GetCurrentObject (hdc=0x5f0107c0, type=0x7) returned 0x1e0507b9
[0284.856] GetCurrentObject (hdc=0x5f0107c0, type=0x6) returned 0x8a01c2
[0284.856] SaveDC (hdc=0x5f0107c0) returned 1
[0284.856] GetNearestColor (hdc=0x5f0107c0, color=0xf0f0f0) returned 0xf0f0f0
[0284.856] GetNearestColor (hdc=0x5f0107c0, color=0xa0a0a0) returned 0xa0a0a0
[0284.856] GetNearestColor (hdc=0x5f0107c0, color=0x696969) returned 0x696969
[0284.856] GetNearestColor (hdc=0x5f0107c0, color=0xa0a0a0) returned 0xa0a0a0
[0284.856] GetNearestColor (hdc=0x5f0107c0, color=0x0) returned 0x0
[0284.856] GetNearestColor (hdc=0x5f0107c0, color=0xffffff) returned 0xffffff
[0284.856] GetNearestColor (hdc=0x5f0107c0, color=0xe5e5e5) returned 0xe5e5e5
[0284.856] GetNearestColor (hdc=0x5f0107c0, color=0xd7d7d7) returned 0xd7d7d7
[0284.856] GetNearestColor (hdc=0x5f0107c0, color=0x0) returned 0x0
[0284.857] RestoreDC (hdc=0x5f0107c0, nSavedDC=-1) returned 1
[0284.857] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107c0) returned 0x0
[0284.857] IsAppThemed () returned 0x1
[0284.857] GetThemeAppProperties () returned 0x3
[0284.857] GetThemeAppProperties () returned 0x3
[0284.857] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0284.857] SendMessageW (hWnd=0x39013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0284.857] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0284.857] IsAppThemed () returned 0x1
[0284.857] GetThemeAppProperties () returned 0x3
[0284.857] GetThemeAppProperties () returned 0x3
[0284.857] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x23fd0f8 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0284.857] IsAppThemed () returned 0x1
[0284.857] GetThemeAppProperties () returned 0x3
[0284.858] GetThemeAppProperties () returned 0x3
[0284.858] IsAppThemed () returned 0x1
[0284.858] GetThemeAppProperties () returned 0x3
[0284.858] GetThemeAppProperties () returned 0x3
[0284.858] GetFocus () returned 0x1a01e2
[0284.858] IsAppThemed () returned 0x1
[0284.858] GetThemeAppProperties () returned 0x3
[0284.858] GetThemeAppProperties () returned 0x3
[0284.858] IsAppThemed () returned 0x1
[0284.858] GetThemeAppProperties () returned 0x3
[0284.858] GetThemeAppProperties () returned 0x3
[0284.858] IsThemePartDefined () returned 0x1
[0284.858] IsAppThemed () returned 0x1
[0284.858] GetThemeAppProperties () returned 0x3
[0284.858] GetThemeAppProperties () returned 0x3
[0284.858] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0284.858] IsAppThemed () returned 0x1
[0284.858] GetThemeAppProperties () returned 0x3
[0284.858] GetThemeAppProperties () returned 0x3
[0284.858] IsAppThemed () returned 0x1
[0284.858] GetThemeAppProperties () returned 0x3
[0284.858] GetThemeAppProperties () returned 0x3
[0284.859] IsThemePartDefined () returned 0x1
[0284.859] GdipCreateRegion (region=0x53e070) returned 0x0
[0284.859] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.859] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0284.859] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0284.859] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0284.859] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.859] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.859] LocalFree (hMem=0x89ea88) returned 0x0
[0284.859] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.859] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.859] LocalFree (hMem=0x89ea88) returned 0x0
[0284.859] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0284.859] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0284.859] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0284.859] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0284.859] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.859] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0284.860] GetCurrentObject (hdc=0x5f0107c0, type=0x1) returned 0xb00017
[0284.860] GetCurrentObject (hdc=0x5f0107c0, type=0x2) returned 0x900010
[0284.860] GetCurrentObject (hdc=0x5f0107c0, type=0x7) returned 0x1e0507b9
[0284.860] GetCurrentObject (hdc=0x5f0107c0, type=0x6) returned 0x8a01c2
[0284.860] SaveDC (hdc=0x5f0107c0) returned 1
[0284.860] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7104051e
[0284.860] GetClipRgn (hdc=0x5f0107c0, hrgn=0x7104051e) returned 0
[0284.860] SelectClipRgn (hdc=0x5f0107c0, hrgn=0xe80407a1) returned 2
[0284.860] DeleteObject (ho=0x7104051e) returned 1
[0284.860] DeleteObject (ho=0xe80407a1) returned 1
[0284.860] OffsetViewportOrgEx (in: hdc=0x5f0107c0, x=0, y=0, lppt=0x23fd7a8 | out: lppt=0x23fd7a8) returned 1
[0284.860] DrawThemeParentBackground () returned 0x0
[0284.861] GetWindowPlacement (in: hWnd=0x39013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0284.861] GetClientRect (in: hWnd=0x39013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0284.861] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.861] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.861] GetSystemMetrics (nIndex=42) returned 0
[0284.861] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.861] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0284.861] GetClientRect (in: hWnd=0x39013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0284.861] GetCurrentObject (hdc=0x5f0107c0, type=0x1) returned 0xb00017
[0284.861] GetCurrentObject (hdc=0x5f0107c0, type=0x2) returned 0x900010
[0284.862] GetCurrentObject (hdc=0x5f0107c0, type=0x7) returned 0x1e0507b9
[0284.862] GetCurrentObject (hdc=0x5f0107c0, type=0x6) returned 0x8a01c2
[0284.862] SaveDC (hdc=0x5f0107c0) returned 2
[0284.862] GetNearestColor (hdc=0x5f0107c0, color=0xf0f0f0) returned 0xf0f0f0
[0284.862] CreateSolidBrush (color=0xf0f0f0) returned 0x3310078d
[0284.862] FillRect (hDC=0x5f0107c0, lprc=0x53dad0, hbr=0x3310078d) returned 1
[0284.862] DeleteObject (ho=0x3310078d) returned 1
[0284.862] RestoreDC (hdc=0x5f0107c0, nSavedDC=-1) returned 1
[0284.862] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.862] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.862] GetSystemMetrics (nIndex=42) returned 0
[0284.862] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.862] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0284.862] GetClientRect (in: hWnd=0x39013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0284.862] GetCurrentObject (hdc=0x5f0107c0, type=0x1) returned 0xb00017
[0284.863] GetCurrentObject (hdc=0x5f0107c0, type=0x2) returned 0x900010
[0284.863] GetCurrentObject (hdc=0x5f0107c0, type=0x7) returned 0x1e0507b9
[0284.863] GetCurrentObject (hdc=0x5f0107c0, type=0x6) returned 0x8a01c2
[0284.863] SaveDC (hdc=0x5f0107c0) returned 2
[0284.863] GetNearestColor (hdc=0x5f0107c0, color=0xf0f0f0) returned 0xf0f0f0
[0284.863] CreateSolidBrush (color=0xf0f0f0) returned 0x3410078d
[0284.863] FillRect (hDC=0x5f0107c0, lprc=0x53da70, hbr=0x3410078d) returned 1
[0284.863] DeleteObject (ho=0x3410078d) returned 1
[0284.863] RestoreDC (hdc=0x5f0107c0, nSavedDC=-1) returned 1
[0284.863] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0284.863] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0284.863] GetSystemMetrics (nIndex=42) returned 0
[0284.863] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0284.863] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0284.864] RestoreDC (hdc=0x5f0107c0, nSavedDC=-1) returned 1
[0284.864] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107c0) returned 0x0
[0284.864] IsAppThemed () returned 0x1
[0284.864] GetThemeAppProperties () returned 0x3
[0284.864] GetThemeAppProperties () returned 0x3
[0284.864] IsAppThemed () returned 0x1
[0284.864] GetThemeAppProperties () returned 0x3
[0284.864] GetThemeAppProperties () returned 0x3
[0284.864] IsThemePartDefined () returned 0x1
[0284.864] GdipCreateRegion (region=0x53dff4) returned 0x0
[0284.864] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.864] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0284.864] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0284.864] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0284.865] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.865] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0284.865] LocalFree (hMem=0x89ea88) returned 0x0
[0284.865] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0284.871] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0284.872] LocalFree (hMem=0x89ee08) returned 0x0
[0284.872] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0284.872] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0284.872] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0284.872] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0284.872] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.872] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0284.872] GetCurrentObject (hdc=0x5f0107c0, type=0x1) returned 0xb00017
[0284.872] GetCurrentObject (hdc=0x5f0107c0, type=0x2) returned 0x900010
[0284.872] GetCurrentObject (hdc=0x5f0107c0, type=0x7) returned 0x1e0507b9
[0284.872] GetCurrentObject (hdc=0x5f0107c0, type=0x6) returned 0x8a01c2
[0284.872] SaveDC (hdc=0x5f0107c0) returned 1
[0284.873] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe90407a1
[0284.873] GetClipRgn (hdc=0x5f0107c0, hrgn=0xe90407a1) returned 0
[0284.873] SelectClipRgn (hdc=0x5f0107c0, hrgn=0x7304051e) returned 2
[0284.873] DeleteObject (ho=0xe90407a1) returned 1
[0284.873] DeleteObject (ho=0x7304051e) returned 1
[0284.873] OffsetViewportOrgEx (in: hdc=0x5f0107c0, x=0, y=0, lppt=0x23fe030 | out: lppt=0x23fe030) returned 1
[0284.873] IsAppThemed () returned 0x1
[0284.873] GetThemeAppProperties () returned 0x3
[0284.873] GetThemeAppProperties () returned 0x3
[0284.873] DrawThemeBackground () returned 0x0
[0284.873] RestoreDC (hdc=0x5f0107c0, nSavedDC=-1) returned 1
[0284.873] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107c0) returned 0x0
[0284.873] GdipCreateRegion (region=0x53dff8) returned 0x0
[0284.873] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.874] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0284.874] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0284.874] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0284.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0284.874] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0284.874] LocalFree (hMem=0x89ee08) returned 0x0
[0284.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.874] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.874] LocalFree (hMem=0x89ea88) returned 0x0
[0284.874] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0284.874] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0284.874] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0284.874] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0284.874] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.874] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0284.875] GetCurrentObject (hdc=0x5f0107c0, type=0x1) returned 0xb00017
[0284.875] GetCurrentObject (hdc=0x5f0107c0, type=0x2) returned 0x900010
[0284.875] GetCurrentObject (hdc=0x5f0107c0, type=0x7) returned 0x1e0507b9
[0284.875] GetCurrentObject (hdc=0x5f0107c0, type=0x6) returned 0x8a01c2
[0284.875] SaveDC (hdc=0x5f0107c0) returned 1
[0284.875] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7404051e
[0284.875] GetClipRgn (hdc=0x5f0107c0, hrgn=0x7404051e) returned 0
[0284.875] SelectClipRgn (hdc=0x5f0107c0, hrgn=0xea0407a1) returned 2
[0284.875] DeleteObject (ho=0x7404051e) returned 1
[0284.875] DeleteObject (ho=0xea0407a1) returned 1
[0284.875] OffsetViewportOrgEx (in: hdc=0x5f0107c0, x=0, y=0, lppt=0x23fe304 | out: lppt=0x23fe304) returned 1
[0284.875] IsAppThemed () returned 0x1
[0284.876] GetThemeAppProperties () returned 0x3
[0284.876] GetThemeAppProperties () returned 0x3
[0284.876] GetThemeBackgroundContentRect () returned 0x0
[0284.876] RestoreDC (hdc=0x5f0107c0, nSavedDC=-1) returned 1
[0284.876] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107c0) returned 0x0
[0284.876] IsAppThemed () returned 0x1
[0284.876] GetThemeAppProperties () returned 0x3
[0284.876] GetThemeAppProperties () returned 0x3
[0284.876] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0284.876] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0284.877] GetCurrentObject (hdc=0x5f0107c0, type=0x1) returned 0xb00017
[0284.877] GetCurrentObject (hdc=0x5f0107c0, type=0x2) returned 0x900010
[0284.877] GetCurrentObject (hdc=0x5f0107c0, type=0x7) returned 0x1e0507b9
[0284.877] GetCurrentObject (hdc=0x5f0107c0, type=0x6) returned 0x8a01c2
[0284.877] SaveDC (hdc=0x5f0107c0) returned 1
[0284.877] GetTextAlign (hdc=0x5f0107c0) returned 0x0
[0284.877] GetTextColor (hdc=0x5f0107c0) returned 0x0
[0284.877] GetCurrentObject (hdc=0x5f0107c0, type=0x6) returned 0x8a01c2
[0284.877] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0284.877] SelectObject (hdc=0x5f0107c0, h=0x730a066d) returned 0x8a01c2
[0284.877] GetBkMode (hdc=0x5f0107c0) returned 2
[0284.877] SetBkMode (hdc=0x5f0107c0, mode=1) returned 2
[0284.878] DrawTextExW (in: hdc=0x5f0107c0, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x23fe6a4 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0284.878] DrawTextExW (in: hdc=0x5f0107c0, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x23fe6a4 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0284.878] RestoreDC (hdc=0x5f0107c0, nSavedDC=-1) returned 1
[0284.878] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107c0) returned 0x0
[0284.878] GetFocus () returned 0x1a01e2
[0284.878] IsAppThemed () returned 0x1
[0284.879] GetThemeAppProperties () returned 0x3
[0284.879] GetThemeAppProperties () returned 0x3
[0284.879] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0284.879] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x5f0107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0284.879] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5f0107c0) returned 0x0
[0284.879] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0284.879] SelectObject (hdc=0x5f0107c0, h=0x85000f) returned 0x1e0507b9
[0284.879] DeleteDC (hdc=0x5f0107c0) returned 1
[0284.879] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0284.879] EndPaint (hWnd=0x1702ca, lpPaint=0x53e2e4) returned 1
[0284.880] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.880] IsWindowUnicode (hWnd=0x202c6) returned 1
[0284.880] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.880] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.880] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.880] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0284.880] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0284.880] CreateCompatibleDC (hdc=0x10105d6) returned 0x610107c0
[0284.880] SelectObject (hdc=0x610107c0, h=0x1e0507b9) returned 0x85000f
[0284.880] GdipCreateFromHDC (hdc=0x610107c0, graphics=0x53e300) returned 0x0
[0284.950] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0284.950] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0284.950] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0284.950] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0284.950] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0284.950] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0284.950] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0284.950] LocalFree (hMem=0x89eac0) returned 0x0
[0284.950] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0284.950] GdipCreateRegion (region=0x53e348) returned 0x0
[0284.950] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.950] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0284.950] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0284.950] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfabb0dbd) returned 0x0
[0284.951] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.951] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0284.951] GetCurrentObject (hdc=0x610107c0, type=0x1) returned 0xb00017
[0284.951] GetCurrentObject (hdc=0x610107c0, type=0x2) returned 0x900010
[0284.951] GetCurrentObject (hdc=0x610107c0, type=0x7) returned 0x1e0507b9
[0284.951] GetCurrentObject (hdc=0x610107c0, type=0x6) returned 0x8a01c2
[0284.951] SaveDC (hdc=0x610107c0) returned 1
[0284.951] GetNearestColor (hdc=0x610107c0, color=0xff) returned 0xff
[0284.951] GetNearestColor (hdc=0x610107c0, color=0x55) returned 0x55
[0284.951] GetNearestColor (hdc=0x610107c0, color=0x0) returned 0x0
[0284.951] GetNearestColor (hdc=0x610107c0, color=0x55) returned 0x55
[0284.951] GetNearestColor (hdc=0x610107c0, color=0x0) returned 0x0
[0284.951] GetNearestColor (hdc=0x610107c0, color=0x8080ff) returned 0x8080ff
[0284.952] GetNearestColor (hdc=0x610107c0, color=0x7373e5) returned 0x7373e5
[0284.952] GetNearestColor (hdc=0x610107c0, color=0xe5) returned 0xe5
[0284.952] GetNearestColor (hdc=0x610107c0, color=0x0) returned 0x0
[0284.952] RestoreDC (hdc=0x610107c0, nSavedDC=-1) returned 1
[0284.952] GdipReleaseDC (graphics=0x5d92c30, hdc=0x610107c0) returned 0x0
[0284.952] IsAppThemed () returned 0x1
[0284.952] GetThemeAppProperties () returned 0x3
[0284.952] GetThemeAppProperties () returned 0x3
[0284.952] IsAppThemed () returned 0x1
[0284.952] GetThemeAppProperties () returned 0x3
[0284.952] GetThemeAppProperties () returned 0x3
[0284.952] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0284.952] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x23fee88 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0284.953] IsAppThemed () returned 0x1
[0284.953] GetThemeAppProperties () returned 0x3
[0284.953] GetThemeAppProperties () returned 0x3
[0284.953] IsAppThemed () returned 0x1
[0284.953] GetThemeAppProperties () returned 0x3
[0284.953] GetThemeAppProperties () returned 0x3
[0284.953] GetFocus () returned 0x1a01e2
[0284.953] IsAppThemed () returned 0x1
[0284.953] GetThemeAppProperties () returned 0x3
[0284.953] GetThemeAppProperties () returned 0x3
[0284.953] IsAppThemed () returned 0x1
[0284.953] GetThemeAppProperties () returned 0x3
[0284.953] GetThemeAppProperties () returned 0x3
[0284.953] IsThemePartDefined () returned 0x1
[0284.953] IsAppThemed () returned 0x1
[0284.953] GetThemeAppProperties () returned 0x3
[0284.953] GetThemeAppProperties () returned 0x3
[0284.953] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0284.954] IsAppThemed () returned 0x1
[0284.954] GetThemeAppProperties () returned 0x3
[0284.954] GetThemeAppProperties () returned 0x3
[0284.954] IsAppThemed () returned 0x1
[0284.954] GetThemeAppProperties () returned 0x3
[0284.954] GetThemeAppProperties () returned 0x3
[0284.954] IsThemePartDefined () returned 0x1
[0284.954] GdipCreateRegion (region=0x53e070) returned 0x0
[0284.954] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.954] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0284.954] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0284.954] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0284.954] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.954] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.954] LocalFree (hMem=0x89ea88) returned 0x0
[0284.954] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0284.954] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0284.954] LocalFree (hMem=0x89eee8) returned 0x0
[0284.955] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0284.955] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0284.955] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0284.955] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0284.955] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.955] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0284.955] GetCurrentObject (hdc=0x610107c0, type=0x1) returned 0xb00017
[0284.955] GetCurrentObject (hdc=0x610107c0, type=0x2) returned 0x900010
[0284.955] GetCurrentObject (hdc=0x610107c0, type=0x7) returned 0x1e0507b9
[0284.955] GetCurrentObject (hdc=0x610107c0, type=0x6) returned 0x8a01c2
[0284.955] SaveDC (hdc=0x610107c0) returned 1
[0284.955] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xeb0407a1
[0284.955] GetClipRgn (hdc=0x610107c0, hrgn=0xeb0407a1) returned 0
[0284.955] SelectClipRgn (hdc=0x610107c0, hrgn=0x7804051e) returned 2
[0284.955] DeleteObject (ho=0xeb0407a1) returned 1
[0284.955] DeleteObject (ho=0x7804051e) returned 1
[0284.956] OffsetViewportOrgEx (in: hdc=0x610107c0, x=0, y=0, lppt=0x23ff538 | out: lppt=0x23ff538) returned 1
[0284.956] DrawThemeParentBackground () returned 0x0
[0284.956] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0284.956] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0284.956] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0284.956] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0284.956] GetSystemMetrics (nIndex=42) returned 0
[0284.956] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0284.956] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0284.956] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0284.956] GetCurrentObject (hdc=0x610107c0, type=0x1) returned 0xb00017
[0284.956] GetCurrentObject (hdc=0x610107c0, type=0x2) returned 0x900010
[0284.956] GetCurrentObject (hdc=0x610107c0, type=0x7) returned 0x1e0507b9
[0284.956] GetCurrentObject (hdc=0x610107c0, type=0x6) returned 0x8a01c2
[0284.957] SaveDC (hdc=0x610107c0) returned 2
[0284.957] GetNearestColor (hdc=0x610107c0, color=0xff) returned 0xff
[0284.957] CreateSolidBrush (color=0xff) returned 0x3510078d
[0284.957] FillRect (hDC=0x610107c0, lprc=0x53dad0, hbr=0x3510078d) returned 1
[0284.957] DeleteObject (ho=0x3510078d) returned 1
[0284.957] RestoreDC (hdc=0x610107c0, nSavedDC=-1) returned 1
[0284.957] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0284.957] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0284.957] GetSystemMetrics (nIndex=42) returned 0
[0284.957] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0284.957] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0284.957] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0284.957] GetCurrentObject (hdc=0x610107c0, type=0x1) returned 0xb00017
[0284.957] GetCurrentObject (hdc=0x610107c0, type=0x2) returned 0x900010
[0284.957] GetCurrentObject (hdc=0x610107c0, type=0x7) returned 0x1e0507b9
[0284.958] GetCurrentObject (hdc=0x610107c0, type=0x6) returned 0x8a01c2
[0284.958] SaveDC (hdc=0x610107c0) returned 2
[0284.958] GetNearestColor (hdc=0x610107c0, color=0xff) returned 0xff
[0284.958] CreateSolidBrush (color=0xff) returned 0x3610078d
[0284.958] FillRect (hDC=0x610107c0, lprc=0x53da70, hbr=0x3610078d) returned 1
[0284.958] DeleteObject (ho=0x3610078d) returned 1
[0284.958] RestoreDC (hdc=0x610107c0, nSavedDC=-1) returned 1
[0284.958] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0284.958] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0284.958] GetSystemMetrics (nIndex=42) returned 0
[0284.958] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0284.958] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0284.959] RestoreDC (hdc=0x610107c0, nSavedDC=-1) returned 1
[0284.967] GdipReleaseDC (graphics=0x5d92c30, hdc=0x610107c0) returned 0x0
[0284.967] IsAppThemed () returned 0x1
[0284.967] GetThemeAppProperties () returned 0x3
[0284.967] GetThemeAppProperties () returned 0x3
[0284.967] IsAppThemed () returned 0x1
[0284.967] GetThemeAppProperties () returned 0x3
[0284.967] GetThemeAppProperties () returned 0x3
[0284.967] IsThemePartDefined () returned 0x1
[0284.967] GdipCreateRegion (region=0x53dff4) returned 0x0
[0284.967] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.967] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0284.967] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0284.967] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0284.968] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.968] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0284.968] LocalFree (hMem=0x89ea88) returned 0x0
[0284.968] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0284.968] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0284.968] LocalFree (hMem=0x89ee08) returned 0x0
[0284.968] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0284.968] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0284.968] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0284.968] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0284.968] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.968] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0284.968] GetCurrentObject (hdc=0x610107c0, type=0x1) returned 0xb00017
[0284.968] GetCurrentObject (hdc=0x610107c0, type=0x2) returned 0x900010
[0284.968] GetCurrentObject (hdc=0x610107c0, type=0x7) returned 0x1e0507b9
[0284.968] GetCurrentObject (hdc=0x610107c0, type=0x6) returned 0x8a01c2
[0284.969] SaveDC (hdc=0x610107c0) returned 1
[0284.969] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7904051e
[0284.969] GetClipRgn (hdc=0x610107c0, hrgn=0x7904051e) returned 0
[0284.969] SelectClipRgn (hdc=0x610107c0, hrgn=0xed0407a1) returned 2
[0284.969] DeleteObject (ho=0x7904051e) returned 1
[0284.969] DeleteObject (ho=0xed0407a1) returned 1
[0284.969] OffsetViewportOrgEx (in: hdc=0x610107c0, x=0, y=0, lppt=0x23ffd9c | out: lppt=0x23ffd9c) returned 1
[0284.969] IsAppThemed () returned 0x1
[0284.969] GetThemeAppProperties () returned 0x3
[0284.969] GetThemeAppProperties () returned 0x3
[0284.969] DrawThemeBackground () returned 0x0
[0284.969] RestoreDC (hdc=0x610107c0, nSavedDC=-1) returned 1
[0284.969] GdipReleaseDC (graphics=0x5d92c30, hdc=0x610107c0) returned 0x0
[0284.969] GdipCreateRegion (region=0x53dff8) returned 0x0
[0284.970] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0284.970] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0284.970] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0284.970] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0284.970] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.970] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0284.970] LocalFree (hMem=0x89ea88) returned 0x0
[0284.970] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0284.970] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0284.970] LocalFree (hMem=0x89ee08) returned 0x0
[0284.970] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0284.970] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0284.970] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0284.970] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0284.970] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0284.970] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0284.970] GetCurrentObject (hdc=0x610107c0, type=0x1) returned 0xb00017
[0284.970] GetCurrentObject (hdc=0x610107c0, type=0x2) returned 0x900010
[0284.970] GetCurrentObject (hdc=0x610107c0, type=0x7) returned 0x1e0507b9
[0284.971] GetCurrentObject (hdc=0x610107c0, type=0x6) returned 0x8a01c2
[0284.971] SaveDC (hdc=0x610107c0) returned 1
[0284.971] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xee0407a1
[0284.971] GetClipRgn (hdc=0x610107c0, hrgn=0xee0407a1) returned 0
[0284.971] SelectClipRgn (hdc=0x610107c0, hrgn=0x7a04051e) returned 2
[0284.971] DeleteObject (ho=0xee0407a1) returned 1
[0284.971] DeleteObject (ho=0x7a04051e) returned 1
[0284.971] OffsetViewportOrgEx (in: hdc=0x610107c0, x=0, y=0, lppt=0x2400070 | out: lppt=0x2400070) returned 1
[0284.971] IsAppThemed () returned 0x1
[0284.971] GetThemeAppProperties () returned 0x3
[0284.971] GetThemeAppProperties () returned 0x3
[0284.971] GetThemeBackgroundContentRect () returned 0x0
[0284.971] RestoreDC (hdc=0x610107c0, nSavedDC=-1) returned 1
[0284.971] GdipReleaseDC (graphics=0x5d92c30, hdc=0x610107c0) returned 0x0
[0284.972] IsAppThemed () returned 0x1
[0284.972] GetThemeAppProperties () returned 0x3
[0284.972] GetThemeAppProperties () returned 0x3
[0284.972] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0284.972] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0284.972] GetCurrentObject (hdc=0x610107c0, type=0x1) returned 0xb00017
[0284.972] GetCurrentObject (hdc=0x610107c0, type=0x2) returned 0x900010
[0284.972] GetCurrentObject (hdc=0x610107c0, type=0x7) returned 0x1e0507b9
[0284.972] GetCurrentObject (hdc=0x610107c0, type=0x6) returned 0x8a01c2
[0284.972] SaveDC (hdc=0x610107c0) returned 1
[0284.972] GetTextAlign (hdc=0x610107c0) returned 0x0
[0284.972] GetTextColor (hdc=0x610107c0) returned 0x0
[0284.972] GetCurrentObject (hdc=0x610107c0, type=0x6) returned 0x8a01c2
[0284.972] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0284.972] SelectObject (hdc=0x610107c0, h=0x450a0799) returned 0x8a01c2
[0284.973] GetBkMode (hdc=0x610107c0) returned 2
[0284.973] SetBkMode (hdc=0x610107c0, mode=1) returned 2
[0284.973] DrawTextExW (in: hdc=0x610107c0, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x2400410 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0284.973] DrawTextExW (in: hdc=0x610107c0, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x2400410 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0284.973] RestoreDC (hdc=0x610107c0, nSavedDC=-1) returned 1
[0284.974] GdipReleaseDC (graphics=0x5d92c30, hdc=0x610107c0) returned 0x0
[0284.974] GetFocus () returned 0x1a01e2
[0284.974] IsAppThemed () returned 0x1
[0284.974] GetThemeAppProperties () returned 0x3
[0284.974] GetThemeAppProperties () returned 0x3
[0284.974] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0284.974] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x610107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0284.974] GdipReleaseDC (graphics=0x5d92c30, hdc=0x610107c0) returned 0x0
[0284.974] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0284.974] SelectObject (hdc=0x610107c0, h=0x85000f) returned 0x1e0507b9
[0284.974] DeleteDC (hdc=0x610107c0) returned 1
[0284.975] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0284.975] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0284.975] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.975] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x84, wParam=0x0, lParam=0x1940352) returned 0x1
[0284.975] IsWindowUnicode (hWnd=0x1a0122) returned 1
[0284.975] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.975] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x84, wParam=0x0, lParam=0x1940352) returned 0x1
[0284.976] GetDlgItem (hDlg=0x39013e, nIDDlgItem=0) returned 0x0
[0284.976] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x210, wParam=0x201, lParam=0x170133) returned 0x0
[0284.976] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x21, wParam=0x39013e, lParam=0x2010001) returned 0x1
[0284.976] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x21, wParam=0x39013e, lParam=0x2010001) returned 0x1
[0284.976] SetCursor (hCursor=0x10003) returned 0x10003
[0284.976] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.976] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.976] GetKeyState (nVirtKey=1) returned -127
[0284.976] GetKeyState (nVirtKey=2) returned 0
[0284.976] GetKeyState (nVirtKey=4) returned 0
[0284.977] GetKeyState (nVirtKey=5) returned 0
[0284.977] GetKeyState (nVirtKey=6) returned 0
[0284.977] IsWindowVisible (hWnd=0x1a0122) returned 1
[0284.977] IsWindowEnabled (hWnd=0x1a0122) returned 1
[0284.977] SetFocus (hWnd=0x1a0122) returned 0x1a01e2
[0284.978] GetFocus () returned 0x1a0122
[0284.978] IsChild (hWndParent=0x39013e, hWnd=0x1a0122) returned 1
[0284.978] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x8, wParam=0x1a0122, lParam=0x0) returned 0x1
[0284.978] SendMessageW (hWnd=0x1a01e2, Msg=0x2111, wParam=0x20001e2, lParam=0x1a01e2) returned 0x0
[0284.979] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0284.981] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0284.982] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0284.982] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0284.982] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0284.982] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0284.984] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0284.984] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x7, wParam=0x1a01e2, lParam=0x0) returned 0x0
[0284.984] GetStockObject (i=5) returned 0x900015
[0284.985] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0284.985] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0xd, wParam=0x3, lParam=0x89e638) returned 0x2
[0284.985] GetDlgItem (hDlg=0x39013e, nIDDlgItem=1704226) returned 0x1a0122
[0284.985] SendMessageW (hWnd=0x1a0122, Msg=0x202b, wParam=0x1a0122, lParam=0x53de74) returned 0x0
[0284.985] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x202b, wParam=0x1a0122, lParam=0x53de74) returned 0x0
[0284.985] InvalidateRect (hWnd=0x1a0122, lpRect=0x0, bErase=0) returned 1
[0284.987] GetFocus () returned 0x1a0122
[0284.988] GetFocus () returned 0x1a0122
[0284.988] GetFocus () returned 0x1a0122
[0284.988] GetKeyState (nVirtKey=1) returned -127
[0284.988] GetKeyState (nVirtKey=2) returned 0
[0284.988] GetKeyState (nVirtKey=4) returned 0
[0284.988] GetKeyState (nVirtKey=5) returned 0
[0284.988] GetKeyState (nVirtKey=6) returned 0
[0284.988] GetCapture () returned 0x0
[0284.988] SetCapture (hWnd=0x1a0122) returned 0x0
[0284.988] GetKeyState (nVirtKey=1) returned -127
[0284.988] GetKeyState (nVirtKey=2) returned 0
[0284.988] GetKeyState (nVirtKey=4) returned 0
[0284.988] GetKeyState (nVirtKey=5) returned 0
[0284.988] GetKeyState (nVirtKey=6) returned 0
[0284.988] NotifyWinEvent (event=0x800a, hwnd=0x1a0122, idObject=-4, idChild=0)
[0284.988] InvalidateRect (hWnd=0x1a0122, lpRect=0x53e4c8, bErase=0) returned 1
[0284.988] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.988] IsWindowUnicode (hWnd=0x1a0122) returned 1
[0284.988] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0284.988] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0284.988] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0284.989] MapWindowPoints (in: hWndFrom=0x1a0122, hWndTo=0x0, lpPoints=0x24005ac, cPoints=0x1 | out: lpPoints=0x24005ac) returned 25756481
[0284.989] NotifyWinEvent (event=0x800a, hwnd=0x1a0122, idObject=-4, idChild=0)
[0284.989] InvalidateRect (hWnd=0x1a0122, lpRect=0x53e468, bErase=0) returned 1
[0284.989] UpdateWindow (hWnd=0x1a0122) returned 1
[0284.989] BeginPaint (in: hWnd=0x1a0122, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0xf0105ee
[0284.989] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0284.989] CreateCompatibleDC (hdc=0xf0105ee) returned 0x640107c0
[0284.989] SelectObject (hdc=0x640107c0, h=0x1e0507b9) returned 0x85000f
[0284.989] GdipCreateFromHDC (hdc=0x640107c0, graphics=0x53df98) returned 0x0
[0284.989] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0284.989] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0284.989] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0284.989] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0284.989] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0284.989] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0284.990] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0284.990] LocalFree (hMem=0x89ea88) returned 0x0
[0284.990] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0284.990] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0284.990] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0285.003] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0285.003] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0285.003] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfab90dbd) returned 0x0
[0285.003] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0285.004] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0285.004] GetCurrentObject (hdc=0x640107c0, type=0x1) returned 0xb00017
[0285.004] GetCurrentObject (hdc=0x640107c0, type=0x2) returned 0x900010
[0285.004] GetCurrentObject (hdc=0x640107c0, type=0x7) returned 0x1e0507b9
[0285.004] GetCurrentObject (hdc=0x640107c0, type=0x6) returned 0x8a01c2
[0285.004] SaveDC (hdc=0x640107c0) returned 1
[0285.004] GetNearestColor (hdc=0x640107c0, color=0xf0f0f0) returned 0xf0f0f0
[0285.004] GetNearestColor (hdc=0x640107c0, color=0xa0a0a0) returned 0xa0a0a0
[0285.004] GetNearestColor (hdc=0x640107c0, color=0x696969) returned 0x696969
[0285.004] GetNearestColor (hdc=0x640107c0, color=0xa0a0a0) returned 0xa0a0a0
[0285.004] GetNearestColor (hdc=0x640107c0, color=0x0) returned 0x0
[0285.004] GetNearestColor (hdc=0x640107c0, color=0xffffff) returned 0xffffff
[0285.004] GetNearestColor (hdc=0x640107c0, color=0xe5e5e5) returned 0xe5e5e5
[0285.005] GetNearestColor (hdc=0x640107c0, color=0xd7d7d7) returned 0xd7d7d7
[0285.005] GetNearestColor (hdc=0x640107c0, color=0x0) returned 0x0
[0285.005] RestoreDC (hdc=0x640107c0, nSavedDC=-1) returned 1
[0285.005] GdipReleaseDC (graphics=0x5d92c30, hdc=0x640107c0) returned 0x0
[0285.005] IsAppThemed () returned 0x1
[0285.005] GetThemeAppProperties () returned 0x3
[0285.005] GetThemeAppProperties () returned 0x3
[0285.005] IsAppThemed () returned 0x1
[0285.005] GetThemeAppProperties () returned 0x3
[0285.005] GetThemeAppProperties () returned 0x3
[0285.005] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0285.005] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x2400d20 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0285.006] IsAppThemed () returned 0x1
[0285.006] GetThemeAppProperties () returned 0x3
[0285.006] GetThemeAppProperties () returned 0x3
[0285.006] IsAppThemed () returned 0x1
[0285.006] GetThemeAppProperties () returned 0x3
[0285.006] GetThemeAppProperties () returned 0x3
[0285.006] IsAppThemed () returned 0x1
[0285.006] GetThemeAppProperties () returned 0x3
[0285.006] GetThemeAppProperties () returned 0x3
[0285.006] IsAppThemed () returned 0x1
[0285.006] GetThemeAppProperties () returned 0x3
[0285.006] GetThemeAppProperties () returned 0x3
[0285.006] IsThemePartDefined () returned 0x1
[0285.006] IsAppThemed () returned 0x1
[0285.006] GetThemeAppProperties () returned 0x3
[0285.006] GetThemeAppProperties () returned 0x3
[0285.006] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0285.006] IsAppThemed () returned 0x1
[0285.006] GetThemeAppProperties () returned 0x3
[0285.007] GetThemeAppProperties () returned 0x3
[0285.007] IsAppThemed () returned 0x1
[0285.007] GetThemeAppProperties () returned 0x3
[0285.007] GetThemeAppProperties () returned 0x3
[0285.007] IsThemePartDefined () returned 0x1
[0285.007] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0285.007] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0285.007] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0285.007] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0285.007] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0285.007] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0285.007] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0285.007] LocalFree (hMem=0x89ea88) returned 0x0
[0285.007] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0285.007] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0285.007] LocalFree (hMem=0x89ea88) returned 0x0
[0285.007] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0285.007] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0285.007] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0285.007] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0285.008] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0285.008] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0285.008] GetCurrentObject (hdc=0x640107c0, type=0x1) returned 0xb00017
[0285.008] GetCurrentObject (hdc=0x640107c0, type=0x2) returned 0x900010
[0285.008] GetCurrentObject (hdc=0x640107c0, type=0x7) returned 0x1e0507b9
[0285.008] GetCurrentObject (hdc=0x640107c0, type=0x6) returned 0x8a01c2
[0285.008] SaveDC (hdc=0x640107c0) returned 1
[0285.008] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b04051e
[0285.008] GetClipRgn (hdc=0x640107c0, hrgn=0x7b04051e) returned 0
[0285.008] SelectClipRgn (hdc=0x640107c0, hrgn=0xf20407a1) returned 2
[0285.008] DeleteObject (ho=0x7b04051e) returned 1
[0285.008] DeleteObject (ho=0xf20407a1) returned 1
[0285.008] OffsetViewportOrgEx (in: hdc=0x640107c0, x=0, y=0, lppt=0x24013d0 | out: lppt=0x24013d0) returned 1
[0285.008] DrawThemeParentBackground () returned 0x0
[0285.008] GetWindowPlacement (in: hWnd=0x39013e, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0285.009] GetClientRect (in: hWnd=0x39013e, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0285.009] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0285.009] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0285.009] GetSystemMetrics (nIndex=42) returned 0
[0285.009] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0285.009] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0285.009] GetClientRect (in: hWnd=0x39013e, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0285.009] GetCurrentObject (hdc=0x640107c0, type=0x1) returned 0xb00017
[0285.009] GetCurrentObject (hdc=0x640107c0, type=0x2) returned 0x900010
[0285.009] GetCurrentObject (hdc=0x640107c0, type=0x7) returned 0x1e0507b9
[0285.009] GetCurrentObject (hdc=0x640107c0, type=0x6) returned 0x8a01c2
[0285.009] SaveDC (hdc=0x640107c0) returned 2
[0285.009] GetNearestColor (hdc=0x640107c0, color=0xf0f0f0) returned 0xf0f0f0
[0285.009] CreateSolidBrush (color=0xf0f0f0) returned 0x3710078d
[0285.009] FillRect (hDC=0x640107c0, lprc=0x53d760, hbr=0x3710078d) returned 1
[0285.009] DeleteObject (ho=0x3710078d) returned 1
[0285.009] RestoreDC (hdc=0x640107c0, nSavedDC=-1) returned 1
[0285.010] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0285.010] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0285.010] GetSystemMetrics (nIndex=42) returned 0
[0285.010] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0285.010] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0285.010] GetClientRect (in: hWnd=0x39013e, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0285.010] GetCurrentObject (hdc=0x640107c0, type=0x1) returned 0xb00017
[0285.010] GetCurrentObject (hdc=0x640107c0, type=0x2) returned 0x900010
[0285.010] GetCurrentObject (hdc=0x640107c0, type=0x7) returned 0x1e0507b9
[0285.010] GetCurrentObject (hdc=0x640107c0, type=0x6) returned 0x8a01c2
[0285.010] SaveDC (hdc=0x640107c0) returned 2
[0285.010] GetNearestColor (hdc=0x640107c0, color=0xf0f0f0) returned 0xf0f0f0
[0285.010] CreateSolidBrush (color=0xf0f0f0) returned 0x3810078d
[0285.010] FillRect (hDC=0x640107c0, lprc=0x53d700, hbr=0x3810078d) returned 1
[0285.010] DeleteObject (ho=0x3810078d) returned 1
[0285.010] RestoreDC (hdc=0x640107c0, nSavedDC=-1) returned 1
[0285.011] GetWindowTextLengthW (hWnd=0x39013e) returned 10
[0285.011] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0285.011] GetSystemMetrics (nIndex=42) returned 0
[0285.011] GetWindowTextW (in: hWnd=0x39013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0285.011] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0285.011] RestoreDC (hdc=0x640107c0, nSavedDC=-1) returned 1
[0285.011] GdipReleaseDC (graphics=0x5d92c30, hdc=0x640107c0) returned 0x0
[0285.011] IsAppThemed () returned 0x1
[0285.011] GetThemeAppProperties () returned 0x3
[0285.011] GetThemeAppProperties () returned 0x3
[0285.011] IsAppThemed () returned 0x1
[0285.011] GetThemeAppProperties () returned 0x3
[0285.011] GetThemeAppProperties () returned 0x3
[0285.011] IsThemePartDefined () returned 0x1
[0285.011] GdipCreateRegion (region=0x53dc80) returned 0x0
[0285.011] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0285.011] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0285.011] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0285.012] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0285.012] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0285.012] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0285.012] LocalFree (hMem=0x89ea88) returned 0x0
[0285.012] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0285.012] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0285.012] LocalFree (hMem=0x89ea88) returned 0x0
[0285.012] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0285.012] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0285.012] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0285.012] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0285.012] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0285.012] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0285.012] GetCurrentObject (hdc=0x640107c0, type=0x1) returned 0xb00017
[0285.012] GetCurrentObject (hdc=0x640107c0, type=0x2) returned 0x900010
[0285.012] GetCurrentObject (hdc=0x640107c0, type=0x7) returned 0x1e0507b9
[0285.012] GetCurrentObject (hdc=0x640107c0, type=0x6) returned 0x8a01c2
[0285.013] SaveDC (hdc=0x640107c0) returned 1
[0285.013] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf30407a1
[0285.013] GetClipRgn (hdc=0x640107c0, hrgn=0xf30407a1) returned 0
[0285.013] SelectClipRgn (hdc=0x640107c0, hrgn=0x7d04051e) returned 2
[0285.013] DeleteObject (ho=0xf30407a1) returned 1
[0285.013] DeleteObject (ho=0x7d04051e) returned 1
[0285.013] OffsetViewportOrgEx (in: hdc=0x640107c0, x=0, y=0, lppt=0x2401c58 | out: lppt=0x2401c58) returned 1
[0285.013] IsAppThemed () returned 0x1
[0285.013] GetThemeAppProperties () returned 0x3
[0285.013] GetThemeAppProperties () returned 0x3
[0285.013] DrawThemeBackground () returned 0x0
[0285.013] RestoreDC (hdc=0x640107c0, nSavedDC=-1) returned 1
[0285.013] GdipReleaseDC (graphics=0x5d92c30, hdc=0x640107c0) returned 0x0
[0285.013] GdipCreateRegion (region=0x53dc84) returned 0x0
[0285.013] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0285.013] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0285.013] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0285.013] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0285.013] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0285.013] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0285.014] LocalFree (hMem=0x89ee08) returned 0x0
[0285.014] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0285.014] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0285.014] LocalFree (hMem=0x89ee08) returned 0x0
[0285.014] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0285.014] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0285.014] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0285.014] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0285.014] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0285.014] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0285.014] GetCurrentObject (hdc=0x640107c0, type=0x1) returned 0xb00017
[0285.014] GetCurrentObject (hdc=0x640107c0, type=0x2) returned 0x900010
[0285.014] GetCurrentObject (hdc=0x640107c0, type=0x7) returned 0x1e0507b9
[0285.014] GetCurrentObject (hdc=0x640107c0, type=0x6) returned 0x8a01c2
[0285.014] SaveDC (hdc=0x640107c0) returned 1
[0285.014] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e04051e
[0285.014] GetClipRgn (hdc=0x640107c0, hrgn=0x7e04051e) returned 0
[0285.014] SelectClipRgn (hdc=0x640107c0, hrgn=0xf40407a1) returned 2
[0285.014] DeleteObject (ho=0x7e04051e) returned 1
[0285.014] DeleteObject (ho=0xf40407a1) returned 1
[0285.015] OffsetViewportOrgEx (in: hdc=0x640107c0, x=0, y=0, lppt=0x2401f2c | out: lppt=0x2401f2c) returned 1
[0285.015] IsAppThemed () returned 0x1
[0285.015] GetThemeAppProperties () returned 0x3
[0285.015] GetThemeAppProperties () returned 0x3
[0285.015] GetThemeBackgroundContentRect () returned 0x0
[0285.015] RestoreDC (hdc=0x640107c0, nSavedDC=-1) returned 1
[0285.015] GdipReleaseDC (graphics=0x5d92c30, hdc=0x640107c0) returned 0x0
[0285.015] IsAppThemed () returned 0x1
[0285.015] GetThemeAppProperties () returned 0x3
[0285.015] GetThemeAppProperties () returned 0x3
[0285.015] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0285.015] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0285.015] GetCurrentObject (hdc=0x640107c0, type=0x1) returned 0xb00017
[0285.015] GetCurrentObject (hdc=0x640107c0, type=0x2) returned 0x900010
[0285.015] GetCurrentObject (hdc=0x640107c0, type=0x7) returned 0x1e0507b9
[0285.015] GetCurrentObject (hdc=0x640107c0, type=0x6) returned 0x8a01c2
[0285.015] SaveDC (hdc=0x640107c0) returned 1
[0285.015] GetTextAlign (hdc=0x640107c0) returned 0x0
[0285.015] GetTextColor (hdc=0x640107c0) returned 0x0
[0285.016] GetCurrentObject (hdc=0x640107c0, type=0x6) returned 0x8a01c2
[0285.016] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0285.016] SelectObject (hdc=0x640107c0, h=0x730a066d) returned 0x8a01c2
[0285.016] GetBkMode (hdc=0x640107c0) returned 2
[0285.016] SetBkMode (hdc=0x640107c0, mode=1) returned 2
[0285.016] DrawTextExW (in: hdc=0x640107c0, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x24022cc | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0285.016] DrawTextExW (in: hdc=0x640107c0, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x24022cc | out: lpchText="OK", lprc=0x53dd80) returned 13
[0285.016] RestoreDC (hdc=0x640107c0, nSavedDC=-1) returned 1
[0285.016] GdipReleaseDC (graphics=0x5d92c30, hdc=0x640107c0) returned 0x0
[0285.016] GetFocus () returned 0x1a0122
[0285.017] IsAppThemed () returned 0x1
[0285.017] GetThemeAppProperties () returned 0x3
[0285.017] GetThemeAppProperties () returned 0x3
[0285.017] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0285.017] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x640107c0, x1=0, y1=0, rop=0xcc0020) returned 1
[0285.017] GdipReleaseDC (graphics=0x5d92c30, hdc=0x640107c0) returned 0x0
[0285.017] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0285.017] SelectObject (hdc=0x640107c0, h=0x85000f) returned 0x1e0507b9
[0285.017] DeleteDC (hdc=0x640107c0) returned 1
[0285.017] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0285.017] EndPaint (hWnd=0x1a0122, lpPaint=0x53df7c) returned 1
[0285.017] MapWindowPoints (in: hWndFrom=0x1a0122, hWndTo=0x0, lpPoints=0x24023c8, cPoints=0x1 | out: lpPoints=0x24023c8) returned 25756481
[0285.017] WindowFromPoint (Point=0x352) returned 0x1a0122
[0285.017] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x84, wParam=0x0, lParam=0x1940352) returned 0x1
[0285.018] NotifyWinEvent (event=0x800a, hwnd=0x1a0122, idObject=-4, idChild=0)
[0285.018] NotifyWinEvent (event=0x800c, hwnd=0x1a0122, idObject=-4, idChild=0)
[0285.018] GetWindowTextLengthW (hWnd=0x1a01e2) returned 0
[0285.018] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0285.018] GetSystemMetrics (nIndex=42) returned 0
[0285.018] GetWindowTextW (in: hWnd=0x1a01e2, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0285.018] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0285.018] SendMessageW (hWnd=0x39013e, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0285.018] GetCapture () returned 0x1a0122
[0285.018] ReleaseCapture () returned 1
[0285.018] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0285.018] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0285.019] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x84, wParam=0x0, lParam=0x1940352) returned 0x1
[0285.019] IsWindow (hWnd=0x70036) returned 1
[0285.019] EnableWindow (hWnd=0x70036, bEnable=1)
[0285.037] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0285.038] IsWindow (hWnd=0x70036) returned 1
[0285.038] SetActiveWindow (hWnd=0x70036)
[0285.038] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x86, wParam=0x0, lParam=0x70036)
[0285.040] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0285.040] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0285.040] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0285.048] IsChild (hWndParent=0x39013e, hWnd=0x202c6) returned 0
[0285.048] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1a0122, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0285.048] GetCapture () returned 0x0
[0285.048] InvalidateRect (hWnd=0x1a0122, lpRect=0x0, bErase=0) returned 1
[0285.051] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0285.051] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0285.051] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0285.057] IsChild (hWndParent=0x39013e, hWnd=0x202c6) returned 0
[0285.057] ShowWindow (hWnd=0x39013e, nCmdShow=0)
[0285.057] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0285.061] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x39013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0285.061] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1a01e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0285.061] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1f00ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0285.062] GetWindowTextLengthW (hWnd=0x17004e)
[0285.062] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0285.062] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x17004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0285.068] GetProcessWindowStation () returned 0x13c
[0285.068] GetActiveWindow () returned 0x70036
[0285.068] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0285.068] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0285.069] GetCurrentThreadId () returned 0x11d0
[0285.069] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3d16, lParam=0x0) returned 1
[0285.070] IsWindowVisible (hWnd=0x70036) returned 1
[0285.070] IsWindowEnabled (hWnd=0x70036) returned 1
[0285.070] IsWindowVisible (hWnd=0x602b6) returned 0
[0285.070] IsWindowVisible (hWnd=0x901f8) returned 0
[0285.070] IsWindowVisible (hWnd=0x202d0) returned 0
[0285.070] IsWindowVisible (hWnd=0x202d4) returned 0
[0285.070] GetActiveWindow () returned 0x70036
[0285.070] GetFocus () returned 0x202c6
[0285.070] IsWindow (hWnd=0x70036) returned 1
[0285.070] EnableWindow (hWnd=0x70036, bEnable=0)
[0285.070] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0285.071] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0285.072] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0285.110] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x60100ce
[0285.111] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0285.111] CreateCompatibleDC (hdc=0x60100ce) returned 0xb40107ab
[0285.111] SelectObject (hdc=0xb40107ab, h=0x1e0507b9) returned 0x85000f
[0285.111] GdipCreateFromHDC (hdc=0xb40107ab, graphics=0x53e108) returned 0x0
[0285.111] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0285.111] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0285.111] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0285.111] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0285.111] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0285.111] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0285.111] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0285.111] LocalFree (hMem=0x89ea88) returned 0x0
[0285.112] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0285.112] GdipCreateRegion (region=0x53e150) returned 0x0
[0285.112] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0285.112] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0285.112] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0285.112] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfab70dbd) returned 0x0
[0285.112] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0285.112] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0285.112] GetCurrentObject (hdc=0xb40107ab, type=0x1) returned 0xb00017
[0285.112] GetCurrentObject (hdc=0xb40107ab, type=0x2) returned 0x900010
[0285.112] GetCurrentObject (hdc=0xb40107ab, type=0x7) returned 0x1e0507b9
[0285.112] GetCurrentObject (hdc=0xb40107ab, type=0x6) returned 0x8a01c2
[0285.112] SaveDC (hdc=0xb40107ab) returned 1
[0285.113] GetNearestColor (hdc=0xb40107ab, color=0xff) returned 0xff
[0285.113] GetNearestColor (hdc=0xb40107ab, color=0x55) returned 0x55
[0285.113] GetNearestColor (hdc=0xb40107ab, color=0x0) returned 0x0
[0285.113] GetNearestColor (hdc=0xb40107ab, color=0x55) returned 0x55
[0285.113] GetNearestColor (hdc=0xb40107ab, color=0x0) returned 0x0
[0285.113] GetNearestColor (hdc=0xb40107ab, color=0x8080ff) returned 0x8080ff
[0285.113] GetNearestColor (hdc=0xb40107ab, color=0x7373e5) returned 0x7373e5
[0285.113] GetNearestColor (hdc=0xb40107ab, color=0xe5) returned 0xe5
[0285.114] GetNearestColor (hdc=0xb40107ab, color=0x0) returned 0x0
[0285.114] RestoreDC (hdc=0xb40107ab, nSavedDC=-1) returned 1
[0285.114] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb40107ab) returned 0x0
[0285.114] IsAppThemed () returned 0x1
[0285.114] GetThemeAppProperties () returned 0x3
[0285.114] GetThemeAppProperties () returned 0x3
[0285.114] IsAppThemed () returned 0x1
[0285.114] GetThemeAppProperties () returned 0x3
[0285.114] GetThemeAppProperties () returned 0x3
[0285.114] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0285.114] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x24036c0 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0285.114] IsAppThemed () returned 0x1
[0285.115] GetThemeAppProperties () returned 0x3
[0285.115] GetThemeAppProperties () returned 0x3
[0285.115] IsAppThemed () returned 0x1
[0285.115] GetThemeAppProperties () returned 0x3
[0285.115] GetThemeAppProperties () returned 0x3
[0285.123] GetFocus () returned 0x1802ca
[0285.123] IsAppThemed () returned 0x1
[0285.123] GetThemeAppProperties () returned 0x3
[0285.123] GetThemeAppProperties () returned 0x3
[0285.123] IsAppThemed () returned 0x1
[0285.123] GetThemeAppProperties () returned 0x3
[0285.123] GetThemeAppProperties () returned 0x3
[0285.123] IsThemePartDefined () returned 0x1
[0285.123] IsAppThemed () returned 0x1
[0285.123] GetThemeAppProperties () returned 0x3
[0285.124] GetThemeAppProperties () returned 0x3
[0285.124] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0285.124] IsAppThemed () returned 0x1
[0285.124] GetThemeAppProperties () returned 0x3
[0285.124] GetThemeAppProperties () returned 0x3
[0285.124] IsAppThemed () returned 0x1
[0285.124] GetThemeAppProperties () returned 0x3
[0285.124] GetThemeAppProperties () returned 0x3
[0285.124] IsThemePartDefined () returned 0x1
[0285.124] GdipCreateRegion (region=0x53de78) returned 0x0
[0285.124] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0285.124] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0285.124] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0285.124] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0285.124] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0285.124] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0285.124] LocalFree (hMem=0x89ea88) returned 0x0
[0285.124] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0285.124] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0285.124] LocalFree (hMem=0x89ee40) returned 0x0
[0285.125] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0285.125] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0285.125] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0285.125] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0285.125] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0285.125] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0285.125] GetCurrentObject (hdc=0xb40107ab, type=0x1) returned 0xb00017
[0285.125] GetCurrentObject (hdc=0xb40107ab, type=0x2) returned 0x900010
[0285.125] GetCurrentObject (hdc=0xb40107ab, type=0x7) returned 0x1e0507b9
[0285.125] GetCurrentObject (hdc=0xb40107ab, type=0x6) returned 0x8a01c2
[0285.125] SaveDC (hdc=0xb40107ab) returned 1
[0285.125] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf50407a1
[0285.125] GetClipRgn (hdc=0xb40107ab, hrgn=0xf50407a1) returned 0
[0285.125] SelectClipRgn (hdc=0xb40107ab, hrgn=0x8404051e) returned 2
[0285.125] DeleteObject (ho=0xf50407a1) returned 1
[0285.125] DeleteObject (ho=0x8404051e) returned 1
[0285.126] OffsetViewportOrgEx (in: hdc=0xb40107ab, x=0, y=0, lppt=0x2403d70 | out: lppt=0x2403d70) returned 1
[0285.126] DrawThemeParentBackground () returned 0x0
[0285.126] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0285.126] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0285.126] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0285.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0285.126] GetSystemMetrics (nIndex=42) returned 0
[0285.126] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0285.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0285.126] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0285.126] GetCurrentObject (hdc=0xb40107ab, type=0x1) returned 0xb00017
[0285.126] GetCurrentObject (hdc=0xb40107ab, type=0x2) returned 0x900010
[0285.126] GetCurrentObject (hdc=0xb40107ab, type=0x7) returned 0x1e0507b9
[0285.126] GetCurrentObject (hdc=0xb40107ab, type=0x6) returned 0x8a01c2
[0285.126] SaveDC (hdc=0xb40107ab) returned 2
[0285.126] GetNearestColor (hdc=0xb40107ab, color=0xff) returned 0xff
[0285.126] CreateSolidBrush (color=0xff) returned 0x3910078d
[0285.126] FillRect (hDC=0xb40107ab, lprc=0x53d8d8, hbr=0x3910078d) returned 1
[0285.127] DeleteObject (ho=0x3910078d) returned 1
[0285.127] RestoreDC (hdc=0xb40107ab, nSavedDC=-1) returned 1
[0285.127] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0285.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0285.127] GetSystemMetrics (nIndex=42) returned 0
[0285.127] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0285.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0285.127] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0285.127] GetCurrentObject (hdc=0xb40107ab, type=0x1) returned 0xb00017
[0285.127] GetCurrentObject (hdc=0xb40107ab, type=0x2) returned 0x900010
[0285.127] GetCurrentObject (hdc=0xb40107ab, type=0x7) returned 0x1e0507b9
[0285.127] GetCurrentObject (hdc=0xb40107ab, type=0x6) returned 0x8a01c2
[0285.127] SaveDC (hdc=0xb40107ab) returned 2
[0285.127] GetNearestColor (hdc=0xb40107ab, color=0xff) returned 0xff
[0285.127] CreateSolidBrush (color=0xff) returned 0x3a10078d
[0285.127] FillRect (hDC=0xb40107ab, lprc=0x53d878, hbr=0x3a10078d) returned 1
[0285.127] DeleteObject (ho=0x3a10078d) returned 1
[0285.127] RestoreDC (hdc=0xb40107ab, nSavedDC=-1) returned 1
[0285.127] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0285.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0285.128] GetSystemMetrics (nIndex=42) returned 0
[0285.128] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0285.128] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0285.128] RestoreDC (hdc=0xb40107ab, nSavedDC=-1) returned 1
[0285.128] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb40107ab) returned 0x0
[0285.128] IsAppThemed () returned 0x1
[0285.128] GetThemeAppProperties () returned 0x3
[0285.128] GetThemeAppProperties () returned 0x3
[0285.128] IsAppThemed () returned 0x1
[0285.128] GetThemeAppProperties () returned 0x3
[0285.128] GetThemeAppProperties () returned 0x3
[0285.128] IsThemePartDefined () returned 0x1
[0285.128] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0285.128] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0285.128] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0285.128] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0285.128] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0285.129] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0285.129] LocalFree (hMem=0x89ee08) returned 0x0
[0285.129] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0285.129] LocalFree (hMem=0x89eee8) returned 0x0
[0285.129] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0285.129] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0285.129] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0285.129] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0285.129] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0285.129] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0285.129] GetCurrentObject (hdc=0xb40107ab, type=0x1) returned 0xb00017
[0285.129] GetCurrentObject (hdc=0xb40107ab, type=0x2) returned 0x900010
[0285.129] GetCurrentObject (hdc=0xb40107ab, type=0x7) returned 0x1e0507b9
[0285.129] GetCurrentObject (hdc=0xb40107ab, type=0x6) returned 0x8a01c2
[0285.129] SaveDC (hdc=0xb40107ab) returned 1
[0285.129] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8504051e
[0285.129] GetClipRgn (hdc=0xb40107ab, hrgn=0x8504051e) returned 0
[0285.129] SelectClipRgn (hdc=0xb40107ab, hrgn=0xf70407a1) returned 2
[0285.129] DeleteObject (ho=0x8504051e) returned 1
[0285.129] DeleteObject (ho=0xf70407a1) returned 1
[0285.129] OffsetViewportOrgEx (in: hdc=0xb40107ab, x=0, y=0, lppt=0x24045d4 | out: lppt=0x24045d4) returned 1
[0285.130] IsAppThemed () returned 0x1
[0285.130] GetThemeAppProperties () returned 0x3
[0285.130] GetThemeAppProperties () returned 0x3
[0285.130] DrawThemeBackground () returned 0x0
[0285.130] RestoreDC (hdc=0xb40107ab, nSavedDC=-1) returned 1
[0285.130] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb40107ab) returned 0x0
[0285.130] GdipCreateRegion (region=0x53de00) returned 0x0
[0285.130] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0285.130] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0285.130] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0285.130] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0285.130] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0285.130] LocalFree (hMem=0x89ea88) returned 0x0
[0285.130] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0285.130] LocalFree (hMem=0x89ee08) returned 0x0
[0285.130] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0285.130] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0285.130] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0285.130] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0285.130] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0285.130] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0285.130] GetCurrentObject (hdc=0xb40107ab, type=0x1) returned 0xb00017
[0285.131] GetCurrentObject (hdc=0xb40107ab, type=0x2) returned 0x900010
[0285.131] GetCurrentObject (hdc=0xb40107ab, type=0x7) returned 0x1e0507b9
[0285.131] GetCurrentObject (hdc=0xb40107ab, type=0x6) returned 0x8a01c2
[0285.131] SaveDC (hdc=0xb40107ab) returned 1
[0285.131] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf80407a1
[0285.131] GetClipRgn (hdc=0xb40107ab, hrgn=0xf80407a1) returned 0
[0285.131] SelectClipRgn (hdc=0xb40107ab, hrgn=0x8604051e) returned 2
[0285.131] DeleteObject (ho=0xf80407a1) returned 1
[0285.131] DeleteObject (ho=0x8604051e) returned 1
[0285.131] OffsetViewportOrgEx (in: hdc=0xb40107ab, x=0, y=0, lppt=0x24048a8 | out: lppt=0x24048a8) returned 1
[0285.131] IsAppThemed () returned 0x1
[0285.131] GetThemeAppProperties () returned 0x3
[0285.131] GetThemeAppProperties () returned 0x3
[0285.131] GetThemeBackgroundContentRect () returned 0x0
[0285.131] RestoreDC (hdc=0xb40107ab, nSavedDC=-1) returned 1
[0285.131] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb40107ab) returned 0x0
[0285.131] IsAppThemed () returned 0x1
[0285.131] GetThemeAppProperties () returned 0x3
[0285.131] GetThemeAppProperties () returned 0x3
[0285.131] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0285.131] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0285.131] GetCurrentObject (hdc=0xb40107ab, type=0x1) returned 0xb00017
[0285.131] GetCurrentObject (hdc=0xb40107ab, type=0x2) returned 0x900010
[0285.132] GetCurrentObject (hdc=0xb40107ab, type=0x7) returned 0x1e0507b9
[0285.132] GetCurrentObject (hdc=0xb40107ab, type=0x6) returned 0x8a01c2
[0285.132] SaveDC (hdc=0xb40107ab) returned 1
[0285.132] GetTextAlign (hdc=0xb40107ab) returned 0x0
[0285.132] GetTextColor (hdc=0xb40107ab) returned 0x0
[0285.132] GetCurrentObject (hdc=0xb40107ab, type=0x6) returned 0x8a01c2
[0285.132] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0285.132] SelectObject (hdc=0xb40107ab, h=0x450a0799) returned 0x8a01c2
[0285.132] GetBkMode (hdc=0xb40107ab) returned 2
[0285.132] SetBkMode (hdc=0xb40107ab, mode=1) returned 2
[0285.132] DrawTextExW (in: hdc=0xb40107ab, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2404c48 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0285.132] DrawTextExW (in: hdc=0xb40107ab, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2404c48 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0285.133] RestoreDC (hdc=0xb40107ab, nSavedDC=-1) returned 1
[0285.133] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb40107ab) returned 0x0
[0285.133] GetFocus () returned 0x1802ca
[0285.133] IsAppThemed () returned 0x1
[0285.133] GetThemeAppProperties () returned 0x3
[0285.133] GetThemeAppProperties () returned 0x3
[0285.133] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0285.133] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xb40107ab, x1=0, y1=0, rop=0xcc0020) returned 1
[0285.133] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb40107ab) returned 0x0
[0285.133] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0285.133] SelectObject (hdc=0xb40107ab, h=0x85000f) returned 0x1e0507b9
[0285.133] DeleteDC (hdc=0xb40107ab) returned 1
[0285.133] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0285.133] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0285.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0285.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0285.482] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x3a013e) returned 0x1
[0285.484] GetFocus () returned 0x3a013e
[0285.484] GetAncestor (hwnd=0x3a013e, gaFlags=0x1) returned 0x10010
[0285.484] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0285.484] SetFocus (hWnd=0x202c6) returned 0x0
[0285.486] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0285.488] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0285.488] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0285.488] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0285.488] GetFocus () returned 0x70036
[0285.488] SetFocus (hWnd=0x202c6) returned 0x0
[0285.500] IsWindow (hWnd=0x70036) returned 1
[0285.500] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0285.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0285.501] IsWindow (hWnd=0x70036) returned 1
[0285.501] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0285.501] IsWindow (hWnd=0x202c6) returned 1
[0285.501] SetFocus (hWnd=0x202c6) returned 0x70036
[0285.501] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0285.502] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0285.503] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0285.505] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0285.505] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0285.505] GetStockObject (i=5) returned 0x900015
[0285.505] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0285.505] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8e9750) returned 0x7
[0285.505] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0285.505] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0285.517] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0285.518] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0285.519] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0285.519] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0285.519] GetFocus () returned 0x202c6
[0285.519] GetCapture () returned 0x0
[0285.519] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.520] IsWindowUnicode (hWnd=0x202c6) returned 1
[0285.520] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.520] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.520] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.520] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.521] IsWindowUnicode (hWnd=0x202c6) returned 1
[0285.521] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.521] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.521] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.525] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0285.525] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0285.526] CreateCompatibleDC (hdc=0x60100ce) returned 0xc6010790
[0285.526] SelectObject (hdc=0xc6010790, h=0x1e0507b9) returned 0x85000f
[0285.526] GdipCreateFromHDC (hdc=0xc6010790, graphics=0x53e958) returned 0x0
[0285.526] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0285.526] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0285.526] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0285.526] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0285.526] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0285.526] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0285.526] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0285.526] LocalFree (hMem=0x89ea88) returned 0x0
[0285.526] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0285.526] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0285.527] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0285.527] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0285.527] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0285.527] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfab50dbd) returned 0x0
[0285.527] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0285.527] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0285.527] GetCurrentObject (hdc=0xc6010790, type=0x1) returned 0xb00017
[0285.527] GetCurrentObject (hdc=0xc6010790, type=0x2) returned 0x900010
[0285.527] GetCurrentObject (hdc=0xc6010790, type=0x7) returned 0x1e0507b9
[0285.527] GetCurrentObject (hdc=0xc6010790, type=0x6) returned 0x8a01c2
[0285.527] SaveDC (hdc=0xc6010790) returned 1
[0285.527] GetNearestColor (hdc=0xc6010790, color=0xff) returned 0xff
[0285.527] GetNearestColor (hdc=0xc6010790, color=0x55) returned 0x55
[0285.527] GetNearestColor (hdc=0xc6010790, color=0x0) returned 0x0
[0285.528] GetNearestColor (hdc=0xc6010790, color=0x55) returned 0x55
[0285.528] GetNearestColor (hdc=0xc6010790, color=0x0) returned 0x0
[0285.528] GetNearestColor (hdc=0xc6010790, color=0x8080ff) returned 0x8080ff
[0285.528] GetNearestColor (hdc=0xc6010790, color=0x7373e5) returned 0x7373e5
[0285.528] GetNearestColor (hdc=0xc6010790, color=0xe5) returned 0xe5
[0285.528] GetNearestColor (hdc=0xc6010790, color=0x0) returned 0x0
[0285.528] RestoreDC (hdc=0xc6010790, nSavedDC=-1) returned 1
[0285.528] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc6010790) returned 0x0
[0285.528] IsAppThemed () returned 0x1
[0285.528] GetThemeAppProperties () returned 0x3
[0285.528] GetThemeAppProperties () returned 0x3
[0285.528] IsAppThemed () returned 0x1
[0285.528] GetThemeAppProperties () returned 0x3
[0285.528] GetThemeAppProperties () returned 0x3
[0285.529] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x24054a4 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0285.529] IsAppThemed () returned 0x1
[0285.529] GetThemeAppProperties () returned 0x3
[0285.529] GetThemeAppProperties () returned 0x3
[0285.529] IsAppThemed () returned 0x1
[0285.529] GetThemeAppProperties () returned 0x3
[0285.529] GetThemeAppProperties () returned 0x3
[0285.529] GetFocus () returned 0x202c6
[0285.529] IsAppThemed () returned 0x1
[0285.529] GetThemeAppProperties () returned 0x3
[0285.529] GetThemeAppProperties () returned 0x3
[0285.529] IsAppThemed () returned 0x1
[0285.529] GetThemeAppProperties () returned 0x3
[0285.529] GetThemeAppProperties () returned 0x3
[0285.530] IsThemePartDefined () returned 0x1
[0285.530] IsAppThemed () returned 0x1
[0285.530] GetThemeAppProperties () returned 0x3
[0285.530] GetThemeAppProperties () returned 0x3
[0285.530] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0285.530] IsAppThemed () returned 0x1
[0285.530] GetThemeAppProperties () returned 0x3
[0285.530] GetThemeAppProperties () returned 0x3
[0285.530] IsAppThemed () returned 0x1
[0285.530] GetThemeAppProperties () returned 0x3
[0285.530] GetThemeAppProperties () returned 0x3
[0285.530] IsThemePartDefined () returned 0x1
[0285.530] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0285.530] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0285.530] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0285.530] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0285.530] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0285.530] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0285.530] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0285.531] LocalFree (hMem=0x89ea88) returned 0x0
[0285.531] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0285.531] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0285.531] LocalFree (hMem=0x89ee08) returned 0x0
[0285.531] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0285.531] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0285.531] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0285.531] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0285.531] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0285.531] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0285.531] GetCurrentObject (hdc=0xc6010790, type=0x1) returned 0xb00017
[0285.531] GetCurrentObject (hdc=0xc6010790, type=0x2) returned 0x900010
[0285.531] GetCurrentObject (hdc=0xc6010790, type=0x7) returned 0x1e0507b9
[0285.531] GetCurrentObject (hdc=0xc6010790, type=0x6) returned 0x8a01c2
[0285.532] SaveDC (hdc=0xc6010790) returned 1
[0285.532] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a04053e
[0285.532] GetClipRgn (hdc=0xc6010790, hrgn=0x3a04053e) returned 0
[0285.532] SelectClipRgn (hdc=0xc6010790, hrgn=0x9404051e) returned 2
[0285.532] DeleteObject (ho=0x3a04053e) returned 1
[0285.532] DeleteObject (ho=0x9404051e) returned 1
[0285.532] OffsetViewportOrgEx (in: hdc=0xc6010790, x=0, y=0, lppt=0x2405b54 | out: lppt=0x2405b54) returned 1
[0285.532] DrawThemeParentBackground () returned 0x0
[0285.532] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0285.532] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0285.533] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0285.533] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0285.533] GetSystemMetrics (nIndex=42) returned 0
[0285.533] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0285.533] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0285.533] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0285.533] GetCurrentObject (hdc=0xc6010790, type=0x1) returned 0xb00017
[0285.533] GetCurrentObject (hdc=0xc6010790, type=0x2) returned 0x900010
[0285.533] GetCurrentObject (hdc=0xc6010790, type=0x7) returned 0x1e0507b9
[0285.533] GetCurrentObject (hdc=0xc6010790, type=0x6) returned 0x8a01c2
[0285.533] SaveDC (hdc=0xc6010790) returned 2
[0285.533] GetNearestColor (hdc=0xc6010790, color=0xff) returned 0xff
[0285.533] CreateSolidBrush (color=0xff) returned 0x3c10078d
[0285.533] FillRect (hDC=0xc6010790, lprc=0x53e128, hbr=0x3c10078d) returned 1
[0285.534] DeleteObject (ho=0x3c10078d) returned 1
[0285.534] RestoreDC (hdc=0xc6010790, nSavedDC=-1) returned 1
[0285.534] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0285.534] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0285.534] GetSystemMetrics (nIndex=42) returned 0
[0285.534] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0285.534] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0285.534] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0285.534] GetCurrentObject (hdc=0xc6010790, type=0x1) returned 0xb00017
[0285.534] GetCurrentObject (hdc=0xc6010790, type=0x2) returned 0x900010
[0285.534] GetCurrentObject (hdc=0xc6010790, type=0x7) returned 0x1e0507b9
[0285.534] GetCurrentObject (hdc=0xc6010790, type=0x6) returned 0x8a01c2
[0285.534] SaveDC (hdc=0xc6010790) returned 2
[0285.534] GetNearestColor (hdc=0xc6010790, color=0xff) returned 0xff
[0285.535] CreateSolidBrush (color=0xff) returned 0x3d10078d
[0285.535] FillRect (hDC=0xc6010790, lprc=0x53e0c8, hbr=0x3d10078d) returned 1
[0285.535] DeleteObject (ho=0x3d10078d) returned 1
[0285.535] RestoreDC (hdc=0xc6010790, nSavedDC=-1) returned 1
[0285.535] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0285.535] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0285.535] GetSystemMetrics (nIndex=42) returned 0
[0285.535] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0285.535] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0285.535] RestoreDC (hdc=0xc6010790, nSavedDC=-1) returned 1
[0285.535] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc6010790) returned 0x0
[0285.536] IsAppThemed () returned 0x1
[0285.536] GetThemeAppProperties () returned 0x3
[0285.536] GetThemeAppProperties () returned 0x3
[0285.536] IsAppThemed () returned 0x1
[0285.536] GetThemeAppProperties () returned 0x3
[0285.536] GetThemeAppProperties () returned 0x3
[0285.536] IsThemePartDefined () returned 0x1
[0285.536] GdipCreateRegion (region=0x53e64c) returned 0x0
[0285.536] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0285.536] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0285.536] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0285.536] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0285.536] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0285.536] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0285.536] LocalFree (hMem=0x89ee08) returned 0x0
[0285.536] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0285.537] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0285.537] LocalFree (hMem=0x89ea88) returned 0x0
[0285.540] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0285.541] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0285.541] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0285.541] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0285.541] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0285.541] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0285.541] GetCurrentObject (hdc=0xc6010790, type=0x1) returned 0xb00017
[0285.541] GetCurrentObject (hdc=0xc6010790, type=0x2) returned 0x900010
[0285.541] GetCurrentObject (hdc=0xc6010790, type=0x7) returned 0x1e0507b9
[0285.541] GetCurrentObject (hdc=0xc6010790, type=0x6) returned 0x8a01c2
[0285.541] SaveDC (hdc=0xc6010790) returned 1
[0285.541] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9504051e
[0285.541] GetClipRgn (hdc=0xc6010790, hrgn=0x9504051e) returned 0
[0285.541] SelectClipRgn (hdc=0xc6010790, hrgn=0x3c04053e) returned 2
[0285.541] DeleteObject (ho=0x9504051e) returned 1
[0285.542] DeleteObject (ho=0x3c04053e) returned 1
[0285.542] OffsetViewportOrgEx (in: hdc=0xc6010790, x=0, y=0, lppt=0x24063b8 | out: lppt=0x24063b8) returned 1
[0285.542] IsAppThemed () returned 0x1
[0285.542] GetThemeAppProperties () returned 0x3
[0285.542] GetThemeAppProperties () returned 0x3
[0285.542] DrawThemeBackground () returned 0x0
[0285.542] RestoreDC (hdc=0xc6010790, nSavedDC=-1) returned 1
[0285.542] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc6010790) returned 0x0
[0285.542] GdipCreateRegion (region=0x53e650) returned 0x0
[0285.542] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0285.542] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0285.542] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0285.542] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0285.542] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0285.542] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0285.542] LocalFree (hMem=0x89ee08) returned 0x0
[0285.543] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0285.543] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0285.543] LocalFree (hMem=0x89ea88) returned 0x0
[0285.543] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0285.543] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0285.543] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0285.543] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0285.543] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0285.543] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0285.543] GetCurrentObject (hdc=0xc6010790, type=0x1) returned 0xb00017
[0285.543] GetCurrentObject (hdc=0xc6010790, type=0x2) returned 0x900010
[0285.543] GetCurrentObject (hdc=0xc6010790, type=0x7) returned 0x1e0507b9
[0285.543] GetCurrentObject (hdc=0xc6010790, type=0x6) returned 0x8a01c2
[0285.543] SaveDC (hdc=0xc6010790) returned 1
[0285.543] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3d04053e
[0285.543] GetClipRgn (hdc=0xc6010790, hrgn=0x3d04053e) returned 0
[0285.544] SelectClipRgn (hdc=0xc6010790, hrgn=0x9604051e) returned 2
[0285.544] DeleteObject (ho=0x3d04053e) returned 1
[0285.544] DeleteObject (ho=0x9604051e) returned 1
[0285.544] OffsetViewportOrgEx (in: hdc=0xc6010790, x=0, y=0, lppt=0x240668c | out: lppt=0x240668c) returned 1
[0285.544] IsAppThemed () returned 0x1
[0285.544] GetThemeAppProperties () returned 0x3
[0285.544] GetThemeAppProperties () returned 0x3
[0285.544] GetThemeBackgroundContentRect () returned 0x0
[0285.544] RestoreDC (hdc=0xc6010790, nSavedDC=-1) returned 1
[0285.544] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc6010790) returned 0x0
[0285.544] IsAppThemed () returned 0x1
[0285.544] GetThemeAppProperties () returned 0x3
[0285.544] GetThemeAppProperties () returned 0x3
[0285.544] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0285.545] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0285.545] GetCurrentObject (hdc=0xc6010790, type=0x1) returned 0xb00017
[0285.545] GetCurrentObject (hdc=0xc6010790, type=0x2) returned 0x900010
[0285.545] GetCurrentObject (hdc=0xc6010790, type=0x7) returned 0x1e0507b9
[0285.545] GetCurrentObject (hdc=0xc6010790, type=0x6) returned 0x8a01c2
[0285.545] SaveDC (hdc=0xc6010790) returned 1
[0285.545] GetTextAlign (hdc=0xc6010790) returned 0x0
[0285.545] GetTextColor (hdc=0xc6010790) returned 0x0
[0285.545] GetCurrentObject (hdc=0xc6010790, type=0x6) returned 0x8a01c2
[0285.545] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0285.545] SelectObject (hdc=0xc6010790, h=0x450a0799) returned 0x8a01c2
[0285.545] GetBkMode (hdc=0xc6010790) returned 2
[0285.546] SetBkMode (hdc=0xc6010790, mode=1) returned 2
[0285.546] DrawTextExW (in: hdc=0xc6010790, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2406a2c | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0285.546] DrawTextExW (in: hdc=0xc6010790, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2406a2c | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0285.546] RestoreDC (hdc=0xc6010790, nSavedDC=-1) returned 1
[0285.546] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc6010790) returned 0x0
[0285.546] GetFocus () returned 0x202c6
[0285.547] IsAppThemed () returned 0x1
[0285.547] GetThemeAppProperties () returned 0x3
[0285.547] GetThemeAppProperties () returned 0x3
[0285.547] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0285.547] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xc6010790, x1=0, y1=0, rop=0xcc0020) returned 1
[0285.547] GdipReleaseDC (graphics=0x5d92c30, hdc=0xc6010790) returned 0x0
[0285.547] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0285.547] SelectObject (hdc=0xc6010790, h=0x85000f) returned 0x1e0507b9
[0285.547] DeleteDC (hdc=0xc6010790) returned 1
[0285.547] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0285.548] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0285.548] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.548] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.548] WaitMessage () returned 1
[0285.551] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.552] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.552] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.552] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.552] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.554] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.554] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.554] WaitMessage () returned 1
[0285.565] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.565] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.566] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.566] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.566] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.566] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.567] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.567] WaitMessage () returned 1
[0285.568] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.568] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.568] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.568] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.568] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.572] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.572] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.572] WaitMessage () returned 1
[0285.574] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.574] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.574] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.574] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.574] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.575] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.575] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.575] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.575] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.575] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.575] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.576] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.576] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.576] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.576] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.576] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.576] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.576] WaitMessage () returned 1
[0285.576] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.577] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.577] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.577] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.577] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.578] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.578] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.578] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.578] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.578] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.579] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.579] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.579] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.579] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.579] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.579] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.579] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.579] WaitMessage () returned 1
[0285.579] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.580] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.580] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.580] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.580] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.581] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.581] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.581] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.581] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.581] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.581] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.581] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.581] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.581] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.581] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.581] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.582] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.582] WaitMessage () returned 1
[0285.582] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.582] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.582] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.582] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.582] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.584] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.587] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.587] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.587] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.587] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.587] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.587] IsWindowUnicode (hWnd=0x102dc) returned 1
[0285.587] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.587] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.587] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.587] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.588] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.588] WaitMessage () returned 1
[0285.741] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.741] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.741] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.741] DispatchMessageA (lpMsg=0x53eef8) returned 0x7e8f
[0285.741] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.741] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.741] WaitMessage () returned 1
[0285.818] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.818] IsWindowUnicode (hWnd=0x202d0) returned 1
[0285.818] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0285.819] TranslateMessage (lpMsg=0x53eef8) returned 0
[0285.819] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0285.819] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.819] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0285.819] WaitMessage () returned 1
[0286.756] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0286.756] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0286.757] TranslateMessage (lpMsg=0x53eef8) returned 0
[0286.757] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0286.757] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0286.757] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0286.757] WaitMessage () returned 1
[0287.337] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0287.337] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1970244) returned 0x1
[0287.337] IsWindowUnicode (hWnd=0x202c6) returned 1
[0287.337] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0287.337] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1970244) returned 0x1
[0287.337] SetCursor (hCursor=0x10003) returned 0x10003
[0287.337] TranslateMessage (lpMsg=0x53eef8) returned 0
[0287.337] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0287.337] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0287.337] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0287.337] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0287.337] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0287.338] GetKeyState (nVirtKey=1) returned 0
[0287.338] GetKeyState (nVirtKey=2) returned 0
[0287.338] GetKeyState (nVirtKey=4) returned 0
[0287.338] GetKeyState (nVirtKey=5) returned 0
[0287.338] GetKeyState (nVirtKey=6) returned 0
[0287.338] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0287.338] IsWindowUnicode (hWnd=0x202c6) returned 1
[0287.338] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0287.338] TranslateMessage (lpMsg=0x53eef8) returned 0
[0287.338] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0287.338] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0287.338] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0287.338] CreateCompatibleDC (hdc=0x60100ce) returned 0x560107cd
[0287.338] SelectObject (hdc=0x560107cd, h=0x1e0507b9) returned 0x85000f
[0287.338] GdipCreateFromHDC (hdc=0x560107cd, graphics=0x53e958) returned 0x0
[0287.339] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0287.339] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0287.339] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0287.339] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.339] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0287.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0287.339] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0287.339] LocalFree (hMem=0x89ea88) returned 0x0
[0287.339] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.339] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0287.339] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.339] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0287.339] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0287.339] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfab30dbd) returned 0x0
[0287.339] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.339] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0287.340] GetCurrentObject (hdc=0x560107cd, type=0x1) returned 0xb00017
[0287.340] GetCurrentObject (hdc=0x560107cd, type=0x2) returned 0x900010
[0287.340] GetCurrentObject (hdc=0x560107cd, type=0x7) returned 0x1e0507b9
[0287.340] GetCurrentObject (hdc=0x560107cd, type=0x6) returned 0x8a01c2
[0287.340] SaveDC (hdc=0x560107cd) returned 1
[0287.340] GetNearestColor (hdc=0x560107cd, color=0xff) returned 0xff
[0287.340] GetNearestColor (hdc=0x560107cd, color=0x55) returned 0x55
[0287.340] GetNearestColor (hdc=0x560107cd, color=0x0) returned 0x0
[0287.340] GetNearestColor (hdc=0x560107cd, color=0x55) returned 0x55
[0287.340] GetNearestColor (hdc=0x560107cd, color=0x0) returned 0x0
[0287.340] GetNearestColor (hdc=0x560107cd, color=0x8080ff) returned 0x8080ff
[0287.340] GetNearestColor (hdc=0x560107cd, color=0x7373e5) returned 0x7373e5
[0287.340] GetNearestColor (hdc=0x560107cd, color=0xe5) returned 0xe5
[0287.340] GetNearestColor (hdc=0x560107cd, color=0x0) returned 0x0
[0287.340] RestoreDC (hdc=0x560107cd, nSavedDC=-1) returned 1
[0287.340] GdipReleaseDC (graphics=0x5d92c30, hdc=0x560107cd) returned 0x0
[0287.341] IsAppThemed () returned 0x1
[0287.341] GetThemeAppProperties () returned 0x3
[0287.341] GetThemeAppProperties () returned 0x3
[0287.341] IsAppThemed () returned 0x1
[0287.341] GetThemeAppProperties () returned 0x3
[0287.341] GetThemeAppProperties () returned 0x3
[0287.341] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x24073c0 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0287.341] IsAppThemed () returned 0x1
[0287.341] GetThemeAppProperties () returned 0x3
[0287.341] GetThemeAppProperties () returned 0x3
[0287.341] IsAppThemed () returned 0x1
[0287.341] GetThemeAppProperties () returned 0x3
[0287.341] GetThemeAppProperties () returned 0x3
[0287.341] IsAppThemed () returned 0x1
[0287.341] GetThemeAppProperties () returned 0x3
[0287.341] GetThemeAppProperties () returned 0x3
[0287.341] IsAppThemed () returned 0x1
[0287.342] GetThemeAppProperties () returned 0x3
[0287.342] GetThemeAppProperties () returned 0x3
[0287.342] IsThemePartDefined () returned 0x1
[0287.342] IsAppThemed () returned 0x1
[0287.342] GetThemeAppProperties () returned 0x3
[0287.342] GetThemeAppProperties () returned 0x3
[0287.342] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0287.342] IsAppThemed () returned 0x1
[0287.342] GetThemeAppProperties () returned 0x3
[0287.342] GetThemeAppProperties () returned 0x3
[0287.342] IsAppThemed () returned 0x1
[0287.342] GetThemeAppProperties () returned 0x3
[0287.342] GetThemeAppProperties () returned 0x3
[0287.342] IsThemePartDefined () returned 0x1
[0287.342] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0287.342] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.342] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0287.342] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.342] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0287.343] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0287.343] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0287.343] LocalFree (hMem=0x89eee8) returned 0x0
[0287.343] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0287.343] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0287.343] LocalFree (hMem=0x89ea88) returned 0x0
[0287.343] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.343] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0287.343] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0287.343] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0287.343] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.343] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0287.343] GetCurrentObject (hdc=0x560107cd, type=0x1) returned 0xb00017
[0287.343] GetCurrentObject (hdc=0x560107cd, type=0x2) returned 0x900010
[0287.344] GetCurrentObject (hdc=0x560107cd, type=0x7) returned 0x1e0507b9
[0287.344] GetCurrentObject (hdc=0x560107cd, type=0x6) returned 0x8a01c2
[0287.344] SaveDC (hdc=0x560107cd) returned 1
[0287.344] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9704051e
[0287.344] GetClipRgn (hdc=0x560107cd, hrgn=0x9704051e) returned 0
[0287.344] SelectClipRgn (hdc=0x560107cd, hrgn=0x4104053e) returned 2
[0287.344] DeleteObject (ho=0x9704051e) returned 1
[0287.344] DeleteObject (ho=0x4104053e) returned 1
[0287.344] OffsetViewportOrgEx (in: hdc=0x560107cd, x=0, y=0, lppt=0x2407a70 | out: lppt=0x2407a70) returned 1
[0287.344] DrawThemeParentBackground () returned 0x0
[0287.344] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0287.345] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0287.345] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0287.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0287.345] GetSystemMetrics (nIndex=42) returned 0
[0287.345] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0287.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0287.345] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0287.345] GetCurrentObject (hdc=0x560107cd, type=0x1) returned 0xb00017
[0287.345] GetCurrentObject (hdc=0x560107cd, type=0x2) returned 0x900010
[0287.345] GetCurrentObject (hdc=0x560107cd, type=0x7) returned 0x1e0507b9
[0287.345] GetCurrentObject (hdc=0x560107cd, type=0x6) returned 0x8a01c2
[0287.345] SaveDC (hdc=0x560107cd) returned 2
[0287.345] GetNearestColor (hdc=0x560107cd, color=0xff) returned 0xff
[0287.345] CreateSolidBrush (color=0xff) returned 0x3e10078d
[0287.345] FillRect (hDC=0x560107cd, lprc=0x53e120, hbr=0x3e10078d) returned 1
[0287.345] DeleteObject (ho=0x3e10078d) returned 1
[0287.346] RestoreDC (hdc=0x560107cd, nSavedDC=-1) returned 1
[0287.346] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0287.346] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0287.346] GetSystemMetrics (nIndex=42) returned 0
[0287.346] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0287.346] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0287.346] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0287.346] GetCurrentObject (hdc=0x560107cd, type=0x1) returned 0xb00017
[0287.346] GetCurrentObject (hdc=0x560107cd, type=0x2) returned 0x900010
[0287.346] GetCurrentObject (hdc=0x560107cd, type=0x7) returned 0x1e0507b9
[0287.346] GetCurrentObject (hdc=0x560107cd, type=0x6) returned 0x8a01c2
[0287.346] SaveDC (hdc=0x560107cd) returned 2
[0287.346] GetNearestColor (hdc=0x560107cd, color=0xff) returned 0xff
[0287.346] CreateSolidBrush (color=0xff) returned 0x3f10078d
[0287.346] FillRect (hDC=0x560107cd, lprc=0x53e0c0, hbr=0x3f10078d) returned 1
[0287.347] DeleteObject (ho=0x3f10078d) returned 1
[0287.347] RestoreDC (hdc=0x560107cd, nSavedDC=-1) returned 1
[0287.347] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0287.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0287.347] GetSystemMetrics (nIndex=42) returned 0
[0287.347] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0287.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0287.347] RestoreDC (hdc=0x560107cd, nSavedDC=-1) returned 1
[0287.347] GdipReleaseDC (graphics=0x5d92c30, hdc=0x560107cd) returned 0x0
[0287.347] IsAppThemed () returned 0x1
[0287.347] GetThemeAppProperties () returned 0x3
[0287.347] GetThemeAppProperties () returned 0x3
[0287.347] IsAppThemed () returned 0x1
[0287.348] GetThemeAppProperties () returned 0x3
[0287.348] GetThemeAppProperties () returned 0x3
[0287.348] IsThemePartDefined () returned 0x1
[0287.348] GdipCreateRegion (region=0x53e640) returned 0x0
[0287.348] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.348] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0287.348] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.348] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0287.348] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0287.348] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0287.348] LocalFree (hMem=0x89ea88) returned 0x0
[0287.348] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0287.348] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0287.348] LocalFree (hMem=0x89ea88) returned 0x0
[0287.348] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.348] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0287.348] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0287.348] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0287.349] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.349] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0287.349] GetCurrentObject (hdc=0x560107cd, type=0x1) returned 0xb00017
[0287.349] GetCurrentObject (hdc=0x560107cd, type=0x2) returned 0x900010
[0287.349] GetCurrentObject (hdc=0x560107cd, type=0x7) returned 0x1e0507b9
[0287.349] GetCurrentObject (hdc=0x560107cd, type=0x6) returned 0x8a01c2
[0287.349] SaveDC (hdc=0x560107cd) returned 1
[0287.349] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4204053e
[0287.349] GetClipRgn (hdc=0x560107cd, hrgn=0x4204053e) returned 0
[0287.349] SelectClipRgn (hdc=0x560107cd, hrgn=0x9904051e) returned 2
[0287.349] DeleteObject (ho=0x4204053e) returned 1
[0287.349] DeleteObject (ho=0x9904051e) returned 1
[0287.349] OffsetViewportOrgEx (in: hdc=0x560107cd, x=0, y=0, lppt=0x24082d4 | out: lppt=0x24082d4) returned 1
[0287.349] IsAppThemed () returned 0x1
[0287.350] GetThemeAppProperties () returned 0x3
[0287.350] GetThemeAppProperties () returned 0x3
[0287.350] DrawThemeBackground () returned 0x0
[0287.350] RestoreDC (hdc=0x560107cd, nSavedDC=-1) returned 1
[0287.350] GdipReleaseDC (graphics=0x5d92c30, hdc=0x560107cd) returned 0x0
[0287.350] GdipCreateRegion (region=0x53e644) returned 0x0
[0287.350] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.350] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0287.350] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.350] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0287.350] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0287.350] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0287.350] LocalFree (hMem=0x89ee08) returned 0x0
[0287.350] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0287.350] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0287.351] LocalFree (hMem=0x89ea88) returned 0x0
[0287.351] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.351] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0287.351] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0287.351] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0287.351] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.351] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0287.351] GetCurrentObject (hdc=0x560107cd, type=0x1) returned 0xb00017
[0287.351] GetCurrentObject (hdc=0x560107cd, type=0x2) returned 0x900010
[0287.351] GetCurrentObject (hdc=0x560107cd, type=0x7) returned 0x1e0507b9
[0287.351] GetCurrentObject (hdc=0x560107cd, type=0x6) returned 0x8a01c2
[0287.351] SaveDC (hdc=0x560107cd) returned 1
[0287.351] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9a04051e
[0287.351] GetClipRgn (hdc=0x560107cd, hrgn=0x9a04051e) returned 0
[0287.351] SelectClipRgn (hdc=0x560107cd, hrgn=0x4304053e) returned 2
[0287.351] DeleteObject (ho=0x9a04051e) returned 1
[0287.352] DeleteObject (ho=0x4304053e) returned 1
[0287.352] OffsetViewportOrgEx (in: hdc=0x560107cd, x=0, y=0, lppt=0x24085a8 | out: lppt=0x24085a8) returned 1
[0287.352] IsAppThemed () returned 0x1
[0287.352] GetThemeAppProperties () returned 0x3
[0287.352] GetThemeAppProperties () returned 0x3
[0287.352] GetThemeBackgroundContentRect () returned 0x0
[0287.352] RestoreDC (hdc=0x560107cd, nSavedDC=-1) returned 1
[0287.352] GdipReleaseDC (graphics=0x5d92c30, hdc=0x560107cd) returned 0x0
[0287.352] IsAppThemed () returned 0x1
[0287.352] GetThemeAppProperties () returned 0x3
[0287.352] GetThemeAppProperties () returned 0x3
[0287.352] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0287.352] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0287.352] GetCurrentObject (hdc=0x560107cd, type=0x1) returned 0xb00017
[0287.352] GetCurrentObject (hdc=0x560107cd, type=0x2) returned 0x900010
[0287.352] GetCurrentObject (hdc=0x560107cd, type=0x7) returned 0x1e0507b9
[0287.353] GetCurrentObject (hdc=0x560107cd, type=0x6) returned 0x8a01c2
[0287.353] SaveDC (hdc=0x560107cd) returned 1
[0287.353] GetTextAlign (hdc=0x560107cd) returned 0x0
[0287.353] GetTextColor (hdc=0x560107cd) returned 0x0
[0287.353] GetCurrentObject (hdc=0x560107cd, type=0x6) returned 0x8a01c2
[0287.353] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0287.353] SelectObject (hdc=0x560107cd, h=0x450a0799) returned 0x8a01c2
[0287.353] GetBkMode (hdc=0x560107cd) returned 2
[0287.353] SetBkMode (hdc=0x560107cd, mode=1) returned 2
[0287.353] DrawTextExW (in: hdc=0x560107cd, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x2408948 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0287.354] DrawTextExW (in: hdc=0x560107cd, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x2408948 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0287.354] RestoreDC (hdc=0x560107cd, nSavedDC=-1) returned 1
[0287.354] GdipReleaseDC (graphics=0x5d92c30, hdc=0x560107cd) returned 0x0
[0287.354] GetFocus () returned 0x202c6
[0287.354] IsAppThemed () returned 0x1
[0287.354] GetThemeAppProperties () returned 0x3
[0287.354] GetThemeAppProperties () returned 0x3
[0287.354] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0287.354] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x560107cd, x1=0, y1=0, rop=0xcc0020) returned 1
[0287.355] GdipReleaseDC (graphics=0x5d92c30, hdc=0x560107cd) returned 0x0
[0287.355] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0287.355] SelectObject (hdc=0x560107cd, h=0x85000f) returned 0x1e0507b9
[0287.355] DeleteDC (hdc=0x560107cd) returned 1
[0287.355] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0287.355] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0287.355] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0287.355] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0287.355] WaitMessage () returned 1
[0287.443] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0287.444] IsWindowUnicode (hWnd=0x202c6) returned 1
[0287.444] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0287.444] TranslateMessage (lpMsg=0x53eef8) returned 0
[0287.444] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0287.444] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0287.444] IsWindowUnicode (hWnd=0x202c6) returned 1
[0287.444] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0287.444] TranslateMessage (lpMsg=0x53eef8) returned 0
[0287.444] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0287.444] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xf0054) returned 0x0
[0287.444] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0287.444] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0287.444] WaitMessage () returned 1
[0287.572] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0287.572] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1970244) returned 0x1
[0287.572] IsWindowUnicode (hWnd=0x202c6) returned 1
[0287.572] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0287.572] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1970244) returned 0x1
[0287.572] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0287.572] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12a01ee) returned 0x0
[0287.572] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0287.572] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0287.573] SetCursor (hCursor=0x10003) returned 0x10003
[0287.573] TranslateMessage (lpMsg=0x53eef8) returned 0
[0287.573] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0287.573] GetKeyState (nVirtKey=1) returned -127
[0287.573] GetKeyState (nVirtKey=2) returned 0
[0287.573] GetKeyState (nVirtKey=4) returned 0
[0287.573] GetKeyState (nVirtKey=5) returned 0
[0287.573] GetKeyState (nVirtKey=6) returned 0
[0287.573] IsWindowVisible (hWnd=0x202c6) returned 1
[0287.573] IsWindowEnabled (hWnd=0x202c6) returned 1
[0287.573] SetFocus (hWnd=0x202c6) returned 0x202c6
[0287.573] GetFocus () returned 0x202c6
[0287.573] GetFocus () returned 0x202c6
[0287.573] GetFocus () returned 0x202c6
[0287.573] GetKeyState (nVirtKey=1) returned -127
[0287.573] GetKeyState (nVirtKey=2) returned 0
[0287.573] GetKeyState (nVirtKey=4) returned 0
[0287.573] GetKeyState (nVirtKey=5) returned 0
[0287.573] GetKeyState (nVirtKey=6) returned 0
[0287.573] GetCapture () returned 0x0
[0287.573] SetCapture (hWnd=0x202c6) returned 0x0
[0287.573] GetKeyState (nVirtKey=1) returned -127
[0287.573] GetKeyState (nVirtKey=2) returned 0
[0287.573] GetKeyState (nVirtKey=4) returned 0
[0287.573] GetKeyState (nVirtKey=5) returned 0
[0287.574] GetKeyState (nVirtKey=6) returned 0
[0287.574] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0287.574] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0287.574] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0287.574] IsWindowUnicode (hWnd=0x202c6) returned 1
[0287.574] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0287.574] TranslateMessage (lpMsg=0x53eef8) returned 0
[0287.574] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0287.574] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2408acc, cPoints=0x1 | out: lpPoints=0x2408acc) returned 25690608
[0287.574] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0287.574] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0287.574] UpdateWindow (hWnd=0x202c6) returned 1
[0287.574] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x60100ce
[0287.574] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0287.574] CreateCompatibleDC (hdc=0x60100ce) returned 0x570107cd
[0287.574] SelectObject (hdc=0x570107cd, h=0x1e0507b9) returned 0x85000f
[0287.574] GdipCreateFromHDC (hdc=0x570107cd, graphics=0x53e5f0) returned 0x0
[0287.575] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0287.575] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0287.575] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0287.575] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.575] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0287.575] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0287.575] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0287.575] LocalFree (hMem=0x89ea88) returned 0x0
[0287.575] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.575] GdipCreateRegion (region=0x53e638) returned 0x0
[0287.575] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.575] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0287.575] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0287.575] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfab10dbd) returned 0x0
[0287.575] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.576] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0287.576] GetCurrentObject (hdc=0x570107cd, type=0x1) returned 0xb00017
[0287.576] GetCurrentObject (hdc=0x570107cd, type=0x2) returned 0x900010
[0287.576] GetCurrentObject (hdc=0x570107cd, type=0x7) returned 0x1e0507b9
[0287.576] GetCurrentObject (hdc=0x570107cd, type=0x6) returned 0x8a01c2
[0287.576] SaveDC (hdc=0x570107cd) returned 1
[0287.576] GetNearestColor (hdc=0x570107cd, color=0xff) returned 0xff
[0287.576] GetNearestColor (hdc=0x570107cd, color=0x55) returned 0x55
[0287.576] GetNearestColor (hdc=0x570107cd, color=0x0) returned 0x0
[0287.576] GetNearestColor (hdc=0x570107cd, color=0x55) returned 0x55
[0287.576] GetNearestColor (hdc=0x570107cd, color=0x0) returned 0x0
[0287.576] GetNearestColor (hdc=0x570107cd, color=0x8080ff) returned 0x8080ff
[0287.576] GetNearestColor (hdc=0x570107cd, color=0x7373e5) returned 0x7373e5
[0287.576] GetNearestColor (hdc=0x570107cd, color=0xe5) returned 0xe5
[0287.577] GetNearestColor (hdc=0x570107cd, color=0x0) returned 0x0
[0287.577] RestoreDC (hdc=0x570107cd, nSavedDC=-1) returned 1
[0287.577] GdipReleaseDC (graphics=0x5d92c30, hdc=0x570107cd) returned 0x0
[0287.577] IsAppThemed () returned 0x1
[0287.577] GetThemeAppProperties () returned 0x3
[0287.577] GetThemeAppProperties () returned 0x3
[0287.577] IsAppThemed () returned 0x1
[0287.577] GetThemeAppProperties () returned 0x3
[0287.577] GetThemeAppProperties () returned 0x3
[0287.577] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x24091e8 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0287.577] IsAppThemed () returned 0x1
[0287.577] GetThemeAppProperties () returned 0x3
[0287.577] GetThemeAppProperties () returned 0x3
[0287.577] IsAppThemed () returned 0x1
[0287.577] GetThemeAppProperties () returned 0x3
[0287.577] GetThemeAppProperties () returned 0x3
[0287.577] IsAppThemed () returned 0x1
[0287.578] GetThemeAppProperties () returned 0x3
[0287.578] GetThemeAppProperties () returned 0x3
[0287.578] IsAppThemed () returned 0x1
[0287.578] GetThemeAppProperties () returned 0x3
[0287.578] GetThemeAppProperties () returned 0x3
[0287.578] IsThemePartDefined () returned 0x1
[0287.578] IsAppThemed () returned 0x1
[0287.578] GetThemeAppProperties () returned 0x3
[0287.578] GetThemeAppProperties () returned 0x3
[0287.578] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0287.578] IsAppThemed () returned 0x1
[0287.578] GetThemeAppProperties () returned 0x3
[0287.578] GetThemeAppProperties () returned 0x3
[0287.578] IsAppThemed () returned 0x1
[0287.578] GetThemeAppProperties () returned 0x3
[0287.578] GetThemeAppProperties () returned 0x3
[0287.578] IsThemePartDefined () returned 0x1
[0287.578] GdipCreateRegion (region=0x53e354) returned 0x0
[0287.578] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.578] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0287.578] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.578] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0287.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0287.579] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0287.579] LocalFree (hMem=0x89ea88) returned 0x0
[0287.579] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0287.579] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0287.579] LocalFree (hMem=0x89ec80) returned 0x0
[0287.579] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.579] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0287.579] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0287.579] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0287.579] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.579] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0287.579] GetCurrentObject (hdc=0x570107cd, type=0x1) returned 0xb00017
[0287.579] GetCurrentObject (hdc=0x570107cd, type=0x2) returned 0x900010
[0287.579] GetCurrentObject (hdc=0x570107cd, type=0x7) returned 0x1e0507b9
[0287.579] GetCurrentObject (hdc=0x570107cd, type=0x6) returned 0x8a01c2
[0287.579] SaveDC (hdc=0x570107cd) returned 1
[0287.579] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4404053e
[0287.579] GetClipRgn (hdc=0x570107cd, hrgn=0x4404053e) returned 0
[0287.580] SelectClipRgn (hdc=0x570107cd, hrgn=0x9e04051e) returned 2
[0287.580] DeleteObject (ho=0x4404053e) returned 1
[0287.580] DeleteObject (ho=0x9e04051e) returned 1
[0287.580] OffsetViewportOrgEx (in: hdc=0x570107cd, x=0, y=0, lppt=0x2409898 | out: lppt=0x2409898) returned 1
[0287.580] DrawThemeParentBackground () returned 0x0
[0287.580] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0287.580] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0287.580] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0287.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0287.580] GetSystemMetrics (nIndex=42) returned 0
[0287.580] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0287.580] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0287.580] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0287.580] GetCurrentObject (hdc=0x570107cd, type=0x1) returned 0xb00017
[0287.580] GetCurrentObject (hdc=0x570107cd, type=0x2) returned 0x900010
[0287.580] GetCurrentObject (hdc=0x570107cd, type=0x7) returned 0x1e0507b9
[0287.580] GetCurrentObject (hdc=0x570107cd, type=0x6) returned 0x8a01c2
[0287.581] SaveDC (hdc=0x570107cd) returned 2
[0287.581] GetNearestColor (hdc=0x570107cd, color=0xff) returned 0xff
[0287.581] CreateSolidBrush (color=0xff) returned 0x4010078d
[0287.581] FillRect (hDC=0x570107cd, lprc=0x53ddb8, hbr=0x4010078d) returned 1
[0287.581] DeleteObject (ho=0x4010078d) returned 1
[0287.581] RestoreDC (hdc=0x570107cd, nSavedDC=-1) returned 1
[0287.581] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0287.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0287.581] GetSystemMetrics (nIndex=42) returned 0
[0287.581] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0287.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0287.581] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0287.581] GetCurrentObject (hdc=0x570107cd, type=0x1) returned 0xb00017
[0287.581] GetCurrentObject (hdc=0x570107cd, type=0x2) returned 0x900010
[0287.581] GetCurrentObject (hdc=0x570107cd, type=0x7) returned 0x1e0507b9
[0287.581] GetCurrentObject (hdc=0x570107cd, type=0x6) returned 0x8a01c2
[0287.581] SaveDC (hdc=0x570107cd) returned 2
[0287.582] GetNearestColor (hdc=0x570107cd, color=0xff) returned 0xff
[0287.582] CreateSolidBrush (color=0xff) returned 0x4110078d
[0287.582] FillRect (hDC=0x570107cd, lprc=0x53dd58, hbr=0x4110078d) returned 1
[0287.582] DeleteObject (ho=0x4110078d) returned 1
[0287.582] RestoreDC (hdc=0x570107cd, nSavedDC=-1) returned 1
[0287.582] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0287.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0287.582] GetSystemMetrics (nIndex=42) returned 0
[0287.582] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0287.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0287.582] RestoreDC (hdc=0x570107cd, nSavedDC=-1) returned 1
[0287.582] GdipReleaseDC (graphics=0x5d92c30, hdc=0x570107cd) returned 0x0
[0287.582] IsAppThemed () returned 0x1
[0287.582] GetThemeAppProperties () returned 0x3
[0287.583] GetThemeAppProperties () returned 0x3
[0287.583] IsAppThemed () returned 0x1
[0287.583] GetThemeAppProperties () returned 0x3
[0287.583] GetThemeAppProperties () returned 0x3
[0287.583] IsThemePartDefined () returned 0x1
[0287.583] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0287.583] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.583] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0287.583] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.583] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0287.583] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0287.583] LocalFree (hMem=0x89ec80) returned 0x0
[0287.583] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0287.583] LocalFree (hMem=0x89ea88) returned 0x0
[0287.583] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.583] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0287.583] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0287.583] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0287.583] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.583] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0287.583] GetCurrentObject (hdc=0x570107cd, type=0x1) returned 0xb00017
[0287.583] GetCurrentObject (hdc=0x570107cd, type=0x2) returned 0x900010
[0287.584] GetCurrentObject (hdc=0x570107cd, type=0x7) returned 0x1e0507b9
[0287.584] GetCurrentObject (hdc=0x570107cd, type=0x6) returned 0x8a01c2
[0287.584] SaveDC (hdc=0x570107cd) returned 1
[0287.584] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9f04051e
[0287.584] GetClipRgn (hdc=0x570107cd, hrgn=0x9f04051e) returned 0
[0287.584] SelectClipRgn (hdc=0x570107cd, hrgn=0x4604053e) returned 2
[0287.585] DeleteObject (ho=0x9f04051e) returned 1
[0287.585] DeleteObject (ho=0x4604053e) returned 1
[0287.585] OffsetViewportOrgEx (in: hdc=0x570107cd, x=0, y=0, lppt=0x240a0fc | out: lppt=0x240a0fc) returned 1
[0287.585] IsAppThemed () returned 0x1
[0287.585] GetThemeAppProperties () returned 0x3
[0287.585] GetThemeAppProperties () returned 0x3
[0287.585] DrawThemeBackground () returned 0x0
[0287.585] RestoreDC (hdc=0x570107cd, nSavedDC=-1) returned 1
[0287.585] GdipReleaseDC (graphics=0x5d92c30, hdc=0x570107cd) returned 0x0
[0287.585] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0287.585] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.585] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0287.585] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.585] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0287.585] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0287.585] LocalFree (hMem=0x89ec80) returned 0x0
[0287.585] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0287.586] LocalFree (hMem=0x89ec80) returned 0x0
[0287.586] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.586] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0287.586] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0287.586] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0287.586] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.586] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0287.586] GetCurrentObject (hdc=0x570107cd, type=0x1) returned 0xb00017
[0287.586] GetCurrentObject (hdc=0x570107cd, type=0x2) returned 0x900010
[0287.586] GetCurrentObject (hdc=0x570107cd, type=0x7) returned 0x1e0507b9
[0287.586] GetCurrentObject (hdc=0x570107cd, type=0x6) returned 0x8a01c2
[0287.586] SaveDC (hdc=0x570107cd) returned 1
[0287.586] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4704053e
[0287.586] GetClipRgn (hdc=0x570107cd, hrgn=0x4704053e) returned 0
[0287.587] SelectClipRgn (hdc=0x570107cd, hrgn=0xa004051e) returned 2
[0287.587] DeleteObject (ho=0x4704053e) returned 1
[0287.587] DeleteObject (ho=0xa004051e) returned 1
[0287.587] OffsetViewportOrgEx (in: hdc=0x570107cd, x=0, y=0, lppt=0x240a3d0 | out: lppt=0x240a3d0) returned 1
[0287.587] IsAppThemed () returned 0x1
[0287.587] GetThemeAppProperties () returned 0x3
[0287.587] GetThemeAppProperties () returned 0x3
[0287.587] GetThemeBackgroundContentRect () returned 0x0
[0287.587] RestoreDC (hdc=0x570107cd, nSavedDC=-1) returned 1
[0287.587] GdipReleaseDC (graphics=0x5d92c30, hdc=0x570107cd) returned 0x0
[0287.587] IsAppThemed () returned 0x1
[0287.587] GetThemeAppProperties () returned 0x3
[0287.587] GetThemeAppProperties () returned 0x3
[0287.587] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0287.587] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0287.587] GetCurrentObject (hdc=0x570107cd, type=0x1) returned 0xb00017
[0287.587] GetCurrentObject (hdc=0x570107cd, type=0x2) returned 0x900010
[0287.588] GetCurrentObject (hdc=0x570107cd, type=0x7) returned 0x1e0507b9
[0287.588] GetCurrentObject (hdc=0x570107cd, type=0x6) returned 0x8a01c2
[0287.588] SaveDC (hdc=0x570107cd) returned 1
[0287.588] GetTextAlign (hdc=0x570107cd) returned 0x0
[0287.588] GetTextColor (hdc=0x570107cd) returned 0x0
[0287.588] GetCurrentObject (hdc=0x570107cd, type=0x6) returned 0x8a01c2
[0287.588] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0287.588] SelectObject (hdc=0x570107cd, h=0x450a0799) returned 0x8a01c2
[0287.588] GetBkMode (hdc=0x570107cd) returned 2
[0287.588] SetBkMode (hdc=0x570107cd, mode=1) returned 2
[0287.588] DrawTextExW (in: hdc=0x570107cd, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x240a770 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0287.589] DrawTextExW (in: hdc=0x570107cd, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x240a770 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0287.589] RestoreDC (hdc=0x570107cd, nSavedDC=-1) returned 1
[0287.589] GdipReleaseDC (graphics=0x5d92c30, hdc=0x570107cd) returned 0x0
[0287.589] GetFocus () returned 0x202c6
[0287.589] IsAppThemed () returned 0x1
[0287.589] GetThemeAppProperties () returned 0x3
[0287.589] GetThemeAppProperties () returned 0x3
[0287.589] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0287.589] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x570107cd, x1=0, y1=0, rop=0xcc0020) returned 1
[0287.590] GdipReleaseDC (graphics=0x5d92c30, hdc=0x570107cd) returned 0x0
[0287.590] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0287.590] SelectObject (hdc=0x570107cd, h=0x85000f) returned 0x1e0507b9
[0287.590] DeleteDC (hdc=0x570107cd) returned 1
[0287.590] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0287.590] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0287.590] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x240a86c, cPoints=0x1 | out: lpPoints=0x240a86c) returned 25690608
[0287.590] WindowFromPoint (Point=0x244) returned 0x202c6
[0287.590] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1970244) returned 0x1
[0287.591] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0287.591] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0287.591] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.592] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0287.592] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.593] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0287.593] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.593] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0287.593] GetDC (hWnd=0x0) returned 0x10105d6
[0287.593] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e888) returned 0x0
[0287.593] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0287.593] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0287.594] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0287.594] GetSystemMetrics (nIndex=5) returned 1
[0287.594] GetSystemMetrics (nIndex=6) returned 1
[0287.594] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.594] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0287.594] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.595] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0287.651] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.652] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0287.652] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.652] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0287.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.653] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0287.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.653] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0287.653] GetSystemMetrics (nIndex=5) returned 1
[0287.653] GetSystemMetrics (nIndex=6) returned 1
[0287.654] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.654] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0287.654] GetSystemMetrics (nIndex=5) returned 1
[0287.654] GetSystemMetrics (nIndex=6) returned 1
[0287.654] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.654] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0287.654] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.655] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0287.655] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.655] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0287.655] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.655] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0287.655] GetSystemMetrics (nIndex=59) returned 1460
[0287.655] GetSystemMetrics (nIndex=60) returned 920
[0287.655] GetSystemMetrics (nIndex=34) returned 136
[0287.655] GetSystemMetrics (nIndex=35) returned 39
[0287.656] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.656] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0287.656] GetCurrentThreadId () returned 0x11d0
[0287.656] GetCurrentThreadId () returned 0x11d0
[0287.656] GetCurrentThreadId () returned 0x11d0
[0287.656] GetCurrentThreadId () returned 0x11d0
[0287.656] GetCurrentThreadId () returned 0x11d0
[0287.656] GetCurrentThreadId () returned 0x11d0
[0287.656] GetCurrentThreadId () returned 0x11d0
[0287.656] GetCurrentThreadId () returned 0x11d0
[0287.656] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.656] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0287.656] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0287.656] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0287.657] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.657] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0287.657] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.658] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0287.658] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x3b013e
[0287.658] SetWindowLongW (hWnd=0x3b013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0287.658] GetWindowLongW (hWnd=0x3b013e, nIndex=-4) returned 1950089536
[0287.659] SetWindowLongW (hWnd=0x3b013e, nIndex=-4, dwNewLong=79641438) returned 1950089536
[0287.659] GetWindowLongW (hWnd=0x3b013e, nIndex=-4) returned 79641438
[0287.659] GetWindowLongW (hWnd=0x3b013e, nIndex=-16) returned 113311744
[0287.659] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3b013e, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0287.659] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3b013e, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0287.660] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3b013e, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0287.660] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3b013e, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0287.660] GetClientRect (in: hWnd=0x3b013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0287.660] GetWindowRect (in: hWnd=0x3b013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0287.661] SetWindowTextW (hWnd=0x3b013e, lpString="WindowsFormsParkingWindow") returned 1
[0287.661] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3b013e, Msg=0xc, wParam=0x0, lParam=0x24027b8) returned 0x1
[0287.662] GetParent (hWnd=0x3b013e) returned 0x0
[0287.662] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0287.662] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x3b013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1c0122
[0287.663] SetWindowLongW (hWnd=0x1c0122, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0287.663] GetWindowLongW (hWnd=0x1c0122, nIndex=-4) returned 1868147648
[0287.663] SetWindowLongW (hWnd=0x1c0122, nIndex=-4, dwNewLong=79641558) returned 1868147648
[0287.664] GetWindowLongW (hWnd=0x1c0122, nIndex=-4) returned 79641558
[0287.664] GetWindowLongW (hWnd=0x1c0122, nIndex=-16) returned 1174405133
[0287.664] GetWindowLongW (hWnd=0x1c0122, nIndex=-12) returned 0
[0287.664] SetWindowLongW (hWnd=0x1c0122, nIndex=-12, dwNewLong=1835298) returned 0
[0287.664] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0287.664] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0287.665] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0287.665] GetClientRect (in: hWnd=0x1c0122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0287.665] GetWindowRect (in: hWnd=0x1c0122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0287.665] GetParent (hWnd=0x1c0122) returned 0x3b013e
[0287.665] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3b013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0287.666] SetWindowTextW (hWnd=0x1c0122, lpString="Enter password: ") returned 1
[0287.666] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0287.666] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0287.666] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0287.667] GetClientRect (in: hWnd=0x1c0122, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0287.667] GetWindowRect (in: hWnd=0x1c0122, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0287.667] GetParent (hWnd=0x1c0122) returned 0x3b013e
[0287.667] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3b013e, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0287.667] SendMessageW (hWnd=0x1c0122, Msg=0x2210, wParam=0x1220001, lParam=0x1c0122) returned 0x0
[0287.667] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x2210, wParam=0x1220001, lParam=0x1c0122) returned 0x0
[0287.667] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0287.667] GetParent (hWnd=0x1c0122) returned 0x3b013e
[0287.667] GdipCreateFromHWND (hwnd=0x1c0122, graphics=0x53e994) returned 0x0
[0287.668] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0287.668] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0287.668] GetProcessWindowStation () returned 0x13c
[0287.668] GetCapture () returned 0x202c6
[0287.668] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0287.668] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0287.668] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0287.668] ReleaseCapture () returned 1
[0287.669] GetActiveWindow () returned 0x70036
[0287.669] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0287.669] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.669] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0287.669] GetCursorPos (in: lpPoint=0x241761c | out: lpPoint=0x241761c*(x=580, y=407)) returned 1
[0287.669] MonitorFromPoint (pt=0x244, dwFlags=0x197) returned 0x10001
[0287.670] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0287.670] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x5a0107cd
[0287.670] GetDeviceCaps (hdc=0x5a0107cd, index=12) returned 32
[0287.670] GetDeviceCaps (hdc=0x5a0107cd, index=14) returned 1
[0287.670] DeleteDC (hdc=0x5a0107cd) returned 1
[0287.670] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0287.671] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0287.671] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1902ca
[0287.671] SetWindowLongW (hWnd=0x1902ca, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0287.671] GetWindowLongW (hWnd=0x1902ca, nIndex=-4) returned 1950089536
[0287.672] SetWindowLongW (hWnd=0x1902ca, nIndex=-4, dwNewLong=79641918) returned 1950089536
[0287.672] GetWindowLongW (hWnd=0x1902ca, nIndex=-4) returned 79641918
[0287.672] GetWindowLongW (hWnd=0x1902ca, nIndex=-16) returned 113770496
[0287.672] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0287.673] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0287.674] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0287.674] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0287.674] GetWindowRect (in: hWnd=0x1902ca, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0287.674] SetWindowTextW (hWnd=0x1902ca, lpString="Ransomware") returned 1
[0287.674] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xc, wParam=0x0, lParam=0x240a934) returned 0x1
[0287.675] GetStartupInfoW (in: lpStartupInfo=0x2417958 | out: lpStartupInfo=0x2417958*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0287.677] GetParent (hWnd=0x1902ca) returned 0x0
[0287.677] SetWindowLongW (hWnd=0x1902ca, nIndex=-8, dwNewLong=0) returned 0
[0287.678] SendMessageW (hWnd=0x1902ca, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0287.679] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0287.679] SendMessageW (hWnd=0x1902ca, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0287.679] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0287.679] GetSystemMenu (hWnd=0x1902ca, bRevert=0) returned 0x730095
[0287.679] GetWindowPlacement (in: hWnd=0x1902ca, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0287.679] EnableMenuItem (hMenu=0x730095, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0287.680] EnableMenuItem (hMenu=0x730095, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0287.680] EnableMenuItem (hMenu=0x730095, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0287.680] EnableMenuItem (hMenu=0x730095, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0287.680] EnableMenuItem (hMenu=0x730095, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0287.680] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0287.680] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0287.680] GetWindowRect (in: hWnd=0x1902ca, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0287.680] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.680] GetWindowLongW (hWnd=0x1902ca, nIndex=-16) returned 113770496
[0287.680] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.680] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.681] GetSystemMetrics (nIndex=42) returned 0
[0287.681] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.681] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0287.681] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.681] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.681] GetSystemMetrics (nIndex=42) returned 0
[0287.681] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.681] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0287.681] GetCursorPos (in: lpPoint=0x2417acc | out: lpPoint=0x2417acc*(x=580, y=407)) returned 1
[0287.681] MonitorFromPoint (pt=0x241, dwFlags=0x19a) returned 0x10001
[0287.681] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0287.681] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x5e0107cd
[0287.681] GetDeviceCaps (hdc=0x5e0107cd, index=12) returned 32
[0287.681] GetDeviceCaps (hdc=0x5e0107cd, index=14) returned 1
[0287.681] DeleteDC (hdc=0x5e0107cd) returned 1
[0287.682] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0287.682] GetWindowLongW (hWnd=0x1902ca, nIndex=-16) returned 113770496
[0287.682] GetWindowLongW (hWnd=0x1902ca, nIndex=-20) returned 327937
[0287.682] SetWindowLongW (hWnd=0x1902ca, nIndex=-16, dwNewLong=46661632) returned 113770496
[0287.682] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0287.682] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0287.683] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0287.683] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0287.683] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0287.683] SetWindowLongW (hWnd=0x1902ca, nIndex=-20, dwNewLong=327681) returned 327937
[0287.683] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0287.683] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0287.684] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0287.684] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0287.684] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0287.685] SetWindowPos (hWnd=0x1902ca, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0287.685] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0287.685] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0287.686] GetWindowPlacement (in: hWnd=0x1902ca, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0287.686] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0287.686] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0287.686] GetWindowRect (in: hWnd=0x1902ca, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0287.686] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0287.687] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0287.687] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0287.687] RedrawWindow (hWnd=0x1902ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0287.688] GetSystemMenu (hWnd=0x1902ca, bRevert=0) returned 0x730095
[0287.688] GetWindowPlacement (in: hWnd=0x1902ca, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0287.688] EnableMenuItem (hMenu=0x730095, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0287.688] EnableMenuItem (hMenu=0x730095, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0287.688] EnableMenuItem (hMenu=0x730095, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0287.688] EnableMenuItem (hMenu=0x730095, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0287.688] EnableMenuItem (hMenu=0x730095, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0287.688] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0287.688] GetWindowLongW (hWnd=0x1902ca, nIndex=-8) returned 0
[0287.688] SetWindowLongW (hWnd=0x1902ca, nIndex=-8, dwNewLong=458806) returned 0
[0287.689] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0287.689] GetProcessWindowStation () returned 0x13c
[0287.689] GetCurrentThreadId () returned 0x11d0
[0287.690] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3c76, lParam=0x0) returned 1
[0287.690] IsWindowVisible (hWnd=0x1902ca) returned 0
[0287.690] IsWindowVisible (hWnd=0x70036) returned 1
[0287.690] IsWindowEnabled (hWnd=0x70036) returned 1
[0287.690] IsWindowVisible (hWnd=0x602b6) returned 0
[0287.690] IsWindowVisible (hWnd=0x901f8) returned 0
[0287.690] IsWindowVisible (hWnd=0x202d0) returned 0
[0287.690] IsWindowVisible (hWnd=0x202d4) returned 0
[0287.690] GetActiveWindow () returned 0x70036
[0287.690] GetFocus () returned 0x202c6
[0287.690] IsWindow (hWnd=0x70036) returned 1
[0287.690] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0287.690] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0287.691] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0287.691] GetWindowLongW (hWnd=0x1902ca, nIndex=-8) returned 458806
[0287.691] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0287.691] GetCurrentThreadId () returned 0x11d0
[0287.691] GetWindowLongW (hWnd=0x1902ca, nIndex=-8) returned 458806
[0287.691] IsWindowEnabled (hWnd=0x70036) returned 0
[0287.691] IsWindowEnabled (hWnd=0x1902ca) returned 1
[0287.691] ShowWindow (hWnd=0x1902ca, nCmdShow=5) returned 0
[0287.692] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0287.692] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0287.692] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.692] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0287.693] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x1902ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x18004e
[0287.694] SetWindowLongW (hWnd=0x18004e, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0287.694] GetWindowLongW (hWnd=0x18004e, nIndex=-4) returned 1868026976
[0287.694] SetWindowLongW (hWnd=0x18004e, nIndex=-4, dwNewLong=79641998) returned 1868026976
[0287.694] GetWindowLongW (hWnd=0x18004e, nIndex=-4) returned 79641998
[0287.694] GetWindowLongW (hWnd=0x18004e, nIndex=-16) returned 1174470848
[0287.694] GetWindowLongW (hWnd=0x18004e, nIndex=-12) returned 0
[0287.694] SetWindowLongW (hWnd=0x18004e, nIndex=-12, dwNewLong=1572942) returned 0
[0287.694] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0287.695] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0287.696] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0287.696] SendMessageW (hWnd=0x18004e, Msg=0x2055, wParam=0x18004e, lParam=0x3) returned 0x2
[0287.697] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0287.697] GetWindow (hWnd=0x18004e, uCmd=0x3) returned 0x0
[0287.697] GetClientRect (in: hWnd=0x18004e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0287.697] GetWindowRect (in: hWnd=0x18004e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0287.697] GetParent (hWnd=0x18004e) returned 0x1902ca
[0287.697] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1902ca, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0287.697] SendMessageW (hWnd=0x18004e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0287.697] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0287.697] SendMessageW (hWnd=0x18004e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0287.697] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0287.697] GetSystemMetrics (nIndex=5) returned 1
[0287.697] GetSystemMetrics (nIndex=6) returned 1
[0287.697] SendMessageW (hWnd=0x18004e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0287.697] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0287.697] SendMessageW (hWnd=0x18004e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0287.697] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0287.698] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0287.698] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0287.698] GetClientRect (in: hWnd=0x18004e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0287.698] GetWindowRect (in: hWnd=0x18004e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0287.698] GetParent (hWnd=0x18004e) returned 0x1902ca
[0287.698] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1902ca, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0287.698] SendMessageW (hWnd=0x18004e, Msg=0x2210, wParam=0x4e0001, lParam=0x18004e) returned 0x0
[0287.698] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x2210, wParam=0x4e0001, lParam=0x18004e) returned 0x0
[0287.698] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0287.699] GetParent (hWnd=0x18004e) returned 0x1902ca
[0287.699] GetParent (hWnd=0x1c0122) returned 0x3b013e
[0287.699] SetParent (hWndChild=0x1c0122, hWndNewParent=0x1902ca) returned 0x3b013e
[0287.699] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0287.700] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0287.700] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0287.700] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0287.701] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0287.701] GetClientRect (in: hWnd=0x1c0122, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0287.701] GetWindowRect (in: hWnd=0x1c0122, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0287.701] GetParent (hWnd=0x1c0122) returned 0x1902ca
[0287.701] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1902ca, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0287.701] GetClientRect (in: hWnd=0x1c0122, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0287.701] GetWindowRect (in: hWnd=0x1c0122, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0287.701] GetParent (hWnd=0x1c0122) returned 0x1902ca
[0287.701] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1902ca, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0287.701] GetParent (hWnd=0x1c0122) returned 0x1902ca
[0287.701] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0287.701] GetWindow (hWnd=0x1c0122, uCmd=0x3) returned 0x0
[0287.701] SetWindowPos (hWnd=0x1c0122, hWndInsertAfter=0x18004e, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0287.702] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0287.702] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0287.702] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0287.702] GetClientRect (in: hWnd=0x1c0122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0287.702] GetWindowRect (in: hWnd=0x1c0122, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0287.702] GetParent (hWnd=0x1c0122) returned 0x1902ca
[0287.702] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1902ca, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0287.702] GetParent (hWnd=0x1c0122) returned 0x1902ca
[0287.702] GetWindow (hWnd=0x1c0122, uCmd=0x3) returned 0x18004e
[0287.703] GetWindowThreadProcessId (in: hWnd=0x1c0122, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0287.703] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0287.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.704] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0287.704] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x1902ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1b01e2
[0287.704] SetWindowLongW (hWnd=0x1b01e2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0287.704] GetWindowLongW (hWnd=0x1b01e2, nIndex=-4) returned 1868032000
[0287.705] SetWindowLongW (hWnd=0x1b01e2, nIndex=-4, dwNewLong=79641238) returned 1868032000
[0287.705] GetWindowLongW (hWnd=0x1b01e2, nIndex=-4) returned 79641238
[0287.705] GetWindowLongW (hWnd=0x1b01e2, nIndex=-16) returned 1174470667
[0287.705] GetWindowLongW (hWnd=0x1b01e2, nIndex=-12) returned 0
[0287.705] SetWindowLongW (hWnd=0x1b01e2, nIndex=-12, dwNewLong=1769954) returned 0
[0287.705] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0287.706] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0287.706] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0287.707] SendMessageW (hWnd=0x1b01e2, Msg=0x2055, wParam=0x1b01e2, lParam=0x3) returned 0x2
[0287.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0287.707] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0287.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0287.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0287.707] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0287.707] RedrawWindow (hWnd=0x18004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0287.707] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0287.707] RedrawWindow (hWnd=0x1c0122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0287.708] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0287.708] RedrawWindow (hWnd=0x1b01e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0287.708] RedrawWindow (hWnd=0x1902ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0287.708] GetWindow (hWnd=0x1b01e2, uCmd=0x3) returned 0x1c0122
[0287.708] GetClientRect (in: hWnd=0x1b01e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0287.708] GetWindowRect (in: hWnd=0x1b01e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0287.708] GetParent (hWnd=0x1b01e2) returned 0x1902ca
[0287.708] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1902ca, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0287.708] SetWindowTextW (hWnd=0x1b01e2, lpString="OK") returned 1
[0287.708] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0xc, wParam=0x0, lParam=0x240edf4) returned 0x1
[0287.709] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0287.709] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0287.709] GetClientRect (in: hWnd=0x1b01e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0287.709] GetWindowRect (in: hWnd=0x1b01e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0287.709] GetParent (hWnd=0x1b01e2) returned 0x1902ca
[0287.709] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1902ca, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0287.709] SendMessageW (hWnd=0x1b01e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1b01e2) returned 0x0
[0287.709] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1b01e2) returned 0x0
[0287.709] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0287.710] GetParent (hWnd=0x1b01e2) returned 0x1902ca
[0287.710] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0287.710] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.710] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0287.710] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x1902ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2000ea
[0287.711] SetWindowLongW (hWnd=0x2000ea, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0287.711] GetWindowLongW (hWnd=0x2000ea, nIndex=-4) returned 1868032000
[0287.711] SetWindowLongW (hWnd=0x2000ea, nIndex=-4, dwNewLong=79642038) returned 1868032000
[0287.712] GetWindowLongW (hWnd=0x2000ea, nIndex=-4) returned 79642038
[0287.712] GetWindowLongW (hWnd=0x2000ea, nIndex=-16) returned 1174470667
[0287.712] GetWindowLongW (hWnd=0x2000ea, nIndex=-12) returned 0
[0287.712] SetWindowLongW (hWnd=0x2000ea, nIndex=-12, dwNewLong=2097386) returned 0
[0287.712] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0287.712] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0287.712] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0287.713] SendMessageW (hWnd=0x2000ea, Msg=0x2055, wParam=0x2000ea, lParam=0x3) returned 0x2
[0287.713] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0287.713] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0287.713] GetWindow (hWnd=0x2000ea, uCmd=0x3) returned 0x1b01e2
[0287.713] GetClientRect (in: hWnd=0x2000ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0287.713] GetWindowRect (in: hWnd=0x2000ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0287.714] GetParent (hWnd=0x2000ea) returned 0x1902ca
[0287.714] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1902ca, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0287.714] SetWindowTextW (hWnd=0x2000ea, lpString="Cancel") returned 1
[0287.714] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0xc, wParam=0x0, lParam=0x24126b4) returned 0x1
[0287.714] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0287.714] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0287.714] GetClientRect (in: hWnd=0x2000ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0287.714] GetWindowRect (in: hWnd=0x2000ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0287.714] GetParent (hWnd=0x2000ea) returned 0x1902ca
[0287.714] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1902ca, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0287.714] SendMessageW (hWnd=0x2000ea, Msg=0x2210, wParam=0xea0001, lParam=0x2000ea) returned 0x0
[0287.714] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0x2210, wParam=0xea0001, lParam=0x2000ea) returned 0x0
[0287.715] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0287.715] GetParent (hWnd=0x2000ea) returned 0x1902ca
[0287.715] GetDC (hWnd=0x0) returned 0xf0105ee
[0287.715] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e320) returned 0x0
[0287.715] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0287.715] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0287.715] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0287.716] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0287.716] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0287.716] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0287.716] GetWindowLongW (hWnd=0x1902ca, nIndex=-8) returned 458806
[0287.716] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0287.716] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0287.716] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x650107cd
[0287.716] GetDeviceCaps (hdc=0x650107cd, index=12) returned 32
[0287.716] GetDeviceCaps (hdc=0x650107cd, index=14) returned 1
[0287.716] DeleteDC (hdc=0x650107cd) returned 1
[0287.716] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0287.717] GetWindowThreadProcessId (in: hWnd=0x1902ca, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0287.717] GetCurrentThreadId () returned 0x11d0
[0287.717] PostMessageW (hWnd=0x1902ca, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0287.717] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.717] GetSystemMetrics (nIndex=42) returned 0
[0287.717] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0287.717] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0287.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0287.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0287.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0287.728] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1902ca) returned 0x1
[0287.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0287.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0287.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0287.730] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0287.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0287.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0287.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0287.733] GetFocus () returned 0x202c6
[0287.733] IsChild (hWndParent=0x1902ca, hWnd=0x202c6) returned 0
[0287.733] GetFocus () returned 0x202c6
[0287.733] SetFocus (hWnd=0x18004e) returned 0x202c6
[0287.734] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x18004e, lParam=0x0) returned 0x0
[0287.734] GetCapture () returned 0x0
[0287.734] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0287.735] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0287.736] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0287.737] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0287.737] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0287.737] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0287.738] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0287.738] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0287.739] GetParent (hWnd=0x1902ca) returned 0x0
[0287.739] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0287.739] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0287.739] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0287.740] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0287.740] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0287.740] GetSysColorBrush (nIndex=5) returned 0x100079
[0287.741] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0287.741] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0287.742] SendMessageW (hWnd=0x18004e, Msg=0x2111, wParam=0x100004e, lParam=0x18004e) returned 0x0
[0287.742] SendMessageW (hWnd=0x18004e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0287.742] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0287.742] GetKeyState (nVirtKey=1) returned 1
[0287.742] GetKeyState (nVirtKey=2) returned 0
[0287.742] GetKeyState (nVirtKey=4) returned 0
[0287.742] GetKeyState (nVirtKey=5) returned 0
[0287.742] GetKeyState (nVirtKey=6) returned 0
[0287.742] GetWindowTextLengthW (hWnd=0x18004e) returned 0
[0287.742] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0287.742] SendMessageW (hWnd=0x18004e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0287.743] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0287.743] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0287.743] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0287.747] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0287.748] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0287.748] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0287.748] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0287.749] GetWindowPlacement (in: hWnd=0x1902ca, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0287.749] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0287.749] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.749] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.749] GetSystemMetrics (nIndex=42) returned 0
[0287.749] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.749] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0287.749] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0287.749] GetCurrentObject (hdc=0x8b010786, type=0x1) returned 0xb00017
[0287.749] GetCurrentObject (hdc=0x8b010786, type=0x2) returned 0x900010
[0287.749] GetCurrentObject (hdc=0x8b010786, type=0x7) returned 0xffffffffc805065f
[0287.749] GetCurrentObject (hdc=0x8b010786, type=0x6) returned 0x8a01c2
[0287.749] SaveDC (hdc=0x8b010786) returned 1
[0287.749] GetNearestColor (hdc=0x8b010786, color=0xf0f0f0) returned 0xf0f0f0
[0287.749] CreateSolidBrush (color=0xf0f0f0) returned 0x4210078d
[0287.749] FillRect (hDC=0x8b010786, lprc=0x53e250, hbr=0x4210078d) returned 1
[0287.749] DeleteObject (ho=0x4210078d) returned 1
[0287.750] RestoreDC (hdc=0x8b010786, nSavedDC=-1) returned 1
[0287.750] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0287.750] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0287.750] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0287.751] GetWindowPlacement (in: hWnd=0x1902ca, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0287.751] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0287.751] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.751] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.751] GetSystemMetrics (nIndex=42) returned 0
[0287.751] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.751] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0287.751] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0287.751] GetCurrentObject (hdc=0x7b0107cd, type=0x1) returned 0xb00017
[0287.751] GetCurrentObject (hdc=0x7b0107cd, type=0x2) returned 0x900010
[0287.751] GetCurrentObject (hdc=0x7b0107cd, type=0x7) returned 0xffffffffdc0507cc
[0287.751] GetCurrentObject (hdc=0x7b0107cd, type=0x6) returned 0x8a01c2
[0287.751] SaveDC (hdc=0x7b0107cd) returned 1
[0287.751] GetNearestColor (hdc=0x7b0107cd, color=0xf0f0f0) returned 0xf0f0f0
[0287.751] CreateSolidBrush (color=0xf0f0f0) returned 0x4310078d
[0287.751] FillRect (hDC=0x7b0107cd, lprc=0x53dc18, hbr=0x4310078d) returned 1
[0287.752] DeleteObject (ho=0x4310078d) returned 1
[0287.752] RestoreDC (hdc=0x7b0107cd, nSavedDC=-1) returned 1
[0287.752] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.752] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.752] GetSystemMetrics (nIndex=42) returned 0
[0287.752] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.752] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0287.752] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0287.752] GetCurrentObject (hdc=0x7b0107cd, type=0x1) returned 0xb00017
[0287.752] GetCurrentObject (hdc=0x7b0107cd, type=0x2) returned 0x900010
[0287.752] GetCurrentObject (hdc=0x7b0107cd, type=0x7) returned 0xffffffffdc0507cc
[0287.752] GetCurrentObject (hdc=0x7b0107cd, type=0x6) returned 0x8a01c2
[0287.752] SaveDC (hdc=0x7b0107cd) returned 1
[0287.752] GetNearestColor (hdc=0x7b0107cd, color=0xf0f0f0) returned 0xf0f0f0
[0287.752] CreateSolidBrush (color=0xf0f0f0) returned 0x4410078d
[0287.752] FillRect (hDC=0x7b0107cd, lprc=0x53dbb8, hbr=0x4410078d) returned 1
[0287.752] DeleteObject (ho=0x4410078d) returned 1
[0287.752] RestoreDC (hdc=0x7b0107cd, nSavedDC=-1) returned 1
[0287.752] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.752] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.753] GetSystemMetrics (nIndex=42) returned 0
[0287.753] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.753] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0287.754] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0287.754] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0287.754] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0287.754] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0287.755] GetStockObject (i=5) returned 0x900015
[0287.755] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0287.755] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0287.755] GetStockObject (i=5) returned 0x900015
[0287.755] GetWindowPlacement (in: hWnd=0x1902ca, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0287.755] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0287.755] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0287.755] GetWindowRect (in: hWnd=0x1902ca, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0287.762] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0287.762] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0287.763] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0287.763] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0287.763] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0287.763] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0287.763] GetWindowRect (in: hWnd=0x1902ca, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0287.763] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.763] IsWindowUnicode (hWnd=0x1902ca) returned 1
[0287.763] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.763] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.763] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.763] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0287.763] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.763] IsWindowUnicode (hWnd=0x1902ca) returned 1
[0287.764] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.764] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.764] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.764] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.764] MapWindowPoints (in: hWndFrom=0x1c0122, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0287.764] IsWindowUnicode (hWnd=0x1c0122) returned 1
[0287.764] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.764] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.764] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.764] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.764] IsWindowUnicode (hWnd=0x202c6) returned 1
[0287.764] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.765] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.765] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.765] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0287.765] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0287.765] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.765] MapWindowPoints (in: hWndFrom=0x1c0122, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0287.765] IsWindowUnicode (hWnd=0x1c0122) returned 1
[0287.765] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.765] MapWindowPoints (in: hWndFrom=0x1c0122, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0287.765] SetCursor (hCursor=0x10003) returned 0x10003
[0287.765] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.765] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.765] _TrackMouseEvent (in: lpEventTrack=0x2419048 | out: lpEventTrack=0x2419048) returned 1
[0287.765] SendMessageW (hWnd=0x1c0122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0287.765] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0287.765] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x200, wParam=0x0, lParam=0x10001b) returned 0x0
[0287.765] GetKeyState (nVirtKey=1) returned 1
[0287.765] GetKeyState (nVirtKey=2) returned 0
[0287.765] GetKeyState (nVirtKey=4) returned 0
[0287.765] GetKeyState (nVirtKey=5) returned 0
[0287.765] GetKeyState (nVirtKey=6) returned 0
[0287.766] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.766] IsWindowUnicode (hWnd=0x1902ca) returned 1
[0287.766] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.766] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.766] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.766] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.767] IsWindowUnicode (hWnd=0x1902ca) returned 1
[0287.767] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.767] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.767] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.767] BeginPaint (in: hWnd=0x1902ca, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x10105d6
[0287.767] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0287.767] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.767] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.767] GetSystemMetrics (nIndex=42) returned 0
[0287.767] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.767] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0287.767] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0287.767] EndPaint (hWnd=0x1902ca, lpPaint=0x53e30c) returned 1
[0287.768] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.768] IsWindowUnicode (hWnd=0x18004e) returned 1
[0287.768] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.768] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.768] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0287.768] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0287.768] SetTextColor (hdc=0x7c0107cd, color=0x0) returned 0x0
[0287.768] SetBkColor (hdc=0x7c0107cd, color=0xffffff) returned 0xffffff
[0287.769] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.769] IsWindowUnicode (hWnd=0x1c0122) returned 1
[0287.769] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.770] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.770] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.770] BeginPaint (in: hWnd=0x1c0122, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x60100ce
[0287.770] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0287.770] CreateCompatibleDC (hdc=0x60100ce) returned 0x2601078e
[0287.770] SelectObject (hdc=0x2601078e, h=0x1e0507b9) returned 0x85000f
[0287.770] GdipCreateFromHDC (hdc=0x2601078e, graphics=0x53e30c) returned 0x0
[0287.770] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0287.770] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0287.770] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0287.770] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.770] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0287.771] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0287.771] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0287.771] LocalFree (hMem=0x89ee08) returned 0x0
[0287.771] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.771] GdipCreateRegion (region=0x53e354) returned 0x0
[0287.771] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.771] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0287.771] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0287.771] GetWindowTextLengthW (hWnd=0x1c0122) returned 16
[0287.771] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0287.771] GetSystemMetrics (nIndex=42) returned 0
[0287.803] GetWindowTextW (in: hWnd=0x1c0122, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0287.803] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0287.803] GetClientRect (in: hWnd=0x1c0122, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0287.803] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0287.803] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0287.803] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0287.803] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.803] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0287.804] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0287.804] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0287.804] LocalFree (hMem=0x89ec80) returned 0x0
[0287.804] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0287.804] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0287.804] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0287.804] LocalFree (hMem=0x89ec80) returned 0x0
[0287.804] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.804] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0287.804] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0287.804] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0287.804] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0287.804] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0287.804] GetCurrentObject (hdc=0x2601078e, type=0x1) returned 0xb00017
[0287.804] GetCurrentObject (hdc=0x2601078e, type=0x2) returned 0x900010
[0287.804] GetCurrentObject (hdc=0x2601078e, type=0x7) returned 0x1e0507b9
[0287.804] GetCurrentObject (hdc=0x2601078e, type=0x6) returned 0x8a01c2
[0287.804] SaveDC (hdc=0x2601078e) returned 1
[0287.804] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x44040798
[0287.805] GetClipRgn (hdc=0x2601078e, hrgn=0x44040798) returned 0
[0287.805] SelectClipRgn (hdc=0x2601078e, hrgn=0xa504051e) returned 2
[0287.805] DeleteObject (ho=0x44040798) returned 1
[0287.805] DeleteObject (ho=0xa504051e) returned 1
[0287.805] OffsetViewportOrgEx (in: hdc=0x2601078e, x=0, y=0, lppt=0x241952c | out: lppt=0x241952c) returned 1
[0287.805] GetNearestColor (hdc=0x2601078e, color=0xf0f0f0) returned 0xf0f0f0
[0287.805] CreateSolidBrush (color=0xf0f0f0) returned 0x4510078d
[0287.805] FillRect (hDC=0x2601078e, lprc=0x53e1f4, hbr=0x4510078d) returned 1
[0287.805] DeleteObject (ho=0x4510078d) returned 1
[0287.805] RestoreDC (hdc=0x2601078e, nSavedDC=-1) returned 1
[0287.805] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2601078e) returned 0x0
[0287.805] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaab0dbd) returned 0x0
[0287.805] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.805] GetWindowTextLengthW (hWnd=0x1c0122) returned 16
[0287.805] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0287.805] GetSystemMetrics (nIndex=42) returned 0
[0287.805] GetWindowTextW (in: hWnd=0x1c0122, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0287.806] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0287.806] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0287.806] GetCurrentObject (hdc=0x2601078e, type=0x1) returned 0xb00017
[0287.806] GetCurrentObject (hdc=0x2601078e, type=0x2) returned 0x900010
[0287.806] GetCurrentObject (hdc=0x2601078e, type=0x7) returned 0x1e0507b9
[0287.806] GetCurrentObject (hdc=0x2601078e, type=0x6) returned 0x8a01c2
[0287.806] SaveDC (hdc=0x2601078e) returned 1
[0287.806] GetNearestColor (hdc=0x2601078e, color=0x0) returned 0x0
[0287.806] RestoreDC (hdc=0x2601078e, nSavedDC=-1) returned 1
[0287.806] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2601078e) returned 0x0
[0287.807] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0287.807] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0287.807] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0287.807] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2419834 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0287.807] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0287.807] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0287.807] GetCurrentObject (hdc=0x2601078e, type=0x1) returned 0xb00017
[0287.807] GetCurrentObject (hdc=0x2601078e, type=0x2) returned 0x900010
[0287.807] GetCurrentObject (hdc=0x2601078e, type=0x7) returned 0x1e0507b9
[0287.807] GetCurrentObject (hdc=0x2601078e, type=0x6) returned 0x8a01c2
[0287.808] SaveDC (hdc=0x2601078e) returned 1
[0287.808] GetTextAlign (hdc=0x2601078e) returned 0x0
[0287.808] GetTextColor (hdc=0x2601078e) returned 0x0
[0287.808] GetCurrentObject (hdc=0x2601078e, type=0x6) returned 0x8a01c2
[0287.808] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0287.808] SelectObject (hdc=0x2601078e, h=0x730a066d) returned 0x8a01c2
[0287.808] GetBkMode (hdc=0x2601078e) returned 2
[0287.808] SetBkMode (hdc=0x2601078e, mode=1) returned 2
[0287.808] DrawTextExW (in: hdc=0x2601078e, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x2419a58 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0287.809] RestoreDC (hdc=0x2601078e, nSavedDC=-1) returned 1
[0287.809] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2601078e) returned 0x0
[0287.809] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0287.809] BitBlt (hdc=0x60100ce, x=0, y=0, cx=250, cy=70, hdcSrc=0x2601078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0287.809] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2601078e) returned 0x0
[0287.809] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0287.809] SelectObject (hdc=0x2601078e, h=0x85000f) returned 0x1e0507b9
[0287.809] DeleteDC (hdc=0x2601078e) returned 1
[0287.809] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0287.809] EndPaint (hWnd=0x1c0122, lpPaint=0x53e2f0) returned 1
[0287.810] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.810] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0287.810] IsWindowUnicode (hWnd=0x102dc) returned 1
[0287.810] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.810] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0287.811] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.811] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.812] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.812] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0287.813] IsWindowUnicode (hWnd=0x102dc) returned 1
[0287.813] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.813] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.813] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.813] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.814] IsWindowUnicode (hWnd=0x1b01e2) returned 1
[0287.814] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.814] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.814] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.814] BeginPaint (in: hWnd=0x1b01e2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0287.814] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0287.814] CreateCompatibleDC (hdc=0x8b010786) returned 0x2801078e
[0287.814] SelectObject (hdc=0x2801078e, h=0x1e0507b9) returned 0x85000f
[0287.814] GdipCreateFromHDC (hdc=0x2801078e, graphics=0x53e300) returned 0x0
[0287.814] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0287.815] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0287.815] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0287.815] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.815] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0287.815] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0287.815] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0287.815] LocalFree (hMem=0x89eee8) returned 0x0
[0287.815] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.815] GdipCreateRegion (region=0x53e348) returned 0x0
[0287.815] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.815] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0287.815] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0287.815] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaa90dbd) returned 0x0
[0287.815] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.815] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0287.815] GetCurrentObject (hdc=0x2801078e, type=0x1) returned 0xb00017
[0287.815] GetCurrentObject (hdc=0x2801078e, type=0x2) returned 0x900010
[0287.815] GetCurrentObject (hdc=0x2801078e, type=0x7) returned 0x1e0507b9
[0287.816] GetCurrentObject (hdc=0x2801078e, type=0x6) returned 0x8a01c2
[0287.816] SaveDC (hdc=0x2801078e) returned 1
[0287.816] GetNearestColor (hdc=0x2801078e, color=0xf0f0f0) returned 0xf0f0f0
[0287.816] GetNearestColor (hdc=0x2801078e, color=0xa0a0a0) returned 0xa0a0a0
[0287.816] GetNearestColor (hdc=0x2801078e, color=0x696969) returned 0x696969
[0287.816] GetNearestColor (hdc=0x2801078e, color=0xa0a0a0) returned 0xa0a0a0
[0287.816] GetNearestColor (hdc=0x2801078e, color=0x0) returned 0x0
[0287.816] GetNearestColor (hdc=0x2801078e, color=0xffffff) returned 0xffffff
[0287.816] GetNearestColor (hdc=0x2801078e, color=0xe5e5e5) returned 0xe5e5e5
[0287.816] GetNearestColor (hdc=0x2801078e, color=0xd7d7d7) returned 0xd7d7d7
[0287.816] GetNearestColor (hdc=0x2801078e, color=0x0) returned 0x0
[0287.816] RestoreDC (hdc=0x2801078e, nSavedDC=-1) returned 1
[0287.816] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2801078e) returned 0x0
[0287.817] IsAppThemed () returned 0x1
[0287.817] GetThemeAppProperties () returned 0x3
[0287.817] GetThemeAppProperties () returned 0x3
[0287.817] IsAppThemed () returned 0x1
[0287.817] GetThemeAppProperties () returned 0x3
[0287.817] GetThemeAppProperties () returned 0x3
[0287.817] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x241a1c4 | out: lpchText="OK", lprc=0x53e028) returned 13
[0287.817] IsAppThemed () returned 0x1
[0287.817] GetThemeAppProperties () returned 0x3
[0287.817] GetThemeAppProperties () returned 0x3
[0287.817] IsAppThemed () returned 0x1
[0287.818] GetThemeAppProperties () returned 0x3
[0287.818] GetThemeAppProperties () returned 0x3
[0287.818] GetFocus () returned 0x18004e
[0287.818] IsAppThemed () returned 0x1
[0287.818] GetThemeAppProperties () returned 0x3
[0287.818] GetThemeAppProperties () returned 0x3
[0287.818] IsAppThemed () returned 0x1
[0287.818] GetThemeAppProperties () returned 0x3
[0287.825] GetThemeAppProperties () returned 0x3
[0287.825] IsThemePartDefined () returned 0x1
[0287.825] IsAppThemed () returned 0x1
[0287.825] GetThemeAppProperties () returned 0x3
[0287.825] GetThemeAppProperties () returned 0x3
[0287.825] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0287.825] IsAppThemed () returned 0x1
[0287.825] GetThemeAppProperties () returned 0x3
[0287.825] GetThemeAppProperties () returned 0x3
[0287.825] IsAppThemed () returned 0x1
[0287.825] GetThemeAppProperties () returned 0x3
[0287.825] GetThemeAppProperties () returned 0x3
[0287.825] IsThemePartDefined () returned 0x1
[0287.825] GdipCreateRegion (region=0x53e070) returned 0x0
[0287.825] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.825] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0287.825] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.825] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0287.826] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0287.826] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0287.826] LocalFree (hMem=0x89eac0) returned 0x0
[0287.826] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0287.826] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0287.826] LocalFree (hMem=0x89ee08) returned 0x0
[0287.826] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.826] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0287.826] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0287.826] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0287.826] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.826] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0287.826] GetCurrentObject (hdc=0x2801078e, type=0x1) returned 0xb00017
[0287.827] GetCurrentObject (hdc=0x2801078e, type=0x2) returned 0x900010
[0287.827] GetCurrentObject (hdc=0x2801078e, type=0x7) returned 0x1e0507b9
[0287.827] GetCurrentObject (hdc=0x2801078e, type=0x6) returned 0x8a01c2
[0287.827] SaveDC (hdc=0x2801078e) returned 1
[0287.827] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa604051e
[0287.827] GetClipRgn (hdc=0x2801078e, hrgn=0xa604051e) returned 0
[0287.827] SelectClipRgn (hdc=0x2801078e, hrgn=0x48040798) returned 2
[0287.827] DeleteObject (ho=0xa604051e) returned 1
[0287.827] DeleteObject (ho=0x48040798) returned 1
[0287.827] OffsetViewportOrgEx (in: hdc=0x2801078e, x=0, y=0, lppt=0x241a874 | out: lppt=0x241a874) returned 1
[0287.827] DrawThemeParentBackground () returned 0x0
[0287.828] GetWindowPlacement (in: hWnd=0x1902ca, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0287.828] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0287.828] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.828] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.828] GetSystemMetrics (nIndex=42) returned 0
[0287.828] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.828] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0287.828] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0287.828] GetCurrentObject (hdc=0x2801078e, type=0x1) returned 0xb00017
[0287.828] GetCurrentObject (hdc=0x2801078e, type=0x2) returned 0x900010
[0287.828] GetCurrentObject (hdc=0x2801078e, type=0x7) returned 0x1e0507b9
[0287.828] GetCurrentObject (hdc=0x2801078e, type=0x6) returned 0x8a01c2
[0287.828] SaveDC (hdc=0x2801078e) returned 2
[0287.828] GetNearestColor (hdc=0x2801078e, color=0xf0f0f0) returned 0xf0f0f0
[0287.828] CreateSolidBrush (color=0xf0f0f0) returned 0x4610078d
[0287.828] FillRect (hDC=0x2801078e, lprc=0x53dad0, hbr=0x4610078d) returned 1
[0287.829] DeleteObject (ho=0x4610078d) returned 1
[0287.829] RestoreDC (hdc=0x2801078e, nSavedDC=-1) returned 1
[0287.829] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.829] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.829] GetSystemMetrics (nIndex=42) returned 0
[0287.829] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.829] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0287.829] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0287.829] GetCurrentObject (hdc=0x2801078e, type=0x1) returned 0xb00017
[0287.829] GetCurrentObject (hdc=0x2801078e, type=0x2) returned 0x900010
[0287.829] GetCurrentObject (hdc=0x2801078e, type=0x7) returned 0x1e0507b9
[0287.829] GetCurrentObject (hdc=0x2801078e, type=0x6) returned 0x8a01c2
[0287.830] SaveDC (hdc=0x2801078e) returned 2
[0287.830] GetNearestColor (hdc=0x2801078e, color=0xf0f0f0) returned 0xf0f0f0
[0287.830] CreateSolidBrush (color=0xf0f0f0) returned 0x4710078d
[0287.830] FillRect (hDC=0x2801078e, lprc=0x53da70, hbr=0x4710078d) returned 1
[0287.830] DeleteObject (ho=0x4710078d) returned 1
[0287.830] RestoreDC (hdc=0x2801078e, nSavedDC=-1) returned 1
[0287.830] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.830] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.830] GetSystemMetrics (nIndex=42) returned 0
[0287.830] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.830] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0287.830] RestoreDC (hdc=0x2801078e, nSavedDC=-1) returned 1
[0287.830] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2801078e) returned 0x0
[0287.830] IsAppThemed () returned 0x1
[0287.831] GetThemeAppProperties () returned 0x3
[0287.831] GetThemeAppProperties () returned 0x3
[0287.831] IsAppThemed () returned 0x1
[0287.831] GetThemeAppProperties () returned 0x3
[0287.831] GetThemeAppProperties () returned 0x3
[0287.831] IsThemePartDefined () returned 0x1
[0287.831] GdipCreateRegion (region=0x53dff4) returned 0x0
[0287.831] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.831] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0287.831] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.832] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0287.832] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0287.832] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0287.832] LocalFree (hMem=0x89ee08) returned 0x0
[0287.832] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0287.832] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0287.832] LocalFree (hMem=0x89ee08) returned 0x0
[0287.832] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.832] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0287.832] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0287.832] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0287.832] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.832] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0287.832] GetCurrentObject (hdc=0x2801078e, type=0x1) returned 0xb00017
[0287.832] GetCurrentObject (hdc=0x2801078e, type=0x2) returned 0x900010
[0287.832] GetCurrentObject (hdc=0x2801078e, type=0x7) returned 0x1e0507b9
[0287.832] GetCurrentObject (hdc=0x2801078e, type=0x6) returned 0x8a01c2
[0287.832] SaveDC (hdc=0x2801078e) returned 1
[0287.832] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x49040798
[0287.832] GetClipRgn (hdc=0x2801078e, hrgn=0x49040798) returned 0
[0287.832] SelectClipRgn (hdc=0x2801078e, hrgn=0xa804051e) returned 2
[0287.833] DeleteObject (ho=0x49040798) returned 1
[0287.833] DeleteObject (ho=0xa804051e) returned 1
[0287.833] OffsetViewportOrgEx (in: hdc=0x2801078e, x=0, y=0, lppt=0x241b0fc | out: lppt=0x241b0fc) returned 1
[0287.833] IsAppThemed () returned 0x1
[0287.833] GetThemeAppProperties () returned 0x3
[0287.833] GetThemeAppProperties () returned 0x3
[0287.833] DrawThemeBackground () returned 0x0
[0287.833] RestoreDC (hdc=0x2801078e, nSavedDC=-1) returned 1
[0287.833] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2801078e) returned 0x0
[0287.833] GdipCreateRegion (region=0x53dff8) returned 0x0
[0287.833] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.833] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0287.833] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.833] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0287.833] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0287.833] LocalFree (hMem=0x89ee08) returned 0x0
[0287.833] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0287.833] LocalFree (hMem=0x89eac0) returned 0x0
[0287.833] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.833] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0287.833] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0287.833] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0287.833] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.833] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0287.833] GetCurrentObject (hdc=0x2801078e, type=0x1) returned 0xb00017
[0287.834] GetCurrentObject (hdc=0x2801078e, type=0x2) returned 0x900010
[0287.834] GetCurrentObject (hdc=0x2801078e, type=0x7) returned 0x1e0507b9
[0287.834] GetCurrentObject (hdc=0x2801078e, type=0x6) returned 0x8a01c2
[0287.834] SaveDC (hdc=0x2801078e) returned 1
[0287.834] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa904051e
[0287.834] GetClipRgn (hdc=0x2801078e, hrgn=0xa904051e) returned 0
[0287.834] SelectClipRgn (hdc=0x2801078e, hrgn=0x4a040798) returned 2
[0287.834] DeleteObject (ho=0xa904051e) returned 1
[0287.834] DeleteObject (ho=0x4a040798) returned 1
[0287.834] OffsetViewportOrgEx (in: hdc=0x2801078e, x=0, y=0, lppt=0x241b3d0 | out: lppt=0x241b3d0) returned 1
[0287.834] IsAppThemed () returned 0x1
[0287.835] GetThemeAppProperties () returned 0x3
[0287.835] GetThemeAppProperties () returned 0x3
[0287.835] GetThemeBackgroundContentRect () returned 0x0
[0287.835] RestoreDC (hdc=0x2801078e, nSavedDC=-1) returned 1
[0287.835] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2801078e) returned 0x0
[0287.835] IsAppThemed () returned 0x1
[0287.835] GetThemeAppProperties () returned 0x3
[0287.835] GetThemeAppProperties () returned 0x3
[0287.835] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0287.835] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0287.835] GetCurrentObject (hdc=0x2801078e, type=0x1) returned 0xb00017
[0287.835] GetCurrentObject (hdc=0x2801078e, type=0x2) returned 0x900010
[0287.835] GetCurrentObject (hdc=0x2801078e, type=0x7) returned 0x1e0507b9
[0287.835] GetCurrentObject (hdc=0x2801078e, type=0x6) returned 0x8a01c2
[0287.835] SaveDC (hdc=0x2801078e) returned 1
[0287.835] GetTextAlign (hdc=0x2801078e) returned 0x0
[0287.835] GetTextColor (hdc=0x2801078e) returned 0x0
[0287.835] GetCurrentObject (hdc=0x2801078e, type=0x6) returned 0x8a01c2
[0287.835] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0287.835] SelectObject (hdc=0x2801078e, h=0x730a066d) returned 0x8a01c2
[0287.835] GetBkMode (hdc=0x2801078e) returned 2
[0287.836] SetBkMode (hdc=0x2801078e, mode=1) returned 2
[0287.836] DrawTextExW (in: hdc=0x2801078e, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x241b770 | out: lpchText="OK", lprc=0x53df90) returned 13
[0287.836] DrawTextExW (in: hdc=0x2801078e, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x241b770 | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0287.836] RestoreDC (hdc=0x2801078e, nSavedDC=-1) returned 1
[0287.836] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2801078e) returned 0x0
[0287.836] GetFocus () returned 0x18004e
[0287.836] IsAppThemed () returned 0x1
[0287.836] GetThemeAppProperties () returned 0x3
[0287.836] GetThemeAppProperties () returned 0x3
[0287.836] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0287.836] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x2801078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0287.836] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2801078e) returned 0x0
[0287.837] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0287.837] SelectObject (hdc=0x2801078e, h=0x85000f) returned 0x1e0507b9
[0287.837] DeleteDC (hdc=0x2801078e) returned 1
[0287.837] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0287.837] EndPaint (hWnd=0x1b01e2, lpPaint=0x53e2e4) returned 1
[0287.837] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.837] IsWindowUnicode (hWnd=0x2000ea) returned 1
[0287.837] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.837] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.837] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.837] BeginPaint (in: hWnd=0x2000ea, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0287.837] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0287.837] CreateCompatibleDC (hdc=0x60100ce) returned 0x2a01078e
[0287.837] SelectObject (hdc=0x2a01078e, h=0x1e0507b9) returned 0x85000f
[0287.838] GdipCreateFromHDC (hdc=0x2a01078e, graphics=0x53e300) returned 0x0
[0287.838] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0287.838] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0287.838] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0287.838] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.838] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0287.838] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0287.838] LocalFree (hMem=0x89eee8) returned 0x0
[0287.838] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.838] GdipCreateRegion (region=0x53e348) returned 0x0
[0287.838] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.838] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0287.838] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0287.838] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaa70dbd) returned 0x0
[0287.838] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.838] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0287.838] GetCurrentObject (hdc=0x2a01078e, type=0x1) returned 0xb00017
[0287.838] GetCurrentObject (hdc=0x2a01078e, type=0x2) returned 0x900010
[0287.838] GetCurrentObject (hdc=0x2a01078e, type=0x7) returned 0x1e0507b9
[0287.838] GetCurrentObject (hdc=0x2a01078e, type=0x6) returned 0x8a01c2
[0287.838] SaveDC (hdc=0x2a01078e) returned 1
[0287.839] GetNearestColor (hdc=0x2a01078e, color=0xf0f0f0) returned 0xf0f0f0
[0287.839] GetNearestColor (hdc=0x2a01078e, color=0xa0a0a0) returned 0xa0a0a0
[0287.839] GetNearestColor (hdc=0x2a01078e, color=0x696969) returned 0x696969
[0287.839] GetNearestColor (hdc=0x2a01078e, color=0xa0a0a0) returned 0xa0a0a0
[0287.839] GetNearestColor (hdc=0x2a01078e, color=0x0) returned 0x0
[0287.839] GetNearestColor (hdc=0x2a01078e, color=0xffffff) returned 0xffffff
[0287.839] GetNearestColor (hdc=0x2a01078e, color=0xe5e5e5) returned 0xe5e5e5
[0287.839] GetNearestColor (hdc=0x2a01078e, color=0xd7d7d7) returned 0xd7d7d7
[0287.839] GetNearestColor (hdc=0x2a01078e, color=0x0) returned 0x0
[0287.839] RestoreDC (hdc=0x2a01078e, nSavedDC=-1) returned 1
[0287.839] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a01078e) returned 0x0
[0287.839] IsAppThemed () returned 0x1
[0287.839] GetThemeAppProperties () returned 0x3
[0287.839] GetThemeAppProperties () returned 0x3
[0287.839] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0287.839] SendMessageW (hWnd=0x1902ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0287.839] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0287.839] IsAppThemed () returned 0x1
[0287.839] GetThemeAppProperties () returned 0x3
[0287.839] GetThemeAppProperties () returned 0x3
[0287.840] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x241bf80 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0287.840] IsAppThemed () returned 0x1
[0287.840] GetThemeAppProperties () returned 0x3
[0287.840] GetThemeAppProperties () returned 0x3
[0287.840] IsAppThemed () returned 0x1
[0287.840] GetThemeAppProperties () returned 0x3
[0287.840] GetThemeAppProperties () returned 0x3
[0287.840] GetFocus () returned 0x18004e
[0287.840] IsAppThemed () returned 0x1
[0287.840] GetThemeAppProperties () returned 0x3
[0287.840] GetThemeAppProperties () returned 0x3
[0287.840] IsAppThemed () returned 0x1
[0287.840] GetThemeAppProperties () returned 0x3
[0287.840] GetThemeAppProperties () returned 0x3
[0287.840] IsThemePartDefined () returned 0x1
[0287.840] IsAppThemed () returned 0x1
[0287.840] GetThemeAppProperties () returned 0x3
[0287.840] GetThemeAppProperties () returned 0x3
[0287.840] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0287.840] IsAppThemed () returned 0x1
[0287.840] GetThemeAppProperties () returned 0x3
[0287.840] GetThemeAppProperties () returned 0x3
[0287.840] IsAppThemed () returned 0x1
[0287.841] GetThemeAppProperties () returned 0x3
[0287.841] GetThemeAppProperties () returned 0x3
[0287.841] IsThemePartDefined () returned 0x1
[0287.841] GdipCreateRegion (region=0x53e070) returned 0x0
[0287.841] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.841] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0287.841] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.841] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0287.841] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0287.841] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0287.841] LocalFree (hMem=0x89eac0) returned 0x0
[0287.841] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0287.841] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0287.841] LocalFree (hMem=0x89eac0) returned 0x0
[0287.841] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.841] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0287.841] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0287.841] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0287.841] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.841] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0287.841] GetCurrentObject (hdc=0x2a01078e, type=0x1) returned 0xb00017
[0287.841] GetCurrentObject (hdc=0x2a01078e, type=0x2) returned 0x900010
[0287.841] GetCurrentObject (hdc=0x2a01078e, type=0x7) returned 0x1e0507b9
[0287.842] GetCurrentObject (hdc=0x2a01078e, type=0x6) returned 0x8a01c2
[0287.842] SaveDC (hdc=0x2a01078e) returned 1
[0287.842] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4b040798
[0287.842] GetClipRgn (hdc=0x2a01078e, hrgn=0x4b040798) returned 0
[0287.842] SelectClipRgn (hdc=0x2a01078e, hrgn=0xad04051e) returned 2
[0287.842] DeleteObject (ho=0x4b040798) returned 1
[0287.842] DeleteObject (ho=0xad04051e) returned 1
[0287.842] OffsetViewportOrgEx (in: hdc=0x2a01078e, x=0, y=0, lppt=0x241c630 | out: lppt=0x241c630) returned 1
[0287.842] DrawThemeParentBackground () returned 0x0
[0287.842] GetWindowPlacement (in: hWnd=0x1902ca, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0287.842] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0287.842] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.842] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.842] GetSystemMetrics (nIndex=42) returned 0
[0287.842] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.842] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0287.842] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0287.842] GetCurrentObject (hdc=0x2a01078e, type=0x1) returned 0xb00017
[0287.843] GetCurrentObject (hdc=0x2a01078e, type=0x2) returned 0x900010
[0287.843] GetCurrentObject (hdc=0x2a01078e, type=0x7) returned 0x1e0507b9
[0287.843] GetCurrentObject (hdc=0x2a01078e, type=0x6) returned 0x8a01c2
[0287.843] SaveDC (hdc=0x2a01078e) returned 2
[0287.843] GetNearestColor (hdc=0x2a01078e, color=0xf0f0f0) returned 0xf0f0f0
[0287.843] CreateSolidBrush (color=0xf0f0f0) returned 0x4810078d
[0287.843] FillRect (hDC=0x2a01078e, lprc=0x53dad0, hbr=0x4810078d) returned 1
[0287.843] DeleteObject (ho=0x4810078d) returned 1
[0287.843] RestoreDC (hdc=0x2a01078e, nSavedDC=-1) returned 1
[0287.843] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.843] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.843] GetSystemMetrics (nIndex=42) returned 0
[0287.843] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.843] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0287.845] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0287.845] GetCurrentObject (hdc=0x2a01078e, type=0x1) returned 0xb00017
[0287.845] GetCurrentObject (hdc=0x2a01078e, type=0x2) returned 0x900010
[0287.845] GetCurrentObject (hdc=0x2a01078e, type=0x7) returned 0x1e0507b9
[0287.845] GetCurrentObject (hdc=0x2a01078e, type=0x6) returned 0x8a01c2
[0287.845] SaveDC (hdc=0x2a01078e) returned 2
[0287.845] GetNearestColor (hdc=0x2a01078e, color=0xf0f0f0) returned 0xf0f0f0
[0287.845] CreateSolidBrush (color=0xf0f0f0) returned 0x4910078d
[0287.845] FillRect (hDC=0x2a01078e, lprc=0x53da70, hbr=0x4910078d) returned 1
[0287.845] DeleteObject (ho=0x4910078d) returned 1
[0287.845] RestoreDC (hdc=0x2a01078e, nSavedDC=-1) returned 1
[0287.845] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.845] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.845] GetSystemMetrics (nIndex=42) returned 0
[0287.845] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.845] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0287.846] RestoreDC (hdc=0x2a01078e, nSavedDC=-1) returned 1
[0287.846] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a01078e) returned 0x0
[0287.846] IsAppThemed () returned 0x1
[0287.846] GetThemeAppProperties () returned 0x3
[0287.846] GetThemeAppProperties () returned 0x3
[0287.846] IsAppThemed () returned 0x1
[0287.846] GetThemeAppProperties () returned 0x3
[0287.846] GetThemeAppProperties () returned 0x3
[0287.846] IsThemePartDefined () returned 0x1
[0287.846] GdipCreateRegion (region=0x53dff4) returned 0x0
[0287.846] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.846] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0287.846] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.846] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0287.846] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0287.846] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0287.846] LocalFree (hMem=0x89eac0) returned 0x0
[0287.846] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0287.846] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0287.846] LocalFree (hMem=0x89ee08) returned 0x0
[0287.846] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.846] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0287.846] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0287.847] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0287.847] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.847] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0287.847] GetCurrentObject (hdc=0x2a01078e, type=0x1) returned 0xb00017
[0287.847] GetCurrentObject (hdc=0x2a01078e, type=0x2) returned 0x900010
[0287.847] GetCurrentObject (hdc=0x2a01078e, type=0x7) returned 0x1e0507b9
[0287.847] GetCurrentObject (hdc=0x2a01078e, type=0x6) returned 0x8a01c2
[0287.847] SaveDC (hdc=0x2a01078e) returned 1
[0287.847] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xae04051e
[0287.847] GetClipRgn (hdc=0x2a01078e, hrgn=0xae04051e) returned 0
[0287.847] SelectClipRgn (hdc=0x2a01078e, hrgn=0x4d040798) returned 2
[0287.847] DeleteObject (ho=0xae04051e) returned 1
[0287.847] DeleteObject (ho=0x4d040798) returned 1
[0287.847] OffsetViewportOrgEx (in: hdc=0x2a01078e, x=0, y=0, lppt=0x241ceb8 | out: lppt=0x241ceb8) returned 1
[0287.847] IsAppThemed () returned 0x1
[0287.847] GetThemeAppProperties () returned 0x3
[0287.847] GetThemeAppProperties () returned 0x3
[0287.847] DrawThemeBackground () returned 0x0
[0287.848] RestoreDC (hdc=0x2a01078e, nSavedDC=-1) returned 1
[0287.848] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a01078e) returned 0x0
[0287.848] GdipCreateRegion (region=0x53dff8) returned 0x0
[0287.848] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.848] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0287.848] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.848] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0287.848] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0287.848] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0287.848] LocalFree (hMem=0x89eac0) returned 0x0
[0287.848] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0287.848] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0287.848] LocalFree (hMem=0x89eac0) returned 0x0
[0287.848] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.848] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0287.848] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0287.848] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0287.848] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.848] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0287.848] GetCurrentObject (hdc=0x2a01078e, type=0x1) returned 0xb00017
[0287.848] GetCurrentObject (hdc=0x2a01078e, type=0x2) returned 0x900010
[0287.849] GetCurrentObject (hdc=0x2a01078e, type=0x7) returned 0x1e0507b9
[0287.849] GetCurrentObject (hdc=0x2a01078e, type=0x6) returned 0x8a01c2
[0287.849] SaveDC (hdc=0x2a01078e) returned 1
[0287.849] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4e040798
[0287.849] GetClipRgn (hdc=0x2a01078e, hrgn=0x4e040798) returned 0
[0287.849] SelectClipRgn (hdc=0x2a01078e, hrgn=0xaf04051e) returned 2
[0287.849] DeleteObject (ho=0x4e040798) returned 1
[0287.849] DeleteObject (ho=0xaf04051e) returned 1
[0287.849] OffsetViewportOrgEx (in: hdc=0x2a01078e, x=0, y=0, lppt=0x241d18c | out: lppt=0x241d18c) returned 1
[0287.849] IsAppThemed () returned 0x1
[0287.855] GetThemeAppProperties () returned 0x3
[0287.855] GetThemeAppProperties () returned 0x3
[0287.855] GetThemeBackgroundContentRect () returned 0x0
[0287.855] RestoreDC (hdc=0x2a01078e, nSavedDC=-1) returned 1
[0287.855] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a01078e) returned 0x0
[0287.855] IsAppThemed () returned 0x1
[0287.855] GetThemeAppProperties () returned 0x3
[0287.856] GetThemeAppProperties () returned 0x3
[0287.856] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0287.856] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0287.856] GetCurrentObject (hdc=0x2a01078e, type=0x1) returned 0xb00017
[0287.856] GetCurrentObject (hdc=0x2a01078e, type=0x2) returned 0x900010
[0287.856] GetCurrentObject (hdc=0x2a01078e, type=0x7) returned 0x1e0507b9
[0287.856] GetCurrentObject (hdc=0x2a01078e, type=0x6) returned 0x8a01c2
[0287.856] SaveDC (hdc=0x2a01078e) returned 1
[0287.856] GetTextAlign (hdc=0x2a01078e) returned 0x0
[0287.856] GetTextColor (hdc=0x2a01078e) returned 0x0
[0287.856] GetCurrentObject (hdc=0x2a01078e, type=0x6) returned 0x8a01c2
[0287.856] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0287.856] SelectObject (hdc=0x2a01078e, h=0x730a066d) returned 0x8a01c2
[0287.856] GetBkMode (hdc=0x2a01078e) returned 2
[0287.856] SetBkMode (hdc=0x2a01078e, mode=1) returned 2
[0287.856] DrawTextExW (in: hdc=0x2a01078e, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x241d52c | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0287.857] DrawTextExW (in: hdc=0x2a01078e, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x241d52c | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0287.857] RestoreDC (hdc=0x2a01078e, nSavedDC=-1) returned 1
[0287.857] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a01078e) returned 0x0
[0287.857] GetFocus () returned 0x18004e
[0287.857] IsAppThemed () returned 0x1
[0287.859] GetThemeAppProperties () returned 0x3
[0287.859] GetThemeAppProperties () returned 0x3
[0287.859] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0287.859] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x2a01078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0287.859] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2a01078e) returned 0x0
[0287.860] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0287.860] SelectObject (hdc=0x2a01078e, h=0x85000f) returned 0x1e0507b9
[0287.860] DeleteDC (hdc=0x2a01078e) returned 1
[0287.860] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0287.860] EndPaint (hWnd=0x2000ea, lpPaint=0x53e2e4) returned 1
[0287.860] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.860] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x84, wParam=0x0, lParam=0x192035a) returned 0x1
[0287.861] IsWindowUnicode (hWnd=0x1b01e2) returned 1
[0287.861] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.861] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.861] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.861] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0287.861] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.861] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x84, wParam=0x0, lParam=0x192035a) returned 0x1
[0287.861] IsWindowUnicode (hWnd=0x1b01e2) returned 1
[0287.861] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.861] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x84, wParam=0x0, lParam=0x192035a) returned 0x1
[0287.861] SetCursor (hCursor=0x10003) returned 0x10003
[0287.861] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.862] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.862] _TrackMouseEvent (in: lpEventTrack=0x241d628 | out: lpEventTrack=0x241d628) returned 1
[0287.862] SendMessageW (hWnd=0x1b01e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0287.862] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0287.862] InvalidateRect (hWnd=0x1b01e2, lpRect=0x0, bErase=0) returned 1
[0287.862] GetKeyState (nVirtKey=1) returned 1
[0287.862] GetKeyState (nVirtKey=2) returned 0
[0287.862] GetKeyState (nVirtKey=4) returned 0
[0287.862] GetKeyState (nVirtKey=5) returned 0
[0287.862] GetKeyState (nVirtKey=6) returned 0
[0287.862] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.862] IsWindowUnicode (hWnd=0x1b01e2) returned 1
[0287.862] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.862] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.862] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.862] BeginPaint (in: hWnd=0x1b01e2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0287.863] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0287.863] CreateCompatibleDC (hdc=0x8b010786) returned 0x2b01078e
[0287.863] SelectObject (hdc=0x2b01078e, h=0x1e0507b9) returned 0x85000f
[0287.863] GdipCreateFromHDC (hdc=0x2b01078e, graphics=0x53e300) returned 0x0
[0287.863] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0287.863] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0287.863] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0287.863] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.863] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0287.863] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0287.863] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0287.864] LocalFree (hMem=0x89eac0) returned 0x0
[0287.864] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.864] GdipCreateRegion (region=0x53e348) returned 0x0
[0287.864] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.864] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0287.864] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0287.864] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaa50dbd) returned 0x0
[0287.864] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.864] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0287.864] GetCurrentObject (hdc=0x2b01078e, type=0x1) returned 0xb00017
[0287.864] GetCurrentObject (hdc=0x2b01078e, type=0x2) returned 0x900010
[0287.864] GetCurrentObject (hdc=0x2b01078e, type=0x7) returned 0x1e0507b9
[0287.864] GetCurrentObject (hdc=0x2b01078e, type=0x6) returned 0x8a01c2
[0287.864] SaveDC (hdc=0x2b01078e) returned 1
[0287.865] GetNearestColor (hdc=0x2b01078e, color=0xf0f0f0) returned 0xf0f0f0
[0287.865] GetNearestColor (hdc=0x2b01078e, color=0xa0a0a0) returned 0xa0a0a0
[0287.865] GetNearestColor (hdc=0x2b01078e, color=0x696969) returned 0x696969
[0287.865] GetNearestColor (hdc=0x2b01078e, color=0xa0a0a0) returned 0xa0a0a0
[0287.865] GetNearestColor (hdc=0x2b01078e, color=0x0) returned 0x0
[0287.866] GetNearestColor (hdc=0x2b01078e, color=0xffffff) returned 0xffffff
[0287.866] GetNearestColor (hdc=0x2b01078e, color=0xe5e5e5) returned 0xe5e5e5
[0287.866] GetNearestColor (hdc=0x2b01078e, color=0xd7d7d7) returned 0xd7d7d7
[0287.866] GetNearestColor (hdc=0x2b01078e, color=0x0) returned 0x0
[0287.866] RestoreDC (hdc=0x2b01078e, nSavedDC=-1) returned 1
[0287.866] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b01078e) returned 0x0
[0287.866] IsAppThemed () returned 0x1
[0287.866] GetThemeAppProperties () returned 0x3
[0287.866] GetThemeAppProperties () returned 0x3
[0287.866] IsAppThemed () returned 0x1
[0287.866] GetThemeAppProperties () returned 0x3
[0287.866] GetThemeAppProperties () returned 0x3
[0287.866] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x241dd88 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0287.867] IsAppThemed () returned 0x1
[0287.867] GetThemeAppProperties () returned 0x3
[0287.867] GetThemeAppProperties () returned 0x3
[0287.867] IsAppThemed () returned 0x1
[0287.867] GetThemeAppProperties () returned 0x3
[0287.867] GetThemeAppProperties () returned 0x3
[0287.867] IsAppThemed () returned 0x1
[0287.867] GetThemeAppProperties () returned 0x3
[0287.867] GetThemeAppProperties () returned 0x3
[0287.867] IsAppThemed () returned 0x1
[0287.867] GetThemeAppProperties () returned 0x3
[0287.867] GetThemeAppProperties () returned 0x3
[0287.867] IsThemePartDefined () returned 0x1
[0287.867] IsAppThemed () returned 0x1
[0287.867] GetThemeAppProperties () returned 0x3
[0287.867] GetThemeAppProperties () returned 0x3
[0287.867] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0287.868] IsAppThemed () returned 0x1
[0287.868] GetThemeAppProperties () returned 0x3
[0287.868] GetThemeAppProperties () returned 0x3
[0287.868] IsAppThemed () returned 0x1
[0287.868] GetThemeAppProperties () returned 0x3
[0287.868] GetThemeAppProperties () returned 0x3
[0287.868] IsThemePartDefined () returned 0x1
[0287.868] GdipCreateRegion (region=0x53e064) returned 0x0
[0287.868] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.868] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0287.868] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.868] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0287.868] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0287.868] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0287.868] LocalFree (hMem=0x89ec80) returned 0x0
[0287.868] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0287.868] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0287.869] LocalFree (hMem=0x89ec80) returned 0x0
[0287.869] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.869] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0287.869] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0287.869] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0287.869] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.869] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0287.869] GetCurrentObject (hdc=0x2b01078e, type=0x1) returned 0xb00017
[0287.869] GetCurrentObject (hdc=0x2b01078e, type=0x2) returned 0x900010
[0287.869] GetCurrentObject (hdc=0x2b01078e, type=0x7) returned 0x1e0507b9
[0287.869] GetCurrentObject (hdc=0x2b01078e, type=0x6) returned 0x8a01c2
[0287.869] SaveDC (hdc=0x2b01078e) returned 1
[0287.869] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb004051e
[0287.869] GetClipRgn (hdc=0x2b01078e, hrgn=0xb004051e) returned 0
[0287.869] SelectClipRgn (hdc=0x2b01078e, hrgn=0x52040798) returned 2
[0287.870] DeleteObject (ho=0xb004051e) returned 1
[0287.870] DeleteObject (ho=0x52040798) returned 1
[0287.870] OffsetViewportOrgEx (in: hdc=0x2b01078e, x=0, y=0, lppt=0x241e438 | out: lppt=0x241e438) returned 1
[0287.870] DrawThemeParentBackground () returned 0x0
[0287.870] GetWindowPlacement (in: hWnd=0x1902ca, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0287.870] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0287.870] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.870] GetSystemMetrics (nIndex=42) returned 0
[0287.870] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0287.870] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0287.870] GetCurrentObject (hdc=0x2b01078e, type=0x1) returned 0xb00017
[0287.870] GetCurrentObject (hdc=0x2b01078e, type=0x2) returned 0x900010
[0287.871] GetCurrentObject (hdc=0x2b01078e, type=0x7) returned 0x1e0507b9
[0287.871] GetCurrentObject (hdc=0x2b01078e, type=0x6) returned 0x8a01c2
[0287.871] SaveDC (hdc=0x2b01078e) returned 2
[0287.871] GetNearestColor (hdc=0x2b01078e, color=0xf0f0f0) returned 0xf0f0f0
[0287.871] CreateSolidBrush (color=0xf0f0f0) returned 0x4a10078d
[0287.871] FillRect (hDC=0x2b01078e, lprc=0x53dac8, hbr=0x4a10078d) returned 1
[0287.871] DeleteObject (ho=0x4a10078d) returned 1
[0287.871] RestoreDC (hdc=0x2b01078e, nSavedDC=-1) returned 1
[0287.871] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.871] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.871] GetSystemMetrics (nIndex=42) returned 0
[0287.871] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.871] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0287.871] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0287.871] GetCurrentObject (hdc=0x2b01078e, type=0x1) returned 0xb00017
[0287.872] GetCurrentObject (hdc=0x2b01078e, type=0x2) returned 0x900010
[0287.872] GetCurrentObject (hdc=0x2b01078e, type=0x7) returned 0x1e0507b9
[0287.872] GetCurrentObject (hdc=0x2b01078e, type=0x6) returned 0x8a01c2
[0287.872] SaveDC (hdc=0x2b01078e) returned 2
[0287.872] GetNearestColor (hdc=0x2b01078e, color=0xf0f0f0) returned 0xf0f0f0
[0287.872] CreateSolidBrush (color=0xf0f0f0) returned 0x4b10078d
[0287.872] FillRect (hDC=0x2b01078e, lprc=0x53da68, hbr=0x4b10078d) returned 1
[0287.872] DeleteObject (ho=0x4b10078d) returned 1
[0287.872] RestoreDC (hdc=0x2b01078e, nSavedDC=-1) returned 1
[0287.872] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0287.872] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0287.872] GetSystemMetrics (nIndex=42) returned 0
[0287.872] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0287.872] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0287.873] RestoreDC (hdc=0x2b01078e, nSavedDC=-1) returned 1
[0287.873] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b01078e) returned 0x0
[0287.873] IsAppThemed () returned 0x1
[0287.873] GetThemeAppProperties () returned 0x3
[0287.873] GetThemeAppProperties () returned 0x3
[0287.873] IsAppThemed () returned 0x1
[0287.873] GetThemeAppProperties () returned 0x3
[0287.873] GetThemeAppProperties () returned 0x3
[0287.873] IsThemePartDefined () returned 0x1
[0287.873] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0287.873] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.873] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0287.873] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.873] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0287.873] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0287.873] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0287.874] LocalFree (hMem=0x89eac0) returned 0x0
[0287.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0287.874] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0287.874] LocalFree (hMem=0x89ec80) returned 0x0
[0287.874] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.874] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0287.874] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0287.874] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0287.874] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.874] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0287.874] GetCurrentObject (hdc=0x2b01078e, type=0x1) returned 0xb00017
[0287.874] GetCurrentObject (hdc=0x2b01078e, type=0x2) returned 0x900010
[0287.874] GetCurrentObject (hdc=0x2b01078e, type=0x7) returned 0x1e0507b9
[0287.874] GetCurrentObject (hdc=0x2b01078e, type=0x6) returned 0x8a01c2
[0287.874] SaveDC (hdc=0x2b01078e) returned 1
[0287.875] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x53040798
[0287.875] GetClipRgn (hdc=0x2b01078e, hrgn=0x53040798) returned 0
[0287.875] SelectClipRgn (hdc=0x2b01078e, hrgn=0xb204051e) returned 2
[0287.875] DeleteObject (ho=0x53040798) returned 1
[0287.875] DeleteObject (ho=0xb204051e) returned 1
[0287.875] OffsetViewportOrgEx (in: hdc=0x2b01078e, x=0, y=0, lppt=0x241ecc0 | out: lppt=0x241ecc0) returned 1
[0287.875] IsAppThemed () returned 0x1
[0287.875] GetThemeAppProperties () returned 0x3
[0287.875] GetThemeAppProperties () returned 0x3
[0287.875] DrawThemeBackground () returned 0x0
[0287.875] RestoreDC (hdc=0x2b01078e, nSavedDC=-1) returned 1
[0287.875] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b01078e) returned 0x0
[0287.875] GdipCreateRegion (region=0x53dfec) returned 0x0
[0287.875] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.875] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0287.875] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.876] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0287.876] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0287.876] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0287.876] LocalFree (hMem=0x89ec80) returned 0x0
[0287.876] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0287.876] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0287.876] LocalFree (hMem=0x89ec80) returned 0x0
[0287.876] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.876] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0287.876] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0287.876] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0287.876] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.876] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0287.876] GetCurrentObject (hdc=0x2b01078e, type=0x1) returned 0xb00017
[0287.876] GetCurrentObject (hdc=0x2b01078e, type=0x2) returned 0x900010
[0287.876] GetCurrentObject (hdc=0x2b01078e, type=0x7) returned 0x1e0507b9
[0287.876] GetCurrentObject (hdc=0x2b01078e, type=0x6) returned 0x8a01c2
[0287.876] SaveDC (hdc=0x2b01078e) returned 1
[0287.877] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb304051e
[0287.877] GetClipRgn (hdc=0x2b01078e, hrgn=0xb304051e) returned 0
[0287.877] SelectClipRgn (hdc=0x2b01078e, hrgn=0x54040798) returned 2
[0287.877] DeleteObject (ho=0xb304051e) returned 1
[0287.877] DeleteObject (ho=0x54040798) returned 1
[0287.877] OffsetViewportOrgEx (in: hdc=0x2b01078e, x=0, y=0, lppt=0x241ef94 | out: lppt=0x241ef94) returned 1
[0287.877] IsAppThemed () returned 0x1
[0287.877] GetThemeAppProperties () returned 0x3
[0287.877] GetThemeAppProperties () returned 0x3
[0287.877] GetThemeBackgroundContentRect () returned 0x0
[0287.877] RestoreDC (hdc=0x2b01078e, nSavedDC=-1) returned 1
[0287.877] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b01078e) returned 0x0
[0287.877] IsAppThemed () returned 0x1
[0287.877] GetThemeAppProperties () returned 0x3
[0287.877] GetThemeAppProperties () returned 0x3
[0287.877] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0287.877] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0287.877] GetCurrentObject (hdc=0x2b01078e, type=0x1) returned 0xb00017
[0287.878] GetCurrentObject (hdc=0x2b01078e, type=0x2) returned 0x900010
[0287.878] GetCurrentObject (hdc=0x2b01078e, type=0x7) returned 0x1e0507b9
[0287.878] GetCurrentObject (hdc=0x2b01078e, type=0x6) returned 0x8a01c2
[0287.878] SaveDC (hdc=0x2b01078e) returned 1
[0287.878] GetTextAlign (hdc=0x2b01078e) returned 0x0
[0287.878] GetTextColor (hdc=0x2b01078e) returned 0x0
[0287.878] GetCurrentObject (hdc=0x2b01078e, type=0x6) returned 0x8a01c2
[0287.878] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0287.878] SelectObject (hdc=0x2b01078e, h=0x730a066d) returned 0x8a01c2
[0287.878] GetBkMode (hdc=0x2b01078e) returned 2
[0287.878] SetBkMode (hdc=0x2b01078e, mode=1) returned 2
[0287.878] DrawTextExW (in: hdc=0x2b01078e, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x241f334 | out: lpchText="OK", lprc=0x53df84) returned 13
[0287.879] DrawTextExW (in: hdc=0x2b01078e, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x241f334 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0287.879] RestoreDC (hdc=0x2b01078e, nSavedDC=-1) returned 1
[0287.879] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b01078e) returned 0x0
[0287.879] GetFocus () returned 0x18004e
[0287.879] IsAppThemed () returned 0x1
[0287.879] GetThemeAppProperties () returned 0x3
[0287.879] GetThemeAppProperties () returned 0x3
[0287.879] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0287.879] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x2b01078e, x1=0, y1=0, rop=0xcc0020) returned 1
[0287.880] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2b01078e) returned 0x0
[0287.880] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0287.880] SelectObject (hdc=0x2b01078e, h=0x85000f) returned 0x1e0507b9
[0287.880] DeleteDC (hdc=0x2b01078e) returned 1
[0287.880] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0287.880] EndPaint (hWnd=0x1b01e2, lpPaint=0x53e2e4) returned 1
[0287.880] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.880] IsWindowUnicode (hWnd=0x202c6) returned 1
[0287.880] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.891] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.891] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.891] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0287.891] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0287.891] CreateCompatibleDC (hdc=0x60100ce) returned 0xec0107aa
[0287.891] SelectObject (hdc=0xec0107aa, h=0x1e0507b9) returned 0x85000f
[0287.891] GdipCreateFromHDC (hdc=0xec0107aa, graphics=0x53e300) returned 0x0
[0287.892] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0287.892] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0287.892] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0287.892] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.892] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0287.892] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0287.892] LocalFree (hMem=0x89ec80) returned 0x0
[0287.892] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.892] GdipCreateRegion (region=0x53e348) returned 0x0
[0287.892] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.892] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0287.892] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0287.892] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaa30dbd) returned 0x0
[0287.892] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.892] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0287.892] GetCurrentObject (hdc=0xec0107aa, type=0x1) returned 0xb00017
[0287.892] GetCurrentObject (hdc=0xec0107aa, type=0x2) returned 0x900010
[0287.892] GetCurrentObject (hdc=0xec0107aa, type=0x7) returned 0x1e0507b9
[0287.893] GetCurrentObject (hdc=0xec0107aa, type=0x6) returned 0x8a01c2
[0287.893] SaveDC (hdc=0xec0107aa) returned 1
[0287.893] GetNearestColor (hdc=0xec0107aa, color=0xff) returned 0xff
[0287.893] GetNearestColor (hdc=0xec0107aa, color=0x55) returned 0x55
[0287.893] GetNearestColor (hdc=0xec0107aa, color=0x0) returned 0x0
[0287.893] GetNearestColor (hdc=0xec0107aa, color=0x55) returned 0x55
[0287.893] GetNearestColor (hdc=0xec0107aa, color=0x0) returned 0x0
[0287.893] GetNearestColor (hdc=0xec0107aa, color=0x8080ff) returned 0x8080ff
[0287.893] GetNearestColor (hdc=0xec0107aa, color=0x7373e5) returned 0x7373e5
[0287.893] GetNearestColor (hdc=0xec0107aa, color=0xe5) returned 0xe5
[0287.893] GetNearestColor (hdc=0xec0107aa, color=0x0) returned 0x0
[0287.893] RestoreDC (hdc=0xec0107aa, nSavedDC=-1) returned 1
[0287.893] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec0107aa) returned 0x0
[0287.893] IsAppThemed () returned 0x1
[0287.894] GetThemeAppProperties () returned 0x3
[0287.894] GetThemeAppProperties () returned 0x3
[0287.894] IsAppThemed () returned 0x1
[0287.894] GetThemeAppProperties () returned 0x3
[0287.894] GetThemeAppProperties () returned 0x3
[0287.894] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0287.894] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x241fb18 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0287.894] IsAppThemed () returned 0x1
[0287.894] GetThemeAppProperties () returned 0x3
[0287.894] GetThemeAppProperties () returned 0x3
[0287.894] IsAppThemed () returned 0x1
[0287.894] GetThemeAppProperties () returned 0x3
[0287.894] GetThemeAppProperties () returned 0x3
[0287.895] GetFocus () returned 0x18004e
[0287.895] IsAppThemed () returned 0x1
[0287.895] GetThemeAppProperties () returned 0x3
[0287.895] GetThemeAppProperties () returned 0x3
[0287.895] IsAppThemed () returned 0x1
[0287.895] GetThemeAppProperties () returned 0x3
[0287.895] GetThemeAppProperties () returned 0x3
[0287.895] IsThemePartDefined () returned 0x1
[0287.895] IsAppThemed () returned 0x1
[0287.895] GetThemeAppProperties () returned 0x3
[0287.895] GetThemeAppProperties () returned 0x3
[0287.895] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0287.895] IsAppThemed () returned 0x1
[0287.895] GetThemeAppProperties () returned 0x3
[0287.895] GetThemeAppProperties () returned 0x3
[0287.895] IsAppThemed () returned 0x1
[0287.895] GetThemeAppProperties () returned 0x3
[0287.895] GetThemeAppProperties () returned 0x3
[0287.895] IsThemePartDefined () returned 0x1
[0287.896] GdipCreateRegion (region=0x53e070) returned 0x0
[0287.896] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.896] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0287.896] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.896] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0287.896] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0287.896] LocalFree (hMem=0x89ec80) returned 0x0
[0287.896] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0287.896] LocalFree (hMem=0x89eee8) returned 0x0
[0287.936] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.936] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0287.936] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0287.936] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0287.936] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.936] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0287.936] GetCurrentObject (hdc=0xec0107aa, type=0x1) returned 0xb00017
[0287.936] GetCurrentObject (hdc=0xec0107aa, type=0x2) returned 0x900010
[0287.936] GetCurrentObject (hdc=0xec0107aa, type=0x7) returned 0x1e0507b9
[0287.936] GetCurrentObject (hdc=0xec0107aa, type=0x6) returned 0x8a01c2
[0287.936] SaveDC (hdc=0xec0107aa) returned 1
[0287.936] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x55040798
[0287.937] GetClipRgn (hdc=0xec0107aa, hrgn=0x55040798) returned 0
[0287.937] SelectClipRgn (hdc=0xec0107aa, hrgn=0xb704051e) returned 2
[0287.937] DeleteObject (ho=0x55040798) returned 1
[0287.937] DeleteObject (ho=0xb704051e) returned 1
[0287.937] OffsetViewportOrgEx (in: hdc=0xec0107aa, x=0, y=0, lppt=0x24201c8 | out: lppt=0x24201c8) returned 1
[0287.937] DrawThemeParentBackground () returned 0x0
[0287.937] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0287.937] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0287.937] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0287.937] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0287.937] GetSystemMetrics (nIndex=42) returned 0
[0287.937] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0287.937] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0287.938] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0287.938] GetCurrentObject (hdc=0xec0107aa, type=0x1) returned 0xb00017
[0287.938] GetCurrentObject (hdc=0xec0107aa, type=0x2) returned 0x900010
[0287.938] GetCurrentObject (hdc=0xec0107aa, type=0x7) returned 0x1e0507b9
[0287.938] GetCurrentObject (hdc=0xec0107aa, type=0x6) returned 0x8a01c2
[0287.938] SaveDC (hdc=0xec0107aa) returned 2
[0287.938] GetNearestColor (hdc=0xec0107aa, color=0xff) returned 0xff
[0287.938] CreateSolidBrush (color=0xff) returned 0x4c10078d
[0287.938] FillRect (hDC=0xec0107aa, lprc=0x53dad0, hbr=0x4c10078d) returned 1
[0287.938] DeleteObject (ho=0x4c10078d) returned 1
[0287.938] RestoreDC (hdc=0xec0107aa, nSavedDC=-1) returned 1
[0287.938] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0287.938] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0287.939] GetSystemMetrics (nIndex=42) returned 0
[0287.939] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0287.939] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0287.939] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0287.939] GetCurrentObject (hdc=0xec0107aa, type=0x1) returned 0xb00017
[0287.939] GetCurrentObject (hdc=0xec0107aa, type=0x2) returned 0x900010
[0287.939] GetCurrentObject (hdc=0xec0107aa, type=0x7) returned 0x1e0507b9
[0287.939] GetCurrentObject (hdc=0xec0107aa, type=0x6) returned 0x8a01c2
[0287.939] SaveDC (hdc=0xec0107aa) returned 2
[0287.939] GetNearestColor (hdc=0xec0107aa, color=0xff) returned 0xff
[0287.939] CreateSolidBrush (color=0xff) returned 0x4d10078d
[0287.939] FillRect (hDC=0xec0107aa, lprc=0x53da70, hbr=0x4d10078d) returned 1
[0287.939] DeleteObject (ho=0x4d10078d) returned 1
[0287.940] RestoreDC (hdc=0xec0107aa, nSavedDC=-1) returned 1
[0287.940] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0287.940] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0287.940] GetSystemMetrics (nIndex=42) returned 0
[0287.940] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0287.940] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0287.940] RestoreDC (hdc=0xec0107aa, nSavedDC=-1) returned 1
[0287.940] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec0107aa) returned 0x0
[0287.940] IsAppThemed () returned 0x1
[0287.940] GetThemeAppProperties () returned 0x3
[0287.940] GetThemeAppProperties () returned 0x3
[0287.941] IsAppThemed () returned 0x1
[0287.941] GetThemeAppProperties () returned 0x3
[0287.941] GetThemeAppProperties () returned 0x3
[0287.941] IsThemePartDefined () returned 0x1
[0287.941] GdipCreateRegion (region=0x53dff4) returned 0x0
[0287.941] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.941] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0287.941] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0287.941] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0287.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0287.941] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0287.941] LocalFree (hMem=0x89eac0) returned 0x0
[0287.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0287.941] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0287.942] LocalFree (hMem=0x89ee08) returned 0x0
[0287.942] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0287.942] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0287.942] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0287.942] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0287.942] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.942] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0287.942] GetCurrentObject (hdc=0xec0107aa, type=0x1) returned 0xb00017
[0287.942] GetCurrentObject (hdc=0xec0107aa, type=0x2) returned 0x900010
[0287.942] GetCurrentObject (hdc=0xec0107aa, type=0x7) returned 0x1e0507b9
[0287.942] GetCurrentObject (hdc=0xec0107aa, type=0x6) returned 0x8a01c2
[0287.943] SaveDC (hdc=0xec0107aa) returned 1
[0287.943] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb804051e
[0287.943] GetClipRgn (hdc=0xec0107aa, hrgn=0xb804051e) returned 0
[0287.943] SelectClipRgn (hdc=0xec0107aa, hrgn=0x57040798) returned 2
[0287.948] DeleteObject (ho=0xb804051e) returned 1
[0287.948] DeleteObject (ho=0x57040798) returned 1
[0287.948] OffsetViewportOrgEx (in: hdc=0xec0107aa, x=0, y=0, lppt=0x2420a2c | out: lppt=0x2420a2c) returned 1
[0287.948] IsAppThemed () returned 0x1
[0287.948] GetThemeAppProperties () returned 0x3
[0287.948] GetThemeAppProperties () returned 0x3
[0287.948] DrawThemeBackground () returned 0x0
[0287.948] RestoreDC (hdc=0xec0107aa, nSavedDC=-1) returned 1
[0287.949] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec0107aa) returned 0x0
[0287.949] GdipCreateRegion (region=0x53dff8) returned 0x0
[0287.949] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0287.949] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0287.949] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0287.949] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0287.949] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0287.949] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0287.949] LocalFree (hMem=0x89eac0) returned 0x0
[0287.949] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0287.949] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0287.949] LocalFree (hMem=0x89ec80) returned 0x0
[0287.949] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0287.949] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0287.950] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0287.950] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0287.950] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0287.950] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0287.950] GetCurrentObject (hdc=0xec0107aa, type=0x1) returned 0xb00017
[0287.950] GetCurrentObject (hdc=0xec0107aa, type=0x2) returned 0x900010
[0287.950] GetCurrentObject (hdc=0xec0107aa, type=0x7) returned 0x1e0507b9
[0287.950] GetCurrentObject (hdc=0xec0107aa, type=0x6) returned 0x8a01c2
[0287.950] SaveDC (hdc=0xec0107aa) returned 1
[0287.950] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x58040798
[0287.950] GetClipRgn (hdc=0xec0107aa, hrgn=0x58040798) returned 0
[0287.950] SelectClipRgn (hdc=0xec0107aa, hrgn=0xb904051e) returned 2
[0287.950] DeleteObject (ho=0x58040798) returned 1
[0287.950] DeleteObject (ho=0xb904051e) returned 1
[0287.951] OffsetViewportOrgEx (in: hdc=0xec0107aa, x=0, y=0, lppt=0x2420d00 | out: lppt=0x2420d00) returned 1
[0287.951] IsAppThemed () returned 0x1
[0287.951] GetThemeAppProperties () returned 0x3
[0287.951] GetThemeAppProperties () returned 0x3
[0287.951] GetThemeBackgroundContentRect () returned 0x0
[0287.951] RestoreDC (hdc=0xec0107aa, nSavedDC=-1) returned 1
[0287.951] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec0107aa) returned 0x0
[0287.951] IsAppThemed () returned 0x1
[0287.951] GetThemeAppProperties () returned 0x3
[0287.951] GetThemeAppProperties () returned 0x3
[0287.951] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0287.951] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0287.951] GetCurrentObject (hdc=0xec0107aa, type=0x1) returned 0xb00017
[0287.951] GetCurrentObject (hdc=0xec0107aa, type=0x2) returned 0x900010
[0287.951] GetCurrentObject (hdc=0xec0107aa, type=0x7) returned 0x1e0507b9
[0287.952] GetCurrentObject (hdc=0xec0107aa, type=0x6) returned 0x8a01c2
[0287.952] SaveDC (hdc=0xec0107aa) returned 1
[0287.952] GetTextAlign (hdc=0xec0107aa) returned 0x0
[0287.952] GetTextColor (hdc=0xec0107aa) returned 0x0
[0287.952] GetCurrentObject (hdc=0xec0107aa, type=0x6) returned 0x8a01c2
[0287.952] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0287.952] SelectObject (hdc=0xec0107aa, h=0x450a0799) returned 0x8a01c2
[0287.952] GetBkMode (hdc=0xec0107aa) returned 2
[0287.952] SetBkMode (hdc=0xec0107aa, mode=1) returned 2
[0287.952] DrawTextExW (in: hdc=0xec0107aa, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x24210a0 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0287.953] DrawTextExW (in: hdc=0xec0107aa, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x24210a0 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0287.953] RestoreDC (hdc=0xec0107aa, nSavedDC=-1) returned 1
[0287.953] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec0107aa) returned 0x0
[0287.953] GetFocus () returned 0x18004e
[0287.954] IsAppThemed () returned 0x1
[0287.954] GetThemeAppProperties () returned 0x3
[0287.954] GetThemeAppProperties () returned 0x3
[0287.954] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0287.954] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xec0107aa, x1=0, y1=0, rop=0xcc0020) returned 1
[0287.954] GdipReleaseDC (graphics=0x5d92c30, hdc=0xec0107aa) returned 0x0
[0287.954] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0287.954] SelectObject (hdc=0xec0107aa, h=0x85000f) returned 0x1e0507b9
[0287.954] DeleteDC (hdc=0xec0107aa) returned 1
[0287.954] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0287.954] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0287.955] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0287.955] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0287.955] WaitMessage () returned 1
[0287.959] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.959] IsWindowUnicode (hWnd=0x1b01e2) returned 1
[0287.959] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.959] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.959] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.959] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.959] IsWindowUnicode (hWnd=0x1b01e2) returned 1
[0287.960] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.960] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.960] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.960] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x2a1, wParam=0x0, lParam=0x90019) returned 0x0
[0287.960] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0287.960] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0287.960] WaitMessage () returned 1
[0287.990] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.990] IsWindowUnicode (hWnd=0x102dc) returned 1
[0287.990] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.990] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.991] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.992] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0287.992] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0287.992] WaitMessage () returned 1
[0287.992] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.992] IsWindowUnicode (hWnd=0x102dc) returned 1
[0287.992] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.993] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.993] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.994] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.994] IsWindowUnicode (hWnd=0x102dc) returned 1
[0287.994] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.994] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.994] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.995] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.995] IsWindowUnicode (hWnd=0x102dc) returned 1
[0287.995] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.995] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.995] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.995] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0287.996] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0287.996] WaitMessage () returned 1
[0287.996] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.996] IsWindowUnicode (hWnd=0x102dc) returned 1
[0287.996] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.996] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.996] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.997] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.998] IsWindowUnicode (hWnd=0x102dc) returned 1
[0287.998] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.998] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.998] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.998] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.998] IsWindowUnicode (hWnd=0x102dc) returned 1
[0287.998] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0287.998] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0287.998] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0287.998] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0287.999] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0287.999] WaitMessage () returned 1
[0288.000] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.000] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.000] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.000] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0288.000] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0288.002] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.002] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.002] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.002] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0288.002] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0288.002] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.002] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.002] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.002] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0288.002] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0288.003] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0288.003] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0288.003] WaitMessage () returned 1
[0288.041] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.041] IsWindowUnicode (hWnd=0x202d0) returned 1
[0288.041] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.041] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0288.041] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0288.041] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0288.041] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0288.041] WaitMessage () returned 1
[0288.133] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.134] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x84, wParam=0x0, lParam=0x192035a) returned 0x1
[0288.134] IsWindowUnicode (hWnd=0x1b01e2) returned 1
[0288.134] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.134] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x84, wParam=0x0, lParam=0x192035a) returned 0x1
[0288.134] GetDlgItem (hDlg=0x1902ca, nIDDlgItem=0) returned 0x0
[0288.134] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x210, wParam=0x201, lParam=0x15013b) returned 0x0
[0288.134] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x21, wParam=0x1902ca, lParam=0x2010001) returned 0x1
[0288.134] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x21, wParam=0x1902ca, lParam=0x2010001) returned 0x1
[0288.134] SetCursor (hCursor=0x10003) returned 0x10003
[0288.135] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0288.135] DispatchMessageW (lpMsg=0x53e8a0)
[0288.135] GetKeyState (nVirtKey=1) returned -128
[0288.135] GetKeyState (nVirtKey=2) returned 0
[0288.135] GetKeyState (nVirtKey=4) returned 0
[0288.135] GetKeyState (nVirtKey=5) returned 0
[0288.135] GetKeyState (nVirtKey=6) returned 0
[0288.135] IsWindowVisible (hWnd=0x1b01e2) returned 1
[0288.135] IsWindowEnabled (hWnd=0x1b01e2) returned 1
[0288.135] SetFocus (hWnd=0x1b01e2) returned 0x18004e
[0288.135] GetFocus () returned 0x1b01e2
[0288.135] IsChild (hWndParent=0x1902ca, hWnd=0x1b01e2) returned 1
[0288.135] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x8, wParam=0x1b01e2, lParam=0x0) returned 0x1
[0288.136] SendMessageW (hWnd=0x18004e, Msg=0x2111, wParam=0x200004e, lParam=0x18004e) returned 0x0
[0288.137] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0288.138] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0288.139] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0288.139] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0288.140] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0288.140] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0288.142] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0288.142] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x7, wParam=0x18004e, lParam=0x0) returned 0x0
[0288.142] GetStockObject (i=5) returned 0x900015
[0288.142] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0288.143] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0xd, wParam=0x3, lParam=0x89e7c8) returned 0x2
[0288.143] GetDlgItem (hDlg=0x1902ca, nIDDlgItem=1769954) returned 0x1b01e2
[0288.143] SendMessageW (hWnd=0x1b01e2, Msg=0x202b, wParam=0x1b01e2, lParam=0x53de74) returned 0x0
[0288.143] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x202b, wParam=0x1b01e2, lParam=0x53de74) returned 0x0
[0288.143] InvalidateRect (hWnd=0x1b01e2, lpRect=0x0, bErase=0) returned 1
[0288.144] GetFocus () returned 0x1b01e2
[0288.144] GetFocus () returned 0x1b01e2
[0288.145] GetFocus () returned 0x1b01e2
[0288.145] GetKeyState (nVirtKey=1) returned -128
[0288.145] GetKeyState (nVirtKey=2) returned 0
[0288.145] GetKeyState (nVirtKey=4) returned 0
[0288.145] GetKeyState (nVirtKey=5) returned 0
[0288.145] GetKeyState (nVirtKey=6) returned 0
[0288.145] GetCapture () returned 0x0
[0288.145] SetCapture (hWnd=0x1b01e2) returned 0x0
[0288.145] GetKeyState (nVirtKey=1) returned -128
[0288.145] GetKeyState (nVirtKey=2) returned 0
[0288.145] GetKeyState (nVirtKey=4) returned 0
[0288.145] GetKeyState (nVirtKey=5) returned 0
[0288.145] GetKeyState (nVirtKey=6) returned 0
[0288.145] NotifyWinEvent (event=0x800a, hwnd=0x1b01e2, idObject=-4, idChild=0)
[0288.145] InvalidateRect (hWnd=0x1b01e2, lpRect=0x53e4c8, bErase=0) returned 1
[0288.145] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.146] IsWindowUnicode (hWnd=0x1b01e2) returned 1
[0288.146] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.146] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0288.146] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0288.146] MapWindowPoints (in: hWndFrom=0x1b01e2, hWndTo=0x0, lpPoints=0x2421338, cPoints=0x1 | out: lpPoints=0x2421338) returned 25756481
[0288.146] NotifyWinEvent (event=0x800a, hwnd=0x1b01e2, idObject=-4, idChild=0)
[0288.146] InvalidateRect (hWnd=0x1b01e2, lpRect=0x53e468, bErase=0) returned 1
[0288.147] UpdateWindow (hWnd=0x1b01e2) returned 1
[0288.147] BeginPaint (in: hWnd=0x1b01e2, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x60100ce
[0288.148] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0288.148] CreateCompatibleDC (hdc=0x60100ce) returned 0x7e0107b1
[0288.148] SelectObject (hdc=0x7e0107b1, h=0x1e0507b9) returned 0x85000f
[0288.148] GdipCreateFromHDC (hdc=0x7e0107b1, graphics=0x53df98) returned 0x0
[0288.148] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0288.148] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0288.148] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0288.148] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0288.148] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0288.148] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0288.148] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0288.149] LocalFree (hMem=0x89ea88) returned 0x0
[0288.149] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0288.149] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0288.149] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0288.149] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0288.149] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0288.149] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfaa10dbd) returned 0x0
[0288.149] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0288.149] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0288.149] GetCurrentObject (hdc=0x7e0107b1, type=0x1) returned 0xb00017
[0288.149] GetCurrentObject (hdc=0x7e0107b1, type=0x2) returned 0x900010
[0288.149] GetCurrentObject (hdc=0x7e0107b1, type=0x7) returned 0x1e0507b9
[0288.149] GetCurrentObject (hdc=0x7e0107b1, type=0x6) returned 0x8a01c2
[0288.149] SaveDC (hdc=0x7e0107b1) returned 1
[0288.150] GetNearestColor (hdc=0x7e0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0288.150] GetNearestColor (hdc=0x7e0107b1, color=0xa0a0a0) returned 0xa0a0a0
[0288.150] GetNearestColor (hdc=0x7e0107b1, color=0x696969) returned 0x696969
[0288.150] GetNearestColor (hdc=0x7e0107b1, color=0xa0a0a0) returned 0xa0a0a0
[0288.150] GetNearestColor (hdc=0x7e0107b1, color=0x0) returned 0x0
[0288.150] GetNearestColor (hdc=0x7e0107b1, color=0xffffff) returned 0xffffff
[0288.150] GetNearestColor (hdc=0x7e0107b1, color=0xe5e5e5) returned 0xe5e5e5
[0288.150] GetNearestColor (hdc=0x7e0107b1, color=0xd7d7d7) returned 0xd7d7d7
[0288.150] GetNearestColor (hdc=0x7e0107b1, color=0x0) returned 0x0
[0288.150] RestoreDC (hdc=0x7e0107b1, nSavedDC=-1) returned 1
[0288.150] GdipReleaseDC (graphics=0x5d92c30, hdc=0x7e0107b1) returned 0x0
[0288.150] IsAppThemed () returned 0x1
[0288.150] GetThemeAppProperties () returned 0x3
[0288.150] GetThemeAppProperties () returned 0x3
[0288.151] IsAppThemed () returned 0x1
[0288.151] GetThemeAppProperties () returned 0x3
[0288.151] GetThemeAppProperties () returned 0x3
[0288.151] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0288.151] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x2421aac | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0288.151] IsAppThemed () returned 0x1
[0288.151] GetThemeAppProperties () returned 0x3
[0288.151] GetThemeAppProperties () returned 0x3
[0288.151] IsAppThemed () returned 0x1
[0288.151] GetThemeAppProperties () returned 0x3
[0288.151] GetThemeAppProperties () returned 0x3
[0288.151] IsAppThemed () returned 0x1
[0288.151] GetThemeAppProperties () returned 0x3
[0288.151] GetThemeAppProperties () returned 0x3
[0288.151] IsAppThemed () returned 0x1
[0288.151] GetThemeAppProperties () returned 0x3
[0288.151] GetThemeAppProperties () returned 0x3
[0288.151] IsThemePartDefined () returned 0x1
[0288.152] IsAppThemed () returned 0x1
[0288.152] GetThemeAppProperties () returned 0x3
[0288.152] GetThemeAppProperties () returned 0x3
[0288.152] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0288.152] IsAppThemed () returned 0x1
[0288.152] GetThemeAppProperties () returned 0x3
[0288.152] GetThemeAppProperties () returned 0x3
[0288.152] IsAppThemed () returned 0x1
[0288.152] GetThemeAppProperties () returned 0x3
[0288.152] GetThemeAppProperties () returned 0x3
[0288.152] IsThemePartDefined () returned 0x1
[0288.152] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0288.152] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0288.152] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0288.152] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0288.152] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0288.152] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0288.152] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0288.152] LocalFree (hMem=0x89ee40) returned 0x0
[0288.152] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0288.152] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0288.152] LocalFree (hMem=0x89ea88) returned 0x0
[0288.153] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0288.153] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0288.153] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0288.153] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0288.153] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0288.153] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0288.153] GetCurrentObject (hdc=0x7e0107b1, type=0x1) returned 0xb00017
[0288.153] GetCurrentObject (hdc=0x7e0107b1, type=0x2) returned 0x900010
[0288.153] GetCurrentObject (hdc=0x7e0107b1, type=0x7) returned 0x1e0507b9
[0288.153] GetCurrentObject (hdc=0x7e0107b1, type=0x6) returned 0x8a01c2
[0288.153] SaveDC (hdc=0x7e0107b1) returned 1
[0288.153] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xba04051e
[0288.153] GetClipRgn (hdc=0x7e0107b1, hrgn=0xba04051e) returned 0
[0288.153] SelectClipRgn (hdc=0x7e0107b1, hrgn=0x5c040798) returned 2
[0288.153] DeleteObject (ho=0xba04051e) returned 1
[0288.153] DeleteObject (ho=0x5c040798) returned 1
[0288.153] OffsetViewportOrgEx (in: hdc=0x7e0107b1, x=0, y=0, lppt=0x242215c | out: lppt=0x242215c) returned 1
[0288.153] DrawThemeParentBackground ()
[0288.154] GetWindowPlacement (in: hWnd=0x1902ca, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0288.154] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0288.154] GetWindowTextLengthW (hWnd=0x1902ca)
[0288.154] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0288.154] GetSystemMetrics (nIndex=42) returned 0
[0288.154] GetWindowTextW (hWnd=0x1902ca, lpString=0x53d878, nMaxCount=11)
[0288.154] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0288.154] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0288.154] GetCurrentObject (hdc=0x7e0107b1, type=0x1) returned 0xb00017
[0288.154] GetCurrentObject (hdc=0x7e0107b1, type=0x2) returned 0x900010
[0288.154] GetCurrentObject (hdc=0x7e0107b1, type=0x7) returned 0x1e0507b9
[0288.154] GetCurrentObject (hdc=0x7e0107b1, type=0x6) returned 0x8a01c2
[0288.154] SaveDC (hdc=0x7e0107b1) returned 2
[0288.154] GetNearestColor (hdc=0x7e0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0288.154] CreateSolidBrush (color=0xf0f0f0) returned 0x4e10078d
[0288.154] FillRect (hDC=0x7e0107b1, lprc=0x53d760, hbr=0x4e10078d) returned 1
[0288.154] DeleteObject (ho=0x4e10078d) returned 1
[0288.155] RestoreDC (hdc=0x7e0107b1, nSavedDC=-1) returned 1
[0288.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0288.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0288.155] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0288.155] GetCurrentObject (hdc=0x7e0107b1, type=0x1) returned 0xb00017
[0288.155] GetCurrentObject (hdc=0x7e0107b1, type=0x2) returned 0x900010
[0288.155] GetCurrentObject (hdc=0x7e0107b1, type=0x7) returned 0x1e0507b9
[0288.155] GetCurrentObject (hdc=0x7e0107b1, type=0x6) returned 0x8a01c2
[0288.155] SaveDC (hdc=0x7e0107b1) returned 2
[0288.155] GetNearestColor (hdc=0x7e0107b1, color=0xf0f0f0) returned 0xf0f0f0
[0288.155] CreateSolidBrush (color=0xf0f0f0) returned 0x4f10078d
[0288.155] FillRect (hDC=0x7e0107b1, lprc=0x53d700, hbr=0x4f10078d) returned 1
[0288.155] DeleteObject (ho=0x4f10078d) returned 1
[0288.155] RestoreDC (hdc=0x7e0107b1, nSavedDC=-1) returned 1
[0288.155] GetWindowTextLengthW (hWnd=0x1902ca)
[0288.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0288.156] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0288.156] RestoreDC (hdc=0x7e0107b1, nSavedDC=-1) returned 1
[0288.156] GdipReleaseDC (graphics=0x5d92c30, hdc=0x7e0107b1) returned 0x0
[0288.156] IsAppThemed () returned 0x1
[0288.156] GetThemeAppProperties () returned 0x3
[0288.156] GetThemeAppProperties () returned 0x3
[0288.157] IsAppThemed () returned 0x1
[0288.157] GetThemeAppProperties () returned 0x3
[0288.157] GetThemeAppProperties () returned 0x3
[0288.157] IsThemePartDefined () returned 0x1
[0288.157] GdipCreateRegion (region=0x53dc80) returned 0x0
[0288.157] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0288.157] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0288.157] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0288.157] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0288.157] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0288.157] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0288.157] LocalFree (hMem=0x89ec80) returned 0x0
[0288.157] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0288.157] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0288.157] LocalFree (hMem=0x89ec80) returned 0x0
[0288.157] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0288.157] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0288.157] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0288.157] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0288.157] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0288.157] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0288.157] GetCurrentObject (hdc=0x7e0107b1, type=0x1) returned 0xb00017
[0288.157] GetCurrentObject (hdc=0x7e0107b1, type=0x2) returned 0x900010
[0288.157] GetCurrentObject (hdc=0x7e0107b1, type=0x7) returned 0x1e0507b9
[0288.158] GetCurrentObject (hdc=0x7e0107b1, type=0x6) returned 0x8a01c2
[0288.158] SaveDC (hdc=0x7e0107b1) returned 1
[0288.158] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d040798
[0288.158] GetClipRgn (hdc=0x7e0107b1, hrgn=0x5d040798) returned 0
[0288.158] SelectClipRgn (hdc=0x7e0107b1, hrgn=0xbc04051e) returned 2
[0288.158] DeleteObject (ho=0x5d040798) returned 1
[0288.158] DeleteObject (ho=0xbc04051e) returned 1
[0288.158] OffsetViewportOrgEx (in: hdc=0x7e0107b1, x=0, y=0, lppt=0x24229e4 | out: lppt=0x24229e4) returned 1
[0288.158] IsAppThemed () returned 0x1
[0288.158] GetThemeAppProperties () returned 0x3
[0288.158] GetThemeAppProperties () returned 0x3
[0288.158] DrawThemeBackground () returned 0x0
[0288.158] RestoreDC (hdc=0x7e0107b1, nSavedDC=-1) returned 1
[0288.158] GdipReleaseDC (graphics=0x5d92c30, hdc=0x7e0107b1) returned 0x0
[0288.158] GdipCreateRegion (region=0x53dc84) returned 0x0
[0288.158] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0288.158] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0288.158] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0288.159] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0288.159] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0288.159] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0288.159] LocalFree (hMem=0x89ea88) returned 0x0
[0288.159] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0288.159] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0288.159] LocalFree (hMem=0x89ea88) returned 0x0
[0288.159] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0288.159] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0288.159] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0288.159] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0288.159] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0288.159] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0288.159] GetCurrentObject (hdc=0x7e0107b1, type=0x1) returned 0xb00017
[0288.159] GetCurrentObject (hdc=0x7e0107b1, type=0x2) returned 0x900010
[0288.159] GetCurrentObject (hdc=0x7e0107b1, type=0x7) returned 0x1e0507b9
[0288.159] GetCurrentObject (hdc=0x7e0107b1, type=0x6) returned 0x8a01c2
[0288.160] SaveDC (hdc=0x7e0107b1) returned 1
[0288.160] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbd04051e
[0288.160] GetClipRgn (hdc=0x7e0107b1, hrgn=0xbd04051e) returned 0
[0288.160] SelectClipRgn (hdc=0x7e0107b1, hrgn=0x5e040798) returned 2
[0288.160] DeleteObject (ho=0xbd04051e) returned 1
[0288.160] DeleteObject (ho=0x5e040798) returned 1
[0288.160] OffsetViewportOrgEx (in: hdc=0x7e0107b1, x=0, y=0, lppt=0x2422cb8 | out: lppt=0x2422cb8) returned 1
[0288.160] IsAppThemed () returned 0x1
[0288.160] GetThemeAppProperties () returned 0x3
[0288.160] GetThemeAppProperties () returned 0x3
[0288.160] GetThemeBackgroundContentRect () returned 0x0
[0288.160] RestoreDC (hdc=0x7e0107b1, nSavedDC=-1) returned 1
[0288.160] GdipReleaseDC (graphics=0x5d92c30, hdc=0x7e0107b1) returned 0x0
[0288.160] IsAppThemed () returned 0x1
[0288.160] GetThemeAppProperties () returned 0x3
[0288.160] GetThemeAppProperties () returned 0x3
[0288.160] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0288.161] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0288.161] GetCurrentObject (hdc=0x7e0107b1, type=0x1) returned 0xb00017
[0288.161] GetCurrentObject (hdc=0x7e0107b1, type=0x2) returned 0x900010
[0288.161] GetCurrentObject (hdc=0x7e0107b1, type=0x7) returned 0x1e0507b9
[0288.161] GetCurrentObject (hdc=0x7e0107b1, type=0x6) returned 0x8a01c2
[0288.161] SaveDC (hdc=0x7e0107b1) returned 1
[0288.161] GetTextAlign (hdc=0x7e0107b1) returned 0x0
[0288.161] GetTextColor (hdc=0x7e0107b1) returned 0x0
[0288.161] GetCurrentObject (hdc=0x7e0107b1, type=0x6) returned 0x8a01c2
[0288.161] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0288.161] SelectObject (hdc=0x7e0107b1, h=0x730a066d) returned 0x8a01c2
[0288.161] GetBkMode (hdc=0x7e0107b1) returned 2
[0288.161] SetBkMode (hdc=0x7e0107b1, mode=1) returned 2
[0288.161] DrawTextExW (in: hdc=0x7e0107b1, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x2423058 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0288.162] DrawTextExW (in: hdc=0x7e0107b1, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x2423058 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0288.162] RestoreDC (hdc=0x7e0107b1, nSavedDC=-1) returned 1
[0288.162] GdipReleaseDC (graphics=0x5d92c30, hdc=0x7e0107b1) returned 0x0
[0288.162] GetFocus () returned 0x1b01e2
[0288.162] IsAppThemed () returned 0x1
[0288.162] GetThemeAppProperties () returned 0x3
[0288.162] GetThemeAppProperties () returned 0x3
[0288.162] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0288.162] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x7e0107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0288.163] GdipReleaseDC (graphics=0x5d92c30, hdc=0x7e0107b1) returned 0x0
[0288.163] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0288.163] SelectObject (hdc=0x7e0107b1, h=0x85000f) returned 0x1e0507b9
[0288.163] DeleteDC (hdc=0x7e0107b1) returned 1
[0288.163] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0288.163] EndPaint (hWnd=0x1b01e2, lpPaint=0x53df7c) returned 1
[0288.163] MapWindowPoints (in: hWndFrom=0x1b01e2, hWndTo=0x0, lpPoints=0x2423154, cPoints=0x1 | out: lpPoints=0x2423154) returned 25756481
[0288.163] WindowFromPoint (Point=0x35a) returned 0x1b01e2
[0288.163] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x84, wParam=0x0, lParam=0x192035a) returned 0x1
[0288.163] NotifyWinEvent (event=0x800a, hwnd=0x1b01e2, idObject=-4, idChild=0)
[0288.163] NotifyWinEvent (event=0x800c, hwnd=0x1b01e2, idObject=-4, idChild=0)
[0288.163] GetWindowTextLengthW (hWnd=0x18004e) returned 0
[0288.163] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0288.164] GetSystemMetrics (nIndex=42) returned 0
[0288.164] GetWindowTextW (in: hWnd=0x18004e, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0288.164] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0288.164] SendMessageW (hWnd=0x1902ca, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0288.164] GetCapture () returned 0x1b01e2
[0288.164] ReleaseCapture () returned 1
[0288.164] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0288.164] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0288.164] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x84, wParam=0x0, lParam=0x192035a) returned 0x1
[0288.164] IsWindow (hWnd=0x70036) returned 1
[0288.165] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0288.165] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0288.165] IsWindow (hWnd=0x70036) returned 1
[0288.165] SetActiveWindow (hWnd=0x70036) returned 0x1902ca
[0288.165] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0288.167] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0288.167] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0288.167] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0288.168] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0288.168] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0288.168] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0288.168] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1902ca) returned 0x1
[0288.171] GetFocus () returned 0x1b01e2
[0288.171] SetFocus (hWnd=0x202c6) returned 0x1b01e2
[0288.171] GetFocus () returned 0x202c6
[0288.171] IsChild (hWndParent=0x1902ca, hWnd=0x202c6) returned 0
[0288.171] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0288.171] GetCapture () returned 0x0
[0288.171] InvalidateRect (hWnd=0x1b01e2, lpRect=0x0, bErase=0) returned 1
[0288.172] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0288.173] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0288.174] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0288.174] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0288.174] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0288.174] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0288.175] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0288.175] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x1b01e2, lParam=0x0) returned 0x0
[0288.175] GetStockObject (i=5) returned 0x900015
[0288.175] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0288.175] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8e99a8) returned 0x7
[0288.175] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0288.175] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0288.175] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0288.176] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0288.177] IsWindow (hWnd=0x202c6) returned 1
[0288.177] SetFocus (hWnd=0x202c6) returned 0x202c6
[0288.177] GetWindowLongW (hWnd=0x1902ca, nIndex=-8) returned 458806
[0288.177] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0288.177] GetCurrentThreadId () returned 0x11d0
[0288.177] IsWindow (hWnd=0x70036) returned 1
[0288.177] IsWindow (hWnd=0x70036) returned 1
[0288.177] IsWindowVisible (hWnd=0x70036) returned 1
[0288.177] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0288.177] GetFocus () returned 0x202c6
[0288.177] IsChild (hWndParent=0x1902ca, hWnd=0x202c6) returned 0
[0288.181] ShowWindow (hWnd=0x1902ca, nCmdShow=0) returned 1
[0288.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0288.181] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0288.182] GetWindowPlacement (in: hWnd=0x1902ca, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0288.182] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0288.182] GetClientRect (in: hWnd=0x1902ca, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0288.182] GetWindowRect (in: hWnd=0x1902ca, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0288.183] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0288.183] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0288.183] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0288.184] GetWindowLongW (hWnd=0x1902ca, nIndex=-20) returned 327937
[0288.184] DestroyWindow (hWnd=0x1902ca) returned 1
[0288.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0288.184] GetWindowTextLengthW (hWnd=0x1902ca) returned 10
[0288.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0288.184] GetSystemMetrics (nIndex=42) returned 0
[0288.184] GetWindowTextW (in: hWnd=0x1902ca, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0288.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0288.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0288.185] SendMessageW (hWnd=0x18004e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0288.185] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0288.185] SendMessageW (hWnd=0x18004e, Msg=0xb0, wParam=0x240b128, lParam=0x53e518) returned 0x0
[0288.185] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xb0, wParam=0x240b128, lParam=0x53e518) returned 0x0
[0288.185] GetWindowTextLengthW (hWnd=0x18004e) returned 0
[0288.185] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0288.185] GetSystemMetrics (nIndex=42) returned 0
[0288.185] GetWindowTextW (in: hWnd=0x18004e, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0288.185] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0288.185] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0288.185] GetWindowThreadProcessId (in: hWnd=0x3b013e, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0288.185] GetWindow (hWnd=0x3b013e, uCmd=0x5) returned 0x0
[0288.185] GetWindowLongW (hWnd=0x3b013e, nIndex=-20) returned 65792
[0288.185] DestroyWindow (hWnd=0x3b013e) returned 1
[0288.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3b013e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0288.185] GetWindowTextLengthW (hWnd=0x3b013e) returned 25
[0288.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3b013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0288.186] GetSystemMetrics (nIndex=42) returned 0
[0288.186] GetWindowTextW (in: hWnd=0x3b013e, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0288.186] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3b013e, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0288.186] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3b013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0288.186] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3b013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0288.187] GetWindowTextLengthW (hWnd=0x1c0122) returned 16
[0288.187] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0288.187] GetSystemMetrics (nIndex=42) returned 0
[0288.187] GetWindowTextW (in: hWnd=0x1c0122, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0288.187] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0288.187] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0288.187] InvalidateRect (hWnd=0x1b01e2, lpRect=0x0, bErase=0) returned 1
[0288.187] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0288.187] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0288.188] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x18004e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0288.189] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1c0122, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0288.190] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1b01e2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0288.191] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2000ea, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0288.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1902ca, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0288.193] GetProcessWindowStation () returned 0x13c
[0288.193] GetActiveWindow () returned 0x70036
[0288.193] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0288.193] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0288.193] GetCurrentThreadId () returned 0x11d0
[0288.194] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf3e06, lParam=0x0) returned 1
[0288.194] IsWindowVisible (hWnd=0x70036) returned 1
[0288.194] IsWindowEnabled (hWnd=0x70036) returned 1
[0288.194] IsWindowVisible (hWnd=0x602b6) returned 0
[0288.194] IsWindowVisible (hWnd=0x901f8) returned 0
[0288.194] IsWindowVisible (hWnd=0x202d0) returned 0
[0288.194] IsWindowVisible (hWnd=0x202d4) returned 0
[0288.194] GetActiveWindow () returned 0x70036
[0288.194] GetFocus () returned 0x202c6
[0288.194] IsWindow (hWnd=0x70036) returned 1
[0288.194] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0288.194] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0288.195] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0288.195] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0288.196] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0288.203] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1a02ca) returned 0x1
[0288.205] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0288.205] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0288.207] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x2100ea, lParam=0x0) returned 0x0
[0288.207] GetCapture () returned 0x0
[0288.207] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0288.208] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0288.220] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0288.220] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0288.222] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0xf0105ee
[0288.222] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0288.222] CreateCompatibleDC (hdc=0xf0105ee) returned 0x900107b1
[0288.223] SelectObject (hdc=0x900107b1, h=0x1e0507b9) returned 0x85000f
[0288.223] GdipCreateFromHDC (hdc=0x900107b1, graphics=0x53e108) returned 0x0
[0288.223] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0288.223] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0288.223] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0288.223] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0288.223] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0288.223] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0288.223] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0288.223] LocalFree (hMem=0x89ea88) returned 0x0
[0288.223] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0288.223] GdipCreateRegion (region=0x53e150) returned 0x0
[0288.223] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0288.223] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0288.223] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0288.223] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa9f0dbd) returned 0x0
[0288.223] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0288.224] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0288.224] GetCurrentObject (hdc=0x900107b1, type=0x1) returned 0xb00017
[0288.224] GetCurrentObject (hdc=0x900107b1, type=0x2) returned 0x900010
[0288.224] GetCurrentObject (hdc=0x900107b1, type=0x7) returned 0x1e0507b9
[0288.224] GetCurrentObject (hdc=0x900107b1, type=0x6) returned 0x8a01c2
[0288.224] SaveDC (hdc=0x900107b1) returned 1
[0288.224] GetNearestColor (hdc=0x900107b1, color=0xff) returned 0xff
[0288.224] GetNearestColor (hdc=0x900107b1, color=0x55) returned 0x55
[0288.224] GetNearestColor (hdc=0x900107b1, color=0x0) returned 0x0
[0288.224] GetNearestColor (hdc=0x900107b1, color=0x55) returned 0x55
[0288.224] GetNearestColor (hdc=0x900107b1, color=0x0) returned 0x0
[0288.224] GetNearestColor (hdc=0x900107b1, color=0x8080ff) returned 0x8080ff
[0288.224] GetNearestColor (hdc=0x900107b1, color=0x7373e5) returned 0x7373e5
[0288.224] GetNearestColor (hdc=0x900107b1, color=0xe5) returned 0xe5
[0288.225] GetNearestColor (hdc=0x900107b1, color=0x0) returned 0x0
[0288.225] RestoreDC (hdc=0x900107b1, nSavedDC=-1) returned 1
[0288.225] GdipReleaseDC (graphics=0x5d92c30, hdc=0x900107b1) returned 0x0
[0288.225] IsAppThemed () returned 0x1
[0288.225] GetThemeAppProperties () returned 0x3
[0288.225] GetThemeAppProperties () returned 0x3
[0288.225] IsAppThemed () returned 0x1
[0288.225] GetThemeAppProperties () returned 0x3
[0288.225] GetThemeAppProperties () returned 0x3
[0288.225] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0288.225] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x242444c | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0288.225] IsAppThemed () returned 0x1
[0288.225] GetThemeAppProperties () returned 0x3
[0288.225] GetThemeAppProperties () returned 0x3
[0288.225] IsAppThemed () returned 0x1
[0288.226] GetThemeAppProperties () returned 0x3
[0288.226] GetThemeAppProperties () returned 0x3
[0288.226] GetFocus () returned 0x2100ea
[0288.226] IsAppThemed () returned 0x1
[0288.226] GetThemeAppProperties () returned 0x3
[0288.226] GetThemeAppProperties () returned 0x3
[0288.226] IsAppThemed () returned 0x1
[0288.226] GetThemeAppProperties () returned 0x3
[0288.226] GetThemeAppProperties () returned 0x3
[0288.226] IsThemePartDefined () returned 0x1
[0288.226] IsAppThemed () returned 0x1
[0288.226] GetThemeAppProperties () returned 0x3
[0288.226] GetThemeAppProperties () returned 0x3
[0288.226] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0288.226] IsAppThemed () returned 0x1
[0288.226] GetThemeAppProperties () returned 0x3
[0288.226] GetThemeAppProperties () returned 0x3
[0288.226] IsAppThemed () returned 0x1
[0288.226] GetThemeAppProperties () returned 0x3
[0288.226] GetThemeAppProperties () returned 0x3
[0288.226] IsThemePartDefined () returned 0x1
[0288.226] GdipCreateRegion (region=0x53de78) returned 0x0
[0288.226] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0288.226] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0288.226] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0288.227] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0288.227] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0288.227] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0288.227] LocalFree (hMem=0x89ee08) returned 0x0
[0288.227] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0288.227] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0288.227] LocalFree (hMem=0x89ee08) returned 0x0
[0288.227] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0288.227] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0288.227] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0288.227] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0288.227] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0288.227] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0288.227] GetCurrentObject (hdc=0x900107b1, type=0x1) returned 0xb00017
[0288.227] GetCurrentObject (hdc=0x900107b1, type=0x2) returned 0x900010
[0288.227] GetCurrentObject (hdc=0x900107b1, type=0x7) returned 0x1e0507b9
[0288.227] GetCurrentObject (hdc=0x900107b1, type=0x6) returned 0x8a01c2
[0288.227] SaveDC (hdc=0x900107b1) returned 1
[0288.227] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f040798
[0288.227] GetClipRgn (hdc=0x900107b1, hrgn=0x5f040798) returned 0
[0288.228] SelectClipRgn (hdc=0x900107b1, hrgn=0xc304051e) returned 2
[0288.228] DeleteObject (ho=0x5f040798) returned 1
[0288.228] DeleteObject (ho=0xc304051e) returned 1
[0288.228] OffsetViewportOrgEx (in: hdc=0x900107b1, x=0, y=0, lppt=0x2424afc | out: lppt=0x2424afc) returned 1
[0288.228] DrawThemeParentBackground () returned 0x0
[0288.228] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0288.228] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0288.228] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0288.228] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0288.228] GetSystemMetrics (nIndex=42) returned 0
[0288.228] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0288.228] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0288.228] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0288.228] GetCurrentObject (hdc=0x900107b1, type=0x1) returned 0xb00017
[0288.228] GetCurrentObject (hdc=0x900107b1, type=0x2) returned 0x900010
[0288.228] GetCurrentObject (hdc=0x900107b1, type=0x7) returned 0x1e0507b9
[0288.228] GetCurrentObject (hdc=0x900107b1, type=0x6) returned 0x8a01c2
[0288.228] SaveDC (hdc=0x900107b1) returned 2
[0288.229] GetNearestColor (hdc=0x900107b1, color=0xff) returned 0xff
[0288.229] CreateSolidBrush (color=0xff) returned 0x5010078d
[0288.229] FillRect (hDC=0x900107b1, lprc=0x53d8d8, hbr=0x5010078d) returned 1
[0288.229] DeleteObject (ho=0x5010078d) returned 1
[0288.229] RestoreDC (hdc=0x900107b1, nSavedDC=-1) returned 1
[0288.229] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0288.229] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0288.229] GetSystemMetrics (nIndex=42) returned 0
[0288.229] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0288.229] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0288.229] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0288.229] GetCurrentObject (hdc=0x900107b1, type=0x1) returned 0xb00017
[0288.229] GetCurrentObject (hdc=0x900107b1, type=0x2) returned 0x900010
[0288.229] GetCurrentObject (hdc=0x900107b1, type=0x7) returned 0x1e0507b9
[0288.229] GetCurrentObject (hdc=0x900107b1, type=0x6) returned 0x8a01c2
[0288.229] SaveDC (hdc=0x900107b1) returned 2
[0288.229] GetNearestColor (hdc=0x900107b1, color=0xff) returned 0xff
[0288.229] CreateSolidBrush (color=0xff) returned 0x5110078d
[0288.229] FillRect (hDC=0x900107b1, lprc=0x53d878, hbr=0x5110078d) returned 1
[0288.229] DeleteObject (ho=0x5110078d) returned 1
[0288.230] RestoreDC (hdc=0x900107b1, nSavedDC=-1) returned 1
[0288.230] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0288.230] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0288.230] GetSystemMetrics (nIndex=42) returned 0
[0288.230] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0288.230] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0288.230] RestoreDC (hdc=0x900107b1, nSavedDC=-1) returned 1
[0288.230] GdipReleaseDC (graphics=0x5d92c30, hdc=0x900107b1) returned 0x0
[0288.230] IsAppThemed () returned 0x1
[0288.230] GetThemeAppProperties () returned 0x3
[0288.230] GetThemeAppProperties () returned 0x3
[0288.230] IsAppThemed () returned 0x1
[0288.230] GetThemeAppProperties () returned 0x3
[0288.230] GetThemeAppProperties () returned 0x3
[0288.230] IsThemePartDefined () returned 0x1
[0288.230] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0288.230] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0288.230] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0288.230] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0288.230] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0288.230] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0288.231] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0288.231] LocalFree (hMem=0x89ee08) returned 0x0
[0288.231] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0288.231] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0288.231] LocalFree (hMem=0x89ee08) returned 0x0
[0288.231] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0288.231] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0288.231] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0288.231] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0288.231] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0288.231] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0288.231] GetCurrentObject (hdc=0x900107b1, type=0x1) returned 0xb00017
[0288.231] GetCurrentObject (hdc=0x900107b1, type=0x2) returned 0x900010
[0288.231] GetCurrentObject (hdc=0x900107b1, type=0x7) returned 0x1e0507b9
[0288.231] GetCurrentObject (hdc=0x900107b1, type=0x6) returned 0x8a01c2
[0288.231] SaveDC (hdc=0x900107b1) returned 1
[0288.231] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc404051e
[0288.231] GetClipRgn (hdc=0x900107b1, hrgn=0xc404051e) returned 0
[0288.232] SelectClipRgn (hdc=0x900107b1, hrgn=0x61040798) returned 2
[0288.232] DeleteObject (ho=0xc404051e) returned 1
[0288.232] DeleteObject (ho=0x61040798) returned 1
[0288.232] OffsetViewportOrgEx (in: hdc=0x900107b1, x=0, y=0, lppt=0x2425360 | out: lppt=0x2425360) returned 1
[0288.232] IsAppThemed () returned 0x1
[0288.232] GetThemeAppProperties () returned 0x3
[0288.232] GetThemeAppProperties () returned 0x3
[0288.232] DrawThemeBackground () returned 0x0
[0288.232] RestoreDC (hdc=0x900107b1, nSavedDC=-1) returned 1
[0288.232] GdipReleaseDC (graphics=0x5d92c30, hdc=0x900107b1) returned 0x0
[0288.232] GdipCreateRegion (region=0x53de00) returned 0x0
[0288.232] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0288.232] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0288.232] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0288.232] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0288.233] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0288.233] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0288.233] LocalFree (hMem=0x89ea88) returned 0x0
[0288.233] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0288.233] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0288.233] LocalFree (hMem=0x89ea88) returned 0x0
[0288.233] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0288.233] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0288.233] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0288.233] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0288.233] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0288.233] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0288.233] GetCurrentObject (hdc=0x900107b1, type=0x1) returned 0xb00017
[0288.233] GetCurrentObject (hdc=0x900107b1, type=0x2) returned 0x900010
[0288.233] GetCurrentObject (hdc=0x900107b1, type=0x7) returned 0x1e0507b9
[0288.233] GetCurrentObject (hdc=0x900107b1, type=0x6) returned 0x8a01c2
[0288.234] SaveDC (hdc=0x900107b1) returned 1
[0288.234] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x62040798
[0288.234] GetClipRgn (hdc=0x900107b1, hrgn=0x62040798) returned 0
[0288.234] SelectClipRgn (hdc=0x900107b1, hrgn=0xc504051e) returned 2
[0288.234] DeleteObject (ho=0x62040798) returned 1
[0288.234] DeleteObject (ho=0xc504051e) returned 1
[0288.234] OffsetViewportOrgEx (in: hdc=0x900107b1, x=0, y=0, lppt=0x2425634 | out: lppt=0x2425634) returned 1
[0288.234] IsAppThemed () returned 0x1
[0288.234] GetThemeAppProperties () returned 0x3
[0288.234] GetThemeAppProperties () returned 0x3
[0288.234] GetThemeBackgroundContentRect () returned 0x0
[0288.234] RestoreDC (hdc=0x900107b1, nSavedDC=-1) returned 1
[0288.234] GdipReleaseDC (graphics=0x5d92c30, hdc=0x900107b1) returned 0x0
[0288.234] IsAppThemed () returned 0x1
[0288.235] GetThemeAppProperties () returned 0x3
[0288.235] GetThemeAppProperties () returned 0x3
[0288.235] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0288.235] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0288.235] GetCurrentObject (hdc=0x900107b1, type=0x1) returned 0xb00017
[0288.235] GetCurrentObject (hdc=0x900107b1, type=0x2) returned 0x900010
[0288.235] GetCurrentObject (hdc=0x900107b1, type=0x7) returned 0x1e0507b9
[0288.235] GetCurrentObject (hdc=0x900107b1, type=0x6) returned 0x8a01c2
[0288.235] SaveDC (hdc=0x900107b1) returned 1
[0288.235] GetTextAlign (hdc=0x900107b1) returned 0x0
[0288.235] GetTextColor (hdc=0x900107b1) returned 0x0
[0288.235] GetCurrentObject (hdc=0x900107b1, type=0x6) returned 0x8a01c2
[0288.235] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0288.235] SelectObject (hdc=0x900107b1, h=0x450a0799) returned 0x8a01c2
[0288.236] GetBkMode (hdc=0x900107b1) returned 2
[0288.236] SetBkMode (hdc=0x900107b1, mode=1) returned 2
[0288.236] DrawTextExW (in: hdc=0x900107b1, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x24259d4 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0288.236] DrawTextExW (in: hdc=0x900107b1, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x24259d4 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0288.236] RestoreDC (hdc=0x900107b1, nSavedDC=-1) returned 1
[0288.237] GdipReleaseDC (graphics=0x5d92c30, hdc=0x900107b1) returned 0x0
[0288.237] GetFocus () returned 0x2100ea
[0288.237] IsAppThemed () returned 0x1
[0288.237] GetThemeAppProperties () returned 0x3
[0288.237] GetThemeAppProperties () returned 0x3
[0288.237] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0288.237] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x900107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0288.237] GdipReleaseDC (graphics=0x5d92c30, hdc=0x900107b1) returned 0x0
[0288.237] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0288.237] SelectObject (hdc=0x900107b1, h=0x85000f) returned 0x1e0507b9
[0288.237] DeleteDC (hdc=0x900107b1) returned 1
[0288.237] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0288.237] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0288.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0288.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0288.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1a02ca) returned 0x1
[0288.557] GetFocus () returned 0x1a02ca
[0288.558] GetAncestor (hwnd=0x1a02ca, gaFlags=0x1) returned 0x10010
[0288.558] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0288.558] SetFocus (hWnd=0x202c6) returned 0x0
[0288.561] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0288.563] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0288.563] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0288.563] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0288.563] GetFocus () returned 0x70036
[0288.563] SetFocus (hWnd=0x202c6) returned 0x0
[0288.569] IsWindow (hWnd=0x70036) returned 1
[0288.569] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0288.570] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0288.570] IsWindow (hWnd=0x70036) returned 1
[0288.570] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0288.570] IsWindow (hWnd=0x202c6) returned 1
[0288.570] SetFocus (hWnd=0x202c6) returned 0x70036
[0288.570] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0288.571] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0288.572] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0288.574] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0288.574] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0288.574] GetStockObject (i=5) returned 0x900015
[0288.574] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0288.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8e9948) returned 0x7
[0288.575] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0288.575] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0288.575] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0288.575] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0288.576] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0288.576] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0288.577] GetFocus () returned 0x202c6
[0288.577] GetCapture () returned 0x0
[0288.577] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.577] IsWindowUnicode (hWnd=0x202c6) returned 1
[0288.577] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.577] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.577] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.578] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.578] IsWindowUnicode (hWnd=0x202c6) returned 1
[0288.578] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.578] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.578] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.579] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0288.579] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0288.579] CreateCompatibleDC (hdc=0xf0105ee) returned 0xce01065f
[0288.579] SelectObject (hdc=0xce01065f, h=0x1e0507b9) returned 0x85000f
[0288.579] GdipCreateFromHDC (hdc=0xce01065f, graphics=0x53e958) returned 0x0
[0288.579] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0288.579] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0288.579] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0288.579] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0288.579] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0288.580] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0288.580] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0288.580] LocalFree (hMem=0x89ee08) returned 0x0
[0288.580] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0288.580] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0288.580] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0288.580] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0288.580] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0288.580] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa9d0dbd) returned 0x0
[0288.580] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0288.580] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0288.580] GetCurrentObject (hdc=0xce01065f, type=0x1) returned 0xb00017
[0288.580] GetCurrentObject (hdc=0xce01065f, type=0x2) returned 0x900010
[0288.580] GetCurrentObject (hdc=0xce01065f, type=0x7) returned 0x1e0507b9
[0288.580] GetCurrentObject (hdc=0xce01065f, type=0x6) returned 0x8a01c2
[0288.580] SaveDC (hdc=0xce01065f) returned 1
[0288.581] GetNearestColor (hdc=0xce01065f, color=0xff) returned 0xff
[0288.581] GetNearestColor (hdc=0xce01065f, color=0x55) returned 0x55
[0288.581] GetNearestColor (hdc=0xce01065f, color=0x0) returned 0x0
[0288.581] GetNearestColor (hdc=0xce01065f, color=0x55) returned 0x55
[0288.581] GetNearestColor (hdc=0xce01065f, color=0x0) returned 0x0
[0288.581] GetNearestColor (hdc=0xce01065f, color=0x8080ff) returned 0x8080ff
[0288.581] GetNearestColor (hdc=0xce01065f, color=0x7373e5) returned 0x7373e5
[0288.581] GetNearestColor (hdc=0xce01065f, color=0xe5) returned 0xe5
[0288.581] GetNearestColor (hdc=0xce01065f, color=0x0) returned 0x0
[0288.581] RestoreDC (hdc=0xce01065f, nSavedDC=-1) returned 1
[0288.581] GdipReleaseDC (graphics=0x5d92c30, hdc=0xce01065f) returned 0x0
[0288.581] IsAppThemed () returned 0x1
[0288.582] GetThemeAppProperties () returned 0x3
[0288.582] GetThemeAppProperties () returned 0x3
[0288.582] IsAppThemed () returned 0x1
[0288.582] GetThemeAppProperties () returned 0x3
[0288.582] GetThemeAppProperties () returned 0x3
[0288.582] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2426230 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0288.582] IsAppThemed () returned 0x1
[0288.582] GetThemeAppProperties () returned 0x3
[0288.582] GetThemeAppProperties () returned 0x3
[0288.582] IsAppThemed () returned 0x1
[0288.582] GetThemeAppProperties () returned 0x3
[0288.582] GetThemeAppProperties () returned 0x3
[0288.582] GetFocus () returned 0x202c6
[0288.583] IsAppThemed () returned 0x1
[0288.583] GetThemeAppProperties () returned 0x3
[0288.583] GetThemeAppProperties () returned 0x3
[0288.583] IsAppThemed () returned 0x1
[0288.583] GetThemeAppProperties () returned 0x3
[0288.583] GetThemeAppProperties () returned 0x3
[0288.583] IsThemePartDefined () returned 0x1
[0288.583] IsAppThemed () returned 0x1
[0288.583] GetThemeAppProperties () returned 0x3
[0288.583] GetThemeAppProperties () returned 0x3
[0288.583] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0288.583] IsAppThemed () returned 0x1
[0288.583] GetThemeAppProperties () returned 0x3
[0288.583] GetThemeAppProperties () returned 0x3
[0288.583] IsAppThemed () returned 0x1
[0288.583] GetThemeAppProperties () returned 0x3
[0288.583] GetThemeAppProperties () returned 0x3
[0288.583] IsThemePartDefined () returned 0x1
[0288.583] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0288.583] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0288.597] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0288.597] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0288.597] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0288.597] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0288.597] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0288.597] LocalFree (hMem=0x89ee08) returned 0x0
[0288.597] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0288.597] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0288.597] LocalFree (hMem=0x89ee08) returned 0x0
[0288.597] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0288.597] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0288.598] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0288.598] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0288.598] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0288.598] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0288.598] GetCurrentObject (hdc=0xce01065f, type=0x1) returned 0xb00017
[0288.598] GetCurrentObject (hdc=0xce01065f, type=0x2) returned 0x900010
[0288.598] GetCurrentObject (hdc=0xce01065f, type=0x7) returned 0x1e0507b9
[0288.598] GetCurrentObject (hdc=0xce01065f, type=0x6) returned 0x8a01c2
[0288.598] SaveDC (hdc=0xce01065f) returned 1
[0288.598] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5004053e
[0288.598] GetClipRgn (hdc=0xce01065f, hrgn=0x5004053e) returned 0
[0288.598] SelectClipRgn (hdc=0xce01065f, hrgn=0xd304051e) returned 2
[0288.598] DeleteObject (ho=0x5004053e) returned 1
[0288.598] DeleteObject (ho=0xd304051e) returned 1
[0288.598] OffsetViewportOrgEx (in: hdc=0xce01065f, x=0, y=0, lppt=0x24268e0 | out: lppt=0x24268e0) returned 1
[0288.598] DrawThemeParentBackground () returned 0x0
[0288.599] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0288.599] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0288.599] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0288.599] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0288.599] GetSystemMetrics (nIndex=42) returned 0
[0288.599] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0288.599] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0288.599] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0288.599] GetCurrentObject (hdc=0xce01065f, type=0x1) returned 0xb00017
[0288.599] GetCurrentObject (hdc=0xce01065f, type=0x2) returned 0x900010
[0288.599] GetCurrentObject (hdc=0xce01065f, type=0x7) returned 0x1e0507b9
[0288.602] GetCurrentObject (hdc=0xce01065f, type=0x6) returned 0x8a01c2
[0288.602] SaveDC (hdc=0xce01065f) returned 2
[0288.602] GetNearestColor (hdc=0xce01065f, color=0xff) returned 0xff
[0288.602] CreateSolidBrush (color=0xff) returned 0x5310078d
[0288.602] FillRect (hDC=0xce01065f, lprc=0x53e128, hbr=0x5310078d) returned 1
[0288.602] DeleteObject (ho=0x5310078d) returned 1
[0288.602] RestoreDC (hdc=0xce01065f, nSavedDC=-1) returned 1
[0288.602] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0288.602] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0288.602] GetSystemMetrics (nIndex=42) returned 0
[0288.602] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0288.602] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0288.602] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0288.602] GetCurrentObject (hdc=0xce01065f, type=0x1) returned 0xb00017
[0288.602] GetCurrentObject (hdc=0xce01065f, type=0x2) returned 0x900010
[0288.602] GetCurrentObject (hdc=0xce01065f, type=0x7) returned 0x1e0507b9
[0288.602] GetCurrentObject (hdc=0xce01065f, type=0x6) returned 0x8a01c2
[0288.602] SaveDC (hdc=0xce01065f) returned 2
[0288.603] GetNearestColor (hdc=0xce01065f, color=0xff) returned 0xff
[0288.603] CreateSolidBrush (color=0xff) returned 0x5410078d
[0288.603] FillRect (hDC=0xce01065f, lprc=0x53e0c8, hbr=0x5410078d) returned 1
[0288.603] DeleteObject (ho=0x5410078d) returned 1
[0288.603] RestoreDC (hdc=0xce01065f, nSavedDC=-1) returned 1
[0288.603] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0288.603] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0288.603] GetSystemMetrics (nIndex=42) returned 0
[0288.603] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0288.603] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0288.603] RestoreDC (hdc=0xce01065f, nSavedDC=-1) returned 1
[0288.603] GdipReleaseDC (graphics=0x5d92c30, hdc=0xce01065f) returned 0x0
[0288.603] IsAppThemed () returned 0x1
[0288.603] GetThemeAppProperties () returned 0x3
[0288.603] GetThemeAppProperties () returned 0x3
[0288.603] IsAppThemed () returned 0x1
[0288.604] GetThemeAppProperties () returned 0x3
[0288.604] GetThemeAppProperties () returned 0x3
[0288.604] IsThemePartDefined () returned 0x1
[0288.604] GdipCreateRegion (region=0x53e64c) returned 0x0
[0288.604] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0288.604] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0288.604] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0288.604] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0288.604] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0288.604] LocalFree (hMem=0x89ee08) returned 0x0
[0288.604] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0288.604] LocalFree (hMem=0x89ea88) returned 0x0
[0288.604] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0288.604] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0288.604] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0288.604] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0288.604] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0288.604] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0288.604] GetCurrentObject (hdc=0xce01065f, type=0x1) returned 0xb00017
[0288.604] GetCurrentObject (hdc=0xce01065f, type=0x2) returned 0x900010
[0288.604] GetCurrentObject (hdc=0xce01065f, type=0x7) returned 0x1e0507b9
[0288.604] GetCurrentObject (hdc=0xce01065f, type=0x6) returned 0x8a01c2
[0288.604] SaveDC (hdc=0xce01065f) returned 1
[0288.604] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd404051e
[0288.605] GetClipRgn (hdc=0xce01065f, hrgn=0xd404051e) returned 0
[0288.605] SelectClipRgn (hdc=0xce01065f, hrgn=0x5204053e) returned 2
[0288.605] DeleteObject (ho=0xd404051e) returned 1
[0288.605] DeleteObject (ho=0x5204053e) returned 1
[0288.605] OffsetViewportOrgEx (in: hdc=0xce01065f, x=0, y=0, lppt=0x2427144 | out: lppt=0x2427144) returned 1
[0288.605] IsAppThemed () returned 0x1
[0288.605] GetThemeAppProperties () returned 0x3
[0288.605] GetThemeAppProperties () returned 0x3
[0288.605] DrawThemeBackground () returned 0x0
[0288.605] RestoreDC (hdc=0xce01065f, nSavedDC=-1) returned 1
[0288.605] GdipReleaseDC (graphics=0x5d92c30, hdc=0xce01065f) returned 0x0
[0288.605] GdipCreateRegion (region=0x53e650) returned 0x0
[0288.605] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0288.605] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0288.605] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0288.605] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0288.605] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0288.605] LocalFree (hMem=0x89ea88) returned 0x0
[0288.605] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0288.605] LocalFree (hMem=0x89ee08) returned 0x0
[0288.605] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0288.605] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0288.605] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0288.605] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0288.606] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0288.606] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0288.606] GetCurrentObject (hdc=0xce01065f, type=0x1) returned 0xb00017
[0288.606] GetCurrentObject (hdc=0xce01065f, type=0x2) returned 0x900010
[0288.606] GetCurrentObject (hdc=0xce01065f, type=0x7) returned 0x1e0507b9
[0288.606] GetCurrentObject (hdc=0xce01065f, type=0x6) returned 0x8a01c2
[0288.606] SaveDC (hdc=0xce01065f) returned 1
[0288.606] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5304053e
[0288.606] GetClipRgn (hdc=0xce01065f, hrgn=0x5304053e) returned 0
[0288.606] SelectClipRgn (hdc=0xce01065f, hrgn=0xd504051e) returned 2
[0288.606] DeleteObject (ho=0x5304053e) returned 1
[0288.606] DeleteObject (ho=0xd504051e) returned 1
[0288.606] OffsetViewportOrgEx (in: hdc=0xce01065f, x=0, y=0, lppt=0x2427418 | out: lppt=0x2427418) returned 1
[0288.606] IsAppThemed () returned 0x1
[0288.606] GetThemeAppProperties () returned 0x3
[0288.606] GetThemeAppProperties () returned 0x3
[0288.606] GetThemeBackgroundContentRect () returned 0x0
[0288.606] RestoreDC (hdc=0xce01065f, nSavedDC=-1) returned 1
[0288.606] GdipReleaseDC (graphics=0x5d92c30, hdc=0xce01065f) returned 0x0
[0288.606] IsAppThemed () returned 0x1
[0288.606] GetThemeAppProperties () returned 0x3
[0288.606] GetThemeAppProperties () returned 0x3
[0288.606] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0288.606] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0288.606] GetCurrentObject (hdc=0xce01065f, type=0x1) returned 0xb00017
[0288.607] GetCurrentObject (hdc=0xce01065f, type=0x2) returned 0x900010
[0288.607] GetCurrentObject (hdc=0xce01065f, type=0x7) returned 0x1e0507b9
[0288.607] GetCurrentObject (hdc=0xce01065f, type=0x6) returned 0x8a01c2
[0288.607] SaveDC (hdc=0xce01065f) returned 1
[0288.607] GetTextAlign (hdc=0xce01065f) returned 0x0
[0288.607] GetTextColor (hdc=0xce01065f) returned 0x0
[0288.607] GetCurrentObject (hdc=0xce01065f, type=0x6) returned 0x8a01c2
[0288.607] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0288.607] SelectObject (hdc=0xce01065f, h=0x450a0799) returned 0x8a01c2
[0288.607] GetBkMode (hdc=0xce01065f) returned 2
[0288.607] SetBkMode (hdc=0xce01065f, mode=1) returned 2
[0288.607] DrawTextExW (in: hdc=0xce01065f, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x24277b8 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0288.607] DrawTextExW (in: hdc=0xce01065f, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x24277b8 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0288.608] RestoreDC (hdc=0xce01065f, nSavedDC=-1) returned 1
[0288.608] GdipReleaseDC (graphics=0x5d92c30, hdc=0xce01065f) returned 0x0
[0288.608] GetFocus () returned 0x202c6
[0288.608] IsAppThemed () returned 0x1
[0288.608] GetThemeAppProperties () returned 0x3
[0288.608] GetThemeAppProperties () returned 0x3
[0288.608] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0288.608] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xce01065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0288.608] GdipReleaseDC (graphics=0x5d92c30, hdc=0xce01065f) returned 0x0
[0288.608] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0288.608] SelectObject (hdc=0xce01065f, h=0x85000f) returned 0x1e0507b9
[0288.608] DeleteDC (hdc=0xce01065f) returned 1
[0288.608] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0288.608] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0288.608] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.608] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.609] WaitMessage () returned 1
[0288.613] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.613] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.613] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.613] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.613] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.614] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.614] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.614] WaitMessage () returned 1
[0288.624] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.624] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.624] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.625] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.625] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.625] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.625] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.625] WaitMessage () returned 1
[0288.626] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.627] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.627] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.627] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.627] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.627] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.628] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.628] WaitMessage () returned 1
[0288.628] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.628] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.628] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.628] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.628] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.629] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.630] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.630] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.630] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.630] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.630] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.630] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.630] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.630] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.630] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.630] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.633] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.633] WaitMessage () returned 1
[0288.635] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.635] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.635] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.635] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.635] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.637] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.637] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.637] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.637] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.637] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.637] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.637] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.637] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.637] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.637] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.637] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.638] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.638] WaitMessage () returned 1
[0288.638] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.638] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.638] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.638] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.638] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.639] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.640] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.640] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.640] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.640] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.640] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.640] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.640] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.640] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.640] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.640] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.641] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.641] WaitMessage () returned 1
[0288.641] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.641] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.641] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.641] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.641] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.642] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.643] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.643] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.643] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.643] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.643] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.643] IsWindowUnicode (hWnd=0x102dc) returned 1
[0288.643] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.643] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.643] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.643] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.644] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.644] WaitMessage () returned 1
[0288.740] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.740] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.740] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.740] DispatchMessageA (lpMsg=0x53eef8) returned 0x7e8b
[0288.741] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.741] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.741] WaitMessage () returned 1
[0288.881] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.881] IsWindowUnicode (hWnd=0x202d0) returned 1
[0288.881] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0288.881] TranslateMessage (lpMsg=0x53eef8) returned 0
[0288.881] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0288.882] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.882] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0288.882] WaitMessage () returned 1
[0289.740] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0289.741] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0289.741] TranslateMessage (lpMsg=0x53eef8) returned 0
[0289.741] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0289.741] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0289.741] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0289.741] WaitMessage () returned 1
[0290.350] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0290.350] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x197025a) returned 0x1
[0290.350] IsWindowUnicode (hWnd=0x202c6) returned 1
[0290.350] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0290.350] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x197025a) returned 0x1
[0290.350] SetCursor (hCursor=0x10003) returned 0x10003
[0290.350] TranslateMessage (lpMsg=0x53eef8) returned 0
[0290.350] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0290.350] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0290.350] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0290.350] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0290.351] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0290.351] GetKeyState (nVirtKey=1) returned 1
[0290.351] GetKeyState (nVirtKey=2) returned 0
[0290.351] GetKeyState (nVirtKey=4) returned 0
[0290.351] GetKeyState (nVirtKey=5) returned 0
[0290.351] GetKeyState (nVirtKey=6) returned 0
[0290.351] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0290.351] IsWindowUnicode (hWnd=0x202c6) returned 1
[0290.351] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0290.351] TranslateMessage (lpMsg=0x53eef8) returned 0
[0290.351] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0290.351] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0290.351] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0290.351] CreateCompatibleDC (hdc=0xf0105ee) returned 0x530107c3
[0290.351] SelectObject (hdc=0x530107c3, h=0x1e0507b9) returned 0x85000f
[0290.351] GdipCreateFromHDC (hdc=0x530107c3, graphics=0x53e958) returned 0x0
[0290.352] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0290.352] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0290.352] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0290.352] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0290.352] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0290.352] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.352] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0290.352] LocalFree (hMem=0x89ee08) returned 0x0
[0290.352] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0290.352] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0290.352] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.352] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0290.352] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0290.352] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa9b0dbd) returned 0x0
[0290.352] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.352] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0290.352] GetCurrentObject (hdc=0x530107c3, type=0x1) returned 0xb00017
[0290.353] GetCurrentObject (hdc=0x530107c3, type=0x2) returned 0x900010
[0290.353] GetCurrentObject (hdc=0x530107c3, type=0x7) returned 0x1e0507b9
[0290.353] GetCurrentObject (hdc=0x530107c3, type=0x6) returned 0x8a01c2
[0290.353] SaveDC (hdc=0x530107c3) returned 1
[0290.353] GetNearestColor (hdc=0x530107c3, color=0xff) returned 0xff
[0290.353] GetNearestColor (hdc=0x530107c3, color=0x55) returned 0x55
[0290.353] GetNearestColor (hdc=0x530107c3, color=0x0) returned 0x0
[0290.353] GetNearestColor (hdc=0x530107c3, color=0x55) returned 0x55
[0290.353] GetNearestColor (hdc=0x530107c3, color=0x0) returned 0x0
[0290.353] GetNearestColor (hdc=0x530107c3, color=0x8080ff) returned 0x8080ff
[0290.353] GetNearestColor (hdc=0x530107c3, color=0x7373e5) returned 0x7373e5
[0290.353] GetNearestColor (hdc=0x530107c3, color=0xe5) returned 0xe5
[0290.353] GetNearestColor (hdc=0x530107c3, color=0x0) returned 0x0
[0290.353] RestoreDC (hdc=0x530107c3, nSavedDC=-1) returned 1
[0290.353] GdipReleaseDC (graphics=0x5d92c30, hdc=0x530107c3) returned 0x0
[0290.353] IsAppThemed () returned 0x1
[0290.353] GetThemeAppProperties () returned 0x3
[0290.353] GetThemeAppProperties () returned 0x3
[0290.354] IsAppThemed () returned 0x1
[0290.354] GetThemeAppProperties () returned 0x3
[0290.354] GetThemeAppProperties () returned 0x3
[0290.354] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x242814c | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0290.354] IsAppThemed () returned 0x1
[0290.354] GetThemeAppProperties () returned 0x3
[0290.354] GetThemeAppProperties () returned 0x3
[0290.354] IsAppThemed () returned 0x1
[0290.354] GetThemeAppProperties () returned 0x3
[0290.354] GetThemeAppProperties () returned 0x3
[0290.354] IsAppThemed () returned 0x1
[0290.354] GetThemeAppProperties () returned 0x3
[0290.354] GetThemeAppProperties () returned 0x3
[0290.354] IsAppThemed () returned 0x1
[0290.354] GetThemeAppProperties () returned 0x3
[0290.354] GetThemeAppProperties () returned 0x3
[0290.354] IsThemePartDefined () returned 0x1
[0290.354] IsAppThemed () returned 0x1
[0290.354] GetThemeAppProperties () returned 0x3
[0290.354] GetThemeAppProperties () returned 0x3
[0290.354] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0290.354] IsAppThemed () returned 0x1
[0290.355] GetThemeAppProperties () returned 0x3
[0290.355] GetThemeAppProperties () returned 0x3
[0290.355] IsAppThemed () returned 0x1
[0290.355] GetThemeAppProperties () returned 0x3
[0290.355] GetThemeAppProperties () returned 0x3
[0290.355] IsThemePartDefined () returned 0x1
[0290.355] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0290.355] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.355] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0290.355] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0290.355] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0290.355] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0290.355] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0290.355] LocalFree (hMem=0x89ec80) returned 0x0
[0290.355] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.355] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.355] LocalFree (hMem=0x89ee08) returned 0x0
[0290.355] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0290.355] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0290.355] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0290.355] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0290.355] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.355] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0290.355] GetCurrentObject (hdc=0x530107c3, type=0x1) returned 0xb00017
[0290.356] GetCurrentObject (hdc=0x530107c3, type=0x2) returned 0x900010
[0290.356] GetCurrentObject (hdc=0x530107c3, type=0x7) returned 0x1e0507b9
[0290.356] GetCurrentObject (hdc=0x530107c3, type=0x6) returned 0x8a01c2
[0290.356] SaveDC (hdc=0x530107c3) returned 1
[0290.356] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd604051e
[0290.356] GetClipRgn (hdc=0x530107c3, hrgn=0xd604051e) returned 0
[0290.356] SelectClipRgn (hdc=0x530107c3, hrgn=0x5704053e) returned 2
[0290.356] DeleteObject (ho=0xd604051e) returned 1
[0290.356] DeleteObject (ho=0x5704053e) returned 1
[0290.356] OffsetViewportOrgEx (in: hdc=0x530107c3, x=0, y=0, lppt=0x24287fc | out: lppt=0x24287fc) returned 1
[0290.356] DrawThemeParentBackground () returned 0x0
[0290.356] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0290.356] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0290.356] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0290.356] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0290.356] GetSystemMetrics (nIndex=42) returned 0
[0290.356] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0290.356] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0290.356] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0290.356] GetCurrentObject (hdc=0x530107c3, type=0x1) returned 0xb00017
[0290.357] GetCurrentObject (hdc=0x530107c3, type=0x2) returned 0x900010
[0290.357] GetCurrentObject (hdc=0x530107c3, type=0x7) returned 0x1e0507b9
[0290.357] GetCurrentObject (hdc=0x530107c3, type=0x6) returned 0x8a01c2
[0290.357] SaveDC (hdc=0x530107c3) returned 2
[0290.357] GetNearestColor (hdc=0x530107c3, color=0xff) returned 0xff
[0290.357] CreateSolidBrush (color=0xff) returned 0x5510078d
[0290.357] FillRect (hDC=0x530107c3, lprc=0x53e120, hbr=0x5510078d) returned 1
[0290.357] DeleteObject (ho=0x5510078d) returned 1
[0290.357] RestoreDC (hdc=0x530107c3, nSavedDC=-1) returned 1
[0290.357] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0290.357] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0290.357] GetSystemMetrics (nIndex=42) returned 0
[0290.357] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0290.357] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0290.357] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0290.357] GetCurrentObject (hdc=0x530107c3, type=0x1) returned 0xb00017
[0290.357] GetCurrentObject (hdc=0x530107c3, type=0x2) returned 0x900010
[0290.357] GetCurrentObject (hdc=0x530107c3, type=0x7) returned 0x1e0507b9
[0290.357] GetCurrentObject (hdc=0x530107c3, type=0x6) returned 0x8a01c2
[0290.357] SaveDC (hdc=0x530107c3) returned 2
[0290.358] GetNearestColor (hdc=0x530107c3, color=0xff) returned 0xff
[0290.358] CreateSolidBrush (color=0xff) returned 0x5610078d
[0290.358] FillRect (hDC=0x530107c3, lprc=0x53e0c0, hbr=0x5610078d) returned 1
[0290.358] DeleteObject (ho=0x5610078d) returned 1
[0290.358] RestoreDC (hdc=0x530107c3, nSavedDC=-1) returned 1
[0290.358] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0290.358] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0290.358] GetSystemMetrics (nIndex=42) returned 0
[0290.358] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0290.358] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0290.358] RestoreDC (hdc=0x530107c3, nSavedDC=-1) returned 1
[0290.358] GdipReleaseDC (graphics=0x5d92c30, hdc=0x530107c3) returned 0x0
[0290.358] IsAppThemed () returned 0x1
[0290.358] GetThemeAppProperties () returned 0x3
[0290.358] GetThemeAppProperties () returned 0x3
[0290.358] IsAppThemed () returned 0x1
[0290.358] GetThemeAppProperties () returned 0x3
[0290.358] GetThemeAppProperties () returned 0x3
[0290.358] IsThemePartDefined () returned 0x1
[0290.358] GdipCreateRegion (region=0x53e640) returned 0x0
[0290.359] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.359] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0290.359] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0290.359] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0290.359] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.359] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0290.359] LocalFree (hMem=0x89ee08) returned 0x0
[0290.359] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0290.359] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0290.359] LocalFree (hMem=0x89ec80) returned 0x0
[0290.359] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0290.359] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0290.359] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0290.359] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0290.359] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.359] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0290.359] GetCurrentObject (hdc=0x530107c3, type=0x1) returned 0xb00017
[0290.359] GetCurrentObject (hdc=0x530107c3, type=0x2) returned 0x900010
[0290.359] GetCurrentObject (hdc=0x530107c3, type=0x7) returned 0x1e0507b9
[0290.359] GetCurrentObject (hdc=0x530107c3, type=0x6) returned 0x8a01c2
[0290.359] SaveDC (hdc=0x530107c3) returned 1
[0290.359] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5804053e
[0290.360] GetClipRgn (hdc=0x530107c3, hrgn=0x5804053e) returned 0
[0290.360] SelectClipRgn (hdc=0x530107c3, hrgn=0xd804051e) returned 2
[0290.360] DeleteObject (ho=0x5804053e) returned 1
[0290.360] DeleteObject (ho=0xd804051e) returned 1
[0290.360] OffsetViewportOrgEx (in: hdc=0x530107c3, x=0, y=0, lppt=0x2429060 | out: lppt=0x2429060) returned 1
[0290.360] IsAppThemed () returned 0x1
[0290.360] GetThemeAppProperties () returned 0x3
[0290.360] GetThemeAppProperties () returned 0x3
[0290.360] DrawThemeBackground () returned 0x0
[0290.360] RestoreDC (hdc=0x530107c3, nSavedDC=-1) returned 1
[0290.360] GdipReleaseDC (graphics=0x5d92c30, hdc=0x530107c3) returned 0x0
[0290.360] GdipCreateRegion (region=0x53e644) returned 0x0
[0290.360] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.360] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0290.360] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0290.360] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0290.360] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0290.360] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0290.360] LocalFree (hMem=0x89ea88) returned 0x0
[0290.360] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0290.360] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0290.360] LocalFree (hMem=0x89ea88) returned 0x0
[0290.361] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0290.361] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0290.361] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0290.361] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0290.361] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.361] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0290.361] GetCurrentObject (hdc=0x530107c3, type=0x1) returned 0xb00017
[0290.361] GetCurrentObject (hdc=0x530107c3, type=0x2) returned 0x900010
[0290.361] GetCurrentObject (hdc=0x530107c3, type=0x7) returned 0x1e0507b9
[0290.361] GetCurrentObject (hdc=0x530107c3, type=0x6) returned 0x8a01c2
[0290.361] SaveDC (hdc=0x530107c3) returned 1
[0290.361] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd904051e
[0290.361] GetClipRgn (hdc=0x530107c3, hrgn=0xd904051e) returned 0
[0290.361] SelectClipRgn (hdc=0x530107c3, hrgn=0x5904053e) returned 2
[0290.361] DeleteObject (ho=0xd904051e) returned 1
[0290.361] DeleteObject (ho=0x5904053e) returned 1
[0290.361] OffsetViewportOrgEx (in: hdc=0x530107c3, x=0, y=0, lppt=0x2429334 | out: lppt=0x2429334) returned 1
[0290.361] IsAppThemed () returned 0x1
[0290.361] GetThemeAppProperties () returned 0x3
[0290.361] GetThemeAppProperties () returned 0x3
[0290.361] GetThemeBackgroundContentRect () returned 0x0
[0290.361] RestoreDC (hdc=0x530107c3, nSavedDC=-1) returned 1
[0290.362] GdipReleaseDC (graphics=0x5d92c30, hdc=0x530107c3) returned 0x0
[0290.362] IsAppThemed () returned 0x1
[0290.362] GetThemeAppProperties () returned 0x3
[0290.362] GetThemeAppProperties () returned 0x3
[0290.362] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0290.362] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0290.362] GetCurrentObject (hdc=0x530107c3, type=0x1) returned 0xb00017
[0290.362] GetCurrentObject (hdc=0x530107c3, type=0x2) returned 0x900010
[0290.362] GetCurrentObject (hdc=0x530107c3, type=0x7) returned 0x1e0507b9
[0290.362] GetCurrentObject (hdc=0x530107c3, type=0x6) returned 0x8a01c2
[0290.362] SaveDC (hdc=0x530107c3) returned 1
[0290.362] GetTextAlign (hdc=0x530107c3) returned 0x0
[0290.362] GetTextColor (hdc=0x530107c3) returned 0x0
[0290.362] GetCurrentObject (hdc=0x530107c3, type=0x6) returned 0x8a01c2
[0290.362] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0290.362] SelectObject (hdc=0x530107c3, h=0x450a0799) returned 0x8a01c2
[0290.362] GetBkMode (hdc=0x530107c3) returned 2
[0290.362] SetBkMode (hdc=0x530107c3, mode=1) returned 2
[0290.363] DrawTextExW (in: hdc=0x530107c3, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x24296d4 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0290.363] DrawTextExW (in: hdc=0x530107c3, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x24296d4 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0290.363] RestoreDC (hdc=0x530107c3, nSavedDC=-1) returned 1
[0290.363] GdipReleaseDC (graphics=0x5d92c30, hdc=0x530107c3) returned 0x0
[0290.363] GetFocus () returned 0x202c6
[0290.363] IsAppThemed () returned 0x1
[0290.363] GetThemeAppProperties () returned 0x3
[0290.363] GetThemeAppProperties () returned 0x3
[0290.363] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0290.363] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x530107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0290.364] GdipReleaseDC (graphics=0x5d92c30, hdc=0x530107c3) returned 0x0
[0290.364] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0290.364] SelectObject (hdc=0x530107c3, h=0x85000f) returned 0x1e0507b9
[0290.364] DeleteDC (hdc=0x530107c3) returned 1
[0290.364] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0290.364] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0290.364] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0290.364] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0290.364] WaitMessage () returned 1
[0290.459] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0290.459] IsWindowUnicode (hWnd=0x202c6) returned 1
[0290.459] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0290.460] TranslateMessage (lpMsg=0x53eef8) returned 0
[0290.460] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0290.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0290.460] IsWindowUnicode (hWnd=0x202c6) returned 1
[0290.460] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0290.460] TranslateMessage (lpMsg=0x53eef8) returned 0
[0290.460] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0290.460] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xf006a) returned 0x0
[0290.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0290.460] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0290.460] WaitMessage () returned 1
[0290.589] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0290.589] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x197025a) returned 0x1
[0290.589] IsWindowUnicode (hWnd=0x202c6) returned 1
[0290.589] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0290.589] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x197025a) returned 0x1
[0290.589] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0290.589] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12a0204) returned 0x0
[0290.589] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0290.589] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0290.590] SetCursor (hCursor=0x10003) returned 0x10003
[0290.590] TranslateMessage (lpMsg=0x53eef8) returned 0
[0290.590] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0290.590] GetKeyState (nVirtKey=1) returned -128
[0290.590] GetKeyState (nVirtKey=2) returned 0
[0290.590] GetKeyState (nVirtKey=4) returned 0
[0290.590] GetKeyState (nVirtKey=5) returned 0
[0290.590] GetKeyState (nVirtKey=6) returned 0
[0290.590] IsWindowVisible (hWnd=0x202c6) returned 1
[0290.590] IsWindowEnabled (hWnd=0x202c6) returned 1
[0290.590] SetFocus (hWnd=0x202c6) returned 0x202c6
[0290.590] GetFocus () returned 0x202c6
[0290.590] GetFocus () returned 0x202c6
[0290.590] GetFocus () returned 0x202c6
[0290.590] GetKeyState (nVirtKey=1) returned -128
[0290.591] GetKeyState (nVirtKey=2) returned 0
[0290.591] GetKeyState (nVirtKey=4) returned 0
[0290.591] GetKeyState (nVirtKey=5) returned 0
[0290.591] GetKeyState (nVirtKey=6) returned 0
[0290.591] GetCapture () returned 0x0
[0290.591] SetCapture (hWnd=0x202c6) returned 0x0
[0290.591] GetKeyState (nVirtKey=1) returned -128
[0290.591] GetKeyState (nVirtKey=2) returned 0
[0290.591] GetKeyState (nVirtKey=4) returned 0
[0290.591] GetKeyState (nVirtKey=5) returned 0
[0290.591] GetKeyState (nVirtKey=6) returned 0
[0290.591] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0290.591] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0290.591] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0290.591] IsWindowUnicode (hWnd=0x202c6) returned 1
[0290.591] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0290.591] TranslateMessage (lpMsg=0x53eef8) returned 0
[0290.591] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0290.591] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2429858, cPoints=0x1 | out: lpPoints=0x2429858) returned 25690608
[0290.591] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0290.592] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0290.592] UpdateWindow (hWnd=0x202c6) returned 1
[0290.592] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0290.592] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0290.592] CreateCompatibleDC (hdc=0xf0105ee) returned 0x540107c3
[0290.592] SelectObject (hdc=0x540107c3, h=0x1e0507b9) returned 0x85000f
[0290.592] GdipCreateFromHDC (hdc=0x540107c3, graphics=0x53e5f0) returned 0x0
[0290.592] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0290.592] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0290.592] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0290.593] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0290.593] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0290.593] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0290.593] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0290.593] LocalFree (hMem=0x89ea88) returned 0x0
[0290.593] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0290.593] GdipCreateRegion (region=0x53e638) returned 0x0
[0290.593] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.593] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0290.593] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0290.593] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa990dbd) returned 0x0
[0290.593] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.593] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0290.593] GetCurrentObject (hdc=0x540107c3, type=0x1) returned 0xb00017
[0290.593] GetCurrentObject (hdc=0x540107c3, type=0x2) returned 0x900010
[0290.593] GetCurrentObject (hdc=0x540107c3, type=0x7) returned 0x1e0507b9
[0290.594] GetCurrentObject (hdc=0x540107c3, type=0x6) returned 0x8a01c2
[0290.594] SaveDC (hdc=0x540107c3) returned 1
[0290.594] GetNearestColor (hdc=0x540107c3, color=0xff) returned 0xff
[0290.594] GetNearestColor (hdc=0x540107c3, color=0x55) returned 0x55
[0290.594] GetNearestColor (hdc=0x540107c3, color=0x0) returned 0x0
[0290.594] GetNearestColor (hdc=0x540107c3, color=0x55) returned 0x55
[0290.594] GetNearestColor (hdc=0x540107c3, color=0x0) returned 0x0
[0290.594] GetNearestColor (hdc=0x540107c3, color=0x8080ff) returned 0x8080ff
[0290.594] GetNearestColor (hdc=0x540107c3, color=0x7373e5) returned 0x7373e5
[0290.594] GetNearestColor (hdc=0x540107c3, color=0xe5) returned 0xe5
[0290.594] GetNearestColor (hdc=0x540107c3, color=0x0) returned 0x0
[0290.594] RestoreDC (hdc=0x540107c3, nSavedDC=-1) returned 1
[0290.595] GdipReleaseDC (graphics=0x5d92c30, hdc=0x540107c3) returned 0x0
[0290.595] IsAppThemed () returned 0x1
[0290.595] GetThemeAppProperties () returned 0x3
[0290.595] GetThemeAppProperties () returned 0x3
[0290.595] IsAppThemed () returned 0x1
[0290.595] GetThemeAppProperties () returned 0x3
[0290.595] GetThemeAppProperties () returned 0x3
[0290.595] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x2429f74 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0290.595] IsAppThemed () returned 0x1
[0290.595] GetThemeAppProperties () returned 0x3
[0290.595] GetThemeAppProperties () returned 0x3
[0290.595] IsAppThemed () returned 0x1
[0290.595] GetThemeAppProperties () returned 0x3
[0290.596] GetThemeAppProperties () returned 0x3
[0290.596] IsAppThemed () returned 0x1
[0290.596] GetThemeAppProperties () returned 0x3
[0290.596] GetThemeAppProperties () returned 0x3
[0290.596] IsAppThemed () returned 0x1
[0290.596] GetThemeAppProperties () returned 0x3
[0290.596] GetThemeAppProperties () returned 0x3
[0290.596] IsThemePartDefined () returned 0x1
[0290.596] IsAppThemed () returned 0x1
[0290.596] GetThemeAppProperties () returned 0x3
[0290.596] GetThemeAppProperties () returned 0x3
[0290.596] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0290.596] IsAppThemed () returned 0x1
[0290.596] GetThemeAppProperties () returned 0x3
[0290.596] GetThemeAppProperties () returned 0x3
[0290.596] IsAppThemed () returned 0x1
[0290.596] GetThemeAppProperties () returned 0x3
[0290.596] GetThemeAppProperties () returned 0x3
[0290.596] IsThemePartDefined () returned 0x1
[0290.596] GdipCreateRegion (region=0x53e354) returned 0x0
[0290.597] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.597] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0290.597] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0290.597] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0290.597] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0290.597] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0290.597] LocalFree (hMem=0x89ec80) returned 0x0
[0290.597] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.597] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.597] LocalFree (hMem=0x89ee08) returned 0x0
[0290.597] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0290.597] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0290.597] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0290.597] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0290.597] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.597] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0290.598] GetCurrentObject (hdc=0x540107c3, type=0x1) returned 0xb00017
[0290.598] GetCurrentObject (hdc=0x540107c3, type=0x2) returned 0x900010
[0290.598] GetCurrentObject (hdc=0x540107c3, type=0x7) returned 0x1e0507b9
[0290.598] GetCurrentObject (hdc=0x540107c3, type=0x6) returned 0x8a01c2
[0290.598] SaveDC (hdc=0x540107c3) returned 1
[0290.598] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a04053e
[0290.598] GetClipRgn (hdc=0x540107c3, hrgn=0x5a04053e) returned 0
[0290.598] SelectClipRgn (hdc=0x540107c3, hrgn=0xdd04051e) returned 2
[0290.598] DeleteObject (ho=0x5a04053e) returned 1
[0290.598] DeleteObject (ho=0xdd04051e) returned 1
[0290.598] OffsetViewportOrgEx (in: hdc=0x540107c3, x=0, y=0, lppt=0x242a624 | out: lppt=0x242a624) returned 1
[0290.598] DrawThemeParentBackground () returned 0x0
[0290.598] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0290.599] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0290.599] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0290.599] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0290.599] GetSystemMetrics (nIndex=42) returned 0
[0290.599] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0290.599] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0290.599] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0290.599] GetCurrentObject (hdc=0x540107c3, type=0x1) returned 0xb00017
[0290.599] GetCurrentObject (hdc=0x540107c3, type=0x2) returned 0x900010
[0290.599] GetCurrentObject (hdc=0x540107c3, type=0x7) returned 0x1e0507b9
[0290.599] GetCurrentObject (hdc=0x540107c3, type=0x6) returned 0x8a01c2
[0290.601] SaveDC (hdc=0x540107c3) returned 2
[0290.601] GetNearestColor (hdc=0x540107c3, color=0xff) returned 0xff
[0290.601] CreateSolidBrush (color=0xff) returned 0x5710078d
[0290.601] FillRect (hDC=0x540107c3, lprc=0x53ddb8, hbr=0x5710078d) returned 1
[0290.601] DeleteObject (ho=0x5710078d) returned 1
[0290.601] RestoreDC (hdc=0x540107c3, nSavedDC=-1) returned 1
[0290.601] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0290.601] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0290.601] GetSystemMetrics (nIndex=42) returned 0
[0290.601] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0290.601] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0290.601] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0290.601] GetCurrentObject (hdc=0x540107c3, type=0x1) returned 0xb00017
[0290.601] GetCurrentObject (hdc=0x540107c3, type=0x2) returned 0x900010
[0290.602] GetCurrentObject (hdc=0x540107c3, type=0x7) returned 0x1e0507b9
[0290.602] GetCurrentObject (hdc=0x540107c3, type=0x6) returned 0x8a01c2
[0290.602] SaveDC (hdc=0x540107c3) returned 2
[0290.602] GetNearestColor (hdc=0x540107c3, color=0xff) returned 0xff
[0290.602] CreateSolidBrush (color=0xff) returned 0x5810078d
[0290.602] FillRect (hDC=0x540107c3, lprc=0x53dd58, hbr=0x5810078d) returned 1
[0290.602] DeleteObject (ho=0x5810078d) returned 1
[0290.602] RestoreDC (hdc=0x540107c3, nSavedDC=-1) returned 1
[0290.602] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0290.602] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0290.602] GetSystemMetrics (nIndex=42) returned 0
[0290.602] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0290.602] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0290.602] RestoreDC (hdc=0x540107c3, nSavedDC=-1) returned 1
[0290.603] GdipReleaseDC (graphics=0x5d92c30, hdc=0x540107c3) returned 0x0
[0290.603] IsAppThemed () returned 0x1
[0290.603] GetThemeAppProperties () returned 0x3
[0290.603] GetThemeAppProperties () returned 0x3
[0290.603] IsAppThemed () returned 0x1
[0290.603] GetThemeAppProperties () returned 0x3
[0290.603] GetThemeAppProperties () returned 0x3
[0290.603] IsThemePartDefined () returned 0x1
[0290.603] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0290.603] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.603] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0290.603] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0290.603] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0290.603] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0290.603] LocalFree (hMem=0x89ea88) returned 0x0
[0290.603] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0290.603] LocalFree (hMem=0x89ee08) returned 0x0
[0290.603] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0290.604] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0290.604] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0290.604] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0290.604] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.604] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0290.604] GetCurrentObject (hdc=0x540107c3, type=0x1) returned 0xb00017
[0290.604] GetCurrentObject (hdc=0x540107c3, type=0x2) returned 0x900010
[0290.604] GetCurrentObject (hdc=0x540107c3, type=0x7) returned 0x1e0507b9
[0290.604] GetCurrentObject (hdc=0x540107c3, type=0x6) returned 0x8a01c2
[0290.604] SaveDC (hdc=0x540107c3) returned 1
[0290.604] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xde04051e
[0290.604] GetClipRgn (hdc=0x540107c3, hrgn=0xde04051e) returned 0
[0290.604] SelectClipRgn (hdc=0x540107c3, hrgn=0x5c04053e) returned 2
[0290.604] DeleteObject (ho=0xde04051e) returned 1
[0290.604] DeleteObject (ho=0x5c04053e) returned 1
[0290.604] OffsetViewportOrgEx (in: hdc=0x540107c3, x=0, y=0, lppt=0x242ae88 | out: lppt=0x242ae88) returned 1
[0290.604] IsAppThemed () returned 0x1
[0290.604] GetThemeAppProperties () returned 0x3
[0290.605] GetThemeAppProperties () returned 0x3
[0290.605] DrawThemeBackground () returned 0x0
[0290.605] RestoreDC (hdc=0x540107c3, nSavedDC=-1) returned 1
[0290.605] GdipReleaseDC (graphics=0x5d92c30, hdc=0x540107c3) returned 0x0
[0290.605] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0290.605] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.605] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0290.605] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0290.605] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0290.605] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0290.605] LocalFree (hMem=0x89ea88) returned 0x0
[0290.605] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0290.605] LocalFree (hMem=0x89ea88) returned 0x0
[0290.605] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0290.605] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0290.605] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0290.605] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0290.605] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.605] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0290.605] GetCurrentObject (hdc=0x540107c3, type=0x1) returned 0xb00017
[0290.606] GetCurrentObject (hdc=0x540107c3, type=0x2) returned 0x900010
[0290.606] GetCurrentObject (hdc=0x540107c3, type=0x7) returned 0x1e0507b9
[0290.606] GetCurrentObject (hdc=0x540107c3, type=0x6) returned 0x8a01c2
[0290.606] SaveDC (hdc=0x540107c3) returned 1
[0290.606] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d04053e
[0290.606] GetClipRgn (hdc=0x540107c3, hrgn=0x5d04053e) returned 0
[0290.606] SelectClipRgn (hdc=0x540107c3, hrgn=0xdf04051e) returned 2
[0290.606] DeleteObject (ho=0x5d04053e) returned 1
[0290.606] DeleteObject (ho=0xdf04051e) returned 1
[0290.606] OffsetViewportOrgEx (in: hdc=0x540107c3, x=0, y=0, lppt=0x242b15c | out: lppt=0x242b15c) returned 1
[0290.606] IsAppThemed () returned 0x1
[0290.606] GetThemeAppProperties () returned 0x3
[0290.606] GetThemeAppProperties () returned 0x3
[0290.606] GetThemeBackgroundContentRect () returned 0x0
[0290.606] RestoreDC (hdc=0x540107c3, nSavedDC=-1) returned 1
[0290.606] GdipReleaseDC (graphics=0x5d92c30, hdc=0x540107c3) returned 0x0
[0290.606] IsAppThemed () returned 0x1
[0290.607] GetThemeAppProperties () returned 0x3
[0290.607] GetThemeAppProperties () returned 0x3
[0290.607] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0290.607] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0290.607] GetCurrentObject (hdc=0x540107c3, type=0x1) returned 0xb00017
[0290.607] GetCurrentObject (hdc=0x540107c3, type=0x2) returned 0x900010
[0290.607] GetCurrentObject (hdc=0x540107c3, type=0x7) returned 0x1e0507b9
[0290.607] GetCurrentObject (hdc=0x540107c3, type=0x6) returned 0x8a01c2
[0290.607] SaveDC (hdc=0x540107c3) returned 1
[0290.607] GetTextAlign (hdc=0x540107c3) returned 0x0
[0290.607] GetTextColor (hdc=0x540107c3) returned 0x0
[0290.607] GetCurrentObject (hdc=0x540107c3, type=0x6) returned 0x8a01c2
[0290.607] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0290.607] SelectObject (hdc=0x540107c3, h=0x450a0799) returned 0x8a01c2
[0290.607] GetBkMode (hdc=0x540107c3) returned 2
[0290.607] SetBkMode (hdc=0x540107c3, mode=1) returned 2
[0290.608] DrawTextExW (in: hdc=0x540107c3, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x242b4fc | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0290.608] DrawTextExW (in: hdc=0x540107c3, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x242b4fc | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0290.608] RestoreDC (hdc=0x540107c3, nSavedDC=-1) returned 1
[0290.608] GdipReleaseDC (graphics=0x5d92c30, hdc=0x540107c3) returned 0x0
[0290.608] GetFocus () returned 0x202c6
[0290.608] IsAppThemed () returned 0x1
[0290.608] GetThemeAppProperties () returned 0x3
[0290.608] GetThemeAppProperties () returned 0x3
[0290.608] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0290.609] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x540107c3, x1=0, y1=0, rop=0xcc0020) returned 1
[0290.609] GdipReleaseDC (graphics=0x5d92c30, hdc=0x540107c3) returned 0x0
[0290.609] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0290.609] SelectObject (hdc=0x540107c3, h=0x85000f) returned 0x1e0507b9
[0290.609] DeleteDC (hdc=0x540107c3) returned 1
[0290.609] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0290.609] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0290.609] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x242b5f8, cPoints=0x1 | out: lpPoints=0x242b5f8) returned 25690608
[0290.610] WindowFromPoint (Point=0x25a) returned 0x202c6
[0290.610] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x197025a) returned 0x1
[0290.610] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0290.610] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0290.610] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.611] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0290.612] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.612] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0290.612] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.612] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0290.612] GetDC (hWnd=0x0) returned 0x10105d6
[0290.613] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e888) returned 0x0
[0290.613] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0290.613] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0290.613] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0290.613] GetSystemMetrics (nIndex=5) returned 1
[0290.613] GetSystemMetrics (nIndex=6) returned 1
[0290.614] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.614] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0290.614] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.614] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0290.677] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.678] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0290.679] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.679] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0290.679] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.679] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0290.679] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.680] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0290.680] GetSystemMetrics (nIndex=5) returned 1
[0290.680] GetSystemMetrics (nIndex=6) returned 1
[0290.680] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.680] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0290.680] GetSystemMetrics (nIndex=5) returned 1
[0290.680] GetSystemMetrics (nIndex=6) returned 1
[0290.680] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.680] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0290.681] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.681] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0290.681] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.681] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0290.681] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.682] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0290.682] GetSystemMetrics (nIndex=59) returned 1460
[0290.682] GetSystemMetrics (nIndex=60) returned 920
[0290.682] GetSystemMetrics (nIndex=34) returned 136
[0290.682] GetSystemMetrics (nIndex=35) returned 39
[0290.682] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.682] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0290.682] GetCurrentThreadId () returned 0x11d0
[0290.682] GetCurrentThreadId () returned 0x11d0
[0290.682] GetCurrentThreadId () returned 0x11d0
[0290.682] GetCurrentThreadId () returned 0x11d0
[0290.682] GetCurrentThreadId () returned 0x11d0
[0290.682] GetCurrentThreadId () returned 0x11d0
[0290.682] GetCurrentThreadId () returned 0x11d0
[0290.682] GetCurrentThreadId () returned 0x11d0
[0290.683] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.683] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0290.683] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0290.683] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0290.683] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.683] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0290.683] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.684] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0290.684] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1b02ca
[0290.684] SetWindowLongW (hWnd=0x1b02ca, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0290.685] GetWindowLongW (hWnd=0x1b02ca, nIndex=-4) returned 1950089536
[0290.686] SetWindowLongW (hWnd=0x1b02ca, nIndex=-4, dwNewLong=79651390) returned 1950089536
[0290.686] GetWindowLongW (hWnd=0x1b02ca, nIndex=-4) returned 79651390
[0290.686] GetWindowLongW (hWnd=0x1b02ca, nIndex=-16) returned 113311744
[0290.686] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1b02ca, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0290.687] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1b02ca, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0290.687] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1b02ca, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0290.688] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1b02ca, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0290.688] GetClientRect (in: hWnd=0x1b02ca, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0290.688] GetWindowRect (in: hWnd=0x1b02ca, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0290.688] SetWindowTextW (hWnd=0x1b02ca, lpString="WindowsFormsParkingWindow") returned 1
[0290.688] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1b02ca, Msg=0xc, wParam=0x0, lParam=0x2423544) returned 0x1
[0290.689] GetParent (hWnd=0x1b02ca) returned 0x0
[0290.689] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0290.689] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1b02ca, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1d01e2
[0290.690] SetWindowLongW (hWnd=0x1d01e2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0290.690] GetWindowLongW (hWnd=0x1d01e2, nIndex=-4) returned 1868147648
[0290.690] SetWindowLongW (hWnd=0x1d01e2, nIndex=-4, dwNewLong=79651350) returned 1868147648
[0290.690] GetWindowLongW (hWnd=0x1d01e2, nIndex=-4) returned 79651350
[0290.690] GetWindowLongW (hWnd=0x1d01e2, nIndex=-16) returned 1174405133
[0290.690] GetWindowLongW (hWnd=0x1d01e2, nIndex=-12) returned 0
[0290.690] SetWindowLongW (hWnd=0x1d01e2, nIndex=-12, dwNewLong=1901026) returned 0
[0290.690] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0290.691] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0290.691] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0290.692] GetClientRect (in: hWnd=0x1d01e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0290.692] GetWindowRect (in: hWnd=0x1d01e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0290.692] GetParent (hWnd=0x1d01e2) returned 0x1b02ca
[0290.692] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1b02ca, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0290.692] SetWindowTextW (hWnd=0x1d01e2, lpString="Enter password: ") returned 1
[0290.692] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0290.693] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0290.693] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0290.693] GetClientRect (in: hWnd=0x1d01e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0290.693] GetWindowRect (in: hWnd=0x1d01e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0290.693] GetParent (hWnd=0x1d01e2) returned 0x1b02ca
[0290.693] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1b02ca, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0290.693] SendMessageW (hWnd=0x1d01e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1d01e2) returned 0x0
[0290.693] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1d01e2) returned 0x0
[0290.694] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0290.694] GetParent (hWnd=0x1d01e2) returned 0x1b02ca
[0290.694] GdipCreateFromHWND (hwnd=0x1d01e2, graphics=0x53e994) returned 0x0
[0290.694] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0290.694] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0290.694] GetProcessWindowStation () returned 0x13c
[0290.694] GetCapture () returned 0x202c6
[0290.694] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0290.694] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0290.695] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0290.695] ReleaseCapture () returned 1
[0290.695] GetActiveWindow () returned 0x70036
[0290.695] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0290.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.696] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0290.696] GetCursorPos (in: lpPoint=0x24383a8 | out: lpPoint=0x24383a8*(x=602, y=407)) returned 1
[0290.696] MonitorFromPoint (pt=0x25a, dwFlags=0x197) returned 0x10001
[0290.696] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0290.696] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x580107c3
[0290.696] GetDeviceCaps (hdc=0x580107c3, index=12) returned 32
[0290.696] GetDeviceCaps (hdc=0x580107c3, index=14) returned 1
[0290.696] DeleteDC (hdc=0x580107c3) returned 1
[0290.696] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0290.697] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0290.697] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2200ea
[0290.697] SetWindowLongW (hWnd=0x2200ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0290.697] GetWindowLongW (hWnd=0x2200ea, nIndex=-4) returned 1950089536
[0290.698] SetWindowLongW (hWnd=0x2200ea, nIndex=-4, dwNewLong=79651110) returned 1950089536
[0290.698] GetWindowLongW (hWnd=0x2200ea, nIndex=-4) returned 79651110
[0290.698] GetWindowLongW (hWnd=0x2200ea, nIndex=-16) returned 113770496
[0290.698] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0290.699] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0290.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0290.700] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0290.700] GetWindowRect (in: hWnd=0x2200ea, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0290.700] SetWindowTextW (hWnd=0x2200ea, lpString="Ransomware") returned 1
[0290.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xc, wParam=0x0, lParam=0x242b6c0) returned 0x1
[0290.701] GetStartupInfoW (in: lpStartupInfo=0x24386e4 | out: lpStartupInfo=0x24386e4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0290.702] GetParent (hWnd=0x2200ea) returned 0x0
[0290.702] SetWindowLongW (hWnd=0x2200ea, nIndex=-8, dwNewLong=0) returned 0
[0290.703] SendMessageW (hWnd=0x2200ea, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0290.703] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0290.703] SendMessageW (hWnd=0x2200ea, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0290.703] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0290.704] GetSystemMenu (hWnd=0x2200ea, bRevert=0) returned 0x194020b
[0290.704] GetWindowPlacement (in: hWnd=0x2200ea, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0290.704] EnableMenuItem (hMenu=0x194020b, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0290.704] EnableMenuItem (hMenu=0x194020b, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0290.704] EnableMenuItem (hMenu=0x194020b, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0290.704] EnableMenuItem (hMenu=0x194020b, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0290.705] EnableMenuItem (hMenu=0x194020b, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0290.705] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0290.705] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0290.705] GetWindowRect (in: hWnd=0x2200ea, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0290.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.705] GetWindowLongW (hWnd=0x2200ea, nIndex=-16) returned 113770496
[0290.705] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.705] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.705] GetSystemMetrics (nIndex=42) returned 0
[0290.705] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.705] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0290.706] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.706] GetSystemMetrics (nIndex=42) returned 0
[0290.706] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0290.706] GetCursorPos (in: lpPoint=0x2438858 | out: lpPoint=0x2438858*(x=602, y=407)) returned 1
[0290.706] MonitorFromPoint (pt=0x25a, dwFlags=0x197) returned 0x10001
[0290.706] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0290.706] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x5c0107c3
[0290.706] GetDeviceCaps (hdc=0x5c0107c3, index=12) returned 32
[0290.706] GetDeviceCaps (hdc=0x5c0107c3, index=14) returned 1
[0290.707] DeleteDC (hdc=0x5c0107c3) returned 1
[0290.707] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0290.707] GetWindowLongW (hWnd=0x2200ea, nIndex=-16) returned 113770496
[0290.707] GetWindowLongW (hWnd=0x2200ea, nIndex=-20) returned 327937
[0290.707] SetWindowLongW (hWnd=0x2200ea, nIndex=-16, dwNewLong=46661632) returned 113770496
[0290.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0290.707] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0290.708] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0290.708] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0290.708] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0290.709] SetWindowLongW (hWnd=0x2200ea, nIndex=-20, dwNewLong=327681) returned 327937
[0290.709] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0290.709] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0290.710] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0290.710] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0290.710] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0290.711] SetWindowPos (hWnd=0x2200ea, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0290.711] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0290.711] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0290.711] GetWindowPlacement (in: hWnd=0x2200ea, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0290.712] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0290.712] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0290.712] GetWindowRect (in: hWnd=0x2200ea, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0290.712] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0290.712] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0290.713] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0290.713] RedrawWindow (hWnd=0x2200ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0290.713] GetSystemMenu (hWnd=0x2200ea, bRevert=0) returned 0x194020b
[0290.713] GetWindowPlacement (in: hWnd=0x2200ea, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0290.713] EnableMenuItem (hMenu=0x194020b, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0290.713] EnableMenuItem (hMenu=0x194020b, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0290.713] EnableMenuItem (hMenu=0x194020b, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0290.714] EnableMenuItem (hMenu=0x194020b, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0290.714] EnableMenuItem (hMenu=0x194020b, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0290.714] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0290.714] GetWindowLongW (hWnd=0x2200ea, nIndex=-8) returned 0
[0290.714] SetWindowLongW (hWnd=0x2200ea, nIndex=-8, dwNewLong=458806) returned 0
[0290.715] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0290.715] GetProcessWindowStation () returned 0x13c
[0290.715] GetCurrentThreadId () returned 0x11d0
[0290.715] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf614e, lParam=0x0) returned 1
[0290.715] IsWindowVisible (hWnd=0x2200ea) returned 0
[0290.715] IsWindowVisible (hWnd=0x70036) returned 1
[0290.716] IsWindowEnabled (hWnd=0x70036) returned 1
[0290.716] IsWindowVisible (hWnd=0x602b6) returned 0
[0290.716] IsWindowVisible (hWnd=0x901f8) returned 0
[0290.716] IsWindowVisible (hWnd=0x202d0) returned 0
[0290.716] IsWindowVisible (hWnd=0x202d4) returned 0
[0290.716] GetActiveWindow () returned 0x70036
[0290.716] GetFocus () returned 0x202c6
[0290.716] IsWindow (hWnd=0x70036) returned 1
[0290.716] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0290.716] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0290.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0290.717] GetWindowLongW (hWnd=0x2200ea, nIndex=-8) returned 458806
[0290.717] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0290.717] GetCurrentThreadId () returned 0x11d0
[0290.717] GetWindowLongW (hWnd=0x2200ea, nIndex=-8) returned 458806
[0290.717] IsWindowEnabled (hWnd=0x70036) returned 0
[0290.717] IsWindowEnabled (hWnd=0x2200ea) returned 1
[0290.717] ShowWindow (hWnd=0x2200ea, nCmdShow=5) returned 0
[0290.717] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0290.717] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0290.718] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.718] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0290.718] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x2200ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1d0122
[0290.719] SetWindowLongW (hWnd=0x1d0122, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0290.719] GetWindowLongW (hWnd=0x1d0122, nIndex=-4) returned 1868026976
[0290.719] SetWindowLongW (hWnd=0x1d0122, nIndex=-4, dwNewLong=79651470) returned 1868026976
[0290.719] GetWindowLongW (hWnd=0x1d0122, nIndex=-4) returned 79651470
[0290.719] GetWindowLongW (hWnd=0x1d0122, nIndex=-16) returned 1174470848
[0290.720] GetWindowLongW (hWnd=0x1d0122, nIndex=-12) returned 0
[0290.720] SetWindowLongW (hWnd=0x1d0122, nIndex=-12, dwNewLong=1900834) returned 0
[0290.720] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0290.721] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0290.721] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0290.722] SendMessageW (hWnd=0x1d0122, Msg=0x2055, wParam=0x1d0122, lParam=0x3) returned 0x2
[0290.722] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0290.722] GetWindow (hWnd=0x1d0122, uCmd=0x3) returned 0x0
[0290.722] GetClientRect (in: hWnd=0x1d0122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0290.722] GetWindowRect (in: hWnd=0x1d0122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0290.722] GetParent (hWnd=0x1d0122) returned 0x2200ea
[0290.722] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2200ea, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0290.722] SendMessageW (hWnd=0x1d0122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0290.722] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0290.723] SendMessageW (hWnd=0x1d0122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0290.723] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0290.723] GetSystemMetrics (nIndex=5) returned 1
[0290.723] GetSystemMetrics (nIndex=6) returned 1
[0290.723] SendMessageW (hWnd=0x1d0122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0290.723] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0290.723] SendMessageW (hWnd=0x1d0122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0290.723] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0290.724] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0290.724] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0290.724] GetClientRect (in: hWnd=0x1d0122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0290.724] GetWindowRect (in: hWnd=0x1d0122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0290.724] GetParent (hWnd=0x1d0122) returned 0x2200ea
[0290.724] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2200ea, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0290.724] SendMessageW (hWnd=0x1d0122, Msg=0x2210, wParam=0x1220001, lParam=0x1d0122) returned 0x0
[0290.724] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x2210, wParam=0x1220001, lParam=0x1d0122) returned 0x0
[0290.724] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0290.725] GetParent (hWnd=0x1d0122) returned 0x2200ea
[0290.725] GetParent (hWnd=0x1d01e2) returned 0x1b02ca
[0290.725] SetParent (hWndChild=0x1d01e2, hWndNewParent=0x2200ea) returned 0x1b02ca
[0290.725] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0290.726] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0290.726] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0290.726] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0290.726] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0290.726] GetClientRect (in: hWnd=0x1d01e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0290.726] GetWindowRect (in: hWnd=0x1d01e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0290.726] GetParent (hWnd=0x1d01e2) returned 0x2200ea
[0290.726] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2200ea, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0290.726] GetClientRect (in: hWnd=0x1d01e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0290.726] GetWindowRect (in: hWnd=0x1d01e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0290.726] GetParent (hWnd=0x1d01e2) returned 0x2200ea
[0290.726] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2200ea, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0290.726] GetParent (hWnd=0x1d01e2) returned 0x2200ea
[0290.727] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0290.727] GetWindow (hWnd=0x1d01e2, uCmd=0x3) returned 0x0
[0290.727] SetWindowPos (hWnd=0x1d01e2, hWndInsertAfter=0x1d0122, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0290.727] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0290.728] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0290.728] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0290.728] GetClientRect (in: hWnd=0x1d01e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0290.728] GetWindowRect (in: hWnd=0x1d01e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0290.728] GetParent (hWnd=0x1d01e2) returned 0x2200ea
[0290.728] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2200ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0290.728] GetParent (hWnd=0x1d01e2) returned 0x2200ea
[0290.728] GetWindow (hWnd=0x1d01e2, uCmd=0x3) returned 0x1d0122
[0290.728] GetWindowThreadProcessId (in: hWnd=0x1d01e2, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0290.728] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0290.728] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.729] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0290.729] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x2200ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x19004e
[0290.729] SetWindowLongW (hWnd=0x19004e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0290.730] GetWindowLongW (hWnd=0x19004e, nIndex=-4) returned 1868032000
[0290.730] SetWindowLongW (hWnd=0x19004e, nIndex=-4, dwNewLong=79651550) returned 1868032000
[0290.730] GetWindowLongW (hWnd=0x19004e, nIndex=-4) returned 79651550
[0290.730] GetWindowLongW (hWnd=0x19004e, nIndex=-16) returned 1174470667
[0290.730] GetWindowLongW (hWnd=0x19004e, nIndex=-12) returned 0
[0290.730] SetWindowLongW (hWnd=0x19004e, nIndex=-12, dwNewLong=1638478) returned 0
[0290.730] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0290.731] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0290.731] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0290.732] SendMessageW (hWnd=0x19004e, Msg=0x2055, wParam=0x19004e, lParam=0x3) returned 0x2
[0290.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0290.732] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0290.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0290.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0290.733] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0290.733] RedrawWindow (hWnd=0x1d0122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0290.733] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0290.733] RedrawWindow (hWnd=0x1d01e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0290.733] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0290.733] RedrawWindow (hWnd=0x19004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0290.733] RedrawWindow (hWnd=0x2200ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0290.733] GetWindow (hWnd=0x19004e, uCmd=0x3) returned 0x1d01e2
[0290.733] GetClientRect (in: hWnd=0x19004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0290.734] GetWindowRect (in: hWnd=0x19004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0290.734] GetParent (hWnd=0x19004e) returned 0x2200ea
[0290.734] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2200ea, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0290.734] SetWindowTextW (hWnd=0x19004e, lpString="OK") returned 1
[0290.734] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0xc, wParam=0x0, lParam=0x242fb80) returned 0x1
[0290.734] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0290.735] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0290.735] GetClientRect (in: hWnd=0x19004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0290.735] GetWindowRect (in: hWnd=0x19004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0290.735] GetParent (hWnd=0x19004e) returned 0x2200ea
[0290.735] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2200ea, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0290.735] SendMessageW (hWnd=0x19004e, Msg=0x2210, wParam=0x4e0001, lParam=0x19004e) returned 0x0
[0290.735] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x2210, wParam=0x4e0001, lParam=0x19004e) returned 0x0
[0290.735] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0290.735] GetParent (hWnd=0x19004e) returned 0x2200ea
[0290.735] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0290.736] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.736] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0290.736] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x2200ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x3c013e
[0290.737] SetWindowLongW (hWnd=0x3c013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0290.737] GetWindowLongW (hWnd=0x3c013e, nIndex=-4) returned 1868032000
[0290.737] SetWindowLongW (hWnd=0x3c013e, nIndex=-4, dwNewLong=79651670) returned 1868032000
[0290.737] GetWindowLongW (hWnd=0x3c013e, nIndex=-4) returned 79651670
[0290.737] GetWindowLongW (hWnd=0x3c013e, nIndex=-16) returned 1174470667
[0290.737] GetWindowLongW (hWnd=0x3c013e, nIndex=-12) returned 0
[0290.737] SetWindowLongW (hWnd=0x3c013e, nIndex=-12, dwNewLong=3932478) returned 0
[0290.737] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0290.738] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0290.738] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0290.739] SendMessageW (hWnd=0x3c013e, Msg=0x2055, wParam=0x3c013e, lParam=0x3) returned 0x2
[0290.739] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0290.739] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0290.739] GetWindow (hWnd=0x3c013e, uCmd=0x3) returned 0x19004e
[0290.740] GetClientRect (in: hWnd=0x3c013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0290.740] GetWindowRect (in: hWnd=0x3c013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0290.740] GetParent (hWnd=0x3c013e) returned 0x2200ea
[0290.740] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2200ea, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0290.741] SetWindowTextW (hWnd=0x3c013e, lpString="Cancel") returned 1
[0290.741] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0xc, wParam=0x0, lParam=0x2433440) returned 0x1
[0290.741] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0290.741] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0290.741] GetClientRect (in: hWnd=0x3c013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0290.741] GetWindowRect (in: hWnd=0x3c013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0290.741] GetParent (hWnd=0x3c013e) returned 0x2200ea
[0290.741] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2200ea, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0290.742] SendMessageW (hWnd=0x3c013e, Msg=0x2210, wParam=0x13e0001, lParam=0x3c013e) returned 0x0
[0290.742] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0x2210, wParam=0x13e0001, lParam=0x3c013e) returned 0x0
[0290.742] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0290.742] GetParent (hWnd=0x3c013e) returned 0x2200ea
[0290.742] GetDC (hWnd=0x0) returned 0x60100ce
[0290.743] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e320) returned 0x0
[0290.743] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0290.743] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0290.743] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0290.743] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0290.744] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0290.744] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0290.744] GetWindowLongW (hWnd=0x2200ea, nIndex=-8) returned 458806
[0290.744] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0290.744] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0290.744] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x630107c3
[0290.744] GetDeviceCaps (hdc=0x630107c3, index=12) returned 32
[0290.744] GetDeviceCaps (hdc=0x630107c3, index=14) returned 1
[0290.744] DeleteDC (hdc=0x630107c3) returned 1
[0290.744] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0290.745] GetWindowThreadProcessId (in: hWnd=0x2200ea, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0290.745] GetCurrentThreadId () returned 0x11d0
[0290.745] PostMessageW (hWnd=0x2200ea, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0290.745] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.745] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.745] GetSystemMetrics (nIndex=42) returned 0
[0290.745] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.745] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0290.745] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0290.745] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0290.746] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0290.746] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0290.755] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x2200ea) returned 0x1
[0290.757] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0290.758] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0290.758] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0290.758] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0290.760] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0290.761] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0290.761] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0290.762] GetFocus () returned 0x202c6
[0290.762] IsChild (hWndParent=0x2200ea, hWnd=0x202c6) returned 0
[0290.762] GetFocus () returned 0x202c6
[0290.762] SetFocus (hWnd=0x1d0122) returned 0x202c6
[0290.763] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1d0122, lParam=0x0) returned 0x0
[0290.763] GetCapture () returned 0x0
[0290.763] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0290.764] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0290.768] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0290.769] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0290.769] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0290.770] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0290.770] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0290.770] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0290.770] GetParent (hWnd=0x2200ea) returned 0x0
[0290.770] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0290.775] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0290.775] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0290.776] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0290.776] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0290.776] GetSysColorBrush (nIndex=5) returned 0x100079
[0290.777] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0290.777] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0290.778] SendMessageW (hWnd=0x1d0122, Msg=0x2111, wParam=0x1000122, lParam=0x1d0122) returned 0x0
[0290.778] SendMessageW (hWnd=0x1d0122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0290.778] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0290.778] GetKeyState (nVirtKey=1) returned 0
[0290.778] GetKeyState (nVirtKey=2) returned 0
[0290.778] GetKeyState (nVirtKey=4) returned 0
[0290.779] GetKeyState (nVirtKey=5) returned 0
[0290.779] GetKeyState (nVirtKey=6) returned 0
[0290.779] GetWindowTextLengthW (hWnd=0x1d0122) returned 0
[0290.779] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0290.779] SendMessageW (hWnd=0x1d0122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0290.779] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0290.779] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0290.779] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0290.784] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0290.785] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0290.785] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0290.786] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0290.786] GetWindowPlacement (in: hWnd=0x2200ea, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0290.786] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0290.786] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.786] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.786] GetSystemMetrics (nIndex=42) returned 0
[0290.786] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.786] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0290.787] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0290.797] GetCurrentObject (hdc=0x8b010786, type=0x1) returned 0xb00017
[0290.797] GetCurrentObject (hdc=0x8b010786, type=0x2) returned 0x900010
[0290.797] GetCurrentObject (hdc=0x8b010786, type=0x7) returned 0xffffffff800507af
[0290.797] GetCurrentObject (hdc=0x8b010786, type=0x6) returned 0x8a01c2
[0290.797] SaveDC (hdc=0x8b010786) returned 1
[0290.797] GetNearestColor (hdc=0x8b010786, color=0xf0f0f0) returned 0xf0f0f0
[0290.797] CreateSolidBrush (color=0xf0f0f0) returned 0x5910078d
[0290.797] FillRect (hDC=0x8b010786, lprc=0x53e250, hbr=0x5910078d) returned 1
[0290.798] DeleteObject (ho=0x5910078d) returned 1
[0290.798] RestoreDC (hdc=0x8b010786, nSavedDC=-1) returned 1
[0290.798] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0290.798] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0290.798] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0290.799] GetWindowPlacement (in: hWnd=0x2200ea, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0290.799] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0290.799] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.799] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.799] GetSystemMetrics (nIndex=42) returned 0
[0290.799] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.799] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0290.799] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0290.799] GetCurrentObject (hdc=0x790107c3, type=0x1) returned 0xb00017
[0290.800] GetCurrentObject (hdc=0x790107c3, type=0x2) returned 0x900010
[0290.800] GetCurrentObject (hdc=0x790107c3, type=0x7) returned 0xfffffffff5050790
[0290.800] GetCurrentObject (hdc=0x790107c3, type=0x6) returned 0x8a01c2
[0290.800] SaveDC (hdc=0x790107c3) returned 1
[0290.800] GetNearestColor (hdc=0x790107c3, color=0xf0f0f0) returned 0xf0f0f0
[0290.800] CreateSolidBrush (color=0xf0f0f0) returned 0x5a10078d
[0290.800] FillRect (hDC=0x790107c3, lprc=0x53dc18, hbr=0x5a10078d) returned 1
[0290.800] DeleteObject (ho=0x5a10078d) returned 1
[0290.800] RestoreDC (hdc=0x790107c3, nSavedDC=-1) returned 1
[0290.800] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.800] GetSystemMetrics (nIndex=42) returned 0
[0290.800] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0290.800] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0290.801] GetCurrentObject (hdc=0x790107c3, type=0x1) returned 0xb00017
[0290.801] GetCurrentObject (hdc=0x790107c3, type=0x2) returned 0x900010
[0290.801] GetCurrentObject (hdc=0x790107c3, type=0x7) returned 0xfffffffff5050790
[0290.801] GetCurrentObject (hdc=0x790107c3, type=0x6) returned 0x8a01c2
[0290.801] SaveDC (hdc=0x790107c3) returned 1
[0290.801] GetNearestColor (hdc=0x790107c3, color=0xf0f0f0) returned 0xf0f0f0
[0290.801] CreateSolidBrush (color=0xf0f0f0) returned 0x5b10078d
[0290.801] FillRect (hDC=0x790107c3, lprc=0x53dbb8, hbr=0x5b10078d) returned 1
[0290.801] DeleteObject (ho=0x5b10078d) returned 1
[0290.801] RestoreDC (hdc=0x790107c3, nSavedDC=-1) returned 1
[0290.801] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.801] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.801] GetSystemMetrics (nIndex=42) returned 0
[0290.801] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.801] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0290.803] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0290.803] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0290.803] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0290.803] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0290.803] GetStockObject (i=5) returned 0x900015
[0290.804] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0290.804] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0290.804] GetStockObject (i=5) returned 0x900015
[0290.804] GetWindowPlacement (in: hWnd=0x2200ea, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0290.804] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0290.804] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0290.804] GetWindowRect (in: hWnd=0x2200ea, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0290.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0290.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0290.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0290.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0290.806] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0290.806] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0290.807] GetWindowRect (in: hWnd=0x2200ea, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0290.807] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.807] IsWindowUnicode (hWnd=0x2200ea) returned 1
[0290.807] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.807] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.807] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.807] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0290.807] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.807] IsWindowUnicode (hWnd=0x2200ea) returned 1
[0290.807] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.807] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.807] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.807] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.808] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x84, wParam=0x0, lParam=0x192034f) returned 0x1
[0290.808] IsWindowUnicode (hWnd=0x19004e) returned 1
[0290.808] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.808] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.808] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.808] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.808] IsWindowUnicode (hWnd=0x202c6) returned 1
[0290.808] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.809] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.809] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.809] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0290.809] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0290.809] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.809] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x84, wParam=0x0, lParam=0x192034f) returned 0x1
[0290.809] IsWindowUnicode (hWnd=0x19004e) returned 1
[0290.809] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.809] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x84, wParam=0x0, lParam=0x192034f) returned 0x1
[0290.809] SetCursor (hCursor=0x10003) returned 0x10003
[0290.809] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.809] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.809] _TrackMouseEvent (in: lpEventTrack=0x2439dd4 | out: lpEventTrack=0x2439dd4) returned 1
[0290.810] SendMessageW (hWnd=0x19004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0290.810] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0290.810] InvalidateRect (hWnd=0x19004e, lpRect=0x0, bErase=0) returned 1
[0290.810] GetKeyState (nVirtKey=1) returned 0
[0290.810] GetKeyState (nVirtKey=2) returned 0
[0290.810] GetKeyState (nVirtKey=4) returned 0
[0290.810] GetKeyState (nVirtKey=5) returned 0
[0290.810] GetKeyState (nVirtKey=6) returned 0
[0290.810] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.810] IsWindowUnicode (hWnd=0x19004e) returned 1
[0290.810] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.810] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.810] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.810] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0290.810] InvalidateRect (hWnd=0x19004e, lpRect=0x0, bErase=0) returned 1
[0290.810] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.811] IsWindowUnicode (hWnd=0x2200ea) returned 1
[0290.811] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.811] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.811] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.811] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.812] IsWindowUnicode (hWnd=0x2200ea) returned 1
[0290.812] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.812] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.812] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.812] BeginPaint (in: hWnd=0x2200ea, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x10105d6
[0290.812] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0290.812] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.813] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.813] GetSystemMetrics (nIndex=42) returned 0
[0290.813] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.813] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0290.813] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0290.813] EndPaint (hWnd=0x2200ea, lpPaint=0x53e30c) returned 1
[0290.813] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.813] IsWindowUnicode (hWnd=0x1d0122) returned 1
[0290.813] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.813] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.813] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0290.813] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0290.814] SetTextColor (hdc=0x7a0107c3, color=0x0) returned 0x0
[0290.814] SetBkColor (hdc=0x7a0107c3, color=0xffffff) returned 0xffffff
[0290.815] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.815] IsWindowUnicode (hWnd=0x1d01e2) returned 1
[0290.815] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.815] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.815] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.815] BeginPaint (in: hWnd=0x1d01e2, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0xf0105ee
[0290.816] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0290.816] CreateCompatibleDC (hdc=0xf0105ee) returned 0xe301065f
[0290.816] SelectObject (hdc=0xe301065f, h=0x1e0507b9) returned 0x85000f
[0290.816] GdipCreateFromHDC (hdc=0xe301065f, graphics=0x53e30c) returned 0x0
[0290.816] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0290.816] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0290.816] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0290.816] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0290.816] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0290.816] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.816] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0290.817] LocalFree (hMem=0x89ee08) returned 0x0
[0290.817] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0290.817] GdipCreateRegion (region=0x53e354) returned 0x0
[0290.817] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.817] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0290.817] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0290.817] GetWindowTextLengthW (hWnd=0x1d01e2) returned 16
[0290.817] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0290.817] GetSystemMetrics (nIndex=42) returned 0
[0290.817] GetWindowTextW (in: hWnd=0x1d01e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0290.817] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0290.817] GetClientRect (in: hWnd=0x1d01e2, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0290.817] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0290.817] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0290.817] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0290.817] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0290.817] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0290.817] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.818] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.818] LocalFree (hMem=0x89ee08) returned 0x0
[0290.818] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0290.818] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.818] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.818] LocalFree (hMem=0x89ee08) returned 0x0
[0290.818] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0290.860] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0290.860] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0290.860] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0290.860] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0290.860] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0290.860] GetCurrentObject (hdc=0xe301065f, type=0x1) returned 0xb00017
[0290.860] GetCurrentObject (hdc=0xe301065f, type=0x2) returned 0x900010
[0290.860] GetCurrentObject (hdc=0xe301065f, type=0x7) returned 0x1e0507b9
[0290.860] GetCurrentObject (hdc=0xe301065f, type=0x6) returned 0x8a01c2
[0290.860] SaveDC (hdc=0xe301065f) returned 1
[0290.860] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x10407a1
[0290.860] GetClipRgn (hdc=0xe301065f, hrgn=0x10407a1) returned 0
[0290.860] SelectClipRgn (hdc=0xe301065f, hrgn=0xe404051e) returned 2
[0290.861] DeleteObject (ho=0x10407a1) returned 1
[0290.861] DeleteObject (ho=0xe404051e) returned 1
[0290.861] OffsetViewportOrgEx (in: hdc=0xe301065f, x=0, y=0, lppt=0x243a300 | out: lppt=0x243a300) returned 1
[0290.861] GetNearestColor (hdc=0xe301065f, color=0xf0f0f0) returned 0xf0f0f0
[0290.861] CreateSolidBrush (color=0xf0f0f0) returned 0x5c10078d
[0290.861] FillRect (hDC=0xe301065f, lprc=0x53e1f4, hbr=0x5c10078d) returned 1
[0290.861] DeleteObject (ho=0x5c10078d) returned 1
[0290.861] RestoreDC (hdc=0xe301065f, nSavedDC=-1) returned 1
[0290.861] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe301065f) returned 0x0
[0290.861] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa930dbd) returned 0x0
[0290.861] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.861] GetWindowTextLengthW (hWnd=0x1d01e2) returned 16
[0290.861] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0290.861] GetSystemMetrics (nIndex=42) returned 0
[0290.862] GetWindowTextW (in: hWnd=0x1d01e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0290.862] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0290.862] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0290.862] GetCurrentObject (hdc=0xe301065f, type=0x1) returned 0xb00017
[0290.862] GetCurrentObject (hdc=0xe301065f, type=0x2) returned 0x900010
[0290.862] GetCurrentObject (hdc=0xe301065f, type=0x7) returned 0x1e0507b9
[0290.862] GetCurrentObject (hdc=0xe301065f, type=0x6) returned 0x8a01c2
[0290.862] SaveDC (hdc=0xe301065f) returned 1
[0290.862] GetNearestColor (hdc=0xe301065f, color=0x0) returned 0x0
[0290.862] RestoreDC (hdc=0xe301065f, nSavedDC=-1) returned 1
[0290.862] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe301065f) returned 0x0
[0290.863] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0290.863] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0290.863] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0290.863] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x243a608 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0290.863] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0290.863] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0290.863] GetCurrentObject (hdc=0xe301065f, type=0x1) returned 0xb00017
[0290.864] GetCurrentObject (hdc=0xe301065f, type=0x2) returned 0x900010
[0290.864] GetCurrentObject (hdc=0xe301065f, type=0x7) returned 0x1e0507b9
[0290.864] GetCurrentObject (hdc=0xe301065f, type=0x6) returned 0x8a01c2
[0290.864] SaveDC (hdc=0xe301065f) returned 1
[0290.864] GetTextAlign (hdc=0xe301065f) returned 0x0
[0290.864] GetTextColor (hdc=0xe301065f) returned 0x0
[0290.864] GetCurrentObject (hdc=0xe301065f, type=0x6) returned 0x8a01c2
[0290.864] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0290.864] SelectObject (hdc=0xe301065f, h=0x730a066d) returned 0x8a01c2
[0290.864] GetBkMode (hdc=0xe301065f) returned 2
[0290.864] SetBkMode (hdc=0xe301065f, mode=1) returned 2
[0290.864] DrawTextExW (in: hdc=0xe301065f, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x243a82c | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0290.870] RestoreDC (hdc=0xe301065f, nSavedDC=-1) returned 1
[0290.870] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe301065f) returned 0x0
[0290.870] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0290.870] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=250, cy=70, hdcSrc=0xe301065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0290.870] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe301065f) returned 0x0
[0290.870] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0290.870] SelectObject (hdc=0xe301065f, h=0x85000f) returned 0x1e0507b9
[0290.870] DeleteDC (hdc=0xe301065f) returned 1
[0290.870] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0290.870] EndPaint (hWnd=0x1d01e2, lpPaint=0x53e2f0) returned 1
[0290.871] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.871] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0290.871] IsWindowUnicode (hWnd=0x102dc) returned 1
[0290.871] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.872] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0290.872] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.872] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.873] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.873] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0290.874] IsWindowUnicode (hWnd=0x102dc) returned 1
[0290.874] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.874] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.874] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.874] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.875] IsWindowUnicode (hWnd=0x19004e) returned 1
[0290.875] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.875] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.875] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.875] BeginPaint (in: hWnd=0x19004e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0290.875] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0290.876] CreateCompatibleDC (hdc=0x8b010786) returned 0xe501065f
[0290.876] SelectObject (hdc=0xe501065f, h=0x1e0507b9) returned 0x85000f
[0290.876] GdipCreateFromHDC (hdc=0xe501065f, graphics=0x53e300) returned 0x0
[0290.876] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0290.876] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0290.876] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0290.876] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0290.876] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0290.876] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0290.876] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0290.876] LocalFree (hMem=0x89ea88) returned 0x0
[0290.876] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0290.876] GdipCreateRegion (region=0x53e348) returned 0x0
[0290.877] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.877] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0290.877] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0290.877] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa910dbd) returned 0x0
[0290.877] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.877] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0290.877] GetCurrentObject (hdc=0xe501065f, type=0x1) returned 0xb00017
[0290.877] GetCurrentObject (hdc=0xe501065f, type=0x2) returned 0x900010
[0290.877] GetCurrentObject (hdc=0xe501065f, type=0x7) returned 0x1e0507b9
[0290.877] GetCurrentObject (hdc=0xe501065f, type=0x6) returned 0x8a01c2
[0290.877] SaveDC (hdc=0xe501065f) returned 1
[0290.877] GetNearestColor (hdc=0xe501065f, color=0xf0f0f0) returned 0xf0f0f0
[0290.877] GetNearestColor (hdc=0xe501065f, color=0xa0a0a0) returned 0xa0a0a0
[0290.877] GetNearestColor (hdc=0xe501065f, color=0x696969) returned 0x696969
[0290.877] GetNearestColor (hdc=0xe501065f, color=0xa0a0a0) returned 0xa0a0a0
[0290.878] GetNearestColor (hdc=0xe501065f, color=0x0) returned 0x0
[0290.878] GetNearestColor (hdc=0xe501065f, color=0xffffff) returned 0xffffff
[0290.878] GetNearestColor (hdc=0xe501065f, color=0xe5e5e5) returned 0xe5e5e5
[0290.878] GetNearestColor (hdc=0xe501065f, color=0xd7d7d7) returned 0xd7d7d7
[0290.878] GetNearestColor (hdc=0xe501065f, color=0x0) returned 0x0
[0290.878] RestoreDC (hdc=0xe501065f, nSavedDC=-1) returned 1
[0290.878] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe501065f) returned 0x0
[0290.878] IsAppThemed () returned 0x1
[0290.878] GetThemeAppProperties () returned 0x3
[0290.878] GetThemeAppProperties () returned 0x3
[0290.878] IsAppThemed () returned 0x1
[0290.878] GetThemeAppProperties () returned 0x3
[0290.878] GetThemeAppProperties () returned 0x3
[0290.878] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x243af98 | out: lpchText="OK", lprc=0x53e028) returned 13
[0290.879] IsAppThemed () returned 0x1
[0290.879] GetThemeAppProperties () returned 0x3
[0290.879] GetThemeAppProperties () returned 0x3
[0290.879] IsAppThemed () returned 0x1
[0290.879] GetThemeAppProperties () returned 0x3
[0290.879] GetThemeAppProperties () returned 0x3
[0290.879] GetFocus () returned 0x1d0122
[0290.879] IsAppThemed () returned 0x1
[0290.879] GetThemeAppProperties () returned 0x3
[0290.879] GetThemeAppProperties () returned 0x3
[0290.879] IsAppThemed () returned 0x1
[0290.879] GetThemeAppProperties () returned 0x3
[0290.879] GetThemeAppProperties () returned 0x3
[0290.879] IsThemePartDefined () returned 0x1
[0290.879] IsAppThemed () returned 0x1
[0290.879] GetThemeAppProperties () returned 0x3
[0290.880] GetThemeAppProperties () returned 0x3
[0290.880] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0290.880] IsAppThemed () returned 0x1
[0290.880] GetThemeAppProperties () returned 0x3
[0290.880] GetThemeAppProperties () returned 0x3
[0290.880] IsAppThemed () returned 0x1
[0290.880] GetThemeAppProperties () returned 0x3
[0290.880] GetThemeAppProperties () returned 0x3
[0290.880] IsThemePartDefined () returned 0x1
[0290.880] GdipCreateRegion (region=0x53e070) returned 0x0
[0290.880] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.880] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0290.880] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0290.880] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0290.880] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0290.880] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0290.880] LocalFree (hMem=0x89ea88) returned 0x0
[0290.880] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.880] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.881] LocalFree (hMem=0x89ee08) returned 0x0
[0290.881] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0290.881] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0290.881] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0290.881] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0290.881] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.881] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0290.881] GetCurrentObject (hdc=0xe501065f, type=0x1) returned 0xb00017
[0290.881] GetCurrentObject (hdc=0xe501065f, type=0x2) returned 0x900010
[0290.881] GetCurrentObject (hdc=0xe501065f, type=0x7) returned 0x1e0507b9
[0290.881] GetCurrentObject (hdc=0xe501065f, type=0x6) returned 0x8a01c2
[0290.881] SaveDC (hdc=0xe501065f) returned 1
[0290.882] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe504051e
[0290.882] GetClipRgn (hdc=0xe501065f, hrgn=0xe504051e) returned 0
[0290.882] SelectClipRgn (hdc=0xe501065f, hrgn=0x50407a1) returned 2
[0290.882] DeleteObject (ho=0xe504051e) returned 1
[0290.882] DeleteObject (ho=0x50407a1) returned 1
[0290.882] OffsetViewportOrgEx (in: hdc=0xe501065f, x=0, y=0, lppt=0x243b648 | out: lppt=0x243b648) returned 1
[0290.882] DrawThemeParentBackground () returned 0x0
[0290.882] GetWindowPlacement (in: hWnd=0x2200ea, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0290.882] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0290.882] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.882] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.882] GetSystemMetrics (nIndex=42) returned 0
[0290.882] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.883] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0290.884] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0290.884] GetCurrentObject (hdc=0xe501065f, type=0x1) returned 0xb00017
[0290.884] GetCurrentObject (hdc=0xe501065f, type=0x2) returned 0x900010
[0290.884] GetCurrentObject (hdc=0xe501065f, type=0x7) returned 0x1e0507b9
[0290.885] GetCurrentObject (hdc=0xe501065f, type=0x6) returned 0x8a01c2
[0290.885] SaveDC (hdc=0xe501065f) returned 2
[0290.885] GetNearestColor (hdc=0xe501065f, color=0xf0f0f0) returned 0xf0f0f0
[0290.885] CreateSolidBrush (color=0xf0f0f0) returned 0x5d10078d
[0290.885] FillRect (hDC=0xe501065f, lprc=0x53dad0, hbr=0x5d10078d) returned 1
[0290.885] DeleteObject (ho=0x5d10078d) returned 1
[0290.885] RestoreDC (hdc=0xe501065f, nSavedDC=-1) returned 1
[0290.885] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.885] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.885] GetSystemMetrics (nIndex=42) returned 0
[0290.885] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.885] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0290.885] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0290.885] GetCurrentObject (hdc=0xe501065f, type=0x1) returned 0xb00017
[0290.885] GetCurrentObject (hdc=0xe501065f, type=0x2) returned 0x900010
[0290.886] GetCurrentObject (hdc=0xe501065f, type=0x7) returned 0x1e0507b9
[0290.886] GetCurrentObject (hdc=0xe501065f, type=0x6) returned 0x8a01c2
[0290.886] SaveDC (hdc=0xe501065f) returned 2
[0290.886] GetNearestColor (hdc=0xe501065f, color=0xf0f0f0) returned 0xf0f0f0
[0290.886] CreateSolidBrush (color=0xf0f0f0) returned 0x5e10078d
[0290.886] FillRect (hDC=0xe501065f, lprc=0x53da70, hbr=0x5e10078d) returned 1
[0290.886] DeleteObject (ho=0x5e10078d) returned 1
[0290.886] RestoreDC (hdc=0xe501065f, nSavedDC=-1) returned 1
[0290.886] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.886] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.886] GetSystemMetrics (nIndex=42) returned 0
[0290.886] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.886] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0290.886] RestoreDC (hdc=0xe501065f, nSavedDC=-1) returned 1
[0290.887] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe501065f) returned 0x0
[0290.887] IsAppThemed () returned 0x1
[0290.887] GetThemeAppProperties () returned 0x3
[0290.887] GetThemeAppProperties () returned 0x3
[0290.887] IsAppThemed () returned 0x1
[0290.887] GetThemeAppProperties () returned 0x3
[0290.887] GetThemeAppProperties () returned 0x3
[0290.887] IsThemePartDefined () returned 0x1
[0290.887] GdipCreateRegion (region=0x53dff4) returned 0x0
[0290.887] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.887] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0290.887] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0290.887] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0290.887] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0290.887] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0290.887] LocalFree (hMem=0x89ea88) returned 0x0
[0290.887] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.887] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0290.888] LocalFree (hMem=0x89ee08) returned 0x0
[0290.888] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0290.888] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0290.888] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0290.888] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0290.888] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.888] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0290.888] GetCurrentObject (hdc=0xe501065f, type=0x1) returned 0xb00017
[0290.888] GetCurrentObject (hdc=0xe501065f, type=0x2) returned 0x900010
[0290.888] GetCurrentObject (hdc=0xe501065f, type=0x7) returned 0x1e0507b9
[0290.888] GetCurrentObject (hdc=0xe501065f, type=0x6) returned 0x8a01c2
[0290.888] SaveDC (hdc=0xe501065f) returned 1
[0290.888] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x60407a1
[0290.888] GetClipRgn (hdc=0xe501065f, hrgn=0x60407a1) returned 0
[0290.888] SelectClipRgn (hdc=0xe501065f, hrgn=0xe704051e) returned 2
[0290.888] DeleteObject (ho=0x60407a1) returned 1
[0290.888] DeleteObject (ho=0xe704051e) returned 1
[0290.889] OffsetViewportOrgEx (in: hdc=0xe501065f, x=0, y=0, lppt=0x243bed0 | out: lppt=0x243bed0) returned 1
[0290.889] IsAppThemed () returned 0x1
[0290.889] GetThemeAppProperties () returned 0x3
[0290.889] GetThemeAppProperties () returned 0x3
[0290.889] DrawThemeBackground () returned 0x0
[0290.889] RestoreDC (hdc=0xe501065f, nSavedDC=-1) returned 1
[0290.889] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe501065f) returned 0x0
[0290.889] GdipCreateRegion (region=0x53dff8) returned 0x0
[0290.889] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.889] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0290.889] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0290.889] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0290.889] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.889] LocalFree (hMem=0x89ee08) returned 0x0
[0290.889] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.889] LocalFree (hMem=0x89ee08) returned 0x0
[0290.889] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0290.889] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0290.889] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0290.890] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0290.890] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.890] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0290.890] GetCurrentObject (hdc=0xe501065f, type=0x1) returned 0xb00017
[0290.890] GetCurrentObject (hdc=0xe501065f, type=0x2) returned 0x900010
[0290.890] GetCurrentObject (hdc=0xe501065f, type=0x7) returned 0x1e0507b9
[0290.890] GetCurrentObject (hdc=0xe501065f, type=0x6) returned 0x8a01c2
[0290.890] SaveDC (hdc=0xe501065f) returned 1
[0290.890] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe804051e
[0290.890] GetClipRgn (hdc=0xe501065f, hrgn=0xe804051e) returned 0
[0290.890] SelectClipRgn (hdc=0xe501065f, hrgn=0x70407a1) returned 2
[0290.890] DeleteObject (ho=0xe804051e) returned 1
[0290.890] DeleteObject (ho=0x70407a1) returned 1
[0290.890] OffsetViewportOrgEx (in: hdc=0xe501065f, x=0, y=0, lppt=0x243c1a4 | out: lppt=0x243c1a4) returned 1
[0290.890] IsAppThemed () returned 0x1
[0290.890] GetThemeAppProperties () returned 0x3
[0290.890] GetThemeAppProperties () returned 0x3
[0290.890] GetThemeBackgroundContentRect () returned 0x0
[0290.890] RestoreDC (hdc=0xe501065f, nSavedDC=-1) returned 1
[0290.891] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe501065f) returned 0x0
[0290.891] IsAppThemed () returned 0x1
[0290.891] GetThemeAppProperties () returned 0x3
[0290.891] GetThemeAppProperties () returned 0x3
[0290.891] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0290.891] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0290.891] GetCurrentObject (hdc=0xe501065f, type=0x1) returned 0xb00017
[0290.891] GetCurrentObject (hdc=0xe501065f, type=0x2) returned 0x900010
[0290.891] GetCurrentObject (hdc=0xe501065f, type=0x7) returned 0x1e0507b9
[0290.891] GetCurrentObject (hdc=0xe501065f, type=0x6) returned 0x8a01c2
[0290.891] SaveDC (hdc=0xe501065f) returned 1
[0290.891] GetTextAlign (hdc=0xe501065f) returned 0x0
[0290.891] GetTextColor (hdc=0xe501065f) returned 0x0
[0290.891] GetCurrentObject (hdc=0xe501065f, type=0x6) returned 0x8a01c2
[0290.891] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0290.892] SelectObject (hdc=0xe501065f, h=0x730a066d) returned 0x8a01c2
[0290.892] GetBkMode (hdc=0xe501065f) returned 2
[0290.892] SetBkMode (hdc=0xe501065f, mode=1) returned 2
[0290.892] DrawTextExW (in: hdc=0xe501065f, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x243c544 | out: lpchText="OK", lprc=0x53df90) returned 13
[0290.892] DrawTextExW (in: hdc=0xe501065f, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x243c544 | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0290.892] RestoreDC (hdc=0xe501065f, nSavedDC=-1) returned 1
[0290.892] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe501065f) returned 0x0
[0290.892] GetFocus () returned 0x1d0122
[0290.893] IsAppThemed () returned 0x1
[0290.893] GetThemeAppProperties () returned 0x3
[0290.893] GetThemeAppProperties () returned 0x3
[0290.893] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0290.893] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0xe501065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0290.893] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe501065f) returned 0x0
[0290.893] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0290.893] SelectObject (hdc=0xe501065f, h=0x85000f) returned 0x1e0507b9
[0290.893] DeleteDC (hdc=0xe501065f) returned 1
[0290.893] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0290.893] EndPaint (hWnd=0x19004e, lpPaint=0x53e2e4) returned 1
[0290.893] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.894] IsWindowUnicode (hWnd=0x3c013e) returned 1
[0290.894] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.894] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.894] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.894] BeginPaint (in: hWnd=0x3c013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0290.894] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0290.894] CreateCompatibleDC (hdc=0xf0105ee) returned 0xe701065f
[0290.894] SelectObject (hdc=0xe701065f, h=0x1e0507b9) returned 0x85000f
[0290.894] GdipCreateFromHDC (hdc=0xe701065f, graphics=0x53e300) returned 0x0
[0290.894] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0290.894] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0290.894] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0290.894] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0290.895] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0290.895] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0290.895] LocalFree (hMem=0x89ee08) returned 0x0
[0290.895] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0290.895] GdipCreateRegion (region=0x53e348) returned 0x0
[0290.895] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.895] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0290.895] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0290.895] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa8f0dbd) returned 0x0
[0290.895] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.895] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0290.895] GetCurrentObject (hdc=0xe701065f, type=0x1) returned 0xb00017
[0290.895] GetCurrentObject (hdc=0xe701065f, type=0x2) returned 0x900010
[0290.895] GetCurrentObject (hdc=0xe701065f, type=0x7) returned 0x1e0507b9
[0290.895] GetCurrentObject (hdc=0xe701065f, type=0x6) returned 0x8a01c2
[0290.895] SaveDC (hdc=0xe701065f) returned 1
[0290.895] GetNearestColor (hdc=0xe701065f, color=0xf0f0f0) returned 0xf0f0f0
[0290.895] GetNearestColor (hdc=0xe701065f, color=0xa0a0a0) returned 0xa0a0a0
[0290.895] GetNearestColor (hdc=0xe701065f, color=0x696969) returned 0x696969
[0290.896] GetNearestColor (hdc=0xe701065f, color=0xa0a0a0) returned 0xa0a0a0
[0290.896] GetNearestColor (hdc=0xe701065f, color=0x0) returned 0x0
[0290.896] GetNearestColor (hdc=0xe701065f, color=0xffffff) returned 0xffffff
[0290.896] GetNearestColor (hdc=0xe701065f, color=0xe5e5e5) returned 0xe5e5e5
[0290.896] GetNearestColor (hdc=0xe701065f, color=0xd7d7d7) returned 0xd7d7d7
[0290.896] GetNearestColor (hdc=0xe701065f, color=0x0) returned 0x0
[0290.896] RestoreDC (hdc=0xe701065f, nSavedDC=-1) returned 1
[0290.896] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe701065f) returned 0x0
[0290.902] IsAppThemed () returned 0x1
[0290.902] GetThemeAppProperties () returned 0x3
[0290.902] GetThemeAppProperties () returned 0x3
[0290.902] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0290.902] SendMessageW (hWnd=0x2200ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0290.902] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0290.902] IsAppThemed () returned 0x1
[0290.902] GetThemeAppProperties () returned 0x3
[0290.902] GetThemeAppProperties () returned 0x3
[0290.902] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x243cd54 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0290.902] IsAppThemed () returned 0x1
[0290.903] GetThemeAppProperties () returned 0x3
[0290.903] GetThemeAppProperties () returned 0x3
[0290.903] IsAppThemed () returned 0x1
[0290.903] GetThemeAppProperties () returned 0x3
[0290.903] GetThemeAppProperties () returned 0x3
[0290.903] GetFocus () returned 0x1d0122
[0290.903] IsAppThemed () returned 0x1
[0290.903] GetThemeAppProperties () returned 0x3
[0290.903] GetThemeAppProperties () returned 0x3
[0290.903] IsAppThemed () returned 0x1
[0290.903] GetThemeAppProperties () returned 0x3
[0290.903] GetThemeAppProperties () returned 0x3
[0290.903] IsThemePartDefined () returned 0x1
[0290.903] IsAppThemed () returned 0x1
[0290.903] GetThemeAppProperties () returned 0x3
[0290.903] GetThemeAppProperties () returned 0x3
[0290.903] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0290.903] IsAppThemed () returned 0x1
[0290.903] GetThemeAppProperties () returned 0x3
[0290.903] GetThemeAppProperties () returned 0x3
[0290.903] IsAppThemed () returned 0x1
[0290.904] GetThemeAppProperties () returned 0x3
[0290.904] GetThemeAppProperties () returned 0x3
[0290.904] IsThemePartDefined () returned 0x1
[0290.904] GdipCreateRegion (region=0x53e070) returned 0x0
[0290.904] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.904] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0290.904] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0290.904] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0290.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.904] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.904] LocalFree (hMem=0x89ee08) returned 0x0
[0290.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0290.904] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0290.904] LocalFree (hMem=0x89ea88) returned 0x0
[0290.904] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0290.904] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0290.904] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0290.905] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0290.905] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.905] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0290.905] GetCurrentObject (hdc=0xe701065f, type=0x1) returned 0xb00017
[0290.905] GetCurrentObject (hdc=0xe701065f, type=0x2) returned 0x900010
[0290.905] GetCurrentObject (hdc=0xe701065f, type=0x7) returned 0x1e0507b9
[0290.905] GetCurrentObject (hdc=0xe701065f, type=0x6) returned 0x8a01c2
[0290.905] SaveDC (hdc=0xe701065f) returned 1
[0290.905] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x80407a1
[0290.905] GetClipRgn (hdc=0xe701065f, hrgn=0x80407a1) returned 0
[0290.905] SelectClipRgn (hdc=0xe701065f, hrgn=0xec04051e) returned 2
[0290.905] DeleteObject (ho=0x80407a1) returned 1
[0290.905] DeleteObject (ho=0xec04051e) returned 1
[0290.905] OffsetViewportOrgEx (in: hdc=0xe701065f, x=0, y=0, lppt=0x243d404 | out: lppt=0x243d404) returned 1
[0290.905] DrawThemeParentBackground () returned 0x0
[0290.906] GetWindowPlacement (in: hWnd=0x2200ea, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0290.906] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0290.906] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.906] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.906] GetSystemMetrics (nIndex=42) returned 0
[0290.906] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.906] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0290.906] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0290.906] GetCurrentObject (hdc=0xe701065f, type=0x1) returned 0xb00017
[0290.906] GetCurrentObject (hdc=0xe701065f, type=0x2) returned 0x900010
[0290.906] GetCurrentObject (hdc=0xe701065f, type=0x7) returned 0x1e0507b9
[0290.906] GetCurrentObject (hdc=0xe701065f, type=0x6) returned 0x8a01c2
[0290.906] SaveDC (hdc=0xe701065f) returned 2
[0290.906] GetNearestColor (hdc=0xe701065f, color=0xf0f0f0) returned 0xf0f0f0
[0290.906] CreateSolidBrush (color=0xf0f0f0) returned 0x5f10078d
[0290.907] FillRect (hDC=0xe701065f, lprc=0x53dad0, hbr=0x5f10078d) returned 1
[0290.907] DeleteObject (ho=0x5f10078d) returned 1
[0290.907] RestoreDC (hdc=0xe701065f, nSavedDC=-1) returned 1
[0290.907] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.907] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.907] GetSystemMetrics (nIndex=42) returned 0
[0290.907] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.907] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0290.907] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0290.907] GetCurrentObject (hdc=0xe701065f, type=0x1) returned 0xb00017
[0290.907] GetCurrentObject (hdc=0xe701065f, type=0x2) returned 0x900010
[0290.907] GetCurrentObject (hdc=0xe701065f, type=0x7) returned 0x1e0507b9
[0290.907] GetCurrentObject (hdc=0xe701065f, type=0x6) returned 0x8a01c2
[0290.907] SaveDC (hdc=0xe701065f) returned 2
[0290.907] GetNearestColor (hdc=0xe701065f, color=0xf0f0f0) returned 0xf0f0f0
[0290.908] CreateSolidBrush (color=0xf0f0f0) returned 0x6010078d
[0290.908] FillRect (hDC=0xe701065f, lprc=0x53da70, hbr=0x6010078d) returned 1
[0290.908] DeleteObject (ho=0x6010078d) returned 1
[0290.908] RestoreDC (hdc=0xe701065f, nSavedDC=-1) returned 1
[0290.908] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0290.908] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0290.908] GetSystemMetrics (nIndex=42) returned 0
[0290.908] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0290.908] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0290.908] RestoreDC (hdc=0xe701065f, nSavedDC=-1) returned 1
[0290.908] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe701065f) returned 0x0
[0290.908] IsAppThemed () returned 0x1
[0290.908] GetThemeAppProperties () returned 0x3
[0290.909] GetThemeAppProperties () returned 0x3
[0290.909] IsAppThemed () returned 0x1
[0290.909] GetThemeAppProperties () returned 0x3
[0290.909] GetThemeAppProperties () returned 0x3
[0290.909] IsThemePartDefined () returned 0x1
[0290.909] GdipCreateRegion (region=0x53dff4) returned 0x0
[0290.909] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.909] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0290.909] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0290.909] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0290.909] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0290.909] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0290.909] LocalFree (hMem=0x89ea88) returned 0x0
[0290.909] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0290.909] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0290.909] LocalFree (hMem=0x89ea88) returned 0x0
[0290.909] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0290.909] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0290.909] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0290.910] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0290.910] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.910] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0290.910] GetCurrentObject (hdc=0xe701065f, type=0x1) returned 0xb00017
[0290.910] GetCurrentObject (hdc=0xe701065f, type=0x2) returned 0x900010
[0290.910] GetCurrentObject (hdc=0xe701065f, type=0x7) returned 0x1e0507b9
[0290.910] GetCurrentObject (hdc=0xe701065f, type=0x6) returned 0x8a01c2
[0290.910] SaveDC (hdc=0xe701065f) returned 1
[0290.910] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xed04051e
[0290.910] GetClipRgn (hdc=0xe701065f, hrgn=0xed04051e) returned 0
[0290.910] SelectClipRgn (hdc=0xe701065f, hrgn=0xa0407a1) returned 2
[0290.910] DeleteObject (ho=0xed04051e) returned 1
[0290.910] DeleteObject (ho=0xa0407a1) returned 1
[0290.910] OffsetViewportOrgEx (in: hdc=0xe701065f, x=0, y=0, lppt=0x243dc8c | out: lppt=0x243dc8c) returned 1
[0290.910] IsAppThemed () returned 0x1
[0290.911] GetThemeAppProperties () returned 0x3
[0290.911] GetThemeAppProperties () returned 0x3
[0290.911] DrawThemeBackground () returned 0x0
[0290.911] RestoreDC (hdc=0xe701065f, nSavedDC=-1) returned 1
[0290.911] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe701065f) returned 0x0
[0290.911] GdipCreateRegion (region=0x53dff8) returned 0x0
[0290.911] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.911] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0290.911] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0290.911] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0290.911] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.911] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.911] LocalFree (hMem=0x89ee08) returned 0x0
[0290.911] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.911] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.911] LocalFree (hMem=0x89ee08) returned 0x0
[0290.911] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0290.911] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0290.912] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0290.912] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0290.912] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.948] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0290.948] GetCurrentObject (hdc=0xe701065f, type=0x1) returned 0xb00017
[0290.948] GetCurrentObject (hdc=0xe701065f, type=0x2) returned 0x900010
[0290.948] GetCurrentObject (hdc=0xe701065f, type=0x7) returned 0x1e0507b9
[0290.948] GetCurrentObject (hdc=0xe701065f, type=0x6) returned 0x8a01c2
[0290.948] SaveDC (hdc=0xe701065f) returned 1
[0290.949] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb0407a1
[0290.949] GetClipRgn (hdc=0xe701065f, hrgn=0xb0407a1) returned 0
[0290.949] SelectClipRgn (hdc=0xe701065f, hrgn=0xee04051e) returned 2
[0290.949] DeleteObject (ho=0xb0407a1) returned 1
[0290.949] DeleteObject (ho=0xee04051e) returned 1
[0290.949] OffsetViewportOrgEx (in: hdc=0xe701065f, x=0, y=0, lppt=0x243df60 | out: lppt=0x243df60) returned 1
[0290.949] IsAppThemed () returned 0x1
[0290.949] GetThemeAppProperties () returned 0x3
[0290.949] GetThemeAppProperties () returned 0x3
[0290.949] GetThemeBackgroundContentRect () returned 0x0
[0290.949] RestoreDC (hdc=0xe701065f, nSavedDC=-1) returned 1
[0290.949] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe701065f) returned 0x0
[0290.949] IsAppThemed () returned 0x1
[0290.949] GetThemeAppProperties () returned 0x3
[0290.949] GetThemeAppProperties () returned 0x3
[0290.950] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0290.950] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0290.950] GetCurrentObject (hdc=0xe701065f, type=0x1) returned 0xb00017
[0290.950] GetCurrentObject (hdc=0xe701065f, type=0x2) returned 0x900010
[0290.950] GetCurrentObject (hdc=0xe701065f, type=0x7) returned 0x1e0507b9
[0290.950] GetCurrentObject (hdc=0xe701065f, type=0x6) returned 0x8a01c2
[0290.950] SaveDC (hdc=0xe701065f) returned 1
[0290.950] GetTextAlign (hdc=0xe701065f) returned 0x0
[0290.950] GetTextColor (hdc=0xe701065f) returned 0x0
[0290.950] GetCurrentObject (hdc=0xe701065f, type=0x6) returned 0x8a01c2
[0290.950] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0290.950] SelectObject (hdc=0xe701065f, h=0x730a066d) returned 0x8a01c2
[0290.951] GetBkMode (hdc=0xe701065f) returned 2
[0290.951] SetBkMode (hdc=0xe701065f, mode=1) returned 2
[0290.951] DrawTextExW (in: hdc=0xe701065f, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x243e300 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0290.951] DrawTextExW (in: hdc=0xe701065f, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x243e300 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0290.951] RestoreDC (hdc=0xe701065f, nSavedDC=-1) returned 1
[0290.951] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe701065f) returned 0x0
[0290.951] GetFocus () returned 0x1d0122
[0290.952] IsAppThemed () returned 0x1
[0290.952] GetThemeAppProperties () returned 0x3
[0290.952] GetThemeAppProperties () returned 0x3
[0290.952] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0290.952] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0xe701065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0290.952] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe701065f) returned 0x0
[0290.952] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0290.952] SelectObject (hdc=0xe701065f, h=0x85000f) returned 0x1e0507b9
[0290.952] DeleteDC (hdc=0xe701065f) returned 1
[0290.952] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0290.952] EndPaint (hWnd=0x3c013e, lpPaint=0x53e2e4) returned 1
[0290.953] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.953] IsWindowUnicode (hWnd=0x202c6) returned 1
[0290.953] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.953] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.953] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.953] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0290.953] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0290.953] CreateCompatibleDC (hdc=0x10105d6) returned 0xe901065f
[0290.953] SelectObject (hdc=0xe901065f, h=0x1e0507b9) returned 0x85000f
[0290.953] GdipCreateFromHDC (hdc=0xe901065f, graphics=0x53e300) returned 0x0
[0290.954] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0290.954] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0290.954] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0290.954] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0290.954] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0290.954] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0290.954] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0290.954] LocalFree (hMem=0x89ea88) returned 0x0
[0290.954] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0290.954] GdipCreateRegion (region=0x53e348) returned 0x0
[0290.954] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.954] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0290.954] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0290.954] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa8d0dbd) returned 0x0
[0290.955] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.955] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0290.955] GetCurrentObject (hdc=0xe901065f, type=0x1) returned 0xb00017
[0290.955] GetCurrentObject (hdc=0xe901065f, type=0x2) returned 0x900010
[0290.955] GetCurrentObject (hdc=0xe901065f, type=0x7) returned 0x1e0507b9
[0290.955] GetCurrentObject (hdc=0xe901065f, type=0x6) returned 0x8a01c2
[0290.955] SaveDC (hdc=0xe901065f) returned 1
[0290.955] GetNearestColor (hdc=0xe901065f, color=0xff) returned 0xff
[0290.955] GetNearestColor (hdc=0xe901065f, color=0x55) returned 0x55
[0290.955] GetNearestColor (hdc=0xe901065f, color=0x0) returned 0x0
[0290.955] GetNearestColor (hdc=0xe901065f, color=0x55) returned 0x55
[0290.955] GetNearestColor (hdc=0xe901065f, color=0x0) returned 0x0
[0290.955] GetNearestColor (hdc=0xe901065f, color=0x8080ff) returned 0x8080ff
[0290.956] GetNearestColor (hdc=0xe901065f, color=0x7373e5) returned 0x7373e5
[0290.956] GetNearestColor (hdc=0xe901065f, color=0xe5) returned 0xe5
[0290.956] GetNearestColor (hdc=0xe901065f, color=0x0) returned 0x0
[0290.956] RestoreDC (hdc=0xe901065f, nSavedDC=-1) returned 1
[0290.956] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe901065f) returned 0x0
[0290.956] IsAppThemed () returned 0x1
[0290.956] GetThemeAppProperties () returned 0x3
[0290.956] GetThemeAppProperties () returned 0x3
[0290.956] IsAppThemed () returned 0x1
[0290.956] GetThemeAppProperties () returned 0x3
[0290.956] GetThemeAppProperties () returned 0x3
[0290.956] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0290.956] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x243eae4 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0290.957] IsAppThemed () returned 0x1
[0290.957] GetThemeAppProperties () returned 0x3
[0290.957] GetThemeAppProperties () returned 0x3
[0290.957] IsAppThemed () returned 0x1
[0290.957] GetThemeAppProperties () returned 0x3
[0290.957] GetThemeAppProperties () returned 0x3
[0290.957] GetFocus () returned 0x1d0122
[0290.957] IsAppThemed () returned 0x1
[0290.957] GetThemeAppProperties () returned 0x3
[0290.957] GetThemeAppProperties () returned 0x3
[0290.957] IsAppThemed () returned 0x1
[0290.957] GetThemeAppProperties () returned 0x3
[0290.957] GetThemeAppProperties () returned 0x3
[0290.957] IsThemePartDefined () returned 0x1
[0290.957] IsAppThemed () returned 0x1
[0290.957] GetThemeAppProperties () returned 0x3
[0290.957] GetThemeAppProperties () returned 0x3
[0290.958] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0290.958] IsAppThemed () returned 0x1
[0290.958] GetThemeAppProperties () returned 0x3
[0290.958] GetThemeAppProperties () returned 0x3
[0290.958] IsAppThemed () returned 0x1
[0290.958] GetThemeAppProperties () returned 0x3
[0290.958] GetThemeAppProperties () returned 0x3
[0290.958] IsThemePartDefined () returned 0x1
[0290.958] GdipCreateRegion (region=0x53e070) returned 0x0
[0290.958] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.958] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0290.958] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0290.958] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0290.958] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.958] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.958] LocalFree (hMem=0x89ee08) returned 0x0
[0290.958] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0290.958] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0290.959] LocalFree (hMem=0x89ea88) returned 0x0
[0290.962] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0290.962] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0290.962] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0290.962] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0290.962] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.962] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0290.963] GetCurrentObject (hdc=0xe901065f, type=0x1) returned 0xb00017
[0290.963] GetCurrentObject (hdc=0xe901065f, type=0x2) returned 0x900010
[0290.963] GetCurrentObject (hdc=0xe901065f, type=0x7) returned 0x1e0507b9
[0290.963] GetCurrentObject (hdc=0xe901065f, type=0x6) returned 0x8a01c2
[0290.963] SaveDC (hdc=0xe901065f) returned 1
[0290.963] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xef04051e
[0290.963] GetClipRgn (hdc=0xe901065f, hrgn=0xef04051e) returned 0
[0290.963] SelectClipRgn (hdc=0xe901065f, hrgn=0xf0407a1) returned 2
[0290.963] DeleteObject (ho=0xef04051e) returned 1
[0290.963] DeleteObject (ho=0xf0407a1) returned 1
[0290.963] OffsetViewportOrgEx (in: hdc=0xe901065f, x=0, y=0, lppt=0x243f194 | out: lppt=0x243f194) returned 1
[0290.963] DrawThemeParentBackground () returned 0x0
[0290.964] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0290.964] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0290.964] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0290.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0290.964] GetSystemMetrics (nIndex=42) returned 0
[0290.964] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0290.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0290.964] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0290.964] GetCurrentObject (hdc=0xe901065f, type=0x1) returned 0xb00017
[0290.964] GetCurrentObject (hdc=0xe901065f, type=0x2) returned 0x900010
[0290.964] GetCurrentObject (hdc=0xe901065f, type=0x7) returned 0x1e0507b9
[0290.964] GetCurrentObject (hdc=0xe901065f, type=0x6) returned 0x8a01c2
[0290.964] SaveDC (hdc=0xe901065f) returned 2
[0290.964] GetNearestColor (hdc=0xe901065f, color=0xff) returned 0xff
[0290.964] CreateSolidBrush (color=0xff) returned 0x6110078d
[0290.965] FillRect (hDC=0xe901065f, lprc=0x53dad0, hbr=0x6110078d) returned 1
[0290.965] DeleteObject (ho=0x6110078d) returned 1
[0290.965] RestoreDC (hdc=0xe901065f, nSavedDC=-1) returned 1
[0290.965] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0290.965] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0290.965] GetSystemMetrics (nIndex=42) returned 0
[0290.965] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0290.965] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0290.965] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0290.965] GetCurrentObject (hdc=0xe901065f, type=0x1) returned 0xb00017
[0290.965] GetCurrentObject (hdc=0xe901065f, type=0x2) returned 0x900010
[0290.965] GetCurrentObject (hdc=0xe901065f, type=0x7) returned 0x1e0507b9
[0290.965] GetCurrentObject (hdc=0xe901065f, type=0x6) returned 0x8a01c2
[0290.965] SaveDC (hdc=0xe901065f) returned 2
[0290.965] GetNearestColor (hdc=0xe901065f, color=0xff) returned 0xff
[0290.966] CreateSolidBrush (color=0xff) returned 0x6210078d
[0290.966] FillRect (hDC=0xe901065f, lprc=0x53da70, hbr=0x6210078d) returned 1
[0290.966] DeleteObject (ho=0x6210078d) returned 1
[0290.966] RestoreDC (hdc=0xe901065f, nSavedDC=-1) returned 1
[0290.966] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0290.966] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0290.966] GetSystemMetrics (nIndex=42) returned 0
[0290.966] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0290.966] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0290.966] RestoreDC (hdc=0xe901065f, nSavedDC=-1) returned 1
[0290.966] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe901065f) returned 0x0
[0290.966] IsAppThemed () returned 0x1
[0290.967] GetThemeAppProperties () returned 0x3
[0290.967] GetThemeAppProperties () returned 0x3
[0290.967] IsAppThemed () returned 0x1
[0290.967] GetThemeAppProperties () returned 0x3
[0290.967] GetThemeAppProperties () returned 0x3
[0290.967] IsThemePartDefined () returned 0x1
[0290.967] GdipCreateRegion (region=0x53dff4) returned 0x0
[0290.967] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.967] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0290.967] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0290.967] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0290.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0290.967] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0290.967] LocalFree (hMem=0x89ea88) returned 0x0
[0290.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.967] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0290.967] LocalFree (hMem=0x89ee08) returned 0x0
[0290.968] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0290.968] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0290.968] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0290.968] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0290.968] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.968] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0290.968] GetCurrentObject (hdc=0xe901065f, type=0x1) returned 0xb00017
[0290.968] GetCurrentObject (hdc=0xe901065f, type=0x2) returned 0x900010
[0290.968] GetCurrentObject (hdc=0xe901065f, type=0x7) returned 0x1e0507b9
[0290.968] GetCurrentObject (hdc=0xe901065f, type=0x6) returned 0x8a01c2
[0290.968] SaveDC (hdc=0xe901065f) returned 1
[0290.968] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x100407a1
[0290.968] GetClipRgn (hdc=0xe901065f, hrgn=0x100407a1) returned 0
[0290.968] SelectClipRgn (hdc=0xe901065f, hrgn=0xf104051e) returned 2
[0290.968] DeleteObject (ho=0x100407a1) returned 1
[0290.969] DeleteObject (ho=0xf104051e) returned 1
[0290.969] OffsetViewportOrgEx (in: hdc=0xe901065f, x=0, y=0, lppt=0x243f9f8 | out: lppt=0x243f9f8) returned 1
[0290.969] IsAppThemed () returned 0x1
[0290.969] GetThemeAppProperties () returned 0x3
[0290.969] GetThemeAppProperties () returned 0x3
[0290.969] DrawThemeBackground () returned 0x0
[0290.969] RestoreDC (hdc=0xe901065f, nSavedDC=-1) returned 1
[0290.969] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe901065f) returned 0x0
[0290.969] GdipCreateRegion (region=0x53dff8) returned 0x0
[0290.969] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0290.969] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0290.969] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0290.969] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0290.969] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0290.969] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.970] LocalFree (hMem=0x89ee08) returned 0x0
[0290.970] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0290.970] LocalFree (hMem=0x89ee08) returned 0x0
[0290.970] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0290.970] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0290.970] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0290.970] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0290.970] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0290.970] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0290.970] GetCurrentObject (hdc=0xe901065f, type=0x1) returned 0xb00017
[0290.970] GetCurrentObject (hdc=0xe901065f, type=0x2) returned 0x900010
[0290.970] GetCurrentObject (hdc=0xe901065f, type=0x7) returned 0x1e0507b9
[0290.970] GetCurrentObject (hdc=0xe901065f, type=0x6) returned 0x8a01c2
[0290.970] SaveDC (hdc=0xe901065f) returned 1
[0290.970] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf204051e
[0290.970] GetClipRgn (hdc=0xe901065f, hrgn=0xf204051e) returned 0
[0290.970] SelectClipRgn (hdc=0xe901065f, hrgn=0x110407a1) returned 2
[0290.971] DeleteObject (ho=0xf204051e) returned 1
[0290.971] DeleteObject (ho=0x110407a1) returned 1
[0290.971] OffsetViewportOrgEx (in: hdc=0xe901065f, x=0, y=0, lppt=0x243fccc | out: lppt=0x243fccc) returned 1
[0290.971] IsAppThemed () returned 0x1
[0290.971] GetThemeAppProperties () returned 0x3
[0290.971] GetThemeAppProperties () returned 0x3
[0290.971] GetThemeBackgroundContentRect () returned 0x0
[0290.971] RestoreDC (hdc=0xe901065f, nSavedDC=-1) returned 1
[0290.971] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe901065f) returned 0x0
[0290.971] IsAppThemed () returned 0x1
[0290.971] GetThemeAppProperties () returned 0x3
[0290.971] GetThemeAppProperties () returned 0x3
[0290.971] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0290.971] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0290.971] GetCurrentObject (hdc=0xe901065f, type=0x1) returned 0xb00017
[0290.971] GetCurrentObject (hdc=0xe901065f, type=0x2) returned 0x900010
[0290.971] GetCurrentObject (hdc=0xe901065f, type=0x7) returned 0x1e0507b9
[0290.971] GetCurrentObject (hdc=0xe901065f, type=0x6) returned 0x8a01c2
[0290.972] SaveDC (hdc=0xe901065f) returned 1
[0290.972] GetTextAlign (hdc=0xe901065f) returned 0x0
[0290.972] GetTextColor (hdc=0xe901065f) returned 0x0
[0290.972] GetCurrentObject (hdc=0xe901065f, type=0x6) returned 0x8a01c2
[0290.972] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0290.972] SelectObject (hdc=0xe901065f, h=0x450a0799) returned 0x8a01c2
[0290.972] GetBkMode (hdc=0xe901065f) returned 2
[0290.972] SetBkMode (hdc=0xe901065f, mode=1) returned 2
[0290.972] DrawTextExW (in: hdc=0xe901065f, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x244006c | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0290.972] DrawTextExW (in: hdc=0xe901065f, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x244006c | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0290.973] RestoreDC (hdc=0xe901065f, nSavedDC=-1) returned 1
[0290.973] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe901065f) returned 0x0
[0290.973] GetFocus () returned 0x1d0122
[0290.973] IsAppThemed () returned 0x1
[0290.973] GetThemeAppProperties () returned 0x3
[0290.973] GetThemeAppProperties () returned 0x3
[0290.973] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0290.973] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xe901065f, x1=0, y1=0, rop=0xcc0020) returned 1
[0290.973] GdipReleaseDC (graphics=0x5d92c30, hdc=0xe901065f) returned 0x0
[0290.973] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0290.973] SelectObject (hdc=0xe901065f, h=0x85000f) returned 0x1e0507b9
[0290.974] DeleteDC (hdc=0xe901065f) returned 1
[0290.974] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0290.974] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0290.980] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0290.980] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0290.980] WaitMessage () returned 1
[0290.994] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.994] IsWindowUnicode (hWnd=0x102dc) returned 1
[0290.994] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.994] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.994] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.995] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0290.995] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0290.995] WaitMessage () returned 1
[0290.996] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.996] IsWindowUnicode (hWnd=0x102dc) returned 1
[0290.996] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.996] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.996] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.997] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.998] IsWindowUnicode (hWnd=0x102dc) returned 1
[0290.998] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.998] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.998] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.998] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.998] IsWindowUnicode (hWnd=0x102dc) returned 1
[0290.998] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.998] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.998] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0290.998] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0290.999] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0290.999] WaitMessage () returned 1
[0290.999] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.999] IsWindowUnicode (hWnd=0x102dc) returned 1
[0290.999] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0290.999] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0290.999] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0291.001] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.001] IsWindowUnicode (hWnd=0x102dc) returned 1
[0291.001] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.001] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0291.001] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0291.001] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.002] IsWindowUnicode (hWnd=0x102dc) returned 1
[0291.002] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.002] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0291.002] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0291.002] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0291.002] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0291.002] WaitMessage () returned 1
[0291.003] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.003] IsWindowUnicode (hWnd=0x102dc) returned 1
[0291.003] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.003] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0291.003] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0291.004] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.005] IsWindowUnicode (hWnd=0x102dc) returned 1
[0291.005] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.005] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0291.005] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0291.005] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.005] IsWindowUnicode (hWnd=0x102dc) returned 1
[0291.005] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.005] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0291.005] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0291.009] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0291.010] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0291.010] WaitMessage () returned 1
[0291.072] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.072] IsWindowUnicode (hWnd=0x202d0) returned 1
[0291.072] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.072] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0291.072] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0291.073] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0291.073] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0291.073] WaitMessage () returned 1
[0291.334] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.335] IsWindowUnicode (hWnd=0x1d0122) returned 1
[0291.335] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.335] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0291.335] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0291.335] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0291.335] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0291.335] WaitMessage () returned 1
[0291.787] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.787] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.787] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0291.787] DispatchMessageA (lpMsg=0x53e8a0) returned 0x7e86
[0291.788] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0291.788] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0291.788] WaitMessage () returned 1
[0291.866] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.866] IsWindowUnicode (hWnd=0x1d0122) returned 1
[0291.866] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0291.866] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0291.866] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0291.867] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0291.867] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0291.867] WaitMessage () returned 1
[0292.396] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0292.397] IsWindowUnicode (hWnd=0x1d0122) returned 1
[0292.397] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0292.397] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0292.397] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0292.397] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0292.397] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0292.397] WaitMessage () returned 1
[0292.803] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0292.803] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0292.804] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0292.804] DispatchMessageA (lpMsg=0x53e8a0) returned 0x1
[0292.804] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0292.804] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0292.804] WaitMessage () returned 1
[0292.937] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0292.938] IsWindowUnicode (hWnd=0x1d0122) returned 1
[0292.938] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0292.938] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0292.938] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0292.938] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0292.938] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0292.938] WaitMessage () returned 1
[0293.368] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.368] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x84, wParam=0x0, lParam=0x1920223) returned 0x1
[0293.368] IsWindowUnicode (hWnd=0x2200ea) returned 1
[0293.368] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.368] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x84, wParam=0x0, lParam=0x1920223) returned 0x1
[0293.368] SetCursor (hCursor=0x10003) returned 0x10003
[0293.369] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0293.369] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0293.369] _TrackMouseEvent (in: lpEventTrack=0x2440318 | out: lpEventTrack=0x2440318) returned 1
[0293.369] SendMessageW (hWnd=0x2200ea, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0293.369] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0293.369] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x200, wParam=0x0, lParam=0x150004) returned 0x0
[0293.369] GetKeyState (nVirtKey=1) returned 0
[0293.369] GetKeyState (nVirtKey=2) returned 0
[0293.369] GetKeyState (nVirtKey=4) returned 0
[0293.369] GetKeyState (nVirtKey=5) returned 0
[0293.369] GetKeyState (nVirtKey=6) returned 0
[0293.369] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0293.369] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0293.369] WaitMessage () returned 1
[0293.429] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.429] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x84, wParam=0x0, lParam=0x1920223) returned 0x1
[0293.430] IsWindowUnicode (hWnd=0x2200ea) returned 1
[0293.430] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.430] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x84, wParam=0x0, lParam=0x1920223) returned 0x1
[0293.430] SetCursor (hCursor=0x10003) returned 0x10003
[0293.430] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0293.430] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0293.430] GetKeyState (nVirtKey=1) returned -127
[0293.430] GetKeyState (nVirtKey=2) returned 0
[0293.430] GetKeyState (nVirtKey=4) returned 0
[0293.430] GetKeyState (nVirtKey=5) returned 0
[0293.430] GetKeyState (nVirtKey=6) returned 0
[0293.430] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x201, wParam=0x1, lParam=0x150004) returned 0x0
[0293.430] GetKeyState (nVirtKey=1) returned -127
[0293.430] GetKeyState (nVirtKey=2) returned 0
[0293.431] GetKeyState (nVirtKey=4) returned 0
[0293.431] GetKeyState (nVirtKey=5) returned 0
[0293.431] GetKeyState (nVirtKey=6) returned 0
[0293.431] GetCapture () returned 0x0
[0293.431] SetCapture (hWnd=0x2200ea) returned 0x0
[0293.431] GetKeyState (nVirtKey=1) returned -127
[0293.431] GetKeyState (nVirtKey=2) returned 0
[0293.431] GetKeyState (nVirtKey=4) returned 0
[0293.431] GetKeyState (nVirtKey=5) returned 0
[0293.431] GetKeyState (nVirtKey=6) returned 0
[0293.431] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.431] IsWindowUnicode (hWnd=0x2200ea) returned 1
[0293.431] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.431] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0293.431] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0293.431] MapWindowPoints (in: hWndFrom=0x2200ea, hWndTo=0x0, lpPoints=0x244038c, cPoints=0x1 | out: lpPoints=0x244038c) returned 24969759
[0293.431] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x202, wParam=0x0, lParam=0x150004) returned 0x0
[0293.431] WindowFromPoint (Point=0x223) returned 0x2200ea
[0293.431] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x84, wParam=0x0, lParam=0x1920223) returned 0x1
[0293.432] GetCapture () returned 0x2200ea
[0293.432] ReleaseCapture () returned 1
[0293.432] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0293.432] GetCapture () returned 0x0
[0293.432] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.432] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x84, wParam=0x0, lParam=0x1920223) returned 0x1
[0293.432] IsWindowUnicode (hWnd=0x2200ea) returned 1
[0293.432] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.432] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x84, wParam=0x0, lParam=0x1920223) returned 0x1
[0293.432] SetCursor (hCursor=0x10003) returned 0x10003
[0293.433] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0293.433] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0293.433] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x200, wParam=0x0, lParam=0x150004) returned 0x0
[0293.433] GetKeyState (nVirtKey=1) returned 1
[0293.433] GetKeyState (nVirtKey=2) returned 0
[0293.433] GetKeyState (nVirtKey=4) returned 0
[0293.433] GetKeyState (nVirtKey=5) returned 0
[0293.433] GetKeyState (nVirtKey=6) returned 0
[0293.433] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0293.433] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0293.433] WaitMessage () returned 1
[0293.460] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.460] IsWindowUnicode (hWnd=0x1d0122) returned 1
[0293.460] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.460] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0293.460] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0293.460] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0293.460] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0293.460] WaitMessage () returned 1
[0293.538] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.538] IsWindowUnicode (hWnd=0x2200ea) returned 1
[0293.538] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.538] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0293.538] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0293.538] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.538] IsWindowUnicode (hWnd=0x2200ea) returned 1
[0293.538] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.538] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0293.538] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0293.538] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x2a1, wParam=0x0, lParam=0x150004) returned 0x0
[0293.538] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0293.538] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0293.538] WaitMessage () returned 1
[0293.990] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.991] IsWindowUnicode (hWnd=0x1d0122) returned 1
[0293.991] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0293.991] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0293.991] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0293.992] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0293.992] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0293.992] WaitMessage () returned 1
[0294.522] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0294.522] IsWindowUnicode (hWnd=0x1d0122) returned 1
[0294.522] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0294.522] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0294.522] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0294.522] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0294.522] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0294.522] WaitMessage () returned 1
[0295.069] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0295.069] IsWindowUnicode (hWnd=0x1d0122) returned 1
[0295.069] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0295.069] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0295.069] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0295.071] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0295.071] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0295.071] WaitMessage () returned 1
[0295.602] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0295.605] IsWindowUnicode (hWnd=0x1d0122) returned 1
[0295.605] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0295.605] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0295.605] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0295.606] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0295.606] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0295.606] WaitMessage () returned 1
[0295.901] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0295.903] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0295.904] IsWindowUnicode (hWnd=0x19004e) returned 1
[0295.904] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0295.904] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0295.904] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0295.904] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0295.904] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0295.904] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0295.904] IsWindowUnicode (hWnd=0x19004e) returned 1
[0295.904] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0295.904] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0295.904] SetCursor (hCursor=0x10003) returned 0x10003
[0295.905] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0295.905] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0295.905] _TrackMouseEvent (in: lpEventTrack=0x2439dd4 | out: lpEventTrack=0x2439dd4) returned 1
[0295.905] SendMessageW (hWnd=0x19004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0295.905] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0295.905] InvalidateRect (hWnd=0x19004e, lpRect=0x0, bErase=0) returned 1
[0295.905] GetKeyState (nVirtKey=1) returned 1
[0295.905] GetKeyState (nVirtKey=2) returned 0
[0295.905] GetKeyState (nVirtKey=4) returned 0
[0295.905] GetKeyState (nVirtKey=5) returned 0
[0295.905] GetKeyState (nVirtKey=6) returned 0
[0295.905] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0295.905] IsWindowUnicode (hWnd=0x19004e) returned 1
[0295.906] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0295.906] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0295.906] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0295.906] BeginPaint (in: hWnd=0x19004e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0295.906] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0295.906] CreateCompatibleDC (hdc=0x10105d6) returned 0x9d010794
[0295.906] SelectObject (hdc=0x9d010794, h=0x1e0507b9) returned 0x85000f
[0295.907] GdipCreateFromHDC (hdc=0x9d010794, graphics=0x53e300) returned 0x0
[0295.908] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0295.908] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0295.908] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0295.908] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0295.908] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0295.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0295.908] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0295.908] LocalFree (hMem=0x89ee08) returned 0x0
[0295.909] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0295.909] GdipCreateRegion (region=0x53e348) returned 0x0
[0295.909] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0295.909] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0295.909] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0295.909] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa8b0dbd) returned 0x0
[0295.909] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0295.909] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0295.909] GetCurrentObject (hdc=0x9d010794, type=0x1) returned 0xb00017
[0295.909] GetCurrentObject (hdc=0x9d010794, type=0x2) returned 0x900010
[0295.909] GetCurrentObject (hdc=0x9d010794, type=0x7) returned 0x1e0507b9
[0295.910] GetCurrentObject (hdc=0x9d010794, type=0x6) returned 0x8a01c2
[0295.910] SaveDC (hdc=0x9d010794) returned 1
[0295.910] GetNearestColor (hdc=0x9d010794, color=0xf0f0f0) returned 0xf0f0f0
[0295.910] GetNearestColor (hdc=0x9d010794, color=0xa0a0a0) returned 0xa0a0a0
[0295.910] GetNearestColor (hdc=0x9d010794, color=0x696969) returned 0x696969
[0295.910] GetNearestColor (hdc=0x9d010794, color=0xa0a0a0) returned 0xa0a0a0
[0295.910] GetNearestColor (hdc=0x9d010794, color=0x0) returned 0x0
[0295.910] GetNearestColor (hdc=0x9d010794, color=0xffffff) returned 0xffffff
[0295.910] GetNearestColor (hdc=0x9d010794, color=0xe5e5e5) returned 0xe5e5e5
[0295.910] GetNearestColor (hdc=0x9d010794, color=0xd7d7d7) returned 0xd7d7d7
[0295.910] GetNearestColor (hdc=0x9d010794, color=0x0) returned 0x0
[0295.910] RestoreDC (hdc=0x9d010794, nSavedDC=-1) returned 1
[0295.911] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9d010794) returned 0x0
[0295.911] IsAppThemed () returned 0x1
[0295.911] GetThemeAppProperties () returned 0x3
[0295.911] GetThemeAppProperties () returned 0x3
[0295.911] IsAppThemed () returned 0x1
[0295.911] GetThemeAppProperties () returned 0x3
[0295.911] GetThemeAppProperties () returned 0x3
[0295.911] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0295.911] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x2440c6c | out: lpchText="OK", lprc=0x53e01c) returned 13
[0295.937] IsAppThemed () returned 0x1
[0295.937] GetThemeAppProperties () returned 0x3
[0295.937] GetThemeAppProperties () returned 0x3
[0295.937] IsAppThemed () returned 0x1
[0295.937] GetThemeAppProperties () returned 0x3
[0295.937] GetThemeAppProperties () returned 0x3
[0295.938] IsAppThemed () returned 0x1
[0295.938] GetThemeAppProperties () returned 0x3
[0295.938] GetThemeAppProperties () returned 0x3
[0295.938] IsAppThemed () returned 0x1
[0295.938] GetThemeAppProperties () returned 0x3
[0295.938] GetThemeAppProperties () returned 0x3
[0295.938] IsThemePartDefined () returned 0x1
[0295.938] IsAppThemed () returned 0x1
[0295.938] GetThemeAppProperties () returned 0x3
[0295.938] GetThemeAppProperties () returned 0x3
[0295.938] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0295.938] IsAppThemed () returned 0x1
[0295.938] GetThemeAppProperties () returned 0x3
[0295.938] GetThemeAppProperties () returned 0x3
[0295.938] IsAppThemed () returned 0x1
[0295.938] GetThemeAppProperties () returned 0x3
[0295.939] GetThemeAppProperties () returned 0x3
[0295.939] IsThemePartDefined () returned 0x1
[0295.939] GdipCreateRegion (region=0x53e064) returned 0x0
[0295.939] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0295.939] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0295.939] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0295.939] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0295.939] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0295.939] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0295.939] LocalFree (hMem=0x89ea88) returned 0x0
[0295.939] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0295.939] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0295.939] LocalFree (hMem=0x89eee8) returned 0x0
[0295.939] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0295.939] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0295.939] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0295.939] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0295.939] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0295.940] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0295.940] GetCurrentObject (hdc=0x9d010794, type=0x1) returned 0xb00017
[0295.940] GetCurrentObject (hdc=0x9d010794, type=0x2) returned 0x900010
[0295.940] GetCurrentObject (hdc=0x9d010794, type=0x7) returned 0x1e0507b9
[0295.940] GetCurrentObject (hdc=0x9d010794, type=0x6) returned 0x8a01c2
[0295.940] SaveDC (hdc=0x9d010794) returned 1
[0295.940] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x120407a1
[0295.940] GetClipRgn (hdc=0x9d010794, hrgn=0x120407a1) returned 0
[0295.940] SelectClipRgn (hdc=0x9d010794, hrgn=0xf604051e) returned 2
[0295.940] DeleteObject (ho=0x120407a1) returned 1
[0295.940] DeleteObject (ho=0xf604051e) returned 1
[0295.940] OffsetViewportOrgEx (in: hdc=0x9d010794, x=0, y=0, lppt=0x244131c | out: lppt=0x244131c) returned 1
[0295.940] DrawThemeParentBackground () returned 0x0
[0295.941] GetWindowPlacement (in: hWnd=0x2200ea, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0295.941] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0295.941] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0295.941] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0295.941] GetSystemMetrics (nIndex=42) returned 0
[0295.941] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0295.941] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0295.941] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0295.941] GetCurrentObject (hdc=0x9d010794, type=0x1) returned 0xb00017
[0295.941] GetCurrentObject (hdc=0x9d010794, type=0x2) returned 0x900010
[0295.941] GetCurrentObject (hdc=0x9d010794, type=0x7) returned 0x1e0507b9
[0295.941] GetCurrentObject (hdc=0x9d010794, type=0x6) returned 0x8a01c2
[0295.941] SaveDC (hdc=0x9d010794) returned 2
[0295.941] GetNearestColor (hdc=0x9d010794, color=0xf0f0f0) returned 0xf0f0f0
[0295.941] CreateSolidBrush (color=0xf0f0f0) returned 0x6310078d
[0295.942] FillRect (hDC=0x9d010794, lprc=0x53dac8, hbr=0x6310078d) returned 1
[0295.942] DeleteObject (ho=0x6310078d) returned 1
[0295.942] RestoreDC (hdc=0x9d010794, nSavedDC=-1) returned 1
[0295.942] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0295.942] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0295.942] GetSystemMetrics (nIndex=42) returned 0
[0295.942] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0295.942] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0295.942] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0295.942] GetCurrentObject (hdc=0x9d010794, type=0x1) returned 0xb00017
[0295.942] GetCurrentObject (hdc=0x9d010794, type=0x2) returned 0x900010
[0295.942] GetCurrentObject (hdc=0x9d010794, type=0x7) returned 0x1e0507b9
[0295.942] GetCurrentObject (hdc=0x9d010794, type=0x6) returned 0x8a01c2
[0295.942] SaveDC (hdc=0x9d010794) returned 2
[0295.942] GetNearestColor (hdc=0x9d010794, color=0xf0f0f0) returned 0xf0f0f0
[0295.943] CreateSolidBrush (color=0xf0f0f0) returned 0x6410078d
[0295.943] FillRect (hDC=0x9d010794, lprc=0x53da68, hbr=0x6410078d) returned 1
[0295.943] DeleteObject (ho=0x6410078d) returned 1
[0295.943] RestoreDC (hdc=0x9d010794, nSavedDC=-1) returned 1
[0295.943] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0295.943] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0295.943] GetSystemMetrics (nIndex=42) returned 0
[0295.943] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0295.943] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0295.943] RestoreDC (hdc=0x9d010794, nSavedDC=-1) returned 1
[0295.943] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9d010794) returned 0x0
[0295.943] IsAppThemed () returned 0x1
[0295.944] GetThemeAppProperties () returned 0x3
[0295.944] GetThemeAppProperties () returned 0x3
[0295.944] IsAppThemed () returned 0x1
[0295.944] GetThemeAppProperties () returned 0x3
[0295.944] GetThemeAppProperties () returned 0x3
[0295.944] IsThemePartDefined () returned 0x1
[0295.944] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0295.944] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0295.944] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0295.944] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0295.944] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0295.944] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0295.944] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0295.944] LocalFree (hMem=0x89ea88) returned 0x0
[0295.944] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0295.944] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0295.944] LocalFree (hMem=0x89ea88) returned 0x0
[0295.944] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0295.944] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0295.945] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0295.945] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0295.945] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0295.945] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0295.945] GetCurrentObject (hdc=0x9d010794, type=0x1) returned 0xb00017
[0295.945] GetCurrentObject (hdc=0x9d010794, type=0x2) returned 0x900010
[0295.945] GetCurrentObject (hdc=0x9d010794, type=0x7) returned 0x1e0507b9
[0295.945] GetCurrentObject (hdc=0x9d010794, type=0x6) returned 0x8a01c2
[0295.945] SaveDC (hdc=0x9d010794) returned 1
[0295.945] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf704051e
[0295.945] GetClipRgn (hdc=0x9d010794, hrgn=0xf704051e) returned 0
[0295.945] SelectClipRgn (hdc=0x9d010794, hrgn=0x140407a1) returned 2
[0295.945] DeleteObject (ho=0xf704051e) returned 1
[0295.945] DeleteObject (ho=0x140407a1) returned 1
[0295.945] OffsetViewportOrgEx (in: hdc=0x9d010794, x=0, y=0, lppt=0x2441ba4 | out: lppt=0x2441ba4) returned 1
[0295.945] IsAppThemed () returned 0x1
[0295.946] GetThemeAppProperties () returned 0x3
[0295.946] GetThemeAppProperties () returned 0x3
[0295.946] DrawThemeBackground () returned 0x0
[0295.946] RestoreDC (hdc=0x9d010794, nSavedDC=-1) returned 1
[0295.946] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9d010794) returned 0x0
[0295.946] GdipCreateRegion (region=0x53dfec) returned 0x0
[0295.946] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0295.946] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0295.946] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0295.946] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0295.946] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0295.946] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0295.946] LocalFree (hMem=0x89ea88) returned 0x0
[0295.946] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0295.946] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0295.946] LocalFree (hMem=0x89ee08) returned 0x0
[0295.946] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0295.946] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0295.946] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0295.947] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0295.947] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0295.947] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0295.947] GetCurrentObject (hdc=0x9d010794, type=0x1) returned 0xb00017
[0295.947] GetCurrentObject (hdc=0x9d010794, type=0x2) returned 0x900010
[0295.947] GetCurrentObject (hdc=0x9d010794, type=0x7) returned 0x1e0507b9
[0295.947] GetCurrentObject (hdc=0x9d010794, type=0x6) returned 0x8a01c2
[0295.947] SaveDC (hdc=0x9d010794) returned 1
[0295.947] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x150407a1
[0295.947] GetClipRgn (hdc=0x9d010794, hrgn=0x150407a1) returned 0
[0295.947] SelectClipRgn (hdc=0x9d010794, hrgn=0xf804051e) returned 2
[0295.947] DeleteObject (ho=0x150407a1) returned 1
[0295.947] DeleteObject (ho=0xf804051e) returned 1
[0295.947] OffsetViewportOrgEx (in: hdc=0x9d010794, x=0, y=0, lppt=0x2441e78 | out: lppt=0x2441e78) returned 1
[0295.947] IsAppThemed () returned 0x1
[0295.947] GetThemeAppProperties () returned 0x3
[0295.948] GetThemeAppProperties () returned 0x3
[0295.948] GetThemeBackgroundContentRect () returned 0x0
[0295.948] RestoreDC (hdc=0x9d010794, nSavedDC=-1) returned 1
[0295.948] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9d010794) returned 0x0
[0295.948] IsAppThemed () returned 0x1
[0295.948] GetThemeAppProperties () returned 0x3
[0295.948] GetThemeAppProperties () returned 0x3
[0295.948] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0295.948] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0295.948] GetCurrentObject (hdc=0x9d010794, type=0x1) returned 0xb00017
[0295.948] GetCurrentObject (hdc=0x9d010794, type=0x2) returned 0x900010
[0295.948] GetCurrentObject (hdc=0x9d010794, type=0x7) returned 0x1e0507b9
[0295.948] GetCurrentObject (hdc=0x9d010794, type=0x6) returned 0x8a01c2
[0295.948] SaveDC (hdc=0x9d010794) returned 1
[0295.948] GetTextAlign (hdc=0x9d010794) returned 0x0
[0295.948] GetTextColor (hdc=0x9d010794) returned 0x0
[0295.948] GetCurrentObject (hdc=0x9d010794, type=0x6) returned 0x8a01c2
[0295.948] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0295.949] SelectObject (hdc=0x9d010794, h=0x730a066d) returned 0x8a01c2
[0295.949] GetBkMode (hdc=0x9d010794) returned 2
[0295.949] SetBkMode (hdc=0x9d010794, mode=1) returned 2
[0295.949] DrawTextExW (in: hdc=0x9d010794, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x2442218 | out: lpchText="OK", lprc=0x53df84) returned 13
[0295.949] DrawTextExW (in: hdc=0x9d010794, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x2442218 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0295.950] RestoreDC (hdc=0x9d010794, nSavedDC=-1) returned 1
[0295.950] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9d010794) returned 0x0
[0295.950] GetFocus () returned 0x1d0122
[0295.950] IsAppThemed () returned 0x1
[0295.950] GetThemeAppProperties () returned 0x3
[0295.950] GetThemeAppProperties () returned 0x3
[0295.950] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0295.950] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x9d010794, x1=0, y1=0, rop=0xcc0020) returned 1
[0295.960] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9d010794) returned 0x0
[0295.960] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0295.961] SelectObject (hdc=0x9d010794, h=0x85000f) returned 0x1e0507b9
[0295.961] DeleteDC (hdc=0x9d010794) returned 1
[0295.961] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0295.961] EndPaint (hWnd=0x19004e, lpPaint=0x53e2e4) returned 1
[0295.962] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0295.962] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0295.962] WaitMessage () returned 1
[0296.010] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0296.010] IsWindowUnicode (hWnd=0x19004e) returned 1
[0296.010] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0296.010] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0296.010] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0296.011] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0296.011] IsWindowUnicode (hWnd=0x19004e) returned 1
[0296.011] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0296.011] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0296.011] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0296.011] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x2a1, wParam=0x0, lParam=0xa0020) returned 0x0
[0296.011] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0296.011] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0296.011] WaitMessage () returned 1
[0296.128] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0296.129] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0296.129] IsWindowUnicode (hWnd=0x19004e) returned 1
[0296.129] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0296.129] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0296.130] GetDlgItem (hDlg=0x2200ea, nIDDlgItem=0) returned 0x0
[0296.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x210, wParam=0x201, lParam=0x160142) returned 0x0
[0296.130] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x21, wParam=0x2200ea, lParam=0x2010001) returned 0x1
[0296.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x21, wParam=0x2200ea, lParam=0x2010001) returned 0x1
[0296.130] SetCursor (hCursor=0x10003) returned 0x10003
[0296.130] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0296.130] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0296.130] GetKeyState (nVirtKey=1) returned -128
[0296.149] GetKeyState (nVirtKey=2) returned 0
[0296.149] GetKeyState (nVirtKey=4) returned 0
[0296.149] GetKeyState (nVirtKey=5) returned 0
[0296.149] GetKeyState (nVirtKey=6) returned 0
[0296.150] IsWindowVisible (hWnd=0x19004e) returned 1
[0296.150] IsWindowEnabled (hWnd=0x19004e) returned 1
[0296.150] SetFocus (hWnd=0x19004e) returned 0x1d0122
[0296.153] GetFocus () returned 0x19004e
[0296.153] IsChild (hWndParent=0x2200ea, hWnd=0x19004e) returned 1
[0296.154] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x8, wParam=0x19004e, lParam=0x0) returned 0x1
[0296.154] SendMessageW (hWnd=0x1d0122, Msg=0x2111, wParam=0x2000122, lParam=0x1d0122) returned 0x0
[0296.155] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0296.158] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0296.159] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0296.159] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0296.160] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0296.160] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0296.163] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0296.164] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x7, wParam=0x1d0122, lParam=0x0) returned 0x0
[0296.164] GetStockObject (i=5) returned 0x900015
[0296.164] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0296.164] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0xd, wParam=0x3, lParam=0x89e728) returned 0x2
[0296.164] GetDlgItem (hDlg=0x2200ea, nIDDlgItem=1638478) returned 0x19004e
[0296.164] SendMessageW (hWnd=0x19004e, Msg=0x202b, wParam=0x19004e, lParam=0x53de74) returned 0x0
[0296.164] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x202b, wParam=0x19004e, lParam=0x53de74) returned 0x0
[0296.165] InvalidateRect (hWnd=0x19004e, lpRect=0x0, bErase=0) returned 1
[0296.167] GetFocus () returned 0x19004e
[0296.167] GetFocus () returned 0x19004e
[0296.167] GetFocus () returned 0x19004e
[0296.168] GetKeyState (nVirtKey=1) returned -128
[0296.168] GetKeyState (nVirtKey=2) returned 0
[0296.168] GetKeyState (nVirtKey=4) returned 0
[0296.168] GetKeyState (nVirtKey=5) returned 0
[0296.168] GetKeyState (nVirtKey=6) returned 0
[0296.168] GetCapture () returned 0x0
[0296.168] SetCapture (hWnd=0x19004e) returned 0x0
[0296.168] GetKeyState (nVirtKey=1) returned -128
[0296.168] GetKeyState (nVirtKey=2) returned 0
[0296.168] GetKeyState (nVirtKey=4) returned 0
[0296.168] GetKeyState (nVirtKey=5) returned 0
[0296.168] GetKeyState (nVirtKey=6) returned 0
[0296.168] NotifyWinEvent (event=0x800a, hwnd=0x19004e, idObject=-4, idChild=0)
[0296.168] InvalidateRect (hWnd=0x19004e, lpRect=0x53e4c8, bErase=0) returned 1
[0296.168] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0296.168] IsWindowUnicode (hWnd=0x19004e) returned 1
[0296.169] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0296.169] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0296.169] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0296.169] MapWindowPoints (in: hWndFrom=0x19004e, hWndTo=0x0, lpPoints=0x24423fc, cPoints=0x1 | out: lpPoints=0x24423fc) returned 25756481
[0296.169] NotifyWinEvent (event=0x800a, hwnd=0x19004e, idObject=-4, idChild=0)
[0296.169] InvalidateRect (hWnd=0x19004e, lpRect=0x53e468, bErase=0) returned 1
[0296.169] UpdateWindow (hWnd=0x19004e) returned 1
[0296.169] BeginPaint (in: hWnd=0x19004e, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0296.169] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0296.169] CreateCompatibleDC (hdc=0x10105d6) returned 0x9e010794
[0296.170] SelectObject (hdc=0x9e010794, h=0x1e0507b9) returned 0x85000f
[0296.170] GdipCreateFromHDC (hdc=0x9e010794, graphics=0x53df98) returned 0x0
[0296.170] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0296.170] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0296.170] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0296.170] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0296.170] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0296.170] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0296.170] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0296.170] LocalFree (hMem=0x89ec80) returned 0x0
[0296.171] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0296.171] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0296.171] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0296.171] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0296.171] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0296.171] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa890dbd) returned 0x0
[0296.171] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0296.171] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0296.171] GetCurrentObject (hdc=0x9e010794, type=0x1) returned 0xb00017
[0296.171] GetCurrentObject (hdc=0x9e010794, type=0x2) returned 0x900010
[0296.171] GetCurrentObject (hdc=0x9e010794, type=0x7) returned 0x1e0507b9
[0296.171] GetCurrentObject (hdc=0x9e010794, type=0x6) returned 0x8a01c2
[0296.171] SaveDC (hdc=0x9e010794) returned 1
[0296.171] GetNearestColor (hdc=0x9e010794, color=0xf0f0f0) returned 0xf0f0f0
[0296.172] GetNearestColor (hdc=0x9e010794, color=0xa0a0a0) returned 0xa0a0a0
[0296.172] GetNearestColor (hdc=0x9e010794, color=0x696969) returned 0x696969
[0296.172] GetNearestColor (hdc=0x9e010794, color=0xa0a0a0) returned 0xa0a0a0
[0296.172] GetNearestColor (hdc=0x9e010794, color=0x0) returned 0x0
[0296.172] GetNearestColor (hdc=0x9e010794, color=0xffffff) returned 0xffffff
[0296.172] GetNearestColor (hdc=0x9e010794, color=0xe5e5e5) returned 0xe5e5e5
[0296.172] GetNearestColor (hdc=0x9e010794, color=0xd7d7d7) returned 0xd7d7d7
[0296.172] GetNearestColor (hdc=0x9e010794, color=0x0) returned 0x0
[0296.172] RestoreDC (hdc=0x9e010794, nSavedDC=-1) returned 1
[0296.172] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9e010794) returned 0x0
[0296.173] IsAppThemed () returned 0x1
[0296.173] GetThemeAppProperties () returned 0x3
[0296.173] GetThemeAppProperties () returned 0x3
[0296.173] IsAppThemed () returned 0x1
[0296.173] GetThemeAppProperties () returned 0x3
[0296.173] GetThemeAppProperties () returned 0x3
[0296.173] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x2442b70 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0296.173] IsAppThemed () returned 0x1
[0296.173] GetThemeAppProperties () returned 0x3
[0296.174] GetThemeAppProperties () returned 0x3
[0296.174] IsAppThemed () returned 0x1
[0296.174] GetThemeAppProperties () returned 0x3
[0296.174] GetThemeAppProperties () returned 0x3
[0296.174] IsAppThemed () returned 0x1
[0296.174] GetThemeAppProperties () returned 0x3
[0296.174] GetThemeAppProperties () returned 0x3
[0296.174] IsAppThemed () returned 0x1
[0296.174] GetThemeAppProperties () returned 0x3
[0296.174] GetThemeAppProperties () returned 0x3
[0296.174] IsThemePartDefined () returned 0x1
[0296.174] IsAppThemed () returned 0x1
[0296.174] GetThemeAppProperties () returned 0x3
[0296.174] GetThemeAppProperties () returned 0x3
[0296.174] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0296.174] IsAppThemed () returned 0x1
[0296.174] GetThemeAppProperties () returned 0x3
[0296.174] GetThemeAppProperties () returned 0x3
[0296.174] IsAppThemed () returned 0x1
[0296.174] GetThemeAppProperties () returned 0x3
[0296.175] GetThemeAppProperties () returned 0x3
[0296.175] IsThemePartDefined () returned 0x1
[0296.175] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0296.175] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0296.175] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0296.175] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0296.175] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0296.175] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0296.175] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0296.175] LocalFree (hMem=0x89ea88) returned 0x0
[0296.175] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0296.175] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0296.175] LocalFree (hMem=0x89ee08) returned 0x0
[0296.175] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0296.175] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0296.175] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0296.175] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0296.175] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0296.176] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0296.176] GetCurrentObject (hdc=0x9e010794, type=0x1) returned 0xb00017
[0296.176] GetCurrentObject (hdc=0x9e010794, type=0x2) returned 0x900010
[0296.176] GetCurrentObject (hdc=0x9e010794, type=0x7) returned 0x1e0507b9
[0296.176] GetCurrentObject (hdc=0x9e010794, type=0x6) returned 0x8a01c2
[0296.176] SaveDC (hdc=0x9e010794) returned 1
[0296.176] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf904051e
[0296.176] GetClipRgn (hdc=0x9e010794, hrgn=0xf904051e) returned 0
[0296.176] SelectClipRgn (hdc=0x9e010794, hrgn=0x190407a1) returned 2
[0296.176] DeleteObject (ho=0xf904051e) returned 1
[0296.176] DeleteObject (ho=0x190407a1) returned 1
[0296.176] OffsetViewportOrgEx (in: hdc=0x9e010794, x=0, y=0, lppt=0x2443220 | out: lppt=0x2443220) returned 1
[0296.176] DrawThemeParentBackground () returned 0x0
[0296.177] GetWindowPlacement (in: hWnd=0x2200ea, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0296.177] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0296.177] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0296.177] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0296.177] GetSystemMetrics (nIndex=42) returned 0
[0296.177] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0296.177] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0296.177] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0296.177] GetCurrentObject (hdc=0x9e010794, type=0x1) returned 0xb00017
[0296.177] GetCurrentObject (hdc=0x9e010794, type=0x2) returned 0x900010
[0296.177] GetCurrentObject (hdc=0x9e010794, type=0x7) returned 0x1e0507b9
[0296.178] GetCurrentObject (hdc=0x9e010794, type=0x6) returned 0x8a01c2
[0296.178] SaveDC (hdc=0x9e010794) returned 2
[0296.178] GetNearestColor (hdc=0x9e010794, color=0xf0f0f0) returned 0xf0f0f0
[0296.178] CreateSolidBrush (color=0xf0f0f0) returned 0x6510078d
[0296.178] FillRect (hDC=0x9e010794, lprc=0x53d760, hbr=0x6510078d) returned 1
[0296.178] DeleteObject (ho=0x6510078d) returned 1
[0296.178] RestoreDC (hdc=0x9e010794, nSavedDC=-1) returned 1
[0296.179] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0296.179] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0296.179] GetSystemMetrics (nIndex=42) returned 0
[0296.179] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0296.179] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0296.179] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0296.179] GetCurrentObject (hdc=0x9e010794, type=0x1) returned 0xb00017
[0296.179] GetCurrentObject (hdc=0x9e010794, type=0x2) returned 0x900010
[0296.179] GetCurrentObject (hdc=0x9e010794, type=0x7) returned 0x1e0507b9
[0296.179] GetCurrentObject (hdc=0x9e010794, type=0x6) returned 0x8a01c2
[0296.179] SaveDC (hdc=0x9e010794) returned 2
[0296.179] GetNearestColor (hdc=0x9e010794, color=0xf0f0f0) returned 0xf0f0f0
[0296.179] CreateSolidBrush (color=0xf0f0f0) returned 0x6610078d
[0296.179] FillRect (hDC=0x9e010794, lprc=0x53d700, hbr=0x6610078d) returned 1
[0296.179] DeleteObject (ho=0x6610078d) returned 1
[0296.180] RestoreDC (hdc=0x9e010794, nSavedDC=-1) returned 1
[0296.180] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0296.180] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0296.180] GetSystemMetrics (nIndex=42) returned 0
[0296.180] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0296.180] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0296.180] RestoreDC (hdc=0x9e010794, nSavedDC=-1) returned 1
[0296.180] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9e010794) returned 0x0
[0296.180] IsAppThemed () returned 0x1
[0296.180] GetThemeAppProperties () returned 0x3
[0296.180] GetThemeAppProperties () returned 0x3
[0296.180] IsAppThemed () returned 0x1
[0296.180] GetThemeAppProperties () returned 0x3
[0296.180] GetThemeAppProperties () returned 0x3
[0296.180] IsThemePartDefined () returned 0x1
[0296.181] GdipCreateRegion (region=0x53dc80) returned 0x0
[0296.181] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0296.181] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0296.181] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0296.181] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0296.181] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0296.181] LocalFree (hMem=0x89ea88) returned 0x0
[0296.181] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0296.181] LocalFree (hMem=0x89ea88) returned 0x0
[0296.181] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0296.181] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0296.181] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0296.181] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0296.181] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0296.181] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0296.181] GetCurrentObject (hdc=0x9e010794, type=0x1) returned 0xb00017
[0296.181] GetCurrentObject (hdc=0x9e010794, type=0x2) returned 0x900010
[0296.181] GetCurrentObject (hdc=0x9e010794, type=0x7) returned 0x1e0507b9
[0296.182] GetCurrentObject (hdc=0x9e010794, type=0x6) returned 0x8a01c2
[0296.182] SaveDC (hdc=0x9e010794) returned 1
[0296.182] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1a0407a1
[0296.182] GetClipRgn (hdc=0x9e010794, hrgn=0x1a0407a1) returned 0
[0296.182] SelectClipRgn (hdc=0x9e010794, hrgn=0xfb04051e) returned 2
[0296.182] DeleteObject (ho=0x1a0407a1) returned 1
[0296.182] DeleteObject (ho=0xfb04051e) returned 1
[0296.182] OffsetViewportOrgEx (in: hdc=0x9e010794, x=0, y=0, lppt=0x2443aa8 | out: lppt=0x2443aa8) returned 1
[0296.182] IsAppThemed () returned 0x1
[0296.182] GetThemeAppProperties () returned 0x3
[0296.182] GetThemeAppProperties () returned 0x3
[0296.182] DrawThemeBackground () returned 0x0
[0296.182] RestoreDC (hdc=0x9e010794, nSavedDC=-1) returned 1
[0296.182] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9e010794) returned 0x0
[0296.183] GdipCreateRegion (region=0x53dc84) returned 0x0
[0296.183] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0296.183] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0296.183] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0296.183] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0296.183] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0296.183] LocalFree (hMem=0x89ea88) returned 0x0
[0296.183] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0296.183] LocalFree (hMem=0x89ec80) returned 0x0
[0296.183] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0296.183] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0296.183] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0296.183] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0296.183] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0296.183] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0296.183] GetCurrentObject (hdc=0x9e010794, type=0x1) returned 0xb00017
[0296.183] GetCurrentObject (hdc=0x9e010794, type=0x2) returned 0x900010
[0296.183] GetCurrentObject (hdc=0x9e010794, type=0x7) returned 0x1e0507b9
[0296.183] GetCurrentObject (hdc=0x9e010794, type=0x6) returned 0x8a01c2
[0296.184] SaveDC (hdc=0x9e010794) returned 1
[0296.184] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfc04051e
[0296.184] GetClipRgn (hdc=0x9e010794, hrgn=0xfc04051e) returned 0
[0296.184] SelectClipRgn (hdc=0x9e010794, hrgn=0x1b0407a1) returned 2
[0296.184] DeleteObject (ho=0xfc04051e) returned 1
[0296.184] DeleteObject (ho=0x1b0407a1) returned 1
[0296.184] OffsetViewportOrgEx (in: hdc=0x9e010794, x=0, y=0, lppt=0x2443d7c | out: lppt=0x2443d7c) returned 1
[0296.184] IsAppThemed () returned 0x1
[0296.184] GetThemeAppProperties () returned 0x3
[0296.184] GetThemeAppProperties () returned 0x3
[0296.184] GetThemeBackgroundContentRect () returned 0x0
[0296.184] RestoreDC (hdc=0x9e010794, nSavedDC=-1) returned 1
[0296.184] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9e010794) returned 0x0
[0296.184] IsAppThemed () returned 0x1
[0296.184] GetThemeAppProperties () returned 0x3
[0296.184] GetThemeAppProperties () returned 0x3
[0296.184] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0296.185] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0296.185] GetCurrentObject (hdc=0x9e010794, type=0x1) returned 0xb00017
[0296.185] GetCurrentObject (hdc=0x9e010794, type=0x2) returned 0x900010
[0296.185] GetCurrentObject (hdc=0x9e010794, type=0x7) returned 0x1e0507b9
[0296.185] GetCurrentObject (hdc=0x9e010794, type=0x6) returned 0x8a01c2
[0296.185] SaveDC (hdc=0x9e010794) returned 1
[0296.185] GetTextAlign (hdc=0x9e010794) returned 0x0
[0296.185] GetTextColor (hdc=0x9e010794) returned 0x0
[0296.185] GetCurrentObject (hdc=0x9e010794, type=0x6) returned 0x8a01c2
[0296.185] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0296.185] SelectObject (hdc=0x9e010794, h=0x730a066d) returned 0x8a01c2
[0296.185] GetBkMode (hdc=0x9e010794) returned 2
[0296.185] SetBkMode (hdc=0x9e010794, mode=1) returned 2
[0296.185] DrawTextExW (in: hdc=0x9e010794, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x244411c | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0296.186] DrawTextExW (in: hdc=0x9e010794, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x244411c | out: lpchText="OK", lprc=0x53dd80) returned 13
[0296.186] RestoreDC (hdc=0x9e010794, nSavedDC=-1) returned 1
[0296.186] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9e010794) returned 0x0
[0296.186] GetFocus () returned 0x19004e
[0296.186] IsAppThemed () returned 0x1
[0296.186] GetThemeAppProperties () returned 0x3
[0296.186] GetThemeAppProperties () returned 0x3
[0296.186] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0296.186] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x9e010794, x1=0, y1=0, rop=0xcc0020) returned 1
[0296.187] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9e010794) returned 0x0
[0296.187] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0296.187] SelectObject (hdc=0x9e010794, h=0x85000f) returned 0x1e0507b9
[0296.187] DeleteDC (hdc=0x9e010794) returned 1
[0296.187] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0296.187] EndPaint (hWnd=0x19004e, lpPaint=0x53df7c) returned 1
[0296.187] MapWindowPoints (in: hWndFrom=0x19004e, hWndTo=0x0, lpPoints=0x2444218, cPoints=0x1 | out: lpPoints=0x2444218) returned 25756481
[0296.188] WindowFromPoint (Point=0x361) returned 0x19004e
[0296.188] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0296.188] NotifyWinEvent (event=0x800a, hwnd=0x19004e, idObject=-4, idChild=0)
[0296.188] NotifyWinEvent (event=0x800c, hwnd=0x19004e, idObject=-4, idChild=0)
[0296.188] GetWindowTextLengthW (hWnd=0x1d0122) returned 0
[0296.188] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0296.188] GetSystemMetrics (nIndex=42) returned 0
[0296.188] GetWindowTextW (in: hWnd=0x1d0122, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0296.188] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0296.188] SendMessageW (hWnd=0x2200ea, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0296.188] GetCapture () returned 0x19004e
[0296.189] ReleaseCapture () returned 1
[0296.189] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0296.189] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0296.190] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x84, wParam=0x0, lParam=0x1930361) returned 0x1
[0296.190] IsWindow (hWnd=0x70036) returned 1
[0296.190] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0296.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0296.192] IsWindow (hWnd=0x70036) returned 1
[0296.192] SetActiveWindow (hWnd=0x70036) returned 0x2200ea
[0296.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0296.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0296.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0296.218] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0296.219] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0296.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0296.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0296.220] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x2200ea) returned 0x1
[0296.241] GetFocus () returned 0x19004e
[0296.241] SetFocus (hWnd=0x202c6) returned 0x19004e
[0296.241] GetFocus () returned 0x202c6
[0296.241] IsChild (hWndParent=0x2200ea, hWnd=0x202c6) returned 0
[0296.241] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0296.242] GetCapture () returned 0x0
[0296.242] InvalidateRect (hWnd=0x19004e, lpRect=0x0, bErase=0) returned 1
[0296.243] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0296.244] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0296.246] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0296.246] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0296.246] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0296.246] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0296.247] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0296.247] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x19004e, lParam=0x0) returned 0x0
[0296.247] GetStockObject (i=5) returned 0x900015
[0296.247] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0296.247] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8e9990) returned 0x7
[0296.247] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0296.247] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0296.247] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0296.247] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0296.249] IsWindow (hWnd=0x202c6) returned 1
[0296.249] SetFocus (hWnd=0x202c6) returned 0x202c6
[0296.249] GetWindowLongW (hWnd=0x2200ea, nIndex=-8) returned 458806
[0296.249] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0296.250] GetCurrentThreadId () returned 0x11d0
[0296.250] IsWindow (hWnd=0x70036) returned 1
[0296.250] IsWindow (hWnd=0x70036) returned 1
[0296.250] IsWindowVisible (hWnd=0x70036) returned 1
[0296.250] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0296.250] GetFocus () returned 0x202c6
[0296.250] IsChild (hWndParent=0x2200ea, hWnd=0x202c6) returned 0
[0296.250] ShowWindow (hWnd=0x2200ea, nCmdShow=0) returned 1
[0296.250] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0296.250] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0296.253] GetWindowPlacement (in: hWnd=0x2200ea, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0296.253] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0296.253] GetClientRect (in: hWnd=0x2200ea, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0296.253] GetWindowRect (in: hWnd=0x2200ea, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[0296.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0296.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0296.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0296.255] GetWindowLongW (hWnd=0x2200ea, nIndex=-20) returned 327937
[0296.255] DestroyWindow (hWnd=0x2200ea) returned 1
[0296.273] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0296.273] GetWindowTextLengthW (hWnd=0x2200ea) returned 10
[0296.273] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0296.274] GetSystemMetrics (nIndex=42) returned 0
[0296.274] GetWindowTextW (in: hWnd=0x2200ea, lpString=0x53e444, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0296.274] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0xd, wParam=0xb, lParam=0x53e444) returned 0xa
[0296.274] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0296.274] SendMessageW (hWnd=0x1d0122, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0296.274] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0296.274] SendMessageW (hWnd=0x1d0122, Msg=0xb0, wParam=0x242beb4, lParam=0x53e518) returned 0x0
[0296.274] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xb0, wParam=0x242beb4, lParam=0x53e518) returned 0x0
[0296.274] GetWindowTextLengthW (hWnd=0x1d0122) returned 0
[0296.274] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0296.274] GetSystemMetrics (nIndex=42) returned 0
[0296.274] GetWindowTextW (in: hWnd=0x1d0122, lpString=0x53e438, nMaxCount=1 | out: lpString="") returned 0
[0296.274] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0xd, wParam=0x1, lParam=0x53e438) returned 0x0
[0296.275] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0296.275] GetWindowThreadProcessId (in: hWnd=0x1b02ca, lpdwProcessId=0x53e4ec | out: lpdwProcessId=0x53e4ec) returned 0x11d0
[0296.275] GetWindow (hWnd=0x1b02ca, uCmd=0x5) returned 0x0
[0296.275] GetWindowLongW (hWnd=0x1b02ca, nIndex=-20) returned 65792
[0296.275] DestroyWindow (hWnd=0x1b02ca) returned 1
[0296.275] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1b02ca, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0296.275] GetWindowTextLengthW (hWnd=0x1b02ca) returned 25
[0296.275] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1b02ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19
[0296.275] GetSystemMetrics (nIndex=42) returned 0
[0296.275] GetWindowTextW (in: hWnd=0x1b02ca, lpString=0x53dfa8, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25
[0296.275] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1b02ca, Msg=0xd, wParam=0x1a, lParam=0x53dfa8) returned 0x19
[0296.275] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1b02ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0296.276] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1b02ca, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0296.278] GetWindowTextLengthW (hWnd=0x1d01e2) returned 16
[0296.278] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0296.278] GetSystemMetrics (nIndex=42) returned 0
[0296.278] GetWindowTextW (in: hWnd=0x1d01e2, lpString=0x53e428, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0296.278] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0xd, wParam=0x11, lParam=0x53e428) returned 0x10
[0296.278] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0296.279] InvalidateRect (hWnd=0x19004e, lpRect=0x0, bErase=0) returned 1
[0296.279] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0296.279] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0296.279] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1d0122, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0296.281] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1d01e2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0296.282] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x19004e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0296.284] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x3c013e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0296.285] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2200ea, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
[0296.291] GetProcessWindowStation () returned 0x13c
[0296.291] GetActiveWindow () returned 0x70036
[0296.292] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0296.292] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0296.292] GetCurrentThreadId () returned 0x11d0
[0296.293] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf62b6, lParam=0x0) returned 1
[0296.293] IsWindowVisible (hWnd=0x70036) returned 1
[0296.294] IsWindowEnabled (hWnd=0x70036) returned 1
[0296.294] IsWindowVisible (hWnd=0x602b6) returned 0
[0296.294] IsWindowVisible (hWnd=0x901f8) returned 0
[0296.294] IsWindowVisible (hWnd=0x202d0) returned 0
[0296.294] IsWindowVisible (hWnd=0x202d4) returned 0
[0296.294] GetActiveWindow () returned 0x70036
[0296.294] GetFocus () returned 0x202c6
[0296.294] IsWindow (hWnd=0x70036) returned 1
[0296.294] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0296.294] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0296.326] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0296.326] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0296.328] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0296.341] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x2300ea) returned 0x1
[0296.414] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0296.414] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e244) returned 0x0
[0296.418] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x3d013e, lParam=0x0) returned 0x0
[0296.418] GetCapture () returned 0x0
[0296.418] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0296.419] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0296.421] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0296.421] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0296.424] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x20, wParam=0x70036, lParam=0x200fffe) returned 0x0
[0296.426] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x10105d6
[0296.426] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0296.426] CreateCompatibleDC (hdc=0x10105d6) returned 0xb7010794
[0296.426] SelectObject (hdc=0xb7010794, h=0x1e0507b9) returned 0x85000f
[0296.426] GdipCreateFromHDC (hdc=0xb7010794, graphics=0x53e108) returned 0x0
[0296.427] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0296.427] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0296.427] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0296.427] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0296.427] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0296.427] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0296.427] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0296.427] LocalFree (hMem=0x89eac0) returned 0x0
[0296.427] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0296.427] GdipCreateRegion (region=0x53e150) returned 0x0
[0296.431] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0296.431] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0296.431] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0296.431] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa870dbd) returned 0x0
[0296.431] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0296.432] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0296.432] GetCurrentObject (hdc=0xb7010794, type=0x1) returned 0xb00017
[0296.432] GetCurrentObject (hdc=0xb7010794, type=0x2) returned 0x900010
[0296.432] GetCurrentObject (hdc=0xb7010794, type=0x7) returned 0x1e0507b9
[0296.432] GetCurrentObject (hdc=0xb7010794, type=0x6) returned 0x8a01c2
[0296.432] SaveDC (hdc=0xb7010794) returned 1
[0296.432] GetNearestColor (hdc=0xb7010794, color=0xff) returned 0xff
[0296.432] GetNearestColor (hdc=0xb7010794, color=0x55) returned 0x55
[0296.432] GetNearestColor (hdc=0xb7010794, color=0x0) returned 0x0
[0296.433] GetNearestColor (hdc=0xb7010794, color=0x55) returned 0x55
[0296.433] GetNearestColor (hdc=0xb7010794, color=0x0) returned 0x0
[0296.433] GetNearestColor (hdc=0xb7010794, color=0x8080ff) returned 0x8080ff
[0296.433] GetNearestColor (hdc=0xb7010794, color=0x7373e5) returned 0x7373e5
[0296.433] GetNearestColor (hdc=0xb7010794, color=0xe5) returned 0xe5
[0296.433] GetNearestColor (hdc=0xb7010794, color=0x0) returned 0x0
[0296.433] RestoreDC (hdc=0xb7010794, nSavedDC=-1) returned 1
[0296.433] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb7010794) returned 0x0
[0296.433] IsAppThemed () returned 0x1
[0296.433] GetThemeAppProperties () returned 0x3
[0296.433] GetThemeAppProperties () returned 0x3
[0296.433] IsAppThemed () returned 0x1
[0296.434] GetThemeAppProperties () returned 0x3
[0296.434] GetThemeAppProperties () returned 0x3
[0296.434] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0296.434] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2445510 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0296.434] IsAppThemed () returned 0x1
[0296.434] GetThemeAppProperties () returned 0x3
[0296.434] GetThemeAppProperties () returned 0x3
[0296.434] IsAppThemed () returned 0x1
[0296.434] GetThemeAppProperties () returned 0x3
[0296.435] GetThemeAppProperties () returned 0x3
[0296.435] GetFocus () returned 0x3d013e
[0296.435] IsAppThemed () returned 0x1
[0296.435] GetThemeAppProperties () returned 0x3
[0296.435] GetThemeAppProperties () returned 0x3
[0296.435] IsAppThemed () returned 0x1
[0296.435] GetThemeAppProperties () returned 0x3
[0296.435] GetThemeAppProperties () returned 0x3
[0296.435] IsThemePartDefined () returned 0x1
[0296.435] IsAppThemed () returned 0x1
[0296.435] GetThemeAppProperties () returned 0x3
[0296.435] GetThemeAppProperties () returned 0x3
[0296.435] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0296.435] IsAppThemed () returned 0x1
[0296.435] GetThemeAppProperties () returned 0x3
[0296.435] GetThemeAppProperties () returned 0x3
[0296.435] IsAppThemed () returned 0x1
[0296.435] GetThemeAppProperties () returned 0x3
[0296.435] GetThemeAppProperties () returned 0x3
[0296.435] IsThemePartDefined () returned 0x1
[0296.436] GdipCreateRegion (region=0x53de78) returned 0x0
[0296.436] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0296.436] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0296.436] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0296.436] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0296.436] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0296.436] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0296.436] LocalFree (hMem=0x89eac0) returned 0x0
[0296.436] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0296.436] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0296.436] LocalFree (hMem=0x89eee8) returned 0x0
[0296.437] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0296.437] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0296.437] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0296.437] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0296.437] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0296.437] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0296.437] GetCurrentObject (hdc=0xb7010794, type=0x1) returned 0xb00017
[0296.437] GetCurrentObject (hdc=0xb7010794, type=0x2) returned 0x900010
[0296.437] GetCurrentObject (hdc=0xb7010794, type=0x7) returned 0x1e0507b9
[0296.437] GetCurrentObject (hdc=0xb7010794, type=0x6) returned 0x8a01c2
[0296.437] SaveDC (hdc=0xb7010794) returned 1
[0296.437] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1c0407a1
[0296.437] GetClipRgn (hdc=0xb7010794, hrgn=0x1c0407a1) returned 0
[0296.437] SelectClipRgn (hdc=0xb7010794, hrgn=0x204051e) returned 2
[0296.437] DeleteObject (ho=0x1c0407a1) returned 1
[0296.438] DeleteObject (ho=0x204051e) returned 1
[0296.438] OffsetViewportOrgEx (in: hdc=0xb7010794, x=0, y=0, lppt=0x2445bc0 | out: lppt=0x2445bc0) returned 1
[0296.438] DrawThemeParentBackground () returned 0x0
[0296.438] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0296.438] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0296.438] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0296.438] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0296.438] GetSystemMetrics (nIndex=42) returned 0
[0296.438] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0296.438] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0296.438] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0296.438] GetCurrentObject (hdc=0xb7010794, type=0x1) returned 0xb00017
[0296.438] GetCurrentObject (hdc=0xb7010794, type=0x2) returned 0x900010
[0296.438] GetCurrentObject (hdc=0xb7010794, type=0x7) returned 0x1e0507b9
[0296.438] GetCurrentObject (hdc=0xb7010794, type=0x6) returned 0x8a01c2
[0296.438] SaveDC (hdc=0xb7010794) returned 2
[0296.438] GetNearestColor (hdc=0xb7010794, color=0xff) returned 0xff
[0296.439] CreateSolidBrush (color=0xff) returned 0x6710078d
[0296.439] FillRect (hDC=0xb7010794, lprc=0x53d8d8, hbr=0x6710078d) returned 1
[0296.439] DeleteObject (ho=0x6710078d) returned 1
[0296.439] RestoreDC (hdc=0xb7010794, nSavedDC=-1) returned 1
[0296.439] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0296.439] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0296.439] GetSystemMetrics (nIndex=42) returned 0
[0296.439] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0296.439] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0296.439] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0296.439] GetCurrentObject (hdc=0xb7010794, type=0x1) returned 0xb00017
[0296.439] GetCurrentObject (hdc=0xb7010794, type=0x2) returned 0x900010
[0296.439] GetCurrentObject (hdc=0xb7010794, type=0x7) returned 0x1e0507b9
[0296.439] GetCurrentObject (hdc=0xb7010794, type=0x6) returned 0x8a01c2
[0296.439] SaveDC (hdc=0xb7010794) returned 2
[0296.439] GetNearestColor (hdc=0xb7010794, color=0xff) returned 0xff
[0296.439] CreateSolidBrush (color=0xff) returned 0x6810078d
[0296.439] FillRect (hDC=0xb7010794, lprc=0x53d878, hbr=0x6810078d) returned 1
[0296.440] DeleteObject (ho=0x6810078d) returned 1
[0296.440] RestoreDC (hdc=0xb7010794, nSavedDC=-1) returned 1
[0296.440] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0296.440] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0296.440] GetSystemMetrics (nIndex=42) returned 0
[0296.440] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0296.440] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0296.440] RestoreDC (hdc=0xb7010794, nSavedDC=-1) returned 1
[0296.440] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb7010794) returned 0x0
[0296.440] IsAppThemed () returned 0x1
[0296.440] GetThemeAppProperties () returned 0x3
[0296.440] GetThemeAppProperties () returned 0x3
[0296.440] IsAppThemed () returned 0x1
[0296.440] GetThemeAppProperties () returned 0x3
[0296.440] GetThemeAppProperties () returned 0x3
[0296.440] IsThemePartDefined () returned 0x1
[0296.440] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0296.440] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0296.440] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0296.441] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0296.441] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0296.441] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0296.441] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0296.441] LocalFree (hMem=0x89ec80) returned 0x0
[0296.441] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0296.441] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0296.441] LocalFree (hMem=0x89eac0) returned 0x0
[0296.441] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0296.441] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0296.441] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0296.441] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0296.441] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0296.441] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0296.441] GetCurrentObject (hdc=0xb7010794, type=0x1) returned 0xb00017
[0296.441] GetCurrentObject (hdc=0xb7010794, type=0x2) returned 0x900010
[0296.441] GetCurrentObject (hdc=0xb7010794, type=0x7) returned 0x1e0507b9
[0296.441] GetCurrentObject (hdc=0xb7010794, type=0x6) returned 0x8a01c2
[0296.442] SaveDC (hdc=0xb7010794) returned 1
[0296.442] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x304051e
[0296.442] GetClipRgn (hdc=0xb7010794, hrgn=0x304051e) returned 0
[0296.442] SelectClipRgn (hdc=0xb7010794, hrgn=0x1e0407a1) returned 2
[0296.442] DeleteObject (ho=0x304051e) returned 1
[0296.442] DeleteObject (ho=0x1e0407a1) returned 1
[0296.442] OffsetViewportOrgEx (in: hdc=0xb7010794, x=0, y=0, lppt=0x2446424 | out: lppt=0x2446424) returned 1
[0296.442] IsAppThemed () returned 0x1
[0296.442] GetThemeAppProperties () returned 0x3
[0296.442] GetThemeAppProperties () returned 0x3
[0296.442] DrawThemeBackground () returned 0x0
[0296.442] RestoreDC (hdc=0xb7010794, nSavedDC=-1) returned 1
[0296.442] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb7010794) returned 0x0
[0296.442] GdipCreateRegion (region=0x53de00) returned 0x0
[0296.442] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0296.443] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0296.443] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0296.443] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0296.443] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0296.443] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0296.443] LocalFree (hMem=0x89ec80) returned 0x0
[0296.443] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0296.443] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0296.446] LocalFree (hMem=0x89ee08) returned 0x0
[0296.446] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0296.446] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0296.446] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0296.446] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0296.446] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0296.446] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0296.446] GetCurrentObject (hdc=0xb7010794, type=0x1) returned 0xb00017
[0296.446] GetCurrentObject (hdc=0xb7010794, type=0x2) returned 0x900010
[0296.446] GetCurrentObject (hdc=0xb7010794, type=0x7) returned 0x1e0507b9
[0296.446] GetCurrentObject (hdc=0xb7010794, type=0x6) returned 0x8a01c2
[0296.446] SaveDC (hdc=0xb7010794) returned 1
[0296.447] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1f0407a1
[0296.447] GetClipRgn (hdc=0xb7010794, hrgn=0x1f0407a1) returned 0
[0296.447] SelectClipRgn (hdc=0xb7010794, hrgn=0x404051e) returned 2
[0296.447] DeleteObject (ho=0x1f0407a1) returned 1
[0296.447] DeleteObject (ho=0x404051e) returned 1
[0296.447] OffsetViewportOrgEx (in: hdc=0xb7010794, x=0, y=0, lppt=0x24466f8 | out: lppt=0x24466f8) returned 1
[0296.447] IsAppThemed () returned 0x1
[0296.447] GetThemeAppProperties () returned 0x3
[0296.447] GetThemeAppProperties () returned 0x3
[0296.447] GetThemeBackgroundContentRect () returned 0x0
[0296.447] RestoreDC (hdc=0xb7010794, nSavedDC=-1) returned 1
[0296.447] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb7010794) returned 0x0
[0296.447] IsAppThemed () returned 0x1
[0296.447] GetThemeAppProperties () returned 0x3
[0296.447] GetThemeAppProperties () returned 0x3
[0296.448] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0296.448] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0296.448] GetCurrentObject (hdc=0xb7010794, type=0x1) returned 0xb00017
[0296.448] GetCurrentObject (hdc=0xb7010794, type=0x2) returned 0x900010
[0296.448] GetCurrentObject (hdc=0xb7010794, type=0x7) returned 0x1e0507b9
[0296.448] GetCurrentObject (hdc=0xb7010794, type=0x6) returned 0x8a01c2
[0296.448] SaveDC (hdc=0xb7010794) returned 1
[0296.448] GetTextAlign (hdc=0xb7010794) returned 0x0
[0296.448] GetTextColor (hdc=0xb7010794) returned 0x0
[0296.448] GetCurrentObject (hdc=0xb7010794, type=0x6) returned 0x8a01c2
[0296.448] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0296.448] SelectObject (hdc=0xb7010794, h=0x450a0799) returned 0x8a01c2
[0296.448] GetBkMode (hdc=0xb7010794) returned 2
[0296.448] SetBkMode (hdc=0xb7010794, mode=1) returned 2
[0296.449] DrawTextExW (in: hdc=0xb7010794, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2446a98 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0296.449] DrawTextExW (in: hdc=0xb7010794, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2446a98 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0296.449] RestoreDC (hdc=0xb7010794, nSavedDC=-1) returned 1
[0296.449] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb7010794) returned 0x0
[0296.449] GetFocus () returned 0x3d013e
[0296.449] IsAppThemed () returned 0x1
[0296.449] GetThemeAppProperties () returned 0x3
[0296.449] GetThemeAppProperties () returned 0x3
[0296.449] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0296.450] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0xb7010794, x1=0, y1=0, rop=0xcc0020) returned 1
[0296.450] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb7010794) returned 0x0
[0296.450] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0296.450] SelectObject (hdc=0xb7010794, h=0x85000f) returned 0x1e0507b9
[0296.450] DeleteDC (hdc=0xb7010794) returned 1
[0296.450] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0296.450] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0296.464] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x20, wParam=0x70036, lParam=0x200fffe) returned 0x0
[0297.043] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0297.043] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0297.043] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x2300ea) returned 0x1
[0297.047] GetFocus () returned 0x2300ea
[0297.047] GetAncestor (hwnd=0x2300ea, gaFlags=0x1) returned 0x10010
[0297.047] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0297.047] SetFocus (hWnd=0x202c6) returned 0x0
[0297.050] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0297.052] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0297.052] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0297.061] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0297.061] GetFocus () returned 0x70036
[0297.062] SetFocus (hWnd=0x202c6) returned 0x0
[0297.080] IsWindow (hWnd=0x70036) returned 1
[0297.080] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0297.081] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0297.081] IsWindow (hWnd=0x70036) returned 1
[0297.081] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0297.081] IsWindow (hWnd=0x202c6) returned 1
[0297.081] SetFocus (hWnd=0x202c6) returned 0x70036
[0297.081] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0297.083] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0297.088] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0297.089] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0297.089] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0297.091] GetStockObject (i=5) returned 0x900015
[0297.091] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0297.091] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8e97f8) returned 0x7
[0297.091] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0297.091] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0297.091] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0297.092] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0297.093] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0297.093] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0297.093] GetFocus () returned 0x202c6
[0297.093] GetCapture () returned 0x0
[0297.093] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.094] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930215) returned 0x1
[0297.094] IsWindowUnicode (hWnd=0x202c6) returned 1
[0297.094] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.094] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.094] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.094] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.094] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930215) returned 0x1
[0297.094] IsWindowUnicode (hWnd=0x202c6) returned 1
[0297.094] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.094] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930215) returned 0x1
[0297.094] SetCursor (hCursor=0x10003) returned 0x10003
[0297.095] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.095] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.095] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0297.095] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0297.095] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0297.095] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0297.095] GetKeyState (nVirtKey=1) returned 1
[0297.095] GetKeyState (nVirtKey=2) returned 0
[0297.095] GetKeyState (nVirtKey=4) returned 0
[0297.095] GetKeyState (nVirtKey=5) returned 0
[0297.095] GetKeyState (nVirtKey=6) returned 0
[0297.095] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.095] IsWindowUnicode (hWnd=0x202c6) returned 1
[0297.095] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.095] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.095] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.096] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.096] IsWindowUnicode (hWnd=0x202c6) returned 1
[0297.096] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.096] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.096] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.096] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x8b010786
[0297.097] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0297.097] CreateCompatibleDC (hdc=0x8b010786) returned 0x2601078c
[0297.097] SelectObject (hdc=0x2601078c, h=0x1e0507b9) returned 0x85000f
[0297.097] GdipCreateFromHDC (hdc=0x2601078c, graphics=0x53e958) returned 0x0
[0297.097] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0297.097] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0297.097] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0297.097] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.097] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0297.097] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.097] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0297.097] LocalFree (hMem=0x89ea88) returned 0x0
[0297.097] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.097] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0297.098] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.098] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0297.098] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0297.098] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa850dbd) returned 0x0
[0297.098] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.098] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0297.098] GetCurrentObject (hdc=0x2601078c, type=0x1) returned 0xb00017
[0297.098] GetCurrentObject (hdc=0x2601078c, type=0x2) returned 0x900010
[0297.098] GetCurrentObject (hdc=0x2601078c, type=0x7) returned 0x1e0507b9
[0297.098] GetCurrentObject (hdc=0x2601078c, type=0x6) returned 0x8a01c2
[0297.098] SaveDC (hdc=0x2601078c) returned 1
[0297.098] GetNearestColor (hdc=0x2601078c, color=0xff) returned 0xff
[0297.098] GetNearestColor (hdc=0x2601078c, color=0x55) returned 0x55
[0297.098] GetNearestColor (hdc=0x2601078c, color=0x0) returned 0x0
[0297.098] GetNearestColor (hdc=0x2601078c, color=0x55) returned 0x55
[0297.098] GetNearestColor (hdc=0x2601078c, color=0x0) returned 0x0
[0297.098] GetNearestColor (hdc=0x2601078c, color=0x8080ff) returned 0x8080ff
[0297.099] GetNearestColor (hdc=0x2601078c, color=0x7373e5) returned 0x7373e5
[0297.099] GetNearestColor (hdc=0x2601078c, color=0xe5) returned 0xe5
[0297.099] GetNearestColor (hdc=0x2601078c, color=0x0) returned 0x0
[0297.099] RestoreDC (hdc=0x2601078c, nSavedDC=-1) returned 1
[0297.099] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2601078c) returned 0x0
[0297.099] IsAppThemed () returned 0x1
[0297.099] GetThemeAppProperties () returned 0x3
[0297.099] GetThemeAppProperties () returned 0x3
[0297.099] IsAppThemed () returned 0x1
[0297.099] GetThemeAppProperties () returned 0x3
[0297.099] GetThemeAppProperties () returned 0x3
[0297.099] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x2447334 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0297.100] IsAppThemed () returned 0x1
[0297.100] GetThemeAppProperties () returned 0x3
[0297.100] GetThemeAppProperties () returned 0x3
[0297.100] IsAppThemed () returned 0x1
[0297.100] GetThemeAppProperties () returned 0x3
[0297.100] GetThemeAppProperties () returned 0x3
[0297.100] IsAppThemed () returned 0x1
[0297.100] GetThemeAppProperties () returned 0x3
[0297.100] GetThemeAppProperties () returned 0x3
[0297.100] IsAppThemed () returned 0x1
[0297.100] GetThemeAppProperties () returned 0x3
[0297.100] GetThemeAppProperties () returned 0x3
[0297.100] IsThemePartDefined () returned 0x1
[0297.100] IsAppThemed () returned 0x1
[0297.100] GetThemeAppProperties () returned 0x3
[0297.100] GetThemeAppProperties () returned 0x3
[0297.100] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0297.100] IsAppThemed () returned 0x1
[0297.100] GetThemeAppProperties () returned 0x3
[0297.100] GetThemeAppProperties () returned 0x3
[0297.100] IsAppThemed () returned 0x1
[0297.101] GetThemeAppProperties () returned 0x3
[0297.101] GetThemeAppProperties () returned 0x3
[0297.101] IsThemePartDefined () returned 0x1
[0297.101] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0297.101] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.101] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0297.101] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.101] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0297.101] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.101] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0297.101] LocalFree (hMem=0x89ea88) returned 0x0
[0297.101] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.101] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0297.101] LocalFree (hMem=0x89ea88) returned 0x0
[0297.101] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.101] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0297.101] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0297.101] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0297.101] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.101] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0297.101] GetCurrentObject (hdc=0x2601078c, type=0x1) returned 0xb00017
[0297.102] GetCurrentObject (hdc=0x2601078c, type=0x2) returned 0x900010
[0297.102] GetCurrentObject (hdc=0x2601078c, type=0x7) returned 0x1e0507b9
[0297.102] GetCurrentObject (hdc=0x2601078c, type=0x6) returned 0x8a01c2
[0297.102] SaveDC (hdc=0x2601078c) returned 1
[0297.102] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6604053e
[0297.102] GetClipRgn (hdc=0x2601078c, hrgn=0x6604053e) returned 0
[0297.102] SelectClipRgn (hdc=0x2601078c, hrgn=0x1104051e) returned 2
[0297.102] DeleteObject (ho=0x6604053e) returned 1
[0297.102] DeleteObject (ho=0x1104051e) returned 1
[0297.102] OffsetViewportOrgEx (in: hdc=0x2601078c, x=0, y=0, lppt=0x24479e4 | out: lppt=0x24479e4) returned 1
[0297.102] DrawThemeParentBackground () returned 0x0
[0297.102] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0297.102] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0297.102] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0297.102] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0297.103] GetSystemMetrics (nIndex=42) returned 0
[0297.103] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0297.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0297.103] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0297.103] GetCurrentObject (hdc=0x2601078c, type=0x1) returned 0xb00017
[0297.103] GetCurrentObject (hdc=0x2601078c, type=0x2) returned 0x900010
[0297.103] GetCurrentObject (hdc=0x2601078c, type=0x7) returned 0x1e0507b9
[0297.103] GetCurrentObject (hdc=0x2601078c, type=0x6) returned 0x8a01c2
[0297.103] SaveDC (hdc=0x2601078c) returned 2
[0297.103] GetNearestColor (hdc=0x2601078c, color=0xff) returned 0xff
[0297.103] CreateSolidBrush (color=0xff) returned 0x6a10078d
[0297.103] FillRect (hDC=0x2601078c, lprc=0x53e120, hbr=0x6a10078d) returned 1
[0297.103] DeleteObject (ho=0x6a10078d) returned 1
[0297.103] RestoreDC (hdc=0x2601078c, nSavedDC=-1) returned 1
[0297.103] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0297.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0297.103] GetSystemMetrics (nIndex=42) returned 0
[0297.104] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0297.104] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0297.104] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0297.104] GetCurrentObject (hdc=0x2601078c, type=0x1) returned 0xb00017
[0297.104] GetCurrentObject (hdc=0x2601078c, type=0x2) returned 0x900010
[0297.104] GetCurrentObject (hdc=0x2601078c, type=0x7) returned 0x1e0507b9
[0297.104] GetCurrentObject (hdc=0x2601078c, type=0x6) returned 0x8a01c2
[0297.104] SaveDC (hdc=0x2601078c) returned 2
[0297.104] GetNearestColor (hdc=0x2601078c, color=0xff) returned 0xff
[0297.104] CreateSolidBrush (color=0xff) returned 0x6b10078d
[0297.104] FillRect (hDC=0x2601078c, lprc=0x53e0c0, hbr=0x6b10078d) returned 1
[0297.104] DeleteObject (ho=0x6b10078d) returned 1
[0297.104] RestoreDC (hdc=0x2601078c, nSavedDC=-1) returned 1
[0297.104] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0297.104] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0297.104] GetSystemMetrics (nIndex=42) returned 0
[0297.104] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0297.104] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0297.105] RestoreDC (hdc=0x2601078c, nSavedDC=-1) returned 1
[0297.105] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2601078c) returned 0x0
[0297.105] IsAppThemed () returned 0x1
[0297.105] GetThemeAppProperties () returned 0x3
[0297.105] GetThemeAppProperties () returned 0x3
[0297.105] IsAppThemed () returned 0x1
[0297.105] GetThemeAppProperties () returned 0x3
[0297.105] GetThemeAppProperties () returned 0x3
[0297.105] IsThemePartDefined () returned 0x1
[0297.105] GdipCreateRegion (region=0x53e640) returned 0x0
[0297.105] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.105] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0297.105] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.105] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0297.105] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0297.105] LocalFree (hMem=0x89ee40) returned 0x0
[0297.105] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0297.105] LocalFree (hMem=0x89ee08) returned 0x0
[0297.105] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.105] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0297.105] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0297.106] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0297.106] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.106] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0297.106] GetCurrentObject (hdc=0x2601078c, type=0x1) returned 0xb00017
[0297.106] GetCurrentObject (hdc=0x2601078c, type=0x2) returned 0x900010
[0297.106] GetCurrentObject (hdc=0x2601078c, type=0x7) returned 0x1e0507b9
[0297.106] GetCurrentObject (hdc=0x2601078c, type=0x6) returned 0x8a01c2
[0297.106] SaveDC (hdc=0x2601078c) returned 1
[0297.106] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1204051e
[0297.106] GetClipRgn (hdc=0x2601078c, hrgn=0x1204051e) returned 0
[0297.106] SelectClipRgn (hdc=0x2601078c, hrgn=0x6804053e) returned 2
[0297.106] DeleteObject (ho=0x1204051e) returned 1
[0297.106] DeleteObject (ho=0x6804053e) returned 1
[0297.106] OffsetViewportOrgEx (in: hdc=0x2601078c, x=0, y=0, lppt=0x2448248 | out: lppt=0x2448248) returned 1
[0297.106] IsAppThemed () returned 0x1
[0297.106] GetThemeAppProperties () returned 0x3
[0297.106] GetThemeAppProperties () returned 0x3
[0297.106] DrawThemeBackground () returned 0x0
[0297.106] RestoreDC (hdc=0x2601078c, nSavedDC=-1) returned 1
[0297.107] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2601078c) returned 0x0
[0297.107] GdipCreateRegion (region=0x53e644) returned 0x0
[0297.107] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.107] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0297.107] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.107] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0297.107] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0297.107] LocalFree (hMem=0x89ee08) returned 0x0
[0297.107] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0297.107] LocalFree (hMem=0x89eee8) returned 0x0
[0297.107] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.107] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0297.107] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0297.107] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0297.107] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.107] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0297.107] GetCurrentObject (hdc=0x2601078c, type=0x1) returned 0xb00017
[0297.107] GetCurrentObject (hdc=0x2601078c, type=0x2) returned 0x900010
[0297.107] GetCurrentObject (hdc=0x2601078c, type=0x7) returned 0x1e0507b9
[0297.108] GetCurrentObject (hdc=0x2601078c, type=0x6) returned 0x8a01c2
[0297.108] SaveDC (hdc=0x2601078c) returned 1
[0297.108] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6904053e
[0297.108] GetClipRgn (hdc=0x2601078c, hrgn=0x6904053e) returned 0
[0297.108] SelectClipRgn (hdc=0x2601078c, hrgn=0x1304051e) returned 2
[0297.108] DeleteObject (ho=0x6904053e) returned 1
[0297.108] DeleteObject (ho=0x1304051e) returned 1
[0297.108] OffsetViewportOrgEx (in: hdc=0x2601078c, x=0, y=0, lppt=0x244851c | out: lppt=0x244851c) returned 1
[0297.108] IsAppThemed () returned 0x1
[0297.108] GetThemeAppProperties () returned 0x3
[0297.108] GetThemeAppProperties () returned 0x3
[0297.108] GetThemeBackgroundContentRect () returned 0x0
[0297.108] RestoreDC (hdc=0x2601078c, nSavedDC=-1) returned 1
[0297.108] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2601078c) returned 0x0
[0297.108] IsAppThemed () returned 0x1
[0297.108] GetThemeAppProperties () returned 0x3
[0297.108] GetThemeAppProperties () returned 0x3
[0297.108] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0297.108] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0297.108] GetCurrentObject (hdc=0x2601078c, type=0x1) returned 0xb00017
[0297.108] GetCurrentObject (hdc=0x2601078c, type=0x2) returned 0x900010
[0297.108] GetCurrentObject (hdc=0x2601078c, type=0x7) returned 0x1e0507b9
[0297.108] GetCurrentObject (hdc=0x2601078c, type=0x6) returned 0x8a01c2
[0297.109] SaveDC (hdc=0x2601078c) returned 1
[0297.109] GetTextAlign (hdc=0x2601078c) returned 0x0
[0297.109] GetTextColor (hdc=0x2601078c) returned 0x0
[0297.109] GetCurrentObject (hdc=0x2601078c, type=0x6) returned 0x8a01c2
[0297.109] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0297.109] SelectObject (hdc=0x2601078c, h=0x450a0799) returned 0x8a01c2
[0297.109] GetBkMode (hdc=0x2601078c) returned 2
[0297.109] SetBkMode (hdc=0x2601078c, mode=1) returned 2
[0297.109] DrawTextExW (in: hdc=0x2601078c, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x24488bc | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0297.109] DrawTextExW (in: hdc=0x2601078c, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x24488bc | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0297.110] RestoreDC (hdc=0x2601078c, nSavedDC=-1) returned 1
[0297.110] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2601078c) returned 0x0
[0297.110] GetFocus () returned 0x202c6
[0297.110] IsAppThemed () returned 0x1
[0297.110] GetThemeAppProperties () returned 0x3
[0297.110] GetThemeAppProperties () returned 0x3
[0297.110] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0297.110] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x2601078c, x1=0, y1=0, rop=0xcc0020) returned 1
[0297.110] GdipReleaseDC (graphics=0x5d92c30, hdc=0x2601078c) returned 0x0
[0297.110] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0297.111] SelectObject (hdc=0x2601078c, h=0x85000f) returned 0x1e0507b9
[0297.111] DeleteDC (hdc=0x2601078c) returned 1
[0297.111] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0297.112] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0297.112] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.112] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.112] WaitMessage () returned 1
[0297.120] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.120] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.120] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.120] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.120] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.121] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.121] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.121] WaitMessage () returned 1
[0297.129] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.129] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.129] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.129] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.129] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.130] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.130] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.130] WaitMessage () returned 1
[0297.158] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.158] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.158] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.158] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.158] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.159] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.159] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.159] WaitMessage () returned 1
[0297.160] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.160] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.160] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.160] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.160] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.161] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.161] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.161] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.161] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.161] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.161] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.161] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.162] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.162] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.162] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.162] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.162] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.162] WaitMessage () returned 1
[0297.163] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.163] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.163] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.163] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.163] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.164] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.164] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.164] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.164] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.164] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.165] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.165] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.165] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.165] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.165] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.165] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.166] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.166] WaitMessage () returned 1
[0297.166] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.166] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.166] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.166] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.166] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.168] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.168] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.168] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.168] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.168] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.168] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.168] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.168] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.168] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.168] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.169] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.169] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.169] WaitMessage () returned 1
[0297.169] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.169] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.169] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.169] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.169] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.171] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.171] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.171] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.171] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.171] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.171] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.171] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.171] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.172] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.172] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.172] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.172] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.172] WaitMessage () returned 1
[0297.193] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.193] IsWindowUnicode (hWnd=0x202c6) returned 1
[0297.194] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.194] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.194] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.194] IsWindowUnicode (hWnd=0x202c6) returned 1
[0297.194] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.194] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.194] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.194] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xb0025) returned 0x0
[0297.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.194] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0297.194] WaitMessage () returned 1
[0297.324] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.324] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930215) returned 0x1
[0297.324] IsWindowUnicode (hWnd=0x202c6) returned 1
[0297.324] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.324] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930215) returned 0x1
[0297.325] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0297.325] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12601bf) returned 0x0
[0297.325] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0297.325] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0297.325] SetCursor (hCursor=0x10003) returned 0x10003
[0297.325] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.325] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.325] GetKeyState (nVirtKey=1) returned -128
[0297.325] GetKeyState (nVirtKey=2) returned 0
[0297.325] GetKeyState (nVirtKey=4) returned 0
[0297.325] GetKeyState (nVirtKey=5) returned 0
[0297.325] GetKeyState (nVirtKey=6) returned 0
[0297.325] IsWindowVisible (hWnd=0x202c6) returned 1
[0297.325] IsWindowEnabled (hWnd=0x202c6) returned 1
[0297.326] SetFocus (hWnd=0x202c6) returned 0x202c6
[0297.326] GetFocus () returned 0x202c6
[0297.326] GetFocus () returned 0x202c6
[0297.326] GetFocus () returned 0x202c6
[0297.326] GetKeyState (nVirtKey=1) returned -128
[0297.326] GetKeyState (nVirtKey=2) returned 0
[0297.326] GetKeyState (nVirtKey=4) returned 0
[0297.326] GetKeyState (nVirtKey=5) returned 0
[0297.326] GetKeyState (nVirtKey=6) returned 0
[0297.326] GetCapture () returned 0x0
[0297.326] SetCapture (hWnd=0x202c6) returned 0x0
[0297.326] GetKeyState (nVirtKey=1) returned -128
[0297.326] GetKeyState (nVirtKey=2) returned 0
[0297.326] GetKeyState (nVirtKey=4) returned 0
[0297.326] GetKeyState (nVirtKey=5) returned 0
[0297.326] GetKeyState (nVirtKey=6) returned 0
[0297.326] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0297.327] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0297.327] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.327] IsWindowUnicode (hWnd=0x202c6) returned 1
[0297.327] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0297.327] TranslateMessage (lpMsg=0x53eef8) returned 0
[0297.327] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0297.327] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2448b3c, cPoints=0x1 | out: lpPoints=0x2448b3c) returned 25690608
[0297.327] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0297.327] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0297.327] UpdateWindow (hWnd=0x202c6) returned 1
[0297.327] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x8b010786
[0297.328] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0297.328] CreateCompatibleDC (hdc=0x8b010786) returned 0x550107c6
[0297.328] SelectObject (hdc=0x550107c6, h=0x1e0507b9) returned 0x85000f
[0297.328] GdipCreateFromHDC (hdc=0x550107c6, graphics=0x53e5f0) returned 0x0
[0297.328] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0297.328] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0297.328] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0297.328] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.328] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0297.328] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0297.329] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0297.329] LocalFree (hMem=0x89ec80) returned 0x0
[0297.329] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.329] GdipCreateRegion (region=0x53e638) returned 0x0
[0297.329] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.329] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0297.329] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0297.329] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa830dbd) returned 0x0
[0297.329] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.329] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0297.329] GetCurrentObject (hdc=0x550107c6, type=0x1) returned 0xb00017
[0297.329] GetCurrentObject (hdc=0x550107c6, type=0x2) returned 0x900010
[0297.329] GetCurrentObject (hdc=0x550107c6, type=0x7) returned 0x1e0507b9
[0297.329] GetCurrentObject (hdc=0x550107c6, type=0x6) returned 0x8a01c2
[0297.330] SaveDC (hdc=0x550107c6) returned 1
[0297.330] GetNearestColor (hdc=0x550107c6, color=0xff) returned 0xff
[0297.330] GetNearestColor (hdc=0x550107c6, color=0x55) returned 0x55
[0297.330] GetNearestColor (hdc=0x550107c6, color=0x0) returned 0x0
[0297.330] GetNearestColor (hdc=0x550107c6, color=0x55) returned 0x55
[0297.330] GetNearestColor (hdc=0x550107c6, color=0x0) returned 0x0
[0297.330] GetNearestColor (hdc=0x550107c6, color=0x8080ff) returned 0x8080ff
[0297.330] GetNearestColor (hdc=0x550107c6, color=0x7373e5) returned 0x7373e5
[0297.330] GetNearestColor (hdc=0x550107c6, color=0xe5) returned 0xe5
[0297.330] GetNearestColor (hdc=0x550107c6, color=0x0) returned 0x0
[0297.330] RestoreDC (hdc=0x550107c6, nSavedDC=-1) returned 1
[0297.331] GdipReleaseDC (graphics=0x5d92c30, hdc=0x550107c6) returned 0x0
[0297.331] IsAppThemed () returned 0x1
[0297.331] GetThemeAppProperties () returned 0x3
[0297.331] GetThemeAppProperties () returned 0x3
[0297.331] IsAppThemed () returned 0x1
[0297.331] GetThemeAppProperties () returned 0x3
[0297.331] GetThemeAppProperties () returned 0x3
[0297.331] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x2449258 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0297.332] IsAppThemed () returned 0x1
[0297.332] GetThemeAppProperties () returned 0x3
[0297.332] GetThemeAppProperties () returned 0x3
[0297.332] IsAppThemed () returned 0x1
[0297.332] GetThemeAppProperties () returned 0x3
[0297.332] GetThemeAppProperties () returned 0x3
[0297.332] IsAppThemed () returned 0x1
[0297.332] GetThemeAppProperties () returned 0x3
[0297.332] GetThemeAppProperties () returned 0x3
[0297.332] IsAppThemed () returned 0x1
[0297.332] GetThemeAppProperties () returned 0x3
[0297.332] GetThemeAppProperties () returned 0x3
[0297.332] IsThemePartDefined () returned 0x1
[0297.332] IsAppThemed () returned 0x1
[0297.333] GetThemeAppProperties () returned 0x3
[0297.333] GetThemeAppProperties () returned 0x3
[0297.333] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0297.333] IsAppThemed () returned 0x1
[0297.333] GetThemeAppProperties () returned 0x3
[0297.333] GetThemeAppProperties () returned 0x3
[0297.333] IsAppThemed () returned 0x1
[0297.333] GetThemeAppProperties () returned 0x3
[0297.333] GetThemeAppProperties () returned 0x3
[0297.333] IsThemePartDefined () returned 0x1
[0297.333] GdipCreateRegion (region=0x53e354) returned 0x0
[0297.333] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.333] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0297.333] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.333] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0297.333] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0297.333] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0297.333] LocalFree (hMem=0x89ec80) returned 0x0
[0297.333] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0297.334] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0297.334] LocalFree (hMem=0x89ee08) returned 0x0
[0297.334] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.334] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0297.334] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0297.334] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0297.334] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.334] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0297.334] GetCurrentObject (hdc=0x550107c6, type=0x1) returned 0xb00017
[0297.334] GetCurrentObject (hdc=0x550107c6, type=0x2) returned 0x900010
[0297.334] GetCurrentObject (hdc=0x550107c6, type=0x7) returned 0x1e0507b9
[0297.334] GetCurrentObject (hdc=0x550107c6, type=0x6) returned 0x8a01c2
[0297.334] SaveDC (hdc=0x550107c6) returned 1
[0297.334] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1404051e
[0297.335] GetClipRgn (hdc=0x550107c6, hrgn=0x1404051e) returned 0
[0297.335] SelectClipRgn (hdc=0x550107c6, hrgn=0x6d04053e) returned 2
[0297.335] DeleteObject (ho=0x1404051e) returned 1
[0297.335] DeleteObject (ho=0x6d04053e) returned 1
[0297.335] OffsetViewportOrgEx (in: hdc=0x550107c6, x=0, y=0, lppt=0x2449908 | out: lppt=0x2449908) returned 1
[0297.335] DrawThemeParentBackground () returned 0x0
[0297.335] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0297.335] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0297.335] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0297.335] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0297.335] GetSystemMetrics (nIndex=42) returned 0
[0297.335] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0297.335] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0297.336] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0297.336] GetCurrentObject (hdc=0x550107c6, type=0x1) returned 0xb00017
[0297.336] GetCurrentObject (hdc=0x550107c6, type=0x2) returned 0x900010
[0297.336] GetCurrentObject (hdc=0x550107c6, type=0x7) returned 0x1e0507b9
[0297.336] GetCurrentObject (hdc=0x550107c6, type=0x6) returned 0x8a01c2
[0297.336] SaveDC (hdc=0x550107c6) returned 2
[0297.336] GetNearestColor (hdc=0x550107c6, color=0xff) returned 0xff
[0297.336] CreateSolidBrush (color=0xff) returned 0x6c10078d
[0297.336] FillRect (hDC=0x550107c6, lprc=0x53ddb8, hbr=0x6c10078d) returned 1
[0297.336] DeleteObject (ho=0x6c10078d) returned 1
[0297.336] RestoreDC (hdc=0x550107c6, nSavedDC=-1) returned 1
[0297.336] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0297.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0297.337] GetSystemMetrics (nIndex=42) returned 0
[0297.337] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0297.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0297.337] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0297.337] GetCurrentObject (hdc=0x550107c6, type=0x1) returned 0xb00017
[0297.337] GetCurrentObject (hdc=0x550107c6, type=0x2) returned 0x900010
[0297.337] GetCurrentObject (hdc=0x550107c6, type=0x7) returned 0x1e0507b9
[0297.337] GetCurrentObject (hdc=0x550107c6, type=0x6) returned 0x8a01c2
[0297.337] SaveDC (hdc=0x550107c6) returned 2
[0297.337] GetNearestColor (hdc=0x550107c6, color=0xff) returned 0xff
[0297.337] CreateSolidBrush (color=0xff) returned 0x6d10078d
[0297.337] FillRect (hDC=0x550107c6, lprc=0x53dd58, hbr=0x6d10078d) returned 1
[0297.337] DeleteObject (ho=0x6d10078d) returned 1
[0297.338] RestoreDC (hdc=0x550107c6, nSavedDC=-1) returned 1
[0297.338] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0297.338] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0297.338] GetSystemMetrics (nIndex=42) returned 0
[0297.338] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0297.338] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0297.338] RestoreDC (hdc=0x550107c6, nSavedDC=-1) returned 1
[0297.338] GdipReleaseDC (graphics=0x5d92c30, hdc=0x550107c6) returned 0x0
[0297.338] IsAppThemed () returned 0x1
[0297.338] GetThemeAppProperties () returned 0x3
[0297.338] GetThemeAppProperties () returned 0x3
[0297.339] IsAppThemed () returned 0x1
[0297.339] GetThemeAppProperties () returned 0x3
[0297.339] GetThemeAppProperties () returned 0x3
[0297.339] IsThemePartDefined () returned 0x1
[0297.339] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0297.339] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.339] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0297.339] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.339] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0297.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0297.339] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0297.339] LocalFree (hMem=0x89ec80) returned 0x0
[0297.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0297.339] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0297.339] LocalFree (hMem=0x89ee08) returned 0x0
[0297.339] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.340] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0297.340] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0297.340] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0297.340] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.340] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0297.340] GetCurrentObject (hdc=0x550107c6, type=0x1) returned 0xb00017
[0297.340] GetCurrentObject (hdc=0x550107c6, type=0x2) returned 0x900010
[0297.340] GetCurrentObject (hdc=0x550107c6, type=0x7) returned 0x1e0507b9
[0297.340] GetCurrentObject (hdc=0x550107c6, type=0x6) returned 0x8a01c2
[0297.340] SaveDC (hdc=0x550107c6) returned 1
[0297.340] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e04053e
[0297.340] GetClipRgn (hdc=0x550107c6, hrgn=0x6e04053e) returned 0
[0297.340] SelectClipRgn (hdc=0x550107c6, hrgn=0x1604051e) returned 2
[0297.340] DeleteObject (ho=0x6e04053e) returned 1
[0297.340] DeleteObject (ho=0x1604051e) returned 1
[0297.341] OffsetViewportOrgEx (in: hdc=0x550107c6, x=0, y=0, lppt=0x244a16c | out: lppt=0x244a16c) returned 1
[0297.341] IsAppThemed () returned 0x1
[0297.341] GetThemeAppProperties () returned 0x3
[0297.341] GetThemeAppProperties () returned 0x3
[0297.341] DrawThemeBackground () returned 0x0
[0297.341] RestoreDC (hdc=0x550107c6, nSavedDC=-1) returned 1
[0297.341] GdipReleaseDC (graphics=0x5d92c30, hdc=0x550107c6) returned 0x0
[0297.341] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0297.341] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.341] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0297.341] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.341] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0297.341] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0297.341] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0297.342] LocalFree (hMem=0x89ee08) returned 0x0
[0297.342] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.342] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0297.342] LocalFree (hMem=0x89ea88) returned 0x0
[0297.342] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.342] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0297.342] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0297.342] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0297.342] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.342] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0297.342] GetCurrentObject (hdc=0x550107c6, type=0x1) returned 0xb00017
[0297.342] GetCurrentObject (hdc=0x550107c6, type=0x2) returned 0x900010
[0297.342] GetCurrentObject (hdc=0x550107c6, type=0x7) returned 0x1e0507b9
[0297.342] GetCurrentObject (hdc=0x550107c6, type=0x6) returned 0x8a01c2
[0297.342] SaveDC (hdc=0x550107c6) returned 1
[0297.343] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1704051e
[0297.343] GetClipRgn (hdc=0x550107c6, hrgn=0x1704051e) returned 0
[0297.343] SelectClipRgn (hdc=0x550107c6, hrgn=0x6f04053e) returned 2
[0297.343] DeleteObject (ho=0x1704051e) returned 1
[0297.343] DeleteObject (ho=0x6f04053e) returned 1
[0297.343] OffsetViewportOrgEx (in: hdc=0x550107c6, x=0, y=0, lppt=0x244a440 | out: lppt=0x244a440) returned 1
[0297.343] IsAppThemed () returned 0x1
[0297.343] GetThemeAppProperties () returned 0x3
[0297.343] GetThemeAppProperties () returned 0x3
[0297.343] GetThemeBackgroundContentRect () returned 0x0
[0297.343] RestoreDC (hdc=0x550107c6, nSavedDC=-1) returned 1
[0297.343] GdipReleaseDC (graphics=0x5d92c30, hdc=0x550107c6) returned 0x0
[0297.343] IsAppThemed () returned 0x1
[0297.343] GetThemeAppProperties () returned 0x3
[0297.343] GetThemeAppProperties () returned 0x3
[0297.343] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0297.343] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0297.344] GetCurrentObject (hdc=0x550107c6, type=0x1) returned 0xb00017
[0297.344] GetCurrentObject (hdc=0x550107c6, type=0x2) returned 0x900010
[0297.344] GetCurrentObject (hdc=0x550107c6, type=0x7) returned 0x1e0507b9
[0297.344] GetCurrentObject (hdc=0x550107c6, type=0x6) returned 0x8a01c2
[0297.344] SaveDC (hdc=0x550107c6) returned 1
[0297.344] GetTextAlign (hdc=0x550107c6) returned 0x0
[0297.344] GetTextColor (hdc=0x550107c6) returned 0x0
[0297.344] GetCurrentObject (hdc=0x550107c6, type=0x6) returned 0x8a01c2
[0297.344] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0297.344] SelectObject (hdc=0x550107c6, h=0x450a0799) returned 0x8a01c2
[0297.344] GetBkMode (hdc=0x550107c6) returned 2
[0297.344] SetBkMode (hdc=0x550107c6, mode=1) returned 2
[0297.345] DrawTextExW (in: hdc=0x550107c6, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x244a7e0 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0297.345] DrawTextExW (in: hdc=0x550107c6, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x244a7e0 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0297.345] RestoreDC (hdc=0x550107c6, nSavedDC=-1) returned 1
[0297.345] GdipReleaseDC (graphics=0x5d92c30, hdc=0x550107c6) returned 0x0
[0297.345] GetFocus () returned 0x202c6
[0297.345] IsAppThemed () returned 0x1
[0297.346] GetThemeAppProperties () returned 0x3
[0297.346] GetThemeAppProperties () returned 0x3
[0297.346] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0297.346] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x550107c6, x1=0, y1=0, rop=0xcc0020) returned 1
[0297.346] GdipReleaseDC (graphics=0x5d92c30, hdc=0x550107c6) returned 0x0
[0297.346] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0297.346] SelectObject (hdc=0x550107c6, h=0x85000f) returned 0x1e0507b9
[0297.346] DeleteDC (hdc=0x550107c6) returned 1
[0297.346] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0297.347] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0297.347] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x244a8dc, cPoints=0x1 | out: lpPoints=0x244a8dc) returned 25690608
[0297.347] WindowFromPoint (Point=0x215) returned 0x202c6
[0297.347] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1930215) returned 0x1
[0297.347] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0297.347] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0297.348] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.351] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0297.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.353] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0297.353] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.353] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0297.353] GetDC (hWnd=0x0) returned 0xf0105ee
[0297.353] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e888) returned 0x0
[0297.354] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0297.354] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0297.354] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0297.354] GetSystemMetrics (nIndex=5) returned 1
[0297.354] GetSystemMetrics (nIndex=6) returned 1
[0297.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.355] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0297.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.355] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0297.427] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.428] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0297.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.429] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0297.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.429] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0297.430] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.430] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0297.430] GetSystemMetrics (nIndex=5) returned 1
[0297.430] GetSystemMetrics (nIndex=6) returned 1
[0297.430] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.430] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0297.430] GetSystemMetrics (nIndex=5) returned 1
[0297.430] GetSystemMetrics (nIndex=6) returned 1
[0297.431] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.431] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0297.431] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.431] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0297.432] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.432] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0297.432] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.432] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0297.432] GetSystemMetrics (nIndex=59) returned 1460
[0297.432] GetSystemMetrics (nIndex=60) returned 920
[0297.432] GetSystemMetrics (nIndex=34) returned 136
[0297.432] GetSystemMetrics (nIndex=35) returned 39
[0297.433] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.433] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0297.433] GetCurrentThreadId () returned 0x11d0
[0297.433] GetCurrentThreadId () returned 0x11d0
[0297.433] GetCurrentThreadId () returned 0x11d0
[0297.433] GetCurrentThreadId () returned 0x11d0
[0297.433] GetCurrentThreadId () returned 0x11d0
[0297.433] GetCurrentThreadId () returned 0x11d0
[0297.433] GetCurrentThreadId () returned 0x11d0
[0297.433] GetCurrentThreadId () returned 0x11d0
[0297.433] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.433] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0297.433] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0297.434] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0297.434] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.434] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0297.434] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.435] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0297.435] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2400ea
[0297.435] SetWindowLongW (hWnd=0x2400ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0297.436] GetWindowLongW (hWnd=0x2400ea, nIndex=-4) returned 1950089536
[0297.436] SetWindowLongW (hWnd=0x2400ea, nIndex=-4, dwNewLong=79651590) returned 1950089536
[0297.436] GetWindowLongW (hWnd=0x2400ea, nIndex=-4) returned 79651590
[0297.436] GetWindowLongW (hWnd=0x2400ea, nIndex=-16) returned 113311744
[0297.437] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2400ea, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0297.437] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2400ea, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0297.437] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2400ea, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0297.438] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2400ea, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0297.438] GetClientRect (in: hWnd=0x2400ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0297.438] GetWindowRect (in: hWnd=0x2400ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0297.438] SetWindowTextW (hWnd=0x2400ea, lpString="WindowsFormsParkingWindow") returned 1
[0297.438] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2400ea, Msg=0xc, wParam=0x0, lParam=0x2444608) returned 0x1
[0297.439] GetParent (hWnd=0x2400ea) returned 0x0
[0297.439] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0297.439] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x2400ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1b004e
[0297.440] SetWindowLongW (hWnd=0x1b004e, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0297.440] GetWindowLongW (hWnd=0x1b004e, nIndex=-4) returned 1868147648
[0297.440] SetWindowLongW (hWnd=0x1b004e, nIndex=-4, dwNewLong=79651430) returned 1868147648
[0297.441] GetWindowLongW (hWnd=0x1b004e, nIndex=-4) returned 79651430
[0297.441] GetWindowLongW (hWnd=0x1b004e, nIndex=-16) returned 1174405133
[0297.441] GetWindowLongW (hWnd=0x1b004e, nIndex=-12) returned 0
[0297.441] SetWindowLongW (hWnd=0x1b004e, nIndex=-12, dwNewLong=1769550) returned 0
[0297.441] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0297.441] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0297.442] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0297.442] GetClientRect (in: hWnd=0x1b004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0297.442] GetWindowRect (in: hWnd=0x1b004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0297.442] GetParent (hWnd=0x1b004e) returned 0x2400ea
[0297.442] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2400ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0297.443] SetWindowTextW (hWnd=0x1b004e, lpString="Enter password: ") returned 1
[0297.443] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0297.443] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0297.444] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0297.444] GetClientRect (in: hWnd=0x1b004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0297.444] GetWindowRect (in: hWnd=0x1b004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0297.444] GetParent (hWnd=0x1b004e) returned 0x2400ea
[0297.444] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2400ea, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0297.444] SendMessageW (hWnd=0x1b004e, Msg=0x2210, wParam=0x4e0001, lParam=0x1b004e) returned 0x0
[0297.444] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x2210, wParam=0x4e0001, lParam=0x1b004e) returned 0x0
[0297.444] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0297.444] GetParent (hWnd=0x1b004e) returned 0x2400ea
[0297.444] GdipCreateFromHWND (hwnd=0x1b004e, graphics=0x53e994) returned 0x0
[0297.445] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0297.445] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0297.445] GetProcessWindowStation () returned 0x13c
[0297.445] GetCapture () returned 0x202c6
[0297.445] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0297.446] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0297.446] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0297.446] ReleaseCapture () returned 1
[0297.446] GetActiveWindow () returned 0x70036
[0297.446] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0297.446] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.447] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0297.447] GetCursorPos (in: lpPoint=0x245768c | out: lpPoint=0x245768c*(x=533, y=403)) returned 1
[0297.447] MonitorFromPoint (pt=0x215, dwFlags=0x193) returned 0x10001
[0297.447] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0297.447] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x580107c6
[0297.447] GetDeviceCaps (hdc=0x580107c6, index=12) returned 32
[0297.448] GetDeviceCaps (hdc=0x580107c6, index=14) returned 1
[0297.448] DeleteDC (hdc=0x580107c6) returned 1
[0297.448] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0297.448] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0297.448] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x3e013e
[0297.449] SetWindowLongW (hWnd=0x3e013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0297.449] GetWindowLongW (hWnd=0x3e013e, nIndex=-4) returned 1950089536
[0297.449] SetWindowLongW (hWnd=0x3e013e, nIndex=-4, dwNewLong=79651630) returned 1950089536
[0297.449] GetWindowLongW (hWnd=0x3e013e, nIndex=-4) returned 79651630
[0297.450] GetWindowLongW (hWnd=0x3e013e, nIndex=-16) returned 113770496
[0297.450] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0297.451] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0297.452] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0297.452] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0297.452] GetWindowRect (in: hWnd=0x3e013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0297.452] SetWindowTextW (hWnd=0x3e013e, lpString="Ransomware") returned 1
[0297.452] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xc, wParam=0x0, lParam=0x244a9a4) returned 0x1
[0297.453] GetStartupInfoW (in: lpStartupInfo=0x24579c8 | out: lpStartupInfo=0x24579c8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0297.455] GetParent (hWnd=0x3e013e) returned 0x0
[0297.455] SetWindowLongW (hWnd=0x3e013e, nIndex=-8, dwNewLong=0) returned 0
[0297.456] SendMessageW (hWnd=0x3e013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0297.456] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0297.456] SendMessageW (hWnd=0x3e013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0297.456] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0297.456] GetSystemMenu (hWnd=0x3e013e, bRevert=0) returned 0x7e0095
[0297.457] GetWindowPlacement (in: hWnd=0x3e013e, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0297.457] EnableMenuItem (hMenu=0x7e0095, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0297.457] EnableMenuItem (hMenu=0x7e0095, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0297.457] EnableMenuItem (hMenu=0x7e0095, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0297.457] EnableMenuItem (hMenu=0x7e0095, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0297.458] EnableMenuItem (hMenu=0x7e0095, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0297.458] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0297.458] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0297.458] GetWindowRect (in: hWnd=0x3e013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0297.458] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.458] GetWindowLongW (hWnd=0x3e013e, nIndex=-16) returned 113770496
[0297.458] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.458] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.459] GetSystemMetrics (nIndex=42) returned 0
[0297.459] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.459] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0297.459] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.459] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.459] GetSystemMetrics (nIndex=42) returned 0
[0297.459] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.459] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0297.459] GetCursorPos (in: lpPoint=0x2457b3c | out: lpPoint=0x2457b3c*(x=533, y=403)) returned 1
[0297.460] MonitorFromPoint (pt=0x216, dwFlags=0x192) returned 0x10001
[0297.460] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0297.460] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x5c0107c6
[0297.460] GetDeviceCaps (hdc=0x5c0107c6, index=12) returned 32
[0297.460] GetDeviceCaps (hdc=0x5c0107c6, index=14) returned 1
[0297.460] DeleteDC (hdc=0x5c0107c6) returned 1
[0297.460] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0297.460] GetWindowLongW (hWnd=0x3e013e, nIndex=-16) returned 113770496
[0297.460] GetWindowLongW (hWnd=0x3e013e, nIndex=-20) returned 327937
[0297.460] SetWindowLongW (hWnd=0x3e013e, nIndex=-16, dwNewLong=46661632) returned 113770496
[0297.461] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0297.461] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0297.461] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0297.462] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0297.462] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0297.462] SetWindowLongW (hWnd=0x3e013e, nIndex=-20, dwNewLong=327681) returned 327937
[0297.462] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0297.463] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0297.463] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0297.464] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0297.464] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0297.464] SetWindowPos (hWnd=0x3e013e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0297.465] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0297.465] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0297.465] GetWindowPlacement (in: hWnd=0x3e013e, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0297.465] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0297.465] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0297.465] GetWindowRect (in: hWnd=0x3e013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0297.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0297.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0297.466] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0297.467] RedrawWindow (hWnd=0x3e013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0297.467] GetSystemMenu (hWnd=0x3e013e, bRevert=0) returned 0x7e0095
[0297.467] GetWindowPlacement (in: hWnd=0x3e013e, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0297.467] EnableMenuItem (hMenu=0x7e0095, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0297.467] EnableMenuItem (hMenu=0x7e0095, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0297.467] EnableMenuItem (hMenu=0x7e0095, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0297.467] EnableMenuItem (hMenu=0x7e0095, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0297.467] EnableMenuItem (hMenu=0x7e0095, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0297.467] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0297.467] GetWindowLongW (hWnd=0x3e013e, nIndex=-8) returned 0
[0297.467] SetWindowLongW (hWnd=0x3e013e, nIndex=-8, dwNewLong=458806) returned 0
[0297.469] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0297.469] GetProcessWindowStation () returned 0x13c
[0297.469] GetCurrentThreadId () returned 0x11d0
[0297.469] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf6176, lParam=0x0) returned 1
[0297.469] IsWindowVisible (hWnd=0x3e013e) returned 0
[0297.469] IsWindowVisible (hWnd=0x70036) returned 1
[0297.469] IsWindowEnabled (hWnd=0x70036) returned 1
[0297.469] IsWindowVisible (hWnd=0x602b6) returned 0
[0297.469] IsWindowVisible (hWnd=0x901f8) returned 0
[0297.469] IsWindowVisible (hWnd=0x202d0) returned 0
[0297.469] IsWindowVisible (hWnd=0x202d4) returned 0
[0297.470] GetActiveWindow () returned 0x70036
[0297.470] GetFocus () returned 0x202c6
[0297.470] IsWindow (hWnd=0x70036) returned 1
[0297.470] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0297.470] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0297.471] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0297.471] GetWindowLongW (hWnd=0x3e013e, nIndex=-8) returned 458806
[0297.471] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0297.471] GetCurrentThreadId () returned 0x11d0
[0297.471] GetWindowLongW (hWnd=0x3e013e, nIndex=-8) returned 458806
[0297.471] IsWindowEnabled (hWnd=0x70036) returned 0
[0297.471] IsWindowEnabled (hWnd=0x3e013e) returned 1
[0297.471] ShowWindow (hWnd=0x3e013e, nCmdShow=5) returned 0
[0297.471] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0297.471] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0297.471] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.472] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0297.472] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x3e013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xd02b8
[0297.472] SetWindowLongW (hWnd=0xd02b8, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0297.473] GetWindowLongW (hWnd=0xd02b8, nIndex=-4) returned 1868026976
[0297.473] SetWindowLongW (hWnd=0xd02b8, nIndex=-4, dwNewLong=79651710) returned 1868026976
[0297.473] GetWindowLongW (hWnd=0xd02b8, nIndex=-4) returned 79651710
[0297.473] GetWindowLongW (hWnd=0xd02b8, nIndex=-16) returned 1174470848
[0297.473] GetWindowLongW (hWnd=0xd02b8, nIndex=-12) returned 0
[0297.473] SetWindowLongW (hWnd=0xd02b8, nIndex=-12, dwNewLong=852664) returned 0
[0297.473] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0297.475] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0297.475] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0297.476] SendMessageW (hWnd=0xd02b8, Msg=0x2055, wParam=0xd02b8, lParam=0x3) returned 0x2
[0297.476] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0297.476] GetWindow (hWnd=0xd02b8, uCmd=0x3) returned 0x0
[0297.476] GetClientRect (in: hWnd=0xd02b8, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0297.476] GetWindowRect (in: hWnd=0xd02b8, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0297.476] GetParent (hWnd=0xd02b8) returned 0x3e013e
[0297.476] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3e013e, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0297.476] SendMessageW (hWnd=0xd02b8, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0297.476] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0297.477] SendMessageW (hWnd=0xd02b8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0297.477] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0297.477] GetSystemMetrics (nIndex=5) returned 1
[0297.477] GetSystemMetrics (nIndex=6) returned 1
[0297.477] SendMessageW (hWnd=0xd02b8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0297.477] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0297.477] SendMessageW (hWnd=0xd02b8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0297.477] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0297.478] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0297.478] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0297.478] GetClientRect (in: hWnd=0xd02b8, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0297.478] GetWindowRect (in: hWnd=0xd02b8, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0297.478] GetParent (hWnd=0xd02b8) returned 0x3e013e
[0297.478] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3e013e, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0297.479] SendMessageW (hWnd=0xd02b8, Msg=0x2210, wParam=0x2b80001, lParam=0xd02b8) returned 0x0
[0297.479] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x2210, wParam=0x2b80001, lParam=0xd02b8) returned 0x0
[0297.479] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0297.479] GetParent (hWnd=0xd02b8) returned 0x3e013e
[0297.479] GetParent (hWnd=0x1b004e) returned 0x2400ea
[0297.479] SetParent (hWndChild=0x1b004e, hWndNewParent=0x3e013e) returned 0x2400ea
[0297.479] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0297.480] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0297.480] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0297.481] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0297.481] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0297.481] GetClientRect (in: hWnd=0x1b004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0297.481] GetWindowRect (in: hWnd=0x1b004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0297.481] GetParent (hWnd=0x1b004e) returned 0x3e013e
[0297.481] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3e013e, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0297.481] GetClientRect (in: hWnd=0x1b004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0297.481] GetWindowRect (in: hWnd=0x1b004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0297.481] GetParent (hWnd=0x1b004e) returned 0x3e013e
[0297.481] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3e013e, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0297.481] GetParent (hWnd=0x1b004e) returned 0x3e013e
[0297.481] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0297.481] GetWindow (hWnd=0x1b004e, uCmd=0x3) returned 0x0
[0297.481] SetWindowPos (hWnd=0x1b004e, hWndInsertAfter=0xd02b8, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0297.482] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0297.482] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0297.482] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0297.482] GetClientRect (in: hWnd=0x1b004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0297.482] GetWindowRect (in: hWnd=0x1b004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0297.482] GetParent (hWnd=0x1b004e) returned 0x3e013e
[0297.482] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3e013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0297.482] GetParent (hWnd=0x1b004e) returned 0x3e013e
[0297.483] GetWindow (hWnd=0x1b004e, uCmd=0x3) returned 0xd02b8
[0297.483] GetWindowThreadProcessId (in: hWnd=0x1b004e, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0297.483] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0297.483] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.484] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0297.484] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x3e013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1e01e2
[0297.484] SetWindowLongW (hWnd=0x1e01e2, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0297.484] GetWindowLongW (hWnd=0x1e01e2, nIndex=-4) returned 1868032000
[0297.484] SetWindowLongW (hWnd=0x1e01e2, nIndex=-4, dwNewLong=79651030) returned 1868032000
[0297.485] GetWindowLongW (hWnd=0x1e01e2, nIndex=-4) returned 79651030
[0297.485] GetWindowLongW (hWnd=0x1e01e2, nIndex=-16) returned 1174470667
[0297.485] GetWindowLongW (hWnd=0x1e01e2, nIndex=-12) returned 0
[0297.485] SetWindowLongW (hWnd=0x1e01e2, nIndex=-12, dwNewLong=1966562) returned 0
[0297.485] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0297.485] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0297.486] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0297.487] SendMessageW (hWnd=0x1e01e2, Msg=0x2055, wParam=0x1e01e2, lParam=0x3) returned 0x2
[0297.487] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0297.487] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0297.487] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0297.487] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0297.487] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0297.487] RedrawWindow (hWnd=0xd02b8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0297.487] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0297.487] RedrawWindow (hWnd=0x1b004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0297.488] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0297.488] RedrawWindow (hWnd=0x1e01e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0297.488] RedrawWindow (hWnd=0x3e013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0297.488] GetWindow (hWnd=0x1e01e2, uCmd=0x3) returned 0x1b004e
[0297.488] GetClientRect (in: hWnd=0x1e01e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0297.488] GetWindowRect (in: hWnd=0x1e01e2, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0297.488] GetParent (hWnd=0x1e01e2) returned 0x3e013e
[0297.488] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3e013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0297.488] SetWindowTextW (hWnd=0x1e01e2, lpString="OK") returned 1
[0297.488] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0xc, wParam=0x0, lParam=0x244ee64) returned 0x1
[0297.489] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0297.489] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0297.489] GetClientRect (in: hWnd=0x1e01e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0297.489] GetWindowRect (in: hWnd=0x1e01e2, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0297.489] GetParent (hWnd=0x1e01e2) returned 0x3e013e
[0297.489] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3e013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0297.489] SendMessageW (hWnd=0x1e01e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1e01e2) returned 0x0
[0297.490] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x2210, wParam=0x1e20001, lParam=0x1e01e2) returned 0x0
[0297.490] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0297.491] GetParent (hWnd=0x1e01e2) returned 0x3e013e
[0297.491] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0297.492] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.492] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0297.492] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x3e013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1e0122
[0297.493] SetWindowLongW (hWnd=0x1e0122, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0297.493] GetWindowLongW (hWnd=0x1e0122, nIndex=-4) returned 1868032000
[0297.493] SetWindowLongW (hWnd=0x1e0122, nIndex=-4, dwNewLong=79651070) returned 1868032000
[0297.493] GetWindowLongW (hWnd=0x1e0122, nIndex=-4) returned 79651070
[0297.493] GetWindowLongW (hWnd=0x1e0122, nIndex=-16) returned 1174470667
[0297.493] GetWindowLongW (hWnd=0x1e0122, nIndex=-12) returned 0
[0297.493] SetWindowLongW (hWnd=0x1e0122, nIndex=-12, dwNewLong=1966370) returned 0
[0297.493] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e0122, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0297.494] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e0122, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0297.494] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e0122, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0297.495] SendMessageW (hWnd=0x1e0122, Msg=0x2055, wParam=0x1e0122, lParam=0x3) returned 0x2
[0297.495] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0297.495] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e0122, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0297.495] GetWindow (hWnd=0x1e0122, uCmd=0x3) returned 0x1e01e2
[0297.495] GetClientRect (in: hWnd=0x1e0122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0297.495] GetWindowRect (in: hWnd=0x1e0122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0297.495] GetParent (hWnd=0x1e0122) returned 0x3e013e
[0297.496] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3e013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0297.496] SetWindowTextW (hWnd=0x1e0122, lpString="Cancel") returned 1
[0297.496] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e0122, Msg=0xc, wParam=0x0, lParam=0x2452724) returned 0x1
[0297.496] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e0122, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0297.497] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e0122, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0297.497] GetClientRect (in: hWnd=0x1e0122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0297.497] GetWindowRect (in: hWnd=0x1e0122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0297.497] GetParent (hWnd=0x1e0122) returned 0x3e013e
[0297.497] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3e013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0297.497] SendMessageW (hWnd=0x1e0122, Msg=0x2210, wParam=0x1220001, lParam=0x1e0122) returned 0x0
[0297.497] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e0122, Msg=0x2210, wParam=0x1220001, lParam=0x1e0122) returned 0x0
[0297.497] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e0122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0297.498] GetParent (hWnd=0x1e0122) returned 0x3e013e
[0297.498] GetDC (hWnd=0x0) returned 0x60100ce
[0297.498] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e320) returned 0x0
[0297.498] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0297.498] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0297.499] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0297.499] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0297.499] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0297.499] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0297.499] GetWindowLongW (hWnd=0x3e013e, nIndex=-8) returned 458806
[0297.499] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0297.499] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0297.499] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x630107c6
[0297.500] GetDeviceCaps (hdc=0x630107c6, index=12) returned 32
[0297.500] GetDeviceCaps (hdc=0x630107c6, index=14) returned 1
[0297.500] DeleteDC (hdc=0x630107c6) returned 1
[0297.500] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0297.500] GetWindowThreadProcessId (in: hWnd=0x3e013e, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0297.500] GetCurrentThreadId () returned 0x11d0
[0297.500] PostMessageW (hWnd=0x3e013e, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0297.500] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.500] GetSystemMetrics (nIndex=42) returned 0
[0297.500] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0297.501] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0297.501] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0297.501] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0297.501] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0297.513] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x3e013e) returned 0x1
[0297.516] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0297.516] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0297.516] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0297.516] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0297.519] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0297.519] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0297.519] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0297.520] GetFocus () returned 0x202c6
[0297.520] IsChild (hWndParent=0x3e013e, hWnd=0x202c6) returned 0
[0297.520] GetFocus () returned 0x202c6
[0297.521] SetFocus (hWnd=0xd02b8) returned 0x202c6
[0297.522] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0xd02b8, lParam=0x0) returned 0x0
[0297.522] GetCapture () returned 0x0
[0297.522] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0297.523] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0297.525] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0297.526] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0297.527] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0297.527] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0297.527] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0297.528] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0297.528] GetParent (hWnd=0x3e013e) returned 0x0
[0297.528] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0297.528] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0297.528] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0297.529] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0297.529] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0297.529] GetSysColorBrush (nIndex=5) returned 0x100079
[0297.530] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0297.530] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0297.532] SendMessageW (hWnd=0xd02b8, Msg=0x2111, wParam=0x10002b8, lParam=0xd02b8) returned 0x0
[0297.532] SendMessageW (hWnd=0xd02b8, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0297.532] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0297.532] GetKeyState (nVirtKey=1) returned 0
[0297.532] GetKeyState (nVirtKey=2) returned 0
[0297.532] GetKeyState (nVirtKey=4) returned 0
[0297.532] GetKeyState (nVirtKey=5) returned 0
[0297.532] GetKeyState (nVirtKey=6) returned 0
[0297.532] GetWindowTextLengthW (hWnd=0xd02b8) returned 0
[0297.532] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0297.532] SendMessageW (hWnd=0xd02b8, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0297.532] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0297.533] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0297.533] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0297.546] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0297.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0297.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0297.547] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0297.548] GetWindowPlacement (in: hWnd=0x3e013e, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0297.548] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0297.548] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.548] GetSystemMetrics (nIndex=42) returned 0
[0297.548] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0297.548] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0297.548] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
[0297.548] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
[0297.549] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x130507a2
[0297.549] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
[0297.549] SaveDC (hdc=0x10105d6) returned 1
[0297.549] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
[0297.549] CreateSolidBrush (color=0xf0f0f0) returned 0x6e10078d
[0297.549] FillRect (hDC=0x10105d6, lprc=0x53e250, hbr=0x6e10078d) returned 1
[0297.549] DeleteObject (ho=0x6e10078d) returned 1
[0297.549] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
[0297.549] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0297.550] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0297.550] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0297.551] GetWindowPlacement (in: hWnd=0x3e013e, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0297.551] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0297.551] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.551] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.551] GetSystemMetrics (nIndex=42) returned 0
[0297.551] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.551] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0297.551] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0297.551] GetCurrentObject (hdc=0x15010785, type=0x1) returned 0xb00017
[0297.551] GetCurrentObject (hdc=0x15010785, type=0x2) returned 0x900010
[0297.552] GetCurrentObject (hdc=0x15010785, type=0x7) returned 0xffffffffc4050794
[0297.552] GetCurrentObject (hdc=0x15010785, type=0x6) returned 0x8a01c2
[0297.552] SaveDC (hdc=0x15010785) returned 1
[0297.552] GetNearestColor (hdc=0x15010785, color=0xf0f0f0) returned 0xf0f0f0
[0297.552] CreateSolidBrush (color=0xf0f0f0) returned 0x6f10078d
[0297.552] FillRect (hDC=0x15010785, lprc=0x53dc18, hbr=0x6f10078d) returned 1
[0297.552] DeleteObject (ho=0x6f10078d) returned 1
[0297.552] RestoreDC (hdc=0x15010785, nSavedDC=-1) returned 1
[0297.552] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.552] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.552] GetSystemMetrics (nIndex=42) returned 0
[0297.553] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.553] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0297.553] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0297.553] GetCurrentObject (hdc=0x15010785, type=0x1) returned 0xb00017
[0297.553] GetCurrentObject (hdc=0x15010785, type=0x2) returned 0x900010
[0297.553] GetCurrentObject (hdc=0x15010785, type=0x7) returned 0xffffffffc4050794
[0297.553] GetCurrentObject (hdc=0x15010785, type=0x6) returned 0x8a01c2
[0297.553] SaveDC (hdc=0x15010785) returned 1
[0297.553] GetNearestColor (hdc=0x15010785, color=0xf0f0f0) returned 0xf0f0f0
[0297.553] CreateSolidBrush (color=0xf0f0f0) returned 0x7010078d
[0297.553] FillRect (hDC=0x15010785, lprc=0x53dbb8, hbr=0x7010078d) returned 1
[0297.553] DeleteObject (ho=0x7010078d) returned 1
[0297.553] RestoreDC (hdc=0x15010785, nSavedDC=-1) returned 1
[0297.554] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.554] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.554] GetSystemMetrics (nIndex=42) returned 0
[0297.554] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.554] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0297.555] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0297.555] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0297.555] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0297.555] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1
[0297.555] GetStockObject (i=5) returned 0x900015
[0297.556] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e0122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0297.556] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e0122, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0297.556] GetStockObject (i=5) returned 0x900015
[0297.556] GetWindowPlacement (in: hWnd=0x3e013e, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0297.556] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0297.556] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0297.557] GetWindowRect (in: hWnd=0x3e013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0297.558] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0297.559] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0297.559] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0297.559] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0297.559] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0297.559] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0297.559] GetWindowRect (in: hWnd=0x3e013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0297.560] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.560] IsWindowUnicode (hWnd=0x3e013e) returned 1
[0297.560] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.560] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.560] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.560] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0297.560] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.560] IsWindowUnicode (hWnd=0x3e013e) returned 1
[0297.560] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.560] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.560] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.561] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.561] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x20, wParam=0x70036, lParam=0x200fffe) returned 0x0
[0297.561] IsWindowUnicode (hWnd=0x3e013e) returned 1
[0297.561] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.561] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.561] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.562] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.562] IsWindowUnicode (hWnd=0x202c6) returned 1
[0297.562] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.562] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.562] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.562] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0297.562] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0297.562] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.563] IsWindowUnicode (hWnd=0x3e013e) returned 1
[0297.563] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.563] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.563] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.563] BeginPaint (in: hWnd=0x3e013e, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0xf0105ee
[0297.563] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0297.563] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.563] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.563] GetSystemMetrics (nIndex=42) returned 0
[0297.563] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.563] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0297.564] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0297.564] EndPaint (hWnd=0x3e013e, lpPaint=0x53e30c) returned 1
[0297.564] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.564] IsWindowUnicode (hWnd=0xd02b8) returned 1
[0297.564] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.564] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.564] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0297.564] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0297.565] SetTextColor (hdc=0x16010785, color=0x0) returned 0x0
[0297.565] SetBkColor (hdc=0x16010785, color=0xffffff) returned 0xffffff
[0297.566] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.566] IsWindowUnicode (hWnd=0x1b004e) returned 1
[0297.566] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.566] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.566] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.566] BeginPaint (in: hWnd=0x1b004e, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x8b010786
[0297.566] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0297.566] CreateCompatibleDC (hdc=0x8b010786) returned 0xb90107af
[0297.567] SelectObject (hdc=0xb90107af, h=0x1e0507b9) returned 0x85000f
[0297.567] GdipCreateFromHDC (hdc=0xb90107af, graphics=0x53e30c) returned 0x0
[0297.567] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0297.567] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0297.567] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0297.567] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.567] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0297.567] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0297.567] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0297.567] LocalFree (hMem=0x89ee40) returned 0x0
[0297.568] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.568] GdipCreateRegion (region=0x53e354) returned 0x0
[0297.568] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.568] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0297.568] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0297.610] GetWindowTextLengthW (hWnd=0x1b004e) returned 16
[0297.610] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0297.611] GetSystemMetrics (nIndex=42) returned 0
[0297.611] GetWindowTextW (in: hWnd=0x1b004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0297.611] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0297.611] GetClientRect (in: hWnd=0x1b004e, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0297.611] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0297.611] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0297.611] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0297.611] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.611] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0297.611] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0297.611] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0297.611] LocalFree (hMem=0x89ee40) returned 0x0
[0297.611] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0297.611] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0297.612] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0297.612] LocalFree (hMem=0x89ec80) returned 0x0
[0297.612] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.612] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0297.612] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0297.612] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0297.612] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0297.612] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0297.612] GetCurrentObject (hdc=0xb90107af, type=0x1) returned 0xb00017
[0297.612] GetCurrentObject (hdc=0xb90107af, type=0x2) returned 0x900010
[0297.612] GetCurrentObject (hdc=0xb90107af, type=0x7) returned 0x1e0507b9
[0297.612] GetCurrentObject (hdc=0xb90107af, type=0x6) returned 0x8a01c2
[0297.612] SaveDC (hdc=0xb90107af) returned 1
[0297.612] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b040798
[0297.613] GetClipRgn (hdc=0xb90107af, hrgn=0x6b040798) returned 0
[0297.613] SelectClipRgn (hdc=0xb90107af, hrgn=0x7304053e) returned 2
[0297.613] DeleteObject (ho=0x6b040798) returned 1
[0297.613] DeleteObject (ho=0x7304053e) returned 1
[0297.613] OffsetViewportOrgEx (in: hdc=0xb90107af, x=0, y=0, lppt=0x2459568 | out: lppt=0x2459568) returned 1
[0297.613] GetNearestColor (hdc=0xb90107af, color=0xf0f0f0) returned 0xf0f0f0
[0297.613] CreateSolidBrush (color=0xf0f0f0) returned 0x7110078d
[0297.613] FillRect (hDC=0xb90107af, lprc=0x53e1f4, hbr=0x7110078d) returned 1
[0297.613] DeleteObject (ho=0x7110078d) returned 1
[0297.613] RestoreDC (hdc=0xb90107af, nSavedDC=-1) returned 1
[0297.614] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb90107af) returned 0x0
[0297.614] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa7d0dbd) returned 0x0
[0297.614] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.614] GetWindowTextLengthW (hWnd=0x1b004e) returned 16
[0297.614] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0297.614] GetSystemMetrics (nIndex=42) returned 0
[0297.614] GetWindowTextW (in: hWnd=0x1b004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0297.614] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0297.614] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0297.614] GetCurrentObject (hdc=0xb90107af, type=0x1) returned 0xb00017
[0297.614] GetCurrentObject (hdc=0xb90107af, type=0x2) returned 0x900010
[0297.614] GetCurrentObject (hdc=0xb90107af, type=0x7) returned 0x1e0507b9
[0297.614] GetCurrentObject (hdc=0xb90107af, type=0x6) returned 0x8a01c2
[0297.614] SaveDC (hdc=0xb90107af) returned 1
[0297.614] GetNearestColor (hdc=0xb90107af, color=0x0) returned 0x0
[0297.615] RestoreDC (hdc=0xb90107af, nSavedDC=-1) returned 1
[0297.615] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb90107af) returned 0x0
[0297.615] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0297.620] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0297.620] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0297.620] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2459870 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0297.620] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0297.621] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0297.621] GetCurrentObject (hdc=0xb90107af, type=0x1) returned 0xb00017
[0297.621] GetCurrentObject (hdc=0xb90107af, type=0x2) returned 0x900010
[0297.621] GetCurrentObject (hdc=0xb90107af, type=0x7) returned 0x1e0507b9
[0297.621] GetCurrentObject (hdc=0xb90107af, type=0x6) returned 0x8a01c2
[0297.621] SaveDC (hdc=0xb90107af) returned 1
[0297.621] GetTextAlign (hdc=0xb90107af) returned 0x0
[0297.621] GetTextColor (hdc=0xb90107af) returned 0x0
[0297.621] GetCurrentObject (hdc=0xb90107af, type=0x6) returned 0x8a01c2
[0297.621] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0297.621] SelectObject (hdc=0xb90107af, h=0x730a066d) returned 0x8a01c2
[0297.621] GetBkMode (hdc=0xb90107af) returned 2
[0297.621] SetBkMode (hdc=0xb90107af, mode=1) returned 2
[0297.622] DrawTextExW (in: hdc=0xb90107af, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x2459a94 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0297.622] RestoreDC (hdc=0xb90107af, nSavedDC=-1) returned 1
[0297.622] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb90107af) returned 0x0
[0297.622] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0297.622] BitBlt (hdc=0x8b010786, x=0, y=0, cx=250, cy=70, hdcSrc=0xb90107af, x1=0, y1=0, rop=0xcc0020) returned 1
[0297.622] GdipReleaseDC (graphics=0x5d92c30, hdc=0xb90107af) returned 0x0
[0297.622] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0297.623] SelectObject (hdc=0xb90107af, h=0x85000f) returned 0x1e0507b9
[0297.623] DeleteDC (hdc=0xb90107af) returned 1
[0297.623] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0297.623] EndPaint (hWnd=0x1b004e, lpPaint=0x53e2f0) returned 1
[0297.623] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.623] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0297.624] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.624] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.624] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0297.625] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.625] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.626] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.626] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0297.627] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.627] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.627] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.628] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.628] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.628] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x84, wParam=0x0, lParam=0x1940368) returned 0x1
[0297.628] IsWindowUnicode (hWnd=0x1e01e2) returned 1
[0297.629] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.629] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.629] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.629] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.629] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x84, wParam=0x0, lParam=0x1940368) returned 0x1
[0297.629] IsWindowUnicode (hWnd=0x1e01e2) returned 1
[0297.629] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.629] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x84, wParam=0x0, lParam=0x1940368) returned 0x1
[0297.629] SetCursor (hCursor=0x10003) returned 0x10003
[0297.630] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.630] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.630] _TrackMouseEvent (in: lpEventTrack=0x2459ad0 | out: lpEventTrack=0x2459ad0) returned 1
[0297.630] SendMessageW (hWnd=0x1e01e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0297.630] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0297.630] InvalidateRect (hWnd=0x1e01e2, lpRect=0x0, bErase=0) returned 1
[0297.630] GetKeyState (nVirtKey=1) returned 0
[0297.630] GetKeyState (nVirtKey=2) returned 0
[0297.630] GetKeyState (nVirtKey=4) returned 0
[0297.630] GetKeyState (nVirtKey=5) returned 0
[0297.630] GetKeyState (nVirtKey=6) returned 0
[0297.630] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.633] IsWindowUnicode (hWnd=0x1e01e2) returned 1
[0297.633] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.633] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.633] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.633] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.634] IsWindowUnicode (hWnd=0x1e01e2) returned 1
[0297.634] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.634] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.634] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.634] BeginPaint (in: hWnd=0x1e01e2, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0297.634] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0297.634] CreateCompatibleDC (hdc=0x10105d6) returned 0x6f0107b3
[0297.635] SelectObject (hdc=0x6f0107b3, h=0x1e0507b9) returned 0x85000f
[0297.635] GdipCreateFromHDC (hdc=0x6f0107b3, graphics=0x53e300) returned 0x0
[0297.635] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0297.635] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0297.635] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0297.635] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.635] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0297.635] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0297.635] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0297.635] LocalFree (hMem=0x89ec80) returned 0x0
[0297.635] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.635] GdipCreateRegion (region=0x53e348) returned 0x0
[0297.635] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.635] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0297.636] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0297.636] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa7b0dbd) returned 0x0
[0297.636] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.636] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0297.636] GetCurrentObject (hdc=0x6f0107b3, type=0x1) returned 0xb00017
[0297.636] GetCurrentObject (hdc=0x6f0107b3, type=0x2) returned 0x900010
[0297.636] GetCurrentObject (hdc=0x6f0107b3, type=0x7) returned 0x1e0507b9
[0297.636] GetCurrentObject (hdc=0x6f0107b3, type=0x6) returned 0x8a01c2
[0297.636] SaveDC (hdc=0x6f0107b3) returned 1
[0297.636] GetNearestColor (hdc=0x6f0107b3, color=0xf0f0f0) returned 0xf0f0f0
[0297.636] GetNearestColor (hdc=0x6f0107b3, color=0xa0a0a0) returned 0xa0a0a0
[0297.636] GetNearestColor (hdc=0x6f0107b3, color=0x696969) returned 0x696969
[0297.636] GetNearestColor (hdc=0x6f0107b3, color=0xa0a0a0) returned 0xa0a0a0
[0297.636] GetNearestColor (hdc=0x6f0107b3, color=0x0) returned 0x0
[0297.637] GetNearestColor (hdc=0x6f0107b3, color=0xffffff) returned 0xffffff
[0297.637] GetNearestColor (hdc=0x6f0107b3, color=0xe5e5e5) returned 0xe5e5e5
[0297.637] GetNearestColor (hdc=0x6f0107b3, color=0xd7d7d7) returned 0xd7d7d7
[0297.637] GetNearestColor (hdc=0x6f0107b3, color=0x0) returned 0x0
[0297.637] RestoreDC (hdc=0x6f0107b3, nSavedDC=-1) returned 1
[0297.637] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6f0107b3) returned 0x0
[0297.637] IsAppThemed () returned 0x1
[0297.637] GetThemeAppProperties () returned 0x3
[0297.637] GetThemeAppProperties () returned 0x3
[0297.637] IsAppThemed () returned 0x1
[0297.637] GetThemeAppProperties () returned 0x3
[0297.637] GetThemeAppProperties () returned 0x3
[0297.638] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x245a258 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0297.638] IsAppThemed () returned 0x1
[0297.638] GetThemeAppProperties () returned 0x3
[0297.638] GetThemeAppProperties () returned 0x3
[0297.638] IsAppThemed () returned 0x1
[0297.638] GetThemeAppProperties () returned 0x3
[0297.638] GetThemeAppProperties () returned 0x3
[0297.638] IsAppThemed () returned 0x1
[0297.638] GetThemeAppProperties () returned 0x3
[0297.638] GetThemeAppProperties () returned 0x3
[0297.638] IsAppThemed () returned 0x1
[0297.638] GetThemeAppProperties () returned 0x3
[0297.638] GetThemeAppProperties () returned 0x3
[0297.639] IsThemePartDefined () returned 0x1
[0297.639] IsAppThemed () returned 0x1
[0297.639] GetThemeAppProperties () returned 0x3
[0297.639] GetThemeAppProperties () returned 0x3
[0297.639] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0297.639] IsAppThemed () returned 0x1
[0297.639] GetThemeAppProperties () returned 0x3
[0297.639] GetThemeAppProperties () returned 0x3
[0297.639] IsAppThemed () returned 0x1
[0297.639] GetThemeAppProperties () returned 0x3
[0297.639] GetThemeAppProperties () returned 0x3
[0297.639] IsThemePartDefined () returned 0x1
[0297.639] GdipCreateRegion (region=0x53e064) returned 0x0
[0297.639] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.639] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0297.639] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.639] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0297.639] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.639] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0297.639] LocalFree (hMem=0x89ea88) returned 0x0
[0297.640] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.640] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0297.640] LocalFree (hMem=0x89ea88) returned 0x0
[0297.640] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.640] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0297.640] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0297.640] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0297.640] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.640] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0297.640] GetCurrentObject (hdc=0x6f0107b3, type=0x1) returned 0xb00017
[0297.640] GetCurrentObject (hdc=0x6f0107b3, type=0x2) returned 0x900010
[0297.640] GetCurrentObject (hdc=0x6f0107b3, type=0x7) returned 0x1e0507b9
[0297.640] GetCurrentObject (hdc=0x6f0107b3, type=0x6) returned 0x8a01c2
[0297.640] SaveDC (hdc=0x6f0107b3) returned 1
[0297.640] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7404053e
[0297.640] GetClipRgn (hdc=0x6f0107b3, hrgn=0x7404053e) returned 0
[0297.641] SelectClipRgn (hdc=0x6f0107b3, hrgn=0x6f040798) returned 2
[0297.641] DeleteObject (ho=0x7404053e) returned 1
[0297.641] DeleteObject (ho=0x6f040798) returned 1
[0297.641] OffsetViewportOrgEx (in: hdc=0x6f0107b3, x=0, y=0, lppt=0x245a908 | out: lppt=0x245a908) returned 1
[0297.641] DrawThemeParentBackground () returned 0x0
[0297.641] GetWindowPlacement (in: hWnd=0x3e013e, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0297.641] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0297.641] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.641] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.641] GetSystemMetrics (nIndex=42) returned 0
[0297.641] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.641] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0297.641] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0297.641] GetCurrentObject (hdc=0x6f0107b3, type=0x1) returned 0xb00017
[0297.641] GetCurrentObject (hdc=0x6f0107b3, type=0x2) returned 0x900010
[0297.642] GetCurrentObject (hdc=0x6f0107b3, type=0x7) returned 0x1e0507b9
[0297.642] GetCurrentObject (hdc=0x6f0107b3, type=0x6) returned 0x8a01c2
[0297.642] SaveDC (hdc=0x6f0107b3) returned 2
[0297.642] GetNearestColor (hdc=0x6f0107b3, color=0xf0f0f0) returned 0xf0f0f0
[0297.642] CreateSolidBrush (color=0xf0f0f0) returned 0x7210078d
[0297.642] FillRect (hDC=0x6f0107b3, lprc=0x53dac8, hbr=0x7210078d) returned 1
[0297.642] DeleteObject (ho=0x7210078d) returned 1
[0297.642] RestoreDC (hdc=0x6f0107b3, nSavedDC=-1) returned 1
[0297.642] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.642] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.642] GetSystemMetrics (nIndex=42) returned 0
[0297.642] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.642] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0297.642] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0297.642] GetCurrentObject (hdc=0x6f0107b3, type=0x1) returned 0xb00017
[0297.643] GetCurrentObject (hdc=0x6f0107b3, type=0x2) returned 0x900010
[0297.643] GetCurrentObject (hdc=0x6f0107b3, type=0x7) returned 0x1e0507b9
[0297.643] GetCurrentObject (hdc=0x6f0107b3, type=0x6) returned 0x8a01c2
[0297.643] SaveDC (hdc=0x6f0107b3) returned 2
[0297.643] GetNearestColor (hdc=0x6f0107b3, color=0xf0f0f0) returned 0xf0f0f0
[0297.643] CreateSolidBrush (color=0xf0f0f0) returned 0x7310078d
[0297.643] FillRect (hDC=0x6f0107b3, lprc=0x53da68, hbr=0x7310078d) returned 1
[0297.643] DeleteObject (ho=0x7310078d) returned 1
[0297.643] RestoreDC (hdc=0x6f0107b3, nSavedDC=-1) returned 1
[0297.643] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.643] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.643] GetSystemMetrics (nIndex=42) returned 0
[0297.643] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.643] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0297.644] RestoreDC (hdc=0x6f0107b3, nSavedDC=-1) returned 1
[0297.644] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6f0107b3) returned 0x0
[0297.644] IsAppThemed () returned 0x1
[0297.644] GetThemeAppProperties () returned 0x3
[0297.644] GetThemeAppProperties () returned 0x3
[0297.644] IsAppThemed () returned 0x1
[0297.644] GetThemeAppProperties () returned 0x3
[0297.644] GetThemeAppProperties () returned 0x3
[0297.644] IsThemePartDefined () returned 0x1
[0297.644] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0297.644] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.644] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0297.644] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.644] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0297.644] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.644] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0297.644] LocalFree (hMem=0x89ea88) returned 0x0
[0297.645] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0297.645] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0297.645] LocalFree (hMem=0x89ec80) returned 0x0
[0297.645] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.645] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0297.645] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0297.645] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0297.645] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.645] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0297.645] GetCurrentObject (hdc=0x6f0107b3, type=0x1) returned 0xb00017
[0297.645] GetCurrentObject (hdc=0x6f0107b3, type=0x2) returned 0x900010
[0297.645] GetCurrentObject (hdc=0x6f0107b3, type=0x7) returned 0x1e0507b9
[0297.645] GetCurrentObject (hdc=0x6f0107b3, type=0x6) returned 0x8a01c2
[0297.645] SaveDC (hdc=0x6f0107b3) returned 1
[0297.645] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x70040798
[0297.645] GetClipRgn (hdc=0x6f0107b3, hrgn=0x70040798) returned 0
[0297.645] SelectClipRgn (hdc=0x6f0107b3, hrgn=0x7604053e) returned 2
[0297.646] DeleteObject (ho=0x70040798) returned 1
[0297.646] DeleteObject (ho=0x7604053e) returned 1
[0297.646] OffsetViewportOrgEx (in: hdc=0x6f0107b3, x=0, y=0, lppt=0x245b190 | out: lppt=0x245b190) returned 1
[0297.646] IsAppThemed () returned 0x1
[0297.646] GetThemeAppProperties () returned 0x3
[0297.646] GetThemeAppProperties () returned 0x3
[0297.646] DrawThemeBackground () returned 0x0
[0297.646] RestoreDC (hdc=0x6f0107b3, nSavedDC=-1) returned 1
[0297.673] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6f0107b3) returned 0x0
[0297.673] GdipCreateRegion (region=0x53dfec) returned 0x0
[0297.673] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.673] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0297.673] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.673] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0297.673] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0297.673] LocalFree (hMem=0x89ee40) returned 0x0
[0297.673] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0297.673] LocalFree (hMem=0x89ee40) returned 0x0
[0297.673] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.673] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0297.673] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0297.673] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0297.674] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.674] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0297.674] GetCurrentObject (hdc=0x6f0107b3, type=0x1) returned 0xb00017
[0297.674] GetCurrentObject (hdc=0x6f0107b3, type=0x2) returned 0x900010
[0297.674] GetCurrentObject (hdc=0x6f0107b3, type=0x7) returned 0x1e0507b9
[0297.674] GetCurrentObject (hdc=0x6f0107b3, type=0x6) returned 0x8a01c2
[0297.674] SaveDC (hdc=0x6f0107b3) returned 1
[0297.674] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7704053e
[0297.674] GetClipRgn (hdc=0x6f0107b3, hrgn=0x7704053e) returned 0
[0297.674] SelectClipRgn (hdc=0x6f0107b3, hrgn=0x71040798) returned 2
[0297.674] DeleteObject (ho=0x7704053e) returned 1
[0297.674] DeleteObject (ho=0x71040798) returned 1
[0297.674] OffsetViewportOrgEx (in: hdc=0x6f0107b3, x=0, y=0, lppt=0x245b464 | out: lppt=0x245b464) returned 1
[0297.674] IsAppThemed () returned 0x1
[0297.675] GetThemeAppProperties () returned 0x3
[0297.675] GetThemeAppProperties () returned 0x3
[0297.675] GetThemeBackgroundContentRect () returned 0x0
[0297.675] RestoreDC (hdc=0x6f0107b3, nSavedDC=-1) returned 1
[0297.675] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6f0107b3) returned 0x0
[0297.675] IsAppThemed () returned 0x1
[0297.675] GetThemeAppProperties () returned 0x3
[0297.675] GetThemeAppProperties () returned 0x3
[0297.675] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0297.675] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0297.676] GetCurrentObject (hdc=0x6f0107b3, type=0x1) returned 0xb00017
[0297.676] GetCurrentObject (hdc=0x6f0107b3, type=0x2) returned 0x900010
[0297.676] GetCurrentObject (hdc=0x6f0107b3, type=0x7) returned 0x1e0507b9
[0297.676] GetCurrentObject (hdc=0x6f0107b3, type=0x6) returned 0x8a01c2
[0297.676] SaveDC (hdc=0x6f0107b3) returned 1
[0297.676] GetTextAlign (hdc=0x6f0107b3) returned 0x0
[0297.676] GetTextColor (hdc=0x6f0107b3) returned 0x0
[0297.676] GetCurrentObject (hdc=0x6f0107b3, type=0x6) returned 0x8a01c2
[0297.676] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0297.676] SelectObject (hdc=0x6f0107b3, h=0x730a066d) returned 0x8a01c2
[0297.676] GetBkMode (hdc=0x6f0107b3) returned 2
[0297.676] SetBkMode (hdc=0x6f0107b3, mode=1) returned 2
[0297.676] DrawTextExW (in: hdc=0x6f0107b3, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x245b804 | out: lpchText="OK", lprc=0x53df84) returned 13
[0297.677] DrawTextExW (in: hdc=0x6f0107b3, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x245b804 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0297.677] RestoreDC (hdc=0x6f0107b3, nSavedDC=-1) returned 1
[0297.679] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6f0107b3) returned 0x0
[0297.679] GetFocus () returned 0xd02b8
[0297.679] IsAppThemed () returned 0x1
[0297.679] GetThemeAppProperties () returned 0x3
[0297.679] GetThemeAppProperties () returned 0x3
[0297.679] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0297.679] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x6f0107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0297.679] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6f0107b3) returned 0x0
[0297.679] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0297.679] SelectObject (hdc=0x6f0107b3, h=0x85000f) returned 0x1e0507b9
[0297.679] DeleteDC (hdc=0x6f0107b3) returned 1
[0297.680] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0297.680] EndPaint (hWnd=0x1e01e2, lpPaint=0x53e2e4) returned 1
[0297.680] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.680] IsWindowUnicode (hWnd=0x1e0122) returned 1
[0297.680] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.680] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.680] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.681] BeginPaint (in: hWnd=0x1e0122, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0297.681] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0297.681] CreateCompatibleDC (hdc=0x8b010786) returned 0x710107b3
[0297.681] SelectObject (hdc=0x710107b3, h=0x1e0507b9) returned 0x85000f
[0297.681] GdipCreateFromHDC (hdc=0x710107b3, graphics=0x53e300) returned 0x0
[0297.682] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0297.682] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0297.682] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0297.682] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.682] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0297.682] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0297.682] LocalFree (hMem=0x89ec80) returned 0x0
[0297.682] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.682] GdipCreateRegion (region=0x53e348) returned 0x0
[0297.682] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.682] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0297.682] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0297.682] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa790dbd) returned 0x0
[0297.682] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.682] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0297.682] GetCurrentObject (hdc=0x710107b3, type=0x1) returned 0xb00017
[0297.682] GetCurrentObject (hdc=0x710107b3, type=0x2) returned 0x900010
[0297.682] GetCurrentObject (hdc=0x710107b3, type=0x7) returned 0x1e0507b9
[0297.683] GetCurrentObject (hdc=0x710107b3, type=0x6) returned 0x8a01c2
[0297.683] SaveDC (hdc=0x710107b3) returned 1
[0297.683] GetNearestColor (hdc=0x710107b3, color=0xf0f0f0) returned 0xf0f0f0
[0297.683] GetNearestColor (hdc=0x710107b3, color=0xa0a0a0) returned 0xa0a0a0
[0297.683] GetNearestColor (hdc=0x710107b3, color=0x696969) returned 0x696969
[0297.683] GetNearestColor (hdc=0x710107b3, color=0xa0a0a0) returned 0xa0a0a0
[0297.683] GetNearestColor (hdc=0x710107b3, color=0x0) returned 0x0
[0297.683] GetNearestColor (hdc=0x710107b3, color=0xffffff) returned 0xffffff
[0297.683] GetNearestColor (hdc=0x710107b3, color=0xe5e5e5) returned 0xe5e5e5
[0297.683] GetNearestColor (hdc=0x710107b3, color=0xd7d7d7) returned 0xd7d7d7
[0297.683] GetNearestColor (hdc=0x710107b3, color=0x0) returned 0x0
[0297.683] RestoreDC (hdc=0x710107b3, nSavedDC=-1) returned 1
[0297.683] GdipReleaseDC (graphics=0x5d92c30, hdc=0x710107b3) returned 0x0
[0297.684] IsAppThemed () returned 0x1
[0297.684] GetThemeAppProperties () returned 0x3
[0297.684] GetThemeAppProperties () returned 0x3
[0297.684] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0297.684] SendMessageW (hWnd=0x3e013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0297.684] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0297.684] IsAppThemed () returned 0x1
[0297.684] GetThemeAppProperties () returned 0x3
[0297.684] GetThemeAppProperties () returned 0x3
[0297.684] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x245c014 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0297.684] IsAppThemed () returned 0x1
[0297.685] GetThemeAppProperties () returned 0x3
[0297.685] GetThemeAppProperties () returned 0x3
[0297.685] IsAppThemed () returned 0x1
[0297.685] GetThemeAppProperties () returned 0x3
[0297.685] GetThemeAppProperties () returned 0x3
[0297.685] GetFocus () returned 0xd02b8
[0297.685] IsAppThemed () returned 0x1
[0297.685] GetThemeAppProperties () returned 0x3
[0297.685] GetThemeAppProperties () returned 0x3
[0297.685] IsAppThemed () returned 0x1
[0297.686] GetThemeAppProperties () returned 0x3
[0297.686] GetThemeAppProperties () returned 0x3
[0297.686] IsThemePartDefined () returned 0x1
[0297.686] IsAppThemed () returned 0x1
[0297.686] GetThemeAppProperties () returned 0x3
[0297.686] GetThemeAppProperties () returned 0x3
[0297.686] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0297.686] IsAppThemed () returned 0x1
[0297.686] GetThemeAppProperties () returned 0x3
[0297.686] GetThemeAppProperties () returned 0x3
[0297.687] IsAppThemed () returned 0x1
[0297.687] GetThemeAppProperties () returned 0x3
[0297.687] GetThemeAppProperties () returned 0x3
[0297.687] IsThemePartDefined () returned 0x1
[0297.687] GdipCreateRegion (region=0x53e070) returned 0x0
[0297.687] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.687] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0297.687] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.687] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0297.687] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.687] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0297.688] LocalFree (hMem=0x89ea88) returned 0x0
[0297.688] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.688] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0297.688] LocalFree (hMem=0x89ea88) returned 0x0
[0297.688] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.688] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0297.688] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0297.688] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0297.688] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.688] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0297.688] GetCurrentObject (hdc=0x710107b3, type=0x1) returned 0xb00017
[0297.688] GetCurrentObject (hdc=0x710107b3, type=0x2) returned 0x900010
[0297.689] GetCurrentObject (hdc=0x710107b3, type=0x7) returned 0x1e0507b9
[0297.689] GetCurrentObject (hdc=0x710107b3, type=0x6) returned 0x8a01c2
[0297.689] SaveDC (hdc=0x710107b3) returned 1
[0297.689] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x72040798
[0297.689] GetClipRgn (hdc=0x710107b3, hrgn=0x72040798) returned 0
[0297.689] SelectClipRgn (hdc=0x710107b3, hrgn=0x7b04053e) returned 2
[0297.689] DeleteObject (ho=0x72040798) returned 1
[0297.689] DeleteObject (ho=0x7b04053e) returned 1
[0297.689] OffsetViewportOrgEx (in: hdc=0x710107b3, x=0, y=0, lppt=0x245c6c4 | out: lppt=0x245c6c4) returned 1
[0297.690] DrawThemeParentBackground () returned 0x0
[0297.690] GetWindowPlacement (in: hWnd=0x3e013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0297.690] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0297.690] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.690] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.690] GetSystemMetrics (nIndex=42) returned 0
[0297.690] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.690] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0297.690] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0297.690] GetCurrentObject (hdc=0x710107b3, type=0x1) returned 0xb00017
[0297.690] GetCurrentObject (hdc=0x710107b3, type=0x2) returned 0x900010
[0297.691] GetCurrentObject (hdc=0x710107b3, type=0x7) returned 0x1e0507b9
[0297.691] GetCurrentObject (hdc=0x710107b3, type=0x6) returned 0x8a01c2
[0297.691] SaveDC (hdc=0x710107b3) returned 2
[0297.691] GetNearestColor (hdc=0x710107b3, color=0xf0f0f0) returned 0xf0f0f0
[0297.691] CreateSolidBrush (color=0xf0f0f0) returned 0x7410078d
[0297.691] FillRect (hDC=0x710107b3, lprc=0x53dad0, hbr=0x7410078d) returned 1
[0297.691] DeleteObject (ho=0x7410078d) returned 1
[0297.692] RestoreDC (hdc=0x710107b3, nSavedDC=-1) returned 1
[0297.692] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.692] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.692] GetSystemMetrics (nIndex=42) returned 0
[0297.692] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.692] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0297.692] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0297.692] GetCurrentObject (hdc=0x710107b3, type=0x1) returned 0xb00017
[0297.692] GetCurrentObject (hdc=0x710107b3, type=0x2) returned 0x900010
[0297.692] GetCurrentObject (hdc=0x710107b3, type=0x7) returned 0x1e0507b9
[0297.692] GetCurrentObject (hdc=0x710107b3, type=0x6) returned 0x8a01c2
[0297.692] SaveDC (hdc=0x710107b3) returned 2
[0297.693] GetNearestColor (hdc=0x710107b3, color=0xf0f0f0) returned 0xf0f0f0
[0297.693] CreateSolidBrush (color=0xf0f0f0) returned 0x7510078d
[0297.693] FillRect (hDC=0x710107b3, lprc=0x53da70, hbr=0x7510078d) returned 1
[0297.693] DeleteObject (ho=0x7510078d) returned 1
[0297.693] RestoreDC (hdc=0x710107b3, nSavedDC=-1) returned 1
[0297.693] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.700] GetSystemMetrics (nIndex=42) returned 0
[0297.700] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.700] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0297.700] RestoreDC (hdc=0x710107b3, nSavedDC=-1) returned 1
[0297.700] GdipReleaseDC (graphics=0x5d92c30, hdc=0x710107b3) returned 0x0
[0297.701] IsAppThemed () returned 0x1
[0297.701] GetThemeAppProperties () returned 0x3
[0297.701] GetThemeAppProperties () returned 0x3
[0297.701] IsAppThemed () returned 0x1
[0297.701] GetThemeAppProperties () returned 0x3
[0297.701] GetThemeAppProperties () returned 0x3
[0297.701] IsThemePartDefined () returned 0x1
[0297.701] GdipCreateRegion (region=0x53dff4) returned 0x0
[0297.701] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.701] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0297.701] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.702] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0297.702] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.702] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0297.702] LocalFree (hMem=0x89ea88) returned 0x0
[0297.702] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.702] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0297.702] LocalFree (hMem=0x89ea88) returned 0x0
[0297.702] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.703] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0297.703] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0297.703] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0297.703] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.703] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0297.703] GetCurrentObject (hdc=0x710107b3, type=0x1) returned 0xb00017
[0297.703] GetCurrentObject (hdc=0x710107b3, type=0x2) returned 0x900010
[0297.703] GetCurrentObject (hdc=0x710107b3, type=0x7) returned 0x1e0507b9
[0297.704] GetCurrentObject (hdc=0x710107b3, type=0x6) returned 0x8a01c2
[0297.704] SaveDC (hdc=0x710107b3) returned 1
[0297.704] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c04053e
[0297.704] GetClipRgn (hdc=0x710107b3, hrgn=0x7c04053e) returned 0
[0297.704] SelectClipRgn (hdc=0x710107b3, hrgn=0x74040798) returned 2
[0297.704] DeleteObject (ho=0x7c04053e) returned 1
[0297.704] DeleteObject (ho=0x74040798) returned 1
[0297.704] OffsetViewportOrgEx (in: hdc=0x710107b3, x=0, y=0, lppt=0x245cf4c | out: lppt=0x245cf4c) returned 1
[0297.704] IsAppThemed () returned 0x1
[0297.704] GetThemeAppProperties () returned 0x3
[0297.704] GetThemeAppProperties () returned 0x3
[0297.704] DrawThemeBackground () returned 0x0
[0297.705] RestoreDC (hdc=0x710107b3, nSavedDC=-1) returned 1
[0297.705] GdipReleaseDC (graphics=0x5d92c30, hdc=0x710107b3) returned 0x0
[0297.705] GdipCreateRegion (region=0x53dff8) returned 0x0
[0297.705] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.705] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0297.705] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.705] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0297.705] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0297.705] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0297.705] LocalFree (hMem=0x89ee40) returned 0x0
[0297.706] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0297.706] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0297.706] LocalFree (hMem=0x89ec80) returned 0x0
[0297.706] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.706] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0297.706] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0297.706] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0297.706] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.706] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0297.706] GetCurrentObject (hdc=0x710107b3, type=0x1) returned 0xb00017
[0297.706] GetCurrentObject (hdc=0x710107b3, type=0x2) returned 0x900010
[0297.707] GetCurrentObject (hdc=0x710107b3, type=0x7) returned 0x1e0507b9
[0297.707] GetCurrentObject (hdc=0x710107b3, type=0x6) returned 0x8a01c2
[0297.707] SaveDC (hdc=0x710107b3) returned 1
[0297.707] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x75040798
[0297.707] GetClipRgn (hdc=0x710107b3, hrgn=0x75040798) returned 0
[0297.707] SelectClipRgn (hdc=0x710107b3, hrgn=0x7d04053e) returned 2
[0297.707] DeleteObject (ho=0x75040798) returned 1
[0297.707] DeleteObject (ho=0x7d04053e) returned 1
[0297.707] OffsetViewportOrgEx (in: hdc=0x710107b3, x=0, y=0, lppt=0x245d220 | out: lppt=0x245d220) returned 1
[0297.708] IsAppThemed () returned 0x1
[0297.708] GetThemeAppProperties () returned 0x3
[0297.708] GetThemeAppProperties () returned 0x3
[0297.708] GetThemeBackgroundContentRect () returned 0x0
[0297.708] RestoreDC (hdc=0x710107b3, nSavedDC=-1) returned 1
[0297.708] GdipReleaseDC (graphics=0x5d92c30, hdc=0x710107b3) returned 0x0
[0297.708] IsAppThemed () returned 0x1
[0297.708] GetThemeAppProperties () returned 0x3
[0297.708] GetThemeAppProperties () returned 0x3
[0297.708] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0297.708] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0297.708] GetCurrentObject (hdc=0x710107b3, type=0x1) returned 0xb00017
[0297.708] GetCurrentObject (hdc=0x710107b3, type=0x2) returned 0x900010
[0297.708] GetCurrentObject (hdc=0x710107b3, type=0x7) returned 0x1e0507b9
[0297.709] GetCurrentObject (hdc=0x710107b3, type=0x6) returned 0x8a01c2
[0297.709] SaveDC (hdc=0x710107b3) returned 1
[0297.709] GetTextAlign (hdc=0x710107b3) returned 0x0
[0297.709] GetTextColor (hdc=0x710107b3) returned 0x0
[0297.709] GetCurrentObject (hdc=0x710107b3, type=0x6) returned 0x8a01c2
[0297.710] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0297.710] SelectObject (hdc=0x710107b3, h=0x730a066d) returned 0x8a01c2
[0297.710] GetBkMode (hdc=0x710107b3) returned 2
[0297.710] SetBkMode (hdc=0x710107b3, mode=1) returned 2
[0297.710] DrawTextExW (in: hdc=0x710107b3, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x245d5c0 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0297.711] DrawTextExW (in: hdc=0x710107b3, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x245d5c0 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0297.711] RestoreDC (hdc=0x710107b3, nSavedDC=-1) returned 1
[0297.711] GdipReleaseDC (graphics=0x5d92c30, hdc=0x710107b3) returned 0x0
[0297.711] GetFocus () returned 0xd02b8
[0297.711] IsAppThemed () returned 0x1
[0297.711] GetThemeAppProperties () returned 0x3
[0297.711] GetThemeAppProperties () returned 0x3
[0297.711] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0297.712] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x710107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0297.712] GdipReleaseDC (graphics=0x5d92c30, hdc=0x710107b3) returned 0x0
[0297.712] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0297.712] SelectObject (hdc=0x710107b3, h=0x85000f) returned 0x1e0507b9
[0297.712] DeleteDC (hdc=0x710107b3) returned 1
[0297.712] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0297.713] EndPaint (hWnd=0x1e0122, lpPaint=0x53e2e4) returned 1
[0297.713] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.713] IsWindowUnicode (hWnd=0x202c6) returned 1
[0297.713] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.713] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.713] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.713] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0297.714] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0297.714] CreateCompatibleDC (hdc=0x10105d6) returned 0x730107b3
[0297.714] SelectObject (hdc=0x730107b3, h=0x1e0507b9) returned 0x85000f
[0297.714] GdipCreateFromHDC (hdc=0x730107b3, graphics=0x53e300) returned 0x0
[0297.714] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0297.715] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0297.715] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0297.715] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.715] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0297.715] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0297.715] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0297.715] LocalFree (hMem=0x89ec80) returned 0x0
[0297.715] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.715] GdipCreateRegion (region=0x53e348) returned 0x0
[0297.715] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.715] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0297.716] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0297.716] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa770dbd) returned 0x0
[0297.716] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.716] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0297.716] GetCurrentObject (hdc=0x730107b3, type=0x1) returned 0xb00017
[0297.716] GetCurrentObject (hdc=0x730107b3, type=0x2) returned 0x900010
[0297.716] GetCurrentObject (hdc=0x730107b3, type=0x7) returned 0x1e0507b9
[0297.716] GetCurrentObject (hdc=0x730107b3, type=0x6) returned 0x8a01c2
[0297.716] SaveDC (hdc=0x730107b3) returned 1
[0297.716] GetNearestColor (hdc=0x730107b3, color=0xff) returned 0xff
[0297.716] GetNearestColor (hdc=0x730107b3, color=0x55) returned 0x55
[0297.716] GetNearestColor (hdc=0x730107b3, color=0x0) returned 0x0
[0297.717] GetNearestColor (hdc=0x730107b3, color=0x55) returned 0x55
[0297.717] GetNearestColor (hdc=0x730107b3, color=0x0) returned 0x0
[0297.717] GetNearestColor (hdc=0x730107b3, color=0x8080ff) returned 0x8080ff
[0297.717] GetNearestColor (hdc=0x730107b3, color=0x7373e5) returned 0x7373e5
[0297.717] GetNearestColor (hdc=0x730107b3, color=0xe5) returned 0xe5
[0297.717] GetNearestColor (hdc=0x730107b3, color=0x0) returned 0x0
[0297.717] RestoreDC (hdc=0x730107b3, nSavedDC=-1) returned 1
[0297.717] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107b3) returned 0x0
[0297.717] IsAppThemed () returned 0x1
[0297.717] GetThemeAppProperties () returned 0x3
[0297.717] GetThemeAppProperties () returned 0x3
[0297.717] IsAppThemed () returned 0x1
[0297.717] GetThemeAppProperties () returned 0x3
[0297.717] GetThemeAppProperties () returned 0x3
[0297.717] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0297.718] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x245dda4 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0297.718] IsAppThemed () returned 0x1
[0297.718] GetThemeAppProperties () returned 0x3
[0297.718] GetThemeAppProperties () returned 0x3
[0297.718] IsAppThemed () returned 0x1
[0297.718] GetThemeAppProperties () returned 0x3
[0297.718] GetThemeAppProperties () returned 0x3
[0297.718] GetFocus () returned 0xd02b8
[0297.718] IsAppThemed () returned 0x1
[0297.718] GetThemeAppProperties () returned 0x3
[0297.718] GetThemeAppProperties () returned 0x3
[0297.718] IsAppThemed () returned 0x1
[0297.718] GetThemeAppProperties () returned 0x3
[0297.719] GetThemeAppProperties () returned 0x3
[0297.719] IsThemePartDefined () returned 0x1
[0297.719] IsAppThemed () returned 0x1
[0297.719] GetThemeAppProperties () returned 0x3
[0297.719] GetThemeAppProperties () returned 0x3
[0297.719] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0297.719] IsAppThemed () returned 0x1
[0297.719] GetThemeAppProperties () returned 0x3
[0297.719] GetThemeAppProperties () returned 0x3
[0297.719] IsAppThemed () returned 0x1
[0297.719] GetThemeAppProperties () returned 0x3
[0297.719] GetThemeAppProperties () returned 0x3
[0297.719] IsThemePartDefined () returned 0x1
[0297.719] GdipCreateRegion (region=0x53e070) returned 0x0
[0297.719] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.719] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0297.719] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.719] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0297.719] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0297.719] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0297.719] LocalFree (hMem=0x89ee40) returned 0x0
[0297.720] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0297.720] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0297.720] LocalFree (hMem=0x89ec80) returned 0x0
[0297.720] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.720] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0297.720] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0297.720] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0297.720] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.720] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0297.720] GetCurrentObject (hdc=0x730107b3, type=0x1) returned 0xb00017
[0297.720] GetCurrentObject (hdc=0x730107b3, type=0x2) returned 0x900010
[0297.720] GetCurrentObject (hdc=0x730107b3, type=0x7) returned 0x1e0507b9
[0297.720] GetCurrentObject (hdc=0x730107b3, type=0x6) returned 0x8a01c2
[0297.720] SaveDC (hdc=0x730107b3) returned 1
[0297.720] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e04053e
[0297.720] GetClipRgn (hdc=0x730107b3, hrgn=0x7e04053e) returned 0
[0297.721] SelectClipRgn (hdc=0x730107b3, hrgn=0x79040798) returned 2
[0297.721] DeleteObject (ho=0x7e04053e) returned 1
[0297.721] DeleteObject (ho=0x79040798) returned 1
[0297.721] OffsetViewportOrgEx (in: hdc=0x730107b3, x=0, y=0, lppt=0x245e454 | out: lppt=0x245e454) returned 1
[0297.721] DrawThemeParentBackground () returned 0x0
[0297.721] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0297.721] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0297.721] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0297.721] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0297.721] GetSystemMetrics (nIndex=42) returned 0
[0297.721] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0297.721] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0297.721] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0297.721] GetCurrentObject (hdc=0x730107b3, type=0x1) returned 0xb00017
[0297.721] GetCurrentObject (hdc=0x730107b3, type=0x2) returned 0x900010
[0297.722] GetCurrentObject (hdc=0x730107b3, type=0x7) returned 0x1e0507b9
[0297.722] GetCurrentObject (hdc=0x730107b3, type=0x6) returned 0x8a01c2
[0297.722] SaveDC (hdc=0x730107b3) returned 2
[0297.722] GetNearestColor (hdc=0x730107b3, color=0xff) returned 0xff
[0297.722] CreateSolidBrush (color=0xff) returned 0x7610078d
[0297.722] FillRect (hDC=0x730107b3, lprc=0x53dad0, hbr=0x7610078d) returned 1
[0297.722] DeleteObject (ho=0x7610078d) returned 1
[0297.722] RestoreDC (hdc=0x730107b3, nSavedDC=-1) returned 1
[0297.722] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0297.722] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0297.722] GetSystemMetrics (nIndex=42) returned 0
[0297.722] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0297.722] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0297.722] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0297.722] GetCurrentObject (hdc=0x730107b3, type=0x1) returned 0xb00017
[0297.723] GetCurrentObject (hdc=0x730107b3, type=0x2) returned 0x900010
[0297.723] GetCurrentObject (hdc=0x730107b3, type=0x7) returned 0x1e0507b9
[0297.723] GetCurrentObject (hdc=0x730107b3, type=0x6) returned 0x8a01c2
[0297.723] SaveDC (hdc=0x730107b3) returned 2
[0297.723] GetNearestColor (hdc=0x730107b3, color=0xff) returned 0xff
[0297.723] CreateSolidBrush (color=0xff) returned 0x7710078d
[0297.723] FillRect (hDC=0x730107b3, lprc=0x53da70, hbr=0x7710078d) returned 1
[0297.723] DeleteObject (ho=0x7710078d) returned 1
[0297.723] RestoreDC (hdc=0x730107b3, nSavedDC=-1) returned 1
[0297.723] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0297.723] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0297.723] GetSystemMetrics (nIndex=42) returned 0
[0297.723] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0297.723] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0297.724] RestoreDC (hdc=0x730107b3, nSavedDC=-1) returned 1
[0297.724] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107b3) returned 0x0
[0297.724] IsAppThemed () returned 0x1
[0297.724] GetThemeAppProperties () returned 0x3
[0297.724] GetThemeAppProperties () returned 0x3
[0297.724] IsAppThemed () returned 0x1
[0297.724] GetThemeAppProperties () returned 0x3
[0297.724] GetThemeAppProperties () returned 0x3
[0297.724] IsThemePartDefined () returned 0x1
[0297.724] GdipCreateRegion (region=0x53dff4) returned 0x0
[0297.724] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.724] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0297.731] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.732] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0297.732] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0297.732] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0297.732] LocalFree (hMem=0x89ee40) returned 0x0
[0297.732] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0297.732] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0297.732] LocalFree (hMem=0x89ee40) returned 0x0
[0297.732] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.732] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0297.732] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0297.732] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0297.732] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.732] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0297.732] GetCurrentObject (hdc=0x730107b3, type=0x1) returned 0xb00017
[0297.732] GetCurrentObject (hdc=0x730107b3, type=0x2) returned 0x900010
[0297.732] GetCurrentObject (hdc=0x730107b3, type=0x7) returned 0x1e0507b9
[0297.733] GetCurrentObject (hdc=0x730107b3, type=0x6) returned 0x8a01c2
[0297.733] SaveDC (hdc=0x730107b3) returned 1
[0297.733] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a040798
[0297.733] GetClipRgn (hdc=0x730107b3, hrgn=0x7a040798) returned 0
[0297.733] SelectClipRgn (hdc=0x730107b3, hrgn=0x8004053e) returned 2
[0297.733] DeleteObject (ho=0x7a040798) returned 1
[0297.733] DeleteObject (ho=0x8004053e) returned 1
[0297.733] OffsetViewportOrgEx (in: hdc=0x730107b3, x=0, y=0, lppt=0x245ecb8 | out: lppt=0x245ecb8) returned 1
[0297.733] IsAppThemed () returned 0x1
[0297.733] GetThemeAppProperties () returned 0x3
[0297.733] GetThemeAppProperties () returned 0x3
[0297.733] DrawThemeBackground () returned 0x0
[0297.733] RestoreDC (hdc=0x730107b3, nSavedDC=-1) returned 1
[0297.733] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107b3) returned 0x0
[0297.734] GdipCreateRegion (region=0x53dff8) returned 0x0
[0297.734] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.734] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0297.734] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.734] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0297.734] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.734] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0297.734] LocalFree (hMem=0x89ea88) returned 0x0
[0297.734] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0297.734] LocalFree (hMem=0x89ea88) returned 0x0
[0297.734] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.734] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0297.734] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0297.734] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0297.734] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.734] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0297.734] GetCurrentObject (hdc=0x730107b3, type=0x1) returned 0xb00017
[0297.734] GetCurrentObject (hdc=0x730107b3, type=0x2) returned 0x900010
[0297.734] GetCurrentObject (hdc=0x730107b3, type=0x7) returned 0x1e0507b9
[0297.735] GetCurrentObject (hdc=0x730107b3, type=0x6) returned 0x8a01c2
[0297.735] SaveDC (hdc=0x730107b3) returned 1
[0297.735] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8104053e
[0297.735] GetClipRgn (hdc=0x730107b3, hrgn=0x8104053e) returned 0
[0297.735] SelectClipRgn (hdc=0x730107b3, hrgn=0x7b040798) returned 2
[0297.735] DeleteObject (ho=0x8104053e) returned 1
[0297.735] DeleteObject (ho=0x7b040798) returned 1
[0297.735] OffsetViewportOrgEx (in: hdc=0x730107b3, x=0, y=0, lppt=0x245ef8c | out: lppt=0x245ef8c) returned 1
[0297.735] IsAppThemed () returned 0x1
[0297.735] GetThemeAppProperties () returned 0x3
[0297.735] GetThemeAppProperties () returned 0x3
[0297.735] GetThemeBackgroundContentRect () returned 0x0
[0297.735] RestoreDC (hdc=0x730107b3, nSavedDC=-1) returned 1
[0297.735] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107b3) returned 0x0
[0297.735] IsAppThemed () returned 0x1
[0297.735] GetThemeAppProperties () returned 0x3
[0297.735] GetThemeAppProperties () returned 0x3
[0297.735] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0297.735] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0297.735] GetCurrentObject (hdc=0x730107b3, type=0x1) returned 0xb00017
[0297.736] GetCurrentObject (hdc=0x730107b3, type=0x2) returned 0x900010
[0297.736] GetCurrentObject (hdc=0x730107b3, type=0x7) returned 0x1e0507b9
[0297.736] GetCurrentObject (hdc=0x730107b3, type=0x6) returned 0x8a01c2
[0297.736] SaveDC (hdc=0x730107b3) returned 1
[0297.736] GetTextAlign (hdc=0x730107b3) returned 0x0
[0297.736] GetTextColor (hdc=0x730107b3) returned 0x0
[0297.736] GetCurrentObject (hdc=0x730107b3, type=0x6) returned 0x8a01c2
[0297.736] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0297.736] SelectObject (hdc=0x730107b3, h=0x450a0799) returned 0x8a01c2
[0297.736] GetBkMode (hdc=0x730107b3) returned 2
[0297.736] SetBkMode (hdc=0x730107b3, mode=1) returned 2
[0297.736] DrawTextExW (in: hdc=0x730107b3, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x245f32c | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0297.736] DrawTextExW (in: hdc=0x730107b3, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x245f32c | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0297.737] RestoreDC (hdc=0x730107b3, nSavedDC=-1) returned 1
[0297.737] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107b3) returned 0x0
[0297.737] GetFocus () returned 0xd02b8
[0297.737] IsAppThemed () returned 0x1
[0297.737] GetThemeAppProperties () returned 0x3
[0297.737] GetThemeAppProperties () returned 0x3
[0297.737] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0297.737] BitBlt (hdc=0x10105d6, x=0, y=0, cx=153, cy=40, hdcSrc=0x730107b3, x1=0, y1=0, rop=0xcc0020) returned 1
[0297.737] GdipReleaseDC (graphics=0x5d92c30, hdc=0x730107b3) returned 0x0
[0297.737] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0297.737] SelectObject (hdc=0x730107b3, h=0x85000f) returned 0x1e0507b9
[0297.737] DeleteDC (hdc=0x730107b3) returned 1
[0297.737] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0297.737] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0297.738] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.738] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.738] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.738] DispatchMessageA (lpMsg=0x53e8a0) returned 0x7e80
[0297.739] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.739] IsWindowUnicode (hWnd=0x1e01e2) returned 1
[0297.739] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.739] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.739] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.739] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.739] IsWindowUnicode (hWnd=0x1e01e2) returned 1
[0297.739] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.739] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.739] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.739] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x2a1, wParam=0x0, lParam=0xb0027) returned 0x0
[0297.739] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0297.739] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0297.739] WaitMessage () returned 1
[0297.779] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.779] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.779] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.779] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.779] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.781] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0297.781] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0297.781] WaitMessage () returned 1
[0297.782] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.782] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.782] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.782] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.782] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.783] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.784] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.784] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.784] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.784] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.784] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.784] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.784] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.784] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.784] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.784] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0297.785] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0297.785] WaitMessage () returned 1
[0297.785] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.785] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.785] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.785] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.786] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.791] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.791] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.791] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.792] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.792] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.792] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.792] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.792] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.792] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.792] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.792] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0297.793] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0297.793] WaitMessage () returned 1
[0297.795] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.795] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.795] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.795] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.795] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.797] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.798] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.798] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.798] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.798] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.798] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.798] IsWindowUnicode (hWnd=0x102dc) returned 1
[0297.798] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.798] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.798] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.798] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0297.799] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0297.800] WaitMessage () returned 1
[0297.841] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.841] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x84, wParam=0x0, lParam=0x1940368) returned 0x1
[0297.842] IsWindowUnicode (hWnd=0x1e01e2) returned 1
[0297.842] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.842] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x84, wParam=0x0, lParam=0x1940368) returned 0x1
[0297.842] GetDlgItem (hDlg=0x3e013e, nIDDlgItem=0) returned 0x0
[0297.842] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x210, wParam=0x201, lParam=0x170149) returned 0x0
[0297.842] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x21, wParam=0x3e013e, lParam=0x2010001) returned 0x1
[0297.842] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x21, wParam=0x3e013e, lParam=0x2010001) returned 0x1
[0297.842] SetCursor (hCursor=0x10003) returned 0x10003
[0297.842] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.842] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0297.842] GetKeyState (nVirtKey=1) returned -127
[0297.843] GetKeyState (nVirtKey=2) returned 0
[0297.843] GetKeyState (nVirtKey=4) returned 0
[0297.843] GetKeyState (nVirtKey=5) returned 0
[0297.843] GetKeyState (nVirtKey=6) returned 0
[0297.843] IsWindowVisible (hWnd=0x1e01e2) returned 1
[0297.843] IsWindowEnabled (hWnd=0x1e01e2) returned 1
[0297.843] SetFocus (hWnd=0x1e01e2) returned 0xd02b8
[0297.844] GetFocus () returned 0x1e01e2
[0297.844] IsChild (hWndParent=0x3e013e, hWnd=0x1e01e2) returned 1
[0297.844] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x8, wParam=0x1e01e2, lParam=0x0) returned 0x1
[0297.844] SendMessageW (hWnd=0xd02b8, Msg=0x2111, wParam=0x20002b8, lParam=0xd02b8) returned 0x0
[0297.845] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0297.847] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0297.848] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0297.848] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0297.848] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0297.848] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0297.854] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0297.854] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x7, wParam=0xd02b8, lParam=0x0) returned 0x0
[0297.854] GetStockObject (i=5) returned 0x900015
[0297.854] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0297.854] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0xd, wParam=0x3, lParam=0x89e738) returned 0x2
[0297.854] GetDlgItem (hDlg=0x3e013e, nIDDlgItem=1966562) returned 0x1e01e2
[0297.854] SendMessageW (hWnd=0x1e01e2, Msg=0x202b, wParam=0x1e01e2, lParam=0x53de74) returned 0x0
[0297.854] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x202b, wParam=0x1e01e2, lParam=0x53de74) returned 0x0
[0297.854] InvalidateRect (hWnd=0x1e01e2, lpRect=0x0, bErase=0) returned 1
[0297.856] GetFocus () returned 0x1e01e2
[0297.857] GetFocus () returned 0x1e01e2
[0297.857] GetFocus () returned 0x1e01e2
[0297.857] GetKeyState (nVirtKey=1) returned -127
[0297.857] GetKeyState (nVirtKey=2) returned 0
[0297.857] GetKeyState (nVirtKey=4) returned 0
[0297.857] GetKeyState (nVirtKey=5) returned 0
[0297.857] GetKeyState (nVirtKey=6) returned 0
[0297.857] GetCapture () returned 0x0
[0297.857] SetCapture (hWnd=0x1e01e2) returned 0x0
[0297.857] GetKeyState (nVirtKey=1) returned -127
[0297.857] GetKeyState (nVirtKey=2) returned 0
[0297.857] GetKeyState (nVirtKey=4) returned 0
[0297.857] GetKeyState (nVirtKey=5) returned 0
[0297.857] GetKeyState (nVirtKey=6) returned 0
[0297.857] NotifyWinEvent (event=0x800a, hwnd=0x1e01e2, idObject=-4, idChild=0)
[0297.857] InvalidateRect (hWnd=0x1e01e2, lpRect=0x53e4c8, bErase=0) returned 1
[0297.857] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.857] IsWindowUnicode (hWnd=0x1e01e2) returned 1
[0297.857] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0297.858] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0297.858] DispatchMessageW (lpMsg=0x53e8a0)
[0297.858] MapWindowPoints (in: hWndFrom=0x1e01e2, hWndTo=0x0, lpPoints=0x245f57c, cPoints=0x1 | out: lpPoints=0x245f57c) returned 25756481
[0297.858] NotifyWinEvent (event=0x800a, hwnd=0x1e01e2, idObject=-4, idChild=0)
[0297.858] InvalidateRect (hWnd=0x1e01e2, lpRect=0x53e468, bErase=0) returned 1
[0297.858] UpdateWindow (hWnd=0x1e01e2) returned 1
[0297.858] BeginPaint (in: hWnd=0x1e01e2, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x10105d6
[0297.858] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0297.858] CreateCompatibleDC (hdc=0x10105d6) returned 0x490107bd
[0297.858] SelectObject (hdc=0x490107bd, h=0x1e0507b9) returned 0x85000f
[0297.858] GdipCreateFromHDC (hdc=0x490107bd, graphics=0x53df98) returned 0x0
[0297.859] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0297.859] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0297.859] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0297.859] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.859] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0297.859] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0297.859] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0297.859] LocalFree (hMem=0x89ee08) returned 0x0
[0297.859] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.859] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0297.859] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.859] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0297.859] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0297.859] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa750dbd) returned 0x0
[0297.859] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.859] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0297.860] GetCurrentObject (hdc=0x490107bd, type=0x1) returned 0xb00017
[0297.860] GetCurrentObject (hdc=0x490107bd, type=0x2) returned 0x900010
[0297.860] GetCurrentObject (hdc=0x490107bd, type=0x7) returned 0x1e0507b9
[0297.860] GetCurrentObject (hdc=0x490107bd, type=0x6) returned 0x8a01c2
[0297.860] SaveDC (hdc=0x490107bd) returned 1
[0297.860] GetNearestColor (hdc=0x490107bd, color=0xf0f0f0) returned 0xf0f0f0
[0297.860] GetNearestColor (hdc=0x490107bd, color=0xa0a0a0) returned 0xa0a0a0
[0297.860] GetNearestColor (hdc=0x490107bd, color=0x696969) returned 0x696969
[0297.860] GetNearestColor (hdc=0x490107bd, color=0xa0a0a0) returned 0xa0a0a0
[0297.860] GetNearestColor (hdc=0x490107bd, color=0x0) returned 0x0
[0297.860] GetNearestColor (hdc=0x490107bd, color=0xffffff) returned 0xffffff
[0297.860] GetNearestColor (hdc=0x490107bd, color=0xe5e5e5) returned 0xe5e5e5
[0297.860] GetNearestColor (hdc=0x490107bd, color=0xd7d7d7) returned 0xd7d7d7
[0297.860] GetNearestColor (hdc=0x490107bd, color=0x0) returned 0x0
[0297.861] RestoreDC (hdc=0x490107bd, nSavedDC=-1) returned 1
[0297.861] GdipReleaseDC (graphics=0x5d92c30, hdc=0x490107bd) returned 0x0
[0297.861] IsAppThemed () returned 0x1
[0297.861] GetThemeAppProperties () returned 0x3
[0297.861] GetThemeAppProperties () returned 0x3
[0297.861] IsAppThemed () returned 0x1
[0297.861] GetThemeAppProperties () returned 0x3
[0297.861] GetThemeAppProperties () returned 0x3
[0297.861] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0297.861] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x245fcf0 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0297.861] IsAppThemed () returned 0x1
[0297.861] GetThemeAppProperties () returned 0x3
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] IsAppThemed () returned 0x1
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] IsAppThemed () returned 0x1
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] IsAppThemed () returned 0x1
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] IsThemePartDefined () returned 0x1
[0297.862] IsAppThemed () returned 0x1
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0297.862] IsAppThemed () returned 0x1
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] IsAppThemed () returned 0x1
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] GetThemeAppProperties () returned 0x3
[0297.862] IsThemePartDefined () returned 0x1
[0297.862] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0297.863] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.863] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0297.863] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.863] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0297.863] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0297.863] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0297.863] LocalFree (hMem=0x89eee8) returned 0x0
[0297.863] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0297.863] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0297.863] LocalFree (hMem=0x89ea88) returned 0x0
[0297.863] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.863] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0297.863] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0297.863] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0297.863] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.863] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0297.863] GetCurrentObject (hdc=0x490107bd, type=0x1) returned 0xb00017
[0297.864] GetCurrentObject (hdc=0x490107bd, type=0x2) returned 0x900010
[0297.864] GetCurrentObject (hdc=0x490107bd, type=0x7) returned 0x1e0507b9
[0297.864] GetCurrentObject (hdc=0x490107bd, type=0x6) returned 0x8a01c2
[0297.864] SaveDC (hdc=0x490107bd) returned 1
[0297.864] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c040798
[0297.864] GetClipRgn (hdc=0x490107bd, hrgn=0x7c040798) returned 0
[0297.864] SelectClipRgn (hdc=0x490107bd, hrgn=0x8504053e) returned 2
[0297.864] DeleteObject (ho=0x7c040798) returned 1
[0297.864] DeleteObject (ho=0x8504053e) returned 1
[0297.864] OffsetViewportOrgEx (in: hdc=0x490107bd, x=0, y=0, lppt=0x24603a0 | out: lppt=0x24603a0) returned 1
[0297.864] DrawThemeParentBackground () returned 0x0
[0297.864] GetWindowPlacement (in: hWnd=0x3e013e, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0297.865] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0297.865] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.865] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.865] GetSystemMetrics (nIndex=42) returned 0
[0297.865] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.865] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0297.868] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0297.868] GetCurrentObject (hdc=0x490107bd, type=0x1) returned 0xb00017
[0297.868] GetCurrentObject (hdc=0x490107bd, type=0x2) returned 0x900010
[0297.868] GetCurrentObject (hdc=0x490107bd, type=0x7) returned 0x1e0507b9
[0297.868] GetCurrentObject (hdc=0x490107bd, type=0x6) returned 0x8a01c2
[0297.868] SaveDC (hdc=0x490107bd) returned 2
[0297.868] GetNearestColor (hdc=0x490107bd, color=0xf0f0f0) returned 0xf0f0f0
[0297.868] CreateSolidBrush (color=0xf0f0f0) returned 0x7810078d
[0297.868] FillRect (hDC=0x490107bd, lprc=0x53d760, hbr=0x7810078d) returned 1
[0297.868] DeleteObject (ho=0x7810078d) returned 1
[0297.868] RestoreDC (hdc=0x490107bd, nSavedDC=-1) returned 1
[0297.869] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.869] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.869] GetSystemMetrics (nIndex=42) returned 0
[0297.869] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.869] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0297.869] GetClientRect (in: hWnd=0x3e013e, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0297.869] GetCurrentObject (hdc=0x490107bd, type=0x1) returned 0xb00017
[0297.869] GetCurrentObject (hdc=0x490107bd, type=0x2) returned 0x900010
[0297.869] GetCurrentObject (hdc=0x490107bd, type=0x7) returned 0x1e0507b9
[0297.869] GetCurrentObject (hdc=0x490107bd, type=0x6) returned 0x8a01c2
[0297.869] SaveDC (hdc=0x490107bd) returned 2
[0297.869] GetNearestColor (hdc=0x490107bd, color=0xf0f0f0) returned 0xf0f0f0
[0297.869] CreateSolidBrush (color=0xf0f0f0) returned 0x7910078d
[0297.869] FillRect (hDC=0x490107bd, lprc=0x53d700, hbr=0x7910078d) returned 1
[0297.869] DeleteObject (ho=0x7910078d) returned 1
[0297.869] RestoreDC (hdc=0x490107bd, nSavedDC=-1) returned 1
[0297.869] GetWindowTextLengthW (hWnd=0x3e013e) returned 10
[0297.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0297.870] GetSystemMetrics (nIndex=42) returned 0
[0297.870] GetWindowTextW (in: hWnd=0x3e013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0297.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0297.870] RestoreDC (hdc=0x490107bd, nSavedDC=-1) returned 1
[0297.870] GdipReleaseDC (graphics=0x5d92c30, hdc=0x490107bd) returned 0x0
[0297.870] IsAppThemed () returned 0x1
[0297.870] GetThemeAppProperties () returned 0x3
[0297.870] GetThemeAppProperties () returned 0x3
[0297.870] IsAppThemed () returned 0x1
[0297.870] GetThemeAppProperties () returned 0x3
[0297.870] GetThemeAppProperties () returned 0x3
[0297.870] IsThemePartDefined () returned 0x1
[0297.870] GdipCreateRegion (region=0x53dc80) returned 0x0
[0297.870] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.870] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0297.871] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0297.871] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0297.871] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0297.871] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0297.871] LocalFree (hMem=0x89ee08) returned 0x0
[0297.871] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0297.871] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0297.871] LocalFree (hMem=0x89ee08) returned 0x0
[0297.871] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0297.871] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0297.871] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0297.871] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0297.871] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.871] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0297.871] GetCurrentObject (hdc=0x490107bd, type=0x1) returned 0xb00017
[0297.871] GetCurrentObject (hdc=0x490107bd, type=0x2) returned 0x900010
[0297.871] GetCurrentObject (hdc=0x490107bd, type=0x7) returned 0x1e0507b9
[0297.871] GetCurrentObject (hdc=0x490107bd, type=0x6) returned 0x8a01c2
[0297.871] SaveDC (hdc=0x490107bd) returned 1
[0297.872] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8604053e
[0297.872] GetClipRgn (hdc=0x490107bd, hrgn=0x8604053e) returned 0
[0297.872] SelectClipRgn (hdc=0x490107bd, hrgn=0x7e040798) returned 2
[0297.872] DeleteObject (ho=0x8604053e) returned 1
[0297.872] DeleteObject (ho=0x7e040798) returned 1
[0297.872] OffsetViewportOrgEx (in: hdc=0x490107bd, x=0, y=0, lppt=0x2460c28 | out: lppt=0x2460c28) returned 1
[0297.872] IsAppThemed () returned 0x1
[0297.872] GetThemeAppProperties () returned 0x3
[0297.872] GetThemeAppProperties () returned 0x3
[0297.872] DrawThemeBackground () returned 0x0
[0297.872] RestoreDC (hdc=0x490107bd, nSavedDC=-1) returned 1
[0297.872] GdipReleaseDC (graphics=0x5d92c30, hdc=0x490107bd) returned 0x0
[0297.872] GdipCreateRegion (region=0x53dc84) returned 0x0
[0297.872] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0297.872] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0297.872] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0297.872] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0297.872] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0297.872] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0297.873] LocalFree (hMem=0x89ee08) returned 0x0
[0297.873] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0297.873] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0297.873] LocalFree (hMem=0x89ee08) returned 0x0
[0297.873] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0297.873] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0297.873] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0297.873] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0297.873] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0297.873] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0297.873] GetCurrentObject (hdc=0x490107bd, type=0x1) returned 0xb00017
[0297.873] GetCurrentObject (hdc=0x490107bd, type=0x2) returned 0x900010
[0297.873] GetCurrentObject (hdc=0x490107bd, type=0x7) returned 0x1e0507b9
[0297.873] GetCurrentObject (hdc=0x490107bd, type=0x6) returned 0x8a01c2
[0297.873] SaveDC (hdc=0x490107bd) returned 1
[0297.874] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7f040798
[0297.874] GetClipRgn (hdc=0x490107bd, hrgn=0x7f040798) returned 0
[0297.874] SelectClipRgn (hdc=0x490107bd, hrgn=0x8704053e) returned 2
[0297.874] DeleteObject (ho=0x7f040798) returned 1
[0297.874] DeleteObject (ho=0x8704053e) returned 1
[0297.874] OffsetViewportOrgEx (in: hdc=0x490107bd, x=0, y=0, lppt=0x2460efc | out: lppt=0x2460efc) returned 1
[0297.874] IsAppThemed () returned 0x1
[0297.874] GetThemeAppProperties () returned 0x3
[0297.874] GetThemeAppProperties () returned 0x3
[0297.874] GetThemeBackgroundContentRect () returned 0x0
[0297.874] RestoreDC (hdc=0x490107bd, nSavedDC=-1) returned 1
[0297.874] GdipReleaseDC (graphics=0x5d92c30, hdc=0x490107bd) returned 0x0
[0297.874] IsAppThemed () returned 0x1
[0297.874] GetThemeAppProperties () returned 0x3
[0297.874] GetThemeAppProperties () returned 0x3
[0297.874] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0297.874] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0297.875] GetCurrentObject (hdc=0x490107bd, type=0x1) returned 0xb00017
[0297.875] GetCurrentObject (hdc=0x490107bd, type=0x2) returned 0x900010
[0297.875] GetCurrentObject (hdc=0x490107bd, type=0x7) returned 0x1e0507b9
[0297.875] GetCurrentObject (hdc=0x490107bd, type=0x6) returned 0x8a01c2
[0297.875] SaveDC (hdc=0x490107bd) returned 1
[0297.875] GetTextAlign (hdc=0x490107bd) returned 0x0
[0297.875] GetTextColor (hdc=0x490107bd) returned 0x0
[0297.875] GetCurrentObject (hdc=0x490107bd, type=0x6) returned 0x8a01c2
[0297.875] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0297.875] SelectObject (hdc=0x490107bd, h=0x730a066d) returned 0x8a01c2
[0297.875] GetBkMode (hdc=0x490107bd) returned 2
[0297.875] SetBkMode (hdc=0x490107bd, mode=1) returned 2
[0297.875] DrawTextExW (in: hdc=0x490107bd, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x246129c | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0297.876] DrawTextExW (in: hdc=0x490107bd, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x246129c | out: lpchText="OK", lprc=0x53dd80) returned 13
[0297.876] RestoreDC (hdc=0x490107bd, nSavedDC=-1) returned 1
[0297.876] GdipReleaseDC (graphics=0x5d92c30, hdc=0x490107bd) returned 0x0
[0297.876] GetFocus () returned 0x1e01e2
[0297.876] IsAppThemed () returned 0x1
[0297.876] GetThemeAppProperties () returned 0x3
[0297.876] GetThemeAppProperties () returned 0x3
[0297.876] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0297.876] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x490107bd, x1=0, y1=0, rop=0xcc0020) returned 1
[0297.877] GdipReleaseDC (graphics=0x5d92c30, hdc=0x490107bd) returned 0x0
[0297.877] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0297.877] SelectObject (hdc=0x490107bd, h=0x85000f) returned 0x1e0507b9
[0297.877] DeleteDC (hdc=0x490107bd) returned 1
[0297.877] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0297.877] EndPaint (hWnd=0x1e01e2, lpPaint=0x53df7c) returned 1
[0297.877] MapWindowPoints (in: hWndFrom=0x1e01e2, hWndTo=0x0, lpPoints=0x2461398, cPoints=0x1 | out: lpPoints=0x2461398) returned 25756481
[0297.877] WindowFromPoint (Point=0x368) returned 0x1e01e2
[0297.877] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x84, wParam=0x0, lParam=0x1940368) returned 0x1
[0297.878] NotifyWinEvent (event=0x800a, hwnd=0x1e01e2, idObject=-4, idChild=0)
[0297.878] NotifyWinEvent (event=0x800c, hwnd=0x1e01e2, idObject=-4, idChild=0)
[0297.878] GetWindowTextLengthW (hWnd=0xd02b8) returned 0
[0297.878] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0297.878] GetSystemMetrics (nIndex=42) returned 0
[0297.878] GetWindowTextW (in: hWnd=0xd02b8, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0297.878] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0297.878] SendMessageW (hWnd=0x3e013e, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0297.878] GetCapture () returned 0x1e01e2
[0297.878] ReleaseCapture () returned 1
[0297.878] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0297.878] PeekMessageW (lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0)
[0297.879] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x84, wParam=0x0, lParam=0x1940368) returned 0x1
[0297.880] IsWindow (hWnd=0x70036) returned 1
[0297.880] EnableWindow (hWnd=0x70036, bEnable=1)
[0297.885] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0297.885] IsWindow (hWnd=0x70036) returned 1
[0297.885] SetActiveWindow (hWnd=0x70036)
[0297.885] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x86, wParam=0x0, lParam=0x70036)
[0297.887] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0297.888] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0297.888] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0297.902] IsChild (hWndParent=0x3e013e, hWnd=0x202c6) returned 0
[0297.902] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1e01e2, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0297.902] GetCapture () returned 0x0
[0297.902] InvalidateRect (hWnd=0x1e01e2, lpRect=0x0, bErase=0) returned 1
[0297.906] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0297.906] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0297.906] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0297.963] IsChild (hWndParent=0x3e013e, hWnd=0x202c6) returned 0
[0297.963] ShowWindow (hWnd=0x3e013e, nCmdShow=0)
[0297.963] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0297.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x3e013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0297.970] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0xd02b8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0297.970] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2400ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0297.971] GetWindowTextLengthW (hWnd=0x1b004e)
[0297.972] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0297.972] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1b004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0297.986] GetProcessWindowStation () returned 0x13c
[0297.986] GetActiveWindow () returned 0x70036
[0297.986] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0297.986] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0297.986] GetCurrentThreadId () returned 0x11d0
[0297.987] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf619e, lParam=0x0) returned 1
[0297.987] IsWindowVisible (hWnd=0x70036) returned 1
[0297.987] IsWindowEnabled (hWnd=0x70036) returned 1
[0297.987] IsWindowVisible (hWnd=0x602b6) returned 0
[0297.987] IsWindowVisible (hWnd=0x901f8) returned 0
[0297.987] IsWindowVisible (hWnd=0x202d0) returned 0
[0297.987] IsWindowVisible (hWnd=0x202d4) returned 0
[0297.987] GetActiveWindow () returned 0x70036
[0297.987] GetFocus () returned 0x202c6
[0297.987] IsWindow (hWnd=0x70036) returned 1
[0297.987] EnableWindow (hWnd=0x70036, bEnable=0)
[0297.987] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0297.988] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0297.990] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0298.019] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x60100ce
[0298.019] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0298.020] CreateCompatibleDC (hdc=0x60100ce) returned 0xda0107b1
[0298.020] SelectObject (hdc=0xda0107b1, h=0x1e0507b9) returned 0x85000f
[0298.020] GdipCreateFromHDC (hdc=0xda0107b1, graphics=0x53e108) returned 0x0
[0298.020] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0298.020] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0298.020] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0298.020] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0298.020] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0298.020] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0298.020] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0298.020] LocalFree (hMem=0x89eac0) returned 0x0
[0298.020] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0298.020] GdipCreateRegion (region=0x53e150) returned 0x0
[0298.020] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0298.021] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0298.021] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0298.021] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa730dbd) returned 0x0
[0298.021] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0298.021] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0298.021] GetCurrentObject (hdc=0xda0107b1, type=0x1) returned 0xb00017
[0298.021] GetCurrentObject (hdc=0xda0107b1, type=0x2) returned 0x900010
[0298.021] GetCurrentObject (hdc=0xda0107b1, type=0x7) returned 0x1e0507b9
[0298.021] GetCurrentObject (hdc=0xda0107b1, type=0x6) returned 0x8a01c2
[0298.026] SaveDC (hdc=0xda0107b1) returned 1
[0298.026] GetNearestColor (hdc=0xda0107b1, color=0xff) returned 0xff
[0298.026] GetNearestColor (hdc=0xda0107b1, color=0x55) returned 0x55
[0298.026] GetNearestColor (hdc=0xda0107b1, color=0x0) returned 0x0
[0298.026] GetNearestColor (hdc=0xda0107b1, color=0x55) returned 0x55
[0298.026] GetNearestColor (hdc=0xda0107b1, color=0x0) returned 0x0
[0298.026] GetNearestColor (hdc=0xda0107b1, color=0x8080ff) returned 0x8080ff
[0298.026] GetNearestColor (hdc=0xda0107b1, color=0x7373e5) returned 0x7373e5
[0298.027] GetNearestColor (hdc=0xda0107b1, color=0xe5) returned 0xe5
[0298.027] GetNearestColor (hdc=0xda0107b1, color=0x0) returned 0x0
[0298.027] RestoreDC (hdc=0xda0107b1, nSavedDC=-1) returned 1
[0298.027] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107b1) returned 0x0
[0298.027] IsAppThemed () returned 0x1
[0298.027] GetThemeAppProperties () returned 0x3
[0298.027] GetThemeAppProperties () returned 0x3
[0298.027] IsAppThemed () returned 0x1
[0298.027] GetThemeAppProperties () returned 0x3
[0298.027] GetThemeAppProperties () returned 0x3
[0298.027] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0298.027] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x2462690 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0298.028] IsAppThemed () returned 0x1
[0298.028] GetThemeAppProperties () returned 0x3
[0298.028] GetThemeAppProperties () returned 0x3
[0298.028] IsAppThemed () returned 0x1
[0298.028] GetThemeAppProperties () returned 0x3
[0298.028] GetThemeAppProperties () returned 0x3
[0298.028] GetFocus () returned 0x1f0122
[0298.028] IsAppThemed () returned 0x1
[0298.028] GetThemeAppProperties () returned 0x3
[0298.028] GetThemeAppProperties () returned 0x3
[0298.028] IsAppThemed () returned 0x1
[0298.028] GetThemeAppProperties () returned 0x3
[0298.028] GetThemeAppProperties () returned 0x3
[0298.028] IsThemePartDefined () returned 0x1
[0298.028] IsAppThemed () returned 0x1
[0298.028] GetThemeAppProperties () returned 0x3
[0298.028] GetThemeAppProperties () returned 0x3
[0298.028] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0298.029] IsAppThemed () returned 0x1
[0298.029] GetThemeAppProperties () returned 0x3
[0298.029] GetThemeAppProperties () returned 0x3
[0298.029] IsAppThemed () returned 0x1
[0298.029] GetThemeAppProperties () returned 0x3
[0298.029] GetThemeAppProperties () returned 0x3
[0298.029] IsThemePartDefined () returned 0x1
[0298.029] GdipCreateRegion (region=0x53de78) returned 0x0
[0298.029] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0298.029] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0298.029] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0298.029] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0298.029] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0298.029] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0298.029] LocalFree (hMem=0x89ee08) returned 0x0
[0298.029] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0298.029] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0298.029] LocalFree (hMem=0x89eac0) returned 0x0
[0298.029] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0298.029] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0298.030] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0298.030] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0298.030] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0298.030] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0298.030] GetCurrentObject (hdc=0xda0107b1, type=0x1) returned 0xb00017
[0298.030] GetCurrentObject (hdc=0xda0107b1, type=0x2) returned 0x900010
[0298.030] GetCurrentObject (hdc=0xda0107b1, type=0x7) returned 0x1e0507b9
[0298.030] GetCurrentObject (hdc=0xda0107b1, type=0x6) returned 0x8a01c2
[0298.030] SaveDC (hdc=0xda0107b1) returned 1
[0298.030] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8804053e
[0298.030] GetClipRgn (hdc=0xda0107b1, hrgn=0x8804053e) returned 0
[0298.030] SelectClipRgn (hdc=0xda0107b1, hrgn=0x85040798) returned 2
[0298.030] DeleteObject (ho=0x8804053e) returned 1
[0298.030] DeleteObject (ho=0x85040798) returned 1
[0298.030] OffsetViewportOrgEx (in: hdc=0xda0107b1, x=0, y=0, lppt=0x2462d40 | out: lppt=0x2462d40) returned 1
[0298.030] DrawThemeParentBackground () returned 0x0
[0298.031] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0298.031] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0298.031] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0298.031] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0298.031] GetSystemMetrics (nIndex=42) returned 0
[0298.031] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0298.031] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0298.031] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0298.031] GetCurrentObject (hdc=0xda0107b1, type=0x1) returned 0xb00017
[0298.031] GetCurrentObject (hdc=0xda0107b1, type=0x2) returned 0x900010
[0298.031] GetCurrentObject (hdc=0xda0107b1, type=0x7) returned 0x1e0507b9
[0298.031] GetCurrentObject (hdc=0xda0107b1, type=0x6) returned 0x8a01c2
[0298.031] SaveDC (hdc=0xda0107b1) returned 2
[0298.031] GetNearestColor (hdc=0xda0107b1, color=0xff) returned 0xff
[0298.031] CreateSolidBrush (color=0xff) returned 0x7a10078d
[0298.031] FillRect (hDC=0xda0107b1, lprc=0x53d8d8, hbr=0x7a10078d) returned 1
[0298.032] DeleteObject (ho=0x7a10078d) returned 1
[0298.032] RestoreDC (hdc=0xda0107b1, nSavedDC=-1) returned 1
[0298.032] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0298.032] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0298.032] GetSystemMetrics (nIndex=42) returned 0
[0298.032] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0298.032] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0298.032] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0298.032] GetCurrentObject (hdc=0xda0107b1, type=0x1) returned 0xb00017
[0298.032] GetCurrentObject (hdc=0xda0107b1, type=0x2) returned 0x900010
[0298.032] GetCurrentObject (hdc=0xda0107b1, type=0x7) returned 0x1e0507b9
[0298.032] GetCurrentObject (hdc=0xda0107b1, type=0x6) returned 0x8a01c2
[0298.032] SaveDC (hdc=0xda0107b1) returned 2
[0298.032] GetNearestColor (hdc=0xda0107b1, color=0xff) returned 0xff
[0298.032] CreateSolidBrush (color=0xff) returned 0x7b10078d
[0298.032] FillRect (hDC=0xda0107b1, lprc=0x53d878, hbr=0x7b10078d) returned 1
[0298.032] DeleteObject (ho=0x7b10078d) returned 1
[0298.033] RestoreDC (hdc=0xda0107b1, nSavedDC=-1) returned 1
[0298.033] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0298.033] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0298.033] GetSystemMetrics (nIndex=42) returned 0
[0298.033] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0298.033] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0298.033] RestoreDC (hdc=0xda0107b1, nSavedDC=-1) returned 1
[0298.033] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107b1) returned 0x0
[0298.033] IsAppThemed () returned 0x1
[0298.033] GetThemeAppProperties () returned 0x3
[0298.033] GetThemeAppProperties () returned 0x3
[0298.033] IsAppThemed () returned 0x1
[0298.033] GetThemeAppProperties () returned 0x3
[0298.033] GetThemeAppProperties () returned 0x3
[0298.033] IsThemePartDefined () returned 0x1
[0298.033] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0298.034] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0298.034] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0298.034] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0298.034] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0298.034] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0298.034] LocalFree (hMem=0x89eac0) returned 0x0
[0298.034] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0298.034] LocalFree (hMem=0x89eac0) returned 0x0
[0298.034] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0298.034] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0298.034] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0298.034] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0298.034] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0298.034] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0298.034] GetCurrentObject (hdc=0xda0107b1, type=0x1) returned 0xb00017
[0298.034] GetCurrentObject (hdc=0xda0107b1, type=0x2) returned 0x900010
[0298.034] GetCurrentObject (hdc=0xda0107b1, type=0x7) returned 0x1e0507b9
[0298.034] GetCurrentObject (hdc=0xda0107b1, type=0x6) returned 0x8a01c2
[0298.034] SaveDC (hdc=0xda0107b1) returned 1
[0298.034] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x86040798
[0298.034] GetClipRgn (hdc=0xda0107b1, hrgn=0x86040798) returned 0
[0298.035] SelectClipRgn (hdc=0xda0107b1, hrgn=0x8a04053e) returned 2
[0298.035] DeleteObject (ho=0x86040798) returned 1
[0298.035] DeleteObject (ho=0x8a04053e) returned 1
[0298.035] OffsetViewportOrgEx (in: hdc=0xda0107b1, x=0, y=0, lppt=0x24635a4 | out: lppt=0x24635a4) returned 1
[0298.035] IsAppThemed () returned 0x1
[0298.035] GetThemeAppProperties () returned 0x3
[0298.035] GetThemeAppProperties () returned 0x3
[0298.035] DrawThemeBackground () returned 0x0
[0298.035] RestoreDC (hdc=0xda0107b1, nSavedDC=-1) returned 1
[0298.035] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107b1) returned 0x0
[0298.035] GdipCreateRegion (region=0x53de00) returned 0x0
[0298.035] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0298.035] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0298.035] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0298.035] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0298.035] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0298.036] LocalFree (hMem=0x89ee08) returned 0x0
[0298.036] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0298.036] LocalFree (hMem=0x89eac0) returned 0x0
[0298.036] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0298.036] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0298.036] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0298.036] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0298.036] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0298.036] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0298.036] GetCurrentObject (hdc=0xda0107b1, type=0x1) returned 0xb00017
[0298.036] GetCurrentObject (hdc=0xda0107b1, type=0x2) returned 0x900010
[0298.036] GetCurrentObject (hdc=0xda0107b1, type=0x7) returned 0x1e0507b9
[0298.036] GetCurrentObject (hdc=0xda0107b1, type=0x6) returned 0x8a01c2
[0298.036] SaveDC (hdc=0xda0107b1) returned 1
[0298.036] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8b04053e
[0298.036] GetClipRgn (hdc=0xda0107b1, hrgn=0x8b04053e) returned 0
[0298.036] SelectClipRgn (hdc=0xda0107b1, hrgn=0x87040798) returned 2
[0298.036] DeleteObject (ho=0x8b04053e) returned 1
[0298.036] DeleteObject (ho=0x87040798) returned 1
[0298.036] OffsetViewportOrgEx (in: hdc=0xda0107b1, x=0, y=0, lppt=0x2463878 | out: lppt=0x2463878) returned 1
[0298.037] IsAppThemed () returned 0x1
[0298.037] GetThemeAppProperties () returned 0x3
[0298.037] GetThemeAppProperties () returned 0x3
[0298.037] GetThemeBackgroundContentRect () returned 0x0
[0298.037] RestoreDC (hdc=0xda0107b1, nSavedDC=-1) returned 1
[0298.037] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107b1) returned 0x0
[0298.037] IsAppThemed () returned 0x1
[0298.037] GetThemeAppProperties () returned 0x3
[0298.037] GetThemeAppProperties () returned 0x3
[0298.037] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0298.037] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0298.037] GetCurrentObject (hdc=0xda0107b1, type=0x1) returned 0xb00017
[0298.037] GetCurrentObject (hdc=0xda0107b1, type=0x2) returned 0x900010
[0298.037] GetCurrentObject (hdc=0xda0107b1, type=0x7) returned 0x1e0507b9
[0298.037] GetCurrentObject (hdc=0xda0107b1, type=0x6) returned 0x8a01c2
[0298.037] SaveDC (hdc=0xda0107b1) returned 1
[0298.037] GetTextAlign (hdc=0xda0107b1) returned 0x0
[0298.038] GetTextColor (hdc=0xda0107b1) returned 0x0
[0298.038] GetCurrentObject (hdc=0xda0107b1, type=0x6) returned 0x8a01c2
[0298.038] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0298.038] SelectObject (hdc=0xda0107b1, h=0x450a0799) returned 0x8a01c2
[0298.038] GetBkMode (hdc=0xda0107b1) returned 2
[0298.038] SetBkMode (hdc=0xda0107b1, mode=1) returned 2
[0298.038] DrawTextExW (in: hdc=0xda0107b1, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2463c18 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0298.038] DrawTextExW (in: hdc=0xda0107b1, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2463c18 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0298.039] RestoreDC (hdc=0xda0107b1, nSavedDC=-1) returned 1
[0298.039] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107b1) returned 0x0
[0298.039] GetFocus () returned 0x1f0122
[0298.039] IsAppThemed () returned 0x1
[0298.039] GetThemeAppProperties () returned 0x3
[0298.039] GetThemeAppProperties () returned 0x3
[0298.039] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0298.039] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xda0107b1, x1=0, y1=0, rop=0xcc0020) returned 1
[0298.039] GdipReleaseDC (graphics=0x5d92c30, hdc=0xda0107b1) returned 0x0
[0298.039] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0298.039] SelectObject (hdc=0xda0107b1, h=0x85000f) returned 0x1e0507b9
[0298.039] DeleteDC (hdc=0xda0107b1) returned 1
[0298.039] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0298.039] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0298.379] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0298.380] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0298.380] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x3f013e) returned 0x1
[0298.392] GetFocus () returned 0x3f013e
[0298.392] GetAncestor (hwnd=0x3f013e, gaFlags=0x1) returned 0x10010
[0298.392] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0298.392] SetFocus (hWnd=0x202c6) returned 0x0
[0298.395] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0298.397] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0298.397] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0298.398] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0298.398] GetFocus () returned 0x70036
[0298.398] SetFocus (hWnd=0x202c6) returned 0x0
[0298.405] IsWindow (hWnd=0x70036) returned 1
[0298.405] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0298.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0298.406] IsWindow (hWnd=0x70036) returned 1
[0298.406] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0298.406] IsWindow (hWnd=0x202c6) returned 1
[0298.406] SetFocus (hWnd=0x202c6) returned 0x70036
[0298.406] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0298.407] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0298.409] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0298.410] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0298.411] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0298.411] GetStockObject (i=5) returned 0x900015
[0298.411] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0298.411] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8e9a98) returned 0x7
[0298.411] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0298.411] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0298.411] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0298.411] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0298.427] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0298.427] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0298.427] GetFocus () returned 0x202c6
[0298.427] GetCapture () returned 0x0
[0298.427] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.432] IsWindowUnicode (hWnd=0x202c6) returned 1
[0298.433] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.433] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.433] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.433] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.434] IsWindowUnicode (hWnd=0x202c6) returned 1
[0298.434] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.434] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.434] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.434] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0298.434] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0298.435] CreateCompatibleDC (hdc=0x60100ce) returned 0xfc010792
[0298.435] SelectObject (hdc=0xfc010792, h=0x1e0507b9) returned 0x85000f
[0298.435] GdipCreateFromHDC (hdc=0xfc010792, graphics=0x53e958) returned 0x0
[0298.436] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0298.436] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0298.436] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0298.436] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0298.436] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0298.436] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0298.436] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0298.436] LocalFree (hMem=0x89eee8) returned 0x0
[0298.436] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0298.436] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0298.436] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0298.436] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0298.437] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0298.437] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa710dbd) returned 0x0
[0298.437] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0298.437] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0298.437] GetCurrentObject (hdc=0xfc010792, type=0x1) returned 0xb00017
[0298.437] GetCurrentObject (hdc=0xfc010792, type=0x2) returned 0x900010
[0298.437] GetCurrentObject (hdc=0xfc010792, type=0x7) returned 0x1e0507b9
[0298.437] GetCurrentObject (hdc=0xfc010792, type=0x6) returned 0x8a01c2
[0298.437] SaveDC (hdc=0xfc010792) returned 1
[0298.437] GetNearestColor (hdc=0xfc010792, color=0xff) returned 0xff
[0298.438] GetNearestColor (hdc=0xfc010792, color=0x55) returned 0x55
[0298.438] GetNearestColor (hdc=0xfc010792, color=0x0) returned 0x0
[0298.438] GetNearestColor (hdc=0xfc010792, color=0x55) returned 0x55
[0298.438] GetNearestColor (hdc=0xfc010792, color=0x0) returned 0x0
[0298.438] GetNearestColor (hdc=0xfc010792, color=0x8080ff) returned 0x8080ff
[0298.438] GetNearestColor (hdc=0xfc010792, color=0x7373e5) returned 0x7373e5
[0298.438] GetNearestColor (hdc=0xfc010792, color=0xe5) returned 0xe5
[0298.438] GetNearestColor (hdc=0xfc010792, color=0x0) returned 0x0
[0298.438] RestoreDC (hdc=0xfc010792, nSavedDC=-1) returned 1
[0298.438] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfc010792) returned 0x0
[0298.439] IsAppThemed () returned 0x1
[0298.439] GetThemeAppProperties () returned 0x3
[0298.439] GetThemeAppProperties () returned 0x3
[0298.439] IsAppThemed () returned 0x1
[0298.439] GetThemeAppProperties () returned 0x3
[0298.439] GetThemeAppProperties () returned 0x3
[0298.439] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x2464474 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0298.440] IsAppThemed () returned 0x1
[0298.440] GetThemeAppProperties () returned 0x3
[0298.440] GetThemeAppProperties () returned 0x3
[0298.440] IsAppThemed () returned 0x1
[0298.440] GetThemeAppProperties () returned 0x3
[0298.440] GetThemeAppProperties () returned 0x3
[0298.440] GetFocus () returned 0x202c6
[0298.440] IsAppThemed () returned 0x1
[0298.440] GetThemeAppProperties () returned 0x3
[0298.440] GetThemeAppProperties () returned 0x3
[0298.440] IsAppThemed () returned 0x1
[0298.440] GetThemeAppProperties () returned 0x3
[0298.440] GetThemeAppProperties () returned 0x3
[0298.440] IsThemePartDefined () returned 0x1
[0298.440] IsAppThemed () returned 0x1
[0298.440] GetThemeAppProperties () returned 0x3
[0298.440] GetThemeAppProperties () returned 0x3
[0298.441] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0298.441] IsAppThemed () returned 0x1
[0298.441] GetThemeAppProperties () returned 0x3
[0298.441] GetThemeAppProperties () returned 0x3
[0298.441] IsAppThemed () returned 0x1
[0298.441] GetThemeAppProperties () returned 0x3
[0298.441] GetThemeAppProperties () returned 0x3
[0298.441] IsThemePartDefined () returned 0x1
[0298.441] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0298.441] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0298.441] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0298.441] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0298.441] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0298.441] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0298.441] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0298.441] LocalFree (hMem=0x89ea88) returned 0x0
[0298.442] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0298.442] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0298.442] LocalFree (hMem=0x89ee08) returned 0x0
[0298.442] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0298.442] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0298.442] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0298.442] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0298.442] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0298.442] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0298.442] GetCurrentObject (hdc=0xfc010792, type=0x1) returned 0xb00017
[0298.442] GetCurrentObject (hdc=0xfc010792, type=0x2) returned 0x900010
[0298.442] GetCurrentObject (hdc=0xfc010792, type=0x7) returned 0x1e0507b9
[0298.442] GetCurrentObject (hdc=0xfc010792, type=0x6) returned 0x8a01c2
[0298.442] SaveDC (hdc=0xfc010792) returned 1
[0298.443] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8d040798
[0298.443] GetClipRgn (hdc=0xfc010792, hrgn=0x8d040798) returned 0
[0298.443] SelectClipRgn (hdc=0xfc010792, hrgn=0x9b04053e) returned 2
[0298.443] DeleteObject (ho=0x8d040798) returned 1
[0298.443] DeleteObject (ho=0x9b04053e) returned 1
[0298.446] OffsetViewportOrgEx (in: hdc=0xfc010792, x=0, y=0, lppt=0x2464b24 | out: lppt=0x2464b24) returned 1
[0298.447] DrawThemeParentBackground () returned 0x0
[0298.447] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0298.447] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0298.447] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0298.447] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0298.447] GetSystemMetrics (nIndex=42) returned 0
[0298.447] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0298.447] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0298.447] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0298.447] GetCurrentObject (hdc=0xfc010792, type=0x1) returned 0xb00017
[0298.447] GetCurrentObject (hdc=0xfc010792, type=0x2) returned 0x900010
[0298.447] GetCurrentObject (hdc=0xfc010792, type=0x7) returned 0x1e0507b9
[0298.447] GetCurrentObject (hdc=0xfc010792, type=0x6) returned 0x8a01c2
[0298.448] SaveDC (hdc=0xfc010792) returned 2
[0298.448] GetNearestColor (hdc=0xfc010792, color=0xff) returned 0xff
[0298.448] CreateSolidBrush (color=0xff) returned 0x7d10078d
[0298.448] FillRect (hDC=0xfc010792, lprc=0x53e128, hbr=0x7d10078d) returned 1
[0298.448] DeleteObject (ho=0x7d10078d) returned 1
[0298.448] RestoreDC (hdc=0xfc010792, nSavedDC=-1) returned 1
[0298.448] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0298.448] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0298.448] GetSystemMetrics (nIndex=42) returned 0
[0298.448] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0298.448] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0298.448] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0298.449] GetCurrentObject (hdc=0xfc010792, type=0x1) returned 0xb00017
[0298.449] GetCurrentObject (hdc=0xfc010792, type=0x2) returned 0x900010
[0298.449] GetCurrentObject (hdc=0xfc010792, type=0x7) returned 0x1e0507b9
[0298.449] GetCurrentObject (hdc=0xfc010792, type=0x6) returned 0x8a01c2
[0298.449] SaveDC (hdc=0xfc010792) returned 2
[0298.449] GetNearestColor (hdc=0xfc010792, color=0xff) returned 0xff
[0298.449] CreateSolidBrush (color=0xff) returned 0x7e10078d
[0298.449] FillRect (hDC=0xfc010792, lprc=0x53e0c8, hbr=0x7e10078d) returned 1
[0298.449] DeleteObject (ho=0x7e10078d) returned 1
[0298.449] RestoreDC (hdc=0xfc010792, nSavedDC=-1) returned 1
[0298.449] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0298.449] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0298.449] GetSystemMetrics (nIndex=42) returned 0
[0298.449] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0298.450] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0298.450] RestoreDC (hdc=0xfc010792, nSavedDC=-1) returned 1
[0298.450] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfc010792) returned 0x0
[0298.450] IsAppThemed () returned 0x1
[0298.450] GetThemeAppProperties () returned 0x3
[0298.450] GetThemeAppProperties () returned 0x3
[0298.450] IsAppThemed () returned 0x1
[0298.450] GetThemeAppProperties () returned 0x3
[0298.450] GetThemeAppProperties () returned 0x3
[0298.450] IsThemePartDefined () returned 0x1
[0298.450] GdipCreateRegion (region=0x53e64c) returned 0x0
[0298.450] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0298.451] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0298.451] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0298.451] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0298.451] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0298.451] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0298.451] LocalFree (hMem=0x89ea88) returned 0x0
[0298.451] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0298.451] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0298.451] LocalFree (hMem=0x89ec80) returned 0x0
[0298.451] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0298.451] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0298.451] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0298.451] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0298.451] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0298.452] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0298.452] GetCurrentObject (hdc=0xfc010792, type=0x1) returned 0xb00017
[0298.452] GetCurrentObject (hdc=0xfc010792, type=0x2) returned 0x900010
[0298.452] GetCurrentObject (hdc=0xfc010792, type=0x7) returned 0x1e0507b9
[0298.452] GetCurrentObject (hdc=0xfc010792, type=0x6) returned 0x8a01c2
[0298.452] SaveDC (hdc=0xfc010792) returned 1
[0298.452] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9c04053e
[0298.452] GetClipRgn (hdc=0xfc010792, hrgn=0x9c04053e) returned 0
[0298.452] SelectClipRgn (hdc=0xfc010792, hrgn=0x8f040798) returned 2
[0298.452] DeleteObject (ho=0x9c04053e) returned 1
[0298.452] DeleteObject (ho=0x8f040798) returned 1
[0298.452] OffsetViewportOrgEx (in: hdc=0xfc010792, x=0, y=0, lppt=0x2465388 | out: lppt=0x2465388) returned 1
[0298.452] IsAppThemed () returned 0x1
[0298.453] GetThemeAppProperties () returned 0x3
[0298.453] GetThemeAppProperties () returned 0x3
[0298.453] DrawThemeBackground () returned 0x0
[0298.453] RestoreDC (hdc=0xfc010792, nSavedDC=-1) returned 1
[0298.453] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfc010792) returned 0x0
[0298.453] GdipCreateRegion (region=0x53e650) returned 0x0
[0298.453] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0298.453] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0298.453] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0298.453] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0298.453] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0298.453] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0298.453] LocalFree (hMem=0x89ee08) returned 0x0
[0298.454] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0298.454] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0298.454] LocalFree (hMem=0x89ec80) returned 0x0
[0298.454] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0298.454] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0298.454] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0298.454] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0298.454] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0298.454] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0298.454] GetCurrentObject (hdc=0xfc010792, type=0x1) returned 0xb00017
[0298.454] GetCurrentObject (hdc=0xfc010792, type=0x2) returned 0x900010
[0298.454] GetCurrentObject (hdc=0xfc010792, type=0x7) returned 0x1e0507b9
[0298.454] GetCurrentObject (hdc=0xfc010792, type=0x6) returned 0x8a01c2
[0298.454] SaveDC (hdc=0xfc010792) returned 1
[0298.455] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x90040798
[0298.455] GetClipRgn (hdc=0xfc010792, hrgn=0x90040798) returned 0
[0298.455] SelectClipRgn (hdc=0xfc010792, hrgn=0x9d04053e) returned 2
[0298.455] DeleteObject (ho=0x90040798) returned 1
[0298.455] DeleteObject (ho=0x9d04053e) returned 1
[0298.455] OffsetViewportOrgEx (in: hdc=0xfc010792, x=0, y=0, lppt=0x246565c | out: lppt=0x246565c) returned 1
[0298.455] IsAppThemed () returned 0x1
[0298.455] GetThemeAppProperties () returned 0x3
[0298.455] GetThemeAppProperties () returned 0x3
[0298.455] GetThemeBackgroundContentRect () returned 0x0
[0298.455] RestoreDC (hdc=0xfc010792, nSavedDC=-1) returned 1
[0298.455] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfc010792) returned 0x0
[0298.455] IsAppThemed () returned 0x1
[0298.455] GetThemeAppProperties () returned 0x3
[0298.456] GetThemeAppProperties () returned 0x3
[0298.456] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0298.456] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0298.456] GetCurrentObject (hdc=0xfc010792, type=0x1) returned 0xb00017
[0298.456] GetCurrentObject (hdc=0xfc010792, type=0x2) returned 0x900010
[0298.456] GetCurrentObject (hdc=0xfc010792, type=0x7) returned 0x1e0507b9
[0298.456] GetCurrentObject (hdc=0xfc010792, type=0x6) returned 0x8a01c2
[0298.456] SaveDC (hdc=0xfc010792) returned 1
[0298.456] GetTextAlign (hdc=0xfc010792) returned 0x0
[0298.456] GetTextColor (hdc=0xfc010792) returned 0x0
[0298.456] GetCurrentObject (hdc=0xfc010792, type=0x6) returned 0x8a01c2
[0298.456] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0298.457] SelectObject (hdc=0xfc010792, h=0x450a0799) returned 0x8a01c2
[0298.457] GetBkMode (hdc=0xfc010792) returned 2
[0298.457] SetBkMode (hdc=0xfc010792, mode=1) returned 2
[0298.457] DrawTextExW (in: hdc=0xfc010792, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x24659fc | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0298.457] DrawTextExW (in: hdc=0xfc010792, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x24659fc | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0298.458] RestoreDC (hdc=0xfc010792, nSavedDC=-1) returned 1
[0298.458] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfc010792) returned 0x0
[0298.458] GetFocus () returned 0x202c6
[0298.458] IsAppThemed () returned 0x1
[0298.458] GetThemeAppProperties () returned 0x3
[0298.458] GetThemeAppProperties () returned 0x3
[0298.458] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0298.458] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xfc010792, x1=0, y1=0, rop=0xcc0020) returned 1
[0298.458] GdipReleaseDC (graphics=0x5d92c30, hdc=0xfc010792) returned 0x0
[0298.458] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0298.459] SelectObject (hdc=0xfc010792, h=0x85000f) returned 0x1e0507b9
[0298.462] DeleteDC (hdc=0xfc010792) returned 1
[0298.462] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0298.462] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0298.463] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.463] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.463] WaitMessage () returned 1
[0298.467] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.467] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.467] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.467] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.467] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.468] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.468] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.468] WaitMessage () returned 1
[0298.486] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.486] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.487] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.487] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.487] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.488] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.488] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.489] WaitMessage () returned 1
[0298.496] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.496] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.496] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.497] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.497] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.498] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.498] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.498] WaitMessage () returned 1
[0298.499] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.499] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.499] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.499] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.499] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.501] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.501] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.501] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.501] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.501] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.501] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.501] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.501] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.502] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.502] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.502] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.502] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.502] WaitMessage () returned 1
[0298.503] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.503] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.503] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.503] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.503] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.504] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.505] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.505] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.505] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.505] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.505] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.505] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.505] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.505] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.505] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.505] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.506] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.506] WaitMessage () returned 1
[0298.507] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.507] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.507] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.507] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.507] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.509] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.509] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.509] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.509] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.509] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.509] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.509] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.509] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.510] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.510] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.510] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.510] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.510] WaitMessage () returned 1
[0298.511] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.511] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.511] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.511] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.511] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.513] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.513] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.513] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.513] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.514] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.514] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.514] IsWindowUnicode (hWnd=0x102dc) returned 1
[0298.514] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.514] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.514] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.514] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.515] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.515] WaitMessage () returned 1
[0298.725] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.725] IsWindowUnicode (hWnd=0x202d0) returned 1
[0298.725] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.725] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.725] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0298.726] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.726] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0298.726] TranslateMessage (lpMsg=0x53eef8) returned 0
[0298.726] DispatchMessageA (lpMsg=0x53eef8) returned 0x7e7e
[0298.726] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.726] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0298.726] WaitMessage () returned 1
[0299.494] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0299.495] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192023c) returned 0x1
[0299.496] IsWindowUnicode (hWnd=0x202c6) returned 1
[0299.496] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0299.496] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192023c) returned 0x1
[0299.496] SetCursor (hCursor=0x10003) returned 0x10003
[0299.496] TranslateMessage (lpMsg=0x53eef8) returned 0
[0299.496] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0299.496] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0299.496] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0299.496] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0299.497] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0299.497] GetKeyState (nVirtKey=1) returned 0
[0299.497] GetKeyState (nVirtKey=2) returned 0
[0299.497] GetKeyState (nVirtKey=4) returned 0
[0299.497] GetKeyState (nVirtKey=5) returned 0
[0299.497] GetKeyState (nVirtKey=6) returned 0
[0299.497] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0299.497] IsWindowUnicode (hWnd=0x202c6) returned 1
[0299.497] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0299.497] TranslateMessage (lpMsg=0x53eef8) returned 0
[0299.497] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0299.497] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0299.497] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0299.498] CreateCompatibleDC (hdc=0x60100ce) returned 0x570107bd
[0299.498] SelectObject (hdc=0x570107bd, h=0x1e0507b9) returned 0x85000f
[0299.498] GdipCreateFromHDC (hdc=0x570107bd, graphics=0x53e958) returned 0x0
[0299.498] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0299.498] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0299.499] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0299.499] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0299.499] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0299.499] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0299.499] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0299.499] LocalFree (hMem=0x89eee8) returned 0x0
[0299.499] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0299.499] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0299.499] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0299.499] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0299.499] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0299.499] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa6f0dbd) returned 0x0
[0299.499] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0299.500] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0299.500] GetCurrentObject (hdc=0x570107bd, type=0x1) returned 0xb00017
[0299.500] GetCurrentObject (hdc=0x570107bd, type=0x2) returned 0x900010
[0299.500] GetCurrentObject (hdc=0x570107bd, type=0x7) returned 0x1e0507b9
[0299.500] GetCurrentObject (hdc=0x570107bd, type=0x6) returned 0x8a01c2
[0299.500] SaveDC (hdc=0x570107bd) returned 1
[0299.500] GetNearestColor (hdc=0x570107bd, color=0xff) returned 0xff
[0299.500] GetNearestColor (hdc=0x570107bd, color=0x55) returned 0x55
[0299.500] GetNearestColor (hdc=0x570107bd, color=0x0) returned 0x0
[0299.500] GetNearestColor (hdc=0x570107bd, color=0x55) returned 0x55
[0299.500] GetNearestColor (hdc=0x570107bd, color=0x0) returned 0x0
[0299.500] GetNearestColor (hdc=0x570107bd, color=0x8080ff) returned 0x8080ff
[0299.500] GetNearestColor (hdc=0x570107bd, color=0x7373e5) returned 0x7373e5
[0299.500] GetNearestColor (hdc=0x570107bd, color=0xe5) returned 0xe5
[0299.501] GetNearestColor (hdc=0x570107bd, color=0x0) returned 0x0
[0299.501] RestoreDC (hdc=0x570107bd, nSavedDC=-1) returned 1
[0299.501] GdipReleaseDC (graphics=0x5d92c30, hdc=0x570107bd) returned 0x0
[0299.501] IsAppThemed () returned 0x1
[0299.501] GetThemeAppProperties () returned 0x3
[0299.501] GetThemeAppProperties () returned 0x3
[0299.501] IsAppThemed () returned 0x1
[0299.501] GetThemeAppProperties () returned 0x3
[0299.501] GetThemeAppProperties () returned 0x3
[0299.501] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x2466348 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0299.502] IsAppThemed () returned 0x1
[0299.502] GetThemeAppProperties () returned 0x3
[0299.502] GetThemeAppProperties () returned 0x3
[0299.502] IsAppThemed () returned 0x1
[0299.502] GetThemeAppProperties () returned 0x3
[0299.502] GetThemeAppProperties () returned 0x3
[0299.502] IsAppThemed () returned 0x1
[0299.502] GetThemeAppProperties () returned 0x3
[0299.502] GetThemeAppProperties () returned 0x3
[0299.502] IsAppThemed () returned 0x1
[0299.502] GetThemeAppProperties () returned 0x3
[0299.502] GetThemeAppProperties () returned 0x3
[0299.503] IsThemePartDefined () returned 0x1
[0299.503] IsAppThemed () returned 0x1
[0299.503] GetThemeAppProperties () returned 0x3
[0299.503] GetThemeAppProperties () returned 0x3
[0299.503] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0299.503] IsAppThemed () returned 0x1
[0299.503] GetThemeAppProperties () returned 0x3
[0299.503] GetThemeAppProperties () returned 0x3
[0299.503] IsAppThemed () returned 0x1
[0299.503] GetThemeAppProperties () returned 0x3
[0299.503] GetThemeAppProperties () returned 0x3
[0299.503] IsThemePartDefined () returned 0x1
[0299.503] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0299.503] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0299.503] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0299.503] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0299.503] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0299.503] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0299.503] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0299.503] LocalFree (hMem=0x89ea88) returned 0x0
[0299.503] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0299.503] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0299.503] LocalFree (hMem=0x89ea88) returned 0x0
[0299.504] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0299.504] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0299.504] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0299.504] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0299.504] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0299.504] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0299.504] GetCurrentObject (hdc=0x570107bd, type=0x1) returned 0xb00017
[0299.504] GetCurrentObject (hdc=0x570107bd, type=0x2) returned 0x900010
[0299.504] GetCurrentObject (hdc=0x570107bd, type=0x7) returned 0x1e0507b9
[0299.504] GetCurrentObject (hdc=0x570107bd, type=0x6) returned 0x8a01c2
[0299.504] SaveDC (hdc=0x570107bd) returned 1
[0299.504] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9e04053e
[0299.504] GetClipRgn (hdc=0x570107bd, hrgn=0x9e04053e) returned 0
[0299.504] SelectClipRgn (hdc=0x570107bd, hrgn=0x94040798) returned 2
[0299.504] DeleteObject (ho=0x9e04053e) returned 1
[0299.504] DeleteObject (ho=0x94040798) returned 1
[0299.504] OffsetViewportOrgEx (in: hdc=0x570107bd, x=0, y=0, lppt=0x24669f8 | out: lppt=0x24669f8) returned 1
[0299.504] DrawThemeParentBackground () returned 0x0
[0299.505] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0299.505] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0299.505] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0299.505] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0299.505] GetSystemMetrics (nIndex=42) returned 0
[0299.505] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0299.505] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0299.505] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0299.505] GetCurrentObject (hdc=0x570107bd, type=0x1) returned 0xb00017
[0299.505] GetCurrentObject (hdc=0x570107bd, type=0x2) returned 0x900010
[0299.505] GetCurrentObject (hdc=0x570107bd, type=0x7) returned 0x1e0507b9
[0299.505] GetCurrentObject (hdc=0x570107bd, type=0x6) returned 0x8a01c2
[0299.505] SaveDC (hdc=0x570107bd) returned 2
[0299.505] GetNearestColor (hdc=0x570107bd, color=0xff) returned 0xff
[0299.505] CreateSolidBrush (color=0xff) returned 0x7f10078d
[0299.505] FillRect (hDC=0x570107bd, lprc=0x53e120, hbr=0x7f10078d) returned 1
[0299.507] DeleteObject (ho=0x7f10078d) returned 1
[0299.507] RestoreDC (hdc=0x570107bd, nSavedDC=-1) returned 1
[0299.507] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0299.507] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0299.507] GetSystemMetrics (nIndex=42) returned 0
[0299.507] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0299.507] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0299.508] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0299.508] GetCurrentObject (hdc=0x570107bd, type=0x1) returned 0xb00017
[0299.508] GetCurrentObject (hdc=0x570107bd, type=0x2) returned 0x900010
[0299.508] GetCurrentObject (hdc=0x570107bd, type=0x7) returned 0x1e0507b9
[0299.508] GetCurrentObject (hdc=0x570107bd, type=0x6) returned 0x8a01c2
[0299.508] SaveDC (hdc=0x570107bd) returned 2
[0299.508] GetNearestColor (hdc=0x570107bd, color=0xff) returned 0xff
[0299.508] CreateSolidBrush (color=0xff) returned 0x8010078d
[0299.508] FillRect (hDC=0x570107bd, lprc=0x53e0c0, hbr=0x8010078d) returned 1
[0299.508] DeleteObject (ho=0x8010078d) returned 1
[0299.508] RestoreDC (hdc=0x570107bd, nSavedDC=-1) returned 1
[0299.508] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0299.508] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0299.508] GetSystemMetrics (nIndex=42) returned 0
[0299.508] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0299.508] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0299.509] RestoreDC (hdc=0x570107bd, nSavedDC=-1) returned 1
[0299.509] GdipReleaseDC (graphics=0x5d92c30, hdc=0x570107bd) returned 0x0
[0299.509] IsAppThemed () returned 0x1
[0299.509] GetThemeAppProperties () returned 0x3
[0299.509] GetThemeAppProperties () returned 0x3
[0299.509] IsAppThemed () returned 0x1
[0299.509] GetThemeAppProperties () returned 0x3
[0299.509] GetThemeAppProperties () returned 0x3
[0299.509] IsThemePartDefined () returned 0x1
[0299.509] GdipCreateRegion (region=0x53e640) returned 0x0
[0299.509] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0299.509] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0299.509] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0299.509] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0299.509] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0299.509] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0299.509] LocalFree (hMem=0x89ee08) returned 0x0
[0299.509] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0299.509] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0299.509] LocalFree (hMem=0x89ea88) returned 0x0
[0299.509] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0299.509] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0299.509] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0299.510] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0299.510] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0299.510] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0299.510] GetCurrentObject (hdc=0x570107bd, type=0x1) returned 0xb00017
[0299.510] GetCurrentObject (hdc=0x570107bd, type=0x2) returned 0x900010
[0299.510] GetCurrentObject (hdc=0x570107bd, type=0x7) returned 0x1e0507b9
[0299.510] GetCurrentObject (hdc=0x570107bd, type=0x6) returned 0x8a01c2
[0299.510] SaveDC (hdc=0x570107bd) returned 1
[0299.510] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x95040798
[0299.510] GetClipRgn (hdc=0x570107bd, hrgn=0x95040798) returned 0
[0299.510] SelectClipRgn (hdc=0x570107bd, hrgn=0xa004053e) returned 2
[0299.510] DeleteObject (ho=0x95040798) returned 1
[0299.510] DeleteObject (ho=0xa004053e) returned 1
[0299.510] OffsetViewportOrgEx (in: hdc=0x570107bd, x=0, y=0, lppt=0x246725c | out: lppt=0x246725c) returned 1
[0299.510] IsAppThemed () returned 0x1
[0299.510] GetThemeAppProperties () returned 0x3
[0299.510] GetThemeAppProperties () returned 0x3
[0299.510] DrawThemeBackground () returned 0x0
[0299.511] RestoreDC (hdc=0x570107bd, nSavedDC=-1) returned 1
[0299.511] GdipReleaseDC (graphics=0x5d92c30, hdc=0x570107bd) returned 0x0
[0299.511] GdipCreateRegion (region=0x53e644) returned 0x0
[0299.511] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0299.511] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0299.511] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0299.511] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0299.511] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0299.511] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0299.511] LocalFree (hMem=0x89ee08) returned 0x0
[0299.511] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0299.511] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0299.511] LocalFree (hMem=0x89ea88) returned 0x0
[0299.511] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0299.511] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0299.511] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0299.511] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0299.511] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0299.511] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0299.512] GetCurrentObject (hdc=0x570107bd, type=0x1) returned 0xb00017
[0299.512] GetCurrentObject (hdc=0x570107bd, type=0x2) returned 0x900010
[0299.512] GetCurrentObject (hdc=0x570107bd, type=0x7) returned 0x1e0507b9
[0299.512] GetCurrentObject (hdc=0x570107bd, type=0x6) returned 0x8a01c2
[0299.512] SaveDC (hdc=0x570107bd) returned 1
[0299.512] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa104053e
[0299.512] GetClipRgn (hdc=0x570107bd, hrgn=0xa104053e) returned 0
[0299.512] SelectClipRgn (hdc=0x570107bd, hrgn=0x96040798) returned 2
[0299.512] DeleteObject (ho=0xa104053e) returned 1
[0299.512] DeleteObject (ho=0x96040798) returned 1
[0299.512] OffsetViewportOrgEx (in: hdc=0x570107bd, x=0, y=0, lppt=0x2467530 | out: lppt=0x2467530) returned 1
[0299.512] IsAppThemed () returned 0x1
[0299.512] GetThemeAppProperties () returned 0x3
[0299.512] GetThemeAppProperties () returned 0x3
[0299.512] GetThemeBackgroundContentRect () returned 0x0
[0299.512] RestoreDC (hdc=0x570107bd, nSavedDC=-1) returned 1
[0299.512] GdipReleaseDC (graphics=0x5d92c30, hdc=0x570107bd) returned 0x0
[0299.512] IsAppThemed () returned 0x1
[0299.512] GetThemeAppProperties () returned 0x3
[0299.512] GetThemeAppProperties () returned 0x3
[0299.513] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0299.513] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0299.513] GetCurrentObject (hdc=0x570107bd, type=0x1) returned 0xb00017
[0299.513] GetCurrentObject (hdc=0x570107bd, type=0x2) returned 0x900010
[0299.513] GetCurrentObject (hdc=0x570107bd, type=0x7) returned 0x1e0507b9
[0299.513] GetCurrentObject (hdc=0x570107bd, type=0x6) returned 0x8a01c2
[0299.513] SaveDC (hdc=0x570107bd) returned 1
[0299.513] GetTextAlign (hdc=0x570107bd) returned 0x0
[0299.513] GetTextColor (hdc=0x570107bd) returned 0x0
[0299.513] GetCurrentObject (hdc=0x570107bd, type=0x6) returned 0x8a01c2
[0299.513] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0299.513] SelectObject (hdc=0x570107bd, h=0x450a0799) returned 0x8a01c2
[0299.513] GetBkMode (hdc=0x570107bd) returned 2
[0299.513] SetBkMode (hdc=0x570107bd, mode=1) returned 2
[0299.513] DrawTextExW (in: hdc=0x570107bd, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x24678d0 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0299.514] DrawTextExW (in: hdc=0x570107bd, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x24678d0 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0299.514] RestoreDC (hdc=0x570107bd, nSavedDC=-1) returned 1
[0299.514] GdipReleaseDC (graphics=0x5d92c30, hdc=0x570107bd) returned 0x0
[0299.514] GetFocus () returned 0x202c6
[0299.514] IsAppThemed () returned 0x1
[0299.514] GetThemeAppProperties () returned 0x3
[0299.514] GetThemeAppProperties () returned 0x3
[0299.514] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0299.514] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x570107bd, x1=0, y1=0, rop=0xcc0020) returned 1
[0299.515] GdipReleaseDC (graphics=0x5d92c30, hdc=0x570107bd) returned 0x0
[0299.515] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0299.515] SelectObject (hdc=0x570107bd, h=0x85000f) returned 0x1e0507b9
[0299.515] DeleteDC (hdc=0x570107bd) returned 1
[0299.515] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0299.515] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0299.515] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0299.515] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0299.515] WaitMessage () returned 1
[0299.600] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0299.600] IsWindowUnicode (hWnd=0x202c6) returned 1
[0299.600] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0299.600] TranslateMessage (lpMsg=0x53eef8) returned 0
[0299.600] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0299.600] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0299.600] IsWindowUnicode (hWnd=0x202c6) returned 1
[0299.600] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0299.600] TranslateMessage (lpMsg=0x53eef8) returned 0
[0299.600] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0299.600] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0xa004c) returned 0x0
[0299.600] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0299.600] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0299.600] WaitMessage () returned 1
[0299.726] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0299.726] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192023c) returned 0x1
[0299.726] IsWindowUnicode (hWnd=0x202c6) returned 1
[0299.726] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0299.726] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192023c) returned 0x1
[0299.727] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0299.727] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x12501e6) returned 0x0
[0299.727] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0299.727] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0299.727] SetCursor (hCursor=0x10003) returned 0x10003
[0299.727] TranslateMessage (lpMsg=0x53eef8) returned 0
[0299.727] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0299.727] GetKeyState (nVirtKey=1) returned -127
[0299.727] GetKeyState (nVirtKey=2) returned 0
[0299.727] GetKeyState (nVirtKey=4) returned 0
[0299.728] GetKeyState (nVirtKey=5) returned 0
[0299.728] GetKeyState (nVirtKey=6) returned 0
[0299.728] IsWindowVisible (hWnd=0x202c6) returned 1
[0299.728] IsWindowEnabled (hWnd=0x202c6) returned 1
[0299.728] SetFocus (hWnd=0x202c6) returned 0x202c6
[0299.728] GetFocus () returned 0x202c6
[0299.728] GetFocus () returned 0x202c6
[0299.728] GetFocus () returned 0x202c6
[0299.728] GetKeyState (nVirtKey=1) returned -127
[0299.728] GetKeyState (nVirtKey=2) returned 0
[0299.728] GetKeyState (nVirtKey=4) returned 0
[0299.728] GetKeyState (nVirtKey=5) returned 0
[0299.728] GetKeyState (nVirtKey=6) returned 0
[0299.728] GetCapture () returned 0x0
[0299.728] SetCapture (hWnd=0x202c6) returned 0x0
[0299.728] GetKeyState (nVirtKey=1) returned -127
[0299.728] GetKeyState (nVirtKey=2) returned 0
[0299.728] GetKeyState (nVirtKey=4) returned 0
[0299.728] GetKeyState (nVirtKey=5) returned 0
[0299.728] GetKeyState (nVirtKey=6) returned 0
[0299.729] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0299.729] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0299.729] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0299.729] IsWindowUnicode (hWnd=0x202c6) returned 1
[0299.729] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0299.729] TranslateMessage (lpMsg=0x53eef8) returned 0
[0299.729] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0299.729] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2467a54, cPoints=0x1 | out: lpPoints=0x2467a54) returned 25690608
[0299.729] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0299.729] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0299.729] UpdateWindow (hWnd=0x202c6) returned 1
[0299.729] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x60100ce
[0299.730] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0299.730] CreateCompatibleDC (hdc=0x60100ce) returned 0x580107bd
[0299.730] SelectObject (hdc=0x580107bd, h=0x1e0507b9) returned 0x85000f
[0299.730] GdipCreateFromHDC (hdc=0x580107bd, graphics=0x53e5f0) returned 0x0
[0299.730] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0299.730] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0299.730] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0299.730] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0299.730] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0299.730] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0299.731] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0299.731] LocalFree (hMem=0x89ee08) returned 0x0
[0299.731] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0299.731] GdipCreateRegion (region=0x53e638) returned 0x0
[0299.731] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0299.731] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0299.731] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0299.731] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa6d0dbd) returned 0x0
[0299.731] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0299.731] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0299.731] GetCurrentObject (hdc=0x580107bd, type=0x1) returned 0xb00017
[0299.731] GetCurrentObject (hdc=0x580107bd, type=0x2) returned 0x900010
[0299.731] GetCurrentObject (hdc=0x580107bd, type=0x7) returned 0x1e0507b9
[0299.731] GetCurrentObject (hdc=0x580107bd, type=0x6) returned 0x8a01c2
[0299.732] SaveDC (hdc=0x580107bd) returned 1
[0299.732] GetNearestColor (hdc=0x580107bd, color=0xff) returned 0xff
[0299.732] GetNearestColor (hdc=0x580107bd, color=0x55) returned 0x55
[0299.732] GetNearestColor (hdc=0x580107bd, color=0x0) returned 0x0
[0299.732] GetNearestColor (hdc=0x580107bd, color=0x55) returned 0x55
[0299.732] GetNearestColor (hdc=0x580107bd, color=0x0) returned 0x0
[0299.732] GetNearestColor (hdc=0x580107bd, color=0x8080ff) returned 0x8080ff
[0299.732] GetNearestColor (hdc=0x580107bd, color=0x7373e5) returned 0x7373e5
[0299.732] GetNearestColor (hdc=0x580107bd, color=0xe5) returned 0xe5
[0299.732] GetNearestColor (hdc=0x580107bd, color=0x0) returned 0x0
[0299.732] RestoreDC (hdc=0x580107bd, nSavedDC=-1) returned 1
[0299.733] GdipReleaseDC (graphics=0x5d92c30, hdc=0x580107bd) returned 0x0
[0299.733] IsAppThemed () returned 0x1
[0299.733] GetThemeAppProperties () returned 0x3
[0299.733] GetThemeAppProperties () returned 0x3
[0299.733] IsAppThemed () returned 0x1
[0299.733] GetThemeAppProperties () returned 0x3
[0299.733] GetThemeAppProperties () returned 0x3
[0299.733] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x2468170 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0299.733] IsAppThemed () returned 0x1
[0299.733] GetThemeAppProperties () returned 0x3
[0299.733] GetThemeAppProperties () returned 0x3
[0299.733] IsAppThemed () returned 0x1
[0299.733] GetThemeAppProperties () returned 0x3
[0299.733] GetThemeAppProperties () returned 0x3
[0299.734] IsAppThemed () returned 0x1
[0299.734] GetThemeAppProperties () returned 0x3
[0299.734] GetThemeAppProperties () returned 0x3
[0299.734] IsAppThemed () returned 0x1
[0299.734] GetThemeAppProperties () returned 0x3
[0299.734] GetThemeAppProperties () returned 0x3
[0299.734] IsThemePartDefined () returned 0x1
[0299.734] IsAppThemed () returned 0x1
[0299.734] GetThemeAppProperties () returned 0x3
[0299.734] GetThemeAppProperties () returned 0x3
[0299.734] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0299.734] IsAppThemed () returned 0x1
[0299.734] GetThemeAppProperties () returned 0x3
[0299.734] GetThemeAppProperties () returned 0x3
[0299.734] IsAppThemed () returned 0x1
[0299.734] GetThemeAppProperties () returned 0x3
[0299.734] GetThemeAppProperties () returned 0x3
[0299.734] IsThemePartDefined () returned 0x1
[0299.734] GdipCreateRegion (region=0x53e354) returned 0x0
[0299.734] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0299.735] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0299.735] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0299.735] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0299.735] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0299.735] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0299.735] LocalFree (hMem=0x89ec80) returned 0x0
[0299.735] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0299.735] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0299.735] LocalFree (hMem=0x89ea88) returned 0x0
[0299.735] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0299.735] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0299.735] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0299.735] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0299.735] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0299.735] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0299.735] GetCurrentObject (hdc=0x580107bd, type=0x1) returned 0xb00017
[0299.735] GetCurrentObject (hdc=0x580107bd, type=0x2) returned 0x900010
[0299.736] GetCurrentObject (hdc=0x580107bd, type=0x7) returned 0x1e0507b9
[0299.736] GetCurrentObject (hdc=0x580107bd, type=0x6) returned 0x8a01c2
[0299.736] SaveDC (hdc=0x580107bd) returned 1
[0299.736] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x97040798
[0299.736] GetClipRgn (hdc=0x580107bd, hrgn=0x97040798) returned 0
[0299.736] SelectClipRgn (hdc=0x580107bd, hrgn=0xa504053e) returned 2
[0299.736] DeleteObject (ho=0x97040798) returned 1
[0299.736] DeleteObject (ho=0xa504053e) returned 1
[0299.736] OffsetViewportOrgEx (in: hdc=0x580107bd, x=0, y=0, lppt=0x2468820 | out: lppt=0x2468820) returned 1
[0299.736] DrawThemeParentBackground () returned 0x0
[0299.736] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0299.736] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0299.737] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0299.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0299.737] GetSystemMetrics (nIndex=42) returned 0
[0299.737] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0299.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0299.737] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0299.737] GetCurrentObject (hdc=0x580107bd, type=0x1) returned 0xb00017
[0299.737] GetCurrentObject (hdc=0x580107bd, type=0x2) returned 0x900010
[0299.737] GetCurrentObject (hdc=0x580107bd, type=0x7) returned 0x1e0507b9
[0299.737] GetCurrentObject (hdc=0x580107bd, type=0x6) returned 0x8a01c2
[0299.737] SaveDC (hdc=0x580107bd) returned 2
[0299.737] GetNearestColor (hdc=0x580107bd, color=0xff) returned 0xff
[0299.737] CreateSolidBrush (color=0xff) returned 0x8110078d
[0299.737] FillRect (hDC=0x580107bd, lprc=0x53ddb8, hbr=0x8110078d) returned 1
[0299.737] DeleteObject (ho=0x8110078d) returned 1
[0299.738] RestoreDC (hdc=0x580107bd, nSavedDC=-1) returned 1
[0299.738] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0299.738] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0299.738] GetSystemMetrics (nIndex=42) returned 0
[0299.738] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0299.738] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0299.738] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0299.738] GetCurrentObject (hdc=0x580107bd, type=0x1) returned 0xb00017
[0299.738] GetCurrentObject (hdc=0x580107bd, type=0x2) returned 0x900010
[0299.738] GetCurrentObject (hdc=0x580107bd, type=0x7) returned 0x1e0507b9
[0299.738] GetCurrentObject (hdc=0x580107bd, type=0x6) returned 0x8a01c2
[0299.738] SaveDC (hdc=0x580107bd) returned 2
[0299.738] GetNearestColor (hdc=0x580107bd, color=0xff) returned 0xff
[0299.738] CreateSolidBrush (color=0xff) returned 0x8210078d
[0299.738] FillRect (hDC=0x580107bd, lprc=0x53dd58, hbr=0x8210078d) returned 1
[0299.739] DeleteObject (ho=0x8210078d) returned 1
[0299.739] RestoreDC (hdc=0x580107bd, nSavedDC=-1) returned 1
[0299.739] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0299.739] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0299.739] GetSystemMetrics (nIndex=42) returned 0
[0299.739] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0299.739] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0299.739] RestoreDC (hdc=0x580107bd, nSavedDC=-1) returned 1
[0299.739] GdipReleaseDC (graphics=0x5d92c30, hdc=0x580107bd) returned 0x0
[0299.739] IsAppThemed () returned 0x1
[0299.739] GetThemeAppProperties () returned 0x3
[0299.739] GetThemeAppProperties () returned 0x3
[0299.739] IsAppThemed () returned 0x1
[0299.740] GetThemeAppProperties () returned 0x3
[0299.740] GetThemeAppProperties () returned 0x3
[0299.740] IsThemePartDefined () returned 0x1
[0299.740] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0299.740] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0299.741] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0299.741] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0299.741] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0299.741] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0299.741] LocalFree (hMem=0x89ea88) returned 0x0
[0299.741] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0299.741] LocalFree (hMem=0x89ea88) returned 0x0
[0299.741] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0299.741] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0299.741] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0299.741] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0299.741] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0299.741] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0299.741] GetCurrentObject (hdc=0x580107bd, type=0x1) returned 0xb00017
[0299.741] GetCurrentObject (hdc=0x580107bd, type=0x2) returned 0x900010
[0299.741] GetCurrentObject (hdc=0x580107bd, type=0x7) returned 0x1e0507b9
[0299.742] GetCurrentObject (hdc=0x580107bd, type=0x6) returned 0x8a01c2
[0299.742] SaveDC (hdc=0x580107bd) returned 1
[0299.742] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa604053e
[0299.742] GetClipRgn (hdc=0x580107bd, hrgn=0xa604053e) returned 0
[0299.742] SelectClipRgn (hdc=0x580107bd, hrgn=0x99040798) returned 2
[0299.742] DeleteObject (ho=0xa604053e) returned 1
[0299.742] DeleteObject (ho=0x99040798) returned 1
[0299.742] OffsetViewportOrgEx (in: hdc=0x580107bd, x=0, y=0, lppt=0x2469084 | out: lppt=0x2469084) returned 1
[0299.742] IsAppThemed () returned 0x1
[0299.742] GetThemeAppProperties () returned 0x3
[0299.742] GetThemeAppProperties () returned 0x3
[0299.742] DrawThemeBackground () returned 0x0
[0299.742] RestoreDC (hdc=0x580107bd, nSavedDC=-1) returned 1
[0299.742] GdipReleaseDC (graphics=0x5d92c30, hdc=0x580107bd) returned 0x0
[0299.742] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0299.743] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0299.743] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0299.743] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0299.743] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0299.743] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0299.743] LocalFree (hMem=0x89eee8) returned 0x0
[0299.743] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0299.743] LocalFree (hMem=0x89ec80) returned 0x0
[0299.743] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0299.743] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0299.743] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0299.743] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0299.743] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0299.743] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0299.743] GetCurrentObject (hdc=0x580107bd, type=0x1) returned 0xb00017
[0299.743] GetCurrentObject (hdc=0x580107bd, type=0x2) returned 0x900010
[0299.743] GetCurrentObject (hdc=0x580107bd, type=0x7) returned 0x1e0507b9
[0299.743] GetCurrentObject (hdc=0x580107bd, type=0x6) returned 0x8a01c2
[0299.743] SaveDC (hdc=0x580107bd) returned 1
[0299.744] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9a040798
[0299.744] GetClipRgn (hdc=0x580107bd, hrgn=0x9a040798) returned 0
[0299.744] SelectClipRgn (hdc=0x580107bd, hrgn=0xa704053e) returned 2
[0299.744] DeleteObject (ho=0x9a040798) returned 1
[0299.744] DeleteObject (ho=0xa704053e) returned 1
[0299.744] OffsetViewportOrgEx (in: hdc=0x580107bd, x=0, y=0, lppt=0x2469358 | out: lppt=0x2469358) returned 1
[0299.744] IsAppThemed () returned 0x1
[0299.744] GetThemeAppProperties () returned 0x3
[0299.744] GetThemeAppProperties () returned 0x3
[0299.744] GetThemeBackgroundContentRect () returned 0x0
[0299.744] RestoreDC (hdc=0x580107bd, nSavedDC=-1) returned 1
[0299.744] GdipReleaseDC (graphics=0x5d92c30, hdc=0x580107bd) returned 0x0
[0299.744] IsAppThemed () returned 0x1
[0299.744] GetThemeAppProperties () returned 0x3
[0299.744] GetThemeAppProperties () returned 0x3
[0299.744] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0299.744] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0299.744] GetCurrentObject (hdc=0x580107bd, type=0x1) returned 0xb00017
[0299.745] GetCurrentObject (hdc=0x580107bd, type=0x2) returned 0x900010
[0299.745] GetCurrentObject (hdc=0x580107bd, type=0x7) returned 0x1e0507b9
[0299.745] GetCurrentObject (hdc=0x580107bd, type=0x6) returned 0x8a01c2
[0299.745] SaveDC (hdc=0x580107bd) returned 1
[0299.745] GetTextAlign (hdc=0x580107bd) returned 0x0
[0299.745] GetTextColor (hdc=0x580107bd) returned 0x0
[0299.745] GetCurrentObject (hdc=0x580107bd, type=0x6) returned 0x8a01c2
[0299.745] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0299.745] SelectObject (hdc=0x580107bd, h=0x450a0799) returned 0x8a01c2
[0299.745] GetBkMode (hdc=0x580107bd) returned 2
[0299.745] SetBkMode (hdc=0x580107bd, mode=1) returned 2
[0299.745] DrawTextExW (in: hdc=0x580107bd, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x24696f8 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0299.746] DrawTextExW (in: hdc=0x580107bd, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x24696f8 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0299.746] RestoreDC (hdc=0x580107bd, nSavedDC=-1) returned 1
[0299.746] GdipReleaseDC (graphics=0x5d92c30, hdc=0x580107bd) returned 0x0
[0299.746] GetFocus () returned 0x202c6
[0299.746] IsAppThemed () returned 0x1
[0299.746] GetThemeAppProperties () returned 0x3
[0299.746] GetThemeAppProperties () returned 0x3
[0299.746] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0299.746] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x580107bd, x1=0, y1=0, rop=0xcc0020) returned 1
[0299.747] GdipReleaseDC (graphics=0x5d92c30, hdc=0x580107bd) returned 0x0
[0299.747] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0299.747] SelectObject (hdc=0x580107bd, h=0x85000f) returned 0x1e0507b9
[0299.747] DeleteDC (hdc=0x580107bd) returned 1
[0299.747] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0299.747] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0299.747] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x24697f4, cPoints=0x1 | out: lpPoints=0x24697f4) returned 25690608
[0299.747] WindowFromPoint (Point=0x23c) returned 0x202c6
[0299.747] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x192023c) returned 0x1
[0299.748] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0299.748] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0299.749] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.750] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0299.752] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.752] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0299.752] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.752] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0299.752] GetDC (hWnd=0x0) returned 0x10105d6
[0299.752] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e888) returned 0x0
[0299.753] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0299.753] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0299.753] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0299.753] GetSystemMetrics (nIndex=5) returned 1
[0299.753] GetSystemMetrics (nIndex=6) returned 1
[0299.754] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.754] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0299.754] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.754] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0299.822] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.822] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0299.823] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.823] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0299.823] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.823] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0299.823] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.824] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0299.824] GetSystemMetrics (nIndex=5) returned 1
[0299.824] GetSystemMetrics (nIndex=6) returned 1
[0299.824] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.824] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0299.824] GetSystemMetrics (nIndex=5) returned 1
[0299.824] GetSystemMetrics (nIndex=6) returned 1
[0299.825] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.825] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0299.825] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.825] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0299.825] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.826] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0299.826] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.826] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0299.826] GetSystemMetrics (nIndex=59) returned 1460
[0299.826] GetSystemMetrics (nIndex=60) returned 920
[0299.826] GetSystemMetrics (nIndex=34) returned 136
[0299.826] GetSystemMetrics (nIndex=35) returned 39
[0299.826] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.827] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0299.827] GetCurrentThreadId () returned 0x11d0
[0299.827] GetCurrentThreadId () returned 0x11d0
[0299.827] GetCurrentThreadId () returned 0x11d0
[0299.827] GetCurrentThreadId () returned 0x11d0
[0299.827] GetCurrentThreadId () returned 0x11d0
[0299.827] GetCurrentThreadId () returned 0x11d0
[0299.827] GetCurrentThreadId () returned 0x11d0
[0299.827] GetCurrentThreadId () returned 0x11d0
[0299.827] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.827] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0299.827] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0299.828] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0299.828] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.828] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0299.828] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.829] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0299.829] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x40013e
[0299.830] SetWindowLongW (hWnd=0x40013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0299.830] GetWindowLongW (hWnd=0x40013e, nIndex=-4) returned 1950089536
[0299.830] SetWindowLongW (hWnd=0x40013e, nIndex=-4, dwNewLong=79651270) returned 1950089536
[0299.831] GetWindowLongW (hWnd=0x40013e, nIndex=-4) returned 79651270
[0299.831] GetWindowLongW (hWnd=0x40013e, nIndex=-16) returned 113311744
[0299.831] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40013e, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0299.832] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40013e, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0299.833] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40013e, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0299.833] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40013e, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0299.833] GetClientRect (in: hWnd=0x40013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0299.833] GetWindowRect (in: hWnd=0x40013e, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0299.834] SetWindowTextW (hWnd=0x40013e, lpString="WindowsFormsParkingWindow") returned 1
[0299.834] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40013e, Msg=0xc, wParam=0x0, lParam=0x2461788) returned 0x1
[0299.835] GetParent (hWnd=0x40013e) returned 0x0
[0299.835] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0299.835] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x40013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2001e2
[0299.835] SetWindowLongW (hWnd=0x2001e2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0299.836] GetWindowLongW (hWnd=0x2001e2, nIndex=-4) returned 1868147648
[0299.836] SetWindowLongW (hWnd=0x2001e2, nIndex=-4, dwNewLong=79651310) returned 1868147648
[0299.836] GetWindowLongW (hWnd=0x2001e2, nIndex=-4) returned 79651310
[0299.836] GetWindowLongW (hWnd=0x2001e2, nIndex=-16) returned 1174405133
[0299.836] GetWindowLongW (hWnd=0x2001e2, nIndex=-12) returned 0
[0299.836] SetWindowLongW (hWnd=0x2001e2, nIndex=-12, dwNewLong=2097634) returned 0
[0299.836] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0299.837] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0299.837] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0299.838] GetClientRect (in: hWnd=0x2001e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0299.838] GetWindowRect (in: hWnd=0x2001e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0299.838] GetParent (hWnd=0x2001e2) returned 0x40013e
[0299.838] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0299.838] SetWindowTextW (hWnd=0x2001e2, lpString="Enter password: ") returned 1
[0299.838] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0299.839] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0299.839] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0299.839] GetClientRect (in: hWnd=0x2001e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0299.839] GetWindowRect (in: hWnd=0x2001e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0299.839] GetParent (hWnd=0x2001e2) returned 0x40013e
[0299.839] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40013e, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0299.839] SendMessageW (hWnd=0x2001e2, Msg=0x2210, wParam=0x1e20001, lParam=0x2001e2) returned 0x0
[0299.840] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x2210, wParam=0x1e20001, lParam=0x2001e2) returned 0x0
[0299.840] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0299.840] GetParent (hWnd=0x2001e2) returned 0x40013e
[0299.840] GdipCreateFromHWND (hwnd=0x2001e2, graphics=0x53e994) returned 0x0
[0299.840] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0299.841] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0299.841] GetProcessWindowStation () returned 0x13c
[0299.841] GetCapture () returned 0x202c6
[0299.841] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0299.841] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0299.841] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0299.842] ReleaseCapture () returned 1
[0299.842] GetActiveWindow () returned 0x70036
[0299.842] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0299.842] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.842] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0299.842] GetCursorPos (in: lpPoint=0x24765a4 | out: lpPoint=0x24765a4*(x=572, y=402)) returned 1
[0299.842] MonitorFromPoint (pt=0x23c, dwFlags=0x192) returned 0x10001
[0299.843] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0299.843] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x5b0107bd
[0299.843] GetDeviceCaps (hdc=0x5b0107bd, index=12) returned 32
[0299.843] GetDeviceCaps (hdc=0x5b0107bd, index=14) returned 1
[0299.843] DeleteDC (hdc=0x5b0107bd) returned 1
[0299.843] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0299.844] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0299.844] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x200122
[0299.844] SetWindowLongW (hWnd=0x200122, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0299.844] GetWindowLongW (hWnd=0x200122, nIndex=-4) returned 1950089536
[0299.845] SetWindowLongW (hWnd=0x200122, nIndex=-4, dwNewLong=79649830) returned 1950089536
[0299.845] GetWindowLongW (hWnd=0x200122, nIndex=-4) returned 79649830
[0299.845] GetWindowLongW (hWnd=0x200122, nIndex=-16) returned 113770496
[0299.846] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0299.847] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0299.848] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0299.848] GetClientRect (in: hWnd=0x200122, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0299.848] GetWindowRect (in: hWnd=0x200122, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0299.848] SetWindowTextW (hWnd=0x200122, lpString="Ransomware") returned 1
[0299.848] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xc, wParam=0x0, lParam=0x24698bc) returned 0x1
[0299.850] GetStartupInfoW (in: lpStartupInfo=0x24768e0 | out: lpStartupInfo=0x24768e0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0299.852] GetParent (hWnd=0x200122) returned 0x0
[0299.852] SetWindowLongW (hWnd=0x200122, nIndex=-8, dwNewLong=0) returned 0
[0299.853] SendMessageW (hWnd=0x200122, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0299.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0299.853] SendMessageW (hWnd=0x200122, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0299.853] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0299.853] GetSystemMenu (hWnd=0x200122, bRevert=0) returned 0x660063
[0299.854] GetWindowPlacement (in: hWnd=0x200122, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0299.854] EnableMenuItem (hMenu=0x660063, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0299.854] EnableMenuItem (hMenu=0x660063, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0299.854] EnableMenuItem (hMenu=0x660063, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0299.854] EnableMenuItem (hMenu=0x660063, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0299.854] EnableMenuItem (hMenu=0x660063, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0299.854] GetClientRect (in: hWnd=0x200122, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0299.855] GetClientRect (in: hWnd=0x200122, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0299.855] GetWindowRect (in: hWnd=0x200122, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0299.855] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.855] GetWindowLongW (hWnd=0x200122, nIndex=-16) returned 113770496
[0299.855] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0299.855] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0299.855] GetSystemMetrics (nIndex=42) returned 0
[0299.855] GetWindowTextW (in: hWnd=0x200122, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0299.855] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0299.856] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0299.856] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0299.856] GetSystemMetrics (nIndex=42) returned 0
[0299.856] GetWindowTextW (in: hWnd=0x200122, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0299.856] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0299.856] GetCursorPos (in: lpPoint=0x2476a54 | out: lpPoint=0x2476a54*(x=572, y=402)) returned 1
[0299.856] MonitorFromPoint (pt=0x239, dwFlags=0x190) returned 0x10001
[0299.856] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0299.856] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x5f0107bd
[0299.856] GetDeviceCaps (hdc=0x5f0107bd, index=12) returned 32
[0299.856] GetDeviceCaps (hdc=0x5f0107bd, index=14) returned 1
[0299.856] DeleteDC (hdc=0x5f0107bd) returned 1
[0299.857] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0299.857] GetWindowLongW (hWnd=0x200122, nIndex=-16) returned 113770496
[0299.857] GetWindowLongW (hWnd=0x200122, nIndex=-20) returned 327937
[0299.857] SetWindowLongW (hWnd=0x200122, nIndex=-16, dwNewLong=46661632) returned 113770496
[0299.857] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0299.857] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0299.858] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0299.858] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0299.858] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0299.859] SetWindowLongW (hWnd=0x200122, nIndex=-20, dwNewLong=327681) returned 327937
[0299.859] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0299.859] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0299.859] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0299.860] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0299.860] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0299.860] SetWindowPos (hWnd=0x200122, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0299.860] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0299.860] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0299.861] GetWindowPlacement (in: hWnd=0x200122, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0299.861] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0299.861] GetClientRect (in: hWnd=0x200122, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0299.861] GetWindowRect (in: hWnd=0x200122, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0299.862] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0299.862] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0299.862] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0299.862] RedrawWindow (hWnd=0x200122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0299.862] GetSystemMenu (hWnd=0x200122, bRevert=0) returned 0x660063
[0299.862] GetWindowPlacement (in: hWnd=0x200122, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0299.862] EnableMenuItem (hMenu=0x660063, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0299.862] EnableMenuItem (hMenu=0x660063, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0299.862] EnableMenuItem (hMenu=0x660063, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0299.863] EnableMenuItem (hMenu=0x660063, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0299.863] EnableMenuItem (hMenu=0x660063, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0299.863] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0299.863] GetWindowLongW (hWnd=0x200122, nIndex=-8) returned 0
[0299.863] SetWindowLongW (hWnd=0x200122, nIndex=-8, dwNewLong=458806) returned 0
[0299.864] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0299.864] GetProcessWindowStation () returned 0x13c
[0299.864] GetCurrentThreadId () returned 0x11d0
[0299.865] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf5e2e, lParam=0x0) returned 1
[0299.865] IsWindowVisible (hWnd=0x200122) returned 0
[0299.865] IsWindowVisible (hWnd=0x70036) returned 1
[0299.865] IsWindowEnabled (hWnd=0x70036) returned 1
[0299.865] IsWindowVisible (hWnd=0x602b6) returned 0
[0299.865] IsWindowVisible (hWnd=0x901f8) returned 0
[0299.865] IsWindowVisible (hWnd=0x202d0) returned 0
[0299.865] IsWindowVisible (hWnd=0x202d4) returned 0
[0299.865] GetActiveWindow () returned 0x70036
[0299.865] GetFocus () returned 0x202c6
[0299.866] IsWindow (hWnd=0x70036) returned 1
[0299.866] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0299.866] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0299.866] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0299.866] GetWindowLongW (hWnd=0x200122, nIndex=-8) returned 458806
[0299.867] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0299.867] GetCurrentThreadId () returned 0x11d0
[0299.867] GetWindowLongW (hWnd=0x200122, nIndex=-8) returned 458806
[0299.867] IsWindowEnabled (hWnd=0x70036) returned 0
[0299.867] IsWindowEnabled (hWnd=0x200122) returned 1
[0299.867] ShowWindow (hWnd=0x200122, nCmdShow=5) returned 0
[0299.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0299.876] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0299.876] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.877] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0299.877] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x200122, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1c004e
[0299.879] SetWindowLongW (hWnd=0x1c004e, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0299.880] GetWindowLongW (hWnd=0x1c004e, nIndex=-4) returned 1868026976
[0299.880] SetWindowLongW (hWnd=0x1c004e, nIndex=-4, dwNewLong=79649950) returned 1868026976
[0299.880] GetWindowLongW (hWnd=0x1c004e, nIndex=-4) returned 79649950
[0299.880] GetWindowLongW (hWnd=0x1c004e, nIndex=-16) returned 1174470848
[0299.880] GetWindowLongW (hWnd=0x1c004e, nIndex=-12) returned 0
[0299.880] SetWindowLongW (hWnd=0x1c004e, nIndex=-12, dwNewLong=1835086) returned 0
[0299.880] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0299.885] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0299.886] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0299.888] SendMessageW (hWnd=0x1c004e, Msg=0x2055, wParam=0x1c004e, lParam=0x3) returned 0x2
[0299.888] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0299.888] GetWindow (hWnd=0x1c004e, uCmd=0x3) returned 0x0
[0299.888] GetClientRect (in: hWnd=0x1c004e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0299.888] GetWindowRect (in: hWnd=0x1c004e, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0299.888] GetParent (hWnd=0x1c004e) returned 0x200122
[0299.888] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x200122, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0299.888] SendMessageW (hWnd=0x1c004e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0299.888] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0299.889] SendMessageW (hWnd=0x1c004e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0299.889] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0299.889] GetSystemMetrics (nIndex=5) returned 1
[0299.889] GetSystemMetrics (nIndex=6) returned 1
[0299.889] SendMessageW (hWnd=0x1c004e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0299.889] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0299.889] SendMessageW (hWnd=0x1c004e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0299.889] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0299.890] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0299.891] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0299.891] GetClientRect (in: hWnd=0x1c004e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0299.891] GetWindowRect (in: hWnd=0x1c004e, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0299.891] GetParent (hWnd=0x1c004e) returned 0x200122
[0299.892] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x200122, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0299.892] SendMessageW (hWnd=0x1c004e, Msg=0x2210, wParam=0x4e0001, lParam=0x1c004e) returned 0x0
[0299.892] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x2210, wParam=0x4e0001, lParam=0x1c004e) returned 0x0
[0299.892] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0299.893] GetParent (hWnd=0x1c004e) returned 0x200122
[0299.893] GetParent (hWnd=0x2001e2) returned 0x40013e
[0299.893] SetParent (hWndChild=0x2001e2, hWndNewParent=0x200122) returned 0x40013e
[0299.893] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0299.894] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0299.894] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0299.894] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0299.894] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0299.895] GetClientRect (in: hWnd=0x2001e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0299.895] GetWindowRect (in: hWnd=0x2001e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0299.895] GetParent (hWnd=0x2001e2) returned 0x200122
[0299.895] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x200122, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0299.895] GetClientRect (in: hWnd=0x2001e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0299.895] GetWindowRect (in: hWnd=0x2001e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0299.895] GetParent (hWnd=0x2001e2) returned 0x200122
[0299.895] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x200122, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0299.895] GetParent (hWnd=0x2001e2) returned 0x200122
[0299.895] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0299.895] GetWindow (hWnd=0x2001e2, uCmd=0x3) returned 0x0
[0299.895] SetWindowPos (hWnd=0x2001e2, hWndInsertAfter=0x1c004e, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0299.895] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0299.896] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0299.896] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0299.896] GetClientRect (in: hWnd=0x2001e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0299.897] GetWindowRect (in: hWnd=0x2001e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0299.897] GetParent (hWnd=0x2001e2) returned 0x200122
[0299.897] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x200122, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0299.897] GetParent (hWnd=0x2001e2) returned 0x200122
[0299.897] GetWindow (hWnd=0x2001e2, uCmd=0x3) returned 0x1c004e
[0299.897] GetWindowThreadProcessId (in: hWnd=0x2001e2, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0299.897] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0299.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.898] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0299.898] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x200122, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0xe02b8
[0299.898] SetWindowLongW (hWnd=0xe02b8, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0299.898] GetWindowLongW (hWnd=0xe02b8, nIndex=-4) returned 1868032000
[0299.899] SetWindowLongW (hWnd=0xe02b8, nIndex=-4, dwNewLong=79650910) returned 1868032000
[0299.899] GetWindowLongW (hWnd=0xe02b8, nIndex=-4) returned 79650910
[0299.899] GetWindowLongW (hWnd=0xe02b8, nIndex=-16) returned 1174470667
[0299.899] GetWindowLongW (hWnd=0xe02b8, nIndex=-12) returned 0
[0299.899] SetWindowLongW (hWnd=0xe02b8, nIndex=-12, dwNewLong=918200) returned 0
[0299.899] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0299.900] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0299.900] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0299.901] SendMessageW (hWnd=0xe02b8, Msg=0x2055, wParam=0xe02b8, lParam=0x3) returned 0x2
[0299.901] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0299.901] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0299.901] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0299.901] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0299.901] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0299.901] RedrawWindow (hWnd=0x1c004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0299.902] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0299.902] RedrawWindow (hWnd=0x2001e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0299.902] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0299.902] RedrawWindow (hWnd=0xe02b8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0299.902] RedrawWindow (hWnd=0x200122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0299.902] GetWindow (hWnd=0xe02b8, uCmd=0x3) returned 0x2001e2
[0299.902] GetClientRect (in: hWnd=0xe02b8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0299.902] GetWindowRect (in: hWnd=0xe02b8, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0299.902] GetParent (hWnd=0xe02b8) returned 0x200122
[0299.902] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x200122, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0299.903] SetWindowTextW (hWnd=0xe02b8, lpString="OK") returned 1
[0299.903] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0xc, wParam=0x0, lParam=0x246dd7c) returned 0x1
[0299.903] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0299.904] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0299.904] GetClientRect (in: hWnd=0xe02b8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0299.904] GetWindowRect (in: hWnd=0xe02b8, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0299.904] GetParent (hWnd=0xe02b8) returned 0x200122
[0299.904] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x200122, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0299.904] SendMessageW (hWnd=0xe02b8, Msg=0x2210, wParam=0x2b80001, lParam=0xe02b8) returned 0x0
[0299.904] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x2210, wParam=0x2b80001, lParam=0xe02b8) returned 0x0
[0299.904] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0299.904] GetParent (hWnd=0xe02b8) returned 0x200122
[0299.904] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0299.905] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0299.905] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0299.905] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x200122, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2500ea
[0299.906] SetWindowLongW (hWnd=0x2500ea, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0299.906] GetWindowLongW (hWnd=0x2500ea, nIndex=-4) returned 1868032000
[0299.906] SetWindowLongW (hWnd=0x2500ea, nIndex=-4, dwNewLong=79650750) returned 1868032000
[0299.907] GetWindowLongW (hWnd=0x2500ea, nIndex=-4) returned 79650750
[0299.907] GetWindowLongW (hWnd=0x2500ea, nIndex=-16) returned 1174470667
[0299.907] GetWindowLongW (hWnd=0x2500ea, nIndex=-12) returned 0
[0299.907] SetWindowLongW (hWnd=0x2500ea, nIndex=-12, dwNewLong=2425066) returned 0
[0299.907] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2500ea, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0299.908] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2500ea, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0299.908] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2500ea, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0299.909] SendMessageW (hWnd=0x2500ea, Msg=0x2055, wParam=0x2500ea, lParam=0x3) returned 0x2
[0299.909] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0299.909] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2500ea, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0299.909] GetWindow (hWnd=0x2500ea, uCmd=0x3) returned 0xe02b8
[0299.909] GetClientRect (in: hWnd=0x2500ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0299.909] GetWindowRect (in: hWnd=0x2500ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0299.909] GetParent (hWnd=0x2500ea) returned 0x200122
[0299.909] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x200122, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0299.909] SetWindowTextW (hWnd=0x2500ea, lpString="Cancel") returned 1
[0299.910] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2500ea, Msg=0xc, wParam=0x0, lParam=0x247163c) returned 0x1
[0299.910] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2500ea, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0299.910] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2500ea, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0299.910] GetClientRect (in: hWnd=0x2500ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0299.910] GetWindowRect (in: hWnd=0x2500ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0299.910] GetParent (hWnd=0x2500ea) returned 0x200122
[0299.910] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x200122, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0299.911] SendMessageW (hWnd=0x2500ea, Msg=0x2210, wParam=0xea0001, lParam=0x2500ea) returned 0x0
[0299.911] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2500ea, Msg=0x2210, wParam=0xea0001, lParam=0x2500ea) returned 0x0
[0299.911] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2500ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0299.911] GetParent (hWnd=0x2500ea) returned 0x200122
[0299.911] GetDC (hWnd=0x0) returned 0xf0105ee
[0299.911] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x53e320) returned 0x0
[0299.912] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0299.912] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0299.912] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
[0299.913] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0299.913] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0299.913] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0299.913] GetWindowLongW (hWnd=0x200122, nIndex=-8) returned 458806
[0299.913] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0299.913] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0299.913] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x660107bd
[0299.914] GetDeviceCaps (hdc=0x660107bd, index=12) returned 32
[0299.914] GetDeviceCaps (hdc=0x660107bd, index=14) returned 1
[0299.914] DeleteDC (hdc=0x660107bd) returned 1
[0299.914] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0299.914] GetWindowThreadProcessId (in: hWnd=0x200122, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0299.914] GetCurrentThreadId () returned 0x11d0
[0299.914] PostMessageW (hWnd=0x200122, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0299.914] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0299.914] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0299.914] GetSystemMetrics (nIndex=42) returned 0
[0299.915] GetWindowTextW (in: hWnd=0x200122, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0299.915] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0299.915] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0299.915] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0299.915] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0299.915] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0299.988] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x200122) returned 0x1
[0299.992] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0299.992] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0299.992] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0299.992] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0299.995] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0299.998] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0299.998] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0299.999] GetFocus () returned 0x202c6
[0299.999] IsChild (hWndParent=0x200122, hWnd=0x202c6) returned 0
[0299.999] GetFocus () returned 0x202c6
[0300.000] SetFocus (hWnd=0x1c004e) returned 0x202c6
[0300.002] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x1c004e, lParam=0x0) returned 0x0
[0300.002] GetCapture () returned 0x0
[0300.002] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0300.003] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0300.005] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0300.029] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0300.029] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0300.030] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0300.030] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0300.030] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0300.030] GetParent (hWnd=0x200122) returned 0x0
[0300.030] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0300.031] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0300.031] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0300.032] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0300.032] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0300.032] GetSysColorBrush (nIndex=5) returned 0x100079
[0300.033] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0300.033] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0300.035] SendMessageW (hWnd=0x1c004e, Msg=0x2111, wParam=0x100004e, lParam=0x1c004e) returned 0x0
[0300.035] SendMessageW (hWnd=0x1c004e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0300.035] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0300.035] GetKeyState (nVirtKey=1) returned 1
[0300.035] GetKeyState (nVirtKey=2) returned 0
[0300.035] GetKeyState (nVirtKey=4) returned 0
[0300.035] GetKeyState (nVirtKey=5) returned 0
[0300.035] GetKeyState (nVirtKey=6) returned 0
[0300.035] GetWindowTextLengthW (hWnd=0x1c004e) returned 0
[0300.035] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0300.035] SendMessageW (hWnd=0x1c004e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0300.035] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0300.036] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0300.036] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0300.042] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0300.044] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0300.044] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0300.044] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0300.045] GetWindowPlacement (in: hWnd=0x200122, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0300.045] GetClientRect (in: hWnd=0x200122, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0300.045] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.045] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.045] GetSystemMetrics (nIndex=42) returned 0
[0300.045] GetWindowTextW (in: hWnd=0x200122, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.045] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0300.045] GetClientRect (in: hWnd=0x200122, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0300.045] GetCurrentObject (hdc=0x8b010786, type=0x1) returned 0xb00017
[0300.045] GetCurrentObject (hdc=0x8b010786, type=0x2) returned 0x900010
[0300.045] GetCurrentObject (hdc=0x8b010786, type=0x7) returned 0x2c0507b0
[0300.045] GetCurrentObject (hdc=0x8b010786, type=0x6) returned 0x8a01c2
[0300.045] SaveDC (hdc=0x8b010786) returned 1
[0300.045] GetNearestColor (hdc=0x8b010786, color=0xf0f0f0) returned 0xf0f0f0
[0300.045] CreateSolidBrush (color=0xf0f0f0) returned 0x8310078d
[0300.046] FillRect (hDC=0x8b010786, lprc=0x53e250, hbr=0x8310078d) returned 1
[0300.046] DeleteObject (ho=0x8310078d) returned 1
[0300.046] RestoreDC (hdc=0x8b010786, nSavedDC=-1) returned 1
[0300.046] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0300.046] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0300.046] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0300.047] GetWindowPlacement (in: hWnd=0x200122, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0300.047] GetClientRect (in: hWnd=0x200122, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0300.047] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.047] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.047] GetSystemMetrics (nIndex=42) returned 0
[0300.047] GetWindowTextW (in: hWnd=0x200122, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.047] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0300.048] GetClientRect (in: hWnd=0x200122, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0300.048] GetCurrentObject (hdc=0x19010785, type=0x1) returned 0xb00017
[0300.048] GetCurrentObject (hdc=0x19010785, type=0x2) returned 0x900010
[0300.048] GetCurrentObject (hdc=0x19010785, type=0x7) returned 0xffffffffc4050794
[0300.048] GetCurrentObject (hdc=0x19010785, type=0x6) returned 0x8a01c2
[0300.048] SaveDC (hdc=0x19010785) returned 1
[0300.048] GetNearestColor (hdc=0x19010785, color=0xf0f0f0) returned 0xf0f0f0
[0300.048] CreateSolidBrush (color=0xf0f0f0) returned 0x8410078d
[0300.048] FillRect (hDC=0x19010785, lprc=0x53dc18, hbr=0x8410078d) returned 1
[0300.048] DeleteObject (ho=0x8410078d) returned 1
[0300.048] RestoreDC (hdc=0x19010785, nSavedDC=-1) returned 1
[0300.048] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.048] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.048] GetSystemMetrics (nIndex=42) returned 0
[0300.049] GetWindowTextW (in: hWnd=0x200122, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.049] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0300.049] GetClientRect (in: hWnd=0x200122, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0300.049] GetCurrentObject (hdc=0x19010785, type=0x1) returned 0xb00017
[0300.049] GetCurrentObject (hdc=0x19010785, type=0x2) returned 0x900010
[0300.049] GetCurrentObject (hdc=0x19010785, type=0x7) returned 0xffffffffc4050794
[0300.049] GetCurrentObject (hdc=0x19010785, type=0x6) returned 0x8a01c2
[0300.049] SaveDC (hdc=0x19010785) returned 1
[0300.049] GetNearestColor (hdc=0x19010785, color=0xf0f0f0) returned 0xf0f0f0
[0300.049] CreateSolidBrush (color=0xf0f0f0) returned 0x8510078d
[0300.049] FillRect (hDC=0x19010785, lprc=0x53dbb8, hbr=0x8510078d) returned 1
[0300.049] DeleteObject (ho=0x8510078d) returned 1
[0300.049] RestoreDC (hdc=0x19010785, nSavedDC=-1) returned 1
[0300.049] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.049] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.049] GetSystemMetrics (nIndex=42) returned 0
[0300.050] GetWindowTextW (in: hWnd=0x200122, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.050] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0300.050] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0300.051] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0300.051] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0300.051] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0300.051] GetStockObject (i=5) returned 0x900015
[0300.051] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2500ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0300.052] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2500ea, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0300.052] GetStockObject (i=5) returned 0x900015
[0300.052] GetWindowPlacement (in: hWnd=0x200122, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0300.052] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0300.052] GetClientRect (in: hWnd=0x200122, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0300.052] GetWindowRect (in: hWnd=0x200122, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0300.067] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0300.067] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0300.067] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0300.067] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0300.068] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0300.068] GetClientRect (in: hWnd=0x200122, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0300.068] GetWindowRect (in: hWnd=0x200122, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0300.072] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.072] IsWindowUnicode (hWnd=0x200122) returned 1
[0300.072] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.073] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.073] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.073] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0300.073] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.073] IsWindowUnicode (hWnd=0x200122) returned 1
[0300.073] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.073] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.073] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.073] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.074] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x84, wParam=0x0, lParam=0x18e0368) returned 0x1
[0300.074] IsWindowUnicode (hWnd=0xe02b8) returned 1
[0300.074] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.074] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.074] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.074] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.074] IsWindowUnicode (hWnd=0x202c6) returned 1
[0300.074] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.075] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.075] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.075] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0300.075] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0300.075] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.075] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x84, wParam=0x0, lParam=0x18e0368) returned 0x1
[0300.075] IsWindowUnicode (hWnd=0xe02b8) returned 1
[0300.075] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.075] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x84, wParam=0x0, lParam=0x18e0368) returned 0x1
[0300.075] SetCursor (hCursor=0x10003) returned 0x10003
[0300.076] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.076] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.076] _TrackMouseEvent (in: lpEventTrack=0x2477fd0 | out: lpEventTrack=0x2477fd0) returned 1
[0300.076] SendMessageW (hWnd=0xe02b8, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0300.076] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0300.076] InvalidateRect (hWnd=0xe02b8, lpRect=0x0, bErase=0) returned 1
[0300.076] GetKeyState (nVirtKey=1) returned 1
[0300.076] GetKeyState (nVirtKey=2) returned 0
[0300.076] GetKeyState (nVirtKey=4) returned 0
[0300.076] GetKeyState (nVirtKey=5) returned 0
[0300.076] GetKeyState (nVirtKey=6) returned 0
[0300.076] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.077] IsWindowUnicode (hWnd=0x200122) returned 1
[0300.077] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.077] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.077] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.077] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.078] IsWindowUnicode (hWnd=0x200122) returned 1
[0300.078] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.078] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.078] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.078] BeginPaint (in: hWnd=0x200122, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x10105d6
[0300.078] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0300.079] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.079] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.079] GetSystemMetrics (nIndex=42) returned 0
[0300.079] GetWindowTextW (in: hWnd=0x200122, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.079] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0300.079] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0300.079] EndPaint (hWnd=0x200122, lpPaint=0x53e30c) returned 1
[0300.079] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.079] IsWindowUnicode (hWnd=0x1c004e) returned 1
[0300.079] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.080] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.080] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0300.080] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0300.080] SetTextColor (hdc=0x1a010785, color=0x0) returned 0x0
[0300.080] SetBkColor (hdc=0x1a010785, color=0xffffff) returned 0xffffff
[0300.081] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.081] IsWindowUnicode (hWnd=0x2001e2) returned 1
[0300.081] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.082] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.082] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.082] BeginPaint (in: hWnd=0x2001e2, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x60100ce
[0300.082] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0300.082] CreateCompatibleDC (hdc=0x60100ce) returned 0x5101078c
[0300.082] SelectObject (hdc=0x5101078c, h=0x1e0507b9) returned 0x85000f
[0300.082] GdipCreateFromHDC (hdc=0x5101078c, graphics=0x53e30c) returned 0x0
[0300.082] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0300.082] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0300.083] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0300.083] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.083] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0300.083] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eac0
[0300.083] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eac0) returned 0x0
[0300.083] LocalFree (hMem=0x89eac0) returned 0x0
[0300.083] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.083] GdipCreateRegion (region=0x53e354) returned 0x0
[0300.083] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.083] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0300.083] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0300.083] GetWindowTextLengthW (hWnd=0x2001e2) returned 16
[0300.083] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0300.084] GetSystemMetrics (nIndex=42) returned 0
[0300.120] GetWindowTextW (in: hWnd=0x2001e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0300.120] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0300.120] GetClientRect (in: hWnd=0x2001e2, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0300.120] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0300.120] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0300.120] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0300.120] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.120] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0300.120] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.120] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0300.121] LocalFree (hMem=0x89ee08) returned 0x0
[0300.121] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0300.121] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.121] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0300.121] LocalFree (hMem=0x89ee08) returned 0x0
[0300.121] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.121] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0300.121] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0300.121] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0300.121] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0300.121] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0300.121] GetCurrentObject (hdc=0x5101078c, type=0x1) returned 0xb00017
[0300.121] GetCurrentObject (hdc=0x5101078c, type=0x2) returned 0x900010
[0300.121] GetCurrentObject (hdc=0x5101078c, type=0x7) returned 0x1e0507b9
[0300.122] GetCurrentObject (hdc=0x5101078c, type=0x6) returned 0x8a01c2
[0300.122] SaveDC (hdc=0x5101078c) returned 1
[0300.122] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaa04053e
[0300.122] GetClipRgn (hdc=0x5101078c, hrgn=0xaa04053e) returned 0
[0300.122] SelectClipRgn (hdc=0x5101078c, hrgn=0xa0040798) returned 2
[0300.122] DeleteObject (ho=0xaa04053e) returned 1
[0300.122] DeleteObject (ho=0xa0040798) returned 1
[0300.122] OffsetViewportOrgEx (in: hdc=0x5101078c, x=0, y=0, lppt=0x24784d8 | out: lppt=0x24784d8) returned 1
[0300.122] GetNearestColor (hdc=0x5101078c, color=0xf0f0f0) returned 0xf0f0f0
[0300.122] CreateSolidBrush (color=0xf0f0f0) returned 0x8610078d
[0300.122] FillRect (hDC=0x5101078c, lprc=0x53e1f4, hbr=0x8610078d) returned 1
[0300.122] DeleteObject (ho=0x8610078d) returned 1
[0300.122] RestoreDC (hdc=0x5101078c, nSavedDC=-1) returned 1
[0300.123] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5101078c) returned 0x0
[0300.123] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa670dbd) returned 0x0
[0300.123] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.123] GetWindowTextLengthW (hWnd=0x2001e2) returned 16
[0300.123] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0300.123] GetSystemMetrics (nIndex=42) returned 0
[0300.123] GetWindowTextW (in: hWnd=0x2001e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0300.123] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0300.123] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0300.123] GetCurrentObject (hdc=0x5101078c, type=0x1) returned 0xb00017
[0300.123] GetCurrentObject (hdc=0x5101078c, type=0x2) returned 0x900010
[0300.123] GetCurrentObject (hdc=0x5101078c, type=0x7) returned 0x1e0507b9
[0300.123] GetCurrentObject (hdc=0x5101078c, type=0x6) returned 0x8a01c2
[0300.123] SaveDC (hdc=0x5101078c) returned 1
[0300.124] GetNearestColor (hdc=0x5101078c, color=0x0) returned 0x0
[0300.124] RestoreDC (hdc=0x5101078c, nSavedDC=-1) returned 1
[0300.124] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5101078c) returned 0x0
[0300.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0300.124] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0300.125] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0300.125] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x24787e0 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0300.125] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0300.125] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0300.125] GetCurrentObject (hdc=0x5101078c, type=0x1) returned 0xb00017
[0300.125] GetCurrentObject (hdc=0x5101078c, type=0x2) returned 0x900010
[0300.125] GetCurrentObject (hdc=0x5101078c, type=0x7) returned 0x1e0507b9
[0300.125] GetCurrentObject (hdc=0x5101078c, type=0x6) returned 0x8a01c2
[0300.125] SaveDC (hdc=0x5101078c) returned 1
[0300.126] GetTextAlign (hdc=0x5101078c) returned 0x0
[0300.126] GetTextColor (hdc=0x5101078c) returned 0x0
[0300.126] GetCurrentObject (hdc=0x5101078c, type=0x6) returned 0x8a01c2
[0300.126] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0300.126] SelectObject (hdc=0x5101078c, h=0x730a066d) returned 0x8a01c2
[0300.126] GetBkMode (hdc=0x5101078c) returned 2
[0300.126] SetBkMode (hdc=0x5101078c, mode=1) returned 2
[0300.126] DrawTextExW (in: hdc=0x5101078c, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x2478a04 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0300.127] RestoreDC (hdc=0x5101078c, nSavedDC=-1) returned 1
[0300.127] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5101078c) returned 0x0
[0300.127] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0300.127] BitBlt (hdc=0x60100ce, x=0, y=0, cx=250, cy=70, hdcSrc=0x5101078c, x1=0, y1=0, rop=0xcc0020) returned 1
[0300.127] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5101078c) returned 0x0
[0300.127] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0300.127] SelectObject (hdc=0x5101078c, h=0x85000f) returned 0x1e0507b9
[0300.127] DeleteDC (hdc=0x5101078c) returned 1
[0300.127] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0300.128] EndPaint (hWnd=0x2001e2, lpPaint=0x53e2f0) returned 1
[0300.128] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.128] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.128] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.128] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.128] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.129] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.129] IsWindowUnicode (hWnd=0xe02b8) returned 1
[0300.129] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.129] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.129] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.129] BeginPaint (in: hWnd=0xe02b8, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0300.130] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0300.130] CreateCompatibleDC (hdc=0xf0105ee) returned 0x5301078c
[0300.130] SelectObject (hdc=0x5301078c, h=0x1e0507b9) returned 0x85000f
[0300.130] GdipCreateFromHDC (hdc=0x5301078c, graphics=0x53e300) returned 0x0
[0300.130] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0300.130] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0300.130] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0300.130] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.130] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0300.130] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.130] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0300.149] LocalFree (hMem=0x89ee08) returned 0x0
[0300.149] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.149] GdipCreateRegion (region=0x53e348) returned 0x0
[0300.149] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.149] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0300.149] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0300.149] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa650dbd) returned 0x0
[0300.149] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.149] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0300.149] GetCurrentObject (hdc=0x5301078c, type=0x1) returned 0xb00017
[0300.149] GetCurrentObject (hdc=0x5301078c, type=0x2) returned 0x900010
[0300.149] GetCurrentObject (hdc=0x5301078c, type=0x7) returned 0x1e0507b9
[0300.149] GetCurrentObject (hdc=0x5301078c, type=0x6) returned 0x8a01c2
[0300.149] SaveDC (hdc=0x5301078c) returned 1
[0300.150] GetNearestColor (hdc=0x5301078c, color=0xf0f0f0) returned 0xf0f0f0
[0300.150] GetNearestColor (hdc=0x5301078c, color=0xa0a0a0) returned 0xa0a0a0
[0300.150] GetNearestColor (hdc=0x5301078c, color=0x696969) returned 0x696969
[0300.150] GetNearestColor (hdc=0x5301078c, color=0xa0a0a0) returned 0xa0a0a0
[0300.150] GetNearestColor (hdc=0x5301078c, color=0x0) returned 0x0
[0300.150] GetNearestColor (hdc=0x5301078c, color=0xffffff) returned 0xffffff
[0300.150] GetNearestColor (hdc=0x5301078c, color=0xe5e5e5) returned 0xe5e5e5
[0300.150] GetNearestColor (hdc=0x5301078c, color=0xd7d7d7) returned 0xd7d7d7
[0300.150] GetNearestColor (hdc=0x5301078c, color=0x0) returned 0x0
[0300.150] RestoreDC (hdc=0x5301078c, nSavedDC=-1) returned 1
[0300.150] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5301078c) returned 0x0
[0300.150] IsAppThemed () returned 0x1
[0300.151] GetThemeAppProperties () returned 0x3
[0300.151] GetThemeAppProperties () returned 0x3
[0300.151] IsAppThemed () returned 0x1
[0300.151] GetThemeAppProperties () returned 0x3
[0300.151] GetThemeAppProperties () returned 0x3
[0300.151] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x2479170 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0300.151] IsAppThemed () returned 0x1
[0300.151] GetThemeAppProperties () returned 0x3
[0300.151] GetThemeAppProperties () returned 0x3
[0300.151] IsAppThemed () returned 0x1
[0300.151] GetThemeAppProperties () returned 0x3
[0300.151] GetThemeAppProperties () returned 0x3
[0300.151] IsAppThemed () returned 0x1
[0300.152] GetThemeAppProperties () returned 0x3
[0300.152] GetThemeAppProperties () returned 0x3
[0300.152] IsAppThemed () returned 0x1
[0300.152] GetThemeAppProperties () returned 0x3
[0300.152] GetThemeAppProperties () returned 0x3
[0300.152] IsThemePartDefined () returned 0x1
[0300.152] IsAppThemed () returned 0x1
[0300.152] GetThemeAppProperties () returned 0x3
[0300.152] GetThemeAppProperties () returned 0x3
[0300.152] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0300.152] IsAppThemed () returned 0x1
[0300.152] GetThemeAppProperties () returned 0x3
[0300.152] GetThemeAppProperties () returned 0x3
[0300.152] IsAppThemed () returned 0x1
[0300.152] GetThemeAppProperties () returned 0x3
[0300.152] GetThemeAppProperties () returned 0x3
[0300.152] IsThemePartDefined () returned 0x1
[0300.152] GdipCreateRegion (region=0x53e064) returned 0x0
[0300.152] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.152] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0300.152] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.153] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0300.153] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.153] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0300.153] LocalFree (hMem=0x89ee08) returned 0x0
[0300.153] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0300.153] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0300.153] LocalFree (hMem=0x89ea88) returned 0x0
[0300.153] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.153] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0300.153] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0300.153] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0300.153] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.153] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0300.153] GetCurrentObject (hdc=0x5301078c, type=0x1) returned 0xb00017
[0300.153] GetCurrentObject (hdc=0x5301078c, type=0x2) returned 0x900010
[0300.153] GetCurrentObject (hdc=0x5301078c, type=0x7) returned 0x1e0507b9
[0300.154] GetCurrentObject (hdc=0x5301078c, type=0x6) returned 0x8a01c2
[0300.154] SaveDC (hdc=0x5301078c) returned 1
[0300.154] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa1040798
[0300.154] GetClipRgn (hdc=0x5301078c, hrgn=0xa1040798) returned 0
[0300.154] SelectClipRgn (hdc=0x5301078c, hrgn=0xae04053e) returned 2
[0300.154] DeleteObject (ho=0xa1040798) returned 1
[0300.154] DeleteObject (ho=0xae04053e) returned 1
[0300.154] OffsetViewportOrgEx (in: hdc=0x5301078c, x=0, y=0, lppt=0x2479820 | out: lppt=0x2479820) returned 1
[0300.154] DrawThemeParentBackground () returned 0x0
[0300.154] GetWindowPlacement (in: hWnd=0x200122, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0300.154] GetClientRect (in: hWnd=0x200122, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0300.154] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.154] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.155] GetSystemMetrics (nIndex=42) returned 0
[0300.155] GetWindowTextW (in: hWnd=0x200122, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.155] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0300.155] GetClientRect (in: hWnd=0x200122, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0300.155] GetCurrentObject (hdc=0x5301078c, type=0x1) returned 0xb00017
[0300.155] GetCurrentObject (hdc=0x5301078c, type=0x2) returned 0x900010
[0300.155] GetCurrentObject (hdc=0x5301078c, type=0x7) returned 0x1e0507b9
[0300.155] GetCurrentObject (hdc=0x5301078c, type=0x6) returned 0x8a01c2
[0300.155] SaveDC (hdc=0x5301078c) returned 2
[0300.155] GetNearestColor (hdc=0x5301078c, color=0xf0f0f0) returned 0xf0f0f0
[0300.155] CreateSolidBrush (color=0xf0f0f0) returned 0x8710078d
[0300.155] FillRect (hDC=0x5301078c, lprc=0x53dac8, hbr=0x8710078d) returned 1
[0300.155] DeleteObject (ho=0x8710078d) returned 1
[0300.155] RestoreDC (hdc=0x5301078c, nSavedDC=-1) returned 1
[0300.155] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.156] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.156] GetSystemMetrics (nIndex=42) returned 0
[0300.156] GetWindowTextW (in: hWnd=0x200122, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.156] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0300.156] GetClientRect (in: hWnd=0x200122, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0300.156] GetCurrentObject (hdc=0x5301078c, type=0x1) returned 0xb00017
[0300.156] GetCurrentObject (hdc=0x5301078c, type=0x2) returned 0x900010
[0300.156] GetCurrentObject (hdc=0x5301078c, type=0x7) returned 0x1e0507b9
[0300.156] GetCurrentObject (hdc=0x5301078c, type=0x6) returned 0x8a01c2
[0300.156] SaveDC (hdc=0x5301078c) returned 2
[0300.156] GetNearestColor (hdc=0x5301078c, color=0xf0f0f0) returned 0xf0f0f0
[0300.156] CreateSolidBrush (color=0xf0f0f0) returned 0x8810078d
[0300.156] FillRect (hDC=0x5301078c, lprc=0x53da68, hbr=0x8810078d) returned 1
[0300.156] DeleteObject (ho=0x8810078d) returned 1
[0300.156] RestoreDC (hdc=0x5301078c, nSavedDC=-1) returned 1
[0300.156] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.156] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.157] GetSystemMetrics (nIndex=42) returned 0
[0300.157] GetWindowTextW (in: hWnd=0x200122, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.157] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0300.157] RestoreDC (hdc=0x5301078c, nSavedDC=-1) returned 1
[0300.157] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5301078c) returned 0x0
[0300.157] IsAppThemed () returned 0x1
[0300.157] GetThemeAppProperties () returned 0x3
[0300.157] GetThemeAppProperties () returned 0x3
[0300.157] IsAppThemed () returned 0x1
[0300.157] GetThemeAppProperties () returned 0x3
[0300.157] GetThemeAppProperties () returned 0x3
[0300.157] IsThemePartDefined () returned 0x1
[0300.157] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0300.157] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.157] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0300.158] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.158] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0300.158] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.158] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0300.158] LocalFree (hMem=0x89ee08) returned 0x0
[0300.158] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.158] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0300.158] LocalFree (hMem=0x89ee08) returned 0x0
[0300.158] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.158] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0300.158] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0300.158] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0300.158] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.158] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0300.158] GetCurrentObject (hdc=0x5301078c, type=0x1) returned 0xb00017
[0300.158] GetCurrentObject (hdc=0x5301078c, type=0x2) returned 0x900010
[0300.158] GetCurrentObject (hdc=0x5301078c, type=0x7) returned 0x1e0507b9
[0300.158] GetCurrentObject (hdc=0x5301078c, type=0x6) returned 0x8a01c2
[0300.159] SaveDC (hdc=0x5301078c) returned 1
[0300.159] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaf04053e
[0300.159] GetClipRgn (hdc=0x5301078c, hrgn=0xaf04053e) returned 0
[0300.159] SelectClipRgn (hdc=0x5301078c, hrgn=0xa3040798) returned 2
[0300.159] DeleteObject (ho=0xaf04053e) returned 1
[0300.159] DeleteObject (ho=0xa3040798) returned 1
[0300.159] OffsetViewportOrgEx (in: hdc=0x5301078c, x=0, y=0, lppt=0x247a0a8 | out: lppt=0x247a0a8) returned 1
[0300.159] IsAppThemed () returned 0x1
[0300.159] GetThemeAppProperties () returned 0x3
[0300.159] GetThemeAppProperties () returned 0x3
[0300.159] DrawThemeBackground () returned 0x0
[0300.159] RestoreDC (hdc=0x5301078c, nSavedDC=-1) returned 1
[0300.159] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5301078c) returned 0x0
[0300.159] GdipCreateRegion (region=0x53dfec) returned 0x0
[0300.159] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.160] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0300.160] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.160] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0300.160] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0300.160] LocalFree (hMem=0x89ea88) returned 0x0
[0300.160] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0300.160] LocalFree (hMem=0x89eee8) returned 0x0
[0300.160] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.160] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0300.160] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0300.160] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0300.160] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.160] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0300.160] GetCurrentObject (hdc=0x5301078c, type=0x1) returned 0xb00017
[0300.160] GetCurrentObject (hdc=0x5301078c, type=0x2) returned 0x900010
[0300.160] GetCurrentObject (hdc=0x5301078c, type=0x7) returned 0x1e0507b9
[0300.160] GetCurrentObject (hdc=0x5301078c, type=0x6) returned 0x8a01c2
[0300.160] SaveDC (hdc=0x5301078c) returned 1
[0300.161] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa4040798
[0300.161] GetClipRgn (hdc=0x5301078c, hrgn=0xa4040798) returned 0
[0300.161] SelectClipRgn (hdc=0x5301078c, hrgn=0xb004053e) returned 2
[0300.161] DeleteObject (ho=0xa4040798) returned 1
[0300.161] DeleteObject (ho=0xb004053e) returned 1
[0300.161] OffsetViewportOrgEx (in: hdc=0x5301078c, x=0, y=0, lppt=0x247a37c | out: lppt=0x247a37c) returned 1
[0300.161] IsAppThemed () returned 0x1
[0300.161] GetThemeAppProperties () returned 0x3
[0300.161] GetThemeAppProperties () returned 0x3
[0300.161] GetThemeBackgroundContentRect () returned 0x0
[0300.161] RestoreDC (hdc=0x5301078c, nSavedDC=-1) returned 1
[0300.161] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5301078c) returned 0x0
[0300.161] IsAppThemed () returned 0x1
[0300.161] GetThemeAppProperties () returned 0x3
[0300.161] GetThemeAppProperties () returned 0x3
[0300.161] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0300.161] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0300.162] GetCurrentObject (hdc=0x5301078c, type=0x1) returned 0xb00017
[0300.162] GetCurrentObject (hdc=0x5301078c, type=0x2) returned 0x900010
[0300.162] GetCurrentObject (hdc=0x5301078c, type=0x7) returned 0x1e0507b9
[0300.162] GetCurrentObject (hdc=0x5301078c, type=0x6) returned 0x8a01c2
[0300.167] SaveDC (hdc=0x5301078c) returned 1
[0300.167] GetTextAlign (hdc=0x5301078c) returned 0x0
[0300.167] GetTextColor (hdc=0x5301078c) returned 0x0
[0300.167] GetCurrentObject (hdc=0x5301078c, type=0x6) returned 0x8a01c2
[0300.167] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0300.167] SelectObject (hdc=0x5301078c, h=0x730a066d) returned 0x8a01c2
[0300.167] GetBkMode (hdc=0x5301078c) returned 2
[0300.167] SetBkMode (hdc=0x5301078c, mode=1) returned 2
[0300.167] DrawTextExW (in: hdc=0x5301078c, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x247a71c | out: lpchText="OK", lprc=0x53df84) returned 13
[0300.168] DrawTextExW (in: hdc=0x5301078c, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x247a71c | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0300.168] RestoreDC (hdc=0x5301078c, nSavedDC=-1) returned 1
[0300.168] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5301078c) returned 0x0
[0300.168] GetFocus () returned 0x1c004e
[0300.168] IsAppThemed () returned 0x1
[0300.168] GetThemeAppProperties () returned 0x3
[0300.168] GetThemeAppProperties () returned 0x3
[0300.168] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0300.169] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x5301078c, x1=0, y1=0, rop=0xcc0020) returned 1
[0300.169] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5301078c) returned 0x0
[0300.169] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0300.169] SelectObject (hdc=0x5301078c, h=0x85000f) returned 0x1e0507b9
[0300.169] DeleteDC (hdc=0x5301078c) returned 1
[0300.169] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0300.169] EndPaint (hWnd=0xe02b8, lpPaint=0x53e2e4) returned 1
[0300.169] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.169] IsWindowUnicode (hWnd=0x2500ea) returned 1
[0300.169] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.170] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.170] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.170] BeginPaint (in: hWnd=0x2500ea, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0300.170] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0300.170] CreateCompatibleDC (hdc=0x10105d6) returned 0x5501078c
[0300.170] SelectObject (hdc=0x5501078c, h=0x1e0507b9) returned 0x85000f
[0300.170] GdipCreateFromHDC (hdc=0x5501078c, graphics=0x53e300) returned 0x0
[0300.170] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0300.170] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0300.170] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0300.170] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.170] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0300.171] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0300.171] LocalFree (hMem=0x89ea88) returned 0x0
[0300.171] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.171] GdipCreateRegion (region=0x53e348) returned 0x0
[0300.171] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.171] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0300.171] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0300.171] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa630dbd) returned 0x0
[0300.171] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.171] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0300.171] GetCurrentObject (hdc=0x5501078c, type=0x1) returned 0xb00017
[0300.171] GetCurrentObject (hdc=0x5501078c, type=0x2) returned 0x900010
[0300.171] GetCurrentObject (hdc=0x5501078c, type=0x7) returned 0x1e0507b9
[0300.171] GetCurrentObject (hdc=0x5501078c, type=0x6) returned 0x8a01c2
[0300.171] SaveDC (hdc=0x5501078c) returned 1
[0300.171] GetNearestColor (hdc=0x5501078c, color=0xf0f0f0) returned 0xf0f0f0
[0300.171] GetNearestColor (hdc=0x5501078c, color=0xa0a0a0) returned 0xa0a0a0
[0300.172] GetNearestColor (hdc=0x5501078c, color=0x696969) returned 0x696969
[0300.172] GetNearestColor (hdc=0x5501078c, color=0xa0a0a0) returned 0xa0a0a0
[0300.172] GetNearestColor (hdc=0x5501078c, color=0x0) returned 0x0
[0300.172] GetNearestColor (hdc=0x5501078c, color=0xffffff) returned 0xffffff
[0300.172] GetNearestColor (hdc=0x5501078c, color=0xe5e5e5) returned 0xe5e5e5
[0300.172] GetNearestColor (hdc=0x5501078c, color=0xd7d7d7) returned 0xd7d7d7
[0300.172] GetNearestColor (hdc=0x5501078c, color=0x0) returned 0x0
[0300.172] RestoreDC (hdc=0x5501078c, nSavedDC=-1) returned 1
[0300.172] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5501078c) returned 0x0
[0300.172] IsAppThemed () returned 0x1
[0300.172] GetThemeAppProperties () returned 0x3
[0300.172] GetThemeAppProperties () returned 0x3
[0300.172] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0300.172] SendMessageW (hWnd=0x200122, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0300.172] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0300.173] IsAppThemed () returned 0x1
[0300.173] GetThemeAppProperties () returned 0x3
[0300.173] GetThemeAppProperties () returned 0x3
[0300.173] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x247af2c | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0300.173] IsAppThemed () returned 0x1
[0300.173] GetThemeAppProperties () returned 0x3
[0300.173] GetThemeAppProperties () returned 0x3
[0300.173] IsAppThemed () returned 0x1
[0300.173] GetThemeAppProperties () returned 0x3
[0300.173] GetThemeAppProperties () returned 0x3
[0300.173] GetFocus () returned 0x1c004e
[0300.173] IsAppThemed () returned 0x1
[0300.173] GetThemeAppProperties () returned 0x3
[0300.173] GetThemeAppProperties () returned 0x3
[0300.173] IsAppThemed () returned 0x1
[0300.174] GetThemeAppProperties () returned 0x3
[0300.174] GetThemeAppProperties () returned 0x3
[0300.174] IsThemePartDefined () returned 0x1
[0300.174] IsAppThemed () returned 0x1
[0300.174] GetThemeAppProperties () returned 0x3
[0300.174] GetThemeAppProperties () returned 0x3
[0300.174] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0300.174] IsAppThemed () returned 0x1
[0300.174] GetThemeAppProperties () returned 0x3
[0300.174] GetThemeAppProperties () returned 0x3
[0300.174] IsAppThemed () returned 0x1
[0300.174] GetThemeAppProperties () returned 0x3
[0300.174] GetThemeAppProperties () returned 0x3
[0300.174] IsThemePartDefined () returned 0x1
[0300.174] GdipCreateRegion (region=0x53e070) returned 0x0
[0300.174] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.174] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0300.174] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.174] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0300.175] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0300.175] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0300.175] LocalFree (hMem=0x89ea88) returned 0x0
[0300.175] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.175] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0300.175] LocalFree (hMem=0x89ee08) returned 0x0
[0300.175] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.175] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0300.175] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0300.175] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0300.175] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.175] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0300.175] GetCurrentObject (hdc=0x5501078c, type=0x1) returned 0xb00017
[0300.176] GetCurrentObject (hdc=0x5501078c, type=0x2) returned 0x900010
[0300.176] GetCurrentObject (hdc=0x5501078c, type=0x7) returned 0x1e0507b9
[0300.176] GetCurrentObject (hdc=0x5501078c, type=0x6) returned 0x8a01c2
[0300.176] SaveDC (hdc=0x5501078c) returned 1
[0300.176] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb104053e
[0300.176] GetClipRgn (hdc=0x5501078c, hrgn=0xb104053e) returned 0
[0300.176] SelectClipRgn (hdc=0x5501078c, hrgn=0xa8040798) returned 2
[0300.176] DeleteObject (ho=0xb104053e) returned 1
[0300.176] DeleteObject (ho=0xa8040798) returned 1
[0300.176] OffsetViewportOrgEx (in: hdc=0x5501078c, x=0, y=0, lppt=0x247b5dc | out: lppt=0x247b5dc) returned 1
[0300.176] DrawThemeParentBackground () returned 0x0
[0300.177] GetWindowPlacement (in: hWnd=0x200122, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0300.177] GetClientRect (in: hWnd=0x200122, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0300.177] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.177] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.177] GetSystemMetrics (nIndex=42) returned 0
[0300.177] GetWindowTextW (in: hWnd=0x200122, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.177] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0300.177] GetClientRect (in: hWnd=0x200122, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0300.177] GetCurrentObject (hdc=0x5501078c, type=0x1) returned 0xb00017
[0300.177] GetCurrentObject (hdc=0x5501078c, type=0x2) returned 0x900010
[0300.177] GetCurrentObject (hdc=0x5501078c, type=0x7) returned 0x1e0507b9
[0300.182] GetCurrentObject (hdc=0x5501078c, type=0x6) returned 0x8a01c2
[0300.182] SaveDC (hdc=0x5501078c) returned 2
[0300.182] GetNearestColor (hdc=0x5501078c, color=0xf0f0f0) returned 0xf0f0f0
[0300.182] CreateSolidBrush (color=0xf0f0f0) returned 0x8910078d
[0300.182] FillRect (hDC=0x5501078c, lprc=0x53dad0, hbr=0x8910078d) returned 1
[0300.182] DeleteObject (ho=0x8910078d) returned 1
[0300.182] RestoreDC (hdc=0x5501078c, nSavedDC=-1) returned 1
[0300.183] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.183] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.183] GetSystemMetrics (nIndex=42) returned 0
[0300.183] GetWindowTextW (in: hWnd=0x200122, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.183] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0300.183] GetClientRect (in: hWnd=0x200122, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0300.183] GetCurrentObject (hdc=0x5501078c, type=0x1) returned 0xb00017
[0300.183] GetCurrentObject (hdc=0x5501078c, type=0x2) returned 0x900010
[0300.183] GetCurrentObject (hdc=0x5501078c, type=0x7) returned 0x1e0507b9
[0300.183] GetCurrentObject (hdc=0x5501078c, type=0x6) returned 0x8a01c2
[0300.183] SaveDC (hdc=0x5501078c) returned 2
[0300.183] GetNearestColor (hdc=0x5501078c, color=0xf0f0f0) returned 0xf0f0f0
[0300.183] CreateSolidBrush (color=0xf0f0f0) returned 0x8a10078d
[0300.183] FillRect (hDC=0x5501078c, lprc=0x53da70, hbr=0x8a10078d) returned 1
[0300.183] DeleteObject (ho=0x8a10078d) returned 1
[0300.183] RestoreDC (hdc=0x5501078c, nSavedDC=-1) returned 1
[0300.184] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.184] GetSystemMetrics (nIndex=42) returned 0
[0300.184] GetWindowTextW (in: hWnd=0x200122, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0300.184] RestoreDC (hdc=0x5501078c, nSavedDC=-1) returned 1
[0300.184] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5501078c) returned 0x0
[0300.184] IsAppThemed () returned 0x1
[0300.184] GetThemeAppProperties () returned 0x3
[0300.184] GetThemeAppProperties () returned 0x3
[0300.184] IsAppThemed () returned 0x1
[0300.184] GetThemeAppProperties () returned 0x3
[0300.184] GetThemeAppProperties () returned 0x3
[0300.184] IsThemePartDefined () returned 0x1
[0300.184] GdipCreateRegion (region=0x53dff4) returned 0x0
[0300.184] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.184] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0300.185] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.185] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0300.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0300.185] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0300.185] LocalFree (hMem=0x89ea88) returned 0x0
[0300.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.185] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0300.185] LocalFree (hMem=0x89ee08) returned 0x0
[0300.185] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.185] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0300.185] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0300.185] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0300.185] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.185] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0300.185] GetCurrentObject (hdc=0x5501078c, type=0x1) returned 0xb00017
[0300.185] GetCurrentObject (hdc=0x5501078c, type=0x2) returned 0x900010
[0300.185] GetCurrentObject (hdc=0x5501078c, type=0x7) returned 0x1e0507b9
[0300.185] GetCurrentObject (hdc=0x5501078c, type=0x6) returned 0x8a01c2
[0300.186] SaveDC (hdc=0x5501078c) returned 1
[0300.186] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa9040798
[0300.186] GetClipRgn (hdc=0x5501078c, hrgn=0xa9040798) returned 0
[0300.186] SelectClipRgn (hdc=0x5501078c, hrgn=0xb304053e) returned 2
[0300.186] DeleteObject (ho=0xa9040798) returned 1
[0300.186] DeleteObject (ho=0xb304053e) returned 1
[0300.186] OffsetViewportOrgEx (in: hdc=0x5501078c, x=0, y=0, lppt=0x247be64 | out: lppt=0x247be64) returned 1
[0300.186] IsAppThemed () returned 0x1
[0300.186] GetThemeAppProperties () returned 0x3
[0300.186] GetThemeAppProperties () returned 0x3
[0300.186] DrawThemeBackground () returned 0x0
[0300.186] RestoreDC (hdc=0x5501078c, nSavedDC=-1) returned 1
[0300.186] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5501078c) returned 0x0
[0300.186] GdipCreateRegion (region=0x53dff8) returned 0x0
[0300.186] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.187] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0300.187] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.187] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0300.187] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0300.187] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0300.187] LocalFree (hMem=0x89ea88) returned 0x0
[0300.187] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.187] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0300.187] LocalFree (hMem=0x89ee08) returned 0x0
[0300.187] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.187] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0300.187] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0300.187] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0300.187] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.188] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0300.188] GetCurrentObject (hdc=0x5501078c, type=0x1) returned 0xb00017
[0300.188] GetCurrentObject (hdc=0x5501078c, type=0x2) returned 0x900010
[0300.188] GetCurrentObject (hdc=0x5501078c, type=0x7) returned 0x1e0507b9
[0300.188] GetCurrentObject (hdc=0x5501078c, type=0x6) returned 0x8a01c2
[0300.188] SaveDC (hdc=0x5501078c) returned 1
[0300.188] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb404053e
[0300.188] GetClipRgn (hdc=0x5501078c, hrgn=0xb404053e) returned 0
[0300.188] SelectClipRgn (hdc=0x5501078c, hrgn=0xaa040798) returned 2
[0300.188] DeleteObject (ho=0xb404053e) returned 1
[0300.188] DeleteObject (ho=0xaa040798) returned 1
[0300.188] OffsetViewportOrgEx (in: hdc=0x5501078c, x=0, y=0, lppt=0x247c138 | out: lppt=0x247c138) returned 1
[0300.188] IsAppThemed () returned 0x1
[0300.189] GetThemeAppProperties () returned 0x3
[0300.189] GetThemeAppProperties () returned 0x3
[0300.189] GetThemeBackgroundContentRect () returned 0x0
[0300.189] RestoreDC (hdc=0x5501078c, nSavedDC=-1) returned 1
[0300.189] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5501078c) returned 0x0
[0300.189] IsAppThemed () returned 0x1
[0300.189] GetThemeAppProperties () returned 0x3
[0300.189] GetThemeAppProperties () returned 0x3
[0300.189] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0300.189] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0300.189] GetCurrentObject (hdc=0x5501078c, type=0x1) returned 0xb00017
[0300.189] GetCurrentObject (hdc=0x5501078c, type=0x2) returned 0x900010
[0300.189] GetCurrentObject (hdc=0x5501078c, type=0x7) returned 0x1e0507b9
[0300.189] GetCurrentObject (hdc=0x5501078c, type=0x6) returned 0x8a01c2
[0300.189] SaveDC (hdc=0x5501078c) returned 1
[0300.190] GetTextAlign (hdc=0x5501078c) returned 0x0
[0300.190] GetTextColor (hdc=0x5501078c) returned 0x0
[0300.190] GetCurrentObject (hdc=0x5501078c, type=0x6) returned 0x8a01c2
[0300.190] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0300.190] SelectObject (hdc=0x5501078c, h=0x730a066d) returned 0x8a01c2
[0300.190] GetBkMode (hdc=0x5501078c) returned 2
[0300.190] SetBkMode (hdc=0x5501078c, mode=1) returned 2
[0300.190] DrawTextExW (in: hdc=0x5501078c, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x247c4d8 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0300.191] DrawTextExW (in: hdc=0x5501078c, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x247c4d8 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0300.191] RestoreDC (hdc=0x5501078c, nSavedDC=-1) returned 1
[0300.191] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5501078c) returned 0x0
[0300.191] GetFocus () returned 0x1c004e
[0300.191] IsAppThemed () returned 0x1
[0300.191] GetThemeAppProperties () returned 0x3
[0300.191] GetThemeAppProperties () returned 0x3
[0300.192] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0300.192] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x5501078c, x1=0, y1=0, rop=0xcc0020) returned 1
[0300.192] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5501078c) returned 0x0
[0300.192] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0300.192] SelectObject (hdc=0x5501078c, h=0x85000f) returned 0x1e0507b9
[0300.192] DeleteDC (hdc=0x5501078c) returned 1
[0300.192] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0300.192] EndPaint (hWnd=0x2500ea, lpPaint=0x53e2e4) returned 1
[0300.193] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.193] IsWindowUnicode (hWnd=0x202c6) returned 1
[0300.193] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.193] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.193] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.193] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0300.194] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0300.194] CreateCompatibleDC (hdc=0x8b010786) returned 0x5701078c
[0300.194] SelectObject (hdc=0x5701078c, h=0x1e0507b9) returned 0x85000f
[0300.194] GdipCreateFromHDC (hdc=0x5701078c, graphics=0x53e300) returned 0x0
[0300.194] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0300.194] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0300.194] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0300.194] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.194] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0300.194] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.194] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0300.194] LocalFree (hMem=0x89ee08) returned 0x0
[0300.194] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.195] GdipCreateRegion (region=0x53e348) returned 0x0
[0300.195] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.195] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0300.195] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0300.195] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa610dbd) returned 0x0
[0300.195] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.195] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0300.195] GetCurrentObject (hdc=0x5701078c, type=0x1) returned 0xb00017
[0300.195] GetCurrentObject (hdc=0x5701078c, type=0x2) returned 0x900010
[0300.195] GetCurrentObject (hdc=0x5701078c, type=0x7) returned 0x1e0507b9
[0300.195] GetCurrentObject (hdc=0x5701078c, type=0x6) returned 0x8a01c2
[0300.195] SaveDC (hdc=0x5701078c) returned 1
[0300.195] GetNearestColor (hdc=0x5701078c, color=0xff) returned 0xff
[0300.195] GetNearestColor (hdc=0x5701078c, color=0x55) returned 0x55
[0300.195] GetNearestColor (hdc=0x5701078c, color=0x0) returned 0x0
[0300.196] GetNearestColor (hdc=0x5701078c, color=0x55) returned 0x55
[0300.196] GetNearestColor (hdc=0x5701078c, color=0x0) returned 0x0
[0300.196] GetNearestColor (hdc=0x5701078c, color=0x8080ff) returned 0x8080ff
[0300.196] GetNearestColor (hdc=0x5701078c, color=0x7373e5) returned 0x7373e5
[0300.196] GetNearestColor (hdc=0x5701078c, color=0xe5) returned 0xe5
[0300.196] GetNearestColor (hdc=0x5701078c, color=0x0) returned 0x0
[0300.196] RestoreDC (hdc=0x5701078c, nSavedDC=-1) returned 1
[0300.196] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5701078c) returned 0x0
[0300.196] IsAppThemed () returned 0x1
[0300.196] GetThemeAppProperties () returned 0x3
[0300.196] GetThemeAppProperties () returned 0x3
[0300.196] IsAppThemed () returned 0x1
[0300.196] GetThemeAppProperties () returned 0x3
[0300.196] GetThemeAppProperties () returned 0x3
[0300.197] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0300.197] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x247ccbc | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0300.197] IsAppThemed () returned 0x1
[0300.207] GetThemeAppProperties () returned 0x3
[0300.207] GetThemeAppProperties () returned 0x3
[0300.207] IsAppThemed () returned 0x1
[0300.207] GetThemeAppProperties () returned 0x3
[0300.207] GetThemeAppProperties () returned 0x3
[0300.207] GetFocus () returned 0x1c004e
[0300.207] IsAppThemed () returned 0x1
[0300.207] GetThemeAppProperties () returned 0x3
[0300.207] GetThemeAppProperties () returned 0x3
[0300.208] IsAppThemed () returned 0x1
[0300.208] GetThemeAppProperties () returned 0x3
[0300.208] GetThemeAppProperties () returned 0x3
[0300.208] IsThemePartDefined () returned 0x1
[0300.208] IsAppThemed () returned 0x1
[0300.208] GetThemeAppProperties () returned 0x3
[0300.208] GetThemeAppProperties () returned 0x3
[0300.208] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0300.208] IsAppThemed () returned 0x1
[0300.208] GetThemeAppProperties () returned 0x3
[0300.208] GetThemeAppProperties () returned 0x3
[0300.208] IsAppThemed () returned 0x1
[0300.208] GetThemeAppProperties () returned 0x3
[0300.208] GetThemeAppProperties () returned 0x3
[0300.208] IsThemePartDefined () returned 0x1
[0300.208] GdipCreateRegion (region=0x53e070) returned 0x0
[0300.208] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.208] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0300.208] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.208] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0300.209] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0300.217] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0300.217] LocalFree (hMem=0x89ea88) returned 0x0
[0300.217] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0300.217] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0300.217] LocalFree (hMem=0x89ea88) returned 0x0
[0300.217] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.217] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0300.217] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0300.217] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0300.217] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.217] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0300.217] GetCurrentObject (hdc=0x5701078c, type=0x1) returned 0xb00017
[0300.217] GetCurrentObject (hdc=0x5701078c, type=0x2) returned 0x900010
[0300.218] GetCurrentObject (hdc=0x5701078c, type=0x7) returned 0x1e0507b9
[0300.218] GetCurrentObject (hdc=0x5701078c, type=0x6) returned 0x8a01c2
[0300.218] SaveDC (hdc=0x5701078c) returned 1
[0300.218] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xab040798
[0300.218] GetClipRgn (hdc=0x5701078c, hrgn=0xab040798) returned 0
[0300.218] SelectClipRgn (hdc=0x5701078c, hrgn=0xb804053e) returned 2
[0300.218] DeleteObject (ho=0xab040798) returned 1
[0300.218] DeleteObject (ho=0xb804053e) returned 1
[0300.218] OffsetViewportOrgEx (in: hdc=0x5701078c, x=0, y=0, lppt=0x247d36c | out: lppt=0x247d36c) returned 1
[0300.218] DrawThemeParentBackground () returned 0x0
[0300.222] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0300.223] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0300.223] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0300.223] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0300.223] GetSystemMetrics (nIndex=42) returned 0
[0300.223] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0300.223] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0300.223] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0300.223] GetCurrentObject (hdc=0x5701078c, type=0x1) returned 0xb00017
[0300.223] GetCurrentObject (hdc=0x5701078c, type=0x2) returned 0x900010
[0300.223] GetCurrentObject (hdc=0x5701078c, type=0x7) returned 0x1e0507b9
[0300.223] GetCurrentObject (hdc=0x5701078c, type=0x6) returned 0x8a01c2
[0300.223] SaveDC (hdc=0x5701078c) returned 2
[0300.223] GetNearestColor (hdc=0x5701078c, color=0xff) returned 0xff
[0300.223] CreateSolidBrush (color=0xff) returned 0x8b10078d
[0300.223] FillRect (hDC=0x5701078c, lprc=0x53dad0, hbr=0x8b10078d) returned 1
[0300.224] DeleteObject (ho=0x8b10078d) returned 1
[0300.224] RestoreDC (hdc=0x5701078c, nSavedDC=-1) returned 1
[0300.224] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0300.224] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0300.224] GetSystemMetrics (nIndex=42) returned 0
[0300.224] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0300.224] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0300.224] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0300.224] GetCurrentObject (hdc=0x5701078c, type=0x1) returned 0xb00017
[0300.224] GetCurrentObject (hdc=0x5701078c, type=0x2) returned 0x900010
[0300.224] GetCurrentObject (hdc=0x5701078c, type=0x7) returned 0x1e0507b9
[0300.224] GetCurrentObject (hdc=0x5701078c, type=0x6) returned 0x8a01c2
[0300.224] SaveDC (hdc=0x5701078c) returned 2
[0300.224] GetNearestColor (hdc=0x5701078c, color=0xff) returned 0xff
[0300.225] CreateSolidBrush (color=0xff) returned 0x8c10078d
[0300.225] FillRect (hDC=0x5701078c, lprc=0x53da70, hbr=0x8c10078d) returned 1
[0300.225] DeleteObject (ho=0x8c10078d) returned 1
[0300.225] RestoreDC (hdc=0x5701078c, nSavedDC=-1) returned 1
[0300.225] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0300.225] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0300.225] GetSystemMetrics (nIndex=42) returned 0
[0300.225] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0300.225] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0300.225] RestoreDC (hdc=0x5701078c, nSavedDC=-1) returned 1
[0300.225] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5701078c) returned 0x0
[0300.225] IsAppThemed () returned 0x1
[0300.226] GetThemeAppProperties () returned 0x3
[0300.226] GetThemeAppProperties () returned 0x3
[0300.226] IsAppThemed () returned 0x1
[0300.226] GetThemeAppProperties () returned 0x3
[0300.226] GetThemeAppProperties () returned 0x3
[0300.226] IsThemePartDefined () returned 0x1
[0300.226] GdipCreateRegion (region=0x53dff4) returned 0x0
[0300.226] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.226] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0300.226] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.226] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0300.226] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0300.226] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0300.226] LocalFree (hMem=0x89ea88) returned 0x0
[0300.226] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0300.226] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0300.226] LocalFree (hMem=0x89eee8) returned 0x0
[0300.226] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.227] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0300.227] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0300.227] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0300.227] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.227] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0300.227] GetCurrentObject (hdc=0x5701078c, type=0x1) returned 0xb00017
[0300.227] GetCurrentObject (hdc=0x5701078c, type=0x2) returned 0x900010
[0300.227] GetCurrentObject (hdc=0x5701078c, type=0x7) returned 0x1e0507b9
[0300.227] GetCurrentObject (hdc=0x5701078c, type=0x6) returned 0x8a01c2
[0300.227] SaveDC (hdc=0x5701078c) returned 1
[0300.227] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb904053e
[0300.227] GetClipRgn (hdc=0x5701078c, hrgn=0xb904053e) returned 0
[0300.227] SelectClipRgn (hdc=0x5701078c, hrgn=0xad040798) returned 2
[0300.228] DeleteObject (ho=0xb904053e) returned 1
[0300.228] DeleteObject (ho=0xad040798) returned 1
[0300.228] OffsetViewportOrgEx (in: hdc=0x5701078c, x=0, y=0, lppt=0x247dbd0 | out: lppt=0x247dbd0) returned 1
[0300.228] IsAppThemed () returned 0x1
[0300.228] GetThemeAppProperties () returned 0x3
[0300.228] GetThemeAppProperties () returned 0x3
[0300.228] DrawThemeBackground () returned 0x0
[0300.228] RestoreDC (hdc=0x5701078c, nSavedDC=-1) returned 1
[0300.228] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5701078c) returned 0x0
[0300.228] GdipCreateRegion (region=0x53dff8) returned 0x0
[0300.228] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.228] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0300.228] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.228] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0300.228] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.228] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0300.229] LocalFree (hMem=0x89ee08) returned 0x0
[0300.229] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eac0) returned 0x0
[0300.229] LocalFree (hMem=0x89eac0) returned 0x0
[0300.229] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.229] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0300.229] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0300.229] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0300.229] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.229] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0300.229] GetCurrentObject (hdc=0x5701078c, type=0x1) returned 0xb00017
[0300.229] GetCurrentObject (hdc=0x5701078c, type=0x2) returned 0x900010
[0300.229] GetCurrentObject (hdc=0x5701078c, type=0x7) returned 0x1e0507b9
[0300.229] GetCurrentObject (hdc=0x5701078c, type=0x6) returned 0x8a01c2
[0300.229] SaveDC (hdc=0x5701078c) returned 1
[0300.229] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xae040798
[0300.229] GetClipRgn (hdc=0x5701078c, hrgn=0xae040798) returned 0
[0300.230] SelectClipRgn (hdc=0x5701078c, hrgn=0xba04053e) returned 2
[0300.230] DeleteObject (ho=0xae040798) returned 1
[0300.230] DeleteObject (ho=0xba04053e) returned 1
[0300.230] OffsetViewportOrgEx (in: hdc=0x5701078c, x=0, y=0, lppt=0x247dea4 | out: lppt=0x247dea4) returned 1
[0300.230] IsAppThemed () returned 0x1
[0300.230] GetThemeAppProperties () returned 0x3
[0300.230] GetThemeAppProperties () returned 0x3
[0300.230] GetThemeBackgroundContentRect () returned 0x0
[0300.230] RestoreDC (hdc=0x5701078c, nSavedDC=-1) returned 1
[0300.230] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5701078c) returned 0x0
[0300.230] IsAppThemed () returned 0x1
[0300.230] GetThemeAppProperties () returned 0x3
[0300.230] GetThemeAppProperties () returned 0x3
[0300.230] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0300.230] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0300.230] GetCurrentObject (hdc=0x5701078c, type=0x1) returned 0xb00017
[0300.230] GetCurrentObject (hdc=0x5701078c, type=0x2) returned 0x900010
[0300.230] GetCurrentObject (hdc=0x5701078c, type=0x7) returned 0x1e0507b9
[0300.231] GetCurrentObject (hdc=0x5701078c, type=0x6) returned 0x8a01c2
[0300.231] SaveDC (hdc=0x5701078c) returned 1
[0300.231] GetTextAlign (hdc=0x5701078c) returned 0x0
[0300.231] GetTextColor (hdc=0x5701078c) returned 0x0
[0300.231] GetCurrentObject (hdc=0x5701078c, type=0x6) returned 0x8a01c2
[0300.231] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0300.231] SelectObject (hdc=0x5701078c, h=0x450a0799) returned 0x8a01c2
[0300.231] GetBkMode (hdc=0x5701078c) returned 2
[0300.231] SetBkMode (hdc=0x5701078c, mode=1) returned 2
[0300.231] DrawTextExW (in: hdc=0x5701078c, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x247e244 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0300.232] DrawTextExW (in: hdc=0x5701078c, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x247e244 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0300.232] RestoreDC (hdc=0x5701078c, nSavedDC=-1) returned 1
[0300.232] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5701078c) returned 0x0
[0300.232] GetFocus () returned 0x1c004e
[0300.232] IsAppThemed () returned 0x1
[0300.232] GetThemeAppProperties () returned 0x3
[0300.232] GetThemeAppProperties () returned 0x3
[0300.232] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0300.232] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x5701078c, x1=0, y1=0, rop=0xcc0020) returned 1
[0300.233] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5701078c) returned 0x0
[0300.233] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0300.233] SelectObject (hdc=0x5701078c, h=0x85000f) returned 0x1e0507b9
[0300.233] DeleteDC (hdc=0x5701078c) returned 1
[0300.233] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0300.233] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0300.233] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.233] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x84, wParam=0x0, lParam=0x18e0368) returned 0x1
[0300.233] IsWindowUnicode (hWnd=0xe02b8) returned 1
[0300.234] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.234] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x84, wParam=0x0, lParam=0x18e0368) returned 0x1
[0300.234] GetDlgItem (hDlg=0x200122, nIDDlgItem=0) returned 0x0
[0300.234] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x210, wParam=0x201, lParam=0x110149) returned 0x0
[0300.234] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x21, wParam=0x200122, lParam=0x2010001) returned 0x1
[0300.234] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x21, wParam=0x200122, lParam=0x2010001) returned 0x1
[0300.234] SetCursor (hCursor=0x10003) returned 0x10003
[0300.234] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.234] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.234] GetKeyState (nVirtKey=1) returned -128
[0300.235] GetKeyState (nVirtKey=2) returned 0
[0300.235] GetKeyState (nVirtKey=4) returned 0
[0300.235] GetKeyState (nVirtKey=5) returned 0
[0300.235] GetKeyState (nVirtKey=6) returned 0
[0300.235] IsWindowVisible (hWnd=0xe02b8) returned 1
[0300.235] IsWindowEnabled (hWnd=0xe02b8) returned 1
[0300.235] SetFocus (hWnd=0xe02b8) returned 0x1c004e
[0300.235] GetFocus () returned 0xe02b8
[0300.235] IsChild (hWndParent=0x200122, hWnd=0xe02b8) returned 1
[0300.235] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x8, wParam=0xe02b8, lParam=0x0) returned 0x1
[0300.236] SendMessageW (hWnd=0x1c004e, Msg=0x2111, wParam=0x200004e, lParam=0x1c004e) returned 0x0
[0300.237] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0300.238] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0300.239] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0300.239] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0300.239] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0300.240] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0300.246] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0300.247] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x7, wParam=0x1c004e, lParam=0x0) returned 0x0
[0300.247] GetStockObject (i=5) returned 0x900015
[0300.247] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0300.247] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0xd, wParam=0x3, lParam=0x89e7c8) returned 0x2
[0300.247] GetDlgItem (hDlg=0x200122, nIDDlgItem=918200) returned 0xe02b8
[0300.247] SendMessageW (hWnd=0xe02b8, Msg=0x202b, wParam=0xe02b8, lParam=0x53de74) returned 0x0
[0300.247] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x202b, wParam=0xe02b8, lParam=0x53de74) returned 0x0
[0300.247] InvalidateRect (hWnd=0xe02b8, lpRect=0x0, bErase=0) returned 1
[0300.249] GetFocus () returned 0xe02b8
[0300.249] GetFocus () returned 0xe02b8
[0300.249] GetFocus () returned 0xe02b8
[0300.249] GetKeyState (nVirtKey=1) returned -128
[0300.249] GetKeyState (nVirtKey=2) returned 0
[0300.249] GetKeyState (nVirtKey=4) returned 0
[0300.249] GetKeyState (nVirtKey=5) returned 0
[0300.249] GetKeyState (nVirtKey=6) returned 0
[0300.249] GetCapture () returned 0x0
[0300.249] SetCapture (hWnd=0xe02b8) returned 0x0
[0300.249] GetKeyState (nVirtKey=1) returned -128
[0300.249] GetKeyState (nVirtKey=2) returned 0
[0300.249] GetKeyState (nVirtKey=4) returned 0
[0300.249] GetKeyState (nVirtKey=5) returned 0
[0300.249] GetKeyState (nVirtKey=6) returned 0
[0300.249] NotifyWinEvent (event=0x800a, hwnd=0xe02b8, idObject=-4, idChild=0)
[0300.249] InvalidateRect (hWnd=0xe02b8, lpRect=0x53e4c8, bErase=0) returned 1
[0300.249] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.250] IsWindowUnicode (hWnd=0xe02b8) returned 1
[0300.250] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.250] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0300.250] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0300.250] MapWindowPoints (in: hWndFrom=0xe02b8, hWndTo=0x0, lpPoints=0x247e3e0, cPoints=0x1 | out: lpPoints=0x247e3e0) returned 25756481
[0300.250] NotifyWinEvent (event=0x800a, hwnd=0xe02b8, idObject=-4, idChild=0)
[0300.250] InvalidateRect (hWnd=0xe02b8, lpRect=0x53e468, bErase=0) returned 1
[0300.250] UpdateWindow (hWnd=0xe02b8) returned 1
[0300.250] BeginPaint (in: hWnd=0xe02b8, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0xf0105ee
[0300.250] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0300.250] CreateCompatibleDC (hdc=0xf0105ee) returned 0x5901078c
[0300.250] SelectObject (hdc=0x5901078c, h=0x1e0507b9) returned 0x85000f
[0300.250] GdipCreateFromHDC (hdc=0x5901078c, graphics=0x53df98) returned 0x0
[0300.250] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0300.250] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0300.251] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0300.251] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.251] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0300.251] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.251] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0300.251] LocalFree (hMem=0x89ee08) returned 0x0
[0300.251] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.251] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0300.251] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.251] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0300.251] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0300.251] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa5f0dbd) returned 0x0
[0300.251] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.251] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0300.251] GetCurrentObject (hdc=0x5901078c, type=0x1) returned 0xb00017
[0300.251] GetCurrentObject (hdc=0x5901078c, type=0x2) returned 0x900010
[0300.252] GetCurrentObject (hdc=0x5901078c, type=0x7) returned 0x1e0507b9
[0300.252] GetCurrentObject (hdc=0x5901078c, type=0x6) returned 0x8a01c2
[0300.252] SaveDC (hdc=0x5901078c) returned 1
[0300.252] GetNearestColor (hdc=0x5901078c, color=0xf0f0f0) returned 0xf0f0f0
[0300.252] GetNearestColor (hdc=0x5901078c, color=0xa0a0a0) returned 0xa0a0a0
[0300.252] GetNearestColor (hdc=0x5901078c, color=0x696969) returned 0x696969
[0300.252] GetNearestColor (hdc=0x5901078c, color=0xa0a0a0) returned 0xa0a0a0
[0300.252] GetNearestColor (hdc=0x5901078c, color=0x0) returned 0x0
[0300.252] GetNearestColor (hdc=0x5901078c, color=0xffffff) returned 0xffffff
[0300.252] GetNearestColor (hdc=0x5901078c, color=0xe5e5e5) returned 0xe5e5e5
[0300.252] GetNearestColor (hdc=0x5901078c, color=0xd7d7d7) returned 0xd7d7d7
[0300.252] GetNearestColor (hdc=0x5901078c, color=0x0) returned 0x0
[0300.252] RestoreDC (hdc=0x5901078c, nSavedDC=-1) returned 1
[0300.253] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5901078c) returned 0x0
[0300.253] IsAppThemed () returned 0x1
[0300.253] GetThemeAppProperties () returned 0x3
[0300.253] GetThemeAppProperties () returned 0x3
[0300.253] IsAppThemed () returned 0x1
[0300.253] GetThemeAppProperties () returned 0x3
[0300.253] GetThemeAppProperties () returned 0x3
[0300.253] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0300.253] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x247eb54 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0300.253] IsAppThemed () returned 0x1
[0300.253] GetThemeAppProperties () returned 0x3
[0300.253] GetThemeAppProperties () returned 0x3
[0300.254] IsAppThemed () returned 0x1
[0300.254] GetThemeAppProperties () returned 0x3
[0300.254] GetThemeAppProperties () returned 0x3
[0300.254] IsAppThemed () returned 0x1
[0300.254] GetThemeAppProperties () returned 0x3
[0300.254] GetThemeAppProperties () returned 0x3
[0300.254] IsAppThemed () returned 0x1
[0300.254] GetThemeAppProperties () returned 0x3
[0300.254] GetThemeAppProperties () returned 0x3
[0300.254] IsThemePartDefined () returned 0x1
[0300.254] IsAppThemed () returned 0x1
[0300.254] GetThemeAppProperties () returned 0x3
[0300.254] GetThemeAppProperties () returned 0x3
[0300.254] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0300.254] IsAppThemed () returned 0x1
[0300.254] GetThemeAppProperties () returned 0x3
[0300.254] GetThemeAppProperties () returned 0x3
[0300.254] IsAppThemed () returned 0x1
[0300.254] GetThemeAppProperties () returned 0x3
[0300.254] GetThemeAppProperties () returned 0x3
[0300.254] IsThemePartDefined () returned 0x1
[0300.254] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0300.255] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.255] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0300.255] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.255] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0300.255] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.255] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0300.255] LocalFree (hMem=0x89ee08) returned 0x0
[0300.255] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.255] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0300.255] LocalFree (hMem=0x89ee08) returned 0x0
[0300.255] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.255] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0300.255] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0300.255] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0300.255] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.259] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0300.259] GetCurrentObject (hdc=0x5901078c, type=0x1) returned 0xb00017
[0300.259] GetCurrentObject (hdc=0x5901078c, type=0x2) returned 0x900010
[0300.259] GetCurrentObject (hdc=0x5901078c, type=0x7) returned 0x1e0507b9
[0300.259] GetCurrentObject (hdc=0x5901078c, type=0x6) returned 0x8a01c2
[0300.259] SaveDC (hdc=0x5901078c) returned 1
[0300.259] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbb04053e
[0300.259] GetClipRgn (hdc=0x5901078c, hrgn=0xbb04053e) returned 0
[0300.259] SelectClipRgn (hdc=0x5901078c, hrgn=0xb2040798) returned 2
[0300.259] DeleteObject (ho=0xbb04053e) returned 1
[0300.259] DeleteObject (ho=0xb2040798) returned 1
[0300.260] OffsetViewportOrgEx (in: hdc=0x5901078c, x=0, y=0, lppt=0x247f204 | out: lppt=0x247f204) returned 1
[0300.260] DrawThemeParentBackground () returned 0x0
[0300.260] GetWindowPlacement (in: hWnd=0x200122, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0300.260] GetClientRect (in: hWnd=0x200122, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0300.260] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.260] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.260] GetSystemMetrics (nIndex=42) returned 0
[0300.260] GetWindowTextW (in: hWnd=0x200122, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.260] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0300.260] GetClientRect (in: hWnd=0x200122, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0300.260] GetCurrentObject (hdc=0x5901078c, type=0x1) returned 0xb00017
[0300.260] GetCurrentObject (hdc=0x5901078c, type=0x2) returned 0x900010
[0300.260] GetCurrentObject (hdc=0x5901078c, type=0x7) returned 0x1e0507b9
[0300.260] GetCurrentObject (hdc=0x5901078c, type=0x6) returned 0x8a01c2
[0300.261] SaveDC (hdc=0x5901078c) returned 2
[0300.261] GetNearestColor (hdc=0x5901078c, color=0xf0f0f0) returned 0xf0f0f0
[0300.261] CreateSolidBrush (color=0xf0f0f0) returned 0x8d10078d
[0300.261] FillRect (hDC=0x5901078c, lprc=0x53d760, hbr=0x8d10078d) returned 1
[0300.261] DeleteObject (ho=0x8d10078d) returned 1
[0300.261] RestoreDC (hdc=0x5901078c, nSavedDC=-1) returned 1
[0300.261] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.261] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.261] GetSystemMetrics (nIndex=42) returned 0
[0300.261] GetWindowTextW (in: hWnd=0x200122, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.261] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0300.261] GetClientRect (in: hWnd=0x200122, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0300.261] GetCurrentObject (hdc=0x5901078c, type=0x1) returned 0xb00017
[0300.261] GetCurrentObject (hdc=0x5901078c, type=0x2) returned 0x900010
[0300.261] GetCurrentObject (hdc=0x5901078c, type=0x7) returned 0x1e0507b9
[0300.262] GetCurrentObject (hdc=0x5901078c, type=0x6) returned 0x8a01c2
[0300.262] SaveDC (hdc=0x5901078c) returned 2
[0300.262] GetNearestColor (hdc=0x5901078c, color=0xf0f0f0) returned 0xf0f0f0
[0300.262] CreateSolidBrush (color=0xf0f0f0) returned 0x8e10078d
[0300.262] FillRect (hDC=0x5901078c, lprc=0x53d700, hbr=0x8e10078d) returned 1
[0300.262] DeleteObject (ho=0x8e10078d) returned 1
[0300.262] RestoreDC (hdc=0x5901078c, nSavedDC=-1) returned 1
[0300.262] GetWindowTextLengthW (hWnd=0x200122) returned 10
[0300.262] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0300.262] GetSystemMetrics (nIndex=42) returned 0
[0300.262] GetWindowTextW (in: hWnd=0x200122, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0300.262] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0300.263] RestoreDC (hdc=0x5901078c, nSavedDC=-1) returned 1
[0300.263] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5901078c) returned 0x0
[0300.263] IsAppThemed () returned 0x1
[0300.263] GetThemeAppProperties () returned 0x3
[0300.263] GetThemeAppProperties () returned 0x3
[0300.263] IsAppThemed () returned 0x1
[0300.263] GetThemeAppProperties () returned 0x3
[0300.263] GetThemeAppProperties () returned 0x3
[0300.263] IsThemePartDefined () returned 0x1
[0300.263] GdipCreateRegion (region=0x53dc80) returned 0x0
[0300.263] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.263] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0300.263] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.263] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0300.263] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.263] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0300.263] LocalFree (hMem=0x89ee08) returned 0x0
[0300.264] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.264] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0300.264] LocalFree (hMem=0x89ee08) returned 0x0
[0300.264] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.264] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0300.264] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0300.264] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0300.264] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.264] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0300.264] GetCurrentObject (hdc=0x5901078c, type=0x1) returned 0xb00017
[0300.264] GetCurrentObject (hdc=0x5901078c, type=0x2) returned 0x900010
[0300.264] GetCurrentObject (hdc=0x5901078c, type=0x7) returned 0x1e0507b9
[0300.264] GetCurrentObject (hdc=0x5901078c, type=0x6) returned 0x8a01c2
[0300.264] SaveDC (hdc=0x5901078c) returned 1
[0300.264] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb3040798
[0300.264] GetClipRgn (hdc=0x5901078c, hrgn=0xb3040798) returned 0
[0300.264] SelectClipRgn (hdc=0x5901078c, hrgn=0xbd04053e) returned 2
[0300.265] DeleteObject (ho=0xb3040798) returned 1
[0300.265] DeleteObject (ho=0xbd04053e) returned 1
[0300.265] OffsetViewportOrgEx (in: hdc=0x5901078c, x=0, y=0, lppt=0x247fa8c | out: lppt=0x247fa8c) returned 1
[0300.265] IsAppThemed () returned 0x1
[0300.265] GetThemeAppProperties () returned 0x3
[0300.265] GetThemeAppProperties () returned 0x3
[0300.265] DrawThemeBackground () returned 0x0
[0300.265] RestoreDC (hdc=0x5901078c, nSavedDC=-1) returned 1
[0300.265] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5901078c) returned 0x0
[0300.265] GdipCreateRegion (region=0x53dc84) returned 0x0
[0300.265] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.265] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0300.265] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.265] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0300.265] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0300.265] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0300.265] LocalFree (hMem=0x89ee08) returned 0x0
[0300.266] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0300.266] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0300.266] LocalFree (hMem=0x89ea88) returned 0x0
[0300.266] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.266] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0300.266] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0300.266] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0300.266] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.266] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0300.266] GetCurrentObject (hdc=0x5901078c, type=0x1) returned 0xb00017
[0300.266] GetCurrentObject (hdc=0x5901078c, type=0x2) returned 0x900010
[0300.266] GetCurrentObject (hdc=0x5901078c, type=0x7) returned 0x1e0507b9
[0300.266] GetCurrentObject (hdc=0x5901078c, type=0x6) returned 0x8a01c2
[0300.266] SaveDC (hdc=0x5901078c) returned 1
[0300.266] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbe04053e
[0300.266] GetClipRgn (hdc=0x5901078c, hrgn=0xbe04053e) returned 0
[0300.267] SelectClipRgn (hdc=0x5901078c, hrgn=0xb4040798) returned 2
[0300.267] DeleteObject (ho=0xbe04053e) returned 1
[0300.267] DeleteObject (ho=0xb4040798) returned 1
[0300.267] OffsetViewportOrgEx (in: hdc=0x5901078c, x=0, y=0, lppt=0x247fd60 | out: lppt=0x247fd60) returned 1
[0300.267] IsAppThemed () returned 0x1
[0300.267] GetThemeAppProperties () returned 0x3
[0300.267] GetThemeAppProperties () returned 0x3
[0300.267] GetThemeBackgroundContentRect () returned 0x0
[0300.267] RestoreDC (hdc=0x5901078c, nSavedDC=-1) returned 1
[0300.267] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5901078c) returned 0x0
[0300.267] IsAppThemed () returned 0x1
[0300.267] GetThemeAppProperties () returned 0x3
[0300.267] GetThemeAppProperties () returned 0x3
[0300.267] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0300.267] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0300.267] GetCurrentObject (hdc=0x5901078c, type=0x1) returned 0xb00017
[0300.267] GetCurrentObject (hdc=0x5901078c, type=0x2) returned 0x900010
[0300.268] GetCurrentObject (hdc=0x5901078c, type=0x7) returned 0x1e0507b9
[0300.268] GetCurrentObject (hdc=0x5901078c, type=0x6) returned 0x8a01c2
[0300.268] SaveDC (hdc=0x5901078c) returned 1
[0300.268] GetTextAlign (hdc=0x5901078c) returned 0x0
[0300.268] GetTextColor (hdc=0x5901078c) returned 0x0
[0300.268] GetCurrentObject (hdc=0x5901078c, type=0x6) returned 0x8a01c2
[0300.268] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0300.268] SelectObject (hdc=0x5901078c, h=0x730a066d) returned 0x8a01c2
[0300.268] GetBkMode (hdc=0x5901078c) returned 2
[0300.268] SetBkMode (hdc=0x5901078c, mode=1) returned 2
[0300.268] DrawTextExW (in: hdc=0x5901078c, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x2480100 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0300.269] DrawTextExW (in: hdc=0x5901078c, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x2480100 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0300.269] RestoreDC (hdc=0x5901078c, nSavedDC=-1) returned 1
[0300.269] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5901078c) returned 0x0
[0300.269] GetFocus () returned 0xe02b8
[0300.269] IsAppThemed () returned 0x1
[0300.269] GetThemeAppProperties () returned 0x3
[0300.269] GetThemeAppProperties () returned 0x3
[0300.269] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0300.269] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x5901078c, x1=0, y1=0, rop=0xcc0020) returned 1
[0300.270] GdipReleaseDC (graphics=0x5d92c30, hdc=0x5901078c) returned 0x0
[0300.270] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0300.270] SelectObject (hdc=0x5901078c, h=0x85000f) returned 0x1e0507b9
[0300.270] DeleteDC (hdc=0x5901078c) returned 1
[0300.270] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0300.270] EndPaint (hWnd=0xe02b8, lpPaint=0x53df7c) returned 1
[0300.270] MapWindowPoints (in: hWndFrom=0xe02b8, hWndTo=0x0, lpPoints=0x24801fc, cPoints=0x1 | out: lpPoints=0x24801fc) returned 25756481
[0300.270] WindowFromPoint (Point=0x368) returned 0xe02b8
[0300.270] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x84, wParam=0x0, lParam=0x18e0368) returned 0x1
[0300.270] NotifyWinEvent (event=0x800a, hwnd=0xe02b8, idObject=-4, idChild=0)
[0300.271] NotifyWinEvent (event=0x800c, hwnd=0xe02b8, idObject=-4, idChild=0)
[0300.271] GetWindowTextLengthW (hWnd=0x1c004e) returned 0
[0300.271] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0300.271] GetSystemMetrics (nIndex=42) returned 0
[0300.271] GetWindowTextW (in: hWnd=0x1c004e, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0300.271] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0300.271] SendMessageW (hWnd=0x200122, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0300.271] GetCapture () returned 0xe02b8
[0300.308] ReleaseCapture () returned 1
[0300.309] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0300.309] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0300.309] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0300.310] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x84, wParam=0x0, lParam=0x18e0368) returned 0x1
[0300.310] IsWindow (hWnd=0x70036) returned 1
[0300.310] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0300.311] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0300.311] IsWindow (hWnd=0x70036) returned 1
[0300.311] SetActiveWindow (hWnd=0x70036)
[0300.311] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x86, wParam=0x0, lParam=0x70036)
[0300.313] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0300.313] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0300.314] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0300.330] IsChild (hWndParent=0x200122, hWnd=0x202c6) returned 0
[0300.330] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0xe02b8, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0300.330] GetCapture () returned 0x0
[0300.330] InvalidateRect (hWnd=0xe02b8, lpRect=0x0, bErase=0) returned 1
[0300.339] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0300.339] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0300.339] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0300.344] IsChild (hWndParent=0x200122, hWnd=0x202c6) returned 0
[0300.344] ShowWindow (hWnd=0x200122, nCmdShow=0)
[0300.344] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0300.348] GetWindowLongW (hWnd=0x200122, nIndex=-20) returned 327937
[0300.348] DestroyWindow (hWnd=0x200122)
[0300.348] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
[0300.349] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x200122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0300.352] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x1c004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0300.352] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x40013e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0300.353] GetWindowTextLengthW (hWnd=0x2001e2)
[0300.353] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0300.353] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2001e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0300.360] GetProcessWindowStation () returned 0x13c
[0300.360] GetActiveWindow () returned 0x70036
[0300.360] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0300.360] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0300.360] GetCurrentThreadId () returned 0x11d0
[0300.361] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf5ea6, lParam=0x0) returned 1
[0300.361] IsWindowVisible (hWnd=0x70036) returned 1
[0300.361] IsWindowEnabled (hWnd=0x70036) returned 1
[0300.361] IsWindowVisible (hWnd=0x602b6) returned 0
[0300.361] IsWindowVisible (hWnd=0x901f8) returned 0
[0300.361] IsWindowVisible (hWnd=0x202d0) returned 0
[0300.361] IsWindowVisible (hWnd=0x202d4) returned 0
[0300.361] GetActiveWindow () returned 0x70036
[0300.361] GetFocus () returned 0x202c6
[0300.361] IsWindow (hWnd=0x70036) returned 1
[0300.361] EnableWindow (hWnd=0x70036, bEnable=0)
[0300.362] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0300.362] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0300.364] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0300.390] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x60100ce
[0300.390] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0300.390] CreateCompatibleDC (hdc=0x60100ce) returned 0x580107bc
[0300.390] SelectObject (hdc=0x580107bc, h=0x1e0507b9) returned 0x85000f
[0300.390] GdipCreateFromHDC (hdc=0x580107bc, graphics=0x53e108) returned 0x0
[0300.391] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0300.391] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0300.391] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0300.391] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.391] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0300.391] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0300.391] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0300.391] LocalFree (hMem=0x89ea88) returned 0x0
[0300.391] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.391] GdipCreateRegion (region=0x53e150) returned 0x0
[0300.391] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.391] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0300.391] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0300.391] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa5d0dbd) returned 0x0
[0300.391] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.391] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0300.392] GetCurrentObject (hdc=0x580107bc, type=0x1) returned 0xb00017
[0300.392] GetCurrentObject (hdc=0x580107bc, type=0x2) returned 0x900010
[0300.392] GetCurrentObject (hdc=0x580107bc, type=0x7) returned 0x1e0507b9
[0300.392] GetCurrentObject (hdc=0x580107bc, type=0x6) returned 0x8a01c2
[0300.392] SaveDC (hdc=0x580107bc) returned 1
[0300.392] GetNearestColor (hdc=0x580107bc, color=0xff) returned 0xff
[0300.392] GetNearestColor (hdc=0x580107bc, color=0x55) returned 0x55
[0300.392] GetNearestColor (hdc=0x580107bc, color=0x0) returned 0x0
[0300.392] GetNearestColor (hdc=0x580107bc, color=0x55) returned 0x55
[0300.392] GetNearestColor (hdc=0x580107bc, color=0x0) returned 0x0
[0300.392] GetNearestColor (hdc=0x580107bc, color=0x8080ff) returned 0x8080ff
[0300.392] GetNearestColor (hdc=0x580107bc, color=0x7373e5) returned 0x7373e5
[0300.392] GetNearestColor (hdc=0x580107bc, color=0xe5) returned 0xe5
[0300.392] GetNearestColor (hdc=0x580107bc, color=0x0) returned 0x0
[0300.393] RestoreDC (hdc=0x580107bc, nSavedDC=-1) returned 1
[0300.393] GdipReleaseDC (graphics=0x5d92c30, hdc=0x580107bc) returned 0x0
[0300.393] IsAppThemed () returned 0x1
[0300.393] GetThemeAppProperties () returned 0x3
[0300.393] GetThemeAppProperties () returned 0x3
[0300.393] IsAppThemed () returned 0x1
[0300.393] GetThemeAppProperties () returned 0x3
[0300.393] GetThemeAppProperties () returned 0x3
[0300.393] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0300.393] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x24814f4 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0300.393] IsAppThemed () returned 0x1
[0300.393] GetThemeAppProperties () returned 0x3
[0300.393] GetThemeAppProperties () returned 0x3
[0300.393] IsAppThemed () returned 0x1
[0300.393] GetThemeAppProperties () returned 0x3
[0300.394] GetThemeAppProperties () returned 0x3
[0300.394] GetFocus () returned 0xf02b8
[0300.394] IsAppThemed () returned 0x1
[0300.394] GetThemeAppProperties () returned 0x3
[0300.394] GetThemeAppProperties () returned 0x3
[0300.394] IsAppThemed () returned 0x1
[0300.394] GetThemeAppProperties () returned 0x3
[0300.394] GetThemeAppProperties () returned 0x3
[0300.394] IsThemePartDefined () returned 0x1
[0300.394] IsAppThemed () returned 0x1
[0300.394] GetThemeAppProperties () returned 0x3
[0300.394] GetThemeAppProperties () returned 0x3
[0300.394] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0300.394] IsAppThemed () returned 0x1
[0300.394] GetThemeAppProperties () returned 0x3
[0300.394] GetThemeAppProperties () returned 0x3
[0300.394] IsAppThemed () returned 0x1
[0300.394] GetThemeAppProperties () returned 0x3
[0300.394] GetThemeAppProperties () returned 0x3
[0300.394] IsThemePartDefined () returned 0x1
[0300.394] GdipCreateRegion (region=0x53de78) returned 0x0
[0300.394] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.394] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0300.394] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.394] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0300.394] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0300.395] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0300.395] LocalFree (hMem=0x89eee8) returned 0x0
[0300.395] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0300.395] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0300.395] LocalFree (hMem=0x89ea88) returned 0x0
[0300.395] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.395] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0300.395] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0300.395] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0300.395] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.395] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0300.395] GetCurrentObject (hdc=0x580107bc, type=0x1) returned 0xb00017
[0300.395] GetCurrentObject (hdc=0x580107bc, type=0x2) returned 0x900010
[0300.395] GetCurrentObject (hdc=0x580107bc, type=0x7) returned 0x1e0507b9
[0300.395] GetCurrentObject (hdc=0x580107bc, type=0x6) returned 0x8a01c2
[0300.395] SaveDC (hdc=0x580107bc) returned 1
[0300.395] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb5040798
[0300.395] GetClipRgn (hdc=0x580107bc, hrgn=0xb5040798) returned 0
[0300.395] SelectClipRgn (hdc=0x580107bc, hrgn=0xc404053e) returned 2
[0300.396] DeleteObject (ho=0xb5040798) returned 1
[0300.396] DeleteObject (ho=0xc404053e) returned 1
[0300.396] OffsetViewportOrgEx (in: hdc=0x580107bc, x=0, y=0, lppt=0x2481ba4 | out: lppt=0x2481ba4) returned 1
[0300.396] DrawThemeParentBackground () returned 0x0
[0300.411] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0300.412] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0300.412] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0300.412] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0300.412] GetSystemMetrics (nIndex=42) returned 0
[0300.412] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0300.412] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0300.412] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0300.412] GetCurrentObject (hdc=0x580107bc, type=0x1) returned 0xb00017
[0300.412] GetCurrentObject (hdc=0x580107bc, type=0x2) returned 0x900010
[0300.412] GetCurrentObject (hdc=0x580107bc, type=0x7) returned 0x1e0507b9
[0300.412] GetCurrentObject (hdc=0x580107bc, type=0x6) returned 0x8a01c2
[0300.413] SaveDC (hdc=0x580107bc) returned 2
[0300.413] GetNearestColor (hdc=0x580107bc, color=0xff) returned 0xff
[0300.413] CreateSolidBrush (color=0xff) returned 0x8f10078d
[0300.413] FillRect (hDC=0x580107bc, lprc=0x53d8d8, hbr=0x8f10078d) returned 1
[0300.413] DeleteObject (ho=0x8f10078d) returned 1
[0300.413] RestoreDC (hdc=0x580107bc, nSavedDC=-1) returned 1
[0300.413] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0300.413] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0300.413] GetSystemMetrics (nIndex=42) returned 0
[0300.413] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0300.413] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0300.413] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0300.413] GetCurrentObject (hdc=0x580107bc, type=0x1) returned 0xb00017
[0300.413] GetCurrentObject (hdc=0x580107bc, type=0x2) returned 0x900010
[0300.414] GetCurrentObject (hdc=0x580107bc, type=0x7) returned 0x1e0507b9
[0300.414] GetCurrentObject (hdc=0x580107bc, type=0x6) returned 0x8a01c2
[0300.414] SaveDC (hdc=0x580107bc) returned 2
[0300.414] GetNearestColor (hdc=0x580107bc, color=0xff) returned 0xff
[0300.414] CreateSolidBrush (color=0xff) returned 0x9010078d
[0300.414] FillRect (hDC=0x580107bc, lprc=0x53d878, hbr=0x9010078d) returned 1
[0300.414] DeleteObject (ho=0x9010078d) returned 1
[0300.414] RestoreDC (hdc=0x580107bc, nSavedDC=-1) returned 1
[0300.414] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0300.414] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0300.414] GetSystemMetrics (nIndex=42) returned 0
[0300.414] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0300.414] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0300.414] RestoreDC (hdc=0x580107bc, nSavedDC=-1) returned 1
[0300.414] GdipReleaseDC (graphics=0x5d92c30, hdc=0x580107bc) returned 0x0
[0300.415] IsAppThemed () returned 0x1
[0300.415] GetThemeAppProperties () returned 0x3
[0300.415] GetThemeAppProperties () returned 0x3
[0300.415] IsAppThemed () returned 0x1
[0300.415] GetThemeAppProperties () returned 0x3
[0300.415] GetThemeAppProperties () returned 0x3
[0300.415] IsThemePartDefined () returned 0x1
[0300.415] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0300.415] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.415] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0300.415] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.415] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0300.415] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0300.416] LocalFree (hMem=0x89ea88) returned 0x0
[0300.416] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0300.416] LocalFree (hMem=0x89ea88) returned 0x0
[0300.416] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.416] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0300.416] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0300.416] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0300.416] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.416] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0300.416] GetCurrentObject (hdc=0x580107bc, type=0x1) returned 0xb00017
[0300.416] GetCurrentObject (hdc=0x580107bc, type=0x2) returned 0x900010
[0300.416] GetCurrentObject (hdc=0x580107bc, type=0x7) returned 0x1e0507b9
[0300.416] GetCurrentObject (hdc=0x580107bc, type=0x6) returned 0x8a01c2
[0300.416] SaveDC (hdc=0x580107bc) returned 1
[0300.416] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc504053e
[0300.416] GetClipRgn (hdc=0x580107bc, hrgn=0xc504053e) returned 0
[0300.417] SelectClipRgn (hdc=0x580107bc, hrgn=0xb7040798) returned 2
[0300.417] DeleteObject (ho=0xc504053e) returned 1
[0300.417] DeleteObject (ho=0xb7040798) returned 1
[0300.417] OffsetViewportOrgEx (in: hdc=0x580107bc, x=0, y=0, lppt=0x2482408 | out: lppt=0x2482408) returned 1
[0300.417] IsAppThemed () returned 0x1
[0300.417] GetThemeAppProperties () returned 0x3
[0300.417] GetThemeAppProperties () returned 0x3
[0300.417] DrawThemeBackground () returned 0x0
[0300.417] RestoreDC (hdc=0x580107bc, nSavedDC=-1) returned 1
[0300.417] GdipReleaseDC (graphics=0x5d92c30, hdc=0x580107bc) returned 0x0
[0300.417] GdipCreateRegion (region=0x53de00) returned 0x0
[0300.417] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.417] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0300.417] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.417] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0300.417] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0300.417] LocalFree (hMem=0x89ee08) returned 0x0
[0300.417] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0300.418] LocalFree (hMem=0x89ea88) returned 0x0
[0300.418] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.418] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0300.418] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0300.418] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0300.418] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.418] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0300.418] GetCurrentObject (hdc=0x580107bc, type=0x1) returned 0xb00017
[0300.418] GetCurrentObject (hdc=0x580107bc, type=0x2) returned 0x900010
[0300.418] GetCurrentObject (hdc=0x580107bc, type=0x7) returned 0x1e0507b9
[0300.418] GetCurrentObject (hdc=0x580107bc, type=0x6) returned 0x8a01c2
[0300.418] SaveDC (hdc=0x580107bc) returned 1
[0300.418] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb8040798
[0300.418] GetClipRgn (hdc=0x580107bc, hrgn=0xb8040798) returned 0
[0300.418] SelectClipRgn (hdc=0x580107bc, hrgn=0xc604053e) returned 2
[0300.418] DeleteObject (ho=0xb8040798) returned 1
[0300.418] DeleteObject (ho=0xc604053e) returned 1
[0300.418] OffsetViewportOrgEx (in: hdc=0x580107bc, x=0, y=0, lppt=0x24826dc | out: lppt=0x24826dc) returned 1
[0300.418] IsAppThemed () returned 0x1
[0300.418] GetThemeAppProperties () returned 0x3
[0300.419] GetThemeAppProperties () returned 0x3
[0300.419] GetThemeBackgroundContentRect () returned 0x0
[0300.419] RestoreDC (hdc=0x580107bc, nSavedDC=-1) returned 1
[0300.419] GdipReleaseDC (graphics=0x5d92c30, hdc=0x580107bc) returned 0x0
[0300.419] IsAppThemed () returned 0x1
[0300.419] GetThemeAppProperties () returned 0x3
[0300.419] GetThemeAppProperties () returned 0x3
[0300.419] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0300.419] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0300.419] GetCurrentObject (hdc=0x580107bc, type=0x1) returned 0xb00017
[0300.419] GetCurrentObject (hdc=0x580107bc, type=0x2) returned 0x900010
[0300.419] GetCurrentObject (hdc=0x580107bc, type=0x7) returned 0x1e0507b9
[0300.419] GetCurrentObject (hdc=0x580107bc, type=0x6) returned 0x8a01c2
[0300.419] SaveDC (hdc=0x580107bc) returned 1
[0300.419] GetTextAlign (hdc=0x580107bc) returned 0x0
[0300.419] GetTextColor (hdc=0x580107bc) returned 0x0
[0300.419] GetCurrentObject (hdc=0x580107bc, type=0x6) returned 0x8a01c2
[0300.420] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0300.420] SelectObject (hdc=0x580107bc, h=0x450a0799) returned 0x8a01c2
[0300.420] GetBkMode (hdc=0x580107bc) returned 2
[0300.420] SetBkMode (hdc=0x580107bc, mode=1) returned 2
[0300.420] DrawTextExW (in: hdc=0x580107bc, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x2482a7c | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0300.420] DrawTextExW (in: hdc=0x580107bc, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x2482a7c | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0300.421] RestoreDC (hdc=0x580107bc, nSavedDC=-1) returned 1
[0300.421] GdipReleaseDC (graphics=0x5d92c30, hdc=0x580107bc) returned 0x0
[0300.421] GetFocus () returned 0xf02b8
[0300.421] IsAppThemed () returned 0x1
[0300.421] GetThemeAppProperties () returned 0x3
[0300.422] GetThemeAppProperties () returned 0x3
[0300.422] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0300.422] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x580107bc, x1=0, y1=0, rop=0xcc0020) returned 1
[0300.422] GdipReleaseDC (graphics=0x5d92c30, hdc=0x580107bc) returned 0x0
[0300.422] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0300.422] SelectObject (hdc=0x580107bc, h=0x85000f) returned 0x1e0507b9
[0300.422] DeleteDC (hdc=0x580107bc) returned 1
[0300.422] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0300.422] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0300.764] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0300.764] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0300.764] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x2600ea) returned 0x1
[0300.766] GetFocus () returned 0x2600ea
[0300.766] GetAncestor (hwnd=0x2600ea, gaFlags=0x1) returned 0x10010
[0300.766] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0300.766] SetFocus (hWnd=0x202c6) returned 0x0
[0300.769] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0300.770] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0300.770] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0300.771] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0300.771] GetFocus () returned 0x70036
[0300.771] SetFocus (hWnd=0x202c6) returned 0x0
[0300.801] IsWindow (hWnd=0x70036) returned 1
[0300.801] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0300.801] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0300.801] IsWindow (hWnd=0x70036) returned 1
[0300.801] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0300.802] IsWindow (hWnd=0x202c6) returned 1
[0300.802] SetFocus (hWnd=0x202c6) returned 0x70036
[0300.802] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0300.810] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0300.812] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0300.814] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0300.814] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0300.814] GetStockObject (i=5) returned 0x900015
[0300.814] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0300.814] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8e9c60) returned 0x7
[0300.814] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0300.814] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0300.814] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0300.814] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0300.816] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0300.816] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0300.816] GetFocus () returned 0x202c6
[0300.816] GetCapture () returned 0x0
[0300.816] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.816] IsWindowUnicode (hWnd=0x202c6) returned 1
[0300.816] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.817] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.817] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.817] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.817] IsWindowUnicode (hWnd=0x202c6) returned 1
[0300.817] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.817] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.817] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.818] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0300.818] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0300.818] CreateCompatibleDC (hdc=0x60100ce) returned 0xd7010527
[0300.818] SelectObject (hdc=0xd7010527, h=0x1e0507b9) returned 0x85000f
[0300.818] GdipCreateFromHDC (hdc=0xd7010527, graphics=0x53e958) returned 0x0
[0300.821] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0300.821] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0300.821] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0300.821] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.821] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0300.821] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0300.821] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0300.821] LocalFree (hMem=0x89eee8) returned 0x0
[0300.821] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.821] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0300.821] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.821] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0300.821] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0300.821] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa5b0dbd) returned 0x0
[0300.821] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.822] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0300.822] GetCurrentObject (hdc=0xd7010527, type=0x1) returned 0xb00017
[0300.822] GetCurrentObject (hdc=0xd7010527, type=0x2) returned 0x900010
[0300.822] GetCurrentObject (hdc=0xd7010527, type=0x7) returned 0x1e0507b9
[0300.822] GetCurrentObject (hdc=0xd7010527, type=0x6) returned 0x8a01c2
[0300.822] SaveDC (hdc=0xd7010527) returned 1
[0300.822] GetNearestColor (hdc=0xd7010527, color=0xff) returned 0xff
[0300.822] GetNearestColor (hdc=0xd7010527, color=0x55) returned 0x55
[0300.822] GetNearestColor (hdc=0xd7010527, color=0x0) returned 0x0
[0300.822] GetNearestColor (hdc=0xd7010527, color=0x55) returned 0x55
[0300.822] GetNearestColor (hdc=0xd7010527, color=0x0) returned 0x0
[0300.822] GetNearestColor (hdc=0xd7010527, color=0x8080ff) returned 0x8080ff
[0300.822] GetNearestColor (hdc=0xd7010527, color=0x7373e5) returned 0x7373e5
[0300.822] GetNearestColor (hdc=0xd7010527, color=0xe5) returned 0xe5
[0300.823] GetNearestColor (hdc=0xd7010527, color=0x0) returned 0x0
[0300.823] RestoreDC (hdc=0xd7010527, nSavedDC=-1) returned 1
[0300.823] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010527) returned 0x0
[0300.823] IsAppThemed () returned 0x1
[0300.823] GetThemeAppProperties () returned 0x3
[0300.823] GetThemeAppProperties () returned 0x3
[0300.823] IsAppThemed () returned 0x1
[0300.823] GetThemeAppProperties () returned 0x3
[0300.823] GetThemeAppProperties () returned 0x3
[0300.823] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x24832d8 | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0300.823] IsAppThemed () returned 0x1
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] IsAppThemed () returned 0x1
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] GetFocus () returned 0x202c6
[0300.824] IsAppThemed () returned 0x1
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] IsAppThemed () returned 0x1
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] IsThemePartDefined () returned 0x1
[0300.824] IsAppThemed () returned 0x1
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0300.824] IsAppThemed () returned 0x1
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] IsAppThemed () returned 0x1
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] GetThemeAppProperties () returned 0x3
[0300.824] IsThemePartDefined () returned 0x1
[0300.824] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0300.824] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.824] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0300.825] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.825] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0300.825] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0300.825] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0300.825] LocalFree (hMem=0x89ec80) returned 0x0
[0300.825] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0300.825] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0300.825] LocalFree (hMem=0x89ec80) returned 0x0
[0300.825] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.825] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0300.825] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0300.825] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0300.825] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.825] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0300.825] GetCurrentObject (hdc=0xd7010527, type=0x1) returned 0xb00017
[0300.825] GetCurrentObject (hdc=0xd7010527, type=0x2) returned 0x900010
[0300.825] GetCurrentObject (hdc=0xd7010527, type=0x7) returned 0x1e0507b9
[0300.825] GetCurrentObject (hdc=0xd7010527, type=0x6) returned 0x8a01c2
[0300.825] SaveDC (hdc=0xd7010527) returned 1
[0300.825] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcc04053e
[0300.826] GetClipRgn (hdc=0xd7010527, hrgn=0xcc04053e) returned 0
[0300.826] SelectClipRgn (hdc=0xd7010527, hrgn=0xc8040798) returned 2
[0300.826] DeleteObject (ho=0xcc04053e) returned 1
[0300.826] DeleteObject (ho=0xc8040798) returned 1
[0300.826] OffsetViewportOrgEx (in: hdc=0xd7010527, x=0, y=0, lppt=0x2483988 | out: lppt=0x2483988) returned 1
[0300.826] DrawThemeParentBackground () returned 0x0
[0300.826] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0300.826] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0300.826] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0300.826] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0300.826] GetSystemMetrics (nIndex=42) returned 0
[0300.826] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0300.826] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0300.826] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0300.826] GetCurrentObject (hdc=0xd7010527, type=0x1) returned 0xb00017
[0300.826] GetCurrentObject (hdc=0xd7010527, type=0x2) returned 0x900010
[0300.826] GetCurrentObject (hdc=0xd7010527, type=0x7) returned 0x1e0507b9
[0300.826] GetCurrentObject (hdc=0xd7010527, type=0x6) returned 0x8a01c2
[0300.826] SaveDC (hdc=0xd7010527) returned 2
[0300.827] GetNearestColor (hdc=0xd7010527, color=0xff) returned 0xff
[0300.827] CreateSolidBrush (color=0xff) returned 0x9210078d
[0300.827] FillRect (hDC=0xd7010527, lprc=0x53e128, hbr=0x9210078d) returned 1
[0300.827] DeleteObject (ho=0x9210078d) returned 1
[0300.827] RestoreDC (hdc=0xd7010527, nSavedDC=-1) returned 1
[0300.827] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0300.827] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0300.827] GetSystemMetrics (nIndex=42) returned 0
[0300.827] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0300.827] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0300.827] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0300.827] GetCurrentObject (hdc=0xd7010527, type=0x1) returned 0xb00017
[0300.827] GetCurrentObject (hdc=0xd7010527, type=0x2) returned 0x900010
[0300.827] GetCurrentObject (hdc=0xd7010527, type=0x7) returned 0x1e0507b9
[0300.827] GetCurrentObject (hdc=0xd7010527, type=0x6) returned 0x8a01c2
[0300.827] SaveDC (hdc=0xd7010527) returned 2
[0300.827] GetNearestColor (hdc=0xd7010527, color=0xff) returned 0xff
[0300.828] CreateSolidBrush (color=0xff) returned 0x9310078d
[0300.828] FillRect (hDC=0xd7010527, lprc=0x53e0c8, hbr=0x9310078d) returned 1
[0300.828] DeleteObject (ho=0x9310078d) returned 1
[0300.828] RestoreDC (hdc=0xd7010527, nSavedDC=-1) returned 1
[0300.828] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0300.828] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0300.828] GetSystemMetrics (nIndex=42) returned 0
[0300.828] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0300.828] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0300.828] RestoreDC (hdc=0xd7010527, nSavedDC=-1) returned 1
[0300.828] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010527) returned 0x0
[0300.828] IsAppThemed () returned 0x1
[0300.828] GetThemeAppProperties () returned 0x3
[0300.828] GetThemeAppProperties () returned 0x3
[0300.828] IsAppThemed () returned 0x1
[0300.828] GetThemeAppProperties () returned 0x3
[0300.828] GetThemeAppProperties () returned 0x3
[0300.828] IsThemePartDefined () returned 0x1
[0300.828] GdipCreateRegion (region=0x53e64c) returned 0x0
[0300.828] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.829] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0300.829] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0300.829] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0300.829] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0300.829] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0300.829] LocalFree (hMem=0x89eee8) returned 0x0
[0300.829] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0300.829] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0300.829] LocalFree (hMem=0x89ee40) returned 0x0
[0300.829] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0300.829] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0300.829] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0300.829] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0300.829] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.829] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0300.829] GetCurrentObject (hdc=0xd7010527, type=0x1) returned 0xb00017
[0300.829] GetCurrentObject (hdc=0xd7010527, type=0x2) returned 0x900010
[0300.829] GetCurrentObject (hdc=0xd7010527, type=0x7) returned 0x1e0507b9
[0300.829] GetCurrentObject (hdc=0xd7010527, type=0x6) returned 0x8a01c2
[0300.829] SaveDC (hdc=0xd7010527) returned 1
[0300.830] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc9040798
[0300.830] GetClipRgn (hdc=0xd7010527, hrgn=0xc9040798) returned 0
[0300.830] SelectClipRgn (hdc=0xd7010527, hrgn=0xce04053e) returned 2
[0300.830] DeleteObject (ho=0xc9040798) returned 1
[0300.830] DeleteObject (ho=0xce04053e) returned 1
[0300.830] OffsetViewportOrgEx (in: hdc=0xd7010527, x=0, y=0, lppt=0x24841ec | out: lppt=0x24841ec) returned 1
[0300.830] IsAppThemed () returned 0x1
[0300.830] GetThemeAppProperties () returned 0x3
[0300.830] GetThemeAppProperties () returned 0x3
[0300.830] DrawThemeBackground () returned 0x0
[0300.830] RestoreDC (hdc=0xd7010527, nSavedDC=-1) returned 1
[0300.830] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010527) returned 0x0
[0300.830] GdipCreateRegion (region=0x53e650) returned 0x0
[0300.830] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0300.830] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0300.830] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0300.830] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0300.830] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0300.831] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0300.831] LocalFree (hMem=0x89ee40) returned 0x0
[0300.831] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0300.831] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0300.831] LocalFree (hMem=0x89ea88) returned 0x0
[0300.831] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0300.831] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0300.831] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0300.831] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0300.831] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0300.831] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0300.831] GetCurrentObject (hdc=0xd7010527, type=0x1) returned 0xb00017
[0300.831] GetCurrentObject (hdc=0xd7010527, type=0x2) returned 0x900010
[0300.831] GetCurrentObject (hdc=0xd7010527, type=0x7) returned 0x1e0507b9
[0300.831] GetCurrentObject (hdc=0xd7010527, type=0x6) returned 0x8a01c2
[0300.831] SaveDC (hdc=0xd7010527) returned 1
[0300.831] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcf04053e
[0300.832] GetClipRgn (hdc=0xd7010527, hrgn=0xcf04053e) returned 0
[0300.832] SelectClipRgn (hdc=0xd7010527, hrgn=0xca040798) returned 2
[0300.832] DeleteObject (ho=0xcf04053e) returned 1
[0300.832] DeleteObject (ho=0xca040798) returned 1
[0300.832] OffsetViewportOrgEx (in: hdc=0xd7010527, x=0, y=0, lppt=0x24844c0 | out: lppt=0x24844c0) returned 1
[0300.832] IsAppThemed () returned 0x1
[0300.832] GetThemeAppProperties () returned 0x3
[0300.832] GetThemeAppProperties () returned 0x3
[0300.832] GetThemeBackgroundContentRect () returned 0x0
[0300.832] RestoreDC (hdc=0xd7010527, nSavedDC=-1) returned 1
[0300.832] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010527) returned 0x0
[0300.832] IsAppThemed () returned 0x1
[0300.832] GetThemeAppProperties () returned 0x3
[0300.832] GetThemeAppProperties () returned 0x3
[0300.832] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0300.832] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0300.832] GetCurrentObject (hdc=0xd7010527, type=0x1) returned 0xb00017
[0300.832] GetCurrentObject (hdc=0xd7010527, type=0x2) returned 0x900010
[0300.832] GetCurrentObject (hdc=0xd7010527, type=0x7) returned 0x1e0507b9
[0300.832] GetCurrentObject (hdc=0xd7010527, type=0x6) returned 0x8a01c2
[0300.833] SaveDC (hdc=0xd7010527) returned 1
[0300.833] GetTextAlign (hdc=0xd7010527) returned 0x0
[0300.833] GetTextColor (hdc=0xd7010527) returned 0x0
[0300.833] GetCurrentObject (hdc=0xd7010527, type=0x6) returned 0x8a01c2
[0300.833] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0300.833] SelectObject (hdc=0xd7010527, h=0x450a0799) returned 0x8a01c2
[0300.833] GetBkMode (hdc=0xd7010527) returned 2
[0300.833] SetBkMode (hdc=0xd7010527, mode=1) returned 2
[0300.833] DrawTextExW (in: hdc=0xd7010527, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x2484860 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0300.833] DrawTextExW (in: hdc=0xd7010527, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x2484860 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0300.834] RestoreDC (hdc=0xd7010527, nSavedDC=-1) returned 1
[0300.834] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010527) returned 0x0
[0300.834] GetFocus () returned 0x202c6
[0300.834] IsAppThemed () returned 0x1
[0300.834] GetThemeAppProperties () returned 0x3
[0300.834] GetThemeAppProperties () returned 0x3
[0300.834] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0300.834] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xd7010527, x1=0, y1=0, rop=0xcc0020) returned 1
[0300.835] GdipReleaseDC (graphics=0x5d92c30, hdc=0xd7010527) returned 0x0
[0300.835] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0300.835] SelectObject (hdc=0xd7010527, h=0x85000f) returned 0x1e0507b9
[0300.835] DeleteDC (hdc=0xd7010527) returned 1
[0300.835] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0300.835] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0300.835] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.835] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.835] WaitMessage () returned 1
[0300.838] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.838] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.838] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.838] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.838] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.839] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.839] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.839] WaitMessage () returned 1
[0300.854] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.854] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.855] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.855] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.855] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.855] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.855] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.855] WaitMessage () returned 1
[0300.856] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.857] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.857] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.857] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.857] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.858] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.858] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.858] WaitMessage () returned 1
[0300.858] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.858] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.858] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.859] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.859] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.860] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.860] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.860] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.860] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.860] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.860] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.860] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.860] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.860] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.860] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.860] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.861] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.861] WaitMessage () returned 1
[0300.861] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.861] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.861] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.861] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.861] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.862] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.863] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.863] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.863] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.863] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.863] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.863] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.863] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.863] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.863] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.863] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.864] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.864] WaitMessage () returned 1
[0300.864] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.864] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.864] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.864] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.864] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.868] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.869] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.869] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.869] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.869] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.869] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.869] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.869] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.869] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.869] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.869] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.870] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.870] WaitMessage () returned 1
[0300.871] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.872] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.872] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.872] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.872] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.873] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.873] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.873] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.873] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.873] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.873] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.873] IsWindowUnicode (hWnd=0x102dc) returned 1
[0300.874] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0300.874] TranslateMessage (lpMsg=0x53eef8) returned 0
[0300.874] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0300.874] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.874] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0300.874] WaitMessage () returned 1
[0301.115] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0301.116] IsWindowUnicode (hWnd=0x202d0) returned 1
[0301.116] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0301.116] TranslateMessage (lpMsg=0x53eef8) returned 0
[0301.116] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0301.116] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0301.116] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0301.116] WaitMessage () returned 1
[0301.428] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0301.428] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0301.428] TranslateMessage (lpMsg=0x53eef8) returned 0
[0301.428] DispatchMessageA (lpMsg=0x53eef8) returned 0x7e7a
[0301.429] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0301.429] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0301.429] WaitMessage () returned 1
[0302.444] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.444] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.444] TranslateMessage (lpMsg=0x53eef8) returned 0
[0302.444] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0302.445] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0302.445] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0302.445] WaitMessage () returned 1
[0302.564] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.565] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a0025f) returned 0x1
[0302.565] IsWindowUnicode (hWnd=0x202c6) returned 1
[0302.565] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.565] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a0025f) returned 0x1
[0302.565] SetCursor (hCursor=0x10003) returned 0x10003
[0302.565] TranslateMessage (lpMsg=0x53eef8) returned 0
[0302.565] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0302.565] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0302.566] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0302.566] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0302.566] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0302.566] GetKeyState (nVirtKey=1) returned 1
[0302.566] GetKeyState (nVirtKey=2) returned 0
[0302.566] GetKeyState (nVirtKey=4) returned 0
[0302.566] GetKeyState (nVirtKey=5) returned 0
[0302.566] GetKeyState (nVirtKey=6) returned 0
[0302.566] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.566] IsWindowUnicode (hWnd=0x202c6) returned 1
[0302.566] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.566] TranslateMessage (lpMsg=0x53eef8) returned 0
[0302.566] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0302.566] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0x60100ce
[0302.567] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0302.567] CreateCompatibleDC (hdc=0x60100ce) returned 0xf7010790
[0302.567] SelectObject (hdc=0xf7010790, h=0x1e0507b9) returned 0x85000f
[0302.567] GdipCreateFromHDC (hdc=0xf7010790, graphics=0x53e958) returned 0x0
[0302.567] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0302.567] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0302.567] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0302.567] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0302.567] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0302.568] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0302.568] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0302.568] LocalFree (hMem=0x89ec80) returned 0x0
[0302.568] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0302.568] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0302.568] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0302.568] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0302.568] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0302.568] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa590dbd) returned 0x0
[0302.568] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0302.568] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0302.569] GetCurrentObject (hdc=0xf7010790, type=0x1) returned 0xb00017
[0302.569] GetCurrentObject (hdc=0xf7010790, type=0x2) returned 0x900010
[0302.569] GetCurrentObject (hdc=0xf7010790, type=0x7) returned 0x1e0507b9
[0302.569] GetCurrentObject (hdc=0xf7010790, type=0x6) returned 0x8a01c2
[0302.569] SaveDC (hdc=0xf7010790) returned 1
[0302.569] GetNearestColor (hdc=0xf7010790, color=0xff) returned 0xff
[0302.569] GetNearestColor (hdc=0xf7010790, color=0x55) returned 0x55
[0302.569] GetNearestColor (hdc=0xf7010790, color=0x0) returned 0x0
[0302.569] GetNearestColor (hdc=0xf7010790, color=0x55) returned 0x55
[0302.569] GetNearestColor (hdc=0xf7010790, color=0x0) returned 0x0
[0302.569] GetNearestColor (hdc=0xf7010790, color=0x8080ff) returned 0x8080ff
[0302.569] GetNearestColor (hdc=0xf7010790, color=0x7373e5) returned 0x7373e5
[0302.569] GetNearestColor (hdc=0xf7010790, color=0xe5) returned 0xe5
[0302.569] GetNearestColor (hdc=0xf7010790, color=0x0) returned 0x0
[0302.570] RestoreDC (hdc=0xf7010790, nSavedDC=-1) returned 1
[0302.570] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf7010790) returned 0x0
[0302.570] IsAppThemed () returned 0x1
[0302.570] GetThemeAppProperties () returned 0x3
[0302.570] GetThemeAppProperties () returned 0x3
[0302.570] IsAppThemed () returned 0x1
[0302.570] GetThemeAppProperties () returned 0x3
[0302.570] GetThemeAppProperties () returned 0x3
[0302.570] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x24851f4 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0302.571] IsAppThemed () returned 0x1
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] IsAppThemed () returned 0x1
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] IsAppThemed () returned 0x1
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] IsAppThemed () returned 0x1
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] IsThemePartDefined () returned 0x1
[0302.571] IsAppThemed () returned 0x1
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0302.571] IsAppThemed () returned 0x1
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] IsAppThemed () returned 0x1
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] GetThemeAppProperties () returned 0x3
[0302.571] IsThemePartDefined () returned 0x1
[0302.572] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0302.572] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0302.572] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0302.572] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0302.572] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0302.572] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0302.572] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0302.572] LocalFree (hMem=0x89ee08) returned 0x0
[0302.572] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0302.572] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0302.572] LocalFree (hMem=0x89ea88) returned 0x0
[0302.572] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0302.572] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0302.572] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0302.572] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0302.572] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0302.572] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0302.572] GetCurrentObject (hdc=0xf7010790, type=0x1) returned 0xb00017
[0302.572] GetCurrentObject (hdc=0xf7010790, type=0x2) returned 0x900010
[0302.572] GetCurrentObject (hdc=0xf7010790, type=0x7) returned 0x1e0507b9
[0302.572] GetCurrentObject (hdc=0xf7010790, type=0x6) returned 0x8a01c2
[0302.573] SaveDC (hdc=0xf7010790) returned 1
[0302.573] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcb040798
[0302.573] GetClipRgn (hdc=0xf7010790, hrgn=0xcb040798) returned 0
[0302.573] SelectClipRgn (hdc=0xf7010790, hrgn=0xd304053e) returned 2
[0302.573] DeleteObject (ho=0xcb040798) returned 1
[0302.573] DeleteObject (ho=0xd304053e) returned 1
[0302.573] OffsetViewportOrgEx (in: hdc=0xf7010790, x=0, y=0, lppt=0x24858a4 | out: lppt=0x24858a4) returned 1
[0302.573] DrawThemeParentBackground () returned 0x0
[0302.573] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0302.573] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0302.573] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0302.573] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0302.574] GetSystemMetrics (nIndex=42) returned 0
[0302.574] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0302.574] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0302.574] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0302.574] GetCurrentObject (hdc=0xf7010790, type=0x1) returned 0xb00017
[0302.574] GetCurrentObject (hdc=0xf7010790, type=0x2) returned 0x900010
[0302.574] GetCurrentObject (hdc=0xf7010790, type=0x7) returned 0x1e0507b9
[0302.574] GetCurrentObject (hdc=0xf7010790, type=0x6) returned 0x8a01c2
[0302.574] SaveDC (hdc=0xf7010790) returned 2
[0302.574] GetNearestColor (hdc=0xf7010790, color=0xff) returned 0xff
[0302.574] CreateSolidBrush (color=0xff) returned 0x9410078d
[0302.574] FillRect (hDC=0xf7010790, lprc=0x53e120, hbr=0x9410078d) returned 1
[0302.574] DeleteObject (ho=0x9410078d) returned 1
[0302.574] RestoreDC (hdc=0xf7010790, nSavedDC=-1) returned 1
[0302.574] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0302.574] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0302.574] GetSystemMetrics (nIndex=42) returned 0
[0302.575] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0302.575] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0302.575] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0302.575] GetCurrentObject (hdc=0xf7010790, type=0x1) returned 0xb00017
[0302.575] GetCurrentObject (hdc=0xf7010790, type=0x2) returned 0x900010
[0302.575] GetCurrentObject (hdc=0xf7010790, type=0x7) returned 0x1e0507b9
[0302.575] GetCurrentObject (hdc=0xf7010790, type=0x6) returned 0x8a01c2
[0302.575] SaveDC (hdc=0xf7010790) returned 2
[0302.575] GetNearestColor (hdc=0xf7010790, color=0xff) returned 0xff
[0302.575] CreateSolidBrush (color=0xff) returned 0x9510078d
[0302.575] FillRect (hDC=0xf7010790, lprc=0x53e0c0, hbr=0x9510078d) returned 1
[0302.575] DeleteObject (ho=0x9510078d) returned 1
[0302.575] RestoreDC (hdc=0xf7010790, nSavedDC=-1) returned 1
[0302.575] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0302.575] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0302.575] GetSystemMetrics (nIndex=42) returned 0
[0302.575] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0302.575] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0302.576] RestoreDC (hdc=0xf7010790, nSavedDC=-1) returned 1
[0302.576] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf7010790) returned 0x0
[0302.576] IsAppThemed () returned 0x1
[0302.576] GetThemeAppProperties () returned 0x3
[0302.576] GetThemeAppProperties () returned 0x3
[0302.576] IsAppThemed () returned 0x1
[0302.576] GetThemeAppProperties () returned 0x3
[0302.576] GetThemeAppProperties () returned 0x3
[0302.576] IsThemePartDefined () returned 0x1
[0302.576] GdipCreateRegion (region=0x53e640) returned 0x0
[0302.576] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0302.576] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0302.576] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0302.576] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0302.576] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0302.576] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0302.576] LocalFree (hMem=0x89ee08) returned 0x0
[0302.576] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0302.576] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0302.576] LocalFree (hMem=0x89ee08) returned 0x0
[0302.576] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0302.577] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0302.577] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0302.577] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0302.577] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0302.577] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0302.577] GetCurrentObject (hdc=0xf7010790, type=0x1) returned 0xb00017
[0302.577] GetCurrentObject (hdc=0xf7010790, type=0x2) returned 0x900010
[0302.577] GetCurrentObject (hdc=0xf7010790, type=0x7) returned 0x1e0507b9
[0302.577] GetCurrentObject (hdc=0xf7010790, type=0x6) returned 0x8a01c2
[0302.577] SaveDC (hdc=0xf7010790) returned 1
[0302.577] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd404053e
[0302.577] GetClipRgn (hdc=0xf7010790, hrgn=0xd404053e) returned 0
[0302.577] SelectClipRgn (hdc=0xf7010790, hrgn=0xcd040798) returned 2
[0302.577] DeleteObject (ho=0xd404053e) returned 1
[0302.577] DeleteObject (ho=0xcd040798) returned 1
[0302.577] OffsetViewportOrgEx (in: hdc=0xf7010790, x=0, y=0, lppt=0x2486108 | out: lppt=0x2486108) returned 1
[0302.577] IsAppThemed () returned 0x1
[0302.577] GetThemeAppProperties () returned 0x3
[0302.577] GetThemeAppProperties () returned 0x3
[0302.577] DrawThemeBackground () returned 0x0
[0302.578] RestoreDC (hdc=0xf7010790, nSavedDC=-1) returned 1
[0302.578] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf7010790) returned 0x0
[0302.578] GdipCreateRegion (region=0x53e644) returned 0x0
[0302.578] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0302.578] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0302.578] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0302.578] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0302.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0302.578] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0302.578] LocalFree (hMem=0x89ee08) returned 0x0
[0302.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0302.578] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0302.578] LocalFree (hMem=0x89ee08) returned 0x0
[0302.578] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0302.578] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0302.578] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0302.578] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0302.578] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0302.579] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0302.579] GetCurrentObject (hdc=0xf7010790, type=0x1) returned 0xb00017
[0302.579] GetCurrentObject (hdc=0xf7010790, type=0x2) returned 0x900010
[0302.579] GetCurrentObject (hdc=0xf7010790, type=0x7) returned 0x1e0507b9
[0302.579] GetCurrentObject (hdc=0xf7010790, type=0x6) returned 0x8a01c2
[0302.579] SaveDC (hdc=0xf7010790) returned 1
[0302.579] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xce040798
[0302.579] GetClipRgn (hdc=0xf7010790, hrgn=0xce040798) returned 0
[0302.579] SelectClipRgn (hdc=0xf7010790, hrgn=0xd504053e) returned 2
[0302.579] DeleteObject (ho=0xce040798) returned 1
[0302.579] DeleteObject (ho=0xd504053e) returned 1
[0302.579] OffsetViewportOrgEx (in: hdc=0xf7010790, x=0, y=0, lppt=0x24863dc | out: lppt=0x24863dc) returned 1
[0302.579] IsAppThemed () returned 0x1
[0302.579] GetThemeAppProperties () returned 0x3
[0302.579] GetThemeAppProperties () returned 0x3
[0302.579] GetThemeBackgroundContentRect () returned 0x0
[0302.579] RestoreDC (hdc=0xf7010790, nSavedDC=-1) returned 1
[0302.579] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf7010790) returned 0x0
[0302.579] IsAppThemed () returned 0x1
[0302.580] GetThemeAppProperties () returned 0x3
[0302.580] GetThemeAppProperties () returned 0x3
[0302.580] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0302.580] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0302.580] GetCurrentObject (hdc=0xf7010790, type=0x1) returned 0xb00017
[0302.580] GetCurrentObject (hdc=0xf7010790, type=0x2) returned 0x900010
[0302.580] GetCurrentObject (hdc=0xf7010790, type=0x7) returned 0x1e0507b9
[0302.580] GetCurrentObject (hdc=0xf7010790, type=0x6) returned 0x8a01c2
[0302.580] SaveDC (hdc=0xf7010790) returned 1
[0302.580] GetTextAlign (hdc=0xf7010790) returned 0x0
[0302.580] GetTextColor (hdc=0xf7010790) returned 0x0
[0302.580] GetCurrentObject (hdc=0xf7010790, type=0x6) returned 0x8a01c2
[0302.580] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0302.580] SelectObject (hdc=0xf7010790, h=0x450a0799) returned 0x8a01c2
[0302.580] GetBkMode (hdc=0xf7010790) returned 2
[0302.580] SetBkMode (hdc=0xf7010790, mode=1) returned 2
[0302.581] DrawTextExW (in: hdc=0xf7010790, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x248677c | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0302.581] DrawTextExW (in: hdc=0xf7010790, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x248677c | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0302.581] RestoreDC (hdc=0xf7010790, nSavedDC=-1) returned 1
[0302.581] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf7010790) returned 0x0
[0302.581] GetFocus () returned 0x202c6
[0302.581] IsAppThemed () returned 0x1
[0302.581] GetThemeAppProperties () returned 0x3
[0302.582] GetThemeAppProperties () returned 0x3
[0302.582] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0302.582] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xf7010790, x1=0, y1=0, rop=0xcc0020) returned 1
[0302.583] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf7010790) returned 0x0
[0302.583] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0302.583] SelectObject (hdc=0xf7010790, h=0x85000f) returned 0x1e0507b9
[0302.583] DeleteDC (hdc=0xf7010790) returned 1
[0302.583] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0302.584] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0302.584] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0302.584] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0302.584] WaitMessage () returned 1
[0302.662] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.662] IsWindowUnicode (hWnd=0x202c6) returned 1
[0302.662] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.662] TranslateMessage (lpMsg=0x53eef8) returned 0
[0302.662] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0302.662] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.662] IsWindowUnicode (hWnd=0x202c6) returned 1
[0302.663] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.663] TranslateMessage (lpMsg=0x53eef8) returned 0
[0302.663] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0302.663] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x18006f) returned 0x0
[0302.663] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0302.663] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0302.663] WaitMessage () returned 1
[0302.793] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.793] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a0025f) returned 0x1
[0302.794] IsWindowUnicode (hWnd=0x202c6) returned 1
[0302.794] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.794] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a0025f) returned 0x1
[0302.794] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0302.794] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x1330209) returned 0x0
[0302.794] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0302.794] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0302.794] SetCursor (hCursor=0x10003) returned 0x10003
[0302.794] TranslateMessage (lpMsg=0x53eef8) returned 0
[0302.794] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0302.795] GetKeyState (nVirtKey=1) returned -128
[0302.795] GetKeyState (nVirtKey=2) returned 0
[0302.795] GetKeyState (nVirtKey=4) returned 0
[0302.795] GetKeyState (nVirtKey=5) returned 0
[0302.795] GetKeyState (nVirtKey=6) returned 0
[0302.795] IsWindowVisible (hWnd=0x202c6) returned 1
[0302.795] IsWindowEnabled (hWnd=0x202c6) returned 1
[0302.795] SetFocus (hWnd=0x202c6) returned 0x202c6
[0302.795] GetFocus () returned 0x202c6
[0302.795] GetFocus () returned 0x202c6
[0302.795] GetFocus () returned 0x202c6
[0302.795] GetKeyState (nVirtKey=1) returned -128
[0302.795] GetKeyState (nVirtKey=2) returned 0
[0302.795] GetKeyState (nVirtKey=4) returned 0
[0302.795] GetKeyState (nVirtKey=5) returned 0
[0302.795] GetKeyState (nVirtKey=6) returned 0
[0302.795] GetCapture () returned 0x0
[0302.795] SetCapture (hWnd=0x202c6) returned 0x0
[0302.795] GetKeyState (nVirtKey=1) returned -128
[0302.795] GetKeyState (nVirtKey=2) returned 0
[0302.795] GetKeyState (nVirtKey=4) returned 0
[0302.795] GetKeyState (nVirtKey=5) returned 0
[0302.795] GetKeyState (nVirtKey=6) returned 0
[0302.795] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0302.796] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0302.796] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.796] IsWindowUnicode (hWnd=0x202c6) returned 1
[0302.796] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0302.796] TranslateMessage (lpMsg=0x53eef8) returned 0
[0302.796] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0302.796] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x2486900, cPoints=0x1 | out: lpPoints=0x2486900) returned 25690608
[0302.796] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0302.796] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0302.796] UpdateWindow (hWnd=0x202c6) returned 1
[0302.796] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0x60100ce
[0302.796] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0302.796] CreateCompatibleDC (hdc=0x60100ce) returned 0xf8010790
[0302.796] SelectObject (hdc=0xf8010790, h=0x1e0507b9) returned 0x85000f
[0302.797] GdipCreateFromHDC (hdc=0xf8010790, graphics=0x53e5f0) returned 0x0
[0302.797] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0302.797] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0302.797] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0302.797] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0302.797] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0302.797] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0302.797] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0302.797] LocalFree (hMem=0x89ea88) returned 0x0
[0302.797] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0302.797] GdipCreateRegion (region=0x53e638) returned 0x0
[0302.797] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0302.797] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0302.797] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0302.798] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa570dbd) returned 0x0
[0302.798] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0302.798] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0302.798] GetCurrentObject (hdc=0xf8010790, type=0x1) returned 0xb00017
[0302.798] GetCurrentObject (hdc=0xf8010790, type=0x2) returned 0x900010
[0302.798] GetCurrentObject (hdc=0xf8010790, type=0x7) returned 0x1e0507b9
[0302.798] GetCurrentObject (hdc=0xf8010790, type=0x6) returned 0x8a01c2
[0302.798] SaveDC (hdc=0xf8010790) returned 1
[0302.798] GetNearestColor (hdc=0xf8010790, color=0xff) returned 0xff
[0302.798] GetNearestColor (hdc=0xf8010790, color=0x55) returned 0x55
[0302.798] GetNearestColor (hdc=0xf8010790, color=0x0) returned 0x0
[0302.798] GetNearestColor (hdc=0xf8010790, color=0x55) returned 0x55
[0302.798] GetNearestColor (hdc=0xf8010790, color=0x0) returned 0x0
[0302.798] GetNearestColor (hdc=0xf8010790, color=0x8080ff) returned 0x8080ff
[0302.798] GetNearestColor (hdc=0xf8010790, color=0x7373e5) returned 0x7373e5
[0302.798] GetNearestColor (hdc=0xf8010790, color=0xe5) returned 0xe5
[0302.799] GetNearestColor (hdc=0xf8010790, color=0x0) returned 0x0
[0302.799] RestoreDC (hdc=0xf8010790, nSavedDC=-1) returned 1
[0302.799] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf8010790) returned 0x0
[0302.799] IsAppThemed () returned 0x1
[0302.799] GetThemeAppProperties () returned 0x3
[0302.799] GetThemeAppProperties () returned 0x3
[0302.799] IsAppThemed () returned 0x1
[0302.799] GetThemeAppProperties () returned 0x3
[0302.799] GetThemeAppProperties () returned 0x3
[0302.799] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x248701c | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0302.800] IsAppThemed () returned 0x1
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] IsAppThemed () returned 0x1
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] IsAppThemed () returned 0x1
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] IsAppThemed () returned 0x1
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] IsThemePartDefined () returned 0x1
[0302.800] IsAppThemed () returned 0x1
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0302.800] IsAppThemed () returned 0x1
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] IsAppThemed () returned 0x1
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] GetThemeAppProperties () returned 0x3
[0302.800] IsThemePartDefined () returned 0x1
[0302.800] GdipCreateRegion (region=0x53e354) returned 0x0
[0302.801] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0302.801] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0302.801] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0302.801] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0302.801] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0302.801] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0302.801] LocalFree (hMem=0x89ea88) returned 0x0
[0302.801] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0302.801] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0302.801] LocalFree (hMem=0x89ea88) returned 0x0
[0302.801] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0302.801] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0302.801] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0302.801] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0302.801] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0302.801] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0302.801] GetCurrentObject (hdc=0xf8010790, type=0x1) returned 0xb00017
[0302.801] GetCurrentObject (hdc=0xf8010790, type=0x2) returned 0x900010
[0302.801] GetCurrentObject (hdc=0xf8010790, type=0x7) returned 0x1e0507b9
[0302.801] GetCurrentObject (hdc=0xf8010790, type=0x6) returned 0x8a01c2
[0302.802] SaveDC (hdc=0xf8010790) returned 1
[0302.802] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd604053e
[0302.802] GetClipRgn (hdc=0xf8010790, hrgn=0xd604053e) returned 0
[0302.802] SelectClipRgn (hdc=0xf8010790, hrgn=0xd2040798) returned 2
[0302.802] DeleteObject (ho=0xd604053e) returned 1
[0302.802] DeleteObject (ho=0xd2040798) returned 1
[0302.802] OffsetViewportOrgEx (in: hdc=0xf8010790, x=0, y=0, lppt=0x24876cc | out: lppt=0x24876cc) returned 1
[0302.802] DrawThemeParentBackground () returned 0x0
[0302.802] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0302.802] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0302.802] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0302.802] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0302.803] GetSystemMetrics (nIndex=42) returned 0
[0302.803] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0302.803] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0302.803] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0302.804] GetCurrentObject (hdc=0xf8010790, type=0x1) returned 0xb00017
[0302.804] GetCurrentObject (hdc=0xf8010790, type=0x2) returned 0x900010
[0302.804] GetCurrentObject (hdc=0xf8010790, type=0x7) returned 0x1e0507b9
[0302.804] GetCurrentObject (hdc=0xf8010790, type=0x6) returned 0x8a01c2
[0302.804] SaveDC (hdc=0xf8010790) returned 2
[0302.804] GetNearestColor (hdc=0xf8010790, color=0xff) returned 0xff
[0302.804] CreateSolidBrush (color=0xff) returned 0x9610078d
[0302.804] FillRect (hDC=0xf8010790, lprc=0x53ddb8, hbr=0x9610078d) returned 1
[0302.804] DeleteObject (ho=0x9610078d) returned 1
[0302.804] RestoreDC (hdc=0xf8010790, nSavedDC=-1) returned 1
[0302.804] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0302.804] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0302.804] GetSystemMetrics (nIndex=42) returned 0
[0302.804] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0302.804] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0302.804] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0302.804] GetCurrentObject (hdc=0xf8010790, type=0x1) returned 0xb00017
[0302.804] GetCurrentObject (hdc=0xf8010790, type=0x2) returned 0x900010
[0302.804] GetCurrentObject (hdc=0xf8010790, type=0x7) returned 0x1e0507b9
[0302.805] GetCurrentObject (hdc=0xf8010790, type=0x6) returned 0x8a01c2
[0302.805] SaveDC (hdc=0xf8010790) returned 2
[0302.805] GetNearestColor (hdc=0xf8010790, color=0xff) returned 0xff
[0302.805] CreateSolidBrush (color=0xff) returned 0x9710078d
[0302.805] FillRect (hDC=0xf8010790, lprc=0x53dd58, hbr=0x9710078d) returned 1
[0302.805] DeleteObject (ho=0x9710078d) returned 1
[0302.805] RestoreDC (hdc=0xf8010790, nSavedDC=-1) returned 1
[0302.805] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0302.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0302.805] GetSystemMetrics (nIndex=42) returned 0
[0302.805] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0302.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0302.805] RestoreDC (hdc=0xf8010790, nSavedDC=-1) returned 1
[0302.805] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf8010790) returned 0x0
[0302.805] IsAppThemed () returned 0x1
[0302.805] GetThemeAppProperties () returned 0x3
[0302.805] GetThemeAppProperties () returned 0x3
[0302.806] IsAppThemed () returned 0x1
[0302.806] GetThemeAppProperties () returned 0x3
[0302.806] GetThemeAppProperties () returned 0x3
[0302.806] IsThemePartDefined () returned 0x1
[0302.806] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0302.806] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0302.806] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0302.806] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0302.806] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0302.806] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0302.806] LocalFree (hMem=0x89ee40) returned 0x0
[0302.806] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0302.806] LocalFree (hMem=0x89ec80) returned 0x0
[0302.806] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0302.806] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0302.806] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0302.806] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0302.806] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0302.806] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0302.806] GetCurrentObject (hdc=0xf8010790, type=0x1) returned 0xb00017
[0302.806] GetCurrentObject (hdc=0xf8010790, type=0x2) returned 0x900010
[0302.806] GetCurrentObject (hdc=0xf8010790, type=0x7) returned 0x1e0507b9
[0302.806] GetCurrentObject (hdc=0xf8010790, type=0x6) returned 0x8a01c2
[0302.807] SaveDC (hdc=0xf8010790) returned 1
[0302.807] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd3040798
[0302.807] GetClipRgn (hdc=0xf8010790, hrgn=0xd3040798) returned 0
[0302.807] SelectClipRgn (hdc=0xf8010790, hrgn=0xd804053e) returned 2
[0302.807] DeleteObject (ho=0xd3040798) returned 1
[0302.807] DeleteObject (ho=0xd804053e) returned 1
[0302.807] OffsetViewportOrgEx (in: hdc=0xf8010790, x=0, y=0, lppt=0x2487f30 | out: lppt=0x2487f30) returned 1
[0302.807] IsAppThemed () returned 0x1
[0302.807] GetThemeAppProperties () returned 0x3
[0302.807] GetThemeAppProperties () returned 0x3
[0302.807] DrawThemeBackground () returned 0x0
[0302.807] RestoreDC (hdc=0xf8010790, nSavedDC=-1) returned 1
[0302.807] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf8010790) returned 0x0
[0302.807] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0302.807] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0302.807] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0302.807] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0302.807] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0302.807] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0302.807] LocalFree (hMem=0x89eee8) returned 0x0
[0302.807] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0302.808] LocalFree (hMem=0x89ea88) returned 0x0
[0302.808] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0302.808] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0302.808] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0302.808] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0302.808] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0302.808] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0302.808] GetCurrentObject (hdc=0xf8010790, type=0x1) returned 0xb00017
[0302.808] GetCurrentObject (hdc=0xf8010790, type=0x2) returned 0x900010
[0302.808] GetCurrentObject (hdc=0xf8010790, type=0x7) returned 0x1e0507b9
[0302.808] GetCurrentObject (hdc=0xf8010790, type=0x6) returned 0x8a01c2
[0302.808] SaveDC (hdc=0xf8010790) returned 1
[0302.808] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd904053e
[0302.808] GetClipRgn (hdc=0xf8010790, hrgn=0xd904053e) returned 0
[0302.808] SelectClipRgn (hdc=0xf8010790, hrgn=0xd4040798) returned 2
[0302.808] DeleteObject (ho=0xd904053e) returned 1
[0302.808] DeleteObject (ho=0xd4040798) returned 1
[0302.808] OffsetViewportOrgEx (in: hdc=0xf8010790, x=0, y=0, lppt=0x2488204 | out: lppt=0x2488204) returned 1
[0302.808] IsAppThemed () returned 0x1
[0302.808] GetThemeAppProperties () returned 0x3
[0302.808] GetThemeAppProperties () returned 0x3
[0302.808] GetThemeBackgroundContentRect () returned 0x0
[0302.808] RestoreDC (hdc=0xf8010790, nSavedDC=-1) returned 1
[0302.809] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf8010790) returned 0x0
[0302.809] IsAppThemed () returned 0x1
[0302.809] GetThemeAppProperties () returned 0x3
[0302.809] GetThemeAppProperties () returned 0x3
[0302.809] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0302.809] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0302.809] GetCurrentObject (hdc=0xf8010790, type=0x1) returned 0xb00017
[0302.809] GetCurrentObject (hdc=0xf8010790, type=0x2) returned 0x900010
[0302.809] GetCurrentObject (hdc=0xf8010790, type=0x7) returned 0x1e0507b9
[0302.809] GetCurrentObject (hdc=0xf8010790, type=0x6) returned 0x8a01c2
[0302.809] SaveDC (hdc=0xf8010790) returned 1
[0302.809] GetTextAlign (hdc=0xf8010790) returned 0x0
[0302.809] GetTextColor (hdc=0xf8010790) returned 0x0
[0302.809] GetCurrentObject (hdc=0xf8010790, type=0x6) returned 0x8a01c2
[0302.809] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0302.809] SelectObject (hdc=0xf8010790, h=0x450a0799) returned 0x8a01c2
[0302.809] GetBkMode (hdc=0xf8010790) returned 2
[0302.809] SetBkMode (hdc=0xf8010790, mode=1) returned 2
[0302.810] DrawTextExW (in: hdc=0xf8010790, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x24885a4 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0302.810] DrawTextExW (in: hdc=0xf8010790, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x24885a4 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0302.810] RestoreDC (hdc=0xf8010790, nSavedDC=-1) returned 1
[0302.810] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf8010790) returned 0x0
[0302.810] GetFocus () returned 0x202c6
[0302.810] IsAppThemed () returned 0x1
[0302.810] GetThemeAppProperties () returned 0x3
[0302.810] GetThemeAppProperties () returned 0x3
[0302.810] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0302.810] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0xf8010790, x1=0, y1=0, rop=0xcc0020) returned 1
[0302.811] GdipReleaseDC (graphics=0x5d92c30, hdc=0xf8010790) returned 0x0
[0302.811] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0302.811] SelectObject (hdc=0xf8010790, h=0x85000f) returned 0x1e0507b9
[0302.811] DeleteDC (hdc=0xf8010790) returned 1
[0302.811] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0302.811] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0302.811] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x24886a0, cPoints=0x1 | out: lpPoints=0x24886a0) returned 25690608
[0302.811] WindowFromPoint (Point=0x25f) returned 0x202c6
[0302.811] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x1a0025f) returned 0x1
[0302.812] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0302.812] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0302.813] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.814] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0302.815] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.816] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0302.816] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.816] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0302.816] GetDC (hWnd=0x0) returned 0x10105d6
[0302.816] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e888) returned 0x0
[0302.817] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0302.817] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0302.817] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0302.817] GetSystemMetrics (nIndex=5) returned 1
[0302.817] GetSystemMetrics (nIndex=6) returned 1
[0302.817] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.817] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0302.818] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.818] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0302.874] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.875] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0302.875] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.875] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0302.875] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.875] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0302.875] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.876] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0302.876] GetSystemMetrics (nIndex=5) returned 1
[0302.876] GetSystemMetrics (nIndex=6) returned 1
[0302.876] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.876] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0302.876] GetSystemMetrics (nIndex=5) returned 1
[0302.876] GetSystemMetrics (nIndex=6) returned 1
[0302.876] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.876] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0302.876] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.877] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0302.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.877] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0302.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.877] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0302.877] GetSystemMetrics (nIndex=59) returned 1460
[0302.877] GetSystemMetrics (nIndex=60) returned 920
[0302.877] GetSystemMetrics (nIndex=34) returned 136
[0302.877] GetSystemMetrics (nIndex=35) returned 39
[0302.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.877] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0302.877] GetCurrentThreadId () returned 0x11d0
[0302.878] GetCurrentThreadId () returned 0x11d0
[0302.878] GetCurrentThreadId () returned 0x11d0
[0302.878] GetCurrentThreadId () returned 0x11d0
[0302.878] GetCurrentThreadId () returned 0x11d0
[0302.878] GetCurrentThreadId () returned 0x11d0
[0302.878] GetCurrentThreadId () returned 0x11d0
[0302.878] GetCurrentThreadId () returned 0x11d0
[0302.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.878] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0302.878] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0302.878] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0302.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.878] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0302.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.879] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0302.879] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2700ea
[0302.880] SetWindowLongW (hWnd=0x2700ea, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0302.880] GetWindowLongW (hWnd=0x2700ea, nIndex=-4) returned 1950089536
[0302.880] SetWindowLongW (hWnd=0x2700ea, nIndex=-4, dwNewLong=79650870) returned 1950089536
[0302.880] GetWindowLongW (hWnd=0x2700ea, nIndex=-4) returned 79650870
[0302.880] GetWindowLongW (hWnd=0x2700ea, nIndex=-16) returned 113311744
[0302.882] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2700ea, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0302.882] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2700ea, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0302.884] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2700ea, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0302.885] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2700ea, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0302.885] GetClientRect (in: hWnd=0x2700ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0302.885] GetWindowRect (in: hWnd=0x2700ea, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0302.885] SetWindowTextW (hWnd=0x2700ea, lpString="WindowsFormsParkingWindow") returned 1
[0302.885] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2700ea, Msg=0xc, wParam=0x0, lParam=0x24805ec) returned 0x1
[0302.886] GetParent (hWnd=0x2700ea) returned 0x0
[0302.886] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0302.886] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x2700ea, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2201e2
[0302.886] SetWindowLongW (hWnd=0x2201e2, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0302.886] GetWindowLongW (hWnd=0x2201e2, nIndex=-4) returned 1868147648
[0302.887] SetWindowLongW (hWnd=0x2201e2, nIndex=-4, dwNewLong=79649870) returned 1868147648
[0302.887] GetWindowLongW (hWnd=0x2201e2, nIndex=-4) returned 79649870
[0302.887] GetWindowLongW (hWnd=0x2201e2, nIndex=-16) returned 1174405133
[0302.887] GetWindowLongW (hWnd=0x2201e2, nIndex=-12) returned 0
[0302.887] SetWindowLongW (hWnd=0x2201e2, nIndex=-12, dwNewLong=2228706) returned 0
[0302.887] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0302.887] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0302.888] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0302.888] GetClientRect (in: hWnd=0x2201e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0302.888] GetWindowRect (in: hWnd=0x2201e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0302.888] GetParent (hWnd=0x2201e2) returned 0x2700ea
[0302.888] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2700ea, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0302.889] SetWindowTextW (hWnd=0x2201e2, lpString="Enter password: ") returned 1
[0302.889] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0302.889] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0302.889] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0302.889] GetClientRect (in: hWnd=0x2201e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0302.889] GetWindowRect (in: hWnd=0x2201e2, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0302.889] GetParent (hWnd=0x2201e2) returned 0x2700ea
[0302.889] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2700ea, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0302.889] SendMessageW (hWnd=0x2201e2, Msg=0x2210, wParam=0x1e20001, lParam=0x2201e2) returned 0x0
[0302.889] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x2210, wParam=0x1e20001, lParam=0x2201e2) returned 0x0
[0302.889] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0302.890] GetParent (hWnd=0x2201e2) returned 0x2700ea
[0302.890] GdipCreateFromHWND (hwnd=0x2201e2, graphics=0x53e994) returned 0x0
[0302.890] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0302.890] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0302.890] GetProcessWindowStation () returned 0x13c
[0302.890] GetCapture () returned 0x202c6
[0302.890] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0302.890] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0302.891] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0302.891] ReleaseCapture () returned 1
[0302.891] GetActiveWindow () returned 0x70036
[0302.891] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0302.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.892] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0302.892] GetCursorPos (in: lpPoint=0x2495450 | out: lpPoint=0x2495450*(x=607, y=416)) returned 1
[0302.892] MonitorFromPoint (pt=0x25f, dwFlags=0x1a0) returned 0x10001
[0302.892] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0302.892] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xfb010790
[0302.892] GetDeviceCaps (hdc=0xfb010790, index=12) returned 32
[0302.892] GetDeviceCaps (hdc=0xfb010790, index=14) returned 1
[0302.892] DeleteDC (hdc=0xfb010790) returned 1
[0302.893] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0302.893] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0302.893] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1002b8
[0302.893] SetWindowLongW (hWnd=0x1002b8, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0302.893] GetWindowLongW (hWnd=0x1002b8, nIndex=-4) returned 1950089536
[0302.894] SetWindowLongW (hWnd=0x1002b8, nIndex=-4, dwNewLong=79649990) returned 1950089536
[0302.894] GetWindowLongW (hWnd=0x1002b8, nIndex=-4) returned 79649990
[0302.894] GetWindowLongW (hWnd=0x1002b8, nIndex=-16) returned 113770496
[0302.894] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0302.895] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0302.895] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0302.896] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0302.896] GetWindowRect (in: hWnd=0x1002b8, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0302.896] SetWindowTextW (hWnd=0x1002b8, lpString="Ransomware") returned 1
[0302.896] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xc, wParam=0x0, lParam=0x2488768) returned 0x1
[0302.897] GetStartupInfoW (in: lpStartupInfo=0x249578c | out: lpStartupInfo=0x249578c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0302.897] GetParent (hWnd=0x1002b8) returned 0x0
[0302.897] SetWindowLongW (hWnd=0x1002b8, nIndex=-8, dwNewLong=0) returned 0
[0302.897] SendMessageW (hWnd=0x1002b8, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0302.898] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0302.898] SendMessageW (hWnd=0x1002b8, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0302.898] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0302.898] GetSystemMenu (hWnd=0x1002b8, bRevert=0) returned 0x4601d9
[0302.898] GetWindowPlacement (in: hWnd=0x1002b8, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0302.899] EnableMenuItem (hMenu=0x4601d9, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0302.899] EnableMenuItem (hMenu=0x4601d9, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0302.899] EnableMenuItem (hMenu=0x4601d9, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0302.899] EnableMenuItem (hMenu=0x4601d9, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0302.899] EnableMenuItem (hMenu=0x4601d9, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0302.899] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0302.899] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0302.899] GetWindowRect (in: hWnd=0x1002b8, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0302.899] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.899] GetWindowLongW (hWnd=0x1002b8, nIndex=-16) returned 113770496
[0302.899] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0302.899] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0302.900] GetSystemMetrics (nIndex=42) returned 0
[0302.900] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0302.900] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0302.900] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0302.900] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0302.900] GetSystemMetrics (nIndex=42) returned 0
[0302.900] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0302.900] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0302.900] GetCursorPos (in: lpPoint=0x2495900 | out: lpPoint=0x2495900*(x=607, y=416)) returned 1
[0302.900] MonitorFromPoint (pt=0x25f, dwFlags=0x1a0) returned 0x10001
[0302.900] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0302.900] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xff010790
[0302.900] GetDeviceCaps (hdc=0xff010790, index=12) returned 32
[0302.900] GetDeviceCaps (hdc=0xff010790, index=14) returned 1
[0302.900] DeleteDC (hdc=0xff010790) returned 1
[0302.900] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0302.901] GetWindowLongW (hWnd=0x1002b8, nIndex=-16) returned 113770496
[0302.901] GetWindowLongW (hWnd=0x1002b8, nIndex=-20) returned 327937
[0302.901] SetWindowLongW (hWnd=0x1002b8, nIndex=-16, dwNewLong=46661632) returned 113770496
[0302.901] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0302.901] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0302.901] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0302.902] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0302.902] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0302.902] SetWindowLongW (hWnd=0x1002b8, nIndex=-20, dwNewLong=327681) returned 327937
[0302.902] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0302.902] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0302.903] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0302.903] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0302.903] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0302.903] SetWindowPos (hWnd=0x1002b8, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0302.903] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0302.904] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0302.904] GetWindowPlacement (in: hWnd=0x1002b8, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0302.904] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0302.904] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0302.904] GetWindowRect (in: hWnd=0x1002b8, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0302.905] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0302.905] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0302.905] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0302.905] RedrawWindow (hWnd=0x1002b8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0302.905] GetSystemMenu (hWnd=0x1002b8, bRevert=0) returned 0x4601d9
[0302.905] GetWindowPlacement (in: hWnd=0x1002b8, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0302.905] EnableMenuItem (hMenu=0x4601d9, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0302.906] EnableMenuItem (hMenu=0x4601d9, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0302.906] EnableMenuItem (hMenu=0x4601d9, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0302.906] EnableMenuItem (hMenu=0x4601d9, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0302.906] EnableMenuItem (hMenu=0x4601d9, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0302.906] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0302.906] GetWindowLongW (hWnd=0x1002b8, nIndex=-8) returned 0
[0302.906] SetWindowLongW (hWnd=0x1002b8, nIndex=-8, dwNewLong=458806) returned 0
[0302.906] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0302.906] GetProcessWindowStation () returned 0x13c
[0302.906] GetCurrentThreadId () returned 0x11d0
[0302.906] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf600e, lParam=0x0) returned 1
[0302.906] IsWindowVisible (hWnd=0x1002b8) returned 0
[0302.906] IsWindowVisible (hWnd=0x70036) returned 1
[0302.906] IsWindowEnabled (hWnd=0x70036) returned 1
[0302.907] IsWindowVisible (hWnd=0x602b6) returned 0
[0302.907] IsWindowVisible (hWnd=0x901f8) returned 0
[0302.907] IsWindowVisible (hWnd=0x202d0) returned 0
[0302.907] IsWindowVisible (hWnd=0x202d4) returned 0
[0302.907] GetActiveWindow () returned 0x70036
[0302.907] GetFocus () returned 0x202c6
[0302.907] IsWindow (hWnd=0x70036) returned 1
[0302.907] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0302.907] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0302.908] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0302.909] GetWindowLongW (hWnd=0x1002b8, nIndex=-8) returned 458806
[0302.909] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0302.909] GetCurrentThreadId () returned 0x11d0
[0302.909] GetWindowLongW (hWnd=0x1002b8, nIndex=-8) returned 458806
[0302.909] IsWindowEnabled (hWnd=0x70036) returned 0
[0302.909] IsWindowEnabled (hWnd=0x1002b8) returned 1
[0302.909] ShowWindow (hWnd=0x1002b8, nCmdShow=5) returned 0
[0302.909] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0302.909] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0302.909] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.910] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0302.910] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x1002b8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x210122
[0302.910] SetWindowLongW (hWnd=0x210122, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0302.910] GetWindowLongW (hWnd=0x210122, nIndex=-4) returned 1868026976
[0302.911] SetWindowLongW (hWnd=0x210122, nIndex=-4, dwNewLong=79650950) returned 1868026976
[0302.911] GetWindowLongW (hWnd=0x210122, nIndex=-4) returned 79650950
[0302.911] GetWindowLongW (hWnd=0x210122, nIndex=-16) returned 1174470848
[0302.911] GetWindowLongW (hWnd=0x210122, nIndex=-12) returned 0
[0302.911] SetWindowLongW (hWnd=0x210122, nIndex=-12, dwNewLong=2162978) returned 0
[0302.911] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0302.913] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0302.913] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0302.914] SendMessageW (hWnd=0x210122, Msg=0x2055, wParam=0x210122, lParam=0x3) returned 0x2
[0302.915] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0302.915] GetWindow (hWnd=0x210122, uCmd=0x3) returned 0x0
[0302.915] GetClientRect (in: hWnd=0x210122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0302.915] GetWindowRect (in: hWnd=0x210122, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0302.915] GetParent (hWnd=0x210122) returned 0x1002b8
[0302.915] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1002b8, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0302.915] SendMessageW (hWnd=0x210122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0302.915] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0302.915] SendMessageW (hWnd=0x210122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0302.915] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0302.916] GetSystemMetrics (nIndex=5) returned 1
[0302.916] GetSystemMetrics (nIndex=6) returned 1
[0302.916] SendMessageW (hWnd=0x210122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0302.916] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0302.916] SendMessageW (hWnd=0x210122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0302.916] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0302.916] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0302.917] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0302.917] GetClientRect (in: hWnd=0x210122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0302.917] GetWindowRect (in: hWnd=0x210122, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0302.917] GetParent (hWnd=0x210122) returned 0x1002b8
[0302.917] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1002b8, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0302.917] SendMessageW (hWnd=0x210122, Msg=0x2210, wParam=0x1220001, lParam=0x210122) returned 0x0
[0302.917] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x2210, wParam=0x1220001, lParam=0x210122) returned 0x0
[0302.917] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0302.917] GetParent (hWnd=0x210122) returned 0x1002b8
[0302.917] GetParent (hWnd=0x2201e2) returned 0x2700ea
[0302.917] SetParent (hWndChild=0x2201e2, hWndNewParent=0x1002b8) returned 0x2700ea
[0302.918] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0302.918] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0302.919] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0302.919] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0302.919] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0302.919] GetClientRect (in: hWnd=0x2201e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0302.919] GetWindowRect (in: hWnd=0x2201e2, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0302.919] GetParent (hWnd=0x2201e2) returned 0x1002b8
[0302.919] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1002b8, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0302.919] GetClientRect (in: hWnd=0x2201e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0302.919] GetWindowRect (in: hWnd=0x2201e2, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0302.919] GetParent (hWnd=0x2201e2) returned 0x1002b8
[0302.919] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1002b8, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0302.919] GetParent (hWnd=0x2201e2) returned 0x1002b8
[0302.920] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0302.920] GetWindow (hWnd=0x2201e2, uCmd=0x3) returned 0x0
[0302.920] SetWindowPos (hWnd=0x2201e2, hWndInsertAfter=0x210122, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0302.920] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0302.921] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0302.921] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0302.921] GetClientRect (in: hWnd=0x2201e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0302.921] GetWindowRect (in: hWnd=0x2201e2, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0302.921] GetParent (hWnd=0x2201e2) returned 0x1002b8
[0302.921] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1002b8, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0302.921] GetParent (hWnd=0x2201e2) returned 0x1002b8
[0302.921] GetWindow (hWnd=0x2201e2, uCmd=0x3) returned 0x210122
[0302.921] GetWindowThreadProcessId (in: hWnd=0x2201e2, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0302.921] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0302.922] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.922] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0302.922] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x1002b8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1d004e
[0302.923] SetWindowLongW (hWnd=0x1d004e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0302.923] GetWindowLongW (hWnd=0x1d004e, nIndex=-4) returned 1868032000
[0302.923] SetWindowLongW (hWnd=0x1d004e, nIndex=-4, dwNewLong=79650790) returned 1868032000
[0302.924] GetWindowLongW (hWnd=0x1d004e, nIndex=-4) returned 79650790
[0302.924] GetWindowLongW (hWnd=0x1d004e, nIndex=-16) returned 1174470667
[0302.924] GetWindowLongW (hWnd=0x1d004e, nIndex=-12) returned 0
[0302.924] SetWindowLongW (hWnd=0x1d004e, nIndex=-12, dwNewLong=1900622) returned 0
[0302.924] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0302.924] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0302.925] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0302.926] SendMessageW (hWnd=0x1d004e, Msg=0x2055, wParam=0x1d004e, lParam=0x3) returned 0x2
[0302.926] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0302.926] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0302.926] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0302.926] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0302.926] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0302.926] RedrawWindow (hWnd=0x210122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0302.926] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0302.926] RedrawWindow (hWnd=0x2201e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0302.927] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0302.927] RedrawWindow (hWnd=0x1d004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0302.927] RedrawWindow (hWnd=0x1002b8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0302.927] GetWindow (hWnd=0x1d004e, uCmd=0x3) returned 0x2201e2
[0302.927] GetClientRect (in: hWnd=0x1d004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0302.927] GetWindowRect (in: hWnd=0x1d004e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0302.927] GetParent (hWnd=0x1d004e) returned 0x1002b8
[0302.927] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1002b8, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0302.960] SetWindowTextW (hWnd=0x1d004e, lpString="OK") returned 1
[0302.960] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0xc, wParam=0x0, lParam=0x248cc28) returned 0x1
[0302.960] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0302.960] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0302.961] GetClientRect (in: hWnd=0x1d004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0302.961] GetWindowRect (in: hWnd=0x1d004e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0302.961] GetParent (hWnd=0x1d004e) returned 0x1002b8
[0302.961] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1002b8, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0302.961] SendMessageW (hWnd=0x1d004e, Msg=0x2210, wParam=0x4e0001, lParam=0x1d004e) returned 0x0
[0302.961] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x2210, wParam=0x4e0001, lParam=0x1d004e) returned 0x0
[0302.961] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0302.961] GetParent (hWnd=0x1d004e) returned 0x1002b8
[0302.961] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0302.962] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0302.962] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0302.962] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x1002b8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x41013e
[0302.962] SetWindowLongW (hWnd=0x41013e, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0302.962] GetWindowLongW (hWnd=0x41013e, nIndex=-4) returned 1868032000
[0302.963] SetWindowLongW (hWnd=0x41013e, nIndex=-4, dwNewLong=79650990) returned 1868032000
[0302.963] GetWindowLongW (hWnd=0x41013e, nIndex=-4) returned 79650990
[0302.963] GetWindowLongW (hWnd=0x41013e, nIndex=-16) returned 1174470667
[0302.963] GetWindowLongW (hWnd=0x41013e, nIndex=-12) returned 0
[0302.963] SetWindowLongW (hWnd=0x41013e, nIndex=-12, dwNewLong=4260158) returned 0
[0302.963] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x41013e, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0302.964] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x41013e, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0302.964] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x41013e, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0302.964] SendMessageW (hWnd=0x41013e, Msg=0x2055, wParam=0x41013e, lParam=0x3) returned 0x2
[0302.965] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0302.965] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x41013e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0302.965] GetWindow (hWnd=0x41013e, uCmd=0x3) returned 0x1d004e
[0302.965] GetClientRect (in: hWnd=0x41013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0302.965] GetWindowRect (in: hWnd=0x41013e, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0302.965] GetParent (hWnd=0x41013e) returned 0x1002b8
[0302.965] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1002b8, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0302.965] SetWindowTextW (hWnd=0x41013e, lpString="Cancel") returned 1
[0302.965] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x41013e, Msg=0xc, wParam=0x0, lParam=0x24904e8) returned 0x1
[0302.966] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x41013e, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0302.966] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x41013e, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0302.966] GetClientRect (in: hWnd=0x41013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0302.966] GetWindowRect (in: hWnd=0x41013e, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0302.966] GetParent (hWnd=0x41013e) returned 0x1002b8
[0302.966] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1002b8, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0302.966] SendMessageW (hWnd=0x41013e, Msg=0x2210, wParam=0x13e0001, lParam=0x41013e) returned 0x0
[0302.966] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x41013e, Msg=0x2210, wParam=0x13e0001, lParam=0x41013e) returned 0x0
[0302.966] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x41013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0302.966] GetParent (hWnd=0x41013e) returned 0x1002b8
[0302.966] GetDC (hWnd=0x0) returned 0xffffffff8b010786
[0302.967] GdipCreateFromHDC (hdc=0x8b010786, graphics=0x53e320) returned 0x0
[0302.967] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0302.967] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0302.967] ReleaseDC (hWnd=0x0, hDC=0x8b010786) returned 1
[0302.967] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0302.967] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0302.967] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0302.968] GetWindowLongW (hWnd=0x1002b8, nIndex=-8) returned 458806
[0302.968] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0302.968] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0302.968] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x6010790
[0302.968] GetDeviceCaps (hdc=0x6010790, index=12) returned 32
[0302.968] GetDeviceCaps (hdc=0x6010790, index=14) returned 1
[0302.968] DeleteDC (hdc=0x6010790) returned 1
[0302.968] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0302.968] GetWindowThreadProcessId (in: hWnd=0x1002b8, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0302.968] GetCurrentThreadId () returned 0x11d0
[0302.968] PostMessageW (hWnd=0x1002b8, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0302.968] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0302.968] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0302.968] GetSystemMetrics (nIndex=42) returned 0
[0302.968] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0302.968] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0302.969] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0302.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0302.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0302.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0302.980] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x1002b8) returned 0x1
[0302.982] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0302.983] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0302.983] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0302.983] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0302.985] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0302.986] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0302.986] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0302.986] GetFocus () returned 0x202c6
[0302.987] IsChild (hWndParent=0x1002b8, hWnd=0x202c6) returned 0
[0302.987] GetFocus () returned 0x202c6
[0302.987] SetFocus (hWnd=0x210122) returned 0x202c6
[0302.987] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x210122, lParam=0x0) returned 0x0
[0302.988] GetCapture () returned 0x0
[0302.988] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0302.988] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0302.990] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0302.991] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0302.992] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0302.992] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0302.992] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0302.992] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0302.992] GetParent (hWnd=0x1002b8) returned 0x0
[0302.992] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0302.993] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0302.993] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0302.993] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0302.994] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0302.994] GetSysColorBrush (nIndex=5) returned 0x100079
[0302.994] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0302.994] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0302.996] SendMessageW (hWnd=0x210122, Msg=0x2111, wParam=0x1000122, lParam=0x210122) returned 0x0
[0302.997] SendMessageW (hWnd=0x210122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0302.997] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0302.997] GetKeyState (nVirtKey=1) returned 0
[0302.997] GetKeyState (nVirtKey=2) returned 0
[0302.997] GetKeyState (nVirtKey=4) returned 0
[0302.997] GetKeyState (nVirtKey=5) returned 0
[0302.997] GetKeyState (nVirtKey=6) returned 0
[0302.997] GetWindowTextLengthW (hWnd=0x210122) returned 0
[0302.997] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0302.997] SendMessageW (hWnd=0x210122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0302.997] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0302.997] SetTextColor (hdc=0x8b010786, color=0x0) returned 0x0
[0302.997] SetBkColor (hdc=0x8b010786, color=0xffffff) returned 0xffffff
[0303.000] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0303.001] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0303.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0303.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0303.002] GetWindowPlacement (in: hWnd=0x1002b8, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0303.003] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0303.003] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.003] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.003] GetSystemMetrics (nIndex=42) returned 0
[0303.003] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.003] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0303.003] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0303.003] GetCurrentObject (hdc=0xf0105ee, type=0x1) returned 0xb00017
[0303.003] GetCurrentObject (hdc=0xf0105ee, type=0x2) returned 0x900010
[0303.003] GetCurrentObject (hdc=0xf0105ee, type=0x7) returned 0xffffffffcf050535
[0303.003] GetCurrentObject (hdc=0xf0105ee, type=0x6) returned 0x8a01c2
[0303.003] SaveDC (hdc=0xf0105ee) returned 1
[0303.003] GetNearestColor (hdc=0xf0105ee, color=0xf0f0f0) returned 0xf0f0f0
[0303.003] CreateSolidBrush (color=0xf0f0f0) returned 0x9810078d
[0303.003] FillRect (hDC=0xf0105ee, lprc=0x53e250, hbr=0x9810078d) returned 1
[0303.004] DeleteObject (ho=0x9810078d) returned 1
[0303.004] RestoreDC (hdc=0xf0105ee, nSavedDC=-1) returned 1
[0303.004] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0303.004] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0303.004] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0303.005] GetWindowPlacement (in: hWnd=0x1002b8, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0303.005] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0303.005] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.005] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.014] GetSystemMetrics (nIndex=42) returned 0
[0303.014] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0303.014] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0303.014] GetCurrentObject (hdc=0x1c010790, type=0x1) returned 0xb00017
[0303.014] GetCurrentObject (hdc=0x1c010790, type=0x2) returned 0x900010
[0303.014] GetCurrentObject (hdc=0x1c010790, type=0x7) returned 0xffffffff9d0507c4
[0303.014] GetCurrentObject (hdc=0x1c010790, type=0x6) returned 0x8a01c2
[0303.014] SaveDC (hdc=0x1c010790) returned 1
[0303.015] GetNearestColor (hdc=0x1c010790, color=0xf0f0f0) returned 0xf0f0f0
[0303.015] CreateSolidBrush (color=0xf0f0f0) returned 0x9910078d
[0303.015] FillRect (hDC=0x1c010790, lprc=0x53dc18, hbr=0x9910078d) returned 1
[0303.015] DeleteObject (ho=0x9910078d) returned 1
[0303.015] RestoreDC (hdc=0x1c010790, nSavedDC=-1) returned 1
[0303.015] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.015] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.015] GetSystemMetrics (nIndex=42) returned 0
[0303.015] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.015] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0303.015] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0303.015] GetCurrentObject (hdc=0x1c010790, type=0x1) returned 0xb00017
[0303.015] GetCurrentObject (hdc=0x1c010790, type=0x2) returned 0x900010
[0303.015] GetCurrentObject (hdc=0x1c010790, type=0x7) returned 0xffffffff9d0507c4
[0303.015] GetCurrentObject (hdc=0x1c010790, type=0x6) returned 0x8a01c2
[0303.016] SaveDC (hdc=0x1c010790) returned 1
[0303.016] GetNearestColor (hdc=0x1c010790, color=0xf0f0f0) returned 0xf0f0f0
[0303.016] CreateSolidBrush (color=0xf0f0f0) returned 0x9a10078d
[0303.016] FillRect (hDC=0x1c010790, lprc=0x53dbb8, hbr=0x9a10078d) returned 1
[0303.016] DeleteObject (ho=0x9a10078d) returned 1
[0303.016] RestoreDC (hdc=0x1c010790, nSavedDC=-1) returned 1
[0303.016] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.016] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.016] GetSystemMetrics (nIndex=42) returned 0
[0303.016] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.016] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0303.017] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0303.017] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0303.018] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0303.018] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x14, wParam=0xf0105ee, lParam=0x0) returned 0x1
[0303.018] GetStockObject (i=5) returned 0x900015
[0303.018] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x41013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0303.018] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x41013e, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0303.018] GetStockObject (i=5) returned 0x900015
[0303.019] GetWindowPlacement (in: hWnd=0x1002b8, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0303.019] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0303.019] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0303.019] GetWindowRect (in: hWnd=0x1002b8, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0303.020] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0303.020] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0303.021] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0303.021] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0303.034] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0303.034] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0303.034] GetWindowRect (in: hWnd=0x1002b8, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0303.034] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.035] IsWindowUnicode (hWnd=0x1002b8) returned 1
[0303.035] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.035] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.035] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.035] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0303.035] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.035] IsWindowUnicode (hWnd=0x1002b8) returned 1
[0303.035] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.035] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.035] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.035] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.036] MapWindowPoints (in: hWndFrom=0x2201e2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0303.036] IsWindowUnicode (hWnd=0x2201e2) returned 1
[0303.036] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.036] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.036] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.036] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.037] IsWindowUnicode (hWnd=0x202c6) returned 1
[0303.037] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.046] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.046] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.046] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0303.046] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0303.047] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.047] MapWindowPoints (in: hWndFrom=0x2201e2, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0303.047] IsWindowUnicode (hWnd=0x2201e2) returned 1
[0303.047] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.047] MapWindowPoints (in: hWndFrom=0x2201e2, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0303.047] SetCursor (hCursor=0x10003) returned 0x10003
[0303.047] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.047] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.047] _TrackMouseEvent (in: lpEventTrack=0x2496e7c | out: lpEventTrack=0x2496e7c) returned 1
[0303.047] SendMessageW (hWnd=0x2201e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0303.048] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0303.048] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x200, wParam=0x0, lParam=0x190036) returned 0x0
[0303.048] GetKeyState (nVirtKey=1) returned 0
[0303.048] GetKeyState (nVirtKey=2) returned 0
[0303.048] GetKeyState (nVirtKey=4) returned 0
[0303.048] GetKeyState (nVirtKey=5) returned 0
[0303.048] GetKeyState (nVirtKey=6) returned 0
[0303.048] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.048] IsWindowUnicode (hWnd=0x1002b8) returned 1
[0303.048] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.048] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.048] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.049] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.056] IsWindowUnicode (hWnd=0x1002b8) returned 1
[0303.056] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.056] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.056] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.056] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.057] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.057] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.057] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.057] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.057] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.057] IsWindowUnicode (hWnd=0x1002b8) returned 1
[0303.057] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.058] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.058] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.058] BeginPaint (in: hWnd=0x1002b8, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x10105d6
[0303.058] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0303.058] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.058] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.058] GetSystemMetrics (nIndex=42) returned 0
[0303.058] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.058] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0303.058] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0303.058] EndPaint (hWnd=0x1002b8, lpPaint=0x53e30c) returned 1
[0303.059] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.059] IsWindowUnicode (hWnd=0x210122) returned 1
[0303.059] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.059] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.059] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0303.059] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0303.060] SetTextColor (hdc=0x1d010790, color=0x0) returned 0x0
[0303.060] SetBkColor (hdc=0x1d010790, color=0xffffff) returned 0xffffff
[0303.061] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.061] IsWindowUnicode (hWnd=0x2201e2) returned 1
[0303.061] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.061] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.061] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.061] BeginPaint (in: hWnd=0x2201e2, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0x60100ce
[0303.061] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0303.061] CreateCompatibleDC (hdc=0x60100ce) returned 0x9e0107cd
[0303.061] SelectObject (hdc=0x9e0107cd, h=0x1e0507b9) returned 0x85000f
[0303.061] GdipCreateFromHDC (hdc=0x9e0107cd, graphics=0x53e30c) returned 0x0
[0303.062] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0303.062] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0303.062] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0303.062] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.062] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0303.062] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0303.062] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0303.062] LocalFree (hMem=0x89ee40) returned 0x0
[0303.062] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.062] GdipCreateRegion (region=0x53e354) returned 0x0
[0303.062] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.062] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0303.062] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0303.062] GetWindowTextLengthW (hWnd=0x2201e2) returned 16
[0303.062] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0303.063] GetSystemMetrics (nIndex=42) returned 0
[0303.063] GetWindowTextW (in: hWnd=0x2201e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0303.063] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0303.063] GetClientRect (in: hWnd=0x2201e2, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0303.063] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0303.063] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0303.063] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0303.063] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.063] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0303.063] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.063] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0303.063] LocalFree (hMem=0x89ea88) returned 0x0
[0303.063] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0303.063] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0303.063] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0303.063] LocalFree (hMem=0x89ec80) returned 0x0
[0303.063] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.064] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0303.064] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0303.064] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0303.064] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0303.064] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0303.064] GetCurrentObject (hdc=0x9e0107cd, type=0x1) returned 0xb00017
[0303.064] GetCurrentObject (hdc=0x9e0107cd, type=0x2) returned 0x900010
[0303.064] GetCurrentObject (hdc=0x9e0107cd, type=0x7) returned 0x1e0507b9
[0303.064] GetCurrentObject (hdc=0x9e0107cd, type=0x6) returned 0x8a01c2
[0303.064] SaveDC (hdc=0x9e0107cd) returned 1
[0303.064] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d0407a1
[0303.064] GetClipRgn (hdc=0x9e0107cd, hrgn=0x2d0407a1) returned 0
[0303.064] SelectClipRgn (hdc=0x9e0107cd, hrgn=0xd9040798) returned 2
[0303.064] DeleteObject (ho=0x2d0407a1) returned 1
[0303.064] DeleteObject (ho=0xd9040798) returned 1
[0303.065] OffsetViewportOrgEx (in: hdc=0x9e0107cd, x=0, y=0, lppt=0x2497360 | out: lppt=0x2497360) returned 1
[0303.065] GetNearestColor (hdc=0x9e0107cd, color=0xf0f0f0) returned 0xf0f0f0
[0303.065] CreateSolidBrush (color=0xf0f0f0) returned 0x9b10078d
[0303.065] FillRect (hDC=0x9e0107cd, lprc=0x53e1f4, hbr=0x9b10078d) returned 1
[0303.065] DeleteObject (ho=0x9b10078d) returned 1
[0303.065] RestoreDC (hdc=0x9e0107cd, nSavedDC=-1) returned 1
[0303.065] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9e0107cd) returned 0x0
[0303.065] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa510dbd) returned 0x0
[0303.065] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.065] GetWindowTextLengthW (hWnd=0x2201e2) returned 16
[0303.065] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0303.065] GetSystemMetrics (nIndex=42) returned 0
[0303.065] GetWindowTextW (in: hWnd=0x2201e2, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0303.065] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0303.065] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0303.066] GetCurrentObject (hdc=0x9e0107cd, type=0x1) returned 0xb00017
[0303.066] GetCurrentObject (hdc=0x9e0107cd, type=0x2) returned 0x900010
[0303.066] GetCurrentObject (hdc=0x9e0107cd, type=0x7) returned 0x1e0507b9
[0303.066] GetCurrentObject (hdc=0x9e0107cd, type=0x6) returned 0x8a01c2
[0303.066] SaveDC (hdc=0x9e0107cd) returned 1
[0303.066] GetNearestColor (hdc=0x9e0107cd, color=0x0) returned 0x0
[0303.066] RestoreDC (hdc=0x9e0107cd, nSavedDC=-1) returned 1
[0303.066] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9e0107cd) returned 0x0
[0303.067] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0303.067] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0303.067] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0303.067] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x2497668 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0303.067] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0303.067] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0303.067] GetCurrentObject (hdc=0x9e0107cd, type=0x1) returned 0xb00017
[0303.067] GetCurrentObject (hdc=0x9e0107cd, type=0x2) returned 0x900010
[0303.067] GetCurrentObject (hdc=0x9e0107cd, type=0x7) returned 0x1e0507b9
[0303.068] GetCurrentObject (hdc=0x9e0107cd, type=0x6) returned 0x8a01c2
[0303.068] SaveDC (hdc=0x9e0107cd) returned 1
[0303.068] GetTextAlign (hdc=0x9e0107cd) returned 0x0
[0303.068] GetTextColor (hdc=0x9e0107cd) returned 0x0
[0303.068] GetCurrentObject (hdc=0x9e0107cd, type=0x6) returned 0x8a01c2
[0303.077] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0303.077] SelectObject (hdc=0x9e0107cd, h=0x730a066d) returned 0x8a01c2
[0303.077] GetBkMode (hdc=0x9e0107cd) returned 2
[0303.077] SetBkMode (hdc=0x9e0107cd, mode=1) returned 2
[0303.077] DrawTextExW (in: hdc=0x9e0107cd, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x249788c | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0303.078] RestoreDC (hdc=0x9e0107cd, nSavedDC=-1) returned 1
[0303.078] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9e0107cd) returned 0x0
[0303.078] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0303.078] BitBlt (hdc=0x60100ce, x=0, y=0, cx=250, cy=70, hdcSrc=0x9e0107cd, x1=0, y1=0, rop=0xcc0020) returned 1
[0303.078] GdipReleaseDC (graphics=0x5d92c30, hdc=0x9e0107cd) returned 0x0
[0303.078] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0303.078] SelectObject (hdc=0x9e0107cd, h=0x85000f) returned 0x1e0507b9
[0303.078] DeleteDC (hdc=0x9e0107cd) returned 1
[0303.078] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0303.078] EndPaint (hWnd=0x2201e2, lpPaint=0x53e2f0) returned 1
[0303.081] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.081] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x84, wParam=0x0, lParam=0x1940360) returned 0x1
[0303.081] IsWindowUnicode (hWnd=0x1d004e) returned 1
[0303.081] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.081] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.081] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.082] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0303.082] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.082] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x84, wParam=0x0, lParam=0x1940360) returned 0x1
[0303.082] IsWindowUnicode (hWnd=0x1d004e) returned 1
[0303.082] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.082] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x84, wParam=0x0, lParam=0x1940360) returned 0x1
[0303.082] SetCursor (hCursor=0x10003) returned 0x10003
[0303.082] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.082] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.082] _TrackMouseEvent (in: lpEventTrack=0x24978c8 | out: lpEventTrack=0x24978c8) returned 1
[0303.082] SendMessageW (hWnd=0x1d004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0303.082] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0303.083] InvalidateRect (hWnd=0x1d004e, lpRect=0x0, bErase=0) returned 1
[0303.083] GetKeyState (nVirtKey=1) returned 0
[0303.083] GetKeyState (nVirtKey=2) returned 0
[0303.083] GetKeyState (nVirtKey=4) returned 0
[0303.083] GetKeyState (nVirtKey=5) returned 0
[0303.083] GetKeyState (nVirtKey=6) returned 0
[0303.083] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.083] IsWindowUnicode (hWnd=0x1d004e) returned 1
[0303.083] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.083] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.083] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.083] BeginPaint (in: hWnd=0x1d004e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0303.083] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0303.083] CreateCompatibleDC (hdc=0x8b010786) returned 0xa00107cd
[0303.084] SelectObject (hdc=0xa00107cd, h=0x1e0507b9) returned 0x85000f
[0303.084] GdipCreateFromHDC (hdc=0xa00107cd, graphics=0x53e300) returned 0x0
[0303.084] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0303.084] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0303.084] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0303.084] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.084] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0303.084] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0303.084] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0303.084] LocalFree (hMem=0x89ec80) returned 0x0
[0303.084] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.085] GdipCreateRegion (region=0x53e348) returned 0x0
[0303.085] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.085] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0303.085] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0303.085] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa4f0dbd) returned 0x0
[0303.085] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.085] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0303.085] GetCurrentObject (hdc=0xa00107cd, type=0x1) returned 0xb00017
[0303.085] GetCurrentObject (hdc=0xa00107cd, type=0x2) returned 0x900010
[0303.085] GetCurrentObject (hdc=0xa00107cd, type=0x7) returned 0x1e0507b9
[0303.085] GetCurrentObject (hdc=0xa00107cd, type=0x6) returned 0x8a01c2
[0303.085] SaveDC (hdc=0xa00107cd) returned 1
[0303.085] GetNearestColor (hdc=0xa00107cd, color=0xf0f0f0) returned 0xf0f0f0
[0303.085] GetNearestColor (hdc=0xa00107cd, color=0xa0a0a0) returned 0xa0a0a0
[0303.085] GetNearestColor (hdc=0xa00107cd, color=0x696969) returned 0x696969
[0303.086] GetNearestColor (hdc=0xa00107cd, color=0xa0a0a0) returned 0xa0a0a0
[0303.086] GetNearestColor (hdc=0xa00107cd, color=0x0) returned 0x0
[0303.086] GetNearestColor (hdc=0xa00107cd, color=0xffffff) returned 0xffffff
[0303.086] GetNearestColor (hdc=0xa00107cd, color=0xe5e5e5) returned 0xe5e5e5
[0303.086] GetNearestColor (hdc=0xa00107cd, color=0xd7d7d7) returned 0xd7d7d7
[0303.086] GetNearestColor (hdc=0xa00107cd, color=0x0) returned 0x0
[0303.086] RestoreDC (hdc=0xa00107cd, nSavedDC=-1) returned 1
[0303.086] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa00107cd) returned 0x0
[0303.086] IsAppThemed () returned 0x1
[0303.086] GetThemeAppProperties () returned 0x3
[0303.086] GetThemeAppProperties () returned 0x3
[0303.086] IsAppThemed () returned 0x1
[0303.086] GetThemeAppProperties () returned 0x3
[0303.086] GetThemeAppProperties () returned 0x3
[0303.087] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x2498050 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0303.087] IsAppThemed () returned 0x1
[0303.087] GetThemeAppProperties () returned 0x3
[0303.087] GetThemeAppProperties () returned 0x3
[0303.087] IsAppThemed () returned 0x1
[0303.087] GetThemeAppProperties () returned 0x3
[0303.087] GetThemeAppProperties () returned 0x3
[0303.087] IsAppThemed () returned 0x1
[0303.087] GetThemeAppProperties () returned 0x3
[0303.087] GetThemeAppProperties () returned 0x3
[0303.087] IsAppThemed () returned 0x1
[0303.087] GetThemeAppProperties () returned 0x3
[0303.087] GetThemeAppProperties () returned 0x3
[0303.087] IsThemePartDefined () returned 0x1
[0303.088] IsAppThemed () returned 0x1
[0303.088] GetThemeAppProperties () returned 0x3
[0303.088] GetThemeAppProperties () returned 0x3
[0303.088] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0303.088] IsAppThemed () returned 0x1
[0303.088] GetThemeAppProperties () returned 0x3
[0303.088] GetThemeAppProperties () returned 0x3
[0303.088] IsAppThemed () returned 0x1
[0303.088] GetThemeAppProperties () returned 0x3
[0303.088] GetThemeAppProperties () returned 0x3
[0303.088] IsThemePartDefined () returned 0x1
[0303.088] GdipCreateRegion (region=0x53e064) returned 0x0
[0303.088] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.088] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0303.088] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.088] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0303.088] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0303.088] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0303.088] LocalFree (hMem=0x89ee40) returned 0x0
[0303.089] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0303.089] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0303.089] LocalFree (hMem=0x89ee40) returned 0x0
[0303.089] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.089] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0303.089] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0303.089] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0303.089] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.089] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0303.089] GetCurrentObject (hdc=0xa00107cd, type=0x1) returned 0xb00017
[0303.089] GetCurrentObject (hdc=0xa00107cd, type=0x2) returned 0x900010
[0303.089] GetCurrentObject (hdc=0xa00107cd, type=0x7) returned 0x1e0507b9
[0303.089] GetCurrentObject (hdc=0xa00107cd, type=0x6) returned 0x8a01c2
[0303.089] SaveDC (hdc=0xa00107cd) returned 1
[0303.089] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xda040798
[0303.090] GetClipRgn (hdc=0xa00107cd, hrgn=0xda040798) returned 0
[0303.090] SelectClipRgn (hdc=0xa00107cd, hrgn=0x310407a1) returned 2
[0303.090] DeleteObject (ho=0xda040798) returned 1
[0303.090] DeleteObject (ho=0x310407a1) returned 1
[0303.090] OffsetViewportOrgEx (in: hdc=0xa00107cd, x=0, y=0, lppt=0x2498700 | out: lppt=0x2498700) returned 1
[0303.090] DrawThemeParentBackground () returned 0x0
[0303.090] GetWindowPlacement (in: hWnd=0x1002b8, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0303.090] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0303.090] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.090] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.090] GetSystemMetrics (nIndex=42) returned 0
[0303.090] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.090] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0303.090] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0303.091] GetCurrentObject (hdc=0xa00107cd, type=0x1) returned 0xb00017
[0303.091] GetCurrentObject (hdc=0xa00107cd, type=0x2) returned 0x900010
[0303.091] GetCurrentObject (hdc=0xa00107cd, type=0x7) returned 0x1e0507b9
[0303.091] GetCurrentObject (hdc=0xa00107cd, type=0x6) returned 0x8a01c2
[0303.091] SaveDC (hdc=0xa00107cd) returned 2
[0303.091] GetNearestColor (hdc=0xa00107cd, color=0xf0f0f0) returned 0xf0f0f0
[0303.091] CreateSolidBrush (color=0xf0f0f0) returned 0x9c10078d
[0303.091] FillRect (hDC=0xa00107cd, lprc=0x53dac8, hbr=0x9c10078d) returned 1
[0303.091] DeleteObject (ho=0x9c10078d) returned 1
[0303.091] RestoreDC (hdc=0xa00107cd, nSavedDC=-1) returned 1
[0303.091] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.091] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.091] GetSystemMetrics (nIndex=42) returned 0
[0303.091] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.091] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0303.091] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0303.092] GetCurrentObject (hdc=0xa00107cd, type=0x1) returned 0xb00017
[0303.092] GetCurrentObject (hdc=0xa00107cd, type=0x2) returned 0x900010
[0303.092] GetCurrentObject (hdc=0xa00107cd, type=0x7) returned 0x1e0507b9
[0303.092] GetCurrentObject (hdc=0xa00107cd, type=0x6) returned 0x8a01c2
[0303.092] SaveDC (hdc=0xa00107cd) returned 2
[0303.092] GetNearestColor (hdc=0xa00107cd, color=0xf0f0f0) returned 0xf0f0f0
[0303.092] CreateSolidBrush (color=0xf0f0f0) returned 0x9d10078d
[0303.092] FillRect (hDC=0xa00107cd, lprc=0x53da68, hbr=0x9d10078d) returned 1
[0303.092] DeleteObject (ho=0x9d10078d) returned 1
[0303.092] RestoreDC (hdc=0xa00107cd, nSavedDC=-1) returned 1
[0303.092] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.092] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.092] GetSystemMetrics (nIndex=42) returned 0
[0303.092] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.092] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0303.092] RestoreDC (hdc=0xa00107cd, nSavedDC=-1) returned 1
[0303.092] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa00107cd) returned 0x0
[0303.093] IsAppThemed () returned 0x1
[0303.093] GetThemeAppProperties () returned 0x3
[0303.093] GetThemeAppProperties () returned 0x3
[0303.093] IsAppThemed () returned 0x1
[0303.093] GetThemeAppProperties () returned 0x3
[0303.093] GetThemeAppProperties () returned 0x3
[0303.093] IsThemePartDefined () returned 0x1
[0303.093] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0303.093] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.093] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0303.093] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.093] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0303.093] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.093] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0303.093] LocalFree (hMem=0x89ea88) returned 0x0
[0303.093] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.093] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0303.093] LocalFree (hMem=0x89ea88) returned 0x0
[0303.093] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.093] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0303.093] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0303.093] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0303.094] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.094] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0303.094] GetCurrentObject (hdc=0xa00107cd, type=0x1) returned 0xb00017
[0303.094] GetCurrentObject (hdc=0xa00107cd, type=0x2) returned 0x900010
[0303.094] GetCurrentObject (hdc=0xa00107cd, type=0x7) returned 0x1e0507b9
[0303.094] GetCurrentObject (hdc=0xa00107cd, type=0x6) returned 0x8a01c2
[0303.094] SaveDC (hdc=0xa00107cd) returned 1
[0303.094] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x320407a1
[0303.094] GetClipRgn (hdc=0xa00107cd, hrgn=0x320407a1) returned 0
[0303.094] SelectClipRgn (hdc=0xa00107cd, hrgn=0xdc040798) returned 2
[0303.094] DeleteObject (ho=0x320407a1) returned 1
[0303.094] DeleteObject (ho=0xdc040798) returned 1
[0303.094] OffsetViewportOrgEx (in: hdc=0xa00107cd, x=0, y=0, lppt=0x2498f88 | out: lppt=0x2498f88) returned 1
[0303.094] IsAppThemed () returned 0x1
[0303.094] GetThemeAppProperties () returned 0x3
[0303.094] GetThemeAppProperties () returned 0x3
[0303.094] DrawThemeBackground () returned 0x0
[0303.094] RestoreDC (hdc=0xa00107cd, nSavedDC=-1) returned 1
[0303.094] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa00107cd) returned 0x0
[0303.095] GdipCreateRegion (region=0x53dfec) returned 0x0
[0303.095] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.095] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0303.095] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.095] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0303.095] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0303.095] LocalFree (hMem=0x89ea88) returned 0x0
[0303.095] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0303.095] LocalFree (hMem=0x89ec80) returned 0x0
[0303.095] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.095] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0303.095] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0303.095] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0303.095] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.095] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0303.095] GetCurrentObject (hdc=0xa00107cd, type=0x1) returned 0xb00017
[0303.095] GetCurrentObject (hdc=0xa00107cd, type=0x2) returned 0x900010
[0303.095] GetCurrentObject (hdc=0xa00107cd, type=0x7) returned 0x1e0507b9
[0303.095] GetCurrentObject (hdc=0xa00107cd, type=0x6) returned 0x8a01c2
[0303.096] SaveDC (hdc=0xa00107cd) returned 1
[0303.096] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdd040798
[0303.096] GetClipRgn (hdc=0xa00107cd, hrgn=0xdd040798) returned 0
[0303.096] SelectClipRgn (hdc=0xa00107cd, hrgn=0x330407a1) returned 2
[0303.096] DeleteObject (ho=0xdd040798) returned 1
[0303.096] DeleteObject (ho=0x330407a1) returned 1
[0303.096] OffsetViewportOrgEx (in: hdc=0xa00107cd, x=0, y=0, lppt=0x249925c | out: lppt=0x249925c) returned 1
[0303.096] IsAppThemed () returned 0x1
[0303.096] GetThemeAppProperties () returned 0x3
[0303.096] GetThemeAppProperties () returned 0x3
[0303.096] GetThemeBackgroundContentRect () returned 0x0
[0303.096] RestoreDC (hdc=0xa00107cd, nSavedDC=-1) returned 1
[0303.096] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa00107cd) returned 0x0
[0303.096] IsAppThemed () returned 0x1
[0303.096] GetThemeAppProperties () returned 0x3
[0303.097] GetThemeAppProperties () returned 0x3
[0303.097] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0303.097] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0303.097] GetCurrentObject (hdc=0xa00107cd, type=0x1) returned 0xb00017
[0303.097] GetCurrentObject (hdc=0xa00107cd, type=0x2) returned 0x900010
[0303.097] GetCurrentObject (hdc=0xa00107cd, type=0x7) returned 0x1e0507b9
[0303.097] GetCurrentObject (hdc=0xa00107cd, type=0x6) returned 0x8a01c2
[0303.097] SaveDC (hdc=0xa00107cd) returned 1
[0303.097] GetTextAlign (hdc=0xa00107cd) returned 0x0
[0303.097] GetTextColor (hdc=0xa00107cd) returned 0x0
[0303.097] GetCurrentObject (hdc=0xa00107cd, type=0x6) returned 0x8a01c2
[0303.097] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0303.098] SelectObject (hdc=0xa00107cd, h=0x730a066d) returned 0x8a01c2
[0303.098] GetBkMode (hdc=0xa00107cd) returned 2
[0303.098] SetBkMode (hdc=0xa00107cd, mode=1) returned 2
[0303.098] DrawTextExW (in: hdc=0xa00107cd, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x24995fc | out: lpchText="OK", lprc=0x53df84) returned 13
[0303.098] DrawTextExW (in: hdc=0xa00107cd, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x24995fc | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0303.098] RestoreDC (hdc=0xa00107cd, nSavedDC=-1) returned 1
[0303.098] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa00107cd) returned 0x0
[0303.099] GetFocus () returned 0x210122
[0303.099] IsAppThemed () returned 0x1
[0303.099] GetThemeAppProperties () returned 0x3
[0303.099] GetThemeAppProperties () returned 0x3
[0303.099] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0303.099] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0xa00107cd, x1=0, y1=0, rop=0xcc0020) returned 1
[0303.099] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa00107cd) returned 0x0
[0303.099] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0303.099] SelectObject (hdc=0xa00107cd, h=0x85000f) returned 0x1e0507b9
[0303.103] DeleteDC (hdc=0xa00107cd) returned 1
[0303.103] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0303.103] EndPaint (hWnd=0x1d004e, lpPaint=0x53e2e4) returned 1
[0303.103] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.104] IsWindowUnicode (hWnd=0x41013e) returned 1
[0303.104] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.104] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.104] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.104] BeginPaint (in: hWnd=0x41013e, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0303.104] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0303.104] CreateCompatibleDC (hdc=0x10105d6) returned 0xa20107cd
[0303.104] SelectObject (hdc=0xa20107cd, h=0x1e0507b9) returned 0x85000f
[0303.104] GdipCreateFromHDC (hdc=0xa20107cd, graphics=0x53e300) returned 0x0
[0303.104] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0303.104] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0303.104] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0303.104] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.104] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0303.104] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0303.104] LocalFree (hMem=0x89ee40) returned 0x0
[0303.105] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.105] GdipCreateRegion (region=0x53e348) returned 0x0
[0303.105] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.105] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0303.105] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0303.105] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa4d0dbd) returned 0x0
[0303.105] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.105] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0303.105] GetCurrentObject (hdc=0xa20107cd, type=0x1) returned 0xb00017
[0303.105] GetCurrentObject (hdc=0xa20107cd, type=0x2) returned 0x900010
[0303.105] GetCurrentObject (hdc=0xa20107cd, type=0x7) returned 0x1e0507b9
[0303.105] GetCurrentObject (hdc=0xa20107cd, type=0x6) returned 0x8a01c2
[0303.105] SaveDC (hdc=0xa20107cd) returned 1
[0303.105] GetNearestColor (hdc=0xa20107cd, color=0xf0f0f0) returned 0xf0f0f0
[0303.105] GetNearestColor (hdc=0xa20107cd, color=0xa0a0a0) returned 0xa0a0a0
[0303.105] GetNearestColor (hdc=0xa20107cd, color=0x696969) returned 0x696969
[0303.105] GetNearestColor (hdc=0xa20107cd, color=0xa0a0a0) returned 0xa0a0a0
[0303.105] GetNearestColor (hdc=0xa20107cd, color=0x0) returned 0x0
[0303.105] GetNearestColor (hdc=0xa20107cd, color=0xffffff) returned 0xffffff
[0303.105] GetNearestColor (hdc=0xa20107cd, color=0xe5e5e5) returned 0xe5e5e5
[0303.105] GetNearestColor (hdc=0xa20107cd, color=0xd7d7d7) returned 0xd7d7d7
[0303.106] GetNearestColor (hdc=0xa20107cd, color=0x0) returned 0x0
[0303.106] RestoreDC (hdc=0xa20107cd, nSavedDC=-1) returned 1
[0303.106] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa20107cd) returned 0x0
[0303.106] IsAppThemed () returned 0x1
[0303.106] GetThemeAppProperties () returned 0x3
[0303.106] GetThemeAppProperties () returned 0x3
[0303.106] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0303.106] SendMessageW (hWnd=0x1002b8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0303.106] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0303.106] IsAppThemed () returned 0x1
[0303.106] GetThemeAppProperties () returned 0x3
[0303.106] GetThemeAppProperties () returned 0x3
[0303.106] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x2499e0c | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0303.106] IsAppThemed () returned 0x1
[0303.106] GetThemeAppProperties () returned 0x3
[0303.106] GetThemeAppProperties () returned 0x3
[0303.106] IsAppThemed () returned 0x1
[0303.106] GetThemeAppProperties () returned 0x3
[0303.107] GetThemeAppProperties () returned 0x3
[0303.107] GetFocus () returned 0x210122
[0303.107] IsAppThemed () returned 0x1
[0303.107] GetThemeAppProperties () returned 0x3
[0303.107] GetThemeAppProperties () returned 0x3
[0303.107] IsAppThemed () returned 0x1
[0303.107] GetThemeAppProperties () returned 0x3
[0303.107] GetThemeAppProperties () returned 0x3
[0303.107] IsThemePartDefined () returned 0x1
[0303.107] IsAppThemed () returned 0x1
[0303.107] GetThemeAppProperties () returned 0x3
[0303.107] GetThemeAppProperties () returned 0x3
[0303.107] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0303.107] IsAppThemed () returned 0x1
[0303.107] GetThemeAppProperties () returned 0x3
[0303.107] GetThemeAppProperties () returned 0x3
[0303.107] IsAppThemed () returned 0x1
[0303.107] GetThemeAppProperties () returned 0x3
[0303.107] GetThemeAppProperties () returned 0x3
[0303.107] IsThemePartDefined () returned 0x1
[0303.107] GdipCreateRegion (region=0x53e070) returned 0x0
[0303.107] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.107] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0303.107] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.107] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0303.107] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.108] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0303.108] LocalFree (hMem=0x89ea88) returned 0x0
[0303.108] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0303.108] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0303.108] LocalFree (hMem=0x89ee40) returned 0x0
[0303.108] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.108] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0303.108] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0303.108] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0303.108] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.108] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0303.108] GetCurrentObject (hdc=0xa20107cd, type=0x1) returned 0xb00017
[0303.108] GetCurrentObject (hdc=0xa20107cd, type=0x2) returned 0x900010
[0303.108] GetCurrentObject (hdc=0xa20107cd, type=0x7) returned 0x1e0507b9
[0303.108] GetCurrentObject (hdc=0xa20107cd, type=0x6) returned 0x8a01c2
[0303.108] SaveDC (hdc=0xa20107cd) returned 1
[0303.108] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x340407a1
[0303.108] GetClipRgn (hdc=0xa20107cd, hrgn=0x340407a1) returned 0
[0303.108] SelectClipRgn (hdc=0xa20107cd, hrgn=0xe1040798) returned 2
[0303.109] DeleteObject (ho=0x340407a1) returned 1
[0303.109] DeleteObject (ho=0xe1040798) returned 1
[0303.109] OffsetViewportOrgEx (in: hdc=0xa20107cd, x=0, y=0, lppt=0x249a4bc | out: lppt=0x249a4bc) returned 1
[0303.109] DrawThemeParentBackground () returned 0x0
[0303.109] GetWindowPlacement (in: hWnd=0x1002b8, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0303.109] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0303.109] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.109] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.109] GetSystemMetrics (nIndex=42) returned 0
[0303.109] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.109] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0303.109] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0303.109] GetCurrentObject (hdc=0xa20107cd, type=0x1) returned 0xb00017
[0303.109] GetCurrentObject (hdc=0xa20107cd, type=0x2) returned 0x900010
[0303.109] GetCurrentObject (hdc=0xa20107cd, type=0x7) returned 0x1e0507b9
[0303.109] GetCurrentObject (hdc=0xa20107cd, type=0x6) returned 0x8a01c2
[0303.109] SaveDC (hdc=0xa20107cd) returned 2
[0303.109] GetNearestColor (hdc=0xa20107cd, color=0xf0f0f0) returned 0xf0f0f0
[0303.110] CreateSolidBrush (color=0xf0f0f0) returned 0x9e10078d
[0303.110] FillRect (hDC=0xa20107cd, lprc=0x53dad0, hbr=0x9e10078d) returned 1
[0303.110] DeleteObject (ho=0x9e10078d) returned 1
[0303.110] RestoreDC (hdc=0xa20107cd, nSavedDC=-1) returned 1
[0303.110] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.110] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.110] GetSystemMetrics (nIndex=42) returned 0
[0303.110] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.110] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0303.110] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0303.110] GetCurrentObject (hdc=0xa20107cd, type=0x1) returned 0xb00017
[0303.110] GetCurrentObject (hdc=0xa20107cd, type=0x2) returned 0x900010
[0303.110] GetCurrentObject (hdc=0xa20107cd, type=0x7) returned 0x1e0507b9
[0303.110] GetCurrentObject (hdc=0xa20107cd, type=0x6) returned 0x8a01c2
[0303.110] SaveDC (hdc=0xa20107cd) returned 2
[0303.110] GetNearestColor (hdc=0xa20107cd, color=0xf0f0f0) returned 0xf0f0f0
[0303.110] CreateSolidBrush (color=0xf0f0f0) returned 0x9f10078d
[0303.110] FillRect (hDC=0xa20107cd, lprc=0x53da70, hbr=0x9f10078d) returned 1
[0303.110] DeleteObject (ho=0x9f10078d) returned 1
[0303.110] RestoreDC (hdc=0xa20107cd, nSavedDC=-1) returned 1
[0303.111] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.111] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.111] GetSystemMetrics (nIndex=42) returned 0
[0303.111] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.111] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0303.111] RestoreDC (hdc=0xa20107cd, nSavedDC=-1) returned 1
[0303.111] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa20107cd) returned 0x0
[0303.111] IsAppThemed () returned 0x1
[0303.111] GetThemeAppProperties () returned 0x3
[0303.111] GetThemeAppProperties () returned 0x3
[0303.111] IsAppThemed () returned 0x1
[0303.111] GetThemeAppProperties () returned 0x3
[0303.111] GetThemeAppProperties () returned 0x3
[0303.111] IsThemePartDefined () returned 0x1
[0303.111] GdipCreateRegion (region=0x53dff4) returned 0x0
[0303.111] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.111] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0303.111] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.111] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0303.111] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0303.112] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0303.112] LocalFree (hMem=0x89ee40) returned 0x0
[0303.112] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0303.112] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0303.112] LocalFree (hMem=0x89ee40) returned 0x0
[0303.112] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.112] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0303.112] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0303.112] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0303.112] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.112] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0303.112] GetCurrentObject (hdc=0xa20107cd, type=0x1) returned 0xb00017
[0303.112] GetCurrentObject (hdc=0xa20107cd, type=0x2) returned 0x900010
[0303.112] GetCurrentObject (hdc=0xa20107cd, type=0x7) returned 0x1e0507b9
[0303.112] GetCurrentObject (hdc=0xa20107cd, type=0x6) returned 0x8a01c2
[0303.112] SaveDC (hdc=0xa20107cd) returned 1
[0303.112] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe2040798
[0303.112] GetClipRgn (hdc=0xa20107cd, hrgn=0xe2040798) returned 0
[0303.112] SelectClipRgn (hdc=0xa20107cd, hrgn=0x360407a1) returned 2
[0303.112] DeleteObject (ho=0xe2040798) returned 1
[0303.113] DeleteObject (ho=0x360407a1) returned 1
[0303.113] OffsetViewportOrgEx (in: hdc=0xa20107cd, x=0, y=0, lppt=0x249ad44 | out: lppt=0x249ad44) returned 1
[0303.113] IsAppThemed () returned 0x1
[0303.113] GetThemeAppProperties () returned 0x3
[0303.113] GetThemeAppProperties () returned 0x3
[0303.113] DrawThemeBackground () returned 0x0
[0303.113] RestoreDC (hdc=0xa20107cd, nSavedDC=-1) returned 1
[0303.113] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa20107cd) returned 0x0
[0303.113] GdipCreateRegion (region=0x53dff8) returned 0x0
[0303.113] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.113] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0303.113] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.113] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0303.113] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0303.113] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0303.113] LocalFree (hMem=0x89ee40) returned 0x0
[0303.113] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.113] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0303.113] LocalFree (hMem=0x89ea88) returned 0x0
[0303.113] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.113] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0303.113] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0303.114] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0303.114] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.114] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0303.114] GetCurrentObject (hdc=0xa20107cd, type=0x1) returned 0xb00017
[0303.114] GetCurrentObject (hdc=0xa20107cd, type=0x2) returned 0x900010
[0303.114] GetCurrentObject (hdc=0xa20107cd, type=0x7) returned 0x1e0507b9
[0303.114] GetCurrentObject (hdc=0xa20107cd, type=0x6) returned 0x8a01c2
[0303.114] SaveDC (hdc=0xa20107cd) returned 1
[0303.114] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x370407a1
[0303.114] GetClipRgn (hdc=0xa20107cd, hrgn=0x370407a1) returned 0
[0303.114] SelectClipRgn (hdc=0xa20107cd, hrgn=0xe3040798) returned 2
[0303.114] DeleteObject (ho=0x370407a1) returned 1
[0303.114] DeleteObject (ho=0xe3040798) returned 1
[0303.114] OffsetViewportOrgEx (in: hdc=0xa20107cd, x=0, y=0, lppt=0x249b018 | out: lppt=0x249b018) returned 1
[0303.114] IsAppThemed () returned 0x1
[0303.114] GetThemeAppProperties () returned 0x3
[0303.114] GetThemeAppProperties () returned 0x3
[0303.114] GetThemeBackgroundContentRect () returned 0x0
[0303.114] RestoreDC (hdc=0xa20107cd, nSavedDC=-1) returned 1
[0303.114] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa20107cd) returned 0x0
[0303.114] IsAppThemed () returned 0x1
[0303.115] GetThemeAppProperties () returned 0x3
[0303.115] GetThemeAppProperties () returned 0x3
[0303.115] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0303.115] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0303.115] GetCurrentObject (hdc=0xa20107cd, type=0x1) returned 0xb00017
[0303.115] GetCurrentObject (hdc=0xa20107cd, type=0x2) returned 0x900010
[0303.115] GetCurrentObject (hdc=0xa20107cd, type=0x7) returned 0x1e0507b9
[0303.115] GetCurrentObject (hdc=0xa20107cd, type=0x6) returned 0x8a01c2
[0303.115] SaveDC (hdc=0xa20107cd) returned 1
[0303.115] GetTextAlign (hdc=0xa20107cd) returned 0x0
[0303.115] GetTextColor (hdc=0xa20107cd) returned 0x0
[0303.115] GetCurrentObject (hdc=0xa20107cd, type=0x6) returned 0x8a01c2
[0303.115] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0303.115] SelectObject (hdc=0xa20107cd, h=0x730a066d) returned 0x8a01c2
[0303.115] GetBkMode (hdc=0xa20107cd) returned 2
[0303.115] SetBkMode (hdc=0xa20107cd, mode=1) returned 2
[0303.115] DrawTextExW (in: hdc=0xa20107cd, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x249b3b8 | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0303.116] DrawTextExW (in: hdc=0xa20107cd, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x249b3b8 | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0303.116] RestoreDC (hdc=0xa20107cd, nSavedDC=-1) returned 1
[0303.116] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa20107cd) returned 0x0
[0303.116] GetFocus () returned 0x210122
[0303.116] IsAppThemed () returned 0x1
[0303.116] GetThemeAppProperties () returned 0x3
[0303.116] GetThemeAppProperties () returned 0x3
[0303.116] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0303.116] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0xa20107cd, x1=0, y1=0, rop=0xcc0020) returned 1
[0303.116] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa20107cd) returned 0x0
[0303.116] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0303.116] SelectObject (hdc=0xa20107cd, h=0x85000f) returned 0x1e0507b9
[0303.117] DeleteDC (hdc=0xa20107cd) returned 1
[0303.117] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0303.117] EndPaint (hWnd=0x41013e, lpPaint=0x53e2e4) returned 1
[0303.117] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.117] IsWindowUnicode (hWnd=0x202c6) returned 1
[0303.117] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.117] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.117] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.117] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0xf0105ee
[0303.117] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0303.117] CreateCompatibleDC (hdc=0xf0105ee) returned 0xa40107cd
[0303.117] SelectObject (hdc=0xa40107cd, h=0x1e0507b9) returned 0x85000f
[0303.117] GdipCreateFromHDC (hdc=0xa40107cd, graphics=0x53e300) returned 0x0
[0303.118] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0303.118] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0303.118] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0303.118] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.118] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0303.118] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.118] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0303.118] LocalFree (hMem=0x89ea88) returned 0x0
[0303.118] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.118] GdipCreateRegion (region=0x53e348) returned 0x0
[0303.118] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.118] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0303.118] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0303.118] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa4b0dbd) returned 0x0
[0303.118] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.118] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0303.118] GetCurrentObject (hdc=0xa40107cd, type=0x1) returned 0xb00017
[0303.118] GetCurrentObject (hdc=0xa40107cd, type=0x2) returned 0x900010
[0303.118] GetCurrentObject (hdc=0xa40107cd, type=0x7) returned 0x1e0507b9
[0303.118] GetCurrentObject (hdc=0xa40107cd, type=0x6) returned 0x8a01c2
[0303.119] SaveDC (hdc=0xa40107cd) returned 1
[0303.119] GetNearestColor (hdc=0xa40107cd, color=0xff) returned 0xff
[0303.119] GetNearestColor (hdc=0xa40107cd, color=0x55) returned 0x55
[0303.119] GetNearestColor (hdc=0xa40107cd, color=0x0) returned 0x0
[0303.119] GetNearestColor (hdc=0xa40107cd, color=0x55) returned 0x55
[0303.119] GetNearestColor (hdc=0xa40107cd, color=0x0) returned 0x0
[0303.119] GetNearestColor (hdc=0xa40107cd, color=0x8080ff) returned 0x8080ff
[0303.119] GetNearestColor (hdc=0xa40107cd, color=0x7373e5) returned 0x7373e5
[0303.119] GetNearestColor (hdc=0xa40107cd, color=0xe5) returned 0xe5
[0303.119] GetNearestColor (hdc=0xa40107cd, color=0x0) returned 0x0
[0303.119] RestoreDC (hdc=0xa40107cd, nSavedDC=-1) returned 1
[0303.119] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107cd) returned 0x0
[0303.119] IsAppThemed () returned 0x1
[0303.119] GetThemeAppProperties () returned 0x3
[0303.119] GetThemeAppProperties () returned 0x3
[0303.119] IsAppThemed () returned 0x1
[0303.119] GetThemeAppProperties () returned 0x3
[0303.120] GetThemeAppProperties () returned 0x3
[0303.120] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0303.120] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x249bb9c | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0303.120] IsAppThemed () returned 0x1
[0303.120] GetThemeAppProperties () returned 0x3
[0303.120] GetThemeAppProperties () returned 0x3
[0303.120] IsAppThemed () returned 0x1
[0303.120] GetThemeAppProperties () returned 0x3
[0303.120] GetThemeAppProperties () returned 0x3
[0303.120] GetFocus () returned 0x210122
[0303.120] IsAppThemed () returned 0x1
[0303.120] GetThemeAppProperties () returned 0x3
[0303.120] GetThemeAppProperties () returned 0x3
[0303.120] IsAppThemed () returned 0x1
[0303.120] GetThemeAppProperties () returned 0x3
[0303.120] GetThemeAppProperties () returned 0x3
[0303.120] IsThemePartDefined () returned 0x1
[0303.120] IsAppThemed () returned 0x1
[0303.121] GetThemeAppProperties () returned 0x3
[0303.121] GetThemeAppProperties () returned 0x3
[0303.121] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0303.121] IsAppThemed () returned 0x1
[0303.121] GetThemeAppProperties () returned 0x3
[0303.121] GetThemeAppProperties () returned 0x3
[0303.121] IsAppThemed () returned 0x1
[0303.121] GetThemeAppProperties () returned 0x3
[0303.121] GetThemeAppProperties () returned 0x3
[0303.121] IsThemePartDefined () returned 0x1
[0303.121] GdipCreateRegion (region=0x53e070) returned 0x0
[0303.121] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.121] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0303.121] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.121] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0303.121] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.121] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0303.121] LocalFree (hMem=0x89ea88) returned 0x0
[0303.121] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0303.121] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0303.121] LocalFree (hMem=0x89ee40) returned 0x0
[0303.121] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.121] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0303.121] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0303.121] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0303.121] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.122] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0303.122] GetCurrentObject (hdc=0xa40107cd, type=0x1) returned 0xb00017
[0303.122] GetCurrentObject (hdc=0xa40107cd, type=0x2) returned 0x900010
[0303.122] GetCurrentObject (hdc=0xa40107cd, type=0x7) returned 0x1e0507b9
[0303.122] GetCurrentObject (hdc=0xa40107cd, type=0x6) returned 0x8a01c2
[0303.122] SaveDC (hdc=0xa40107cd) returned 1
[0303.122] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe4040798
[0303.122] GetClipRgn (hdc=0xa40107cd, hrgn=0xe4040798) returned 0
[0303.122] SelectClipRgn (hdc=0xa40107cd, hrgn=0x3b0407a1) returned 2
[0303.122] DeleteObject (ho=0xe4040798) returned 1
[0303.122] DeleteObject (ho=0x3b0407a1) returned 1
[0303.122] OffsetViewportOrgEx (in: hdc=0xa40107cd, x=0, y=0, lppt=0x249c24c | out: lppt=0x249c24c) returned 1
[0303.122] DrawThemeParentBackground () returned 0x0
[0303.122] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0303.122] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0303.122] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0303.122] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0303.122] GetSystemMetrics (nIndex=42) returned 0
[0303.122] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0303.123] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0303.123] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0303.123] GetCurrentObject (hdc=0xa40107cd, type=0x1) returned 0xb00017
[0303.123] GetCurrentObject (hdc=0xa40107cd, type=0x2) returned 0x900010
[0303.123] GetCurrentObject (hdc=0xa40107cd, type=0x7) returned 0x1e0507b9
[0303.123] GetCurrentObject (hdc=0xa40107cd, type=0x6) returned 0x8a01c2
[0303.123] SaveDC (hdc=0xa40107cd) returned 2
[0303.123] GetNearestColor (hdc=0xa40107cd, color=0xff) returned 0xff
[0303.123] CreateSolidBrush (color=0xff) returned 0xa010078d
[0303.123] FillRect (hDC=0xa40107cd, lprc=0x53dad0, hbr=0xa010078d) returned 1
[0303.123] DeleteObject (ho=0xa010078d) returned 1
[0303.123] RestoreDC (hdc=0xa40107cd, nSavedDC=-1) returned 1
[0303.123] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0303.123] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0303.123] GetSystemMetrics (nIndex=42) returned 0
[0303.123] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0303.123] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0303.123] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0303.123] GetCurrentObject (hdc=0xa40107cd, type=0x1) returned 0xb00017
[0303.124] GetCurrentObject (hdc=0xa40107cd, type=0x2) returned 0x900010
[0303.124] GetCurrentObject (hdc=0xa40107cd, type=0x7) returned 0x1e0507b9
[0303.124] GetCurrentObject (hdc=0xa40107cd, type=0x6) returned 0x8a01c2
[0303.124] SaveDC (hdc=0xa40107cd) returned 2
[0303.124] GetNearestColor (hdc=0xa40107cd, color=0xff) returned 0xff
[0303.124] CreateSolidBrush (color=0xff) returned 0xa110078d
[0303.124] FillRect (hDC=0xa40107cd, lprc=0x53da70, hbr=0xa110078d) returned 1
[0303.124] DeleteObject (ho=0xa110078d) returned 1
[0303.124] RestoreDC (hdc=0xa40107cd, nSavedDC=-1) returned 1
[0303.124] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0303.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0303.124] GetSystemMetrics (nIndex=42) returned 0
[0303.124] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0303.124] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0303.124] RestoreDC (hdc=0xa40107cd, nSavedDC=-1) returned 1
[0303.124] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107cd) returned 0x0
[0303.124] IsAppThemed () returned 0x1
[0303.125] GetThemeAppProperties () returned 0x3
[0303.125] GetThemeAppProperties () returned 0x3
[0303.125] IsAppThemed () returned 0x1
[0303.125] GetThemeAppProperties () returned 0x3
[0303.125] GetThemeAppProperties () returned 0x3
[0303.125] IsThemePartDefined () returned 0x1
[0303.125] GdipCreateRegion (region=0x53dff4) returned 0x0
[0303.125] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.125] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0303.125] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.125] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0303.125] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0303.125] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0303.125] LocalFree (hMem=0x89ec80) returned 0x0
[0303.125] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0303.125] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0303.125] LocalFree (hMem=0x89eee8) returned 0x0
[0303.125] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.125] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0303.125] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0303.125] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0303.125] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.126] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0303.126] GetCurrentObject (hdc=0xa40107cd, type=0x1) returned 0xb00017
[0303.126] GetCurrentObject (hdc=0xa40107cd, type=0x2) returned 0x900010
[0303.126] GetCurrentObject (hdc=0xa40107cd, type=0x7) returned 0x1e0507b9
[0303.126] GetCurrentObject (hdc=0xa40107cd, type=0x6) returned 0x8a01c2
[0303.126] SaveDC (hdc=0xa40107cd) returned 1
[0303.126] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3c0407a1
[0303.126] GetClipRgn (hdc=0xa40107cd, hrgn=0x3c0407a1) returned 0
[0303.126] SelectClipRgn (hdc=0xa40107cd, hrgn=0xe6040798) returned 2
[0303.126] DeleteObject (ho=0x3c0407a1) returned 1
[0303.126] DeleteObject (ho=0xe6040798) returned 1
[0303.126] OffsetViewportOrgEx (in: hdc=0xa40107cd, x=0, y=0, lppt=0x249cab0 | out: lppt=0x249cab0) returned 1
[0303.126] IsAppThemed () returned 0x1
[0303.126] GetThemeAppProperties () returned 0x3
[0303.126] GetThemeAppProperties () returned 0x3
[0303.126] DrawThemeBackground () returned 0x0
[0303.126] RestoreDC (hdc=0xa40107cd, nSavedDC=-1) returned 1
[0303.126] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107cd) returned 0x0
[0303.126] GdipCreateRegion (region=0x53dff8) returned 0x0
[0303.126] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.127] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0303.127] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.127] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0303.127] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.127] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0303.127] LocalFree (hMem=0x89ea88) returned 0x0
[0303.127] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0303.127] LocalFree (hMem=0x89ee40) returned 0x0
[0303.127] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.127] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0303.127] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0303.127] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0303.127] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.127] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0303.127] GetCurrentObject (hdc=0xa40107cd, type=0x1) returned 0xb00017
[0303.127] GetCurrentObject (hdc=0xa40107cd, type=0x2) returned 0x900010
[0303.127] GetCurrentObject (hdc=0xa40107cd, type=0x7) returned 0x1e0507b9
[0303.127] GetCurrentObject (hdc=0xa40107cd, type=0x6) returned 0x8a01c2
[0303.127] SaveDC (hdc=0xa40107cd) returned 1
[0303.127] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe7040798
[0303.127] GetClipRgn (hdc=0xa40107cd, hrgn=0xe7040798) returned 0
[0303.127] SelectClipRgn (hdc=0xa40107cd, hrgn=0x3d0407a1) returned 2
[0303.128] DeleteObject (ho=0xe7040798) returned 1
[0303.128] DeleteObject (ho=0x3d0407a1) returned 1
[0303.128] OffsetViewportOrgEx (in: hdc=0xa40107cd, x=0, y=0, lppt=0x249cd84 | out: lppt=0x249cd84) returned 1
[0303.128] IsAppThemed () returned 0x1
[0303.128] GetThemeAppProperties () returned 0x3
[0303.128] GetThemeAppProperties () returned 0x3
[0303.128] GetThemeBackgroundContentRect () returned 0x0
[0303.128] RestoreDC (hdc=0xa40107cd, nSavedDC=-1) returned 1
[0303.128] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107cd) returned 0x0
[0303.128] IsAppThemed () returned 0x1
[0303.128] GetThemeAppProperties () returned 0x3
[0303.128] GetThemeAppProperties () returned 0x3
[0303.128] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0303.128] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0303.128] GetCurrentObject (hdc=0xa40107cd, type=0x1) returned 0xb00017
[0303.128] GetCurrentObject (hdc=0xa40107cd, type=0x2) returned 0x900010
[0303.128] GetCurrentObject (hdc=0xa40107cd, type=0x7) returned 0x1e0507b9
[0303.128] GetCurrentObject (hdc=0xa40107cd, type=0x6) returned 0x8a01c2
[0303.128] SaveDC (hdc=0xa40107cd) returned 1
[0303.128] GetTextAlign (hdc=0xa40107cd) returned 0x0
[0303.128] GetTextColor (hdc=0xa40107cd) returned 0x0
[0303.128] GetCurrentObject (hdc=0xa40107cd, type=0x6) returned 0x8a01c2
[0303.129] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0303.129] SelectObject (hdc=0xa40107cd, h=0x450a0799) returned 0x8a01c2
[0303.129] GetBkMode (hdc=0xa40107cd) returned 2
[0303.129] SetBkMode (hdc=0xa40107cd, mode=1) returned 2
[0303.129] DrawTextExW (in: hdc=0xa40107cd, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x249d124 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0303.129] DrawTextExW (in: hdc=0xa40107cd, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x249d124 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0303.129] RestoreDC (hdc=0xa40107cd, nSavedDC=-1) returned 1
[0303.129] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107cd) returned 0x0
[0303.129] GetFocus () returned 0x210122
[0303.129] IsAppThemed () returned 0x1
[0303.129] GetThemeAppProperties () returned 0x3
[0303.129] GetThemeAppProperties () returned 0x3
[0303.130] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0303.130] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xa40107cd, x1=0, y1=0, rop=0xcc0020) returned 1
[0303.130] GdipReleaseDC (graphics=0x5d92c30, hdc=0xa40107cd) returned 0x0
[0303.130] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0303.130] SelectObject (hdc=0xa40107cd, h=0x85000f) returned 0x1e0507b9
[0303.130] DeleteDC (hdc=0xa40107cd) returned 1
[0303.130] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0303.130] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0303.130] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.130] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.130] WaitMessage () returned 1
[0303.158] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.158] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0303.159] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.159] WaitMessage () returned 1
[0303.159] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.160] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0303.160] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.160] WaitMessage () returned 1
[0303.160] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.160] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0303.160] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.160] WaitMessage () returned 1
[0303.181] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.181] IsWindowUnicode (hWnd=0x1d004e) returned 1
[0303.181] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.181] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.181] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.181] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.181] IsWindowUnicode (hWnd=0x1d004e) returned 1
[0303.181] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.181] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.181] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.181] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x2a1, wParam=0x0, lParam=0xb001f) returned 0x0
[0303.181] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.181] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.181] WaitMessage () returned 1
[0303.198] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.198] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.198] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.199] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.199] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.199] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.199] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.199] WaitMessage () returned 1
[0303.200] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.200] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.200] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.200] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.200] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.201] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.201] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.201] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.201] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.202] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.202] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.202] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.202] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.202] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.202] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.202] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.202] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.202] WaitMessage () returned 1
[0303.203] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.203] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.203] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.203] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.203] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.204] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.204] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.204] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.204] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.204] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.204] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.204] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.204] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.204] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.204] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.205] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.205] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.205] WaitMessage () returned 1
[0303.205] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.205] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.205] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.205] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.205] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.207] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.207] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.207] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.207] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.207] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.207] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.208] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.208] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.208] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.208] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.208] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.208] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0303.208] WaitMessage () returned 1
[0303.311] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.311] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x84, wParam=0x0, lParam=0x1940360) returned 0x1
[0303.312] IsWindowUnicode (hWnd=0x1d004e) returned 1
[0303.312] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.312] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x84, wParam=0x0, lParam=0x1940360) returned 0x1
[0303.312] GetDlgItem (hDlg=0x1002b8, nIDDlgItem=0) returned 0x0
[0303.312] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x210, wParam=0x201, lParam=0x170141) returned 0x0
[0303.312] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x21, wParam=0x1002b8, lParam=0x2010001) returned 0x1
[0303.312] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x21, wParam=0x1002b8, lParam=0x2010001) returned 0x1
[0303.312] SetCursor (hCursor=0x10003) returned 0x10003
[0303.312] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.312] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0303.312] GetKeyState (nVirtKey=1) returned -127
[0303.312] GetKeyState (nVirtKey=2) returned 0
[0303.312] GetKeyState (nVirtKey=4) returned 0
[0303.312] GetKeyState (nVirtKey=5) returned 0
[0303.312] GetKeyState (nVirtKey=6) returned 0
[0303.312] IsWindowVisible (hWnd=0x1d004e) returned 1
[0303.312] IsWindowEnabled (hWnd=0x1d004e) returned 1
[0303.312] SetFocus (hWnd=0x1d004e) returned 0x210122
[0303.313] GetFocus () returned 0x1d004e
[0303.313] IsChild (hWndParent=0x1002b8, hWnd=0x1d004e) returned 1
[0303.313] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x8, wParam=0x1d004e, lParam=0x0) returned 0x1
[0303.313] SendMessageW (hWnd=0x210122, Msg=0x2111, wParam=0x2000122, lParam=0x210122) returned 0x0
[0303.314] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0303.315] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0303.316] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0303.316] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0303.316] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0303.316] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0303.321] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0303.321] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x7, wParam=0x210122, lParam=0x0) returned 0x0
[0303.321] GetStockObject (i=5) returned 0x900015
[0303.321] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0303.321] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0xd, wParam=0x3, lParam=0x89e6e8) returned 0x2
[0303.321] GetDlgItem (hDlg=0x1002b8, nIDDlgItem=1900622) returned 0x1d004e
[0303.321] SendMessageW (hWnd=0x1d004e, Msg=0x202b, wParam=0x1d004e, lParam=0x53de74) returned 0x0
[0303.321] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x202b, wParam=0x1d004e, lParam=0x53de74) returned 0x0
[0303.321] InvalidateRect (hWnd=0x1d004e, lpRect=0x0, bErase=0) returned 1
[0303.323] GetFocus () returned 0x1d004e
[0303.323] GetFocus () returned 0x1d004e
[0303.323] GetFocus () returned 0x1d004e
[0303.323] GetKeyState (nVirtKey=1) returned -127
[0303.323] GetKeyState (nVirtKey=2) returned 0
[0303.323] GetKeyState (nVirtKey=4) returned 0
[0303.323] GetKeyState (nVirtKey=5) returned 0
[0303.323] GetKeyState (nVirtKey=6) returned 0
[0303.323] GetCapture () returned 0x0
[0303.323] SetCapture (hWnd=0x1d004e) returned 0x0
[0303.323] GetKeyState (nVirtKey=1) returned -127
[0303.323] GetKeyState (nVirtKey=2) returned 0
[0303.323] GetKeyState (nVirtKey=4) returned 0
[0303.323] GetKeyState (nVirtKey=5) returned 0
[0303.323] GetKeyState (nVirtKey=6) returned 0
[0303.323] NotifyWinEvent (event=0x800a, hwnd=0x1d004e, idObject=-4, idChild=0)
[0303.323] InvalidateRect (hWnd=0x1d004e, lpRect=0x53e4c8, bErase=0) returned 1
[0303.323] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.323] IsWindowUnicode (hWnd=0x1d004e) returned 1
[0303.323] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0303.323] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0303.324] DispatchMessageW (lpMsg=0x53e8a0)
[0303.324] MapWindowPoints (in: hWndFrom=0x1d004e, hWndTo=0x0, lpPoints=0x249d404, cPoints=0x1 | out: lpPoints=0x249d404) returned 25756481
[0303.324] NotifyWinEvent (event=0x800a, hwnd=0x1d004e, idObject=-4, idChild=0)
[0303.324] InvalidateRect (hWnd=0x1d004e, lpRect=0x53e468, bErase=0) returned 1
[0303.324] UpdateWindow (hWnd=0x1d004e)
[0303.324] BeginPaint (in: hWnd=0x1d004e, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0xf0105ee
[0303.324] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0303.324] CreateCompatibleDC (hdc=0xf0105ee) returned 0x280107c9
[0303.324] SelectObject (hdc=0x280107c9, h=0x1e0507b9) returned 0x85000f
[0303.324] GdipCreateFromHDC (hdc=0x280107c9, graphics=0x53df98) returned 0x0
[0303.324] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0303.324] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0303.324] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0303.324] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.325] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0303.325] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.325] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0303.325] LocalFree (hMem=0x89ea88) returned 0x0
[0303.325] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.325] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0303.325] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.325] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0303.325] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0303.325] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa490dbd) returned 0x0
[0303.325] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.325] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0303.325] GetCurrentObject (hdc=0x280107c9, type=0x1) returned 0xb00017
[0303.325] GetCurrentObject (hdc=0x280107c9, type=0x2) returned 0x900010
[0303.325] GetCurrentObject (hdc=0x280107c9, type=0x7) returned 0x1e0507b9
[0303.325] GetCurrentObject (hdc=0x280107c9, type=0x6) returned 0x8a01c2
[0303.325] SaveDC (hdc=0x280107c9) returned 1
[0303.325] GetNearestColor (hdc=0x280107c9, color=0xf0f0f0) returned 0xf0f0f0
[0303.325] GetNearestColor (hdc=0x280107c9, color=0xa0a0a0) returned 0xa0a0a0
[0303.326] GetNearestColor (hdc=0x280107c9, color=0x696969) returned 0x696969
[0303.326] GetNearestColor (hdc=0x280107c9, color=0xa0a0a0) returned 0xa0a0a0
[0303.326] GetNearestColor (hdc=0x280107c9, color=0x0) returned 0x0
[0303.326] GetNearestColor (hdc=0x280107c9, color=0xffffff) returned 0xffffff
[0303.326] GetNearestColor (hdc=0x280107c9, color=0xe5e5e5) returned 0xe5e5e5
[0303.326] GetNearestColor (hdc=0x280107c9, color=0xd7d7d7) returned 0xd7d7d7
[0303.326] GetNearestColor (hdc=0x280107c9, color=0x0) returned 0x0
[0303.326] RestoreDC (hdc=0x280107c9, nSavedDC=-1) returned 1
[0303.326] GdipReleaseDC (graphics=0x5d92c30, hdc=0x280107c9) returned 0x0
[0303.326] IsAppThemed () returned 0x1
[0303.326] GetThemeAppProperties () returned 0x3
[0303.326] GetThemeAppProperties () returned 0x3
[0303.326] IsAppThemed () returned 0x1
[0303.326] GetThemeAppProperties () returned 0x3
[0303.326] GetThemeAppProperties () returned 0x3
[0303.326] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0303.326] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x249db78 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0303.327] IsAppThemed () returned 0x1
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] IsAppThemed () returned 0x1
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] IsAppThemed () returned 0x1
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] IsAppThemed () returned 0x1
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] IsThemePartDefined () returned 0x1
[0303.327] IsAppThemed () returned 0x1
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0303.327] IsAppThemed () returned 0x1
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] IsAppThemed () returned 0x1
[0303.327] GetThemeAppProperties () returned 0x3
[0303.327] GetThemeAppProperties () returned 0x3
[0303.328] IsThemePartDefined () returned 0x1
[0303.328] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0303.328] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.328] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0303.328] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.328] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0303.328] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.328] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0303.328] LocalFree (hMem=0x89ea88) returned 0x0
[0303.328] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.328] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0303.328] LocalFree (hMem=0x89ea88) returned 0x0
[0303.328] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.328] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0303.328] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0303.328] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0303.328] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.328] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0303.328] GetCurrentObject (hdc=0x280107c9, type=0x1) returned 0xb00017
[0303.328] GetCurrentObject (hdc=0x280107c9, type=0x2) returned 0x900010
[0303.328] GetCurrentObject (hdc=0x280107c9, type=0x7) returned 0x1e0507b9
[0303.328] GetCurrentObject (hdc=0x280107c9, type=0x6) returned 0x8a01c2
[0303.328] SaveDC (hdc=0x280107c9) returned 1
[0303.329] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3e0407a1
[0303.329] GetClipRgn (hdc=0x280107c9, hrgn=0x3e0407a1) returned 0
[0303.329] SelectClipRgn (hdc=0x280107c9, hrgn=0xeb040798) returned 2
[0303.329] DeleteObject (ho=0x3e0407a1) returned 1
[0303.329] DeleteObject (ho=0xeb040798) returned 1
[0303.329] OffsetViewportOrgEx (in: hdc=0x280107c9, x=0, y=0, lppt=0x249e228 | out: lppt=0x249e228) returned 1
[0303.329] DrawThemeParentBackground () returned 0x0
[0303.329] GetWindowPlacement (in: hWnd=0x1002b8, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0303.329] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0303.329] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.329] GetSystemMetrics (nIndex=42) returned 0
[0303.329] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.329] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0303.329] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0303.329] GetCurrentObject (hdc=0x280107c9, type=0x1) returned 0xb00017
[0303.329] GetCurrentObject (hdc=0x280107c9, type=0x2) returned 0x900010
[0303.329] GetCurrentObject (hdc=0x280107c9, type=0x7) returned 0x1e0507b9
[0303.329] GetCurrentObject (hdc=0x280107c9, type=0x6) returned 0x8a01c2
[0303.330] SaveDC (hdc=0x280107c9) returned 2
[0303.330] GetNearestColor (hdc=0x280107c9, color=0xf0f0f0) returned 0xf0f0f0
[0303.330] CreateSolidBrush (color=0xf0f0f0) returned 0xa210078d
[0303.330] FillRect (hDC=0x280107c9, lprc=0x53d760, hbr=0xa210078d) returned 1
[0303.330] DeleteObject (ho=0xa210078d) returned 1
[0303.330] RestoreDC (hdc=0x280107c9, nSavedDC=-1) returned 1
[0303.330] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.330] GetSystemMetrics (nIndex=42) returned 0
[0303.330] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0303.330] GetClientRect (in: hWnd=0x1002b8, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0303.330] GetCurrentObject (hdc=0x280107c9, type=0x1) returned 0xb00017
[0303.330] GetCurrentObject (hdc=0x280107c9, type=0x2) returned 0x900010
[0303.330] GetCurrentObject (hdc=0x280107c9, type=0x7) returned 0x1e0507b9
[0303.330] GetCurrentObject (hdc=0x280107c9, type=0x6) returned 0x8a01c2
[0303.330] SaveDC (hdc=0x280107c9) returned 2
[0303.330] GetNearestColor (hdc=0x280107c9, color=0xf0f0f0) returned 0xf0f0f0
[0303.330] CreateSolidBrush (color=0xf0f0f0) returned 0xa310078d
[0303.331] FillRect (hDC=0x280107c9, lprc=0x53d700, hbr=0xa310078d) returned 1
[0303.331] DeleteObject (ho=0xa310078d) returned 1
[0303.331] RestoreDC (hdc=0x280107c9, nSavedDC=-1) returned 1
[0303.331] GetWindowTextLengthW (hWnd=0x1002b8) returned 10
[0303.331] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0303.331] GetSystemMetrics (nIndex=42) returned 0
[0303.331] GetWindowTextW (in: hWnd=0x1002b8, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0303.331] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0303.331] RestoreDC (hdc=0x280107c9, nSavedDC=-1) returned 1
[0303.331] GdipReleaseDC (graphics=0x5d92c30, hdc=0x280107c9) returned 0x0
[0303.331] IsAppThemed () returned 0x1
[0303.331] GetThemeAppProperties () returned 0x3
[0303.331] GetThemeAppProperties () returned 0x3
[0303.331] IsAppThemed () returned 0x1
[0303.331] GetThemeAppProperties () returned 0x3
[0303.331] GetThemeAppProperties () returned 0x3
[0303.331] IsThemePartDefined () returned 0x1
[0303.331] GdipCreateRegion (region=0x53dc80) returned 0x0
[0303.331] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.331] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0303.332] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.332] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0303.332] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.332] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0303.332] LocalFree (hMem=0x89ea88) returned 0x0
[0303.332] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0303.332] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0303.332] LocalFree (hMem=0x89ee40) returned 0x0
[0303.332] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.332] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0303.332] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0303.332] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0303.332] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.332] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0303.332] GetCurrentObject (hdc=0x280107c9, type=0x1) returned 0xb00017
[0303.332] GetCurrentObject (hdc=0x280107c9, type=0x2) returned 0x900010
[0303.332] GetCurrentObject (hdc=0x280107c9, type=0x7) returned 0x1e0507b9
[0303.332] GetCurrentObject (hdc=0x280107c9, type=0x6) returned 0x8a01c2
[0303.332] SaveDC (hdc=0x280107c9) returned 1
[0303.332] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xec040798
[0303.332] GetClipRgn (hdc=0x280107c9, hrgn=0xec040798) returned 0
[0303.332] SelectClipRgn (hdc=0x280107c9, hrgn=0x400407a1) returned 2
[0303.333] DeleteObject (ho=0xec040798) returned 1
[0303.333] DeleteObject (ho=0x400407a1) returned 1
[0303.333] OffsetViewportOrgEx (in: hdc=0x280107c9, x=0, y=0, lppt=0x249eab0 | out: lppt=0x249eab0) returned 1
[0303.333] IsAppThemed () returned 0x1
[0303.333] GetThemeAppProperties () returned 0x3
[0303.333] GetThemeAppProperties () returned 0x3
[0303.333] DrawThemeBackground () returned 0x0
[0303.333] RestoreDC (hdc=0x280107c9, nSavedDC=-1) returned 1
[0303.333] GdipReleaseDC (graphics=0x5d92c30, hdc=0x280107c9) returned 0x0
[0303.333] GdipCreateRegion (region=0x53dc84) returned 0x0
[0303.333] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.333] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0303.333] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.333] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0303.333] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0303.333] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0303.333] LocalFree (hMem=0x89ee08) returned 0x0
[0303.333] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0303.333] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0303.333] LocalFree (hMem=0x89ec80) returned 0x0
[0303.333] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.334] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0303.334] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0303.334] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0303.334] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.334] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0303.334] GetCurrentObject (hdc=0x280107c9, type=0x1) returned 0xb00017
[0303.334] GetCurrentObject (hdc=0x280107c9, type=0x2) returned 0x900010
[0303.334] GetCurrentObject (hdc=0x280107c9, type=0x7) returned 0x1e0507b9
[0303.334] GetCurrentObject (hdc=0x280107c9, type=0x6) returned 0x8a01c2
[0303.334] SaveDC (hdc=0x280107c9) returned 1
[0303.334] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x410407a1
[0303.334] GetClipRgn (hdc=0x280107c9, hrgn=0x410407a1) returned 0
[0303.334] SelectClipRgn (hdc=0x280107c9, hrgn=0xed040798) returned 2
[0303.334] DeleteObject (ho=0x410407a1) returned 1
[0303.335] DeleteObject (ho=0xed040798) returned 1
[0303.335] OffsetViewportOrgEx (in: hdc=0x280107c9, x=0, y=0, lppt=0x249ed84 | out: lppt=0x249ed84) returned 1
[0303.335] IsAppThemed () returned 0x1
[0303.335] GetThemeAppProperties () returned 0x3
[0303.335] GetThemeAppProperties () returned 0x3
[0303.335] GetThemeBackgroundContentRect () returned 0x0
[0303.335] RestoreDC (hdc=0x280107c9, nSavedDC=-1) returned 1
[0303.335] GdipReleaseDC (graphics=0x5d92c30, hdc=0x280107c9) returned 0x0
[0303.335] IsAppThemed () returned 0x1
[0303.335] GetThemeAppProperties () returned 0x3
[0303.335] GetThemeAppProperties () returned 0x3
[0303.335] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0303.335] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0303.335] GetCurrentObject (hdc=0x280107c9, type=0x1) returned 0xb00017
[0303.335] GetCurrentObject (hdc=0x280107c9, type=0x2) returned 0x900010
[0303.335] GetCurrentObject (hdc=0x280107c9, type=0x7) returned 0x1e0507b9
[0303.335] GetCurrentObject (hdc=0x280107c9, type=0x6) returned 0x8a01c2
[0303.335] SaveDC (hdc=0x280107c9) returned 1
[0303.335] GetTextAlign (hdc=0x280107c9) returned 0x0
[0303.335] GetTextColor (hdc=0x280107c9) returned 0x0
[0303.335] GetCurrentObject (hdc=0x280107c9, type=0x6) returned 0x8a01c2
[0303.336] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0303.336] SelectObject (hdc=0x280107c9, h=0x730a066d) returned 0x8a01c2
[0303.336] GetBkMode (hdc=0x280107c9) returned 2
[0303.336] SetBkMode (hdc=0x280107c9, mode=1) returned 2
[0303.336] DrawTextExW (in: hdc=0x280107c9, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x249f124 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0303.336] DrawTextExW (in: hdc=0x280107c9, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x249f124 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0303.336] RestoreDC (hdc=0x280107c9, nSavedDC=-1) returned 1
[0303.336] GdipReleaseDC (graphics=0x5d92c30, hdc=0x280107c9) returned 0x0
[0303.336] GetFocus () returned 0x1d004e
[0303.336] IsAppThemed () returned 0x1
[0303.337] GetThemeAppProperties () returned 0x3
[0303.337] GetThemeAppProperties () returned 0x3
[0303.337] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0303.337] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=60, cy=22, hdcSrc=0x280107c9, x1=0, y1=0, rop=0xcc0020) returned 1
[0303.337] GdipReleaseDC (graphics=0x5d92c30, hdc=0x280107c9) returned 0x0
[0303.337] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0303.337] SelectObject (hdc=0x280107c9, h=0x85000f) returned 0x1e0507b9
[0303.337] DeleteDC (hdc=0x280107c9) returned 1
[0303.337] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0303.337] EndPaint (hWnd=0x1d004e, lpPaint=0x53df7c) returned 1
[0303.338] WindowFromPoint (Point=0x360)
[0303.338] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x84, wParam=0x0, lParam=0x1940360) returned 0x1
[0303.338] GetWindowTextLengthW (hWnd=0x210122)
[0303.338] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0303.338] GetWindowTextW (hWnd=0x210122, lpString=0x53e3e4, nMaxCount=1)
[0303.338] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0303.338] SendMessageW (hWnd=0x1002b8, Msg=0x10, wParam=0x0, lParam=0x0)
[0303.338] GetCapture () returned 0x1d004e
[0303.338] ReleaseCapture ()
[0303.339] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0303.340] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x84, wParam=0x0, lParam=0x1940360) returned 0x1
[0303.340] EnableWindow (hWnd=0x70036, bEnable=1)
[0303.343] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0303.343] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x86, wParam=0x0, lParam=0x70036)
[0303.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0303.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0303.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0303.356] IsChild (hWndParent=0x1002b8, hWnd=0x202c6) returned 0
[0303.356] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x1d004e, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0303.356] GetCapture () returned 0x0
[0303.356] InvalidateRect (hWnd=0x1d004e, lpRect=0x0, bErase=0) returned 1
[0303.359] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0303.359] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c)
[0303.359] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0303.372] IsChild (hWndParent=0x1002b8, hWnd=0x202c6) returned 0
[0303.372] ShowWindow (hWnd=0x1002b8, nCmdShow=0)
[0303.372] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0303.377] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1002b8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0303.377] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x210122, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1
[0303.377] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x2700ea, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0303.378] GetWindowTextLengthW (hWnd=0x2201e2)
[0303.378] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0303.379] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x2201e2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
[0303.398] GetProcessWindowStation () returned 0x13c
[0303.399] GetActiveWindow () returned 0x70036
[0303.399] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x75760000
[0303.399] GetCurrentActCtx (in: lphActCtx=0x53e98c | out: lphActCtx=0x53e98c*=0x89a934) returned 1
[0303.399] GetCurrentThreadId () returned 0x11d0
[0303.400] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf5f1e, lParam=0x0) returned 1
[0303.400] IsWindowVisible (hWnd=0x70036) returned 1
[0303.400] IsWindowEnabled (hWnd=0x70036) returned 1
[0303.400] IsWindowVisible (hWnd=0x602b6) returned 0
[0303.400] IsWindowVisible (hWnd=0x901f8) returned 0
[0303.400] IsWindowVisible (hWnd=0x202d0) returned 0
[0303.400] IsWindowVisible (hWnd=0x202d4) returned 0
[0303.400] GetActiveWindow () returned 0x70036
[0303.400] GetFocus () returned 0x202c6
[0303.400] IsWindow (hWnd=0x70036) returned 1
[0303.400] EnableWindow (hWnd=0x70036, bEnable=0)
[0303.400] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0303.401] MessageBoxW (hWnd=0x70036, lpText="Wrong.Hahaha.", lpCaption="Ransomware", uType=0x0) returned 1
[0303.402] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0303.424] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e0f0 | out: lpPaint=0x53e0f0) returned 0x60100ce
[0303.425] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0303.425] CreateCompatibleDC (hdc=0x60100ce) returned 0x340107cb
[0303.425] SelectObject (hdc=0x340107cb, h=0x1e0507b9) returned 0x85000f
[0303.425] GdipCreateFromHDC (hdc=0x340107cb, graphics=0x53e108) returned 0x0
[0303.425] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0303.425] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0303.425] GdipCreateMatrix (matrix=0x53e150) returned 0x0
[0303.425] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.425] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e168) returned 0x0
[0303.425] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.426] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0303.426] LocalFree (hMem=0x89ea88) returned 0x0
[0303.426] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.426] GdipCreateRegion (region=0x53e150) returned 0x0
[0303.426] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.426] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e15c) returned 0x0
[0303.426] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e188) returned 0x0
[0303.426] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa470dbd) returned 0x0
[0303.426] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.427] GdipGetDC (graphics=0x5d92c30, hdc=0x53df74) returned 0x0
[0303.427] GetCurrentObject (hdc=0x340107cb, type=0x1) returned 0xb00017
[0303.427] GetCurrentObject (hdc=0x340107cb, type=0x2) returned 0x900010
[0303.427] GetCurrentObject (hdc=0x340107cb, type=0x7) returned 0x1e0507b9
[0303.427] GetCurrentObject (hdc=0x340107cb, type=0x6) returned 0x8a01c2
[0303.427] SaveDC (hdc=0x340107cb) returned 1
[0303.427] GetNearestColor (hdc=0x340107cb, color=0xff) returned 0xff
[0303.427] GetNearestColor (hdc=0x340107cb, color=0x55) returned 0x55
[0303.427] GetNearestColor (hdc=0x340107cb, color=0x0) returned 0x0
[0303.427] GetNearestColor (hdc=0x340107cb, color=0x55) returned 0x55
[0303.427] GetNearestColor (hdc=0x340107cb, color=0x0) returned 0x0
[0303.427] GetNearestColor (hdc=0x340107cb, color=0x8080ff) returned 0x8080ff
[0303.432] GetNearestColor (hdc=0x340107cb, color=0x7373e5) returned 0x7373e5
[0303.432] GetNearestColor (hdc=0x340107cb, color=0xe5) returned 0xe5
[0303.432] GetNearestColor (hdc=0x340107cb, color=0x0) returned 0x0
[0303.432] RestoreDC (hdc=0x340107cb, nSavedDC=-1) returned 1
[0303.432] GdipReleaseDC (graphics=0x5d92c30, hdc=0x340107cb) returned 0x0
[0303.432] IsAppThemed () returned 0x1
[0303.432] GetThemeAppProperties () returned 0x3
[0303.432] GetThemeAppProperties () returned 0x3
[0303.433] IsAppThemed () returned 0x1
[0303.433] GetThemeAppProperties () returned 0x3
[0303.433] GetThemeAppProperties () returned 0x3
[0303.433] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0303.433] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53de30, format=0x102415, lpdtp=0x24a0518 | out: lpchText="Decrypt", lprc=0x53de30) returned 13
[0303.433] IsAppThemed () returned 0x1
[0303.433] GetThemeAppProperties () returned 0x3
[0303.433] GetThemeAppProperties () returned 0x3
[0303.433] IsAppThemed () returned 0x1
[0303.433] GetThemeAppProperties () returned 0x3
[0303.433] GetThemeAppProperties () returned 0x3
[0303.433] GetFocus () returned 0x42013e
[0303.433] IsAppThemed () returned 0x1
[0303.434] GetThemeAppProperties () returned 0x3
[0303.434] GetThemeAppProperties () returned 0x3
[0303.434] IsAppThemed () returned 0x1
[0303.434] GetThemeAppProperties () returned 0x3
[0303.434] GetThemeAppProperties () returned 0x3
[0303.434] IsThemePartDefined () returned 0x1
[0303.434] IsAppThemed () returned 0x1
[0303.434] GetThemeAppProperties () returned 0x3
[0303.434] GetThemeAppProperties () returned 0x3
[0303.434] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0303.434] IsAppThemed () returned 0x1
[0303.434] GetThemeAppProperties () returned 0x3
[0303.434] GetThemeAppProperties () returned 0x3
[0303.434] IsAppThemed () returned 0x1
[0303.434] GetThemeAppProperties () returned 0x3
[0303.434] GetThemeAppProperties () returned 0x3
[0303.434] IsThemePartDefined () returned 0x1
[0303.434] GdipCreateRegion (region=0x53de78) returned 0x0
[0303.434] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.434] GdipCreateMatrix (matrix=0x53de78) returned 0x0
[0303.434] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.435] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de90) returned 0x0
[0303.435] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.435] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0303.435] LocalFree (hMem=0x89ea88) returned 0x0
[0303.435] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0303.435] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0303.435] LocalFree (hMem=0x89ee08) returned 0x0
[0303.435] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.435] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53deb8) returned 0x0
[0303.435] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dea8) returned 0x0
[0303.435] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dea8) returned 0x0
[0303.435] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.435] GdipGetDC (graphics=0x5d92c30, hdc=0x53dec0) returned 0x0
[0303.435] GetCurrentObject (hdc=0x340107cb, type=0x1) returned 0xb00017
[0303.435] GetCurrentObject (hdc=0x340107cb, type=0x2) returned 0x900010
[0303.435] GetCurrentObject (hdc=0x340107cb, type=0x7) returned 0x1e0507b9
[0303.435] GetCurrentObject (hdc=0x340107cb, type=0x6) returned 0x8a01c2
[0303.435] SaveDC (hdc=0x340107cb) returned 1
[0303.435] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xee040798
[0303.436] GetClipRgn (hdc=0x340107cb, hrgn=0xee040798) returned 0
[0303.436] SelectClipRgn (hdc=0x340107cb, hrgn=0x470407a1) returned 2
[0303.436] DeleteObject (ho=0xee040798) returned 1
[0303.436] DeleteObject (ho=0x470407a1) returned 1
[0303.436] OffsetViewportOrgEx (in: hdc=0x340107cb, x=0, y=0, lppt=0x24a0bc8 | out: lppt=0x24a0bc8) returned 1
[0303.436] DrawThemeParentBackground () returned 0x0
[0303.436] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53db84 | out: lpwndpl=0x53db84) returned 1
[0303.436] GetClientRect (in: hWnd=0x70036, lpRect=0x53db30 | out: lpRect=0x53db30) returned 1
[0303.436] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0303.436] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0303.436] GetSystemMetrics (nIndex=42) returned 0
[0303.436] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d9ec, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0303.436] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d9ec) returned 0xc
[0303.436] GetClientRect (in: hWnd=0x70036, lpRect=0x53da38 | out: lpRect=0x53da38) returned 1
[0303.436] GetCurrentObject (hdc=0x340107cb, type=0x1) returned 0xb00017
[0303.436] GetCurrentObject (hdc=0x340107cb, type=0x2) returned 0x900010
[0303.436] GetCurrentObject (hdc=0x340107cb, type=0x7) returned 0x1e0507b9
[0303.436] GetCurrentObject (hdc=0x340107cb, type=0x6) returned 0x8a01c2
[0303.437] SaveDC (hdc=0x340107cb) returned 2
[0303.437] GetNearestColor (hdc=0x340107cb, color=0xff) returned 0xff
[0303.437] CreateSolidBrush (color=0xff) returned 0xa410078d
[0303.437] FillRect (hDC=0x340107cb, lprc=0x53d8d8, hbr=0xa410078d) returned 1
[0303.437] DeleteObject (ho=0xa410078d) returned 1
[0303.437] RestoreDC (hdc=0x340107cb, nSavedDC=-1) returned 1
[0303.437] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0303.437] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0303.437] GetSystemMetrics (nIndex=42) returned 0
[0303.437] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0303.437] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0303.437] GetClientRect (in: hWnd=0x70036, lpRect=0x53d9d8 | out: lpRect=0x53d9d8) returned 1
[0303.437] GetCurrentObject (hdc=0x340107cb, type=0x1) returned 0xb00017
[0303.437] GetCurrentObject (hdc=0x340107cb, type=0x2) returned 0x900010
[0303.437] GetCurrentObject (hdc=0x340107cb, type=0x7) returned 0x1e0507b9
[0303.437] GetCurrentObject (hdc=0x340107cb, type=0x6) returned 0x8a01c2
[0303.437] SaveDC (hdc=0x340107cb) returned 2
[0303.437] GetNearestColor (hdc=0x340107cb, color=0xff) returned 0xff
[0303.438] CreateSolidBrush (color=0xff) returned 0xa510078d
[0303.438] FillRect (hDC=0x340107cb, lprc=0x53d878, hbr=0xa510078d) returned 1
[0303.438] DeleteObject (ho=0xa510078d) returned 1
[0303.438] RestoreDC (hdc=0x340107cb, nSavedDC=-1) returned 1
[0303.438] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0303.438] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0303.438] GetSystemMetrics (nIndex=42) returned 0
[0303.438] GetWindowTextW (in: hWnd=0x70036, lpString=0x53d98c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0303.438] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53d98c) returned 0xc
[0303.438] RestoreDC (hdc=0x340107cb, nSavedDC=-1) returned 1
[0303.438] GdipReleaseDC (graphics=0x5d92c30, hdc=0x340107cb) returned 0x0
[0303.438] IsAppThemed () returned 0x1
[0303.438] GetThemeAppProperties () returned 0x3
[0303.438] GetThemeAppProperties () returned 0x3
[0303.438] IsAppThemed () returned 0x1
[0303.438] GetThemeAppProperties () returned 0x3
[0303.438] GetThemeAppProperties () returned 0x3
[0303.438] IsThemePartDefined () returned 0x1
[0303.438] GdipCreateRegion (region=0x53ddfc) returned 0x0
[0303.438] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.439] GdipCreateMatrix (matrix=0x53ddfc) returned 0x0
[0303.439] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.439] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53de14) returned 0x0
[0303.439] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0303.439] LocalFree (hMem=0x89ee08) returned 0x0
[0303.439] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0303.439] LocalFree (hMem=0x89ea88) returned 0x0
[0303.439] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.439] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de3c) returned 0x0
[0303.439] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de2c) returned 0x0
[0303.439] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de2c) returned 0x0
[0303.439] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.439] GdipGetDC (graphics=0x5d92c30, hdc=0x53de44) returned 0x0
[0303.439] GetCurrentObject (hdc=0x340107cb, type=0x1) returned 0xb00017
[0303.439] GetCurrentObject (hdc=0x340107cb, type=0x2) returned 0x900010
[0303.439] GetCurrentObject (hdc=0x340107cb, type=0x7) returned 0x1e0507b9
[0303.439] GetCurrentObject (hdc=0x340107cb, type=0x6) returned 0x8a01c2
[0303.439] SaveDC (hdc=0x340107cb) returned 1
[0303.439] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x480407a1
[0303.439] GetClipRgn (hdc=0x340107cb, hrgn=0x480407a1) returned 0
[0303.439] SelectClipRgn (hdc=0x340107cb, hrgn=0xf0040798) returned 2
[0303.439] DeleteObject (ho=0x480407a1) returned 1
[0303.440] DeleteObject (ho=0xf0040798) returned 1
[0303.440] OffsetViewportOrgEx (in: hdc=0x340107cb, x=0, y=0, lppt=0x24a142c | out: lppt=0x24a142c) returned 1
[0303.440] IsAppThemed () returned 0x1
[0303.440] GetThemeAppProperties () returned 0x3
[0303.440] GetThemeAppProperties () returned 0x3
[0303.440] DrawThemeBackground () returned 0x0
[0303.440] RestoreDC (hdc=0x340107cb, nSavedDC=-1) returned 1
[0303.440] GdipReleaseDC (graphics=0x5d92c30, hdc=0x340107cb) returned 0x0
[0303.440] GdipCreateRegion (region=0x53de00) returned 0x0
[0303.440] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.440] GdipCreateMatrix (matrix=0x53de00) returned 0x0
[0303.440] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.440] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53de18) returned 0x0
[0303.440] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0303.440] LocalFree (hMem=0x89ee08) returned 0x0
[0303.440] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0303.440] LocalFree (hMem=0x89ea88) returned 0x0
[0303.440] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.440] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de40) returned 0x0
[0303.440] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53de30) returned 0x0
[0303.440] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53de30) returned 0x0
[0303.440] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.440] GdipGetDC (graphics=0x5d92c30, hdc=0x53de48) returned 0x0
[0303.440] GetCurrentObject (hdc=0x340107cb, type=0x1) returned 0xb00017
[0303.441] GetCurrentObject (hdc=0x340107cb, type=0x2) returned 0x900010
[0303.441] GetCurrentObject (hdc=0x340107cb, type=0x7) returned 0x1e0507b9
[0303.441] GetCurrentObject (hdc=0x340107cb, type=0x6) returned 0x8a01c2
[0303.441] SaveDC (hdc=0x340107cb) returned 1
[0303.441] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf1040798
[0303.441] GetClipRgn (hdc=0x340107cb, hrgn=0xf1040798) returned 0
[0303.441] SelectClipRgn (hdc=0x340107cb, hrgn=0x490407a1) returned 2
[0303.441] DeleteObject (ho=0xf1040798) returned 1
[0303.441] DeleteObject (ho=0x490407a1) returned 1
[0303.441] OffsetViewportOrgEx (in: hdc=0x340107cb, x=0, y=0, lppt=0x24a1700 | out: lppt=0x24a1700) returned 1
[0303.441] IsAppThemed () returned 0x1
[0303.441] GetThemeAppProperties () returned 0x3
[0303.441] GetThemeAppProperties () returned 0x3
[0303.441] GetThemeBackgroundContentRect () returned 0x0
[0303.441] RestoreDC (hdc=0x340107cb, nSavedDC=-1) returned 1
[0303.441] GdipReleaseDC (graphics=0x5d92c30, hdc=0x340107cb) returned 0x0
[0303.441] IsAppThemed () returned 0x1
[0303.441] GetThemeAppProperties () returned 0x3
[0303.441] GetThemeAppProperties () returned 0x3
[0303.441] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53df7c) returned 0x0
[0303.441] GdipGetDC (graphics=0x5d92c30, hdc=0x53df68) returned 0x0
[0303.441] GetCurrentObject (hdc=0x340107cb, type=0x1) returned 0xb00017
[0303.442] GetCurrentObject (hdc=0x340107cb, type=0x2) returned 0x900010
[0303.442] GetCurrentObject (hdc=0x340107cb, type=0x7) returned 0x1e0507b9
[0303.442] GetCurrentObject (hdc=0x340107cb, type=0x6) returned 0x8a01c2
[0303.442] SaveDC (hdc=0x340107cb) returned 1
[0303.442] GetTextAlign (hdc=0x340107cb) returned 0x0
[0303.442] GetTextColor (hdc=0x340107cb) returned 0x0
[0303.442] GetCurrentObject (hdc=0x340107cb, type=0x6) returned 0x8a01c2
[0303.442] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dcb0 | out: pv=0x53dcb0) returned 92
[0303.442] SelectObject (hdc=0x340107cb, h=0x450a0799) returned 0x8a01c2
[0303.442] GetBkMode (hdc=0x340107cb) returned 2
[0303.442] SetBkMode (hdc=0x340107cb, mode=1) returned 2
[0303.442] DrawTextExW (in: hdc=0x340107cb, lpchText="Decrypt", cchText=7, lprc=0x53dd98, format=0x102415, lpdtp=0x24a1aa0 | out: lpchText="Decrypt", lprc=0x53dd98) returned 13
[0303.442] DrawTextExW (in: hdc=0x340107cb, lpchText="Decrypt", cchText=7, lprc=0x53defc, format=0x102015, lpdtp=0x24a1aa0 | out: lpchText="Decrypt", lprc=0x53defc) returned 13
[0303.443] RestoreDC (hdc=0x340107cb, nSavedDC=-1) returned 1
[0303.443] GdipReleaseDC (graphics=0x5d92c30, hdc=0x340107cb) returned 0x0
[0303.443] GetFocus () returned 0x42013e
[0303.443] IsAppThemed () returned 0x1
[0303.443] GetThemeAppProperties () returned 0x3
[0303.443] GetThemeAppProperties () returned 0x3
[0303.443] GdipGetDC (graphics=0x5d92c30, hdc=0x53e148) returned 0x0
[0303.443] BitBlt (hdc=0x60100ce, x=0, y=0, cx=153, cy=40, hdcSrc=0x340107cb, x1=0, y1=0, rop=0xcc0020) returned 1
[0303.443] GdipReleaseDC (graphics=0x5d92c30, hdc=0x340107cb) returned 0x0
[0303.444] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0303.444] SelectObject (hdc=0x340107cb, h=0x85000f) returned 0x1e0507b9
[0303.444] DeleteDC (hdc=0x340107cb) returned 1
[0303.444] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0303.444] EndPaint (hWnd=0x202c6, lpPaint=0x53e0ec) returned 1
[0303.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0303.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e04c) returned 0x0
[0303.732] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x1102b8) returned 0x1
[0303.735] GetFocus () returned 0x1102b8
[0303.735] GetAncestor (hwnd=0x1102b8, gaFlags=0x1) returned 0x10010
[0303.735] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0
[0303.735] SetFocus (hWnd=0x202c6) returned 0x0
[0303.737] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0303.738] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0303.738] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0303.739] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0303.739] GetFocus () returned 0x70036
[0303.739] SetFocus (hWnd=0x202c6) returned 0x0
[0303.748] IsWindow (hWnd=0x70036) returned 1
[0303.748] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0303.748] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0303.749] IsWindow (hWnd=0x70036) returned 1
[0303.749] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0303.749] IsWindow (hWnd=0x202c6) returned 1
[0303.749] SetFocus (hWnd=0x202c6) returned 0x70036
[0303.749] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0303.750] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0303.751] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0303.752] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0303.752] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x70036, lParam=0x0) returned 0x0
[0303.753] GetStockObject (i=5) returned 0x900015
[0303.753] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0303.753] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8e9a68) returned 0x7
[0303.753] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0303.753] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0303.753] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53e26c) returned 0x0
[0303.753] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0303.754] SendMessageW (hWnd=0x70036, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0303.755] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0303.755] GetFocus () returned 0x202c6
[0303.755] GetCapture () returned 0x0
[0303.755] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.755] IsWindowUnicode (hWnd=0x202c6) returned 1
[0303.755] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.755] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.755] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.763] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.764] IsWindowUnicode (hWnd=0x202c6) returned 1
[0303.764] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.764] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.764] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.764] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0303.764] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0303.765] CreateCompatibleDC (hdc=0xf0105ee) returned 0x1801079c
[0303.765] SelectObject (hdc=0x1801079c, h=0x1e0507b9) returned 0x85000f
[0303.765] GdipCreateFromHDC (hdc=0x1801079c, graphics=0x53e958) returned 0x0
[0303.765] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0303.765] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0303.765] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0303.765] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.765] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0303.765] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.765] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0303.765] LocalFree (hMem=0x89ea88) returned 0x0
[0303.765] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.765] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0303.765] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.766] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0303.766] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0303.766] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa450dbd) returned 0x0
[0303.766] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.766] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7c4) returned 0x0
[0303.766] GetCurrentObject (hdc=0x1801079c, type=0x1) returned 0xb00017
[0303.766] GetCurrentObject (hdc=0x1801079c, type=0x2) returned 0x900010
[0303.766] GetCurrentObject (hdc=0x1801079c, type=0x7) returned 0x1e0507b9
[0303.766] GetCurrentObject (hdc=0x1801079c, type=0x6) returned 0x8a01c2
[0303.766] SaveDC (hdc=0x1801079c) returned 1
[0303.766] GetNearestColor (hdc=0x1801079c, color=0xff) returned 0xff
[0303.766] GetNearestColor (hdc=0x1801079c, color=0x55) returned 0x55
[0303.766] GetNearestColor (hdc=0x1801079c, color=0x0) returned 0x0
[0303.766] GetNearestColor (hdc=0x1801079c, color=0x55) returned 0x55
[0303.767] GetNearestColor (hdc=0x1801079c, color=0x0) returned 0x0
[0303.767] GetNearestColor (hdc=0x1801079c, color=0x8080ff) returned 0x8080ff
[0303.767] GetNearestColor (hdc=0x1801079c, color=0x7373e5) returned 0x7373e5
[0303.767] GetNearestColor (hdc=0x1801079c, color=0xe5) returned 0xe5
[0303.767] GetNearestColor (hdc=0x1801079c, color=0x0) returned 0x0
[0303.767] RestoreDC (hdc=0x1801079c, nSavedDC=-1) returned 1
[0303.767] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1801079c) returned 0x0
[0303.767] IsAppThemed () returned 0x1
[0303.767] GetThemeAppProperties () returned 0x3
[0303.767] GetThemeAppProperties () returned 0x3
[0303.767] IsAppThemed () returned 0x1
[0303.767] GetThemeAppProperties () returned 0x3
[0303.767] GetThemeAppProperties () returned 0x3
[0303.768] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e680, format=0x102415, lpdtp=0x24a22fc | out: lpchText="Decrypt", lprc=0x53e680) returned 13
[0303.768] IsAppThemed () returned 0x1
[0303.768] GetThemeAppProperties () returned 0x3
[0303.768] GetThemeAppProperties () returned 0x3
[0303.768] IsAppThemed () returned 0x1
[0303.768] GetThemeAppProperties () returned 0x3
[0303.768] GetThemeAppProperties () returned 0x3
[0303.768] GetFocus () returned 0x202c6
[0303.768] IsAppThemed () returned 0x1
[0303.768] GetThemeAppProperties () returned 0x3
[0303.768] GetThemeAppProperties () returned 0x3
[0303.768] IsAppThemed () returned 0x1
[0303.768] GetThemeAppProperties () returned 0x3
[0303.768] GetThemeAppProperties () returned 0x3
[0303.768] IsThemePartDefined () returned 0x1
[0303.768] IsAppThemed () returned 0x1
[0303.769] GetThemeAppProperties () returned 0x3
[0303.769] GetThemeAppProperties () returned 0x3
[0303.769] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0303.769] IsAppThemed () returned 0x1
[0303.769] GetThemeAppProperties () returned 0x3
[0303.769] GetThemeAppProperties () returned 0x3
[0303.769] IsAppThemed () returned 0x1
[0303.769] GetThemeAppProperties () returned 0x3
[0303.769] GetThemeAppProperties () returned 0x3
[0303.769] IsThemePartDefined () returned 0x1
[0303.769] GdipCreateRegion (region=0x53e6c8) returned 0x0
[0303.769] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.769] GdipCreateMatrix (matrix=0x53e6c8) returned 0x0
[0303.769] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.769] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6e0) returned 0x0
[0303.769] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0303.769] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0303.769] LocalFree (hMem=0x89ee08) returned 0x0
[0303.769] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0303.769] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0303.769] LocalFree (hMem=0x89ee08) returned 0x0
[0303.769] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.769] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e708) returned 0x0
[0303.770] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6f8) returned 0x0
[0303.770] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6f8) returned 0x0
[0303.770] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.770] GdipGetDC (graphics=0x5d92c30, hdc=0x53e710) returned 0x0
[0303.770] GetCurrentObject (hdc=0x1801079c, type=0x1) returned 0xb00017
[0303.770] GetCurrentObject (hdc=0x1801079c, type=0x2) returned 0x900010
[0303.770] GetCurrentObject (hdc=0x1801079c, type=0x7) returned 0x1e0507b9
[0303.770] GetCurrentObject (hdc=0x1801079c, type=0x6) returned 0x8a01c2
[0303.770] SaveDC (hdc=0x1801079c) returned 1
[0303.770] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe204053e
[0303.770] GetClipRgn (hdc=0x1801079c, hrgn=0xe204053e) returned 0
[0303.770] SelectClipRgn (hdc=0x1801079c, hrgn=0x570407a1) returned 2
[0303.770] DeleteObject (ho=0xe204053e) returned 1
[0303.770] DeleteObject (ho=0x570407a1) returned 1
[0303.770] OffsetViewportOrgEx (in: hdc=0x1801079c, x=0, y=0, lppt=0x24a29ac | out: lppt=0x24a29ac) returned 1
[0303.770] DrawThemeParentBackground () returned 0x0
[0303.771] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3d4 | out: lpwndpl=0x53e3d4) returned 1
[0303.771] GetClientRect (in: hWnd=0x70036, lpRect=0x53e380 | out: lpRect=0x53e380) returned 1
[0303.771] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0303.771] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0303.771] GetSystemMetrics (nIndex=42) returned 0
[0303.771] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e23c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0303.771] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e23c) returned 0xc
[0303.771] GetClientRect (in: hWnd=0x70036, lpRect=0x53e288 | out: lpRect=0x53e288) returned 1
[0303.771] GetCurrentObject (hdc=0x1801079c, type=0x1) returned 0xb00017
[0303.771] GetCurrentObject (hdc=0x1801079c, type=0x2) returned 0x900010
[0303.771] GetCurrentObject (hdc=0x1801079c, type=0x7) returned 0x1e0507b9
[0303.771] GetCurrentObject (hdc=0x1801079c, type=0x6) returned 0x8a01c2
[0303.771] SaveDC (hdc=0x1801079c) returned 2
[0303.771] GetNearestColor (hdc=0x1801079c, color=0xff) returned 0xff
[0303.772] CreateSolidBrush (color=0xff) returned 0xa710078d
[0303.772] FillRect (hDC=0x1801079c, lprc=0x53e128, hbr=0xa710078d) returned 1
[0303.772] DeleteObject (ho=0xa710078d) returned 1
[0303.772] RestoreDC (hdc=0x1801079c, nSavedDC=-1) returned 1
[0303.772] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0303.772] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0303.772] GetSystemMetrics (nIndex=42) returned 0
[0303.772] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0303.772] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0303.772] GetClientRect (in: hWnd=0x70036, lpRect=0x53e228 | out: lpRect=0x53e228) returned 1
[0303.772] GetCurrentObject (hdc=0x1801079c, type=0x1) returned 0xb00017
[0303.772] GetCurrentObject (hdc=0x1801079c, type=0x2) returned 0x900010
[0303.772] GetCurrentObject (hdc=0x1801079c, type=0x7) returned 0x1e0507b9
[0303.772] GetCurrentObject (hdc=0x1801079c, type=0x6) returned 0x8a01c2
[0303.772] SaveDC (hdc=0x1801079c) returned 2
[0303.772] GetNearestColor (hdc=0x1801079c, color=0xff) returned 0xff
[0303.772] CreateSolidBrush (color=0xff) returned 0xa810078d
[0303.772] FillRect (hDC=0x1801079c, lprc=0x53e0c8, hbr=0xa810078d) returned 1
[0303.773] DeleteObject (ho=0xa810078d) returned 1
[0303.773] RestoreDC (hdc=0x1801079c, nSavedDC=-1) returned 1
[0303.773] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0303.773] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0303.773] GetSystemMetrics (nIndex=42) returned 0
[0303.773] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1dc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0303.773] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1dc) returned 0xc
[0303.773] RestoreDC (hdc=0x1801079c, nSavedDC=-1) returned 1
[0303.773] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1801079c) returned 0x0
[0303.773] IsAppThemed () returned 0x1
[0303.773] GetThemeAppProperties () returned 0x3
[0303.773] GetThemeAppProperties () returned 0x3
[0303.773] IsAppThemed () returned 0x1
[0303.773] GetThemeAppProperties () returned 0x3
[0303.773] GetThemeAppProperties () returned 0x3
[0303.773] IsThemePartDefined () returned 0x1
[0303.773] GdipCreateRegion (region=0x53e64c) returned 0x0
[0303.773] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.773] GdipCreateMatrix (matrix=0x53e64c) returned 0x0
[0303.774] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0303.774] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e664) returned 0x0
[0303.774] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0303.774] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0303.774] LocalFree (hMem=0x89ee08) returned 0x0
[0303.774] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0303.774] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0303.774] LocalFree (hMem=0x89ee08) returned 0x0
[0303.774] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0303.774] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e68c) returned 0x0
[0303.774] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e67c) returned 0x0
[0303.774] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e67c) returned 0x0
[0303.774] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.774] GdipGetDC (graphics=0x5d92c30, hdc=0x53e694) returned 0x0
[0303.774] GetCurrentObject (hdc=0x1801079c, type=0x1) returned 0xb00017
[0303.774] GetCurrentObject (hdc=0x1801079c, type=0x2) returned 0x900010
[0303.774] GetCurrentObject (hdc=0x1801079c, type=0x7) returned 0x1e0507b9
[0303.774] GetCurrentObject (hdc=0x1801079c, type=0x6) returned 0x8a01c2
[0303.774] SaveDC (hdc=0x1801079c) returned 1
[0303.774] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x580407a1
[0303.775] GetClipRgn (hdc=0x1801079c, hrgn=0x580407a1) returned 0
[0303.775] SelectClipRgn (hdc=0x1801079c, hrgn=0xe404053e) returned 2
[0303.775] DeleteObject (ho=0x580407a1) returned 1
[0303.775] DeleteObject (ho=0xe404053e) returned 1
[0303.775] OffsetViewportOrgEx (in: hdc=0x1801079c, x=0, y=0, lppt=0x24a3210 | out: lppt=0x24a3210) returned 1
[0303.775] IsAppThemed () returned 0x1
[0303.775] GetThemeAppProperties () returned 0x3
[0303.775] GetThemeAppProperties () returned 0x3
[0303.775] DrawThemeBackground () returned 0x0
[0303.775] RestoreDC (hdc=0x1801079c, nSavedDC=-1) returned 1
[0303.775] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1801079c) returned 0x0
[0303.775] GdipCreateRegion (region=0x53e650) returned 0x0
[0303.775] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0303.775] GdipCreateMatrix (matrix=0x53e650) returned 0x0
[0303.775] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0303.775] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e668) returned 0x0
[0303.775] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0303.775] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0303.775] LocalFree (hMem=0x89ea88) returned 0x0
[0303.776] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0303.776] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0303.776] LocalFree (hMem=0x89ee08) returned 0x0
[0303.776] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0303.776] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e690) returned 0x0
[0303.776] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0303.776] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e680) returned 0x0
[0303.776] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0303.776] GdipGetDC (graphics=0x5d92c30, hdc=0x53e698) returned 0x0
[0303.776] GetCurrentObject (hdc=0x1801079c, type=0x1) returned 0xb00017
[0303.776] GetCurrentObject (hdc=0x1801079c, type=0x2) returned 0x900010
[0303.776] GetCurrentObject (hdc=0x1801079c, type=0x7) returned 0x1e0507b9
[0303.776] GetCurrentObject (hdc=0x1801079c, type=0x6) returned 0x8a01c2
[0303.776] SaveDC (hdc=0x1801079c) returned 1
[0303.776] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe504053e
[0303.776] GetClipRgn (hdc=0x1801079c, hrgn=0xe504053e) returned 0
[0303.776] SelectClipRgn (hdc=0x1801079c, hrgn=0x590407a1) returned 2
[0303.776] DeleteObject (ho=0xe504053e) returned 1
[0303.776] DeleteObject (ho=0x590407a1) returned 1
[0303.777] OffsetViewportOrgEx (in: hdc=0x1801079c, x=0, y=0, lppt=0x24a34e4 | out: lppt=0x24a34e4) returned 1
[0303.777] IsAppThemed () returned 0x1
[0303.777] GetThemeAppProperties () returned 0x3
[0303.777] GetThemeAppProperties () returned 0x3
[0303.777] GetThemeBackgroundContentRect () returned 0x0
[0303.777] RestoreDC (hdc=0x1801079c, nSavedDC=-1) returned 1
[0303.777] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1801079c) returned 0x0
[0303.777] IsAppThemed () returned 0x1
[0303.777] GetThemeAppProperties () returned 0x3
[0303.777] GetThemeAppProperties () returned 0x3
[0303.777] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7cc) returned 0x0
[0303.777] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0303.777] GetCurrentObject (hdc=0x1801079c, type=0x1) returned 0xb00017
[0303.777] GetCurrentObject (hdc=0x1801079c, type=0x2) returned 0x900010
[0303.777] GetCurrentObject (hdc=0x1801079c, type=0x7) returned 0x1e0507b9
[0303.777] GetCurrentObject (hdc=0x1801079c, type=0x6) returned 0x8a01c2
[0303.777] SaveDC (hdc=0x1801079c) returned 1
[0303.777] GetTextAlign (hdc=0x1801079c) returned 0x0
[0303.777] GetTextColor (hdc=0x1801079c) returned 0x0
[0303.777] GetCurrentObject (hdc=0x1801079c, type=0x6) returned 0x8a01c2
[0303.778] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e500 | out: pv=0x53e500) returned 92
[0303.778] SelectObject (hdc=0x1801079c, h=0x450a0799) returned 0x8a01c2
[0303.778] GetBkMode (hdc=0x1801079c) returned 2
[0303.778] SetBkMode (hdc=0x1801079c, mode=1) returned 2
[0303.778] DrawTextExW (in: hdc=0x1801079c, lpchText="Decrypt", cchText=7, lprc=0x53e5e8, format=0x102415, lpdtp=0x24a3884 | out: lpchText="Decrypt", lprc=0x53e5e8) returned 13
[0303.778] DrawTextExW (in: hdc=0x1801079c, lpchText="Decrypt", cchText=7, lprc=0x53e74c, format=0x102015, lpdtp=0x24a3884 | out: lpchText="Decrypt", lprc=0x53e74c) returned 13
[0303.778] RestoreDC (hdc=0x1801079c, nSavedDC=-1) returned 1
[0303.778] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1801079c) returned 0x0
[0303.778] GetFocus () returned 0x202c6
[0303.779] IsAppThemed () returned 0x1
[0303.779] GetThemeAppProperties () returned 0x3
[0303.779] GetThemeAppProperties () returned 0x3
[0303.779] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0303.779] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0x1801079c, x1=0, y1=0, rop=0xcc0020) returned 1
[0303.779] GdipReleaseDC (graphics=0x5d92c30, hdc=0x1801079c) returned 0x0
[0303.779] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0303.779] SelectObject (hdc=0x1801079c, h=0x85000f) returned 0x1e0507b9
[0303.779] DeleteDC (hdc=0x1801079c) returned 1
[0303.779] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0303.779] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0303.780] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.780] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.780] WaitMessage () returned 1
[0303.785] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.785] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.785] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.785] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.785] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.786] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.786] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.786] WaitMessage () returned 1
[0303.797] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.797] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.798] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.798] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.798] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.798] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.798] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.798] WaitMessage () returned 1
[0303.800] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.800] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.800] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.800] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.800] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.801] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.801] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.801] WaitMessage () returned 1
[0303.802] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.802] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.802] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.802] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.802] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.807] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.807] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.807] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.807] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.807] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.808] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.808] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.808] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.808] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.808] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.808] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.809] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.809] WaitMessage () returned 1
[0303.811] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.811] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.811] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.811] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.811] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.812] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.813] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.813] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.813] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.813] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.813] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.813] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.813] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.813] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.813] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.813] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.814] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.814] WaitMessage () returned 1
[0303.814] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.814] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.814] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.814] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.814] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.816] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.816] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.816] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.816] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.816] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.817] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.817] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.817] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.817] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.817] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.817] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.818] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.818] WaitMessage () returned 1
[0303.818] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.818] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.818] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.818] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.818] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.820] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.820] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.820] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.820] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.820] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.821] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.821] IsWindowUnicode (hWnd=0x102dc) returned 1
[0303.821] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0303.821] TranslateMessage (lpMsg=0x53eef8) returned 0
[0303.821] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0303.821] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.822] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0303.822] WaitMessage () returned 1
[0304.022] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0304.022] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0304.022] TranslateMessage (lpMsg=0x53eef8) returned 0
[0304.022] DispatchMessageA (lpMsg=0x53eef8) returned 0x7e76
[0304.022] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0304.022] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0304.022] WaitMessage () returned 1
[0304.068] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0304.069] IsWindowUnicode (hWnd=0x202d0) returned 1
[0304.069] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0304.069] TranslateMessage (lpMsg=0x53eef8) returned 0
[0304.069] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0304.069] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0304.069] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0304.069] WaitMessage () returned 1
[0305.022] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.022] GetMessageA (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.022] TranslateMessage (lpMsg=0x53eef8) returned 0
[0305.022] DispatchMessageA (lpMsg=0x53eef8) returned 0x1
[0305.023] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0305.023] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0305.024] WaitMessage () returned 1
[0305.645] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.646] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19d0224) returned 0x1
[0305.646] IsWindowUnicode (hWnd=0x202c6) returned 1
[0305.646] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.646] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19d0224) returned 0x1
[0305.647] SetCursor (hCursor=0x10003) returned 0x10003
[0305.647] TranslateMessage (lpMsg=0x53eef8) returned 0
[0305.647] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0305.647] _TrackMouseEvent (in: lpEventTrack=0x22c0cfc | out: lpEventTrack=0x22c0cfc) returned 1
[0305.647] SendMessageW (hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0305.647] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0305.647] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0305.647] GetKeyState (nVirtKey=1) returned 0
[0305.647] GetKeyState (nVirtKey=2) returned 0
[0305.647] GetKeyState (nVirtKey=4) returned 0
[0305.647] GetKeyState (nVirtKey=5) returned 0
[0305.647] GetKeyState (nVirtKey=6) returned 0
[0305.647] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.648] IsWindowUnicode (hWnd=0x202c6) returned 1
[0305.648] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.648] TranslateMessage (lpMsg=0x53eef8) returned 0
[0305.648] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0305.648] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e940 | out: lpPaint=0x53e940) returned 0xf0105ee
[0305.648] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0305.648] CreateCompatibleDC (hdc=0xf0105ee) returned 0xdc010794
[0305.648] SelectObject (hdc=0xdc010794, h=0x1e0507b9) returned 0x85000f
[0305.648] GdipCreateFromHDC (hdc=0xdc010794, graphics=0x53e958) returned 0x0
[0305.649] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0305.649] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0305.649] GdipCreateMatrix (matrix=0x53e9a0) returned 0x0
[0305.649] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0305.649] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e9b8) returned 0x0
[0305.649] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0305.649] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0305.649] LocalFree (hMem=0x89ea88) returned 0x0
[0305.649] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0305.649] GdipCreateRegion (region=0x53e9a0) returned 0x0
[0305.649] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0305.650] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e9ac) returned 0x0
[0305.650] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e9d8) returned 0x0
[0305.650] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa430dbd) returned 0x0
[0305.650] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0305.650] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7b8) returned 0x0
[0305.650] GetCurrentObject (hdc=0xdc010794, type=0x1) returned 0xb00017
[0305.650] GetCurrentObject (hdc=0xdc010794, type=0x2) returned 0x900010
[0305.650] GetCurrentObject (hdc=0xdc010794, type=0x7) returned 0x1e0507b9
[0305.650] GetCurrentObject (hdc=0xdc010794, type=0x6) returned 0x8a01c2
[0305.650] SaveDC (hdc=0xdc010794) returned 1
[0305.650] GetNearestColor (hdc=0xdc010794, color=0xff) returned 0xff
[0305.650] GetNearestColor (hdc=0xdc010794, color=0x55) returned 0x55
[0305.650] GetNearestColor (hdc=0xdc010794, color=0x0) returned 0x0
[0305.650] GetNearestColor (hdc=0xdc010794, color=0x55) returned 0x55
[0305.651] GetNearestColor (hdc=0xdc010794, color=0x0) returned 0x0
[0305.651] GetNearestColor (hdc=0xdc010794, color=0x8080ff) returned 0x8080ff
[0305.651] GetNearestColor (hdc=0xdc010794, color=0x7373e5) returned 0x7373e5
[0305.651] GetNearestColor (hdc=0xdc010794, color=0xe5) returned 0xe5
[0305.651] GetNearestColor (hdc=0xdc010794, color=0x0) returned 0x0
[0305.651] RestoreDC (hdc=0xdc010794, nSavedDC=-1) returned 1
[0305.651] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdc010794) returned 0x0
[0305.651] IsAppThemed () returned 0x1
[0305.651] GetThemeAppProperties () returned 0x3
[0305.651] GetThemeAppProperties () returned 0x3
[0305.651] IsAppThemed () returned 0x1
[0305.651] GetThemeAppProperties () returned 0x3
[0305.651] GetThemeAppProperties () returned 0x3
[0305.651] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e674, format=0x102415, lpdtp=0x24a4218 | out: lpchText="Decrypt", lprc=0x53e674) returned 13
[0305.652] IsAppThemed () returned 0x1
[0305.652] GetThemeAppProperties () returned 0x3
[0305.652] GetThemeAppProperties () returned 0x3
[0305.652] IsAppThemed () returned 0x1
[0305.652] GetThemeAppProperties () returned 0x3
[0305.652] GetThemeAppProperties () returned 0x3
[0305.653] IsAppThemed () returned 0x1
[0305.653] GetThemeAppProperties () returned 0x3
[0305.653] GetThemeAppProperties () returned 0x3
[0305.653] IsAppThemed () returned 0x1
[0305.653] GetThemeAppProperties () returned 0x3
[0305.653] GetThemeAppProperties () returned 0x3
[0305.653] IsThemePartDefined () returned 0x1
[0305.653] IsAppThemed () returned 0x1
[0305.653] GetThemeAppProperties () returned 0x3
[0305.653] GetThemeAppProperties () returned 0x3
[0305.653] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0305.653] IsAppThemed () returned 0x1
[0305.653] GetThemeAppProperties () returned 0x3
[0305.653] GetThemeAppProperties () returned 0x3
[0305.653] IsAppThemed () returned 0x1
[0305.653] GetThemeAppProperties () returned 0x3
[0305.653] GetThemeAppProperties () returned 0x3
[0305.653] IsThemePartDefined () returned 0x1
[0305.653] GdipCreateRegion (region=0x53e6bc) returned 0x0
[0305.653] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0305.654] GdipCreateMatrix (matrix=0x53e6bc) returned 0x0
[0305.654] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0305.654] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e6d4) returned 0x0
[0305.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0305.654] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0305.654] LocalFree (hMem=0x89eee8) returned 0x0
[0305.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0305.654] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0305.654] LocalFree (hMem=0x89ec80) returned 0x0
[0305.654] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0305.654] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6fc) returned 0x0
[0305.654] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e6ec) returned 0x0
[0305.654] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e6ec) returned 0x0
[0305.654] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0305.655] GdipGetDC (graphics=0x5d92c30, hdc=0x53e704) returned 0x0
[0305.655] GetCurrentObject (hdc=0xdc010794, type=0x1) returned 0xb00017
[0305.655] GetCurrentObject (hdc=0xdc010794, type=0x2) returned 0x900010
[0305.655] GetCurrentObject (hdc=0xdc010794, type=0x7) returned 0x1e0507b9
[0305.655] GetCurrentObject (hdc=0xdc010794, type=0x6) returned 0x8a01c2
[0305.655] SaveDC (hdc=0xdc010794) returned 1
[0305.655] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a0407a1
[0305.655] GetClipRgn (hdc=0xdc010794, hrgn=0x5a0407a1) returned 0
[0305.655] SelectClipRgn (hdc=0xdc010794, hrgn=0xe904053e) returned 2
[0305.655] DeleteObject (ho=0x5a0407a1) returned 1
[0305.655] DeleteObject (ho=0xe904053e) returned 1
[0305.655] OffsetViewportOrgEx (in: hdc=0xdc010794, x=0, y=0, lppt=0x24a48c8 | out: lppt=0x24a48c8) returned 1
[0305.655] DrawThemeParentBackground () returned 0x0
[0305.656] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e3cc | out: lpwndpl=0x53e3cc) returned 1
[0305.656] GetClientRect (in: hWnd=0x70036, lpRect=0x53e378 | out: lpRect=0x53e378) returned 1
[0305.656] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0305.656] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0305.656] GetSystemMetrics (nIndex=42) returned 0
[0305.656] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e234, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0305.656] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e234) returned 0xc
[0305.656] GetClientRect (in: hWnd=0x70036, lpRect=0x53e280 | out: lpRect=0x53e280) returned 1
[0305.656] GetCurrentObject (hdc=0xdc010794, type=0x1) returned 0xb00017
[0305.656] GetCurrentObject (hdc=0xdc010794, type=0x2) returned 0x900010
[0305.656] GetCurrentObject (hdc=0xdc010794, type=0x7) returned 0x1e0507b9
[0305.656] GetCurrentObject (hdc=0xdc010794, type=0x6) returned 0x8a01c2
[0305.656] SaveDC (hdc=0xdc010794) returned 2
[0305.657] GetNearestColor (hdc=0xdc010794, color=0xff) returned 0xff
[0305.657] CreateSolidBrush (color=0xff) returned 0xa910078d
[0305.657] FillRect (hDC=0xdc010794, lprc=0x53e120, hbr=0xa910078d) returned 1
[0305.657] DeleteObject (ho=0xa910078d) returned 1
[0305.657] RestoreDC (hdc=0xdc010794, nSavedDC=-1) returned 1
[0305.657] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0305.657] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0305.657] GetSystemMetrics (nIndex=42) returned 0
[0305.657] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0305.657] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0305.657] GetClientRect (in: hWnd=0x70036, lpRect=0x53e220 | out: lpRect=0x53e220) returned 1
[0305.657] GetCurrentObject (hdc=0xdc010794, type=0x1) returned 0xb00017
[0305.657] GetCurrentObject (hdc=0xdc010794, type=0x2) returned 0x900010
[0305.657] GetCurrentObject (hdc=0xdc010794, type=0x7) returned 0x1e0507b9
[0305.657] GetCurrentObject (hdc=0xdc010794, type=0x6) returned 0x8a01c2
[0305.658] SaveDC (hdc=0xdc010794) returned 2
[0305.658] GetNearestColor (hdc=0xdc010794, color=0xff) returned 0xff
[0305.658] CreateSolidBrush (color=0xff) returned 0xaa10078d
[0305.658] FillRect (hDC=0xdc010794, lprc=0x53e0c0, hbr=0xaa10078d) returned 1
[0305.658] DeleteObject (ho=0xaa10078d) returned 1
[0305.658] RestoreDC (hdc=0xdc010794, nSavedDC=-1) returned 1
[0305.658] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0305.658] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0305.658] GetSystemMetrics (nIndex=42) returned 0
[0305.658] GetWindowTextW (in: hWnd=0x70036, lpString=0x53e1d4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0305.658] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53e1d4) returned 0xc
[0305.658] RestoreDC (hdc=0xdc010794, nSavedDC=-1) returned 1
[0305.659] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdc010794) returned 0x0
[0305.659] IsAppThemed () returned 0x1
[0305.659] GetThemeAppProperties () returned 0x3
[0305.659] GetThemeAppProperties () returned 0x3
[0305.659] IsAppThemed () returned 0x1
[0305.659] GetThemeAppProperties () returned 0x3
[0305.659] GetThemeAppProperties () returned 0x3
[0305.659] IsThemePartDefined () returned 0x1
[0305.659] GdipCreateRegion (region=0x53e640) returned 0x0
[0305.659] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0305.659] GdipCreateMatrix (matrix=0x53e640) returned 0x0
[0305.659] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0305.659] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e658) returned 0x0
[0305.659] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0305.659] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0305.659] LocalFree (hMem=0x89ea88) returned 0x0
[0305.659] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0305.660] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0305.660] LocalFree (hMem=0x89ec80) returned 0x0
[0305.660] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0305.660] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e680) returned 0x0
[0305.660] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e670) returned 0x0
[0305.660] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e670) returned 0x0
[0305.660] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0305.660] GdipGetDC (graphics=0x5d92c30, hdc=0x53e688) returned 0x0
[0305.660] GetCurrentObject (hdc=0xdc010794, type=0x1) returned 0xb00017
[0305.660] GetCurrentObject (hdc=0xdc010794, type=0x2) returned 0x900010
[0305.660] GetCurrentObject (hdc=0xdc010794, type=0x7) returned 0x1e0507b9
[0305.660] GetCurrentObject (hdc=0xdc010794, type=0x6) returned 0x8a01c2
[0305.660] SaveDC (hdc=0xdc010794) returned 1
[0305.660] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xea04053e
[0305.660] GetClipRgn (hdc=0xdc010794, hrgn=0xea04053e) returned 0
[0305.660] SelectClipRgn (hdc=0xdc010794, hrgn=0x5c0407a1) returned 2
[0305.661] DeleteObject (ho=0xea04053e) returned 1
[0305.661] DeleteObject (ho=0x5c0407a1) returned 1
[0305.661] OffsetViewportOrgEx (in: hdc=0xdc010794, x=0, y=0, lppt=0x24a512c | out: lppt=0x24a512c) returned 1
[0305.661] IsAppThemed () returned 0x1
[0305.661] GetThemeAppProperties () returned 0x3
[0305.661] GetThemeAppProperties () returned 0x3
[0305.661] DrawThemeBackground () returned 0x0
[0305.661] RestoreDC (hdc=0xdc010794, nSavedDC=-1) returned 1
[0305.661] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdc010794) returned 0x0
[0305.661] GdipCreateRegion (region=0x53e644) returned 0x0
[0305.661] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0305.661] GdipCreateMatrix (matrix=0x53e644) returned 0x0
[0305.661] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0305.661] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e65c) returned 0x0
[0305.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0305.662] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0305.662] LocalFree (hMem=0x89ee08) returned 0x0
[0305.662] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0305.662] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0305.662] LocalFree (hMem=0x89ee08) returned 0x0
[0305.662] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0305.662] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e684) returned 0x0
[0305.662] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e674) returned 0x0
[0305.662] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e674) returned 0x0
[0305.662] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0305.662] GdipGetDC (graphics=0x5d92c30, hdc=0x53e68c) returned 0x0
[0305.662] GetCurrentObject (hdc=0xdc010794, type=0x1) returned 0xb00017
[0305.662] GetCurrentObject (hdc=0xdc010794, type=0x2) returned 0x900010
[0305.662] GetCurrentObject (hdc=0xdc010794, type=0x7) returned 0x1e0507b9
[0305.662] GetCurrentObject (hdc=0xdc010794, type=0x6) returned 0x8a01c2
[0305.663] SaveDC (hdc=0xdc010794) returned 1
[0305.663] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d0407a1
[0305.663] GetClipRgn (hdc=0xdc010794, hrgn=0x5d0407a1) returned 0
[0305.663] SelectClipRgn (hdc=0xdc010794, hrgn=0xeb04053e) returned 2
[0305.663] DeleteObject (ho=0x5d0407a1) returned 1
[0305.663] DeleteObject (ho=0xeb04053e) returned 1
[0305.663] OffsetViewportOrgEx (in: hdc=0xdc010794, x=0, y=0, lppt=0x24a5400 | out: lppt=0x24a5400) returned 1
[0305.663] IsAppThemed () returned 0x1
[0305.663] GetThemeAppProperties () returned 0x3
[0305.663] GetThemeAppProperties () returned 0x3
[0305.663] GetThemeBackgroundContentRect () returned 0x0
[0305.663] RestoreDC (hdc=0xdc010794, nSavedDC=-1) returned 1
[0305.663] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdc010794) returned 0x0
[0305.663] IsAppThemed () returned 0x1
[0305.663] GetThemeAppProperties () returned 0x3
[0305.663] GetThemeAppProperties () returned 0x3
[0305.663] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e7c0) returned 0x0
[0305.663] GdipGetDC (graphics=0x5d92c30, hdc=0x53e7ac) returned 0x0
[0305.663] GetCurrentObject (hdc=0xdc010794, type=0x1) returned 0xb00017
[0305.664] GetCurrentObject (hdc=0xdc010794, type=0x2) returned 0x900010
[0305.664] GetCurrentObject (hdc=0xdc010794, type=0x7) returned 0x1e0507b9
[0305.664] GetCurrentObject (hdc=0xdc010794, type=0x6) returned 0x8a01c2
[0305.664] SaveDC (hdc=0xdc010794) returned 1
[0305.664] GetTextAlign (hdc=0xdc010794) returned 0x0
[0305.664] GetTextColor (hdc=0xdc010794) returned 0x0
[0305.664] GetCurrentObject (hdc=0xdc010794, type=0x6) returned 0x8a01c2
[0305.664] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e4f4 | out: pv=0x53e4f4) returned 92
[0305.664] SelectObject (hdc=0xdc010794, h=0x450a0799) returned 0x8a01c2
[0305.664] GetBkMode (hdc=0xdc010794) returned 2
[0305.664] SetBkMode (hdc=0xdc010794, mode=1) returned 2
[0305.665] DrawTextExW (in: hdc=0xdc010794, lpchText="Decrypt", cchText=7, lprc=0x53e5dc, format=0x102415, lpdtp=0x24a57a0 | out: lpchText="Decrypt", lprc=0x53e5dc) returned 13
[0305.665] DrawTextExW (in: hdc=0xdc010794, lpchText="Decrypt", cchText=7, lprc=0x53e740, format=0x102015, lpdtp=0x24a57a0 | out: lpchText="Decrypt", lprc=0x53e740) returned 13
[0305.665] RestoreDC (hdc=0xdc010794, nSavedDC=-1) returned 1
[0305.665] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdc010794) returned 0x0
[0305.665] GetFocus () returned 0x202c6
[0305.665] IsAppThemed () returned 0x1
[0305.665] GetThemeAppProperties () returned 0x3
[0305.666] GetThemeAppProperties () returned 0x3
[0305.666] GdipGetDC (graphics=0x5d92c30, hdc=0x53e998) returned 0x0
[0305.666] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xdc010794, x1=0, y1=0, rop=0xcc0020) returned 1
[0305.666] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdc010794) returned 0x0
[0305.666] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0305.666] SelectObject (hdc=0xdc010794, h=0x85000f) returned 0x1e0507b9
[0305.666] DeleteDC (hdc=0xdc010794) returned 1
[0305.666] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0305.666] EndPaint (hWnd=0x202c6, lpPaint=0x53e93c) returned 1
[0305.667] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0305.667] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0305.667] WaitMessage () returned 1
[0305.756] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.757] IsWindowUnicode (hWnd=0x202c6) returned 1
[0305.757] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.757] TranslateMessage (lpMsg=0x53eef8) returned 0
[0305.757] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0305.757] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.757] IsWindowUnicode (hWnd=0x202c6) returned 1
[0305.757] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.757] TranslateMessage (lpMsg=0x53eef8) returned 0
[0305.757] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0305.757] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a1, wParam=0x0, lParam=0x150034) returned 0x0
[0305.757] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0305.757] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 0
[0305.757] WaitMessage () returned 1
[0305.870] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.870] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19d0224) returned 0x1
[0305.870] IsWindowUnicode (hWnd=0x202c6) returned 1
[0305.870] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.870] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19d0224) returned 0x1
[0305.871] GetDlgItem (hDlg=0x70036, nIDDlgItem=0) returned 0x0
[0305.871] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x210, wParam=0x201, lParam=0x13001ce) returned 0x0
[0305.871] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0305.871] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x21, wParam=0x70036, lParam=0x2010001) returned 0x1
[0305.871] SetCursor (hCursor=0x10003) returned 0x10003
[0305.871] TranslateMessage (lpMsg=0x53eef8) returned 0
[0305.871] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0305.871] GetKeyState (nVirtKey=1) returned -127
[0305.871] GetKeyState (nVirtKey=2) returned 0
[0305.871] GetKeyState (nVirtKey=4) returned 0
[0305.871] GetKeyState (nVirtKey=5) returned 0
[0305.871] GetKeyState (nVirtKey=6) returned 0
[0305.871] IsWindowVisible (hWnd=0x202c6) returned 1
[0305.871] IsWindowEnabled (hWnd=0x202c6) returned 1
[0305.871] SetFocus (hWnd=0x202c6) returned 0x202c6
[0305.872] GetFocus () returned 0x202c6
[0305.872] GetFocus () returned 0x202c6
[0305.872] GetFocus () returned 0x202c6
[0305.872] GetKeyState (nVirtKey=1) returned -127
[0305.872] GetKeyState (nVirtKey=2) returned 0
[0305.872] GetKeyState (nVirtKey=4) returned 0
[0305.872] GetKeyState (nVirtKey=5) returned 0
[0305.872] GetKeyState (nVirtKey=6) returned 0
[0305.872] GetCapture () returned 0x0
[0305.872] SetCapture (hWnd=0x202c6) returned 0x0
[0305.872] GetKeyState (nVirtKey=1) returned -127
[0305.872] GetKeyState (nVirtKey=2) returned 0
[0305.872] GetKeyState (nVirtKey=4) returned 0
[0305.872] GetKeyState (nVirtKey=5) returned 0
[0305.872] GetKeyState (nVirtKey=6) returned 0
[0305.872] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0305.872] InvalidateRect (hWnd=0x202c6, lpRect=0x53eb20, bErase=0) returned 1
[0305.872] PeekMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.873] IsWindowUnicode (hWnd=0x202c6) returned 1
[0305.873] GetMessageW (in: lpMsg=0x53eef8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53eef8) returned 1
[0305.873] TranslateMessage (lpMsg=0x53eef8) returned 0
[0305.873] DispatchMessageW (lpMsg=0x53eef8) returned 0x0
[0305.873] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x24a5924, cPoints=0x1 | out: lpPoints=0x24a5924) returned 25690608
[0305.873] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0305.873] InvalidateRect (hWnd=0x202c6, lpRect=0x53eac0, bErase=0) returned 1
[0305.873] UpdateWindow (hWnd=0x202c6) returned 1
[0305.873] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e5d8 | out: lpPaint=0x53e5d8) returned 0xf0105ee
[0305.873] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0305.873] CreateCompatibleDC (hdc=0xf0105ee) returned 0xdd010794
[0305.874] SelectObject (hdc=0xdd010794, h=0x1e0507b9) returned 0x85000f
[0305.874] GdipCreateFromHDC (hdc=0xdd010794, graphics=0x53e5f0) returned 0x0
[0305.874] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0305.874] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0305.874] GdipCreateMatrix (matrix=0x53e638) returned 0x0
[0305.874] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0305.874] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e650) returned 0x0
[0305.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0305.874] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0305.875] LocalFree (hMem=0x89ee08) returned 0x0
[0305.875] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0305.875] GdipCreateRegion (region=0x53e638) returned 0x0
[0305.875] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0305.875] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e644) returned 0x0
[0305.875] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e670) returned 0x0
[0305.875] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa410dbd) returned 0x0
[0305.875] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0305.875] GdipGetDC (graphics=0x5d92c30, hdc=0x53e450) returned 0x0
[0305.875] GetCurrentObject (hdc=0xdd010794, type=0x1) returned 0xb00017
[0305.875] GetCurrentObject (hdc=0xdd010794, type=0x2) returned 0x900010
[0305.875] GetCurrentObject (hdc=0xdd010794, type=0x7) returned 0x1e0507b9
[0305.875] GetCurrentObject (hdc=0xdd010794, type=0x6) returned 0x8a01c2
[0305.875] SaveDC (hdc=0xdd010794) returned 1
[0305.875] GetNearestColor (hdc=0xdd010794, color=0xff) returned 0xff
[0305.876] GetNearestColor (hdc=0xdd010794, color=0x55) returned 0x55
[0305.876] GetNearestColor (hdc=0xdd010794, color=0x0) returned 0x0
[0305.876] GetNearestColor (hdc=0xdd010794, color=0x55) returned 0x55
[0305.876] GetNearestColor (hdc=0xdd010794, color=0x0) returned 0x0
[0305.876] GetNearestColor (hdc=0xdd010794, color=0x8080ff) returned 0x8080ff
[0305.876] GetNearestColor (hdc=0xdd010794, color=0x7373e5) returned 0x7373e5
[0305.876] GetNearestColor (hdc=0xdd010794, color=0xe5) returned 0xe5
[0305.876] GetNearestColor (hdc=0xdd010794, color=0x0) returned 0x0
[0305.876] RestoreDC (hdc=0xdd010794, nSavedDC=-1) returned 1
[0305.876] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd010794) returned 0x0
[0305.876] IsAppThemed () returned 0x1
[0305.876] GetThemeAppProperties () returned 0x3
[0305.876] GetThemeAppProperties () returned 0x3
[0305.876] IsAppThemed () returned 0x1
[0305.876] GetThemeAppProperties () returned 0x3
[0305.877] GetThemeAppProperties () returned 0x3
[0305.877] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e30c, format=0x102415, lpdtp=0x24a6040 | out: lpchText="Decrypt", lprc=0x53e30c) returned 13
[0305.877] IsAppThemed () returned 0x1
[0305.877] GetThemeAppProperties () returned 0x3
[0305.877] GetThemeAppProperties () returned 0x3
[0305.877] IsAppThemed () returned 0x1
[0305.877] GetThemeAppProperties () returned 0x3
[0305.877] GetThemeAppProperties () returned 0x3
[0305.877] IsAppThemed () returned 0x1
[0305.877] GetThemeAppProperties () returned 0x3
[0305.877] GetThemeAppProperties () returned 0x3
[0305.877] IsAppThemed () returned 0x1
[0305.878] GetThemeAppProperties () returned 0x3
[0305.878] GetThemeAppProperties () returned 0x3
[0305.878] IsThemePartDefined () returned 0x1
[0305.878] IsAppThemed () returned 0x1
[0305.878] GetThemeAppProperties () returned 0x3
[0305.878] GetThemeAppProperties () returned 0x3
[0305.878] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0305.878] IsAppThemed () returned 0x1
[0305.878] GetThemeAppProperties () returned 0x3
[0305.878] GetThemeAppProperties () returned 0x3
[0305.878] IsAppThemed () returned 0x1
[0305.878] GetThemeAppProperties () returned 0x3
[0305.878] GetThemeAppProperties () returned 0x3
[0305.878] IsThemePartDefined () returned 0x1
[0305.878] GdipCreateRegion (region=0x53e354) returned 0x0
[0305.878] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0305.878] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0305.878] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0305.878] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e36c) returned 0x0
[0305.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0305.878] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0305.878] LocalFree (hMem=0x89eee8) returned 0x0
[0305.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0305.878] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0305.879] LocalFree (hMem=0x89ee08) returned 0x0
[0305.879] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0305.879] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e394) returned 0x0
[0305.879] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e384) returned 0x0
[0305.879] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e384) returned 0x0
[0305.879] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0305.879] GdipGetDC (graphics=0x5d92c30, hdc=0x53e39c) returned 0x0
[0305.879] GetCurrentObject (hdc=0xdd010794, type=0x1) returned 0xb00017
[0305.879] GetCurrentObject (hdc=0xdd010794, type=0x2) returned 0x900010
[0305.879] GetCurrentObject (hdc=0xdd010794, type=0x7) returned 0x1e0507b9
[0305.879] GetCurrentObject (hdc=0xdd010794, type=0x6) returned 0x8a01c2
[0305.879] SaveDC (hdc=0xdd010794) returned 1
[0305.879] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xec04053e
[0305.879] GetClipRgn (hdc=0xdd010794, hrgn=0xec04053e) returned 0
[0305.879] SelectClipRgn (hdc=0xdd010794, hrgn=0x610407a1) returned 2
[0305.879] DeleteObject (ho=0xec04053e) returned 1
[0305.879] DeleteObject (ho=0x610407a1) returned 1
[0305.879] OffsetViewportOrgEx (in: hdc=0xdd010794, x=0, y=0, lppt=0x24a66f0 | out: lppt=0x24a66f0) returned 1
[0305.879] DrawThemeParentBackground () returned 0x0
[0305.880] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53e064 | out: lpwndpl=0x53e064) returned 1
[0305.880] GetClientRect (in: hWnd=0x70036, lpRect=0x53e010 | out: lpRect=0x53e010) returned 1
[0305.880] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0305.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0305.880] GetSystemMetrics (nIndex=42) returned 0
[0305.880] GetWindowTextW (in: hWnd=0x70036, lpString=0x53decc, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0305.880] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53decc) returned 0xc
[0305.880] GetClientRect (in: hWnd=0x70036, lpRect=0x53df18 | out: lpRect=0x53df18) returned 1
[0305.880] GetCurrentObject (hdc=0xdd010794, type=0x1) returned 0xb00017
[0305.880] GetCurrentObject (hdc=0xdd010794, type=0x2) returned 0x900010
[0305.880] GetCurrentObject (hdc=0xdd010794, type=0x7) returned 0x1e0507b9
[0305.880] GetCurrentObject (hdc=0xdd010794, type=0x6) returned 0x8a01c2
[0305.880] SaveDC (hdc=0xdd010794) returned 2
[0305.880] GetNearestColor (hdc=0xdd010794, color=0xff) returned 0xff
[0305.880] CreateSolidBrush (color=0xff) returned 0xab10078d
[0305.880] FillRect (hDC=0xdd010794, lprc=0x53ddb8, hbr=0xab10078d) returned 1
[0305.881] DeleteObject (ho=0xab10078d) returned 1
[0305.881] RestoreDC (hdc=0xdd010794, nSavedDC=-1) returned 1
[0305.881] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0305.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0305.881] GetSystemMetrics (nIndex=42) returned 0
[0305.881] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0305.881] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0305.882] GetClientRect (in: hWnd=0x70036, lpRect=0x53deb8 | out: lpRect=0x53deb8) returned 1
[0305.882] GetCurrentObject (hdc=0xdd010794, type=0x1) returned 0xb00017
[0305.882] GetCurrentObject (hdc=0xdd010794, type=0x2) returned 0x900010
[0305.882] GetCurrentObject (hdc=0xdd010794, type=0x7) returned 0x1e0507b9
[0305.882] GetCurrentObject (hdc=0xdd010794, type=0x6) returned 0x8a01c2
[0305.882] SaveDC (hdc=0xdd010794) returned 2
[0305.882] GetNearestColor (hdc=0xdd010794, color=0xff) returned 0xff
[0305.882] CreateSolidBrush (color=0xff) returned 0xac10078d
[0305.882] FillRect (hDC=0xdd010794, lprc=0x53dd58, hbr=0xac10078d) returned 1
[0305.882] DeleteObject (ho=0xac10078d) returned 1
[0305.882] RestoreDC (hdc=0xdd010794, nSavedDC=-1) returned 1
[0305.882] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0305.882] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0305.882] GetSystemMetrics (nIndex=42) returned 0
[0305.882] GetWindowTextW (in: hWnd=0x70036, lpString=0x53de6c, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0305.882] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53de6c) returned 0xc
[0305.883] RestoreDC (hdc=0xdd010794, nSavedDC=-1) returned 1
[0305.884] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd010794) returned 0x0
[0305.884] IsAppThemed () returned 0x1
[0305.884] GetThemeAppProperties () returned 0x3
[0305.884] GetThemeAppProperties () returned 0x3
[0305.884] IsAppThemed () returned 0x1
[0305.885] GetThemeAppProperties () returned 0x3
[0305.885] GetThemeAppProperties () returned 0x3
[0305.885] IsThemePartDefined () returned 0x1
[0305.885] GdipCreateRegion (region=0x53e2d8) returned 0x0
[0305.885] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0305.885] GdipCreateMatrix (matrix=0x53e2d8) returned 0x0
[0305.885] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0305.885] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e2f0) returned 0x0
[0305.885] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0305.885] LocalFree (hMem=0x89ea88) returned 0x0
[0305.885] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0305.885] LocalFree (hMem=0x89eee8) returned 0x0
[0305.885] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0305.885] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e318) returned 0x0
[0305.885] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e308) returned 0x0
[0305.885] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e308) returned 0x0
[0305.885] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0305.885] GdipGetDC (graphics=0x5d92c30, hdc=0x53e320) returned 0x0
[0305.885] GetCurrentObject (hdc=0xdd010794, type=0x1) returned 0xb00017
[0305.885] GetCurrentObject (hdc=0xdd010794, type=0x2) returned 0x900010
[0305.885] GetCurrentObject (hdc=0xdd010794, type=0x7) returned 0x1e0507b9
[0305.885] GetCurrentObject (hdc=0xdd010794, type=0x6) returned 0x8a01c2
[0305.885] SaveDC (hdc=0xdd010794) returned 1
[0305.886] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x620407a1
[0305.886] GetClipRgn (hdc=0xdd010794, hrgn=0x620407a1) returned 0
[0305.886] SelectClipRgn (hdc=0xdd010794, hrgn=0xee04053e) returned 2
[0305.886] DeleteObject (ho=0x620407a1) returned 1
[0305.886] DeleteObject (ho=0xee04053e) returned 1
[0305.886] OffsetViewportOrgEx (in: hdc=0xdd010794, x=0, y=0, lppt=0x24a6f54 | out: lppt=0x24a6f54) returned 1
[0305.886] IsAppThemed () returned 0x1
[0305.886] GetThemeAppProperties () returned 0x3
[0305.886] GetThemeAppProperties () returned 0x3
[0305.886] DrawThemeBackground () returned 0x0
[0305.886] RestoreDC (hdc=0xdd010794, nSavedDC=-1) returned 1
[0305.886] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd010794) returned 0x0
[0305.886] GdipCreateRegion (region=0x53e2dc) returned 0x0
[0305.886] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0305.886] GdipCreateMatrix (matrix=0x53e2dc) returned 0x0
[0305.886] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0305.886] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e2f4) returned 0x0
[0305.886] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0305.886] LocalFree (hMem=0x89ec80) returned 0x0
[0305.886] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0305.886] LocalFree (hMem=0x89ec80) returned 0x0
[0305.886] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0305.887] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e31c) returned 0x0
[0305.887] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e30c) returned 0x0
[0305.887] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e30c) returned 0x0
[0305.887] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0305.887] GdipGetDC (graphics=0x5d92c30, hdc=0x53e324) returned 0x0
[0305.887] GetCurrentObject (hdc=0xdd010794, type=0x1) returned 0xb00017
[0305.887] GetCurrentObject (hdc=0xdd010794, type=0x2) returned 0x900010
[0305.887] GetCurrentObject (hdc=0xdd010794, type=0x7) returned 0x1e0507b9
[0305.887] GetCurrentObject (hdc=0xdd010794, type=0x6) returned 0x8a01c2
[0305.887] SaveDC (hdc=0xdd010794) returned 1
[0305.887] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xef04053e
[0305.887] GetClipRgn (hdc=0xdd010794, hrgn=0xef04053e) returned 0
[0305.887] SelectClipRgn (hdc=0xdd010794, hrgn=0x630407a1) returned 2
[0305.887] DeleteObject (ho=0xef04053e) returned 1
[0305.887] DeleteObject (ho=0x630407a1) returned 1
[0305.887] OffsetViewportOrgEx (in: hdc=0xdd010794, x=0, y=0, lppt=0x24a7228 | out: lppt=0x24a7228) returned 1
[0305.887] IsAppThemed () returned 0x1
[0305.887] GetThemeAppProperties () returned 0x3
[0305.887] GetThemeAppProperties () returned 0x3
[0305.887] GetThemeBackgroundContentRect () returned 0x0
[0305.887] RestoreDC (hdc=0xdd010794, nSavedDC=-1) returned 1
[0305.887] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd010794) returned 0x0
[0305.887] IsAppThemed () returned 0x1
[0305.888] GetThemeAppProperties () returned 0x3
[0305.888] GetThemeAppProperties () returned 0x3
[0305.888] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e458) returned 0x0
[0305.888] GdipGetDC (graphics=0x5d92c30, hdc=0x53e444) returned 0x0
[0305.888] GetCurrentObject (hdc=0xdd010794, type=0x1) returned 0xb00017
[0305.888] GetCurrentObject (hdc=0xdd010794, type=0x2) returned 0x900010
[0305.888] GetCurrentObject (hdc=0xdd010794, type=0x7) returned 0x1e0507b9
[0305.888] GetCurrentObject (hdc=0xdd010794, type=0x6) returned 0x8a01c2
[0305.888] SaveDC (hdc=0xdd010794) returned 1
[0305.888] GetTextAlign (hdc=0xdd010794) returned 0x0
[0305.888] GetTextColor (hdc=0xdd010794) returned 0x0
[0305.888] GetCurrentObject (hdc=0xdd010794, type=0x6) returned 0x8a01c2
[0305.888] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53e18c | out: pv=0x53e18c) returned 92
[0305.888] SelectObject (hdc=0xdd010794, h=0x450a0799) returned 0x8a01c2
[0305.888] GetBkMode (hdc=0xdd010794) returned 2
[0305.888] SetBkMode (hdc=0xdd010794, mode=1) returned 2
[0305.888] DrawTextExW (in: hdc=0xdd010794, lpchText="Decrypt", cchText=7, lprc=0x53e274, format=0x102415, lpdtp=0x24a75c8 | out: lpchText="Decrypt", lprc=0x53e274) returned 13
[0305.889] DrawTextExW (in: hdc=0xdd010794, lpchText="Decrypt", cchText=7, lprc=0x53e3d8, format=0x102015, lpdtp=0x24a75c8 | out: lpchText="Decrypt", lprc=0x53e3d8) returned 13
[0305.889] RestoreDC (hdc=0xdd010794, nSavedDC=-1) returned 1
[0305.889] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd010794) returned 0x0
[0305.889] GetFocus () returned 0x202c6
[0305.889] IsAppThemed () returned 0x1
[0305.889] GetThemeAppProperties () returned 0x3
[0305.889] GetThemeAppProperties () returned 0x3
[0305.889] GdipGetDC (graphics=0x5d92c30, hdc=0x53e630) returned 0x0
[0305.890] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=153, cy=40, hdcSrc=0xdd010794, x1=0, y1=0, rop=0xcc0020) returned 1
[0305.890] GdipReleaseDC (graphics=0x5d92c30, hdc=0xdd010794) returned 0x0
[0305.890] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0305.890] SelectObject (hdc=0xdd010794, h=0x85000f) returned 0x1e0507b9
[0305.890] DeleteDC (hdc=0xdd010794) returned 1
[0305.890] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0305.890] EndPaint (hWnd=0x202c6, lpPaint=0x53e5d4) returned 1
[0305.891] MapWindowPoints (in: hWndFrom=0x202c6, hWndTo=0x0, lpPoints=0x24a76c4, cPoints=0x1 | out: lpPoints=0x24a76c4) returned 25690608
[0305.891] WindowFromPoint (Point=0x224) returned 0x202c6
[0305.891] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x84, wParam=0x0, lParam=0x19d0224) returned 0x1
[0305.891] NotifyWinEvent (event=0x800a, hwnd=0x202c6, idObject=-4, idChild=0)
[0305.891] NotifyWinEvent (event=0x800c, hwnd=0x202c6, idObject=-4, idChild=0)
[0305.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.893] AdjustWindowRectEx (in: lpRect=0x53e998, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e998) returned 1
[0305.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.894] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0305.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.895] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b0) returned 1
[0305.895] GetDC (hWnd=0x0) returned 0x10105d6
[0305.895] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x53e888) returned 0x0
[0305.895] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e880) returned 0x0
[0305.895] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0305.895] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
[0305.896] GetSystemMetrics (nIndex=5) returned 1
[0305.896] GetSystemMetrics (nIndex=6) returned 1
[0305.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.896] AdjustWindowRectEx (in: lpRect=0x53e9b0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e9b0) returned 1
[0305.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.897] AdjustWindowRectEx (in: lpRect=0x53e9b4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e9b4) returned 1
[0305.990] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.990] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0305.991] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.991] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0305.991] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.991] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0305.991] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.991] AdjustWindowRectEx (in: lpRect=0x53e478, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e478) returned 1
[0305.991] GetSystemMetrics (nIndex=5) returned 1
[0305.991] GetSystemMetrics (nIndex=6) returned 1
[0305.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.992] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0305.992] GetSystemMetrics (nIndex=5) returned 1
[0305.992] GetSystemMetrics (nIndex=6) returned 1
[0305.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.992] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x53e44c) returned 1
[0305.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.992] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0305.993] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.993] AdjustWindowRectEx (in: lpRect=0x53e44c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e44c) returned 1
[0305.993] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.993] AdjustWindowRectEx (in: lpRect=0x53e4ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e4ac) returned 1
[0305.993] GetSystemMetrics (nIndex=59) returned 1460
[0305.993] GetSystemMetrics (nIndex=60) returned 920
[0305.993] GetSystemMetrics (nIndex=34) returned 136
[0305.993] GetSystemMetrics (nIndex=35) returned 39
[0305.993] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.993] AdjustWindowRectEx (in: lpRect=0x53e3ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x53e3ac) returned 1
[0305.993] GetCurrentThreadId () returned 0x11d0
[0305.993] GetCurrentThreadId () returned 0x11d0
[0305.993] GetCurrentThreadId () returned 0x11d0
[0305.994] GetCurrentThreadId () returned 0x11d0
[0305.994] GetCurrentThreadId () returned 0x11d0
[0305.994] GetCurrentThreadId () returned 0x11d0
[0305.994] GetCurrentThreadId () returned 0x11d0
[0305.994] GetCurrentThreadId () returned 0x11d0
[0305.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.994] AdjustWindowRectEx (in: lpRect=0x53e888, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e888) returned 1
[0305.994] AdjustWindowRectEx (in: lpRect=0x53e954, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e954) returned 1
[0305.994] GetCurrentActCtx (in: lphActCtx=0x53e910 | out: lphActCtx=0x53e910*=0x89a934) returned 1
[0305.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.994] GetCurrentActCtx (in: lphActCtx=0x53e898 | out: lphActCtx=0x53e898*=0x89a934) returned 1
[0305.995] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0305.995] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0305.995] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=136, nHeight=39, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1202b8
[0305.996] SetWindowLongW (hWnd=0x1202b8, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0305.996] GetWindowLongW (hWnd=0x1202b8, nIndex=-4) returned 1950089536
[0305.996] SetWindowLongW (hWnd=0x1202b8, nIndex=-4, dwNewLong=79650270) returned 1950089536
[0305.997] GetWindowLongW (hWnd=0x1202b8, nIndex=-4) returned 79650270
[0305.997] GetWindowLongW (hWnd=0x1202b8, nIndex=-16) returned 113311744
[0305.997] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1202b8, Msg=0x24, wParam=0x0, lParam=0x53e2c4) returned 0x0
[0305.998] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1202b8, Msg=0x81, wParam=0x0, lParam=0x53e2b8) returned 0x1
[0305.999] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1202b8, Msg=0x83, wParam=0x0, lParam=0x53e2a4) returned 0x0
[0305.999] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1202b8, Msg=0x1, wParam=0x0, lParam=0x53e2b8) returned 0x0
[0305.999] GetClientRect (in: hWnd=0x1202b8, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0305.999] GetWindowRect (in: hWnd=0x1202b8, lpRect=0x53df84 | out: lpRect=0x53df84) returned 1
[0305.999] SetWindowTextW (hWnd=0x1202b8, lpString="WindowsFormsParkingWindow") returned 1
[0305.999] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x1202b8, Msg=0xc, wParam=0x0, lParam=0x249f610) returned 0x1
[0306.000] GetParent (hWnd=0x1202b8) returned 0x0
[0306.000] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0306.000] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r9_ad1", lpWindowName="Enter password: ", dwStyle=0x5600000d, X=10, Y=10, nWidth=250, nHeight=70, hWndParent=0x1202b8, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x1f004e
[0306.001] SetWindowLongW (hWnd=0x1f004e, nIndex=-4, dwNewLong=1868147648) returned 79628838
[0306.001] GetWindowLongW (hWnd=0x1f004e, nIndex=-4) returned 1868147648
[0306.001] SetWindowLongW (hWnd=0x1f004e, nIndex=-4, dwNewLong=79650310) returned 1868147648
[0306.001] GetWindowLongW (hWnd=0x1f004e, nIndex=-4) returned 79650310
[0306.001] GetWindowLongW (hWnd=0x1f004e, nIndex=-16) returned 1174405133
[0306.001] GetWindowLongW (hWnd=0x1f004e, nIndex=-12) returned 0
[0306.001] SetWindowLongW (hWnd=0x1f004e, nIndex=-12, dwNewLong=2031694) returned 0
[0306.001] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x81, wParam=0x0, lParam=0x53e330) returned 0x1
[0306.002] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x83, wParam=0x0, lParam=0x53e31c) returned 0x0
[0306.002] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x1, wParam=0x0, lParam=0x53e330) returned 0x0
[0306.003] GetClientRect (in: hWnd=0x1f004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0306.003] GetWindowRect (in: hWnd=0x1f004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0306.003] GetParent (hWnd=0x1f004e) returned 0x1202b8
[0306.003] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1202b8, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -1966088
[0306.003] SetWindowTextW (hWnd=0x1f004e, lpString="Enter password: ") returned 1
[0306.003] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0xc, wParam=0x0, lParam=0x22c2764) returned 0x1
[0306.004] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x5, wParam=0x0, lParam=0x4600fa) returned 0x0
[0306.004] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0306.004] GetClientRect (in: hWnd=0x1f004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0306.004] GetWindowRect (in: hWnd=0x1f004e, lpRect=0x53e034 | out: lpRect=0x53e034) returned 1
[0306.004] GetParent (hWnd=0x1f004e) returned 0x1202b8
[0306.004] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1202b8, lpPoints=0x53e034, cPoints=0x2 | out: lpPoints=0x53e034) returned -1966088
[0306.004] SendMessageW (hWnd=0x1f004e, Msg=0x2210, wParam=0x4e0001, lParam=0x1f004e) returned 0x0
[0306.004] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x2210, wParam=0x4e0001, lParam=0x1f004e) returned 0x0
[0306.004] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0306.004] GetParent (hWnd=0x1f004e) returned 0x1202b8
[0306.004] GdipCreateFromHWND (hwnd=0x1f004e, graphics=0x53e994) returned 0x0
[0306.005] GdipMeasureString (graphics=0x5d92c30, string="Enter password: ", length=16, font=0x4a4ef48, layoutRect=0x53e98c, stringFormat=0x0, boundingBox=0x53e97c, codepointsFitted=0x53e978, linesFilled=0x53e974) returned 0x0
[0306.005] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0306.005] GetProcessWindowStation () returned 0x13c
[0306.005] GetCapture () returned 0x202c6
[0306.005] SendMessageW (hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0306.005] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0306.005] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0306.006] ReleaseCapture () returned 1
[0306.006] GetActiveWindow () returned 0x70036
[0306.006] GetCurrentActCtx (in: lphActCtx=0x53e89c | out: lphActCtx=0x53e89c*=0x89a934) returned 1
[0306.006] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0306.006] AdjustWindowRectEx (in: lpRect=0x53e7fc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x53e7fc) returned 1
[0306.006] GetCursorPos (in: lpPoint=0x24b4474 | out: lpPoint=0x24b4474*(x=548, y=413)) returned 1
[0306.006] MonitorFromPoint (pt=0x224, dwFlags=0x19d) returned 0x10001
[0306.006] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e6e0 | out: lpmi=0x53e6e0) returned 1
[0306.006] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xe0010794
[0306.007] GetDeviceCaps (hdc=0xe0010794, index=12) returned 32
[0306.007] GetDeviceCaps (hdc=0xe0010794, index=14) returned 1
[0306.007] DeleteDC (hdc=0xe0010794) returned 1
[0306.007] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e730 | out: lpmi=0x53e730) returned 1
[0306.007] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0306.007] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Ransomware", dwStyle=0x2c80000, X=535, Y=350, nWidth=369, nHeight=159, hWndParent=0x0, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x43013e
[0306.007] SetWindowLongW (hWnd=0x43013e, nIndex=-4, dwNewLong=1950089536) returned 79627710
[0306.008] GetWindowLongW (hWnd=0x43013e, nIndex=-4) returned 1950089536
[0306.008] SetWindowLongW (hWnd=0x43013e, nIndex=-4, dwNewLong=79650550) returned 1950089536
[0306.008] GetWindowLongW (hWnd=0x43013e, nIndex=-4) returned 79650550
[0306.008] GetWindowLongW (hWnd=0x43013e, nIndex=-16) returned 113770496
[0306.008] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x81, wParam=0x0, lParam=0x53e2c0) returned 0x1
[0306.009] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x83, wParam=0x0, lParam=0x53e2ac) returned 0x0
[0306.010] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x1, wParam=0x0, lParam=0x53e2c0) returned 0x0
[0306.010] GetClientRect (in: hWnd=0x43013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0306.010] GetWindowRect (in: hWnd=0x43013e, lpRect=0x53df78 | out: lpRect=0x53df78) returned 1
[0306.010] SetWindowTextW (hWnd=0x43013e, lpString="Ransomware") returned 1
[0306.010] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xc, wParam=0x0, lParam=0x24a778c) returned 0x1
[0306.012] GetStartupInfoW (in: lpStartupInfo=0x24b47b0 | out: lpStartupInfo=0x24b47b0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Ransomware.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0))
[0306.013] GetParent (hWnd=0x43013e) returned 0x0
[0306.013] SetWindowLongW (hWnd=0x43013e, nIndex=-8, dwNewLong=0) returned 0
[0306.014] SendMessageW (hWnd=0x43013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0306.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
[0306.014] SendMessageW (hWnd=0x43013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0306.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
[0306.014] GetSystemMenu (hWnd=0x43013e, bRevert=0) returned 0x880095
[0306.015] GetWindowPlacement (in: hWnd=0x43013e, lpwndpl=0x53e8ac | out: lpwndpl=0x53e8ac) returned 1
[0306.015] EnableMenuItem (hMenu=0x880095, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0306.015] EnableMenuItem (hMenu=0x880095, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0306.015] EnableMenuItem (hMenu=0x880095, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0306.015] EnableMenuItem (hMenu=0x880095, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0306.015] EnableMenuItem (hMenu=0x880095, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0306.015] GetClientRect (in: hWnd=0x43013e, lpRect=0x53e8f0 | out: lpRect=0x53e8f0) returned 1
[0306.015] GetClientRect (in: hWnd=0x43013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0306.015] GetWindowRect (in: hWnd=0x43013e, lpRect=0x53e850 | out: lpRect=0x53e850) returned 1
[0306.015] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0306.016] GetWindowLongW (hWnd=0x43013e, nIndex=-16) returned 113770496
[0306.016] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.016] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.016] GetSystemMetrics (nIndex=42) returned 0
[0306.016] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.016] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0306.016] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.016] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.016] GetSystemMetrics (nIndex=42) returned 0
[0306.016] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53e7e8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.016] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53e7e8) returned 0xa
[0306.016] GetCursorPos (in: lpPoint=0x24b4924 | out: lpPoint=0x24b4924*(x=548, y=413)) returned 1
[0306.016] MonitorFromPoint (pt=0x222, dwFlags=0x1a0) returned 0x10001
[0306.016] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e720 | out: lpmi=0x53e720) returned 1
[0306.016] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xe4010794
[0306.016] GetDeviceCaps (hdc=0xe4010794, index=12) returned 32
[0306.016] GetDeviceCaps (hdc=0xe4010794, index=14) returned 1
[0306.016] DeleteDC (hdc=0xe4010794) returned 1
[0306.017] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e770 | out: lpmi=0x53e770) returned 1
[0306.017] GetWindowLongW (hWnd=0x43013e, nIndex=-16) returned 113770496
[0306.017] GetWindowLongW (hWnd=0x43013e, nIndex=-20) returned 327937
[0306.017] SetWindowLongW (hWnd=0x43013e, nIndex=-16, dwNewLong=46661632) returned 113770496
[0306.017] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7c, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0306.017] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7d, wParam=0xfffffff0, lParam=0x53e84c) returned 0x0
[0306.018] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0306.018] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0306.018] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0306.018] SetWindowLongW (hWnd=0x43013e, nIndex=-20, dwNewLong=327681) returned 327937
[0306.018] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7c, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0306.018] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7d, wParam=0xffffffec, lParam=0x53e84c) returned 0x0
[0306.019] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0306.019] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0306.019] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0306.020] SetWindowPos (hWnd=0x43013e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0306.020] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x46, wParam=0x0, lParam=0x53e864) returned 0x0
[0306.020] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x83, wParam=0x1, lParam=0x53e83c) returned 0x0
[0306.020] GetWindowPlacement (in: hWnd=0x43013e, lpwndpl=0x53e590 | out: lpwndpl=0x53e590) returned 1
[0306.020] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x47, wParam=0x0, lParam=0x53e864) returned 0x0
[0306.020] GetClientRect (in: hWnd=0x43013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0306.020] GetWindowRect (in: hWnd=0x43013e, lpRect=0x53e540 | out: lpRect=0x53e540) returned 1
[0306.021] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0306.021] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0306.022] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0306.022] RedrawWindow (hWnd=0x43013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0306.022] GetSystemMenu (hWnd=0x43013e, bRevert=0) returned 0x880095
[0306.023] GetWindowPlacement (in: hWnd=0x43013e, lpwndpl=0x53e89c | out: lpwndpl=0x53e89c) returned 1
[0306.023] EnableMenuItem (hMenu=0x880095, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0306.023] EnableMenuItem (hMenu=0x880095, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0306.023] EnableMenuItem (hMenu=0x880095, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0306.023] EnableMenuItem (hMenu=0x880095, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0306.023] EnableMenuItem (hMenu=0x880095, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0306.023] GetWindowLongW (hWnd=0x70036, nIndex=-8) returned 393910
[0306.023] GetWindowLongW (hWnd=0x43013e, nIndex=-8) returned 0
[0306.023] SetWindowLongW (hWnd=0x43013e, nIndex=-8, dwNewLong=458806) returned 0
[0306.024] GetCurrentActCtx (in: lphActCtx=0x53e91c | out: lphActCtx=0x53e91c*=0x89a934) returned 1
[0306.025] GetProcessWindowStation () returned 0x13c
[0306.025] GetCurrentThreadId () returned 0x11d0
[0306.025] EnumThreadWindows (dwThreadId=0x11d0, lpfn=0x4bf5c76, lParam=0x0) returned 1
[0306.025] IsWindowVisible (hWnd=0x43013e) returned 0
[0306.025] IsWindowVisible (hWnd=0x70036) returned 1
[0306.025] IsWindowEnabled (hWnd=0x70036) returned 1
[0306.025] IsWindowVisible (hWnd=0x602b6) returned 0
[0306.025] IsWindowVisible (hWnd=0x901f8) returned 0
[0306.025] IsWindowVisible (hWnd=0x202d0) returned 0
[0306.025] IsWindowVisible (hWnd=0x202d4) returned 0
[0306.025] GetActiveWindow () returned 0x70036
[0306.026] GetFocus () returned 0x202c6
[0306.026] IsWindow (hWnd=0x70036) returned 1
[0306.026] EnableWindow (hWnd=0x70036, bEnable=0) returned 0
[0306.026] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
[0306.027] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0
[0306.027] GetWindowLongW (hWnd=0x43013e, nIndex=-8) returned 458806
[0306.027] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e854 | out: lpdwProcessId=0x53e854) returned 0x11d0
[0306.027] GetCurrentThreadId () returned 0x11d0
[0306.027] GetWindowLongW (hWnd=0x43013e, nIndex=-8) returned 458806
[0306.027] IsWindowEnabled (hWnd=0x70036) returned 0
[0306.027] IsWindowEnabled (hWnd=0x43013e) returned 1
[0306.027] ShowWindow (hWnd=0x43013e, nCmdShow=5) returned 0
[0306.027] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0306.027] GetCurrentActCtx (in: lphActCtx=0x53e368 | out: lphActCtx=0x53e368*=0x89a934) returned 1
[0306.028] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0306.028] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0306.028] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=10, Y=90, nWidth=335, nHeight=20, hWndParent=0x43013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2301e2
[0306.029] SetWindowLongW (hWnd=0x2301e2, nIndex=-4, dwNewLong=1868026976) returned 79628718
[0306.029] GetWindowLongW (hWnd=0x2301e2, nIndex=-4) returned 1868026976
[0306.029] SetWindowLongW (hWnd=0x2301e2, nIndex=-4, dwNewLong=79650110) returned 1868026976
[0306.029] GetWindowLongW (hWnd=0x2301e2, nIndex=-4) returned 79650110
[0306.029] GetWindowLongW (hWnd=0x2301e2, nIndex=-16) returned 1174470848
[0306.029] GetWindowLongW (hWnd=0x2301e2, nIndex=-12) returned 0
[0306.029] SetWindowLongW (hWnd=0x2301e2, nIndex=-12, dwNewLong=2294242) returned 0
[0306.029] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x81, wParam=0x0, lParam=0x53dd88) returned 0x1
[0306.030] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x83, wParam=0x0, lParam=0x53dd74) returned 0x0
[0306.031] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x1, wParam=0x0, lParam=0x53dd88) returned 0x1
[0306.032] SendMessageW (hWnd=0x2301e2, Msg=0x2055, wParam=0x2301e2, lParam=0x3) returned 0x2
[0306.032] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0306.032] GetWindow (hWnd=0x2301e2, uCmd=0x3) returned 0x0
[0306.032] GetClientRect (in: hWnd=0x2301e2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0306.032] GetWindowRect (in: hWnd=0x2301e2, lpRect=0x53da48 | out: lpRect=0x53da48) returned 1
[0306.032] GetParent (hWnd=0x2301e2) returned 0x43013e
[0306.032] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x43013e, lpPoints=0x53da48, cPoints=0x2 | out: lpPoints=0x53da48) returned -24904223
[0306.032] SendMessageW (hWnd=0x2301e2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0306.032] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x30, wParam=0x510a0519, lParam=0x0) returned 0x1
[0306.032] SendMessageW (hWnd=0x2301e2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0306.032] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0306.032] GetSystemMetrics (nIndex=5) returned 1
[0306.032] GetSystemMetrics (nIndex=6) returned 1
[0306.032] SendMessageW (hWnd=0x2301e2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0306.032] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0306.033] SendMessageW (hWnd=0x2301e2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0306.033] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0
[0306.033] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x5, wParam=0x0, lParam=0x10014b) returned 0x0
[0306.033] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x3, wParam=0x0, lParam=0x5c000c) returned 0x0
[0306.033] GetClientRect (in: hWnd=0x2301e2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0306.033] GetWindowRect (in: hWnd=0x2301e2, lpRect=0x53daa0 | out: lpRect=0x53daa0) returned 1
[0306.033] GetParent (hWnd=0x2301e2) returned 0x43013e
[0306.033] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x43013e, lpPoints=0x53daa0, cPoints=0x2 | out: lpPoints=0x53daa0) returned -24904223
[0306.033] SendMessageW (hWnd=0x2301e2, Msg=0x2210, wParam=0x1e20001, lParam=0x2301e2) returned 0x0
[0306.033] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x2210, wParam=0x1e20001, lParam=0x2301e2) returned 0x0
[0306.034] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0306.034] GetParent (hWnd=0x2301e2) returned 0x43013e
[0306.034] GetParent (hWnd=0x1f004e) returned 0x1202b8
[0306.034] SetParent (hWndChild=0x1f004e, hWndNewParent=0x43013e) returned 0x1202b8
[0306.034] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0306.035] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x46, wParam=0x0, lParam=0x53e364) returned 0x0
[0306.035] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0306.035] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x47, wParam=0x0, lParam=0x53e364) returned 0x0
[0306.035] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x3, wParam=0x0, lParam=0xa000a) returned 0x0
[0306.035] GetClientRect (in: hWnd=0x1f004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0306.035] GetWindowRect (in: hWnd=0x1f004e, lpRect=0x53d8f4 | out: lpRect=0x53d8f4) returned 1
[0306.035] GetParent (hWnd=0x1f004e) returned 0x43013e
[0306.035] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x43013e, lpPoints=0x53d8f4, cPoints=0x2 | out: lpPoints=0x53d8f4) returned -24904223
[0306.035] GetClientRect (in: hWnd=0x1f004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0306.035] GetWindowRect (in: hWnd=0x1f004e, lpRect=0x53e024 | out: lpRect=0x53e024) returned 1
[0306.035] GetParent (hWnd=0x1f004e) returned 0x43013e
[0306.036] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x43013e, lpPoints=0x53e024, cPoints=0x2 | out: lpPoints=0x53e024) returned -24904223
[0306.036] GetParent (hWnd=0x1f004e) returned 0x43013e
[0306.036] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0306.036] GetWindow (hWnd=0x1f004e, uCmd=0x3) returned 0x0
[0306.036] SetWindowPos (hWnd=0x1f004e, hWndInsertAfter=0x2301e2, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1
[0306.036] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x46, wParam=0x0, lParam=0x53e31c) returned 0x0
[0306.037] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
[0306.037] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x47, wParam=0x0, lParam=0x53e31c) returned 0x0
[0306.037] GetClientRect (in: hWnd=0x1f004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0306.037] GetWindowRect (in: hWnd=0x1f004e, lpRect=0x53dfdc | out: lpRect=0x53dfdc) returned 1
[0306.037] GetParent (hWnd=0x1f004e) returned 0x43013e
[0306.037] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x43013e, lpPoints=0x53dfdc, cPoints=0x2 | out: lpPoints=0x53dfdc) returned -24904223
[0306.037] GetParent (hWnd=0x1f004e) returned 0x43013e
[0306.037] GetWindow (hWnd=0x1f004e, uCmd=0x3) returned 0x2301e2
[0306.037] GetWindowThreadProcessId (in: hWnd=0x1f004e, lpdwProcessId=0x53e3f0 | out: lpdwProcessId=0x53e3f0) returned 0x11d0
[0306.037] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0306.038] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0306.038] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0306.038] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="OK", dwStyle=0x5601000b, X=290, Y=12, nWidth=60, nHeight=22, hWndParent=0x43013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x220122
[0306.039] SetWindowLongW (hWnd=0x220122, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0306.039] GetWindowLongW (hWnd=0x220122, nIndex=-4) returned 1868032000
[0306.039] SetWindowLongW (hWnd=0x220122, nIndex=-4, dwNewLong=79649750) returned 1868032000
[0306.039] GetWindowLongW (hWnd=0x220122, nIndex=-4) returned 79649750
[0306.039] GetWindowLongW (hWnd=0x220122, nIndex=-16) returned 1174470667
[0306.040] GetWindowLongW (hWnd=0x220122, nIndex=-12) returned 0
[0306.040] SetWindowLongW (hWnd=0x220122, nIndex=-12, dwNewLong=2228514) returned 0
[0306.040] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0306.040] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0306.040] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0306.041] SendMessageW (hWnd=0x220122, Msg=0x2055, wParam=0x220122, lParam=0x3) returned 0x2
[0306.041] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0306.041] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0306.042] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0306.042] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0306.042] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0306.042] RedrawWindow (hWnd=0x2301e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0306.042] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0306.042] RedrawWindow (hWnd=0x1f004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0306.042] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0306.042] RedrawWindow (hWnd=0x220122, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0306.042] RedrawWindow (hWnd=0x43013e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0306.042] GetWindow (hWnd=0x220122, uCmd=0x3) returned 0x1f004e
[0306.043] GetClientRect (in: hWnd=0x220122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0306.043] GetWindowRect (in: hWnd=0x220122, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0306.043] GetParent (hWnd=0x220122) returned 0x43013e
[0306.043] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x43013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0306.043] SetWindowTextW (hWnd=0x220122, lpString="OK") returned 1
[0306.043] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0xc, wParam=0x0, lParam=0x24abc4c) returned 0x1
[0306.043] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0306.044] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x3, wParam=0x0, lParam=0xc0122) returned 0x0
[0306.044] GetClientRect (in: hWnd=0x220122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0306.044] GetWindowRect (in: hWnd=0x220122, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0306.044] GetParent (hWnd=0x220122) returned 0x43013e
[0306.044] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x43013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0306.044] SendMessageW (hWnd=0x220122, Msg=0x2210, wParam=0x1220001, lParam=0x220122) returned 0x0
[0306.044] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x2210, wParam=0x1220001, lParam=0x220122) returned 0x0
[0306.044] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0306.044] GetParent (hWnd=0x220122) returned 0x43013e
[0306.044] GetCurrentActCtx (in: lphActCtx=0x53e38c | out: lphActCtx=0x53e38c*=0x89a934) returned 1
[0306.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0306.045] GetModuleHandleW (lpModuleName=0x0) returned 0x170000
[0306.045] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r9_ad1", lpWindowName="Cancel", dwStyle=0x5601000b, X=290, Y=40, nWidth=60, nHeight=22, hWndParent=0x43013e, hMenu=0x0, hInstance=0x170000, lpParam=0x0) returned 0x2800ea
[0306.045] SetWindowLongW (hWnd=0x2800ea, nIndex=-4, dwNewLong=1868032000) returned 79629038
[0306.045] GetWindowLongW (hWnd=0x2800ea, nIndex=-4) returned 1868032000
[0306.046] SetWindowLongW (hWnd=0x2800ea, nIndex=-4, dwNewLong=79649790) returned 1868032000
[0306.046] GetWindowLongW (hWnd=0x2800ea, nIndex=-4) returned 79649790
[0306.046] GetWindowLongW (hWnd=0x2800ea, nIndex=-16) returned 1174470667
[0306.046] GetWindowLongW (hWnd=0x2800ea, nIndex=-12) returned 0
[0306.046] SetWindowLongW (hWnd=0x2800ea, nIndex=-12, dwNewLong=2621674) returned 0
[0306.046] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2800ea, Msg=0x81, wParam=0x0, lParam=0x53ddb0) returned 0x1
[0306.047] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2800ea, Msg=0x83, wParam=0x0, lParam=0x53dd9c) returned 0x0
[0306.047] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2800ea, Msg=0x1, wParam=0x0, lParam=0x53ddb0) returned 0x0
[0306.048] SendMessageW (hWnd=0x2800ea, Msg=0x2055, wParam=0x2800ea, lParam=0x3) returned 0x2
[0306.048] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0306.048] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2800ea, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0306.048] GetWindow (hWnd=0x2800ea, uCmd=0x3) returned 0x220122
[0306.048] GetClientRect (in: hWnd=0x2800ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0306.048] GetWindowRect (in: hWnd=0x2800ea, lpRect=0x53da50 | out: lpRect=0x53da50) returned 1
[0306.048] GetParent (hWnd=0x2800ea) returned 0x43013e
[0306.048] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x43013e, lpPoints=0x53da50, cPoints=0x2 | out: lpPoints=0x53da50) returned -24904223
[0306.048] SetWindowTextW (hWnd=0x2800ea, lpString="Cancel") returned 1
[0306.048] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2800ea, Msg=0xc, wParam=0x0, lParam=0x24af50c) returned 0x1
[0306.049] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2800ea, Msg=0x5, wParam=0x0, lParam=0x16003c) returned 0x0
[0306.049] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2800ea, Msg=0x3, wParam=0x0, lParam=0x280122) returned 0x0
[0306.049] GetClientRect (in: hWnd=0x2800ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0306.049] GetWindowRect (in: hWnd=0x2800ea, lpRect=0x53daa8 | out: lpRect=0x53daa8) returned 1
[0306.049] GetParent (hWnd=0x2800ea) returned 0x43013e
[0306.049] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x43013e, lpPoints=0x53daa8, cPoints=0x2 | out: lpPoints=0x53daa8) returned -24904223
[0306.049] SendMessageW (hWnd=0x2800ea, Msg=0x2210, wParam=0xea0001, lParam=0x2800ea) returned 0x0
[0306.049] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2800ea, Msg=0x2210, wParam=0xea0001, lParam=0x2800ea) returned 0x0
[0306.049] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2800ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0306.049] GetParent (hWnd=0x2800ea) returned 0x43013e
[0306.050] GetDC (hWnd=0x0) returned 0x60100ce
[0306.050] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x53e320) returned 0x0
[0306.050] GdipGetFontHeight (font=0x4a4ef48, graphics=0x5d92c30, height=0x53e318) returned 0x0
[0306.050] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0306.050] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1
[0306.050] GdipCreateFromHWND (hwnd=0x0, graphics=0x53e374) returned 0x0
[0306.051] GdipMeasureString (graphics=0x5d92c30, string="The quick brown fox jumped over the lazy dog.", length=45, font=0x4a4ef48, layoutRect=0x53e33c, stringFormat=0x0, boundingBox=0x53e32c, codepointsFitted=0x53e328, linesFilled=0x53e324) returned 0x0
[0306.051] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0306.051] GetWindowLongW (hWnd=0x43013e, nIndex=-8) returned 458806
[0306.051] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001
[0306.052] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2cc | out: lpmi=0x53e2cc) returned 1
[0306.052] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xeb010794
[0306.052] GetDeviceCaps (hdc=0xeb010794, index=12) returned 32
[0306.052] GetDeviceCaps (hdc=0xeb010794, index=14) returned 1
[0306.052] DeleteDC (hdc=0xeb010794) returned 1
[0306.052] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x53e2f0 | out: lpmi=0x53e2f0) returned 1
[0306.053] GetWindowThreadProcessId (in: hWnd=0x43013e, lpdwProcessId=0x53e3a0 | out: lpdwProcessId=0x53e3a0) returned 0x11d0
[0306.053] GetCurrentThreadId () returned 0x11d0
[0306.053] PostMessageW (hWnd=0x43013e, Msg=0xc1a3, wParam=0x0, lParam=0x0) returned 1
[0306.053] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.053] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.053] GetSystemMetrics (nIndex=42) returned 0
[0306.053] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53e314, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.053] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53e314) returned 0xa
[0306.053] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x53e438, fWinIni=0x0 | out: pvParam=0x53e438) returned 1
[0306.054] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0306.054] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0306.054] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0306.066] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x0, lParam=0x43013e) returned 0x1
[0306.069] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0306.070] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0306.070] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0306.070] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x86, wParam=0x1, lParam=0x70036) returned 0x1
[0306.072] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0306.072] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0306.072] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0306.073] GetFocus () returned 0x202c6
[0306.073] IsChild (hWndParent=0x43013e, hWnd=0x202c6) returned 0
[0306.073] GetFocus () returned 0x202c6
[0306.073] SetFocus (hWnd=0x2301e2) returned 0x202c6
[0306.075] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x8, wParam=0x2301e2, lParam=0x0) returned 0x0
[0306.075] GetCapture () returned 0x0
[0306.075] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0306.076] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0306.078] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0306.079] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0306.079] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0306.080] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0306.080] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0306.080] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0306.080] GetParent (hWnd=0x43013e) returned 0x0
[0306.080] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x7, wParam=0x202c6, lParam=0x0) returned 0x1
[0306.083] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0306.083] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0
[0306.083] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0306.083] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0306.083] GetSysColorBrush (nIndex=5) returned 0x100079
[0306.118] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0306.118] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0306.120] SendMessageW (hWnd=0x2301e2, Msg=0x2111, wParam=0x10001e2, lParam=0x2301e2) returned 0x0
[0306.120] SendMessageW (hWnd=0x2301e2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0306.120] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0xb0, wParam=0x53e14c, lParam=0x53e130) returned 0x0
[0306.120] GetKeyState (nVirtKey=1) returned 1
[0306.120] GetKeyState (nVirtKey=2) returned 0
[0306.120] GetKeyState (nVirtKey=4) returned 0
[0306.120] GetKeyState (nVirtKey=5) returned 0
[0306.120] GetKeyState (nVirtKey=6) returned 0
[0306.120] GetWindowTextLengthW (hWnd=0x2301e2) returned 0
[0306.120] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0306.120] SendMessageW (hWnd=0x2301e2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0306.120] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1
[0306.120] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0
[0306.120] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff
[0306.125] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0306.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0306.126] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0306.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0306.127] GetWindowPlacement (in: hWnd=0x43013e, lpwndpl=0x53e4fc | out: lpwndpl=0x53e4fc) returned 1
[0306.127] GetClientRect (in: hWnd=0x43013e, lpRect=0x53e4a8 | out: lpRect=0x53e4a8) returned 1
[0306.127] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.127] GetSystemMetrics (nIndex=42) returned 0
[0306.127] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53e368, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.127] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53e368) returned 0xa
[0306.127] GetClientRect (in: hWnd=0x43013e, lpRect=0x53e3b0 | out: lpRect=0x53e3b0) returned 1
[0306.127] GetCurrentObject (hdc=0x8b010786, type=0x1) returned 0xb00017
[0306.127] GetCurrentObject (hdc=0x8b010786, type=0x2) returned 0x900010
[0306.127] GetCurrentObject (hdc=0x8b010786, type=0x7) returned 0xb050792
[0306.127] GetCurrentObject (hdc=0x8b010786, type=0x6) returned 0x8a01c2
[0306.128] SaveDC (hdc=0x8b010786) returned 1
[0306.128] GetNearestColor (hdc=0x8b010786, color=0xf0f0f0) returned 0xf0f0f0
[0306.128] CreateSolidBrush (color=0xf0f0f0) returned 0xad10078d
[0306.128] FillRect (hDC=0x8b010786, lprc=0x53e250, hbr=0xad10078d) returned 1
[0306.128] DeleteObject (ho=0xad10078d) returned 1
[0306.128] RestoreDC (hdc=0x8b010786, nSavedDC=-1) returned 1
[0306.128] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0306.128] SetTextColor (hdc=0xf0105ee, color=0x0) returned 0x0
[0306.128] SetBkColor (hdc=0xf0105ee, color=0xffffff) returned 0xffffff
[0306.129] GetWindowPlacement (in: hWnd=0x43013e, lpwndpl=0x53dec4 | out: lpwndpl=0x53dec4) returned 1
[0306.130] GetClientRect (in: hWnd=0x43013e, lpRect=0x53de70 | out: lpRect=0x53de70) returned 1
[0306.130] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.130] GetSystemMetrics (nIndex=42) returned 0
[0306.130] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53dd30, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.130] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53dd30) returned 0xa
[0306.130] GetClientRect (in: hWnd=0x43013e, lpRect=0x53dd78 | out: lpRect=0x53dd78) returned 1
[0306.130] GetCurrentObject (hdc=0x1010794, type=0x1) returned 0xb00017
[0306.130] GetCurrentObject (hdc=0x1010794, type=0x2) returned 0x900010
[0306.130] GetCurrentObject (hdc=0x1010794, type=0x7) returned 0x3c0507aa
[0306.130] GetCurrentObject (hdc=0x1010794, type=0x6) returned 0x8a01c2
[0306.130] SaveDC (hdc=0x1010794) returned 1
[0306.130] GetNearestColor (hdc=0x1010794, color=0xf0f0f0) returned 0xf0f0f0
[0306.130] CreateSolidBrush (color=0xf0f0f0) returned 0xae10078d
[0306.130] FillRect (hDC=0x1010794, lprc=0x53dc18, hbr=0xae10078d) returned 1
[0306.130] DeleteObject (ho=0xae10078d) returned 1
[0306.130] RestoreDC (hdc=0x1010794, nSavedDC=-1) returned 1
[0306.158] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.158] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.158] GetSystemMetrics (nIndex=42) returned 0
[0306.158] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.158] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0306.158] GetClientRect (in: hWnd=0x43013e, lpRect=0x53dd18 | out: lpRect=0x53dd18) returned 1
[0306.158] GetCurrentObject (hdc=0x1010794, type=0x1) returned 0xb00017
[0306.158] GetCurrentObject (hdc=0x1010794, type=0x2) returned 0x900010
[0306.158] GetCurrentObject (hdc=0x1010794, type=0x7) returned 0x3c0507aa
[0306.158] GetCurrentObject (hdc=0x1010794, type=0x6) returned 0x8a01c2
[0306.158] SaveDC (hdc=0x1010794) returned 1
[0306.158] GetNearestColor (hdc=0x1010794, color=0xf0f0f0) returned 0xf0f0f0
[0306.158] CreateSolidBrush (color=0xf0f0f0) returned 0xaf10078d
[0306.158] FillRect (hDC=0x1010794, lprc=0x53dbb8, hbr=0xaf10078d) returned 1
[0306.159] DeleteObject (ho=0xaf10078d) returned 1
[0306.159] RestoreDC (hdc=0x1010794, nSavedDC=-1) returned 1
[0306.159] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.159] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.159] GetSystemMetrics (nIndex=42) returned 0
[0306.159] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53dcd0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.159] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53dcd0) returned 0xa
[0306.160] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0306.160] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0306.160] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0306.160] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x14, wParam=0x8b010786, lParam=0x0) returned 0x1
[0306.160] GetStockObject (i=5) returned 0x900015
[0306.161] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2800ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0306.161] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x2800ea, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1
[0306.161] GetStockObject (i=5) returned 0x900015
[0306.161] GetWindowPlacement (in: hWnd=0x43013e, lpwndpl=0x53e4e0 | out: lpwndpl=0x53e4e0) returned 1
[0306.161] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x47, wParam=0x0, lParam=0x53e7b4) returned 0x0
[0306.161] GetClientRect (in: hWnd=0x43013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0306.161] GetWindowRect (in: hWnd=0x43013e, lpRect=0x53e490 | out: lpRect=0x53e490) returned 1
[0306.162] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0306.162] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0306.163] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0306.163] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x5, wParam=0x0, lParam=0x780161) returned 0x0
[0306.163] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x3, wParam=0x0, lParam=0x17d021f) returned 0x0
[0306.163] GetClientRect (in: hWnd=0x43013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0306.163] GetWindowRect (in: hWnd=0x43013e, lpRect=0x53e4c0 | out: lpRect=0x53e4c0) returned 1
[0306.163] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.163] IsWindowUnicode (hWnd=0x43013e) returned 1
[0306.163] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.163] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.164] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.164] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
[0306.164] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.164] IsWindowUnicode (hWnd=0x43013e) returned 1
[0306.164] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.164] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.164] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.164] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.165] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x84, wParam=0x0, lParam=0x1900357) returned 0x1
[0306.165] IsWindowUnicode (hWnd=0x220122) returned 1
[0306.165] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.165] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.165] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.165] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.165] IsWindowUnicode (hWnd=0x202c6) returned 1
[0306.165] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.165] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.165] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.165] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0306.165] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0306.165] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.166] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x84, wParam=0x0, lParam=0x1900357) returned 0x1
[0306.166] IsWindowUnicode (hWnd=0x220122) returned 1
[0306.166] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.166] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x84, wParam=0x0, lParam=0x1900357) returned 0x1
[0306.166] SetCursor (hCursor=0x10003) returned 0x10003
[0306.166] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.166] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.166] _TrackMouseEvent (in: lpEventTrack=0x24b5ea0 | out: lpEventTrack=0x24b5ea0) returned 1
[0306.166] SendMessageW (hWnd=0x220122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0306.166] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0306.166] InvalidateRect (hWnd=0x220122, lpRect=0x0, bErase=0) returned 1
[0306.166] GetKeyState (nVirtKey=1) returned 1
[0306.166] GetKeyState (nVirtKey=2) returned 0
[0306.166] GetKeyState (nVirtKey=4) returned 0
[0306.166] GetKeyState (nVirtKey=5) returned 0
[0306.166] GetKeyState (nVirtKey=6) returned 0
[0306.166] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.167] IsWindowUnicode (hWnd=0x220122) returned 1
[0306.167] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.167] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.167] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.167] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0306.167] InvalidateRect (hWnd=0x220122, lpRect=0x0, bErase=0) returned 1
[0306.167] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.167] IsWindowUnicode (hWnd=0x43013e) returned 1
[0306.167] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.167] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.168] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.168] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.168] IsWindowUnicode (hWnd=0x43013e) returned 1
[0306.168] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.169] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.169] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.169] BeginPaint (in: hWnd=0x43013e, lpPaint=0x53e310 | out: lpPaint=0x53e310) returned 0x10105d6
[0306.169] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0306.169] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.169] GetSystemMetrics (nIndex=42) returned 0
[0306.169] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53e2a0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.169] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53e2a0) returned 0xa
[0306.169] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0306.169] EndPaint (hWnd=0x43013e, lpPaint=0x53e30c) returned 1
[0306.169] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.169] IsWindowUnicode (hWnd=0x2301e2) returned 1
[0306.169] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.169] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.170] DispatchMessageW (lpMsg=0x53e8a0) returned 0x1
[0306.170] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0306.170] SetTextColor (hdc=0x2010794, color=0x0) returned 0x0
[0306.170] SetBkColor (hdc=0x2010794, color=0xffffff) returned 0xffffff
[0306.171] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.171] IsWindowUnicode (hWnd=0x1f004e) returned 1
[0306.171] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.171] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.171] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.171] BeginPaint (in: hWnd=0x1f004e, lpPaint=0x53e2f4 | out: lpPaint=0x53e2f4) returned 0xf0105ee
[0306.171] SelectPalette (hdc=0xf0105ee, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0306.171] CreateCompatibleDC (hdc=0xf0105ee) returned 0x6c0107ce
[0306.171] SelectObject (hdc=0x6c0107ce, h=0x1e0507b9) returned 0x85000f
[0306.172] GdipCreateFromHDC (hdc=0x6c0107ce, graphics=0x53e30c) returned 0x0
[0306.172] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0306.172] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=250, height=70, combineMode=0x0) returned 0x0
[0306.172] GdipCreateMatrix (matrix=0x53e354) returned 0x0
[0306.172] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0306.172] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e36c) returned 0x0
[0306.172] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0306.172] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0306.172] LocalFree (hMem=0x89eee8) returned 0x0
[0306.172] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0306.172] GdipCreateRegion (region=0x53e354) returned 0x0
[0306.172] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.172] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e360) returned 0x0
[0306.172] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e38c) returned 0x0
[0306.172] GetWindowTextLengthW (hWnd=0x1f004e) returned 16
[0306.172] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0306.172] GetSystemMetrics (nIndex=42) returned 0
[0306.172] GetWindowTextW (in: hWnd=0x1f004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0306.173] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0306.173] GetClientRect (in: hWnd=0x1f004e, lpRect=0x53e354 | out: lpRect=0x53e354) returned 1
[0306.173] GdipCreateRegion (region=0x53e1a8) returned 0x0
[0306.173] GdipGetClip (graphics=0x5d92c30, region=0x5d923d8) returned 0x0
[0306.173] GdipCreateMatrix (matrix=0x53e1a8) returned 0x0
[0306.173] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0306.173] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e1c0) returned 0x0
[0306.173] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0306.173] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0306.173] LocalFree (hMem=0x89ea88) returned 0x0
[0306.173] GdipCombineRegionRegion (region=0x5d923d8, region2=0x5d920e8, combineMode=0x1) returned 0x0
[0306.173] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0306.173] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0306.173] LocalFree (hMem=0x89ea88) returned 0x0
[0306.173] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0306.173] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1e8) returned 0x0
[0306.173] GdipIsInfiniteRegion (region=0x5d923d8, graphics=0x5d92c30, result=0x53e1d8) returned 0x0
[0306.173] GdipGetRegionHRgn (region=0x5d923d8, graphics=0x5d92c30, hRgn=0x53e1d8) returned 0x0
[0306.173] GdipDeleteRegion (region=0x5d923d8) returned 0x0
[0306.173] GdipGetDC (graphics=0x5d92c30, hdc=0x53e1f0) returned 0x0
[0306.174] GetCurrentObject (hdc=0x6c0107ce, type=0x1) returned 0xb00017
[0306.174] GetCurrentObject (hdc=0x6c0107ce, type=0x2) returned 0x900010
[0306.174] GetCurrentObject (hdc=0x6c0107ce, type=0x7) returned 0x1e0507b9
[0306.174] GetCurrentObject (hdc=0x6c0107ce, type=0x6) returned 0x8a01c2
[0306.174] SaveDC (hdc=0x6c0107ce) returned 1
[0306.174] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2004051e
[0306.174] GetClipRgn (hdc=0x6c0107ce, hrgn=0x2004051e) returned 0
[0306.174] SelectClipRgn (hdc=0x6c0107ce, hrgn=0x680407a1) returned 2
[0306.174] DeleteObject (ho=0x2004051e) returned 1
[0306.174] DeleteObject (ho=0x680407a1) returned 1
[0306.174] OffsetViewportOrgEx (in: hdc=0x6c0107ce, x=0, y=0, lppt=0x24b63cc | out: lppt=0x24b63cc) returned 1
[0306.174] GetNearestColor (hdc=0x6c0107ce, color=0xf0f0f0) returned 0xf0f0f0
[0306.174] CreateSolidBrush (color=0xf0f0f0) returned 0xb010078d
[0306.174] FillRect (hDC=0x6c0107ce, lprc=0x53e1f4, hbr=0xb010078d) returned 1
[0306.175] DeleteObject (ho=0xb010078d) returned 1
[0306.175] RestoreDC (hdc=0x6c0107ce, nSavedDC=-1) returned 1
[0306.175] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6c0107ce) returned 0x0
[0306.175] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa3b0dbd) returned 0x0
[0306.175] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.175] GetWindowTextLengthW (hWnd=0x1f004e) returned 16
[0306.175] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10
[0306.175] GetSystemMetrics (nIndex=42) returned 0
[0306.175] GetWindowTextW (in: hWnd=0x1f004e, lpString=0x53e284, nMaxCount=17 | out: lpString="Enter password: ") returned 16
[0306.175] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0xd, wParam=0x11, lParam=0x53e284) returned 0x10
[0306.175] GdipGetDC (graphics=0x5d92c30, hdc=0x53e210) returned 0x0
[0306.175] GetCurrentObject (hdc=0x6c0107ce, type=0x1) returned 0xb00017
[0306.175] GetCurrentObject (hdc=0x6c0107ce, type=0x2) returned 0x900010
[0306.175] GetCurrentObject (hdc=0x6c0107ce, type=0x7) returned 0x1e0507b9
[0306.175] GetCurrentObject (hdc=0x6c0107ce, type=0x6) returned 0x8a01c2
[0306.175] SaveDC (hdc=0x6c0107ce) returned 1
[0306.175] GetNearestColor (hdc=0x6c0107ce, color=0x0) returned 0x0
[0306.175] RestoreDC (hdc=0x6c0107ce, nSavedDC=-1) returned 1
[0306.176] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6c0107ce) returned 0x0
[0306.176] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6f520000
[0306.176] AdjustWindowRectEx (in: lpRect=0x53e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x53e130) returned 1
[0306.176] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0306.176] DrawTextExW (in: hdc=0x600101a2, lpchText="Enter password: ", cchText=16, lprc=0x53e11c, format=0x102400, lpdtp=0x24b66d4 | out: lpchText="Enter password: ", lprc=0x53e11c) returned 13
[0306.177] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e1b0) returned 0x0
[0306.177] GdipGetDC (graphics=0x5d92c30, hdc=0x53e19c) returned 0x0
[0306.177] GetCurrentObject (hdc=0x6c0107ce, type=0x1) returned 0xb00017
[0306.177] GetCurrentObject (hdc=0x6c0107ce, type=0x2) returned 0x900010
[0306.177] GetCurrentObject (hdc=0x6c0107ce, type=0x7) returned 0x1e0507b9
[0306.177] GetCurrentObject (hdc=0x6c0107ce, type=0x6) returned 0x8a01c2
[0306.177] SaveDC (hdc=0x6c0107ce) returned 1
[0306.177] GetTextAlign (hdc=0x6c0107ce) returned 0x0
[0306.177] GetTextColor (hdc=0x6c0107ce) returned 0x0
[0306.177] GetCurrentObject (hdc=0x6c0107ce, type=0x6) returned 0x8a01c2
[0306.177] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dee4 | out: pv=0x53dee4) returned 92
[0306.177] SelectObject (hdc=0x6c0107ce, h=0x730a066d) returned 0x8a01c2
[0306.184] GetBkMode (hdc=0x6c0107ce) returned 2
[0306.184] SetBkMode (hdc=0x6c0107ce, mode=1) returned 2
[0306.184] DrawTextExW (in: hdc=0x6c0107ce, lpchText="Enter password: ", cchText=16, lprc=0x53e130, format=0x100000, lpdtp=0x24b68f8 | out: lpchText="Enter password: ", lprc=0x53e130) returned 13
[0306.184] RestoreDC (hdc=0x6c0107ce, nSavedDC=-1) returned 1
[0306.184] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6c0107ce) returned 0x0
[0306.184] GdipGetDC (graphics=0x5d92c30, hdc=0x53e34c) returned 0x0
[0306.185] BitBlt (hdc=0xf0105ee, x=0, y=0, cx=250, cy=70, hdcSrc=0x6c0107ce, x1=0, y1=0, rop=0xcc0020) returned 1
[0306.185] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6c0107ce) returned 0x0
[0306.185] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0306.185] SelectObject (hdc=0x6c0107ce, h=0x85000f) returned 0x1e0507b9
[0306.185] DeleteDC (hdc=0x6c0107ce) returned 1
[0306.185] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0306.185] EndPaint (hWnd=0x1f004e, lpPaint=0x53e2f0) returned 1
[0306.185] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.185] IsWindowUnicode (hWnd=0x220122) returned 1
[0306.185] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.185] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.185] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.185] BeginPaint (in: hWnd=0x220122, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x60100ce
[0306.185] SelectPalette (hdc=0x60100ce, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0306.186] CreateCompatibleDC (hdc=0x60100ce) returned 0x6e0107ce
[0306.186] SelectObject (hdc=0x6e0107ce, h=0x1e0507b9) returned 0x85000f
[0306.186] GdipCreateFromHDC (hdc=0x6e0107ce, graphics=0x53e300) returned 0x0
[0306.186] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0306.186] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0306.186] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0306.186] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0306.186] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0306.186] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0306.186] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0306.186] LocalFree (hMem=0x89ec80) returned 0x0
[0306.186] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0306.186] GdipCreateRegion (region=0x53e348) returned 0x0
[0306.186] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.186] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0306.186] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0306.186] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa390dbd) returned 0x0
[0306.186] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.187] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0306.187] GetCurrentObject (hdc=0x6e0107ce, type=0x1) returned 0xb00017
[0306.187] GetCurrentObject (hdc=0x6e0107ce, type=0x2) returned 0x900010
[0306.187] GetCurrentObject (hdc=0x6e0107ce, type=0x7) returned 0x1e0507b9
[0306.187] GetCurrentObject (hdc=0x6e0107ce, type=0x6) returned 0x8a01c2
[0306.187] SaveDC (hdc=0x6e0107ce) returned 1
[0306.187] GetNearestColor (hdc=0x6e0107ce, color=0xf0f0f0) returned 0xf0f0f0
[0306.187] GetNearestColor (hdc=0x6e0107ce, color=0xa0a0a0) returned 0xa0a0a0
[0306.187] GetNearestColor (hdc=0x6e0107ce, color=0x696969) returned 0x696969
[0306.187] GetNearestColor (hdc=0x6e0107ce, color=0xa0a0a0) returned 0xa0a0a0
[0306.187] GetNearestColor (hdc=0x6e0107ce, color=0x0) returned 0x0
[0306.187] GetNearestColor (hdc=0x6e0107ce, color=0xffffff) returned 0xffffff
[0306.187] GetNearestColor (hdc=0x6e0107ce, color=0xe5e5e5) returned 0xe5e5e5
[0306.187] GetNearestColor (hdc=0x6e0107ce, color=0xd7d7d7) returned 0xd7d7d7
[0306.187] GetNearestColor (hdc=0x6e0107ce, color=0x0) returned 0x0
[0306.187] RestoreDC (hdc=0x6e0107ce, nSavedDC=-1) returned 1
[0306.187] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6e0107ce) returned 0x0
[0306.188] IsAppThemed () returned 0x1
[0306.188] GetThemeAppProperties () returned 0x3
[0306.188] GetThemeAppProperties () returned 0x3
[0306.188] IsAppThemed () returned 0x1
[0306.188] GetThemeAppProperties () returned 0x3
[0306.188] GetThemeAppProperties () returned 0x3
[0306.188] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e028, format=0x102415, lpdtp=0x24b7064 | out: lpchText="OK", lprc=0x53e028) returned 13
[0306.188] IsAppThemed () returned 0x1
[0306.188] GetThemeAppProperties () returned 0x3
[0306.188] GetThemeAppProperties () returned 0x3
[0306.188] IsAppThemed () returned 0x1
[0306.188] GetThemeAppProperties () returned 0x3
[0306.188] GetThemeAppProperties () returned 0x3
[0306.188] GetFocus () returned 0x2301e2
[0306.188] IsAppThemed () returned 0x1
[0306.188] GetThemeAppProperties () returned 0x3
[0306.188] GetThemeAppProperties () returned 0x3
[0306.188] IsAppThemed () returned 0x1
[0306.188] GetThemeAppProperties () returned 0x3
[0306.189] GetThemeAppProperties () returned 0x3
[0306.189] IsThemePartDefined () returned 0x1
[0306.189] IsAppThemed () returned 0x1
[0306.189] GetThemeAppProperties () returned 0x3
[0306.189] GetThemeAppProperties () returned 0x3
[0306.189] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0306.189] IsAppThemed () returned 0x1
[0306.189] GetThemeAppProperties () returned 0x3
[0306.189] GetThemeAppProperties () returned 0x3
[0306.189] IsAppThemed () returned 0x1
[0306.189] GetThemeAppProperties () returned 0x3
[0306.189] GetThemeAppProperties () returned 0x3
[0306.189] IsThemePartDefined () returned 0x1
[0306.189] GdipCreateRegion (region=0x53e070) returned 0x0
[0306.189] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.189] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0306.189] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0306.189] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0306.189] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0306.189] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0306.189] LocalFree (hMem=0x89ec80) returned 0x0
[0306.189] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0306.189] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0306.189] LocalFree (hMem=0x89ec80) returned 0x0
[0306.189] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0306.189] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0306.190] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0306.190] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0306.190] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.190] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0306.190] GetCurrentObject (hdc=0x6e0107ce, type=0x1) returned 0xb00017
[0306.190] GetCurrentObject (hdc=0x6e0107ce, type=0x2) returned 0x900010
[0306.190] GetCurrentObject (hdc=0x6e0107ce, type=0x7) returned 0x1e0507b9
[0306.190] GetCurrentObject (hdc=0x6e0107ce, type=0x6) returned 0x8a01c2
[0306.190] SaveDC (hdc=0x6e0107ce) returned 1
[0306.190] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x690407a1
[0306.190] GetClipRgn (hdc=0x6e0107ce, hrgn=0x690407a1) returned 0
[0306.190] SelectClipRgn (hdc=0x6e0107ce, hrgn=0x2404051e) returned 2
[0306.190] DeleteObject (ho=0x690407a1) returned 1
[0306.190] DeleteObject (ho=0x2404051e) returned 1
[0306.190] OffsetViewportOrgEx (in: hdc=0x6e0107ce, x=0, y=0, lppt=0x24b7714 | out: lppt=0x24b7714) returned 1
[0306.190] DrawThemeParentBackground () returned 0x0
[0306.190] GetWindowPlacement (in: hWnd=0x43013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0306.191] GetClientRect (in: hWnd=0x43013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0306.191] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.191] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.191] GetSystemMetrics (nIndex=42) returned 0
[0306.191] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.191] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0306.191] GetClientRect (in: hWnd=0x43013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0306.191] GetCurrentObject (hdc=0x6e0107ce, type=0x1) returned 0xb00017
[0306.191] GetCurrentObject (hdc=0x6e0107ce, type=0x2) returned 0x900010
[0306.191] GetCurrentObject (hdc=0x6e0107ce, type=0x7) returned 0x1e0507b9
[0306.191] GetCurrentObject (hdc=0x6e0107ce, type=0x6) returned 0x8a01c2
[0306.191] SaveDC (hdc=0x6e0107ce) returned 2
[0306.191] GetNearestColor (hdc=0x6e0107ce, color=0xf0f0f0) returned 0xf0f0f0
[0306.191] CreateSolidBrush (color=0xf0f0f0) returned 0xb110078d
[0306.191] FillRect (hDC=0x6e0107ce, lprc=0x53dad0, hbr=0xb110078d) returned 1
[0306.191] DeleteObject (ho=0xb110078d) returned 1
[0306.191] RestoreDC (hdc=0x6e0107ce, nSavedDC=-1) returned 1
[0306.191] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.191] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.191] GetSystemMetrics (nIndex=42) returned 0
[0306.191] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0306.192] GetClientRect (in: hWnd=0x43013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0306.192] GetCurrentObject (hdc=0x6e0107ce, type=0x1) returned 0xb00017
[0306.192] GetCurrentObject (hdc=0x6e0107ce, type=0x2) returned 0x900010
[0306.192] GetCurrentObject (hdc=0x6e0107ce, type=0x7) returned 0x1e0507b9
[0306.192] GetCurrentObject (hdc=0x6e0107ce, type=0x6) returned 0x8a01c2
[0306.192] SaveDC (hdc=0x6e0107ce) returned 2
[0306.192] GetNearestColor (hdc=0x6e0107ce, color=0xf0f0f0) returned 0xf0f0f0
[0306.192] CreateSolidBrush (color=0xf0f0f0) returned 0xb210078d
[0306.192] FillRect (hDC=0x6e0107ce, lprc=0x53da70, hbr=0xb210078d) returned 1
[0306.192] DeleteObject (ho=0xb210078d) returned 1
[0306.192] RestoreDC (hdc=0x6e0107ce, nSavedDC=-1) returned 1
[0306.192] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.192] GetSystemMetrics (nIndex=42) returned 0
[0306.192] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.192] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0306.193] RestoreDC (hdc=0x6e0107ce, nSavedDC=-1) returned 1
[0306.193] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6e0107ce) returned 0x0
[0306.193] IsAppThemed () returned 0x1
[0306.193] GetThemeAppProperties () returned 0x3
[0306.193] GetThemeAppProperties () returned 0x3
[0306.193] IsAppThemed () returned 0x1
[0306.193] GetThemeAppProperties () returned 0x3
[0306.193] GetThemeAppProperties () returned 0x3
[0306.193] IsThemePartDefined () returned 0x1
[0306.193] GdipCreateRegion (region=0x53dff4) returned 0x0
[0306.224] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.225] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0306.225] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0306.225] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0306.225] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0306.225] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0306.225] LocalFree (hMem=0x89ec80) returned 0x0
[0306.225] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0306.225] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0306.225] LocalFree (hMem=0x89ea88) returned 0x0
[0306.225] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0306.225] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0306.225] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0306.225] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0306.225] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.226] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0306.226] GetCurrentObject (hdc=0x6e0107ce, type=0x1) returned 0xb00017
[0306.226] GetCurrentObject (hdc=0x6e0107ce, type=0x2) returned 0x900010
[0306.226] GetCurrentObject (hdc=0x6e0107ce, type=0x7) returned 0x1e0507b9
[0306.226] GetCurrentObject (hdc=0x6e0107ce, type=0x6) returned 0x8a01c2
[0306.226] SaveDC (hdc=0x6e0107ce) returned 1
[0306.226] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2504051e
[0306.226] GetClipRgn (hdc=0x6e0107ce, hrgn=0x2504051e) returned 0
[0306.226] SelectClipRgn (hdc=0x6e0107ce, hrgn=0x6b0407a1) returned 2
[0306.226] DeleteObject (ho=0x2504051e) returned 1
[0306.226] DeleteObject (ho=0x6b0407a1) returned 1
[0306.226] OffsetViewportOrgEx (in: hdc=0x6e0107ce, x=0, y=0, lppt=0x24b7f9c | out: lppt=0x24b7f9c) returned 1
[0306.226] IsAppThemed () returned 0x1
[0306.226] GetThemeAppProperties () returned 0x3
[0306.226] GetThemeAppProperties () returned 0x3
[0306.227] DrawThemeBackground () returned 0x0
[0306.227] RestoreDC (hdc=0x6e0107ce, nSavedDC=-1) returned 1
[0306.227] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6e0107ce) returned 0x0
[0306.227] GdipCreateRegion (region=0x53dff8) returned 0x0
[0306.227] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.227] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0306.227] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0306.227] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0306.227] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0306.227] LocalFree (hMem=0x89ee40) returned 0x0
[0306.227] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0306.227] LocalFree (hMem=0x89ea88) returned 0x0
[0306.227] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0306.227] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0306.227] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0306.228] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0306.228] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.228] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0306.228] GetCurrentObject (hdc=0x6e0107ce, type=0x1) returned 0xb00017
[0306.228] GetCurrentObject (hdc=0x6e0107ce, type=0x2) returned 0x900010
[0306.228] GetCurrentObject (hdc=0x6e0107ce, type=0x7) returned 0x1e0507b9
[0306.228] GetCurrentObject (hdc=0x6e0107ce, type=0x6) returned 0x8a01c2
[0306.228] SaveDC (hdc=0x6e0107ce) returned 1
[0306.228] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c0407a1
[0306.228] GetClipRgn (hdc=0x6e0107ce, hrgn=0x6c0407a1) returned 0
[0306.228] SelectClipRgn (hdc=0x6e0107ce, hrgn=0x2604051e) returned 2
[0306.228] DeleteObject (ho=0x6c0407a1) returned 1
[0306.228] DeleteObject (ho=0x2604051e) returned 1
[0306.228] OffsetViewportOrgEx (in: hdc=0x6e0107ce, x=0, y=0, lppt=0x24b8270 | out: lppt=0x24b8270) returned 1
[0306.228] IsAppThemed () returned 0x1
[0306.229] GetThemeAppProperties () returned 0x3
[0306.229] GetThemeAppProperties () returned 0x3
[0306.229] GetThemeBackgroundContentRect () returned 0x0
[0306.229] RestoreDC (hdc=0x6e0107ce, nSavedDC=-1) returned 1
[0306.229] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6e0107ce) returned 0x0
[0306.229] IsAppThemed () returned 0x1
[0306.229] GetThemeAppProperties () returned 0x3
[0306.229] GetThemeAppProperties () returned 0x3
[0306.229] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0306.229] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0306.229] GetCurrentObject (hdc=0x6e0107ce, type=0x1) returned 0xb00017
[0306.229] GetCurrentObject (hdc=0x6e0107ce, type=0x2) returned 0x900010
[0306.229] GetCurrentObject (hdc=0x6e0107ce, type=0x7) returned 0x1e0507b9
[0306.229] GetCurrentObject (hdc=0x6e0107ce, type=0x6) returned 0x8a01c2
[0306.229] SaveDC (hdc=0x6e0107ce) returned 1
[0306.230] GetTextAlign (hdc=0x6e0107ce) returned 0x0
[0306.230] GetTextColor (hdc=0x6e0107ce) returned 0x0
[0306.230] GetCurrentObject (hdc=0x6e0107ce, type=0x6) returned 0x8a01c2
[0306.230] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0306.230] SelectObject (hdc=0x6e0107ce, h=0x730a066d) returned 0x8a01c2
[0306.230] GetBkMode (hdc=0x6e0107ce) returned 2
[0306.230] SetBkMode (hdc=0x6e0107ce, mode=1) returned 2
[0306.230] DrawTextExW (in: hdc=0x6e0107ce, lpchText="OK", cchText=2, lprc=0x53df90, format=0x102415, lpdtp=0x24b8610 | out: lpchText="OK", lprc=0x53df90) returned 13
[0306.230] DrawTextExW (in: hdc=0x6e0107ce, lpchText="OK", cchText=2, lprc=0x53e0f4, format=0x102015, lpdtp=0x24b8610 | out: lpchText="OK", lprc=0x53e0f4) returned 13
[0306.231] RestoreDC (hdc=0x6e0107ce, nSavedDC=-1) returned 1
[0306.231] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6e0107ce) returned 0x0
[0306.231] GetFocus () returned 0x2301e2
[0306.231] IsAppThemed () returned 0x1
[0306.231] GetThemeAppProperties () returned 0x3
[0306.231] GetThemeAppProperties () returned 0x3
[0306.231] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0306.231] BitBlt (hdc=0x60100ce, x=0, y=0, cx=60, cy=22, hdcSrc=0x6e0107ce, x1=0, y1=0, rop=0xcc0020) returned 1
[0306.231] GdipReleaseDC (graphics=0x5d92c30, hdc=0x6e0107ce) returned 0x0
[0306.231] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0306.231] SelectObject (hdc=0x6e0107ce, h=0x85000f) returned 0x1e0507b9
[0306.232] DeleteDC (hdc=0x6e0107ce) returned 1
[0306.232] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0306.232] EndPaint (hWnd=0x220122, lpPaint=0x53e2e4) returned 1
[0306.232] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.232] IsWindowUnicode (hWnd=0x102dc) returned 1
[0306.232] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.232] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.232] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.233] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.233] IsWindowUnicode (hWnd=0x2800ea) returned 1
[0306.233] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.233] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.233] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.234] BeginPaint (in: hWnd=0x2800ea, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x10105d6
[0306.234] SelectPalette (hdc=0x10105d6, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0306.234] CreateCompatibleDC (hdc=0x10105d6) returned 0x700107ce
[0306.234] SelectObject (hdc=0x700107ce, h=0x1e0507b9) returned 0x85000f
[0306.234] GdipCreateFromHDC (hdc=0x700107ce, graphics=0x53e300) returned 0x0
[0306.234] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0306.234] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0306.234] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0306.234] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0306.234] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0306.234] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0306.235] LocalFree (hMem=0x89eee8) returned 0x0
[0306.235] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0306.235] GdipCreateRegion (region=0x53e348) returned 0x0
[0306.235] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.235] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0306.235] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0306.235] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa370dbd) returned 0x0
[0306.235] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.235] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0306.235] GetCurrentObject (hdc=0x700107ce, type=0x1) returned 0xb00017
[0306.235] GetCurrentObject (hdc=0x700107ce, type=0x2) returned 0x900010
[0306.235] GetCurrentObject (hdc=0x700107ce, type=0x7) returned 0x1e0507b9
[0306.235] GetCurrentObject (hdc=0x700107ce, type=0x6) returned 0x8a01c2
[0306.235] SaveDC (hdc=0x700107ce) returned 1
[0306.235] GetNearestColor (hdc=0x700107ce, color=0xf0f0f0) returned 0xf0f0f0
[0306.235] GetNearestColor (hdc=0x700107ce, color=0xa0a0a0) returned 0xa0a0a0
[0306.235] GetNearestColor (hdc=0x700107ce, color=0x696969) returned 0x696969
[0306.236] GetNearestColor (hdc=0x700107ce, color=0xa0a0a0) returned 0xa0a0a0
[0306.236] GetNearestColor (hdc=0x700107ce, color=0x0) returned 0x0
[0306.236] GetNearestColor (hdc=0x700107ce, color=0xffffff) returned 0xffffff
[0306.236] GetNearestColor (hdc=0x700107ce, color=0xe5e5e5) returned 0xe5e5e5
[0306.236] GetNearestColor (hdc=0x700107ce, color=0xd7d7d7) returned 0xd7d7d7
[0306.236] GetNearestColor (hdc=0x700107ce, color=0x0) returned 0x0
[0306.236] RestoreDC (hdc=0x700107ce, nSavedDC=-1) returned 1
[0306.236] GdipReleaseDC (graphics=0x5d92c30, hdc=0x700107ce) returned 0x0
[0306.236] IsAppThemed () returned 0x1
[0306.236] GetThemeAppProperties () returned 0x3
[0306.236] GetThemeAppProperties () returned 0x3
[0306.236] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x53e1d8, fWinIni=0x0 | out: pvParam=0x53e1d8) returned 1
[0306.237] SendMessageW (hWnd=0x43013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0306.237] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0306.237] IsAppThemed () returned 0x1
[0306.237] GetThemeAppProperties () returned 0x3
[0306.237] GetThemeAppProperties () returned 0x3
[0306.237] DrawTextExW (in: hdc=0x600101a2, lpchText="Cancel", cchText=6, lprc=0x53e028, format=0x102415, lpdtp=0x24b8e20 | out: lpchText="Cancel", lprc=0x53e028) returned 13
[0306.237] IsAppThemed () returned 0x1
[0306.237] GetThemeAppProperties () returned 0x3
[0306.237] GetThemeAppProperties () returned 0x3
[0306.237] IsAppThemed () returned 0x1
[0306.237] GetThemeAppProperties () returned 0x3
[0306.237] GetThemeAppProperties () returned 0x3
[0306.237] GetFocus () returned 0x2301e2
[0306.238] IsAppThemed () returned 0x1
[0306.238] GetThemeAppProperties () returned 0x3
[0306.238] GetThemeAppProperties () returned 0x3
[0306.238] IsAppThemed () returned 0x1
[0306.238] GetThemeAppProperties () returned 0x3
[0306.238] GetThemeAppProperties () returned 0x3
[0306.238] IsThemePartDefined () returned 0x1
[0306.238] IsAppThemed () returned 0x1
[0306.238] GetThemeAppProperties () returned 0x3
[0306.238] GetThemeAppProperties () returned 0x3
[0306.238] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0306.238] IsAppThemed () returned 0x1
[0306.238] GetThemeAppProperties () returned 0x3
[0306.238] GetThemeAppProperties () returned 0x3
[0306.238] IsAppThemed () returned 0x1
[0306.238] GetThemeAppProperties () returned 0x3
[0306.238] GetThemeAppProperties () returned 0x3
[0306.238] IsThemePartDefined () returned 0x1
[0306.238] GdipCreateRegion (region=0x53e070) returned 0x0
[0306.238] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.238] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0306.239] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0306.239] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0306.239] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0306.239] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0306.239] LocalFree (hMem=0x89ec80) returned 0x0
[0306.239] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0306.239] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0306.239] LocalFree (hMem=0x89ea88) returned 0x0
[0306.239] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0306.239] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0306.239] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0306.239] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0306.239] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.239] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0306.240] GetCurrentObject (hdc=0x700107ce, type=0x1) returned 0xb00017
[0306.240] GetCurrentObject (hdc=0x700107ce, type=0x2) returned 0x900010
[0306.240] GetCurrentObject (hdc=0x700107ce, type=0x7) returned 0x1e0507b9
[0306.240] GetCurrentObject (hdc=0x700107ce, type=0x6) returned 0x8a01c2
[0306.244] SaveDC (hdc=0x700107ce) returned 1
[0306.244] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2704051e
[0306.244] GetClipRgn (hdc=0x700107ce, hrgn=0x2704051e) returned 0
[0306.244] SelectClipRgn (hdc=0x700107ce, hrgn=0x700407a1) returned 2
[0306.244] DeleteObject (ho=0x2704051e) returned 1
[0306.244] DeleteObject (ho=0x700407a1) returned 1
[0306.244] OffsetViewportOrgEx (in: hdc=0x700107ce, x=0, y=0, lppt=0x24b94d0 | out: lppt=0x24b94d0) returned 1
[0306.244] DrawThemeParentBackground () returned 0x0
[0306.244] GetWindowPlacement (in: hWnd=0x43013e, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0306.245] GetClientRect (in: hWnd=0x43013e, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0306.245] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.245] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.245] GetSystemMetrics (nIndex=42) returned 0
[0306.245] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53dbe8, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.245] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53dbe8) returned 0xa
[0306.245] GetClientRect (in: hWnd=0x43013e, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0306.245] GetCurrentObject (hdc=0x700107ce, type=0x1) returned 0xb00017
[0306.245] GetCurrentObject (hdc=0x700107ce, type=0x2) returned 0x900010
[0306.245] GetCurrentObject (hdc=0x700107ce, type=0x7) returned 0x1e0507b9
[0306.245] GetCurrentObject (hdc=0x700107ce, type=0x6) returned 0x8a01c2
[0306.245] SaveDC (hdc=0x700107ce) returned 2
[0306.245] GetNearestColor (hdc=0x700107ce, color=0xf0f0f0) returned 0xf0f0f0
[0306.245] CreateSolidBrush (color=0xf0f0f0) returned 0xb310078d
[0306.245] FillRect (hDC=0x700107ce, lprc=0x53dad0, hbr=0xb310078d) returned 1
[0306.245] DeleteObject (ho=0xb310078d) returned 1
[0306.246] RestoreDC (hdc=0x700107ce, nSavedDC=-1) returned 1
[0306.246] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.246] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.246] GetSystemMetrics (nIndex=42) returned 0
[0306.246] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.246] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0306.246] GetClientRect (in: hWnd=0x43013e, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0306.246] GetCurrentObject (hdc=0x700107ce, type=0x1) returned 0xb00017
[0306.246] GetCurrentObject (hdc=0x700107ce, type=0x2) returned 0x900010
[0306.246] GetCurrentObject (hdc=0x700107ce, type=0x7) returned 0x1e0507b9
[0306.246] GetCurrentObject (hdc=0x700107ce, type=0x6) returned 0x8a01c2
[0306.246] SaveDC (hdc=0x700107ce) returned 2
[0306.246] GetNearestColor (hdc=0x700107ce, color=0xf0f0f0) returned 0xf0f0f0
[0306.246] CreateSolidBrush (color=0xf0f0f0) returned 0xb410078d
[0306.246] FillRect (hDC=0x700107ce, lprc=0x53da70, hbr=0xb410078d) returned 1
[0306.247] DeleteObject (ho=0xb410078d) returned 1
[0306.247] RestoreDC (hdc=0x700107ce, nSavedDC=-1) returned 1
[0306.247] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0306.247] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0306.247] GetSystemMetrics (nIndex=42) returned 0
[0306.247] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53db88, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0306.247] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53db88) returned 0xa
[0306.247] RestoreDC (hdc=0x700107ce, nSavedDC=-1) returned 1
[0306.247] GdipReleaseDC (graphics=0x5d92c30, hdc=0x700107ce) returned 0x0
[0306.247] IsAppThemed () returned 0x1
[0306.247] GetThemeAppProperties () returned 0x3
[0306.247] GetThemeAppProperties () returned 0x3
[0306.247] IsAppThemed () returned 0x1
[0306.248] GetThemeAppProperties () returned 0x3
[0306.248] GetThemeAppProperties () returned 0x3
[0306.248] IsThemePartDefined () returned 0x1
[0306.248] GdipCreateRegion (region=0x53dff4) returned 0x0
[0306.248] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.248] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0306.248] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0306.248] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0306.248] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0306.248] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0306.248] LocalFree (hMem=0x89ec80) returned 0x0
[0306.248] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0306.248] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee40) returned 0x0
[0306.248] LocalFree (hMem=0x89ee40) returned 0x0
[0306.248] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0306.248] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0306.248] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0306.248] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0306.249] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.249] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0306.249] GetCurrentObject (hdc=0x700107ce, type=0x1) returned 0xb00017
[0306.249] GetCurrentObject (hdc=0x700107ce, type=0x2) returned 0x900010
[0306.249] GetCurrentObject (hdc=0x700107ce, type=0x7) returned 0x1e0507b9
[0306.249] GetCurrentObject (hdc=0x700107ce, type=0x6) returned 0x8a01c2
[0306.249] SaveDC (hdc=0x700107ce) returned 1
[0306.249] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x710407a1
[0306.249] GetClipRgn (hdc=0x700107ce, hrgn=0x710407a1) returned 0
[0306.249] SelectClipRgn (hdc=0x700107ce, hrgn=0x2904051e) returned 2
[0306.249] DeleteObject (ho=0x710407a1) returned 1
[0306.249] DeleteObject (ho=0x2904051e) returned 1
[0306.249] OffsetViewportOrgEx (in: hdc=0x700107ce, x=0, y=0, lppt=0x24b9d58 | out: lppt=0x24b9d58) returned 1
[0306.249] IsAppThemed () returned 0x1
[0306.250] GetThemeAppProperties () returned 0x3
[0306.250] GetThemeAppProperties () returned 0x3
[0306.250] DrawThemeBackground () returned 0x0
[0306.250] RestoreDC (hdc=0x700107ce, nSavedDC=-1) returned 1
[0306.250] GdipReleaseDC (graphics=0x5d92c30, hdc=0x700107ce) returned 0x0
[0306.250] GdipCreateRegion (region=0x53dff8) returned 0x0
[0306.250] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.250] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0306.250] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0306.250] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0306.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0306.250] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0306.250] LocalFree (hMem=0x89ee40) returned 0x0
[0306.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0306.250] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0306.250] LocalFree (hMem=0x89ee40) returned 0x0
[0306.250] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0306.251] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0306.251] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0306.251] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0306.251] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.251] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0306.251] GetCurrentObject (hdc=0x700107ce, type=0x1) returned 0xb00017
[0306.251] GetCurrentObject (hdc=0x700107ce, type=0x2) returned 0x900010
[0306.251] GetCurrentObject (hdc=0x700107ce, type=0x7) returned 0x1e0507b9
[0306.251] GetCurrentObject (hdc=0x700107ce, type=0x6) returned 0x8a01c2
[0306.251] SaveDC (hdc=0x700107ce) returned 1
[0306.251] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2a04051e
[0306.251] GetClipRgn (hdc=0x700107ce, hrgn=0x2a04051e) returned 0
[0306.251] SelectClipRgn (hdc=0x700107ce, hrgn=0x720407a1) returned 2
[0306.251] DeleteObject (ho=0x2a04051e) returned 1
[0306.251] DeleteObject (ho=0x720407a1) returned 1
[0306.252] OffsetViewportOrgEx (in: hdc=0x700107ce, x=0, y=0, lppt=0x24ba02c | out: lppt=0x24ba02c) returned 1
[0306.252] IsAppThemed () returned 0x1
[0306.252] GetThemeAppProperties () returned 0x3
[0306.252] GetThemeAppProperties () returned 0x3
[0306.252] GetThemeBackgroundContentRect () returned 0x0
[0306.252] RestoreDC (hdc=0x700107ce, nSavedDC=-1) returned 1
[0306.252] GdipReleaseDC (graphics=0x5d92c30, hdc=0x700107ce) returned 0x0
[0306.252] IsAppThemed () returned 0x1
[0306.252] GetThemeAppProperties () returned 0x3
[0306.252] GetThemeAppProperties () returned 0x3
[0306.252] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0306.252] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0306.252] GetCurrentObject (hdc=0x700107ce, type=0x1) returned 0xb00017
[0306.252] GetCurrentObject (hdc=0x700107ce, type=0x2) returned 0x900010
[0306.252] GetCurrentObject (hdc=0x700107ce, type=0x7) returned 0x1e0507b9
[0306.252] GetCurrentObject (hdc=0x700107ce, type=0x6) returned 0x8a01c2
[0306.252] SaveDC (hdc=0x700107ce) returned 1
[0306.253] GetTextAlign (hdc=0x700107ce) returned 0x0
[0306.253] GetTextColor (hdc=0x700107ce) returned 0x0
[0306.253] GetCurrentObject (hdc=0x700107ce, type=0x6) returned 0x8a01c2
[0306.253] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0306.253] SelectObject (hdc=0x700107ce, h=0x730a066d) returned 0x8a01c2
[0306.253] GetBkMode (hdc=0x700107ce) returned 2
[0306.253] SetBkMode (hdc=0x700107ce, mode=1) returned 2
[0306.253] DrawTextExW (in: hdc=0x700107ce, lpchText="Cancel", cchText=6, lprc=0x53df90, format=0x102415, lpdtp=0x24ba3cc | out: lpchText="Cancel", lprc=0x53df90) returned 13
[0306.253] DrawTextExW (in: hdc=0x700107ce, lpchText="Cancel", cchText=6, lprc=0x53e0f4, format=0x102015, lpdtp=0x24ba3cc | out: lpchText="Cancel", lprc=0x53e0f4) returned 13
[0306.254] RestoreDC (hdc=0x700107ce, nSavedDC=-1) returned 1
[0306.254] GdipReleaseDC (graphics=0x5d92c30, hdc=0x700107ce) returned 0x0
[0306.254] GetFocus () returned 0x2301e2
[0306.254] IsAppThemed () returned 0x1
[0306.254] GetThemeAppProperties () returned 0x3
[0306.254] GetThemeAppProperties () returned 0x3
[0306.254] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0306.254] BitBlt (hdc=0x10105d6, x=0, y=0, cx=60, cy=22, hdcSrc=0x700107ce, x1=0, y1=0, rop=0xcc0020) returned 1
[0306.254] GdipReleaseDC (graphics=0x5d92c30, hdc=0x700107ce) returned 0x0
[0306.254] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0306.254] SelectObject (hdc=0x700107ce, h=0x85000f) returned 0x1e0507b9
[0306.254] DeleteDC (hdc=0x700107ce) returned 1
[0306.255] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0306.255] EndPaint (hWnd=0x2800ea, lpPaint=0x53e2e4) returned 1
[0306.255] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.255] IsWindowUnicode (hWnd=0x202c6) returned 1
[0306.255] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.255] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.255] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.255] BeginPaint (in: hWnd=0x202c6, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0306.255] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0306.260] CreateCompatibleDC (hdc=0x8b010786) returned 0x720107ce
[0306.260] SelectObject (hdc=0x720107ce, h=0x1e0507b9) returned 0x85000f
[0306.260] GdipCreateFromHDC (hdc=0x720107ce, graphics=0x53e300) returned 0x0
[0306.260] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0306.260] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=153, height=38, combineMode=0x0) returned 0x0
[0306.260] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0306.260] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0306.260] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0306.260] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0306.260] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0306.260] LocalFree (hMem=0x89eee8) returned 0x0
[0306.261] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0306.261] GdipCreateRegion (region=0x53e348) returned 0x0
[0306.261] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.261] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0306.261] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0306.261] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa350dbd) returned 0x0
[0306.261] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.261] GdipGetDC (graphics=0x5d92c30, hdc=0x53e16c) returned 0x0
[0306.261] GetCurrentObject (hdc=0x720107ce, type=0x1) returned 0xb00017
[0306.261] GetCurrentObject (hdc=0x720107ce, type=0x2) returned 0x900010
[0306.261] GetCurrentObject (hdc=0x720107ce, type=0x7) returned 0x1e0507b9
[0306.261] GetCurrentObject (hdc=0x720107ce, type=0x6) returned 0x8a01c2
[0306.261] SaveDC (hdc=0x720107ce) returned 1
[0306.261] GetNearestColor (hdc=0x720107ce, color=0xff) returned 0xff
[0306.261] GetNearestColor (hdc=0x720107ce, color=0x55) returned 0x55
[0306.262] GetNearestColor (hdc=0x720107ce, color=0x0) returned 0x0
[0306.262] GetNearestColor (hdc=0x720107ce, color=0x55) returned 0x55
[0306.262] GetNearestColor (hdc=0x720107ce, color=0x0) returned 0x0
[0306.262] GetNearestColor (hdc=0x720107ce, color=0x8080ff) returned 0x8080ff
[0306.262] GetNearestColor (hdc=0x720107ce, color=0x7373e5) returned 0x7373e5
[0306.262] GetNearestColor (hdc=0x720107ce, color=0xe5) returned 0xe5
[0306.262] GetNearestColor (hdc=0x720107ce, color=0x0) returned 0x0
[0306.262] RestoreDC (hdc=0x720107ce, nSavedDC=-1) returned 1
[0306.262] GdipReleaseDC (graphics=0x5d92c30, hdc=0x720107ce) returned 0x0
[0306.262] IsAppThemed () returned 0x1
[0306.262] GetThemeAppProperties () returned 0x3
[0306.262] GetThemeAppProperties () returned 0x3
[0306.262] IsAppThemed () returned 0x1
[0306.263] GetThemeAppProperties () returned 0x3
[0306.263] GetThemeAppProperties () returned 0x3
[0306.263] SelectObject (hdc=0x600101a2, h=0x450a0799) returned 0x730a066d
[0306.263] DrawTextExW (in: hdc=0x600101a2, lpchText="Decrypt", cchText=7, lprc=0x53e028, format=0x102415, lpdtp=0x24babb0 | out: lpchText="Decrypt", lprc=0x53e028) returned 13
[0306.263] IsAppThemed () returned 0x1
[0306.263] GetThemeAppProperties () returned 0x3
[0306.263] GetThemeAppProperties () returned 0x3
[0306.263] IsAppThemed () returned 0x1
[0306.263] GetThemeAppProperties () returned 0x3
[0306.263] GetThemeAppProperties () returned 0x3
[0306.263] GetFocus () returned 0x2301e2
[0306.263] IsAppThemed () returned 0x1
[0306.263] GetThemeAppProperties () returned 0x3
[0306.264] GetThemeAppProperties () returned 0x3
[0306.264] IsAppThemed () returned 0x1
[0306.264] GetThemeAppProperties () returned 0x3
[0306.264] GetThemeAppProperties () returned 0x3
[0306.264] IsThemePartDefined () returned 0x1
[0306.264] IsAppThemed () returned 0x1
[0306.264] GetThemeAppProperties () returned 0x3
[0306.264] GetThemeAppProperties () returned 0x3
[0306.264] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0306.264] IsAppThemed () returned 0x1
[0306.264] GetThemeAppProperties () returned 0x3
[0306.264] GetThemeAppProperties () returned 0x3
[0306.264] IsAppThemed () returned 0x1
[0306.264] GetThemeAppProperties () returned 0x3
[0306.264] GetThemeAppProperties () returned 0x3
[0306.264] IsThemePartDefined () returned 0x1
[0306.264] GdipCreateRegion (region=0x53e070) returned 0x0
[0306.264] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.264] GdipCreateMatrix (matrix=0x53e070) returned 0x0
[0306.264] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0306.264] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e088) returned 0x0
[0306.265] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee40
[0306.265] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee40) returned 0x0
[0306.265] LocalFree (hMem=0x89ee40) returned 0x0
[0306.265] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0306.265] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0306.265] LocalFree (hMem=0x89ea88) returned 0x0
[0306.265] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0306.265] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0b0) returned 0x0
[0306.265] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a0) returned 0x0
[0306.265] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e0a0) returned 0x0
[0306.265] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.265] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0b8) returned 0x0
[0306.265] GetCurrentObject (hdc=0x720107ce, type=0x1) returned 0xb00017
[0306.265] GetCurrentObject (hdc=0x720107ce, type=0x2) returned 0x900010
[0306.265] GetCurrentObject (hdc=0x720107ce, type=0x7) returned 0x1e0507b9
[0306.265] GetCurrentObject (hdc=0x720107ce, type=0x6) returned 0x8a01c2
[0306.266] SaveDC (hdc=0x720107ce) returned 1
[0306.266] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x730407a1
[0306.266] GetClipRgn (hdc=0x720107ce, hrgn=0x730407a1) returned 0
[0306.266] SelectClipRgn (hdc=0x720107ce, hrgn=0x2e04051e) returned 2
[0306.266] DeleteObject (ho=0x730407a1) returned 1
[0306.266] DeleteObject (ho=0x2e04051e) returned 1
[0306.266] OffsetViewportOrgEx (in: hdc=0x720107ce, x=0, y=0, lppt=0x24bb260 | out: lppt=0x24bb260) returned 1
[0306.266] DrawThemeParentBackground () returned 0x0
[0306.266] GetWindowPlacement (in: hWnd=0x70036, lpwndpl=0x53dd7c | out: lpwndpl=0x53dd7c) returned 1
[0306.266] GetClientRect (in: hWnd=0x70036, lpRect=0x53dd28 | out: lpRect=0x53dd28) returned 1
[0306.266] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0306.266] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0306.267] GetSystemMetrics (nIndex=42) returned 0
[0306.267] GetWindowTextW (in: hWnd=0x70036, lpString=0x53dbe4, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0306.267] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53dbe4) returned 0xc
[0306.267] GetClientRect (in: hWnd=0x70036, lpRect=0x53dc30 | out: lpRect=0x53dc30) returned 1
[0306.267] GetCurrentObject (hdc=0x720107ce, type=0x1) returned 0xb00017
[0306.267] GetCurrentObject (hdc=0x720107ce, type=0x2) returned 0x900010
[0306.267] GetCurrentObject (hdc=0x720107ce, type=0x7) returned 0x1e0507b9
[0306.267] GetCurrentObject (hdc=0x720107ce, type=0x6) returned 0x8a01c2
[0306.267] SaveDC (hdc=0x720107ce) returned 2
[0306.267] GetNearestColor (hdc=0x720107ce, color=0xff) returned 0xff
[0306.267] CreateSolidBrush (color=0xff) returned 0xb510078d
[0306.267] FillRect (hDC=0x720107ce, lprc=0x53dad0, hbr=0xb510078d) returned 1
[0306.267] DeleteObject (ho=0xb510078d) returned 1
[0306.267] RestoreDC (hdc=0x720107ce, nSavedDC=-1) returned 1
[0306.268] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0306.268] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0306.268] GetSystemMetrics (nIndex=42) returned 0
[0306.268] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0306.268] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0306.268] GetClientRect (in: hWnd=0x70036, lpRect=0x53dbd0 | out: lpRect=0x53dbd0) returned 1
[0306.268] GetCurrentObject (hdc=0x720107ce, type=0x1) returned 0xb00017
[0306.268] GetCurrentObject (hdc=0x720107ce, type=0x2) returned 0x900010
[0306.268] GetCurrentObject (hdc=0x720107ce, type=0x7) returned 0x1e0507b9
[0306.268] GetCurrentObject (hdc=0x720107ce, type=0x6) returned 0x8a01c2
[0306.268] SaveDC (hdc=0x720107ce) returned 2
[0306.268] GetNearestColor (hdc=0x720107ce, color=0xff) returned 0xff
[0306.268] CreateSolidBrush (color=0xff) returned 0xb610078d
[0306.268] FillRect (hDC=0x720107ce, lprc=0x53da70, hbr=0xb610078d) returned 1
[0306.268] DeleteObject (ho=0xb610078d) returned 1
[0306.269] RestoreDC (hdc=0x720107ce, nSavedDC=-1) returned 1
[0306.269] GetWindowTextLengthW (hWnd=0x70036) returned 12
[0306.269] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc
[0306.269] GetSystemMetrics (nIndex=42) returned 0
[0306.269] GetWindowTextW (in: hWnd=0x70036, lpString=0x53db84, nMaxCount=13 | out: lpString="Cobra_Locker") returned 12
[0306.269] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xd, wParam=0xd, lParam=0x53db84) returned 0xc
[0306.269] RestoreDC (hdc=0x720107ce, nSavedDC=-1) returned 1
[0306.269] GdipReleaseDC (graphics=0x5d92c30, hdc=0x720107ce) returned 0x0
[0306.269] IsAppThemed () returned 0x1
[0306.269] GetThemeAppProperties () returned 0x3
[0306.269] GetThemeAppProperties () returned 0x3
[0306.269] IsAppThemed () returned 0x1
[0306.269] GetThemeAppProperties () returned 0x3
[0306.269] GetThemeAppProperties () returned 0x3
[0306.269] IsThemePartDefined () returned 0x1
[0306.269] GdipCreateRegion (region=0x53dff4) returned 0x0
[0306.269] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.269] GdipCreateMatrix (matrix=0x53dff4) returned 0x0
[0306.269] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0306.269] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e00c) returned 0x0
[0306.269] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eee8
[0306.270] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89eee8) returned 0x0
[0306.270] LocalFree (hMem=0x89eee8) returned 0x0
[0306.270] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0306.270] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ec80) returned 0x0
[0306.270] LocalFree (hMem=0x89ec80) returned 0x0
[0306.270] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0306.270] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e034) returned 0x0
[0306.270] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e024) returned 0x0
[0306.270] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e024) returned 0x0
[0306.270] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.270] GdipGetDC (graphics=0x5d92c30, hdc=0x53e03c) returned 0x0
[0306.270] GetCurrentObject (hdc=0x720107ce, type=0x1) returned 0xb00017
[0306.270] GetCurrentObject (hdc=0x720107ce, type=0x2) returned 0x900010
[0306.270] GetCurrentObject (hdc=0x720107ce, type=0x7) returned 0x1e0507b9
[0306.270] GetCurrentObject (hdc=0x720107ce, type=0x6) returned 0x8a01c2
[0306.270] SaveDC (hdc=0x720107ce) returned 1
[0306.270] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f04051e
[0306.270] GetClipRgn (hdc=0x720107ce, hrgn=0x2f04051e) returned 0
[0306.270] SelectClipRgn (hdc=0x720107ce, hrgn=0x750407a1) returned 2
[0306.270] DeleteObject (ho=0x2f04051e) returned 1
[0306.270] DeleteObject (ho=0x750407a1) returned 1
[0306.271] OffsetViewportOrgEx (in: hdc=0x720107ce, x=0, y=0, lppt=0x24bbac4 | out: lppt=0x24bbac4) returned 1
[0306.271] IsAppThemed () returned 0x1
[0306.271] GetThemeAppProperties () returned 0x3
[0306.271] GetThemeAppProperties () returned 0x3
[0306.271] DrawThemeBackground () returned 0x0
[0306.271] RestoreDC (hdc=0x720107ce, nSavedDC=-1) returned 1
[0306.271] GdipReleaseDC (graphics=0x5d92c30, hdc=0x720107ce) returned 0x0
[0306.271] GdipCreateRegion (region=0x53dff8) returned 0x0
[0306.271] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0306.271] GdipCreateMatrix (matrix=0x53dff8) returned 0x0
[0306.271] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0306.271] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e010) returned 0x0
[0306.271] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0306.271] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0306.271] LocalFree (hMem=0x89ec80) returned 0x0
[0306.271] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89eee8) returned 0x0
[0306.271] LocalFree (hMem=0x89eee8) returned 0x0
[0306.271] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0306.271] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e038) returned 0x0
[0306.271] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0306.271] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e028) returned 0x0
[0306.272] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0306.272] GdipGetDC (graphics=0x5d92c30, hdc=0x53e040) returned 0x0
[0306.272] GetCurrentObject (hdc=0x720107ce, type=0x1) returned 0xb00017
[0306.272] GetCurrentObject (hdc=0x720107ce, type=0x2) returned 0x900010
[0306.272] GetCurrentObject (hdc=0x720107ce, type=0x7) returned 0x1e0507b9
[0306.272] GetCurrentObject (hdc=0x720107ce, type=0x6) returned 0x8a01c2
[0306.272] SaveDC (hdc=0x720107ce) returned 1
[0306.272] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x760407a1
[0306.272] GetClipRgn (hdc=0x720107ce, hrgn=0x760407a1) returned 0
[0306.272] SelectClipRgn (hdc=0x720107ce, hrgn=0x3004051e) returned 2
[0306.272] DeleteObject (ho=0x760407a1) returned 1
[0306.272] DeleteObject (ho=0x3004051e) returned 1
[0306.272] OffsetViewportOrgEx (in: hdc=0x720107ce, x=0, y=0, lppt=0x24bbd98 | out: lppt=0x24bbd98) returned 1
[0306.272] IsAppThemed () returned 0x1
[0306.272] GetThemeAppProperties () returned 0x3
[0306.272] GetThemeAppProperties () returned 0x3
[0306.272] GetThemeBackgroundContentRect () returned 0x0
[0306.272] RestoreDC (hdc=0x720107ce, nSavedDC=-1) returned 1
[0306.272] GdipReleaseDC (graphics=0x5d92c30, hdc=0x720107ce) returned 0x0
[0306.272] IsAppThemed () returned 0x1
[0306.272] GetThemeAppProperties () returned 0x3
[0306.272] GetThemeAppProperties () returned 0x3
[0306.272] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e174) returned 0x0
[0306.272] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0306.273] GetCurrentObject (hdc=0x720107ce, type=0x1) returned 0xb00017
[0306.273] GetCurrentObject (hdc=0x720107ce, type=0x2) returned 0x900010
[0306.273] GetCurrentObject (hdc=0x720107ce, type=0x7) returned 0x1e0507b9
[0306.273] GetCurrentObject (hdc=0x720107ce, type=0x6) returned 0x8a01c2
[0306.273] SaveDC (hdc=0x720107ce) returned 1
[0306.273] GetTextAlign (hdc=0x720107ce) returned 0x0
[0306.273] GetTextColor (hdc=0x720107ce) returned 0x0
[0306.273] GetCurrentObject (hdc=0x720107ce, type=0x6) returned 0x8a01c2
[0306.273] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53dea8 | out: pv=0x53dea8) returned 92
[0306.273] SelectObject (hdc=0x720107ce, h=0x450a0799) returned 0x8a01c2
[0306.273] GetBkMode (hdc=0x720107ce) returned 2
[0306.273] SetBkMode (hdc=0x720107ce, mode=1) returned 2
[0306.273] DrawTextExW (in: hdc=0x720107ce, lpchText="Decrypt", cchText=7, lprc=0x53df90, format=0x102415, lpdtp=0x24bc138 | out: lpchText="Decrypt", lprc=0x53df90) returned 13
[0306.273] DrawTextExW (in: hdc=0x720107ce, lpchText="Decrypt", cchText=7, lprc=0x53e0f4, format=0x102015, lpdtp=0x24bc138 | out: lpchText="Decrypt", lprc=0x53e0f4) returned 13
[0306.274] RestoreDC (hdc=0x720107ce, nSavedDC=-1) returned 1
[0306.274] GdipReleaseDC (graphics=0x5d92c30, hdc=0x720107ce) returned 0x0
[0306.274] GetFocus () returned 0x2301e2
[0306.274] IsAppThemed () returned 0x1
[0306.274] GetThemeAppProperties () returned 0x3
[0306.274] GetThemeAppProperties () returned 0x3
[0306.274] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0306.274] BitBlt (hdc=0x8b010786, x=0, y=0, cx=153, cy=40, hdcSrc=0x720107ce, x1=0, y1=0, rop=0xcc0020) returned 1
[0306.274] GdipReleaseDC (graphics=0x5d92c30, hdc=0x720107ce) returned 0x0
[0306.274] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0306.274] SelectObject (hdc=0x720107ce, h=0x85000f) returned 0x1e0507b9
[0306.274] DeleteDC (hdc=0x720107ce) returned 1
[0306.274] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0306.274] EndPaint (hWnd=0x202c6, lpPaint=0x53e2e4) returned 1
[0306.274] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.275] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.275] WaitMessage () returned 1
[0306.280] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.280] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x0
[0306.280] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.280] WaitMessage () returned 1
[0306.281] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.281] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x2, lParam=0x60) returned 0x0
[0306.281] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.281] WaitMessage () returned 1
[0306.281] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.282] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x0, lParam=0x60) returned 0x0
[0306.282] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.282] WaitMessage () returned 1
[0306.316] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.316] IsWindowUnicode (hWnd=0x102dc) returned 1
[0306.317] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.317] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.317] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.317] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.317] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.318] WaitMessage () returned 1
[0306.323] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.323] IsWindowUnicode (hWnd=0x102dc) returned 1
[0306.323] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.323] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.323] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.324] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.324] IsWindowUnicode (hWnd=0x102dc) returned 1
[0306.324] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.325] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.325] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.325] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.325] IsWindowUnicode (hWnd=0x102dc) returned 1
[0306.325] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.325] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.325] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.325] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.325] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.325] WaitMessage () returned 1
[0306.326] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.326] IsWindowUnicode (hWnd=0x102dc) returned 1
[0306.326] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.326] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.326] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.327] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.327] IsWindowUnicode (hWnd=0x102dc) returned 1
[0306.327] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.327] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.327] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.327] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.327] IsWindowUnicode (hWnd=0x102dc) returned 1
[0306.327] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.328] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.328] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.328] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.328] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.328] WaitMessage () returned 1
[0306.328] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.328] IsWindowUnicode (hWnd=0x102dc) returned 1
[0306.328] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.328] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.328] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.330] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.330] IsWindowUnicode (hWnd=0x102dc) returned 1
[0306.330] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.330] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.330] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.330] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.331] IsWindowUnicode (hWnd=0x102dc) returned 1
[0306.331] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.331] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.331] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.331] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.331] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.331] WaitMessage () returned 1
[0306.381] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.381] IsWindowUnicode (hWnd=0x202d0) returned 1
[0306.381] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.381] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.381] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.382] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.382] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.382] WaitMessage () returned 1
[0306.694] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.694] IsWindowUnicode (hWnd=0x2301e2) returned 1
[0306.694] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0306.694] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0306.694] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0306.695] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.695] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0306.695] WaitMessage () returned 1
[0307.153] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0307.153] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0307.153] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0307.153] DispatchMessageA (lpMsg=0x53e8a0) returned 0x7e72
[0307.153] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0307.153] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0307.153] WaitMessage () returned 1
[0307.240] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0307.240] IsWindowUnicode (hWnd=0x2301e2) returned 1
[0307.240] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0307.240] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0307.241] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0307.241] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0307.241] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0307.241] WaitMessage () returned 1
[0307.772] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0307.772] IsWindowUnicode (hWnd=0x2301e2) returned 1
[0307.772] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0307.772] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0307.772] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0307.773] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0307.773] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0307.773] WaitMessage () returned 1
[0308.147] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.147] GetMessageA (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.147] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0308.147] DispatchMessageA (lpMsg=0x53e8a0) returned 0x1
[0308.148] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0308.148] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0308.148] WaitMessage () returned 1
[0308.303] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.303] IsWindowUnicode (hWnd=0x2301e2) returned 1
[0308.303] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.303] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0308.303] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0308.304] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0308.304] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0308.304] WaitMessage () returned 1
[0308.725] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.725] MapWindowPoints (in: hWndFrom=0x1f004e, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0308.726] IsWindowUnicode (hWnd=0x1f004e) returned 1
[0308.726] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.726] MapWindowPoints (in: hWndFrom=0x1f004e, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0308.726] SetCursor (hCursor=0x10003) returned 0x10003
[0308.726] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0308.726] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0308.727] _TrackMouseEvent (in: lpEventTrack=0x24bc450 | out: lpEventTrack=0x24bc450) returned 1
[0308.727] SendMessageW (hWnd=0x1f004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0308.727] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0308.727] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x200, wParam=0x0, lParam=0x170017) returned 0x0
[0308.727] GetKeyState (nVirtKey=1) returned 1
[0308.727] GetKeyState (nVirtKey=2) returned 0
[0308.727] GetKeyState (nVirtKey=4) returned 0
[0308.727] GetKeyState (nVirtKey=5) returned 0
[0308.727] GetKeyState (nVirtKey=6) returned 0
[0308.727] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0308.727] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0308.727] WaitMessage () returned 1
[0308.804] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.804] MapWindowPoints (in: hWndFrom=0x1f004e, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0308.804] IsWindowUnicode (hWnd=0x1f004e) returned 1
[0308.804] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.804] MapWindowPoints (in: hWndFrom=0x1f004e, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0308.805] GetDlgItem (hDlg=0x43013e, nIDDlgItem=0) returned 0x0
[0308.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x210, wParam=0x201, lParam=0x210021) returned 0x0
[0308.805] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x21, wParam=0x43013e, lParam=0x2010001) returned 0x1
[0308.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x21, wParam=0x43013e, lParam=0x2010001) returned 0x1
[0308.805] SetCursor (hCursor=0x10003) returned 0x10003
[0308.806] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0308.806] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0308.806] GetKeyState (nVirtKey=1) returned -128
[0308.806] GetKeyState (nVirtKey=2) returned 0
[0308.806] GetKeyState (nVirtKey=4) returned 0
[0308.806] GetKeyState (nVirtKey=5) returned 0
[0308.806] GetKeyState (nVirtKey=6) returned 0
[0308.806] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x201, wParam=0x1, lParam=0x170017) returned 0x0
[0308.806] GetKeyState (nVirtKey=1) returned -128
[0308.806] GetKeyState (nVirtKey=2) returned 0
[0308.806] GetKeyState (nVirtKey=4) returned 0
[0308.806] GetKeyState (nVirtKey=5) returned 0
[0308.806] GetKeyState (nVirtKey=6) returned 0
[0308.806] GetCapture () returned 0x0
[0308.806] SetCapture (hWnd=0x1f004e) returned 0x0
[0308.806] GetKeyState (nVirtKey=1) returned -128
[0308.806] GetKeyState (nVirtKey=2) returned 0
[0308.806] GetKeyState (nVirtKey=4) returned 0
[0308.806] GetKeyState (nVirtKey=5) returned 0
[0308.806] GetKeyState (nVirtKey=6) returned 0
[0308.806] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.807] IsWindowUnicode (hWnd=0x1f004e) returned 1
[0308.807] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.807] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0308.807] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0308.807] MapWindowPoints (in: hWndFrom=0x1f004e, hWndTo=0x0, lpPoints=0x24bc4c4, cPoints=0x1 | out: lpPoints=0x24bc4c4) returned 25625129
[0308.807] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x202, wParam=0x0, lParam=0x170017) returned 0x0
[0308.807] WindowFromPoint (Point=0x240) returned 0x1f004e
[0308.807] MapWindowPoints (in: hWndFrom=0x1f004e, hWndTo=0x0, lpPoints=0x53e1c8, cPoints=0x2 | out: lpPoints=0x53e1c8) returned 25625129
[0308.807] GetCapture () returned 0x1f004e
[0308.807] ReleaseCapture () returned 1
[0308.808] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0308.808] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.808] MapWindowPoints (in: hWndFrom=0x1f004e, hWndTo=0x0, lpPoints=0x53e4a0, cPoints=0x2 | out: lpPoints=0x53e4a0) returned 25625129
[0308.808] IsWindowUnicode (hWnd=0x1f004e) returned 1
[0308.808] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.808] MapWindowPoints (in: hWndFrom=0x1f004e, hWndTo=0x0, lpPoints=0x53e4f8, cPoints=0x2 | out: lpPoints=0x53e4f8) returned 25625129
[0308.808] SetCursor (hCursor=0x10003) returned 0x10003
[0308.808] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0308.808] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0308.808] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x200, wParam=0x0, lParam=0x170017) returned 0x0
[0308.808] GetKeyState (nVirtKey=1) returned 0
[0308.809] GetKeyState (nVirtKey=2) returned 0
[0308.809] GetKeyState (nVirtKey=4) returned 0
[0308.809] GetKeyState (nVirtKey=5) returned 0
[0308.809] GetKeyState (nVirtKey=6) returned 0
[0308.809] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0308.809] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0308.809] WaitMessage () returned 1
[0308.835] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.835] IsWindowUnicode (hWnd=0x2301e2) returned 1
[0308.835] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.835] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0308.835] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0308.835] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0308.835] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0308.835] WaitMessage () returned 1
[0308.912] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.912] IsWindowUnicode (hWnd=0x1f004e) returned 1
[0308.912] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.912] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0308.912] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0308.912] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.913] IsWindowUnicode (hWnd=0x1f004e) returned 1
[0308.913] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0308.913] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0308.913] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0308.913] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x2a1, wParam=0x0, lParam=0x170017) returned 0x0
[0308.913] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0308.913] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0308.913] WaitMessage () returned 1
[0309.365] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0309.365] IsWindowUnicode (hWnd=0x2301e2) returned 1
[0309.365] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0309.365] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0309.365] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0309.366] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0309.366] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0309.366] WaitMessage () returned 1
[0309.897] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0309.897] IsWindowUnicode (hWnd=0x2301e2) returned 1
[0309.897] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0309.897] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0309.897] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0309.897] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0309.897] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0309.897] WaitMessage () returned 1
[0310.428] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0310.428] IsWindowUnicode (hWnd=0x2301e2) returned 1
[0310.428] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0310.428] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0310.428] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0310.429] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0310.429] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0310.429] WaitMessage () returned 1
[0310.971] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0310.971] IsWindowUnicode (hWnd=0x2301e2) returned 1
[0310.971] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0310.971] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0310.972] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0310.972] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0310.972] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0310.972] WaitMessage () returned 1
[0311.212] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.212] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x84, wParam=0x0, lParam=0x18f036c) returned 0x1
[0311.213] IsWindowUnicode (hWnd=0x220122) returned 1
[0311.213] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.213] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0311.213] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0311.213] CallWindowProcW (lpPrevWndFunc=0x6f59abc0, hWnd=0x1f004e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0
[0311.213] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.213] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x84, wParam=0x0, lParam=0x18f036c) returned 0x1
[0311.213] IsWindowUnicode (hWnd=0x220122) returned 1
[0311.213] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.213] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x84, wParam=0x0, lParam=0x18f036c) returned 0x1
[0311.213] SetCursor (hCursor=0x10003) returned 0x10003
[0311.213] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0311.213] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0311.213] _TrackMouseEvent (in: lpEventTrack=0x24b5ea0 | out: lpEventTrack=0x24b5ea0) returned 1
[0311.214] SendMessageW (hWnd=0x220122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0311.214] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0xc19a, wParam=0x0, lParam=0x0) returned 0x0
[0311.214] InvalidateRect (hWnd=0x220122, lpRect=0x0, bErase=0) returned 1
[0311.214] GetKeyState (nVirtKey=1) returned 0
[0311.214] GetKeyState (nVirtKey=2) returned 0
[0311.214] GetKeyState (nVirtKey=4) returned 0
[0311.214] GetKeyState (nVirtKey=5) returned 0
[0311.214] GetKeyState (nVirtKey=6) returned 0
[0311.214] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.214] IsWindowUnicode (hWnd=0x220122) returned 1
[0311.214] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.214] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0311.214] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0311.214] BeginPaint (in: hWnd=0x220122, lpPaint=0x53e2e8 | out: lpPaint=0x53e2e8) returned 0x8b010786
[0311.215] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0311.215] CreateCompatibleDC (hdc=0x8b010786) returned 0x37010790
[0311.215] SelectObject (hdc=0x37010790, h=0x1e0507b9) returned 0x85000f
[0311.215] GdipCreateFromHDC (hdc=0x37010790, graphics=0x53e300) returned 0x0
[0311.216] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0311.216] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0311.216] GdipCreateMatrix (matrix=0x53e348) returned 0x0
[0311.216] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0311.216] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e360) returned 0x0
[0311.216] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0311.216] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0311.216] LocalFree (hMem=0x89ea88) returned 0x0
[0311.216] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0311.216] GdipCreateRegion (region=0x53e348) returned 0x0
[0311.216] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0311.216] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e354) returned 0x0
[0311.216] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e380) returned 0x0
[0311.216] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa330dbd) returned 0x0
[0311.217] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0311.217] GdipGetDC (graphics=0x5d92c30, hdc=0x53e160) returned 0x0
[0311.217] GetCurrentObject (hdc=0x37010790, type=0x1) returned 0xb00017
[0311.217] GetCurrentObject (hdc=0x37010790, type=0x2) returned 0x900010
[0311.217] GetCurrentObject (hdc=0x37010790, type=0x7) returned 0x1e0507b9
[0311.217] GetCurrentObject (hdc=0x37010790, type=0x6) returned 0x8a01c2
[0311.217] SaveDC (hdc=0x37010790) returned 1
[0311.217] GetNearestColor (hdc=0x37010790, color=0xf0f0f0) returned 0xf0f0f0
[0311.217] GetNearestColor (hdc=0x37010790, color=0xa0a0a0) returned 0xa0a0a0
[0311.217] GetNearestColor (hdc=0x37010790, color=0x696969) returned 0x696969
[0311.217] GetNearestColor (hdc=0x37010790, color=0xa0a0a0) returned 0xa0a0a0
[0311.217] GetNearestColor (hdc=0x37010790, color=0x0) returned 0x0
[0311.217] GetNearestColor (hdc=0x37010790, color=0xffffff) returned 0xffffff
[0311.218] GetNearestColor (hdc=0x37010790, color=0xe5e5e5) returned 0xe5e5e5
[0311.218] GetNearestColor (hdc=0x37010790, color=0xd7d7d7) returned 0xd7d7d7
[0311.218] GetNearestColor (hdc=0x37010790, color=0x0) returned 0x0
[0311.218] RestoreDC (hdc=0x37010790, nSavedDC=-1) returned 1
[0311.218] GdipReleaseDC (graphics=0x5d92c30, hdc=0x37010790) returned 0x0
[0311.218] IsAppThemed () returned 0x1
[0311.218] GetThemeAppProperties () returned 0x3
[0311.218] GetThemeAppProperties () returned 0x3
[0311.218] IsAppThemed () returned 0x1
[0311.218] GetThemeAppProperties () returned 0x3
[0311.219] GetThemeAppProperties () returned 0x3
[0311.219] SelectObject (hdc=0x600101a2, h=0x730a066d) returned 0x450a0799
[0311.219] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53e01c, format=0x102415, lpdtp=0x24bcda4 | out: lpchText="OK", lprc=0x53e01c) returned 13
[0311.219] IsAppThemed () returned 0x1
[0311.219] GetThemeAppProperties () returned 0x3
[0311.219] GetThemeAppProperties () returned 0x3
[0311.219] IsAppThemed () returned 0x1
[0311.220] GetThemeAppProperties () returned 0x3
[0311.220] GetThemeAppProperties () returned 0x3
[0311.220] IsAppThemed () returned 0x1
[0311.220] GetThemeAppProperties () returned 0x3
[0311.220] GetThemeAppProperties () returned 0x3
[0311.220] IsAppThemed () returned 0x1
[0311.220] GetThemeAppProperties () returned 0x3
[0311.220] GetThemeAppProperties () returned 0x3
[0311.220] IsThemePartDefined () returned 0x1
[0311.220] IsAppThemed () returned 0x1
[0311.220] GetThemeAppProperties () returned 0x3
[0311.220] GetThemeAppProperties () returned 0x3
[0311.220] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0311.220] IsAppThemed () returned 0x1
[0311.220] GetThemeAppProperties () returned 0x3
[0311.220] GetThemeAppProperties () returned 0x3
[0311.220] IsAppThemed () returned 0x1
[0311.220] GetThemeAppProperties () returned 0x3
[0311.220] GetThemeAppProperties () returned 0x3
[0311.220] IsThemePartDefined () returned 0x1
[0311.220] GdipCreateRegion (region=0x53e064) returned 0x0
[0311.220] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0311.220] GdipCreateMatrix (matrix=0x53e064) returned 0x0
[0311.220] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0311.221] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e07c) returned 0x0
[0311.221] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0311.221] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0311.221] LocalFree (hMem=0x89ee08) returned 0x0
[0311.221] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec80
[0311.221] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0311.221] LocalFree (hMem=0x89ec80) returned 0x0
[0311.221] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0311.221] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e0a4) returned 0x0
[0311.221] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e094) returned 0x0
[0311.221] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e094) returned 0x0
[0311.221] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0311.221] GdipGetDC (graphics=0x5d92c30, hdc=0x53e0ac) returned 0x0
[0311.221] GetCurrentObject (hdc=0x37010790, type=0x1) returned 0xb00017
[0311.221] GetCurrentObject (hdc=0x37010790, type=0x2) returned 0x900010
[0311.221] GetCurrentObject (hdc=0x37010790, type=0x7) returned 0x1e0507b9
[0311.221] GetCurrentObject (hdc=0x37010790, type=0x6) returned 0x8a01c2
[0311.221] SaveDC (hdc=0x37010790) returned 1
[0311.221] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3104051e
[0311.221] GetClipRgn (hdc=0x37010790, hrgn=0x3104051e) returned 0
[0311.222] SelectClipRgn (hdc=0x37010790, hrgn=0x7a0407a1) returned 2
[0311.222] DeleteObject (ho=0x3104051e) returned 1
[0311.222] DeleteObject (ho=0x7a0407a1) returned 1
[0311.222] OffsetViewportOrgEx (in: hdc=0x37010790, x=0, y=0, lppt=0x24bd454 | out: lppt=0x24bd454) returned 1
[0311.222] DrawThemeParentBackground () returned 0x0
[0311.222] GetWindowPlacement (in: hWnd=0x43013e, lpwndpl=0x53dd74 | out: lpwndpl=0x53dd74) returned 1
[0311.222] GetClientRect (in: hWnd=0x43013e, lpRect=0x53dd20 | out: lpRect=0x53dd20) returned 1
[0311.222] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0311.222] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0311.222] GetSystemMetrics (nIndex=42) returned 0
[0311.222] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53dbe0, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0311.222] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53dbe0) returned 0xa
[0311.222] GetClientRect (in: hWnd=0x43013e, lpRect=0x53dc28 | out: lpRect=0x53dc28) returned 1
[0311.223] GetCurrentObject (hdc=0x37010790, type=0x1) returned 0xb00017
[0311.223] GetCurrentObject (hdc=0x37010790, type=0x2) returned 0x900010
[0311.223] GetCurrentObject (hdc=0x37010790, type=0x7) returned 0x1e0507b9
[0311.223] GetCurrentObject (hdc=0x37010790, type=0x6) returned 0x8a01c2
[0311.223] SaveDC (hdc=0x37010790) returned 2
[0311.223] GetNearestColor (hdc=0x37010790, color=0xf0f0f0) returned 0xf0f0f0
[0311.223] CreateSolidBrush (color=0xf0f0f0) returned 0xb710078d
[0311.223] FillRect (hDC=0x37010790, lprc=0x53dac8, hbr=0xb710078d) returned 1
[0311.223] DeleteObject (ho=0xb710078d) returned 1
[0311.223] RestoreDC (hdc=0x37010790, nSavedDC=-1) returned 1
[0311.223] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0311.223] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0311.223] GetSystemMetrics (nIndex=42) returned 0
[0311.223] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0311.223] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0311.223] GetClientRect (in: hWnd=0x43013e, lpRect=0x53dbc8 | out: lpRect=0x53dbc8) returned 1
[0311.223] GetCurrentObject (hdc=0x37010790, type=0x1) returned 0xb00017
[0311.223] GetCurrentObject (hdc=0x37010790, type=0x2) returned 0x900010
[0311.224] GetCurrentObject (hdc=0x37010790, type=0x7) returned 0x1e0507b9
[0311.224] GetCurrentObject (hdc=0x37010790, type=0x6) returned 0x8a01c2
[0311.224] SaveDC (hdc=0x37010790) returned 2
[0311.224] GetNearestColor (hdc=0x37010790, color=0xf0f0f0) returned 0xf0f0f0
[0311.224] CreateSolidBrush (color=0xf0f0f0) returned 0xb810078d
[0311.224] FillRect (hDC=0x37010790, lprc=0x53da68, hbr=0xb810078d) returned 1
[0311.224] DeleteObject (ho=0xb810078d) returned 1
[0311.224] RestoreDC (hdc=0x37010790, nSavedDC=-1) returned 1
[0311.224] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0311.224] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0311.224] GetSystemMetrics (nIndex=42) returned 0
[0311.224] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53db80, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0311.224] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53db80) returned 0xa
[0311.225] RestoreDC (hdc=0x37010790, nSavedDC=-1) returned 1
[0311.225] GdipReleaseDC (graphics=0x5d92c30, hdc=0x37010790) returned 0x0
[0311.225] IsAppThemed () returned 0x1
[0311.225] GetThemeAppProperties () returned 0x3
[0311.225] GetThemeAppProperties () returned 0x3
[0311.225] IsAppThemed () returned 0x1
[0311.225] GetThemeAppProperties () returned 0x3
[0311.225] GetThemeAppProperties () returned 0x3
[0311.225] IsThemePartDefined () returned 0x1
[0311.225] GdipCreateRegion (region=0x53dfe8) returned 0x0
[0311.225] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0311.225] GdipCreateMatrix (matrix=0x53dfe8) returned 0x0
[0311.225] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0311.225] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53e000) returned 0x0
[0311.225] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0311.225] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0311.226] LocalFree (hMem=0x89ee08) returned 0x0
[0311.226] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0311.226] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0311.226] LocalFree (hMem=0x89ee08) returned 0x0
[0311.226] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0311.226] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e028) returned 0x0
[0311.226] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e018) returned 0x0
[0311.226] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e018) returned 0x0
[0311.226] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0311.226] GdipGetDC (graphics=0x5d92c30, hdc=0x53e030) returned 0x0
[0311.226] GetCurrentObject (hdc=0x37010790, type=0x1) returned 0xb00017
[0311.226] GetCurrentObject (hdc=0x37010790, type=0x2) returned 0x900010
[0311.226] GetCurrentObject (hdc=0x37010790, type=0x7) returned 0x1e0507b9
[0311.226] GetCurrentObject (hdc=0x37010790, type=0x6) returned 0x8a01c2
[0311.226] SaveDC (hdc=0x37010790) returned 1
[0311.226] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b0407a1
[0311.226] GetClipRgn (hdc=0x37010790, hrgn=0x7b0407a1) returned 0
[0311.226] SelectClipRgn (hdc=0x37010790, hrgn=0x3304051e) returned 2
[0311.226] DeleteObject (ho=0x7b0407a1) returned 1
[0311.226] DeleteObject (ho=0x3304051e) returned 1
[0311.227] OffsetViewportOrgEx (in: hdc=0x37010790, x=0, y=0, lppt=0x24bdcdc | out: lppt=0x24bdcdc) returned 1
[0311.227] IsAppThemed () returned 0x1
[0311.227] GetThemeAppProperties () returned 0x3
[0311.227] GetThemeAppProperties () returned 0x3
[0311.227] DrawThemeBackground () returned 0x0
[0311.227] RestoreDC (hdc=0x37010790, nSavedDC=-1) returned 1
[0311.227] GdipReleaseDC (graphics=0x5d92c30, hdc=0x37010790) returned 0x0
[0311.227] GdipCreateRegion (region=0x53dfec) returned 0x0
[0311.227] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0311.227] GdipCreateMatrix (matrix=0x53dfec) returned 0x0
[0311.227] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0311.227] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53e004) returned 0x0
[0311.227] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0311.227] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0311.227] LocalFree (hMem=0x89ea88) returned 0x0
[0311.227] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0311.227] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0311.228] LocalFree (hMem=0x89ea88) returned 0x0
[0311.228] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0311.228] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e02c) returned 0x0
[0311.228] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53e01c) returned 0x0
[0311.228] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53e01c) returned 0x0
[0311.228] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0311.228] GdipGetDC (graphics=0x5d92c30, hdc=0x53e034) returned 0x0
[0311.228] GetCurrentObject (hdc=0x37010790, type=0x1) returned 0xb00017
[0311.228] GetCurrentObject (hdc=0x37010790, type=0x2) returned 0x900010
[0311.228] GetCurrentObject (hdc=0x37010790, type=0x7) returned 0x1e0507b9
[0311.228] GetCurrentObject (hdc=0x37010790, type=0x6) returned 0x8a01c2
[0311.228] SaveDC (hdc=0x37010790) returned 1
[0311.228] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3404051e
[0311.228] GetClipRgn (hdc=0x37010790, hrgn=0x3404051e) returned 0
[0311.228] SelectClipRgn (hdc=0x37010790, hrgn=0x7c0407a1) returned 2
[0311.228] DeleteObject (ho=0x3404051e) returned 1
[0311.228] DeleteObject (ho=0x7c0407a1) returned 1
[0311.228] OffsetViewportOrgEx (in: hdc=0x37010790, x=0, y=0, lppt=0x24bdfb0 | out: lppt=0x24bdfb0) returned 1
[0311.228] IsAppThemed () returned 0x1
[0311.228] GetThemeAppProperties () returned 0x3
[0311.229] GetThemeAppProperties () returned 0x3
[0311.229] GetThemeBackgroundContentRect () returned 0x0
[0311.229] RestoreDC (hdc=0x37010790, nSavedDC=-1) returned 1
[0311.229] GdipReleaseDC (graphics=0x5d92c30, hdc=0x37010790) returned 0x0
[0311.229] IsAppThemed () returned 0x1
[0311.229] GetThemeAppProperties () returned 0x3
[0311.229] GetThemeAppProperties () returned 0x3
[0311.229] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53e168) returned 0x0
[0311.229] GdipGetDC (graphics=0x5d92c30, hdc=0x53e154) returned 0x0
[0311.229] GetCurrentObject (hdc=0x37010790, type=0x1) returned 0xb00017
[0311.229] GetCurrentObject (hdc=0x37010790, type=0x2) returned 0x900010
[0311.229] GetCurrentObject (hdc=0x37010790, type=0x7) returned 0x1e0507b9
[0311.229] GetCurrentObject (hdc=0x37010790, type=0x6) returned 0x8a01c2
[0311.229] SaveDC (hdc=0x37010790) returned 1
[0311.229] GetTextAlign (hdc=0x37010790) returned 0x0
[0311.229] GetTextColor (hdc=0x37010790) returned 0x0
[0311.229] GetCurrentObject (hdc=0x37010790, type=0x6) returned 0x8a01c2
[0311.229] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53de9c | out: pv=0x53de9c) returned 92
[0311.230] SelectObject (hdc=0x37010790, h=0x730a066d) returned 0x8a01c2
[0311.230] GetBkMode (hdc=0x37010790) returned 2
[0311.230] SetBkMode (hdc=0x37010790, mode=1) returned 2
[0311.230] DrawTextExW (in: hdc=0x37010790, lpchText="OK", cchText=2, lprc=0x53df84, format=0x102415, lpdtp=0x24be350 | out: lpchText="OK", lprc=0x53df84) returned 13
[0311.230] DrawTextExW (in: hdc=0x37010790, lpchText="OK", cchText=2, lprc=0x53e0e8, format=0x102015, lpdtp=0x24be350 | out: lpchText="OK", lprc=0x53e0e8) returned 13
[0311.231] RestoreDC (hdc=0x37010790, nSavedDC=-1) returned 1
[0311.231] GdipReleaseDC (graphics=0x5d92c30, hdc=0x37010790) returned 0x0
[0311.231] GetFocus () returned 0x2301e2
[0311.231] IsAppThemed () returned 0x1
[0311.231] GetThemeAppProperties () returned 0x3
[0311.231] GetThemeAppProperties () returned 0x3
[0311.231] GdipGetDC (graphics=0x5d92c30, hdc=0x53e340) returned 0x0
[0311.231] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x37010790, x1=0, y1=0, rop=0xcc0020) returned 1
[0311.232] GdipReleaseDC (graphics=0x5d92c30, hdc=0x37010790) returned 0x0
[0311.232] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0311.232] SelectObject (hdc=0x37010790, h=0x85000f) returned 0x1e0507b9
[0311.232] DeleteDC (hdc=0x37010790) returned 1
[0311.232] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0311.232] EndPaint (hWnd=0x220122, lpPaint=0x53e2e4) returned 1
[0311.232] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0311.232] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0311.232] WaitMessage () returned 1
[0311.318] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.318] IsWindowUnicode (hWnd=0x220122) returned 1
[0311.318] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.318] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0311.318] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0311.319] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.319] IsWindowUnicode (hWnd=0x220122) returned 1
[0311.319] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.319] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0311.319] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0311.319] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x2a1, wParam=0x0, lParam=0x6002b) returned 0x0
[0311.319] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0311.319] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 0
[0311.319] WaitMessage () returned 1
[0311.452] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.452] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x84, wParam=0x0, lParam=0x18f036c) returned 0x1
[0311.452] IsWindowUnicode (hWnd=0x220122) returned 1
[0311.452] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.452] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x84, wParam=0x0, lParam=0x18f036c) returned 0x1
[0311.453] GetDlgItem (hDlg=0x43013e, nIDDlgItem=0) returned 0x0
[0311.453] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x210, wParam=0x201, lParam=0x12014d) returned 0x0
[0311.453] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x21, wParam=0x43013e, lParam=0x2010001) returned 0x1
[0311.453] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x21, wParam=0x43013e, lParam=0x2010001) returned 0x1
[0311.453] SetCursor (hCursor=0x10003) returned 0x10003
[0311.453] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0311.453] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0311.453] GetKeyState (nVirtKey=1) returned -127
[0311.453] GetKeyState (nVirtKey=2) returned 0
[0311.453] GetKeyState (nVirtKey=4) returned 0
[0311.453] GetKeyState (nVirtKey=5) returned 0
[0311.453] GetKeyState (nVirtKey=6) returned 0
[0311.453] IsWindowVisible (hWnd=0x220122) returned 1
[0311.453] IsWindowEnabled (hWnd=0x220122) returned 1
[0311.453] SetFocus (hWnd=0x220122) returned 0x2301e2
[0311.455] GetFocus () returned 0x220122
[0311.455] IsChild (hWndParent=0x43013e, hWnd=0x220122) returned 1
[0311.455] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x8, wParam=0x220122, lParam=0x0) returned 0x1
[0311.455] SendMessageW (hWnd=0x2301e2, Msg=0x2111, wParam=0x20001e2, lParam=0x2301e2) returned 0x0
[0311.456] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0311.459] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0311.460] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0311.460] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0
[0311.460] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0311.460] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x282, wParam=0xf, lParam=0x701db) returned 0x0
[0311.463] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0311.463] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x7, wParam=0x2301e2, lParam=0x0) returned 0x0
[0311.463] GetStockObject (i=5) returned 0x900015
[0311.464] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0311.464] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0xd, wParam=0x3, lParam=0x89e6e8) returned 0x2
[0311.464] GetDlgItem (hDlg=0x43013e, nIDDlgItem=2228514) returned 0x220122
[0311.464] SendMessageW (hWnd=0x220122, Msg=0x202b, wParam=0x220122, lParam=0x53de74) returned 0x0
[0311.464] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x202b, wParam=0x220122, lParam=0x53de74) returned 0x0
[0311.464] InvalidateRect (hWnd=0x220122, lpRect=0x0, bErase=0) returned 1
[0311.466] GetFocus () returned 0x220122
[0311.466] GetFocus () returned 0x220122
[0311.474] GetFocus () returned 0x220122
[0311.474] GetKeyState (nVirtKey=1) returned -127
[0311.474] GetKeyState (nVirtKey=2) returned 0
[0311.474] GetKeyState (nVirtKey=4) returned 0
[0311.474] GetKeyState (nVirtKey=5) returned 0
[0311.474] GetKeyState (nVirtKey=6) returned 0
[0311.474] GetCapture () returned 0x0
[0311.475] SetCapture (hWnd=0x220122) returned 0x0
[0311.475] GetKeyState (nVirtKey=1) returned -127
[0311.475] GetKeyState (nVirtKey=2) returned 0
[0311.475] GetKeyState (nVirtKey=4) returned 0
[0311.475] GetKeyState (nVirtKey=5) returned 0
[0311.475] GetKeyState (nVirtKey=6) returned 0
[0311.475] NotifyWinEvent (event=0x800a, hwnd=0x220122, idObject=-4, idChild=0)
[0311.475] InvalidateRect (hWnd=0x220122, lpRect=0x53e4c8, bErase=0) returned 1
[0311.475] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.476] IsWindowUnicode (hWnd=0x220122) returned 1
[0311.476] GetMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.476] TranslateMessage (lpMsg=0x53e8a0) returned 0
[0311.476] DispatchMessageW (lpMsg=0x53e8a0) returned 0x0
[0311.476] MapWindowPoints (in: hWndFrom=0x220122, hWndTo=0x0, lpPoints=0x24be534, cPoints=0x1 | out: lpPoints=0x24be534) returned 25756481
[0311.476] NotifyWinEvent (event=0x800a, hwnd=0x220122, idObject=-4, idChild=0)
[0311.476] InvalidateRect (hWnd=0x220122, lpRect=0x53e468, bErase=0) returned 1
[0311.476] UpdateWindow (hWnd=0x220122) returned 1
[0311.476] BeginPaint (in: hWnd=0x220122, lpPaint=0x53df80 | out: lpPaint=0x53df80) returned 0x8b010786
[0311.476] SelectPalette (hdc=0x8b010786, hPal=0x250807ae, bForceBkgd=1) returned 0x88000b
[0311.477] CreateCompatibleDC (hdc=0x8b010786) returned 0x38010790
[0311.477] SelectObject (hdc=0x38010790, h=0x1e0507b9) returned 0x85000f
[0311.477] GdipCreateFromHDC (hdc=0x38010790, graphics=0x53df98) returned 0x0
[0311.477] GdipTranslateWorldTransform (graphics=0x5d92c30, dx=0x0, dy=0x0, order=0x0) returned 0x0
[0311.477] GdipSetClipRectI (graphics=0x5d92c30, x=0, y=0, width=60, height=22, combineMode=0x0) returned 0x0
[0311.477] GdipCreateMatrix (matrix=0x53dfe0) returned 0x0
[0311.478] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0311.478] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dff8) returned 0x0
[0311.478] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0311.478] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0311.478] LocalFree (hMem=0x89ee08) returned 0x0
[0311.478] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0311.478] GdipCreateRegion (region=0x53dfe0) returned 0x0
[0311.478] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0311.478] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dfec) returned 0x0
[0311.478] GdipSaveGraphics (graphics=0x5d92c30, state=0x53e018) returned 0x0
[0311.478] GdipRestoreGraphics (graphics=0x5d92c30, state=0xfa310dbd) returned 0x0
[0311.478] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0311.478] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddf8) returned 0x0
[0311.478] GetCurrentObject (hdc=0x38010790, type=0x1) returned 0xb00017
[0311.478] GetCurrentObject (hdc=0x38010790, type=0x2) returned 0x900010
[0311.479] GetCurrentObject (hdc=0x38010790, type=0x7) returned 0x1e0507b9
[0311.479] GetCurrentObject (hdc=0x38010790, type=0x6) returned 0x8a01c2
[0311.479] SaveDC (hdc=0x38010790) returned 1
[0311.479] GetNearestColor (hdc=0x38010790, color=0xf0f0f0) returned 0xf0f0f0
[0311.479] GetNearestColor (hdc=0x38010790, color=0xa0a0a0) returned 0xa0a0a0
[0311.479] GetNearestColor (hdc=0x38010790, color=0x696969) returned 0x696969
[0311.479] GetNearestColor (hdc=0x38010790, color=0xa0a0a0) returned 0xa0a0a0
[0311.479] GetNearestColor (hdc=0x38010790, color=0x0) returned 0x0
[0311.479] GetNearestColor (hdc=0x38010790, color=0xffffff) returned 0xffffff
[0311.479] GetNearestColor (hdc=0x38010790, color=0xe5e5e5) returned 0xe5e5e5
[0311.479] GetNearestColor (hdc=0x38010790, color=0xd7d7d7) returned 0xd7d7d7
[0311.479] GetNearestColor (hdc=0x38010790, color=0x0) returned 0x0
[0311.479] RestoreDC (hdc=0x38010790, nSavedDC=-1) returned 1
[0311.480] GdipReleaseDC (graphics=0x5d92c30, hdc=0x38010790) returned 0x0
[0311.480] IsAppThemed () returned 0x1
[0311.480] GetThemeAppProperties () returned 0x3
[0311.480] GetThemeAppProperties () returned 0x3
[0311.480] IsAppThemed () returned 0x1
[0311.480] GetThemeAppProperties () returned 0x3
[0311.480] GetThemeAppProperties () returned 0x3
[0311.480] DrawTextExW (in: hdc=0x600101a2, lpchText="OK", cchText=2, lprc=0x53dcb4, format=0x102415, lpdtp=0x24beca8 | out: lpchText="OK", lprc=0x53dcb4) returned 13
[0311.481] IsAppThemed () returned 0x1
[0311.481] GetThemeAppProperties () returned 0x3
[0311.481] GetThemeAppProperties () returned 0x3
[0311.481] IsAppThemed () returned 0x1
[0311.481] GetThemeAppProperties () returned 0x3
[0311.481] GetThemeAppProperties () returned 0x3
[0311.481] IsAppThemed () returned 0x1
[0311.481] GetThemeAppProperties () returned 0x3
[0311.481] GetThemeAppProperties () returned 0x3
[0311.481] IsAppThemed () returned 0x1
[0311.481] GetThemeAppProperties () returned 0x3
[0311.481] GetThemeAppProperties () returned 0x3
[0311.481] IsThemePartDefined () returned 0x1
[0311.481] IsAppThemed () returned 0x1
[0311.481] GetThemeAppProperties () returned 0x3
[0311.481] GetThemeAppProperties () returned 0x3
[0311.481] IsThemeBackgroundPartiallyTransparent () returned 0x1
[0311.481] IsAppThemed () returned 0x1
[0311.481] GetThemeAppProperties () returned 0x3
[0311.481] GetThemeAppProperties () returned 0x3
[0311.481] IsAppThemed () returned 0x1
[0311.482] GetThemeAppProperties () returned 0x3
[0311.482] GetThemeAppProperties () returned 0x3
[0311.482] IsThemePartDefined () returned 0x1
[0311.482] GdipCreateRegion (region=0x53dcfc) returned 0x0
[0311.482] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0311.482] GdipCreateMatrix (matrix=0x53dcfc) returned 0x0
[0311.482] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0311.482] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dd14) returned 0x0
[0311.482] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea88
[0311.482] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ea88) returned 0x0
[0311.482] LocalFree (hMem=0x89ea88) returned 0x0
[0311.482] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee08
[0311.482] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ee08) returned 0x0
[0311.482] LocalFree (hMem=0x89ee08) returned 0x0
[0311.482] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0311.482] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd3c) returned 0x0
[0311.482] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dd2c) returned 0x0
[0311.482] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dd2c) returned 0x0
[0311.482] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0311.482] GdipGetDC (graphics=0x5d92c30, hdc=0x53dd44) returned 0x0
[0311.482] GetCurrentObject (hdc=0x38010790, type=0x1) returned 0xb00017
[0311.483] GetCurrentObject (hdc=0x38010790, type=0x2) returned 0x900010
[0311.483] GetCurrentObject (hdc=0x38010790, type=0x7) returned 0x1e0507b9
[0311.483] GetCurrentObject (hdc=0x38010790, type=0x6) returned 0x8a01c2
[0311.483] SaveDC (hdc=0x38010790) returned 1
[0311.483] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d0407a1
[0311.483] GetClipRgn (hdc=0x38010790, hrgn=0x7d0407a1) returned 0
[0311.483] SelectClipRgn (hdc=0x38010790, hrgn=0x3804051e) returned 2
[0311.483] DeleteObject (ho=0x7d0407a1) returned 1
[0311.483] DeleteObject (ho=0x3804051e) returned 1
[0311.483] OffsetViewportOrgEx (in: hdc=0x38010790, x=0, y=0, lppt=0x24bf358 | out: lppt=0x24bf358) returned 1
[0311.483] DrawThemeParentBackground () returned 0x0
[0311.483] GetWindowPlacement (in: hWnd=0x43013e, lpwndpl=0x53da0c | out: lpwndpl=0x53da0c) returned 1
[0311.483] GetClientRect (in: hWnd=0x43013e, lpRect=0x53d9b8 | out: lpRect=0x53d9b8) returned 1
[0311.483] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0311.483] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0311.483] GetSystemMetrics (nIndex=42) returned 0
[0311.484] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53d878, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0311.484] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53d878) returned 0xa
[0311.484] GetClientRect (in: hWnd=0x43013e, lpRect=0x53d8c0 | out: lpRect=0x53d8c0) returned 1
[0311.484] GetCurrentObject (hdc=0x38010790, type=0x1) returned 0xb00017
[0311.484] GetCurrentObject (hdc=0x38010790, type=0x2) returned 0x900010
[0311.484] GetCurrentObject (hdc=0x38010790, type=0x7) returned 0x1e0507b9
[0311.484] GetCurrentObject (hdc=0x38010790, type=0x6) returned 0x8a01c2
[0311.484] SaveDC (hdc=0x38010790) returned 2
[0311.484] GetNearestColor (hdc=0x38010790, color=0xf0f0f0) returned 0xf0f0f0
[0311.484] CreateSolidBrush (color=0xf0f0f0) returned 0xb910078d
[0311.484] FillRect (hDC=0x38010790, lprc=0x53d760, hbr=0xb910078d) returned 1
[0311.484] DeleteObject (ho=0xb910078d) returned 1
[0311.484] RestoreDC (hdc=0x38010790, nSavedDC=-1) returned 1
[0311.484] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0311.484] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0311.484] GetSystemMetrics (nIndex=42) returned 0
[0311.484] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0311.484] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0311.485] GetClientRect (in: hWnd=0x43013e, lpRect=0x53d860 | out: lpRect=0x53d860) returned 1
[0311.485] GetCurrentObject (hdc=0x38010790, type=0x1) returned 0xb00017
[0311.485] GetCurrentObject (hdc=0x38010790, type=0x2) returned 0x900010
[0311.485] GetCurrentObject (hdc=0x38010790, type=0x7) returned 0x1e0507b9
[0311.485] GetCurrentObject (hdc=0x38010790, type=0x6) returned 0x8a01c2
[0311.485] SaveDC (hdc=0x38010790) returned 2
[0311.485] GetNearestColor (hdc=0x38010790, color=0xf0f0f0) returned 0xf0f0f0
[0311.485] CreateSolidBrush (color=0xf0f0f0) returned 0xba10078d
[0311.485] FillRect (hDC=0x38010790, lprc=0x53d700, hbr=0xba10078d) returned 1
[0311.485] DeleteObject (ho=0xba10078d) returned 1
[0311.485] RestoreDC (hdc=0x38010790, nSavedDC=-1) returned 1
[0311.485] GetWindowTextLengthW (hWnd=0x43013e) returned 10
[0311.485] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa
[0311.485] GetSystemMetrics (nIndex=42) returned 0
[0311.485] GetWindowTextW (in: hWnd=0x43013e, lpString=0x53d818, nMaxCount=11 | out: lpString="Ransomware") returned 10
[0311.485] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0xd, wParam=0xb, lParam=0x53d818) returned 0xa
[0311.485] RestoreDC (hdc=0x38010790, nSavedDC=-1) returned 1
[0311.486] GdipReleaseDC (graphics=0x5d92c30, hdc=0x38010790) returned 0x0
[0311.486] IsAppThemed () returned 0x1
[0311.486] GetThemeAppProperties () returned 0x3
[0311.486] GetThemeAppProperties () returned 0x3
[0311.486] IsAppThemed () returned 0x1
[0311.486] GetThemeAppProperties () returned 0x3
[0311.486] GetThemeAppProperties () returned 0x3
[0311.486] IsThemePartDefined () returned 0x1
[0311.486] GdipCreateRegion (region=0x53dc80) returned 0x0
[0311.486] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0311.486] GdipCreateMatrix (matrix=0x53dc80) returned 0x0
[0311.486] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d92f10) returned 0x0
[0311.486] GdipIsMatrixIdentity (matrix=0x5d92f10, result=0x53dc98) returned 0x0
[0311.486] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ee08) returned 0x0
[0311.486] LocalFree (hMem=0x89ee08) returned 0x0
[0311.486] GdipGetMatrixElements (matrix=0x5d92f10, matrixOut=0x89ea88) returned 0x0
[0311.486] LocalFree (hMem=0x89ea88) returned 0x0
[0311.486] GdipDeleteMatrix (matrix=0x5d92f10) returned 0x0
[0311.486] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc0) returned 0x0
[0311.486] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb0) returned 0x0
[0311.486] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb0) returned 0x0
[0311.486] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0311.486] GdipGetDC (graphics=0x5d92c30, hdc=0x53dcc8) returned 0x0
[0311.486] GetCurrentObject (hdc=0x38010790, type=0x1) returned 0xb00017
[0311.487] GetCurrentObject (hdc=0x38010790, type=0x2) returned 0x900010
[0311.487] GetCurrentObject (hdc=0x38010790, type=0x7) returned 0x1e0507b9
[0311.487] GetCurrentObject (hdc=0x38010790, type=0x6) returned 0x8a01c2
[0311.487] SaveDC (hdc=0x38010790) returned 1
[0311.487] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3904051e
[0311.487] GetClipRgn (hdc=0x38010790, hrgn=0x3904051e) returned 0
[0311.487] SelectClipRgn (hdc=0x38010790, hrgn=0x7f0407a1) returned 2
[0311.487] DeleteObject (ho=0x3904051e) returned 1
[0311.487] DeleteObject (ho=0x7f0407a1) returned 1
[0311.487] OffsetViewportOrgEx (in: hdc=0x38010790, x=0, y=0, lppt=0x24bfbe0 | out: lppt=0x24bfbe0) returned 1
[0311.487] IsAppThemed () returned 0x1
[0311.487] GetThemeAppProperties () returned 0x3
[0311.487] GetThemeAppProperties () returned 0x3
[0311.487] DrawThemeBackground () returned 0x0
[0311.487] RestoreDC (hdc=0x38010790, nSavedDC=-1) returned 1
[0311.487] GdipReleaseDC (graphics=0x5d92c30, hdc=0x38010790) returned 0x0
[0311.487] GdipCreateRegion (region=0x53dc84) returned 0x0
[0311.487] GdipGetClip (graphics=0x5d92c30, region=0x5d920e8) returned 0x0
[0311.487] GdipCreateMatrix (matrix=0x53dc84) returned 0x0
[0311.487] GdipGetWorldTransform (graphics=0x5d92c30, matrix=0x5d93a48) returned 0x0
[0311.487] GdipIsMatrixIdentity (matrix=0x5d93a48, result=0x53dc9c) returned 0x0
[0311.487] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0311.487] LocalFree (hMem=0x89ec80) returned 0x0
[0311.488] GdipGetMatrixElements (matrix=0x5d93a48, matrixOut=0x89ec80) returned 0x0
[0311.488] LocalFree (hMem=0x89ec80) returned 0x0
[0311.488] GdipDeleteMatrix (matrix=0x5d93a48) returned 0x0
[0311.488] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcc4) returned 0x0
[0311.488] GdipIsInfiniteRegion (region=0x5d920e8, graphics=0x5d92c30, result=0x53dcb4) returned 0x0
[0311.488] GdipGetRegionHRgn (region=0x5d920e8, graphics=0x5d92c30, hRgn=0x53dcb4) returned 0x0
[0311.488] GdipDeleteRegion (region=0x5d920e8) returned 0x0
[0311.488] GdipGetDC (graphics=0x5d92c30, hdc=0x53dccc) returned 0x0
[0311.488] GetCurrentObject (hdc=0x38010790, type=0x1) returned 0xb00017
[0311.488] GetCurrentObject (hdc=0x38010790, type=0x2) returned 0x900010
[0311.488] GetCurrentObject (hdc=0x38010790, type=0x7) returned 0x1e0507b9
[0311.488] GetCurrentObject (hdc=0x38010790, type=0x6) returned 0x8a01c2
[0311.488] SaveDC (hdc=0x38010790) returned 1
[0311.488] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x800407a1
[0311.488] GetClipRgn (hdc=0x38010790, hrgn=0x800407a1) returned 0
[0311.488] SelectClipRgn (hdc=0x38010790, hrgn=0x3a04051e) returned 2
[0311.488] DeleteObject (ho=0x800407a1) returned 1
[0311.488] DeleteObject (ho=0x3a04051e) returned 1
[0311.488] OffsetViewportOrgEx (in: hdc=0x38010790, x=0, y=0, lppt=0x24bfeb4 | out: lppt=0x24bfeb4) returned 1
[0311.488] IsAppThemed () returned 0x1
[0311.488] GetThemeAppProperties () returned 0x3
[0311.488] GetThemeAppProperties () returned 0x3
[0311.488] GetThemeBackgroundContentRect () returned 0x0
[0311.488] RestoreDC (hdc=0x38010790, nSavedDC=-1) returned 1
[0311.489] GdipReleaseDC (graphics=0x5d92c30, hdc=0x38010790) returned 0x0
[0311.489] IsAppThemed () returned 0x1
[0311.489] GetThemeAppProperties () returned 0x3
[0311.489] GetThemeAppProperties () returned 0x3
[0311.489] GdipGetTextRenderingHint (graphics=0x5d92c30, mode=0x53de00) returned 0x0
[0311.489] GdipGetDC (graphics=0x5d92c30, hdc=0x53ddec) returned 0x0
[0311.489] GetCurrentObject (hdc=0x38010790, type=0x1) returned 0xb00017
[0311.489] GetCurrentObject (hdc=0x38010790, type=0x2) returned 0x900010
[0311.489] GetCurrentObject (hdc=0x38010790, type=0x7) returned 0x1e0507b9
[0311.489] GetCurrentObject (hdc=0x38010790, type=0x6) returned 0x8a01c2
[0311.489] SaveDC (hdc=0x38010790) returned 1
[0311.489] GetTextAlign (hdc=0x38010790) returned 0x0
[0311.489] GetTextColor (hdc=0x38010790) returned 0x0
[0311.489] GetCurrentObject (hdc=0x38010790, type=0x6) returned 0x8a01c2
[0311.489] GetObjectW (in: h=0x8a01c2, c=92, pv=0x53db34 | out: pv=0x53db34) returned 92
[0311.489] SelectObject (hdc=0x38010790, h=0x730a066d) returned 0x8a01c2
[0311.489] GetBkMode (hdc=0x38010790) returned 2
[0311.489] SetBkMode (hdc=0x38010790, mode=1) returned 2
[0311.489] DrawTextExW (in: hdc=0x38010790, lpchText="OK", cchText=2, lprc=0x53dc1c, format=0x102415, lpdtp=0x24c0254 | out: lpchText="OK", lprc=0x53dc1c) returned 13
[0311.490] DrawTextExW (in: hdc=0x38010790, lpchText="OK", cchText=2, lprc=0x53dd80, format=0x102015, lpdtp=0x24c0254 | out: lpchText="OK", lprc=0x53dd80) returned 13
[0311.490] RestoreDC (hdc=0x38010790, nSavedDC=-1) returned 1
[0311.490] GdipReleaseDC (graphics=0x5d92c30, hdc=0x38010790) returned 0x0
[0311.490] GetFocus () returned 0x220122
[0311.490] IsAppThemed () returned 0x1
[0311.491] GetThemeAppProperties () returned 0x3
[0311.491] GetThemeAppProperties () returned 0x3
[0311.491] GdipGetDC (graphics=0x5d92c30, hdc=0x53dfd8) returned 0x0
[0311.491] BitBlt (hdc=0x8b010786, x=0, y=0, cx=60, cy=22, hdcSrc=0x38010790, x1=0, y1=0, rop=0xcc0020) returned 1
[0311.491] GdipReleaseDC (graphics=0x5d92c30, hdc=0x38010790) returned 0x0
[0311.491] SelectPalette (hdc=0x8b010786, hPal=0x88000b, bForceBkgd=0) returned 0x250807ae
[0311.491] SelectObject (hdc=0x38010790, h=0x85000f) returned 0x1e0507b9
[0311.491] DeleteDC (hdc=0x38010790) returned 1
[0311.491] GdipDeleteGraphics (graphics=0x5d92c30) returned 0x0
[0311.491] EndPaint (hWnd=0x220122, lpPaint=0x53df7c) returned 1
[0311.491] MapWindowPoints (in: hWndFrom=0x220122, hWndTo=0x0, lpPoints=0x24c0350, cPoints=0x1 | out: lpPoints=0x24c0350) returned 25756481
[0311.491] WindowFromPoint (Point=0x36c) returned 0x220122
[0311.491] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x84, wParam=0x0, lParam=0x18f036c) returned 0x1
[0311.492] NotifyWinEvent (event=0x800a, hwnd=0x220122, idObject=-4, idChild=0)
[0311.492] NotifyWinEvent (event=0x800c, hwnd=0x220122, idObject=-4, idChild=0)
[0311.492] GetWindowTextLengthW (hWnd=0x2301e2) returned 0
[0311.492] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0311.492] GetSystemMetrics (nIndex=42) returned 0
[0311.492] GetWindowTextW (in: hWnd=0x2301e2, lpString=0x53e3e4, nMaxCount=1 | out: lpString="") returned 0
[0311.492] CallWindowProcW (lpPrevWndFunc=0x6f57d460, hWnd=0x2301e2, Msg=0xd, wParam=0x1, lParam=0x53e3e4) returned 0x0
[0311.492] SendMessageW (hWnd=0x43013e, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0
[0311.492] GetCapture () returned 0x220122
[0311.492] ReleaseCapture () returned 1
[0311.492] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0311.492] PeekMessageW (in: lpMsg=0x53e8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x53e8a0) returned 1
[0311.493] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x84, wParam=0x0, lParam=0x18f036c) returned 0x1
[0311.493] IsWindow (hWnd=0x70036) returned 1
[0311.493] EnableWindow (hWnd=0x70036, bEnable=1) returned 1
[0311.495] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0
[0311.495] IsWindow (hWnd=0x70036) returned 1
[0311.495] SetActiveWindow (hWnd=0x70036) returned 0x43013e
[0311.495] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x86, wParam=0x0, lParam=0x70036) returned 0x1
[0311.498] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0311.499] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0311.499] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0311.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0311.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0311.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x602b6, Msg=0x46, wParam=0x0, lParam=0x53e80c) returned 0x0
[0311.500] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70036, Msg=0x86, wParam=0x1, lParam=0x43013e) returned 0x1
[0311.503] GetFocus () returned 0x220122
[0311.503] SetFocus (hWnd=0x202c6) returned 0x220122
[0311.503] GetFocus () returned 0x202c6
[0311.504] IsChild (hWndParent=0x43013e, hWnd=0x202c6) returned 0
[0311.504] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x8, wParam=0x202c6, lParam=0x0) returned 0x0
[0311.504] GetCapture () returned 0x0
[0311.504] InvalidateRect (hWnd=0x220122, lpRect=0x0, bErase=0) returned 1
[0311.504] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0311.512] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0311.513] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0311.513] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x220122, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0311.513] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0311.513] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0311.514] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0311.514] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x7, wParam=0x220122, lParam=0x0) returned 0x0
[0311.514] GetStockObject (i=5) returned 0x900015
[0311.514] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7
[0311.514] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0xd, wParam=0x8, lParam=0x8e9a80) returned 0x7
[0311.514] GetDlgItem (hDlg=0x70036, nIDDlgItem=131782) returned 0x202c6
[0311.514] SendMessageW (hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0311.514] CallWindowProcW (lpPrevWndFunc=0x6f57e800, hWnd=0x202c6, Msg=0x202b, wParam=0x202c6, lParam=0x53de6c) returned 0x0
[0311.514] InvalidateRect (hWnd=0x202c6, lpRect=0x0, bErase=0) returned 1
[0311.516] IsWindow (hWnd=0x202c6) returned 1
[0311.516] SetFocus (hWnd=0x202c6) returned 0x202c6
[0311.516] GetWindowLongW (hWnd=0x43013e, nIndex=-8) returned 458806
[0311.516] GetWindowThreadProcessId (in: hWnd=0x70036, lpdwProcessId=0x53e85c | out: lpdwProcessId=0x53e85c) returned 0x11d0
[0311.516] GetCurrentThreadId () returned 0x11d0
[0311.516] IsWindow (hWnd=0x70036) returned 1
[0311.516] IsWindow (hWnd=0x70036) returned 1
[0311.516] IsWindowVisible (hWnd=0x70036) returned 1
[0311.516] SetActiveWindow (hWnd=0x70036) returned 0x70036
[0311.516] GetFocus () returned 0x202c6
[0311.516] IsChild (hWndParent=0x43013e, hWnd=0x202c6) returned 0
[0311.516] ShowWindow (hWnd=0x43013e, nCmdShow=0) returned 1
[0311.517] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0311.517] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x46, wParam=0x0, lParam=0x53e844) returned 0x0
[0311.519] GetWindowPlacement (in: hWnd=0x43013e, lpwndpl=0x53e570 | out: lpwndpl=0x53e570) returned 1
[0311.519] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x43013e, Msg=0x47, wParam=0x0, lParam=0x53e844) returned 0x0
[0311.519] GetClientRect (in: hWnd=0x43013e, lpRect=0x53e520 | out: lpRect=0x53e520) returned 1
[031